/srv/irclogs.ubuntu.com/2015/08/18/#ubuntu-server.txt

=== markthomas is now known as markthomas|away
neonixcoderIs ubuntu server upgrade from 10.04 to 12.04 require reboot with out conformation?01:46
patdk-lapheh?01:48
patdk-lapyou need to reboot, yes01:48
patdk-lapit will confirm if you want to now, or later01:48
patdk-lapbut things won't be very stable, if you wait01:48
neonixcoderpatdk-lap: That is fine.. but middle of some package installation it will reboot with out asking a single question..01:49
neonixcoderthat is the issue01:49
patdk-lapthen you have issues01:49
patdk-lapthat doesn't happen01:49
patdk-lapunless your server has other problems01:49
patdk-lapOOM, panic, ...01:49
neonixcoderI tried numerous times 99% it will fail to upgrade..01:49
patdk-lapI have done hundreds of upgrades, on all my servers, never had that happen01:50
patdk-lapwhat does the logs, screen, ... show?01:50
neonixcoderpatdk-lap: It dont show anything reason why it is rebooting..01:50
neonixcoderThe logs in /var/log/dist-upgrade shows what package it is installing at the time of reboot01:51
neonixcoderBit strange..01:51
neonixcoderon the same disk I tried to install fresh 10.04 and then upgraded which gave me 100% success result.01:52
neonixcoderbut already existing OS I am unable to upgrade :(01:52
neonixcoderany suggestions?01:52
neonixcoderwith fresh install, I can upgrade but with already existing one I can not upgrade..01:54
neonixcoderI am not sure how to check and where to check which is causing this issue?01:54
khaldrogoxI am seeing "Outage in X days" In cannonical's Openstack "Monitor your region" area, its counting down 2-3 days per each day.02:06
khaldrogoxI was under the impression that 10 node license is free02:06
khaldrogoxis that not the case?02:06
sarnoldneonixcoder: does it matter which debconf front end you're using?02:07
patdk-lapyou can use frontends?02:16
sarnoldpatdk-lap: dunno, depends on the method used, I didn't see that, so I just asked blindly :)03:03
neonixcodersarnold: I tried your suggestion but did not work.03:26
neonixcodersarnold: I hear from my manager there is a watchdog script running in crontab which is doing this restart, I am going to check that cronjob and see if the upgrade went fine or not..03:26
sarnoldneonixcoder: ha! that'd definitely do it :)03:29
MrButhI am trying to get lines from the apache access.log, but apache moves the file and creates a new one every now and then. So is there some sort of unique identifier that a file will have so I can check if the access.log is a new file?03:36
sarnoldMrButh: the combination of device id and inode number is unique; check the output of stat access.log03:38
sarnoldMrButh: granted, if you delete a file immediately before making a new file, you might get the old file's inode number back again03:38
sarnoldMrButh: but most programs will try to prevent that03:39
neonixcodersarnold: I am really puzzled as I manually removed watchdog script but it could have already loaded in to memory which is doing this.. So planing to disable it and remove it from cron file. Let me see04:12
MrBuththanks sarnold04:13
sarnoldMrButh: hmm, I should have added that if you're just doing shell scripting things, tail -F might be easier than trying to roll your own solution04:21
sarnoldneonixcoder: any luck? :)04:21
neonixcoderNot yet.. middle of it.. As of now all good04:21
=== klaas_ is now known as klaas
SuperLagCanonical Landscape seems $$$$$$$$$.06:33
SuperLagif you guys have multiple Ubuntu machines to admin, and keep up to date... how do you do it efficiently?06:33
lordievaderGood morning.07:19
sysrexgood morning07:34
lordievadero/07:34
halvorsHi! I have some problems reading PHP5 session files created på Apache and mod_php5 with php runned from the CLI.07:38
halvorsThe php.ini file for mod_php5 and the cli have exactly the same session path set.07:38
halvorsCould it be that apparmor is preventing the php cli to access those files?07:39
lordievaderDo the logs say that?07:39
Hans67521hi07:41
