/srv/irclogs.ubuntu.com/2016/05/24/#ubuntu-server.txt

=== JanC is now known as Guest21659
=== JanC_ is now known as JanC
=== inteus_ is now known as inteus
=== josepht` is now known as josepht
txHi guys! Anyone deployed OpenStack using MAAS before?01:15
txDo I use the openstack installer on a controller (then openstack gets deployed on free nodes)?01:15
=== ossurayynot is now known as tonyyarusso
=== inaddy is now known as tinoco
=== Guest72258 is now known as terje
VertelI'm setting up a personal server and I'm currently at the stage of setting up IPSet blocklists that automatically update from known-bad-IP lists. Is there a reason this kind of auto-update-IPSet functionality isn't built into Ubuntu server?02:56
ShaRoseVertel I don't know for ubuntu, and there's probably a better tool for it, but I found a guy's script that I use on my router to block incoming connections from countries that you could look at using. http://tomatousb.org/forum/t-605311/blocking-an-incoming-ip-address-solved-sort-of#post-166419604:34
ShaRoseyou could just point it at a plaintext list of blocks, aka http://www.ipdeny.com/ipblocks/data/countries/cn.zone04:34
ShaRoseAlso, https://github.com/zfsonlinux/zfs/wiki/Ubuntu-16.04-Root-on-ZFS actually works and it's wonderful.04:35
=== andol_ is now known as andol
=== athairus is now known as afkthairus
sarnoldShaRose: yeah? :) woot06:47
ShaRoseyep06:48
ShaRoseplaying with it now to make it as non-interactive as I can atm06:48
sarnoldI haven't looked at the recent instructions but the last time I looked it was more moving parts than I wanted to deal with. It's nice to hear it's coming along :)06:48
ShaRoseit's still not as easy as integrating it into the actual installer, but it's not too harsh06:49
thekrynn_anyone know why screen in ubuntu doesnt give conistant times for when a screen was created?06:52
ShaRosegonna make a local mirror for it because I'm installing ubuntu so much :P06:53
smbhallyn, maybe I can try... even though I realize now that its a rather "special" setup. Normally qemu-dm is used when xend is used but then the apparmor change is moot since xend starts qemu. There was some way to force the other qemu with libxl... I think07:15
sarnoldhmm I thought the thing that needed validation was a stupid lttng-5 denial silencing when using the libvirt-"lxc"?07:16
=== ogra_` is now known as ogra_
rbasakteward: sure, though if it's a merge note that it's quite hard to verify a merge without actually doing the merge.09:35
jayjayHi, i try to install single server openstack with the openstack installer on ubuntu 14.0410:08
jayjaybut the install seems to deadlock on installing keystone with "idle - hook failed: "config-changed"10:08
jayjayall services are deployed with status started except for keystone which has the status error10:10
rbasakstokachu: ^10:13
rbasakjayjay: stokachu may be able to help assuming he's in today, but based on his timezone he won't be in for a few hours.10:14
jayjaytnx rbasak10:16
m1dnight_I have a system user for a service and I want to execute a script as that user but ubuntu is asking me for a password.10:33
m1dnight_But I don't have one..?10:33
vagarwal_is there a way to change static ip in Ubuntu 16.04 without a reboot? networking.service restart and interface shutdown/start is not helping10:38
rbasakvagarwal_: ifdown, edit /etc/network/interfaces, then ifup.11:06
rbasak(which you need to do locally or very carefully in a screen or something)11:06
vagarwal_rbasak: that is not working11:11
vagarwal_has anyone not encountered this yet?11:12
degorenkojamespage, hi, i found issue with openvswitch package, can you help? :)11:12
jamespagedegorenko, maybe whats the problem?11:13
degorenkojamespage, it is again related to our puppet xenial jobs. So, the problem is incorrect service status report11:13
