[00:57] <sandprickle> I setup postfix+dovecot starting with mail-stack-delivery, and virtual users are not working. Bounces all mail but that addressed to the mail username that matches my local username. The %d in mail_home and mail_location doesn't seem to be expanding.
[02:15] <mgw> Logos01: thanks, changing bootdev to the dev path (/dev/sdb) worked.
[02:53] <hfaust> hi guys, how are you?
[04:23] <iDealz> anyone have any experience with rebuilding broken RAID arrays?  I had a drive fail completely in an mdadm array 5 and now when I boot my server it boots into initramfs prompt. I believe I need to boot from a CD to get into root, but dont know where to go from there
[04:49] <rostam> HI I am using ubuntu 14.04. I have used debootstrap --downloadonly to download required packages for debootstrap. It works fine, but I see some of the packages have naming convention I do not understand: For example:  zlib1g_1%3a1.2.8.dfsg-1ubuntu1_amd64.deb, But not all the packages have this issue, could someone please help me? thx
[05:20] <sarnold> rostam: I assume it is a : from epoch versioning, 1:1.2.8.dfsg-1ubuntu1
[06:29] <lordievader> Good morning.
[06:34] <Aison> hi
[06:35] <Aison> is it possible, that ufw is just for simple settings?
[06:35] <lordievader> Aison: Imo, yes.
[06:36] <lordievader> You can do simple things, like allow/drop/reject connections but anything more complex... well then you have to write iptables rules.
[06:36] <Aison> yes, I know how to write iptables rules, but my problem is also, that ufw is not removing my custom rules after "ufw disable"
[06:38] <Aison> maybe it's best to use ufw just for filtering of incoming connections
[06:39] <lordievader> What custom rules are you talking about? Those created with ufw?
[06:39] <Aison> eg. things like that:
[06:39] <Aison> -A POSTROUTING -o bond0.2 -s 10.35.0.0/16 -j SNAT --to-source 212.51.145.89
[06:39] <Aison> many of those
[06:40] <lordievader> Aison: I take that you created those outside of UFW, ofcourse it won't remove those.
[06:40] <Aison> yes, when I take them outside, then it is my responsibility :)
[07:47] <hxm> how to know if i am vulnerable to shellshock?
[07:48] <ikonia> there are various tests on the web
[07:49] <lordievader> hxm: If you regularly update your machine you should no longer be vunerable, given you run a supported version.
[07:49] <cynicallemon> hxm: making sure your run updates is a good way
[07:49] <hxm> i am updated, i just wanted to know
[07:49] <hxm> you know, panic attack
[07:51] <cynicallemon> hxm: https://www.digitalocean.com/community/tutorials/how-to-protect-your-server-against-the-shellshock-bash-vulnerability
[07:59] <Aison> argh, wie liest man ipv6 netzmasken?!? muss ich verschiedene subnetze so schreiben 2a02:168:200f:0001::/56, 2a02:168:200f:0002::/56, 2a02:168:200f:0003::/56
[07:59] <Aison> oder so 2a02:168:200f:0100::/56, 2a02:168:200f:0200::/56, 2a02:168:200f:0300::/56
[08:01] <Aison> damn, sorry, wrong channel
[08:01] <Aison> lol
[08:02] <henkjan> Aison: sipcalc is a nice utility for ipv6 addresses/netmasks
[08:02] <hxm> i run the bash version GNU bash, versión 4.2.45(1)-release (x86_64-pc-linux-gnu)
[08:02] <hxm> is that the lastest one?
[08:02] <hxm> i try to upgrade bash and it says is the latest
[08:02] <henkjan> Aison: see output https://p.6core.net/p/Yk3YdNzzdosBDVWhW1WYbtE2
[08:03] <Aison> :D
[08:04] <hxm> np fixed
[08:35] <jamespage> adam_g, comments on mp - missing patch?
[10:00] <jamespage> zul, coreycb: hmm the ironic driver landed in nova for c1
[10:00] <jamespage> rc1 rather
[10:07] <jamespage> adam_g, ironicclient sync from debian (1.2.x)
[10:07] <jamespage> sorry 0.2.x
[10:56] <rostam> HI I see some of the ubuntu packages have extra field: "1%3a" for example  zlib1g_1%3a1.2.8.dfsg-1ubuntu1_amd64.deb. Is this epoch version?  in any case does it have any difference with the package which does not have that extra characthers?  The problem I have I can not use those packages in my http server to download them, the extra packages break the download process.  Thanks
[11:15] <rbasak> rostam: yes, it's for the epoch. The ':' character is in the filename but gets escaped due to HTTP requirements.
