/srv/irclogs.ubuntu.com/2015/10/01/#ubuntu-server.txt

DannySMctarpman: it stays in the foreground hence why I want to use it as a service and try to stay clear of screen00:00
* patdk-lap loves forkbombs00:03
DannySMcAny ideas? tarpman or sarnold00:03
DannySMcpatdk-lap: May I ask what a forkbomb is?00:03
patdk-lapgoogle can help there00:04
patdk-lapwhen you do, ./start.sh, does start.sh stop? and let you type in more commands?00:04
tarpmanDannySMc: assuming you already fixed the runlevel line someone else mentioned, I'd be looking for differences between your user environment and the service environment00:04
tarpmanpatdk-lap: I just asked about that :P00:04
patdk-lapI didn't see the answer00:05
* patdk-lap cant read00:05
sarnoldDannySMc: when you run it by hand, are you running as user minecraft, group minecraft? or just your standard user account?00:05
DannySMcActually I do get a problem, that when I run the MC server via the service it seems to get slower and slower, as if the CPU has just put it at the bottom of the priority list... (this was my first attempt), so how would I find that out?00:05
DannySMcstandard user account currently00:06
DannySMcLike find out differences?00:06
sarnoldtry again with the user and group that you specified in the conf00:06
DannySMcsarnold: how do I do that>00:07
DannySMclike change user?00:07
DannySMcsu - minecraft?00:07
DannySMcin the service script?00:08
sarnoldDannySMc: no, just do it right in your shell..00:08
sarnoldDannySMc: something like 'sudo -i -u minecraft -g minecraft' ought to do it00:08
DannySMcThis is hell sarnold00:11
DannySMcsarnold: I tried doing it and it says cannot access .jar file?00:11
sarnoldDannySMc: aha :) check ls -l in the directory00:12
DannySMcsarnold: okay?00:13
sarnoldDannySMc: do the permissions look like they shuold allow the minecraft user and group the ability to read and write what they need to?00:13
DannySMcsarnold: they all seem to be root and like start.sh has 66600:14
DannySMcI need these accessible to everyone who is logged in...00:14
DannySMcI did sudo chmod -R 7777 /srv/minecraft/Survival00:15
DannySMcand it still has done nothing >.< sarnold00:15
sarnoldfirst, that's too many sevens; the first 7 will mean to turn on sticky bit, sgid bit, and suid bit; you don't want any of those. second, these permissions are entirely too wide open; it's best to restrict privileges and permissions to only what is needed00:16
sarnoldwhy do you want every user on your system to be able to modify these at any time?00:16
DannySMcWell I only want anyone with the group minecraft but it is hard to edit these as I am very inexperienced00:17
DannySMcand when I do sudo start mc-survival00:17
DannySMcIt could be anyone logged in running it00:17
sarnoldnormally you wouldn't care, it just gets run early in boot and stays running..00:17
DannySMcsarnold: it would need to be restarted when we do updates and that, which is a problem00:18
DannySMcespecially now while we are building it00:18
sarnoldDannySMc: .. and if you're using sudo to manage the service anyway, that means you don't want e.g. your web server to have write access here..00:18
DannySMcOkay well how do I set users with the group minecraft to be able to edit it?00:19
DannySMcand that is ALL the files inside the /srv/minecraft folder00:19
DannySMcand folders*00:20
sarnoldchown -R minecraft:minecraft /srv/minecraft ; find /srv/minecraft -type d -exec chmod 775 {} \; ; find /srv/minecraft -type f -exec chmod 664 {} \\;00:21
sarnoldoh, of course, resetting the start.sh to 775 at the end00:22
DannySMcWell I seem to get errors like operation not permitted and missing arguments to exec00:23
DannySMcsarnold:00:23
DannySMcYeah so every operation was not permitted00:23
DannySMcsarnold: so changed to root, and it just says missing argument to exec00:25
DannySMcto -exec sorry00:25
sarnoldDannySMc: gah that last command had an extra \ in it00:27
DannySMcsarnold: that's done00:28
