| === shoutme is now known as hallyn | ||
| === devil is now known as Guest83087 | ||
| === Guest83087 is now known as devil__ | ||
| === DonRichie2 is now known as DonRichie | ||
| === profall_ is now known as profall | ||
| === thumper-dogwalk is now known as thumper | ||
| === daxcat is now known as dax | ||
| hallyn | grr, smb, my libvirt pkg is already out of date. when did you push -1ubuntu5! | 01:31 |
|---|---|---|
| hallyn | s'ok i've got plenty of time while these tests run to rebase :) | 01:33 |
| hallyn | smb: do you have a github account? | 01:36 |
| === devil is now known as Guest51142 | ||
| designbybeck | I have a 14.04 server, without FTP or SMB installed. Is there another way to get a file up to it from my desktop? | 02:56 |
| sarnold | scp | 02:57 |
| patdk-lap | sftp/scp/rsync/nc/zm/... | 03:05 |
| patdk-lap | xmodem/zmodem used to be a standard way back in the day :) | 03:05 |
| sarnold | :D | 03:07 |
| designbybeck | ok sarnold let me try that | 03:18 |
| designbybeck | and that would be going from one Ubuntu desktop to the server sarnold ? | 03:19 |
| sarnold | designbybeck: from anything that can do scp to anything that can do scp :) | 03:21 |
| designbybeck | sarnold, Ok, I'm looking at a tut rightnow...seems easy enough! ;) thanks | 03:21 |
| === Deliants is now known as Deliant | ||
| sarnold | designbybeck: it's about a thousand times better than ftp | 03:24 |
| designbybeck | ok so sarnold .. on my local machine 14.04, I type: scp filename.mp3 username@domain | 03:26 |
| designbybeck | ? | 03:26 |
| designbybeck | sarnold, I'm looking at this https://help.ubuntu.com/community/SSH/TransferFiles | 03:27 |
| sarnold | designbybeck: don't forget the : on the remote host | 03:28 |
| designbybeck | hmm, looked like it was going to work...asked for both passwords but then said permission denied | 03:28 |
| designbybeck | sarnold, and I'm sudo/root on both | 03:28 |
| sarnold | designbybeck: scp filename.mp3 user@host: | 03:28 |
| designbybeck | yes I corrected that sarnold | 03:29 |
| sarnold | "both passwords", that's.. potentially surprising. which passwords? | 03:29 |
| sarnold | I'd expect just one, the user@remotehost -- but if you're going to scp/ssh often, it's worth setting up ssh keys | 03:29 |
| designbybeck | sarnold, ahh.. I needed "" around it | 03:30 |
| designbybeck | looks like it is uploading now | 03:30 |
| designbybeck | ....never new scp was that easy! HA! | 03:30 |
| designbybeck | I new people used it for windows to linux and such | 03:30 |
| sarnold | :) | 03:31 |
| designbybeck | ..knew | 03:31 |
| designbybeck | ...I'm about 4 sheets into the wind ;) Had to make a podcast for an assignment, so I did it on Open Source | 03:32 |
| sarnold | hah, you're doing pretty well for being four drinks in :) | 03:33 |
| designbybeck | that's what I'm thinking sarnold!! I hate my voice, but I was on a roll, and had my headset audio sounding great (very clean) so editing in Audacity was going reat | 03:34 |
| designbybeck | great... I just had to loosen up to talk and hear myself! | 03:34 |
| === tsimonq2alt is now known as tsimonq2- | ||
| designbybeck | sarnold, can I send you a PM link? | 03:46 |
| sarnold | sure | 03:50 |
| === tsimonq2- is now known as tsimonq2 | ||
| showaz | https://download.samba.org/pub/samba/rc/samba-4.4.0rc4.WHATSNEW.txt | 04:53 |
| === med_ is now known as Guest93664 | ||
| === mfisch is now known as Guest38484 | ||
| nezZario | Hey guys, I've had a server completely crap all over itself because the /boot partition got full and then I believe I made it worse. I'm not sure what really happened or what led up to these events; it's sort of a neglected server that I didn't install and was forced onto me. It's provided by a company so we can access resources from within their network | 07:34 |
| nezZario | So anyway, check this out: http://paste.ee/p/FhFAl | 07:37 |
| nezZario | Hmm, I found a reccomendation to just touch that file and let the package manager do whatever. But now I'm a little concerned that I don't even have a kernel .. or rather, the kernel that it is going to try to boot is either missing or a blank file... | 07:42 |
| smb | hallyn, I pushed just about when I realized you were starting to fiddling with it while never given any feedback about the pending change I had and had been asking about. So I decided if there is someone stepping on someone else's toe, its me this time. ;-P | 08:34 |
| smb | hallyn, and no github accound | 08:35 |
| smb | account even | 08:35 |
| hallyn | are you getting snarky with me? | 08:36 |
| hallyn | no worries, see the libvirt-maintainers email :) | 08:36 |
| hallyn | no github account needed | 08:36 |
| smb | hallyn, not with you in particular. That is my morning personality in general. :) | 08:37 |
| huwjr | hia, all my latest ubuntu server builds are failing to rotate logs? has anyone else had this? | 08:57 |
| huwjr | anyoneeeeee? | 09:06 |
| huwjr | logrotate looks identical, as do permissions on the directories | 09:07 |
| rbasak | We've had a newer logrotate in Xenial. | 09:07 |
| rbasak | Is there a bug somewhere? | 09:07 |
| huwjr | these are trusty hosts | 09:07 |
| rbasak | Ah, OK. | 09:07 |
| rbasak | logrotate has never been updated in Trusty since release. | 09:07 |
| huwjr | 14.04.4 LTS (on 6 hosts) is fooked but 14.04.3 is fine (on many) | 09:08 |
| rbasak | So if there is a regression, it must be in some other package. | 09:08 |
| huwjr | they all are configured with ansible using the same configuration(s) | 09:08 |
| rbasak | See cron output perhaps? | 09:08 |
| huwjr | all say permission denied | 09:08 |
| rbasak | Or on a test server advance the date and run the cron job manually. | 09:08 |
| rbasak | Permission denied on what? | 09:08 |
| huwjr | but the perms are identical and so are the configs. | 09:08 |
| huwjr | all the lgos | 09:08 |
| huwjr | all the logs* | 09:08 |
| huwjr | error: failed to rename /var/log/syslog to /var/log/syslog.1: Permission denied | 09:09 |
| huwjr | error: failed to rename /var/log/upstart/console-setup.log to /var/log/upstart/console-setup.log.1: Permission denied | 09:09 |
| huwjr | etc | 09:09 |
| rbasak | Check kern.log for Apparmor denials? | 09:09 |
| rbasak | Is logrotate running as the same user? | 09:09 |
| rbasak | Are the ownership and permissions of all the directories leading up to syslog also the same? | 09:10 |
| huwjr | ive checked recursively from / | 09:10 |
| huwjr | comparing hosts user,group and mod | 09:10 |
| rbasak | How are you installing 14.04.4? | 09:11 |
| huwjr | preseed | 09:11 |
| huwjr | one sec - what should i be lookin’ for in terms of apparmor? | 09:11 |
| rbasak | This sort of thing: Mar 7 09:05:50 mal kernel: [849976.818097] audit: type=1400 audit(1457341550.955:64): apparmor="DENIED" operation="open" profile="/usr/bin/evince" name="/usr/local/lib/libXrandr.so" pid=25082 comm="evince" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 | 09:12 |
| rbasak | In kern.log. | 09:12 |
| huwjr | checkin' | 09:12 |
| huwjr | (thanks btw) | 09:12 |
| rbasak | Seems unlikely that logrotate would be denied by apparmor, but it's a standard thing to check for any permission denied error on a system with selinux or apparmor. | 09:12 |
| huwjr | nothing since set up time | 09:13 |
| huwjr | in kern.log for apparmor | 09:13 |
| rbasak | I can't think of anything else quick to check, sorry. | 09:14 |
| huwjr | np - if you could let me know if you think of anything it’d be appreciated | 09:14 |
