| === exixt_ is now known as exixt | ||
| === arosales_ is now known as arosales | ||
| === zz_DenBeiren is now known as DenBeiren | ||
| === markthomas|away is now known as markthomas | ||
| === markthomas is now known as markthomas|away | ||
| MrPPS | Anyone here have any details about the recently released repo updates to dovecot-core on ubuntu 12.04? | 02:57 |
|---|---|---|
| MrPPS | Can't find anything on the website that's newer than the april updates | 02:57 |
| sarnold | MrPPS: I believe it was to allow turning off sslv3 | 02:57 |
| MrPPS | ah ok, so no major things that might break? | 02:58 |
| MrPPS | at the moment, I'm cloning the server to apply updates there, just for testing | 02:58 |
| sarnold | MrPPS: click on the little triangle next to "1:2.0.19-0ubuntu2.2" here, https://launchpad.net/ubuntu/+source/dovecot | 02:58 |
| MrPPS | ah, cheers :) thanks sarnold! | 02:59 |
| sarnold | MrPPS: there's no reports of any problems yet, and at least one user found that it worked :) | 02:59 |
| MrPPS | :D | 03:00 |
| hariom | Hi, my server is behind NAT and has static ip 192.168.150.151. The firewall is getting another private connection and traffic is forwarded to this server's IP. The IP address of this private line is 10.0.65.66 . How can I add static route from server to this private line. Private line gw is 10.0.65.67 and domain is 10.0.65.2 | 05:58 |
| hariom | I tried "route add -net 10.0.65.2 gw 10.0.65.67" but I am getting this msg: "SIOCADDRT: No such process" | 05:59 |
| igoryonya_ | hello, I've set a physical nic to 0.0.0.0 promisc and a tap0 to 0.0.0.0, connected them to a bridge, but the virtual machine still doesn't see the net, visible from that physical nic. when I configure the virtual machine's address with an address of the same subnet, that the physical card is connected to. | 06:53 |
| cmdd | it would have to be routed on the firewall, not the server | 07:26 |
| cmdd | that is if the firewall is what is seperating the two networks | 07:27 |
| === liam_ is now known as Guest91925 | ||
| === bilde2910|away is now known as bilde2910 | ||
| === DenBeiren is now known as zz_DenBeiren | ||
| === markthomas|away is now known as markthomas | ||
| lordievader | Good morning. | 08:45 |
| === chmurifree is now known as chmuri | ||
| === exixt is now known as exixt_ | ||
| soren | smoser: Hi! Do you have a minute? | 10:49 |
| === Lcawte|Away is now known as Lcawte | ||
| === freyes is now known as zz_freyes | ||
| Voyage | my skype calling to a U.S number does not works via my ISP, I have a vps, I plan to make ssh tunnel and do all by that. Is it possible? and will it be of help? | 11:52 |
| Kartagis | Voyage: why doesn't it work? blocked port? | 12:06 |
| Voyage | dont know.. | 12:10 |
| Voyage | skype works but no calls | 12:10 |
| Kartagis | Voyage: have you got credits? | 12:16 |
| === Lcawte is now known as Lcawte|Away | ||
| Voyage | Kartagis, yes | 12:35 |
| Voyage | it works by other isps | 12:35 |
| Kartagis | Voyage: try ssh tunneling then | 12:35 |
| Kartagis | if not, vpn | 12:35 |
| Voyage | Kartagis, ok, How can I ssh tunnel? | 12:35 |
| Kartagis | man ssh | 12:44 |
| Kartagis | look for -L parameter | 12:44 |
| Voyage | so ssh -D 39101 wont work for skype? | 12:48 |
| Kartagis | Voyage: I have once used ssh tunneling, years ago; and used -L | 12:56 |
| === Lcawte|Away is now known as Lcawte | ||
| hallyn | stgraber: remind me, re lxc.vs.apparmor packaging. lxc does not have a conflicts for older apparmor, it updates the apparmor profiles in debian/rules based on the targer arch. So what would force someone on an older systrem who updates lxc, to get the newer apparmor that doesn't balk on the new rules? | 13:42 |
| hallyn | I'm trying to figure out how to handle it best in libvirt, in lue of the cloud archives (trusty-on-precise which currently is causing apparmor to be uninstalled) | 13:42 |
| hallyn | i suppose thta since utopic is now released it can't relaly be an issue | 13:44 |
| eto | hello | 13:49 |
