/srv/irclogs.ubuntu.com/2014/07/10/#ubuntu-server.txt

OssumPawesomehello I'm trying to remotely forward a port using ssh on my ubuntu web server. So far I can get 192.168 loaded up through elinks/links2, but when I fill out the port forwarding form nothing changes and my new forwarded port is not added to the list. could anyone help me with this?04:58
=== NCommand` is now known as NCommander
=== NCommander is now known as Guest2749
=== Guest2749 is now known as NCommander
sarnoldOssumPawesome: are you using ssh's actual port forwarding mechanisms (-L and -R) or are you just happening to use elinks over an ssh connection to try to configure port forwarding on some -other- device like a home router?05:27
OssumPawesomethe second one sarnold05:37
OssumPawesomemy router05:38
sarnoldOssumPawesome: many router interfaces require javascript in order for 'submit' buttons to work -- or, they even lack the submit buttons entirely on the assumption that the javascript will Just Work05:39
OssumPawesomesarnold, if youre still there - is there a way i could get javascript to work on command line or somehow open a port on my router a different way?06:14
sarnoldOssumPawesome: try ssh -L 8888:192.168.1.1:80 servername --- then aim your firefox or chrome to localhost:888806:17
sarnoldOssumPawesome: of course if you have to connect to to it with ssl, it'll take a bit more work, probably you'll have to run 'ssh' as root, and also add -L 443:192.168.1.1:443 so that https://localhost/  will load the remote router page..06:17
OssumPawesomeyeah im doing this remotely so everythings gotta go through ssh06:19
OssumPawesomewhat is ssl?06:19
sarnoldOssumPawesome: SSL is secure-sockets-layer, the original name for the new TLS, transport layer security -- it's the little lock icon in the web browsers, the "s" in "https"06:22
=== liam_ is now known as Guest5405
OssumPawesomesarnold, it works! thank you so much you are a beautiful human being. I honestly did not expect to be able to do this remotely. Thanks again06:35
sarnoldOssumPawesome: hehehe :) glad it worked for you :)06:36
sarnoldOssumPawesome: ssh -L and -R are awesome powerful things. they can get you out of trouble or create all kinds of trouble :) have fun!06:36
maxbssh -D is even more awesome :-)06:37
sarnoldmaxb: wow, I haven't seen that one before. looks awesome. ssh -D blort, then go set your socks proxy in firefox, and OMG EVERYTHING WORKS ? :)06:39
maxbPretty much06:40
sarnoldmaxb: cool :) thanks06:40
maxbAnd then you combine it with tsocks, and you can run pretty much anything over it06:41
sarnoldoooh.06:41
sarnoldvery cool. :)06:41
maxbVery handy for "I want to run this as if I was within my datacentre"06:42
maxbor reconfiguring the ADSL router in an office on the other side of the globe06:43
=== Solution-X is now known as Solution-X|AFK
pds_hi ladies and gentlemen i'm trying to kickstart a ubuntu server 14.04 LTS with a ubuntu desktop 12.04LTS, following this tutorial http://digitalsanctum.com/2013/03/22/how-to-setup-a-pxe-server-on-ubuntu/ using this kickstart file i create with the gui (http://paste.ubuntu.com/7773935/). It boots up just fine but it doesn't seem to want to automate.07:59
stemida kickstart file is not enough pds_, you also need to modify the boot parameters in the pxe files.08:07
stemidto point to the ks file08:07
stemidalso any incorrect command in the ks file will halt the automated install and ask for input.08:07
stemidand I've only pxe booted debian, never ubuntu, but debian does not have full KS support. I still have to use preseed.08:08
pds_stemid what precisely do i need to modify?08:09
stemidwell you should find a complete tutorial that also covers the PXE files. I can only speak from experience with Debian and RHEL. I tend to modify pxelinux.cfg/debian-installer/amd64/pxelinux.cfg08:10
root-userHey guys, question here maybe someone can help. Yesterday i did "sudo chmod 600 //"  and now my system wont boot and i cant login trough console. Anybody knows a solution maybe?08:11
