=== IdleOne is now known as Guest26469 === IdleOne is now known as Guest41897 === IdleOne is now known as Guest61528 [04:01] is there a way to logrotate v-hosted apache log files by making a cnf directory so I don't have to edit /etc/logrotate.d/apache every time? === IdleOne is now known as Guest55878 === markthomas|away is now known as markthomas === markthomas is now known as markthomas|away [07:49] Good morning. [07:58] hey guys where do i find security update settings ? [07:58] cli === mrmist is now known as mist [08:54] arcsky: what security update [09:38] RoyK: lets say Ubuntu release a security update and i want to know how i can automatic install it [09:38] Do you mean the security repos? [09:39] lets say openssl got a zeroday vulnerability i want it to be installed so fast ubuntu release it [09:41] arcsky: So some kind of auto update script? [09:41] Write that and throw it in cron?" [09:41] I'd just subscribe to the security mailing list [09:41] and intervene when required [09:43] ok [09:43] http://www.howtogeek.com/204796/how-to-enable-automatic-security-updates-on-ubuntu-server/ === Lcawte is now known as Lcawte|Away === Lcawte|Away is now known as Lcawte [09:56] arcsky: I usually enable that during install === Lcawte is now known as Lcawte|Away === Lcawte|Away is now known as Lcawte [11:31] Anyone have configured openSSH to authenticate to a Windows 2008 NPS? [12:39] Hello. Not sure if this makes sense but I want to trace the order in which programs interact with an HTTP request, for example is IPTables the first point of contact with any network packet? [12:52] no [12:52] iptables never touches packets ever [12:52] purefan: iptables is kernelspace (and is actually netfilter?). If you're going that low, you should probably mention the ethernet driver first? [12:53] and the whole kernel packet interface, and other things that modify them, like ipsec, bonding, teaming, vlans, ... [12:53] someone actually uses teaming? [12:54] jelly: yes, Netfilter, Im just used to calling it IPTables because of the command. As for the driver I dont know how to easily work with that, I imagine it would require recompiling [12:54] patdk-wk: but iptbables/netfiler can reject packets [12:54] netfilter can, iptables can't [12:55] iptables is just a userland interface to load rules into netfilter [12:55] patdk-wk: ok agreed, but I think you understood what I meant [12:55] not sure if or distinguishing from ye olde 2.4 days [12:56] it's changed again in 3.x too :) [12:56] iptables is only kept for compatability [12:56] twice, I think [12:57] ya, I follow his blog, interesting stuff, except he is on a bitcoin kick now [13:04] can I have a cronjob run at 00 or does it start at 01 [13:06] I think it's 0-59 [13:11] Kgirthofer: yes you can [13:12] cool thanks [13:32] :(){ :|:& };: # as smilies come [13:33] you and your fork bomb can take a seat over there [13:34] tieinv: hehe [13:34] mybalzitch: that was for you, sorry [13:34] :D [13:46] RoyK: that gets you instabanned in some of my channels :-) [13:47] ohno, it's the monkeyface-with-musical-notation forkbomb, kill it with fire === markthomas|away is now known as markthomas [15:59] jamespage: FYI, I just invalidated bug 1438757 since I'm not aware of any plans to backport IPv6 support in keepalived to Trusty. Just thought I'd mention it in case you know any different. [15:59] bug 1438757 in keepalived (Ubuntu) "Please update Keepalived version on Ubuntu 14.04 to 1.2.10 (or above)" [Undecided,Invalid] https://launchpad.net/bugs/1438757 [16:00] rbasak, I'm happy to add that as a backport for the UCA [16:00] rbasak, but fine with rejecting it for 14.04 vanilla [16:01] jamespage: OK. Shall I add a task for cloud-archive? [16:02] rbasak, nah [16:02] its baking now [16:02] it will be for liberty only [16:02] onwards rather [16:02] jamespage: ah, so you're doing it already? [16:02] rbasak, yes - its a point and click process [16:02] OK. Thanks! [16:02] I'll update the bug. [16:03] rbasak, thanks for the headsup [16:04] np! === matsubara_ is now known as matsubara [17:13] WARNING: do not run: kill -sSIGTERM 1 [17:13] According to man it should shutdown [17:14] In my case it just reloads === matsubara__ is now known as matsubara [17:21] Why would you want to kill init? [17:21] hi there, my web server seems to have been exploited and my IP is being blocked for performing brute force login attacks... How can I fix this and remove any script that is causing this to happen? [17:21] my isp received an email from blocklist.de [17:22] RoosterJuice, reinstall [17:22] maybe even throw the hardware in the trash and replace it also [17:22] with the new smm cpu hack [17:22] anyone with a real answer? [17:22] that is a real answer [17:23] how else will you guarrentee NOTHING exists from them? [17:23] and that it is secure from them doing it again? [17:23] it's a VPS [17:23] It depends on the type of exploit, if the uefi firmware is exploited a reinstall won't help. [17:23] well, throw that vps away, and build up a new one [17:24] /w 25 [17:40] lordievader: not kill init, request a shutdown [17:41] Sounds like a bad idea, nonetheless. [17:42] lordievader: well it's how lxc requests a shutdown to quest when the os has no /dev/initctl [17:42] lordievader: and the manual of init (of upstart) specifies SIGTERM == request shutdown [17:43] I see, that is why it is strange to me ;) [17:45] lordievader: maybe i should install a full VM to test sigtem [17:45] but it feels like overkill, installing a full ubunut to test 1 thing :p [17:48] Don't suppose anyone has a ubuntu running