/srv/irclogs.ubuntu.com/2015/05/19/#ubuntu-server.txt

=== markthomas is now known as markthomas|away
=== Lcawte is now known as Lcawte|Away
jrwrenstart -v mongodb says start: Job failed to start02:16
jrwrenthere are no logs anywhere that I can find. Where to look?02:16
sarnoldtry /var/log/upstart/mongo* ?02:17
jrwrennothing in /var/log/upstart/ nothing in /var/log/syslog02:17
jrwrensarnold: I wish :(02:17
Patrickdkjust run mongo manually and see what happens02:17
jrwrenPatrickdk: works great :(02:18
sarnoldjrwren: you could try running fatrace to see what files are accessed02:18
jrwreneven invoking with start-stop-daemon the way the upstart job does works great.02:18
Patrickdkyou are running it as the same user as the init script uses?02:18
jrwrenfatrace is a good idea.02:18
jrwrenstart-stop-daemon has a user option, so yes?02:18
jrwreneven adding debug to init/mongodb.conf gives no log02:21
sarnoldanything in dmesg?02:21
sarnoldI understand if the numa memory allocation policy isn't set correctly for mongo it'll just fall over with an oom02:22
jrwrennothing obvious. this is in an lxc and so dmesg is showing me host stuff. Still, nothing with a recent timestamp02:23
jrwrenand mongo runs fine if I invoke it manually. upstart seems to be the problem?02:24
shelloxhi02:25
sarnoldoh man that pokes a neuron..02:26
jrwrensarnold: there is an issue with running mongo in a host if its already running in lxc, but this is not that :(02:26
shelloxI'm using a ubuntu server 14.04, nginx and php-fpm and was wondering where the best place is to install a php application? One developer will need access to it using sftp, so i was thinking /srv/www/my-app and give him access to this directory02:27
sarnoldjrwren: ah! that's what it was. thanks....02:27
shelloxis that a sound way to do it :P?02:27
sarnoldshellox: yeah, it's as good a place as any. debian guidelines might suggest stuffing it somewhere under /var/www but I never really liked that location for locally installed web applications.02:28
sarnoldjrwren: but dang. :)02:28
jrwrenis there a way to put upstart into super debug mode?02:30
jrwrenor /sbin/start into debug verbose++ mode?02:31
shelloxsarnold: Is it good practice to add a user to the www-data group, so he has write access to directory?02:31
sarnoldshellox: I'd rather have the directory and files owned by the developer, and make sure the www-data user or group can read the files. I think webservers should only have write access to their log files and databse sockets...02:33
Patrickdkwebservers shouldn't have to write to them ever02:33
Patrickdkyour cgi/fcgi might have to, and should be limited02:33
Patrickdkit's nice to do something like git or so02:34
Patrickdkand just have it continuously get updates pushed to it02:34
Patrickdkno need to worry about dev owning files02:35
jrwrenstrace of the /sbin/start is a bit interesting02:36
jrwrenhttp://paste.ubuntu.com/11216946/02:36
Patrickdknot really, to be expected02:37
Patrickdkas strace doesn't follow forks02:37
jrwrenyeah? the EAGAIN on reads to the /com/ubuntu/upstart socket is to be expected?02:38
Patrickdkcan't tell, it's all ...02:39
Patrickdkbut I don't see that02:39
jrwreni'll paste again with -f and -s 102402:39
Patrickdkit sent a message, it worked02:39
shelloxsarnold: I see, that sounds plausbile. Thanks02:40
jrwrenhttp://paste.ubuntu.com/11216993/02:40
Patrickdklooks like it's working fine02:41
sarnoldI didn't suggest strace since I expected it to be useless; iirc start just contacts the running pid 1 and asks -it- to start a new job, and upstart uses ptrace extensively when starting new jobs, and .. throw containers inthe mix and I really doubt strace will demystify anything.02:42
jrwrenok. maybe trace pid 1?02:43
Patrickdkno02:43
sarnoldI haven't got a clue if that's allowed, and I wouldn't try it on a system I needed to stay alive :)02:43
Patrickdkyou need to trace the mongodb pid02:43
jrwrenmongo is fine.02:43
jrwrenthere is no mongo pid02:43
Patrickdksure there is02:43
jrwrenif I start mongo manually, it runs02:43