degorenkoi tried to file bug on ubuntu, but got some launchpad error :(11:13
jamespagegoing to need a bit more detail...11:16
degorenkojamespage, yes, sure, sec11:16
Jakey3him are linux containers completely separate?11:17
Jakey3to the same extent of 2 vms11:17
Jakey3?11:17
degorenkojamespage, for example http://paste.openstack.org/show/498579/11:17
Jakey3*hi,11:17
jamespagedegorenko, what does "sudo service openvswitch-nonetwork status" say?11:19
degorenkojamespage, same :) let me sec11:19
degorenkohttp://paste.openstack.org/show/498580/11:20
degorenkojamespage, just fyi, looks like this issue with wrong report comes from 12.04, because we have this commit to vswitch module: https://github.com/openstack/puppet-vswitch/commit/be49bd301f6649950d9cc5bb08ee68a293d7058a Jan 15, 2013 :)11:21
degorenkojamespage, and here is report when service is running http://paste.openstack.org/show/498581/11:23
coreycbjamespage, I'm bumping neutron-lib to 0.2.0, I think that will fix the newton neutron failure11:44
degorenkojamespage, i have some network troubles, if you answered on my last message please repeat :)11:46
tjahneeeHello, i have a question about accessing files on a windows share. i have mounted a network share on /mnt/share with cifs in /etc/fstab. I have configured this with a read-only account from our active directory for extra security. Now i want to read those files with a php application for copying them to the local webserver path. Now i have the problem that i can't can give read access to those files for user www-data because it is read-only.12:02
tjahneeeThe files are now only accessible with the root user. is there a way such with ln to make a link with read permission for a another user? Sorry for my bad english.12:02
encod3Hi! I'm using Ubuntu 14.04LTS and I can't get access to some ports from the exterior. The ports are listed as listening when using "netstat -ltpn", however nmap reports them as closed.12:24
encod3other ports, running the same kind of app, are accessible and listed the same way using "netstat -ltpn", but this time reported as open using nmap12:24
encod3both apps are using 0.0.0.012:25
encod3any ideas on what I am missing?12:25
NetworkingProyo everyone12:31
m1dnight_Are there apps running on the ports, encod3 ?12:32
m1dnight_Oh yeah, they are listening. nvm.12:32
m1dnight_Do you have ufw or something installed?12:32
encod3m1dnight_: it is installed but disabled, iptables is also disabled12:33
m1dnight_Switch ports with a working application, see what that tells you.12:33
m1dnight_Im a noob as well :>12:33
stokachujayjay: yea I think there is an issue with our keystone revision12:37
stokachujayjay: this on single install?12:38
six86Hello. I have a problem with preseeding in 16.04. I used my preseed in 12.04 and it worked fine. With the upgrade, preseeding results in a crippled ubuntu-server where for example "man" or "nano" are missing. The system is not complete anymore.12:43
six86Has something changed in preseeding, maybe in tasksel?12:43
jayjay@stokachu, yes single install12:53
stokachujayjay: ok, run openstack-juju resolved rabbitmq-server/0; openstack-juju upgrade-charm rabbitmq-server12:54
jayjaystokachu: i only tried the single install12:54
stokachuI think we need to update the revisions12:55
jayjayshould i run that in the container?12:55
stokachuno from your laptop12:58
jayjayok12:58
jayjayhttp://pastie.org/1085046912:58
stokachujayjay: why did you put sudo in front?12:59
jayjayi also did it without :)13:00
jayjaysame output13:00
stokachudo you know how to do it within the container?13:01
jayjayyes13:01
stokachuok try that13:01
stokachujust use juju13:01
jayjaydone13:01
jayjaywhat should i juju?13:01
jayjayoh sorry13:02
jayjayi dont know what to do in the container13:02
stokachuexport JUJU_HOME=~/.cloud-install13:03
