| === thumper-gym is now known as thumper | ||
| === peter is now known as Guest82373 | ||
| === Havenstance_ is now known as Havenstance | ||
| === setuid is now known as _setuid | ||
| jamescarr | installing lxml via python-pip and I'm getting this on ubuntu saucy "/usr/bin/ld: cannot find -lz" | 04:38 |
|---|---|---|
| jamescarr | any ideas? | 04:39 |
| jamescarr | apt-get install zlib1g-dev | 04:40 |
| cfhowlett | jamescarr repo enabled? | 04:42 |
| lordievader | Good morning. | 05:50 |
| dwarder | my LAMP installation 'hanged' on 'Configuring mysql-server-5.5' at 72% | 07:52 |
| dwarder | should i kill it? | 07:52 |
| === Smedles_ is now known as Smedles | ||
| RoyK | I don't get it. my server is spending time swapping long before it's used its memory. setting vm.swappiness=1 "fixed" it, but it'd be nice if linux were a wee bit smarter | 09:11 |
| caribou | rbasak: ping | 09:12 |
| === sanderj_ is now known as Sander^work | ||
| === jtv1 is now known as jtv | ||
| rbasak | caribou: pong | 09:23 |
| caribou | rbasak: quick question : is there a way with uvtool to remove one of the downloaded cloud-images ? | 09:24 |
| caribou | rbasak: like I have trusty i386 & amd64 & I want to remove i386 | 09:24 |
| rbasak | caribou: not currently supported, unless simplestreams can rotate it out based on some filter. | 09:24 |
| rbasak | caribou: you can hack it quite easily though | 09:24 |
| caribou | rbasak: yeah, I suppose I could go & delete the file once I can identify it | 09:24 |
| rbasak | caribou: remove the corresponding metadata file in /var/lib/uvtool/libvirt/metadata (I think?) then sync. | 09:25 |
| caribou | rbasak: ok, will do. | 09:25 |
| caribou | rbasak: I'm also thinking of 'proposing' a "uvt-kvm create --wait" that would call the uvt-kvm wait from the create option | 09:25 |
| caribou | rbasak: I need to take a few minutes to look into it | 09:26 |
| rbasak | caribou: that's a great idea. I filed bug 1301412 last week. I think your solution is maybe better. Or perhaps we need both. | 09:26 |
| uvirtbot | Launchpad bug 1301412 in uvtool "uvt-kvm wait ... && uvt-kvm ssh ... is inconvenient and repetitive" [Wishlist,Triaged] https://launchpad.net/bugs/1301412 | 09:26 |
| caribou | rbasak: yeah, maybe both can be useful and/or complementary | 09:28 |
| rbasak | caribou: also, how about a -l|--login option on the create subcommand that implies --wait and also does ssh to defaults? | 09:29 |
| caribou | rbasak: could be useful indeed | 09:29 |
| rbasak | caribou: let me put this all into that bug | 09:29 |
| caribou | rbasak: ok, I'll subscribe to it | 09:30 |
| dwarder | PHP Fatal error: Call to undefined method mysqli_result::fetch_all() | 10:26 |
| dwarder | how do i fix this | 10:26 |
| dwarder | phpinfo() shows that mysqli is loaded | 10:26 |
| === inaddy is now known as tinoco | ||
| === Havenstance is now known as Haven|Home | ||
| rymate1234 | <rymate1234> i have an ubuntu 12.04 server running with an x11vnc remote desktop thing | 12:44 |
| rymate1234 | <rymate1234> how do i make the resolution higher than 1024x768 | 12:44 |
| rymate1234 | nvm | 13:20 |
| jamespage | roaksoax, smoser: soooooo..... | 13:23 |
| jamespage | roaksoax, smoser: I just upgraded to the lastest maas on 14.-4 | 13:23 |
| jamespage | and I *think* the grub install is failing in the fast-path installer - I've tried on precise and trusty installs and I get the same issue | 13:23 |
| jamespage | roaksoax, smoser: how do I debug this? | 13:24 |
| roaksoax | jamespage: ssh into the fastpath and look whats wro g | 13:26 |