[11:21] <rostam> rbasak, if I rename the package (removing extra 1%3a) would cause any issue, or is there a better way doing this? thanks
[11:22] <rbasak> rostam: a better way of doing what?
[11:23] <rostam> rbasak,  I want to remove the "1%3a" from package name?
[11:24] <jamespage> zul, stevedore internal versioning was causing issues so I uploaded 1.0.0 and 1.0.0.0 so that I can actually test glance properly
[11:25] <zul> bah
[11:27] <Odd_Bloke> rostam: '1:' is part of the version, not part of the package name.
[11:32] <rostam> Odd_Bloke, ok, so when package is downloaded through http, the  "1:" changes to "1%3a"  ??
[11:32] <Odd_Bloke> rostam: ':' is not a legal character in URL paths so it's encoded to %3a.
[11:34] <rostam> Odd_Bloke, thanks, now I got it.
[11:35] <Odd_Bloke> rostam: :)
[11:37] <jamespage> coreycb, look at you on your IPv6 address :-)
[11:37]  * jamespage stops poking coreycb
[11:40] <jdstrand> lordievader: ufw by default does not flush the primary chains since it by default does not manage the primary change. you should be able to adjust /etc/default/ufw to have MANAGE_BUILTINS=yes, but this may have other side-effects. see /etc/default/ufw for details
[11:41] <jdstrand> s/primary change/primary chains/
[11:43] <lordievader> jdstrand: I don't use UFW ;)
[11:43] <jdstrand> oh whoops
[11:44] <jdstrand> Aison: ^
[12:07] <jamespage> zul, coreycb: almost have nova and glance done
[12:54] <coreycb> jamespage, heh :)
[12:54] <jamespage> coreycb, hello
[12:54] <coreycb> jamespage, hey
[12:58] <coreycb> jamespage, would you mind taking a look at this to see if it looks good so far?  https://code.launchpad.net/~corey.bryant/ceilometer/2014.2-rc1/+merge/236610
[12:58] <coreycb> jamespage, I think I need to pip install to verify some things
[12:59] <coreycb> jamespage, oh and I can take ironic
[12:59] <jamespage> coreycb, adam_g already did
[12:59] <coreycb> jamespage, oh sweet, thanks adam_g !
[13:00] <jamespage> coreycb, interesting - http://specs.openstack.org/openstack/ceilometer-specs/specs/juno/ipmi.html
[13:02] <coreycb> jamespage, yeah pretty cool
[13:03] <jamespage> zul, sigh
[13:03] <jamespage> VersionConflict: (oslo.config 1.4.0.0-a5 (/usr/lib/python2.7/dist-packages), Requirement.parse('oslo.config>=1.4.0'))
[13:03] <jamespage> dealing with it now
[13:03] <zul> nova?
[13:08] <jamespage> zul, no glance
[13:10] <jamespage> zul, I've uploaded new versions of stevedore, oslo.config and oslo.rootwrap with additional .0's to deal with final release/pre-release versioning stuff
[13:10] <zul> ack
[13:19] <jamespage> bug 1373714
[13:36] <jamespage> zul, gah - boto and eventlet are also causing problems...
[13:36]  * jamespage sighs
[13:36]  * zul shakes his head
[13:36] <zul> as in how?
[13:41] <jamespage> zul, for some reason bits of glance use pbr for stuff, and boto and eventlet don't match from a version perspective
[13:42] <zul> jamespage:  gah...you should be able to get around that by patching the requirements.txt
[13:42] <jamespage> zul, yeah - but the eventlet problem is in oslo.vmware as well
[13:42] <jamespage> I can fix that
[13:42] <zul> ok
[13:42] <jamespage> but its a pita
[13:42] <zul> jamespage:  i feel your pain
[13:43] <jamespage> zul, bumping eventlet to 0.15.2 is a 25k diff
[13:43] <jamespage> lots of py3 compat work
[13:43] <jamespage> makes me nervous
[13:43] <jamespage> boto might not be so bad
[13:44] <jamespage> zul, boto - 22k diff
[13:44] <jamespage> again lots of py3 compat
[13:59] <rbasak> utlemming: bug 1375252 interests me. Is cloud-init resetting the hostname as I'd expect here, based on what Azure says, or is walinuxagent supposed to be doing something extra-clever here?
