/srv/irclogs.ubuntu.com/2014/05/07/#ubuntu-server.txt

=== Lightsword_ is now known as Lightsword
=== justizin_ is now known as justizin
phuhhow do you properly create a backup of a Ubuntu server? /var/log and /etc? anything else?02:34
sarnoldphuh: depends heavily upon what the server does; /home if it serves as a shell host for your users, or if you run a database server you'll want to find out how to get a consistent database dump out of it..02:37
phuhsarnold: what about system specific ones?02:37
phuhare /etc and /var/log the only ones important for backup purposes?02:38
sarnoldphuh: for every service that your server runs, figure out what you'd be sad to lose if it dissapeared, and go track it down. :)02:38
sarnoldphuh: I keep /home/ /etc/ /usr/local/ -- I'm not too worried if I lose my logs.02:39
phuhsarnold: why isn't log important for you/02:39
sarnoldphuh: I only ever investigate them if something seems broken and I want to find out why. I wouldn't care to restore them.02:39
sarnoldphuh: if you want to keep your logs safe from intruders or something similar, probably a separate log host would make more sense02:40
phuhsarnold: do you at least save them somewhere like S3 just in case you'll be interested?02:41
phuhsarnold: what's the benefit of a separate log host?02:41
sarnoldphuh: no, but that makes sense..02:41
sarnoldphuh: it's updated real-time, so you can examine logs immediately when problems happen -- if you only back up the logs every six hours, you'll probably miss the most important logs when something does happen02:42
sarnoldphuh: I'm off, have a good night :)02:43
phuhthank you sir sarnold02:44
sarnoldphuh: you're welcome :) have fun!02:44
=== elliotd123_ is now known as elliotd123
geowanybacula is wonderful!04:19
wazerHello all! I'm having a slight issue getting vnc4server working on Ubuntu 14.0404:33
wazerI have the VNC server running, but when I access it I just get 3 check boxes saying: "Accept clipboard from viewers"04:33
=== sevensixtwo is now known as Seven_Six_Two
InFiernoAnyone around who has used bind in the not to distant past06:41
ikoniaInFierno: be better if you just stated what you needed help with06:43
InFiernoTrue dat; configs for a clients site that is just pointed to my nameservers (i setup mine just fine) but clients gives errors - ive forgotten something really obvious06:44
InFiernoFor client I created @, mail - A records - ftp, www CNAME records and MX records06:45
InFiernowhat did i forget06:45
InFiernoand for NS IN records i created mynameservers IN NS domain06:46
InFiernoI think its on the NS in i have the problem06:46
=== jibel_ is now known as jibel
TJ-InFierno: Added the zone file to them main config file, configured any allowed slaves, etc?06:57
InFiernoyup06:57
InFiernoFound it07:07
InFiernoforgot to add an exception for that domain to the firewall07:07
InFierno(hardware one)07:07
lordievaderGood morning.07:31
InFiernoTJ-, can you take a look at the ns records and see if you can spot the issue08:00
TJ-InFierno: Sure08:01
InFiernortrproject.com08:03
k1ngcan anyone help me install samba client on ubuntu server?08:07
TJ-You're missing the ns1.rtrproject.com A record08:07
InFiernoits ponted to ns1.blacksail.software08:08
InFiernoso i shouldnt need its own NS record?08:08
TJ-You have the SOA pointing to "ns1.rtrproject.com" which has no A record08:09
InFiernoAh cheers08:09
InFiernoit shouldnt be :)08:09
TJ-maybe you want that to be "ns1.blacksailsoftware.com."08:09
InFiernoyea :)08:10
InFiernoGonna swap something else at the same time --> just seeen some stuff in the code of zpanel i dont like08:10
TJ-And I usually have the SOA contact being the hostmaster@ the actual domain that manages the SOA08:10
InFiernoYou tried vesta cp by any chance ?08:11
InFiernoI have 2 clients who need a CP so any ideas08:11
TJ-Unless you can guarantee the DNS administrator will see emails to the email address currently set08:11