| huwjr | *sighs* :( | 09:14 |
| rbasak | If you can reproduce it on a simple 14.04.4 installation (say without preseed, or a cloud image), then it's a regression in Ubuntu and I'd be happy to dive into it. | 09:14 |
| rbasak | Or, you could try running the cron job by hand and figuring out what the difference is in your deployment. | 09:14 |
| huwjr | will spend a bit more time looking into it before reproducing | 09:14 |
| rbasak | Advancing the date on a test server would probably be useful, as would strace. | 09:15 |
| huwjr | advance the time then run manually you mean? | 09:15 |
| rbasak | Yes. You can use sudo to run as the user the cron job would run as. | 09:15 |
| rbasak | Looks like root. | 09:16 |
| rbasak | Something like "sudo -i sh /etc/cron.daily/logrotate" | 09:16 |
| rbasak | Not exactly the same environment but close. | 09:16 |
| huwjr | hmm | 09:18 |
| huwjr | but i diffed logrotates and they’re identical | 09:18 |
| rbasak | Sure, but some underlying behaviour could be different. | 09:18 |
| huwjr | ok | 09:18 |
| huwjr | :) | 09:18 |
| huwjr | i won’t actually need to advance the time/date as they haven’t been rotated (ever) | 09:19 |
| huwjr | i don’t think? | 09:19 |
| rbasak | Looks like logrotate keeps something in /var/lib/logrotate to track what it thinks it's already rotated. | 09:20 |
| rbasak | So best to advance the date to be sure it isn't rotating because the date hasn't moved forward. | 09:20 |
| huwjr | errrm | 09:30 |
| huwjr | switching euid to 109 and egid to 4 | 09:31 |
| huwjr | woops | 09:31 |
| huwjr | so upstart is trying to rotate with: switching euid to 109 and egid to 4 | 09:32 |
| huwjr | 109 doesn’t exist at all | 09:33 |
| huwjr | and group 4 (adm syslog) only has read on all files in the upstart dir | 09:33 |
| huwjr | so where’s it getting 109 from? lol | 09:40 |
| coreycb | jamespage, gnuoy: glance b3 will have the glare artficats api, I've added a init scripts for it | 14:00 |
| coreycb | artifacts | 14:01 |
| hariom | Hi, I want to install a python package in Ubuntu 14.04 but I want to use python3 version (python2 is default in Ubuntu 14.04 and python 3 alternate available) | 14:08 |
| lordievader | hariom: Do you have pip installed? | 14:10 |
| ogra_ | python3 is part of ubuntu.minimal, it should efinitely be installed | 14:11 |
| ogra_ | *ubuntu-minimal | 14:11 |
| hariom | lordievader: yea | 14:13 |
| lordievader | Install your package through there: sudo pip3 install <pkg-name> | 14:13 |
| Pici | don | 14:13 |
| Pici | don't use sudo and pip. Use a virtualenv. | 14:13 |
| hariom | lordievader: that package is not available in pypi | 14:13 |
| hariom | python-librdf | 14:14 |
| RoyK | a lot of python packages are also available from apt | 14:14 |
| hariom | RoyK: yea, and I want to ensure that apt picks up python3 instead of python2 | 14:14 |
| RoyK | hariom: apt-get install python3-pypdf2 | 14:15 |
| RoyK | (that's on debian jessie - probably the same package in recent ubuntu) | 14:15 |
| ogra_ | recent :) | 14:16 |
| ogra_ | not in 14.04 | 14:16 |
| hariom | RoyK: The problem is python3-librdf is not available. Its just python-librdf | 14:17 |
| RoyK | guess 14.04 is too old, then | 14:17 |
| RoyK | ;) | 14:17 |
| RoyK | well, install from pip | 14:17 |
| jamespage | cpaelzer, https://launchpad.net/ubuntu/+source/openvswitch/2.5.0-0ubuntu1 | 14:20 |
| RoyK | huwjr: btw, python3-pypdf2 is in 15.10, so 16.04 will be your friend ;) | 14:24 |
| === Monthrect is now known as Piper-Off | ||
| Deeps | how terrible an idea is it to run non-lts editions of ubuntu server? | 14:26 |
| rbasak | I think it's fine providing that you have deployment tests and you're prepared to move up on a six monthly cadence, but others disagree. | 14:27 |
| huwjr | depends if you stay on top of the updates | 14:27 |
| huwjr | it’s not necessarily the OS that matters though, it’s more about a lack of regression testing | 14:27 |
| huwjr | (on packages) | 14:27 |
| Deeps | i have 0 deployment tests, this isn't enterprise prod, this is hometerprise prod | 14:27 |
| huwjr | you wouldn’t want to run a dev version of a package on a production server (would you?) | 14:28 |
| huwjr | are you desperate for something in an alpha/beta? | 14:28 |
| huwjr | if not, why bother | 14:28 |
| rbasak | There is certainly a benefit of using the LTS: it's a major synchronisation point for other users, so others are more likely to have found and flushed out bugs before you do. This is a bigger deal for an LTS because it's a bigger synchronisation point. | 14:28 |
| Deeps | well the primary motivation i had for switching to ubuntu from debian was newer package versions, i just saw an example of a package in debian stable that isn't in ubuntu lts above | 14:29 |
| Deeps | which then made me think i should consider non-lts builds, and thus posed the question | 14:29 |
| rbasak | That'll happen on a regular basis, since Debian and Ubuntu releases leapfrog each other. | 14:29 |
| patdk-wk | that is, debian actually released a *stable* version after ubuntus last lts | 14:29 |
| patdk-wk | doesn't happen often | 14:29 |
| huwjr | you can always get solid, tested backports Deeps | 14:35 |
| huwjr | or compile yourself if necessary | 14:36 |
| huwjr | either way none of it is truely tested/stable. | 14:36 |
| === Piper-Off is now known as Monthrect | ||
| cpaelzer | jamespage: 2.5 final - nice; I've got an s390 intercept but I should be able to hit openvswitch-dpdk again somewhen next week | 14:43 |
| coreycb | ddellav, jamespage: looks like we're going to need a new openstack-pkg-tools before syncing mistral | 14:49 |
| === Pici- is now known as Pici | ||
| fellayaboy | hi i installed ubuntu server 15.10 with LVM (my mistake) and cant figure out how to expend it to use up the remaining free space | 15:24 |
| fellayaboy | i just want to resize the partition to use up all the free space thats remaining | 15:24 |
| RoyK | the partition or the pv or the lv? | 15:26 |
| fellayaboy | oh man i have no clue | 15:26 |
| fellayaboy | lvm is not my thing | 15:26 |
| RoyK | I use it all the time :) | 15:26 |
| RoyK | pastebin lsblk and vgs output, please | 15:26 |
| fellayaboy | im a totally new to it...it feels like a pain but i cant knock it if i havent tried it | 15:26 |
| RoyK | and lvs | 15:26 |
| fellayaboy | so lsblk, vgsoutput and lvs | 15:27 |
| RoyK | lsblk, lvs, vgs and perhaps pvs | 15:27 |
| fellayaboy | ok let me do the first 3 | 15:28 |
| RoyK | pvs too, I think, would be good | 15:28 |
| fellayaboy | http://paste.ubuntu.com/15341671/ | 15:29 |
| fellayaboy | aw crap that didnt go well hold on | 15:30 |
| fellayaboy | RoyK, here we are http://paste.ubuntu.com/15341690/ | 15:33 |
| stickystyle | I'm just starting to play around with lxd and I'm having issues figuring out how to add a pre-start hook to a container (namely one to inject my squid-deb-proxy config). With plain lxc there were config files to set lxc.hook.pre-start, where do I do it in lxd? | 15:34 |
| RoyK | fellayaboy: ok - looks like your sda5 partition isn't filling up the disk - use parted (or gparted) to extend it - gparted would be easier if you're not familiar with parted, although it'll require some x11 libs (just use it with x11 forward ofver ssh) | 15:36 |
| fellayaboy | gparted from what i read you cant use gparted, also it was locked ..the extended parttion and the lvm partition...i unlocked it but when i chose to resize it it didnt see any size larger...ive read gparted doesnt work with lvm | 15:37 |
