| === gary_poster is now known as gary_poster|away | ||
| ikonia | window 12 | 00:40 |
|---|---|---|
| ikonia | oops | 00:40 |
| * jkitchen throws ikonia a / | 00:42 | |
| ikonia | noted | 00:43 |
| Nautilus | hi, setting up a vps I haven't touched for a couple weeks... trying to upgrade core but getting "Failed to fetch" errors. Don't think I'm doing it wrong (apt-get update, from root). Is there a server that's down? or? | 01:28 |
| sarnold | Nautilus: which server? | 01:28 |
| Nautilus | "precise" | 01:29 |
| Nautilus | if that's what you meant? | 01:30 |
| Nautilus | Ubuntu 12.04.3 LTS | 01:30 |
| sarnold | Nautilus: oh, sorry :) I meant "which update server", sorry | 01:30 |
| Nautilus | this? | 01:31 |
| Nautilus | WaVeR: Failed to fetch http://ca.archive.ubuntu.com/ubuntu/dists/precise-updates/multiverse/binary-i386/Packages 404 Not Found [IP: 91.189.91.13 80] | 01:31 |
| Nautilus | oops, it nick expanded to Waver | 01:31 |
| sarnold | Nautilus: interesting, there's a .gz and .bz2 version there, but no uncompressed version | 01:33 |
| sarnold | .. same with the us.archive.ubuntu.com mirror | 01:33 |
| sarnold | .. same with the mirror.anl.gov mirror | 01:34 |
| Nautilus | oh I see the page you're looking at | 01:34 |
| sarnold | Nautilus: did apt try to download a .gz or .bz2 version and have those fail? | 01:34 |
| sarnold | .. or did it only try the one, uncompresed, version? | 01:34 |
| Nautilus | seems ilke just the one | 01:35 |
| Nautilus | maybe I should just try tomorrow, heh | 01:35 |
| mojtaba | Hi, Does anybody know how can I change the current sent print job's pritner? I want to change it from a real printer to 'print to a file' | 02:05 |
| Nautilus | anyone know a channel about SSL(/TLS)? | 02:23 |
| dcosnet | Nautilus: yassl | 02:34 |
| dcosnet | guessing | 02:34 |
| Nautilus | ok thanks | 02:34 |
| sarnold | Nautilus: there's ##crypto, nice chaps in there, but it's more about theory than implementation... if you've got a question about configuration, this is probably your best bet | 02:34 |
| Nautilus | i might have someone in another channel, lets see how this goes | 02:35 |
| === airtonix_ is now known as airtonix | ||
| MavKen | can someone point me towards a good article about proper permissions for /var/www and sub folders? I keep having issues every time I try to install drupal or vanilla forums, this is my first VPS... Never had an issue installing on shared hosting. | 03:07 |
| sarnold | MavKen: if you see 'chmod 777' in a guide, please find a different guide :) | 03:09 |
| MavKen | yeah, that is what I keep running into and I know better | 03:09 |
| sarnold | woot | 03:10 |
| sarnold | I know I wrote something a few years back but stackoverflow is making it hard to find. bah. | 03:10 |
| sarnold | MavKen: well, okay, some guidelines: the webserver should have write access to only its log files and a database socket, so avoid setting files to www-data | 03:11 |
| MavKen | the install scripts are not able to write to php files... I used chmod 775 and www-data as the owner | 03:11 |
| MavKen | oh | 03:11 |
| sarnold | you could create a new owner just for them, or you could use your user account.. | 03:11 |
| MavKen | so far I have done everything as root, have not created a user yet | 03:12 |
| sarnold | aha, that's probably the next thing to address :) hehe | 03:12 |
| MavKen | yeah | 03:13 |
| MavKen | I've never had to worry about permissions before... this is a pain | 03:16 |
| sarnold | learning the unix permissions and the theory behind them can take a while. but they are so much simpler than so many other permissions systems that have been tried over the years, and they can still accomplish so much, it's worth the time to get it right | 03:25 |
| Nautilus | trying to work through the SSL stuff. I'm generating a cert and have 4 choices, the most applicable seem to be "S/MIME and Authentication Certificate" and "Web Serve SSL/TLS Certificate". I don't understand the distinction | 03:28 |
| sarnold | Nautilus: aha, the certificates have an "allowed use" field | 03:28 |
| sarnold | Nautilus: s/mime is for email | 03:29 |
| Nautilus | right. dont need the Jabber or Object types | 03:29 |
| sarnold | Nautilus: ssl/tls is what you're after, for a web server | 03:29 |
| Nautilus | actually the idea here is to use it with postfix/dovecot so eg: my pop password isn't sent in plain-text. Don't plan on https at this time. | 03:29 |
