[01:14] <ruben23> hi guys anyone can help with this error if i do apt-get update, i get this error ---> W: GPG error: http://extras.ubuntu.com precise Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 16126D3A3E5C1192
[01:14] <ruben23> how do i removed that key so it wont bother anymore
[01:16] <RoyK> ruben23: http://askubuntu.com/questions/13065/how-do-i-fix-the-gpg-error-no-pubkey perhaps
[01:17] <RoyK> ruben23: google usually knows more than people on irc ;)
[01:17] <ruben23> RoyK: but i just want to remove the key..coz i dont need it anymore
[01:27] <patdk-lap> removing keys are pointless
[01:27] <patdk-lap> if it lists the key, you need it
[01:27] <patdk-lap> if you don't need it anymore, remove the repo
[01:27] <ruben23> how to do it somehow please
[01:29] <ruben23> patdk-lap: how to removed th repo that causing the key error somehow...any help
[01:29] <patdk-lap> dunno how you added it
[01:33] <sarnold> find the http://extras.ubuntu.com line in /etc/apt/sources.list or /etc/apt/sources.list.d/ and edit it as needed
[01:44] <patdk-lap> very strange
[01:44] <patdk-lap> fixed my lxc sendmail issue
[01:45] <sarnold> what was it?
[01:45] <patdk-lap> dunno what happened, cause in my lxc template it is fine, but /var/spool was removed of all group and other permissions
[01:45] <sarnold> o_O
[01:45] <patdk-lap> it was the same way on 8 lxc instances
[01:45] <patdk-lap> but my template is fine
[01:45] <patdk-lap> and the update script I use to maintain them, doesn't touch /var
[01:49] <patdk-lap> I'm cold
[01:49] <patdk-lap> I should soak in some nice hot water
[05:32] <ankitkulkarni> can any one help me with this question - http://askubuntu.com/questions/770601/could-not-add-sta-to-kernel-driver-hostapd-not-able-to-connect-more-then-10
[05:33] <ankitkulkarni> I am getting "could not add sta to kernel driver" for kernel version 4.2.0.27 when i connect more then 10 clients to hotspot in AP mode. The wireless card is intel 3165
[05:33] <ankitkulkarni> and hostapd version 2.1
[09:16] <KlausedSource> hey, I have trouble getting network time to work on my server. I followed https://help.ubuntu.com/lts/serverguide/NTP.html
[09:17] <KlausedSource> the problem is (thats why I was looking into it in the first place) that the time is about 6 minutes in the past
[09:17] <KlausedSource> output of "date": Mi 11. Mai 11:11:35 CEST 2016
[09:22] <hateball> KlausedSource: can you manually run ntpdate to update time?
[09:24] <KlausedSource> hateball, I just fixed it. I ran service ntpd "restart" and then service ntpd "reload".
[09:24] <KlausedSource> In the documentation it is only mentioning reload
[09:24] <KlausedSource> but that wasnt enough
[09:25] <hateball> :)
[09:25] <KlausedSource> https://bpaste.net/show/5505b67a8074
[10:24] <spm_draget> I used apt-add-repository to add a ppa. When upgrading, it wants to install stuff from this repository. But I only need one package. How do I tell apt to ignore this repository unless I install something epxlicitly from it?
[10:26] <dasjoe> spm_draget: https://help.ubuntu.com/community/PinningHowto
[10:30] <source47> hi guys, any ideas why i get problems with ubuntu 16.10 containers when i run 'systemctl reboot'
[10:32] <source47> here is the log https://gist.github.com/developerinlondon/30efa347f13ac820dc5e533d32b4966e
[10:35] <hrw> hi
[10:37] <hrw> can someone tell me where I find docs about building https://uec-images.ubuntu.com/releases/16.04/release/ubuntu-16.04-server-cloudimg-arm64-uefi1.img image?
[10:45] <rbasak> rcj: ^
[10:45] <rbasak> or Odd_Bloke perhaps?