jrwrenif I start mongo by using start-stop-daemon exactly as is in the upstart script, it runs.02:44
jrwrenupstart is failing.02:44
sarnoldmaybe throw the strace -f on that start-stop-daemon02:44
jrwrenbut that actually works.02:44
jrwrenoh, on it in the upstart job?02:44
sarnoldagain, since upstart uses ptrace I'm worried it might not be helpful...02:44
jrwrenoh!02:48
jrwrenthis is a user lxc02:48
jrwrenand mongodb upstart jobs has02:48
jrwrenlimit nofile 64000 6400002:48
jrwrenwhich failed02:48
jrwrenstrace -p 1 showed me.02:49
jrwrenthat was it.02:49
sarnoldwoo!02:49
jrwrenHUGE thanks for helping.02:49
jrwreni don't know if that is a bug or not.02:49
sarnoldit seems worth filing a bug report02:49
jrwrenok.02:49
sarnoldbut I don't know if it ought to be filed against lxc, mongo, or upstart :)02:49
jrwrenha! that was about to be my next question02:50
sarnoldheck file it against all three ...02:50
jrwreni'll have to learn how to LP to file 1 bug against all 3.02:50
sarnoldfile it against one package, then hit the "also affects distribution/package" button, and add in another one in the 'source package name' field02:51
jrwrenthanks.02:51
sarnoldtime to bail, have fun jrwren :)02:53
jrwrenthanks again. good night.02:53
=== gema_ is now known as gema
=== markthomas|away is now known as markthomas
hxmmorning06:05
hxmi had some problems with mysql, so i unninstalled every mysql packages, i am trying to install mysql-common and it says /etc/mysql/my.cnf.fallback does not exists06:07
hxmindeed, i deleted that directory06:07
=== markthomas|away is now known as markthomas
rbasakhxm: purge mysql-common first. Otherwise it'll keep your "modifications".07:42
rbasakhxm: in fact, make sure to purge *all* MySQL related packages if you're going to go to the extreme of removing stuff manually first.07:43
=== Lcawte|Away is now known as Lcawte
shelloxwhich permission should the key file for my SSL cert have?08:29
shelloxi found this guide08:29
shelloxhttps://help.ubuntu.com/lts/serverguide/certificates-and-security.html08:29
shelloxand copied it to /etc/ssl/private08:29
=== ashleyd is now known as ashd
Sander^work2In what circumstances is it required to have nfs shares inside a subdir like this: /nfs/host1/share1 and nfs/host2/share2/ instead of having everything in /nfs/share1 and /nfs/share210:13
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
hxmI have this problem http://paste.ubuntu.com/11223995/ which is a headache for me11:50
hxmin the /var/log/mysql/error.log the relevant line is ERROR: 1062  Duplicate entry 'innodb' for key 'PRIMARY'11:52
hxmi thought i already deleted database11:53
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
=== ashleyd is now known as ashd
rbasakmatsubara_: around? Would you mind driving SRU verification for bug 1443735 for me please? It'll be a while yet - an existing SRU needs to clear before I can upload it and it'll probably sit in the SRU queue for a while after that anyway, but I thought I'd ask you in advance.14:07
rbasakhttps://bugs.launchpad.net/ubuntu/+source/grub2/+bug/144373514:07
* rbasak wonders where the bot is.14:07
* matsubara_ looks14:10
matsubara_rbasak, ok. I can do that14:13
rbasakmatsubara_: thanks!14:15
Voyage how to write automated scripts for linux with max possibilities and control?14:26
jrwrenVoyage: very carefully.14:27
Voyagejrwren,  in what way14:27
jrwrenVoyage: that is how I write automated scripts. I do it very carefully.14:27
Voyage you know scripts that would do stuff that I do in commandline. rsync ssh, copy files, change configs, connect to another server, do stuff, return back. what ever.......14:28
Voyagehow to do it?14:29
Voyagehow do you write those14:29
Voyagejrwren,  bash or what?14:30
VoyageI heard doing this with pythong was a smarter way14:30
jrwrenVoyage: bash is fine. its nice to have easy access to gnu coreutils things.14:31
jrwrenVoyage: I recommend you start with bash and use something else only if you need it.14:31
Voyagecant python do what bash can?14:31
jrwrenVoyage: I love python too. I'd not call it "a smarter way"14:31