TJ-CP?08:11
InFiernocontrol panel08:11
TJ-oh... I prefer terminal shells08:11
InFiernome also08:12
InFiernoBut they are pretty dumb and need a cp08:12
xnoxdw1: that's interesting, can you open a bug number and pass it to me?08:13
InFiernok1ng, What do you mean?08:44
InFiernok1ng, : http://www.debian-administration.org/article/340/Using_Samba_on_Debian_Linux08:49
=== RoyK^ is now known as RoyK^Work
InFiernoTJ-, u here?09:00
dw1xnox: ok https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/131698909:05
uvirtbotLaunchpad bug 1316989 in initramfs-tools "update-initramfs not finding UUID-less raid arrays in mdadm.conf" [Undecided,New]09:05
xnoxdw1: thanks, i'll correct the package though =)09:12
xnoxdw1: do you have control over /etc/mdadm/mdadm.conf? a long time ago ubuntu has switched to UUID based assembly.09:14
dw1xnox: yeah I can add the UUIDs09:14
xnoxdw1: i would do backups of the config09:14
xnoxdw1: and then ddo /usr/share/mdadm/mkconf > /etc/mdadm/mdadm.conf09:15
xnoxdw1: however, just adding UUIDS to the existing stanzas should also work.09:15
dw1xnox: I was told the explicit non uuid declarations would "help it autodetect, if you use older version metadata" so I felt more comfortable keeping them. but if it doesn't matter, well i can go to what mkconf suggests09:17
dw1xnox: kind of new to raid stuff :)09:17
xnoxdw1: it is weird that we complain though.09:17
xnoxdw1: both should be equivalent.09:18
dw1xnox: error gone when using either the mkconf one or adding UUID= parameter to end of others09:23
dw1xnox: as expected09:24
xnoxdw1: good. if you want to keep all options, then by all means just add UUID= parameter at the end.09:24
dw1xnox: sounds good, thanks09:24
DenBeirenHi, I destroyed my system by accidently erasing all kernels and rebooting. I have found a nice help page http://to.ly/xgZ4 , but i ran into a problem.09:38
DenBeireni have a software raid setup09:39
DenBeirenso mounting the partitions as described doesn't work09:39
OpenTokixDenBeiren: you have to assemble the raid in the livesystem to09:40
OpenTokixDenBeiren: with mdadm and then mount the partitions fomr the raid09:40
OpenTokixDenBeiren: check out the manpage for mdadm09:40
DenBeirenok will try09:41
DenBeirenthanks for the tip!09:41
OpenTokixmdadm --assemble --scan might be the command you are looking for09:41
DenBeirenseemed to work out09:49
DenBeirenonly the boot partition raid array has en error09:50
DenBeirenwhen i try to mount, the device doesn't exist09:51
DenBeirennm, i made a syntax error10:09
DenBeirenhttp://pastie.org/9148436   what am i doing wrong here?10:14
onoruaguys, my crypted devices are not getting booted12:14
onoruaI mean not getting mounted during boot without manual intervention12:15
onoruaboot complains about some serious errors were found while checking the disk drive for all ecnrypted devices12:15
onoruahave someone seen such an errors?12:15
onoruahow did you overcome?12:15
=== Lcawte|Away is now known as Lcawte
funhey folks, how I can upgrade 13.10 64 bit server to 14.10 64 bit server?13:43
funI mean 14.0413:43
cfhowlettfun wait until point release #1 in July.  then sudo do-release-upgrade13:44
funpoint?13:45
=== liam_ is now known as Guest5040
cfhowlettfun 14.04.113:45
funhow come?13:46
funi though 14.04 already pretty good13:46
cfhowlettfun OR download 14.04, make a USB, boot USB and install13:46
Picicfhowlett: You shouldn't need to wait if you already have 13.1013:47
funwhat usb lol its remote server13:47
cfhowlettPici do-release-upgrade unavailable until point release13:47
Picicfhowlett: Sure it is.  Just not for 12.04 to 14.0413:47
cfhowlettPici NOT true.  LTS to LTS is allowed.13:48
funPici so how to I do it? just run do-release-upgrade?13:48
funnope there is more to it13:48
funhttp://ubuntuhandbook.org/index.php/2014/01/upgrade-ubuntu-13-10-saucy-to-ubuntu-14-04-trusty/#comments13:49
funbingo :D13:49