| jhobbs | jamespage: you can prevent the target system from rebooting after install by editing /etc/maas/preseeds/curtin_userdata | 13:26 |
| jhobbs | there are a couple of lines "power_state:\n mode: reboot" you can comment out | 13:27 |
| zul | jamespage: im going to start uploadling to saucy-proposed | 13:27 |
| roaksoax | jamespage: first, though restart the cluster controler and try again | 13:27 |
| jamespage | zul, you can't | 13:27 |
| jamespage | roaksoax, I already rebooted | 13:27 |
| zul | jamespage: i cant? | 13:27 |
| jamespage | zul, the nova sru is still blocking you | 13:27 |
| zul | jamespage: oh...yeah.... | 13:28 |
| roaksoax | jamespage: check that fastpath is accesing the correct ip address for the cluster | 13:28 |
| jamespage | roaksoax, OK | 13:28 |
| roaksoax | to download the root.tar | 13:28 |
| roaksoax | gz | 13:28 |
| jamespage | roaksoax, I watch the console - that's all happening OK | 13:29 |
| jamespage | the failure is quite late in install | 13:29 |
| roaksoax | jamespage: then probably curtin issue. yeah access the image and investigate why it fails. i think issues were reported but then magically fixed | 13:29 |
| jamespage | roaksoax, OK - trying now | 13:30 |
| jamespage | roaksoax, I should just be able to SSH to the FPI right? | 13:30 |
| jamespage | no extra incantation required? | 13:30 |
| roaksoax | jamespage: you need the ephemeral backdoor | 13:32 |
| roaksoax | you need to activate it | 13:32 |
| jamespage | roaksoax, ? | 13:35 |
| roaksoax | jamespage: https://lists.launchpad.net/maas-devel/msg00808.html | 13:36 |
| jamespage | roaksoax, is that still applicable with the new boot-resources stuff? | 13:40 |
| roaksoax | smoser ^ | 13:42 |
| roaksoax | jamespage: the process is of course, the paths, no | 13:44 |
| jamespage | roaksoax, yeah - got it | 13:44 |
| jamespage | roaksoax, OK - I'm backdoored | 14:16 |
| jamespage | roaksoax, well I was - juju just terminated me | 14:18 |
| roaksoax | jamespage: bummer! yeah juju now terminates you if deployment doesn't get completed, which sucks for debuggin | 14:19 |
| smoser | jamespage, https://bugs.launchpad.net/curtin/+bug/1303617 | 14:19 |
| uvirtbot | Launchpad bug 1303617 in curtin "pc-grub install path broken in curtin" [Critical,Confirmed] | 14:19 |
| smoser | fix is just now uploaded. | 14:19 |
| smoser | you can apply revno 125 to trunk | 14:19 |
| smoser | er... you can cherry pick that to your local maas installation and it should fix it. | 14:20 |
| smoser | i just uploaded. | 14:20 |
| jamespage | smoser, ok | 14:20 |
| jamespage | smoser, I'll stop debugging - that looks like my problem | 14:20 |
| jamespage | smoser, ok - I'm being dumb | 14:22 |
| jamespage | curtin is not installed on my maas box? | 14:23 |
| === Quintasan is now known as Doktorant_R4k | ||
| === Doktorant_R4k is now known as Quintasan | ||
| smoser | jamespage, python-curtin | 14:34 |
| === rbanffy_ is now known as rbanffy | ||
| === tinoco is now known as inaddy | ||
| === inaddy is now known as tinoco | ||
| smoser | jml, shoot. you actually need the curtin-common | 14:41 |
| smoser | s/jml/jamespage/ | 14:41 |
| smoser | sorry jml | 14:41 |
| jamespage | smoser, I got there in the end | 14:41 |
| jamespage | :-) | 14:42 |
| tmwsiy | Hi I have a super micro server that I am attempting to install 12.04 server on. Everything goes fine with the install and then when it comes up to boot I get the grub menu but then if you select the regualr kernel option nothing happens. Funny thing is that if I select recovery console and then resume boot everything appears to work fine. any ideas as to how I can get grub to work properly from the start? | 14:55 |