stokachuthen13:03
stokachujuju resolved rabbitmq-server/013:03
stokachujuju upgrade-charm rabbitmq-server13:03
jayjayhmm, ERROR no environment specified13:05
stokachuare u inside the container?13:06
jayjayI did the lxc-attach -n openstack-single-username thing13:06
jayjayyes13:07
stokachuyea that's it13:07
jayjayuser ubuntu?13:07
stokachuyea13:07
stokachuI'll have to help you more after lunch im on my phone atm13:08
jayjaynp, thanks so far13:08
stokachunp it'll probably be 2-3 hours but I'll get you going13:08
jayjaygreat13:09
=== degorenko_ is now known as degorenko
guruprasadI use Ubuntu server vagrant images a lot. I just downloaded the official xenial64 vagrant box and it doesn't look like the virtualbox guest additions are installed.13:16
guruprasadKnown issue?13:16
rbasakOdd_Bloke: ^13:27
rbasak(not sure if that's your department or not?)13:28
Odd_Blokerbasak: It is. :)13:45
Odd_Blokeguruprasad: Could you check if there's a bug already at https://bugs.launchpad.net/cloud-images and, if not, file one, please? :)13:46
Odd_Blokerbasak: (Thanks!)13:46
guruprasadOdd_Bloke: There is already a bug for this https://bugs.launchpad.net/cloud-images/+bug/156598513:52
ubottuLaunchpad bug 1565985 in cloud-images "vagrant vb ubuntu/xenial64 cannot mount synced folders" [Undecided,New]13:52
hallynsmb: ok well otherwise ask the bug reporter again to verify.14:14
hallyni've got more srus on my list to push out :)14:14
smbhallyn, they cannot verify because they don't use *that* version of libvirt14:15
smbhallyn, proposed libvirt 1.2.2-0ubuntu13 - they use 1.2.12-0ubuntu14.2~cloud014:16
smbhallyn, actually not sure you did see the email I just sent you which explains a bit more... :)14:21
=== Executioner` is now known as Executioner
=== LargePrime_ is now known as LargePrime
=== deadnull_ is now known as _deadnull
John[Lisbeth]I've got this old compaq that I am setting up just to display htop through ssh, and I am running into a problem where the tty windows on it keep turning off to save power, and I would like to disable this feature.15:04
John[Lisbeth]I am not sure which part of the os is responsible.15:04
stokachujayjay: ok im back15:11
PiciJohn[Lisbeth]: what release of Ubuntu?15:11
PiciJohn[Lisbeth]: you can change it via setterm --blank 0          (might also need --powersave off)15:12
John[Lisbeth]I think it's ubuntu 16.04 server15:14
John[Lisbeth]I'll try that and then we'll wait and see if it turns off15:14
=== Oer is now known as OerHeks
terjehi, I'm using vm-builder to create some VM's. I notice that in a trusty guest, the first nic is named eth0 and all is well.15:19
terjewith a xenial guest, the nic is em1.15:20
terjeI have to mount the qcow and change it manually15:21
terjepossible to specify a nic name in vm-builder?15:21
=== afkthairus is now known as athairus
jayjaystokachu: im here too :)16:18
stokachujayjay: cool, you back inside the container?16:18
jayjayyes16:19
jayjay su - ubuntu16:20
stokachujayjay: do you have a ~/.cloud-install/juju directory?16:21
stokachujayjay: i actually told you wrong earlier, it should be `export JUJU_HOME=~/.cloud-install/juju`16:21
jayjaythats better :)16:22
jayjayjuju status is now working :)16:22
stokachujayjay: ok do juju ssh rabbitmq-server/016:22
stokachujayjay: sudo apt install pastebinit; pastebinit /var/log/juju/unit-rabbitmq-server-0.log16:23
jayjayhttp://pastie.org/1085067116:24
stokachujayjay: whats in /var/log/juju/?16:25
jayjayhttp://pastie.org/1085067316:25
stokachuhmm, unit-rabbitmq-server-0.log16:26
stokachuthats the one i want to look at16:26
JamieDimonIs it safe to install systemd on Ubuntu 14.04 trusty?16:28
jayjayone moment16:28
jayjayits a big file16:36
jayjaywhat do you want to know16:36
jayjayor should i share the complete file?16:36
stokachujayjay: mainly looking for any tracebacks16:38
