/srv/irclogs.ubuntu.com/2016/05/11/#ubuntu-server.txt

ruben23hi guys anyone can help with this error if i do apt-get update, i get this error ---> W: GPG error: http://extras.ubuntu.com precise Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 16126D3A3E5C119201:14
ruben23how do i removed that key so it wont bother anymore01:14
RoyKruben23: http://askubuntu.com/questions/13065/how-do-i-fix-the-gpg-error-no-pubkey perhaps01:16
RoyKruben23: google usually knows more than people on irc ;)01:17
ruben23RoyK: but i just want to remove the key..coz i dont need it anymore01:17
patdk-lapremoving keys are pointless01:27
patdk-lapif it lists the key, you need it01:27
patdk-lapif you don't need it anymore, remove the repo01:27
ruben23how to do it somehow please01:27
ruben23patdk-lap: how to removed th repo that causing the key error somehow...any help01:29
patdk-lapdunno how you added it01:29
sarnoldfind the http://extras.ubuntu.com line in /etc/apt/sources.list or /etc/apt/sources.list.d/ and edit it as needed01:33
patdk-lapvery strange01:44
patdk-lapfixed my lxc sendmail issue01:44
sarnoldwhat was it?01:45
patdk-lapdunno what happened, cause in my lxc template it is fine, but /var/spool was removed of all group and other permissions01:45
sarnoldo_O01:45
patdk-lapit was the same way on 8 lxc instances01:45
patdk-lapbut my template is fine01:45
patdk-lapand the update script I use to maintain them, doesn't touch /var01:45
patdk-lapI'm cold01:49
patdk-lapI should soak in some nice hot water01:49
=== not_phunyguy is now known as phunyguy
=== rodlogic is now known as Guest70790
ankitkulkarnican any one help me with this question - http://askubuntu.com/questions/770601/could-not-add-sta-to-kernel-driver-hostapd-not-able-to-connect-more-then-1005:32
ankitkulkarniI am getting "could not add sta to kernel driver" for kernel version 4.2.0.27 when i connect more then 10 clients to hotspot in AP mode. The wireless card is intel 316505:33
ankitkulkarniand hostapd version 2.105:33
=== athairus is now known as afkthairus
=== rodlogic is now known as Guest52700
=== afkthairus is now known as athairus
=== athairus is now known as afkthairus
=== rodlogic is now known as Guest73940
KlausedSourcehey, I have trouble getting network time to work on my server. I followed https://help.ubuntu.com/lts/serverguide/NTP.html09:16
KlausedSourcethe problem is (thats why I was looking into it in the first place) that the time is about 6 minutes in the past09:17
KlausedSourceoutput of "date": Mi 11. Mai 11:11:35 CEST 201609:17
hateballKlausedSource: can you manually run ntpdate to update time?09:22
KlausedSourcehateball, I just fixed it. I ran service ntpd "restart" and then service ntpd "reload".09:24
KlausedSourceIn the documentation it is only mentioning reload09:24
KlausedSourcebut that wasnt enough09:24
hateball:)09:25
KlausedSourcehttps://bpaste.net/show/5505b67a807409:25
spm_dragetI used apt-add-repository to add a ppa. When upgrading, it wants to install stuff from this repository. But I only need one package. How do I tell apt to ignore this repository unless I install something epxlicitly from it?10:24
dasjoespm_draget: https://help.ubuntu.com/community/PinningHowto10:26
source47hi guys, any ideas why i get problems with ubuntu 16.10 containers when i run 'systemctl reboot'10:30
source47here is the log https://gist.github.com/developerinlondon/30efa347f13ac820dc5e533d32b4966e10:32
hrwhi10:35
hrwcan someone tell me where I find docs about building https://uec-images.ubuntu.com/releases/16.04/release/ubuntu-16.04-server-cloudimg-arm64-uefi1.img image?10:37
rbasakrcj: ^10:45
rbasakor Odd_Bloke perhaps?10:45
Odd_Blokerbasak: I was gonna say. ;)10:45
Odd_Blokehrw: First thing to note is that uec-images.u.c is deprecated, you should use cloud-images.u.c in future.10:46
Odd_Blokehrw: Secondly, there isn't much documentation, unfortunately; do you have any specific questions that I can help you with?10:46
Odd_Blokerbasak: (Thanks for the ping! :)10:47
hrwOdd_Bloke: I am trying to understand uefi boot stuff on aarch64 and this iamge boots. so would like to experiment a bit with it but it involves rebuilding it10:47
Odd_Blokehrw: Could you achieve what you want by modifying that image?  http://ubuntu-smoser.blogspot.co.uk/2014/08/mount-image-callback-easily-modify.html gives you an easy way of doing that without booting it.10:49
hrwI know how to modify existing image. have fedora/debian/ubuntu/opensuse images on hdd now. ubuntu lacks any information on how to rebuild them.10:50
