[01:25] <echosystm> what distros are highly secure out of the box, without much config needed?
[01:26] <echosystm> for a server
[01:26] <echosystm> i know fedora uses selinux and ubuntu uses apparmor, but i dont know the details
[01:26] <echosystm> are most packages somehow preconfigured to be secure using those tools?
[02:22] <sarnold> echosystm: out of the box ubuntu ought to be alright; iirc there should only be the mdns port opened. probably the weakest portion of ubuntu's out-of-box security is that the ssh daemon accepts passwords for authentication.
[08:17] <curmet> hello I've installed mysql on ubuntu machine. But can't access it via windows machine. it says "lost connection to mysql server at reading initial communication packet ,system error:2
[08:17] <curmet> I ve set the root user to be accessed from %
[08:17] <curmet> Flushed priviles
[08:17] <curmet> And disabled the firewall.
[08:17] <curmet> What else? thanks before
[09:19] <prago_1> hi. when I change network interfaces names to legacy names (eth0,...) via /etc/default/grub:   net.ifnames=0 biosdevname=0
[09:19] <prago_1> I have NO interface at all after reboot.. in any other ubuntu distro with desktop, this works.
[09:19] <prago_1> any idea?
[09:20] <rbasak> prago_1: are you sure you have no interface? Or just no active ones? Are you using "ifconfig" instead of "ifconfig -a" for example?
[09:20] <prago_1> wait...
[09:20] <rbasak> ("ip link" is newer; I'm not sure if it defaults to active ones or not)
[09:21] <prago_1> ifconfig -a shows it
[09:21] <prago_1> you are right..
[09:21] <rbasak> So you probably want to fix /etc/network/interfaces then, and you should be good?
[09:22] <prago_1> yes thats it.. thanks a lot :-)
[09:23] <rbasak> No problem :)
[10:36] <huwjr> heya i used to use installers from here: http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-amd64
[10:36] <huwjr> can someone confirm what I should be using now as: http://archive.ubuntu.com/ubuntu/dists/xenial-updates/main/installer-amd64 doesn’t exist
[10:36] <huwjr> i am assuming: http://archive.ubuntu.com/ubuntu/dists/xenial/main/installer-amd64/ ?
[10:37] <hateball> huwjr: Is there something wrong with http://www.ubuntu.com/download/server ?
[10:41] <huwjr> it’s all scripted on my hypervisor
[10:41] <hateball> Grab it from cdimages then
[16:00] <rodlogic> Great, Xenial EC2 images are now available ...
[16:41] <codepython777> can anyone help me create a wifi hotspot using commandline? (on ubuntu 14.04)
[16:43] <robb_nl> codepython777, try to search on hostapd
[16:44] <robb_nl> http://dothisbest.com/how-to/turn-linux-machine-wifi-access-point/
[17:02] <hallyn> smb: arges: sarnold: thoughts on switching the libvirt admin group (libvirtd) to being libvirt as in debian?
[17:02] <hallyn> we could just through 18.04 have both entries with same group number in /etc/group ?
[17:02] <hallyn> (for upgrades only of course)
[17:06] <arges> hallyn: if we are going to change it probably better earlier than later
[17:06] <smb> hallyn, without much time to think about it: moving towards same name as debian sounds like something we want to do. having two groups with the same id sounds rather evil. I'd tend to more like a rename in post-inst. just as a feeling
[17:06] <hallyn> evil?  bah
[17:07] <hallyn> i don't see the problem :)
[17:07] <hallyn> sarnold: ^ is such a thing known to have ever caused a subtle security issue?
[17:12] <hallyn> well i'll start by doing it and if we find a better way we can switch - it'll be weeks before i'm ready to merge this i bet
[17:17] <LostSoul> Hello
[17:19] <LostSoul> I've met this strange issue with LXC. Suddenly my ubuntu started to fill swap to 100% and then kill some processes on Containers, but there was like 20-30GB free RAM memory
[17:19] <LostSoul> I changed swappiness to 10 from 60, and same stuff happened, have somebody faced such issue?
[17:30] <bekks> LostSoul: Changing swappiness from 10 to 60 causes exactly that. "Start swapping at 60% free RAM".
[17:30] <bekks> LostSoul: And with an unmodified vm.oom_killer setting, the system will randomly start killing process, instead of killing the process causing the memory overallocation.
[17:36] <bekks> LostSoul: On my servers, I'm settings swappiness to 1, and vm.oom_kill_allocating_task=1
[17:44] <LostSoul> No, no bekks
[17:44] <LostSoul> I changed from 60 to 10
[17:44] <LostSoul> And I changed it after this swap losing
[17:44] <LostSoul> But it didn't help
[17:45] <LostSoul> I tried to use lxc groups on memory and swap but it caused killing apps on containers
[17:45] <RoyK> LostSoul: pastebin output of 'free', please
[17:46] <bekks> LostSoul: "No" to which aspect?