Voyagewhy14:31
jrwrenVoyage: it depends.14:32
jrwrenVoyage: you'll find in tech, a lot of people have strong opinions and like to tell others what they should be doing without any idea of individuals actual needs.14:32
jrwrenVoyage: because many things can be done simply in bash which aren't quite as simple in python, or... require some external python dependency.14:33
Voyagehm14:33
=== ashleyd is now known as ashd
Voyagecan anyone give an example of things that cannot be done by bash and we need python to do so?14:35
jrwrenVoyage: there are no absolute answers to these qeustions.14:37
jrwrenVoyage: python can spawn threads, bash doesn't have primitives for that14:37
jrwrenVoyage: BUT, python has its GIL, so threads aren't as useful.14:37
jrwrenVoyage: I highly recommend focusing on solving problems isntead of worrying about differences between python and bash.14:38
Voyagehm14:40
hackeronhey, anyone has an issue with Ubuntu 15.04 not rebooting without a connector monitor? - Any ideas what could be causing it? -- 14.10 rebooted without issues.14:45
hackeron(I'm using ubuntu-server, so no X and I would like to run headless)14:46
=== ashleyd is now known as ashd
rbasakhackeron: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1443735 maybe?14:53
rbasakYou should be aware of that and implement the workaround on every headless box anyway. We should have an update which fixes the default soon.14:54
hackeronrbasak: no, not that one - I already have this set on every headless server14:54
hackeronrbasak: this is related to 15.04 and I am guessing maybe systemd - plugging in a monitor makes the server instantly boot14:54
rbasakhackeron: that's interesting14:55
rbasakhackeron: if you figure it out, please let me know. Maybe try a serial USB adaptor to diagnose if that works?14:56
hackeronrbasak: I commented on that original bug back in 201114:56
hackeronrbasak: the server is remote somewhere, I am speaking to them on skype and when I reboot the server, it doesn't boot - as soon as a monitor is plugged in, it boots up - nothing in the logs other than:May 19 15:45:20 TimeBox rsyslogd: [origin software="rsyslogd" swVersion="7.4.4" x-pid="1055" x-info="http://www.rsyslog.com"] exiting on signal 15.14:57
hackeronMay 19 15:53:14 TimeBox rsyslogd: [origin software="rsyslogd" swVersion="7.4.4" x-pid="1653" x-info="http://www.rsyslog.com"] start14:57
hackeronthe rsyslogd start happens the instant a monitor is plugged in - and this did not happen in 14.1014:58
=== ashleyd is now known as ashd
rbasakhackeron: nothing in dmesg?15:26
hackeronrbasak: nope, the kernel starts booting the instant the monitor is plugged in - it appears to get stuck in grub15:26
rbasakAh15:26
rbasakThe only logging you'd get from grub is to the console really (practically that means serial)15:27
hackerontrying to boot with nomodeset - but not sure how that will help, if it never starts booting without a monitor :/15:28
hackeronrbasak: don't have a serial console though - what do they look like these days anyway? - I only have USB ports, heh15:29
rbasakhackeron: yeah I understand. Nowadays the only form I'm aware of are USB<->serial adaptors. I have no idea if grub can use one of those though.15:31
hackeronrbasak: even so, what do I connect to the serial end of the adapter?15:31
rbasakhackeron: a smartphone video of the screen is another possibility, but also impossible here because your screen won't be plugged in15:31
rbasakhackeron: another usb serial adaptor :)15:31
hackeronrbasak: the second I plug a monitor in, it boots :/15:31
rbasakYeah15:31
rbasakVGA?15:32
hackeronrbasak: yep15:32
rbasakThe only other thing I can think of is to cut the DDC pins with a switch for debugging15:32
rattkingI alot of OOB managment systems do SOL, some ever provide access via ssh.. very nice compared to some java kvm15:33
rbasakIt seems a bit of a stretch though I think DDC is the only way grub would know when the monitor gets plugged in15:33
=== ashleyd is now known as ashd