stokachupython tracebacks16:38
jayjayhttps://ssw.solcon.nl/qdisk/download/4998379595744848c1094c1126162491197516:43
jayjaythis is the log file16:43
jayjaystokachu: can you see something in the file?16:51
stokachuone sec16:51
stokachujayjay: i dont see where rabbitmq is reporting an error?16:55
stokachujayjay: says its active and ready16:55
jayjaystokachu: i quit the installer16:56
stokachujayjay: thats ok juju is setup in the background16:57
jayjaykyestone still reports idle hook failed16:57
jayjayconfig-changed16:57
stokachujayjay: oh.. right16:58
stokachujayjay: ugh sorry why did i think it was rabbitmq16:58
stokachujayjay: can you send me the unit-keystone-0 log?16:58
jayjaylol16:58
stokachutheres been this ipv6 issue with rabbitmq16:58
jayjaystokachu: https://ssw.solcon.nl/qdisk/download/972592784574489333c04f8149283871457517:03
stokachulooking17:05
jayjayERROR juju-log FATAL ERROR: Could not determine OpenStack codename for version 8.117:06
jayjayINFO worker.uniter.jujuc server.go:172 running hook tool "juju-log" ["-l" "ERROR" "FATAL ERROR: Could not determine OpenStack codename for version 8.1"]17:06
stokachuyea just saw that17:07
stokachuhmm17:07
stokachujamespage: what was ^ from again?17:07
stokachujayjay: https://bugs.launchpad.net/charms/+source/keystone/+bug/157235817:08
ubottuLaunchpad bug 1572358 in openstack-telemetry (Juju Charms Collection) "keystone FATAL ERROR: Could not determine OpenStack codename for version 8.1.0" [High,Fix released]17:08
stokachujayjay: what does juju status keystone give you?17:09
jayjaystokachu: http://pastie.org/private/wk1ovfwaprvdcc3yikra17:12
=== stiv2k_ is now known as stiv2k
jayjaystokachu: so its a known bug17:15
stokachujayjay: checking the revision you have versus the latest17:15
stokachujayjay: so juju resolved keystone/0; juju upgrade-charm keystone17:16
jayjayAdded charm "cs:trusty/keystone-255" to the environment.17:17
stokachujayjay: see if the error still occurs17:17
stokachujayjay: it should reinitialize itself17:17
stokachujayjay: you'll probably want to do that to all the charms deployed17:18
jayjaykeystone is started now :)17:20
stokachujayjay: cool yea, for some reason you're running some older charm revisions17:20
stokachujayjay: not sure why though as we pull from the latest17:20
jayjaystokachu: awesome17:21
stokachujayjay: you'll want to run openstack-status again to make sure neutron gets setup17:21
jayjaystokachu: yes, keystone is still complaining about ports which should be open but are not17:22
stokachujayjay: can you post an updated unit-keystone-0.log file?17:23
jayjaystokachu: yes, one moment17:24
jayjaystokachu: cant find the /var/log/juju direcotry anymore17:30
jayjayam i missing something?17:30
stokachudid you juju ssh keystone/0?17:30
jayjay:):)17:31
jayjaythere it is :)17:31
jayjayi was sleeping17:31
jayjaystokachu: https://ssw.solcon.nl/qdisk/download/1552257545574490d7721ad5629392251733217:35
stokachusec17:36
stokachujayjay: yea im not sure about that one, best to ask the charmers in #juju about it17:36
stokachujayjay: i would run juju upgrade-charm first on your services though17:37
jayjaystokachu: ok i will try that17:37
jayjaystokachu: thanks so far17:37
stokachujayjay: np17:37
terjehi, I'm using uvtool to provision a VM. I have a bridged interface it's attaching to, br0.17:38
terjeHow can I specify the IP to use on that interface/network?17:39
jamespagestokachu, jayjay: upgrade your keystone charm17:40
stokachujamespage: yea hes on 255 now17:40
stokachubut seeing [WORKLOAD-STATUS] blocked: Ports which should be open, but are not: 5000, 3535717:41
jayjayyes17:42
jayjaystokachu: i restarted haproxy and now everything is Unit is ready :D18:08
stokachunice18:10
jayjayyes, thanks again for your help18:12
=== _Jeepbeats is now known as Jeepbeats
