[02:25] hi all [02:25] got maybe a stupid question [02:26] oh good, it's late friday evening here, stupid answers is all I've got :D [02:26] :D [02:27] http://pastebin.com/kwBkm6M9 [02:27] tried using ubuntu-vm-builder [02:27] with these parameters [02:27] and it gives me back these errors [02:27] Preparing to unpack .../linux-image-virtual_3.13.0.32.38_amd64.deb ... [02:27] Unpacking linux-image-virtual (3.13.0.32.38) ... [02:27] , stderr: grep: /proc/cpuinfo: No such file or directory [02:27] This kernel does not support a non-PAE CPU. [02:27] dpkg: error processing archive /var/cache/apt/archives/linux-image-3.13.0-32-generic_3.13.0-32.57_amd64.deb (--unpack): [02:27] ubuntu 14.04 server [02:28] tried kvm/qemy already [02:28] bosnianboy: "uname -a" on the host? [02:28] Linux ankebut 3.13.0-32-generic #57-Ubuntu SMP Tue Jul 15 03:51:08 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux [02:30] and cpu supports pae [02:33] TJ-, am I missing something ? :) [02:34] bosnianboy: what does grep -i pae /proc/cpuinfo show? [02:34] for each core it shows flag line [02:34] oh crazy, it says /proc/cpuinfo isn't found o_O are there any earlier errors? [02:34] bosnianboy: ok, good good [02:35] just a sec [02:35] I'll give it a fresh run [02:35] and pastebin the entire output [02:35] maybe I missed something [02:36] bosnianboy: bug #1037607 [02:36] Launchpad bug 1037607 in vm-builder "vmbuilder completely fails on Quantal due to kernel pae detection failure" [High,Triaged] https://launchpad.net/bugs/1037607 [02:36] wow [02:36] I was ust reading the vmbuilder manpage, looks ancient and creaky [02:37] I think it could be unrelated [02:37] because I'm trying to install latest [02:37] trusty [02:38] are there any suggestions (tuts) for painless virtualization ? [02:38] bosnianboy: the server team has a new hotness, uvtool, for installing VMs easily: https://help.ubuntu.com/lts/serverguide/cloud-images-and-uvtool.html -- could be they decided fixing up vmbuilder wasn't worth the hassle. pity it's still shipped. [02:38] sarnold, I'll give it a try [02:39] uvt-kvm: error: libvirt: Network not found: no network with matching name 'default' [02:39] how do I tell it to use different network name ? [02:39] bosnianboy: the security team has a similar yet very different 'uvt' tool; I use uvt all the time but it really is aimed at the security team's needs: https://wiki.ubuntu.com/SecurityTeam/TestingEnvironment [02:39] " uvt-kvm create test" was the command [02:40] bosnianboy: (probably the effort involved in even getting uvt installed isn't worht the hassle if uvtool can work for you..) [02:40] bosnianboy: That bug still affects Trusty. It also contains a workaround [02:41] TJ-: oh! nice. [02:43] needed the xml [02:43] managed to create with uvt [02:46] hrm, just how much is this uvt-simplestreams-libvirt sync command downloading? :) [02:47] ages [02:47] :D [02:47] hehe, I'm starting to think I should have specified only one release hehe [02:48] but... here we go again :D [02:48] uvt-kvm wait test-trusty --insecure [02:48] IOError: [Errno 2] No such file or directory: u'/var/lib/libvirt/dnsmasq/default.leases' [02:48] * sarnold sobs [02:48] dnsmasq [02:49] does the file/directory exist? [02:49] libvirt is responsible for starting and configuring that private instance of dnsmasq [02:52] nope, TJ-, the file does not exist [02:53] a bit unrelated question [02:53] how could I increase cinder volume max size (80GB) for openstack === Ursinha is now known as Ursinha-afk [05:52] #leave [07:34] Good morning. === liam_ is now known as Guest88811 === Lcawte|Away is now known as Lcawte === Lcawte is now known as Lcawte|Away === byte- is now known as byte === Lcawte|Away is now known as Lcawte === N0DE` is now known as CripperZ === CripperZ is now known as cripperz === cripperz is now known as N0DE` [16:47] I have created a ipsec.conf for strongswan 5.1.2: http://sprunge.us/VYMg [16:47] I can connect to the service, but eventually there is a timeout [16:47] on the server, the following is logged: http://sprunge.us/SLFC [16:47] What can cause the (repetition of) request with ID 1 to retransmitted [16:47] ? [17:48] Hi. I've just been the victim of a security exploit which means that my server has been used for a DDoS attack. The problem was that an application (ElasticSearch) was