hackeronrbasak: hmmm, if I set all the GRUB timeouts to 0 (effectively disabling the menu), it seems to boot, or at least it booted now - trying to reboot15:35
rbasakhackeron: maybe also play with https://www.gnu.org/software/grub/manual/html_node/gfxpayload.html?15:35
hackeronrbasak: well, I donno what monitor may or may not be plugged in, so I don't want to hard code anything like that15:36
hackeronrbasak: and this worked fine in 14.10 - so it seems something in grub between 14.10 and 15.04 broke headless boot on Intel Atom and Intel Celeron machines like Shuttles and NUCs - not good15:37
rbasakhackeron: I was thinking of changing it to "text".15:39
rbasakhackeron: agreed it's not good. If it can be verified as a bug in grub or grub packaging I'm confident that it'll get fixed. Just need to pin it down.15:39
hackeronrbasak: will try - this server is in Moscow and I'm in London so coordinating is hard - I have around 70 servers, around 15 of them are experiencing this. Going to change the grub timeouts on them to 0 as a workaround, then assemble one locally and see if I can pin it down15:41
rbasakhackeron: thanks, I appreciate it.15:41
hackeronrbasak: no worries :) - also it seems setting timeouts to 0 isn't enough - it also needs GRUB_HIDDEN_TIMEOUT_QUIET=false15:46
rbasakhackeron: you are doing BIOS serial console redirection, are you?15:47
rbasakaren't doing15:48
hackeronwhat's that? - I'm not doing anythign special - I did do-release-upgrade to 15.04 and it stopped booting without a monitor15:48
rbasakhackeron: fairly common on headless boxes. The BIOS presents a serial device and redirects it to the monitor/keyboard.15:48
rbasakIf that is enabled then I wonder if the BIOS is causing serial output to hang until the monitor is connected for example.15:49
hackeronrbasak: it's just an NUC15:49
kickinz1hackeron, rbasak, I also experienced grub stuck at menu, when you run update-grub, there is a error message about GRUB_HIDDEN_TIMEOUT_QUIET  and other related option not supported enabled at the same time anymore15:49
rbasakI've never handled a NUC physically, so I don't know much about them.15:49
=== matsubara_ is now known as matsubara
rbasakI just don't follow why grub would care whether a monitor is plugged in. I didn't expect it to speak DDC.15:50
kickinz1But I was having problem on making my system boot on a bcache rootfs, so I didn't take too much care of this.15:50
rbasakSo I'm wondering if there's some kind of BIOS interaction going on here.15:50
rbasakAnd serial redirection is the first BIOS interaction I thought of that might be relevant.15:50
kickinz1But why would the fact to connect the display make it start ....15:50
kickinz1(was on 15.04)15:50
hackeronrbasak: ok, it seems GRUB_HIDDEN_TIMEOUT_QUIET=false isn't enough - need to remove splash and quiet also -- if the bios is doing that, why would removing splash and quiet and setting GRUB_HIDDEN_TIMEOUT_QUIET=false fix the issue?15:51
hackeronrbasak: and why wasn't it doing that in 14.10 or 14.04?15:53
rbasakhackeron: plenty of interactions change between releases. That doesn't necessarily make it a bug in a newer release.15:53
kickinz1Hackeron; Do you have this warning when you update grub (translated from french): " Setting GRUB_TIMEOUT to a non-zero value if GRUB_HIDDEN_TIMEOUT is set is not possible anymore"15:54
rbasakhackeron: I am just speculating here. First let's figure out what's going on. Then we can talk about whether it's a bug and where and how it might be fixed.15:54
hackeronkickinz1: no warnings when running update-grub - I have all timeouts set to 015:54
rbasakhackeron: I'm suggesting that if you have BIOS serial redirection turned on, try turning it off to help pin down the bug.15:54
kickinz1hackeron, OK, sorry fo noise, then.15:54
rbasakhackeron: I appreciate that's difficult in your situation. It's just a suggestion.15:55
hackeronrbasak: I very much doubt the NUC has this feature - this is just a tiny mini PC with an intel celeron CPU - also it's in Moscow -- I'll assemble one locally later today and check15:55
rbasakI have some cheap Atom based boards that do it.15:56
