[00:22] evening [00:58] evening [03:56] netsplit galore === TDJACR is now known as PennAppsBot === PennAppsBot is now known as TDJACR === justizin_ is now known as justizin === ben14_ is now known as ben14 [07:07] Hi anyoen can give me a hand with what format i use to setup IPAlias in Ubuntu [07:08] (server 12.04LTS) === hilarie_ is now known as hilarie === hilarie_ is now known as hilarie [07:32] Good morning. === hilarie_ is now known as hilarie === Lcawte|Away is now known as Lcawte === bekks_ is now known as bekks === dw3 is now known as dw1 === Ursinha is now known as Ursinha-afk [11:20] How long should ntpd to update the clock? [11:41] hi all [11:41] Whats the best way to make a user with no permissions for use as an SSH tunnel only [13:16] joe_dm: command="/bin/echo Thou shall not pass!",no-pty,no-X11-forwarding,no-agent-forwarding,permitopen="forward_to_ip:foward_to_port" ssh-rsa ... [13:18] andol: Thanks, I ended up giving it rbash [13:19] and added this to bashrc [13:19] [ -t 0 ] && read -p "Press [Enter] to exit..." && exit [13:19] and trap the escape ctrl [13:21] joe_dm: But will .bashrc help you in case someone just does a "ssh servername command" then? [13:21] andol: no, where do I put your stuff into? [13:22] That is authorized_keys entries [13:22] Putting it infront of the key you are using [13:23] joe_dm: Full example at http://paste.ubuntu.com/7558712/ [13:25] andol: where is the authorized_keys stored, is it a per user thing in the home directory? [13:26] By default, though this can be configured otherwise [13:26] The default is ~/.ssh/authorized_keys [13:27] isn't ~ just shortcut for home? [13:27] Yepp [13:27] The config option is AuthorizedKeysFile [13:27] user is ssh-tunnel and i cant find /home/ssh-tunnel/.ssh [13:28] You need to create it yourself if you want it. [13:28] do i need to generate a key too then? [13:30] Oh, were you trying to set it up using password authentication? [13:31] yeah [13:31] I have a media server with a Celeron G1610 and no video card - would it be pointless to mine bitcoin with it? [13:31] yes, very pointless [13:31] very very pointless [13:32] you might get one in a few hundered years [13:32] Gotcha. Definitely will avoid it. [13:32] even with a GPU the ASICs have made them almost pointless [13:32] I want to start using BTC for some transactions, and I figured since I have the media server, why not use it for something else - but I'll leave that 'something else' for non-futile efforts. [13:33] And the ASICs are incredibly expensive. [13:33] I'll leave you to decide that [13:34] well the one's i've looked at are. [13:34] unless someone else is paying your electricity bill, it doesn't work out anymore. it's cheaper to buy the btc than to cpu/gpu mine them. [13:35] thats one opinion. I know people who would disagree [13:35] Is there anything useful a G1610 running ubuntu server 12.04 can be doing all day, since I leave it on anyway? [13:35] like should I do folding@home? [13:35] anything you make it do will make it use more electricity, keep that in mind [13:36] Yeah I guess I should just aim to get rid of it completely, and switch to a basic NAS setup, for even lower electricity usage. [13:40] andol: would rbash be enough to secure me from people running commands with ssh? [13:56] joe_dm: I have never looked into rbash myself. [13:56] what about using sudoers to strip all commands? [13:57] or alias all commands to echo "access denied" [14:44] i'm looking for a bit of help getting a grub script and initrd customized to boot my rather member:strange looking raid setup. the problem i'm having is that i'm booted from ubuntu 14.04 liveCD and can't get the system to boot. how do i make a grub script for the non-live filesystem? [15:12] Gallomimia: Which RAID level do you try to boot? [15:17] the raid is a level 5, but boot is on a partition that is not raided. a small slice of the first drive in the raid. if i can swing it i'd like to raid1 that partition to all 3 drives [15:17] So the short answer is "no raid". [15:18] And whats the exact issue you have? [15:23] bekks: i have no bootloader for that install. i need to config grub properly, and get an initrd that will mount assemble the raid, ask for the crypto passphrase, and get lvm going since the rootfs is on that. i actually don't know where to start, and my system is as yet only running in liveCD [15:24] Then why dont you install grub? [15:24] did that... it works. boots up to grub. doesn't go any further [15:24] blank screen. tried nomodeset [15:26] Remove "quiet splash" so it can show any errors [15:26] ah, a good place to start [15:34] i can't find any option of quiet splash in the grub config... [15:55] Gallomimia: just edit the kernel command line in grub's boot menu, that should be enough for testing. But what you're looking for is in /etc/default/grub, "GRUB_CMDLINE_LINUX_DEFAULT" [16:13] dasjoe: why would the files in /etc/default/grub on my liveCD affect my config for main boot? don't i need to run update-grub or something? wouldn't that update the grub config for the liveCD instead? [16:15] Gallomimia: I didn't mean your Live CD environment, sorry for being unclear. I assumed you chrooted into your installation and were looking for some of grub's configuration [16:15] hmmmmm [16:15] chroot into my installation. that sounds like a good thing to do [16:16] maybe i should try that after i reboot and edit the grub menu to try no quiet splash [16:17] if i