/srv/irclogs.ubuntu.com/2014/12/04/#ubuntu-server.txt

IronlennyI am trying to setup a license server. My problem is, the server deamon is hard coded to look for mac address at eth*, but they are enumerated as em*. Thus the deamon cannot find the mac address and refuses to boot. I have tried changing udev rules, but it either doesn't take affect or does and I lose network connectivity. I have also tried setting biosdevname=0. This again works (the nics are enumarted as eth*), but I lose00:17
Ironlennynetwork connectivity. Does anyone have any suggestions?00:17
sarnoldIronlenny: try "sudo ip link set dev em<n> alias eth0"  ?00:22
Ironlennysarnold: sudo ip link set dev em4 alias eth000:30
Ironlennyifconfig: em400:30
mapletonso.. playing a little with permissions, it seems that I'd need to do 777s all down the line backtoward /   so, I'm assuming using ACLs is the answer (if I want to leave the directories as user root.root) but give access to a particular user00:30
sarnoldIronlenny: no luck? :(00:30
Ironlennysarnold: nope00:31
sarnoldmapleton: yeah, anytime the solution looks like 777 it's probably not a great solution :)00:31
sarnoldmapleton: what's still busted? it sounded like you were close before00:31
mapletonSorry.. wife aggro.  It was "Failed to connect to /usr/local/samba/private/dns/sam.ldb", figured it out by noticing I couldn't change directory INTO the private and DNS directories00:41
mapletonas a regular user... of course not normally a prob because bind normally runs as root, but I don't run anything as root if I can help it00:42
sarnoldmapleton: was that from bind or samba? did any other log messages say why it couldn't "connect to" the file? (that is a file, right? not a socket?)00:43
mapletonI'm guessing bind since samba is still root00:43
mapletonYeah, now adding execute to those (but not 777) the message is "samba_dlz: ldb: module partition initialization failed : insufficient access rights," so just learn how to ACL and apply those and sounds like I should have this figured out00:54
rsullyIs there any difference between https://cloud-images.ubuntu.com/releases/trusty/release/ and https://cloud-images.ubuntu.com/releases/14.04.1/release/ ?01:09
jrwrenrsully: nope.01:12
rsullyok just needless duplication :/01:13
jrwrenpretty sure its symlinks under the hood01:22
rsullyah ok - if it did it on the frontend it would be much less confusing01:22
jrwrenrsully: you can always look at the SHA256SUMS files and see if they match01:23
rsullynot reasonably with my current internet speed :p01:24
rsullyah i see - the actual files01:24
jrwrenright.01:27
=== markthomas is now known as markthomas|away
D3Vdoes anyone have a copy of webmin deb the sourceforge for it is down03:03
LinStatSDRSourceforge is down D3V?!?03:23
D3Vyeah LinStatSDR03:23
LinStatSDRThis is not good.03:24
sarnoldboth apt repositories listed at http://www.webmin.com/deb.html are alive and well; please reconsider if you really want to use webmin or cpanel or other similar tools; they are often easily hacked.03:26
sarnoldif you don't mind sharing your computer with the russian mafia or the chinese military or the NSA, knock yourself out :)03:26
LinStatSDRum what sarnold?03:27
Patrickdk:)03:28
Patrickdkya, they so wanted to install new *management* software to run everything here03:28
Patrickdkuser accounts, billing, ...03:28
PatrickdkI installed it03:28
Patrickdktook 4 hours03:28
LinStatSDRSystem Center 201203:28
LinStatSDRGo go!03:28
Patrickdkfound out the *admin* password is md5 hash, no salt03:29
Patrickdkfiled a bug report, they never fixed the issue, we never used the software03:29
LinStatSDRdon't tell me, the plaintext was admin123403:29
LinStatSDRor password03:29
Patrickdkplaintext doesn't matter03:29
PatrickdkI could have been an extreemly good password03:29
