/srv/irclogs.ubuntu.com/2015/06/13/#ubuntu-server.txt

tarpmanteward: there's a thunderbird plugin called "Mail Redirect"00:09
Avenged3!ops | permaban HFSPLUS00:58
ubottupermaban HFSPLUS: Help! Channel emergency! infinity, soren, lamont, mathiaz, Pici, Daviey, Tm_T, pmatulis, Corey, IdleOne, ikonia, funkyhat, Myrtti, ocean, genii, phunyguy!00:58
=== Avenged3 is now known as HFSPLUS
tewardtarpman: thank you00:59
=== markthomas is now known as markthomas|away
diyttohowdy, does anyone know of a good openvpn server that is free/open source?01:27
diyttoi tried using softether, but am unable to get it to work reliably01:28
diyttoalso, is it possible to resize my root partition? it takes up 1TB of space of my 3TB01:29
RoyKparted, perhaps?01:30
RoyKdiytto: what does lsblk have to say?01:30
diyttosorry, didn't get a ping01:33
diyttoone moment01:33
diyttohttp://paste.ubuntu.com/11705476/01:34
tewardapparently I can't sleep.01:34
tewardsarnold: i can bounce it to ya if you haven't gotten it yet01:34
diyttoRoyK: see above link01:36
RoyKdiytto: I'd suggest a reinstall - if it's ext4 on the root partition, you can reduce it, but it'll have to be offline, so on a live cd of sorts, then you can reduce the size of the lv and add the space to the data01:37
=== Lcawte is now known as Lcawte|Away
diyttowell that sucks01:37
RoyKdiytto: if you haven't done this before, better reinstall, or at least, make sure you have a good backup01:37
RoyKI've done this in the lab, it works01:38
RoyKbut keep in mind that data loss may occur01:38
RoyKif you do something stupid01:38
diyttoit's a remote server and i have no physical access01:38
diyttounfortunately01:38
RoyK1TB for the root is a bit over the edge01:38
diyttoRoyK: i would be willing to disable RAID and use that as a backup if that's possible01:38
RoyKI wouldn't recommend it01:39
diyttoalright01:39
RoyKI've been working with storage long enough not to trust a single drive01:39
diyttoyeah01:39
diyttowell i suppose i will have to wait until i can get another server01:40
RoyKdo you have console access to the thing?01:40
diyttoyeah01:40
diyttoi have full root access01:40
diyttoif that's what you mean01:40
RoyKconsole?01:40
RoyKas in, can you see the boot screen and boot it into single without networking enabled?01:40
diyttowhat do you mean by console01:40
diyttonot that I'm aware of01:41
diyttoi can take another look01:41
RoyKyou can reduce the size of ext4, but only if the filesystem isn't mounted01:41
RoyKif it's xfs, no way01:42
diyttoyeah i don't believe i have any kind of console01:42
diyttoit's a server from hetzner server auction01:42
RoyKbad news for you, then01:42
RoyKdiytto: what you could do, if you're nasty, is to dd if=/dev/zero of=somewhere and make av pv on that01:44
RoyKand add that and extend the vg01:44
RoyKnasty business01:44
diyttoI'm not really looking to take any risks here :p01:44
diyttowouldn't want to lost my 2TB of data01:44
RoyKdo you have a backup?01:45
diyttonot necessarily01:45
diyttoit's in RAID1 (not that that counts) but there is no exact copy01:45
RoyKI've been through this with a few people that have lost data01:45
RoyKWHY ON EARTH DIDN'T YOU HAVE A BACKUP????????01:46
RoyKseveral cloud services exist01:46
RoyKsuch as crashplan01:46
diyttoit's not exactly the most important data on earth01:46
diyttothis server is primarily a seedbox01:46
RoyKis it important enoough to pay $5 a month_01:47
RoyK?01:47
diyttoreally that's all?01:47
diyttoi could do that01:47
RoyKthat's what crashplan charges for a year term01:48
diyttowow that's impressive01:48
diyttoand i can set it up without a gui access01:49
RoyK$5 per month, that is01:50
RoyKand yes, remote X works well01:50
diyttohmm01:51
RoyKI guess you have some sort of GUI on your desktop ;)01:51
RoyKnot many left of the lynx people01:51
diyttoi use os x on my personal computer01:53
RoyKwhich supports X01:53
diyttoyeah01:53
RoyKI use OS X myself01:53
diyttohow would i set up crashplan with the server01:53
RoyKinstall the thing01:54
RoyKstart it01:54
RoyKconnect to your account01:55
