/srv/irclogs.ubuntu.com/2015/03/27/#ubuntu-server.txt

=== martinst is now known as martins-afk
=== Lcawte is now known as Lcawte|Away
=== markthomas is now known as markthomas|away
k2gremlinHello all02:01
k2gremlinI travel alot... I have a Ubuntu Server at home and I was wondering the best way to implement a VPN solution that will put my laptop on my home network..02:36
k2gremlinI basically want it to pull an IP address from my home network so that I can effectivly connect to my entire network02:37
sarnoldk2gremlin: investingate openvpn and strongswan; openvpn is probably the esier of the two to configure and probably more likely to traverse horrible hotel wifi02:39
=== elliotd123_ is now known as elliotd123
k2gremlinsarnold, thanks, ill lok into it02:59
k2gremlinlook*02:59
k2gremlinsarnold, you there?03:16
sarnoldk2gremlin: not for muych longer..03:17
k2gremlinsarnold, Trying to generate keys, and the guides are telling me they make the keys/ directory but it's not making them. It's not prompting me for the questions either03:17
k2gremlinsarnold, http://pastebin.com/BN35sHJb03:22
sarnoldk2gremlin: hunh, I wonder if there was some other assumptionm that made with the system state before getting started..03:23
k2gremlinhttps://help.ubuntu.com/lts/serverguide/openvpn.html using this guide..03:23
sarnold k2gremlin another possibilitym, you might be bloxked on low-entropy /dev/random, if it's a remote server withuot keyboard or mouse..03:24
k2gremlintrying to put this on my Squid proxy server. I seen another guide that changes the interface.. but their setup was a direct proxy. Mine is transparent with a dynamic WAN connection lol03:24
k2gremlinI'm puttyed into it03:24
sarnoldk2gremlin: the 'source vars' step may not have been completed correctly?> it looked like it was complaining about not having the variables set...03:24
k2gremlinI tried both 'source vars' and 'source ./vars'03:25
sarnoldcheck env output, see if they look right03:25
k2gremlinenv?03:26
sarnoldit prints the contents of your environment variables03:27
k2gremlinhttp://pastebin.com/hTpSfhzK   here is the whole setup starting at sourcing the vars03:27
k2gremlinhttp://pastebin.com/hTpSfhzK03:27
sarnoldaha!03:27
sarnoldthanks for psting the whole thing :)03:27
k2gremlinwhoa..03:27
sarnoldstart with sudo -s03:27
k2gremlinthats got a lot of info03:27
sarnoldthen run the commands as shown withuot the sudo in front of each one03:27
k2gremlinok ill run it in s mode lol03:27
k2gremlinok03:27
k2gremlinthats working... wtf? lol03:28
k2gremlinNo where in the guide does it say sudo -s to start03:28
sarnoldhehe03:29
sarnoldthe trick is that you need to add those variables to the shell's environmment, thus the source03:29
sarnold.. and sudo starts a new shell for each command you're ruyning03:30
k2gremlingotcha!03:30
sarnoldso it affects nothing03:30
k2gremlinits generating.....03:30
k2gremlin"This is going to take a long time03:30
k2gremlin"03:30
sarnoldonce you know, you nkow and never think of it again03:30
k2gremlinlmfao03:30
k2gremlinright03:30
k2gremlinSo if the rest of this goes smooth... will this work witout changing my interface configurations?03:30
sarnoldI think it should03:30
k2gremlinThe reason I am hesitant to do so is because I am remoted in.... changing them could perma disconnect me lmfao03:31
sarnoldI only use openvpn as a simple cliednt and my admins did all the work for me :)03:31
sarnoldheh03:31
sarnoldyeah03:31
k2gremlinand if that happens, wife and kids will be ape shit cause the internet will go out lol03:31
sarnoldbe careful :)03:31
sarnoldVERY CAREFUL03:31
k2gremlinLOL!03:31
k2gremlinIm carefully considering each command before I do it03:31
sarnoldtime for me to run, have fun :)03:31
k2gremlinThanks again03:31
sarnoldgood plan any time you have a root hsell..03:31
k2gremlinAlthough!!03:32
k2gremlinI am remoted in on the WAN side :P03:32
k2gremlinso as long as that connection stays up im good03:32
sarnold:)03:32
k2gremlinlater03:32
k2gremlinthanks03:32
k2gremlin*plays a game of League while this key generates!*03:33
=== kickinz1|afk is now known as kickinz1
=== Lcawte|Away is now known as Lcawte
=== Lcawte is now known as Lcawte|Away
=== truAndy is now known as truAndrew
bojanCan anybody guide me on NFS with NIS authentication09:42