Patrickdkdoesn't help against rainbow tables03:29
LinStatSDRYeah, this isn't a skiddles commercial where tasting the rainbow is a good thing.03:30
LinStatSDRskittles03:30
acmehandleIs rsync being installed a security risk?03:30
Patrickdkdepends03:32
Patrickdka computer even existing, is a security risk03:32
Patrickdkhaving any employees, including yourself, is a huge security risk03:32
acmehandleRight now when I run service --status-all rsync has a minus next to it.  But I want to be sure it is completely disabled.03:33
acmehandleI received a logwatch email and one of the packages recently installed is rsync.  So I'm looking over the packages and I'm trying to determine how much I need to have rsync03:34
jrwrena good password does help against rainbow tables. that is the whole point.03:35
Patrickdkjrwren, no03:38
Patrickdka good password hopefully hasn't been rainbowed yet03:38
Patrickdkbut salts are what helps, cause it makes the rainbow tables that much larger03:38
jrwrenPatrickdk: yes. :)03:41
jrwrenPatrickdk: rainbow tables have probably grown since I last looked.03:41
jrwrenPatrickdk: do they go to 20+ character of [a-zA-Z0-9!@#$%^&*()-_=[]{}\|;;"',<.>/?] yet?03:42
Patrickdkthey have for awhile03:42
Patrickdkones you can order03:42
PatrickdkI'm sure peoples personal collections are larger03:42
jrwrenPatrickdk: ouch.03:42
acmehandleOn a different note, I am going to run nginx -> gunicorn -> django04:01
acmehandleAccording to gunicorn docs:  http://docs.gunicorn.org/en/latest/run.html#django04:01
acmehandleIt suggests one way to run gunicorn and django.  But nothing that correlates with how ubuntu seems to have implemented gunicorn04:01
acmehandleI have a gunicorn-django command and I dont know that I should use it.04:02
acmehandleI have a gunicorn.d directory in etc for the config files.04:02
acmehandleBut again, no reference near as I can tell in the docs.  Unless I missed something,.04:02
jrwrenacmehandle: i don't know gunicorn, but if debian does things to it like they do it uwsgi, its a debian/ubuntu thing. i think that is what /etc/dunicorn.d is all about.04:03
jrwrenacmehandle: did you read the README.Debian file from gunicorn pkg?04:03
acmehandlejrwren, I have not.04:04
acmehandleHow do I read the README file?04:04
jrwrenacmehandle: dpkg -L gunicorn04:04
jrwrenacmehandle: its probably a file in /usr/share/doc/gunicorn04:05
acmehandleIt appears there are examples to go by in /usr/share/docs/gunicorn/examples04:06
acmehandleBut no README with any relevant info.  Just a brief list of django versions04:07
acmehandleand dpkg -L yields a longer list.04:07
=== markthomas|away is now known as markthomas
xibalbaany tshark ninjas in here? i need some help dumping the data going across http05:53
xibalbathis is what i've got so far, tshark -i en0 -f "port 3000" -d tcp.port==3000,http -Y http -e http.response -T fields -e ip.host -e tcp.port -e http.request.full_uri -e http.request.method -e http.response.code -e http.response.phrase -e http.content_length -e data -e text  -o "ip.use_geoip:FALSE" -V05:53
xibalbathough it displays the TCP data too (headerS) which i doont care for. i just want to see the post/response data o my http server05:53
pmatuliswhat's a tshark?05:54
xibalbawireshark cli05:54
pmatulisdunno, i use tcpdump05:55
xibalbai do too usually05:55
xibalbatshark can go a little further05:55
pmatulishow so?05:55
xibalbaprotocol decoding05:55
pmatuliswill study thx05:56
xibalbahow would you spew out the http traffic in tcpdump?05:56
xibalbaw/out all the hex, i know you can use -X05:56
=== lordieva1er is now known as lordievader
lordievaderGood morning.06:17
=== markthomas is now known as markthomas|away
whatupxload the tcpdump file in wireshark07:19
whatupxhttps://stackoverflow.com/questions/19597903/how-to-capture-remote-system-network-traffic07:22