DannySMcsarnold: I get permission denied now?00:29
sarnoldDannySMc: alright, so that should be everything in there readable and writable to members of the minecraft group, everyone else can read it00:29
DannySMcsarnold: I have added my root account and dannysmc95 to the minecraft group, but I get permission denied?00:32
sarnoldDannySMc: did you login again or use newgrp minecraft in your shell to get a new shell with the new group permission?00:32
DannySMcsarnold: sorry what? do I need to relogin?00:33
sarnoldgroup membership changes only happen at specific times, login through a service or via 'sg', 'newrgp', commands00:33
sarnoldrelogin is easiest way tog et the change into all your processes, but it isn't necessary00:33
DannySMcI did sg minecraft?00:33
DannySMcsarnold: is that right ^00:34
sarnoldit probably looked like nothing changed; run 'id' to make sure the new group is ther00:34
DannySMcsarnold:  yeah its in gid=1001(minecraft)00:35
sarnoldgood good; now try to edit the config files again and make sure that it works00:35
DannySMcyeah just added and removed a space and no errors?00:36
sarnoldnice :)00:37
sarnoldokay, back to the issue at hand.. try the sudo service ... start command and see what happens00:37
DannySMcsarnold: same problem00:39
DannySMcsarnold: unknown command00:39
DannySMcsarnold: Look I am going to bed, as I have work tomorrow, thanks for your help I shall try and get on tomorrow! Unless I can fix it by then, thanks again for helping with my permissions!00:40
=== markthomas is now known as markthomas|away
aroonii thinkhey everyone ;  just upgraded from ubuntu 12.04 => 14.04... now i'd like to install nginx from ubuntu's package.  i think i installed nginx from source... can i just install the nginx package on ubuntu over the existing installation?  or do i need to do something in between?01:37
sarnoldarooni: it's usual to install self-compiled packages into /usr/local/ instead of into /usr -- when you install nginx, it may not overwrite the actual files you're using, and if you provided your own /etc/init.d/ script or /etc/init/ upstart configuration, the one from the package may not install cleanly01:51
sarnoldarooni: if there's an easy way to uninstall what you've done before, while still keeping your configuration, it might be worth doing that first, just to make the packaged version more predictable01:51
aroonithanks sarnold01:53
aroonilooks like i at least need to remove the upstart scripts01:54
aroonisarnold, it looks like there's a config file at /etc/init.d/nginx ... should i just remove it ; or do i need to run a command first to tell ubuntu not to use it anymore01:57
sarnoldarooni: depends.. if you just remove it, the currently running nginx won't cleanly shutdown at reboot or when it's time tos tart the new one01:59
sarnoldarooni: how much downtime on the server is acceptible?02:00
sarnoldwow, my poor brain. "acceptible". sheesh.02:01
arooniminimal .. this is production but i coudl have some02:02
sarnoldalright; I think if it were me then I'd use it to shut down the currently running nginx, then move it out of the way, install the new one, and go from there..02:03
aroonii removed the /etc/init.d/ script02:03
arooniusing update.rc02:04
aroonii'm wondering if i  need to remove anything else?02:04
arooniid like to use the same config stuff02:04
sarnoldnothing else comes to mind; back up the configs, perhaps..02:05
ubuntu804Hey guys,, i'm trying netinstall of ubuntu server 14.04, and when i use apache web server it installs just fine.. but when i use IIS web server it fails to load few modules.. and throws errors while install step saying unable to install selected kernel.. linux-generic.. any suggestions..??05:41
ubuntu804is there any dependecies with md5 sum?? how can i modify it if there is.?05:43
ubuntu804anyone.??05:51
=== denbeiren_ is now known as denbeiren
=== lukasa_away is now known as lukasa
