/srv/irclogs.ubuntu.com/2016/01/20/#ubuntu-server.txt

ponyofdeathcan someone help me figure out why apt-get --print-uris is not printing the uris00:00
geniiponyofdeath: Are you using it like: apt-get update --print-uris    or some other way?00:04
=== Lcawte is now known as Lcawte|Away
ponyofdeathhttps://bpaste.net/show/00320d77491e00:05
ponyofdeathgenii:00:05
sarnoldmy manpage suggests --print-uris is supposed to work with apt-get update and apt-get source00:06
ponyofdeathyup00:06
ponyofdeathwhats funny is that it works fine on another of my servers00:06
sarnoldah.. that was "also works"..00:07
ponyofdeathi wonder if vagrant is somehow supressing the output or something00:08
geniiDoes not work here with install option in any arrangement, like apt-get --print-uris install blah   , apt-get install blah --print-uris , apt-get install --print-uris blah00:11
genii( 15.04 )00:12
ponyofdeath12.04 server i have it works00:12
ponyofdeaththis 12.04 vagrant box no worky00:13
ponyofdeathworks on 14.04 too00:14
geniiponyofdeath: Actually, I just found that if the package is already installed, it will not get to the point of processing the --print-uris00:16
ponyofdeathyup thats why i use --reinstall00:17
ponyofdeathbut i test with packages not installed00:17
geniiIt works when I used it with a package that was not already installed, but not with a package that is00:17
genii( whether reinstall was used or not)00:18
geniiponyofdeath: Actually, it works when I do it like: apt-get install --reinstall binutils --print-uris00:24
ponyofdeathi think i figured it out00:24
geniiInteresting00:24
ponyofdeathvagrant-cachier00:24
ponyofdeathit cache apt stuff00:24
ponyofdeathand aperently messes with print-uris00:24
transhuman_hi has Canonical combined Ubuntu server with MapR? I found one reference to it. Haven00:39
transhuman_Haven't found anthing else00:39
transhuman_as a platform00:40
transhuman_I am trying to figure out if its MapR or Apache Hadoop that is combined with Ubuntu-server as a platform. My idea is that since I have a lot of experience with Ubuntu, that I might learn the version that is for the Ubuntu platform as a specialty...thanks in advance00:45
sarnoldtranshuman_: hopefully useful https://jujucharms.com/big-data00:47
transhuman_thanks for that link00:47
naccrbasak: so my current idea is to "break" the connection between some of the PHP packages I need so I can at least get one updated, in order to build the other at the right level (and not pull in any PHP5 dependencies) -- does that seem reasonable to you? We can talk about it more in the morning, if you're around03:15
ofaqI just want to say ubuntu server is a turd!04:37
pmatulisofaq: thanks04:59
=== m1dnight1 is now known as m1dnight_
=== dw2 is now known as dw1
raghavaHi07:40
raghavaHi Can any one provide steps to install Openstack HA using autopilot deployment07:41
=== Lcawte|Away is now known as Lcawte
lordievaderGood morning.09:26
=== Piper-Off is now known as Monthrect
rbasaknacc: so you have some kind of dependency loop? That doesn't surprise me. We had a similar issue with php-json. If so then yes, break the loop by temporarily. Please make a note as we'll need to ask an Ubuntu archive admin to do the same thing when we do it in the archive.10:46
rbasakkickinz1: how is the ntp merge going? Can I assign bug 1512980 to you?11:24
ubottubug 1512980 in ntp (Ubuntu) "Please enable PPS in the Ubuntu build of ntpd" [Undecided,In progress] https://launchpad.net/bugs/151298011:25
rbasakrharper: fyi, bug 1535076. I've merged it with your merge bug.11:26
ubottubug 1535951 in strongswan (Ubuntu) "duplicate for #1535076 Please merge strongswan 5.3.5-1 (main) from Debian unstable (main)" [Undecided,Confirmed] https://launchpad.net/bugs/153595111:26
=== cpaelzer is now known as cpaelzer_afk
kickinz1rbasak, I've applied the old deltas, forgotten ones, and missed one, I'm now verifying that they are all necessary. Yes you can assign to me.11:49
rbasakOK, thanks.11:58
=== cpaelzer_afk is now known as cpaelzer
=== Lcawte is now known as Lcawte|Away
|TheWolf|Hi!12:51
|TheWolf|I just tried to join #ubuntu, but apparently I'm banned :-O I have no idea why, is there any way to find out and/or get me unbanned from there...?12:52
hateball#ubuntu-ops12:52
|TheWolf|thx!12:52
hateballI think12:52
hateball!banned12:52
ubottuIf you have been banned it is probably because you have not gone along with what is acceptable !behaviour. If you're not sure what acceptable !behaviour is please see !Etiquette and http://wiki.ubuntu.com/IRC/Guidelines - If you think the ban was a mistake, please join #ubuntu-ops12:52