rbasakDon't NUCs have some basic management as well?15:56
hackeronrbasak: not that I know of.. - this also happened on a shuttle with an atom which just has defaults loaded in the bios - it's designed as a cheap desktop15:56
hackeronrbasak: this one: http://www.dabs.com/products/shuttle-slim-xs35v3l-black-barebone-system--atom-d2550-2-x-ddr3-sodi-949D.html?utm_source=google&utm_medium=ppc%20product%20search&utm_campaign=Computing%20-%20Desktops%20and%20Monitors%20-%20Desktop%20PCs&gclid=Cj0KEQjwvuuqBRDG95yR6tmfg9oBEiQAjE3RQNyYMACUOhj9Z06x02P_5OPcqAajBUV7pKRbVrcHVS8aAoM58P8HAQ15:57
hackeronactually it's a v2 with a VGA: http://us.shuttle.com/barebone/Models/XS35V2.html15:57
tewardwith an Apache web server is there a way to refresh the configurations (like how nginx can do `service nginx reload` and refresh the configurations without booting current connections or having the instance shut down)?16:05
teward(but close down the apache instance)16:05
jrwrenteward: graceful16:06
jrwrenteward: apachectl has a graceful option16:07
tewardjrwren: OK, so that will not require a restart of the Apache process, and will gracefully apply the updated config for future connections without disrupting already connected connections?16:08
tewardthat's the problem (can't afford downtime!)16:08
hxmi have to say ubuntu 15 ruined my day16:08
hxmjoking, but still true16:09
jrwrenhttps://httpd.apache.org/docs/2.2/programs/apachectl.html  yes16:09
jrwren" This differs from a normal restart in that currently open connections are not aborted."16:09
tewardjrwren: ahhh, that's hyper important, thanks.16:09
tewardi'm an nginx guy hence my asking :/16:10
teward:P16:10
tewardjrwren: stupid other question: what's the syntax to enforce SSL server side ordering in a config.16:10
tewardin nginx it's ssl_prefer_server_ciphers, but no clue what it is in Apache16:10
teward(getting stuff dumped on me is blah)16:10
jrwrenteward: SSLHonorCipherOrder on16:12
jrwrenteward: https://httpd.apache.org/docs/current/mod/mod_ssl.html  double check that its what you want.16:12
hackeronrbasak: an update, after some trial an error, it seems only this is required to make these servers boot: GRUB_CMDLINE_LINUX_DEFAULT="nomodeset"16:22
hackeronrbasak: so it seems like a kernel bug in that case?16:24
hackeronin fact this works too: GRUB_CMDLINE_LINUX_DEFAULT="nomodeset quite splash"16:25
tewardjrwren: awesome, that's exactly what we needed.  Thanks again :)16:25
rbasakhackeron: could be a kernel bug. Can you try the utopic kernel on vivid to pinpoint that?16:28
hackeronquiet*16:31
hackeronrbasak: sure, let me try - I believe I just change GRUB_DEFAULT=116:33
rbasakhackeron: yep - GRUB_DEFAULT. Though I'm never sure what 1 will do with older kernels being in a submenu now, so I do it by text: http://askubuntu.com/a/216420/780816:34
rbasakI match the exact text strings from the existing /boot/grub/grub.cfg.16:34
rbasakThen update-grub.16:34
rbasak'>' is for a submenu16:35
hackeronrbasak: for some reason it just booted the 15.04 kernel anyway and the sysadmin had to leave - will try to reproduce locally here16:57
jKaideNhey guys16:58
jKaideNanyone have experience with ILO2 (HP Integrated Lights-Out 2) ?16:58
rbasakhackeron: OK. I'm heading out now but will stay online and will check back later. If it does turn out to be a kernel issue, please file a bug - "kernel modesetting hangs headless machines until monitor is plugged in" or something. They'll probably want hardware details.16:58
jKaideNI'm trying to install my own ISO (OS) rather than using a cpanel with pre-set ISO's I'm not sure how exactly I can remotely install my own custom ISO16:59
rbasakhackeron: if you wanto dig further (we'd love it if you did) then https://wiki.ubuntu.com/Kernel/MainlineBuilds and https://wiki.ubuntu.com/Kernel/KernelBisection will hopefully help pin it down to a single commit.17:00
jKaideNin the ILO2 web management I have this thing called "Virtual Media Applet" But i just get java error17:02