Odd_Blokehrw: (The original build uses Launchpad but, because the way it runs grants access to internal networks, only Canonical employees are allowed to run image builds)10:50
hrwas 'ubuntu cloud' wiki pages are from <12.04 times10:50
Odd_Blokehrw: So, unfortunately, there isn't a good way to reproduce builds locally. :(10:51
hrwOdd_Bloke: even launchpad servers run software. if build-ubuntu-cloud tool is not opensourced then just say it and I will go to other duties.10:51
hrwok, fine for me10:51
Odd_Blokehrw: I think everything involved is open source, but it's not really designed to run outside of the Launchpad environment, so you'd spend a lot of time getting it working elsewhere.10:52
hrwok10:52
hrwworked at Canonical in past. got used to that some stuff is LP only10:53
Odd_Blokehrw: The relevant LP bit is https://launchpad.net/launchpad-buildd10:53
hrwthanks Odd_Bloke10:53
Odd_Blokehrw: And the live-build and livecd-rootfs packages in the archive are used to do the build.10:53
Odd_Blokehrw: That might be enough to hack something up that works. :)10:54
=== rodlogic is now known as Guest74633
source47any ideas why localed has permission errors? I am running ubuntu15.10 container inside a ubuntu15.10 host. here is the syslog - https://gist.github.com/developerinlondon/b8be2a693cf33bdbd188a3725324e3f811:19
hrwbye11:23
FManTropyxno idea really, but usually I solve such issues by running stuff as root :) such as launching all daemons, then let them chroot and/or change user, drop privs11:37
=== rodlogic is now known as Guest32358
=== ren0v0_ is now known as ren0v0
bc2946088Is there a way to adjust the pg_num to a smaller value after a ceph pool is created?  I'm able to grow the number but that has the opposite affect as I want.12:36
mcdadohello! i installed sshguard on my 14.04 server, is it enough or i need to configure it somehow?12:37
mcdadoand how to set it up? the instructions at http://www.sshguard.net/docs/setup/ are not clear12:38
Picimcdado: their FAQ suggests that you shouldn't need to make any configuration changes off the bat.12:38
ravenxanyone done an upgrade from 12.04 to 14.04 via 'do-release-upgrade' and got stuck?12:39
ravenxit keeps saying it's trying to install iproute212:39
ravenxsince it's package name was changed12:39
bc2946088I think I found my answer, and don't believe it's possible.  Once the pool is created in ceph, you're unable to shrink the placement groups.  You can make them bigger, but not smaller.12:57
=== rodlogic is now known as Guest63806
mcdadoPici: thanks for your reply! I took some time and am starting to see sshguard records in /var/log/auth.log with reports of it blocking IPs13:06
mcdadonow, i also see a lot of "reverse mapping checking getaddrinfo for {hostname} [ip address] failed - POSSIBLE BREAK-IN ATTEMPT!"13:09
mcdadowhat does it mean exactly? the server is doing reverse lookups on connecting IPs and failing?13:09
Picisounds like it.13:09
mcdadodo i need to worry about it?13:09
PiciI wouldn;t.13:10
mcdadothat POSSIBLE BREAK-IN ATTEMPT looks quite scary :D13:10
maswanI think that's from back when hostname-based rules were more common13:10
PiciI used to see that a lot on my logs when I was forwarding ssh traffic through my server.13:10
mcdadoif i were to change ssh port, are there best practices on a good value to choose? i read below 1024 on a serverfault answer, but basically any value will do?13:11
nick125I'd probably avoid any commonly used ports (HTTP, HTTPS, SMTP, etc), but yeah, it doesn't really matter too much13:12
=== prince is now known as prince-
JanCchoosing a different port will likely only lower the number of break-in attempts by weeding out the script kiddies; it's less likely to confuse the professionals much...13:14
mcdadothanks13:15
mcdadoyeah i guess that's okay13:15
=== prince- is now known as prince
JanCat least, that's my opinion  :)13:15
mcdadoso far i disabled root password auth, installed sshguard.. thinking of changing ssh port.. any other low hanging fruit to strengthen a bit more my machine?13:17
ravenxanyone had to deal with an iproute renaming to iproute2 problem here?13:17
ravenxmy do-release-upgrade is buggin' out13:18
JanCmcdado: personally I disable all password authentication13:21
JanCof course you must make sure key authentication works before you do that  :)13:22
mcdadoyeah that would be a good idea, i have already all the keys set up already, no point in having ssh password auth13:23
JanCmcdado: also make sure you have a backup of important keys in a secure place13:24
patdk-wkmcdado, changing ssh port doesn't strengthen anything13:24