[17:46] <RoyK> bekks: 19:44 <        LostSoul > I changed from 60 to 10
[17:47] <LostSoul> Now it unmounted swap but sure
[17:47] <LostSoul> Give me second I will try to reproduce it
[17:47] <RoyK> LostSoul: if swap is 100% full, it usually means you're out of memory
[17:47] <RoyK> that simple
[17:49] <LostSoul> RoyK: Thing is Swap is full, but I still have 15-20GB of memory..
[17:49] <RoyK> LostSoul: pastebin output of "free", please
[17:49] <alkisg> Do lxc containers have access to the whole memory by default, or is there a soft limit for them?
[17:49] <bekks> LostSoul: Swap isnt even mounted.
[17:52] <LostSoul> http://paste.ubuntu.com/16110286/
[17:52] <LostSoul> alexisb: Whole
[17:52] <RoyK> LostSoul: is that on the guest or the host?
[17:52] <LostSoul> Host
[17:52] <RoyK> what about the guest?
[17:53] <LostSoul> I don't know how to limit it but once I limited lxc cgroups for mem and swap I got it killed
[17:53] <RoyK> 'free' on the guest?
[17:53] <LostSoul> I've got like 40-50 guests, I will past one, is that fine?
[17:53] <bekks> LostSoul: Then your limit is too low.
[17:53] <hallyn> smb: is libvirt-migrate-xend-managed-domains.1 still needed as of 16.04 ?
[17:54] <RoyK> LostSoul: start with one
[17:54] <LostSoul> http://paste.ubuntu.com/16110596/
[17:54] <LostSoul> It was working like a charm
[17:54] <LostSoul> But since yesterday its not working
[17:55] <bekks> So what did you change since yesterday?
[17:55] <LostSoul> I mean once swap is on, its going crazy
[17:55] <bekks> And I told you why.
[17:55] <LostSoul> I didn't change anything - here is the thing
[17:56] <LostSoul> on containers there are FFs that does some tests, it is possible something changed on site/service and FF got memory leaks?
[17:56] <LostSoul> But on the other hand how it that possible that when i turned off swap (swapoff -a) it work like a charm?
[17:56] <bekks> LostSoul: How about implementing the solution proposed instead? :)
[17:56] <LostSoul> What could gone wrong?
[17:56] <LostSoul> What solution bekks? :)
[17:57] <bekks> I told you what to do :)
[17:57] <LostSoul> Increase limits?
[17:57] <bekks> No.
[17:57] <LostSoul> But how and where should I check them?
[17:57] <LostSoul> I didn't change anything
[17:58] <RoyK> for host in host1 host2 host3 ... ; do echo [17:58] <RoyK> something like that - to show available memory for all hosts
[17:58] <bekks> "0428 194424 < LostSoul> I changed from 60 to 10".
[17:58] <RoyK> and perhaps setup munin or something to monitor your system
[17:58] <LostSoul> bekks: I changed from 60 to 10 AFTER it happened
[17:58] <bekks> And fixing swappiness, and the OOM killer behaviout.
[17:58] <LostSoul> But it didn't solve the problem
[17:58] <bekks> Of course it doesnt. I told you why.
[17:59] <RoyK> munin isn't the most flashy of things, but it works well
[17:59] <RoyK> and it's very easy to setup
[17:59] <LostSoul> Ok bekks, but I still don't get it
[17:59] <RoyK> especially if you have something like ansible to do the job
[17:59] <bekks> LostSoul: you dont get what exactly?
[17:59] <RoyK> LostSoul: do you have any monitoring of these machines?
[18:00] <LostSoul> If swappiness 10 means "start swapping when you reach 10% of free RAM" then I should have full swap when I have 20-25GB of free RAM :O
[18:00] <bekks> LostSoul: Did you even _activate_ that setting, too?
[18:00] <RoyK> LostSoul: what does 'sysctl vm.swappiness' have to say?
[18:00] <RoyK> anyway - a full swap shouldn't trigger OOM if there's free memory
[18:01] <LostSoul> vm.swappiness = 10
[18:01] <RoyK> good
[18:01] <RoyK> LostSoul: do you have any monitoring?
[18:01] <bekks> And whats the output of sysctl vm.oom_kill_allocating_task ?
[18:01] <LostSoul> Yeah, our internal stuff
[18:02] <RoyK> what sorts?
[18:02] <LostSoul> bekks: vm.oom_kill_allocating_task = 0
[18:02] <bekks> LostSoul: Thats why tasks are killed randomly.