lordievadero/07:41
halvorslordievader: The php logs says that it doesn't have permission.07:41
lordievaderSo its a rights issue?07:42
halvorslordievader: Haven't gotten to do mor debugging than that yet, but in theory it is fully legit to read apache2 mod_php sessions from cli?07:42
Hans67521i'm trying to downgrade openjdk-7-jdk from u79-2.5.6-0ubuntu0.12.04.1 to u79-2.5.5-0ubuntu0.12.04.107:42
Hans67521but it looks like u79-2.5.5-0ubuntu0.12.04.1 is no longer available...07:43
lordievaderhalvors: No idea, don't do much with php here ;)07:43
=== Lcawte|Away is now known as Lcawte
=== Lcawte is now known as Lcawte|Away
=== shadeslayer_ is now known as shadeslayer
skyliteIf I have 2 TB free space in a Volume Group, can I remove an hdd (1TB) from that group with vgreduce without data loss?13:20
lordievaderDepends, do all your lv's fit on 1 disk?13:32
zetherooI am having difficulty adding Ubuntu to a Windows domain. According to the docs (https://help.ubuntu.com/lts/serverguide/samba-ad-integration.html) the first step is to "join an AD domain" using "Likewise-open", but it seems PBIS is now the thing to use. I have installed and ran PBIS but it will not connect to the domain.13:32
lordievaderskylite: Probably you can btw, but first move everything off that disk.13:33
skylitelordievader yes and the hdd I want to remove from the vg has  Allocated PE          013:33
skylitedoes this mean its not used?13:33
lordievaderskylite: Correct. Try to remove it first in test mode, might show possible problems.13:34
RoyKskylite: yes, you can. pvmove13:34
skylitelordievader thx13:35
skyliteRoyK isnt it vgreduce?13:35
lordievaderIn this case yes, usually there is data on the disk ;)13:35
skylitelordievader I see ok just checking13:36
skylitedont want to ruin everything here:D13:36
skylitebut the -t is great13:37
lordievaderskylite: I know, I usually run "dangerous" stuff with -t and -v first to see what it would do.13:45
skylitelordievader yea its great Idea13:45
skylitelordievader could I use this pvmove with a disk thats already in use? (if it has enough free space of course)13:47
lordievaderskylite: What do you mean exactly?13:47
skylitelordievader well I have 2x 2TB hdd's in one VG both has 500Gb used for example13:48
skylitecould I move everything from one hdd to the other and pull out the empty hdd from the vg13:49
skyliteso I have 1 HDD left in the vg with 1TB used space13:50
lordievaderYes. LVM is dynamic. As long as there is storage space to move things to it can be done live.13:50
skylitethats cool13:50
lordievaderI recently moved my root fs from my hdd to the ssd while it was running.13:50
skylitenice13:51
skyliteso you experienced the speed up in one app while the other was still on the hdd? :)13:52
lordievaderNo. That is not how pvmove works.13:54
lordievaderhttp://serverfault.com/questions/93218/linux-how-does-the-command-pvmove-work13:54
skyliteah I see13:57
skylitenot THAT live13:58
skylitebut still awesome13:58
lordievaderThere is no downtime? So live ;)13:58
rbasakfrediz: around? I'm looking at the kimchi ITP now.14:04
fredizrbasak: Hi Robie, I'm in a meeting right now, I'll ping you when I'm done, ok ?14:05
rbasakfrediz: no problem!14:05
tewardrbasak: mind if i pick your brain?14:08
tewardfor an opinion at least14:08
rbasakteward: sure14:09
tewardrbasak: so, this isn't new: https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/119407414:10
ubottuLaunchpad bug 1194074 in nginx (Ubuntu) "Default index.html blindly overwritten" [Medium,Triaged]14:10
tewardrbasak: and there's already postinst controls to not overwrite14:10
tewardif only things were in /var/www/html/...14:10
tewardmy thought is to have an Ubuntu-only delta (Debian won't, I've tried arguing it) that makes the default conf look there14:11
tewardthat fixes the 'default overwritten' problem14:11
tewardbut i want a second opinion before i make that delta14:11
tewardi need to tweak the postinst, a little, but it'd 'work'14:12
teward(it takes a page from Apache)14:12
