=== collizion is now known as Guest24740 === collizio1 is now known as collizion [01:02] hi i run ubuntu-server 12.04.5. I have installed ruby-2 using the „brightbox“ repos. Now I would like to use the dep of nginx to install the latest version on nginx. [01:02] The problem I have now brigthbox also contains nginx and that that source is listed befor the one of nginx.org [01:04] As far as i understand i could use Pinning to set the priority, but I’m not sure how I would do that correctly [01:04] If i check the result with „apt-cache policy nginx“ it does not seem to work. [01:15] faraway: apt_preferences(5) has the pinning documentation [01:15] never mind found the problem did use the wrong information for Pin: origin [01:19] aha :) === markthomas is now known as markthomas|away === zz_DenBeiren is now known as DenBeiren === negronjl is now known as negronjl-afk === negronjl-afk is now known as negronjl [05:42] can someone help me with finding a list of directories that begin with a certain name who's last modified date is longer than 2 days? [05:43] i have come up with this so far: find . -type d -mtime +2 | egrep 'DIM_MYST* [05:43] ' but i dont want it to be recursive [05:44] -depth Process each directory's contents before the directory itself. [05:44] The -delete action also implies -depth. [05:45] so like -maxdepth 1 ? [05:45] -maxdepth levels Descend at most levels (a non-negative integer) levels of directories below the command line arguments. -maxdepth 0 means only apply the tests and actions to the command line arguments. [05:46] are you literally pasting definitions? [05:46] man find [05:46] i didnt come here to read a manual i came for more intuitive help [05:46] thats how you get help in linux is using the man command [05:47] and if you cannot find it there use google then come to chat here [05:47] i understand what the descriptions say, i just am having trouble with interpretting it correctly [05:47] so I am sorry if I didnt satify you wanting the actual work done for you [05:47] i didnt ask you to do any work for me [05:48] never mind dude, thanks #ubuntu-server. always a pleasure [09:46] hi! I have a serious problem with 14.04 LTS. [09:47] Apache installed, no firewall. TCP port 80 is up and apache serves for 2-3 days (not large traffic) [09:47] after that all tcp connections stuck in 'SYN_RECV' state [09:47] and by all I mean all [09:48] no ping, no port80 afterwards [09:48] I have to reboot it, and it comes back working [09:48] what's worth checking? [10:32] Good morning. === bilde2910|away is now known as bilde2910 === liam_ is now known as Guest76709 [13:52] hi all i am trying to use ipset on my ubuntu server but keeps getting the error message "ipset v6.20.1: Kernel error received: set type not supported" [13:52] before it worked however. what did get wrong ? [13:57] xperia: Which Ubuntu are you on exactly? And which kernel are you on exactly? [13:57] bekks: Kernel is 3.13.0-35-generic and Ubuntu version is 14.04 [14:02] Maybe you should try the current kernel, then. Just run sudo apt-get update and sudo apt-get dist-upgrade and try again. [14:07] bekks: i got the tip from the netfilter people to check the dmesg log file and look what is written ! Damn the Module was not Loaded anymore => "Request for unknown module key 'Magrathea: Glacier signing key: a28db5fd6e299cce4947dacaa66f459db4acce24' err -11 ip_set_hash_ip: disagrees about version of symbol module_layout" [14:07] wtf ! [14:08] No need to cuss :) [14:15] !! ubuntu server channel sullied w naughty language! how could you! [14:15] gblfxt: I am only a bot, please don't think I'm intelligent :) [14:16] how i install this certificate mydomainname_com.