/srv/irclogs.ubuntu.com/2016/05/10/#ubuntu-server.txt

SachiruFor NAS boxes for remote sites, (which run one or two Nginx + PHP-FPM + MariaDB + Ruby stack VMs), what's a good lightweight log collection and analysis tool? These boxes are lightweight, Core i3s with 16GB of RAM only.00:13
naccSachiru: i have no idea on the details, but maybe look at logwatch?00:17
=== rodlogic is now known as Guest97922
argeshallyn: make it so00:54
=== rodlogic is now known as Guest47802
hallynarges: oh ye of too much faith02:16
zorbsonehow do I show directory files in say /var/www/html/school on the internet. I keep getting error 403. I've chmodded it and it looks like this: (4 drwxr-xr-x 3 root root    4096 May  9 15:20 school) -- Inside the directory the files are set as:  -rwxr-xr-x 1 root root; any ideas?02:19
SierraKomodozorbsone: For apache (Not sure on other web server software), the director and files should be owned by www-data:www-data02:23
SierraKomododirectory*02:23
sarnoldSierraKomodo: the ownership doesn't matter so long as the modes allow the web server process to read the files02:37
SierraKomodoFair point; usually easiest to provide ownership to directories/folders in /var/www in my experience though02:38
SierraKomodoBetter response probably would've been 'The directory and files should be readable by www-data, and the directory executable by www-data'02:39
SierraKomodoIn hindsight, should also have checked .htaccess to see if indexes was denied.02:39
=== JanC is now known as Guest22660
=== JanC_ is now known as JanC
=== rodlogic is now known as Guest50280
=== ubuntu is now known as Guest957
=== rodlogic is now known as Guest7886
=== rodlogic is now known as Guest67605
=== rodlogic is now known as Guest18647
=== thumper is now known as thumper-afk
smbhallyn, Meh, no fun without some risk. And I would not really expect us to want to go back anyway. :)07:24
danbuntuHi all I'm trying to get some eyes on #157981807:54
danbuntuThe recent samba upgrade has borked winbind/ mod_auth_ntlm07:54
danbuntuThis is causing a fair bit of grief in the moodle/ education community as it's broken single sign on07:54
=== rodlogic is now known as Guest6082
=== thumper-afk is now known as thumper
TakumoHi all, anyone got a workaround for installing PHP 5.6 on Xenial?08:33
cpaelzernacc: did you look at samba recently? - any idea about bug 1579818 mentioned above by danbuntu08:35
ubottubug 1579818 in samba (Ubuntu) "Samba 4.3.9 causes winbind/ mod_auth_ntlm to segfault" [Undecided,Confirmed] https://launchpad.net/bugs/157981808:35
=== rodlogic is now known as Guest81321
sexytimesay i got a new box. and i installed ubuntu server on it. i would like to remove everything that i wont be using the server for. in this case. all im going to run in this box is a nodejs server09:07
sexytimekeeping this in mind. how would you recommend i go about removing the stuff i do not care for09:07
sexytimei heard in #ubuntu that just doing a minimal install is fine enough. is that correct?09:08
rbasakDefine what you want removed.09:08
rbasakA default server install is fine enough, too.09:08
rbasakIf you don't want the default, then you need to say what you want removed.09:08
sexytimeeverything that does not hinder my ability to run with the nodejs server09:09
sexytimesorry09:09
rbasakSo things like bash autocomplete?09:09
sexytimeanything that does not relate with the nodejs server09:09
sexytimeok maybe not that09:09
rbasakAnd less, to view manpages?09:09
rbasakIt's all these little things that we make sure the default install has. So a sysadmin is comfortable.09:10
sexytimehm. i think i'll be fine with the minimal install. + sshd09:10
rbasakThere's also http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/ if you want to start from an absolutely minimal filesystem. The only thing that works is the package manager so you can install packages to do things. But many things aren't present - eg. no DHCP client support.09:11
sexytimehm nice. i'll give it a thought09:13
sexytimethank you rbasak09:13
sexytimesorry im a bit noob with ubuntu servers. what other package managers etc are on there in a default minimal install? i know there is apt-get and pip. any other i should be aware of and keep upgrading?09:14
sexytimei wish to keep my software updated at all times for security reasons. thats why09:15
rbasakOn a default install, apt is sufficient.09:17