Kartagiswhatupx: can tcpdump listen to a wireless network? if yes, should I listen to wlan0?08:13
tinymounting NFS share takes to long. If I mount from debian box NFS share instantly mounted. Enabling NEED_GSSD=YES didn't solve the problem. Tips welcomed.09:08
tinythis is a client issue since others can mount and mount fast09:12
tinyI've enabled debug nfs on client and I'm not seeing other issues except:09:12
tinyDec  4 10:04:58 arhiv kernel: [   77.092159] RPC: AUTH_GSS upcall timed out.09:12
tinyDec  4 10:04:58 arhiv kernel: [   77.092159] Please check user daemon is running.09:12
=== Lcawte|Away is now known as Lcawte
tinyJust fyi,  someone should fix captcha on "create new account" for bug reports. I tried to fill in one but failed.09:35
tinyThis is clearly an issue with latest LTS server. Other reporting.09:35
wildwindPlease point me to some good guides on setting up PXE environment. I want to have several Linux images on the server (different distros, releases, archs etc.) for testing purposes and clients on the network able to quickly boot any of them. For client, it should be the same experience as booting LiveCD.09:39
=== zz_DenBeiren is now known as DenBeiren
erhuiohello anyone there ?10:04
Thumpxrhey, i have a root with ispconfig for managing my website. this stores the website-files/folders in /var/www/xyz.   but as i have 2 partitions (/home and /) i run out of space in "/". is there a way to store the files in /home/www/xyz but make them usable as if they are in /var/www/xyz ?10:11
mardraumThumpxr: move the files and change the relevant configuration in your web server10:17
Thumpxrmardraum: i thought about this. but will php etc still compile ?10:18
Thumpxrmardraum: or suexec ?10:20
mardraumI don't think they have any relation to where you locate files for your web server to serve10:22
wildwindThumpxr: if you maintain access rights on those files the same, everything should work as before. Also don't forget to change paths in ALL config files involved.10:24
Thumpxrok10:24
=== bilde2910|away is now known as bilde2910
=== Lcawte is now known as Lcawte|Away
=== Lcawte|Away is now known as Lcawte
NigeySmorning :)13:20
=== markthomas|away is now known as markthomas
=== markthomas is now known as markthomas|away
=== Xbert is now known as Guest94502
=== Lcawte is now known as Lcawte|Away
caribouis there an 'easy' way to get cloud images into the local uvtools repository when they're not in cloud-images.ubuntu.com/daily13:54
caribouI mean, I want to add a vivid image to my synced repo13:55
cariboushould I create my own local simplestream repo for those ?13:56
caribounevermind; I found what I needed : --source http://cloud-images.ubuntu.com/daily14:01
Kartagiscan tcpdump listen to my wireless network? if yes, should I listen to wlan0?14:01
caribouKartagis: just try it & see if you see packets go by : tcpdump -i wlan0 (or is it -I)14:03
Kartagis-i14:03
caribouKartagis: tcpdump -i wlan0 works for me14:03
caribouwell, sudo tcpdump14:04
* smb pokes hallyn again (qemu in vivid missing to create kvm-spice symlink)14:31
nivvHey! My ubuntu 12.04 server running nginx have some problem. I asked tech support and they said there might be a botnet and or root kits on my server14:46
nivvProblem is that some process is hogging all of the network bandwidth so I can barely SSH into it14:47
nivvHe gave me this log: http://paste.jesse-obrien.ca/1ber14:47
miccheckhi there. i'm trying to scp from a local mac to a remote ubuntu vps. it keeps asking for my user password for the vps account. can i include the ssh private key in the scp call so that i don't have to provide a password?14:48
Piciiirc, use the -i argument: -i /path/to/keyfile14:52
miccheckok, so that works with any command then?14:54