chroot into my installation, i can run things like mkinitramfs and grub-mkconfig and update-grub? [16:17] Sure [16:17] can i also run apt-get install and get packages installed on that installation? [16:18] it's like a light brighter than a welding arc has come on and overpowered my half dozen candles with focusing mirrors [16:28] how does chroot work for a single user? [16:28] can you chroot just one user so whenever that user logs in they are in like a jail? [16:29] or does chroot apply to everyone? [16:35] neither [16:36] you can do whatever you want with chroot, the issue with chroot is, everything must be inside it, all programs, libraries, and crap that user needs [16:37] not for me as I just want the user to be able to open a bash to hold ssh tunnels open via putty [16:37] How do you run chroot for a single user? [16:37] hmm, heh? [16:37] you can't run bash in a chroot [16:38] without first installing every single thing bash depends on inside that chroot first [16:38] ? [16:38] lol [16:38] chroot cuts that *program* off from the rest of the disk [16:38] so everything anything you do in the chroot, needs everything to exists in there [16:39] surely there is a standard way to do it or a program that automates it? [16:39] seems like jails would be in demand [16:39] jails are the same as a chroot [16:39] if not chroot is there a good way to make a jail or sandbox [16:39] except it also limits program/network/... stacks [16:40] doing any kind of jail/sandbox will have the same limits [16:40] do you really expect the jail/sandbox/chroot to go OUTSIDE, to grab things? [16:40] that would be a huge security issue [16:40] why you basically need to copy /lib /usr into your chroot [16:40] no, I expect it to never get outside. [16:41] I'll do the googles in the morning. almost 3am here. [16:41] I get what you mean though :) [16:45] <[lutchy]> There is Restricted BASH ? [16:46] <[lutchy]> If it's just for SSH Tunnel, how about /bin/nologin ? [17:06] Hi, I have a question regarding screen savers / powerdown on ubuntu server. I am running several ubuntu servers on laptops. My problems is that after a while the screen goes blank, as in white. How can i turn this feature off ? === Ursinha-afk is now known as Ursinha [17:15] tried setterm -blank 0 [17:15] hope it will work, but i doubt it === justizin_ is now known as justizin [17:20] Booting issue with clean install of headless 14.04 server. Will only boot with ‘nomodeset’ flag on kernel line of boot loader. Verified UUID matches fstab and blkid. Freezes during adding swap. Never had this issue on previous releases. Can anyone advise? === Ursinha is now known as Ursinha-afk [18:50] I'm trying to upgrade my 12.04 LTS server to 14.04 LTS via 'sudo do-release-upgrade', but that returns 'No new release found'. If I do a 'sudo do-release-upgrade -d', don't that take me to the next development release, 12.10? [19:03] subman: 12.04 to 14.04 will be available when 14.04.1 is released. [19:03] bekks, thanks! [19:04] subman: the "next" development release is 14.10 [19:09] bekks, right, but from my 12.04 LTS, the 'next' development release seen would be 12.10, no? [19:11] subman: I tried doing do-release-upgrade -d on a 12.04 server, and it wanted to give me 14.04. Might have helped that I had /etc/update-manager/release-upgrades set to include "Prompt=lts". [19:14] andol, Mine is also set to Prompt=lts [19:16] andol, Oh, I see what you are saying now. With the '-d' option you get 12.04>14.04 [19:21] subman: Yepp [19:21] andol, doing it right now, thanks. [19:23] np [19:54] subman: No. The next development release is 14.10 [19:55] subman: 14.04 is the development release until 14.04.1 is released. [19:55] bekks, Ah, got it. [19:56] This is not a production server anyway, no worries at all here with experimentation. Gotta learn somehow! === InFierno is now known as elfuego [20:28] Is there a way to tell what caused my server (12.04) to shut down? I looked through auth.log and kern.log and can't find anything suspicious. [20:29] It just looks like it shut down gracefully for no apparent reason in the middle of the night last night [20:31] elliotd123: there should be something in the logs. maybe you had a power problem [20:31] no it's a VM in ESXi, and there's other VMs on the same server that didn't crash [20:31] is there a way to tell what user might have sent an "init 0" signal or the like? [20:33] elliotd123: look for suspicious sudo commands in auth.log . is there a root password set? [20:35] no there's no root password set, and auth.log shows normal stuff right up until it got powered off - doesn't look like anyone logged in or anything right before hand [20:42] no sudo commands [20:44] does "PAM service(sshd) ignoring max retries" means someone is brute forcing ssh? [20:45] or is any kind of script or application trying to login ssh too fast or too many times [20:46] hxm: that could be - but I'm not sure why that would crash the server. Doesn't sshd by default start dropping connections when there's too many? [20:47] does not crash, im just in a ssh session and I see that message [20:48] oh sorry I thought you were responding ot my question haha [21:26] ubuntu 12.04 ... can't get tomahawk to play sound. It requires vlc backend which I installed... is there something else I need to do? [23:43] My vServer is horribly under capacity. Where can I find some folks who want to have something hosted to get rid of this ressource-wasting