reachable on port 9200 and allowed for arbitrary executing on my server. I was tipped on the possible cause and it seems like it was spot on. But how can I "discover" this? Or better yet, monitor it? [17:58] you don't? [17:58] normal server monitoring will detect this [17:58] bandwidth usage sudden increases [17:58] firewall block attempts sudden increases [17:59] programs running on the server that shouldn't be [17:59] its a java app [17:59] doesn't matter what it is [18:00] Patrickdk, well, I wasn't warned about it, because I have no monitoring. I'm new at maintaining this myself. I've added the appropriate firewall rules, but haven't got an idea as to how to 'discover' this in time. [18:07] not sure why you should be warned about it, if you didn't setup anything to warn you [18:13] Patrickdk, that's kind of my real question. What should I setup to get some monitoring and some heads-up when something is wrong? [20:04] Repox: Some info in here might help you, sorry to hear about your dilemma : ( http://askubuntu.com/questions/9107/what-tools-do-you-use-to-monitor-a-web-server [20:05] nagios won't really help [20:05] munin can, need to setup lots of alerts [20:05] and probably some extra plugin detections [20:05] same deal with cacti [20:05] nothing else useful there [20:05] tripwire could be handy, depending [20:19] I vouch for munin as well, or graphite [20:20] munin has a ton of plugins and new ones can be written easily [20:20] graphite scales better, or so they say, but uninett.no has deployed graphite lately and it shows it doesn't scale too well either [20:21] we monitor 100ish servers with munin, and it works with good storage [20:21] Roguehorse: how many servers? [20:34] royk, using rrdcache? that helped a crapload [20:35] no more need for me to use a ramdisk [20:39] Patrickdk: works well now, even without a ramdrive or rrdcache [20:40] Patrickdk: graphite installation is administrered by uninett.no, not me, and they chose to setup a separate box with SSDs for the graphite stuff [20:47] :) [20:47] mine isn't ssd yet, should be soon [20:47] but rrdcache works well [21:10] hi [21:13] after a downgrade of apache and php vps broke my access to webmail [21:13] see [21:13] agenciazig.com.br/webmail [21:14] instead of accessing the roundcube webmail he's trying to download a file [21:14] my vps is ubuntu 12.04 with ISPConfig panel [21:15] got back all my vhosts after the downgrade minus the roundcube webmail [21:15] dominio.com when access / webmail it tries to download a configuration file roundcube [21:17] RoyK: I'm just managing mine and a couple others remotely (mostly content management) [21:18] Please could someone help me? [21:20] Roguehorse: then munin should do that well [21:22] Roguehorse: munin works well in small environments, something like <100 servers [21:22] 01545fa976c8367b4f0d59169ac4866c ubuntu-14.04-server-amd64.iso [21:22] is this valid? [21:22] md5sum [21:23] i write the iso to usb using dd and it won't boot! [21:23] RoyK: What about >100? [21:24] Roguehorse: given good I/O on the storage, it should scale well [21:24] Roguehorse: how many servers? [21:25] Roguehorse: try muinn@oftc.net [21:32] RoyK: LOL! Reading the web page at the top reminded me of Rick Moen http://linuxmafia.com/ .... ah, and it's written in Perl :) [21:37] plis helpme [21:37] roundcube broken access [21:37] see [21:37] agenciazig.com.br/webmail [21:38] RoyK: Funny how all things end up linked together [21:39] Well, gotta run ... have homework to get through and chatting isn't going to solve that for me :) [21:40] RoyK: Guess I forgot to specify the page huh? http://munin-monitoring.org/ [21:41] is there a DVD release? [22:03] My alias / webmail is not interpreting php it tries to download the indx.php what can be? can someone help me? [22:03] ops index.php === Lcawte is now known as Lcawte|Away [22:56] I have a lot of subdomains on my server... is it ok to just have a wldcard * a record or keep adding a new a record for each one? === not_phunyguy is now known as phunyguy [23:53] plis help me === phunyguy is now known as phunyguy-freenod [23:54] after a downgrade in my apache vps access to webmail was broken instead of opening the page it tries to download the php file the rest of the virtual host are working normally === phunyguy-freenod is now known as phunyguy