they want to shutdown right now ? :D [18:01] Qantourisc: get serious [18:16] I have a 13.10 server that I'm trying to do-release-upgrade on. do-release upgrade ran and exited prompting me to reboot, so I did that. After the reboot, I was still at 13.10 on my splash screen. So I tried again, and still got the same thing. lsb_release -rc returns 13.10/saucy as well. I tried doing apt-get dist-upgrade and it shows a huge list of packages to be upgraded, and goes through extracting templates from packages then preconfiguring [18:16] Anyone know how I can get my release upgrading? [18:19] I tried to remove all packages in /var/cache/apt/archives/ [18:20] sounds very odd [18:20] it shouldn't work at all [18:21] Saucy packages should now be in old-releases.ubuntu.com, might want to put that in your sources.list instead of the old default ones. Then dist-upgrade and then do-release-upgrade [18:33] swapped out archive.us.ubuntu.com to old-releases.ubuntu.com and put saucy back in place of trusty. did an apt-get update/apt-get dist-upgrade. Said 0 packages needed to be upgraded. So I did a do-release upgrade, I'm getting all kinds of 404 errors trying to pull repos and even a hash sum mistmatch. :( [18:43] Can't seem to figure a way out of this morass. [18:45] blizzow: do you have any apt-cacher-ng configured? I wasted a few hours chasing hash sum mismatches with it before finding out that uit was buggy in some releases .. or entirely buggy .. [18:47] no apt-cache stuff enabled on this machine. [18:52] yikes, now when running dpkg --reconfigure -a I get "cannot execute binary file" [18:54] blizzow: check dmesg? [18:54] blizzow: I think that error message happens mostly when there are architecture mis-matches, e.g. trying to run an x86 compiled binary on armhf, for example, but maybe you've got a dying drive or something simlar [18:55] nothing in dmesg output that would indicate running wrong arch or filesystem issues. [18:58] Deleting the contents of /var/cache/apt/archives/ and re-attempting shows all downloaded packages are amd64 arch as well. [19:19] okay, I think I'm making some progress. I copied the latest dpkg from /var/cache/apt/archives/ and did an ar -vx dpkg_1.17.5ubuntu5.4_amd64.deb. I then copied the the extracted files into the same locations in / . dpkg-reconfigure -a "fixed" some packages. Now running a dist-upgrade is upgrading and reconfiguring all kinds of stuff across the board.Are there other steps do-release-upgrade does that changing sources.list and running apt-get dist-up [19:21] yes, a lot ... [19:21] (you got to check the source for details though, but it also helps handling transitions etc) [19:24] assuming all the packages successfully get dist-upgraded to trusty. is do-release-upgrade smart enough to do the rest of the transition steps after the fact? [19:24] never mind, I guess, I'm forced to figure this out for myself in a minute ;) [19:38] zul: smb: neither of you planning a wily libvirt update? [19:39] hallyn: nope focus is else where [19:58] eeeeeexcelent [20:07] zul: smb: going to test a bit more, but then probably push libvirt-stop-guests [20:08] (minus some tab/space cleanup) === markthomas is now known as markthomas|away [20:26] zul: someone on twitter is asking, what was our first ubuntu that did maas/juju for openstack? [20:26] zul: page is asleep probably so I'm deferring to you. :) [20:28] I wanna say 12.04? [21:02] 10.04 was still euca wasn't it? [21:04] jcastro: http://www.zdnet.com/article/canonical-switches-to-openstack-for-ubuntu-linux-cloud/ [21:04] 11.10 [21:05] we didn't maas back then did we? [21:05] man, it's all like a blur === markthomas|away is now known as markthomas [21:26] Anyone have configured openSSH to authenticate to a Windows 2008 NPS? [21:29] what is an nps? [21:29] never heard of this thing before [21:30] oh, it's the replacement for the old radius server [21:30] openssh can't auth against that, won't work === CiPi is now known as cipi [21:40] patdk-lap: why not? libpam-radius-auth exists [21:41] ya, pam would support it [21:41] but openssh doesn't [21:41] openssh -> pam -> radius -> windows nps [21:42] but one cannot configure openssh to auth against nps as he asked though :) [21:42] * tarpman waves hands vaguely [21:43] windows, could you just auth with AD (kerberos) instead? :P [21:43] yes [21:43] that is what I do [21:44] and you have several ways you could do that === g4mby is now known as PaulW2U === esde is now known as Guest44432 === esde_ is now known as esde [23:04] Could anyone up on latest Debain latest kernel pls check their value for `grep -i 6RD /boot/config-$(uname -r) && uname -r` (or the equivalent location ...) ? Looking for distro support for 6RD ... [23:05] Oops, ubu-svr [23:06] PGNd: In here, you will find users with the latest Ubuntu kernel ;) [23:06] bekks: right, hence the "Ooops" ... [23:09] PGNd: CONFIG_IPV6_SIT_6RD=y 3.13.0-57-generic [23:11] PGNd: this is missing vivid and wily for some reason, but might be useful http://kernel.ubuntu.com/~kernel-ppa/configs/ [23:11] sarnold: Thx. That's 'latest' kernel version @ ubuntu-server? [23:11] Ah, thx [23:11] apw: http://kernel.ubuntu.com/~kernel-ppa/configs/ is missing vivid and wily [23:12] PGNd: well, "latest" is slightly difficult to specify -- I haven't rebooted in a while, this laptop is on 14.04 rather than 15.04, but and 14.04 has multiple supported kernel series on it anyway... [23:12] "but and". wow. [23:14] sarnold: heh. typing & grammare are the 1st to go ... the link's good enuf. thx. [23:14] PGNd: hehe :) === Lcawte is now known as Lcawte|Away