[10:45] <Odd_Bloke> rbasak: I was gonna say. ;)
[10:46] <Odd_Bloke> hrw: First thing to note is that uec-images.u.c is deprecated, you should use cloud-images.u.c in future.
[10:46] <Odd_Bloke> hrw: Secondly, there isn't much documentation, unfortunately; do you have any specific questions that I can help you with?
[10:47] <Odd_Bloke> rbasak: (Thanks for the ping! :)
[10:47] <hrw> Odd_Bloke: I am trying to understand uefi boot stuff on aarch64 and this iamge boots. so would like to experiment a bit with it but it involves rebuilding it
[10:49] <Odd_Bloke> hrw: Could you achieve what you want by modifying that image?  http://ubuntu-smoser.blogspot.co.uk/2014/08/mount-image-callback-easily-modify.html gives you an easy way of doing that without booting it.
[10:50] <hrw> I know how to modify existing image. have fedora/debian/ubuntu/opensuse images on hdd now. ubuntu lacks any information on how to rebuild them.
[10:50] <Odd_Bloke> hrw: (The original build uses Launchpad but, because the way it runs grants access to internal networks, only Canonical employees are allowed to run image builds)
[10:50] <hrw> as 'ubuntu cloud' wiki pages are from <12.04 times
[10:51] <Odd_Bloke> hrw: So, unfortunately, there isn't a good way to reproduce builds locally. :(
[10:51] <hrw> Odd_Bloke: even launchpad servers run software. if build-ubuntu-cloud tool is not opensourced then just say it and I will go to other duties.
[10:51] <hrw> ok, fine for me
[10:52] <Odd_Bloke> hrw: I think everything involved is open source, but it's not really designed to run outside of the Launchpad environment, so you'd spend a lot of time getting it working elsewhere.
[10:52] <hrw> ok
[10:53] <hrw> worked at Canonical in past. got used to that some stuff is LP only
[10:53] <Odd_Bloke> hrw: The relevant LP bit is https://launchpad.net/launchpad-buildd
[10:53] <hrw> thanks Odd_Bloke
[10:53] <Odd_Bloke> hrw: And the live-build and livecd-rootfs packages in the archive are used to do the build.
[10:54] <Odd_Bloke> hrw: That might be enough to hack something up that works. :)
[11:19] <source47> any ideas why localed has permission errors? I am running ubuntu15.10 container inside a ubuntu15.10 host. here is the syslog - https://gist.github.com/developerinlondon/b8be2a693cf33bdbd188a3725324e3f8
[11:23] <hrw> bye
[11:37] <FManTropyx> no idea really, but usually I solve such issues by running stuff as root :) such as launching all daemons, then let them chroot and/or change user, drop privs
[12:36] <bc2946088> Is there a way to adjust the pg_num to a smaller value after a ceph pool is created?  I'm able to grow the number but that has the opposite affect as I want.
[12:37] <mcdado> hello! i installed sshguard on my 14.04 server, is it enough or i need to configure it somehow?
[12:38] <mcdado> and how to set it up? the instructions at http://www.sshguard.net/docs/setup/ are not clear
[12:38] <Pici> mcdado: their FAQ suggests that you shouldn't need to make any configuration changes off the bat.
[12:39] <ravenx> anyone done an upgrade from 12.04 to 14.04 via 'do-release-upgrade' and got stuck?
[12:39] <ravenx> it keeps saying it's trying to install iproute2
[12:39] <ravenx> since it's package name was changed
[12:57] <bc2946088> I think I found my answer, and don't believe it's possible.  Once the pool is created in ceph, you're unable to shrink the placement groups.  You can make them bigger, but not smaller.
[13:06] <mcdado> Pici: thanks for your reply! I took some time and am starting to see sshguard records in /var/log/auth.log with reports of it blocking IPs
[13:09] <mcdado> now, i also see a lot of "reverse mapping checking getaddrinfo for {hostname} [ip address] failed - POSSIBLE BREAK-IN ATTEMPT!"
[13:09] <mcdado> what does it mean exactly? the server is doing reverse lookups on connecting IPs and failing?
[13:09] <Pici> sounds like it.