[18:02] <LostSoul> I'm not even sure it was killed randomly or it started to be overloaded
[18:03] <RoyK> bekks: not quite sure why OOM should step in at all when there's free memory - and lots of it
[18:03] <bekks> It was overloaded and therefore started to kill randomly.
[18:03] <LostSoul> I faced ooem killer after cgroups, but what happened in grid I can't say for sure
[18:03] <LostSoul> I would say 2 tests were crashing FF and it got memory leak, on the other hand I don't get why swap was getting fully loaded
[18:04] <bekks> RoyK: In case just one of the process tried to allocate more RAM than was available, the OOM killer started to kill random processes, killed another even bigger process - and you'll have what we can see in the paste.
[18:04] <LostSoul> Strange but not it doesn't moving
[18:04] <LostSoul> bekks: So do you advice to use vm.oom_kill_allocating_task = 1?
[18:04] <bekks> LostSoul: For the fourth time, yes.
[18:04] <RoyK> LostSoul: sounds like a good idea
[18:05] <sarnold> hallyn,smb,arges, changing the name to match debian makes sense, but .. devil's advocate here, 16.04 lts is already out the door. would it make more sense to change debian? two groups with one id shouldn't be a security issue but it could be seriously confusing to humans.
[18:05] <LostSoul> bekks, RoyK: Thanks guys
[18:05] <LostSoul> Sorry it's hard for me to show whole story
[18:05] <LostSoul> If it happens again I will ping you both, if you don't mind
[18:06] <LostSoul> Maybe I need to give bigger introduction
[18:06] <bekks> LostSoul: Ping the guys monitoring your servers, first :)
[18:06] <RoyK> LostSoul: or setup something like munin :P
[18:06] <RoyK> LostSoul: so you can see it all yourself
[18:07] <LostSoul> I can try Munin
[18:07] <RoyK> LostSoul: maybe zabbix is a bit better for some things, but it's way harder to learn
[18:07] <LostSoul> Let me check what's that
[18:07] <bekks> Or Nagios, or check_mk, or or or :)
[18:07] <RoyK> et cetera et cetera ad infinitum
[18:08] <RoyK> LostSoul: just start with munin - it's easy to setup and it gives you those nice graphs
[18:09] <RoyK> and perhaps limit the amount of memory per guest to something that should be decent
[18:09] <RoyK> depending on the guest's need, of course
[18:10] <RoyK> a small webserver won't need much - the host is doing the caching anyway
[18:12] <LostSoul> Yeah, I see that swap went to 0 since yestarday morning
[18:12] <sarnold> there's entirely too many monitoring choices :)
[18:13] <LostSoul> :P
[18:13] <bekks> LostSoul: Whats the outcome of "cat /proc/swaps"?
[18:13] <hallyn> sarnold: i don't see changing it in debian as an option.  i suppose i could ask, but...
[18:13] <sarnold> i've gone around in circles dozens of times trying to find The One to use but each tool has its adherants, and somehow all the other tools are missing that one feature that they need..
[18:13] <sarnold> hallyn: alright. I just had to ask.. I had the impression we were leading debian on libvirt..
[18:14] <LostSoul> bekks: http://paste.ubuntu.com/16113080/
[18:14] <RoyK> sarnold: we (at hioa.no) have been through the "which monitoring system to use" for years, and we are stearing towards zabbix
[18:14] <LostSoul> Now it seems stable and not moving. I think it was one test that due to FF killed it. I proceeded with lxc cgroups mem limits and I killed it in other way so it seems like 1 big problem but I cause 2
[18:15] <hallyn> sarnold: a year or two ago we might have been able to.  well i'll look at the history and see.
[18:15] <hallyn> thx
[18:16] <LostSoul> THanks guys :)
[18:17] <RoyK> LostSoul: if you want better isolation between the guests, kvm might be an option
[18:17] <bekks> Or a L1 hypervisor.
[18:18] <LostSoul> Ou hell
[18:18] <LostSoul> I found it was this one test
[18:18] <LostSoul> It killed 35G of memory - do you belive it? :O
[18:18] <RoyK> bekks: /me can
[18:18] <LostSoul> Do you remember first host free -m ?
[18:18] <sarnold> RoyK: thanks :)
[18:19] <LostSoul> Check this one after 1minute of FF hanging
[18:19] <RoyK> bekks: what do you mean? xen? esxi?
[18:19] <bekks> RoyK: Yeah.
[18:19] <RoyK> why not kvm?
[18:19] <RoyK> should do just as well
[18:20] <LostSoul> http://paste.ubuntu.com/16113830/
[18:20] <LostSoul> Check this after 30-60 second member was going down with the leak I guess
[18:20] <RoyK> still 50 gigs of buffers
[18:20] <bekks> RoyK: I started to dislike a couple of years ago when it gave me issues which did not exist in other hypervisors.