| patdk-wk | tmwsiy, likely need nomode or other video options to the kernel | 15:04 |
| zul | jamespage: cinder rc2 is available | 15:04 |
| * jamespage leaps for joy! | 15:04 | |
| jamespage | zul, great - are you on it? or shall we let coreycb ? | 15:04 |
| zul | jamespage: im on it | 15:05 |
| zul | jamespage: just doing a local build now | 15:11 |
| jamespage | zul, ack | 15:14 |
| === alex88_ is now known as alex88 | ||
| zul | jamespage: https://code.launchpad.net/~zulcss/cinder/2014.1.rc2/+merge/214565 | 15:21 |
| jamespage | smoser, that fixed me up - thanks! | 15:24 |
| === Havenstance is now known as Haven|Work | ||
| hxm | hello, I have some irc logs in unrecognized encoding | 16:00 |
| hxm | i use file to know which encoding is and it says 'data' | 16:00 |
| hxm | can I just use iconv -f data -t utf-8 ? | 16:01 |
| hxm | or it will make it worse | 16:01 |
| shreezbot | Any of you guys know of a way to completely manage virtual machines in KVM from the command line? I'm running it on a headless server machine that I don't have GUI access on... | 16:01 |
| shreezbot | I can get a vm created and started, but I can't seem to connect to it to install the operating system... | 16:01 |
| forex | hello! | 16:07 |
| forex | how I can install gnome with RDP on Ubuntu 13.10 | 16:08 |
| forex | 64 bit | 16:08 |
| bekks | Install gnome and a rdp client. | 16:14 |
| forex | bekks: its remote server | 16:30 |
| forex | i heard its a bit tricky | 16:31 |
| === deegee__ is now known as drussell | ||
| sync0pate | forex, are you asking how you'd install gnome while you're logged in with RDP? | 16:49 |
| forex | sync0pate: there is remote ubuntu server | 16:50 |
| forex | i with to access it via rdp | 16:50 |
| forex | so I realise I would have to apt-get install gnome | 16:51 |
| sync0pate | how do you access it at the moment? | 16:51 |
| patdk-wk | yuk | 16:51 |
| forex | ssh | 16:51 |
| patdk-wk | access via rdp is a huge hack ontop of a hack | 16:51 |
| patdk-wk | just use vnc or nx | 16:51 |
| forex | patdk-wk: so what do u use to access GUI? | 16:51 |
| sync0pate | any particular reason you wanna rdp in? | 16:51 |
| patdk-wk | personally? I don't do gui | 16:51 |
| jpds | forex: We don't particularly use GUIs. | 16:51 |
| patdk-wk | I mean, why exactly would I need one? | 16:51 |
| sync0pate | ssh is generally better | 16:52 |
| forex | sync0pate: use GUI to install VM with Windows :D | 16:52 |
| forex | and OSX | 16:52 |
| jpds | forex: https://help.ubuntu.com/community/ServerGUI | 16:52 |
| patdk-wk | forex, no need for gui for that | 16:52 |
| sync0pate | but vnc seems to work better than rdp | 16:52 |
| patdk-wk | sync0pate, the rdp works by talking ontop of vlc | 16:52 |
| lordievader | forex: libvirt can run a vnc server for your vm's, no need to have the host run something X related. | 16:52 |
| patdk-wk | vnc I mean | 16:52 |
| forex | lordievader: hmmm how libvirt can do it? | 16:53 |
| forex | sounds interesting | 16:53 |
| jpds | forex: Use 'virt-install' to provision a VM. | 16:54 |
| jpds | forex: virt-install --graphics vnc,listen=0.0.0.0 | 16:54 |
| jpds | forex: Those are the flags to enable a VNC server tunneled to the virtual machine. | 16:54 |
| forex | yes I see | 16:54 |
| jpds | forex: You will need the other flags for the VM, disk, memory, etc. | 16:54 |
| forex | i like gui alot I admit :D | 16:55 |
| forex | and its handy and fast hehe for some tasks | 16:55 |
