/srv/irclogs.ubuntu.com/2014/12/11/#ubuntu-server.txt

keithzgHmmph. I feel like this entire scheme was based on using a hosts file, and everything we've done technologically since it was no longer viable to keep a copy on every machine is just a rickety hack keeping a now-untenable scheme alive :P00:16
bekksWhat exactly is this "scheme" your a re talking about?00:17
bekksEnsuring name resolution with a host file in case of loosing the DNS servers is quite viable, though.00:17
keithzgbekks: I mean literally everything since we moved past that first scheme of using a hosts file, so mostly I guess I mean DNS.00:20
bekksWhat exactly is this "scheme" your a re talking about?00:20
keithzgScheme: a plan, program, or policy officially adopted and followed00:21
bekksThe only "schemes" I know of are inside a database which is capable of schemes and roles.00:22
bekksSo actually you are talking about "we are using host files"?00:22
keithzgNope00:22
keithzgI'm talking about "gee, it's way easier to remember names instead of numbers" and then the scheme that was invented to implement that.00:23
bekksSo you are talking about host files.00:23
keithzgNope.00:23
keithzgKindof.00:23
bekksThen you are talking about WHAT exactly? :)00:23
keithzgThat was the initial iteration of the scheme.00:23
bekksOf which scheme?00:23
keithzgBut that became untenable, so now we try to automate it with DNS.00:24
sarnoldbekks: I suspcet it's some thing they've written themselves ..00:24
keithzgThe scheme to map names and numbers together for ease of human understanding.00:24
bekksI am giving up - you are puzzled inside theoretical terms and you cant even explain what you are doing, in particulat.00:24
bekks*particular.00:24
bekksSo I am resting your case, sorry.00:24
keithzgbekks: that's because I *am* talking in generalities.00:24
keithzgI'm saying "this entire set of systems and technologies we've developed to ease human usage of networking addresses"00:25
bekksCan you define your actual Ubuntu support question?00:26
bekksDespite generalities?00:27
keithzgYeah, I did earlier but everyone ignored me for hours so I just started lamenting the generalities of it, heh00:27
bekksWhich led to nothing, as you can see.00:27
keithzgHosts on our network are increasingly resolving as "hostname.local"00:27
sarnoldis it this? < keithzg> Arghhh, I just simply cannot figure out why an increasing number of hosts on my network are resolving as "hostname.local" instead of "hostname.our.fqdn" . . .00:27
keithzgsarnold: yup00:27
sarnoldapt-get purge avahi on all your systems00:27
keithzgAlready did.00:27
sarnoldapt-get destroy all your OS X and Windows systems? :)00:28
keithzgHeh00:28
keithzgOh how I wish!00:28
sarnoldI think apple brought us this .local insanity00:28
maxbYou may wish to uninstall libnss-mdns (or unconfigure it in /etc/nsswitch.conf) if you don't want it to be used00:29
keithzgYeah, it generally comes from bonjour, eh?00:29
bekksIt does, yes.00:31
keithzgI'm just slightly confused as to why it's overriding all the instances of"dns-search our.fqdn" defined in all the /etc/network/interfaces files on our local servers, and other such configs.00:31
sarnold"search" just tells the resolver library what domain to append to all queries00:32
keithzgmaxb: Yeah, I *though* I did that everywhere too, but it's probably worth double-checking, thanks.00:32
bekkskeithzg: the order in nsswitch.conf rules.00:32
sarnoldso it'll ask for e.g. www.google.com.our.fqdn. before www.google.com.00:32
sarnoldit doesn't say anything about how reverse lookups are done, e.g. to turn 192.168.1.1 to router.our.fqdn.00:33
keithzgsarnold: ah, fair enough.00:34
keithzgbekks: so if it was trying to use mdns that'd be listed there in the hosts line, right? ex. "hosts: files mdns4_minimal dns" or such, right? (I do vaguely remember tangling with this before, now)00:38
keithzgWell, I've gone around and made double-sure, and there was indeed still a service or two still running (the server setup here is a jungle I've only slowly tamed, alas), Seems to be free of .local hostnames now, thanks sarnold, bekks and maxb :)01:00