=== degorenko is now known as _degorenko|afk
Sagarhow much a 32GB dedicated server running apache2 and php7.0-fpm is cable of handling concurrent users?19:07
sarnoldit depends upon your application19:09
OerHeksapache has a limit set http://httpd.apache.org/docs/1.3/mod/core.html#maxclients19:10
Sagarassuming the best config?19:12
Sagarwill it be able to handle 10K realtime users?19:12
jrwrenit depends entirely on the applictaion.19:12
Sagarwp site is what i am runnng19:12
OerHekssay 25-50 mb, so that would be 600 users19:13
Sagar600 realtime users?19:13
OerHeksand then your networkspeed ...19:13
Sagari was running 1k realtime users on a 2gb vps of digital ocean19:13
OerHekswe are guessing, with such minimal info19:14
=== mfisch is now known as Guest92937
=== Guest92937 is now known as mfisch
SagarSuggest me the best?19:19
naccSagar: that's not how this works, tbh. "best" depends entirely on your workload and doesn't really mean anything wrt your original question (you asked for a quantitative answer, "best" implies qualitative)19:21
patdk-wk!best19:23
patdk-wk!poll19:23
patdk-wkdamn bot must be getting altimzers19:24
sarnoldnacc: when you write your application you need to cache all the things: use page caching to cache entire pages, fragment caching to cache all the rendered fragments, memcached or similar to cache 'business objects' and avoid roundtrips to the database, etc. writing scalable webpages takes a huge pile of work.19:24
sarnoldsigh. not nacc. Sagar of course.19:24
naccsarnold: :)19:24
patdk-wkand it highly depends on the usecase19:25
patdk-wkpersonally, I like to run like a wordpress site, locally19:25
patdk-wkthen push a *static* copy of it publically19:25
patdk-wkmeans no one can leave comments or anything, but I don't care or want that19:25
Sagarso if you have a good config apache + varnish + php fpm along with a single wp running19:25
Sagarwhat would u say?19:25
sarnoldthank you, comment sections are the worst :)19:25
patdk-wkvarnish isn't a caching solution19:26
patdk-wkit's a solution when you *cannot* do proper caching in the application19:26
naccSagar: what would we say about what?19:26
Sagarpatdk-wk: what about laravel?19:26
Sagarwith memcache?19:26
patdk-wknever heard about laravel19:26
Sagarnacc: about the concurrent users? how much the server can handle19:27
Sagarlaravel a php framework19:27
patdk-wkthat is unknown19:27
patdk-wkyou have to benchmark php19:27
patdk-wkif laravel is a php thing, then your just talking about php19:28
patdk-wkwhy confuse it with something else19:28
kpettitAnbody have recommendation for creating a self contained app/script that's easy to move arround?  I can't seem to find anything easier that bash.  Python and such always have dependencies that are painful19:40
sarnoldperl's often installed but that's getting to be less common these days..19:41
sarnoldand perl's datastructures are annoying if you aren't content with only arrays, hashesh, and int/float/string19:41
patdk-wkpython has datastructures?19:42
patdk-wkpython was really annoying me yesterday with itself19:42
sarnoldpython classes are easier to use and build arbitrary forests/graphs/networks of datatstructures.. perl references and worse perl OO is just exhausting. I'm pretty grumpy about python but if shell/sed/awk or perl don't work out, python's not a terrible choice19:44
patdk-wktook me awhile, but I got python working the way a *think* is correct19:47
patdk-wkno idea, but it gives me the result I'm looking for atleast :)19:47
patdk-wkI'm just too used to C, asm, perl, ...19:47
patdk-wkgive me pointers, dont hide them from me19:47
kpettitsarnold: perl still has the same dependency hell though right?  with modules and versions, etc19:51
kpettitI'm just wanting to make something that's self contailed that I can put on any server and can run.  Bash is the only thing I can think of that's like that19:51
