/srv/irclogs.ubuntu.com/2015/01/05/#ubuntu-server.txt

jdzielnycryptodan, figure this one out: grub installs fine to the raid array drives as long as they're not sda and sdb during installation -- the first has to be sdb or higher -- bizarro errors00:21
cryptodanweird01:03
=== Lcawte is now known as Lcawte|Away
jdzielnyYeah.  I didn't bother with LVM on this box, so I won't be able to resize root beyond 100G but I have a /home that's almost 1TB, plus another 8TB of space to work with, plus a NAS drive lol01:32
=== negronjl_afk is now known as negronjl
=== Guest48642 is now known as rcj
=== rcj is now known as Guest3092
=== zz_DenBeiren is now known as DenBeiren
=== Guest98005 is now known as IdleOne
=== zz_DenBeiren is now known as DenBeiren
gblfxtugh, zabbix with pgsql07:11
ruben23hi guys any issue on my command to mount a share somehow..?? ---> http://pastebin.com/xpXYQ77d07:16
ruben23mount -t cifs -o username=pabxuser //192.168.7.8/calls /mnt/nas/rec username=pabxuser,password=11cvk@5fgszxja,sec=ntlm07:16
=== zz_DenBeiren is now known as DenBeiren
lordievaderGood morning.07:42
=== Guest87023 is now known as hxm
=== Lcawte|Away is now known as Lcawte
=== gema_ is now known as gema
=== Lcawte is now known as Lcawte|Away
=== Odd_Blok1 is now known as Odd_Bloke
sander^workHow come the bootloader dosnt count down.. so it never boots? in ubuntu 14.01?09:37
=== Lcawte|Away is now known as Lcawte
=== liam_ is now known as Guest28200
jamespageTribaal, gnuoy: would either of you have time to verify the fix for https://bugs.launchpad.net/ubuntu/+source/python2.7/+bug/108102209:54
uvirtbotLaunchpad bug 1081022 in python2.7 "logging.SysLogHandler doesn't close UNIX socket when connection failed" [High,Fix committed]09:54
jamespageas I did the change, I'd prefer not to check my own work!09:54
gnuoyjamespage, sure, I can take a look09:55
yossarianukhi - can anyone try and help explain what is occurring??  I have made a .deb package  - it contains binary files that appear to exist i.e I can see with ls) however when you try to execute them you get 'No such file or directory'09:59
yossarianuki.e -  ls -la /opt/monitiq-agent/jre/bin/java  - can see '-rwxrwxrwx 1 root root 55903 Sep  8 16:33 /opt/monitiq-agent/jre/bin/java'09:59
yossarianukbut when I run it09:59
yossarianuk-bash: /opt/monitiq-agent/jre/bin/java: No such file or directory09:59
yossarianukhow can this be happening ?10:00
gnuoyjamespage, tested fine, bug updated10:06
jamespagegnuoy, ta10:11
jamespagegnuoy, can you retag verification-done as well please10:28
jamespagethat lets the SRU team know its been tested OK10:28
=== Lcawte is now known as Lcawte|Away
gnuoyjamespage, I've s/needed/done/ but left mos alone ? what is mos?10:30
jamespagegnuoy, mirantis openstack10:30
gnuoyta10:30
jamespagecoreycb`, ceilometer uploaded10:52
jamespagewas ok with new pecan version10:52
=== shredding_ is now known as shredding
=== suigeneris is now known as Kartagis
jamespagezul, rename oslo.concurrency to oslo_concurrency12:26
jamespagejoy!12:26
roaksoaxfun fun12:27
roaksoaxjamespage: happy new year!12:27
jamespageroaksoax, happy new year to you as well!12:27
jamespageroaksoax, did you have a nice christmas?12:27
roaksoaxjamespage: i did indeed, how about yourself?12:27
jamespageyup nice12:28
* roaksoax still enjoying the beach :D12:28
collizionroaksoax: All my jealousy. :P12:29
roaksoaxlol12:29
=== coreycb` is now known as coreycb
jamespagetinoco, hey - would you be able to verify the pacemaker update that in proposed for utopic and trusty?12:52
=== zz_DenBeiren is now known as DenBeiren
=== rbasak_ is now known as rbasak
zuljamespage:  yeah tell me about it13:41
=== Lcawte|Away is now known as Lcawte
=== Pici is now known as Guest50504
=== Pici` is now known as Pici
=== Pici is now known as Guest63806
=== Guest3092 is now known as rcj
=== Pici` is now known as Pici
=== Lcawte is now known as Lcawte|Away
jamespagecoreycb, keystone uploaded and fix for SSL issues proposed upstream14:28
coreycbjamespage, k14:28
jamespagecoreycb, +1 thats fine for us as zul reverted the offending piece of code in our version14:30