| fellayaboy | RoyK, yeah maybe...lets see | 15:38 |
| RoyK | fellayaboy: first resize the partition, then run pvresize to resize the pv, then use lvextend to extend the lv, then resize2fs (if this is ext4) | 15:39 |
| fellayaboy | it is ext4 | 15:39 |
| RoyK | should work well - you may need a reboot after resizing the partition, though | 15:39 |
| fellayaboy | would i have to umount though. i mean if i did that i wouldnt be able to run commands | 15:40 |
| RoyK | resize should work without umouting it, but the result won't be useful until a reboot | 15:40 |
| fellayaboy | okay would you happen to know a good site that explains how to perform the steps being that i dont know any of the commands | 15:41 |
| fellayaboy | thanks for all your help RoyK | 15:42 |
| RoyK | fellayaboy: lvm is rather neat when you get used to it | 15:45 |
| fellayaboy | i guess so right? RoyK i want to try it out, doesnt seem so bad just have to learn it | 15:46 |
| fellayaboy | ima see if i can use the system-config-lvm gui tool for now | 15:46 |
| fellayaboy | is lvm used popularly with SAN/NAS? | 15:47 |
| RoyK | or you can use the commandline and actually learn something ;) | 15:47 |
| fellayaboy | lol i have to figure out the command | 15:47 |
| RoyK | fellayaboy: rhel/centos always uses lvm for everything, which is good | 15:47 |
| fellayaboy | e2fsck ? lvreduct? | 15:47 |
| fellayaboy | oh okay cool good to know, i didnt know that | 15:47 |
| fellayaboy | if your lvm is encrypted is it possible to do all this modifications? | 15:48 |
| jamespage | coreycb, I'm pretty optimistic we'll get django-compressor to 2.0 either this week or early next week | 15:48 |
| coreycb | jamespage, nice | 15:48 |
| RoyK | well, the filesystem sits on top of a logical volume, lv, and the lv sits in a volume group, vg, and the vg sits on top of one or more physical volumes, pv, and the pv sits on top of either a disk or a partition | 15:48 |
| fellayaboy | usually when you install ubuntu you have the option to encrypt. if you encrypt could you modify and such? | 15:48 |
| RoyK | I'm quite sure encryption doesn't matter in this equation | 15:49 |
| fellayaboy | ok cool | 15:49 |
| fellayaboy | i see so lv lives inside the vg, lg sits ontop of the phsycial volumes, and pv sits on ontop of disk / partition cool | 15:51 |
| fellayaboy | its likea raid | 15:51 |
| coreycb | jamespage, ddellav: everything is uploaded for b3 except openstack-trove, swift, sahara, mistral, murano-dashboard. I'm going to start poking at stuck in proposed and cloud archive issues. and the horizon staging issue. | 15:53 |
| sdeziel | fellayaboy: PVs are providing the actual storage space. VGs aggregate PVs and can be sliced up into multiple LVs that you can then use to put a fs on | 15:54 |
| coreycb | jamespage, ddellav: note: neutron-vpnaas is deferred to rc1 due to an upstream issue with the released tar file | 15:54 |
| jamespage | coreycb, ok | 15:54 |
| jamespage | is neutron still stuck on -lib | 15:54 |
| jamespage | ? | 15:54 |
| fellayaboy | cool sounds awesome...so i guess in my scenario i would have to first increase the size of the volume group? and then increate the logical volume? | 15:55 |
| coreycb | jamespage, looks like it, I'll see if I can move that along | 15:55 |
| sdeziel | fellayaboy: before growing your VG, you need more PV space | 15:56 |
| jamespage | coreycb, awesome - you might be able to such aodhclient from debian btw | 15:56 |
| sdeziel | fellayaboy: and since your PV is taking the full partition sda5, you have to make sda5 bigger | 15:56 |
| jamespage | if you've not done so already | 15:56 |
| coreycb | jamespage, it's waiting in the new queue, bug 1552415 needs some action | 15:57 |
| ubottu | bug 1552415 in Ubuntu "[FFE] Please sync python-aodhclient (0.1.0-1) from Debian (experimental)" [High,New] https://launchpad.net/bugs/1552415 | 15:57 |
| sdeziel | fellayaboy: an alternative that would be less clean would be to put another PV on a freshly created sda6. Then you could vgextent your VG to have it use the 2 PVs (the one residing on sda5 and the other on sda6) | 15:57 |
| coreycb | jamespage, bug title updated | 15:58 |
| fellayaboy | hmm sounds good sdeziel but i would want to just increase the sda5 if it'll be easier..if i have 2 pv then i could configure them to look like 1 LV | 15:58 |
| fellayaboy | is that correct? | 15:58 |
| sdeziel | fellayaboy: since your sda5 part is the last one (nothing but free space at the end), you are better off growing it then it will be a matter of pvresizing it | 15:58 |
| coreycb | jamespage, hmm looks like it's missing from the new queue, I'll re-upload | 15:59 |
| sdeziel | fellayaboy: a given LV can span across many PVs as long as they all belong to a single VG. | 15:59 |
| fellayaboy | okay sdeziel i guess im seeing the bigger picture here then | 16:00 |
| coreycb | jamespage, neutron-lib is missing from the xenial new queue too. they were both there the other day. | 16:04 |
| jamespage | coreycb, try unapproved | 16:04 |
| coreycb | jamespage, nothing there either | 16:05 |
| RoyK | fellayaboy: when you resize the pv, the vg grows, since the vg consists of PVs | 16:14 |
| fellayaboy | how do i increase the pv | 16:15 |
| RoyK | pvresize | 16:15 |
| RoyK | but first the partition needs to be resized | 16:16 |
| fellayaboy | i went int parted and rm 5 | 16:16 |
| RoyK | and recreated it? | 16:16 |
| fellayaboy | im in the process of that | 16:16 |
| fellayaboy | did i lose all my data by anychance? | 16:16 |
| RoyK | better do that before you reboot :P | 16:16 |
| fellayaboy | so if i reboot then it'll apply and ill lose my data correct? | 16:17 |
| === JanC_ is now known as JanC | ||
| RoyK | fellayaboy: before you do such things, always make sure you have a good backup - things may break | 16:17 |
| fellayaboy | aw snaps | 16:18 |
| fellayaboy | well its obvious | 16:18 |
| RoyK | fellayaboy: but I've removed/recreated partitions before without issues - should work - just don't blame me if you lose your data if you don't have a backup ;) | 16:18 |
| RoyK | come to think of it - another way would be to create a new partition, put a pv on it and add that to the vg | 16:19 |
| RoyK | but then - if you've already removed sda5, it's a bit late for that | 16:19 |
| fellayaboy | shoot | 16:19 |
| RoyK | have you recreated sda5 yet? or have you saved your settings in parted? | 16:20 |
| fellayaboy | i hope i didnt save it..i did rm 5 and i had to cancel out of parted | 16:21 |
| fellayaboy | when i do print i dont see the 5 partition | 16:21 |
| RoyK | ok - better recreate it, then | 16:21 |
| RoyK | should work | 16:21 |
| fellayaboy | how do i do that | 16:21 |
| RoyK | create a new partition starting at the same point as the old one | 16:22 |
| RoyK | should be default if you create a new one | 16:22 |
| fellayaboy | when i do that it asks me what file system i want to use | 16:23 |
| fellayaboy | should i use ext4 since thats what i used before? | 16:23 |
| RoyK | just don't do anything stupid as in making a new filesystem | 16:23 |
| RoyK | perhaps better use fdisk | 16:23 |
| RoyK | if you create a new fs, you *will* lose your data | 16:24 |
| sdeziel | mkpart asks for a FS but doesn't create one | 16:24 |
| RoyK | ah | 16:24 |
| RoyK | ok | 16:24 |
| RoyK | sdeziel: just flags partition type 0x83 or something? | 16:24 |
| sdeziel | it just sets the partition type accordingly | 16:24 |
| sdeziel | yeah | 16:24 |
| fellayaboy | okay so file system type? ext4 is okay...its asking me "start?" | 16:25 |