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt on nginx [14:17] i am using ubuntu 14.04 x64 === spinza_ is now known as spinza [14:17] which command i use to install those certificate [14:17] i used comodo positive ssl [14:23] Hi [14:23] Would anyone help me with postfix and receiving emails? [14:24] I set home_mailbox to "/var/mail/" [14:24] But this folder is empty. [14:25] ... postfix is a mta, not retriever... [14:26] So, what should I install to receive mails? [14:30] lnxmen: courier or dovecot [14:38] xperia: Okay, thank you. [14:38] Do you think I may use this tutorial? https://rtcamp.com/tutorials/mail/server/postfix-dovecot-ubuntu/ [14:38] (Yes, I want to configure roundcube also) [14:40] lnxmen: I'd use this one: http://ubuntuguide.org/wiki/Mail_Server_setup [14:41] bekks: thanks, I will read both. [14:41] (firstly I am trying to understand what I am supposed to do.) [14:43] what is your purpose? you just trying to get mutt working and host a domain? :D [14:43] I am trying to set up fully working mail server with GUI. [14:44] But I always read tutorials before executing commands. [14:45] With GUI? [14:45] What do you need a GUI for on a mail server? [14:45] like squirrelmail? [14:46] Thats no "GUI" fpr a mailserver. [14:46] Thats a webbased mail user agent. [14:46] yah, mta on squirrelmail is madness! [14:46] im not sure you want a mta at all [14:57] bekks: roundcube? [14:57] lnxmen: ? [14:57] A full sentence would be helpful when asking questions :) [14:59] You asked "What do you need a GUI for on a mail server?" [14:59] I don't know if it's a GUI for mail server itself. [15:00] No. [15:00] Okay. Is that hm... web based user agent? [15:01] Generally, you know what I want. [15:01] Basically, yes. [15:01] No, we dont know that. [15:01] Do you want a webbased mail user agent or do you want to administer your mailserver graphically? [15:01] that first [15:01] time appropriate greetings [15:02] Sorry, for my mistake. [15:02] lnxmen: "that first" is an invalid answer to a question containing "or" :) [15:02] this * [15:02] ubuntuaddicted: time appropriate greetings back [15:02] i have a LAMP server running (Ubuntu) and I don't want mythweb to be the default web page. can anyone help me figure out why when I go to http://localhost that it takes me automagically to mythweb? [15:03] bekks: As you can see, English is not my native language. I need to polish it up. [15:04] i have multiple sites now, like owncloud and phpmyadmin so I think i just need to adjust some conf file but not sure which one [15:04] ubuntuaddicted: What else do you want to be the start page? :) [15:06] bekks, i suppose just some dumb text file that says, welcome to ubu's server [15:06] Check /etc/apache2/sites-available/000-default.conf [15:06] ubuntuaddicted: And what is the actual goal behind that? [15:07] bekks, the goal would be because people "may" find out my IP, i don't want it to auto show them what i have running [15:08] no goal! https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&sqi=2&ved=0CB4QFjAA&url=http%3A%2F%2Fpatorjk.com%2Fsoftware%2Ftaag%2F&ei=PkCxVIvmE8nkoASx3ILwAQ&usg=AFQjCNGzACLjDY01jvntK_b3Sw2iXHqHQA&sig2=IJYf-mMEnsvovxM1V3R0LA [15:08] ubuntuaddicted: are you running that on a server in the internet - or at home? [15:08] terrible link, patorjk.com/software/taag/ [15:09] bekks, um, both. [15:09] bekks, i have a linode server and i have a home server [15:09] ubuntuaddicted: And both are running mythtv? [15:09] Which server are you talking about, actually? [15:09] bekks, no sorry, only the home one is [15:09] im talking about my home server [15:10] a2dissite 000-default.conf? [15:10] So unless you deliberately enable port forwarding in your router, your home network will not be exposed to the outside world. No need to worry. [15:10] i found 000-default-mythbuntu.conf. thanks guys [15:10] bekks, i am forwarding port 80 for my owncloud server [15:10] You arent. [15:10] I just tried ;) [15:11] bekks, not yet. lol [15:11] You dont expose anything to the internet at all - no need to worry. [15:12] bekks, understood but i am exposing owncloud to the internet. [15:12] bekks, try again [15:12] if you want [15:12] "Internal Server Error". [15:13] not sure what you mean. im in my lan and mythweb works. what are you attempting to access may i ask? [15:14] there may be a DNS entabglement because i'm in the process of doing a lot of things [15:14] *dns conflict [15:14] ownloud doesn't work and i know that. but mythweb "should" be working [15:14] ubuntuaddicted: I am just trying to access port 80 of the IP I can see for you. [15:15] can you PM me the IP you think i am please [15:17] ubuntuaddicted: I am just using the address shown by "/whois ubuntuaddicted" [15:17] bekks, nmap -P0 to my home IP shows port 80 open [15:18] But either you misconfigured your portforwarding or you broke your webserver setup. [15:22] what's the ubuntu package for apache2 and mod_auth_host? [15:23] ubuntuaddicted: No package needed, but some more configuration needed: http://httpd.apache.org/docs/2.4/howto/access.html === unreal_ is now known as unreal [15:24] bekks, ok, i'm using Allow from localhost for mythweb [15:24] And you have to deny all the rest :) [15:25] bekks, i guess i'm a little confused by apache2 and virtual websesrvers [15:25] bekks, i have Order allow,deny first [15:25] Then you should not expose anything to the internet before you get all that working. [15:26] bekks, agreed. thanks for the top [15:26] *tip [15:26] bekks, as you found out, i wasn't forwarding port 80. :) [15:26] :P [15:27] thanks for the help [15:27] im in the process of switching from .htaccess to htdigest and it's fun. [15:27] *ssarcasm [15:28] bekks, i thought ubuntu had some file for default It Works. that's what i remember years ago when I setup my first LAMP server [15:32] Ubuntu Server hangs in boot [15:32] maybe root-device not found? [15:33] hangs after Freeing Initrd memory === ValicekB_ is now known as ValicekB [15:42] ubuntuaddicted: And what are you trying to achieve, actually? [15:43] streulma: Try booting without "quiet splash" kernel options. [15:43] bekks, that he does [15:43] but gangs [15:44] hangs [15:44] I did an fsck [15:44] and tons off Illegal blocks [15:44] and inodes setting to 0 [15:44] there was a power cut [15:44] on vps [15:44] the data is on storage server [15:46] bekks, host owncloud for collaborating with the my global clients, host a jitsi videobridge for global HD video conferencing, and be able to access my mythtv server from the WAN. for now. [15:51] how to create empty .crt file in ubuntu 14.04 x64 [15:54] ubuntuaddicted: So whats your downstream/upstream bandwidth, just for my curiousity? [15:55] udit_: An empty certificate? [15:56] bekks, 30Mbps/5Mbps for livestreaming to youtube and hitbox (undefined for when i move my nginx server to a datacenter) and another line that's 2Mbps/5Mbps for ubucraft [15:56] yes after creating file i enter the code [15:57] using nano [15:57] please help me [15:57] udit_: I am not interested in your internet server's bandwidth :) [15:57] bekks, i have a lot going on so the answer isn't so straight forward [15:57] udit_: But 5MBit/s only for "global clients" and "video conferencing" is pretty low. [15:58] ubuntuaddicted: You have only one interbnet access at home, do you? So that question is answered very easily. [15:58] bekks 60/6 ! [15:58] bekks, it's enough for plenty of people where they send a 640x360 h264 stream to me [15:58] bekks: the most I must can from provider is 30 :D [15:58] bekks, i have 2 internet lines [15:58] please anybody tell me how to create empty .crt file in ubuntu 14.04 x64 [15:59] udit_: "touch filename.crt" [15:59] udit_, touch foo.crt [15:59] udit_: What are you actually trying to achieve? [15:59] udit_, it's probably best if you link us to the tutorial you're following so we have some context and can better help [16:00] i am try to setup ssl [16:00] comodo ssl [16:00] udit_: Then you dont need an empty certificate, but a valid one. [16:01] after creating empty certificate i add the code that given by comodo [16:01] Which sounds broken. [16:01] A valid certificate doesnt contain "code". [16:03] -----BEGIN CERTIFICATE----- +Q8FADiZNjui9DdjeHmWAeSIRGa0lGMw35VPqPUznBQYFf0wuLFTGD4XLzubTuq yITyO4WKdYenOvj5mRfLoca5ZGKtetmwfij1g+fsJAvdatViSuLdc/ZaQcgIyN0h 3WzFl9vVztDXoKKScjvJH3dy6AA22+zsApT3rnRBAjHzsbW0Vw+/HIIXYUxUohSJ wnG9IHhUrsYWUXbdbrDhKS+FTn/z31UaWyLqhGkXj42pQhvyeMvfGag6FgRYe52M howCzdiK6HnItuCI3inB8qV1zVkaJLsCAwEAAaOCAeEwggHdMB8GA1UdIwQYMBaA FJCvajqUWgvYkOoSVnPfQ7Q6KNrnMB0GA1UdDgQWBBROlpwFyEog46GdOrB370Q3 G3ZhVzAOBgNVHQ8 [16:03] code is look like this [16:04] udit_, just my opinion, but posting your certificate on irc isn't a good idea [16:06] how i create mydomain_com.crt file and add this code inside it ? and the file