bojanI have configured NFS on ubuntu 12.04 and checked the mounting on the same computer its working fine..But i am trying to mount in my network computer it is saying error as :mount.nfs:serevr access denied while mounting"09:43
bojanBut i can see the mount from my network computer09:43
=== Lcawte|Away is now known as Lcawte
strikovrbasak: taking into account that tomcat bug has been fixed -- i want more bugs from you to work on; the link you sent last time doesn't work because it shows me nothing in the search results11:10
rbasakstrikov: let me find you one :)11:11
rbasakOooh, I know11:11
rbasakstrikov: I was about to do https://bugs.launchpad.net/bugs/1435823 but you can take it if you like.11:11
rbasakJust need to reproduce and fix it in the right place. Not sure if that's the systemd unit definition, or in mysqld_safe, or somewhere else like one of the commenters has done.11:12
rbasakstrikov: the fix needs to go to Debian too - I have commit access to Debian mysql VCS, so I can push it there and then upload the fix to Ubuntu.11:12
rbasakstrikov: carry on at this rate and you'll get upload rights pretty soon :)11:13
strikovrbasak: okay, thanks; i'll look into this bug just after we upload juju-1.22 (hope to do this just after our licensing call)11:14
rbasakOK11:14
strikovrbasak: what happened with this apparmor/lxc bug btw? I saw that it grew and now covers some other projects (including squid3)11:15
rbasakstrikov: I need to sync with hallyn. The issue is that the apparmor-profile-load script was previously provided by upstart, which is no longer installed.11:15
rbasakGiven that lxc and other packages still need the script despite upstart not being installed, clearly upstart is the wrong package for the wrapper to be in.11:16
rbasakSo we need to move it somewhere (probably init-system-helpers, with the actual implementation in apparmor).11:16
rbasakBut we need to avoid breaking any package that used the wrapper without depending on where we move it.11:16
rbasakBut we need to (avoid breaking any package) that (used the wrapper without depending on where we move it).11:17
strikovrbasak: understood, thanks; let me know if i can help with this somehow11:34
strikovrbasak: regarding mysql; i propose slightly different (probably) simpler fix than the one in the bug (/etc/tmpfiles.d/); How about that: http://pastebin.ubuntu.com/10688810/12:35
strikovrbasak: just two lines to service config and we're done12:35
rbasakstrikov: perfect!12:36
=== Lcawte is now known as Lcawte|Away
rbasakstrikov: could you verify that this fixes the issue please, and then I'll upload?12:36
strikovrbasak: the only thing I'm not sure is permissions; bug proposes mysql/mysql ownership while upstart conf uses mysql/root; do you have any clue why it matters?12:36
strikovrbasak: systemd with my config creates mysql/mysql by default12:36
rbasakstrikov: I can ask upstream. I'll ask in OFTC in #debian-mysql if you want to follow.12:37
strikovrbasak: thanks12:37
strikovrbasak: verified that fix work on a clean instance12:47
strikovrbasak: if mysql/root ownership is needed then we need to fallback to tmpfiles.d though because RuntimeDirectory can't handle ownership other than default one for service (mysql/mysql)12:47
rbasakOK. thanks. We'll see what they say.12:50
rbasakI suspect that the previous mysql/root was a mistake that never mattered, and that mysql/mysql is fine, but might as well check.12:50
strikovrbasak: ack, want me to come up with debdiff or just this pseudo-diff is enough?12:51
rbasakstrikov: pseudo-diff is enough - thanks!12:52
mnaserI'm trying to setup linux-crashdump .. I have followed all the instructions here: https://help.ubuntu.com/lts/serverguide/kernel-crash-dump.html12:53
mnaserI can verify that that it's running from dmesg | grep -i crash ... [    0.000000] Reserving 128MB of memory at 720MB for crashkernel (System RAM: 262045MB)12:54
mnaserHowever when trying to force a crash .. echo c > /proc/sysrq-trigger .. nothing happens, I just see it sit on the crash screen12:55
rbasakstrikov: just one thought. Was something else creating the directory in a now non-persistent way, causing it to work until next reboot, that is now superfluous and should now be removed?12:55
pmatulismnaser: output to 'cat /proc/sys/kernel/sysrq' ?12:57
mnaser17612:57
mnaser(the server did crash as I saw from the console screen)12:57
mnaserhttps://wiki.ubuntu.com/Kernel/CrashdumpRecipe#Allocated_memory_for_the_crash_kernel .. I'm checking if that may be it..12:57