[18:20] <RoyK> LostSoul: seriously - don't let a single guest use all your memory - it's *not* a good idea
[18:21] <RoyK> bekks: like what?
[18:21] <LostSoul> I forgot to tell you guys:
[18:21]  * RoyK is curious
[18:21] <LostSoul> tmpfs                                  50G   40G   11G  79% /var/lib/lxc
[18:22] <bekks> RoyK: Issues with sharing disks between vms, a missing graphical interface (a few years ago), isses with networking, and stuff like that.
[18:22] <LostSoul> Thanks
[18:22] <LostSoul> I now have idea to limit it to 3G
[18:22] <bekks> LostSoul: To limit what exactly?
[18:22] <RoyK> bekks: what sort of sharing between guests?
[18:22] <RoyK> bekks: cluster filsystems?
[18:22] <LostSoul> bekks: Mem on single container
[18:23] <bekks> RoyK: One disk, multiple guests accessing it. Cluster filesystems (active-active cluster) or just being able to use the same disk (active-passive).
[18:23] <RoyK> which fs?
[18:24] <bekks> RoyK: vxfs.
[18:24] <RoyK> erm...
[18:24] <RoyK> iirc that's not native on linux
[18:25] <RoyK> seems it iss
[18:25] <RoyK> seems it is
[18:25] <bekks> Its a 3rd party product. And that product runs on Linux, quite well. :)
[18:25] <RoyK> I've been using GFS2 for something like this
[18:26] <RoyK> worked ok, although it was only a pilot setup
[18:28] <leitao> jgrimm, Hello. quick question, do you know when docker 1.11 will make 16.04?
[18:29] <jgrimm> leitao, we are targetting 1.11.1
[18:29] <jgrimm> so goal within 2 weeks of that.  general feeling is to let 1.11 settle a bit
[18:30] <linuxlove> hello
[18:31] <leitao> jgrimm, good. That is what I need. Thank you!
[18:31] <jgrimm> leitao, np
[18:34] <linuxlove> i am on a server with dynamic ip i configured my domain names with ddclient to work with dynamic ips i need to configure apache to redirect difference domains to difference directories how can i do that ?
[18:35] <bekks> The same way as with static ips. Use virtual hostnames.
[18:37] <linuxlove> bekks, you mean i need to add <VirtualHost *:80>
[18:37] <linuxlove>     DocumentRoot "/www/example1"
[18:37] <linuxlove>     ServerName www.example.com
[18:37] <linuxlove>   
[18:37] <linuxlove>     # Other directives here

[18:37] <linuxlove> <VirtualHost *:80>
[18:37] <linuxlove>     DocumentRoot "/www/example2"
[18:37] <linuxlove>     ServerName www.example.org
[18:37] <linuxlove>     # Other directives here

[18:37] <bekks> ignore set.
[18:37] <bekks> Use a pastebin next time.
[18:37] <linuxlove> my domains are dahliaco.com
[18:37] <linuxlove> and khoonehbazar.com
[18:40] <linuxlove> bekks, i need to replace my domains with www.example.com ?
[18:40] <RoyK> !pastebin | linuxlove
[18:41] <nacc> linuxlove: i think this gives many good examples: https://httpd.apache.org/docs/current/vhosts/examples.html
[18:42] <caliculk> Just curious, but what agent based inventory management system do you use to monitor serial numbers for all hardware installed on servers? Whether it is a paid for solution or open source. Currently in the market to try and find one, but having some difficulties finding a good one.
[18:42] <linuxlove> nacc, while i dont have static ip i should use <VirtualHost *:80>?
[18:43] <linuxlove> nacc, and add it to /etc/apache2/apache2.conf ?
[18:43] <nacc> linuxlove: i'm not sure what static or dynamic IP has to do with this?
[18:44] <bekks> Actually nothing.
[18:44] <sarnold> caliculk: i've never heard of such a tool in anything except terrible tivoli-style tools..
[18:44] <sarnold> caliculk: if it were my problem i'd probably try to script up something with ssh hostname lshw ... :)
[18:44] <caliculk> So you don't use any inventory management solution for enterprise business?
[18:44] <bekks> caliculk: Our agent-based inventory system for serial numbers is called Jeff, Harry and Steve.
[18:45] <linuxlove> bekks, does it work for dynamic ip <VirtualHost *:80>?
[18:45] <caliculk> Hm, yeah, at the rate that we are expanding our datacenter, Jeff, Harry and Steve are going to have a rough time.
[18:45] <bekks> caliculk: Serial numbers are inventorized prior roll-out of the device to the customer.
