/srv/irclogs.ubuntu.com/2014/12/17/#ubuntu-server.txt

=== martins-afk is now known as martinst
=== martinst is now known as martins-afk
=== martins-afk is now known as martinst
devilspgdn00b bash question. I want to umount the path where a shell script lives, can it copy itself to a temporary location and run from there?00:22
devilspgdOr more specifically, how do I make the copy from the original location terminate immediately?00:22
=== martinst is now known as martins-afk
devilspgdI thought throwing a "&" on the end of the call to temp script might work, but it still holds a lock on the original script in the child.00:23
sarnolddevilspgd: the 'exec' builtin might be what you need, it replaces the current process with a new process -- which could be /tmp/path/to/copied/shellscript.sh  or simimlar00:26
devilspgdThat sounds like exactly the one, thanks.00:26
devilspgdWorks like a charm, thanks. I knew I read something somewhere at one point, but I couldn't think of it at the time.00:28
sarnoldnice :)00:30
=== Nigel_ is now known as G
=== NotADJ is now known as TDJACR
=== markthomas is now known as markthomas|away
=== zz_DenBeiren is now known as DenBeiren
=== akaWolf1 is now known as akaWolf
LarsNwould this be the right place to ask about the Orange-Box?06:30
LarsNI have one, and just need to be pointed at some proper documentation on the best way to interact with Juju and Maas06:31
=== liam_ is now known as Guest72494
nileshjjohansen: found anything?08:00
jjohansennilesh: I haven't gotten back to it yet08:00
jjohansennilesh: however the hexdump you provided shows me that the compliled profile has dropped the network rules08:03
jjohansennilesh: so either I am going to have to track down why its dropping those rules, and then maybe be able to provide a work around, OR I am going to have to build you a new parser that doesn't have the issue08:06
jjohansenhrmmm, I guess that is a little more than when we talked last08:07
jjohansennilesh: can you provide me the output of08:17
jjohansen  cat /sys/kernel/security/apparmor/features08:17
jjohansenand08:18
jjohansen  cat /etc/apparmor.d/cache/.features08:18
White_CatIs there a mail server that I can use with ubuntu-server. I was looking at postfix but that requires creation of ubuntu accounts per each email account. I'd rather keep the two seperate as users will never ever login to the ubuntu server and they tend to use less than ideally srong passwords08:33
jjohansenWhite_Cat: there are lots of mail servers http://en.wikipedia.org/wiki/Comparison_of_mail_servers08:41
White_Catwell yes08:43
White_Catthats why I am asking for a reccomendation :)08:43
White_Catits more of a taste issue after a certain point08:43
White_Catand I tend to have poor taste in mail servers :p08:43
alex88export PATH=$PATH:$HOME/vendor/vips/bin and export PATH="$PATH:$HOME/vendor/vips/bin" isn't exactly the same thing?08:44
White_Catideally I want the mail server to have exchange support08:44
jjohansenalex88: no they aren't if either of the $PATH or $HOME variables contain whitespace08:48
alex88jjohansen: oh awesome, thanks a lot!08:49
lordievaderGood morning.09:02
nocturnal_I got a server that was going to be e-wasted and installed ubuntu-server on it. i've been using it to store my media, however i have a lot of cpu power that is not being used.09:38
nocturnal_does anyone have any ideas or fun projects that might help me learn more about computing?09:38
RajviHello Everyone.09:46
nocturnal_Hi Rajvi09:46
RajviWhat's the easiest & effective procedure to switch between multiple php & apache versions on a LAMP setup?09:47
Rajvi?09:50
nocturnal_I don't know09:54
nocturnal_are you upgrading?09:54
RajviNo, I need to use somehow php 4.x & some old Apache version , so what this old program works!09:56
adsccan't you just run a virtual machine?09:58
nocturnal_Don't you just need to configure PHP to work with Apache? Which version of PHP?10:03
=== lifeless_ is now known as lifeless
samgoodyHello all. when I do cat /etc/hosts I get a different listed fqdn then hostname -f10:16
samgoodyI realize that something extremely obvious, like I shouldnt be checking /etc/hosts for the fqdn. Could someone help?10:17
Eggs_samgoody: if you have changed you hostname previously you need to change it in /etc/hosts too, which you may have forgot to do10:21
samgoodyThanks.10:26
samgoodyI changed it once using hostname me.example.com10:27