Darkfire2Anyone here ever had this issue.... I use webmin to install a SSL Certificate to a virtual host on my Ubuntu 14.04 server. When i go to apply the changes it ends up crashing my server. I know i am selecting the correct Certificate/Key/and Authorities file... What would cause this. I had also tried installing it manually into sites-available/mysitename.conf and same results.07:43
jamespagecoreycb, I pushed a couple more tweaks to ceilometer - they can go with the next upload08:02
jamespagerestricting test execution to unit tests, using the upstream wrapper to generate the configuration file08:02
=== Lcawte|Away is now known as Lcawte
=== disposab1e is now known as disposable
=== lukasa is now known as lukasa_away
=== lukasa_away is now known as lukasa
coreycbjamespage, ok good catch on the config file11:13
Mark___Are anyone here familiar with setting up a storage server with redudant data and failover fallback server? Cause I need help setting up so my 2 web servers can access my storage server, which should have a failover fallback to another storage server which are replicating to each other.11:17
halvorsHi!.11:30
halvorsI've enabled ipv4 forwarding in sysctl.conf.11:31
halvorsBut my server won't route packets.11:31
halvorsIsn't it possible to do this in ubutnu woithout NAT'ing?11:32
TJ-halvors: Yes.11:34
lordievaderhalvors: What are you trying to do exactly?11:36
halvorslordievader: I'm trying to route between my 2 interfaces.11:38
halvors2 LAN interfaces in different subnets.11:38
TJ-halvors: if forwarding is enabled, then there just need to be the correct entries in the routing table(s)11:38
halvorsIs there any way to do that based on the nic's name?11:39
TJ-halvors: try "find /proc/sys/net -name forwarding -exec sh -c 'echo "{} $(cat {})"' \;  "11:41
halvorsTJ: My routing table is like this: http://pastebin.com/nLgT9Wrz11:44
halvorsWhere eth1 is my outside interface and vlan10 is my inside interface.11:44
halvorsWhouldn't that do the trick?11:45
halvorsResult of the command you sent is: /proc/sys/net/ipv4/conf/all/forwarding 111:45
halvors/proc/sys/net/ipv4/conf/default/forwarding 111:45
halvors/proc/sys/net/ipv4/conf/eth0/forwarding 111:45
halvors/proc/sys/net/ipv4/conf/eth1/forwarding 111:45
halvors/proc/sys/net/ipv4/conf/lo/forwarding 111:45
halvors/proc/sys/net/ipv4/conf/vlan10/forwarding 111:45
halvors/proc/sys/net/ipv6/conf/all/forwarding 111:45
halvors/proc/sys/net/ipv6/conf/default/forwarding 111:45
halvors/proc/sys/net/ipv6/conf/eth0/forwarding 111:45
halvors/proc/sys/net/ipv6/conf/eth1/forwarding 111:45
halvors/proc/sys/net/ipv6/conf/lo/forwarding 111:45
halvors/proc/sys/net/ipv6/conf/vlan10/forwarding 111:45
ratraceboom11:45
halvorsOh, sorry. Meant to pastebin that :(11:45
TJ-halvors: how are you determining it is not working?11:53
TJ-halvors: I'd run tcpdump on the VLAN interface to see if packets are going out. The problem may not be on the Linux side.11:53
halvorsTJ: Well i was asking if there is some obvious reason that it should not work.11:54
halvorsBut a simple ping doesn't go thru from the inside.11:54
TJ-clients on the VLAN can connect to the router host's VLAN IP address, but not anything on the eth0 subnet?11:56
halvorsTJ: I know my setup with vlan is some strange.12:03
halvorsBut it legit.12:03
halvorsWhen i ping 8.8.8.8 i se the ping in tcpdump on the router but doesn't get any response on the client.12:04
halvorsIs there routes missing back to the client?12:04
lordievaderhalvors: Does 8.8.8.8 know where to send the packet to get to your vlan?12:10
TJ-halvors: are the clients configured to see the VLAN tagging on the returned packets?12:10
halvorsTJ: Yes :)12:12
jamespagecoreycb, http://people.canonical.com/~ubuntu-archive/proposed-migration/update_excuses.html12:12
jamespageceilometer regression for autopkgtests12:12
halvorslordievader: 8.8.8.8 is google dns.12:12
halvorsThe default route of the router is the route to the internet.12:12