| RoyK | should be ok, then, fellayaboy | 16:25 |
| fellayaboy | shall i say yes | 16:25 |
| sdeziel | "yes" isn't a good start offset ;) | 16:25 |
| fellayaboy | lol | 16:26 |
| fellayaboy | ok give me one second | 16:26 |
| fellayaboy | or 2 minutes really | 16:26 |
| RoyK | good luck :) | 16:26 |
| fellayaboy | screw it im backing things up lol | 16:27 |
| fellayaboy | while i have the chance | 16:27 |
| RoyK | good | 16:27 |
| RoyK | better use something like crashplan - keep things backed up | 16:27 |
| fellayaboy | i got 4 gigs let that fnish il be back | 16:28 |
| fellayaboy | crashplan? | 16:28 |
| RoyK | dot com | 16:28 |
| fellayaboy | let me go see | 16:28 |
| RoyK | perhaps not now - just backup things locally for now | 16:28 |
| fellayaboy | i am | 16:28 |
| fellayaboy | so whhaaa... crashplan lets you back all unlimited data for free with no account? | 16:29 |
| RoyK | nah - $5 a month or so | 16:29 |
| RoyK | but yes, unlimited | 16:29 |
| RoyK | and it works well - given you turn off that stupid dedup setting | 16:30 |
| fellayaboy | lol not bad | 16:30 |
| RoyK | I have 5,5TiB on my account there ;) | 16:31 |
| fellayaboy | wow | 16:31 |
| fellayaboy | lol | 16:31 |
| fellayaboy | thats alot of data.. | 16:31 |
| fellayaboy | way better than dropbox i would say | 16:31 |
| RoyK | well, a friend of mine has 15TiB space on her home server - she's a film nerd of sorts... | 16:32 |
| fellayaboy | wow never even herd of one person with 15tib | 16:32 |
| RoyK | fellayaboy: heh - I've been working with storage for a while ;) | 16:32 |
| fellayaboy | which reminds me something. if you try to add more physical disks to a raid would you have to recreate the whole raid thus losing all your data? | 16:33 |
| fellayaboy | im only starting to know the importance of storage..bought myself a server just for it | 16:33 |
| RoyK | no, you just add a disk and --grow it | 16:33 |
| fellayaboy | a rack server | 16:33 |
| RoyK | mdraid is *very* flexible | 16:33 |
| fellayaboy | cool ill jump that bridge when i get to it | 16:33 |
| fellayaboy | md? | 16:33 |
| fellayaboy | ok perfect | 16:34 |
| fellayaboy | i backed up my data | 16:34 |
| RoyK | linux' software raid | 16:34 |
| fellayaboy | cool | 16:35 |
| RoyK | ok - did you create a new partition as well? | 16:35 |
| fellayaboy | so now parted says "start?", | 16:35 |
| fellayaboy | its looking for anumber i believe | 16:36 |
| RoyK | probably the start block - I'm not quite used to parted - sdeziel? anyone? | 16:37 |
| sdeziel | yes, outta be the start block/offset as the original partition | 16:37 |
| fellayaboy | i didnt record that info | 16:38 |
| sdeziel | http://pastebin.com/mgPtySMX | 16:38 |
| fellayaboy | ha what i silly chimp i am | 16:39 |
| fellayaboy | thank god i pastebinit! | 16:39 |
| sdeziel | yeah, that's not the kind of info you want to lose after rm'ing a part | 16:40 |
| RoyK | nothing there about sector numbers, though | 16:40 |
| sdeziel | parted accepts offsets in various different units | 16:40 |
| sdeziel | could be sectors, MB, MiB, etc | 16:41 |
| sdeziel | or % | 16:41 |
| RoyK | sdeziel: if you choose to create a new, say #5, would it start at the first available sector? | 16:41 |
| * RoyK is a bit old-school and still uses fdisk for small things | 16:41 | |
| sdeziel | RoyK: in my experience, parted doesn't guess, it just asks and then will round your input | 16:42 |
| sdeziel | RoyK: that's why I use MiB as unit because those align well | 16:42 |
| RoyK | sdeziel: so it won't overlap? | 16:44 |
| RoyK | I don't see the reason for even asking for a start sector unless there's default "first free" | 16:44 |
| sdeziel | RoyK: the rounding is for performance reasons. I don't know if parted would prevent your from overlapping 2 parts (probably) | 16:45 |
| fellayaboy | what does an extended partition do..whats it for | 16:46 |
| sdeziel | it's a legacy from the MSDOS era | 16:46 |
| sdeziel | it is a way to overcome the limit of 4 primary partitions | 16:46 |
| sceiron | Can someone elaborate on what is necessary to create a channel on an irc server? I just created a ircd server that runs on us | 16:46 |
| sdeziel | so you put an extended partition then in that extended part, you can create many logical part. This pushed the total amount of part to 26 IIRC | 16:47 |
| sceiron | when i try to register a channel, it does not work | 16:47 |
| fellayaboy | okay cool that makes sense sdeziel | 16:48 |
| sdeziel | fellayaboy: and 26 happens to cover A to Z for drive mapping | 16:49 |
| RoyK | sdeziel: ironically, since DOS/Windoze still reserves A: and B: for floppies ;) | 16:54 |
| fellayaboy | lol. i should've used gpt | 16:54 |
| fellayaboy | and uefi | 16:54 |
| RoyK | fellayaboy: did you create a new partition? | 16:55 |
| RoyK | fellayaboy: if not, just use fdisk, it may be easier | 16:55 |
| RoyK | fdisk - n - l - enterenterenter | 16:55 |
| fellayaboy | well | 16:55 |
| fellayaboy | we started back at sqaure one | 16:56 |
| fellayaboy | square one | 16:56 |
| fellayaboy | me and sdeziel couldnt expand it beyond..he said the extended partition was to blame | 16:56 |
| sdeziel | RoyK: so I assisted fellayaboy to resize sda5 but forgot that sda2 had to be resized first | 16:56 |
| sdeziel | fellayaboy: this HDD being bigger than what your partitions cover smells the VM disk resize, am I right? | 16:57 |
| fellayaboy | im not so sure | 16:57 |
| fellayaboy | i resized it in vmware esxi | 16:58 |
| sdeziel | there you go | 16:58 |
| fellayaboy | that could be the problem? | 16:58 |
| fellayaboy | yeah its a vm living in vmware esxi | 16:58 |
| fellayaboy | inside the datastore | 16:58 |
| sdeziel | fellayaboy: not a problem but an explanation to why you have a 400G drive with partitions covering only ~160G | 16:59 |
| fellayaboy | well i needed to expand my data...when i created the vm i started it with 150gb...now i wanted to increase it to 400gb.. | 17:00 |
| sdeziel | I never understood why the Ubuntu installer created an extended partition to then put "/" inside a logical partition. This makes it harder to resize the whole thing later one... | 17:00 |
| fellayaboy | thats all i realLY KNOW | 17:00 |
| fellayaboy | i feel like i should just blow this whole thing...i dont even remember i configured vmware esxi server as a bios or uefi | 17:02 |
| fellayaboy | make it all uefi gpt | 17:02 |
| RoyK | fellayaboy: got a snapshot, perhaps? | 17:09 |
| fellayaboy | thats true | 17:10 |
| RoyK | fellayaboy: next time you need to extend the vg/lv, just add another drive and add it to the vg - it's easier - just don't partition that drive, just add it as a pv - I always do that in vcenter | 17:10 |
| fellayaboy | yeah i have to find me a tutorial that breaks all this down | 17:11 |
| fellayaboy | get the whole birds eye view of lvm and then tinker with it all | 17:11 |
| RoyK | fellayaboy: just add a disk, vgextend /dev/newdisk, lvextend ... | 17:11 |
| RoyK | fellayaboy: it's not hard ;) | 17:12 |
| fellayaboy | lol | 17:12 |
| fellayaboy | i really wanna learn instead of using gparted all the time | 17:12 |
| fellayaboy | this seems cool | 17:12 |
| RoyK | :) | 17:12 |
| fellayaboy | thanks for that info RoyK now i just gotta figure out how to extend this msdos partition to use up the freespace | 17:12 |
| sdeziel | RoyK: TIL: parted "resizepart". No need to do the rm + mkpart dance :) | 18:25 |
| ttpearso | Testing out openstack-single on 15.10, had it running, rebooted, now openstack-status errors out, any pointers, suggestions? | 18:48 |
