[01:15] <tx> Hi guys! Anyone deployed OpenStack using MAAS before?
[01:15] <tx> Do I use the openstack installer on a controller (then openstack gets deployed on free nodes)?
[02:56] <Vertel> I'm setting up a personal server and I'm currently at the stage of setting up IPSet blocklists that automatically update from known-bad-IP lists. Is there a reason this kind of auto-update-IPSet functionality isn't built into Ubuntu server?
[04:34] <ShaRose> Vertel I don't know for ubuntu, and there's probably a better tool for it, but I found a guy's script that I use on my router to block incoming connections from countries that you could look at using. http://tomatousb.org/forum/t-605311/blocking-an-incoming-ip-address-solved-sort-of#post-1664196
[04:34] <ShaRose> you could just point it at a plaintext list of blocks, aka http://www.ipdeny.com/ipblocks/data/countries/cn.zone
[04:35] <ShaRose> Also, https://github.com/zfsonlinux/zfs/wiki/Ubuntu-16.04-Root-on-ZFS actually works and it's wonderful.
[06:47] <sarnold> ShaRose: yeah? :) woot
[06:48] <ShaRose> yep
[06:48] <ShaRose> playing with it now to make it as non-interactive as I can atm
[06:48] <sarnold> I haven't looked at the recent instructions but the last time I looked it was more moving parts than I wanted to deal with. It's nice to hear it's coming along :)
[06:49] <ShaRose> it's still not as easy as integrating it into the actual installer, but it's not too harsh
[06:52] <thekrynn_> anyone know why screen in ubuntu doesnt give conistant times for when a screen was created?
[06:53] <ShaRose> gonna make a local mirror for it because I'm installing ubuntu so much :P
[07:15] <smb> hallyn, maybe I can try... even though I realize now that its a rather "special" setup. Normally qemu-dm is used when xend is used but then the apparmor change is moot since xend starts qemu. There was some way to force the other qemu with libxl... I think
[07:16] <sarnold> hmm I thought the thing that needed validation was a stupid lttng-5 denial silencing when using the libvirt-"lxc"?
[09:35] <rbasak> teward: sure, though if it's a merge note that it's quite hard to verify a merge without actually doing the merge.
[10:08] <jayjay> Hi, i try to install single server openstack with the openstack installer on ubuntu 14.04
[10:08] <jayjay> but the install seems to deadlock on installing keystone with "idle - hook failed: "config-changed"
[10:10] <jayjay> all services are deployed with status started except for keystone which has the status error
[10:13] <rbasak> stokachu: ^
[10:14] <rbasak> jayjay: stokachu may be able to help assuming he's in today, but based on his timezone he won't be in for a few hours.
[10:16] <jayjay> tnx rbasak
[10:33] <m1dnight_> I have a system user for a service and I want to execute a script as that user but ubuntu is asking me for a password.
[10:33] <m1dnight_> But I don't have one..?
[10:38] <vagarwal_> is there a way to change static ip in Ubuntu 16.04 without a reboot? networking.service restart and interface shutdown/start is not helping
[11:06] <rbasak> vagarwal_: ifdown, edit /etc/network/interfaces, then ifup.
[11:06] <rbasak> (which you need to do locally or very carefully in a screen or something)
[11:11] <vagarwal_> rbasak: that is not working
[11:12] <vagarwal_> has anyone not encountered this yet?
[11:12] <degorenko> jamespage, hi, i found issue with openvswitch package, can you help? :)
[11:13] <jamespage> degorenko, maybe whats the problem?
[11:13] <degorenko> jamespage, it is again related to our puppet xenial jobs. So, the problem is incorrect service status report
[11:13] <degorenko> i tried to file bug on ubuntu, but got some launchpad error :(
[11:16] <jamespage> going to need a bit more detail...
[11:16] <degorenko> jamespage, yes, sure, sec
[11:17] <Jakey3> him are linux containers completely separate?
[11:17] <Jakey3> to the same extent of 2 vms
[11:17] <Jakey3> ?
[11:17] <degorenko> jamespage, for example http://paste.openstack.org/show/498579/
[11:17] <Jakey3> *hi,
[11:19] <jamespage> degorenko, what does "sudo service openvswitch-nonetwork status" say?