| eto | i would like to ask question about server variant is this right channel? | 13:49 |
| === zz_freyes is now known as freyes | ||
| lordievader | eto: Yes, see /topic | 13:54 |
| eto | okay i have trouble figuring out which server version will have working systemd | 13:54 |
| eto | i am especially interested in upcoming LTS release | 13:54 |
| hallyn | eto: it's meant to be enabled in the next (15.04) release by default, but that's not absolutely certain. 16.04 is definately meant to use it | 13:58 |
| hallyn | stgraber: ah, i see, dh_gencontrol section does the depends in lxc. very good | 13:59 |
| eto | hallyn: how far 16.04 is? | 13:59 |
| hallyn | April 2016 | 13:59 |
| hallyn | stgraber: (though i'm not sure how to do a dh_gencontrol override in the libvirt packaging :) | 14:00 |
| eto | hallyn: okay and according to my info next one is 14.something | 14:00 |
| caribou | hallyn: I'm reading an article on the topic by Raphael Hertzog (in french); he's talking about using DEB_DH_GENCONTROL_ARGS_ALL | 14:09 |
| caribou | hallyn: http://goo.gl/viozTZ (if you read french) | 14:10 |
| hallyn | certainly no technical french :) i'm going to try it in a build/libvirt-bin:: section | 14:16 |
| eto | so can i at least swith to systemd on Ubuntu Server 14.04.1 LTS ? | 14:16 |
| eto | or where to ask question like that? | 14:17 |
| Kaltiz | I am trying to install nis but it gets stuck at Setting up nis (3.17-32ubuntu6) I am running Ubuntu Server 14.10 any ideas? | 14:28 |
| refj | Netinstall hangs 20 minutes after fetching Packages.gz when installing 14.04 with preseed via iPXE. Been scouring google for a week to look solution. Found several bugs from 12.04 and earlier, where this is related to net-retriever. Anyone here experience the same issue? | 14:44 |
| hallyn | eto: no. you can experimentally try systemd on 14.10 (at least some ppl have tested it), not 14.04. #ubuntu-devel may be the better place to ask | 14:48 |
| caribou | hallyn: I'm just testing conditional gencontrol atm | 14:49 |
| hallyn | hm, so that post shows it differently... my way didn't work so i'll try that now ;) | 14:50 |
| refj | Ok, how do I generate a post installation report to use as a base for a bug report regarding the possible net-retriever issue? | 14:52 |
| caribou | hallyn: I'm trying a mix of the lxc tests & the post syntax. | 14:53 |
| Kaltiz | managed to get the NIS package to install but now it does not seem to have an init.d script | 14:54 |
| === broder_ is now known as broder | ||
| hallyn | caribou: hah, there is an english version? http://raphaelhertzog.com/2010/09/27/different-dependencies-between-debian-and-ubuntu-but-common-source-package/ | 15:24 |
| === edwardly_ is now known as edwardly | ||
| === freyes is now known as zz_freyes | ||
| michele | hi there | 15:51 |
| caribou | hallyn: didn't know abou it | 15:52 |
| michele | I need to change the ethernet (p2p1) address from dhcp to static (and I'm using NetworkManager) on an ubuntu server. The server is remote. I have ssh and root access. Any ideas? | 15:52 |
| alreece45 | ... NetworkManager on a server? | 15:59 |
| teward | yeah i was about to say | 15:59 |
| teward | that's kind of unusual to have network manager on a server | 15:59 |
| michele | that's right | 16:04 |
| michele | I can remove it though | 16:04 |
| === daker__ is now known as daker | ||
| === liam_ is now known as Guest86958 | ||
| pmatulis | hallyn: re https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1081786 , if i have this in the host's /etc/default/lxc the container should be using it? i have squid-deb-proxy set up | 17:01 |
| uvirtbot | Launchpad bug 1081786 in lxc "lxc-create doesn't take advantage of the apt proxy" [Wishlist,Fix released] | 17:01 |
| pmatulis | MIRROR="http://10.0.3.1:8000" | 17:01 |
| pmatulis | hallyn: it doesn't | 17:01 |
| hallyn | pmatulis: depends how you created the container I think. Did you use the ubuntu template? | 17:06 |
| pmatulis | hallyn: lemme check | 17:06 |