stemidyou could try booting a live CD, mounting your root filesystem and doing chmod 0755 on it08:13
root-userThanks, read about it but not tried it yet. btw, doest the chmod 600 // means that i have changed file permissions on the entire system :o?08:14
stemidno, you did not use -R08:15
stemidthankfully08:15
stemidso hopefully you only need to reset / to 0755 and then boot up.08:15
root-userAh, that's a relief! Let me try it :)08:15
pds_stemid i'm been messing around with kickstart files for to damn long08:47
pds_trying preseeding now08:47
pds_http://sfxpt.wordpress.com/2013/06/09/get-the-debianubuntu-ready-and-customized-the-way-you-like-in-10-minutes/08:47
=== Eisbrecher_xnox is now known as xnox
root-userstemid, u still here? I booted from live disc, and mounted my file system. Got a terminal but when i try to chmod 0755 it says "unable to open /etc/sudoers: permission denied"  Could you tell from this what I need to do?09:41
pds_is there any documentation any where on the interwebs on how to automate the installation of ubuntu server09:55
root-user@Stemid,  thanks! your guided me in the right direction, fixed now with the liveCD :)!10:07
=== psivaa-off is now known as psivaa
pds_kickstarting ubuntu server getting the installer failed to download a file from the mirror.12:23
hron85Hi! Can anyone help me with joining a 14.04 server into the AD? I successfully joined the server, wbinfo -u and wbinfo -g works correctly. getent passwd $USERNAME works correctly, however the getent passwd does not lists any windows user.12:25
hron85I do not know it is related or not, but sshd says initgroups: invalid argument when i try to log in into the server with my windows account12:25
peetaur2pds_: I found kickstart (an alien system) to suck terribly in Ubuntu, so I use preseed only (which is native to Debian). I doubt it's related though.12:26
peetaur2kickstart comes from redhat12:27
peetaur2pds_: do you use a caching server? I recommend apt-cacher-ng12:28
pds_nope just a simple nginx server12:29
peetaur2is it a mirror? or unrelated to packages? I'm talking about the packaging proxy12:32
hron85anyone with samba knowledge?12:33
pds_but i'm open for suggestions reading the help.ubuntu about preseeding12:33
pds_extracted the ubuntu iso the my nginx www/ubuntu12:34
pds_join #ubuntu-nl12:34
peetaur2I'm not so sure extracting the iso is the best way to do it12:35
pds_just following http://digitalsanctum.com/2013/03/22/how-to-setup-a-pxe-server-on-ubuntu/12:35
pds_brb12:35
peetaur2pds_: what I used (maybe) was this http://www.linuxquestions.org/questions/linux-newbie-8/automated-remote-installs-of-ubuntu-using-kickstart-802660/ and then modified it heavily... so in partcular look at the "Step 3. Copy the netboot files into the tftp server."12:36
peetaur2I am not sure really where all my notes came from ;) but that link was in my notes12:36
pds_yup did that12:36
peetaur2so if you downloaded the netboot stuff, then you don't need any iso ...12:37
peetaur2and you shouldn't need a web server except for kickstart12:37
peetaur2and I couldn't get various methods to work for supplying the preseed.cfg... so I put it in the initrd cpio.gz12:38
peetaur2but you might find a way to put it on the web (but it is kinda wrong since that means you can't configure network in pressed then)12:39
AtuMpds_, http://linux.opm.si/programska-oprema/ubuntu-14-04-network-install12:39
AtuMpds_, these are my notes written after I got this to work.. kickstart is almost unusable in 14.04.. use preseed and use my notes to get ahead12:41
pds_hmmmz12:41
peetaur2AtuM: heh oh nice. Good thing I never even tried kickstart in 14.04 because I already found it bad in 12.04 or whatever I started with. (where it worked for basics, but didn't do network, disk, keyboard, language, :D [anyuthing but proxy I think] properly)12:42
peetaur2but it had a purdy GUI ;)12:43
AtuMpeetaur2, well.. GUIs are sometimes evil ;-)12:43
pds_kk12:43
pds_so back to the drawing board12:43
pds_read the fricking preseed files12:44