Picifun: you shouldn't need to use the -d switch at all.13:50
Picicfhowlett: 13.10 to 14.04 should work just fine right now using do-release-upgrade.  12.04 to 14.04 will not work until 14.04.1 is released.13:50
funPici so do-release-upgrade will make sausy 14.04?13:50
cfhowlettPici ah!  good to know!13:51
funand do I need to edit /etc/update-manager/release-upgrades ?13:51
funto change normal to lts?13:51
Picifun: It should work as long as prompt is not set to none.13:51
fun:) running update13:55
Piciyay13:55
funsome minor warnings however overall seems fine14:02
fun:)14:02
fununable to delete some old dirs14:02
funlol grub now14:03
funsaying local version modified but it has new version14:03
MTughanI'm having some trouble with cloud-init. Is there a list somewhere of the steps cloud-init goes through and somewhere where I can see what data it's all using?14:06
MTughanI'm using a local installation of OpenStack. If I launch a VM manually with my own cloud-config script, everything works as intended. If I launch the VM using Heat (OpenStack's orchestration tool) with the same cloud-config file, stuff breaks.14:07
funno idea14:07
MTughanMost notably, if I specify a custom username for cloud-init, the created home directory when using Heat is owned by root:root.14:08
funPici: ok upgrade done, some minor warnings for some soft overall seems fine :D14:09
Picihuzzah14:10
funI am suprised OVH dont have 14.04 in its CP yet :D I could promt them to add it :)14:10
funUbuntu 14.04 LTS haha14:12
fundone :D14:12
patdk-wksuprised people use ovh14:13
funits great14:13
funwho do you use?14:13
patdk-wkif you don't care about being blacklisted14:13
funblacklisted where?14:13
funlol14:13
patdk-wkmost mailservers have most of ovh blacklisted14:14
patdk-wkthey made a huge statement, about fixing the issue14:14
patdk-wkbut nothing ever came of it14:14
funpatdk-wk: simply use sendgrid14:16
fun:)14:16
patdk-wkhttp://www.spamhaus.org/sbl/listings/ovh.net14:16
funre read above :D14:17
funaws similar well many ips :)14:17
funalso who do u use then :)14:17
patdk-wkaws blocks you, if you send more than just a few emails per day14:17
patdk-wkpersonally?14:18
patdk-wkI bought my own hardware, ip address space, and asn14:18
funso here u go14:18
fun:)14:18
funalso aws allows to send tons of emails if u pay14:18
fun;)14:18
patdk-wkspammers aren't into paying14:19
funpatdk-wk: lol well aws is well known company14:19
funand ovh same14:19
patdk-wkbut the reputations of both, are widely different14:20
funto you yes14:20
funovh is going on roadshow worldwide feel free to visit and voice your concerns there :)14:21
funhehe14:21
MTughanI'm having some trouble with cloud-init. Is there a list somewhere of the steps cloud-init goes through and somewhere where I can see what data it's all using?14:33
MTughanI'm using a local installation of OpenStack. If I launch a VM manually with my own cloud-config script, everything works as intended. If I launch the VM using Heat (OpenStack's orchestration tool) with the same cloud-config file, stuff breaks.14:33
MTughanMost notably, if I specify a custom username for cloud-init, the created home directory when using Heat is owned by root:root.14:33
budman_anyone have any ubuntu 12.04 servers with netextreme broadcom cards? trying to figure out a speed issue16:34
davidwebbI need to install dropbox on my headless 12.04 Server for multiple users - does anyone have experience with this? I can't find a tutorial focused on using dropbox with more than 1 user...16:36
budman_davidwebb: does it need to be dropbox? maybe "owncloud" might work16:38
davidwebbbudman_: that looks interesting.  My clients already have dropbox, but it looks like setting this up would be pretty easy too...16:39
budman_I know someone that just set it up and is loving it, I think the only downfall he said was you have to pay for the apple/android app$1 or so16:40
patdk-wkfor dropbox or owncloud?16:40