naccpython is present in all ubuntu these days (iirc)19:51
patdk-wkbash cannot do that19:51
naccbut "any server" is perhaps broader than that19:51
patdk-wkit has dependency hell on all the other programs you use to write the bash script :)19:52
naccheh19:52
kpettityeah but Ive got to deal with ubuntun from 10.04 to 16.04 and a bunch of centos machines19:52
patdk-wkbesides the forkbombing bash does :)19:52
kpettitso I'm trying to make something generic that'll work on most linux systems out of the box without having do install a bunch of junk.19:53
kpettitI love python, but it annoys the crap out of me when I have to deploy it to other systems19:53
sarnoldkpettit: I hesitate to suggest it since their community tends to encourage loads of practices I disagree with, but Go aims to provide you with a single executable that you can copy from machine to machine, so long as the architecture matches, it ought to run.20:08
naccheh20:08
naccrbasak: is it expected for squid3's autopkgtests to fail under lxc (appears to be apparmoer related, which i'm assuming would need nested apparmor)20:16
rbasaknacc: the test is supposed to declare if it requires full virt.20:17
naccrbasak: well, the version in trusty, running in lxc under xenail doesn't pass tests for me :)20:17
naccfor test_zz_apparmor20:18
rbasaknacc: so yes if it does that, no if it doesn't. But yeah, if nested apparmor is needed, then perhaps the test should declare it needs full virt.20:18
rbasaknacc: try adt-virt-qemu. adt-buildvm-ubuntucloud is useful.20:18
naccrbasak: just says 'needs-root'20:18
naccrbasak: ack, can do, just slower :)20:18
coreycbddellav, manlia's uploaded.  make sure you subscribe ubuntu-mir to the bug so the MIR team is notified to review it.  https://launchpad.net/ubuntu/wily/+queue?queue_state=1&queue_text=20:29
ddellavcoreycb ok, will do20:29
cliluwIf I'm making Debian packages for Ubuntu, do I want to install ubuntu-dev-tools or the devscripts package?20:36
nacccliluw: well, you'd be making Ubuntu packages for Ubuntu, to be clear :)20:38
nacccliluw: and i use tools from both, tbh20:38
cliluwnacc: According to the apt-cache, it seems devscripts breaks and replaces ubuntu-dev-tools.20:42
nacccliluw: heh, let me look aagain20:43
nacccliluw: i have both installed acc'g to apt-cache right now :)20:43
nacccliluw: version specific breaks and replaces20:44
cliluwnacc: Oohh, ok!20:44
synchronetHi, why do we get updates all the time?20:45
synchronetdo the guys who write the code have their head up thier ass?  I thought they were pros?20:46
synchronetload of php updates tonight20:47
synchronetcant they get it right?20:47
rbasakYou should ask for a full refund.20:47
synchronetyep20:47
sarnoldsynchronet: https://www.jwz.org/doc/cadt.html20:47
synchronethappy to chip in but geez20:47
shewlessHi. Is this the right place to ask about "conjure up"? I just want to know if the LXD option uses containers to run the "controllers" of openstack or if it just uses LXD as the compute nodes - if that makes any sense20:47
synchronetalways kfg updates20:48
synchronetsarnold:  I never click anything20:48
shewlessstokachu: rbasak said you might be able to help if you're there20:48
sarnoldsynchronet: this one should be clicked :) I think it'll resonate20:49
synchronetI never click anything20:49
synchronetI dont trust any fkr20:50
synchronet26 years on the web has about done me20:50
sarnoldsynchronet: you've been on the web for 26 years and don't know jwz.org? O_o20:51
naccheh20:51
synchronetI dont know anything thz days20:51
synchronetLost in Space20:53
stokachushewless: it is pure LXD for both controller and compute nodes21:02
stokachuno kvm at all21:02
stokachushewless: i gotta go afk but leave me any messages here and ill answer them when i get back tonight21:06