| === esde_ is now known as esde | ||
| sarnold | ttpearso: does it use juju to fire up everything? juju status may be a good starting point | 19:13 |
| ttpearso | juju status was hanging | 19:18 |
| ttpearso | I just wiped it, starting again | 19:18 |
| ttpearso | debugging a test env just not worth the time, was hoping it was simple/common | 19:19 |
| xmj | moin, what's the EOL for 12.04 server? | 19:22 |
| coreycb | ddellav, swift 2.6.0 uploaded, thanks for the updates | 19:23 |
| RoyK | xmj: 17.04 | 19:23 |
| ddellav | coreycb ack | 19:23 |
| xmj | RoyK: 2016? | 19:23 |
| genii | !precise | 19:23 |
| ubottu | Ubuntu 12.04 LTS (Precise Pangolin) is a currently-supported !LTS release of Ubuntu. Download http://releases.ubuntu.com/12.04/ - Release Info: http://www.ubuntu.com/getubuntu/releasenotes/1204 | 19:23 |
| RoyK | xmj: 5y on lts | 19:23 |
| xmj | thanks | 19:24 |
| === funkyHat_ is now known as funkyHat | ||
| ddellav | coreycb openstack-pkg-tools is ready for review: lp:~ddellav/ubuntu/+source/openstack-pkg-tools my changes are in ubuntu/mitaka | 19:39 |
| hallyn | rharper: know anything about qemu blockcommit stuff? bug 1554031, wondering whether qemu is wrong for demanding write access to lower layers? | 19:50 |
| ubottu | bug 1554031 in qemu (Ubuntu) "error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied" [High,Triaged] https://launchpad.net/bugs/1554031 | 19:50 |
| hallyn | (easily reproduced using any uvt-kvm -created vm) | 19:51 |
| coreycb | ddellav, just a couple of things, can you run update-maintainer and also the merge of d/changelog dropped a bunch of old entries from ubuntu | 19:52 |
| ddellav | coreycb ok | 19:53 |
| ddellav | coreycb fixed. reclone | 19:55 |
| coreycb | ddellav, getting there, still missing old merge changelogs | 19:58 |
| ddellav | coreycb hmm, the only changelogs i see are the ones from james for 37ubuntu1-3 | 19:59 |
| ddellav | coreycb oop nevermind, there they are | 20:00 |
| ddellav | i scrolled too fast | 20:00 |
| coreycb | ddellav, ok | 20:00 |
| ddellav | coreycb i need to use vimdiff more often | 20:02 |
| coreycb | ddellav, that's what i use, seems to work well | 20:03 |
| ddellav | coreycb take 3, try now | 20:04 |
| coreycb | ddellav, looks good, thanks | 20:07 |
| runelind_q | I just installed a 16.04 development branch server instance, and it appears to have created lxcbr0 interface by default, is this expected behavior? If so, how can I disable it at install time? | 20:15 |
| nacc | runelind_q: did you happen to pick lxc or lxd to install? also, is there some issue with lxcbr0 being configured? | 20:17 |
| runelind_q | I did not pick that, only OpenSSH server | 20:17 |
| nacc | runelind_q: i believe ubuntu-server depends on lxd now (looking at `apt-cache` output | 20:19 |
| nacc | not sure if it did/didn't earlier | 20:19 |
| coreycb | jamespage, any objections to me uploading ddellav's new merge of openstack-pkg-tools? | 20:20 |
| sarnold | nacc: iirc lxd is intalled by default, and lxd creates the bridge by default.. | 20:20 |
| coreycb | jamespage, it all looks good just want to double check that it is a sane thing to upload at this point in the cycle. the sync of mistral needs it. | 20:20 |
| nacc | sarnold: agreed | 20:23 |
| runelind_q | hrm, well that's less than ideal. | 20:35 |
| sarnold | runelind_q: please do file bugs if you dislike it; I know a goal is for things on ubuntu to Just Work so it may not get very far, but still, if no one files bugs it just won't be visible | 20:36 |
| runelind_q | I'll probably just figure out how to disable the lxcbr0 interface. | 20:38 |
| sarnold | runelind_q: brctl something or toerh.. | 20:40 |
| runelind_q | guessing lxd will just recreate it | 20:41 |
| sarnold | ah, could be upgrades might.. | 20:42 |
| sdeziel | runelind_q: you can try to set USE_LXC_BRIDGE to false in /etc/default/lxc-net | 20:43 |
| hallyn | runelind_q: soon lxd will no longer depend on lxc-net and that won't happen by default. For now just do what sdeziel said, lxd will not recreat it. | 20:51 |
| runelind_q | that does seem to resolve the issue. | 20:52 |
| runelind_q | would rather have lxd be an install-time installation decision, but it is what it is I guess. | 20:53 |
| hallyn | this was never an issue until very recently when lxd was added to the server seed (quietly), causing all sorts of hillarity | 20:53 |
| runelind_q | is this a debian upstream thing, or a decision by Canonical? | 20:56 |
| hallyn | there is no debian upstream for lxd, and debian and ubuntu are not in sync (yet) for lxc. | 20:58 |
| hallyn | but again, by 16.04 release lxc-net will not be starting on your server images | 20:58 |
| hallyn | and lxd doesn't start - it's socket-activated | 20:58 |
| hallyn | so meh | 20:58 |
| hallyn | i personally think it's a good thing (just would've liked time for testing :) but of course i would :) | 20:59 |
| Froberg | in need of a lifeline.. I just set up a 6x4TB raid 5 array, installed webmin and installed transmission.. I set the server to reboot. After reboot I get login prompt, type password, and get sent back to login prompt. I can't SSH any more either.. nor is webmin interface working. | 21:04 |
| Froberg | I've never seen this before | 21:04 |
| Froberg | fortunately I still have the server connected with keyboard and monitor, so I can see that it IS there | 21:05 |
| Froberg | I just can't login | 21:05 |
| Froberg | ... for whatever reason | 21:05 |
| smoser | rharper, https://code.launchpad.net/~ubuntu-server-dev/ubuntu/+source/tgt/+git/tgt | 21:08 |
| rharper | smoser: thx! | 21:08 |
| ddellav | Froberg it goes without saying, but you're sure you're using the right password? And logging in as root I assume? | 21:09 |
| Froberg | yeah my during-install configured user | 21:10 |
| Froberg | it doesn't reject the password, just sends me back to the username prompt | 21:10 |
| Froberg | doesn't even display the "packages that can be updated" stuff | 21:10 |
| ddellav | are you talking a bout logging into webmin or loging into the server via the terminal? | 21:11 |
| ddellav | or ssh? | 21:11 |
| Froberg | terminal direct access | 21:11 |
| Froberg | ssh is fucked | 21:11 |
| Froberg | webmin too | 21:11 |
| Froberg | I only just installed this server yesterday | 21:11 |
| ddellav | ok, so when you type in your username and hit enter, it gives you a password prompt, if you type in the wrong password and hit enter it dumps you to the username prompt again without any messages | 21:12 |
| ddellav | i.e. wrong password | 21:12 |
| Froberg | I type username, password, get "welcome to ubuntu", see the link for documentation.. it pauses.. and clears terminal and shows me username prompt again | 21:12 |
| ddellav | ahhh ok, thats new information | 21:12 |
| Froberg | Apologies if I was unclear about that | 21:12 |
| ddellav | sounds like your pseudo terminal process is crashing | 21:12 |
| Froberg | is this a start over scenario? | 21:13 |
| Froberg | brb sorry | 21:13 |
| ddellav | Froberg it might not help, i did some quick googling and there are a few different possibilities. I would check here: http://lmgtfy.com/?q=terminal+process+crashing+after+login | 21:15 |
| ddellav | it depends a lot on what kind of hardware you have and if you installed the desktop software | 21:16 |
| ddellav | also, you may want to include webmin in that search since it only started happening after using webmin | 21:16 |