[11:19] <degorenko> jamespage, same :) let me sec
[11:20] <degorenko> http://paste.openstack.org/show/498580/
[11:21] <degorenko> jamespage, just fyi, looks like this issue with wrong report comes from 12.04, because we have this commit to vswitch module: https://github.com/openstack/puppet-vswitch/commit/be49bd301f6649950d9cc5bb08ee68a293d7058a Jan 15, 2013 :)
[11:23] <degorenko> jamespage, and here is report when service is running http://paste.openstack.org/show/498581/
[11:44] <coreycb> jamespage, I'm bumping neutron-lib to 0.2.0, I think that will fix the newton neutron failure
[11:46] <degorenko> jamespage, i have some network troubles, if you answered on my last message please repeat :)
[12:02] <tjahneee> Hello, i have a question about accessing files on a windows share. i have mounted a network share on /mnt/share with cifs in /etc/fstab. I have configured this with a read-only account from our active directory for extra security. Now i want to read those files with a php application for copying them to the local webserver path. Now i have the problem that i can't can give read access to those files for user www-data because it is read-only.
[12:02] <tjahneee> The files are now only accessible with the root user. is there a way such with ln to make a link with read permission for a another user? Sorry for my bad english.
[12:24] <encod3> Hi! I'm using Ubuntu 14.04LTS and I can't get access to some ports from the exterior. The ports are listed as listening when using "netstat -ltpn", however nmap reports them as closed.
[12:24] <encod3> other ports, running the same kind of app, are accessible and listed the same way using "netstat -ltpn", but this time reported as open using nmap
[12:25] <encod3> both apps are using 0.0.0.0
[12:25] <encod3> any ideas on what I am missing?
[12:31] <NetworkingPro> yo everyone
[12:32] <m1dnight_> Are there apps running on the ports, encod3 ?
[12:32] <m1dnight_> Oh yeah, they are listening. nvm.
[12:32] <m1dnight_> Do you have ufw or something installed?
[12:33] <encod3> m1dnight_: it is installed but disabled, iptables is also disabled
[12:33] <m1dnight_> Switch ports with a working application, see what that tells you.
[12:33] <m1dnight_> Im a noob as well :>
[12:37] <stokachu> jayjay: yea I think there is an issue with our keystone revision
[12:38] <stokachu> jayjay: this on single install?
[12:43] <six86> Hello. I have a problem with preseeding in 16.04. I used my preseed in 12.04 and it worked fine. With the upgrade, preseeding results in a crippled ubuntu-server where for example "man" or "nano" are missing. The system is not complete anymore.
[12:43] <six86> Has something changed in preseeding, maybe in tasksel?
[12:53] <jayjay> @stokachu, yes single install
[12:54] <stokachu> jayjay: ok, run openstack-juju resolved rabbitmq-server/0; openstack-juju upgrade-charm rabbitmq-server
[12:54] <jayjay> stokachu: i only tried the single install
[12:55] <stokachu> I think we need to update the revisions
[12:55] <jayjay> should i run that in the container?
[12:58] <stokachu> no from your laptop
[12:58] <jayjay> ok
[12:58] <jayjay> http://pastie.org/10850469
[12:59] <stokachu> jayjay: why did you put sudo in front?
[13:00] <jayjay> i also did it without :)
[13:00] <jayjay> same output
[13:01] <stokachu> do you know how to do it within the container?
[13:01] <jayjay> yes
[13:01] <stokachu> ok try that
[13:01] <stokachu> just use juju
[13:01] <jayjay> done
[13:01] <jayjay> what should i juju?
[13:02] <jayjay> oh sorry
[13:02] <jayjay> i dont know what to do in the container
[13:03] <stokachu> export JUJU_HOME=~/.cloud-install
[13:03] <stokachu> then
[13:03] <stokachu> juju resolved rabbitmq-server/0
[13:03] <stokachu> juju upgrade-charm rabbitmq-server
[13:05] <jayjay> hmm, ERROR no environment specified
[13:06] <stokachu> are u inside the container?
[13:06] <jayjay> I did the lxc-attach -n openstack-single-username thing
[13:07] <jayjay> yes
[13:07] <stokachu> yea that's it
[13:07] <jayjay> user ubuntu?
[13:07] <stokachu> yea
[13:08] <stokachu> I'll have to help you more after lunch im on my phone atm
[13:08] <jayjay> np, thanks so far
[13:08] <stokachu> np it'll probably be 2-3 hours but I'll get you going
[13:09] <jayjay> great
[13:16] <guruprasad> I use Ubuntu server vagrant images a lot. I just downloaded the official xenial64 vagrant box and it doesn't look like the virtualbox guest additions are installed.
