=== freeflying__ is now known as freeflying [01:46] is it normal to be gettings lots of UDP spam? [01:46] see here: http://pastebin.com/LUm906Z2 === IdleOne is now known as io === Peerbreed is now known as Guest66827 === peter is now known as Guest24112 === Ursinha is now known as Ursinha-afk === Ursinha-afk is now known as Ursinha === thesheff17_ is now known as thesheff17 === funkyHat_ is now known as funkyHat === funkyHat_ is now known as funkyHat === marcoceppi is now known as marco_traveling === mjohnson15_2 is now known as mjohnson15 === mjohnson15_2 is now known as mjohnson15 === mjohnson15_2 is now known as mjohnson15 [13:06] jamespage: im doing CA catch up this morning [13:13] zul, +1000 [13:13] needs goind [13:14] matsubara, hate to ask but maas iso testing? [13:15] jamespage, hi, sorry, today I have the CIAAS presentation and then can continue with the ISO testing. [13:16] jamespage, today is the final beta freeze at 21utc, right? [13:16] matsubara, yes [13:16] trying to get it out the door right now [13:16] beisner, are the maas tests something you could help out with? [13:18] Hello, I am having problems connecting to my svn server for all repositories access which permissions are handled by apache. I'm unsure where to look for errors [13:25] zul, bug 1297705 [13:25] Launchpad bug 1297705 in keystone "keystone logrotate configuration causing service disruption" [High,Triaged] https://launchpad.net/bugs/1297705 [13:26] we should probably SRU the fix for that as well [13:26] jamespage: agreed [13:27] jamespage: yep, planning on it. [13:28] matsubara, beisner: ok - so need to happen in the next couple of hours if possible please [13:29] jamespage, matsubara - i can dedicate the morning to plowing through those, starting in appx 30 min. [13:31] rbasak: FYI, it's online now : https://help.ubuntu.com/14.04/serverguide/cloud-images-and-uvtool.html [13:35] jdstrand: *cough* https://bugs.launchpad.net/ubuntu/+source/heat/+bug/1267557 *cough* [13:35] Launchpad bug 1267557 in heat "[MIR] heat" [Medium,New] [13:37] jamespage: ok python-oslotest good to go...ill update the new python-oslo.messaging today [13:39] jamespage: also for those playing along at home https://bugs.launchpad.net/ubuntu/+source/python-pbr/+bug/1298384 [13:39] Launchpad bug 1298384 in python-pbr "pbr 0.7.0 ftbfs with python3.2" [Undecided,New] [13:42] zul, thats a CA issue inly right? [13:42] zul, excellent - thanks for sorting this [13:42] jamespage: yeah i fixed it in the packaging and uploaded it to the trusty archive so we can sync it back over [13:42] zul, ah - nice [13:43] zul: I know :) [13:44] * jdstrand notes that the security team is crazy busy getting pulled in every direction and doing the best we can :) [13:44] I'm working on the juju-core/golang stuff now [13:45] jdstrand: oh i know...its like that for everyone :) [13:45] it is, for sure [13:45] jdstrand: *snicker* heat is more important ;) [13:45] just know I haven't forgotten [13:46] jamespage: when you get a chance can you do dh-python, im not comfortable with it [13:46] zul, syre [13:56] zul, oh - we need to sort xen as well [13:57] jamespage: im on it [13:57] zul, qemu will need a rebuild afterwards [13:57] jamespage: ack [13:57] * jamespage hugs zul [13:57] zul, jamespage "sort" in what way? [13:57] the LDFLAGS stuff again [13:57] oh _that_ :/ [13:58] smb: yes that :P [13:58] smb, zul: anyway we can have that in the trusty packaging so it becomes a no-change backport again? [13:59] jamespage: it was never a no-change backport [13:59] ok scrub again [13:59] " so it becomes a no-change backport" [13:59] there is a line in the debian/control which made it fail everytime [13:59] ah [13:59] yeah i can possibly do that [13:59] Hm, I suppose we could but then we would differ from Debian [13:59] oh [14:01] zul, If it is wanted I can add stuff to the update I am currently working on. Just let me know [14:01] smb: its the "Built-Using: ${misc:Built-Using}" line that causes it to fail on 12.04 [14:01] smb: oh i will [14:02] smb: