[00:05] <Ryan_Lane> I need to update dhclient.conf and then cause dhclient to restart itself. basically I need to override the dns and have it immediately apply
[00:05] <Ryan_Lane> I can't find a good way to do this...
[00:05] <Ryan_Lane> (I need this to work when run over ssh, from config management)
[00:08] <Ryan_Lane> anyone have any ideas here?
[00:16] <sarnold> Ryan_Lane: check out omshell(1)
[00:25] <Ryan_Lane> thanks
[11:43] <replman> Hi! I tried to install php 5.5 on ubuntu 12.04 LTS as described here: http://askubuntu.com/a/343567
[11:44] <replman> all went as expected but in the end i get the following error:
[11:44] <replman> Setting up apache2 (2.4.12-1+deb.sury.org~precise+5) ...
[11:44] <replman> Directory /etc/apache2/conf.d is not empty - leaving as is
[11:44] <replman> Please note, that directory is considered obsolete and not read anymore by default
[11:44] <replman> php_cgi_wrapper.conf  zz010_psa_httpd.conf
[11:44] <replman> apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/fcgid.load: Cannot load /usr/lib/apache2/modules/mod_fcgid.so into server: /usr/lib/apache2/modules/mod_fcgid.so: undefined symbol: unixd_config
[11:44] <replman> ERROR: Config file dir.conf not properly enabled: /etc/apache2/mods-enabled/dir.conf is a real file, not touching it
[11:44] <replman> dpkg: error processing apache2 (--configure):
[11:44] <replman>  subprocess installed post-installation script returned error exit status 1
[11:44] <replman> dpkg: dependency problems prevent configuration of libapache2-mod-php5:
[11:44] <replman>  libapache2-mod-php5 depends on apache2 (>= 2.4); however:
[11:44] <replman>   Package apache2 is not configured yet.
[11:44] <replman> dpkg: error processing libapache2-mod-php5 (--configure):
[11:44] <replman>  dependency problems - leaving unconfigured
[11:44] <replman> dpkg: dependency problems prevent configuration of apache2-mpm-prefork:
[11:44] <replman>  apache2-mpm-prefork depends on apache2 (= 2.4.12-1+deb.sury.org~precise+5); however:
[11:44] <replman>   Package apache2 is not configured yet.
[11:44] <replman> dpkg: error processing apache2-mpm-prefork (--configure):
[11:44] <replman>  dependency problems - leaving unconfigured
[11:44] <replman> No apport report written because the error message indicates its a followup error from a previous failure.
[11:44] <replman>                                                                                                           No apport report written because the error message indicates its a followup error from a previous failure.
[11:44] <replman>                                                                                                                                                                                                                     Errors were encountered while processing:
[11:44] <replman>  apache2
[11:45] <replman>  libapache2-mod-php5
[11:45] <replman>  apache2-mpm-prefork
[11:45] <replman> E: Sub-process /usr/bin/dpkg returned an error code (1)
[11:45] <replman> Sorry!
[11:45] <replman> I wanted to paste to pastebin, hit the wrong window :-(
[11:45] <replman> stupid client that allows such a post.
[11:45] <replman> http://pastebin.com/pkfpYAvV
[12:18] <yakim> At first you must remove old version of Apache2
[12:23] <replman> yakim: I found out that i have a problem with libapache2-mod-fcgid-psa and apache2.4
[12:24] <replman> dpkg -l | grep mod-fcgid prints  "libapache2-mod-fcgid-psa  2.3.9-14033112"
[12:29] <replman> maybe i should downgrade to apache 2.2. How can i do this?
[12:29] <yakim> you have sum problems with php module version
[12:30] <yakim> I see /usr/lib/apache2/modules/mod_fcgid.so: undefined symbol: unixd_config
[12:30] <yakim> http://superuser.com/questions/838180/apache-loading-php-module-undefined-symbol-unixd-config
[12:30] <yakim> The Apache API changed from 2.2 to 2.4, unixd_config was renamed ap_unixd_config (see Api changes from 2.2 to 2.4). You need a php module version that is compatible with Apache 2.4 or stay with Apache 2.2.
[12:31] <replman> I think that this psa fcgi module is still for 2.2.