| sync0pate | I wouldn't abandon the GUI on my desktop | 16:55 |
| sync0pate | personally | 16:55 |
| sync0pate | but I never use it for servers | 16:55 |
| jpds | forex: Just install virt-manager on your desktop. | 16:55 |
| forex | well its website - 0 emails 0 cc data | 16:55 |
| forex | :D | 16:55 |
| jpds | forex: And connect to the libvirt socket on the server with ssh. | 16:56 |
| forex | i like gui I get idea of command like yet I love love visuals | 16:57 |
| forex | even on server | 16:57 |
| forex | :D | 16:57 |
| forex | its pleasing | 16:57 |
| jpds | True, but noone serious about their server farm would use a GUI. ;-) | 16:57 |
| patdk-wk | they would use powershell! | 16:58 |
| zul | Daviey: hey there is a cinder rc2 in the queue as well | 17:00 |
| forex | http://seb.so/vnc-from-boot-without-logging-in-ubuntu-lubuntu-xubuntu-and-mint-lmde/ | 17:01 |
| forex | interesting idea :D | 17:01 |
| sarnold | forex: nice documentation, I've wondered about "vnc into existing X" vs "vnc in and create a new X" -- it's nice to see it documented here :) | 17:03 |
| moparisthebest | is there a way to troubleshoot booting problems on a remote headless server? | 17:04 |
| moparisthebest | I install some packages, reboot, and it won't come back up | 17:04 |
| moparisthebest | I can boot a 'rescue system' to mount the filesystem after the fact and such, and reboot, but I can't figure out whats stopping it from booting? | 17:04 |
| sarnold | moparisthebest: best is soemthing like serial console or an "integrated lights out" management interface on the server | 17:05 |
| moparisthebest | can I setup and connect to a serial console over the network? | 17:05 |
| sarnold | moparisthebest: there are some serial console servers, sometimes even integrated into power strips :) wonderful things | 17:07 |
| forex | so sarnold I install gnome then vnc and then I follow that howto right? :D | 17:08 |
| sarnold | forex: looks like it :) hehe | 17:08 |
| forex | :))) | 17:08 |
| jamespage | zul, https://code.launchpad.net/~james-page/neutron/rc1-fixes/+merge/214582 | 17:12 |
| forex | i wonder why add-apt-repository ppa:gnome3-team/gnome3-next is not working | 17:13 |
| jamespage | zul, I'm still not sure that the l3/vpn agent stuff is right but I can't track down anyone to tell me authoratively | 17:13 |
| forex | bizzare | 17:13 |
| forex | I decided while I am at it install latest gnome :) | 17:13 |
| zul | jamespage: +1 | 17:16 |
| lordievader | patdk-wk: Hihi, ps, haha | 17:17 |
| jamespage | zul, ok merged | 17:17 |
| pmatulis | hallyn_: need any testing for bug 1286500 ? | 17:18 |
| uvirtbot | Launchpad bug 1286500 in virtinst "Can't perform an HTTP VM install with virt-manager" [Medium,Confirmed] https://launchpad.net/bugs/1286500 | 17:18 |
| jamespage | zul, I think the two agents do overlap - I can quite happily run stuff that relies on l3-agent with just the vpn-agent running | 17:18 |
| lordievader | forex: It's good to get a habit of managing your servers through the command line :) | 17:18 |
| zul | jamespage: ack.. | 17:18 |
| hallyn_ | pmatulis: I think this needs to wait until we can merge the next version (which needs a few MIRs). | 17:19 |
| hallyn_ | I disagree with comment #4, btw. you can d/l an iso this is does not render essential functionality broken | 17:20 |
| mdeslaur | hallyn_: have you had anyone reporting issues with qemu segfaulting? | 17:22 |
| hallyn_ | mdeslaur: no | 17:23 |
| hallyn_ | mdeslaur: other than -ppc | 17:23 |
| forex | Adding group `nopasswdlogin' (GID 110) ... | 17:29 |