im not sure what that line does [14:02] zul, Ohm I thought it was the need to unset LDFLAGS [14:03] smb: not sure [14:05] zul, The built-using I think gets replaced by some stuff (qemu/seabios versions) I think. But that I would not remove in the T packaging [14:06] smb: okies [14:06] smb: its too late to see if it breaks anything [14:07] zul, Too late? I suppose for a current upload [14:07] smb: perhaps [14:07] i'm not very familiar with firewall software on linux but i'm thinking of installing shoreline on my ubuntu 12.04 home server. would that be a good choice or no? [14:07] zul, I meant was that a question or statement? [14:10] zul, For a certain amount of gratuity in May I can have a look at a precise sbuild of the trusty package I am working on ... :) [14:11] smb: statement [14:12] caribou: nice! Thank you for all your work. I really appreciate it since I hate writing docs :) [14:12] rbasak: we all do; but in this case it gave me the opportunity to get up to speed with uvtool rapidly [14:15] smb, while we have your ear [14:15] can you tell me what caused the tainted message in the last comment of https://bugs.launchpad.net/ubuntu/+source/iscsitarget/+bug/1291641 [14:15] Launchpad bug 1291641 in iscsitarget "iscsitarget-dkms 1.4.20.3+svn496-1ubuntu1: iscsitarget kernel module failed to build" [High,Fix released] [14:15] jamespage, No! I still need those [14:16] I'm sure its something iscsitarget is doing wrong but I can't figure out what [14:16] smb, :-) [14:19] jamespage, That should just be a result of having module signing. As iscsitarget is a dkms module it cannot be signed by the same key as the rest of the kernel (because that gets thrown away after build) [14:35] jamespage: xen uploaded to the ppa [14:43] zul: great! [14:43] jamespage: looking at mongo next [14:44] there is a branch for mongo [14:44] oh there is? [14:44] hehe...telegram for mongo [14:46] sorry candygram [14:46] zul, https://code.launchpad.net/~ubuntu-cloud-archive/ [14:46] precise-icehouse branch [14:47] you should be able to bzr merge ubuntu:mongodb [14:48] ack [15:02] is there a uvtool for lxc ? [15:02] zul, dh-python done [15:03] jamespage: thanks...mongodb is building locally for me now [15:03] zul, takes a while [15:04] jamespage: i noticed that the last one ftbfs...at least the amd64 one did [15:18] jrwren: no. I'd like to write on at some point, though. === matsubara_ is now known as matsubara [15:18] one [15:18] uvt-lxc, to work in the same way for the parameters that make sense [15:19] uvt-simplestreams-file, to maintain a local store of cloud image tarballs [15:19] (and eventually deprecate calling uvt-simplestreams-file and uvt-simplestreams-libvirt directly, instead making it an automatic step of calling uvt-kvm and uvt-lxc when necessary) [15:22] rbasak: let me know if/how I can help [15:22] zul, Oh, btw as you have not yet uploaded the new libvirt for T, wait a bit longer. I would have a replacement which is fresh(er) and shiny. :) === Ursinha is now known as Ursinha-afk [15:24] smb: okies [15:31] Hello, I have two ubuntu machines (a client and a server). The server synch's it's accounts over to the client through sync-accounts. I have a pair of accounts defined on the server which I want to keep from being updated, how do I do that? [15:31] On the client I have assigned these accounts to a special group, and that is subsequently lost when the server synchs and doesn't know of this information. === Ursinha-afk is now known as Ursinha [16:10] jamespage/coreycb: https://code.launchpad.net/~zulcss/python-keystoneclient/0.7.1/+merge/213100 [16:10] zul, usptream [16:10] fuck [16:11] jamespage: fixed [16:11] zul, language timothy! [16:14] jamespage: damn it, it should be in that branch now [16:21] zul, does that need a ffe? its a major version bump === shadeslayer is now known as shadeslayer_ === shadeslayer_ is now known as shadeslayer [16:26] jamespage: maas testcases -> contain deprecated commands (filed documentation merge proposal), and 1+ failed subtest in the