| ddellav | i dont personally use webmin so i don't know much about it | 21:16 |
| ddellav | but hopefully that has helped narrow down your issue. | 21:16 |
| ddellav | if i had to guess i'd say its a misconfiguration in your bashrc thats causing the terminal process to crash, unless you've installed unity or the other desktop software in which case it could be trying to start it and crashing. | 21:18 |
| Froberg | back, sorry, parental duties | 21:19 |
| ddellav | most of those solutions involve rebooting into recovery mode and/or passing kernel args during boot | 21:19 |
| ddellav | np | 21:19 |
| Froberg | I actually never even started webmin up | 21:19 |
| Froberg | I just apt-get installed it | 21:19 |
| Froberg | as I've used it before to manage samba shares, since it makes it a bit easier | 21:19 |
| ddellav | yea just the install process may install directives into the global bashrc that gets included everywhere | 21:19 |
| Froberg | no desktop installed | 21:20 |
| ddellav | or, to be more correct, the global bashrc is run first then your local one is included | 21:20 |
| Froberg | it's meant to be a headless server with no keyboard or monitor connected | 21:20 |
| ddellav | ok, that rules out the desktop stuff then | 21:20 |
| Aleksandar86 | i have new Ubuntu 14.04 with apache, and want give all privilege on /var/www/ what is best chmod for this? | 21:20 |
| ddellav | i've definitely had bad bashrcs make it difficult or impossible to login | 21:20 |
| Froberg | It's run for half a year or so with no problems, only had to restart because I was unaware of the 16TB raid5 limit | 21:21 |
| ddellav | Aleksandar86 All privileges is 777 but thats not usually best practice for a publicly accessible webroot. | 21:21 |
| Froberg | hm, guess if I restart I can just remount the array, it did finish syncing, right? | 21:21 |
| Aleksandar86 | i have problem with prestashop and 775 | 21:21 |
| Froberg | not like I set up anything too grand, might be simpler to just start over | 21:21 |
| Aleksandar86 | ddellav what chmod you using? | 21:22 |
| ddellav | you can try starting over but it sounds like it might happen again | 21:22 |
| Froberg | bar the webin then ;) | 21:22 |
| Froberg | *webmin | 21:22 |
| === Guest51142 is now known as devil__ | ||
| ddellav | Aleksandar86 644 is usually a good starting place. | 21:22 |
| Froberg | It's not like I *need* to have it | 21:22 |
| ddellav | Froberg yea, i find those control panels to be more a crutch, i prefer to do most things on my own | 21:23 |
| Froberg | it was running headless for half a year running multiple kvm's with no issues | 21:23 |
| Aleksandar86 | ddellav if I give chom 644 on /var/www/ all inside folder will have this privilege? | 21:23 |
| Froberg | I refuse to believe that there should suddenly be any hardware compatibility issues | 21:23 |
| ddellav | Aleksandar86 no, you have to pass -R to chmod to make it recursive | 21:23 |
| ddellav | Froberg yea, unlikely, issues like that have to do with sudden changes, since you just installed webmin, i would point to that | 21:24 |
| Froberg | ddellav the transmission documentation on ubuntu help did say to enter in some bash aliases, could that be the problem? | 21:24 |
| tarpman | 644 is fine for files, but not for a directory, users need execute permission to traverse into it | 21:24 |
| ddellav | Froberg it's possible | 21:24 |
| Froberg | gravy | 21:24 |
| tarpman | symbolic permissions are usually more understandable: u=rwX,g=rX,o=rX | 21:24 |
| Froberg | well ddellav, thanks, don't think it's worth the time to begin troubleshooting on so fresh an install | 21:25 |
| Froberg | was hoping for a 'quick-fix for a known rare issue' | 21:25 |
| tarpman | the capital X makes chmod mostly do the right thing with files and directories | 21:25 |
| tarpman | ddellav: Aleksandar86: ^ | 21:25 |
| Froberg | google only mentioned various GUI related issues with similar effects | 21:25 |
| ddellav | tarpman yes, usually for apache i make the directories 750 and the files inside 644 while owned by root.www-data | 21:25 |
| Froberg | https://help.ubuntu.com/community/TransmissionHowTo < here's the documentation I followed, wanted to try transmission instead of deluge for a change | 21:26 |
| ddellav | Froberg those aliases are not likely to be an issue, they are just shortcuts for starting the service | 21:26 |
| ddellav | s/starting/managing/ | 21:26 |
| Froberg | I was pretty sure of that, too :) | 21:26 |
| Froberg | still, doesn't hurt to ask | 21:27 |
| Froberg | now I'm worried about trying for webmin AND transmission :p | 21:27 |
| Froberg | ain't paranoia lovely | 21:27 |
| ddellav | if i were you, and since you're doing a fresh install anyway, i would install webmin right away and make sure that works | 21:27 |
| ddellav | get a solid base then add on top of that | 21:27 |
| Froberg | good point | 21:27 |
| Froberg | not doing kvm's again though | 21:27 |
| Froberg | too much micro-management | 21:27 |
| Froberg | even if one-box-with-all-the-stuff-that-will-ruin-my-day-when-it-breaks is riskier :p | 21:28 |
| ddellav | you might want to check out containers instead | 21:28 |
| ddellav | lxd and/or docker containers make things much easier imo | 21:28 |
| Froberg | yeah I've heard mention of docker | 21:28 |
| ddellav | also take a look at juju for deploying things, it's one of the canonical products: jujucharms.com | 21:29 |
| sdeziel | Froberg: any idea why nano is invoked via sudo to edit the ~/.bash_aliases file? | 21:29 |
| ddellav | yea, thats weird | 21:29 |
| Froberg | sdeziel I've no clue, I just assumed ubuntu documentation would be accurate | 21:29 |
| ddellav | probably just an oversight | 21:29 |
| Froberg | I will admit to some blind-sheeping there | 21:29 |
| sdeziel | if nano gets to create a new file it would be root owned | 21:29 |
| ddellav | unless they are expecting you to edit another users file | 21:29 |
| ddellav | sdeziel would a root owned .bash_aliases cause the terminal to crash? | 21:30 |
| sdeziel | ddellav: doubt it, would be a terrible failure mode but I never tested it :P | 21:30 |
| tarpman | sounds possible | 21:30 |
| tarpman | try it ;) | 21:30 |
| ddellav | i was just about to lol | 21:31 |
| Froberg | I did try executing the command example just prior to things becoming.. odd | 21:31 |
| Froberg | remove raid array physically from hot-swap slots before re-install or not? | 21:31 |
| sdeziel | nope, doesn't cause any problem on 14.04 | 21:31 |
| Froberg | .. might as well | 21:32 |
| ddellav | hmm, well it didnt crash | 21:32 |
| ddellav | also, it read the file without issue on login | 21:32 |
| ddellav | which i guess is kinda expected since the login process runs as root i think | 21:32 |
| ddellav | but im also on 16.04 | 21:32 |
| Froberg | gonna switch screen input and start the installation, back soon :) | 21:32 |
| sdeziel | ddellav: I sure hope that ~/.bash* is ran as your user, not root | 21:33 |
| sdeziel | otherwise priv escalations would be too easy to be fun :) | 21:33 |
| ddellav | sdeziel yea, you're right, it was 644, i changed it to 640 and i got an error on login | 21:34 |
| sdeziel | that said, by default the root owned file is still world readable | 21:34 |
| sdeziel | that confirms that bash does the right thing and fails gracefully | 21:35 |
| sdeziel | I wonder if a motd script could be at fault | 21:36 |
| Froberg | 'aight setup started, waiting for IPMI is a bitch | 21:36 |
| Froberg | ironically this is my sixth install in one day | 21:37 |