jamespagecoreycb, looking at the tests, the bit of code that checks using pidof is not valid now that we use ceilometer-polling as the binary for lots of agents12:12
lordievaderhalvors: That is not the question. The ping response needs to go somewhere, is there a route back to your vlan.12:12
lordievader?12:12
halvorsFrom my understanding it is: http://pastebin.com/nLgT9Wrz12:13
halvorsRoute back to the 172.16.10.0/24 network thru vlan10 interface.12:13
lordievaderI don't think google has that route information.12:13
halvorshahahha12:13
lordievaderI.e. google gets a packet from 172.16.10.1 (example), it sends a packet back to that ip...12:14
halvorsWell pinging google from the router works, so that far google have routing information.12:14
halvorsYeah.12:14
halvorsI know.12:14
halvorsAnd then i should work.12:14
halvorsThe issue here is why and how 172.16.10.1 routes the packet back to 172.16.10.2 :)12:14
lordievaderWhy? Does google know where 172.16.10.0/24 is?12:15
halvorsIt does not.12:15
TJ-halvors: the point is, 172.16 is a private address range. You have to NAT that to the public address12:16
lordievaderSo how can it send a packet to that range?12:16
halvorsYeah i know, high potetically i does.12:16
halvorsThere is a NAT server on the default gateway of my router.12:17
halvorsSo that should work just fine ;)12:17
halvorsRight?12:17
halvorsAh, now i see the issue here.12:17
halvorsMaybe my NAT server is only accepting packets from 10.216.8.0/23 :-S12:17
lordievaderSo yes, you probably need a NAT. Or get your isp to accept bgp packets from you or something.12:18
coreycbjamespage, ok looking12:18
halvorslordievader: If that is the case, i should still be able to ping the gateway of my router which is 10.216.8.1.12:19
halvorsFrom the client behind my router, right?12:19
TJ-halvors: if the default gateway is NATing, it needs the 172.16 route adding to its routing table to route those packets to the Linux router12:19
lordievaderhalvors: No, same problem. Your router has no route to 172.16.something12:19
halvorslordievader: Right ;)12:20
TJ-halvors: presently it sounds like the gateway/NAT device doesn't know about that subnet so it will just drop the returning packets12:20
halvorsThank you for your help.12:20
lordievaderOr at least, not by default.12:20
halvorsThat makes sense.12:20
halvorsI am able to ping the 10.216.8.78 which is the IP adress eth1 interface of my router (outside).12:20
halvorsI shouldn't be able to do that if forwarding wasn't enabled right?12:21
ratracehalvors: correct12:43
Mark___Hey. Can I use UFW to allow a specific IP to access all ports?12:45
lordievaderYes.12:46
Mark___How would that command look like?12:46
halvorsThank you guys for excellent help :)12:46
lordievaderNo idea. Long time since I last used UFW. But since it is a frontend for iptables....12:46
halvorsVery much apriciated :D12:46
Mark___Okay. Thanks. I will try to look it up.12:47
lordievaderMan page of ufw will probably tell you.12:47
Mark___Found out for those interested, that you can allow an IP to access all IPs with the following command: sudo ufw allow from xxx.xxx.xxx.xxx12:53
Mark___Thanks everyone12:53
=== lukasa is now known as lukasa_away
coreycbjamespage, ceilometer tests are updated and I added a systemd test: https://git.launchpad.net/~ubuntu-server-dev/ubuntu/+source/ceilometer/commit/?id=a0e4845c90fddc83fba987686884d3e07087b00413:07
=== lukasa_away is now known as lukasa
lordievaderMark___: I'd recommend to learn iptables.13:18
lordievaderUfw might be easy in the beginning but after a while it becomes restrictive.13:19
jdstrandnot that I'm biased, but if ufw does the job...13:22
jdstrandplus you can use it with iptables rules if you need an extra rule or two by modifying /etc/ufw/*rules13:22
jamespagecoreycb, ok - just taking a run at those tests locally - are you faimilar with adt-run?13:23
coreycbjamespage, yes but it seems to take way too long to run.  I tested these manually.13:24