sarnoldkeithzg: good luck keeping it that way :)01:00
keithzgsarnold: heh yeah01:01
keithzgNow if only I could figure out why reverse lookup is being so awfully slow, but since DNS is still handled here by the isc dns service on an ancient Trustix server that nobody at work wants me to remove yet I'm not sure there's much the ubuntu-server channel can help me on for that :P01:01
sarnoldtrustix, wow :)01:02
keithzgYeah, if I want outside support for that I'd have to hop in my time machine ;)01:02
Logos01Heheh...01:33
Logos01I love fucking with apt-get sometimes.01:33
Logos01"183 upgraded, 0 newly installed, 0 to remove and 4 not upgraded." "Need to get 65.0 MB/416 MB of archives." "After this operation, 8312 kB of additional disk space will be used."01:33
Logos01(This is for a brand new, never-before-initiated, apt-get upgrade.)01:33
bekksWhats wrong at that point?01:35
Logos01Nothing.01:35
Logos01I know why it's doing it.01:35
Logos01It's just amusing because superficially it makes the process seem schizophrenic.01:35
Logos01"I am psychic enough to only need 65 out of 416MB to update your software for you!" "Of course, once I grab all 416 MB, you'll have 8MB extra diskspace used."01:36
bekksDo you have a specific support question?01:38
Logos01Sorry, no -- I'm just amused by it.01:40
Logos01NFS repositories are a good thing.01:40
=== markthomas is now known as markthomas|away
=== zz_DenBeiren is now known as DenBeiren
lvmerum kind of confusing question to explain:  1) Want user greg & user john to be able to edit all samba files.  But all other users as members of group: publicshare to only be able to read/execute. Which I think I have setup nearly correctly.02:31
lvmerShould I make a new group called: smbeditors (or similar)  and put both greg and john in that group and then chown smbeditors:pubshare -R /sharefolder     ?  Right now all folders are:   john:pubshare  & chmod = 0755 for most folders and 0750 or 0700 for others.02:31
lvmerThis will let both john & greg change file names? Or is there a better way. Right now, john & sudo edit, but greg does not.  But I cannot make greg a member of group john because greg should not have access to other folders that are john:john.02:31
lvmerkinda confused because file permissions are owner:group:other... and Idk how this will work because I think it makes both greg and john now in the group category.02:33
lvmerah I'll ask in samba02:35
linuxmintSo I installed NFS server on Ubuntu server. I have 2 computer clients to transfer files to the NFS server. I add 4 HDDs to the NFS server (1 running Ubuntu server OS). I'm not clear how to transfer files to the correct HDDs and format the HDDs?03:01
linuxmintI think I need to install NFS client on the computer client too, which I'm researching now.03:02
bonhoefferthinking of installing a process monitor that kills and reboots bad processes. anyone install monit? is it a good way to go?03:30
keithzgbonhoeffer: Personally I've always felt that if you need to monitor for, and then kill, bad processes, then you have some underlying problems that need fixing!03:39
TurnerThis is a support channel for the ubuntu server right03:52
lvmerTurner: yes03:52
TurnerOk sorry just wanted to make sure. So I have a question, is there a way to like say reset everything to the way it was when i first logged into the server? The reason is was I was installing multicraft and the installation messed up so I had to reinstall it, then it kept giving me this one thing and so then i tried some other stuff and long story short it doesnt really work now. (anything that I did during the install) Im runni03:54
sarnoldTurner: you're cut off at "Im runni"03:55
TurnerWhat do you mean? At the end where it says Im running ubuntu 14.0403:55
sarnoldirc has line length limits, and you hit it :) hehe03:56
sarnoldit's so often nearly nothing..03:56
sarnoldTurner: you can use dpkg --purge to remove individual packages and their configuration files03:56
sarnoldTurner: so if multicraft was installed via dpkg or apt-get you can probably remove all its configuration easily03:56
Turnerit was installed with apt-get03:57