peetaur2and FYI I found partitioning horrid in preseed... they reinvented the wheel. All they would need to give you is some parted, mdadm, lvcreate, etc. commands, but they made a thing that is limited in some ways (have to use whole disk, can't have a mix of raid and not, can't keep old partitions, etc.)12:45
pds_so you guys would go for preseeding instead of kickstart12:46
peetaur2on a debian based system, yes for sure12:46
AtuMpeetaur2, I do manual partitioning.. I only use network install so I don't need to add a dvd unit to servers12:46
peetaur2you can also just leave the partitioning blank and it'll prompt during install12:47
AtuMpds_, you don't have a choice.. preseed is debian based.. kickstart does not work for debian12:47
pds_kickstart does kinda work :)12:47
pds_but i guess i'm trying to hard :)12:47
peetaur2on the last mass install I did just that... had a pre-script that downloaded a chroot with the tools I needed, unpacked it, and then I hit ctrl+f2 and did my partitioning in there :D  (for 73 servers... would have been nice if preseed partitioning didn't suck)12:48
peetaur2my chroot had a script of course12:48
peetaur2but still manually connecting to each kvm over IP and hitting a few buttons is stupid12:48
AtuMpds_, when you get kickstart to work properly, please give me a shout and a link to your manual :)12:49
pds_let me note some stuff down12:50
pds_ask peetaur2 and AtuM stuff about preeseeding :)12:50
pds_btw i actually got it allmost working12:53
pds_http://www.tiikoni.com/tis/view/?id=bb55c7912:53
AtuMoh.. I see it's almost installed :D12:54
peetaur2I don't know what it's doing there, but what (I imagine) mine does is:    install base system from CD (like your download), and then since it's a proper netboot, installs non-base stuff (ssh server for example) from the network, using the caching server. So if you just have one repo set that is your server, but it has no extra stuff not on the cd, then it'll fail there.12:55
peetaur2so I think you need a proper netboot with a simple caching server. (apt-cacher-ng is super easy to set up... basically just install, and it works already, no repos to set up like the stupid aptproxy which was horribly designed)12:56
AtuMpeetaur2, you use kickstart for this?12:58
AtuMpeetaur2, I don't think pds_ got as far as installing the os. I don't see how this can be done with kickstart. I should check how fedora does it, as it basically also writes an image and then expands it to the partition.12:59
pds_well i allmost succeeded no ?13:00
AtuMpds_ depends on what file it's trying to download..13:01
pds_ubuntu local mirror13:02
peetaur2AtuM: no, I tried kickstart, and got it to work with a mix of preseed for things not supported, but later found it had side effects, so moved the kickstart parts to pure preseed, and now it works fine.13:02
AtuMpds_, is this post-install or is it searching for the installer image?13:02
AtuMpds_, installer no longer uses repo to install base os.. it copies an image and expands/extracts it..13:03
AtuMit can later use repo to install extra packages if needed13:04
pds_probably searching for the installer13:05
AtuMpeetaur2, I'va also moved away from kickstart completely.. too bad preseed is not as good for partitioning. lucky for me I don't need that yet13:06
peetaur2kickstart is worse for partitioning btw ;) (at least on Ubuntu)13:07
peetaur2just for someone like me that knows the CLI well, it's far easier to use plain commands like parted, mdadm, pvcreate, lvcreate, etc. to partition a multi-disk system in loops and stuff13:07
AtuMpds_, ok, so you're still far off.. I'd recommend you to stop wasting time with kickstart and forget the nice gui it has13:07
pds_well that was pretty clear13:07
pds_well about a month of research down the drain13:08
pds_woop13:08
peetaur2haha13:08
peetaur2a month wasted13:08
peetaur2it would take you like 3 hours to get a simple preseed file going13:08
peetaur2sorry to tell you only now :(13:08
AtuMpds_, you might want to use the knowledge on redhat systems.. not such a waste in my eyes13:08
peetaur2hehe yes you can look on it positively that way ;)13:08