| Nautilus | and I thought postfix+dovecot uses SSL/TLS | 03:30 |
| Nautilus | ah, ubuntu server docs say "next, generate or obtain a digital certificate for TLS" | 03:32 |
| Nautilus | (for smtpd). So I want SSL/TLS, right? | 03:33 |
| Nautilus | sounds like that's for web and email both | 03:33 |
| Nautilus | sarnold: ^ perhaps you prefer I use your nick always | 03:35 |
| === i3luefire__ is now known as i3luefire | ||
| MavKen | in 13.10, when I add a new user I have a public_html folder in /etc/skel/... is there an easy way for a file to be generated in the sites-available folder with the path each time a new user is added? | 03:54 |
| MavKen | I on;y have 9 hosting clients right now, but would like to streamline the process | 03:54 |
| Nautilus | I went with SSL/TLS | 04:16 |
| === lickalott_ is now known as lickalott | ||
| eagles0513875 | hey guys if i add my user to the www-data group can i leave a website which is in development in my home directory and still be able to modify files in it without the need to change the user and group back to my system user and group | 08:33 |
| StathisA | hello all, i'm looking for a webmin alternative - i just want somekind of monitoring and mail notifications on service failures, package updates etc...i havent heard good things about webmin... | 09:04 |
| eagles0513875 | StathisA: nagios is good for monitoring of network failures hardware monitoring and much more | 09:18 |
| eagles0513875 | you can be emailed about it or smsed but that is something to ask in the nagios channel | 09:18 |
| StathisA | eagles0513875 thanks for the suggestion, i was looking for something not that centralized. as to avoid certain single point of failure scenarios..afaik nagios is located somewhere centrally and works with agents. | 09:22 |
| StathisA | i could get away with some manual cron jobs with checking space & if the service i need is running, i guess | 09:24 |
| StathisA | but i'd like to have a tool for that | 09:24 |
| eagles0513875 | StathisA: there is cacti potentially | 09:25 |
| StathisA | i'll have a look, thanks | 09:31 |
| iclebyte2 | are there any release candidates for ubuntu 14.04LTS out yet? | 09:32 |
| === _thumper_ is now known as thumper | ||
| ogra_ | iclebyte2, https://wiki.ubuntu.com/TrustyTahr/ReleaseSchedule | 09:33 |
| iclebyte2 | ogra_, I see here the feature definition freeze on november 21st. Is there anywhere I can actually find that list? | 09:38 |
| ogra_ | http://status.ubuntu.com/ubuntu-t/ | 09:40 |
| === Mez_ is now known as Mez | ||
| eagles0513875 | hey guys is anyone alive in here? If i add the user i use to login to my server to the www-data group and leave the group for a website im running as the user can i still edit the files etc in the directory which is currently in my home directory wiht out needing to change user and group? | 10:28 |
| ikonia | eagles0513875: this is basic permissions | 10:47 |
| ikonia | eagles0513875: does the user you create have permissions to access your home drive ? | 10:48 |
| eagles0513875 | the user is my user my home dir | 10:48 |
| eagles0513875 | the only other person accessing it would be the www-data dir to access the website | 10:48 |
| smb | zul, hallyn, Whoever gets there first: chinstrap:~smb/4review has an updated libvirt package for Trusty to fix some xen related bugs. | 10:52 |
| === olegb_ is now known as olegb | ||
| ikonia | eagles0513875: can the user you have created access the data in your home dir | 11:03 |
| ikonia | eagles0513875: just "yes/no" | 11:03 |
| eagles0513875 | yes | 11:04 |
| eagles0513875 | the user owns that home directory yes | 11:04 |
| ikonia | eagles0513875: then that user can edit / maintain the website | 11:04 |
| eagles0513875 | ikonia: but dont the user and group need to be set to www-data so apache can work with the website? | 11:04 |
| ikonia | eagles0513875: is apache working currently ? | 11:05 |
| eagles0513875 | ikonia: yes because i have the sites set to www-data:www-data | 11:05 |
| ikonia | eagles0513875: ok, so as long as the user/group www-data OR world access can read the files that's all you need | 11:05 |
| ikonia | you don't have to change the ownership if you don't want to, it's up to you | 11:05 |
| eagles0513875 | ok. will test things out :) | 11:06 |
| eagles0513875 | thanks ikonia :) | 11:06 |
| koolhead17 | zul: ping | 11:57 |
| koolhead17 | jamespage: hi there | 11:57 |
| jamespage | hey koolhead17 | 11:57 |