RoyKI use a Norwegian firm reselling crashplan - costs a bit more, but outside of NSAs work and a lot faster01:57
RoyKcrashplan is a bit slow at times - probably depends where your server sits, though01:57
diyttoRoyK: does it matter if it's home or business02:00
RoyKdon't think so02:00
diyttook02:00
RoyKwhere are you located?02:01
diyttoRoyK: i am in the US, server is in Germany02:04
tewardwhat's the oldest ubuntu server edition that has Landscape support? 12.04 currently?02:05
diyttoRoyK: if i order this now would you be available to help me set it up? :p02:05
RoyKdiytto: you should be able to do it yourself rather instantly02:16
RoyKdiytto: and last I checked, crashplan.com's servers were in the US, but that might have changed for all I know02:17
diyttoRoyK: they appear to have a remote ui02:17
RoyKdiytto: both02:18
RoyKI haven't used the web thing much - perhaps it has more now02:19
diyttoRoyK: i can use my dektop ui to access the remote engine02:33
diyttokinda neat actually02:33
diyttoit uses ssh tunnel02:33
RoyKssh tunnels are neat02:33
diyttodo you think it's fine to literally just backup /02:34
RoyKjust get a backup of your data before you try to mess around with partitions02:35
diyttoalright easy enough02:35
RoyKor try anything, really02:36
diyttookay it's running02:39
diyttoi am backing up my apache configs and my webserver data02:40
diyttoas well as home directories02:40
diyttonice, it's uploading files at like 20Mb/s02:47
RoyKthat's nice02:49
RoyKjust turn off deduplication on that client02:49
RoyKgoogle it02:49
diyttoRoyK: i did it and it didn't help at all lol03:06
sarnoldteward: woo, thanks for the bounce! I never did get mutt to handle that mail as an mbox. sometimes mutt drives me up the wall. I hope you finally got to sleep..04:24
diyttoDoes anyone have a good alternative to the OpenVPN server? I'm looking for something without licensing fees04:38
TJ-openvpn doesn't have license fees... what kind of alternative do you want?04:39
sarnolddiytto: when I reviewed the strongswan code I liked what I saw; but it's more complicated to configure04:39
diyttoTJ-: it does if you want more than 2 clients04:40
diyttosarnold: I'll take a look04:40
TJ-diytto: openvpn is licensed with GNU GPL v204:42
sarnoldI've never heard of license fees for openvpn; are you perchance confusing a specific service provider that uses openvpn with the openvpn packages?04:42
diyttohttps://openvpn.net/index.php/access-server/pricing.html04:42
TJ-sarnold: I think so04:42
diyttomaybe04:43
TJ-diytto: I've been using openvpn server for a decade; it is GNU GPL v2 licensed04:43
diyttowhere the heck do i go to get a copy that doesn't use a licensing system then04:43
TJ-diytto: "sudo apt-get install openvpn"04:44
diyttowhat's the difference between the package and the version from openvpn.net04:44
diyttoare they not from the same team?04:45
sarnoldask them why it's worth $90/year to find out? :)04:45
sarnoldmy guess is this bit here, "enterprise management capabilities"04:45
sarnoldwtf that is :)04:45
diytto:|04:46
diyttookay, well this should hopefully solve my issues then lol04:46
TJ-sarnold: probably a pretty wrapper around generating the configuration files04:46
sarnoldTJ-: it also lookslike they've got an embedded polarssl of some sort. I like polarssl, but it seems odd to embed it..04:46
sarnoldand openssl too! neat. two ssl libraries for twice the fun.04:47
sarnoldI wonder h ow they squared the gpl2 vs openssl SLEay license.04:47
TJ-diytto: Looks like the company is trying to steer users to pay, they hide the open-source page of their site very well. I got to it via the Wikipedia article: https://openvpn.net/index.php/open-source.html04:48
diyttowow okay04:48
diyttothat's ridiculous04:48
sarnoldI really don't blame them for trying to figure out a way to make a living from it; but it feels like they would do themselves a service by better reporting what the licenses buy.04:48
TJ-diytto: but if you're using Ubuntu, always use the packages from the package manager using the command I showed you.04:49