|TheWolf|awayWhat I'm actually here for: Am I right in assuming that the patches for CVE-2016-0728 have not been released yet? It's a bit confusing because https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1534887 says that it's fixed in 3.13.0-76.120, and that the fix is released, but the current version according to http://packages.ubuntu.com/search?suite=trusty&searchon=names&keywords=linux-generic is 3.13.0.76.8213:03
ubottuLaunchpad bug 1534887 in linux (Ubuntu Xenial) "CVE-2016-0728" [High,Incomplete]13:03
OerHeks|TheWolf|away, yes, patched 12 hrs ago13:03
=== |TheWolf|away is now known as |TheWolf|
OerHeksmaybe 16 hrs.. but the fix is certainly out13:04
|TheWolf|awayOerHeks : and this patch should already be available via the package managers?13:07
OerHeksjust update, or to be sure, apt-dist-upgrade13:08
OerHekserr apt dist-upgrade13:08
=== |TheWolf|away is now known as |TheWolf|
|TheWolf|that's what I did, but I only get the older 3.19.0.47.32, not 3.19.0-47.53, which includes the patch. might that be a caching problem with the mirror of my hosting provider?13:13
lordievaderYou ran apt-get update first, I presume13:14
|TheWolf|yes13:14
lordievaderWhere do your sources point to? It might be that your local mirror is slightly out of date.13:14
OerHeksmaybe your mirror is not synced yet13:15
OerHekstry the main13:15
|TheWolf|according to the output of apt-get update, it fetches from both http://mirror.hetzner.de (the mirror of the hosting provider) and http://de.archive.ubuntu.com and http://security.ubuntu.com13:16
|TheWolf|I'll try and check if the mirror is the problem, thanks for your help so far!13:17
OerHeksDe.archive.ubuntu.com-archivehttp128 KbpsOne day behind13:20
OerHekshttps://launchpad.net/ubuntu/+archivemirrors13:20
|TheWolf|I've tried a number of other mirrors now (which are supposed to be up to date and verified in the last hours), but none of them have the latest version. I guess I'll just have to wait a couple of hours13:34
transhuman_figured I would ask again for clarification is apache hadoop the preferred and supported version of hadoop on Ubuntu server or is it one of the other three MapR, Cloudera, or Hortonworks, I know canonical has partnered with one of them just not sure which13:36
rharperrbasak: thanks;  in the request, IKEv2 frag, I'll need to confirm, but I don't think that fix itself is in 5.3.5, rather a bit newer than 5.3.5;  we could look to also cherry pick that in if it's going to help users out13:36
rbasakrharper: I'm a little skeptical about cherry-picking anything in a security-sensitive package. Maybe we should unmerge that bug then?13:37
rharperit's not security13:37
rharperit's a feature13:37
rbasakIt's a security-sensitive feature though, isn't it?13:38
rbasakThe whole of IKE is security sensitive.13:38
rharperI don't feel qualified to say yes or no13:38
rbasakThe danger is that either we introduce a security issue, or the security team have trouble patching a future security issue because the later fix conflicts (either literally or logically) with our cherry pick.13:40
rharperlooks like, there's already some IKEv2 frag support in 5.3.513:40
rharperI was looking at the changes since 5.3.5 was tagged, and there are some additional updates, but the bulk of the feature was introduced in 5.2.1 it appears from strongswan/NEWS13:40
rharperso sounds like the user should have something to work with13:40
rharperso, no need to cherry pick anything newer at this point13:41
rharperpost merge, we can look at individual bugs13:41
rbasakOK, great!13:41
rharperwhile I have you;  I've got a 5.3.5 with Ubuntu changes in it;  it installs fine, so going to look for testers and then work on re-assembling the ubuntu changelog and a debdiff to pick over;13:42
=== devil is now known as Guest77896
=== DavidDuffey is now known as dduffey
=== Opcode90- is now known as Opcode90
=== SierraAR is now known as Sierra
=== beisner- is now known as beisner
=== AndrewMC` is now known as AndrewMC
=== stevenroose|BNC is now known as stevenroose
=== spicypixel_ is now known as spicypixel
=== frediz_ is now known as frediz
=== erisrenee_ is now known as erisrenee
=== remix_auei is now known as remix_tj
=== pitastrudl_ is now known as pitastrudl
sertyuihow to check the number of users present on a server ?14:27
sertyuihi14:27
Picisertyui: w, who, users14:28
sertyuithanks14:37
sertyuinow users give me 3 times my username14:37
sertyuiwhat that it means ?14:37
marlincAnything you recommend for centralized update management? Something that for example can pull in multiple apt repositories and then allows updates to be picked and deployed14:41
rbasakLandscape is Canonical's commercial answer.14:45