[13:09] <mcdado> do i need to worry about it?
[13:10] <Pici> I wouldn;t.
[13:10] <mcdado> that POSSIBLE BREAK-IN ATTEMPT looks quite scary :D
[13:10] <maswan> I think that's from back when hostname-based rules were more common
[13:10] <Pici> I used to see that a lot on my logs when I was forwarding ssh traffic through my server.
[13:11] <mcdado> if i were to change ssh port, are there best practices on a good value to choose? i read below 1024 on a serverfault answer, but basically any value will do?
[13:12] <nick125> I'd probably avoid any commonly used ports (HTTP, HTTPS, SMTP, etc), but yeah, it doesn't really matter too much
[13:14] <JanC> choosing a different port will likely only lower the number of break-in attempts by weeding out the script kiddies; it's less likely to confuse the professionals much...
[13:15] <mcdado> thanks
[13:15] <mcdado> yeah i guess that's okay
[13:15] <JanC> at least, that's my opinion  :)
[13:17] <mcdado> so far i disabled root password auth, installed sshguard.. thinking of changing ssh port.. any other low hanging fruit to strengthen a bit more my machine?
[13:17] <ravenx> anyone had to deal with an iproute renaming to iproute2 problem here?
[13:18] <ravenx> my do-release-upgrade is buggin' out
[13:21] <JanC> mcdado: personally I disable all password authentication
[13:22] <JanC> of course you must make sure key authentication works before you do that  :)
[13:23] <mcdado> yeah that would be a good idea, i have already all the keys set up already, no point in having ssh password auth
[13:24] <JanC> mcdado: also make sure you have a backup of important keys in a secure place
[13:24] <patdk-wk> mcdado, changing ssh port doesn't strengthen anything
[13:24] <JanC> especially if you don't have physical access to that server
[13:24] <mcdado> patdk-wk: i agree, it just obfuscation
[13:24] <JanC> or access through some sort of remote console
[13:25]  * patdk-wk is paranoid about remote consoles
[13:25] <patdk-wk> those are normally very insecure devices
[13:25] <patdk-wk> and never get firmware updates, if it is even possible
[13:25] <JanC> you don't want to lose access to a server because the PC that had the access key crashed  :)
[13:26] <patdk-wk> yes, but you also don't want to expose those remote consoles/ipmi/ilo/... to the internet
[13:26] <JanC> patdk-lap: they can be implemented in many ways
[13:26] <JanC> patdk-wk: ^^^
[13:26] <patdk-wk> yes, just very rarely find one that is trustworthy :)
[13:27] <mcdado> what exactly are remote console?
[13:27] <patdk-wk> a serial port console? ipmi access, ....
[13:27] <mcdado> oh i see
[13:28] <JanC> patdk-wk: also, my VPS/dedi hoster allows me to boot a rescue image, which is different, but can also be used to fix certain issues
[13:28] <patdk-wk> ya, now with vps/vm's, a virtual console interface is easier for them to implement
[13:28] <patdk-wk> but I have seen providers that have had security issues with those too
[13:28] <JanC> they have that on their dedicated hardware too
[13:29] <JanC> have had that for a decade at least
[13:29] <patdk-wk> yes, have had issues with it on dedicated hardware being secure at hezlier or however you spell it
[13:29] <patdk-wk> I have some of them for my old pre-ipmi machines
[13:29] <patdk-wk> but I stil lwouldn't trust those devices on a non-secure network
[13:32] <JanC> a secure network is always better indeed
[13:33] <bc2946088> public facing ipmi would be a nightmare
[13:34] <mcdado> well thanks for your feedback! have a nice day
[15:53] <bc2946088> dpb1_: I got a response on the bug ( https://bugs.launchpad.net/charms/+source/glance/+bug/1492742 ) -- Do you know if I add some extra drives and redeploy openstack using autopilot, that would increase the number of OSDs which in theory would decrease the number of PGs?  Is that the theory?
[15:56] <dpb1_> bc2946088: I believe it would
[16:00] <bc2946088> dpb1_: Thanks very much, I'll give it a try.