samgoodyAnd since then have had issues ;)10:27
samgoodyAlso, whereas before this my hostname was "me", and fqdn was "me.oldomain.com" the new hostname is the same as the hostname -f: me.example.com10:28
samgoodyHow do I fix that so that hostname should be "me" and only fqdn be "me.example.com"10:28
Eggs_samgoody: not too sure on that one, i would just have it the same, are you wanting it different for the bash promt or something?10:30
samgoodyNo, I just figured it ought to be different since that's what I see in all examples of hostnames online10:32
Eggs_samgoody: its based on the /etc/hosts file, so at the top instead of having 127.0.0.1 me you would have 127.0.0.1 me.olddmain.com10:36
samgoodythanks10:39
=== Lcawte|Away is now known as Lcawte
sunstardoes the php_mail function work for anyone? i've been using ubuntu since 9.10 and phpmail has never worked on any of my boxes. is this normal?11:03
samgoody127.0.0.1       localhost.localdomain localhost11:12
samgoodyWhat does the localhost.localdomain mean11:12
samgoodyOn the linode tutorial, they suggest: 127.0.0.1  localhost11:12
samgoodyWhy skip that?11:12
YamakasY_why is this partition scheme ignored ? it just creates swap and / on vg00 http://pastebin.com/7a3uyXZh12:33
=== YamakasY_ is now known as YamakasY
=== Lcawte is now known as Lcawte|Away
=== Lcawte|Away is now known as Lcawte
=== martins-afk is now known as martinst
jamespagetinoco, looking at https://bugs.launchpad.net/ubuntu/+source/pacemaker/+bug/138284214:36
uvirtbotLaunchpad bug 1382842 in pacemaker "SRU breaks pacemaker in 14.04" [High,In progress]14:36
jamespagethe pacemaker binary is tied directly to the binary versions of the libraries it produces?14:37
tinocojamespage: i fixed one regression yes14:44
tinocoit looks like libraries were not being updated together14:44
jamespagetinoco, erm they are14:45
jamespagetinoco, I'm trying to understand why it breaks14:45
tinocoso there could be a situation when users updated binary without libraries14:45
jamespagetinoco, the ABI is the same upstream version14:45
jamespageso it should not14:45
tinocojamespage:  let me revisit this14:45
tinocoso i can remember proplery14:45
jamespagetinoco, if the pacemaker binary hard depends on exactly the same packaging version, then we should do that in debian/control14:45
=== jdstrand_ is now known as jdstrand
tinocoi remembered14:46
tinocoversion used by Ubuntu did not cause14:46
tinocodh_makeshlibs to behave properly14:46
tinoco(the string gitXXXX-something)14:46
tinocohttps://bugs.launchpad.net/ubuntu/+source/pacemaker/+bug/1368737/comments/1714:47
uvirtbotLaunchpad bug 1368737 in pacemaker "Pacemaker can seg fault on crm node online/standby" [Undecided,In progress]14:47
tinocotake a look at this comment please14:47
TimNIs there any way I can only allow a specific list of IP adresses to a specific port on my server?15:02
tewardTimN: firewall restrictions, or at the application level.15:03
TimNI don't think it's possible at application level. It's about a Minecraft server.15:04
tewardTimN: probably individual rules in iptables or ufw to allow from specific IP addresses.15:04
tewardTimN: then you're stuck using firewall rules15:04
TimNOkay, so iptables...15:05
tewardTimN: or ufw15:05
tewardi use iptables15:05
teward`sudo iptables -A INPUT -p tcp --dport MINECRAFTPORT -s IP.AD.DR.ESS -j ACCEPT15:05
tewardone of each of those for the IP addresses you want to allow15:05
tewardsudo iptables -A INPUT -p tcp --dport MINECRAFTPORT -j REJECT --reject-with icmp-host-unreachable15:05
tewardthat should ONLY be run as the last rule15:06
TimNThat blocks all others?15:06
teward(and that adds a REJECT such that if it doesn't match the other IP addresses, it'll just fail for others15:06
tewardyep15:06
TimNAh.15:06
tewardthat's what the last one there does15:06
TimNAnd if I'd want to add another IP later?15:06
tewardTimN: `sudo iptables -L -n INPUT`15:07
tewardfind the rule which has REJECT as the target15:07
tewardcount where in the ruleset that is15:07
tewardthen: sudo iptables -I INPUT THENUMBER -p tcp --dport MINECRAFTPORT -s IP.AD.DR.ESS -j ACCEPT15:07
TimNAre those rules placed in a file?15:08
tewardTimN: no, those are command-line commands you run15:08
tewardthey're not saved unless you save them with `iptables-save > /some/path/`.15:09
jhobbshttp://dev.bukkit.org/bukkit-plugins/iplist/15:09
tewardyou can use the iptables-persistent package to help though15:09
