[09:15] <rbasak> teward: sorry, I was out last week. What's up?
[09:33] <rbasak> caribou: why is bug 1464227 Invalid? /var/log/dmesg is out of date on my system. Or has systemd saved it in the journal somehow?
[09:34] <rbasak> cpaelzer__: I don't see any tags in your NIS git branch. Did you push them?
[09:34] <caribou> rbasak: pitti told me that those were saved in the journal so I removed the systemd equivalent job of the upstart one when I merged the rsyslog package
[09:37] <rbasak> caribou: ah, if it's in the journal then that's fine with me. Thanks.
[09:39] <cpaelzer__> rbasak, tags now uploaded
[09:39] <cpaelzer> rbasak: there was so much confusion on friday for the first LP git upload that I missed them
[09:39] <cpaelzer> rbasak: now they should be good
[09:39] <caribou> rbasak: journalctl --dmesg has it
[09:40] <rbasak> caribou: aha. Works for me. Thanks again!
[09:40] <caribou> rbasak: np
[09:40] <rbasak> cpaelzer: I see them now. Thank you!
[10:24] <davegarath> Hi all. I would like to logging scp session from my server ( what are downloaded/uploaded ). I tried to configure /etc/sshd_config with "Subsystem sftp /usr/lib/openssh/sftp-server -l INFO" but scp session aren't logged
[10:24] <davegarath> I just can see connection and disconnection in the auth.log file
[10:26] <rbasak> Does scp actually use sftp
[10:26] <rbasak> ?
[10:27] <rbasak> Or does it just run an scp at the other end like rsync does?
[10:27] <davegarath> mmm I don't know maybe not
[10:27] <rbasak> If you're logging for auditing purposes then you can't rely on any logs if you permit shell access.
[10:28] <davegarath> mh ok
[10:28] <maswan> rbasak: scp does not use sftp
[10:28] <davegarath> so I can't log scp activities...
[10:28] <rbasak> You could provide some kind of restricted shell and wrap the scp command I suppose.
[10:29] <rbasak> It would be rather hacky though.
[10:29] <maswan> scp is very very close to cat $name | ssh fooo "cat > $name"
[10:29] <davegarath> ok. I'll think some wrapper
[10:30] <rbasak> It might be better to eliminate scp from your workflow entirely.
[10:30] <rbasak> It's handy for ad-hoc stuff but less useful for workflow things.
[10:31] <rbasak> If I were to set up something where I need an audit trail of what happened to a bunch of files changing, I'd use git and a hook to update it when required.
[10:31] <rbasak> Possibly with git-annex if large file support is required.
[10:32] <davegarath> I don't want eliminate scp to break some functionality on the server that could use it. I just want  to know if someone use scp for normal operation and watch for what.... I don't know what run on this server
[13:15] <forme> If I want to run Plex server on a headless Ubuntu server installed on an usb stick will I have performance issues with the plex server? The media is stored on a nas, so the locations are network based for read/write.
[15:13] <rbasak> cpaelzer: first draft. Maybe I need to tone it down a bit? Feedback appreciated. http://paste.ubuntu.com/13576789/
[15:17] <cpaelzer> rbasak: tone down a bit in paragraph #3
[15:18] <cpaelzer> everything else is totally fine, non-offensive and asking what we like to understand "why special"
[15:20] <jeroentbt>  Hey, I just installed an ubuntu server (14.04.3) and would like to connect it to an IPsec VPN. This server needs to be the client in this connection. Which application would allow me to set this up? (a walkthrough would be great too!)
[15:22] <hateball> !vpn
[15:23] <jeroentbt> hateball: thanks, that page does specifically mention IPSec VPN is not covered though..
[15:23] <TJ-> jeroentbt: you actually want it to operate in tunnelling mode, or just 'plain' IPSec encapsulation ?
[15:24] <jeroentbt> TJ-: You've got me there (noob... :/) I want a VPN connection to connect to some specific servers, All other connections should not use the VPN
[15:25] <jeroentbt> If that was what you were asking.
[15:26] <TJ-> jeroentbt: yes, IPSec and VPN terms are used incorrectly at times. 'standard' IPSec is 'just' transport security (encrypting packets between hosts). 'on top' of that you can do tunnelling, which is where the 'virtual network' sub-net 'tunnel' comes in
[15:27] <jeroentbt> Then I would need option 2, tunneling. thanks for the clarification!