pds_well since kickstart worked on ubuntu (well the gui that was)  and most of my knowledge is on centos system ...13:09
AtuMwhat I've found is that there is no "ultimate" distro/os.. so every knowledge gained is helpful sooner od later13:09
=== mjohnson151 is now known as mjohnson15
hron85anyone with samba knowledge?13:32
jrwren`ask13:32
hron85jrwren: i already asked, but nobody responded....13:33
jrwrenoh, the getent passwd you expect to list?13:33
hron85yeah, i get rid on getent passwd problem13:33
hron85jrwren: but the latter is still an issue13:34
hron85sshd says initgroups: invalid argument when i try to log in into the server with my windows account13:34
jrwrenmy knowledge in that area is 10+ yrs old. sorry. I only vaguely recall if listing all users ever worked with winbind13:34
hron85it work13:34
hron85s13:34
hron85just have to winbind enum users = yes and same with groups13:35
jrwrenis nscd running?13:38
pds_looking into preseeding found some examples , wondering if there is a list with possible key values13:46
peetaur2look in debian docs... should be there13:47
peetaur2there's one that has all options but commented out13:47
pds_this one ? http://www.debian.org/releases/wheezy/example-preseed.txt13:48
pds_https://help.ubuntu.com/12.04/installation-guide/example-preseed.txt13:49
axisyshow do I look a for a process that matches a name and if its cpu usage is higher than 15% then restart? I could use ps and find the info and restart.. but it might not be safe automate that way..13:49
rberg-I -think- debconf-get-selections will show a list of possible preseed options13:50
axisysmanually is how we are doing it today..13:50
peetaur2pds_: yes probably13:51
peetaur2debconf-get-selections lists options, but they don't necessarily apply to the install process13:51
peetaur2a great command to know though13:51
peetaur2(preseed is not just for installing the OS)13:52
pds_well it gives a lot of options regarding key but not the values13:52
peetaur2axisys: why do you want to do that? some commands need more CPU ... (flash player for example, needs 100% on all cores :D... er no wait, kill that)13:52
rberg-ahh. I use FAI for mass installation and debconf-{g,s}et-selections to avoid debconf questions13:52
pds_flash is just evil :p13:52
axisyspeetaur2: this process when goes higher than cpu .. operation starts lagging13:53
axisysoperation related to the process that is13:53
axisyspeetaur2: we have been seeing this for last few months13:53
axisyspeetaur2: today we are thinking to automate the kill/restart13:53
peetaur2axisys: which process it it?13:54
axisyspeetaur2: tac_plus13:54
axisysI am thinking of converting it to a daemontools service .. so killing/restart will be reliable.. but I want to find a quicker solution until we migrate to new system and move it under daemontools13:56
jrwrenaxisys: have you tried investigating why it is using so much CPU? There might be good reason.13:56
peetaur2some Cisco thing? you'd think they had enough money to hire a better code monkey to fix their stuff...13:56
peetaur2I thought Cisco was one of those "pay 3x as much as it's worth but get it done right" sort of companies13:56
axisyspeetaur2: tac_plus is from tacacs+ pkg provided/opensourced by shrubbery13:57
peetaur2k... so 3rd party13:57
peetaur2well either way, I have no experience with it13:57
axisysjrwren: we did not find anything unusual .. every session ties to a core.. probably limited by disk IO and new system will have lot more memory and SSD disk13:58
axisysbut trying to find a hack to find a process with high cpu usage and automate the kill/restart13:59
axisyspeetaur2: ^13:59
axisyspython's psutil looks pretty nice13:59
pds_http://paste.ubuntu.com/7775297/ debconf-get-selections13:59
peetaur2what's wrong with using ps -c and -o to find pid by name, then check cpu, and kill if high?14:02
peetaur2sounds like a short script14:02
peetaur2-C that is14:03
pds_hmmm examples of preeseeding files are nice but i need to find the correct keys :)14:04
peetaur2axisys: ps -C tac_plus -o "pid,%cpu"14:04