budman_owncloud16:40
davidwebbso does this mean all the data stays on my server?16:41
davidwebbI'm pretty sure one of my clients will want it sync'd elsewhere as well...16:41
patdk-wkas long as you don't download it16:41
patdk-wkor back it up somewhere16:41
davidwebbDoes it work just like dropbox, where if he's running it on his desktop, it'll download / sync files to his desktop automatically?16:42
budman_yea it might not meet your needs, just throwing it out there, while I wait for help :) hoping someone runs ubuntu with broadcom cards16:42
patdk-wkthe world attempts not to run anything with broadcom cards16:42
budman_yes i know, it just happens to be what I have to work with. im thinking about just ordering some 4 port intel cards16:45
budman_but seeing my options if I can fix it, with a different driver or similar, has to be 1 lone ranger out there ha.16:45
davidwebbowncloud has packages for xUbuntu - are they the same as what I'll need for Ubuntu?16:50
davidwebb(I don't know the differences between xUbuntu and Ubuntu....)16:51
sarnolddavidwebb: just skimming their opensuse build service page, I actually think they mean 'xUbuntu' as a placeholder for 'ubuntu, kubuntu, xubuntu, lubuntu, edubuntu, etc.'16:54
davidwebbgotcha. thanks sarnold16:54
sarnold(and probably it'll work for derived distributions such as mint..)16:56
pseudois there any reason whatsoever for a ubuntu 14.04 server - freshly installed - not to reply to icmp requests coming from certain ip addresses?17:03
sarnoldpseudo: probably it won't reply to broadcast packets17:06
pseudosarnold - it is seeing, but not responding to icmp echo packets coming from a certain ip address from the 10.x subnet17:07
patdk-wkthat is a pretty large subnet17:08
* patdk-wk blames routefilter17:08
pseudothe server is on 10.30.0.0/24, but another box connected to the same switch is on 10.10.10.40. it responds to about 10% of the icmp packets coming from that ip17:08
patdk-wkwell, that won't work17:09
patdk-wknot without a router17:09
pseudosame switch17:09
pseudoi.e. layer 2 packets17:09
pseudono reason it shouldnt work17:09
patdk-wkya, should not work17:09
patdk-wksure it does17:09
patdk-wkit's not in the same subnet17:09
patdk-wknot in same subnet == must be routed17:10
patdk-wkdid you skip networking 101?17:10
pseudoapparently i did17:10
pseudoi guess that makes sense17:10
pseudogive me a sec to rethink a few things17:10
pseudookay, you are right about the layer 2 thing - i believe that the network is setup such that the 10.10.10.40 router connects to an upstream router and then hairpins back into the 10.30.0.0/24 network.17:15
pseudothe tl;dr is that packets origininating from 10.10.10.40 make it to the 10.30.0.x machine17:15
pseudoi can see the icmp request's come into that box with tcpdump17:15
pseudobut it never sends out a reply17:15
pseudoi other ubuntu 14.04 machines in the same subnet that respond just fine to icmp requests17:16
sarnoldpseudo: compare their routing tables, perhaps that one machine doesn't know how to route to 10.10/16 ?17:17
pseudothe routing tables are identical17:17
pseudoagain - the packet makes it to the box. the box just never tries to send a reply17:19
sarnoldwb pseudo_, you missed nothing while you were gone17:21
patdk-wkhow many nics does that box have?17:21
pseudo_ty :)17:22
pseudo_one nic17:22
patdk-wkwhere are you running tcpdump?17:22
pseudo_on the node that i am trying to ping17:22
pseudo_omg, this is so frustrating - it just started working again. literally nothing has changed.17:24
patdk-wkarp issues?17:25
sarnoldo_O17:25
sarnoldthat would be bloody annoying to track down :)17:25
pseudo_that's what i thought, but i flushed my arp tables earlier, plus - i was seeing EVERY icmp request packet17:25
sarnoldI wonder if those packets are arriving with broken checksums?17:25
patdk-wkrequest doesn't mean anything17:26
patdk-wkif the server doesn't know the arp entry for the gateway/router17:26