[18:45] <bekks> caliculk: We have no need for such an agent-based system.
[18:45] <sarnold> caliculk: never had to care :) hehe
[18:45] <sarnold> caliculk: -maybe- landscape has some "machine information" page that would suffice?
[18:46] <linuxlove> bekks, ?
[18:46] <bekks> caliculk: For a on-demand scan, we have out own tool, which is able to "scan" various operating system. etc.
[18:47] <caliculk> linuxlove it looks like he put you on ignore, since you spammed the shit out of the channel. He can't see your messages.
[18:47] <caliculk> bekks, most of the on-demand scan tools I saw are unable to pull serial numbers from devices. At least, from what I searched.
[18:47] <bekks> caliculk: Our tool is.
[18:48] <caliculk> I am guessing you created the tool?
[18:48] <caliculk> ;)
[18:48] <caliculk> Or it's inhouse
[18:49] <bekks> A colleague of mine created it, and it fits out use case exactly.
[18:49] <bekks> *our
[18:50] <bekks> For us, it turned out that there actually is no such system out there which grabs all the information we need.
[18:51] <randymarsh9> hello
[18:52] <randymarsh9> can somebody explain the difference between exporting and copying?
[18:52] <randymarsh9> i feel like they mean the same thing
[18:52] <bekks> exporting what? Copying what?
[18:52] <randymarsh9> bekks: any file type
[18:53] <nacc> randymarsh9: there was zero context, your question means very little on its own; i don't even know what "exporting a file type" would mean
[18:53] <sarnold> randymarsh9: are you referring to terms on a document? what url?
[18:53] <bekks> Or "copying a file type".
[18:55] <randymarsh9> exporting a file type, be it a csv, pst, database
[18:55] <randymarsh9> how is that different than copying?
[18:55] <bekks> Exporting it from which program?
[18:56] <randymarsh9> bekks: are you implying that exprorting something has a different context depending on the program in question
[18:56] <randymarsh9> ?
[18:56] <bekks> Are you finally starting to give us some valuable context?
[18:56] <nacc> "exporting" is not a generic UNIX term, except for possibly enviornment variables
[18:57] <nacc> randymarsh9: please start from the beginning and clearly state what you are trying to do and what your confusion is?
[18:57] <randymarsh9> i'm not asking for clarification on one specific scenario
[18:57] <nacc> randymarsh9: "copying" and "exporting" don't have generic meanings relative to "file types"
[18:58] <randymarsh9> nacc: they don't?
[18:58] <bekks> No, they dont.
[18:58] <linuxlove> nacc, could you take a look at http://pastebin.com/Vsi0XBhS
[18:58] <bekks> "copying" and "exporting" have different meanings for almost every use case.
[18:58] <nacc> linuxlove: that is a listing of a directory.
[18:58] <bekks> And totally different implementations, as well.
[18:59] <nacc> randymarsh9: are you reading some website or document? can you, as sarnold said, provide a link so we have more context?
[18:59] <nacc> randymarsh9: or what is prompting this question?
[18:59] <linuxlove> nacc, should i add my domains dahliaco.com and khoonehbazar.it to that directory
[19:00] <linuxlove> nacc, please see this also http://pastebin.com/YUq4UHmU
[19:00] <nacc> linuxlove: I don't know. I don't configure web servers myself. I believe you should just need to add VirtualHost definitions, as I referred to in the previous URL.
[19:02] <randymarsh9> sorry but you are both wrong
[19:03] <bekks> randymarsh9: How can we be wrong when you havent provided any context yet?
[19:03] <randymarsh9> beacuse the words don't differ in meaning depending on context
[19:03] <bekks> They do.
[19:03] <bekks> This isnt about grammar, this is about technical facts.
[19:04] <randymarsh9> copying means 1:1 duplicate of file; exporting means copying the file into another format
[19:04] <sarnold> randymarsh9: feel free to read all the manpages returned by "man -k export" and "man -k copy" to understand then :)
[19:04] <randymarsh9> that's all i was asking, sheesh
[19:04] <bekks> randymarsh9: Your question already had been answered and we were told we are wrong.
[19:05] <randymarsh9> "can somebody explain the difference between exporting and copying"
[19:05] <LostSoul> bekks, RoyK: Thanks guys again, you made it clearer for me and I found the problem :)
[19:05] <randymarsh9> seems like a straightforward question but apparently there is more to it than i thought
[19:05] <LostSoul> I'm out for now :)
[19:06] <linuxlove> sudo echo "127.0.0.1  dahliaco.com" >> /etc/hosts
[19:06] <bekks> randymarsh9: There is no generic answer since it depends on the CONTEXT.
[19:06] <linuxlove> what can i replace with 127.0.0.1 while i am using a dynamic ip ?