synchronetstokachu: seems a cool guy21:14
kpettitsarnold: I haven't ever tried Go.  But it's worth a look.  Never had a reason to try it before, so worth a look at least21:18
jrwrenhttps://www.jwz.org/doc/cadt.html  the funny thing is, i filed a netscape2.0 bug in 1995 which was closed in the exact same way upon the rewrite.21:25
synchronet:)21:25
synchronetsome one will kill hundredes of people one day and claim insanity and sat the internet made me do it21:27
synchronetsay21:27
synchronetits getting beyond something, not sure what21:28
synchronetis it just money these days?21:28
synchronetcant run a simple website without constant interferance?21:29
synchronetupdate needs so they can spam you more21:30
synchronetand always to enhance your experience etc21:30
synchronetwell kffkd off here at the mo21:30
naccsynchronet: i feel like this is a bit of a rant that is better suited for #ubuntu-offtopic :)21:30
synchronetyeah, sry, bad day21:31
synchronetstopped21:31
naccsynchronet: :) no problem21:31
synchronet:)21:31
synchronetty21:31
arooniis it a stupid idea to add my ssh/deploy user to the 'root' group so i dont have run sudo to edit nginx virtual server files ?  am i just being lazy lol?22:03
patdk-lapI can't imagine why you would need that22:11
patdk-lapwhy would you *not* want to run sudo?22:12
synchronetpatdk-lap:  how come other distros are not afraid of root,22:14
synchronetI have never had a server hacked in my life22:15
patdk-laplucky you22:15
synchronetmaybe22:16
patdk-lapI have been hacked twice, and by the same kernel vaunerability each time22:16
patdk-lapfirst, the server was slow in getting patched22:17
synchronethad a client hacked but that his WPress end22:17
patdk-lapsecond, the CVE was not compiled into that kernel, by the kernel packager22:17
synchronetalso in 14.04 and proftp there is an expolit22:17
patdk-lapoh, websites being hacked are a multible day issue for me22:17
synchronetI just basically kicked a client with 5 dedicateds because he could not keep his wp sites up to date, sad but a major pain22:18
patdk-lapsynchronet, that isn't part of ubuntu though22:18
patdk-lapproftpd is part of universe22:18
patdk-lapuniverse is unmaintained :)22:18
synchronetpatdk-lap:  agreed, its what viryualmin drags in, they fixed it now apparently22:19
sarnoldkpettit: there's a lot about go the language that looks nice. It looks like a nice application programming language but a poor systems programming language.22:19
synchronetvirtualmin sry22:19
patdk-lapI have and keep my own proftpd as with any other software I need, in my production ppa22:19
sarnoldpatdk-lap: why do you use proftpd? it looks .. iffy.22:20
patdk-lapI only use it for myself in one location :)22:20
patdk-lapbut I do maintain it for others that use it heavily22:20
patdk-lapfor sftp mainly22:20
synchronetbe nice if Ubuntu did its own hosting CP22:21
patdk-laphosting CP?22:21
synchronetI just do hosting mainly22:22
synchronetyeah like virtualmin cpanel etc22:22
patdk-lapyuk22:22
synchronetwhatever22:22
synchronetgui guy here22:22
patdk-lapI once attempted to use that other cpanel thing for customers before22:22
patdk-lapwh??22:22
synchronetcentos have a panel I believe?22:23
patdk-lapfiled a bug report, that the admin user used md5 password hashes, and I need that corrected before I could deploy it, as a paying customer22:23
patdk-lapthey marked my bug as, won't fix22:23
patdk-lapI left them22:23
synchronet:)22:23
synchronetmight as well get off the planet these days22:24
terjeanyone here know much about uvtool?22:24
patdk-lapyes, no one *should* get my database, or hash, but lets be relistic22:24
patdk-lapexpecially with closed source software22:24
terjeI'm trying to use cloud-init with uvtool but it never seems to read my config22:24
synchronetterje: I cant help sry22:25