sexytimealright thank you so much. i appreciate the help09:17
rbasakIf you use a third party package manager, then updates for what you install through there are up you to use that tool, eg. pip.09:18
sexytimeyeah. i was trying to ask what comes with the default that i may not be aware of09:19
sexytimethe stuff i add i try to remember the best i can09:19
=== athairus is now known as afkthairus
=== rodlogic is now known as Guest87809
lovetruthhello :)10:51
lovetruthI am looking for some good ERP software which: *is opensource; *uses sql; *can do document management/tracking -> preferably, using the already in use samba server as storage (already have a directory/file structure for the files...); *has some web interface; *if possible, with email notification of users that they have new document to review/approve10:51
lovetruthubuntu server 14.04 here10:51
lovetruthtaking a look at Alfresco and OpenKM right now...10:53
hateballlovetruth: there is odoo, dont remember if it has all those bits. also it was a bit of a pain to setup, docs are scarce10:57
lovetruthone of the most important requirements for the erp software is to be able to do tracking (where the doc is)/review (view and change something if needed, with any software the user chooses - this is why the ERP should have cifs/samba support for file storage, with directory structure of documents chosen by me)/approval (view and eventually send/etc the document). I should be able to set some serial workflow for the document, 11:06
lovetruthlike: document created on samba server, folder X/y/Z. User A notified, has to review. User A finnished, User B notified. User B now reviews... etc, User C, etc. Some admin users can view at least where the document is, where the workflow stoped, etc...11:08
bigonhi11:28
bigonare there any objections if I'm hijacking the "selinux" package name in debian?11:29
bigonATM we have a selinux-basics package in debian an I was thinking about renaming it11:29
bigonin ubuntu I see that there are some upstart scripts there11:30
bigondo you actually care?11:30
bigonlast upload of that package is 2012, so...11:31
=== dzragon^ is now known as dzragon
pirx_hello! how do i go about fixing apt dependency problems like this? any idea? http://pastebin.com/i8zzgnRf11:51
=== sexytime is now known as gitgud
rbasakpirx_: do you have apt repositories for both lucid and precise enabled? That can cause problems like this.11:58
rbasakpirx_: if apt complains that something is needed and is not going to be installed, you can add that to the install line explicitly, and then apt should tell you why it cannot be installed.11:59
pirx_will try!11:59
pirx_No apport report written because MaxReports is reached already12:11
pirx_rbasak: how can i see if repos are enabled for both lucid and precise?12:11
pirx_when that server was originally installed, an external repo for postgres was added12:12
pirx_sources.list.d/pitti-postgresql-lucid.list12:12
pirx_but that repo is commented out in that file now12:12
pirx_now i removed it even12:13
pirx_doing apt update again12:13
pirx_same thing12:14
rbasakpirx_: perhaps you don't still have the repos enabled, but you shouldn't be using any packages from that repo still. Can you upgrade those packages to ones available from precise's official repo?12:15
pirx_i would like to try, but how? :)12:18
pirx_dpkg -i manually?12:18
rbasakapt-get install the right package names. It should use only enabled repos, so precise ones.12:19
rbasakMake sure you take a full backup first.12:19
pirx_luckily this is a virtual staging server12:21
pirx_so i can just snapshot it12:21
pirx_but i cant do "apt-get -f install postgresql-9.1" anyway12:23
pirx_http://pastebin.com/u9RbFqH012:23
pirx_i wonder if i can uninstall and reinstall postgres12:24
pirx_will the data survive? who knows...12:24
rbasakSo try: apt-get -f install postgresql-9.1=9.1.21-0ubuntu0.12.04 postgresql-client-9.1=9.1.21-0ubuntu0.12.0412:25
=== rodlogic is now known as Guest48101
pirx_i did a remove and then install on the postgresql packages12:31
pirx_it worked!12:31
pirx_the data survived12:31
pirx_it was a hot standby replicated server12:31
pirx_now i will try the same on the master12:31
pirx_and i can install java just fine12:32
pirx_good!12:32
pirx_rbasak: thanks!12:32
=== rodlogic is now known as Guest2307