[14:05] <jcastro> jamespage, sorry those openstack charm bugs I filed were not descriptive, I was filing them on the spot. Now that I am back I'll get you more info.
[14:06] <jamespage> jcastro, awesome
[14:06] <jcastro> jamespage, you don't have an orange box do you?
[14:06] <jamespage> jcastro, nope
[14:10] <jamespage> zul, coreycb: We are scheduled to publish 2014.1.3 on Thurs Oct. 2nd for
[14:10] <jamespage> wowser
[14:10] <jamespage> ^^ gaughen :-)
[14:11] <coreycb> jamespage, ok yep
[14:11] <coreycb> jamespage, busy week!~
[14:11] <jamespage> coreycb, yes indeed
[14:14] <coreycb> jamespage, so if something is in universe it can't be a dep in debian/control?
[14:15] <jamespage> coreycb, well it can but will need a MIR
[14:15] <jamespage> coreycb, which one?
[14:16] <coreycb> tox is required to generate ceilometer.conf
[14:16] <coreycb> jamespage, ^
[14:16] <jamespage> great...
[14:17] <coreycb> jamespage, and tests get fubar if I don't include python-pysnmp4 in build-depends
[14:17] <coreycb> but maybe that's just a rules file change, not sure
[14:17] <jamespage> coreycb, pysnmp4 is already under MIR - waiting for security team review
[14:17] <coreycb> jamespage, ah, cool
[14:18] <coreycb> jamespage, guess I should have remembered that, my name is in the bug
[14:18] <coreycb> :)
[14:23] <jamespage> coreycb, hmm tox
[14:25] <coreycb> jamespage, hmm.. tox..
[14:26] <coreycb> jamespage, can we try to MIR?
[14:27] <jamespage> coreycb, use "bash tools/config/generate_sample.sh -b . -p ceilometer -o etc/ceilometer"
[14:27] <jamespage> and bypass tox
[14:31] <coreycb> jamespage, nice, that works
[15:24] <coreycb> jamespage, ceilometer is ready for review - https://code.launchpad.net/~corey.bryant/ceilometer/2014.2-rc1/+merge/236610
[15:51] <queeq> http://pastebin.com/H9LALpSP
[15:51] <queeq> Last lines are actually on different lines, just got malformed when pasted
[15:53] <queeq> Packets are marked:
[15:53] <queeq>   194 15982 MARK       icmp --  *      br0     0.0.0.0/0            0.0.0.0/0            MARK set 0x15
[15:59] <queeq> Anyone?
[16:51] <Aison> I guess isc-dhcp-server-ldap is not supporting DHCPv6?
[16:52] <Aison> at least in the schema file there is no dhcpSubnet6
[17:00] <|\n> what should i check first of all, if i see "dhclient.c:2277: Failed to send 300 byte long packet over fallback interface."
[17:05] <jamespage> coreycb, zul: can you guys handle the remaining rc1's please
[17:05] <jamespage> I have a load of charm review/work to finish for eod tomorrow and need to switch focus
[17:05] <coreycb> jamespage, sure
[17:05] <zul> jamespage:  sure
[17:15] <smoser> rbasak, http://blog.oddbit.com/2013/10/04/automatic-dns-entries-for-libvirt-domains/
[17:15] <smoser> stubled across that . and thought of uvt
[17:15] <smoser> does parsing of leases file.
[17:19] <smoser> that is actually really nice. and combined with 'incron' as suggeted. really neat
[17:30] <rbasak> smoser: I hate things that involve modifying /etc/hosts
[17:30] <rbasak> smoser: but an nss module would be nice!
[17:31] <smoser> rbasak, it doesn't require modiying /etc/hosts
[17:31] <smoser> well, the whole solution does.
[17:32] <smoser> but you could just use the parsing libvirt for domain->ip
[17:33] <Logos01> smoser: My apologies, what are you trying to do? (Catch me up)
[17:34] <smoser> well, determine an ip address for a libvirt domain.
[17:35] <Logos01> You could nuke the need for network manager by just sticking w/ dnsmasq and using pkill -SIGHUP dnsmasq whenever there's an inotify event.