Turneror that was in the front of the command03:57
sarnoldnice. then you can take those package names and run apt-get purge <packagename> and it'll delete that package03:57
sarnoldso you can then re-run apt-get install <packagename> and it'll re-install giving you a blank slate to work with03:58
Turnerand i take it the package names would be what ever came after apt-get install03:59
sarnoldyes03:59
TurnerOk let me try this04:00
TurnerOk so I think I removed all the packages i installed is there a way to list the ones that are on it atm?04:05
TurnerOk so I removed all the stuff in added. But theres one thing that I cant remove with the apt-get purge its muticraft and I think why is because i used wget http://www.multicraft.org/download?arch=linux64 -O multicraft.tar.gz to get it04:08
Turnerknow how to delete that file? if I go to cd multicraft its there04:08
TurnerIm sorry im a noob and I want to be a programmer -.- good luck to me04:08
Turneroh wait maybe i got it. let me try and install everything now04:12
TurnerOh wait this was the error I was getting " * Starting web server apache2                                                                                     AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using (IP NAME WAS HERE). Set the 'ServerName' directive globally to suppress this message" any ideas?04:14
linuxmintHello, my ubuntu server names the HDDs incorrectly. E.g, SATA 1,2,3,4 should be named /dev/sda,/dev/sdb,/dev/sdc,/dev/sdd, but /dev/ is all mixed up. Can I rename to correct this?04:44
andollinuxmint: Mixed up, as in with completely different devices names, or just in the "wrong" order?05:21
andollinuxmint: Dependings on the issue being caused, it might be worth using UUIDs instead.05:23
linuxmintandol: wrong order. I've moved on as apparently the /dev naming can't be managed.05:24
linuxmintProb I have now is, my Ubuntu server install was running. I just pulled the physical HDD out of the computer bay and the monitor went snowy then black. Now the computer power LED doesn't turn on and monitor is black. CPU fan runs thought. No access to BIOS. Did I wreck the HDD or MOBO?05:24
linuxmintok, HDD works in another computer.06:12
linuxmintOther computer won't download gparted, stopping me reformatting the HDD.06:13
linuxmintI suspect the MOBO is blown, but no clear way to tell. CPU fan does run.06:15
zatrickyHey, guys - possibly not an Ubuntu-specific query (though this is for an Ubuntu server). I'm attempting to track down outbound connections to the local Apache server. Unfortunately netstat shows dashes in the pid column - super useless. tcpdump shows the traffic is going over the loopback interface using the public IP addresses.06:42
zatrickyTo answer my own query - lsof showed the culprit - I had to put it into a loop and quit as soon as it found something. I suspect the connections were so short-lived that typically the pid never existed by the time it was requested. But lsof appears to be more robust or "quicker" to get that data out. :)07:13
zatrickywhile true ; do lsof -Pni | grep "$local_ip:80 " && break ; done07:15
linuxmintSo, HDD not found on server. Put HDD into LinuxMint and finds HDD. Reformatted HDD to FAT32, Mint finds HDD. Put HDD back into server and doesn't find HDD?07:20
=== Lcawte|Away is now known as Lcawte
linuxmintOk, walkthrough for NFS server setup says # exportfs -ra. I receive error: exportfs: /etc/exports:1: unknown keyword "re"08:18
sorenlinuxmint: Clearly the first line of /etc/exports is busted.08:20
sorenlinuxmint: Dude, seriously, read the error message.08:20
linuxmintsoren: I fixed it, coding typo.08:21
linuxmintsoren: I read the error message, but didn't understand what is was referring to, but now I do.08:21
sorenIt's pretty clear. Line 1 of /etc/exports says "re" somewhere where it shouldn't.08:22
linuxmintCan I ask though, the NFS walkthrough says to edit /etc/default/portmap to get rid of "-l" or "-i 127.0.0.1". When I open the file there's no data in it?08:23
lordievaderGood morning.08:23
linuxmintOk, NFS server restarted, but portmap is a worry. Hopefully remote clients will be able to access it.08:24