[12:31] <yakim> yes
[12:31] <replman> But i cannot remove this because then plesk might not run
[12:31] <yakim> try find new version of this module
[12:32] <replman> i tried to remove it anyways. Then apache stuck with another config file. So best might be to downgrade to 2.2. Ist that possible?
[12:37] <yakim> I think, it is possible.
[12:40] <replman> yakim: do you know how?
[12:41] <yakim> do you create backup of old config?
[12:42] <replman> no :-(
[12:42] <yakim> ups...
[12:42] <replman> i have to look
[12:44] <yakim> at first you must purge php5 and apache. Then disconnect ppa, update ant install php5 and apache again
[12:44] <yakim> then restore you configs
[12:46] <yakim> I make this update on my server some time ago, but I don't use such modules
[13:02] <replman> yakim: is it enough to copy the files from /etc and after doing the reinstall, copy the files back?
[13:03] <replman> how to disconnect ppa
[13:03] <yakim> not all. Only /etc/apache2 and /etc/php5
[13:04] <replman> how to purge php5 and apache?
[13:04] <replman> can i preview which files will be removed by the purge?
[13:05] <yakim> apt-get purge apache2*
[14:58] <dmsimard> Haven't had any attention on what I consider an important bug: https://bugs.launchpad.net/initramfs-tools/+bug/1436098 .. who can I poke ? :)
[14:59] <rbasak> dmsimard: try #ubuntu-devel. It's not really a server-specialist thing even if it involves server. Few people here will know much about it.
[14:59] <dmsimard> rbasak: Thanks.
[15:09] <Pici> /3/36
[15:28] <kickit2> anyone know how to get isc-dhcp-server to actually give an error message?  All it does it terminate with status 1 - no errors even when calling it with just dhcpd -t -cf /pathtocfgfile/dhcpd.conf (with the correct path or course).  If I launch it without the -t flag it runs, but I want it to error check (which is when it fails) which leavs me feeling that I have errors
[15:28] <rbasak> kickit2: anything in /var/log/syslog?
[15:29] <kickit2> nothing other than "terminated with status 1, respawning.." over and over until init complains its trying too fast and kills it all together
[15:30] <ppetraki> kickit2, run it from strace without daemonizing, strace -f  -s 4096 <executable> &> omgsomuchdata.log
[15:33] <kickit2> alright - to be honest a stack trace is beyond me.  but If im interpreting this correctly, its giving exit status 0 when done this way
[15:37] <kickit2> heres the trace in a pastebin http://pastebin.com/p4NnbcVG
[15:41] <OpenTokix> kickit2: you just posted your rndckey on the internet, I suggest you change it later.
[15:41] <OpenTokix> kickit2: but that trace it exits with 0
[15:43] <kickit2> yeah - I'll deal with fixing security crap once the service actualy works :)
[15:46] <kickit2> well IDK what changed, but it isn't complaining about exit status 1 anymore.. just " init: isc-dhcp-server main process ended, respawning" about 10 times until it says its respawning too fast and kills it
[17:20] <Karunamon> Hi folks - I have reason to believe that the landscape-server packages are incorrectly missing from the appropriate repo
[17:21] <Karunamon> aaaaand disregard that, now they show up in the Packages page when examined via web
[17:21] <Karunamon> must have caught it mid-update or something
[17:23] <Karunamon> ah, no, I was looking at Trusty
[17:23] <Karunamon> http://ppa.launchpad.net/landscape/14.10/ubuntu/dists/utopic/main/binary-amd64/Packages - note that landscape-server is not included
[17:47] <pmatulis> Karunamon: everything ok?
[17:48] <Karunamon> pmatulis: ah no, problem still exists
[17:49] <pmatulis> Karunamon: what does?
[17:49] <Karunamon> pmatulis: it appears impossible to install landscape-server on 14.10. the packages are not in the index for Trusty
[17:50] <pmatulis> Karunamon: you want to install l/s 14.10 on trusty right?
[17:50] <patdk-wk> trusty is 14.04 not 14.10
[17:50] <Karunamon> misspoke - not in the index for Utopic
[17:50] <pmatulis> Karunamon: yes, that's normal
[17:51] <pmatulis> Karunamon: b/c l/s server is only made for LTS releases
[17:51] <Karunamon> pmatulis: in which case, these instructions: https://help.landscape.canonical.com/LDS/QuickstartDeployment14.10 are no good.