diyttoyeah for sure04:49
TJ-sarnold: I agree entirely ... especially when they talk about a 2-client 'evaluation' version04:49
diyttookay, so i was using softether for vpn and it seemed like a good solution, except it didn't work well on my connection04:49
sarnoldTJ-: hehe yeah04:50
diyttohow can i remove it as a service04:50
diytto:p04:50
TJ-diytto: DIY :p04:50
sarnoldthey probably installed initscripts into /etc/init.d/ or /etc/init/04:50
TJ-diytto: It depends on how you installed it and what tools are provided to remove it04:51
diyttoyeah, but i assume i need to change the service so it doesn't start on boot?04:51
sarnoldif you're lucky they've got an uninstall somewhere :)04:51
diyttoi know where the script is etc04:51
sarnoldif you're not lucky you just get to rm -rf everything.04:51
diyttoi know the locations and where to delete, just not how to deactive the boot setting04:51
TJ-diytto: does it start using upstart or sysv-init ?04:52
diyttosomething with update-rc.d?04:52
TJ-diytto: Yes, for sysv-init04:52
diyttoyeah so that one :p04:52
TJ-diytto: for upstart, add a .override file with the "manual" option in it04:52
diyttoum04:53
diyttoi don't know what any of that means lol04:53
TJ-diytto: You don't need to if the service uses sysv-init04:54
diyttooh, gotcha04:54
diyttoalright, time to figure out how to configure openvpn :D04:59
TJ-diytto: some good help here: https://help.ubuntu.com/community/OpenVPN05:01
diyttoawesome05:01
TJ-diytto: first task is to generate your CA cert *but* I highly recommend doing that on a PC other than the server you're going to use it on05:03
diyttowhy is that05:03
TJ-diytto: I keep a separate secure VM image for doing that05:03
TJ-diytto: because if the server is compromised someone can steal the CA private key and then generate certificates using it05:04
diyttohmm that's a fair point05:05
=== neurotus is now known as Brahma
=== Brahma is now known as Krsna
=== frickler_ is now known as frickler
=== Lcawte|Away is now known as Lcawte
=== CiPi is now known as cip
linociscoanybody with small fonts on ubuntu server console CLI ?08:53
=== cip is now known as CiPi
=== Nigel_ is now known as G
lordievaderGood morning.10:00
wizzkiddI've noticed that services such as couchpotato and sickbeard etc do not use an apache web server, hence why we can clone from their git, setup the configuration, and execute the website.py with python, and then magically i'd have a website running locally on my custom port.  How can I create my own little website in a similar way so that i can share it on my git repo?12:38
Kartagishi13:11
Kartagissuppose I modified my zone, but didn't restart named. how long will it take to propagate (correct spelling?)? $TTL seconds?13:11
YamakasYwhich version will be the next lts ?13:39
geniiYamakasY: All even numbered releases ending in .0413:40
lordievaderYamakasY: I thought 16.04.13:40
geniiEvery two years in April13:41
YamakasYok13:41
YamakasYthanks guys13:41
YamakasYyes now I see indeed13:41
YamakasYmhh I need sssd v1.12.2+13:42
YamakasYwe need lts for servers, I don't run shortterms anymore13:44
YamakasY:S13:44
lordievaderYou could theoretically pull just that one package from a newer release (you might very well run into dependency problems though).13:46
YamakasYlordievader: yeah that is my issue, the package is in sid now13:46
friendlyguyhi there!13:56
friendlyguysome zfs users here? I've configure some smbshares through "sharesmb=on", which worked fine. but after a reboot they are "gone".13:58
friendlyguyzfs get sharesmb still reports its turned on but when i try to connect there is nothing shared13:59
friendlyguycan someone help me to get my ipmi interface working with ubuntu? -> i can follow the boot process via ipmi until i select ubuntu, after that the screen turns blank and i get "no signal" msg15:27
LeMikedamn this ssh installation. it want's me to mount a system partition that is already used by the system under /dev/mapper/system.... . how can I go on installing ubunut via SSH?17:31