jhobbsif you use bukkit :/15:09
TimNJhobbs, would be nice if Bukkit was available. ;P15:09
TimNTeward, does "sudo iptables -I INPUT THENUMBER -p tcp --dport MINECRAFTPORT -s IP.AD.DR.ESS -j ACCEPT" place the rule before THENUMBER or as THENUMBER?15:15
tewardTimN: it inserts it as THENUMBER and then pushes what was there down one15:23
tewardso if the REJECT is the 5th rule, then -I INPUT 5 puts your new rule before that 5th rule (the REJECT) as rule #5, and the REJECT moves to rule #615:23
TimNOkay. Nice.15:24
TimNThanks for your help. =)15:24
=== Lcawte is now known as Lcawte|Away
rbasakgnuoy: looking at lp:~gnuoy/ubuntu/vivid/python-logutils/update-to-0.3.3-2, I can't seem to apply fix-_levelNames-vs-_levelToName.patch cleanly. I'm not sure if this is me not handling the bzr branch right though.15:50
rbasakAh, I see you're on holiday this afternoon.15:50
rbasakI'm out from tomorrow.15:50
rbasakI'll leave it for now.15:50
rbasakgnuoy: looks to me that the patch is right, but it isn't applied in the bzr branch even though .pc/ says it should be or something.15:52
rbasakThis is an area where I get very frustrated with UDD and bzr. AIUI, stuff in UDD is supposed to be committed with all quilt patches applied and a corresponding .pc/ set up correctly.15:52
rbasakSo the first thing I tried to do was "quilt pop -a" on your branch, which failed.15:52
rbasakOTOH, "quilt pop -a" on lp:ubuntu/python-logutils works15:53
fandihi16:24
fandii got udp packet16:25
fandihere is my result from tcpdump16:25
fandihttp://paste.ubuntu.com/9551966/16:25
fandiis there any exploit on rpcbind or rpc.stat16:26
fandi ?16:26
fandiplease need your help :) thanks16:26
tewardfandi: those look like DNS requests and responses... but without me dumping that into wireshark i can'tbe certain of that.16:27
fanditeward: yups it's query unavailable domain A? lzj.passwd1.com.16:29
fanditeward: i never found like this, and only rcpbind, rpc.stat which running with proto udp16:29
tewardfandi: looks like something on your system is triggering those queries, but from a simple packet log you won't find out what's issuing those requests on your system16:30
tewardunless it's whatever's running on rpc16:30
fanditeward: is possible to try stop rpc ?16:31
=== markthomas|away is now known as markthomas
samba35i have configure a network with openvswitch i am faceing two issuses ,1 )how do i fix ifconfig eth0 to ipaddress 0.0.0.0 after bridge is configure (i am using ovs version 2.0.2 with vlan16:49
tinocojamespage:  talking about LP: #1382842, fix is on LP: #136873717:22
tinocojamespage:  could u sponsor that ?17:22
jamespagebug 136873717:22
uvirtbotLaunchpad bug 1368737 in pacemaker "Pacemaker can seg fault on crm node online/standby" [Undecided,In progress] https://launchpad.net/bugs/136873717:22
jamespagebug 138284217:22
uvirtbotLaunchpad bug 1382842 in hacluster "SRU breaks pacemaker in 14.04" [High,In progress] https://launchpad.net/bugs/138284217:22
jamespagetinoco, that last one was the one I had query over17:22
tinocoyep17:23
tinocojust talked with dosaboy17:23
tinocoit seems that they might have a temporary fix into a charm17:23
tinocobecause apt-get update might misbehave17:23
jamespagetinoco, I was unclear as to why pacemaker requires an exact package version match with its associated libs17:23
jamespagetinoco, there is a charm bug and dosaboy has a fix for that which will help things17:23
tinoco1368737 -> #16 and #1717:23
jamespagetinoco, but I'm not 100% happy with the fix approach17:23
tinocojamespage:  u think changing version would be better ?17:24
jamespageno17:24
jamespagetinoco, I just don't see why the mismatch causes this error17:24
tinocobecause of latest fix (-updated)17:24
tinocolibraries have to be at the same version17:24
tinocoorelse you get:17:25
tinocoOct 18 20:54:16 saturn crmd[23424]: warning: do_lrm_control: Failed to sign on to the LRM 2 (30 max) times17:25
jamespageoh right I see17:25
jamespagein which case that's not the right fix17:25
jamespagepacemaker should be depending explicitly in d/control on a matching binary version17:25
jamespagewhich will force the upgrade17:26
jamespagemaking shlibs depend on a packaging version is not a good idea17:26
jamespagetinoco, leave this with me - I need to sortout vivid first and the packaging is awkward17:26
tinocojamespage: ok. let me know if you need me to change anything for you17:27
tinocotks james ;)17:27
jamespagetinoco, np17:27
