[00:00] catdaemon…yes indeed [00:00] use key based authentication for good security, don't worry about blocking/changing the ssh port [00:00] catdaemon…isnt allow 80/tcp and allow 443/tcp the equivalent of allow http and https? [00:00] lorfds: well, blanket-allowing is probably fine, sshd hasn't had a huge problem in ages. [00:01] or does ipv6 change things? [00:01] I like using the names as it adds both rules by itself but it doesn't matter [00:02] what do you think about timezone? [00:03] is utc best? [00:03] i havent set up my own production server in a while, and i dont know what the kids are doing these days [00:03] damn kids [00:03] :P [00:03] depends what you're doing I guess [00:03] web server [00:03] I use UTC because it's the same as GMT and I live in london so it's gr8 [00:03] serving u.s. mostly [00:04] if you have staff/users in multiple timezones then I'd do UTC, but if you're the only admin, local is fine [00:04] i am…for now [00:04] just use UTC so you know it's UTC and don't have to worry about programs being weird [00:04] yeah thats why im thinking [00:04] Catdaemon: eh? I thought UK did summer-time as well and moves away from UTC for a few months each year? [00:05] yeah we do have BST but for 6 months of the year the time is correct [00:05] a broken clock is right twice a day! [00:05] :D [00:24] hi guys, so i have my ubuntu server and i was thing about backup systems. What do you recommend? Nas with UPS? [00:37] Hi guys, i have a ubuntu server and i wonder what is the best way to back it up? NAS with UPS? [00:38] ahmadgbg: "best" varies from person to person.. [00:38] ahmadgbg: some people like making CDs or tapes of their data, it's easy to store those off-site .. [00:38] ahmadgbg: some people like rsync t oanother server, as you've described [00:38] Cost, convenience, retention all go into that mix [00:38] ahmadgbg: some people like to upload to e.g. amazon glacier [00:42] sarnold: So if i back it up with NAS, is that a good solution for ubuntu? [00:43] ahmadgbg: it can be, yes [00:43] sarnold: how does the backup work? do i need the same drives as in the server (storage)? [00:44] sarnold: or will i create a raid in the nas? [00:44] ahmadgbg: no, you can use whatever you want in the NAS system [00:45] ahmadgbg: you'll run a program like rsnapshot or rsync or amanda or bacula or duplicity or whatever to back up to your NAS system [00:45] sarnold: lets say a drive failes in the server in a raid, the NAS drives are seperate from that right? [00:47] sarnold: the backup is just the files right? not the whole raid system for the server [00:52] ahmadgbg: right, your NAS-based backup should still be there [00:53] ahmadgbg: depending upon your backup type, maybe your NAS would have synced from the server and destroyed some of the backup data. [00:53] you need to evaluate the software you pick to make sure it can recover what it needs to when you need it [00:55] sarnold: okey! thanks! [02:09] evening i m trying to get channel bonding to work on ubuntu server 14.04 but no dice so far [02:09] any help would be apreciated [04:45] I'm highly confused but for some reason my server can't connect to services at 127.0.0.1. I checked /etc/hosts and it's mapped to localhost. Unsurprisingly, localhost doesn't work either. [04:46] i.e.: GET http://localhost:3001/socket.io/1/?t=1400301947427 net::ERR_CONNECTION_REFUSED // GET http://127.0.0.1:3001/socket.io/1/?t=1400301947427 net::ERR_CONNECTION_REFUSED [04:48] firewall on? [04:50] iptables yes [04:50] but i opened those ports [04:51] -A INPUT -p tcp --dport 3001 -j ACCEPT [04:51] -A INPUT -p udp --dport 3001 -j ACCEPT [04:52] hmm [04:52] wget http://localhost and wget http://127.0.0.1 worked. Weeeird. [04:53] sometimes ufw get in the way too [04:53] Ah solved it, I'm stupid haha. It was JS running 127.0.0.1, which is ran on my machine [04:53] ah [04:53] Lol fail [04:53] meh happens === InFierno is now known as InFierno|AFK === esde is now known as Guest57172 [08:03] hey guys I have a number of accounts which are already on my server. What would be the easiest way to set a password expiration on them all at once [08:05] for acc in account1 account2 account3; do sudo passwd -d $acc; done # untested [08:06] bekks: any tested manner? [08:06] Just test it out. [08:07] I wont do anything automagically reading from /etc/passwd since you might accidentially disable a needed account, too. [08:10] bekks: so in a nutshell you are saying its safer to just do it individually [08:10] Yes. [08:11] ok no problem gives me a good opportunity to clear out old accounts === geowany_ is now known as geowany [09:48] Good morning. === Guest57172 is now known as esde [11:58] hi during installation of third party kernel module, lttng, I get following error: Can't read private key. Here is the pastebin for it: http://paste.debian.net/100134/ === Ursinha is now known as Ursinha-afk === Ursinha-afk is now known as Ursinha === ciscam5 is now known as