[17:51] <pmatulis> Karunamon: note that l/s versions can be deceiving.  what you see above is not "l/s for utopic (14.10).  it is the actual l/s version.  i.e. l/s 14.10 is the latest and is designed to be run on ubuntu 12.04 and 14.04
[17:52] <Karunamon> ah! okay, that makes more sense then.
[17:52] <pmatulis> Karunamon: i admit that it is unnecessarily confusing
[17:53] <Karunamon> pmatulis: pfft, and the page even says that, I just kind of jumped right to the commands to input
[17:53] <pmatulis> tsk tsk, bad Karunamon
[17:53] <Karunamon> yeah, got ahead of myself :P. so seeing as how my server box is already 14.04, guess that means spinning up a VM or something if I want to play around with landscape
[18:00] <danrik> um. what can I do if some unrelated domain sets DNS records pointing to my site?
[18:00] <danrik> Can I configure something in apache so not to allow that?
[18:00] <patdk-wk> sure
[18:01] <patdk-wk> this is what virtual hosts are for
[18:01] <Karunamon> danrik: you can't stop them from pointing at your site, but you can do things with the incoming traffic
[18:01] <patdk-wk> and if you want, you can use rewrite if you want to block
[18:02] <danrik> so I have virtual host configured - yes. But why is it still serving that domain?
[18:02] <patdk-wk> what do you have the default virtualhost setup as?
[18:02] <patdk-wk> to block everything?
[18:02] <danrik> Karunamon, how would I deny all unauthorized doamins by default?
[18:03] <danrik> Karunamon, ServerName mysite.com
[18:03] <Karunamon> danrik: sounds like you'd want a rewrite rule of some kind, but unfortunately the knowledge of those is somewhat beyond me at the moment
[18:03] <danrik> Karunamon, and handful of server aliases.
[18:03] <Karunamon> if i'm thinking about this correctly, you need a list of what domains are authorised, and you'd have to construct a regex so that anyone hitting anything that's not part of one of those domains gets sent elsewhere
[18:04] <patdk-wk> sounds like way too much work
[18:04] <patdk-wk> you just make your virtrualhosts as you should
[18:05] <patdk-wk> then in the default virtualhost, you just deny all
[18:05] <Karunamon> patdk-wk: sounds better. i'm more of an nginx guy and also have a habit of doing things the hard way first :P
[19:13] <Jeeves_Moss> hey guys, how do I correct this error "AH00534: apache2: Configuration error: More than one MPM loaded."??
[19:15] <patdk-wk> you upgraded from pre-trusty? from apache 2.2
[19:18] <Jeeves_Moss> patdk-wk, not that I know.  I rebooted the box, and now I'm getting this.
[19:19] <patdk-wk> well, check your modules
[19:19] <patdk-wk> you probably have multible mpm modules enabled
[19:19] <Jeeves_Moss> ok, what should I be looking for, and how?
[19:20] <patdk-wk> ls /etc/apache2/mods-enabled/mpm*
[19:20] <patdk-wk> you should have two files, one .conf and one .load
[19:20] <Jeeves_Moss> I've got  /etc/apache2/mods-enabled/mpm_prefork.conf and  /etc/apache2/mods-enabled/mpm_prefork.load
[19:21] <patdk-wk> must be upgrade issue
[19:21] <patdk-wk> can't remember what the solutio nthere is
[19:21] <patdk-wk> and I'm walking out the door
[19:21] <Jeeves_Moss> lol.  joy.  now how do I fix this......  this is our Kabana box for logs.
[22:29] <teward> stupid question but is there a way to turn an Ubuntu system into a web gateway system in which all traffic goes through it and there's filtering done on the traffic to block certain kinds of traffic and/or destinations/sources
[22:40] <TJ-> teward: Yes. A useful 'wrapper' around the linux kernel features is the Shorewall package
[22:41] <sarnold> teward: multiple ways to do it; 'cleanest' is probably to run squid on the host, firewall off the internet from your other machines, only allow the squid machine access to the internet..