should be in this /etc/nginx/ssl/ [16:06] thanks but i don't add the full code [16:07] this is the small part of code [16:09] please tell me how i do it that [16:11] Open an editor, insert that certificate, and save it as your desired file. [16:11] No need to create an "empty .crt" before. [18:15] bam, here i am! [18:15] my server was hacked early this morning! :( so i nuked it and am starting fresh! :) [18:15] what can i do to make sure my new install is real securelike? [18:16] don't turn it on [18:16] i didn't [18:16] I mean, the new one [18:16] -_- [18:17] the moment you power on a system, it's insecure [18:17] barring that [18:17] the moment you plug in a network cable, it's less secure [18:17] don't run a webserver or any other service on it? [18:17] the more stuff you open, the more insecure it is [18:17] the more software you have to check and lock down [18:17] now let's suppose i /do/ want to host some servers on it. [18:18] like what? [18:18] we could spend the next 3 years securing your server [18:19] i want to run a mc server, forum/website software currently [18:19] isn't mc closed source? no way to secure that [18:20] the best you can do is chroot it, apparmor it, and anything else you can do [18:20] same really for a forum/website [18:20] it won't stop any of those from being hacked [18:21] but should contain it, assuming you do update your server, and don't leave an exposed local priv escelation vaunerability unpatched. [18:22] hm [18:23] can't i create a virtual machine on the server and host my mc server there? [18:23] so even if someone gets in through it there's little they can do to truly muck me up? [18:23] assuming your server supports it [18:23] and that still doesn't close or stop soemthing inside the vm hacking into the host still [18:23] just changes the paths of vaunerability to do it [18:23] i'm rather dense, and very green to all linux. [18:24] how's the lightest way to create a vm instance? [18:24] lightest/best/more secure [18:24] one or more of those options === radius is now known as rafk === unreal_ is now known as unreal [18:59] mucus: maybe start with LXC containers [19:00] thanks! [19:01] Patrickdk, i just noticed your comment about not turning on a server if they want it secure. that's funny as hell and made my day [19:02] i also thought it was clever [19:02] mucus, im familiar with hosting mc. i'm the owner of ubucraft [19:02] owner, creator, the man. ;) [19:02] i'm starting a small roleplay server [19:03] mucus, ah cool [19:03] and setting it up to be unlike vanilla minecraft [19:03] what with dirt taking 7 minutes to break by hand [19:03] and swimming not getting you across large bodies of water [19:03] and other stuff [19:03] want to hop into my murmur server or teamspeak server to chat about it? [19:03] i dislike voice chat very much [19:03] text chat is so archaic but ok [19:04] text chat is newer than voice chat. [19:04] since it's very specific, maybe we should go into a private room? [19:04] no [19:04] we've been writing on walls since before caveman. lol [19:05] we've been grunting since before writing [19:05] xD [19:05] not sure about that [19:05] im a realist. sometime too much so [19:05] Some people still grunt :P [19:05] i still grunt [19:05] ^ [19:05] sadly that's true. [19:06] "some people still grunt" i was referring too. [19:06] mucus, anyway, so you want to host a spigot server on ubutnu 14.04.1? [19:07] i was already hosting spigot on 14.10 [19:08] i would already suggest against that because 14.10 isn't an LTS release but that's just my opinion [19:08] ah [19:09] not to mention, depends what settings you have for apt on whether you break your server [19:10] mucus: kvm vm's aren't very heavy [19:11] Depends on the config. [19:11] RoyK i'm liking the concept of these lxc containers [19:11] mucus: you do until you try to make something like an nfs server [19:11] i don't even know what an nfs server is [19:12] then that's not a problem ;) [19:12] since the kernel is shared on lxc, not all things work as planned [19:12] I just use KVM [19:12] or vmware at work [19:13] it's a little more overhead for real virtualisation, but IMHO it's worth it, the