miccheckanother question. if i wanted to setup an autobackup cron on the vps to scp stuff back to my mac, i would have to have a static ip address, right?14:54
nivvIs PID always the same for a process?14:54
miccheckor is it doable another way?14:54
nivvNo ideas?15:03
Picinivv: PIDs are static for the entire lifetime of a process. Of course if the process is run again, it will be assigned a different PID15:10
nivvPici, ok, thought so.15:11
nivvPici, what am I supposed to do if a bogus process is using up bandwidth?15:12
nivvThe process was run as root accroding to the tech support15:13
nivvProblem is, it is really hard for me to check during the "attacks" because the only way I can reach the server is via SSH15:13
nivvPici, does this say anything to you? http://paste.jesse-obrien.ca/1ber15:14
nivvfull message: http://paste.jesse-obrien.ca/1bfK15:16
Elionhi, i'm on ubuntu server 14.04 x86_64 on a 4GB(4*1GB) RAM server, but in linux i only see 2G with free, how can i use the all 4GB ?16:15
Elion(with dmidecode -t 17 i found 4*1GB)16:16
lordievaderElion: 32bit os?16:17
Elionlordievader: x86_64 => 64bit16:17
lordievaderAh missed that, haven't said a thing ;)16:18
=== mukhbiir is now known as neoark
=== MeltedDed is now known as MeltedLux
Elionlordievader: no problem :)16:20
LinStatSDRHello all.16:24
lordievaderElion: Could you pastebin your "free -m" output?16:24
Elionfail : it's actually a debian server XD16:25
Elionlordievader: https://gist.github.com/Nox-404/5e6d8d078a14e391492b16:25
lordievaderWell, ain't that odd...16:31
=== markthomas|away is now known as markthomas
pmatulisElion: dunno, maybe try a debian channel17:05
=== Lcawte|Away is now known as Lcawte
Elionpmatulis: j'y suis :)17:05
pmatulisElion: merci17:06
Elionpmatulis: XD i answered in french17:08
pmatulisElion: moi aussi!17:26
acmehandleI'm installing postgresql on my ubuntu-server and it says processing triggers, does it normally take a long time to do that?17:27
pmatulisacmehandle: how old is your hardware? :)17:32
acmehandle4 core xeon.  But it seems to have finished.  I was just worried it was hung.17:35
acmehandleapt-getting postgresql-contrib now and thats processing triggers.17:44
acmehandleLooks like its taking longer than just postgresql17:44
JayJtftpd-hpa is listining only on udp6:69 not on udp IP4. Can anyone tell me why it doesn't listen on udp ipv4? This is on Ubuntu 14.0417:48
patdk-wkI don't know what a udp6 is17:52
patdk-wkwhat does it *actually* say?17:52
JayJudp6       0      0 :::69                   :::*                                997/in.tftpd17:55
JayJpatdk-wk: ^^^17:55
JayJthat's the netstat -anlp output17:55
JayJpatdk-wk: That's instead of just "udp" it is listning on "udp6"17:56
patdk-wkthat doesn't mean ipv6 only though17:56
patdk-wkwhat does, sysctl net.ipv6.bindv6only, say17:57
JayJnet.ipv6.bindv6only = 017:57
patdk-wkso anything that binds to ipv6 ::, also binds to ipv417:57
patdk-wkcause ipv4 is mapped inside of ipv6 space17:57
JayJOh I see..17:57
JayJI did a strace on tftpd, the requests are not even reaching the service. Server seem to be sitting in select call18:00
JayJpatdk-wk: ^^^^18:00
patdk-wkheh?18:00
JayJpatdk-wk: Any idea how do I debug this?18:00
patdk-wkand tcpdump shows them?18:00
JayJpatdk-wk: Basic PXE setup with dhcp, tftp18:00
patdk-wknot sure what pxe/dhcp/tftp have to do with tcpdump18:00
JayJpatdk-wk: I mean, I ran /usr/sbin/in.tftpd with strace. Its sitting in select system call. Client request does not seem to reach it18:02
patdk-wkyes, and I said, what does it have to do with testing using tcpdump?18:03
patdk-wkI asked about tcpdump, not in.tftpd18:03
JayJpatdk-wk: Sorry maybe some confusion. I am trying to debug why tftp server is not serving the pxelinux.0 files.18:07
patdk-wkand I said18:07
patdk-wkdid you test using tcpdump yet?18:07
patdk-wkyou have to start at debugging step 118:07
patdk-wkbefore you move to step 218:07