linuxmintSo, final problem I'm stuck on is an NFS client won't recognise an HDD. The HDD and SATA data cable are tested ok. I swapped the SATA port connection and now both HDDs aren't recognised? I think I'll have to check the BIOS.08:25
linuxmintok, checked BIOS which also doesn't find the HDD.08:38
lordievaderlinuxmint: If you stick the hdd in another pc, does that one detect it?08:48
linuxmintlordievader: yes, HDD works find in LinuxMint.08:48
linuxmint*fine08:48
linuxmintThis Ubuntu server has a new MOBO so I assume BIOS is up to date...although maybe too modern BIOS for the HDD?08:48
linuxmintlordievader: I tried different SATA ports, which all work, but don't recognise the HDD.08:49
linuxmintlordievader: it's a Seagate Barracuda08:50
lordievaderlinuxmint: Does dmesg say anything about it?08:50
sorenIt's obviously not "LinuxMint" that finds it.08:51
sorenYou could install Mint on the other server all day long, but if the BIOS doesn't see it, you won't see it once it's booted.08:51
linuxmintlordievader: dmesg is too quick to see any message. I'll have to load the computer and try a command like $ dmesg or dmesg | tail -30. I still get stuck with viewing all the output of dmesg.08:52
linuxmintsoren: ye.s08:52
linuxmint*yes.08:52
lordievaderlinuxmint: Yes, search through it...08:53
linuxmintAnyone recommend an alternative to pastebin? I'm not confident Terminal lets me see all of $ dmesg. I scroll to the top of Terminal and can't see my original command $ dmesg.09:01
linuxmintlordievader: perhaps line 346? http://pastebin.com/wzP0GxkM09:03
lordievaderlinuxmint: Do you have four ssd's in your system?09:16
lordievaderI see a bunch of Intel SSD's and one Hitachi HDD.09:17
zetheroo1"implementation of systemd in upcoming Ubuntu releases might mean we should dump Ubuntu Server as systemd is bloated and not really what system admins need/want" - So I have heard ... I am not sold ... hence I am consulting the Oracle - you all! :D09:27
linuxmintlordievader: yes, I'm thinking or learning how to make RAID. I thought I'd try RAID 5 but not sure if it will work or be worth it?09:38
linuxmintlordievader: they're small, so I could afford them.09:39
lordievaderlinuxmint: I have no experience with raids.09:41
linuxmintlordievader: glad I'm not the only one. Thought I'd try, but don't see the worth in it really, apart from bragging rights.09:42
lordievaderOh, I can see the advantages. It is simply that I never wanted to spend money on it ;)09:47
=== matsubara-afk is now known as matsubara
gnuoyjamespage, If I'm creating a package merge request bug with an associated bzr branch I assume I don't need to upload deb diffs to the bug?09:58
jamespagegnuoy, bzr or debdiff09:59
jamespagenot and :-)09:59
gnuoytip top09:59
gnuoythanks09:59
zetheroo1so apparently systemd is only good for desktops and not server ...10:02
zetheroo1anyone!?10:03
ogra_zetheroo1, what alternative server distro would you use then10:03
zetheroo1well I am being told to switch to BSD10:03
ogra_i dont think any but slackware and gentoo will come without it10:03
zetheroo1but is it really true that systemd is only useful for Desktops?10:05
ogra_nonsense10:05
ogra_thats like asking if upstart is only good for desktops ...10:07
zetheroo1ok10:09
zetheroo1another thing I am being told is "if you need to fix stuff, you need to recompile C++ programs" ...10:09
zetheroo1true?10:09
ogra_its is just an init system ... its is different to others and yes it swallowed (and replaced) a bunch of core functionality with new stuff ... and yes, it offers some extra features for better desktop integration ... but it will be the default in most linuxes in the future which means documentation can be unified etc etc10:10
ogra_why dont you ask these questions in a systemd channel ?10:11
zetheroo1ok ... sorry, didn't know there was one ...10:11
zetheroo1is it on freenode?10:11
ogra_no idea10:12
ogra_it just doesnt seem like the right place to ask questions an upstream developer could answer you better10:12
zetheroo1ok :)10:14
gnuoyjamespage, Are you happy to sponser Bug #1401461 ? and if so should I assign it to you?10:22