pmatulismnaser: you are directly on the console?12:58
mnaserpmatulis: this is a dell server so I was running this on SSH while looking at screen remotely via idrac12:58
mnaseridrac = dell's ipmi equiv12:58
pmatulismnaser: there you go12:58
pmatulis"If you are using a network connection, you will lose contact with the system."12:59
mnaseryes, im aware of that :) because it crashes the server12:59
pmatulislooks like it's working then12:59
mnaserhowever, it is supposed to dump the crash to /var/crash and reboot12:59
mnasernone of that happened12:59
pmatulisoh12:59
mnaser(the whole point of having linux-crashdump heh)12:59
pmatulismnaser: yes, then check your settings (value of 'crashkernel')13:00
pmatulismnaser: how much RAM do you have?13:00
mnaser256gb on this server, and using crashkernel=384M-:128M13:01
pmatulismnaser: dell model?13:05
mnaserR63013:05
pmatulismnaser: possible to have someone try directly on the console?13:09
mnaserlooks like some people had to go up the crashkernel value to 256Mb for it to work13:09
mnaserlet me give that a shot13:09
mnaserand it looks like kexec reboots arent working too which I suspect might have to do with this13:21
=== Laogeodritt| is now known as Laogeodritt
ArrickHey all, I have a 12.04.3  server running a moodle/totara site... I am wondering if I install the latest server version on a new machine, will there be any snags I run into if I export the DB's and copy over files?13:34
=== martins-afk is now known as martinst
pmatulismnaser: try from the actual console13:59
pmatulismnaser: so it worked when you raised the value to 256MB?14:00
strikovrbasak: bah, me this bug while reproducing: https://bugs.launchpad.net/ubuntu/+source/mysql-5.6/+bug/143617814:54
strikovrbasak: fixing it as well14:54
rbasakstrikov: thanks!14:55
=== hxm- is now known as hxm
=== JanC_ is now known as JanC
=== Lcawte|Away is now known as Lcawte
lordievaderGood afternoon.15:30
=== rvba` is now known as rvba
qhartmanI have a cluster of servers running 12.04 and 14.04 on AWS that every once in awhile will produce log entries with completely bogus dates in them16:02
qhartmanSo far I've only seen it in entries that end up in auth.log from sshd and cron16:03
qhartmanthe dates are always some period of time in the future, ranging from a few weeks to several months16:03
qhartmanoh oops, not true, I just double-checked, and there are ones that show up in the past as well16:04
qhartmanhere's a snippet: https://gist.github.com/qhartman/62d2a49cd3c5a4fbd58916:05
* maxb saw a kernel bug that involved time-jumps of around 2**32 / 10**9 seconds (~ 4 seconds) into the future once, but never anything that wild16:05
qhartmanI've done a bunch of research on this sort of thing, and I've only found one other report and it was dismissed as an sshd bug16:06
qhartmanyeah, I've never seen anything like it before16:06
qhartmanand my log aggregator shows that it's affecting most (if not all) the servers in this cluster16:07
qhartmanI discovered the problem yesterday and I had to clean up about 100k entries before things started looking right16:07
rbasakqhartman: those dates look like past dates to me16:08
rbasakWhy do you say they're from the future?16:08
qhartmanthat snippet was taken on the 23rd16:08
rbasakAll the Mar 23 ones are consecutive.16:08
qhartmanso  there's Dec 816:08
rbasakFeb 16 and Mar 3 etc are all in the past relative to that.16:08
rbasakDec 8 is also before Mar 23.16:08
qhartmanand in the ones I cleaned out most of them were dec, nov, spe, etc16:08
qhartmanwell, I suppose, it's not clear from that entry which year it16:09
qhartmanwell, I suppose, it's not clear from that entry which year it is16:09
qhartmanbut you could be right16:09
rbasakIs it possible that your log aggregator is somehow lagging in logging those particular messages?16:09
qhartmannope, that snippet is from the auth.log file on the host16:09
qhartmanwe jsut disovered the problem via the aggregator16:09
rbasakMaybe put something on each host that logs the time sequentially, and alerts you when it jumps too far forwards or backwards?16:10
rbasakYou could use CLOCK_MONOTONIC to avoid glitching on system time changes.16:10
rbasakCould it be some NTP related problem?16:10
qhartmanI'm not convinced it's an actual time problem16:10
qhartmanSo far, the spurious messages have only shown up in auth.log16:11