| jamespage | hows swift? | 11:57 |
| koolhead17 | jamespage: swift is rock solid :) | 11:58 |
| koolhead17 | jamespage: how have you been. i need help from zul seems like am not able to find him all these while cos of timezone | 11:58 |
| jamespage | koolhead17, all good | 11:58 |
| jamespage | koolhead17, wassup? | 11:59 |
| koolhead17 | jamespage: learning learning and more learning :) | 11:59 |
| yolanda | jamespage, do you know if there are some more reqs on rabbit for active/active? i copy all the passwd files with unison, but i still get the AMQPLAIN invalid credentials error | 12:06 |
| jamespage | yolanda, I'm not 100% sure tbh | 12:07 |
| yolanda | i'm checking and cinder.passwd in slave machine matches with the one in cinder.conf, so i should be missing something | 12:09 |
| yolanda | jamespage, seems it's missing the users, rabbitmqctl list_users only show guest user | 12:11 |
| jamespage | yolanda, are you relating other services before or after forming the rabbitmq cluster? | 12:12 |
| yolanda | jamespage, before | 12:13 |
| yolanda | but i'm copying the passwd files when a node is joined, so looks that i need to sync something more | 12:13 |
| jamespage | yolanda, try it the other way around - I suspect that when the cluster is created, all the data get dropped | 12:13 |
| jamespage | yolanda, if that works then we know that after a cluster creation operation, we have to re-create the usernames and passwords for access. | 12:14 |
| jamespage | yolanda, oh - while you are working on the rabbitmq charm - please can you add a source: config | 12:14 |
| jamespage | we have rabbitmq-server 3.x in the icehouse cloud archive and no way to actually use it right now :-) | 12:14 |
| yolanda | ok | 12:15 |
| === highvolt1ge is now known as highvoltage | ||
| yolanda | jamespage, seems as we aren't doing something right with clustering, i'll take a look at the doc again, users aren't replicated in any case | 12:30 |
| === gary_poster|away is now known as gary_poster | ||
| shwaiil | Hi | 13:49 |
| shwaiil | Q: How can I expand my partition /dev/sda1 on 12.04 LTS ? Thank you! Is it safe ? | 13:49 |
| shwaiil | * found http://blog.chapus.net/ubuntu-server-increase-disk-space/ | 13:49 |
| cfhowlett | shwaiil, properly done it's safe, but, of course, backup ^3 | 13:51 |
| shwaiil | cfhowlett: thanks for looking! Where can I find a good manual ? that I can follow ? | 13:52 |
| shwaiil | in case you know.. | 13:52 |
| cfhowlett | shwaiil, a server manual? | 13:52 |
| cfhowlett | !manual | 13:52 |
| ubottu | The Ubuntu Manual will help you become familiar with everyday tasks such as surfing the web, listening to music and scanning documents. With an emphasis on easy to follow instructions, it is suitable for all levels of experience. http://ubuntu-manual.org/ | 13:52 |
| shwaiil | cfhowlett: Sorry, I mean a tutorial on how to resize the partition would be awesome. But I'm now looking into the link I found | 13:53 |
| cfhowlett | shwaiil, ah, good. | 13:53 |
| shwaiil | not sure if it's going ok or not as it's already failing and not absolutely sure why. | 13:54 |
| cfhowlett | shwaiil, perhaps an immediate data backup and then pinpoint the cause of the failure before you start repart'ing? | 13:54 |
| caribou | who's hacking at the cinder charm these days ? is it still adam_g ? | 14:07 |
| rbasak | smoser: for bug 1188610, AIUI, making *any* changes to sshd_config is still a policy violation. I think the one sensible exception might be cloud-init. | 14:36 |
| rbasak | But even in that case, we should have a /etc/ssh/sshd_config.d/ or something, as a wishlist item. | 14:38 |
| smoser | rbasak, i dont know. i dont' know that i really believe that. | 14:40 |
| smoser | vi changes config files all the time for me. | 14:40 |
| smoser | shall i file a bug ? | 14:40 |
| smoser | sometimes sed does it too. | 14:40 |
| smoser | my snarky comments aside, i dont' really understand such a policy. | 14:41 |
| smoser | puppet does this to, thats basically its purpose in life. | 14:41 |
| rbasak | If it does it because a user directly requested it, then that's different. | 14:46 |
| rbasak | If it's indirect (say you installed another package that needs it), then that's a violation. | 14:46 |
| rbasak | Here, it's similiarly indirect. The correct solution is clearly a .d/ directory. | 14:46 |
| rbasak | It's not really about the package that did it (sed, puppet, whatever). It's that the *distro* doesn't do it; the user does. | 14:47 |