testcase, which is actuall 10 testcases. [16:28] After upgrading to unbuntu 12.04.. I got a notice that I need to run a phpmyadmin script called create_table.sql to give access to a database for extended features.. I have no idea where that script is located. [16:29] beisner, nice work - thanks for working through those [16:29] I did an updatedb.. and a locate.. nowhere to be found. [16:35] zul, New shiny libvirt for T uploaded to https://launchpad.net/~smb/+archive/xen/+packages (though not build there, yet). Worked quite nicely for a T desktop install. Though I really wonder how desktop always manager to f*** err fail on some things. [16:35] you could try “find" [16:36] @sander^work may try something like “sudo find / -type f -name “scriptname”” [16:36] smb: ack ill get to it today or tom [16:36] zul, roger that [16:37] thedanielmatt, no result [16:37] maybe take off the “-type f" [16:38] sander^work: i think package 'libapq-postgresql3.2.0-dev' provides '/usr/share/doc/libapq-postgresql3.2.0-dev/examples/create_table.sql' [16:39] jamespage, matsubara - i plan to run those to ground today (maas iso tests) and submit testcase updates (syntax/cli etc) as needed. [16:39] version number may be different. that's on saucy [16:39] sander^work: ↑ [16:40] thedanielmatt, still no result. Really wondering of the upgrade did take with itself the right scripts. Maybe the maintainer forgot it or something. [16:41] sander^work: check out what pmatulis said [16:41] pmatulis, it's mysql. [16:42] sander^work: maybe phpmyadmin says stuff that doesn't make sense on debian/ubuntu [16:43] sander^work: apt-file told me you can get that script with that package [16:44] pmatulis, I think that's a coinsidence. That postgresql script has nothing to do with phpmyadmin. [16:45] sander^work: ok. can you tell what package is the origin of the message you saw? [16:46] sander^work: maybe pastebin the entire line, plus a few lines before and after [16:48] pmatulis, http://pastebin.com/Mb4vXHJb [16:49] pmatulis, it basicly displays an notice about it, for enabling extra features inside phpmyadmin. [16:50] pmatulis, i'm fine with disabling those extra features aswell I guess.. But I dont know how. [16:51] sander^work: so you see it within the php interface? [16:51] pmatulis, yep. [16:51] sander^work: ha [16:53] sander^work: http://forums.gentoo.org/viewtopic-t-883135-start-0.html [16:54] sander^work: if that doesn't push you forward, please see the phpmyadmin folks. i see you are in #phpmyadmin [17:08] Daviey: ping python-oslotest is still in binary new can you punt it out of there? please [17:10] zul, are you sure it is there? [17:10] ah yea. [17:12] Hey guys, on my centos box I can serv sites from http://hostname/~username. How can I do this from my ubuntu box with apache2? [17:13] that is called userdirs [17:14] i'm pretty sure its default in ubuntu apache [17:14] Daviey: if im stuck in an alternate universe then yes [17:14] jrwren: I'm migrating from CentOS so there are some minute differences that I'm trying to overcome. [17:14] checkit: mdir -p public_html in the users home directory and make sure its 755 [17:14] jrwren: It doesn't seem to be defaulted. [17:15] zul: What is mdir? [17:15] you mean mkdir [17:16] yes [17:16] I'm getting Forbidden error with permission denied... Do I need to add something to my vhosts? [17:31] I had a DDoS attack yesterday on a Ubuntu box I have. Here is the screenshot of the bandwidth graph: http://puu.sh/7LCFB.png Does outbound mean someone on the box sent the attack out rather than the actual box being DDoSed? [17:32] Be [17:34] cuddylier, has this been answered yet? [17:35] Havenstance2 No === Havenstance2 is now known as Havenstance [17:36] okay some backgrounds on networking, when something comes to your machine from outside its logged and called Inbound connections, when something is sent out its outbound [17:36] alot like your phone, you call someone its outbound call, they call you its inbound [17:37] what this graph shows me is that someone initiated a