JanCespecially if you don't have physical access to that server13:24
mcdadopatdk-wk: i agree, it just obfuscation13:24
JanCor access through some sort of remote console13:24
* patdk-wk is paranoid about remote consoles13:25
patdk-wkthose are normally very insecure devices13:25
patdk-wkand never get firmware updates, if it is even possible13:25
JanCyou don't want to lose access to a server because the PC that had the access key crashed  :)13:25
patdk-wkyes, but you also don't want to expose those remote consoles/ipmi/ilo/... to the internet13:26
JanCpatdk-lap: they can be implemented in many ways13:26
JanCpatdk-wk: ^^^13:26
patdk-wkyes, just very rarely find one that is trustworthy :)13:26
mcdadowhat exactly are remote console?13:27
patdk-wka serial port console? ipmi access, ....13:27
mcdadooh i see13:27
JanCpatdk-wk: also, my VPS/dedi hoster allows me to boot a rescue image, which is different, but can also be used to fix certain issues13:28
patdk-wkya, now with vps/vm's, a virtual console interface is easier for them to implement13:28
patdk-wkbut I have seen providers that have had security issues with those too13:28
JanCthey have that on their dedicated hardware too13:28
JanChave had that for a decade at least13:29
patdk-wkyes, have had issues with it on dedicated hardware being secure at hezlier or however you spell it13:29
patdk-wkI have some of them for my old pre-ipmi machines13:29
patdk-wkbut I stil lwouldn't trust those devices on a non-secure network13:29
JanCa secure network is always better indeed13:32
bc2946088public facing ipmi would be a nightmare13:33
mcdadowell thanks for your feedback! have a nice day13:34
=== rodlogic is now known as Guest68017
=== prince is now known as prince`
bc2946088dpb1_: I got a response on the bug ( https://bugs.launchpad.net/charms/+source/glance/+bug/1492742 ) -- Do you know if I add some extra drives and redeploy openstack using autopilot, that would increase the number of OSDs which in theory would decrease the number of PGs?  Is that the theory?15:53
ubottuLaunchpad bug 1492742 in nova-compute (Juju Charms Collection) "charm needs a pg_num cap when deploying to avoid creating too many pgs" [Medium,Triaged]15:53
dpb1_bc2946088: I believe it would15:56
bc2946088dpb1_: Thanks very much, I'll give it a try.16:00
dpb1_bc2946088: I ran into a similar issue where I started to oversubscribe my ceph cluster, I got these warnings, then a few more.16:01
bc2946088That makes sense, dpb1_.  I was most confused that a month ago when I first deployed the test cloud, everything was working, but this was before Nagios could be included with autopilot.  At first I thought the warning may have been always there and I was just unaware of it, however, just ignoring the error, I was unable to create any instance volumes in horizon.  I've deployed this so many times making incremental changes, the people at the16:07
bc2946088datacenter have no idea what I am doing, but i've been there so much, they obvioulsy think I don't know what I am doing.  :)16:07
dpb1_bc2946088: nagios really helps.  Glad that it's showing you more data. :)16:07
RoyKbc2946088: you might want to test munin too16:11
RoyKor zabbix16:11
bc2946088RoyK: I've dabbled with both, the nice part about nagios is, it's deployed automatically and all the instances are configured, it's turnkey, and gives enough information to satisfy my requirement for the moment.16:12
RoyKwhich version of nagios is this?16:14
* RoyK hasn't been using nagios for years16:14
Pici /2516:16
bc2946088I believe with 14.04 LTS the nagios openstack plugin is 1.2, RoyK.16:16
bc2946088Actually, that's the plugin version, I think nagios is v3, maybe, but not certain.16:19
Kaylashi, i have ubuntu 15.04, and it will be restarted randomly16:27
Kaylason syslog the last line is "(root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)"16:27
Kaylassuggestion?16:28
codepython777I'm trying to create a hotspot on a Intel® Dual Band Wireless-AC 7265 - this is what is giving me trouble. Any suggestions on how to create a wifi-hotspot on ubuntu using this hardware? Or do I need to buy a usb -wifi dongle - if yes, which one?16:28
codepython777I need to do this using the command line16:28
nacccodepython777: why do you need to do it using the commandline (for reference, there is this: https://help.ubuntu.com/16.04/ubuntu-help/net-wireless-adhoc.html)16:31
codepython777nacc: its a commandline server with no ui16:31
nacccodepython777: http://dashohoxha.blogspot.com/2013/06/how-to-setup-wifi-access-point-on-ubuntu.html ?16:33