pirx_rbasak: worked like a charm with the master server too:)13:30
rbasakGreat!13:31
ktosiekHi! I have a server with postfix doing basic checking and proxying. Now I want that server to be able to send mail from cron.13:34
ktosiekIs there any good way to setup something like that? Postfix's next hop does not handle the addresses I want to send to13:35
=== rodlogic is now known as Guest28754
caribourbasak: remember my makedumpfile MP of yesterday ?13:48
caribourbasak: is the merge actually done through the LP's web interface or from the CLI on the git repo ?13:49
=== ShaRose_ is now known as ShaRose
dasjoesarnold: hey! I've got a somewhat new problem. I have to run a php cli cronjob as user x, and serve some php as www-data. Both php scripts need access to a single id_rsa (and execute stuff). What's the recommended way to do this, without running the cronjob as www-data directly14:07
hallynarges: smb: zul: ok so we're all ok with bumping libvirt in yakkety i think;  do any of you want to test anything more before i really ship?  smb, a xen test perhaps?14:08
hallynif not that's fine - i'll ship :)14:09
smbhallyn, I still have to set up yakkety xen hosts so ... just go ahead14:09
hallynkewl, will wait on zul response the hit go14:12
hallynthen let the bugpage floodgates open14:12
=== prince is now known as \me
=== \me is now known as prince
=== rodlogic is now known as Guest8122
devster31hi people, where can I find the .config file used to build the kernel of my current ubuntu installation?15:01
sdezieldevster31: /boot/config-$(uname -r)15:02
jeskwhen trying to install Ubuntu Server 16.04 LTS the installer says "Failed to retrieve the preconfiguration file.....file:///cdrom/preseed/ubuntu-server.seed".15:21
jeskwhen I skip this error I have to install manually but then it fails to detect my NICs15:22
jeskits a standard HP DL380 machine15:22
jeskgen9 I believe15:22
=== chuck__ is now known as zul
devster31sdeziel: thanks15:24
nacccpaelzer: only in the context of the server guide, not bugs themselves (yet)15:25
cpaelzernacc: ok, just saw it scrolling by this morning and wanted to see if you might know more15:27
cpaelzernacc: did you complete the smaba section already last week?15:27
cpaelzernacc: because I have thre mp's submitted and I think it is about time they do another release15:27
cpaelzernacc: but we wanted to wait for samba to be refreshed15:28
nacccpaelzer: yes, i did, doug was going to review15:28
cpaelzernacc: great15:28
nacccpaelzer: i belive i marked it that way on the wiki, but i might have forgotten to updated15:28
cpaelzernacc: I'll send doug a reply on my last mail and set you on CC15:30
=== rodlogic is now known as Guest54704
nacccpaelzer: sounds good, thanks15:32
cpaelzernacc: might you have a mp link for me to refer to ?15:32
nacchttps://code.launchpad.net/~nacc/serverguide/samba/+merge/29344215:33
naccin reply here, he did say he might have to wait  aweek or so15:33
cpaelzernacc: yeah just read it - thanks for the link15:37
cpaelzernacc: your inbox should just have grown by one15:37
nacccpaelzer: ack and thanks15:39
hallynzul: though i'm stil worried about how bug 1579922 affects libvirt upgrade15:39
ubottubug 1579922 in init-system-helpers (Ubuntu) "dh_systemd_enable fails due to 'preset' when service file is renamed" [Undecided,New] https://launchpad.net/bugs/157992215:39
hallynmeh.  i guess i can't push until that's fixed in one pkg or the other15:40
=== deadnull_ is now known as _deadnull
zulhallyn:meh15:41
rbasakcaribou: I'm not sure if LP can do it. I don't see a button. Could it do it with bzr? Pushing with git from the CLI should certainly work. I believe LP will pick up that it happened, too.15:44
caribourbasak: ok, just wanted to be sure that I wasn't chasing the obvious15:45
=== alex___ is now known as cebalrai
cebalraiIs there a reason, why nfs4.1 is not used by default with ubuntu clients?15:50
=== rodlogic is now known as Guest38353
hallynzul: wait, upgrade went fine this time.  lemme try a few more15:52
hallynhm, can't get it to fail now.15:56
nacccpaelzer: looks like upstream and marc have that one under control, fwiw15:59
cpaelzernacc: about doc?16:00
nacccpaelzer: that samba bug, sorry16:00
cpaelzernacc: np, ok16:00
=== chuck__ is now known as zul
=== _deadnull is now known as deadnull_
=== rodlogic is now known as Guest8087
LostSoulhi17:24