uvirtbotLaunchpad bug 1401461 in python-logutils "Please merge python-logutils 0.3.3-2 (main) from Debian unstable (main)" [Undecided,Confirmed] https://launchpad.net/bugs/140146110:22
johncarper_Hello, this question might be abit offtopic here, but I recently purchased a 5.25 inch SATA Hard Drive mobile rack that has a molex connector for the power: http://i61.tinypic.com/2556k4n.jpg will I be able to power it trough my PSU with this cable: http://i59.tinypic.com/25i0p5v.jpg ?10:39
maxb5.25 inch SATA kit, really?10:43
maxbThe connector on the left does look like a molex power one10:44
linuxmintSo, can a faulty HDD stop a working OS HDD booting? Seems to make computer load into GRUB rescue?12:02
YamakasYcan't we run a centos mirror on Ubuntu ? we can run a Ubuntu mirror on centos12:19
=== Lcawte is now known as Lcawte|Away
makarahi. I'm trying to relink a deleted file inode using debugfs, but it doesn't recognize the filesystem /dev/simfs. I have to use debugfs. What can I do?12:30
makarai see this guy has the same problem: http://stackoverflow.com/questions/26326123/dev-simfs-no-such-file-or-directory-while-opening-filesystem12:32
linuxmintI'm stuck in GRUB rescue, can't get out?12:35
linuxmintI try boot, but error: Unknown command 'boot'12:37
=== Lcawte|Away is now known as Lcawte
dvargekhi guys, anyonen tried to install kernel 3.16 kernel on ubuntu 14.04 ?13:44
dvargeki had a problem last week, with a missing raidcontroller module13:45
dvargekit seems, the module 'megaraid_sas' is not included in the package13:47
smbhallyn, stgraber, I subscribed you both to bug 1401148 so we can figure out things. Last comment is a question which you probably can answer more quickly13:55
uvirtbotLaunchpad bug 1401148 in linux "Re/starting an lxc container corrupts all network namespaces on the same physical host" [Undecided,Confirmed] https://launchpad.net/bugs/140114813:55
stgrabersmb: gave you a vague reply on there, hallyn would have more details14:01
smbstgraber, ok, we may want the more info then. Like I noted a bit above the bad things don't seem to happen when one lets aa only complain about stuff14:04
caribourbasak: do you think that it would make sense to add a uvtool-simplestreams command to sync local images ?14:18
rbasakcaribou: what do you mean exactly?14:21
caribourbasak: to be able to load a local cloud image (i.e. an image file downloaded to local disk) as an image available for uvtool to use14:22
caribourbasak: for instance, I build my own debian jessie image that I want to use with uvtool14:22
rbasakcaribou: ah, I see. Yes - I'd like to have something like that. Better, integrate everything so you sync to only one place and everything can use it (including libvirt, tgz users and qcow users)14:22
rbasakcaribou: for your own image, you can use --backing-image-file14:23
caribourbasak: ah, let me look at that14:23
alex88hi guys, https://gist.github.com/alex88/26b064ec9ce50bc6d961 I'm trying ot downgrade a package, it says it will be installed but it doesn't do anything14:26
alex88any idea?14:27
=== wedgwood1 is now known as wedgwood
caribourbasak: ah, it's the only option missing in man uvt-kvm!14:32
caribourbasak: want a bug for that ?14:32
rbasakcaribou: ah. Yes please - I must have missed it and I think the manpage should be comprehensive. Thanks!14:33
caribourbasak: ok, I'll create the bug & fix it14:33
jrwrenanyone ever have a bash variable behave readonly but its not in the readonly list? http://paste.ubuntu.com/9476396/14:34
jrwrennot being able to set SSH_AUTH_SOCK is pretty terrible.14:34
caribourbasak: do you want the bug on upstream uvtool or the ubuntu/uvtool ?14:40
caribourbasak: looks like hallyn has already done it : bug #131726614:41
uvirtbotLaunchpad bug 1317266 in uvtool "add an option to specify a backing store disk file" [Undecided,New] https://launchpad.net/bugs/131726614:41
jrwrennevermind. I'm a fool over ssh_auth_sock14:44
=== ikonia is now known as Christmas_Jesus
=== Christmas_Jesus is now known as ikonia
=== ikonia is now known as Christian_ikonia
=== Christian_ikonia is now known as fictional_wizard
=== fictional_wizard is now known as ikonia