| Froberg | it failed horribly a few times yesterday due to UEFI issues | 21:38 |
| Froberg | weird considering I had no issues when briefly trying Open Media Vault.. or even when installing the old ubuntu server | 21:38 |
| Froberg | then again, I used the LTS last time.. | 21:38 |
| Froberg | dumb of me going for the latest? | 21:38 |
| sdeziel | practice makes perfect | 21:38 |
| Froberg | there, nothing but openssh selected | 21:40 |
| Froberg | so, finish install, ssh, assemble raid, reboot, test | 21:40 |
| Froberg | not too promising | 21:54 |
| Froberg | server booted up, no ssh | 21:54 |
| Froberg | .. | 21:54 |
| hallyn | rharper: i'll just go make a fool of myself on #virt | 21:55 |
| Froberg | lol, nvm, user error | 21:55 |
| Froberg | seems odd that there's package updates post install | 22:02 |
| patdk-lap | why? | 22:10 |
| patdk-lap | security updates should be applied, but non-security shouldn't be | 22:10 |
| Froberg | maybe.. I just figure it's a live install with network access.. and I'm not installing an LTS version | 22:11 |
| Froberg | might as well grab all packages | 22:11 |
| rharper | hallyn: sorry, blockcommit most certainly will need write access; the general idea is that the backing layers are rw; qcow2 handles diverging writes to the base; but in the case you want to commit changes from the current level to parent (aka backing dev) then it expects to squash the delta in the top level into the backing device | 22:15 |
| hallyn | jdstrand: hi. if i were to say that when libvirt apparmor driver's load_profile is called to update a profile to add rw access to a block device, it adds a 'rw' rule but leaves a prexisting 'deny device w' rule, would that ring a bell? | 22:16 |
| rharper | hallyn: if you do qemu-img create -f qcow2 -b my-base-image top-layer 2G; no writes will happen to my-base-image; it's effectively RO even though it may be opened in 'rw' mode to support a blockcommit which would push changes from 'top-layer' into the base of the qcow2 file (my-base-layer) | 22:17 |
| hallyn | rharper: yeah, most of the libvirt code is doing the right thing to update the security profile to allow write access, virt-aa-helper is just screwing up i think | 22:17 |
| hallyn | rharper: yeah, the whole 'blockcommit' thing and its directionality constantly confuse me | 22:17 |
| rharper | hallyn: ok; it may be a profile oversight | 22:17 |
| hallyn | so i create a base layer, run qemu with a layer over that, and then do 'blockcommit' the intent is to merge my changes back into the base layer? | 22:18 |
| rharper | basically if you 'RO' a layer, it wil prevent any rebasing (block commit) | 22:18 |
| hallyn | like a git rebase squash? | 22:18 |
| rharper | yes | 22:18 |
| rharper | exactly | 22:18 |
| hallyn | kthx | 22:18 |
| hallyn | back to the code | 22:18 |
| rharper | you can specify the number of layers; ie, if you'bve done incremental snapshots (internal qcow snapshots) if you commit the upper most to the bottom, then you can delete all of the intermediate snapshots | 22:18 |
| hallyn | so i guess virt-aa-helper needs a new hook that says 'if adding rw permissoin remove any preeixsting deny w rules' | 22:19 |
| hallyn | yuck | 22:19 |
| hallyn | (in update mode) | 22:19 |
| rharper | https://kashyapc.fedorapeople.org/virt/lc-2012/snapshots-handout.html | 22:20 |
| hallyn | heh i think i was at that talk | 22:22 |
| hallyn | but time heals all groks | 22:23 |
| rharper | hehe | 22:23 |
| hallyn | re-added to my readitlater list | 22:23 |
| hallyn | jdstrand: if you know of a clean way i can say "remove a deny write rule for this policy' in virt-aa-helper's vah_add_path() that'd be great | 22:24 |
| hallyn | as opposed to having to mmap the file and walk it | 22:24 |
| rharper | hallyn: if we 're using qcow files, the qemu-img info --backing chain will show the files involved; shouldn't we always allow rw on any of the backing devices ? or rather, ensure each of the backing files are in an acceptable location for rw; if so, then there's no need for ro policy on any the elements in a qcow file ? | 22:25 |
| * hallyn confused. where do we read the existing profile | 22:25 | |
| hallyn | rharper: I dunno. the libvirt domain description marks those files as readonly, so virt-aa-helper marks htem ro | 22:26 |
| hallyn | which seems fine to me | 22:26 |
| hallyn | it gets called to update it when write access is needed | 22:26 |
| rharper | but libvirt will change on a blockcommit ? | 22:26 |
| hallyn | it's just effing up when asked to do that | 22:26 |
| rharper | huh | 22:26 |
| hallyn | yes, it calls the security module to update | 22:26 |
| rharper | interesting | 22:26 |
| hallyn | and a rw rule *is* added :) but the deny w rule is kept | 22:27 |
| rharper | it seems redundant , either qcow2 works or it doesn't | 22:27 |
| rharper | ah | 22:27 |
| rharper | I see | 22:27 |
| hallyn | well, this should protect the base of shared images from hypervisor bugs, i guess | 22:27 |
| sdeziel | hallyn: any reason why the write is explicitly denied instead of just relying on the default deny? | 22:28 |
| jdstrand | hallyn: this sounds related to the recent patch for readonly files and updating vah_add_file to add 'R' for readonly without a corresponding deny rule | 22:29 |
| jdstrand | hallyn: perhaps something similar needs to be done here-- but for something to be read/write and get a deny w is definitely a bug | 22:29 |
| hallyn | jdstrand: I don't think it "gets" it, I think it just doesn't remove the old one on update | 22:30 |
| hallyn | sdeziel: nope | 22:30 |
| jdstrand | seems like the file should be regenerated then instead of appended to | 22:30 |
| Froberg | sdeziel all working fine now.. it seems, rebooting after webmin install now. Oddly webmin reports 600GB used of my empty array.. even assuming it's including the 128 gig system drive, that's just odd :p df -h has the proper figures though (24k/16T) | 22:31 |
| Froberg | Intel(R) Atom(TM) CPU C2750 @ 2.40GHz, 8 cores << loving this CPU if anyone's been considering it | 22:31 |
| sdeziel | Froberg: nice | 22:32 |
| Froberg | login works after reboot | 22:32 |
| Froberg | now I truly wonder what fucked up | 22:32 |
| hallyn | jdstrand: well the context code is calling domainSetSecurityLabel... | 22:32 |
| hallyn | so i suppose this is a bug in AppArmorSetSecurityLabel | 22:33 |
| hallyn | what is this java code? :) | 22:33 |
| hallyn | (annoying since my mouse isn't working, no cut-paste :) | 22:33 |
| Froberg | sdeziel appreciate the help.. even if I'm at a loss as to what may have happened | 22:34 |
| hallyn | AppArmorSetSecurityImageLabel, that is | 22:34 |
| Froberg | Thank you, Sir! :) | 22:34 |
| sdeziel | Froberg: you are welcome | 22:34 |
| hallyn | seems like load_profile() should see append=false and then decide to regenerate? | 22:35 |
| hallyn | it claims to do that... | 22:37 |
| hallyn | btw i think if we fix this we fix a large set of the open libvirt bugs | 22:37 |
| hardwire | aloha. anybody up to snuff with 16.04? I'm used to doing minimal server installs without any added packages. Seems like LXC wedges itself in (I like LXC, just not on these servers). | 22:46 |
| hardwire | The other option for minimal is to use the mini.iso | 22:46 |
| hardwire | Wondering if I'm missing something on install using the ubuntu server isos that will further reduce the installed package requirements. | 22:46 |
| nacc | hardwire: right, lxd is part of the base server now (aiui) | 22:47 |