| forex | hmm | 17:29 |
| forex | why no passwd :D | 17:29 |
| forex | o well | 17:29 |
| forex | nearly there | 17:57 |
| forex | login works fine however then remote desktop goes back to login screen | 17:57 |
| forex | :) | 17:57 |
| forex | GConf-WARNING **: Client failed to connect to the D-BUS daemon: Unable to autolaunch a dbus-daemon without a $DISPLAY for X11 | 17:58 |
| hallyn_ | mdeslaur: any more details? are you easily able to reproduce that? | 18:01 |
| mdeslaur | hallyn_: still poking at it...looks like quantal i386 guest with the vmvga driver causes it | 18:02 |
| mdeslaur | hallyn_: but still testing | 18:02 |
| forex | ::))) | 18:03 |
| forex | magical ubuntu | 18:03 |
| elliotd123 | Ubuntu server 12.04 doesn't seem to detect my SATA FDM, any idea if they're supported in 14.04? | 18:59 |
| patdk-wk | sata fdm? | 19:01 |
| patdk-wk | if it's sata, the issue is, your sata chipset | 19:02 |
| elliotd123 | That makes sense that it's a chipset issue, it doesn't detect the network interfaces either... | 19:06 |
| bitfury | hey guys, what's the default MTA in ubuntu 13.10? | 20:06 |
| bitfury | still postfix? | 20:07 |
| lamont | bitfury: yep | 20:07 |
| lamont | and 14.04, too | 20:07 |
| bitfury | lamont, do you know if it gets automatically removed when installing sendmail or any other MTA? | 20:08 |
| lamont | bitfury: by policy, the MTAs all conflict with (and provide) mail-transport-agent, so you cannot install more than one at a time | 20:10 |
| lamont | unless you do it in a chroot, of course. | 20:10 |
| === DavidDuffey is now known as dduffey | ||
| === AntORG_ is now known as AntORG | ||
| === Ursinha_ is now known as Ursinha | ||
| lamont | bitfury: see, for example, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=307186 | 20:10 |
| uvirtbot | Debian bug 307186 in postfix "Postfix conflicts with sendmail" [Wishlist,Open] | 20:11 |
| lamont | that'd be in the "wontfix" category, since the change it asks for would be a release-critical, policy-violating bug | 20:11 |
| bitfury | lamont, thanks | 20:14 |
| zul | Daviey: ping can you review cinder rc2 please | 20:26 |
| Daviey | zul, done | 20:29 |
| === hxm- is now known as hxm | ||
| zul | Daviey: thanks | 20:30 |
| forex | hmmm | 21:18 |
| forex | I installed xrdp - it says connected | 21:18 |
| forex | and closes window :D | 21:18 |
| forex | bizzare? | 21:19 |
| bekks | Nope. Dont use RDP but vnc or nx. | 21:23 |
| forex | xrdp seems to be supporting vnc too | 21:24 |
| justizin | anyone know if there is a backport of openssl available for 1.0.1g, or otherwise addressing the heartbleed problem? | 21:28 |
| bekks | forex: Keep i mind that both rdp and vnc arent secure. | 21:28 |
| forex | in which way?> | 21:28 |
| bekks | forex: In every way. | 21:28 |
| forex | well means they are good | 21:29 |
| forex | whats with gui fobia | 21:29 |
| forex | :))) | 21:29 |
| bekks | forex: Thats nonsense. RDP and VNC arent secured, they arent encrypted, vital data is transferred as plain text. | 21:29 |
| forex | wtf | 21:29 |
| forex | vnc can run via ssh | 21:30 |
| forex | rdp probably too | 21:30 |
| bekks | which doesnt magically make vnc and rdp secure - all it does is encapsulating vnc/rdp into a secure ssh transport. | 21:30 |
| forex | vital data is transferred as plain text. | 21:31 |
| forex | :D | 21:31 |
| forex | then its secured | 21:31 |
| bekks | Just use nxm, which does all that automatically. | 21:31 |
| bekks | *nx | 21:31 |
| forex | sounds fine | 21:34 |
| forex | it it can work out of box and secure then its good find :D | 21:34 |