teward(or rather, the general approach)14:12
tewardrbasak: thoughts on that?14:15
rbasakteward: I'm not sure I understand exactly what you're proposing. Is there a description somewhere?14:15
tewardrbasak: the only thing i'm proposing is making a change in the default site config - i.e. apply what was done here: http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/wily/nginx/wily/view/head:/debian/conf/sites-available/default#L36   to older versions in the repositories14:17
tewardrbasak: currently in older versions, it looks like /usr/share/nginx/html/... is the current docroot, and things get overwritten there, hence bug 119407414:17
ubottubug 1194074 in nginx (Ubuntu) "Default index.html blindly overwritten" [Medium,Triaged] https://launchpad.net/bugs/119407414:17
tewardin later variants, logic exists that 'copies' the default index.html to /var/www/html/index.nginx-debian.html14:18
tewardwhich protects against index.html overwriting14:18
tewardI'd like to take that logic and apply it to the older pakages, such as trusty, etc.14:19
tewardand apply the default configuration docroot from Wily to the older nginx packages.14:20
tewardwhich makes the default document root a place where it won't be overwriting14:20
teward(the problem of that bug exists solely because users are using the 'default' location and that older 'default' location isn't 'protected' from the index.html overwrites because of the pakage manager)14:20
tewardthe big issue is that we can't prevent the overwriting in /usr/share/nginx/html/ without substantial scripting of the installation script to check... or we hange the default docroot14:21
tewardthe alternative is E:NoSolution14:21
tewardrbasak: perhaps i should bring it up at the server team meeting next week, but it's a catch-22 situation14:23
rbasakteward: looks like there's more that has been changed than I've been aware of (in a good way) but that means I'm going to need to spend some time looking at the packaging again before I can answer you, sorry.14:24
rbasakI'm a bit tied up right now :-/14:24
teward'tis fine14:24
tewardrbasak: i'm fine leaving it as is, but people keep complaining to me about it :/14:25
mdeslaurrbasak: FYI, for memcached, (bug 1462747), the only delta that is remaining is the ubuntu version string14:36
ubottubug 1462747 in memcached (Ubuntu) "Please merge with latest upstream from Debian" [Wishlist,Triaged] https://launchpad.net/bugs/146274714:36
mdeslaurrbasak: since nobody has stepped up to merge this, and the delta is a PITA with autotools, I am going to drop it14:36
mdeslaurrbasak: unless you find someone to take care of it14:36
fredizrbasak: ping14:43
rbasakfrediz: hi!14:43
frediz:)14:43
rbasakfrediz: first, sorry for the very long delay. I've been swamped and this has only just made it to the top of my todo.14:44
rbasakfrediz: so I want to try and get it resolved asap so I don't need to get back to it.14:44
fredizrbasak: I guessed so and didn't want to spam you14:44
rbasakfrediz: it's helpful that you're online, hopefully we can get it done now?14:44
fredizrbasak: if possible :)14:44
fredizrbasak: what would you need14:44
rbasakfrediz: I barely even remember the last review, so I'm looking at this "from scratch". It looks good quality on first look at least - thank you.14:45
rbasakfrediz: only one blocker so far, the other things are minor issues that I can point out but shouldn't block an upload14:45
fredizrbasak: let me know14:45
rbasakfrediz: please tell me if I've already discussed these things with you and came to some kind of conclusion - I'm worried I've forgotten!14:45
fredizrbasak: well, I've forgotten a bit, but the last point I tried to improve base on your last recommendation14:46
rbasakfrediz: we can't symlink from /etc to /usr/share/doc - for various technical reasons but it also turns out to violate Debian policy https://www.debian.org/doc/debian-policy/ch-docs.html#s12.3 "Packages must not require the existence of any files in /usr/share/doc/ in order to function"14:46