hackeronrbasak: thank you, I'm just buiding a new NUC here to try to reproduce the problem first :)17:04
=== Lcawte is now known as Lcawte|Away
=== Lcawte|Away is now known as Lcawte
=== pgraner is now known as pgraner-food
pmatulisjKaideN: using windows/IE on the client side? if so, that should work17:47
jKaideNyeah i am not working though17:47
jKaideNCould not initialize class com.sun.deploy.net.protocol.https.Handler$Intializer17:48
jKaideNAh disabled TLS 1.1 + 1.2 on Java17:50
jKaideNit's working now17:50
jKaideNUbuntu Server 15.04  or  Ubuntu Server 14.04.2 LTS  ??17:53
hackeronrbasak: argh! - I have the same NUC here but a different revision and cannot reproduce the problem here, but 15 of 60 servers have this problem now and they are in client locations so can't really ask them to keep rebooting while I experiment :( - going to try the workaroud and see if the problem goes away for them all17:55
rbasakhackeron: a higher or lower revision? I wonder if it was a BIOS bug that got fixed?18:07
hackeronrbasak: same bios version, different hardware revision18:07
rbasakOK, I guess not then.18:08
hzutHi - Please, let me know a good successor for emule?18:19
jKaideNHey guys anyone here I got a quick question regarding "Virtual Media"18:21
jKaideNnow, i'm installing Ubuntu Server on my remote dedicated server18:21
jKaideNI've got access to KVM switch which has things like remote console to server and this thing called "Virtual Media"18:21
jKaideNi've located the virtual media to the ISO i downloaded (ubuntu server) on my client local machine18:22
jKaideNDoes this upload the iso ? because the iso is around 600 MB and my upload speed is really slow18:22
jKaideNwas wondering how is the server reading the file from my local PC without me having to upload it ??18:23
hackeronrbasak: the plot thickens - I managed to reproduce the problem, but only when doing do-release-upgrade from 14.04 -> 14.10 -> 15.04 -- if skipping 14.04, there are no boot problems - how bizare :/18:36
jrwrenhackeron: this is the grub thing, right? can you diff -r /boot between a system exhibiting the problem and another not?18:44
=== pgraner-food is now known as pgraner
hackeronjrwren: will do, just helping a client get a system back up and running - thankfully the workaround fixes the immediate issue18:59
pmatulisjKaideN: yes, will be slow19:09
jKaideNpmatulis, yep i'm setting up right now, um i've got 2 network interfances i've just setup eth0 as primary19:10
jKaideNhow would i know if thats the correct one ?19:10
jKaideNand im stuck at "partitioning disks"19:10
pmatulisstuck how?19:11
jKaideNGuided - Use entire disk ?19:11
jKaideNso many options19:11
jKaideNor should i be doing manual for this19:11
jKaideNserver has 1 500GB  HDD19:11
pmatulisjKaideN: depends what you want in the end19:11
pmatulisjKaideN: do you need any special partitioning?19:12
jKaideNnope19:12
jKaideNI don't19:12
pmatulisjKaideN: choose 'guided + LVM'19:12
jKaideNGuided - use entire disk and set up LVM ?19:12
pmatulisyep19:13
pmatulisthen accpet the next few questions19:13
pmatulis(yes)19:13
jKaideNit's asking for volume group to use for guided partitioning:19:14
jKaideNit automatically says "499.8 GB" leave it as it is/19:14
pmatulisyes19:14
jKaideNhttp://i.imgur.com/heR2NoS.png19:15
jKaideNis that all good ?19:15
pmatulisyes19:16
jKaideNupload speed : 47.37 KB/s :(19:26
jKaideN#Australia19:26
sarnoldow :/19:26
pmatulisgo australia, those packets are taking the scenic route around corrals and whateva19:28
hzutHi - Please, let me know a good successor for emule?19:31
jKaideNlol and my download is 100 MB/s rofl19:32
jKaideNfor the nameserver i just set it to 8.8.8.819:40
jKaideNthats fine ?19:40
=== NomadJim_ is now known as NomadJim
pmatulisthat's local-specific19:41
jKaideN?19:41
Walex2hzut: 'amule'20:04
jKaideNhow should i manage upgrades on the system? which is preferred?20:51
jKaideNno auto updates | install security updates auto | manage system with landscape20:51
bekksjKaideN: The way that fits your requirements.20:57
CrustY__Hi everyone20:57