[19:06] <bekks> LostSoul: And what was/is the problem?
[19:06] <randymarsh9> bekks: give me one example where those things mean something different depending on context
[19:06] <ogra_> well, one could probably say that copying always creates a duplicate while exporting always involves some kind of conversion ...
[19:07] <bekks> randymarsh9: Environment variables, databases, text files.
[19:07] <sarnold> randymarsh9: "export" in the sense of "change format" comes from e.g. gimp's File|Export menu.
[19:07] <ogra_> (if it is just about the meanings of the words)
[19:07] <bekks> ogra_: Which is not true. Exporting often involves copying stuff too, AND converting it.
[19:07] <sarnold> randymarsh9: "export" in the sense of "make available over the network" comes from e.g. NFS exports.
[19:08] <ogra_> bekks, and i didnt say exporting doesnt involve copying ... just that there is always some conversion involved ;)
[19:08] <sarnold> randymarsh9: "export" in the sense of "make available to another process" comes from shell environment management
[19:08] <bekks> ogra_: :P
[19:08] <ogra_> :)
[19:08] <sarnold> randymarsh9: "export" in the sense of "make available to foreign nationals" comes from putting a file on a website -- I hope you've filed for your cryptography export license when you do that :)
[19:08] <axisys> anyone know how to get around it? I cannot have hpacucli to add a logical disk
[19:08] <axisys> http://dpaste.com/07R6FB8
[19:09] <nacc> randymarsh9: keep in mind, what happened was you asked a question which, to me, lacked context. It doesn't help to get mad at me or anyone else if that's how it comes across. We are trying to help, but need information in order to do so.
[19:09] <axisys> http://dpaste.com/2W8JJGV <--  more detail
[19:09] <bekks> axisys: The message you get is VERY clear.
[19:10] <bekks> axisys: "Reason: Max array count reached". You cannot add more disks to that array.
[19:10] <linuxlove> sudo echo "127.0.0.1  laravel.example.com" >> /etc/hosts
[19:10] <linuxlove> dahliaco.com
[19:10] <axisys> bekks: I never said place in that array.. I was hoping it will create a new array
[19:10] <linuxlove> and what should i replace with 127.0.0.1
[19:10] <axisys> bekks: may be I am missing a command?
[19:10] <randymarsh9> nacc: thanks but you really shouldn't be asking for context when someone asks a straightforward question like that
[19:11] <linuxlove> while my ip is dynamic ?
[19:11] <bekks> axisys: Well, in that context, it means: "you cannot create any more arrays".
[19:11] <bekks> randymarsh9: Your question wasnt straightforwards as several people told you, meanwhile.
[19:12] <axisys> bekks: hmm .. this HP has 8 slots.. my goal is to create single disk LUNs and then use software raid. not sure how to achieve that
[19:12] <randymarsh9> bekks: yes i read your response and all three of those copying and exporting would mean the exact same thing
[19:12] <axisys> dl360p gen8
[19:12] <sarnold> linuxlove: (a) sudo and echo don't work that way (b) that's a terrible idea. feel free to stop reading whatever guide told you to do that.
[19:12] <bekks> randymarsh9: No, they wouldnt. If you thing they do, you havent understood the techniques and context they are used in.
[19:12] <bekks> *think
[19:13] <bekks> randymarsh9: And your problem of understanding that will not be solved by insisting on "I am right and you are not" from your point of view.
[19:13] <bekks> -that
[19:14] <randymarsh9> same could be said to you tbh
[19:14] <nacc> randymarsh9: for instance, "exporting a text file" is, IMO, nonsense. It has, again IMO, zero meaning -- unless you specify *how* you are exporting. That's what I meant by context.
[19:14] <bekks> randymarsh9: You could, if you would know the differences stated above - which you dont.
[19:15] <nacc> randymarsh9: I really don't think your question was "straightforward" and not because it was a bad question, but because I quite literally did not understand (and still don't) what you are asking
[19:15] <bekks> nacc: He is trying to convince us that "copy" and "export" is always the same, literally.
[19:15] <randymarsh9> "can somebody explain the difference between exporting and copying"
[19:16] <randymarsh9> bekks: yes, +1 on your reading comrehension skills
[19:16] <randymarsh9> no wonder you were the first to ask for context
[19:16] <bekks> randymarsh9: Thank you. I really appreciate your compliment.
[19:18] <nacc> ok, calm down everybody; we're all trying to help and be understood
[19:18] <nacc> :)
[19:18] <bekks> I'm just happy about that compliment :)
[19:18] <nacc> randymarsh9: ok, can you, even if you don't think you should have to, explain why you are asking that question?