jamespagegnuoy, fancy doing the first part of an MIR for a new openstack dependency?14:37
gnuoyjamespage, I'd very much like  to make a start but fwiw I have a few bits and bobs going on14:39
jamespagegnuoy, ack ok14:47
=== martins-afk is now known as martinst
=== Guest93916 is now known as balloons
LarsN_kirkland: would you happen to be around?14:59
=== LarsN_ is now known as LarsN
kirklandLarsN: I am;  in a meeting at the moment, but I'm here(ish)15:05
LarsNkirkland: would you be a good source to talk to regarding an orange box?  I have one and would love to know what additional documentation there is for them.15:07
=== Lcawte|Away is now known as Lcawte
=== Stuxnet is now known as Stuxnet[A]
* Stuxnet[A] is now away - Reason : Away16:30
gniteHi, could someone tell me whether there is any mechanism which might be blocking outgoing connections on one port other than iptables? Can't get anything out on 25 (email) but the guys where I rent the server from have assured me (twice) that they're not blocking anything.16:54
colliziongnite: I'm assuming you've tried multiple remote servers that you can connect to on port 25 on other systems16:55
gnitecollizion: Correct.16:55
gniteNo response, all connections time out.16:55
gniteIPTables has everything on allowed and is disabled anyway.16:57
colliziongnite: Then something's got to be blocking it.16:57
colliziongnite: Which isn't a helpful observation, I know. :/16:57
gniteYup, it's slowly driving me insane.16:58
=== markthomas|away is now known as markthomas
rbasakgnite: try tcptraceroute maybe?17:09
=== keithzg_ is now known as keithzg
RoyKgnite: a lot of ISPs block outgoing SMTP17:18
RoyKgnite: ask them if they have a smart relay host17:18
collizionrbasak: I've always done that manually with nping. There's a tool for it. GDI.17:19
gniteYeah, thing is, it's not exactly a regular home ISP but a hosting provider with virtual and dedicated servers.17:20
gniteAnd they told me twice that they're not blocking 25 and everything should work fine if configured properly.17:21
collizionBut as we found out, it's getting dropped at your second hop router.17:22
gniteRight, which makes it even more weird.17:22
collizionBut hey, at least you have something to move forward with.17:24
RoyKgnite: well, ask them if they've got a relay host17:27
gniteRoyK: I'll do that17:28
coreycbzul, jamespage: glance is ready for review - https://code.launchpad.net/~corey.bryant/glance/2015.1-b1/+merge/24524918:01
zulcoreycb:  ok gimme a sec18:02
zulcoreycb:  done18:07
coreycbzul, thanks18:07
=== kickinz1 is now known as kickinz1_afk
rostamHI I am using ubuntu 14.0 server release.  IWhat this indicates: " 2.19-0ubuntu6.3" ? thanks18:33
lordievaderrostam: It's a version of something, where do you see that?18:33
RoyKrostam: 14.04?18:34
rostamlordievader, I get some package conflict during installation of apt-get <some packages>  It complains about libc6-i386 dependencis. I think something is broken in my private repo.18:35
lordievaderrostam: What package specifically?18:36
rostamlordievader,  libc618:36
lordievader!info libc6 trusty18:37
rostamlordievader,  Thank you.18:37
ubottulibc6 (source: eglibc): Embedded GNU C Library: Shared libraries. In component main, is required. Version 2.19-0ubuntu6.4 (trusty), package size 3908 kB, installed size 9250 kB18:37
lordievaderrostam: In the official repo there is a slightly newer version.18:37
rostamlordievader,  is there a way I can force the 2.19-0ubuntu6.3 not to be updated with its newer version  2.19-0ubuntu6.4  ?18:39
lordievaderPinning libc6 doesn't sound like a good idea to me...18:39
rostamlordievader,  I have done something stupid not sure what, I use private repo for our embedded system and I upgrade that repo rarely. Somehow the repo is broken since I get this conflict.18:40
lordievaderUpdate the repo?18:42
rostamlordievader,  yes, I am working toward that goal, thank you...18:43
lordievaderrostam: Could you pastebin the exact error you are seeing?18:44
rostamlordievader,  thank you  sure will take one min.18:45