LostSoulIs there chance to do sub search in nss_base_passwd ?17:24
LostSoulLike when I want to check if user is memberof=XXX or member of subgroups of that group?17:24
jesk 17:30
LostSoul?17:32
LostSoulSo I'm trying to setup libnss/ldap login to server based on AD membership17:32
LostSoulProblem is I can force it to allow login members that are member of X group or that are member of GROUPS that are member of thix X group17:32
LostSoulI'm only allowed when user is member of X group, but not when he is member of group that is member of that group17:32
LostSoulAny ideas?17:32
patdk-wkthat is a limitation of AD17:38
patdk-wksame issue when I use groups in sharepoint17:38
patdk-wkusers in a subgroup of a group, don't work17:38
=== rodlogic is now known as Guest99896
=== afkthairus is now known as athairus
LostSoulpatdk-wk: So there is no workaround on that?17:41
patdk-wkvia ldap? dunno17:42
patdk-wkit works fine for me17:42
patdk-wkmy user is a member of groups of subgroups works fine in ubuntu with AD user17:42
patdk-wkbut I do not use ldap to interface to AD for that17:42
LostSoulHmm17:43
LostSoulSo how do you check it?17:43
LostSoulI mean line that verify it17:43
patdk-wkI am using sssd17:43
=== chuck__ is now known as zul
=== rodlogic is now known as Guest21410
sarnolddasjoe: normally you'd make the key file owned by a group and have both the cgi and the cli programs run with that group ownership, but that might be annoying for one or the other of these tools. You could use posix acls to give both www-data and the cli user access to the file, see setfacl manpage for details18:36
* patdk-wk wonders when that question was asked18:39
sarnoldpatdk-wk: four hours ago? heh18:55
patdk-wkdunno, count time by scrollback pages :)18:57
sarnoldoh I'd never find it -that- way, /lastlog -hilight 10  :) heh18:57
patdk-wkI just use scrollback, and have it set to autohighlight keywords18:58
arooniwhat logs would i check in /var/log if my server unexpectedly restarted19:05
patdk-wkprobably none19:06
patdk-wknormally unexpectedly restarted == wasn't able to log why19:06
aroonibut wouldnt there be some indication of the last things that were happening19:07
aroonibefore it restarteed?19:07
aroonirestarted *19:07
patdk-wkif whatever was last happening logged stuff? sure19:07
patdk-wkif the disk flushed the write buffer? sure19:07
patdk-wkor, if the kernel flushed the write buffer19:08
patdk-wkbut we wouldn't know what was happening19:08
patdk-wkso dunno what log to look in, it's your server19:08
patdk-wkthe only *generic places to look is dmesg and syslog19:08
patdk-wkother than that, heh, depends on how you configured and what your running19:08
arooniwell thanks for breaking it down19:15
aroonii'm a bit noob to linux sysadmin ;; coming at it as an app developer19:15
qman__Usually if a server restarts on its own, it's a hardware problem19:20
qman__Software problems produce errors and crashes, not reboots19:20
qman__Unless you intentionally configured it otherwise, of course19:22
=== rodlogic is now known as Guest29652
beleahi, i've got an ubuntu server 16 on 3x120gb ssd disks ... the partitioning is quite weird a total of 180 gb ... http://pastebin.com/5duPiwzX19:36
beleaanyone has any ideas why this happens? :-?19:36
sarnoldwhat's weird?19:42
patdk-wkI don't see any partitioning, only filesystems19:43
patdk-wk20g, and 91gigs19:44
sarnoldwhen I installed on a system with 120 gig hard drive and 128 gigs of ram, the installer gave me 900 megabytes for / and 120 gigabytes for swap19:46
beleai dont get why it's broken into 16gb filesystems19:46
sdezielbelea: those 16GB mounts are tmpfs19:46
beleaand the total is 180gb not near to 300+19:47
beleaso i actually just have 1 x 120 gb mounted ?19:48
beleain the dmesg i see sda sdb and sdc each 120gb19:48
belea[sda] 234441648 512-byte logical blocks: (120 GB/111 GiB)19:50
coreycbarges, testing has completed successfully for bug 156950220:06
ubottubug 1569502 in Ubuntu Cloud Archive liberty "[SRU] liberty point releases" [High,Fix committed] https://launchpad.net/bugs/156950220:06
dasjoesarnold: thanks, I'll read about that. I had hoped for something automagically, like running the cgi as the normal user when serving files from that user's public_html20:08
ExecutionerIs it a problem if I get [pcilib: Cannot open /proc/bus/pci; lspci: Cannot find any working access method.] output to the terminal during the init of do-release-upgrade?20:10
