/srv/irclogs.ubuntu.com/2015/08/13/#ubuntu-server.txt

=== markthomas|away is now known as markthomas
=== med_ is now known as Guest471
=== Lcawte|Away is now known as Lcawte
=== Lcawte is now known as Lcawte|Away
=== med_ is now known as Guest61394
lordievaderGood morning.07:29
=== ochoroch1 is now known as ochoroch
=== [1]badabum18 is now known as badabum18
jamespagezul, jdstrand: is it possible to put the libvirt templates generates for instances into complain mode? trying to generate some updates for using hugepage memory10:38
=== kickinz1 is now known as kickinz1|lunch
zuljamespage: yes but i forgot how12:20
=== kickinz1|lunch is now known as kickinz1
jdstrandjamespage: yes, modify /etc/apparmor.d/libvirt/TEMPLATE.qemu to have "profile LIBVIRT_TEMPLATE flags=(complain) {"13:12
jamespagejdstrand, awesome - thankyou13:12
jdstrandnp13:26
jamespagejdstrand, I've probably learn't and forgetten this already but is there a nice way to parse the complain entires into an profile update?13:37
jdstrandjamespage: there is a program called aa-logprof, yes, but it isn't smart enough to know to update the template and it may have trouble finding the vm profile in /etc/apparmor.d/libvirt13:51
jdstrandjamespage: if you were keen on doing that, you could try passing the '-d' directive to logprof, then do a diff between the template and the profile13:51
jdstrandbut, handcrafted in this case is probably faster13:52
jamespagejdstrand, ack13:52
jamespagejdstrand, and do we have a nice mechanism for providing local profile updates for the generated profiles?13:53
jamespageI was trying to figure it out but got stuck...13:53
jdstrandjamespage: if you want all VMs to pick up the change, you can modify /etc/apparmor.d/abstractions/libvirt-qemu. if you want only a single vm to have the change, you can modify /etc/apparmor.d/libvirt/libvirt-<domain uuid> (note, *not* the one with the .files extension)13:55
jamespagejdstrand, ok - ta13:55
jdstrandnp13:55
jdstrandjamespage: I think you're set now, but fyi, http://wiki.apparmor.net/index.php/Libvirt13:56
jdstrandI see it needs a couple updates13:56
* jdstrand does so13:57
jamespagejdstrand, how does that look - http://paste.ubuntu.com/12071349/ ?14:20
jamespageI suspect the top two rules are generically applicable - the third is dependency on where hugepages gets mounted14:20
jdstrandthe rules are written well for the denials. however, I think they are too lenient14:22
jdstrandso, qemu only complained about the dir for cpu, so this might be better:14:23
jdstrand/sys/devices/system/cpu/ r,14:24
jdstrandI think this would be better for node:14:24
jdstrand/sys/devices/system/node/ r,14:24
jdstrand/sys/devices/system/node/node[0-9]*/** r,14:25
jdstrandactually, even better14:25
jdstrand/sys/devices/system/node/node[0-9]*/meminfo r,14:25
jdstrandas for the hugepages mount point,  there is already this rule in libvirt-qemu:14:26
jdstrandowner "/run/hugepages/kvm/libvirt/qemu/**" rw,14:26
jdstrandit that not enough? (I feel there was a bug on this)14:26
jdstrandhttps://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/100158414:27
ubottuLaunchpad bug 1001584 in libvirt (Ubuntu) "libvirt-bin support for hugepages: apparmor needs a rule for hugetlbfs" [Medium,Expired]14:27
jdstrandhttps://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/125021614:28
ubottuLaunchpad bug 1250216 in libvirt (Ubuntu Saucy) "apparmor policy prevents using hugepages" [High,Fix released]14:28
jdstrandthat last bug suggests that virt-aa-helper should be updated to generate the paths. is the mountpoint expressed in the domain xml?14:29
jdstrandjamespage: ^^14:29
jamespagejdstrand, reading14:29
jdstrandjamespage: here is a cleaned up summary of the above: http://paste.ubuntu.com/12071434/14:32