axisyspeetaur2: looking at that switch now14:04
peetaur2the big example probably has most install-related keys, just not all values14:05
peetaur2then find the docs that go with it to explain values14:05
pds_i've been looking for explinations of keys but couldn't find a decent website for it just yet14:05
peetaur2well, link the official docs to prove you looked :P and then ask about an option and maybe we know14:06
axisyspeetaur2: I am reading the man ps14:06
pds_https://help.ubuntu.com/12.04/installation-guide/i386/preseed-contents.html14:07
pds_i would like to install ubuntu server in english but with a belgian keyboard14:08
peetaur2pds_: k, well that's the ubuntu guide... the debian one would be more complete. But you also need a question.14:09
peetaur2pds_: sadly I think that's one thing I couldn't get right... at this company we use English language but German (eliminate dead keys) keyboard14:09
pds_well darn14:10
peetaur2pds_: here's what I set in my file, but I don't know if it worked, but clearly variant/model USA is wrong. http://dpaste.com/31K4JCK14:11
axisyspeetaur2: hmm so ps -C tac_plus -o "pid,pcpu,cmd" --sort pcpu is a good start.. looking for a switch like .. display only if the pcpu is higher that 15.00 w/o awk14:12
axisyspeetaur2: thanks for that hint14:12
peetaur2just parse it (rule is if there's a -o sort of thing for format, yes you can parse it) with awk, and then use bash... eatenup=15; if [ "$cpu" -gt "$eatenup" ]; then ...14:13
peetaur2trim away the % first14:14
pds_got something like this14:14
pds_http://dpaste.com/0T7FECW14:14
peetaur2pds_: deleting keys might mean it will ask instead14:15
pds_peetaur what do you mean?14:15
peetaur2I have many more keys in my file, don't I?14:16
peetaur2if you remove them instead of changing the values, it might ask instead during the install14:16
peetaur2and also you have  debian-installer/locale  twice14:17
peetaur2(and so do I... hehe)14:17
pds_let me check14:20
pds_continueing http://dpaste.com/0TEETD214:23
K4kTossing this out again in case anyone is here today that might know the answer.14:53
K4kIf I switch the name of GID 27 from sudo to wheel, will this cause any odd behavior that anyone can think of?14:53
peetaur2K4k: you can probably make 2 groups with same GID14:58
bitfuryHi everyone15:01
K4kpeetaur2: Oh, that's actually possible!? I didn't even think of that because I just assumed it wouldn't let me15:01
bitfuryanyone know what version of tomcat gets installed when I select it during install?15:03
bitfurydoes it go for the latest stable tomcat815:04
cfhowlett!info tomcat bitfury15:04
ubottu'bitfury' is not a valid distribution: extras, kubuntu-backports, kubuntu-experimental, kubuntu-updates, lucid, lucid-backports, lucid-proposed, partner, precise, precise-backports, precise-proposed, quantal, quantal-backports, quantal-proposed, saucy, saucy-backports, saucy-proposed, stable, testing, trusty, trusty-backports, trusty-proposed, unstable, utopic, utopic-backports, utopic-proposed15:04
cfhowlett!info tomcat15:04
ubottuPackage tomcat does not exist in trusty15:04
bitfury!info tomcat815:04
ubottuPackage tomcat8 does not exist in trusty15:04
bitfury:\15:04
bitfurywhat about this http://packages.ubuntu.com/utopic/tomcat815:05
peetaur2K4k: I know it's possible for users, but not sure about groups (since the group file syntax says id and members on same line)15:05
bitfuryoh nvm, failed to read it's universe15:06
K4kpeetaur2: manpage for groupadd indicates there is a -o flag for non-uniq GIDs. Thanks!15:26
peetaur2K4k: nice :)15:27
user123321Suppose I want to install 2 Ubuntu or LUbuntu servers with identical server programs in each one, is CARP good for HA and LB?15:44
K4kACK! Ok, I got my GIDs mixed up. We use GID 10 for wheel in ldap. Ubuntu sets GID 10 as uucp... I wonder if switching the GID for uucp to 14 (same as on Redhat) would break anything so that sudo could be moved to GID 1016:22
K4knope, doesn't appear it does :) yippeee16:34
=== thesheff17_ is now known as thesheff17