[19:20] <randymarsh9> nacc: already figured it out, ty
[19:20] <nacc> randymarsh9: ok
[19:31] <axisys> bekks: so I guess I need remove the disk from array B and then create a new raid1 LD with two new disks.. and then add the removed disk to array A logical drive with same size?
[19:32] <bekks> axisys: ???
[19:32] <bekks> axisys: you have 8 slots, and 8 disks. You want 8 single disks in your OS, correct?
[19:33] <axisys> I probably need to backup.. but theoretically adding a disk to the logical drive would not erase data .. correct? here is the current setup
[19:33] <axisys> http://dpaste.com/011DM7R
[19:34] <axisys> i have 8 slots.. but only two disk are in production and software raid.. just inserted two new 1TB disks there
[19:34] <bekks> axisys: And you want to add one new disk to A, and one new disk to B?
[19:34] <axisys> bekks: I cant add a 1TB to a 300GB disk
[19:34] <bekks> Why are you using software raid when having a hardware raid controller?!
[19:34] <sarnold> why aren't you using zfs? :)
[19:34] <bekks> axisys: I am asking what you WANT to do.
[19:34] <axisys> bekks: I want to add 1TB raid1 datadisk
[19:35] <bekks> axisys: So you want a third array, RAID1, right?
[19:35] <axisys> bekks: I bought two 1TB disks for that ... it had only two 300GB physical disks until today ..
[19:35] <bekks> axisys: So you want a third array, RAID1, right?
[19:36] <axisys> bekks: no, I have raid1 off of the 300G disk.. I want to add a second raid1 1TB
[19:36] <bekks> axisys: No. You have - on your raid controller - TWO arrays, RAID0, with ONE disk each.
[19:37] <bekks> axisys: And you want to add a THIRD array, RAID1, 1TB.
[19:37] <bekks> axisys: That can be seen in you pastebin.
[19:37] <axisys> bekks: third array.. correct
[19:37] <axisys> http://dpaste.com/0FVZWZT
[19:38] <axisys> bekks: since this stupid raid controller cannot have more than 2 arrays.. I cannot have a 3rd array
[19:38] <bekks> axisys: the P420i can have up to 24 arrays.
[19:38] <axisys> bekks: seriously.. so why am I getting the max array error ?
[19:38] <bekks> axisys: Which hpacucli command are you using for adding your array?
[19:39] <axisys> bekks: I only ran this command when got the error.. I must not be using right command
[19:39] <axisys> hpacucli controller slot=0 create type=ld drives=2I:1:5 raid=0
[19:39] <axisys> bekks: ^
[19:39]  * ogra_ notes that hpacucli sounds like some aztec city ... 
[19:40] <bekks> axisys: Erm, you are trying to create a single disk raid0, not a two disk raid1.
[19:40] <axisys> bekks: yes.
[19:40] <bekks> axisys: you should make up your mind what you want to do, first.
[19:40] <bekks> 0428 213709 < bekks> axisys: And you want to add a THIRD array, RAID1, 1TB.
[19:40] <axisys> bekks: I just found out about 24 arrays.. I thought it could not do that
[19:40] <bekks> 0428 213727 < axisys> bekks: third array.. correct
[19:41] <bekks> Do you want that 1TB raid1 being a software raid or a hardware raid?
[19:41] <axisys> bekks: I want two more single disk arrays, now that I found out it can have 24
[19:41] <axisys> software raid
[19:41] <axisys> software radi1
[19:41] <axisys> I want to provision them as single disk lun
[19:41] <bekks> Why, when having a HARDWARE raid controller?
[19:41] <axisys> I prefer software raid...
[19:41] <bekks> Can you then unplug the controller and send it to me, please? :P
[19:42] <axisys> bekks: I would love to... hehe
[19:42] <bekks> Or USE it, as a hardware raid controller.
[19:42] <axisys> bekks: I even requested jbod.. but still got a stupid raid controller..
[19:42] <bekks> The P420i isnt stupid at all :)
[19:42] <axisys> bekks: oh well, I was hoping you would show me how to provison a new array
[19:43] <axisys> single disk arrays
[19:43] <axisys> so far did not find anything in google on how to create a new array
[19:44] <bekks> HP has a wonderful documentation on hpacucli
[19:47] <axisys> this does not show how to create an array..
[19:47] <axisys> http://h20565.www2.hpe.com/hpsc/doc/public/display?sp4ts.oid=341566&docId=emr_na-c03493210&docLocale=en_US
[19:48] <axisys> hpacucli controller slot=0 create type=ld drives=2I:1:5 raid=0  <-- where do I say array C ? since array A and B already there
[19:48] <bekks> axisys: "create" tells the controller to create a new array.