rbasakfrediz: I think we can just additionally install the file to /etc directly, so we get normal conffile handling.14:46
fredizrbasak: oh14:47
fredizrbasak: Ok, I'll change that14:47
rbasakfrediz: nothing else I've found so far is an issue for upload, though I haven't finished yet.14:47
rbasakfrediz: would you like me to relay my notes so far here on IRC? If you're interested. Or I can just email them later.14:48
fredizrbasak: an email is ok. I'll look at it tomorrow morning and will act based on that and keep you updated14:48
rbasakfrediz: OK, thanks!14:49
fredizrbasak: thanks a lot, that's nice. Are you at Debconf btw ?14:49
hR13Hi all, I have some problems with samba after I accidentaly upgrade  my zentyal install from 3.4 to 3.5. the webserver and samba dont seemes to start, I have added the bug #1090 patch. any help will be much appreciated14:49
ubottubug 1090 in mplayer (Ubuntu) "mplayer depends on xmms" [Medium,Invalid] https://launchpad.net/bugs/109014:49
rbasakfrediz: unfortunately not, sorry.14:49
rbasakfrediz: note that symlinking /etc/... to /usr/share/kimchi wouldn't violate policy but I'm still not keen on it since users normally expect to be able to edit files in /etc with no further effort, and conffile handling is a known thing. So I'd prefer to see it done that way - just by dh_install .install file to /etc for example. Then I know that all the standard expected stuff will work.14:51
fredizrbasak: No problem :)14:52
=== markthomz is now known as markthomas
=== ogra_` is now known as ogra_
rbasakfrediz: do you know why the binary is arch-specific? ISTR something about not being able to depend on arch-specific binaries in an arch: all package, but there don't seem to be any of those now.15:03
rbasakI think we have talked about this before but could it be that the original reason no longer applies now?15:04
fredizrbasak: I think that was because someone in the ITP didn't want to drag all the qemu packages for every arch15:09
fredizrbasak: that's it : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772823#3215:11
ubottuDebian bug 772823 in wnpp "ITP: kimchi -- HTML5 based management tool for KVM." [Wishlist,Open]15:11
rbasakfrediz: oh, my mistake, sorry. I was looking at the amd64 binary deb only. The binary depends in source control file is still arch-specific which is why the the binary itself has to be, and that's exactly how I remember it. Sorry for the noise.15:14
rbasak(and I think we decided it wasn't worth splitting out an all package with the common bits at this stage)15:14
zetherooI successfully got Ubuntu to join the AD domain with PBIS - the solution was to remove avahi-daemon15:21
zetheroobut now I am trying to get to the domain shares ... I guess it's using Samba ...15:21
rbasakfrediz: ping again. Sorry, I want to resolve anything quickly that I think may be blocking. Not sure whether this is an issue or not. src/Makefile.am generates dhparams.pem with a comment "Generate unique Diffie-Hellman group with 2048-bit". Except it won't be unique as it is done once at build time, not for each user (eg. if they were consuming from upstream). Is this a problem?15:34
rbasakWhichever way it should go away as Debian has the reproducible build proposal, and this would break that. Either it should be fixed and committed upstream, or it should be done at install time, right?15:35
rbasakI don't know how important this is right now though. Do you have any thoughts?15:35
arosalesany volunteers to chair th upcoming Ubuntu server meeting15:38
rbasakhttp://security.stackexchange.com/questions/70831/does-dh-parameter-file-need-to-be-unique-per-private-key suggests this shouldn't be a problem to me.15:39
rbasakThough now I understand why we might want to generate them at build time - then upstreams wouldn't be able to influence parameter choice, which makes the result auditable.15:40
rbasakI wonder how that will fit with reproducible builds though.15:40