DDoS attack from your machine starting at approx 23:40 and lasting until just after 00:00 so approximately 20 minutes long [17:37] might not even have been DDos, is this a gateway machine? like does it server your network? === miceiken_ is now known as miceiken [17:38] cuddylier, I have seen Bit Torrent clients do this to bandwith too so if its a torrent box or has torrent client on it someone may have downloaded something [17:39] if its a network server then someone within the network may have downloaded something [17:39] cuddylier: do you have any per udp port charts to go with that? [17:39] Havenstance: It's a box for game hosting but I can't see anything in my game panel logs that indicate someone started a java process that was sending out traffic. [17:39] cuddylier: do you run DNS or NTP on that server? [17:39] jrwren: No the datacentre only provide charts like that [17:39] jrwren Neither [17:40] cuddylier, yeah because a spike like that indicates that its sending a tremendous amount of data somewhere [17:40] cuddylier: cloud backups? [17:40] I don't do backups no [17:40] I however download files [17:41] The thing is this floods the network port and the server becomes unaccessible [17:41] Could downloading a file really cause that? [17:41] It has a 100Mb/s port [17:41] cuddylier: are you SURE you arne't running dns or ntp? [17:41] Yes, at least I didn't install it and the box is secure. [17:42] cuddylier, if your running BitTorrent on it the explanation would be a seeding torrent that someone suddenly wanted was uploaded somewhere [17:42] you'll have to give us a lot more info for help then :) [17:42] downloading would be INBOUND traffic [17:42] Uploading is always outbound [17:42] Havenstance: Never installed any bittorrent client on it. [17:42] Havenstance: depends on point of view. [17:42] download=taking in upload = sending out [17:43] downloading from that server is sending out. [17:43] from that server POV. [17:43] true [17:44] cuddylier, is this chart from the machine itself or from the hosting company? [17:44] The hosting company [17:44] Begin: Running /scripts/init-premount ... done. [17:44] Begin: Mounting root file system ... /init: .: line 249: can't open '/scripts/live' [17:44] [ 12.991289] Kernel panic - not syncing: Attemped to kill init! exitcode=0x00000200 [17:44] [ 12.991289] [17:45] cuddylier, could be a DDoS attack, can you have your hosting company change the machine IP? [17:45] any idea? [17:46] how could it be DDoS? [17:47] the spikes are on outbound on that chart. cuddylier said the server is secure, so its not large file downloads. [17:47] if there is no NTP and no DNS, its not likely used in reflection attack. [17:47] it could be ANYTHING. [17:48] I've seen similar charts on my server from DDoS. but it could be something as simple as an update too [17:48] well, no not even on outbound [17:49] basically you need to provide more data then a link to a graph that can't readily be interpreted [17:55] jrwren: Well when I say secure, no one can start a process outside a java process as box is used in my hosting company which allows people to use any jar file. === shadeslayer_ is now known as shadeslayer [17:57] someone ran a jar that did a bunch of xfer then :p [17:57] cuddylier: That graph looks like there's a low inbound causing a large outbound - resolution isn't great but it looks to me as if the inbound increases roughly in line with the peak in outbound [17:58] cuddylier: Have you examined *all* the logs for entries within that time bracket for anything 'unusual' ? [17:58] what is this hosts IP? [17:58] TJ- Which log entries exactly? [17:58] cuddylier: *all* logs [17:58] I'm not the best with knowing which log is which. === marco_traveling is now known as marcoceppi [17:59] cuddylier: You've got a narrow time boundary (23:30 through 00:10) so you should look at that time period in all logs, especially towards the beginning when it began [18:01] So just /var/logs yeah? [18:02] cuddylier: The peak ratio was 28.56 (60.55/2.12) - that