| rbasak | /etc is the user's (well, sysadmin's) realm. | 14:47 |
| rbasak | smoser: ^^ | 14:47 |
| rbasak | For example: if I install logrotate, clearly I'm asking for a crontab entry. But the logrotate postinst doesn't edit /etc/crontab for me. That's why /etc/cron.d/ was invented. | 14:49 |
| smoser | yeah. thats reasonable. | 14:49 |
| rbasak | (and daily.d, weekly.d, etc) | 14:49 |
| smoser | as i said in the bug, i dont understand that the change is actually needed. | 14:49 |
| smoser | do you understand it ? | 14:49 |
| rbasak | If I had a server that was always port forwarded ssh through a NAT gateway, then I'd need it. So I get that in such an infrastructure, it makes sense to have it, and a package should be able to turn it on. | 14:51 |
| smoser | as to why 'ClientAliveInterval 180' would do some traffic that 'TCPKeepAlive' would not. | 14:51 |
| rbasak | TCPKeepAlive is by default pretty slow, isn't it? | 14:51 |
| rbasak | Days | 14:51 |
| === kirkland` is now known as kirkland | ||
| smoser | rbasak, do you see that documented anywhere? | 14:54 |
| rbasak | smoser: you mean the defaults? | 14:55 |
| rbasak | It's a sysctl thing I thin. | 14:56 |
| rbasak | k | 14:56 |
| * rbasak looks | 14:56 | |
| smoser | rbasak, its a setting in sshd_config. (boolean). | 14:57 |
| rbasak | smoser: http://kernel.ubuntu.com/git?p=ubuntu/ubuntu-trusty.git;a=blob;f=Documentation/networking/ip-sysctl.txt;h=8a984e994e61616a9dba0a4f425a5b4371b3ae99;hb=HEAD#l240 | 15:00 |
| rbasak | smoser: kernel default is two hours. | 15:00 |
| smoser | thanks rbasak | 15:00 |
| thelamest | is it safe in general to edit files on a live guest virtual machine filesystem from the basesystem? (xen, lvm) | 15:08 |
| xnox | thelamest: if said virtual machine is not booted, sure do as I like =) but make sure you unmount it cleanly, etc. | 15:09 |
| xnox | thelamest: and as usual if you break things, you get to keep both pieces =) | 15:09 |
| rbasak | He said "live". | 15:09 |
| rbasak | So: no. | 15:09 |
| thelamest | it's a missing security/limits.conf, that's kind of preventing me to ssh into the guest | 15:09 |
| rbasak | Shut down the VM first. | 15:10 |
| xnox | rbasak: ok, i understood "live" differently =) (as in squashfs based / overlay system) | 15:10 |
| rbasak | Then edit it. | 15:10 |
| rbasak | It's even worse if it's a file the VM has actually hit, because then it'll be cached. Changing the file on disk will not change the cache of the file in memory. I hope that demonstrates why it's bad. | 15:11 |
| thelamest | ok, thanks | 15:11 |
| thelamest | good enough it's a demo system | 15:11 |
| hallyn | smb: (still getting my morning going) could you also toss a debdiff in there so i can just look locally? | 15:16 |
| smb | hallyn, sure. and good morning then :) | 15:17 |
| smb | hallyn, done | 15:18 |
| hallyn | smb: The first part of the changelog - I don't see where that's in the debdiff | 15:28 |
| smb | hallyn, That is the debian/patches/ubuntu-xend-probe.patch that changes | 15:29 |
| hallyn | as for cherrypicking of two patches from upstream, if you need that to fix xen and it comes from upstream then as far as i'm concerned you should have upload rights to just push that :) | 15:29 |
| hallyn | smb: ah - ideally that would be made explicit in the changelog | 15:29 |
| hallyn | smb: but that patch was already in series prior to the debdiff | 15:30 |
| smb | hallyn, I thought to be explicit enough. But apparently not. :) | 15:30 |
| hallyn | look at the debian/patches/series diff hunk | 15:30 |
| smb | hallyn, Right that was broken when someone modified it for newer libvirt versions | 15:30 |
| smb | hallyn, Hence "refresh/fix" | 15:31 |
| === chmurifree is now known as chmuri | ||
| hallyn | nm, i see. sorry | 15:33 |
| hallyn | smb: so /usr/lib/xen-common/bin/xen-toolstack will return some path. you're looking for '..../xm'. If it's not xm, what else can it be? | 15:33 |
| smoser | smb, https://bugs.launchpad.net/cloud-init/+bug/1236531 | 15:34 |
| smoser | look at that comment and see if you can explain it. | 15:34 |
| hallyn | smb: debdiff looks good to me. | 15:34 |
| smb | hallyn, It could be xl (or xapi) I'd have to check the latter but for now this would put the patch back into the state it was before moving to the newer libvirt version | 15:36 |
| hallyn | smb: +1 from me, thanks. | 15:39 |
| smb | smoser, was eatmydata only supressing fsyncs or more? | 15:39 |