rostamlordievader,  http://paste.ubuntu.com/9678117/18:48
lordievaderrostam: I suppose libc6-i386 comes from your repo and libc6 from the Ubuntu one?18:49
rostamlordievader,  yes, that is correct.18:50
lordievaderHmm, well you see the problem the one is updated and the other isn't. And libc6-i386 uses a fixed/precise dependecy (instead of >=).18:51
rostamlordievader,  unfortunately I do not have enough knowledge why that has happened.18:52
rostamlordievader,  is there a way to force libc6-i386 to be updated to the latest?18:53
lordievaderrostam: Update your libc6-i386 and you should be fine, or include an older libc6 in your private repo.18:53
rostamlordievader,  apt-get upgrade libc6-i386 gives me the same error...18:54
lordievaderrostam: What is the output of 'apt-cache policy libc6-i386'?18:54
lordievader!info libc6-i38618:54
lordievader!info libc6-i386 trusty18:54
ubottuPackage libc6-i386 does not exist in utopic18:54
ubottuPackage libc6-i386 does not exist in trusty18:54
rostamlordievader,  http://paste.ubuntu.com/967814518:55
lordievaderHmm, which package depends on libc-i386?18:57
lordievaderSeeing as it doesn't exist in trusty leads me to think that that package is not compatible/made-for trusty.18:57
rostamlordievader, we have a amd driver which requires 32 bit and 64 bit verson of libc6.18:58
rostamlordievader,  could I remove it and reinstall it?18:59
lordievaderThe bot seems to be lying, I can find a libc6-i386...19:00
lordievaderStupid bot.19:00
lordievaderIs the trusty-updates repo enabled?19:01
lordievader!info libc6-i386 trusty-updates19:01
ubottu'trusty-updates' is not a valid distribution: extras, kubuntu-backports, kubuntu-experimental, kubuntu-updates, lucid, lucid-backports, lucid-proposed, partner, precise, precise-backports, precise-proposed, stable, testing, trusty, trusty-backports, trusty-proposed, unstable, utopic, utopic-backports, utopic-proposed, vivid, vivid-backports, vivid-proposed19:01
lordievader!info libc6-i386 trusty-backports19:01
ubottuPackage libc6-i386 does not exist in trusty-backports19:01
lordievaderPff19:02
lordievaderrostam: This is what I get: http://paste.ubuntu.com/9678178/19:02
rostamlordievader,  okay I see that ...19:05
rostamlordievader,  do you know the apt-cache policy reads which files ? thanks19:07
lordievaderrostam: It checks the dpkg database. Could you answer my question about the trusty-updates repo?19:07
=== Lcawte is now known as Lcawte|Away
rostamlordievader,  some of the packages of trusty-updates is maintained in my new repo. When I do apt-get upgrade pointing to new repo, it does not upgrade libc6-i386.   ..19:10
lordievaderrostam: Enable the trusty-update repo, update your sources and try to update again.19:12
rostamlordievader,  ok will do that thanks so much for your help.19:13
Tobbe-82|ServerHi Guys, so good news, I finally managed to get Ispconfig 3 up and running so now my problem is that I am not seeing my website via my domain so I need some help troubleshooting the DNS setup / nameservers etc.19:23
Tobbe-82|ServerSo my domain registrar allows for running my own nameservers. I set that up pointing it to my public LAN IP number that is exposed to the web. Is that correct?19:25
pmatulisno19:38
sarnoldTobbe-82|Server: running your own nameservers isn't something you should do on a whim :) it'd be worth reading about it for a while first19:39
Tobbe-82|Servertechnically it's the domain registrar that runs the nameserver19:39
pmatulisyour registrar does not allow you to run your own nameserver.  it allows you to point to an official, 3rd party nameserver19:40
Tobbe-82|Serverok, I can set an IP for the nameservers19:40
pmatulisyes19:40
Tobbe-82|Serverso how do I start pointing my domain name towards my network and webserver?19:41
pmatulisfind a nameserver (dns service provider)19:41
pmatuliswhich you will need to pay for of course19:42
pmatulisbut who knows, there may be free stuff19:42
pmatulisi use dyndns19:42
pmatulishttp://dyn.com/19:43
Tobbe-82|Serverok, how would I use dyn to point my domain name to webserver?19:44