qhartmanall the other files are normal16:11
qhartmanand all the messages from our java applications we're running are normal as well16:11
rbasakI believe the timestamp is written by the logging daemon, not the thing doing the logging. But I could be wrong - I don't know the syslog protocol.16:11
qhartmanthough I suppose the jvm may do some kind of internal time keeping16:11
rbasakIt would make sense for the timestamp to be determined by the client end actually. Closer to the real time the log message was generated.16:12
qhartmanyeah16:12
qhartmanthat is my undertanding that the timestamp is sent to syslog as part of the message16:12
qhartmanand my understanding is that it's actually sent in epoch time, then converted appropriately by syslog, but I'm less certain about that.16:13
rbasakAlso each of your cron syslog entries has a correct timestamp16:13
rbasakAnd most of your sshd entries do not16:13
qhartmanthe cron errors are less common16:13
rbasakSo I agree with you now - it looks likely to be the sshd.16:13
qhartmanI must have missed them in that snippet16:13
rbasakOh, you do have cron errors too?16:13
qhartmanyeah16:13
qhartmanbut they are far less common16:13
qhartman,but the messages from cron are also less common16:14
rbasakI still think something is flapping your system time.16:14
qhartmanour monitoring system creates a lot of log noise from sshd16:14
rbasakMaybe something being driven from that cron?16:14
qhartmanThat definitely makes the most sense at a global level, but there are no anomalies that I've found in other logs16:15
qhartmanand the time is ntp managed16:15
qhartmanif it got messed up that badly ntp would give up16:15
=== dersquisher is now known as squisher
=== chuck_ is now known as zul
qhartmanLooking through more of these entries, it would be more consistent to consider the bad entries to all be in the past, and just lacking year specificity, though that would indicate that the stamps are likely not sent in epoch time.16:19
qhartmanlooks like the syslog format expect time according to this RFC: https://tools.ietf.org/html/rfc333916:21
qhartmanso not epoch, but it does include the year, so unless rsyslog is swallowing that information then these are future dates... :\16:22
rbasakBased on your sample I still think they're past dates.16:23
rbasakThey fit better. Clustered closer to the current date.16:23
* qhartman nods16:24
rbasakMaybe edit rsyslog configuration to make sure?16:24
qhartmanyeah, that's what I'm digging into now16:24
rbasakAnd put some logging of system time in.16:24
qhartmantrying t osee how the default rsyslog message templates munge the date16:24
rbasakSleep on a 60 second look (using CLOCK_MONOTONIC, without referring to system date) and log the date.16:24
rbasakloop16:25
rbasakMaybe also use logger to log the date through syslog as well as directly to a file.16:25
qhartmanyeah, makes sense16:25
=== markthomas|away is now known as markthomas
=== bilde2910|away is now known as bilde2910
jeeves_mossI'm having an issue with mod_proxy.  I can curl the URL from the CLI on the system, but I can't access it via the outside world.   here is my config.  http://pastebin.com/wbZYwDzR19:45
patdk-wkit's missing the url you used19:57
patdk-wkthat is one very strange proxy config20:00
=== mfisch is now known as Guest90957
SpyidonasHello guys i have a small issue with apache and php, i have 2 folders under /var/www , one is a normal website that works as expected (joomla website), the other is a folder i created and while it has user and group as www-data (same as the joomla site) php isn't able to write to this folder (file_put_contents error). Is there any php.ini tha enables this function or a special apache21:00
Spyidonasconfig? I have tried 755,777 and 0777 as permissions without success...21:00
SpyidonasI am trying to install Rainloop, thats the permissions i need http://www.rainloop.net/docs/permissions/ , still it doesn't work.21:03
elnurIs this the place to get help on creating a network bridge in Ubuntu Server?21:45
sarnoldSpyidonas: mode 777 is almost always the wrong thing to do..21:46
sarnoldelnur: sure21:47
lordievaderelnur: Sure, what do you want to know?21:47
elnurI have a server with an IPv6 /64 subnet. I want to create several LXC containers and assign an IPv6 IP adress to each so that I can access them from outside.21:48