| forex | NX is an exciting new technology for remote display. It provides near local speed application responsiveness over high latency, low bandwidth links. | 21:36 |
| forex | awesome! | 21:36 |
| pmatulis | hallyn_: re MIRs, i'm not sure i follow. are you saying bug 1286500 will go unfixed for trusty? | 21:43 |
| uvirtbot | Launchpad bug 1286500 in virtinst "Can't perform an HTTP VM install with virt-manager" [Medium,Confirmed] https://launchpad.net/bugs/1286500 | 21:43 |
| forex | bekks: so there is open source and paid version or just paid? | 21:44 |
| forex | reading on it now :D | 21:44 |
| hallyn_ | pmatulis: it may, yes. | 21:44 |
| pmatulis | wow, ok. virt-install is a main way for using preseeding | 21:44 |
| hallyn_ | i'm looking into 1304008 right now, i can look some mor einto that one after, | 21:45 |
| hallyn_ | pmatulis: but you can preseed and use virtinst with an iso, | 21:45 |
| pmatulis | hallyn_: oh, i can't find how. --location (preseeds) doesn't work with --cdrom (iso) | 21:45 |
| hallyn_ | pmatulis: i had to look quite awhiel to even find an http location tht worked, | 21:45 |
| hallyn_ | hm | 21:45 |
| hallyn_ | pmatulis: can you add the precise command line you use to the bug report? | 21:46 |
| hallyn_ | i'll see what i can do | 21:46 |
| hallyn_ | since cgmanager is'nt currently blowing up in my face :) | 21:46 |
| pmatulis | hallyn_: i'll do it now | 21:46 |
| hallyn_ | thanks | 21:46 |
| hallyn_ | pmatulis: (not seeing it in that bug yet, assuming im' looking in the right place) | 22:28 |
| atpa8a | hmm | 22:34 |
| atpa8a | what's the deal with ping: icmp open socket: Operation not permitted. in 14.04?.. | 22:35 |
| sarnold | atpa8a: please dmesg | grep DENIED | tail | 22:36 |
| sarnold | (and pastebinit if there's more than one or two lines :) | 22:36 |
| atpa8a | sarnold: none! | 22:37 |
| sarnold | atpa8a: do you have auditd installed? check /var/log/audit/audit.log to see | 22:37 |
| atpa8a | i don't have that... | 22:38 |
| atpa8a | this is a clean brand new install | 22:38 |
| sarnold | atpa8a: drat. well, that is itself fine. it just means that my theory doesn't help you :/ | 22:38 |
| atpa8a | :) | 22:38 |
| atpa8a | thanks anyway | 22:38 |
| atpa8a | apparently ping is missing -s... | 22:40 |
| nextdoorwarren | Hey guys, I am really sorry but this OpenSSL Vuln, all the releases I find say 1.0.1f is the new version I need, however I am new to the ubuntu space, and I see the version with ubuntu is labeled when I do dpkg as 1.0.1-4ubuntu5.11 | 22:41 |
| nextdoorwarren | is that the f version? | 22:41 |
| atpa8a | now... is this just a bug or "by design"?.. | 22:41 |
| Patrickdk | nextdoorwarren, learn how distros work | 22:42 |
| Patrickdk | you don't *upgrade* to a patched version, you apply the patch to the current version | 22:43 |
| Patrickdk | so no, it is not the f version, it is the pre-a version | 22:43 |
| atpa8a | which was the channel for development stuff?.. | 22:43 |
| Patrickdk | and if you only see 5.11 you need to do an update | 22:43 |
| nextdoorwarren | @Patrickdk thanks | 22:44 |
| Patrickdk | nextdoorwarren, http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0160.html | 22:44 |
| uvirtbot | Patrickdk: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160) | 22:44 |
| bekks | nextdoorwarren: which ubuntu release are you on? | 22:46 |
| nextdoorwarren | 12.04 LTS | 22:46 |
| xibalba | how would i block port X that isn't coming from within my LAN network 10.10.10.0/24 | 23:31 |
| xibalba | with iptables | 23:31 |