jamespagelemme try as well13:24
lordievaderjdstrand: You are the maintainer?13:24
jdstrandI am13:24
lordievaderjdstrand: Ah, cool. Good to know ;)13:24
coreycbjamespage, thanks.  do you typically run adt-run against debs?  --binary ./*.deb13:25
jamespagecoreycb, I build the package and then run using --changes13:25
coreycbjamespage, ok13:25
jamespagecoreycb, you need to make sure you build the packages using the --source option with sbuild13:25
jamespageso that source and binary can be accessed13:25
coreycbjamespage, thanks good to know13:26
jamespagecoreycb, test-services needs to be added to d/t/control13:35
coreycbjamespage, ok I just pushed that update13:38
jamespagezul, https://bugs.launchpad.net/neutron/+bug/150177213:43
ubottuLaunchpad bug 1501772 in neutron (Ubuntu) "Metadata proxy process errors with binary user_data" [Undecided,New]13:43
zuljamespage: want me to get ttx to get someone to look at it?13:43
jamespagezul, sure13:44
jamespagezul, might be worth seeing if any other bugs exist first..13:45
jamespagezul, and then I hit a nproc limit...13:57
* jamespage sighs13:57
zuljamespage: sounds like you are having fun :)13:57
jamespagecoreycb, if its testing ok for you please upload14:13
coreycbjamespage, eh... I'm getting an error that I think might be in adt-run http://paste.ubuntu.com/12631883/14:15
coreycbjamespage, I think it's fairly safe to upload though based on manual tests14:16
=== lukasa is now known as lukasa_away
jamespagecoreycb, running adt now - was waiting for a build14:27
coreycbjamespage, ok I'm trying again with --output-dir14:28
jamespagecoreycb, I do14:28
jamespageadt-run --changes ceilometer_5.0.0~rc1-0ubuntu3_amd64.changes -U --apt-pocket=proposed --- qemu ~/images/adt-wily-amd64-cloud.img14:28
coreycbjamespage, ok that's pretty much what I was using14:29
=== lukasa_away is now known as lukasa
jamespagecoreycb, lgtm upload away14:32
coreycbjamespage, cool ok14:32
zuljamespage,  shazbutt http://pastebin.ubuntu.com/12632075/14:49
=== lukasa is now known as lukasa_away
=== lukasa_away is now known as lukasa
=== markthomas|away is now known as markthomas
m1dnight_Hello guys. Somehow I have messed up my MOTD (over ssh). Is there any clearcut way to reset it to default settings?16:30
RoyKm1dnight_: it's in /etc/motd16:31
m1dnight_so if I copy those files from a fresh install and overwrite them it should be okay, right?16:31
RoyKit's a textfile ;)16:31
m1dnight_Yes well, I figured as much. But maybe there was some applicatoin logic or settings I might have broken.16:32
m1dnight_Hence, my question.16:32
RoyKhttp://manpages.ubuntu.com/manpages/raring/man5/update-motd.5.html perhaps?16:33
hallynwolsen: bug 1457517 , do you have the rights to upload the vivid debdiff for SRU?16:42
ubottubug 1457517 in nova (Ubuntu Vivid) "Unable to boot from volume when flavor disk too small" [Undecided,New] https://launchpad.net/bugs/145751716:42
hallynif not do you want me to push it?16:42
hallyn(i'll push it unless you say otherwise)16:43
hallynhm, actually coreycb is the one credited in changelog,16:44
hallynuh except someone broke debian/rules16:45
coreycbhallyn, oh I think we were waiting on that to land upstream first if I remember16:46
hallynit is upstream16:46
hallynit's in wily16:46
hallyncoreycb: but your change to debian/rules, ther'es no explanation why and no bug#.  I assume guessing deps broke something/16:47
hallynwell, pushing16:50
m1dnight_RoyK: I copied the files from a clean install and they seem to work fine. Thanks.16:51
coreycbhallyn, sorry I was looking at it closer, yeah I think we can upload that.  I dont' recall exactly why we dindn't sru it.  Probably because there's a stable release next week for kilo.16:54
coreycbhallyn, the d/rules explanation is in the changelog16:55
coreycbthat fix is for the cloud archive, where's it's been uploaded already for trusty-kilo.16:55
hallynok16:56
RoyKmikal: np (:16:56