rbasakcaribou: just a warning about uvtool. There's a spike for snappy that hasn't landed yet.14:51
caribourbasak: ok14:52
rbasakcaribou: https://github.com/smoser/uvtool is the spike - I need to review, modify and merge as required, and that's the top priority for now. Though I imagine a man page fix should merge in fine.14:52
caribourbasak: I'll ping you before doing anything14:54
caribourbasak: this --backing-image-file is just want I wanted. Was a good idea to ask first :-)14:57
rbasakcaribou: :)14:59
rbasakcaribou: I added it when I needed it once :)14:59
caribourbasak: I use uvtool to test makedumpfile & kdump-tools kernel dumps & I needed that for debian15:00
caribouhad to enable kdump-tools to work with systemd15:02
=== Lcawte is now known as Lcawte|Away
=== MeltedDed is now known as MeltedLux
apwhallyn, hey, this netns corruption thing.  the behaviour changes if apparmour is put in moan mode, what it prevents is your attempt to remount /run/netns -slave; if you are able to do that things work, so i think this is something you need permission from aa to do16:13
hallynjjohansen: ^ what would the rule be to allow the ms-slave mounts?  (we turn all pre-existing mounts into slave mounts in our own ns to avoid umounting things on the host when starting a container)16:16
apwhallyn, i should say "appear to work to me" but i didn't do extensive tests there16:18
Azarilhey16:25
Azarilim getting16:25
Azarilhttp://pastie.org/private/newqkpx9vyhhbqfia40jtq16:25
Azarili dont understant where this is coming from...16:25
hallynapw: it makes sense16:27
hallynapw: what is the bug# again?16:42
hallynoh got it16:42
apwhttps://launchpad.net/bugs/140114816:43
uvirtbotLaunchpad bug 1401148 in linux "Re/starting an lxc container corrupts all network namespaces on the same physical host" [Undecided,Confirmed]16:43
apwi am not sure if this is a new behaviour mounts wise from "ip"16:43
avaloni was installing server 14.04.1 onto a dell poweredge r300 earlier today and chose the manual partitioning option, and every step of that process took a long time for something that seems instant on other distros - is that normal, or is there a reason it might be laggy?16:44
tewardAzaril: looks like maybe there's an issue with the mirrors somewhere... if i remember right i get that sometimes in the US mirrors, and it might resolve itself16:44
hallynapw: start-container profile already has:16:45
hallyn  mount options=(rw, slave) -> /,16:45
hallynoh16:45
apwmount(NULL, "/run/netns", NULL, MS_SLAVE, NULL) = -1 EACCES (Permission denied)16:46
apwbut regardless, it fails according to strace16:46
Azarilteward: its being doing it for a couple of weeks...16:48
Azarili get a valid response from the ip which is weird16:48
tewardAzaril: i poked the mirrors team to see if there's any known issues about it16:49
tewardAzaril: in the mean time all I can say is maybe try using a different archive mirror?16:49
Azarilhmmm16:49
hallynapw: adding "remount options=slave," doesn' thelp.  so this seems like either an apparmor bug, or a misunderatnding of how to specify the policy16:49
hallynsarnold: ^ do you know offhand?16:50
=== markthomas|away is now known as markthomas
apwhallyn, (ro, slave) perhaps ?16:52
apwmount options=(slave) -> /run/netns,16:52
apwor16:52
apwmount options=(ro, slave) -> /run/netns,16:52
apwwould be my guesses16:52
Azarildifferent mirror seems to have worked, cheers16:53
tyhicksapw, hallyn: this sounds like bug #135094716:53
uvirtbotLaunchpad bug 1350947 in linux "apparmor: no working rule to allow making a mount private" [Medium,Confirmed] https://launchpad.net/bugs/135094716:53
tyhicksapw, hallyn: I'm only vaguely familiar with that bug but I think it may be what you're bumping into16:53
apwtyhicks, i suspect that that is indeed, in part what we are bumping into, in that i think we need that rule, and could not specify it even if we want to16:56
hallyntyhicks: agreed,16:58
hallynjust added a comment to 1401148 , only 'mount,' works for me16:59
hallyntyhicks: haha, and i noted htat in a comment in that bug17:01
hallyn(so this was known in august)17:01