| hardwire | ah.. part of the ubuntu-server metapackage | 22:47 |
| nacc | hardwire: yep | 22:47 |
| * hardwire makes a face | 22:47 | |
| hardwire | thanks nacc | 22:48 |
| * hardwire attempts to dig up why harden-* disappeared as well. | 22:48 | |
| hardwire | I might just be losing my buntu mojo! | 22:48 |
| nacc | hardwire: what packages, e.g.? | 22:49 |
| hallyn | oh i see | 22:50 |
| hardwire | in debianland there's some metapackages that explicitely require some tools and conflict with lots of packages that are considered insecure | 22:50 |
| hallyn | hm, no. | 22:50 |
| nacc | hardwire: oh i see them, i think | 22:51 |
| nacc | hardwire: e.g., harden-clients? | 22:51 |
| nacc | hardwire: possibly harden itself | 22:51 |
| hardwire | and harden-servers | 22:51 |
| hardwire | and harden-* | 22:51 |
| hardwire | heh | 22:52 |
| hardwire | no worries. I'll just miss them | 22:52 |
| nacc | hardwire: https://launchpad.net/ubuntu/+source/harden/+publishinghistory | 22:52 |
| hardwire | oh! | 22:52 |
| hardwire | I'm so used to reading debian bug reports for that info | 22:52 |
| hardwire | thanks nacc | 22:52 |
| nacc | https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782978 | 22:52 |
| ubottu | Debian bug 782978 in ftp.debian.org "RM: harden -- RoQA; no longer useful" [Normal,Open] | 22:52 |
| nacc | hardwire: so no longer in debian either :) | 22:53 |
| hardwire | lol | 22:53 |
| hardwire | it's pretty useful :) | 22:53 |
| nacc | https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760449 | 22:53 |
| ubottu | Debian bug 760449 in harden "harden: outdated info" [Serious,Fixed] | 22:53 |
| nacc | not according to the maintainer, it's not :) | 22:53 |
| hardwire | yehhh.. that makes it less useful | 22:53 |
| hardwire | it was a large undertaking. | 22:53 |
| hardwire | ok.. so I'm guessing the ubuntu-server isos even with no packages selected in tasksel makes sure ubuntu-server metapackage is installed. | 22:54 |
| hardwire | I'll just have a lot of lxc bridges laying around :) | 22:55 |
| hallyn | jdstrand: so i think libvirt is not updating the actual vm config, just asking for a new rw rule for the backing element... not sure though | 22:56 |
| hallyn | jdstrand: so is the 'deny' rule really needed? | 22:56 |
| hallyn | if we didn't have that, then this would "just work". | 22:56 |
| jdstrand | I'd have to see the policy | 22:56 |
| Zulu_Too | Sarnold are you there? | 22:57 |
| jdstrand | apparmor_parser -p /etc/apparmor.d/libvirt/<something> | 22:57 |
| hallyn | i pasted the bits in the bug, but virt-aa-helper explicitly adds a deny rule any time it sees a readonly element | 22:58 |
| hallyn | line 835 | 22:58 |
| jdstrand | ok, that is what I was referring to before | 22:59 |
| jdstrand | it sounds like the call to vah_add_file for this type of file should pass 'R' instead of 'r' with the recent patch that is on the list and that smb pulled in | 22:59 |
| jdstrand | 'R' won't add the deny rule | 23:00 |
| hallyn | jdstrand: paste.ubuntu.com/15344294 fwiw | 23:01 |
| hallyn | jdstrand: hm, i'm on the verison before that, so maybe it's already fixed | 23:02 |
| jdstrand | I find it exceedingly curious that libvirt marks it readonly only to later not honor the flag | 23:02 |
| hallyn | jdstrand: it only temporarily marks it rw, | 23:02 |
| hallyn | for the duration of blockcommit | 23:02 |
| hallyn | i would've thought you'd appreciate that | 23:02 |
| hallyn | i'll update and re-try, but am on slow link... actually, rharper, coudl you test it out, od you have a xenial host? | 23:03 |
| rharper | I have | 23:03 |
| hardwire | okokok last one. Why is bootp not bound to 10.0.3.1 via dnsmasq? | 23:03 |
| * jdstrand notes he is about to head out | 23:03 | |
| rharper | hallyn: if you've some debs for me to test, I can do that | 23:03 |
| hallyn | rharper: no, just the current uptodate libvirt in xenial | 23:04 |
| rharper | sure | 23:04 |
| hallyn | i'm on -1ubuntu4, -1ubuntu5 has smb's fix | 23:04 |
| rharper | I've not updated in a while, on 1ubuntu2 | 23:04 |
| rharper | hallyn: what do you need test-wise ? | 23:04 |
| rharper | pull latest and ? | 23:04 |
| * rharper has been dorking with multipathd, sd_notify and systemd services (*shakes fist*) | 23:05 | |
| hallyn | oh but it probably wil fail, because indeed it is using -r not -R | 23:05 |
| hallyn | rharper: the blockcommit command from bug 1554031 | 23:05 |
| ubottu | bug 1554031 in qemu (Ubuntu) "error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied" [High,Triaged] https://launchpad.net/bugs/1554031 | 23:05 |
| rharper | hallyn: ok, run that on my current out-of-date package ? | 23:06 |
| hallyn | oh, no. | 23:06 |
| hallyn | i missed that comment. no, need -1ubuntu5 | 23:06 |
| rharper | there's a 1ubuntu6 too; | 23:07 |
| hallyn | well, i should be ready to test it in an hour or two :) | 23:07 |
| hallyn | yeah that woudl be fine | 23:07 |
| hallyn | 5 has the smb fix | 23:07 |
| hallyn | anyway may as well look more closely at that fix while i wait for downloads | 23:07 |
| rharper | % virsh blockcommit x1 vda --active --pivot --verbose | 23:08 |
| rharper | error: internal error: unable to execute QEMU command 'block-commit': Could not reopen file: Permission denied | 23:08 |
| rharper | ii libvirt-bin 1.3.1-1ubuntu6 | 23:08 |
| rharper | let me destroy and recreate a new one | 23:09 |
| rharper | not sure when I created that VM | 23:09 |
| hallyn | ok, yeah, we'd need one more little patch, which jdstrand might object to but i dont' think so: | 23:09 |
| rharper | nope, freshly created, still fails | 23:09 |
| rharper | hallyn: ok | 23:10 |
| hallyn | add_file_path should use R not r when it sees disk->src->readonly | 23:10 |
| hallyn | jdstrand: is tha tok with you? | 23:10 |
| hallyn | rharper: I'll push a new package t oserge-hallyn/virt in a bit | 23:10 |
| hallyn | with that attempted fix | 23:10 |
| hallyn | rharper: btw did i add you to the libvirt-maintainers team? | 23:10 |
| rharper | hallyn: sure; just poke me here, I'll check back in a bit | 23:10 |
| rharper | hallyn: probably not | 23:10 |
| hallyn | drat. it's for access to a libvirt tree which i'd like to be the staging tree to archive packages | 23:11 |
| hallyn | all right thanks will ping you in a bit | 23:11 |
| rharper | cool | 23:12 |
| hallyn | jdstrand: http://paste.ubuntu.com/15344361 <- i'm going to try that | 23:13 |
| jdstrand | hallyn: I'm ok with that assuming that vah_add_file in the version you are patching supports 'R' :) | 23:14 |
| * jdstrand wonders if there will be noisy denials now-- the explicit deny rule was for iso images iirc | 23:14 | |
| jdstrand | I guess we'll see | 23:15 |
| hallyn | jdstrand bleh yeah that rings a bell | 23:17 |
| hallyn | we may then end up needing a more baroque fix, but let's see whether this even works | 23:17 |
| hallyn | besides isos are so 2013 | 23:17 |
| hallyn | jdstrand: ok, pushed to ppa:serge-hallyn/virt; will take 20 mins to build (if it doesn't fail) | 23:18 |
| Zulu_Too | Has anyone here seen this web chat? http://frug.github.io/AJAX-Chat/screenshots.html Is it safe secure and has anyone used it? | 23:24 |
| === mburns is now known as not_mburns | ||
| === not_mburns is now known as mburns | ||
| hallyn | rharper: grr, virt aa helper test fails now; i'll have to build locally so i can get details :( | 23:38 |
| hallyn | i'm going to drop off irc a bit while i switch clients | 23:38 |
| === Synthbread is now known as Synthead | ||
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!