isolation is total [19:39] RoyK, lxc, where is this? i need this in my life. :) [19:41] like on every linux kernel for awhile now :) === rafk is now known as radius [20:31] hi, i want to use this (https://github.com/munin-monitoring/contrib/blob/master/plugins/nginx/nginx_vhost_traffic) munin-plugin, but for this to work, the munin-user needs to read this files, what's the easiest way to achieve that? current file-permissions: http://paste.ubuntu.com/9707429/ [20:32] *the munin-user needs to read the nginx-log-files [20:39] munin-user should NEVER had to read that [20:39] just fix your plugins [20:39] you DO know how to USE munin right? [20:40] no [20:40] its not my plugin [20:40] this plugin cant work without the nginx-logfiles [20:41] what do you mean with "use munin right"? [21:43] a toast to those who grunt [21:43] grng [21:54] hello, is there a list which tells which version of Ubuntu (or any linux distro) corresponds to which *default* version of toolchain (gcc, g++,gcc-c++, glibc)? [22:02] am11: guess not [22:02] am11: most distros update their gcc* things regularly [22:03] RoyK: I am particualy looking for Ubuntu which is bind to gcc v4.5.x. [22:03] hm... debian wheezy is at gcc 4.7 [22:04] The requirement is v4.5.x. Our code does not compile below it. [22:04] ubuntu 14.04 is at 4.8 [22:05] Yes! which will defeat the purpose. The binary wouldn't run with old glibcs. [22:05] seems ubuntu 12.04 is at gcc 4.6 [22:05] what is gcc? [22:05] mucus: the compiler [22:05] mucus: GNU compiler collection [22:05] thank you [22:06] am11: guess 4.5 should be quite safe with most distros [22:06] unless you're in redhat/centos land where rhel6 uses 4.4 [22:07] RoyK: we need to compile with minimum possible version, which is 4.5. And changing the gcc version is a real PITA. (except for if you are using fedora mock: http://fedoraproject.org/wiki/Using_Mock_to_test_package_builds which doesn't have 4.5 either) [22:07] but then, i guess rhel7 etc uses newer stuff [22:08] I use RHEL/CentOS a lot at work [22:08] but I don't like it :P [22:11] RoyK: we have a nodejs parckage, which has C++ addon. so before publishing our npm we compile the binaries. For windows, VS2013 just do fine. For Mac, the univeral binaries. On linux however, if we build with glibc/gcc/g++/gcc-c++ later versions, it doesn't provide backward compat. So we need to compile with minimum version of glibc, which doesn't have problem with C++11 code we are [22:11] using as well as provide massive coverage (especially servers running old CentOS 5.5, 6 etc.) [22:13] last time we had to make alot of changes in the code to compile with gcc 4.4.7. Now we are confirmed that the minimum compiler requirement is v4.5, so i cannot find any distributn which has 4.5. It is either 4.4.7 or 4.6+. :) [22:13] That is the entirety of my sad story. [22:13] 5<6, so 4.6 should do [22:14] what sort of software is this? [22:14] 4.8 can also do it! but that wont work on older OSes [22:15] 4.6 is rather old [22:15] so it should work with most distros [22:16] which means, there is no linux distribution which has gcc 4.5 without going to lengths of trouble to downgrade or upgrade or mock gcc. [22:17] redhat/centos 6 has gcc 4.4 [22:18] and there's a lot of installed machines on those OSes [22:19] supporting RHEL/CentOS 5 shouldn't be primary [22:19] rhel5 will last another year before support ends [22:20] omg, we've been infected by Stuxnet! [22:21] RHEL5 supports ends in 2017 :) [22:27] This is not really a server specific question but if I've uninstalled a package why would the service still be listed in /etc/init.d? (albeit with a [22:27] [?] status [22:27] Do i need to purge it? [22:28] nvm just answered my own question. === guampa_ is now known as guampa [23:44] hi all. i have this iptables line => iptables -I INPUT -p tcp -m multiport --dports all -j myipchan that gives me this error message iptables v1.4.21: invalid port/service `all' specified [23:44] how can i fix that so i am still able to block all traffic from a ip adress on all ports with iptables ? === bilde2910 is now known as bilde2910|away [23:53] Block the IP. [23:53] You dont have to specify any ports.