rbasakmdeslaur: would you mind checking my logic above? I just want to make sure I'm not uploading something accidentally vulnerable.15:40
mdeslaurrbasak: yeah, it would be better to generate it at install time15:42
mdeslauralthough at install time you then may hit an entropy issue15:42
mdeslaurso perhaps shipping one of the well-known ones is better, and paranoid users can regenerate if they want15:42
rbasakmdeslaur: OK, thanks. Is it acceptable to generate at build time for now, as that's what upstream do currently?15:42
rbasakmdeslaur: or should this be a blocking issue to fix before upload?15:43
rbasak(it's a new package)15:43
mdeslaurrbasak: build time is ok for now, until someone fixes it for reproduceable builds15:43
rbasakOK, thanks.15:43
mdeslauralthough15:43
mdeslaurrbasak: is build-time what upstream does?15:44
mdeslaurah ok, that's what you said15:44
mdeslaurso yeah, that's ok15:44
rbasakOK. Thanks!15:44
=== matsubara__ is now known as matsubara
=== alai is now known as alai-brb
=== alai-brb is now known as alai
ejathi .. anyone can help me with this error : http://paste.ubuntu.com/12119236/16:49
andolejat: "No such file or directory - bad template: ubuntu-cloud" appear to be the problem.16:58
andolAside from that, I have no idea what you have or haven't done.16:59
ejatandol : thanks17:15
=== klaas_ is now known as klaas
SuperLagCanonical Landscape seems $$$$$$$$$.17:42
SuperLagif you guys have multiple Ubuntu machines to admin, and keep up to date... how do you do it efficiently?17:42
quanticSuperLag: I'd love an answer to that myself.17:45
=== matsubara__ is now known as matsubara
qman__unattended-upgrades17:49
qman__I also use salt stack to some effect17:49
qman__for example, you could create a salt state to install and configure unattended-upgrades on all ubuntu systems17:52
jpdsSuperLag: Well, those free updates don't come cheap to them17:53
jpdsSuperLag: Maybe you should consider deploying RHEL instead17:54
sarnoldjpds: *snort* :)17:59
dasjoeDon't forget there's a way to run Landscape locally, for up to 10 real and 10 virtual machines, iirc19:03
SuperLagYes, but $700/server/year.... for 17 machines. That's just shy of $1K/mo.19:03
dasjoeNobody forces you to use Landscape, you're free to use whatever config management tool you prefer19:04
SuperLagdasjoe: right. I'm just not familiar with the alternatives. That's what I'm trying to figure out.19:04
dasjoeSuperLag: okay, there are a few things to look at: Puppet, Chef, Ansible, Foreman, Katello, Cockpit-Project to name a few19:05
SuperLagdasjoe: I thought the automation stuff like Puppet/Chef was only for when you're initially deploying stuff, rather than for maintaining them after the fact?19:26
dasjoeSuperLag: no, they're not just for deployments, see https://en.wikipedia.org/wiki/Comparison_of_open-source_configuration_management_software19:32
=== denbeire- is now known as denbeiren
=== sarnold is now known as sarnold_
TreizeAwesome, Just what I was looking for! An Ubuntu Server Guide21:29
halvorsHi.21:39
klagidhalvors: hello!21:39
halvorsAnyone know how to read a session created by apache2 mod_php from a php script running in cli?21:40
halvorsI have the session id.21:40
halvorsIs there some locking in the picture here?21:40
halvorsWill i be able to do this?21:40
klagidI am not 100% sure but i believe that you can21:44
maccam94i'm trying to remove some packages from my apt repository using reprepro, but i can't seem to get it to remove the files from the pool23:25
maccam94i'm stuck in a weird place now where i can't re-import the packages because reprepro thinks the files are already in the pool, and when I remove the packages it won't remove the pool files either23:26
tarpmanmaccam94: reprepro deleteunreferenced , perhaps23:27
tarpmanmaccam94: are you certain they aren't still used somewhere?23:27
maccam94that doesn't seem to do anything :(23:27
maccam94i don't think so, how can I check?23:27
tarpmanhm. not sure23:28
tarpmangrep for them in Packages/Release files, at least23:28

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!