marlincWe're a bit reluctant of Landscape as its very expensive14:49
sertyuiin that case you one brilliant solution which not at all expensive14:54
sertyuii mean opensource14:54
sertyuiwell how to check the number of user on my system ?14:58
Picisertyui: I've told you. w and who will both list where those users are coming from. Each (v)tty session is actually a separate login, so thats why a user may show up twice.15:23
hateballyou can awk|uniq to sort it15:23
sertyuiand pts means ?15:29
Picipseudoterminal15:30
sertyuimeans15:31
sertyuiputty ?15:31
sertyuior kvm ?15:32
Picino, just any terminal created that isn't one of the ctrl-F1-like terminals15:34
sertyuii don't understand15:37
sertyuion virtuall server15:37
sertyuiwhen you see pts1 what it means ?15:37
Picisertyui: it is a terminal created by ssh or perhaps by screen or tmux.15:39
sertyuiok15:39
sertyuifine15:39
=== frickler_ is now known as frickler
sertyuii got a service called assp on my server15:40
sertyuisometimes suddently the service get stopped15:40
sertyuii m using server : Ubuntu 14.04.3 LTS \n \l15:40
sertyuiso my question15:41
sertyuiis  : on the server how i can identify what is the root cause of that incident ?15:42
naccrbasak: yep, it's a build-depends immediate cycle between phpab and phpunit, which prevents me from using the updated pkg-php-tools (which pulls in php7.0 rather than php5.x)15:55
naccrbasak: will work on that today15:55
=== dannf` is now known as dannf
eahmedshendyIf you admin users a linux machine, and some of them are developer and needs to edit some files that is related to service - let's say tomcat - and its directories only edited by a user called "tomcat" ... and you need to give him access, what is the best practice to do that ... give him a limited sudo or set access list for the tomcat directory or create a group and add him to that group and change the group of the tomcat directory then ch16:23
eahmedshendyange the permission to rwx?16:23
ServantGruntGood evening everyone, I'm in need of some help with the management of Juju and MaaS, can anyone help me?16:23
TJ-eahmedshendy: use ACLs16:23
eahmedshendyTJ-: why, can you give a short explanation when I choose between the three options?16:24
ServantGruntMy problem consists in the Juju bootstrap, because it tells me when bootstrapping that there aren't avaiable tools. When I use sync-tools to download them, it tells me it can't because the environment is not bootstrapped16:25
ServantGruntI'm in a sort of dead lock I can't figure out16:25
ServantGrunt(I'm following the MaaS setup documentation, from https://maas.ubuntu.com/docs1.8/juju-quick-start.html)16:26
ServantGrunt...Anyone?16:28
TJ-eahmedshendy: you could put the developer in a group that has write access to the directory entries/files, or you could leave default permissions as-is and use 'setfacl' (1) to add additional fine-grained permissions for users/groups16:28
eahmedshendyTJ-: I prefer this ACL way ... but I wanted to learn if there is a reasons that makes me select one more than the other in my case16:29
TJ-eahmedshendy: It generally depends on whether the underlying file-system can support ACLs, and if so, if the fine-grained permissions it provides are what is required.16:30
eahmedshendyTJ-: got it, thank you16:33
TJ-eahmedshendy: the old addage of "Keep It Simple, Stupid" applies - in other words don't over-complicate the solution unless you have to16:34
eahmedshendyTJ-: mmm, sorry I didn't get it .. I still can't difference between it gets complicated or not16:35
TJ-eahmedshendy: 'complicated' is for you, the admin, to judge. If you can make do with just using user/group membership and permissions then ACLs would over-complicate it16:37
eahmedshendyTJ-: got it, for me I need to get much practice on ACL use :)16:38
TJ-eahmedshendy: yes. "man setfacl" "man getfacl" and "man acl" will help understand it16:39
eahmedshendyTJ-: Thank you for your help16:39
eahmedshendy:)16:39
ServantGruntSo... Has anybody any idea on how to help me?16:42
qman__In my opinion, ACLs add too much complexity, I'd either add the users to the tomcat group or create a new group and grant access via limited sudo or similar16:42
qman__depends on how many files and the details16:42
qman__I build things based on how easy they are to figure out when you don't know they exist16:43
qman__so when you have to come back to it five years later, you can tell how it's set up16:44
ServantGruntIs there really no one who could help me?16:58
TJ-ServantGrunt: looks like the key -server folks aren't around right now. There's usually a good complement of them17:00