terje:/ it's one of those I've been banging my head on. :(22:25
synchronetnever give up22:25
terjenever surrender22:25
synchronetwhere there is a will ...22:26
sarnoldterje: heheheh22:28
sarnoldterje: do you get any error messages?22:28
terjesarnold: so my situation is..22:29
terjeI'm not using vibr0, I'm using br0 so I can have my VM directly on my nic22:29
terjeso using uvt-kvm works just fine, as in my VM boots up, I can virsh console to it22:30
terjeand it's waiting for an IP via DHCP22:30
terjeI'm trying to use cloud-init, specifically meta-data to set it's IP statically22:30
terjeand that part just doesn't work.22:30
patdk-lapno idea what a uvtool is :)22:30
terjeso, no error messages that I have seend.22:31
terjeseen, even22:31
sarnoldpatdk-lap: this thing https://help.ubuntu.com/lts/serverguide/cloud-images-and-uvtool.html22:31
=== krsna is now known as Kreator
=== Kreator is now known as kreator
=== kreator is now known as Kreator
rbasakterje: I wrote uvtool.23:17
rbasakterje: I'm not sure about your static IP case.23:17
rbasakThat's cloud-init's responsibility. uvtool doesn't really do anything with cloud-init stuff apart from pass it on.23:18
rbasakIs it metadata or userdata you're using?23:18
rbasakWhichever way, are you using --user-data or --meta-data in your "uvt-kvm create" call?23:18
rbasakBecause if not, uvt-kvm will create its own and thus possibly scupper whatever else you're trying.23:19
sarnoldrbasak: is libvirt's idea of networking getting in the way here?23:19
rbasakThat depends on what terje is expecting I think. libvirt packaging sets up a bridge and dnsmasq IIRC. But he might have changed that. uvtool and libvirt VM creation just connects the guest's NIC to a bridge by default.23:22
keithzgAnyone know of any decent small-business scale Windows antivirus products (okay, I know that's already thinning the herd precipitously, but bear with me) that can be centrally managed from an Ubuntu server?23:40
keithzgOur office's Bitdefender license is expiring and I'd rather not rely on a Windows server to shepherd the Windows instances.23:41
stokachukeithzg: nothing like bit defender, there's clamav by that's just for mail23:49
stokachukeithzg: I thought windows had something like windows defender that was included23:51
jjohnstonhello I'm wondering if someone here can help me with conjure-up, lxd and maas23:52
devster31what should I look at if the sync command hangs indefinitely?23:53
stokachujjohnston: which version of maas?23:53
jjohnstonMAAS Version 2.0.0 (beta5+bzr5026)23:53
stokachuwhat issue are you having23:54
jjohnstonmaas is actually pretty happy its more lxd bridge and conjure-up authenticating against maas that I'm having issues with23:54
stokachuwhat version of juju?23:54
jjohnstonso i have my hosts in a ready state in maas and am running conjure-up openstack using the lxd option23:55
jjohnstonwhen I select the lxd domain created by the lxd configuration wizard it complains that lxdbr0 is missing23:55
jjohnstonlxdbr0 IS missing, but no matter what I do the re-configure lxd wizard won't add the interface23:56
stokachuah23:56
stokachutry running like lxc list23:56
stokachusee if the interface gets activated then23:57
jjohnstonnegative23:57
jjohnstoni've even done lxd init and run through resetting everything to no avail23:57
stokachuyea ice hit this issue as well23:57
stokachuI've*23:57
jjohnstonso if I go the "use existing maas" option in conjure-up and I put in the api endpoint and api key, it bails with a key error as well23:58
stokachutrying to remember what I had to do23:58
stokachujjohnston: you just ending the IP?23:59
stokachuentering*23:59
jjohnstonno i put the fqdn23:59
jjohnstonwith http://23:59
stokachutry just the ip23:59
stokachuno http23:59
jjohnstonk23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!