jamespagejdstrand, thanks14:35
jamespagejdstrand, so for the owner "/run/hugepages/kvm/libvirt/qemu/**" rw, bit, I just need to make sure that hugepages is being mounted in the correct location I think14:36
jdstrandright, that is what I was thinking14:36
jamespage# /run/hugepages/kvm/14:36
jdstrandI don't know what the domain xml looks liek for hugepages, but if it says where they are mounted, then virt-aa-helper (the thing that stitches together the template, the uuid and uuid.files files) can be made to add the paths to the .files file automatically14:38
jdstrandif it isn't in the domain xml, it would require a bit more work I think14:38
Kgirthoferso someh ow I created a file called \18:00
Kgirthoferhow do I delete it18:00
Kgirthoferwhen I put it in rm it just says missing operand18:00
Kgirthofern.m18:01
Kgirthoferrm \\18:01
Kgirthofer:)18:01
fellayaboywhats the new package for dhcp server...i tried sudo apt-get install isc-dhcp-server on ubuntu server 15.04 but says cant find package..also tried sudo apt-cache search dhcp didnt find anything about server18:35
qman__fellayaboy: http://packages.ubuntu.com/vivid/isc-dhcp-server18:41
qman__your sources must not be correct18:41
fellayaboythink i need to do apt-get update18:41
fellayaboylet me also check apt/sources.list18:42
fellayaboythanks qman that solved it18:45
DanskmandHowdy :-) - I want to install syslog-ng on my servers using puppet....Now I see that syslog-ng has a open bug with this since ano 2006 - cannot install syslog-ng because it has unmet dependencies ( syslog-ng : Depends: syslog-ng-core (>= 3.5.3), ....)19:10
Danskmand I can install syslog-ng by first installing syslog-ng-core and then install syslog-ng. But thats not easy in puppet....19:10
sarnoldDanskmand: how are you trying to install it? apt-get install <foo> ought to handle all the deps for you without trouble.19:12
Danskmandsarnold: Yeah, I know - but running "apt-get install syslog-ng" results in "The following packages have unmet dependencies:"19:14
Danskmand"19:14
Danskmand "syslog-ng : Depends: syslog-ng-core (>= 3.5.3)"19:16
Danskmand(3 more depends, 5 recommends)19:16
Danskmande: Unable to correct problems, you have held broken packages19:16
sarnoldthat's interesting, never seen that before19:17
sarnoldtry this: dpkg --get-selections | grep -v install19:17
DanskmandWhen I then do a "apt-get install syslog-ng-core" it installs that and when I then repeat the "apt-get install syslog-ng" it installs without a problem !19:19
DanskmandSo it is really that syslog-ng-core ,,,,19:19
DanskmandThe .v results into - nothing -19:20
sarnoldhmm. I don't have any held packages on my systems, I assumed the 'install' would go away if it were held.. maybe try dpkg --get-selections | grep held   or | grep hold  ?19:22
DanskmandYeah, - nothing -19:23
DanskmandOKay....have installed a new ubuntu-Server as a vm @ home and run "apt-get install syslog-ng" - there it will install is without any problems ! - the new system is on 15.04 - the problem-server is on 14.04 LTS....19:30
sarnoldI suspect a brand-new 14.04 would also work fine, there's something strange on your existing system..19:30
DanskmandI see theres a 14.04.3 release - how can I find out the release I am running down to the "3"-number ?19:36
DanskmandForget it - I overread it - I have a 14.04.1 release running...19:37
DanskmandHow do I upgrade to 14.04.3 release ?19:38
OerHekssudo apt update && sudo apt full-upgrade19:39
sarnoldDanskmand: full details here https://wiki.ubuntu.com/Kernel/LTSEnablementStack19:39
DanskmandI just dont wann upgrade away from the LTS-release...19:40
sarnoldthe 14.04.1 kernel will be supported for the full five years; if you upgrade to 14.04.3 you'll need to upgrade to the 14.04.5 kernel in august 2016.19:41