| smb | hallyn, ok, will you sponsor? Yeah, yeah I should get upload rights for that and some other packages at least... | 15:40 |
| hallyn | smb: yes, please apply asap :) | 15:40 |
| hallyn | smb: I'll push the 1.2.0... what about the other .dsc you have in there? that goes into ppa? | 15:41 |
| hallyn | (which I assume you can do? if not, which ppa, i'll try) | 15:41 |
| smb | hallyn, No that was prepared as kind of one-shot mre for precise. | 15:42 |
| hallyn | ok | 15:42 |
| smoser | smb, eatmydata just ldpreloads fsync and sync | 15:42 |
| thelamest | did the shutdown, edit, create, and still got fsck on boot | 15:42 |
| smoser | (to my knowledge that is all it does) | 15:42 |
| hallyn | yeah i use eatmydata to make btrfs useful... | 15:42 |
| smb | smoser, Hm, so things were actually quicker without eatmydata if I read those numbers right | 15:43 |
| smoser | smb, correct. | 15:43 |
| smoser | which doesn't make any ssense | 15:44 |
| smoser | obviously '2' is not statistically useful. | 15:44 |
| smoser | but the only way i could explain it is if the fsync was reducing memory taken by the filesystem cache | 15:44 |
| smoser | and without that, stuff was just interacting poorly. | 15:44 |
| smoser | note, there is only 670M on those system.s | 15:45 |
| smb | smoser, or in some way the background writeback stealing more process time from the apt-get that one expects | 15:47 |
| smb | smoser, Did you do those tests with the very latest 3.13 or a bit ago when we still had 3.12 | 15:48 |
| === Mikaela_ is now known as Mikaela | ||
| smoser | smb, let me check that. | 15:57 |
| smoser | it was a build from yesterday (0108) | 15:57 |
| smoser | smb, | 16:01 |
| smoser | $ uname -r | 16:01 |
| smoser | 3.12.0-7-generic | 16:01 |
| smb | smoser, Ah ok, then it is not related in any way to slowdowns we / Tim was observing | 16:02 |
| smb | smoser, But yeah, there is more in the cache. On the other hand that should increase the chance of larger sequential writes | 16:05 |
| === `petey`_ is now known as `petey` | ||
| zul | jamespage/roaksoax: https://code.launchpad.net/~zulcss/ceilometer/bug-catchup/+merge/201041 | 16:46 |
| === medberry is now known as med_ | ||
| jamespage | zul, comments | 16:52 |
| zul | jamespage: fixed | 17:03 |
| smb | smoser, So thinking about your eatmydata oddness... I see that with or without it dpkg seems to use --force-unsafe-io, which removes some slow fssyncs. Adding eatmydata to the command stack certainly adds additional context switches. Makes me wonder whether what you see is that remaining sync calls filtered by eatmydata might just be of little difference (probably hidden by caching outside the guest), so in the end | 17:18 |
| smb | you only see time getting stolen by the additional context switches. | 17:18 |
| smoser | smb, nah. my experience is that --force-unsafe-io does very little. | 17:23 |
| smoser | and that eatmydata does a lot. | 17:24 |
| smoser | shoot. | 17:26 |
| smb | smoser, Hm at least it looks like there is always a 1s difference in favour of not using eatmydata between "eatmydata sudo apt-get update" and "sudo apt-get update". Though also only tested that on two (real ones but not the most performant) hosts. One running Precise and the other Trusty... | 17:31 |
| smoser | smb, see my last comment there. my data was bogus. | 17:31 |
| smoser | but your dat adoesn't make senes either. | 17:31 |
| smb | oh ok | 17:31 |
| * smb reloads the page | 17:31 | |
| smb | smoser, Ah so you basically paid the price for wrapping another layer of eatmydata | 17:34 |
| smoser | but that doesnt really make sense. | 17:34 |
| smoser | because eatmydata is LD_PRELOAD | 17:34 |
| smoser | i suppose its posisble it LD_PRELOAD=mylib1.so:mylib2.so is oddly slow. but i dont think that makes much sense. | 17:35 |
| smoser | also realize that the download time is part of this, which stinks. | 17:36 |
| smoser | ie, that is heavily network limited for a lot of that time. | 17:36 |
| smoser | i'll get better numbers here. | 17:36 |
| smb | smoser, ok. well my mental model might be wrong but I think of it as having loaded another eatmydata which loaded the apt-get. So I imagine syscall interception to be going through two levels. Anyway, lets see the better data. And yeah that can vary too (if not cached by something local) | 17:41 |
| smoser | but ld_preload doesn't work like that. | 17:41 |