patdk-wktherefor it never makes a reply17:26
pseudo_patdk-wk: there is one gateway router and networking was fine everywhere else17:26
patdk-wkeverywhere else != this switch port17:26
pseudo_i could ping out through that router17:26
patdk-wkok17:27
pseudo_patdk-wk: actually, i lied. i don't know that for sure17:27
pseudo_thinking back - i was able to ping within my subnet, but i don't think that i tried pinging upstream17:27
pseudo_patdk-wk: although. this node is just a kvm image who's nic is a bridged card. and other vms were working fine17:29
patdk-wkoh?17:29
patdk-wkcould be lots of fun then17:29
pseudo_yeah, there are alot of moving parts - i still think it needs to be an ubuntu/kernel thing though - the fact that tcpdump saw a request and did not respond says that networking is all right17:30
pseudo_at the same exact time that it was not responding to that ip, it would repond to a ping from a local ip17:30
sarnolddoes tcpdump automatically report back packet checksums?17:30
patdk-wkand you are doing it inside the vm right? not on the host?17:31
pseudo_yes, inside a vm17:31
pseudo_and sarnold, i think it will report a bad checksum by default, but im not sure about that17:31
sarnoldaha :) --dont-verify-checksums17:33
sarnoldbugger. i liked that theory.17:33
pseudo_idk what to say guys, it seems to be working now - i guess i will chalk it up to some sort of arp caching issue. i really don't think that was the problem, but i'm out of theories and it unfortunately just started working again17:33
sarnoldpseudo_: good luck, and if you figure it out I'd be curious to learn why :)17:36
pseudo_sarnold: yeah, if i figure it out i will definitely report back. thanks for taking the time to help. you too patdk-wk.17:37
pseudo_sarnold: i have a theory - i think that our upstream firewall/switch was trying to preventing arp spoofing by disallowing unsolicited arp replies. before this problem started, i took down a vm that had the same ip address and brought a new one(with a different MAC) up in it's place.18:05
sarnoldpseudo_: ooh, seems plausible enough. the best part is you've got something you can test now :)18:07
=== justizin_ is now known as justizin
zealjubuntu server liveCD doesn't include fdisk18:53
zealjanyone know if this is intentional? is there are substitute?18:53
lordievaderzealj: I suppose parted is available.18:53
lordievaderFdisk for gpt disks is useless.18:54
zealjdoes parted allows you to view the partition table without changing them?18:54
lordievaderYes.18:54
zealjcool, thanks18:54
lordievaderzealj: man parted ;)18:54
zealjyep :)18:54
dasjoeHi, VMs created with uvt-kvm are not persistent, correct? What are possible use cases for uvtool, is there a way to make a VM persistent?19:10
stonedoh here it goes19:12
stonedfinally19:12
stonedI tried to join this channel like 5 times19:12
stonedit wouldn't join19:12
Jordan_Ustoned: What ended up actually working? Going through GUI buttons rather than "/join"?19:15
stonedYes!19:19
stonedJordan_U, my friend yes19:19
stonedI got join to work now. The command was broken for /19:19
stonedI am on ZNC so I restarted my client and now it works19:19
stonedThanks19:19
MTughanYou also have to be identified with NickServ to join here, I believe.19:20
MTughanHuh, nevermind actually.19:20
replmanHi! I would like to create a sftp user for a www folder. This works if the folder belong to root, but if i set the owner to root, the webserver cannot read it. Isn't it possible to have a sftp user which doesn't need the folder to be owned by root?19:30
stonedsure19:36
stonedaddgroup web19:36
stonedadduser www-data web19:36
stonedadduser root web (optional)19:36
stonedchown -R www-data:www /var/www19:37
stonedchmod -R ug+srw /var/www19:37
stoned1) you create a group called 'web'19:37
stoned2) you put the apache www-data user (and files in /var/www belong to root) so you do #319:38