DanskmandHmm....okay, so upgrading is not the solution if I dont wanna loose the LTS and wanna solve my problem....19:44
sarnoldjust keep running apt-get update && apt-get -u dist-upgrade on a regular basis19:45
=== zerick_ is now known as zerick
DanskmandRunning the apt-get dist-upgrade looks to me like I will leave the LTS-path....20:03
DanskmandWhich I cannot...20:03
sarnoldthe usual 'upgrade' command refuses to install new packages, which means e.g. kernel updates never happen. dist-upgrade can install new packages, so you'll get new kernel packages. it only changes the actual distribution if you modify the 'trusty' to 'vivid' or 'wily' in your /etc/apt/sources* files20:06
=== markthomas is now known as markthomas|away
DanskmandOkay...running dist-upgrade right now....20:12
DanskmandLets hope we have a server afterwards....20:12
DanskmandWe have a problem with our servers hdd-controller of some kind...20:13
sarnoldyou should, i've run apt-get dist-upgrade a few thousand times in 15 years and only had two or three problems, back in the days when I ran debian unstable, and that kind of thing was expected. :)20:13
DanskmandYeah, and I can still choose the old kernel at boot...20:14
DanskmandIts a known problewm with the hp....380 Servers...20:16
DanskmandOoops ! - No more system I think !20:26
Danskmand"Gave up waiting for root device. common problems: .........20:28
=== medz is now known as samsn
DanskmandALERT! /dev/disk/by-uuid/add.........many numbers does not exist. Dropping to a shell!20:29
Danskmandsamold:20:29
sarnoldDanskmand: did you need to build an out-of-tree kernel module to mount your storage array?20:30
DanskmandNOw my prompt is "initramfs".....20:30
DanskmandHmmm...dont know - wasnt there when it was built.....20:30
sarnoldDanskmand: maybe you need to rebuild your initramfs with a specific kernel module to allow mounting the array?20:31
DanskmandI am running on a Busybox right now...20:31
DanskmandDoing a reset right now....20:32
DanskmandHP proliant...20:33
DanskmandSmart array b320 i controller...20:35
Danskmandata6: ATA4: Sata link down (SStatus 0 SControl 300)20:37
DanskmandGave up waiting for root device.20:38
DanskmandSo now I think I know what I should not have done to that server !!!!!!20:38
DanskmandSh**.....Can you help me on this ?20:39
DanskmandPlease ?20:39
sarnoldyou need to install kernel updates; there's just no way around that. You've got to figure out how to make that system reliable enough to reboot whenever you need with a new kernel.20:39
DanskmandSo in other words, the system is wrecked now - I need to reinstall ....20:41
DanskmandNo way back, right ?20:41
sarnoldi'm sure there's a way forward20:41
sarnoldi've just never had one of those machines20:41
sarnoldthere's a note that the dynamic smart array needs to be disabled on one specfic generation, but I don't know if that's something that would affect you or not http://www.ubuntu.com/certification/hardware/201401-14512/20:42
=== Guest61394 is now known as med_
DanskmandSo....Now I booted from the old kernel....and it works....21:04
=== markthomas|away is now known as markthomas
tobyjhaving trouble with networking in an ubuntu server vm. I just added a new eth adapter, the system is detecting it but I can't bring it up21:45
tobyjhttp://puu.sh/jAxgQ/619c45f8e6.png this is some of the output from lshw -C network21:45
tobyj...problem solved21:56
DanskmandSamold:  You still here ?22:14
DanskmandOf course - I have just that one server that has this problem with the smart-array controller ....22:16
DanskmandA HP proliant DL360e gen8....22:17

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!