CrustY__I've faced this issue https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/144765420:57
CrustY__and tried to install polkit like in workaround described in comment20:58
jKaideNI just went with no auto updates i'll porbably want to manage them myself20:58
CrustY__but apt-get install polkit-1 hangs on installing udev20:58
CrustY__how can I fix that?20:58
jKaideNwhen you first install ubuntu server is it essential to do 'apt-get full-upgrade' ?21:01
bekksjKaideN: apt-get dist-upgrade21:01
CrustY__I use it on cloud21:01
CrustY__to be clearer: it's droplet in digitalocean21:02
bekksjKaideN: full-upgrade isnt even mentioned in the man page.21:02
jKaideNbekks, oh i see, is the dist-upgrade any different from normal upgrade21:02
jKaideNbekks, in other words why should i be doing dist-upgrade opposed to normal upgrade21:03
bekksjKaideN: This article explains it: http://askubuntu.com/questions/81585/what-is-dist-upgrade-and-why-does-it-upgrade-more-than-upgrade21:03
CrustY__any help?:(21:10
jKaideNdo i install GRUB boot loader?21:17
sarnoldCrustY__: perhaps add a comment to the bug with the information pitti asked for; he'll probably be online in seven or eight hours and might be able to work on it then21:57
pmatulisjKaideN: 'apt full-upgrade' will work22:15
pmatulisjKaideN: yes, install GRUB22:16
jKaideNyep done22:16
sarnoldheh, I've never seen full-upgrade before.22:16
bekkspmatulis: How comes it isnt documented in the man page?22:16
jKaideNinstalling iptables-persistent now22:16
pmatulisapt not apt-get22:16
bekksah, oh, ok. TIL. :)22:17
pmatulishopefully to have completion soon22:17
bekks:)22:17
jKaideNbtw im using ufw will that conflict with iptables ?22:18
jKaideNlike when i allow something on ufw but accidentally deny in iptables which takes highest priority ?22:18
sarnoldjKaideN: ufw writes iptables rules for you22:18
bekksufw uses iptables, but you're better of using either ufw for administering iptables, or dont use ufw.22:18
sarnoldjKaideN: I'd recommend picking one; hand-writing rules or using ufw, and stick with it...22:18
jKaideNok since i'm not going to be using much rules everything will be kept simple i'll just go with ufw22:19
jKaideNI have22:27
jKaideN-P INPUT DROP22:27
jKaideN -P FORWARD DROP22:27
jKaideN is that normal22:27
jKaideNis there a way to update python and making sure that two different versions are non-existing?22:34
sarnoldjKaideN: what are you trying to do?22:34
sarnoldjKaideN: hint: it's best to pretend python3 and python2 are completely different languages22:34
jKaideNupdate current python from 2.7.6 to 2.7.922:35
jKaideNyes22:35
sarnoldjKaideN: the easiest way to do that is to upgrade to vivid.22:35
sarnoldjKaideN: alternatively you could compile your own python fro msource for whatever requires 2.7.9.22:36
jKaideNthings that use python doesn't require 2.7.9 but I'd like to update python for security reasons as well, rather not keep them outdated22:38
jKaideNexample: fail2ban requires python >= v2.6 (or >= 3.2)22:40
sarnold2,7,6 fits that..22:40
sarnoldthere's not much outstanding for python2.7: http://people.canonical.com/~ubuntu-security/cve/pkg/python2.7.html22:40
sarnoldwe've rated all those low priority issues22:41
jKaideNi should be fine with 2.7.6 ?22:42
jKaideNi'm using ufw does this save the table after reboot22:50
jKaideNor am i required to install iptables-persistent as well22:50
jKaideNalso in motd i receive "7 updates are security updates.22:53
jKaideN" How do i apply these updates ? through apt-get upgrade ?22:53
=== Guest38176 is now known as mgagne
bekksjKaideN: Just use apt-get dist-upgrade, instead of aptget upgrade, always.23:06
jKaideNalso on syslog i got something like this:23:07
jKaideN [UFW BLOCK] IN=eth0 OUT= MAC=00:19:.... SRC=128.8.x.x DST=<my server ip>  LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=12690 DF PROTO=TCP SPT=50848 DPT=8333 WINDOW=14600 RES=0x00 SYN URGP=023:08
jKaideNthere's a couple of htem23:09
jKaideNlol wtf that ip is dreyfus.umiacs.umd.edu23:12
=== Lcawte is now known as Lcawte|Away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!