| mgw | what might cause apt-get update to fail with this error: Reading package lists... Error! | 23:31 |
| mgw | xibalba, do you need to block a specific port? | 23:32 |
| xibalba | yes, port 111 | 23:32 |
| xibalba | rpcbind | 23:32 |
| mgw | I prefer to block everything except what is explicitly permitted | 23:32 |
| mgw | iptables -A INPUT -j REJECT --reject-with icmp-port-unreachable | 23:32 |
| xibalba | right the ASA is blocking everything else. personally i hate the ASA | 23:32 |
| mgw | as your lst rule | 23:32 |
| sarnold | mgw: there's nothing else nearby to suggest what the error might be? o_O | 23:33 |
| mgw | not nearby | 23:33 |
| mgw | maybe in some log somewhere | 23:33 |
| mgw | sarnold: ^ | 23:34 |
| sarnold | mgw: bleh. well, you can probably just get away with deleting all the lists in /var/lib/apt/lists/ and trying again | 23:34 |
| Patrickdk | out of diskspace? disk readonly? | 23:35 |
| mgw | Patrickdk: one of the systems has /run full (fixing that) but the other has plenty of space | 23:36 |
| mgw | sarnold: That's safe? | 23:36 |
| Patrickdk | yes, it will just redownload and rebuild | 23:37 |
| Patrickdk | hmm, /run filling up, kindof strange | 23:37 |
| axisys | so I guess we need to wait until newer version openssl pkg available? | 23:37 |
| Patrickdk | axisys, sure, like 2hours ago | 23:37 |
| sarnold | mgw: yes, the next time you apt-get update they'll be redownloaded. no big deal there. | 23:37 |
| mgw | Patrickdk: not strange, i had a big core file in there | 23:38 |
| axisys | Patrickdk: I knew I am late in the show.. | 23:38 |
| Patrickdk | mgw, odd to have core files :) | 23:38 |
| mgw | axisys, new packages were released today | 23:38 |
| axisys | mgw: for precise ? | 23:38 |
| mgw | sarnold: those cover today's security notice, right? | 23:38 |
| mgw | yes | 23:38 |
| sarnold | mgw: yes | 23:38 |
| Patrickdk | axisys, all my 12.04 have updates packages | 23:38 |
| Patrickdk | 5.12 | 23:38 |
| Patrickdk | next would be rotating all your ssl certs :( | 23:39 |
| mgw | sarnold: different topic - should we be upgrading anything other than openssl and libssl to cover that exploit? | 23:39 |
| axisys | so sudo apt-get install openssl ? | 23:39 |
| axisys | Patrickdk: ^ | 23:40 |
| Patrickdk | libssl | 23:40 |
| axisys | Patrickdk: right.. we have few ssh keys | 23:40 |
| sarnold | mgw: restarting your services is a must, regenerating your keys is a good conservative step. | 23:40 |
| Patrickdk | ssh isn't so much an issue | 23:40 |
| Patrickdk | as it has both the static key and the hourly rotated key | 23:40 |
| Patrickdk | that is what that split key is suppost to stop | 23:40 |
| beisner | atpa8a, sarnold: regarding ping, bug: https://bugs.launchpad.net/ubuntu/+source/iputils/+bug/1302192 | 23:40 |
| uvirtbot | Launchpad bug 1302192 in iputils "ping is not setuid root" [Undecided,Confirmed] | 23:40 |
| Patrickdk | but still, wouldn't hurt to do also | 23:41 |
| axisys | sudo apt-get install libssl | 23:41 |
| axisys | Package libssl is not available, but is referred to by another package. | 23:41 |
| sarnold | beisner: awesome! :) thanks | 23:41 |
| Patrickdk | axisys, you failed to apt-get update | 23:41 |
| axisys | oops! always make that mistake | 23:41 |
| axisys | still same error after the upgrade | 23:42 |
| mgw | libssl1.0.0 | 23:42 |
| mgw | is the package on ubuntu 12.04 | 23:42 |
| mgw | axisys: ^ | 23:42 |
| mgw | sarnold: should I wipe out lock and partial too, or just everything else in that dir? | 23:43 |
| axisys | mgw: that worked | 23:43 |
| axisys | $ openssl version | 23:43 |