| smoser | but anyway. | 17:42 |
| caribou | jamespage: FYI, I just pushed an MP on the cinder charm with the config-flags functionality | 17:53 |
| caribou | jamespage: do I need to add someone explicitely to the reviewer list ? | 17:54 |
| caribou | jamespage: hmm, old on a bit, I'll create a public bug to track it | 17:55 |
| caribou | jamespage: ok, that should be better : LP: #1267554 | 18:06 |
| caribou | jamespage: bug 1267554 | 18:06 |
| pdavison | Hello, everyone. I have a question. I have reason to believe my software RAID is experiencing problems under high load. I wanted to put them under some load to test, and I was looking at using the stress utility. The problem is, I have SSDs in the system I do not want to stress. Is there a way to put IO load on only some drives and not others? | 18:13 |
| dcosnet | pdavison: if they are part of the software raid. no not really. | 18:22 |
| pdavison | dcosnet: No. They're not part of the RAID. They're separate. | 18:23 |
| dcosnet | then whats the problem? | 18:23 |
| pdavison | I don't see a way to specify which "device" to use when running stress. Am I missing something, or is there another utility that will work better? | 18:25 |
| dcosnet | well you could just use a different tool all together like dd | 18:26 |
| pdavison | Hmm... | 18:26 |
| dcosnet | dd if=/dev/zero of=/some/virtual-partition-here/some-big-ass-file.dd | 18:26 |
| dcosnet | then rm some-big-ass-file.dd after | 18:26 |
| pdavison | That's going to consume a lot of space, but not really add the io load I'm looking for, I think. | 18:26 |
| dcosnet | o | 18:27 |
| dcosnet | well it would measure a basic MB/s imo | 18:27 |
| dcosnet | maybe not good enough though since it adds possible bottleneck i guess | 18:27 |
| dcosnet | if your looking for any statistics beyound MB/s its not ideal | 18:28 |
| dcosnet | beyond^ | 18:28 |
| pdavison | dcosnet: I don't need stats. I need to stress the controller. | 18:29 |
| pdavison | I expect it to fail, but I don't want to redeploy it back to production to see. | 18:29 |
| dcosnet | ah | 18:30 |
| dcosnet | http://unix.stackexchange.com/questions/72563/is-there-a-good-drive-torture-test-tool | 18:32 |
| dcosnet | has some good responses | 18:33 |
| pdavison | Looking... | 18:34 |
| dcosnet | i actually just learned of a tool because of that link: HDAT2 | 18:34 |
| * dcosnet bookmarks | 18:34 | |
| dcosnet | you probably should just look into bonnie++ | 18:35 |
| dcosnet | which that url mentions | 18:35 |
| pdavison | I was looking at bonnie++. It looks like more of a benchmark tool. Not sure if that will do what I need. | 18:36 |
| dcosnet | http://sourceforge.net/projects/bonnie/ | 18:37 |
| dcosnet | well, good luck | 18:37 |
| pdavison | Thanks. | 18:38 |
| dcosnet | well alternatively you could write a script that does a bunch of concurrent dd if/of commands at once to stress it out | 18:43 |
| dcosnet | autodeleting its child files as it finishes one | 18:44 |
| dcosnet | would take what 10 minutes to code? | 18:44 |
| pdavison | That's an option. | 18:48 |
| sarnold | pdavison: a lot of these are designed to stress the filesystems, if not the block layer, but it might be worth a look: http://nfsv4.bullopensource.org/doc/testing_tools.php | 18:48 |
| pdavison | sarnold: Thanks. I'll iterate through them. If I can find one that will let me only stress the RAID volume, I can run my test. | 18:49 |
| pdavison | The one other criteria is that I need to do this locally, not over NFS. | 18:50 |
| pdavison | or anything network-centric. | 18:50 |
| sarnold | pdavison: since those stress filesystems, I have an idea most would take a directory name as argument somewhere.. | 18:50 |
| sarnold | .. so you could stress an e.g. /mnt/btrfs but leave / and /home alone :) | 18:50 |
| pdavison | That's a good point. That's the problem I had with "stress" | 18:51 |
| sarnold | pdavison: yeah, I just got lucky to find the whole list of things on one page :) hehe | 18:52 |
| sarnold | fstress was the one I went searching for, hooray for google for getting past my poor memory of how to spell it. | 18:53 |
| dcosnet | i would recommend a makefile | 18:53 |
| dcosnet | for true concurrency | 18:53 |
| pdavison | That one looks NFS-related. Can it stress things locally. | 18:53 |
| sarnold | pdavison: aw crap. then my memory is more broken than I thought. | 18:54 |