nacccodepython777: or could you clarify what "this" is, that's giving you trouble?16:34
codepython777nacc: need it for 14.04 or later16:34
nacccodepython777: i'm guessing most of the steps will work (on cursory glance)16:34
codepython777nacc: Let me try and tell you what happens, booting16:36
codepython777AP is not supported by the driver of the wireless card. This script does not work for this driver.16:37
codepython777nacc: Let me try another machine16:38
nacccodepython777: what script?16:40
Kaylasanyone?16:43
naccKaylas: 15.04 is eol16:43
codepython777nacc: the one you showed me for 12.0416:44
codepython777http://dashohoxha.blogspot.com/2013/06/how-to-setup-wifi-access-point-on-ubuntu.html16:44
Kaylasnacc yeah, i know but i need to investigate, could you gimme me suggestion about that?16:44
nacccodepython777: i wouldn't ever run a random script, but that's just me; the steps there clearly state what to do, i would do them manually16:45
nacccodepython777: it's possible your hardware doesn't support runing in AP mode16:45
naccKaylas: syslog is probably not hte right place to look, as it's just the last recorded thing, but if ti's a kernel panic, e.g., then you're not going to record anything.16:46
codepython777nacc: on another machine: error: cannot find a LSB script for hostapd16:46
naccKaylas: if you have another computer, you could try and set up a console, but not sure that'd help -- but since 15.04 is eol, it's easily possible it's some random bug that is now fixed16:46
naccKaylas: you should move to a supported release.16:46
nacccodepython777: what emits that error? what version of ubuntu is on that machien?16:47
codepython777nacc: install_wifi_access_point.sh: line 53: /etc/hostapd/hostapd.conf: No such file or directory16:48
codepython77714.04 LTS16:49
codepython777sorry 15.10 actually16:49
nacccodepython777: as i said, i woulnd't just blindly run the script, i would go through the steps, i don't know what the script they suggest does, although i assume it's similar to the blog post16:50
nacccodepython777: weird that there's no /etc/hostapd , is hostapd instaleld?16:50
codepython777nacc: http://paste.ubuntu.com/16365897/16:53
naccWARNING: The following packages cannot be authenticated!16:53
nacc hostapd16:53
naccE: There are problems and -y was used without --force-yes16:53
naccupdate-rc.d: error: cannot find a LSB script for hostapd16:53
naccnot sure where you're getting hostapd from16:53
naccbut since it didn't get installed, it can't proceed16:54
naccand that script does no error checking16:54
naccas i said, don't just run random scripts16:54
naccespecially as root!16:54
codepython777nacc: thanks16:55
nacccodepython777: i would just go through the steps, so that you know what is being done to the system, from that blog page16:58
=== afkthairus is now known as athairus
cabbage_handsCan you guys help me,17:28
cabbage_hands Is there a way to stop effectively everything started by Supervisord ?17:28
codepython777nacc: on a laptop I followed that recipe - everything went through , but no ssid! ?17:38
codepython777nacc: dhcpd failed17:41
HeebieHello, I'm trying to downgrade a set of packages (ubuntu-zfs)  by a version.  Management wants a specific version that is no longer available in the ppa repository.17:58
HeebieI'm having an impossible time getting things to install in-order, or even to install at all. (modules won't compile etc..)  Does anyone know of a good guide for installing specific versions with their specific dependencies?17:58
coreycbbeisner, the following are ready to promote to kilo-proposed in the UCA: ceilometer, cinder, glance, heat, horizon, keystone, neutron, neutron-lbaas, and nova18:03
rbasakHeebie: apt-get install foo=<version> and let apt sort it out? It does need to have all the necessary versions available in its repositories, though, so you might need to create a local one.18:09
Heebiethe man page says =<package+version>, should it be  package=version ??18:15
HeebieI have all the .deb files available to me on my "old" SAN that's borked.. the OS works fine.18:16
rbasakYes.18:18
rbasakYou can use apt-ftparchive (once for packages, once for release) to create a local apt repository from a bunch of debs in a directory.18:18
Heebiehmmm.... never heard of that bit before :)18:19
RoyKHeebie: I hope you haven't enabled new feature flags :P18:23
HeebieRoyK: No... management is terrified of the fact that if we enable new feature flags, there's no way to roll that back.18:25