JayJpatdk-wk: On it now :)18:08
JayJpatdk-wk: 13:11:11.047542 IP 172.16.2.25.34149 > puppet.tftp:  22 RRQ "pxelinux.0" netascii18:11
JayJpatdk-wk: The packets are reaching  tftp server18:11
JayJpatdk-wk: http://pastebin.com/PWt9pTg318:16
lordievaderJayJ: Lots of bad checksums...18:29
acmehandleWhats the difference between .bashrc and .bash_profile?18:32
lordievaderacmehandle: When and where they are loaded.18:32
lordievaderacmehandle: http://stackoverflow.com/questions/415403/whats-the-difference-between-bashrc-bash-profile-and-environment18:33
acmehandleHHhm, so I created a user where I want it to default to python3 virtual env but the log in is always over ssh18:39
acmehandleNo, sorry wrong.18:39
acmehandleIt could also be sudo user18:39
acmehandleI guess .bashrc18:40
patdk-wkjayj, heh? what is up with the bad checksums?18:44
patdk-wkI can understand if you did a tcpdump on the sending machine18:45
patdk-wkis this a kvm source or something?18:45
patdk-wkor xen?18:45
patdk-wkdid you not disable checksum offloading on the nic?18:45
acmehandleIf I install libpq-dev and python-dev how will I know they are good for python3?18:46
jrwrenlibpq-dev has nothing to do with python, its just C18:51
jrwrenacmehandle: python3-dev is what you want for python3, IIRC18:51
JayJpatdk-wk:  host puppet (172.16.2.4) is a dhcp/pxe server which is a KVM guest. I'm teting it from 172.16.2.25 which is a baremetal. Ran the tcpdump again http://pastebin.com/cNw2yAu219:00
jazzzuhi, im trying to set up postfix to forward email for a couple of (2 for now) websites. Am i correct in my understanding that i should first configure a 'canonical domain' for the whole machine (a vps) and then add virtual alias domains for the different websites?19:02
patdk-wkhmm19:04
patdk-wkno, the packet from 172.16.2.25 is bad, bad checksum19:05
patdk-wkthat should never be the case19:05
patdk-wkI could understand if something FROM the machine running tcpdump is badchecksum if the checksum was offloaded19:05
patdk-wkbut incoming packets should never have badchecksums ever19:05
patdk-wkthat is why you don't see anything in tftp, cause bad checksums are dropped19:05
patdk-wkonce you figure out the bad checksum problem, your probably be good19:06
patdk-wktry tcpdump on the host? instead of from within kvm?19:06
keithzg_Arghhh my day is not looking good. DNS lookup is taking an eternity on the local network, and to top it off, svn commits are telling folks that the post-commit script is failing with error 255 (no output), but the permissions look kosher and the script works fine when invoked manually . . .20:01
=== IdleOne- is now known as IdleOne
YamakasYdo we need multiverse and restricted on servers ?20:28
sarnoldYamakasY: maybe; the intel microcode update mechanism is in multiverse (now) and moving to restricted (real soon now)20:30
YamakasYsarnold: which mean, we need to pay ? :P20:31
sarnoldYamakasY: no, just that the results aren't necessarily free software20:32
YamakasYok, I'm checking my sources as my internal mirror has normal packages but fails on stuff, also on i386 which is odd20:32
YamakasYsarnold: do you have an idea on that or did we discuss that earlier ?20:39
sarnoldYamakasY: once you said it, it sounded familiar, but I can't recall any details at this point20:39
sarnoldYamakasY: I think I recall suggesting adding some [arch=amd64] lines to your APT sources lines or something like that, but left before I found out if that helped anything20:40
YamakasYsarnold: I think you were drunkk! :P20:40
YamakasYsarnold: you remembered well indeed20:40
YamakasYdeb-src is not needed on servers which I provision is it ?20:43
ejhello20:44
ejmy gateway isn't being set, I have to do route add default gw 1....20:45
ejhow can I fix that?20:45