hallyncoreycb: ...   "Prevent dh_python2 from guessing dependencies." doesn't tell me why you need to prevent it from guessing dependencies :)16:57
hallynI'm left assuming that's a good thing, but wondering hwy, if it's a good thing, it isn't the default16:57
coreycbhallyn, fair enough :)16:57
RoyKm1dnight_: np :(16:57
coreycbhallyn, old versions of dh_python2 guessed dependencies based on requirements.txt and new versions don't do that, and we want the new version behavior.16:58
hallynthen why have requirements.txt?17:00
hallyn(i'm not picking on you, i'm edumacating myself :)17:00
coreycbhallyn, you'd use requirements.txt to install the package with pip17:01
coreycbinstall deps that is17:01
hallynah17:01
hallynthanks17:01
blibanyone can help me with a networking issue? My machines' dns is working (dig xyz.com) - I can ssh into it. But I can't ssh from inside to outside?17:14
wolsenhallyn: for the record I do not have upload rights - but thank you17:37
=== lukasa is now known as lukasa_away
WicaeedHey all, I'm trying to gather information from NFS client for debugging purposes, but I can't figure out what verbosity is even configured by default for the nfs client options18:08
WicaeedIs there a default NFS client config file on Ubu 14 where I can configure the logging verbosity?18:08
johnfgI think I got the cart before the horse on cinnamon.18:24
johnfgI'm running server 14.04.3, and just installed cinnamon.  But no X yet.18:24
johnfgWhat's the best way to install what cinnamon needs?18:24
lordievaderWhy would you want X on a server?18:24
johnfglordievader: because that's what I'm used to.18:25
lordievaderBut it is a server...18:25
lordievaderHaving X is just wasting resources.18:25
sarnoldjohnfg: you can always ssh -XY server   to forward X11 connections to run whatever gui you might need on it18:28
johnfgtrue, i'll keep that in mind folks.  thanks18:29
=== lukasa_away is now known as lukasa
=== ashleyd is now known as ashd
coreycbbeisner, can you promote kilo-proposed to kilo-updates in the cloud archive?19:20
=== cipi is now known as CiPi
keithzglordievader: I think with most servers these days (assuming they aren't just containers), the hardware resources required for X are just a drop in the bucket. But that being said, I'd say the resource that it's wasting then is actually sysadmin attention. The less that's running, the easier it is to keep track of and to diagnose if something's failing!19:30
=== markthomas is now known as markthomas|away
StathisAis there a way to check if sourced in /etc/apt/sources.list.d are honored or not?19:47
StathisA*sources19:47
pmatulisStathisA: sure, update your package files (sudo apt update)19:48
StathisApmatulis,  I've tried that, theres some "Err http://ppa.launchpad.net vivid/main amd64 Packages19:50
StathisA" which I cannot find which of the added ppa's are triggering19:50
StathisAthats why I ask, I cant find which is NOT working in sudo apt update19:50
pmatulisStathisA: it should state what it was at the end of the output. at least it does for me (on wily)20:04
pmatulishttp://askubuntu.com/questions/135932/apt-get-update-failure-to-fetch-cant-connect-to-any-sources20:05
StathisAok thanks!20:09
bananapieI am playing with compiling my own kernel ( for the sake of learning ), I ran localyesconfig, and it breaks X horribly because my graphics card only works properly when loaded as a module. Is it a bug because it should have set my graphics card driver to M or is it a feature because I say 'localYESconfig' ?20:20
bekksIt'S because you used localyesconfig20:21
bananapieok.20:23
=== markthomas|away is now known as markthomas
tewardstupid question, but is it possible to run landscape-client on one computer in 'monitor' mode only, so that it isn't depending on the management features?  (i.e. an 'unmanaged' but 'monitored' system)22:21
=== Lcawte is now known as Lcawte|Away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!