lordievaderLeMike: What do you mean exactly? Something like a debootstrap install?17:42
pipitoneHi. I've got NFS clients with occasional failing mounts ("Operation not permitted" on ls). dmesg shows piles of "NFS: Server tigrsrv reports our clientid is in use" and "NFS: state manager: lease expired failed on NFSv4 server tigrsrv with error 1" messages. Restart the NFS server/portmap works. Ubuntu 14.04. Any ideas why?19:14
pipitoneAlso, remount without restarting the NFS server doesn't work ("operation not permitted"). If I wait long enough, the remounting on the client *eventually* is successful.19:16
cryptodan_laptoppipitone: you need to setup up persistence and also look here https://help.ubuntu.com/community/SettingUpNFSHowTo I have used that guide with no issues19:22
diyttodoes anyone here have experience with openvpn? I'm trying to figure out how to generate my client.ovpn files19:32
pipitonecryptodan_laptop: what do you mean by persistence in this case? I followed the very guide when I setup NFS. It's been running for a long while just fine. I'm starting to suspect recent updates, but not sure what these errors mean. Have you seen them before?19:40
cryptodan_laptopyes and usually means that IP addresses are changing and losing the connection states are the nfs servers on static?19:42
pipitonecryptodan_laptop: yup, server and clients are static.19:42
cryptodan_laptoppipitone: check the connection time outs and see if they are timing out19:43
cryptodan_laptopcan you show your exports config19:44
pipitonecryptodan_laptop: I don't see anything in the nfs server syslog/kern/dmesg to do with NFS or time outs19:48
pipitonecryptodan_laptop: exports here: http://pastebin.com/xSZcACp519:48
cryptodan_laptoppipitone: I would comment out line 12 and see if that changes things19:50
pipitonecryptodan_laptop: curious, how come? I thought NFS4 needed an fsid root?19:50
cryptodan_laptoppipitone: I dont have that and dont have timeouts or operation not permitted19:51
pipitonecryptodan_laptop: are your mounts nfsv3?19:51
cryptodan_laptopnfs419:51
pipitonecryptodan_laptop: weird. okay, worth a shot. Since the problem is intermittant, and I can't reproduce it, I'll have to report back later.19:52
pipitonecryptodan_laptop: thanks for your help. btw, can I see your exports?19:52
cryptodan_laptophere /home/cryptodan/public_html 192.168.1.0/24(rw,nohide,insecure,no_subtree_check,sync)19:53
pipitonek19:53
pipitonecryptodan_laptop: NFS is v. strange.19:54
pipitonecryptodan_laptop: can you should me what your fstab looks like? for your public_html mount?20:41
cryptodan_laptopim not on my desktop but let me generate it for my lap top20:42
pipitonecryptodan_laptop: the ubuntu NFS guide does still say to use fsid, but then I just came across this: http://serverfault.com/questions/389189/understanding-nfs4-linux-server  which suggests that fsid isn't necessary, as you say.20:42
pipitoneIt still doesn't explain why this behaviour just started up in the last week or so for us.20:42
cryptodan_laptopI just follow this nfs-server:/   /mnt   nfs    auto  0  020:43
pipitonecryptodan_laptop: so you don't use nfs4 explicitly... interesting20:44
pipitonecryptodan_laptop: and under /mnt/ do you get public_html? or /home/cryptodan/public_html?20:45
cryptodan_laptopI put /home/cryptodan/public_html20:47
cryptodan_laptoppipitone: here is my mount print out 192.168.1.8:/home/cryptodan/public_html on /home/cryptodan/public_html type nfs (rw,vers=4,addr=192.168.1.8,clientaddr=192.168.1.14)20:49
cryptodan_laptoppipitone: can you show me your fstab20:57
pipitonetigrsrv:/projects /projects  nfs4    rw,bg,hard,intr20:59
pipitoneso my mount output is: tigrsrv:/projects on /projects type nfs4 (rw,bg,hard,intr,addr=172.25.9.71,clientaddr=172.25.9.70)21:00
cryptodan_laptoptry just using the auto in fstab and see if you get the time outs21:05
cryptodan_laptopor not using a name but the IP address21:05
=== zz_DenBeiren is now known as DenBeiren
=== akaWolf1 is now known as akaWolf
=== IdleOne is now known as Guest60154

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!