[16:01] <dpb1_> bc2946088: I ran into a similar issue where I started to oversubscribe my ceph cluster, I got these warnings, then a few more.
[16:07] <bc2946088> That makes sense, dpb1_.  I was most confused that a month ago when I first deployed the test cloud, everything was working, but this was before Nagios could be included with autopilot.  At first I thought the warning may have been always there and I was just unaware of it, however, just ignoring the error, I was unable to create any instance volumes in horizon.  I've deployed this so many times making incremental changes, the people at the
[16:07] <bc2946088> datacenter have no idea what I am doing, but i've been there so much, they obvioulsy think I don't know what I am doing.  :)
[16:07] <dpb1_> bc2946088: nagios really helps.  Glad that it's showing you more data. :)
[16:11] <RoyK> bc2946088: you might want to test munin too
[16:11] <RoyK> or zabbix
[16:12] <bc2946088> RoyK: I've dabbled with both, the nice part about nagios is, it's deployed automatically and all the instances are configured, it's turnkey, and gives enough information to satisfy my requirement for the moment.
[16:14] <RoyK> which version of nagios is this?
[16:14]  * RoyK hasn't been using nagios for years
[16:16] <Pici>  /25
[16:16] <bc2946088> I believe with 14.04 LTS the nagios openstack plugin is 1.2, RoyK.
[16:19] <bc2946088> Actually, that's the plugin version, I think nagios is v3, maybe, but not certain.
[16:27] <Kaylas> hi, i have ubuntu 15.04, and it will be restarted randomly
[16:27] <Kaylas> on syslog the last line is "(root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)"
[16:28] <Kaylas> suggestion?
[16:28] <codepython777> I'm trying to create a hotspot on a Intel® Dual Band Wireless-AC 7265 - this is what is giving me trouble. Any suggestions on how to create a wifi-hotspot on ubuntu using this hardware? Or do I need to buy a usb -wifi dongle - if yes, which one?
[16:28] <codepython777> I need to do this using the command line
[16:31] <nacc> codepython777: why do you need to do it using the commandline (for reference, there is this: https://help.ubuntu.com/16.04/ubuntu-help/net-wireless-adhoc.html)
[16:31] <codepython777> nacc: its a commandline server with no ui
[16:33] <nacc> codepython777: http://dashohoxha.blogspot.com/2013/06/how-to-setup-wifi-access-point-on-ubuntu.html ?
[16:34] <nacc> codepython777: or could you clarify what "this" is, that's giving you trouble?
[16:34] <codepython777> nacc: need it for 14.04 or later
[16:34] <nacc> codepython777: i'm guessing most of the steps will work (on cursory glance)
[16:36] <codepython777> nacc: Let me try and tell you what happens, booting
[16:37] <codepython777> AP is not supported by the driver of the wireless card. This script does not work for this driver.
[16:38] <codepython777> nacc: Let me try another machine
[16:40] <nacc> codepython777: what script?
[16:43] <Kaylas> anyone?
[16:43] <nacc> Kaylas: 15.04 is eol
[16:44] <codepython777> nacc: the one you showed me for 12.04
[16:44] <codepython777> http://dashohoxha.blogspot.com/2013/06/how-to-setup-wifi-access-point-on-ubuntu.html
[16:44] <Kaylas> nacc yeah, i know but i need to investigate, could you gimme me suggestion about that?
[16:45] <nacc> codepython777: i wouldn't ever run a random script, but that's just me; the steps there clearly state what to do, i would do them manually
[16:45] <nacc> codepython777: it's possible your hardware doesn't support runing in AP mode
[16:46] <nacc> Kaylas: syslog is probably not hte right place to look, as it's just the last recorded thing, but if ti's a kernel panic, e.g., then you're not going to record anything.
[16:46] <codepython777> nacc: on another machine: error: cannot find a LSB script for hostapd
[16:46] <nacc> Kaylas: if you have another computer, you could try and set up a console, but not sure that'd help -- but since 15.04 is eol, it's easily possible it's some random bug that is now fixed
[16:46] <nacc> Kaylas: you should move to a supported release.