zartooshHI how could I have entries in /var/log/boot.log timestamped?16:46
=== jhobbs_ is now known as jhobbs
TJ-zartoosh: That is saved by "/etc/init/plymouth-log.conf", part of the Plymouth graphical boot manager17:03
TJ-zartoosh: I'm not aware of a way to have those messages timestamped unless you edited the Plymouth source-code directly, or intercepted Upstart's console output17:06
zartooshTJ-, thanks for your answer, okay I do not want to touch any source code, so I guess the best is to intercept the upstart's console output.17:07
TJ-zartoosh: I'm thinking that'll be just as difficult!17:08
zartooshTJ- in /etc/init/plymouth-log.conf : It flushes the boot log to disk, so it is not part of creation of entries ...17:09
TJ-zartoosh: Correct17:09
TJ-zartoosh: what is flushed to disk is the contents of the console buffer17:10
TJ-zartoosh: so unless you have a way to intercept and prefix timestamps as the messages are written to the console, there's no way to accurately timestamp them17:11
zartooshTJ-,  oh I see, okay, thank you so much. I did googling yesterday, it seems there is a program called "grab_serial" that may help me on this ...17:12
zartooshHi I have installed ubuntu 14.04. I boot in uefi mode.  Whenever I reboot or powercycle system stops the boot process at grub menu and I have to manually type enter. Is there a parameter I can change so it automatically boot? thanks17:55
geniizartoosh: You can try: edit /etc/default/grub    and see if there is a line like: GRUB_TIMEOUT=        and put some small number there like 5 ( the number is how many seconds to wait before automatic booting). Then after, to do sudo update-grub18:02
geniiIf the GRUB_TIMEOUT line is not there, to add it.18:02
zartooshgenii, there is a GRUB_TIMEOUT set to 2. but still it needs enter... Could be screen resolution ?18:05
geniizartoosh: If it's not prompting you to choose a valid screen resolution each boot, that is probably not it18:06
zartooshgenii, it is not prompting, so it is not display issue. Let me paste the /etc/default/grub ...18:06
zartooshgenii  http://paste.ubuntu.com/777644518:09
geniizartoosh: Looks fine there.18:09
zartooshgenii, could it be because of the uefi mode?18:10
geniizartoosh: That would be my guess. I don't know enough about EFI/UEFI to be of much assistance there, however18:11
zartooshgenii, thanks18:12
user123321Suppose I want to install 2 Ubuntu or LUbuntu servers with identical server programs in each one (eg: Apache and might be other server programs), is CARP good for HA and LB? Does anyone have experience with CARP?18:28
bitbytei’m trying to generate a CA to my webserver know any guides ?19:24
patdk-wkyou don't use CA's on webservers19:25
sarnoldheh, the first guide I find uses des3 and 1024 bit rsa. otherwise decent-looking but perhaps a decade out of date..19:28
zartooshhi I have installed ubuntu 14.04 on my system. Network interface name has changed from eth0 to em1. I removed the biosdevname package with the hope that interface name goes back to eth0, it didn't, any one could help me please?thx19:32
sarnoldzartoosh: look for something like /etc/udev/rules.d/70-net-persisnte-rules or similar19:33
rberg-and delete it!19:33
rberg-I hate that file :)19:33
lordievaderAllways in for trouble that file!19:34
rberg-it will be regenerated on boot but with the names you want this time19:35
zartooshsarnold, rberg-  it seems it did not, during reboot it says it can  not make the link for eth0 device.19:35
zartooshI actually preseeded my installation and during installation I had the biosdevname removed. Then in reboot the file 70-pres... had the device node as "eth" however it did not work either.19:38
lordievaderzartoosh: Does it show any wired network interface?19:39
zartooshlordievader, yes it does19:39
lordievaderzartoosh: Ok, great. So what exactly does not work?19:40
lordievaderIs it that the NIC is still called em1?19:41
zartooshlordievader,  the network interface does not come up either as eth0 or em119:41
lordievaderzartoosh: Could you pastebin the output of both "lspci -k|grep Network" and "ip a s"?19:42