sarnoldYamakasY: probably not; the deb-src lines are only needed if you want apt-get source to work20:45
YamakasYyeah don't need it20:46
sarnoldej: check /etc/network/interfaces for details20:46
YamakasYand I don't have them locally20:46
ejsarnold: I have gateway set in there20:46
sarnoldej: and is the gateway reachable with the IP / netmask selected in the same stanza?20:47
ejsarnold: yes, iface wlan0 inet static20:48
ej        address 192.168.0.220:48
ej        netmask 255.255.255.020:48
ej        gateway 192.168.0.120:48
YamakasYwlan ?20:48
YamakasYoh that might be the issue20:49
YamakasYwhich card ?20:49
ejsome usb adapter20:49
ejit works if I set route add default gw...20:49
YamakasYand if you set all to dhcp it works I guess20:49
sarnoldinteresting, that looks like it ought to have worked. are there any errors in the logs?20:50
YamakasYI have had that once... it sucked on a laptop20:50
=== Lcawte is now known as Lcawte|Away
=== Lcawte|Away is now known as Lcawte
=== bilde2910 is now known as bilde2910|away
mapletonI get really suspicious when I don't see an error in the syslog21:10
mapleton"its working too well"21:10
sarnoldmapleton: yes :)21:24
=== MeltedLux is now known as MeltedDed
=== PaulePan1er is now known as PaulePanter
bananapieHi, I have my vm server ( kvm + libvirt + qemu ) which has a load of 25, but top says that the CPU is 90% idle23:41
bananapieHow is the load average so high if the cpus are all sleeping ?23:42
sarnoldbananapie: is the system actually unresponsive?23:44
bananapieit's randomly slugish and virsh isn't responding to anything23:45
bananapiebut the vms are stable and not slugish23:45
sarnoldbananapie: try running 'vmstat 1' -- look for the bi, bo, si, so columns, those show block in, block, swap in, swap out traffic; it might be slow disks or insufficient ram or both23:46
bananapiehttp://pastebin.com/M9LyrDBe23:47
bananapiebo is between 60 and 150023:47
=== Nigel_ is now known as G
sarnoldhmm, there's that theory shot :)23:48
bananapiebi is between 1 and 150, but I don't know what normal values are :|23:48
sarnoldinterrupts and context switches feel high, but I've not looked on a machine busy multiple busy VMs before, I'm not sure if those values are unreasonable or not23:48
sarnoldbananapie: I -think- those are 1k "blocks", 152kBps is nothing to worry about :)23:49
bananapieok I killed the only vm server that has any significant amount of network traffic, bi seems lower, bo is still high23:50
bananapiealso, I just tried to kill -9 libvirtd -d, and nothing happened. It didn't exit.23:51
sarnoldbananapie: if you're curious you could use the fatrace program to figure out where those writes are going to23:51
sarnoldbut really, those rates aren't going to be the issue...23:51
sarnoldbananapie: oh, interesting..23:51
bananapieI suspect the libvirtd daemon is screwed.23:51
bananapieactually, I did kill -9 9660 where 9660 is the process id of libvirtd*23:51
sarnoldbananapie: try this.. ps o pid,stat,comm,wchan -e23:52
sarnoldthe 'wchan' reports where the process might be asleep in the kernel..23:52
bananapiehttp://pastebin.com/gTZ5KfSq23:53
bananapiefutex_wait_queue_me23:53
sarnoldbananapie: ooh looks like a nice computer :) hehe23:54
bananapie:P23:55
bananapieis it normal to have libvirtd -d twice ?23:55
sarnoldI only have one libvirtd process23:56
sarnold... but currently no VMs running.23:56
sarnoldlets start two vms and find out..23:56
bananapieok, on my dev machine only one libvirtd23:57
sarnoldyeah, only ever one libvirtd process23:57
bananapieand I have 4-5 vms.23:57
bananapieso I have one unkillable libvirtd and one that is now "defunct"23:57
sarnoldcan you kill its parent? that should reparent it to init, and init should clean up after it23:58
bananapieI've also about 30 defunct sshd and two defunct kvm23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!