[16:47] <nacc> codepython777: what emits that error? what version of ubuntu is on that machien?
[16:48] <codepython777> nacc: install_wifi_access_point.sh: line 53: /etc/hostapd/hostapd.conf: No such file or directory
[16:49] <codepython777> 14.04 LTS
[16:49] <codepython777> sorry 15.10 actually
[16:50] <nacc> codepython777: as i said, i woulnd't just blindly run the script, i would go through the steps, i don't know what the script they suggest does, although i assume it's similar to the blog post
[16:50] <nacc> codepython777: weird that there's no /etc/hostapd , is hostapd instaleld?
[16:53] <codepython777> nacc: http://paste.ubuntu.com/16365897/
[16:53] <nacc> WARNING: The following packages cannot be authenticated!
[16:53] <nacc>  hostapd
[16:53] <nacc> E: There are problems and -y was used without --force-yes
[16:53] <nacc> update-rc.d: error: cannot find a LSB script for hostapd
[16:53] <nacc> not sure where you're getting hostapd from
[16:54] <nacc> but since it didn't get installed, it can't proceed
[16:54] <nacc> and that script does no error checking
[16:54] <nacc> as i said, don't just run random scripts
[16:54] <nacc> especially as root!
[16:55] <codepython777> nacc: thanks
[16:58] <nacc> codepython777: i would just go through the steps, so that you know what is being done to the system, from that blog page
[17:28] <cabbage_hands> Can you guys help me,
[17:28] <cabbage_hands>  Is there a way to stop effectively everything started by Supervisord ?
[17:38] <codepython777> nacc: on a laptop I followed that recipe - everything went through , but no ssid! ?
[17:41] <codepython777> nacc: dhcpd failed
[17:58] <Heebie> Hello, I'm trying to downgrade a set of packages (ubuntu-zfs)  by a version.  Management wants a specific version that is no longer available in the ppa repository.
[17:58] <Heebie> I'm having an impossible time getting things to install in-order, or even to install at all. (modules won't compile etc..)  Does anyone know of a good guide for installing specific versions with their specific dependencies?
[18:03] <coreycb> beisner, the following are ready to promote to kilo-proposed in the UCA: ceilometer, cinder, glance, heat, horizon, keystone, neutron, neutron-lbaas, and nova
[18:09] <rbasak> Heebie: apt-get install foo=<version> and let apt sort it out? It does need to have all the necessary versions available in its repositories, though, so you might need to create a local one.
[18:15] <Heebie> the man page says =<package+version>, should it be  package=version ??
[18:16] <Heebie> I have all the .deb files available to me on my "old" SAN that's borked.. the OS works fine.
[18:18] <rbasak> Yes.
[18:18] <rbasak> You can use apt-ftparchive (once for packages, once for release) to create a local apt repository from a bunch of debs in a directory.
[18:19] <Heebie> hmmm.... never heard of that bit before :)
[18:23] <RoyK> Heebie: I hope you haven't enabled new feature flags :P
[18:25] <Heebie> RoyK: No... management is terrified of the fact that if we enable new feature flags, there's no way to roll that back.
[18:27] <Heebie> rbasak: apt-get install (ubuntu-zfs=7 | ubuntu-zfs-7~precise | ubuntu-zfs-7~precise_amd64)  << all fail with "version <version> of <package> was not found" (even though the .deb files are in /var/cache/apt/archive)
[18:28] <beisner> coreycb, ack, on it
[18:28] <blizzow> Give us back UTC as a timezone choice in server!
[18:28] <blizzow> *during the install.
[18:28] <RoyK> blizzow: choose Reykjavík - it's the same
[18:28] <coreycb> beisner, thanks
[18:29] <blizzow> RoyK: You can't. It gives you the option based on your keyboard language choice.
[18:29] <RoyK> blizzow: may even be a bit fun if you autoconfigure the language :)
[18:29] <blizzow> That's effing moronic.