[17:35] <smoser> i have no need of network manager.
[17:35] <Logos01> I'm reading the oddbit.com blog page.
[17:36] <smoser> mostly i was just interested in parsing of libvirt xml and dnsmasq.
[17:37] <Logos01> dnsmasq is pretty straightforward in these things.
[17:37] <smoser> ?
[17:37] <smoser> the problem is
[17:38] <smoser>  a.) you start a domain in libvirt named 'smfoo'. it dhcp's and gets an ip address.
[17:38] <Logos01> If I understand it you want to be able to obtain the ip address of an arbitrary libvirt domain/guest.
[17:38] <smoser>  b.) you want to ssh to 'smfoo'
[17:38] <Logos01> Right.
[17:38] <smoser> but smfoo is not resolvable dnswise.
[17:38] <smoser> so you have to do that.
[17:38] <Logos01> And there are ways to make that viable.
[17:38] <smoser> which do not require guest modification?
[17:39] <Logos01> Nope.
[17:40] <Logos01> I am in the habit of using dnsmasq as a local DNS cache on my boxes.
[17:40] <Logos01> So my resolv.conf points to 127.0.0.1
[17:40] <Logos01> This allows me to have whatever upstreams I like -- I could for example have my local dnsmasq instance reference the libvirt dnsmasq as an upstream.
[17:41] <patdk-wk> only issue with that is, no dnssec support
[17:41] <Logos01> The libvirt upstream one will provide responses for its dhcp clients (or at least their leases)
[17:41] <smoser> Logos01, no it wont.
[17:41] <Logos01> patdk-wk: dnsmasq can do dnssec.
[17:42] <smoser> it will provide dns for those that provided it with a hostname on dhcp request.
[17:42] <smoser> and if you launch 10 instances of a disk image that have 'foo' in /etc/hostname it fails.
[17:43] <smoser> avahi is the other guest modification way to publish your name.
[17:43] <smoser> which is what uvtool uses now. but i dont want the guest modification.
[17:43] <Logos01> I'm not in the habit of reusing hostnames during provisioning.
[17:44] <rbasak> smoser: I'm basically doing the same parsing inside uvtool.
[17:44] <smoser> oh. i didn't know that.
[17:44] <smoser> :)
[17:44] <rbasak> smoser: writing /etc/hosts dynamically just feels bad to me.
[17:44] <Logos01> So you want systems to have a shared local hostname, not have that be modified during dhclient lease acquisition, and still have the ability to address a system by hostname upon startup ?
[17:44] <rbasak> smoser: for example, have fun with guests inserting interesting hostnames :)
[17:44] <smoser> Logos01, "provisioning".
[17:44] <smoser> i want no "provisioning".
[17:44] <Logos01> smoser: Then you want no systems.
[17:45] <rbasak> Zeroconf solves the problem.
[17:45] <smoser> i have cloud-init and ubuntu cloud images.
[17:45] <Logos01> Manual provisioning is still provisioning.
[17:45] <smoser> i download them and run them.
[17:45] <smoser> i dont modify them.
[17:45] <rbasak> But avahi-daemon+libnss-mdns didn't seem reliable enough.
[17:45] <Logos01> That's a form of provisioning.
[17:45] <smoser> thats what i want to avoid.
[17:45] <smoser> "guest modification"
[17:45] <Logos01> Then let dhclient assign the hostname.
[17:46] <rbasak> I want sensibly named hosts.
[17:46] <rbasak> THat I specified at the commandline
[17:46] <Logos01> Yeah, there's a meaningful part of the conversation missing here.
[17:50] <smoser> rbasak, actually, the dhclient being run with the hostname
[17:50] <smoser> is more doable now.
[17:50] <smoser> and in the future the nocloud data source would be able to set that.
[17:50] <smoser> the change is that now in utopic, the neworking will not come up until after cloud-init has searched local datasources
[17:51] <patdk-wk> oh? when did dnsmasq get dnssec
[17:52] <Logos01> Not sure when, but: http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html
[17:52] <Logos01> "It can be configured to do DNSSEC validation."
[17:53] <Logos01> http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2014q1/008086.html <-- looks like it was Q1 2014.
[17:54] <Logos01> Made it into 14.04 w/ dnssec support.
[17:58] <smoser> Logos01, what did you mean by "let dhclient assign the hostname" ?