patdk-wkisn't server meeting on wed?17:00
patdk-wkprobably busy with that17:01
rbasakServantGrunt: I suggest you ask your question, rather than waiting for someone to volunteer to answer a question they don't know yet.17:03
rbasakServantGrunt: also you could try the #maas or #juju channels.17:03
rbasakeahmedshendy: I don't think it's appropriate to allow admins to edit files directly on a server except in an emergency. Otherwise you lose the ability to roll back or recover from a disaster. Get them to commit changes they want somewhere else, and arrange a process to get it live.17:04
=== Monthrect is now known as Piper-Off
eahmedshendyrbasak: good point17:18
ServantGruntI quitted before by mistake so I'm gonna repeat my question just to be sure: I need help about juju and ubuntu server with maas. When I juju bootstrap it tells me there are no tools available. When I juju sync-tools it tells me it needs the environment to be bootstrapped. That's a dead lock I can't figure out, what should I do?17:26
rbasakServantGrunt: I know there's a "juju bootstrap --upload-tools" option, or at least there used to be. But it depends on your environment I think. Try asking in #juju.17:33
TJ-ServantGrunt: have you been following https://maas.ubuntu.com/docs/juju-quick-start.html17:33
=== cpaelzer_ is now known as cpaelzer_afk
=== Piper-Off is now known as Monthrect
swat30hallyn, you around?17:51
swat30I'm running into an issue migrating VMs from P->T. should have been fixed by https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/137461217:53
ubottuLaunchpad bug 1374612 in qemu (Ubuntu Trusty) "[FFE] add pc-1.0-precise machine type" [High,Fix released]17:53
swat30seems that I have two pc-1.0-qemu-kvm machine types: http://pastebin.com/StVfrj9F17:54
swat30and here's the exact error I'm seeing: http://pastebin.com/YvCsY4YW17:55
swat30current machine type on precise is pc-1.0-qemu-kvm18:09
=== lifeless_ is now known as lifeless
hallynswat30: hm18:14
hallynswat30: can you pb the full vm xml?18:15
swat30sure, mind if I DM ?18:15
=== realcliluw is now known as cliluw
hallynswat30: you can try, not sure how well my end will take it18:17
swat30just meant the link18:17
=== Chrisfu- is now known as Chrisfu
=== funkyHat_ is now known as funkyHat
=== spicypixel_ is now known as spicypixel
=== stevenroose|BNC is now known as stevenroose
=== dasjoe_ is now known as dasjoe
=== Exagone314 is now known as Exagone313
=== med_ is now known as Guest65103
=== fidothe_ is now known as fidothe
=== marlinc_ is now known as marlinc
=== Azelphur_ is now known as Azelphur
ServantGruntYes TJ- I've been following the guide18:42
ServantGruntAnd in the guide it makes it easy, but if I follow the commands execution as the guide does, I get those errors, solving nothing18:42
ServantGruntrbasak I've tried using that option but I couldn't solve anything either.18:43
sarnoldServantGrunt: do you have firewall rules that might prevent communication with canonical servers? iirc the bootstrapping process pulls simplestreams data from canonical to describe the available images, juju tools, etc. and uploads those into your cloud's storage services thingy.. not sure how it works when using juju to bootstrap the cloud itself, but presumably maas provides the storage..18:46
=== jelly-home is now known as jelly
=== Lcawte|Away is now known as Lcawte
=== cpaelzer_afk is now known as cpaelzer_
ServantGruntsarnold I'm pretty sure no firewall is blocking comunications between my server and canonical19:43
=== tomaw is now known as 02HAAAAAD
=== 02HAAAAAD is now known as tomaw
beisnercoreycb`  o/  - ok, pushed  oslo.messaging 1.4.1-0ubuntu1.2~cloud1 package from juju-staging to juno-proposed in the cloud archive.20:12
coreycb`beisner, thanks20:12
beisnercoreycb`, yw, thx sir20:13
=== bekks_ is now known as bekks
=== Monthrect is now known as Piper-Off
Valduarehmm, I got this kingston ssd here that I cant write to23:54
Valduarecan read the files off it just fine,23:54
=== Guest77896 is now known as devil_
bekkswhich filesystem are you using?23:54
Valduaretried dd it, no effect after dd finishes the partitions show right up23:54
Valduareit has ext4 on it23:55
bekksBut you arent try to use dd while the filesystem is mounted, are you?23:55
bekks*trying23:55
Valduarenope23:56
sarnoldare there any errors in dmesg?23:56
Valduarejust poped the drive into a workstation that dualboots ubuntu and windows, tried formating it in both23:56
Valduarethe filesystem just comes right back each time23:56
bekksHow do you see that it is coming back?23:57
Valduarels23:57
bekksls on what?23:58
Valduarelol23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!