zartooshlordievader, I do not have network access to that system I will do it with use of usb, will take me a few minutes, thank you for trying to help me ...19:43
lordievaderzartoosh: No problem, and take your time ;)19:43
zartooshOne more question , in pervious ubuntu installation like 12.04 I could do Alt+F2 and get console access, but on 14.04 seems this is disabled ?19:44
henkjanzartoosh: try ctrl-alt-f2?19:45
zartooshhenkjan, I am sure I have tried that too, I am rebooting I will try it soon. t19:45
lordievaderzartoosh: That was probably ctrl + alt + f[1-6], indeed.19:46
lordievaderHowever, a server should boot straight into tty1.19:46
zartooshlordievader, I did F2 key, but will try it soon again. thank you again.19:46
zartooshhenkjan, lordievader  Yes the <ctrl> was missing now that issue is gone, thanks19:49
lordievader;)19:49
=== mjohnson151 is now known as mjohnson15
zartooshlordievader,  http://paste.ubuntu.com/7777127  and http://paste.ubuntu.com/777713421:10
bitfuryI'm getting constant broken pipe messages when connecting to a server via ssh21:18
bitfuryClientAliveInterval, CountMax and TCPKeepAlives have been adjusted on the server side21:19
bitfurywhat am I missing? :\21:19
atpa8ahello21:43
atpa8awith vlans, can i assign an IP to both the vlan interface and raw interface?..21:46
atpa8abasically... i want to have an untagged traffic and tagged traffic21:47
=== thumper is now known as thumper-afk
bekksatpa8a: So not tag at all, not explicitely untag/tag.22:11
atpa8abekks: i mean... is it... auto eth0\n iface eth0 inet dhcp\n auto eth0.100\n iface eth0.100 inet dhcp\n raw_device eth0\n?22:16
atpa8adhcp here only for example22:17
bekksatpa8a: No, that are two assignments.22:20
atpa8ahow can i do something like that?22:21
=== thumper-afk is now known as thumper
=== esde is now known as Guest87505
MACscrok, im doing pxe installs of ubuntu for my servers and it appears that plymouth is getting installed, which i dont see a reason to have on a server. Whats the best way to disable it from being installed or removing it alltogether?22:34
ikoniajust disable the splash option in grub22:35
MACscrthat doesnt do it22:35
ikoniait does22:35
MACscrno, plymouth still tries to load22:36
MACscrplus i think its better to just not install it at all on a server22:36
ikoniawhat are you trying to disable, the splash or the whole plytmouth process22:37
MACscrall of plymouth22:37
ikoniayou're going to have problems doing that22:38
MACscrwhy?22:39
justizinanyone have any idea wtf is happening here? : http://pastebin.com/LRenJktv22:44
justizintrying to set up amazon ses per http://docs.aws.amazon.com/ses/latest/DeveloperGuide/postfix.html22:44
MACscrjustizin: ask in #postfix22:44
sarnoldjustizin: apparmor or selinnux or similar? check dmesg | grep DEN to see if apparmor is involved..22:46
justizinnothing from dmesg | grep DEN22:48
=== Guest87505 is now known as esde
justizinapparmor doesn’t have a process running, though i forget if it keeps one22:48
sarnoldit doesn't22:48
justizinwhat’s wierd is that strace says it’s trying to open the target file O_RDONLY, when its’ job is to create it22:48
sarnoldis the open(.. O_RDONLY) an existence-check or something? that's strange..22:49
justizini guess it could be, but it seems odd that it would exit on no such file or directory, since it should be creating the file22:52
sarnoldjustizin: try ls -ld / /etc/ /etc/postfix /etc/postfix/sasl_passwd.db -- see if the permissions look sane22:54
TJ-justizin: can the postfix user read/write that file?22:54
justizinyah i did, i mean, again, i’m root, and the target file doesn’t exist22:54
justizinit doesn’t exist :)22:55
justizinthe error is not lying, but i’m confused as to why the program that should create the .db file fails when it doesn’t exist22:55
justizinhttps://gist.github.com/bitmonk/c1aac7825f28d57835c2 <- more detail22:55
TJ-justizin: your 'strace postmap' is using the .db file as the input22:57
justizinoh yeah, that was the wrong command22:57
justizinhan gon22:58