tyhicksWe've been prioritizing other bugs/features higher than that one17:05
tyhickshallyn: is it now a blocker for something you're doing?17:05
hallyntyhicks: not me.  jamespage ^17:11
jamespagehallyn, ?17:12
hallynjamespage: you filed bug 140114817:13
uvirtbotLaunchpad bug 1401148 in linux "Re/starting an lxc container corrupts all network namespaces on the same physical host (dup-of: 1350947)" [Undecided,Confirmed] https://launchpad.net/bugs/140114817:13
uvirtbotLaunchpad bug 1350947 in linux "apparmor: no working rule to allow making a mount private" [Medium,Confirmed] https://launchpad.net/bugs/135094717:13
hallynyou didn't assign it a priority though17:13
hallynso the q is is this blocking something for you17:14
hallyntyhicks: i guess i'tll block use of containers in neutron?17:15
hallynfor zul's nc-lxd, the answer may be that since the containers run unprivileged, we do in fact just allow "mount,"17:15
hallyn(as workaround)17:15
tyhicksok17:16
tyhickswe'll (the sec team) will discuss if we can give it more attention in the short term17:16
hallynin fact  based on the Description I guess it actually prevents some basic setups (without containers as guests, just containerizing some services on the host) are bein prevented17:20
hallynreally i'd argue this comes down to poor design in 'ip netns', which is very limited, and should not have been used by neutron17:24
hallyn(wonder if making /run/netns itself unbindable would be useful)17:30
=== martinst is now known as martins-afk
sbtechcomanyone here deal with MaaS?17:38
jamespagehallyn, not immediately17:38
jamespagehallyn, but its needs resolving for the target architecture we have for deploying openstack this cycle17:38
jamespageright now putting anything under lxc on a neutron gateway node is not a great story17:39
=== martins-afk is now known as martinst
=== Lcawte|Away is now known as Lcawte
hallynjamespage: tyhicks found the problem17:41
jamespagehallyn, ok - so at least I'm not going mad17:44
jamespagehallyn, medium is fine for now17:44
hallyncool, thx17:46
jamespagehallyn, remind me again how I fix the mtu of the veth interfaces for an lxc container to 9000?17:54
=== bilde2910|away is now known as bilde2910
hallynjamespage: lxc.network.mtu = 900018:02
jamespagehallyn, hmm yes18:25
jamespagehallyn, OK - so I have another interesting bug then18:26
jamespagehallyn, if I stop/start using the lxc-* commands - all's good.18:27
jamespagehallyn, if I reboot within the container, the veth on the host gets reset to 150018:27
jamespagebut inside it still thinks its 900018:27
jamespagethat has some odd effects18:28
jamespageI'll raise a bug shortly18:28
hallynjamespage: hm, drat, not sure where that'll be happening.  got a afeeling that may become a hairy interaction of upstart jobs18:29
=== markthomas is now known as markthomas|away
johncarperHello, I'm trying to allow apache on iptables as i'm using a cups print server, I've tried adding serveral rules to my iptables but none of them worked. I'm trying to access it from my pc on tesame network, anyone know what might be wrong? Everything works fine with iptables disabled19:21
johncarperhere are my iptables rules: http://pastebin.com/0yT5u1eT19:21
Madkisshi folks19:24
MadkissIf I device to install systemd on ubuntu 14.04, does that systemd come with a compatibility layer for upstart?19:25
lordievaderMadkiss: In 15.04 I could enable systemd without any modification. That said, systemd is to my knowledge not supported on 14.04 or 14.10.19:45
Madkissokay, thans19:47
dmsimardIs there a specific channel for Ubuntu core ? #ubuntu-core is empty :)19:59
soren#snappy20:02
sorendmsimard: ^20:02
sacardehi20:02
sacardeis possible to re-exec network configuration by consolle ?20:03
sorenSure. restart networking20:05
sacardeno no20:06
sacardeI have to change config20:07
sacardeby consolle, by script automated20:07
sorenWell, then say re-config, not re-exec.20:07
sacardeyes20:07
sacardere-config20:07
sacardelike during installation20:07
dmsimardsoren: ty20:11
=== markthomas|away is now known as markthomas
jamespagehallyn, https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/140165820:38