tinocojamespage: i was also talking with arges about proposing 1.1.12 into sid (mid jan)17:27
tinocoand bringing the new version to ubuntu also.. 1.1.12 has lots of bug fixes17:27
jamespagetinoco, yeah maybe17:27
tinocothat would be good for us (a lot)17:27
jamespagetinoco, I've been working on 1.1.12 for vivid17:27
=== martinst is now known as martins-afk
tinocoperfect :)17:28
tinocoso i´ll leave it with  you tks again17:28
jamespagetinoco, but I might chicken out and do 1.1.11 for now17:28
tinocook.. i´ll propose 1.1.12 to debian-ha17:28
tinocoand see what they come up with17:28
jkyleI'm getting the following error when trying to add a gpg key to a precise server: keyserver timed out17:36
jkyleI thought it might be due to port 11371 being blocked, but nmap -p 11371 keyserver.ubuntu.com shows the port as open17:36
jkyleand Ihave no firewall on this machine17:36
rberg_you could try a different key server17:37
jkylewell, I can. but this is for some automated scripts. so is keyserver.ubuntu.com unreliable in some way? Is there a more reliable keyserver I should use?17:38
rberg_that I dont know17:40
rwwjkyle: yes, keyserver.ubuntu.com is unreliable. I'd recommend pool.sks-keyservers.net17:51
=== bilde2910 is now known as bilde2910|away
=== martins-afk is now known as martinst
pmatulisrww: how did you conclude keyserver.ubuntu.com is unreliable?  is there a known problem?18:27
rwwpmatulis: because half the time I make requests to it it fails18:28
rwwand the response I got from someone (forget who) was "yeah, that's a thing" basically18:29
=== bilde2910|away is now known as bilde2910
pmatulisrww: alright, thx18:42
alias_neoHey chaps. Having issues authenticating to my freeipa server from ubuntu 14.10 server. I can authenticate from 14.04 desktop and 14.04 server though. Anyone have any ideas please?18:44
sarnoldalias_neo: any errors or warnings on either the client or the server?18:45
alias_neoThe server doesn't complain, but I've got the sssd logging on high on the client, there's quite a lot of stuff, nothing that stands out to me (but I'm an sssd/ipa noob)18:45
alias_neoI@m just about to compare it with the sssd log of a working client18:46
=== Lcawte|Away is now known as Lcawte
alias_neo I see this in the broken server log just before it all goes wrong:  No ccache file for user [<username>] found.18:54
sarnoldalias_neo: interesting... what's a ccache file in the context of freeipa? :)18:55
alias_neoNot entirely sure but I believe it's to do with sssd caching credentials18:55
sarnoldaha, so not a caching c compiler >:->18:56
alias_neohehe no18:56
YamakasYany partman pro's in here ?18:56
YamakasYman it's giving me a hard time18:57
=== Lcawte is now known as Lcawte|Away
=== chmurifree is now known as chmuri
proqcan someone point me to the best guide to installing a gnome desktop environment on ubuntu server 14.10?19:51
dasjoeproq: "apt-get install tasksel; tasksel install ubuntu-gnome-desktop" should do the trick19:55
proqthanks19:56
dasjoeMind you, this will pull in everything as if you selected "GNOME desktop" during the installation19:56
=== martinst is now known as martins-afk
Noskcajzul, We can you check if we can sync python-tornado now? upstream says it was fixed by our current pycurl. https://github.com/tornadoweb/tornado/issues/67120:19
YamakasYwhich channel do I need for partman help ?20:28
pmatulisYamakasY: try #ubuntu-installer21:01
YamakasYpmatulis: yeah that channel seems to be dead21:02
pmatulisYamakasY: it's definitely not a "hot" channel but i wouldn't call it dead21:04
pmatulisYamakasY: maybe a mailing list is more appropriate21:04
YamakasYpmatulis: yeah got some help months ago... good idea21:06
=== mwhudson_ is now known as mwhudson
=== Lcawte|Away is now known as Lcawte
=== sync0new is now known as sync0pate
=== bilde2910 is now known as bilde2910|away
kyle__if you have multiple interfaces, and only one has the gateway line, will that always be set as the default gateway in the routing table?22:21
kyle__I have a bridge (virbr1) that sets a specific route via postup, and a tagged vlan, which is supposed to have the default route (set using gateway in interfaces file), but it's using the virbr1's route as default, and the tagged vlans as specific.  I think22:23
kyle__s/specific/static/22:28
kyle__But you know what I mean.  Ihope.22:28
=== Lcawte is now known as Lcawte|Away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!