| pdavison | dcosnet: That's a good test, but this is an 8-drive SATA array, and I'd have to run quite a few of them concurrently to get enough load. | 18:54 |
| dcosnet | ya maybe 32 instances | 18:54 |
| dcosnet | or more | 18:54 |
| dcosnet | do 2gb files at a time | 18:54 |
| dcosnet | or well, you know its throughput more then me so pick a relivant size | 18:55 |
| dcosnet | this is only going to stress the write though not the read, or read/write | 18:56 |
| sarnold | pdavison: hey, I finally found the thing I really -was- looking for, and now I'm not so sure it'll be helpful: http://codemonkey.org.uk/projects/fsx/ oh bother. back to bonnie* and the like :) | 18:59 |
| pdavison | Right. Well, maybe I just throw everything and the kitchen sink at it until I either give up or it does. | 19:00 |
| sarnold | pdavison: lol, I like that | 19:06 |
| smoser | smb, better looking data | 19:30 |
| smoser | http://paste.ubuntu.com/6722546/ | 19:30 |
| smoser | those are "hostname" (which implies eatmydata and size) and then 'total time', 'download time', and 'total - download' (ie, the install time) | 19:31 |
| smoser | utlemming, ^ | 19:31 |
| hushnowquietnow | Hi, can someone help me with a mysql issue I'm running into? | 19:39 |
| hushnowquietnow | Every couple of minutes this shows up in my syslog: kernel: [1790217.415429] init: mysql main process (29718) terminated with status 1 | 19:39 |
| hushnowquietnow | Followed by a handful of lines about /etc/mysql/debian-start running checks. Every time those checks run it maxes out the CPU and causes issues with the websites hosted on the server | 19:40 |
| hushnowquietnow | Where an I look to find why mysql keeps getting terminated? | 19:42 |
| sarnold | hushnowquietnow: is there anything interesting i the mysql logs? | 19:43 |
| hushnowquietnow | The mysql logs are all empty | 19:43 |
| hushnowquietnow | /var/log/mysql.log, /var/log/mysql.err, /var/log/mysql/error.log, and /var/log/mysql/mysql.log have nothing in them at all. | 19:44 |
| smoser | hushnowquietnow, dmesg have anything ? | 19:48 |
| smoser | could also have stuff in syslog . could be OOM killer. | 19:48 |
| hushnowquietnow | Nothing about memory in syslog | 19:49 |
| hushnowquietnow | dmesg has the same lines about mysql being terminated with status 1, interspersed with: [1790718.914174] type=1400 audit(1389296799.109:14528): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/mysqld" pid=2536 comm="apparmor_parser" | 19:50 |
| markthomas | hushnowquietnow: Are you running apparmor in complain mode or enforce? | 19:50 |
| hushnowquietnow | How do I check that? | 19:51 |
| markthomas | hushnowquietnow: https://help.ubuntu.com/community/AppArmor | 19:51 |
| markthomas | Those may be unrelated, but it'd be nice to rule that out. | 19:51 |
| markthomas | hushnowquietnow: Then, make sure you have all possible logging enabled: http://www.pontikis.net/blog/how-and-when-to-enable-mysql-logs | 19:52 |
| hushnowquietnow | When I run apparmor_status it tells me that there are 2 processes in enforce mode, both /usr/sbin/mysqld | 19:52 |
| jdstrand | hushnowquietnow: that apparmor message is just loading the profile | 19:58 |
| hushnowquietnow | So it doesn't have anything to do with what's killling my mysql process | 20:01 |
| hushnowquietnow | Something else interesting: When I run ps aux | grep mysql, I see what I think is the mysql service started 3 or 4 times | 20:05 |
| hushnowquietnow | I have logging enabled now, and mysqld has been restarted a few times but nothing new or informative is showing up in the logs | 20:13 |
| hushnowquietnow | Curiouser and curiouser | 20:33 |
| hushnowquietnow | The server rebooted (I think I fat-fingered something) and now the problem isn't happening any more | 20:33 |
| hushnowquietnow | sarnold, smoser, markthomas, jdstrand: thanks for your help in trying to figure this out | 20:35 |
| === chmurifree is now known as chmuri | ||
| adam_g | hallyn, heya | 22:24 |
| hallyn | stgraber: hey do you know offhand how i create a new 'parent' for nih allcoations? | 22:25 |
| hallyn | adam_g: hey | 22:25 |
| hallyn | oh, nih_new? | 22:26 |
| adam_g | hallyn, so i just hit bug #1244694 while verifying an openstack SRU. the fix you proposed on the bug resolves it for me. | 22:26 |
| adam_g | https://bugs.launchpad.net/nova/+bug/1244694' | 22:26 |
| hallyn | bug 1244694 | 22:26 |
| adam_g | hallyn, any chance that update to the apparmor profile is queued for upload to trusty anytime soon? | 22:26 |