Heebierbasak: apt-get install (ubuntu-zfs=7 | ubuntu-zfs-7~precise | ubuntu-zfs-7~precise_amd64)  << all fail with "version <version> of <package> was not found" (even though the .deb files are in /var/cache/apt/archive)18:27
beisnercoreycb, ack, on it18:28
blizzowGive us back UTC as a timezone choice in server!18:28
blizzow*during the install.18:28
RoyKblizzow: choose Reykjavík - it's the same18:28
coreycbbeisner, thanks18:28
blizzowRoyK: You can't. It gives you the option based on your keyboard language choice.18:29
RoyKblizzow: may even be a bit fun if you autoconfigure the language :)18:29
blizzowThat's effing moronic.18:29
RoyKjust a wee workaround :)18:29
blizzowNot your suggestion, but the fact that the change has to happen after install.18:30
beisnerhey coreycb - do you know that status of libvirt-python @ kilo staging -> proposed? http://pastebin.ubuntu.com/16367926/18:31
RoyKwell, most people have something like configuration management, like ansible or puppet or chef or cfengine or something, and with those, it shouldn't be a big problem standardising things18:31
coreycbbeisner, I'm not sure of the status on that18:31
beisnercoreycb, ok, will leave it as-is18:31
coreycbbeisner, ok18:31
blizzowRoyK: I use ansible and I agree it's trivial to make the change. The fact that the change has to happen is what's stupid.18:32
RoyKblizzow: there are always stupid changes like that18:32
RoyKblizzow: better setup your ansible right, and it won't be an issue18:32
blizzowRoyK: That's just NOT how it should work! The installer functionality has been reduced to what end?18:33
RoyKblizzow: not my choice - just saying that's the way things are - customisation of the system is better done with a vanilla system18:34
blizzowOn top of that, let's say I want to screw around and test a new release of ubuntu as a one off and don't want to use ansible/puppet/chef/jumpstart. The functionality to choose UTC as a timezone should be included as that's a pretty damn standard timezone to use on a server! It just makes the post-install process unnecessarily complicated.18:36
RoyKblizzow: keep on blurting, or file a bug report - your choice18:38
blizzowI will file a bug report but I will blurt in here because whomever made that decision should feel guilty and ashamed.18:41
beisnercoreycb, ok, pushed all of those to kilo-proposed18:46
coreycbbeisner, awesome, thanks18:46
rbasakHeebie: /var/cache/apt/archive has nothing to do with it. You need to put the debs in a repository listed in sources.list.18:59
Heebierbasak: Oh. =O  I guess that's why you mentioned that ftp-repository bit.  Perhaps I should have looked it up!19:07
ddellavcoreycb mitaka sru complete: lp:~ddellav/ubuntu/+source/neutron lp:~ddellav/ubuntu/+source/neutron-fwaas lp:~ddellav/ubuntu/+source/neutron-lbaas lp:~ddellav/ubuntu/+source/neutron-vpnaas https://bugs.launchpad.net/ubuntu/+source/neutron-vpnaas/+bug/158067419:17
ubottuLaunchpad bug 1580674 in neutron-vpnaas (Ubuntu) "[SRU] mitaka point releases" [Undecided,Invalid]19:17
coreycbddellav, thanks they look good, I made a minor change to the bug #.  do they build ok?19:34
ddellavcoreycb yep, all builds pass19:34
coreycbddellav, ok pushed and uploaded.  we're going to need that charm fix to test these.19:38
coreycbddellav, mind adding 8.1.0 to the master branches too?  we're in a weird point of the release where we haven't released anything for yakkety so yakkety is basically mitaka right now.20:19
ddellavcoreycb sure20:19
coreycbddellav, thanks20:19
coreycbbeisner, can you also promote oslo.messaging to kilo-proposed?  that's new in the past few hours.20:33
beisnercoreycb, ack, triggered:  oslo.messaging 1.8.3-0ubuntu0.15.04.2~cloud1 --> kilo-proposed20:37
coreycbbeisner, thanks20:37
beisnercoreycb, yw :)20:38
=== ubuntu is now known as Guest55387
=== rodlogic is now known as Guest93911
=== rodlogic is now known as Guest14174
Darkman802I'm looking to practice with cloud-init before using it on a cloud provider. I'm on a Windows host at the moment and I'm wondering if anyone knows how to get this set up using Virtualbox?22:26
=== rodlogic is now known as Guest67947
Darkman802Or maybe a better question is is it possible to use cloud-init on ubuntu server instead of the cloud images, since getting the cloud images to work on virtualbox is a bit of a pain.23:41
sarnoldDarkman802: the server team has a uvt-kvm wrapper around libvirt/qemu that you may find more friendly to the cloud images23:43
Darkman802sarnold: Thanks, I'll give it a look.23:46

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!