Spyidonassarnold: Yes , this issue is about permissions, normal permissions dont work so i check if full permissions work, but they don't...21:50
sarnoldSpyidonas: check aa-status output to see if your apache is confined by apparmor..21:51
Spyidonassarnold: There's no app armor installed21:51
sarnoldSpyidonas: check the logs for apache/php, there may be more detailed errors logged somewhere else..21:52
Spyidonassarnold: the error log is empty, the access log says i accesed the website from my browser21:53
Spyidonassarnold: i have ErrorLog ${APACHE_LOG_DIR}/web_error.log21:54
Spyidonassarnold: is there any other log i can see?21:54
sarnoldSpyidonas: maybe a vhost-specific log if you're using vhosts?21:54
Spyidonassarnold: there are no other logs21:56
Spyidonassarnold: the error is [202] Data folder permissions error [file_put_contents]21:56
Spyidonassarnold: i have tried permissions all the way to 077721:56
lordievaderelnur: Yes..?21:57
sarnoldelnur: there's probably already a bridge created by lxc for the containers.. there's some information on more complex configurations her https://linuxcontainers.org/lxc/manpages/man5/lxc.container.conf.5.html21:58
Spyidonassarnold: this ( https://github.com/RainLoop/rainloop-webmail/issues/262 ) suggests i create a test file but the output is 5) file_put_contents=021:58
sarnoldSpyidonas: how about the is_dir, is_readable, is_writable, and mkdir tests?22:00
Spyidonassarnold: all of them output 1 (except unlink)22:00
Spyidonassarnold: 1) is_dir=122:00
Spyidonas2) is_readable=122:00
Spyidonas3) is_writable=122:01
Spyidonas4) mkdir=122:01
Spyidonas5) file_put_contents=022:01
Spyidonas6) unlink=022:01
Spyidonas7) rmdir=122:01
sarnoldSpyidonas: weird. I wonder if it is suhosin or whatever that slightly-safer-php thing is called..22:01
Spyidonassarnold: well the weird part is that my other folder that hosts a normal website works without issues with joomla22:02
Spyidonassarnold: maybe joomla doesn't use file_put_contents anywhere...22:02
=== bilde2910 is now known as bilde2910|away
elnursarnold, there is a bridge, yes, but it doesn't get a public IPv6 address.22:11
lordievaderelnur: Did you give it a slave who can get an public ip?22:12
elnurlordievader, what does that even mean? :)22:12
elnurI'm not a network guy, so I don't understand a lot of stuff.22:12
elnurBut I wish to learn. :)22:12
lordievaderelnur: Well a bridge device can be seen as a virtual switch. It will not magically get an ip address but it can take the ip of a physical ethernet device if that gets added to the bridge.22:14
=== martinst is now known as martins-afk
lordievaderelnur: https://help.ubuntu.com/community/NetworkConnectionBridge22:14
elnurlordievader, okay. The question is how to do that.22:14
lordievaderelnur: brctl addif <bridge> <eth-nic>22:15
elnurlordievader, the problem with that link is that I don't see any IPv6 examples.22:15
elnurI have a single IPv4 address and a /64 IPv6 subnet. So I'd want to use IPv6 for this.22:16
lordievaderI should still mess with IPv6, don't really have any IPv6 knowledge. But I suppose you can route it through the bridge interface.22:19
elnurOkay. :(22:25
sarnoldelnur: how about the lxc config manpage I pasted along? I haven' tried it myself but it does look like you oughtot be able to configure what you want entirely from container configs22:29
elnursarnold, too many low level stuff there I don't understand.22:33
sarnoldelnur: scroll down to the examples, I think that'll be easier22:34
elnursarnold, those examples are LXC specific. I have yet to figure out how to create a bridge.22:35
sarnoldelnur: that bit is almost too easy: brctl addbr <name>22:36
elnursarnold, will that persist after a reboot?22:36
sarnoldelnur: I was a bit underwhelmed when I found that :) hehe22:36
sarnoldelnur: no; that's why it'snice to tie it into something else, like lxc if you want to use containers...22:36
elnursarnold, I mean, the bridge is supposed to be persistent. So that when I reboot the server, it all still works.22:38
=== Lcawte is now known as Lcawte|Away
k2gremlinsarnold, You around?23:40
sarnoldhey k2gremlin23:41
k2gremlinsarnold, Sorry got to go out for a bit. I have some questions for you later if your still around.23:50
sarnoldk2gremlin: there's usually someone around even if I'm not, hehe23:51

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!