| pmatulis | hallyn: used ' -t ubuntu ' | 17:07 |
| hallyn | pmatulis: by any chance doe sjust adding '/ubuntu' at end of the MIRROR help? | 17:14 |
| pmatulis | hallyn: lemme check | 17:14 |
| pmatulis | hallyn: but i should be able to check if the container has *any* proxy configuration right? | 17:15 |
| hallyn | yeah the template definately should be using what you give it both for debootstrap and to cat into the /etc/apt/sources.list in the container (just checked the script) | 17:15 |
| hallyn | pmatulis: cat /etc/apt/sources.list in the container | 17:15 |
| pmatulis | hallyn: nothing added | 17:16 |
| hallyn | which release is this in? (not that it's changed in a long time) | 17:17 |
| pmatulis | hallyn: my host is trusty | 17:18 |
| hallyn | pmatulis: so the other thing you're supposed to be able to do is set APT_PROXY which will then be put into the container's /etc/apt/apt.conf.d/70proxy... but MIRROR is supposed to work | 17:18 |
| pmatulis | hallyn: where/how do i set APT_PROXY again? | 17:19 |
| hallyn | /etc/default/lxc should work | 17:20 |
| eto | ty hallyn | 17:20 |
| hallyn | pmatulis: oh, you might try "lxc-create -t ubuntu ... -- ... --mirror=http://10.0.3.1:8000" | 17:21 |
| hallyn | but again i can't explain why it's not working | 17:21 |
| pmatulis | hallyn: will try | 17:21 |
| pmatulis | hallyn: dunno, i don't see any difference using --mirror | 17:29 |
| hallyn | pmatulis: ok. lemme spin up a host i can reproduce on. | 17:31 |
| pmatulis | hallyn: this is what i used: | 17:31 |
| pmatulis | sudo lxc-create -t ubuntu -n $NAME -P $DISK_DIR -- -S $SSH_KEY -r $RELEASE --mirror=http://10.0.3.1:8000 | 17:31 |
| === zz_freyes is now known as freyes | ||
| === freyes is now known as zz_freyes | ||
| hallyn | pmatulis: oh, | 17:35 |
| hallyn | pmatulis: i bet you had pre-generated a cache image. | 17:35 |
| hallyn | can you try adding -F? | 17:35 |
| pmatulis | hallyn: ah, i would need to re-generate | 17:35 |
| hallyn | i've got a test running, but lemme know if sudo lxc-create -t ubuntu -n $NAME -P $DISK_DIR -- -S $SSH_KEY -r $RELEASE --mirror=http://10.0.3.1:8000 -F works | 17:36 |
| === zz_freyes is now known as freyes | ||
| pmatulis | hallyn: it's taking the mirror option now but evidently i need to hack at its value in order to build a valid URL | 17:51 |
| hallyn | pmatulis: ok, cool. (my test failed, but due to some proxy badness, sigh) | 17:57 |
| monokrome | Does anyone know if this version of SSL is vulnerable to heartbleed? It's the version in our Ubuntu server. | 18:52 |
| monokrome | OpenSSL 1.0.1 14 Mar 2012 | 18:52 |
| monokrome | built on: Thu Aug 7 13:42:02 UTC 2014 | 18:52 |
| qman__ | Heartbleed was in April so probably not, but we need the package version to tell for sure | 18:53 |
| monokrome | Another machine has 1.0.1f which I think is also vulnerable? | 18:53 |
| monokrome | Oh, how can I get the package version? | 18:53 |
| ogra_ | all supported releases had security updates long ago ... as long as you run something supported and kept it up to date with security fixes you will be fine | 18:53 |
| qman__ | dpkg -l | grep openssl | 18:53 |
| monokrome | Thanks, I'll try that | 18:54 |
| monokrome | 1.0.1-4ubuntu5.17 | 18:54 |
| qman__ | Then compare against the security announcement | 18:54 |
| ogra_ | note that major versions dont get bumped for security patches | 18:54 |
| monokrome | Yeah, but the version should be 1.0.1g if it is fixed (unless someone moved a patch into an older version) right? | 18:55 |
| ogra_ | 1.0.1-4ubuntu5.17 = upstream 1.0.1 ... debian patchset 4 ... ubuntu patchset 5 ... ubuntu--security patchset 17 | 18:55 |
| qman__ | USN-2165-1 | 18:55 |
| monokrome | ogra_: Could you help me understand how you found that? | 18:55 |
| ogra_ | if you have the patch it will be one of the 17 security fixes ... the major version will not be touched | 18:56 |
| qman__ | That's what the version number means | 18:56 |
| monokrome | Okay | 18:56 |
| ogra_ | so no matter if it is e or f, what counts is the 17 an dteh relation to the matching USN | 18:56 |