| axisys | OpenSSL 1.0.1 14 Mar 2012 | 23:43 |
| Patrickdk | oh ya, it is | 23:43 |
| Patrickdk | heh | 23:43 |
| axisys | shouldn't it be higher ? | 23:43 |
| Guegs_ | You guys talking about the Heartbleed bug? | 23:43 |
| sarnold | mgw: normally just "everything else" works for me, but I haven't seen the specific thing you've got | 23:43 |
| Patrickdk | axisys, no, it shouldn't be HIGHER | 23:43 |
| Patrickdk | I dunno how many times I must explain that | 23:44 |
| axisys | Patrickdk: may be in /topic :P | 23:44 |
| sarnold | Patrickdk: we've got an url for that :) https://wiki.ubuntu.com/SecurityTeam/FAQ#Versions | 23:44 |
| Patrickdk | sarnold, ubibot token for it? | 23:44 |
| sarnold | Patrickdk: dunno.. I don't know our bot vrey well | 23:44 |
| Patrickdk | neigher do I | 23:44 |
| sarnold | Patrickdk: and when people complain, the debian one too :) https://www.debian.org/security/faq#version | 23:45 |
| axisys | apt-cache policy libssl1.0.0 does not say anything either.. I will read that url | 23:45 |
| Patrickdk | 1.0.1-4ubuntu5.12 is the fixed version, axisys | 23:45 |
| Patrickdk | this is what reading cve's are for | 23:45 |
| mgw | sarnold: same error — | 23:46 |
| mgw | Fetched 20.3 MB in 10s (1,871 kB/s) | 23:46 |
| mgw | Reading package lists... Error! | 23:46 |
| === bigjools_ is now known as bigjools | ||
| Patrickdk | http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0160.html | 23:46 |
| uvirtbot | Patrickdk: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160) | 23:46 |
| sarnold | mgw: hrm, could try removing the locks and partial at the same time? :( | 23:46 |
| axisys | I am going to have to prove someone in security that it is not running a exploited version.. would be nice if some says somewhere about this | 23:47 |
| Patrickdk | axisys, I just posted it | 23:49 |
| Patrickdk | you point them to the CVE I just posted | 23:49 |
| Patrickdk | then you show them, dpkg -l | grep libssl | 23:49 |
| mgw | sarnold: still getting the error | 23:49 |
| mgw | I wiped everything in /var/lib/apt/lists | 23:49 |
| Patrickdk | sarnold, stupid bot isn't even following the ubuntubots instructions | 23:50 |
| sarnold | mgw: nuts. time to bring out 'strace' to try to figur eout what's going on :( | 23:50 |
| sarnold | Patrickdk: hrm, I don't even know who to turn to for more information on the bot | 23:50 |
| === arosales_ is now known as arosales | ||
| Patrickdk | soren hansen | 23:52 |
| sarnold | axisys: make sure that your versions as reported by dpkg -l *ssl* match the version numbers recorded here: http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0160.html | 23:52 |
| Patrickdk | oh wait | 23:52 |
| uvirtbot | sarnold: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160) | 23:52 |
| Patrickdk | I should be talking to the *OTHER* bot | 23:52 |
| Patrickdk | damn it too many bots | 23:52 |
| sarnold | haha | 23:52 |
| axisys | Patrickdk, sarnold : thanks a lot | 23:55 |
| Patrickdk | sarnold, there isn't one, closest is | 23:56 |
| Patrickdk | !latest | 23:56 |
| ubottu | Packages in Ubuntu may not be the latest. Ubuntu aims for stability, so "latest" may not be a good idea. Post-release updates are only considered if they are fixes for security vulnerabilities, high impact bug fixes, or unintrusive bug fixes with substantial benefit. See also !backports, !sru, and !ppa. | 23:56 |
| Patrickdk | but that doesn't really doesn't read right for this case | 23:56 |
| sarnold | Patrickdk: yeah, it's not bad but not perfect | 23:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!