ciscam === dw3 is now known as dw1 [20:52] i have some servers where init appears to have gone a little insane at 2.5GB RAM and 80-100% cpu usage, is there any way i can investigate this? [21:08] i enabled the debug log, it seems to be in a constant loop of "init: job_register: Registered instance /com/ubuntu/Upstart/jobs/network_2dinterface_2dsecurity/network_2dinterface_2fvethQMF01R" with various interfaces [21:14] i fear there are too many NICs "registered" [21:15] So how many interfaces are registered? [21:15] i don't know, how can i find out? [21:15] ifconfig -a would be a start [21:17] there are about 350 currently active interfaces [21:17] In a single server? :) [21:17] indeed :) [21:17] Which hardware is that? :P [21:17] Sounds like a docker host [21:18] it is a lxc host, yes [21:18] but by itself, that's not a problem, i have a recently rebooted host with the same numbr of instances and no load from upstart [21:19] so i'm thinking that over time an increasing number of old no longer used interfaces might be getting registered with some database [21:26] no, on second thoughts, it's not that, that only happens once when changing the log level, i don't know what's actually upsetting it :( [21:40] i also have another server that's not started any services after a reboot, i'm hoping it's just running a rather long disk check, but it's been an hour :( === Malediction_ is now known as Malediction [23:05] Sorry, but this is probably the better place anyway. [23:06] So, the interface file. I don't see a place for that in vbox gui. I"ll ask on #vbox too. [23:06] xeno2, hi [23:06] Sorry, but this is probably the better place anyway. [23:06] So, the interface file. I don't see a place for that in vbox gui. I"ll ask on #vbox too. [23:06] xeno2, I agree [23:06] Is that in VBoxManage? [23:07] (and actually, these are VBox questions, so perhaps this isn't the best either) [23:07] no, we are talking about interfaces file in your guest. - vbox doesn't let you change ips from the outside [23:07] xeo2, PM me? [23:09] PM? [23:09] xeo2, only a suggestion, if you want to talk privately via "private messages" (PM) here. [23:10] Ok. In /etc/network directory or some such? [23:10] xeno2, yes [23:10] Thank you for your patience. [23:11] xeno2, I got time, and had similar problems, also it's fun. - You're welcome ;) [23:12] Ubuntu doesn't work with the mouse. [23:13] I see a line: iface eth0 inet dhcp [23:13] In interfaces already. [23:13] Above that auto eth0 [23:13] that'S okay [23:13] Then before that lo is defined first. [23:13] perfect [23:14] so should it be [23:14] iterfaces = checked. [23:14] next step: the network-manager in your gui [23:14] we define eth0 as static interface [23:16] This server doesn't have a GUI. It's not nice like the Debian one. [23:17] xeno2, I'm so sorry, my bad. we are on a server then? okay [23:17] Isn't there a plain iface command? You used to be able to use ifconfig to define these, but I've never done it with iface. [23:17] So just use ifconfig [23:17] so we want to change the /etc/network/interfaces with "sudo nano ..." [23:18] bekks, why [23:18] Yelu: cheater ;) [23:18] bekks, hi, thank you for the cheater, but why I'm? :) [23:18] Yelu: Why not? ifconfig works, so no need to learn new commands for a tasks solution with known commands [23:19] Yelu: Because that was the most obvious approach ;) [23:19] bekks, xeno2, so we do it as a team, okay? [23:19] Consider me being level 2 support at this point ;) [23:20] nice [23:20] Okay, I tried a few things from a web example, and so far it rejects. [23:20] xeno2, your are awake? [23:20] I cannot pull it off, because no network connection. [23:20] ok [23:21] So there is no cut and past of examples, because ubuntu server doesn't handle that well. [23:21] xeno2, I'll give you my interfaces, please be patient a short time ... thx [23:21] But if I can see one that works, I can transcribe it. I found http://askubuntu.com/questions/342705/how-to-set-a-static-ip-address, but that multi-line thing doesn't seem to work for me. [23:25] xeno2, here you go => http://paste.ubuntu.com/7480860/ [23:25] I will try. [23:26] xeno2, you have to pick an ip out of your subnet range of your (real) local lan, which isn't used [23:26] It is saying "Cannot find device eth0" [23:26] xeno2, anf thiink about your firewall [23:27] xeno2, and think about your firewall [23:27] And I try the syntax, and I get around the restart failures except that. [23:27] No firewall. [23:27] Just behind cable ISP. [23:27] Keep in mind, the original vm works. It's just the clone that doesn't pick up the dhcp. [23:27] lol ubuntu 12.04 only 64bit? [23:27] That makes me think it's something that gets dropped in the cloning. [23:27] what is the outcome of ifdown eth0 and ifup eth0 [23:28] ...I'll try. [23:28] yes, you cloned a guest ... mmmh [23:28] interface eth0 not configured. [23:28] That was the ifdown response. [23:28] lol ubuntu 14.04 only 64bit? [23:29] So 