| qman__ | http://www.ubuntu.com/usn/usn-2165-1/ | 18:56 |
| ogra_ | so it was fixed in 5.12 ... you are on 5.17 ... and should be safe | 18:57 |
| monokrome | Oh, okay. I'll bookmark that security notices site | 18:59 |
| monokrome | Thanks for the help :) | 18:59 |
| ogra_ | :) | 18:59 |
| pmatulis | hallyn: on your trusty host can you create a lucid container? it never works for me | 19:17 |
| === freyes is now known as zz_freyes | ||
| === zz_freyes is now known as freyes | ||
| === wedgwood1 is now known as wedgwood | ||
| rostam | hi I am using ubuntu 14.04. When I type the command, domainname it returns empty. How could I fix that? thanks | 20:45 |
| sarnold | rostam: do you really want to use NIS?? | 20:46 |
| rostam | sarnold, We use dns in our system setup, I thought domainname should return dns server IP address??? | 20:48 |
| sarnold | rostam: nope, domainname is for NIS | 20:51 |
| === exixt_ is now known as exixt | ||
| rostam | sarnold, thanks | 21:04 |
| rostam | Question how could I retrieved the dns server Ip address on my system? | 21:07 |
| genii | cat /etc/resolv.conf | 21:09 |
| === exixt is now known as exixt_ | ||
| rostam | genii, thanks | 21:11 |
| genii | np | 21:11 |
| genii | quikole: Please stop spamming in private message | 21:13 |
| FilthyMacNasty | any of you server people familiar with clonezilla server? | 21:22 |
| === bilde2910 is now known as bilde2910|away | ||
| === elliotd123__ is now known as elliotd123 | ||
| hallyn | pmatulis: a lucid container? heh, i haven't tried tha tin a long time | 22:28 |
| pmatulis | hallyn: yeah, me too but i needed one today | 22:29 |
| * hallyn chekcs whehter download template supports that | 22:29 | |
| hallyn | pmatulis: the download template supports it | 22:29 |
| pmatulis | hallyn: the telltale symptom is | 22:30 |
| pmatulis | 'Can not write log, openpty() failed (/dev/pts not mounted?)' | 22:30 |
| hallyn | pmatulis: that's with 'lxc-create -t ubuntu -n container -- -r lucid' ? | 22:30 |
| hallyn | pmatulis: or does that also happen with the download template? | 22:31 |
| hallyn | in either case, please file a bug. but if the download templat eworks that would be a workaround for you | 22:31 |
| pmatulis | hallyn: same command i gave before. also tried with -F | 22:31 |
| pmatulis | i'm not sure what the download template is | 22:32 |
| * pmatulis needs to eat | 22:33 | |
| stgraber | pmatulis: lxc-create -t download -n container -- -d ubuntu -r lucid -a amd64 | 22:33 |
| === Lcawte is now known as Lcawte|Away | ||
| hallyn | pmatulis: ^ yeah what stgraber said. Like I say in either case please file a bug, it sounds to me like actually a debootstrap bug, but since we support lucid through 2015 on server it shoudl still be owrking | 22:37 |
| Joe_knock | Hi. | 23:11 |
| Joe_knock | How do I use the sed command on this line of text: @require(dirname(__FILE__).'/php/login.php'); ?? I want to remove this line of text from about 5 files. | 23:11 |
| pmatulis | hallyn: oh, yes, i am using a template (-t). like my command showed (?) | 23:18 |
| pmatulis | sudo lxc-create -t ubuntu -n $NAME -P $DISK_DIR -- -S $SSH_KEY -r $RELEASE | 23:18 |
| Joe_knock | pmatulis: I'm not sure I understand you. | 23:19 |
| pmatulis | Joe_knock: i was talking to hallyn | 23:21 |
| Joe_knock | okay. no problem | 23:21 |
| FilthyMacNasty | pmatulis: I'm certain I dunnot understand you | 23:22 |
| hallyn | pmatulis: the download templat eis also just another template, but it downloads pre-built tarballs from linuxcontainers.org. i suspect that 'lxc-create -t download -n l1 -- -d ubuntu -r lucid -a amd64' will work | 23:23 |
| hallyn | as a workaround | 23:23 |
| * hallyn out, bbl | 23:23 | |
| === Locke2002 is now known as Guest5332 | ||
| hallyn | (that is, a full night's sleep later :) | 23:23 |
| pmatulis | hallyn: ohhhh | 23:24 |
| Joe_knock | aah I solved my own issue. yikes | 23:47 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!