sdezieldasjoe: I'd be curious to know if the SSH client will accept to use a key file owned by someone else (even if the an ACL allows it to). So please let us know how it goes :)20:10
ExecutionerThis is where it asks me to continue even if I'm connecting thru SSH20:10
Executionererr20:20
Executioner"The required dependency 'apt (>= 1.0.10.2ubuntu2)' is not installed." During a do-release-upgrade, what?20:20
argescoreycb: i'll promote tomorrow since its only 6 days. that ok?20:30
coreycbarges, definitely, thanks.  I lost count. :)20:31
=== rodlogic is now known as Guest74084
bc2946088I've tried multiple times to deploy openstack using autopilot and though the environment does deploy, nagios shows a ceph health-warn that i've been unable to resolve.  I currently have a fresh deployment in that state after it was freshly deployed, has anyone else experienced that with ceph/ceph and autopilot?21:33
roaksoaxdpb1_: ^^21:45
sarnolddasjoe: you might be able to do something like that via php-fpm21:47
=== rodlogic is now known as Guest73492
dpb1_bc2946088: do you know how to get access to the underlying environment?21:48
dpb1_bc2946088: basically this: http://askubuntu.com/questions/60642221:49
dpb1_bc2946088: do that, then do juju ssh ceph-mon/0, and show me 'ceph status' as the root user please21:49
=== prince is now known as prince|Away
=== prince|Away is now known as prince
bc2946088Sorry, went to grab a pizza, @dpb1_.  I havne't had much success connecting to any juju enviroment, but I'll give it a whirl following that link.22:16
dpb1_bc2946088: ya, that is where the real magic is22:18
bc2946088dpb1_: http://paste.ubuntu.com/16353352/22:24
bc2946088Do I need to add the containers to bind?22:24
bc2946088oh, nevermind, didn't realize I was connected, regardless of the error22:25
bc2946088Here is the relevant, ceph status, http://paste.ubuntu.com/16353372/ dpb1_22:26
bc2946088It's amazing how helpful it is when you can connect to the lxc containers.  Ha, I really couldn't get anywhere from the physical machines.  http://paste.ubuntu.com/16353393/22:29
bc2946088any idea where I set 'mon pg warn max per osd = 500' the changes didn't stick after restarting the service or the host.. So I am assuming it's getting ceph.conf from somewhere.22:56
sarnoldbc2946088: may grep around in https://jujucharms.com/ceph/xenial/0  ?23:03
patdk-laplhmm, having a most horrible issue with sendmail and lxc23:23
dpb1_bc2946088: you need to be root23:36
dpb1_sudo ceph status23:36
dpb1_you will get something more interesting23:37
bc2946088yeah, figured that, shortly after and then did another paste, http://paste.ubuntu.com/16353393/23:37
dpb1_bc2946088: https://bugs.launchpad.net/charms/+source/glance/+bug/149274223:38
ubottuLaunchpad bug 1492742 in nova-compute (Juju Charms Collection) "too many PGs per OSD" [Medium,Triaged]23:38
dpb1_bc2946088: could you add your experience there (sorry, I'm not a ceph expert)23:39
dpb1_bc2946088: if you add debugging details, I'll get someeone to chime in tomorrow23:39
bc2946088yeah, will do, I did read that over the past couple minutes, and it matches my issue.  There is a work around in changing a ceph mon value to increase the pgmax, but sadly, I'm unsure where to set it.  By setting it in ceph.conf on the container, the changes are lost when the service restarts, or the instance reboots.23:40
bc2946088I previously deployed the same setup with one less physical node, which has 3 less drives and I didn't have any troubles.23:42
dpb1_bc2946088: where you can see all the openstack services with 'juju status'23:42
dpb1_bc2946088: do 'juju get ceph-mon'23:42
dpb1_or 'juju get ceph-osd'23:43
dpb1_then, you can change things with 'juju set ceph-mon "key=value"23:43
bc2946088oh wonderful!  I just accidentally marked one of the nodes as broken and now it's no longer deployed.  I'll redeploy and give that a try, thanks for all your help.  For the life of me, I couldn't figure out how to connect to the juju instances, so I'm leaps and bounds ahead23:46
dpb1_bc2946088: yes, everything is 'juju get' 'juju set' once you know where to look.  and please do mark your findings in that bug.  Thanks!23:46
bc2946088I will certainly add them once I can test further!23:47

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!