[19:49] <axisys> bekks: but it did not work for me.. http://dpaste.com/07R6FB8
[19:56] <hallyn> sarnold: yeah, according to the git tree debian has been using 'libvirt' group since 2008.
[19:57] <sarnold> hallyn: hah. that's some history :)
[20:14] <rstarmer> Hello, I'm trying out the conjure-up openstack install (introduced by both the Canonical folks on the OpenStack summit floor, and the excellent, if short LXD OpenStack demo), and it appears that there's one pre-check missing.  I hadn't created a local ssh keypair, and the install failed due to an inability to find ~/.ssh/id_rsa.  Has anyone else seen this?
[20:15] <rstarmer> And a second build creates a failure "Expecting value: line 1 column 1 (char 0)"  Not a particularly useful error that one :(
[20:16] <axisys> bekks: may be we have to purchase a license to allow more arrays?
[20:16] <axisys> bekks: I see this in help
[20:16] <axisys>  => help add
[20:16] <axisys>  controller slot=5 add licensekey=XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
[21:17] <nacc> any samba folks know if https://bugzilla.samba.org/show_bug.cgi?id=11822 is going to be backported? seen a few requests in #ubuntu over the past few days
[21:45] <rstarmer> so conjure-up seems to have a network model requirement that isn't documented.  the last error I saw before I once again got a  "Expecting value: line 1 column 1 (char 0)" failure was "Neutron can not create an external router"
[21:45] <rstarmer> am I supposed to have an extra interface, or pre-created br-ex or similar?
[21:46] <sarnold> nacc: any ubuntu bugs about it yet? any cves?
[21:46] <nacc> sarnold: no, i was asking the two folks about it in #ubuntu, but no response from them
[21:46] <nacc> sarnold: as to whether they filed a bug
[21:47] <nacc> i dont't think it's a CVE, but it's easy to hit with windows 10?
[21:47] <nacc> not sure
[21:47] <nacc> basically `smbclient ls` not working
[21:48] <bekks> It isnt expected to work :)
[21:48] <nacc> heh
[21:48] <nacc> bekks: i don't know much about samba, just paraphrasing the bug
[22:16] <jetski> I came across the conjure-up project today, has anyone had luck using the lxd-nova feature?
[22:39] <rstarmer> jetski: I've failed every try, I think there's a network config assumption that breaks the deployment
[22:40] <rstarmer> I also ran into an issue with not having had a public/private key defined initally, but that was easier to deal with first go round
[22:43] <jetski> rstarmer: interesting...I didn't know about needing a priv/pub key beforehand. My initial attempts have stalled early at "waiting for Keystone". I am looking thru logs now for other clues.
[23:09] <eatingthenight> Hello, anyone here using KVM? I have used ESXi in the past but got my hands on a few nice servers for my house and don't feel like paying for a license for personal use. KVM looks good but was wondering if it allows for stuff like cluster nodes together so i can control resource provisioning from one central location.
[23:09] <eatingthenight> Can't find much info outside the vanilla setup docs
[23:10] <caliculk> Hm, actually, I have a bit of a problem: E: Can't find a source to download version '1.0.2g-1ubuntu4' of 'libssl1.0.0:amd64'
[23:10] <caliculk> Right now the package is set to pi
[23:11] <caliculk> package status*
[23:15] <genii> !info libssl
[23:15] <jetski> yea i use kvm
[23:15] <genii> !info libssl1.0.0
[23:15] <genii> Hm, should be in main
[23:17] <teward> genii: um, it is?
[23:17] <teward> In component main
[23:20] <jetski> yea as far as i know, you have to manage kvm nodes individually, or use an orchestrator like openstack
[23:21] <genii> teward: So since main is enabled by default, the approach to caliculk's issue for me becomes: did they do sudo apt-get update? Is the archive in their sources.list file working properly otherwise? Is the ethernet connection actually working properly? .... etc :)
[23:24] <eatingthenight> jetski: aaa was just looking at openstack. I think i'll mess around with that :)
[23:26] <jetski> eatingthenight: openstack is a complex beast, I've only had luck getting a fully functional system following this guide: http://docs.openstack.org/developer/openstack-ansible/developer-docs/quickstart-aio.html
[23:27] <jetski> im interested to hear if anyone else has a dead simple deploy method for openstack
[23:28] <eatingthenight> would be nice if they had an ESXi like installer
[23:28] <eatingthenight> but free software rarely does :>
[23:32] <jetski> like i mentioned earlier, I came across this slick openstack installer for the new xenial64 ubuntu release at http://conjure-up.io , but haven't got it working yet. It's deploy method, JuJu 2.0 looks really impressive, though
[23:47] <sarnold> have you tried this yet? http://www.ubuntu.com/cloud/openstack/autopilot