| hallyn | no bot eh | 22:27 |
| adam_g | botfail | 22:27 |
| hallyn | adam_g: which release is that on | 22:27 |
| adam_g | hallyn, im hitting it on saucy | 22:27 |
| hallyn | adam_g: just a sec, | 22:27 |
| jjohansen | hallyn: I know we have an update with some fixes coming let me check | 22:27 |
| hallyn | jjohansen: what is that in reference to? | 22:28 |
| hallyn | adam_g: ok, i can push that to trusty right now. are you in the mood to write a SRU justification for it for saucy? | 22:29 |
| jjohansen | hallyn: oh sorry wrong nick that was meant for adam_g | 22:29 |
| hallyn | jjohansen: ok | 22:29 |
| hallyn | jjohansen: so you mean a security update to saucy libvirt? | 22:30 |
| jjohansen | hallyn: I actually haven't been tracking it closely, I know there are updates to several profiles, and some misc other bug fixes | 22:30 |
| jjohansen | there was a ftbfs fix for the library for example | 22:31 |
| jjohansen | anyways I am guess this bug isn't in that change set so feel free to push it separately | 22:33 |
| hallyn | ok - thanks | 22:34 |
| hallyn | adam_g: libvirt_1.2.0-0ubuntu3_source.changes pushed | 22:40 |
| adam_g | hallyn, to trusty? | 22:41 |
| hallyn | yeah. working on the saucy one now. i don't see anything in -proposed, so we should be good | 22:41 |
| regreddit | i picked up what i thought was a quick elance job helping a guy move to a new server - both ubuntu 10.4 | 22:42 |
| regreddit | he took the server over from a previous admin - it collects data from a bunch of devices that are behind nat. | 22:43 |
| hallyn | adam_g: ok, libvirt_1.1.1-0ubuntu8.3_source.changes pushed to saucy. | 22:43 |
| === NomadJim_ is now known as NomadJim | ||
| regreddit | the natted devices to a reverse ssh tunnel like "ssh -R1234:localhost:22 sshuser@server.com" | 22:43 |
| hallyn | that is, to -proposed, so awaiting a SRU justification from you :) | 22:43 |
| adam_g | hallyn, cool. | 22:44 |
| regreddit | then the server ssh's to localhost:1234 and poof, he's connected to the natted device | 22:44 |
| regreddit | the problem is on the old server, sshuser has no shell, and no .ssh directory | 22:44 |
| adam_g | hallyn, i can test as soon as its accepted | 22:45 |
| regreddit | how can sshuser setup a tunnel on server as a user that has no login shell, authorized_keys, etc? | 22:45 |
| hallyn | adam_g: that's always nice :) | 22:45 |
| regreddit | the natted device runs the ssh command as root, but as sshuser@server | 22:45 |
| regreddit | and server then ssh's to localhost:1234 as root | 22:46 |
| regreddit | what on the server is allowing sshuser to setup a remote tunnel on the server, if his account is basically disabled? we are having a tough time figuring this out | 22:49 |
| sarnold | regreddit: I'd look for a Match block in the sshd configuration file first.. | 22:51 |
| regreddit | hmm, we called ourselves looking at the old server's sshd_config to see if that's where it was happenig | 22:52 |
| regreddit | and it looked pretty stock | 22:52 |
| regreddit | i'll have the client check again | 22:55 |
| sarnold | hrm. | 22:58 |
| === freeflying is now known as freeflying_away | ||
| regreddit | he claims no match block, or includes of other files | 23:01 |
| regreddit | but if you do the ssh tunnel interactively, it works as expected from a user that has no shell | 23:02 |
| regreddit | you dont get a shell, but from the server you can now ssh to the remote client over the tunnel | 23:02 |
| regreddit | so the previoud admin setup some voodoo we can't find | 23:02 |
| regreddit | this is the exact command that the remote natted devices run: autossh -f -nNT -R 28012:127.0.0.1:22 tunneluser@remotehost & > /dev/null | 23:14 |
| regreddit | and when we look at that user, he has /usr/bin/nologin as his shell, and /home/tunneluser is 100% empty | 23:15 |
| regreddit | not even an .ssh folder | 23:15 |
| sarnold | regreddit: is there a home directory listed in /etc/passwd? | 23:16 |
| regreddit | and i'll be dangd if we can get that to work on the ner server by creating the same user account with same configuration on his user account | 23:16 |
| regreddit | yes, /home/tunneluser | 23:16 |
| regreddit | and tunneluser is in no other groups in etc/group | 23:17 |
| regreddit | s/ner/new/ | 23:17 |
| SysTom | http://www.amazon.co.uk/Official-Ubuntu-Server-Book-Edition-ebook/dp/B00DW7PLHA <- any opinions on that book? :) | 23:33 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!