TJ-justizin: while your at it, can you add the result of "ls -al /etc/postfix/" ?22:58
sarnoldjustizin: so strange that it says "Permission denied" in the short-paste but "No such file or directory" in the strace output..22:59
justizinsarnold: that, too22:59
justizinno that’s from my erroneous paste, new gist coming23:00
justizinhttps://gist.github.com/bitmonk/3fecf9b13e02a408e82b23:01
justizinso it is actually permission denied, that is less confusing23:01
justizinexcept that i am root23:01
justizini am able to create that file with ‘touch'23:01
TJ-justizin: "open("/etc/postfix/__db.sasl_passwd.db", O_RDWR|O_CREAT|O_EXCL, 0644) = -1 EACCES (Permission denied)"23:02
justizinright23:02
TJ-justizin: The file it is failing for is "__db.sasl_passwd.db", presumably a temporary23:03
justizini can touch that as well23:03
sarnoldjustizin: notice the line 299, it changes it's effective uid to 1006.23:03
justizinah23:03
justizinit’s becoming postfix23:03
sarnoldhrm, shouldn't >1000 be for user accounts?23:04
TJ-Yeah, it drops privs, which is why I asked if the postfix user has access to the directory23:04
sarnoldthe postfix user doesn't have write access to the directory23:04
parallel21can cifs be mounted over different subnets?23:04
sarnoldparallel21: afaik cifs can be mounted over the internet, no?23:05
justizinyeah i chown-ed /etc/postfix to the postfix user and i get the same23:05
justizinoh23:05
justizinit’s becoming ‘hm'23:06
justizinright because.. augh.. i hate this, i want so bad to undo it ;d23:06
justizinwe run _everything_ as one user, because no reason23:06
sarnold:(23:06
parallel21thanks sarnold23:06
justizinand that does it23:06
justizinthanks (facepalm)23:06
justizinwell, it’s actually wierd, hum, we run postfix as the postfix user23:07
justizinah it runs as the source file owner23:07
justizin-o squashes that behavior23:08
justizinobviously we should not be doing that23:10
justizinbut every time i try to change it in one place i get ramblings about following our existing practices ;d23:11
sarnoldso, how's the resume? :) all polished up and ready to go I hope? :)23:11
justizinanyway thanks for bouncing ideas around w/ me guys23:11
sarnoldgood luck justizin :)23:12
justizinpff, i’m still relatively new here, i just have to smash some better practices into place23:12
sarnoldoh, okay, so it's not hopeless23:12
justizinthe problem is, noone is ever like ‘spend the next two weeks un-fucking our config mgmt’23:12
justizinno it’s just like years of bad habits woven into the code23:12
justizinthe rationale for doing it the stupid way is not so bad, which is basically that for the most part each machine only runs one thing, and if you break into that, you have access to anything very important on that machine23:13
justizinbut mail is an obvious exception23:13
sarnoldI can understand the point, but working against he assumptions of the software involved is another matter :)23:13
justizini totally agree, that’s my counter23:13
justizini’m like okay but.. we get so much for free!23:13
justizinit just doesn’t feel that way because we are set in our ways about going against the grain, so years of changes in upstream behavior and packages have completely eclipsed us23:14
justizinthe attitude is often like ‘oh yeah you have to do that thing because <software package> is dumb'23:14
justizinand it’s like no, it’s not dumb, it expects to have its’ own user23:14
justizinthat’s completely reasonable 1970s practice! ;d23:14
sarnoldhaha23:14
sarnoldwell, good luck fighting the good fight ;)23:15
justizinyeh23:15
justizinthere are worse fates ;)23:15
sarnold:)23:15
justizinanyway tks23:15
MACscrok, got another question. I am provisioning my ubuntu systems with pxe and my finish template is failing and i have to hit continue for it to finish the install because of the failed exit code. Is there a log where i can see the error after it boots for the first time or should i be able to switch to another console window and see the error somewhere?23:23

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!