14.04 didn't do this, but Chef server won't work with 14.04. [23:29] hello, is there a way to encrypt root file system that will boot system w/o password, but wont allow single user boot w/o password? [23:29] rataplan for ifup [23:29] What is rataplan? [23:29] if you beat a drum (like at a execution ...) [23:30] only joking ... [23:30] I wonder if there is something that just automatically gets dropped from the vm in cloning. [23:30] yo-yo! [23:30] It might be something 14.04 and Debian work around fine, but 12.04 Ubuntu didn't work with. [23:31] xeo2, another way could be, to power down the vm and delete the interface and set it up as new [23:31] Ok. I'll try that. [23:31] xeno2, or to leave the first interface as is and set up an additinal one (which is to add in the guest again) [23:32] Yes. [23:33] Weird. It only allows me one eth, and that's eth0. [23:33] This was a full clone, not a linked, by the way. [23:34] It doesn't want to let me change it through the GUI. [23:35] xeno2, but it isn't running? - Then you can't change things there. [23:36] No, it was powered down. [23:37] You cannot use NAT Network at that point. It won't save. [23:37] xeno2, ok, another approach would be, to try to give the vm a new interace via VMBoxManage with CLI [23:37] I tried a NAT, and a Local. It won't allow me to add a second eth, like eth1. I only get eth0 Bridged. [23:38] Yes..checking results after boot first. [23:38] xeno2, how about changes to eth0 [23:38] xeo2, also not possible? [23:38] No, it still blocks on boot for waiting eth0. [23:38] I looked at advanced, and that didn't seem to have anything interesting. Specific suggestions? [23:39] xeo2, not atm - thinking ... [23:39] It did not pick up anything for any of my 3 interfaces. [23:39] It's like NICS Aren't Us in Clones. [23:40] xeno2, I did never have a vm, which behaved like that ehen it comes to changing interface parmeter and the like ... [23:40] ŵhen [23:41] Well, I have seen Ubuntu behave this way otherwise, a little, but I don't have helpful knowledge to fix it. [23:42] I'll try to mimic your scenario here in my place - which is your setup? 14.04 Desktop as Vbox-Host? and a 14.04 Server as guest? [23:42] I just checked the original once again, and it boots fine, and gets the network fine. [23:43] xeno2, then make a file system copy of the .vdi and change the uuid of the machine , power down the origiinal (if running) nd start the new vm and ceck [23:43] ^check [23:44] xeno2,if it behaves right, hust power down add or change the interface to your needs and check that. [23:44] Okay,..uuid? [23:44] xeno2, please stand by ... [23:47] xeno2, vbox manual chapter 8.24 this is a command line interface cloning procedure [23:47] Ok I'll look that up. [23:49] xwno2, maybe this gives us also a proof, if it is the GUI function call which is causing your problem [23:49] Okay, you are NOT saying this is what causes the problem, but cloning this way may avoid it? [23:50] The term "registered virtual hard disk image" is confusing me. [23:50] xeno2, I'm not sure, as I told you, that this behaviour is also unknown to me. - I wanted to test this next week [23:50] xeo2, reading ... [23:51] Yes. Well, it appears I'm deadending on Chef server tonight. I'm sorry. It is better not to burn yourself out when you're not ready. I will try to help you when you have time, and you can reach me at the email I gave you. [23:52] xeno2, yes, registered is a machine, which is known by the progrm VirtualBox (you alreay cloned such a first machine) [23:52] But I don't want to pull you in unfairly. [23:54] gentlemen, and ladies.. is there such thing as encrypted root fs w/o password, but single user mode would require pass? [23:55] xeno2, I've got no boss, so it's up to me, how I spend my time. - But if you want to suspend the work, it's no problem ;) [23:55] I just reviewed the 14.04 clone, and comes up clean and fast. [23:56] So it is apparently specific to the 12.04 Ubuntu. [23:56] xeno2, so this would be a good base to start again from? [23:56] But it's only the clone of the 12.04, and not the original, that yields the problem. [23:56] xeno2, I see [23:56] xeno2, why not stick with 14.04? [23:56] If you can suggest a bunch of combinations to clone by hand, I would be glad to try each one and see how they boot. [23:57] Because chef server does not support it yet. They only have a take home install for 12.04 and earlier. [23:58] Everyone else works off the cloud, and perhaps that's what I should do. However, I'd be happy to try the aforementioned combinations if you want, and it would be better for me to make it work. [23:58] Otherwise, it just means I need to install on my original. [23:58] And I can make more originals. [23:59] So you don't hurt me to stop now, but I'm glad to go forward if you have some combination you'd like me to try. [23:59] xeno2, I will give you a cli cloning command i a couple of minutes (have to re-read manual or re-find my script)