Tobbe-82|Server(Still wrapping my hand around the schematics or the flow of it all)19:45
pmatulistell it about your domain.  fill in the fields.  pay $35 per year.  done19:45
pmatulishttp://dyn.com/standard-dns/19:45
Tobbe-82|ServerThanks pmatulis, I'll check that out19:48
pmatulisi can vouch for these guys Tobbe-82|Server .  it used to be you needed to wait 30 minutes to be reflected on the internet.  all the changes i make at dyn are instantaneous.  don't know if that's normal but i am always impressed19:50
Tobbe-82|Servershit, you mean its instant propagating of nameserver changes?19:50
pmatulisdunno how, but yeah19:50
qman__TTL of 5 minutes19:51
Tobbe-82|Serverthats like unheard of!19:51
Tobbe-82|ServerSweet19:51
Tobbe-82|Serververy impressive. I mean that right there alone is worth the yearly19:51
qman__I use afraid.org, works really fast too19:51
qman__Well, relatively19:52
qman__Low TTL is expensive in terms of bandwidth19:53
qman__The lower the TTL, the more requests the server will get19:53
qman__Mine is 1 hou19:54
qman__R19:54
sarnoldwhere 'expensive' also depends upon how many hosts requests dns information on your hosts :)19:55
sarnoldif it's just you and some pals, five seconds might not even be noticable..19:55
Tobbe-82|Serverwell in this case I'm just going to host a few personal sites in a local web server (in my lan)19:55
Tobbe-82|Serverwhat is a sensible TTL setting to start with and after everything "pans out and works" can I tweak its value?19:57
qman__I would say as low as they allow, most providers will not let you set it lower than 5 minutes or so19:58
Tobbe-82|Serverdyndns seems to put 60seconds as standards dynamic dns value19:59
qman__Once things work, set it to something more sensible like 15, 30, or 6019:59
qman__Or whatever you decide is the max time you want your site to be potentially inaccessible19:59
Tobbe-82|Serveryea20:00
sarnoldhow often do you expect your IP address to change?20:00
Tobbe-82|Serverwell not often, maybe in the beginning I have fibre 100/100 connection and have asked my ISP to give me static IP so20:00
=== bilde2910|away is now known as bilde2910
Tobbe-82|Serverok so I am adding a new hostname in Dyn. so I should point my domainname to this ?20:01
sarnoldTobbe-82|Server: then I'd aim for something higher, like 300 seconds, but don't forget to lower the value -before- your IP changes, if you're deciding when IPs change :)20:03
Tobbe-82|Serveryea ;)20:04
sarnold.. one nice aspect of higher ttls is that they can help keep your site accessible if the DNS servers go down..20:04
Tobbe-82|Serverok well this is pretty cool. I am now getting access to the standard apache webserver index but not the actual site itself lol20:05
Tobbe-82|Serverdoes the domain reflect the /structure as well?20:05
Tobbe-82|Server(in var land)20:05
qman__if you're using name based virtualhosts, the servername aliases in your config must include the one you're using20:07
qman__The default site is a catch-all20:07
qman__And should probably be disabled unless that's exactly what you want20:08
Tobbe-82|ServerI'm running Ubuntu server 14.1020:08
Tobbe-82|Serverit's in /etc/apache2 somewhere? Cant quite remember where exactly20:08
Tobbe-82|Server?20:08
qman__Site configs are in /etc/apache2/sites-available, default site's webroot is /var/www/html20:09
Tobbe-82|Serverahh and I should change this to reflect the site I want?20:10
qman__Yes, either change site config or put your site files there20:10
Tobbe-82|ServerAwesome thanks :)20:15
perrito666smoser: hello, I have been told that I could talk to you regarding cloudinit (if not, could you point me in the right direction?)20:54
coreycbzul, heat's ready for review https://code.launchpad.net/~corey.bryant/heat/2015.1-b1/+merge/24525121:07
zulsure gimme a sec21:07
lnxmenhello21:14
lnxmenI have a group dev-site.21:15
dust_yhi, I need help to build a mail server. Just got some questions right now. Can anyone help?21:15
lnxmenI executed chgrp -R dev-site httpdocs/21:15
lnxmenand next: chmod -R g+w httpdocs/21:16