[17:59] <tafa2> eh
[17:59] <Logos01> smoser: I mean you have your dhcp server assign hostnames for the guests.
[18:00] <smoser> i dont know that i follow.
[18:00] <tafa2> whathttp://askubuntu.com/questions/104918/how-to-get-hostname-from-dhcp-server
[18:00] <tafa2> 2 seconds in google
[18:00] <tafa2> i didnt read it
[18:01] <smoser> guest modification, tafa2.
[18:01] <tafa2> smoser I came late... but you want to give dhcp clients hostnames server by your dhcp server?
[18:02] <tafa2> *served
[18:03] <smoser> never mind.
[18:14] <smoser> it seems this could be fairly well solved with a dnsmasq '--script' or '--luascript'.
[18:15] <smoser> libvirt runs dnsmsasq with dhcp-hostsfile and addn-hosts . the script could then read libvirt, and populate the dnsmasq specific hosts with the new entry.
[18:15] <smoser> you'd still have to query the dnsmasq nameserver to get the response, but youcoudl do it ther.e
[18:15] <Logos01> smoser: That is not guest modification.
[18:15] <Logos01> Guest modification is something done by an automatic provisioning process.
[18:16] <Logos01> Allowing dhcp server to assign hostnames when dhclient is run is a different story.
[18:16] <smoser> but you ahve to modify the guest.
[18:16] <smoser> to make it set its hostname.
[18:16] <smoser> i dont know. maybe i'm missing something.
[18:47] <Logos01> smoser: dhclient *should*, if 'instructed' to do so by the dhcp server, assign the hostname for the dhclient guest.
[18:48] <Logos01> You have to configure your dhcp server to instruct the dhclient binary to set the hostname.
[18:49] <smoser> really ? i dont think that generally sounds like good advice.
[18:50] <smoser> what if i have 2 NICS both dhcp on different networks with different lease times.
[18:50] <smoser> seems unpredictable.
[19:20] <jrwren> i prefer cloud-init setting my hostname :p
[20:51] <[F_F]> Ubuntu = Linux + Cancer + Aids
[20:51] <[F_F]> specially AIDS
[20:54] <bastidrazor> haha, all curable and revolutionary
[21:08] <hxm> hi
[21:08] <hxm> i have apache2 running, the 80 port is busy, now i have a process with webinterface that i want to run in port 80 too
[21:09] <hxm> i changed the listening host but it still says is in use
[21:09] <hxm> how can i do that?
[21:21] <genii> hxm: You changed the port for apache to something else?
[21:21] <hxm> no, i found a solution using proxy_mod and proxypass
[21:23] <genii> Ah, good.
[21:48] <Aison> how can I run a dhcpv6 server and dhcpv4 server at the same time?!?
[21:50] <Aison> the strange thing is, i've got a isc-dhcp-server in /etc/init.d/
[21:50] <Aison> and a isc-dhcp-server.conf and isc-dhcp-server6.conf in /etc/init
[21:50] <Aison> ...-
[21:52] <[F_F]> I guess you need both static IP's first
[21:52] <[F_F]> IPv4 static and IPv6 static
[21:54] <Aison> yes, i've got both, but somehow isc-dhcp-server have got no ipv6 version
[21:55] <[F_F]> hmmm
[21:55] <[F_F]> that's odd
[21:55] <[F_F]> http://knowledgelayer.softlayer.com/learning/adding-ipv6-ubuntu-systems
[21:56] <[F_F]> https://secure.evorack.com/portal/knowledgebase.php?action=displayarticle&id=17
[21:56] <[F_F]> hope that helps
[21:57] <Aison> when I try to start, I get subnet6 statement is only supported in DHCPv6 mode.
[21:59] <Aison> works now :)
[22:00] <[F_F]> Where does 2 links helpful?
[22:00] <[F_F]> or not?
[22:00] <Aison> not directly, the addresses were correctly set
[22:01] <Aison> but the config file had the wrong name ^^
[22:01] <[F_F]> awwww :(
[22:08] <hallyn> jdstrand: any complaints to /sys/firmware/devicetree/** r, in the libvirt-qemu template?
[22:08] <hallyn> (this is for bug 1374554)
[22:11] <jdstrand> hallyn: none
[22:11] <hallyn> thanks, pushing
[22:17] <qman__> Bug 1358925 still being an annoyance :/