stoned3) you add root to group web19:38
stoned4) you make everything inside /var/www owned by www-data (apache user) and owned by group 'www' you just created19:38
stoned5) you set permissions for user and group to be able to read and write ug+rw19:38
stoned6) permission 's' is sticky bit. New files created in /var/www /will take parent directory permissions19:39
stonedfor example after all this19:39
stonedtouch /var/www/tmp19:39
stonedls -l /var/www/tmp will report same permissions as /var/www minus d and x19:39
stonedI hope that helps/explains.19:39
stonedreplman, ^^19:40
verdePsticky bit is so nice, let me quickly drop files from my user account into /var/www19:45
replmanstoned: thank you very much! I will try it this way...19:54
stonedreplman, you are most welcome19:55
replmanstoned: I always get a "fatal: bad ownership or modes for chroot directory component" in auth.log when trying to login through sftp20:07
=== Lightsword_ is now known as Lightsword
budman_http://d.pr/i/2r6y - wth is it just ubuntu 14.04 doing something special? I even tried a 3.11 kernel on the 3.2 kernel boxes.21:17
fridaynextwhat's the proper location for a subdomain, if I currently have /home/fridaynext/public/site.com/public, and I want sub.site.com.21:32
fridaynextwhere does the 'sub' folder go?21:33
webfoxhello guys!22:12
webfoxI was trying to download the ubuntu server for pc-64bit version but all I found was the amd64, is that all right if I install it on a intel processor?22:13
sarnoldwebfox: yup, that's expected :)22:14
webfoxsarnold: why amd64 then?22:14
sarnold(the long story is, intel's 64 bit instruction set was the "itanium" cpu, which took off nearly nowhere and not at all. amd invented the 64 bit extension to the x86 instruction set, so it got called amd64, and then intel capitulated and made clone chips...)22:14
webfoxright, thank you.22:16
rostamHi I have a server with two internet interface , eth0 and eth1. I have installed Ubuntu 12.04. The eth1 is connected to internal network and the server acts as dhcp server on that interface. I like the configure the dhcp server so anything the server reboots it remove the lease file and start again. Is this possible? thx23:04
sarnoldrostam: I'm curious why you want that.. it feels like the kind of thing that wil lcause all kinds of confusion, so I'm hesitant to suggest anything..23:05
rostamsarnold,  agree with you. This is a condition was asked from me, and if you think it is not correct then I will not follow on it. Thanks23:06
sarnoldrostam: well, until I know more about it I don't want to say it is wrong -- but I think the clients that have been handed addresses might not expect their lease to be revoked when the server reboots.23:07
rostamsarnold,  in our test bed, we are experimenting on network configuration, so anything they change something they expect the dhcp request to be honored but the system does not since it has already leased the available IPs. I hope this is clear. However, if I want to just test this condition (renew lease time) is there a option? thx23:09
sarnoldrostam: okay, that's good enough for me :) hehe23:10
sarnoldrostam: the first thing I'd try is adding some lines to the dhcpd upstart or sysv-init file to delete the leases database23:10
rostamsarnold, any pointer  how I can investigate this? thx23:11
sarnoldrostam: sure, check the manpage for the dhcpd for the path to the leases database; if it doesn't say, look around in /var/lib/, it probably lives there.23:12
sarnoldrostam: then look in /etc/init/dhcpd or /etc/init.d/dhcpd or something similar for the script that starts the service -- just add a 'rm /var/lib/whatever || true' command in the right place -- the || true will make the command exit with success even if the file doesn't already exist, which might be handy23:13
rostamsarnold, thanks23:13
=== sarnold_ is now known as sarnold

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!