might give a clue as to what kind of issue you're dealing with, if it is a reflection attack [18:03] cuddylier: Mostly, but as we don't know the precise server config there might be other log locations, especially if it's a Java application server/container (e.g. JBoss or Tomcat) [18:03] I just have normal Oracle java [18:03] Running normal jar files [18:04] Two of my nodes did the same thing at the same time exactly. === bekks_ is now known as bekks [18:05] cuddylier: what's the application? Maybe it has a flaw that allows reflection or something similar. [18:05] TJ- Usually minecraft server jars. [18:05] Although technically people can use any jar [18:05] That isn't necessarily minecraft. [18:05] So people could technically run booters or bitcoin mine [18:05] But only people who have paid for a server can. [18:05] So I just need a way to find and terminate them. [18:06] I could create a similar graph just sending repeated HTTP "GET / HTTP/1.0" requests if the index page is large [18:07] cuddylier: Sounds like first thing is to implement some instrumentation, and possibly some bandwidth limiting and alerting [18:07] That's easier said than done however [18:09] That's what sysadmins are for :) [18:42] Hey guys, rookie problem... Internal Server Error when trying to access http://localhost/~user. My userdir.conf file https://gist.github.com/anonymous/9814939 and my vhost file for the site: https://gist.github.com/anonymous/9815001 [18:44] checkit: I suspect you've got and confused: http://httpd.apache.org/docs/current/mod/core.html#directory [18:44] checkit: there may be more errors, I'm not an apache expert by any stretch.. [18:45] I get the Internal Server Error when I got to http://localhost/~user/public. I do get a directory listing when I just go to http://localhost/~user [18:45] But the public directory isn't there... [18:45] I do see it in the filesystem though === markthomas is now known as markthomas_lunch [19:03] checkit: ~user will resolve to /home/$USER/public_html/ [19:04] TJ-: Right. [19:05] checkit: So any file-system files/dirs should be under that *and* have permissions allowing access to the user and the httpd daemon, as appropriate [19:06] That part is all done. [19:07] checkit: So anything under ~/public_html/ should show up, unless you've got additional restrictions in-place in the apache configuration [19:08] I'm trying to install 12.04.4 server on a machine behind a firewall, is there a way to get it to stop insisting that I connect to the archive server? [19:09] Like I have the thing completely disconnected from the network and it still finds the adapter, tries to connect, fails, and complains about it and doesn't let me just install from disc [19:14] jbradfield: can you tell the installer to skip networking configuration? [19:16] I can't find an option to do so [19:16] even if I run the installer in expert mode there's not even an option to actually do anything installation related until I set up a connect and download installer components [19:17] I figured there had to be another image for fully offline installation but can't find that either [19:17] swear there used to be [19:25] /j ubuntu [19:25] crap [19:27] jbradfield: you are correct that it used to work without being online, did you try interrupting the dhcp and then choosing do not configure the network at this time? [19:28] or unplugging your network cable to achieve a similar effect [19:29] Why isn't FHS followed more strictly? Apache and Nginx's document roots by default should be somewhere in /srv/ if I'm understnading FHS correctly? [19:34] DeltaHeavy: Because devs decided to not follow FHS at that point. [19:35] I'm trying it again with the cable physically disconnected [19:35] bekks: It feels like it's all software. I've never used /srv/ in my life before just now. [19:36] I believe it's more an issue that the FHS can't be followed in that particular case. the FHS defines /srv for this use, but doesn't define any layout below it [19:36] DeltaHeavy: On Ubuntu? [19:37] bekks: Yep, mind you I was a CentOS/RHEL guy mainly before getting deep into webdev. [19:37] qman_: if I interrupt dhcp it still (somehow) connects the archive server and starts grabbing packages; if I completely unplug the network it asks me to specify the archive server, then complains that it can't find it (obviously) and won't let me continue [19:38] jbradfield: i mean that it needs to be unplugged before it gets to setting up the network [19:38] DeltaHeavy: My apologies - to both facts :P [19:38] jbradfield: what i think is happening is that once the network is configured, regargless of archive access, it assumes it should be online [19:39] I unplugged the machine before turning it on [19:39] jbradfield: but if the network is never configured to start, it should work offline [19:39] ok === Ursinha is now known as Ursinha-afk [19:39] it still finds two adapters, neither of which is plugged into anything [19:40] bekks: Hey, nothing wrong with CentOS/RHEL :p [19:41] jbradfield: i haven't tried with .4 but that used to work from cd [19:41] jbradfield: however i have seen this when trying to install via usb [19:41] I'm doing the latter [19:42] usb for some reason refuses to work without a network connection, i never figured out why [19:43] well that's a headache considering only one of these boxes even has an optical drive [19:44] yeah, it is [19:46] qman__: That sounds like an apt 'cdrom' vs 'file' URL issue for access to the installation media pool [19:46] despite that it should be simple, lots of things don't work right booting from usb, i keep a usb dvd around because of it [19:47] hey [19:47] anybody here? [19:49] how can I stress test my server? [19:49] Guys, if I used apache2en userdir how can I disable it? [19:50] ilhami: 'stress' is a package designed to do that [19:50] qman__ haha is it called "stress"? === Ursinha-afk is now known as Ursinha [19:51] checkit: "a2dismod" [19:55] hi guys - how many physical servers are needed for ubuntu cloud, maas, juju etc [19:56] how can I test how many requests per sec my server can handle? [19:57] I will use JMeter :D [19:59] guess I'm ordering an external dvd drive and not fixing this until next week [20:00] working from a usb optical drive but not from a usb flash drive is nuts [20:01] jbradfield: I'm about to test it here, just completing the ISO download... and going to have dinner === klaas_ is now known as klaas === markthomas_lunch is now known as markthomas === e^0 is now known as ffio [20:53] Daviey: ping [20:53] Daviey: does the list of packages that the ubuntu server team cares about still exists? [20:54] or, where can i find the wiki page on where are the efforts going at this point of the release cycle === mjohnson15_2 is now known as mjohnson15 [22:00] HI if I want to stop a service and it be persistent through reboot what should I do? for example: isc-dhcp-server ? thx [22:03] rostam: Do you mean disable it? [22:03] rostam: http://upstart.ubuntu.com/cookbook/#override-files [22:03] TJ yes disable it. [22:03] sarnold, thx [23:39] How do I manually input DNS servers if I don't put them in /etc/resolv.conf? [23:39] blizzow: what are you trying to do? [23:40] I changed my server to a static IP (as most servers are), and manually changed /etc/resolv.conf. Of course the resolv.conf says my changes will be overwritten, but doesn't explain where to manually enter DNS servers. [23:40] blizzow: ah. that comes from the resolvconf infrastructure, which might make a lot less sense if you've got a static IP address [23:40] blizzow: check out the resolvconf manpage, it ought to explain it all :) [23:41] Seems like a good idea to put something in the default resolv.conf file about this... [23:42] blizzow: chances are good you'll just apt-get purge resolvconf -- but read about it first and decide if that's the right approach :) [23:44] Yeah, even putting "man resolvconf bro" in the default resolv.conf or "ohai, go add a dns-nameservers line to your /etc/network/interfaces file would be nice. [23:44] lol [23:44] agreed