[15:27] <TJ-> jeroentbt: the usual package for doing it is openswan
[15:28] <jeroentbt> TJ-: Thank you, I'll look in to that
[15:29] <TJ-> jeroentbt: there's a reaonably easy-to-understand overview here: http://clauseriksen.net/2011/02/02/ipsec-on-debianubuntu/
[15:33] <jeroentbt> TJ-: Thank you!
[17:29] <teward> when's the next server team meeting?
[18:04] <beisner> coreycb, confirming:  is kilo: oslo.concurrency/nova is ready to promote to trusty-kilo-updates today?
[18:05] <beisner> coreycb, also kilo: python-novaclient g2g?
[18:07] <coreycb> beisner, not yet because they're not in vivid-updates yet.  and that's blocked on a dep8 regression that I'm working on fixing.
[18:07] <coreycb> beisner, I'll keep you posted, thanks
[18:07] <beisner> coreycb, ack, thx.  i'll watch the cards for updates.
[18:34] <rbasak> cpaelzer: I'm struggling to understand how to tone down the third paragraph. Which bit of it should I focus on?
[18:36] <teward> rbasak: hello!  hope you enjoyed holiday/vacation/etc., just an FYI the libuuid1 headaches broke my sbuilds, so i couldn't test merges, that's back on track now and i'm getting real close to a merge
[18:36] <teward> (for nginx)
[18:36] <teward> just wanted to give you the heads up
[18:36] <rbasak> teward: OK, no problem.
[18:39] <vahid> Hi, I want to make a custom Ubuntu server image to install in every virtual machine, That ISO should contain some files. Is there any way ? I can make ISO with selected packages but not files.
[18:40] <teward> vahid: you could make the virtual machine, then make clones of the VM for new virtual machines (changing network setups, hostnames, IPs, etc.)
[18:40] <teward> just an option :)
[18:40] <teward> (I haven't found a way to ship separate files on the ISO, myself)
[18:41] <vahid> I should Install on VPS.
[18:44] <danawar> Hey ubuntu server i have an issue i ran a python script on my server at work which edited the /etc/fstab file to mount some smb shares on startup problem is there is an issue with it and now the server wont boot up so i can SSH into it. Is there any way i can recover this machine without getting physical access to it?
[18:49] <sarnold> danawar: use serial or ILO or ivkm or whatever your system has to add "single" or "shell=/bin/bash" to your grub kernel command
[19:17] <sokoll>  I'm trying to configure a this module https://confluence.atlassian.com/doc/configuring-apache-to-cache-static-content-via-mod_disk_cache-295305963.html. But, there is no /etc/httpd/conf/httpd.conf directory/file on Ubuntu. This page gives details on the Apache config files in ubuntu https://help.ubuntu.com/lts/serverguide/httpd.html, but I'm just not quite clear on which file I need to edit
[19:17] <sokoll> in order to load the cache mod.
[19:18] <sarnold> sokoll: iirc it'd be in /etc/apache2/ somewhere -- grep -r for LoadModule and see if that helps you find anything
[19:22] <sokoll> sarnold: what's the correct command for that?
[19:22] <sokoll> grep -r LoadModule?
[19:24] <sarnold> sokoll: yeah, once you're in the apache configuration directory
[19:24] <sokoll> ah ok
[19:24] <sokoll> bear with
[19:27] <sokoll> I have mods-available/cache_disk.load:LoadModule cache_disk_module /usr/lib/apache2/modules/mod_cache_disk.so
[19:28] <sokoll> but no conf file
[19:32] <sarnold> sokoll: nice; that looks like you ought to be able to do a2enmod cache_disk  to enable to module, and then add the <ifmodule> block from https://confluence.atlassian.com/doc/configuring-apache-to-cache-static-content-via-mod_disk_cache-295305963.html  to wherever your virtual host configuration is stored, probably a symlink from sites-enabled/ to a config file in sites-available/
[19:33] <sokoll> ok lemme give that a bash (no pun intended ;) )
[19:36] <sokoll> How do I know if it's working or not?
[19:37] <sarnold> hopefully apache will pass through some headers that you can spot in curl or wget output
[19:42] <sokoll> hmm, I'll fiddle about with it. thank you so much sarnold
[19:42] <sokoll> :)
[19:43] <sarnold> cool :) have fun sokoll ;)