lnxmenIs it enough to give write permissions to dev-site?21:16
sarnoldlnxmen: you might also wish to turn on the setgid bit on the directories so new files will inherit the dev-site group owner21:20
lnxmensarnold: Actually I can't write file.21:21
lnxmensave *21:21
qman__lnxmen: yes, but it won't do them any good unless they also have read and list permisson21:21
guntbert!ask | dust_y21:21
ubottudust_y: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience21:21
qman__To do that easily, chmod -R g+rwX httpdocs21:22
qman__Note capital X21:22
lnxmenOkay, thank you.21:31
lnxmenI will try it in a minute.21:31
lnxmenBut hmm, is it safe to give write access to all files?21:31
sarnoldlnxmen: if you trust all members of the group to exercise discipline when modifying files, it's fine21:33
lnxmenOkay, really appreciate your help sarnold, qman__.21:33
sarnoldlnxmen: some advice common in the debian and ubuntu communities is to give ownership of the files to the web server, which seems like utter lunacy to me -- I don't want the -server- to be modifying the files, I want -humans- to be modifying the files.21:33
lnxmenThank you.21:33
=== bilde2910 is now known as bilde2910|away
sarnoldlnxmen: so I'm happy to see your suggestion to allow people in a group to edit the files; that seems like a far better approach to me.21:34
lnxmensarnold: I also did not give ownership to the web server. Despite the fact that I need to learn about permisson yet, I think server is well configured. I hope so.21:35
lnxmenpermissions *21:35
sarnoldlnxmen: unix permissions are suprising; at first they are confusing as sin, then eventually their simplicity and flexibility is amazing, and then they get frustrating again. :)21:36
lnxmenWe will see, I am learning about web developement, server administration etc.21:39
lnxmenI think it's a good direction.21:39
sarnoldwelcome aboard :) and have fun21:41
lnxmenWhat's most bad, although I am Gentoo Linux user from about 4-5 years (no, I do not want to boast or something), I do not  know linux permissions well...21:41
sarnoldwell, until you need them, it's easy to ignore them21:41
lnxmenYes, exactly.21:41
lnxmenIt wasn't important until now.21:42
lnxmenAnd besides, there are so many tutorials in the Internet that I am confused.21:42
sarnoldfeel free to ignore just about every guide that includes "chmod 777" somewhere :) that'll knock out 70 to 80% of all the bad advice :)21:44
lnxmenYes, you are right.21:45
lnxmenI did not executed this command, despite it's everywhere.21:45
lnxmenOkay, localhost would be fine with this.21:45
lnxmenBut not public server.21:45
sarnold.. and there'd be no need for it for small-use machines either :) hehe21:46
lnxmensarnold: when are refreshed user's groups?21:50
lnxmenEvery login?21:50
sarnoldlnxmen: yes21:50
sarnoldlnxmen: you can also use newgrp or sg to change to a group in a shell without logging in again, but it's less convenient than it sounds.21:51
=== collizion is now known as Guest22452
=== collizio1 is now known as collizion
lnxmenI would rather login and logout.21:58
lnxmenIt's simple.21:58
lnxmenBut thank you for advice.21:58
sarnoldlnxmen: yeah, especially if it's just an ssh away :)22:00
=== martinst is now known as martins-afk
lnxmenYup, but I wonder if I should use ssh keys instead of passwords in developement stage.22:10
lnxmenChanging default ssh port, also would be a good thing to do.22:11
lnxmenJust not sure if others would come up with this idea.22:11
sarnoldssh keys are wonderful things22:13
sarnoldssh brute-force worms are one of the largest threats; disabling password authentication entirely is a good way to drastically cut back ssh abuse22:14
lnxmenI must convince them to do it.22:16
=== markthomas is now known as markthomas|away
=== Lcawte|Away is now known as Lcawte
duxklrlnxmen: all our production systems are ssh keys only.   users and keys are managed by puppet.22:30
lnxmenduxklr: Puppet? What is it?22:31
duxklrautomated configuration management for servers.22:31
lnxmenIs it worth using for someone who is learning?22:32