[18:29] <RoyK> just a wee workaround :)
[18:30] <blizzow> Not your suggestion, but the fact that the change has to happen after install.
[18:31] <beisner> hey coreycb - do you know that status of libvirt-python @ kilo staging -> proposed? http://pastebin.ubuntu.com/16367926/
[18:31] <RoyK> well, most people have something like configuration management, like ansible or puppet or chef or cfengine or something, and with those, it shouldn't be a big problem standardising things
[18:31] <coreycb> beisner, I'm not sure of the status on that
[18:31] <beisner> coreycb, ok, will leave it as-is
[18:31] <coreycb> beisner, ok
[18:32] <blizzow> RoyK: I use ansible and I agree it's trivial to make the change. The fact that the change has to happen is what's stupid.
[18:32] <RoyK> blizzow: there are always stupid changes like that
[18:32] <RoyK> blizzow: better setup your ansible right, and it won't be an issue
[18:33] <blizzow> RoyK: That's just NOT how it should work! The installer functionality has been reduced to what end?
[18:34] <RoyK> blizzow: not my choice - just saying that's the way things are - customisation of the system is better done with a vanilla system
[18:36] <blizzow> On top of that, let's say I want to screw around and test a new release of ubuntu as a one off and don't want to use ansible/puppet/chef/jumpstart. The functionality to choose UTC as a timezone should be included as that's a pretty damn standard timezone to use on a server! It just makes the post-install process unnecessarily complicated.
[18:38] <RoyK> blizzow: keep on blurting, or file a bug report - your choice
[18:41] <blizzow> I will file a bug report but I will blurt in here because whomever made that decision should feel guilty and ashamed.
[18:46] <beisner> coreycb, ok, pushed all of those to kilo-proposed
[18:46] <coreycb> beisner, awesome, thanks
[18:59] <rbasak> Heebie: /var/cache/apt/archive has nothing to do with it. You need to put the debs in a repository listed in sources.list.
[19:07] <Heebie> rbasak: Oh. =O  I guess that's why you mentioned that ftp-repository bit.  Perhaps I should have looked it up!
[19:17] <ddellav> coreycb mitaka sru complete: lp:~ddellav/ubuntu/+source/neutron lp:~ddellav/ubuntu/+source/neutron-fwaas lp:~ddellav/ubuntu/+source/neutron-lbaas lp:~ddellav/ubuntu/+source/neutron-vpnaas https://bugs.launchpad.net/ubuntu/+source/neutron-vpnaas/+bug/1580674
[19:34] <coreycb> ddellav, thanks they look good, I made a minor change to the bug #.  do they build ok?
[19:34] <ddellav> coreycb yep, all builds pass
[19:38] <coreycb> ddellav, ok pushed and uploaded.  we're going to need that charm fix to test these.
[20:19] <coreycb> ddellav, mind adding 8.1.0 to the master branches too?  we're in a weird point of the release where we haven't released anything for yakkety so yakkety is basically mitaka right now.
[20:19] <ddellav> coreycb sure
[20:19] <coreycb> ddellav, thanks
[20:33] <coreycb> beisner, can you also promote oslo.messaging to kilo-proposed?  that's new in the past few hours.
[20:37] <beisner> coreycb, ack, triggered:  oslo.messaging 1.8.3-0ubuntu0.15.04.2~cloud1 --> kilo-proposed
[20:37] <coreycb> beisner, thanks
[20:38] <beisner> coreycb, yw :)
[22:26] <Darkman802> I'm looking to practice with cloud-init before using it on a cloud provider. I'm on a Windows host at the moment and I'm wondering if anyone knows how to get this set up using Virtualbox?
[23:41] <Darkman802> Or maybe a better question is is it possible to use cloud-init on ubuntu server instead of the cloud images, since getting the cloud images to work on virtualbox is a bit of a pain.
[23:43] <sarnold> Darkman802: the server team has a uvt-kvm wrapper around libvirt/qemu that you may find more friendly to the cloud images
[23:46] <Darkman802> sarnold: Thanks, I'll give it a look.