[22:41] <teward> sarnold: the firewall is at the border, hence asking how to turn the server into the web gateway, the firewall rules and such is understandable, the filtering of content is the tricky part I think
[22:41] <teward> (and as for those firewall rules, those are *not* hard :P)
[22:41] <sarnold> teward: you can also set up a transparent proxy using squid and masquerade rules, but not all applications take kindly to having a proxy forced in place
[22:42] <teward> mmm
[22:42] <sarnold> teward: you can also run a machine as an ethernet bridge and do filtering there -- that way there's not even an IP address associated with the NICs you're using to do the filtering.
[22:44] <teward> mmm
[22:44] <teward> sounds technologically easy, but implementationally tricky
[22:44] <teward> although this is why i keep an experimental segment to my network xD
[22:46] <Patrickdk> implementationally tricky? not really
[22:46] <Patrickdk> just normal proxy-arp
[22:47] <Patrickdk> used heavily in the 80's and 90's, but not so much anymore, with our addiction to vlans and our heavily powered switches
[22:50] <teward> Patrickdk: implementationally tricky in the short term on my network, i meant - i would still need to update the equipment on the one box to add in another NIC (this is why i hate not having money sometimes)
[23:00] <mnaser> Is there a way to detect why processors are being underclocked?
[23:00] <mnaser> Using 14.04.2 LTS.. seeing E5-2650v3 (2.3Ghz processor) running at 1.2Ghz
[23:00] <mnaser> according to /proc/cpuinfo
[23:00] <Patrickdk> why should it run faster?
[23:00] <mnaser> Because this is a server and I'd like it to run at full power all the time
[23:01] <Patrickdk> then log into your bios and configure it that way
[23:01] <mnaser> In my BIOS, it's set to "Performance"
[23:01] <mnaser> so all c-states etc are disabled
[23:01] <mnaser> It's a poweredge r630
[23:02] <Patrickdk> what does powertop say?
[23:05] <Patrickdk> run powertop hit tab twice
[23:06] <mnaser> not sure I understand what this all means but
[23:06] <sarnold> mnaser: how about cat /sys/devices/system/cpu/cpu*/cpufreq/scaling_governor ? are you running thermald?
[23:06] <mnaser> http://pastebin.com/KeDGiZrR
[23:06] <mnaser> this is a minimal install
[23:07] <mnaser> powersave for all sarnold
[23:07] <Patrickdk> doesn't like the bios isn't enforcing max performance
[23:07] <mnaser> hmm
[23:07] <Patrickdk> or it is set to allow os override
[23:08] <sarnold> mnaser: you may want to change those to ondemand or performance, but it really looks like you may not need them spinning at 2.8 much
[23:08] <mnaser> this server is going to get really busy
[23:08] <Patrickdk> busy doesn't matter
[23:08] <mnaser> and im doing some basic testing and i think the low performance im seeing is impacted by this.
[23:09] <Patrickdk> but if fractions of nanosecons latency matters if it was *slightly* idle
[23:09] <mnaser> i think im not making it "busy enough" to upclock
[23:10] <mnaser> i mean ill adjust it to performance
[23:10] <Patrickdk> I'm sure it is
[23:10] <mnaser> and see what comes out
[23:10] <Patrickdk> but if you set it to max performance, all cores at 2.3
[23:10] <Patrickdk> that means you just disabled your turbo 3ghz speed
[23:12] <mnaser> ok so
[23:12] <mnaser> it didnt affect the results
[23:12] <mnaser> which means that you're right, it isnt the reason
[23:12] <mnaser> but at least that confirms it
[23:16] <mnaser> thanks Patrickdk / sarnold
[23:17] <sarnold> mnaser: there's a few days good reading material here: http://www.brendangregg.com/linuxperf.html you might find something useful / new to look at
[23:18] <mnaser> brendan gregg always has great content :)
[23:18] <sarnold> yes :)
[23:19]  * mnaser used to read since Joyent times / USE method
[23:19] <mnaser> >known for screaming at disks
[23:19] <mnaser> :P
[23:19] <sarnold> AAARRAGH
[23:19] <sarnold> hehehe
[23:19] <Patrickdk> he's fun in person :)
[23:19] <sarnold> one short silly video..
[23:20] <mnaser> i've never met him but i've probably spoke with him a few times on irc back when we ran a lot of joyent smartos stuff