lnxmenYou know, „automated” sounds good, but I would rather do most things myself.22:33
duxklrGuess it depends on what you want to learn.   If I was going to start over managing a group of servers I would learn some type of automation tools from the beginning it will make your life easier in the long run.   For example, all the new servers I built for my personal lab are 99% built by puppet.  I create the configs once, and I can build as many systems on this template as needs without any user interaction (after22:36
duxklrthe intial template is built).22:37
duxklrIf you are new to Linux in general.   Getting the systems basics down is key, but keep automation in the back of your mind at least.22:37
lnxmenNope, I am not new.22:38
lnxmenI just appreciate doing things myself.22:38
lnxmenBut I will keep in mind you advice.22:38
lnxmenThere is some wisdom in your line of thinking.22:38
lnxmenNow, server configuration is time consuming.22:39
duxklrlnxmen: You are still doing it yourself, you have to build the puppet templates.   But after that you can resuse your templates.  Use it to install your baseline server config such as stock software, user accounts, firewall rules, sudoers, etc…22:41
duxklrwhen you manage 100+ machines you will wonder how you ever lived without it.22:42
Logos01Automation is always vital to managing linux systems in a clean and sane manner.22:42
Logos01However -- automation is NOT an excuse for failing to master your environmental infrastructure's nuances.22:42
Logos01IF your webservers crash every day at noon, the answer is NOT to write a puppet manifest to force daily reboots of the webapp at 12:0122:42
* Logos01 wishes he hadn't seen basically exactly that approach in a company you've heard of.22:43
duxklrLogos01 has a good point, it can undo something you may have accidentally change in a production environment.   Keeping that baseline clean.22:43
sarnoldLogos01: lol22:43
Logos01sarnold: I was only at that company for about two months.22:43
sarnoldLogos01: good choice.22:43
Logos01It ... was mutual.22:43
Logos01By which I mean I was not informed when I was brought on that my official position was "company scapegoat"22:44
duxklrYea, that would be better done with a cron reboot, puppet is over kill </sarcasm>22:44
sarnoldLogos01: ugh, that -really- sucks...22:44
Logos01But once I realized it I kept my nose down and waited for the inevitable with as much dignity as I could muster.22:44
Logos01It became clear quite quickly thankfully.22:45
Logos01But yeah. That place was a poignant lesson in what is wrong with almost every Enterprise "DevOps" implementation.22:46
lnxmenYes, that's unimaginable to configure 100+ servers manually.22:46
lnxmenI will try it in the future.22:46
=== markthomas|away is now known as markthomas
=== Lcawte is now known as Lcawte|Away
lnxmenIs there anything more sophisticated that I should know about server maintenance?23:10
lnxmenFor instance, I do not know how to test if my configuration is good.23:11
lnxmenI heard that there are some features which allows to measure server workload with generated requests.23:12
macoubuntu server doesn't come with apt-add-repository, so... after adding a ppa to sources.list, could i have a reminder on how to fetch the signing key?23:14
maco(also: hi everybody, long time no see)23:15
lutostagmaco: sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys <fingerprint>23:15
lutostag(the one it complains about in apt-get update)23:16
macolutostag: thanks!23:16
danrik how can I check what took all of the space on my ubuntu-server?23:27
danrikthere is 60gb drive - and it's only used for os. YEat I cannot install updates because "gzip: stdout: No space left on device"23:28
lnxmendanrik: I am not sure if it's a good way to do it, but check "du" command.23:33
danriklnxmen, I think I figured it out. it was a /boot volume at 100% capacity. And turns out there were a lot of kernels. So I just had to apt-get autoremove23:35
danriklnxmen, and now it works. thanks for the efforts though.23:36
lnxmenMy pleasure.23:36

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!