uvirtbotLaunchpad bug 1401658 in lxc "Host veth mtu not preserved during container reboot" [Undecided,New]20:38
hallynjamespage: ok, thx20:53
lordievadersacarde: You mean edit /etc/network/interfaces?20:54
hallynjamespage: though i'm not observering the same (on utopic)20:56
jamespagehallyn, thats on 14.04 with stock 3.1320:56
* hallyn tries on a vm20:56
jamespagehallyn, prob worth pointing out21:02
jamespageeth0 (9000) <-> juju-br0 (9000) <-> veth (9000)21:02
hallynjamespage: and it's the host side veth that gets its mtu reset?21:07
jamespagehallyn, yes21:07
hallynjamespage: oh, what guest release?21:07
jamespagehallyn, all 14.0421:08
hallynk21:08
hallynjamespage: trusty VM with trusty containre still don't reproduce, using lxcbr0.21:19
jamespagehallyn, I'll try make a reproducer up21:19
jamespagebut not tonight21:19
hallynjamespage: do you have other containers running with mtu 1500 by chance?21:20
hallynor, VMs attached to the juju bridge with 1500 mtu?21:20
jamespagehallyn, all containers are set to mtu 900021:20
jamespagewell at least the ones attached to the juju-br0 are21:20
hallyninteresting.  yeah reproducer will be appreciated - thanks, good night21:21
blacknred0I think I know the answer to this..... but is there a way to have crontab sending an email without having to install a mail server?22:15
keithzgblacknred0: yup, in fact I swear by default it does; certainly you can use utilities like mailx22:16
blacknred0thanks keithzg! - I tried without it and no mail was sent out.  I will give mailx a try.22:18
keithzgblacknred0: no problem; worth mentioning, I don't think the traditional bsd-mailx can send without an MTA, you'll probably need to specifically use heirloom22:24
medecauEvening all, I am trying to disable Logstash as a service. I whish to control it through supervisord. Not sure how to go about it. #ubuntu said #ubuntu-server is the place to ask.22:27
rberg_I am trying to track down why the password on my iDRAC keeps getting reset during a debootstrap based install. looking at the time stamps it appears to be happening during package installation, has anybody here experienced this before?22:39
rberg_BTW I agree that doesnt make much sense :(22:42
rberg_NM found it, it was a custom package22:47
linuxmintCould I get some help with formatting disks? I'm not sure whether to use ext1,2,3,FAT32. I only need the disk for storing backups, so maybe ext3. The command I have is # mksf.ext3 /dev/sde. Could someone confirm as it's a bit scary.22:51
linuxmintActually, how to check if the new disk is formatted or what's on it? I tried # cd /dev/sde, but error: Not a directory.22:55
keithzglinuxmint: you can use fdisk or parted to look at how drives are partitioned or formatted from the terminal. If you have a GUI and you're new at this, you might want to use GParted instead.23:05
keithzglinuxmint: fdisk is the classic way of listing partitions, but parted is the more modern one; "sudo parted --list" will show you how things are currently partitioned, and you can use to to format the drives/partitions themselves too.23:13
keithzg(main reason to use parted instead of fdisk is that fdisk doesn't support GPT, which is the partition table scheme that is often used these days)23:14
linuxmintkeithzg: thank you. Yes, I'm familiar with # fdisk -l and GParted, however I'm SSHing into the computer, so I don't think the GParted GUI will work. The new HDD doesn't show any partitions...just 500 GB, so I thought I'd see if it's formatted or has any files, before trying to format to perhaps ext3?23:17
keithzglinuxmint: Yeah, then gparted or fdisk are your friend (although to see if there are any files, you'll then have to mount any partitions you see). But you *can* get GUIs working, if you ssh with the -X flag! (Although that's slightly tricky since you'll probably need root to use GParted).23:20
keithzgerr, sorry, by gparted first there I just meant parted.23:21
keithzgGParted is the frontend for parted.23:24
keithzgOr more accurately, I think they both use libparted.23:25
=== Lcawte is now known as Lcawte|Away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!