[13:16] <guruprasad> Known issue?
[13:27] <rbasak> Odd_Bloke: ^
[13:28] <rbasak> (not sure if that's your department or not?)
[13:45] <Odd_Bloke> rbasak: It is. :)
[13:46] <Odd_Bloke> guruprasad: Could you check if there's a bug already at https://bugs.launchpad.net/cloud-images and, if not, file one, please? :)
[13:46] <Odd_Bloke> rbasak: (Thanks!)
[13:52] <guruprasad> Odd_Bloke: There is already a bug for this https://bugs.launchpad.net/cloud-images/+bug/1565985
[14:14] <hallyn> smb: ok well otherwise ask the bug reporter again to verify.
[14:14] <hallyn> i've got more srus on my list to push out :)
[14:15] <smb> hallyn, they cannot verify because they don't use *that* version of libvirt
[14:16] <smb> hallyn, proposed libvirt 1.2.2-0ubuntu13 - they use 1.2.12-0ubuntu14.2~cloud0
[14:21] <smb> hallyn, actually not sure you did see the email I just sent you which explains a bit more... :)
[15:04] <John[Lisbeth]> I've got this old compaq that I am setting up just to display htop through ssh, and I am running into a problem where the tty windows on it keep turning off to save power, and I would like to disable this feature.
[15:04] <John[Lisbeth]> I am not sure which part of the os is responsible.
[15:11] <stokachu> jayjay: ok im back
[15:11] <Pici> John[Lisbeth]: what release of Ubuntu?
[15:12] <Pici> John[Lisbeth]: you can change it via setterm --blank 0          (might also need --powersave off)
[15:14] <John[Lisbeth]> I think it's ubuntu 16.04 server
[15:14] <John[Lisbeth]> I'll try that and then we'll wait and see if it turns off
[15:19] <terje> hi, I'm using vm-builder to create some VM's. I notice that in a trusty guest, the first nic is named eth0 and all is well.
[15:20] <terje> with a xenial guest, the nic is em1.
[15:21] <terje> I have to mount the qcow and change it manually
[15:21] <terje> possible to specify a nic name in vm-builder?
[16:18] <jayjay> stokachu: im here too :)
[16:18] <stokachu> jayjay: cool, you back inside the container?
[16:19] <jayjay> yes
[16:20] <jayjay>  su - ubuntu
[16:21] <stokachu> jayjay: do you have a ~/.cloud-install/juju directory?
[16:21] <stokachu> jayjay: i actually told you wrong earlier, it should be `export JUJU_HOME=~/.cloud-install/juju`
[16:22] <jayjay> thats better :)
[16:22] <jayjay> juju status is now working :)
[16:22] <stokachu> jayjay: ok do juju ssh rabbitmq-server/0
[16:23] <stokachu> jayjay: sudo apt install pastebinit; pastebinit /var/log/juju/unit-rabbitmq-server-0.log
[16:24] <jayjay> http://pastie.org/10850671
[16:25] <stokachu> jayjay: whats in /var/log/juju/?
[16:25] <jayjay> http://pastie.org/10850673
[16:26] <stokachu> hmm, unit-rabbitmq-server-0.log
[16:26] <stokachu> thats the one i want to look at
[16:28] <JamieDimon> Is it safe to install systemd on Ubuntu 14.04 trusty?
[16:28] <jayjay> one moment
[16:36] <jayjay> its a big file
[16:36] <jayjay> what do you want to know
[16:36] <jayjay> or should i share the complete file?
[16:38] <stokachu> jayjay: mainly looking for any tracebacks
[16:38] <stokachu> python tracebacks
[16:43] <jayjay> https://ssw.solcon.nl/qdisk/download/4998379595744848c1094c11261624911975
[16:43] <jayjay> this is the log file
[16:51] <jayjay> stokachu: can you see something in the file?
[16:51] <stokachu> one sec
[16:55] <stokachu> jayjay: i dont see where rabbitmq is reporting an error?
[16:55] <stokachu> jayjay: says its active and ready
[16:56] <jayjay> stokachu: i quit the installer
[16:57] <stokachu> jayjay: thats ok juju is setup in the background
[16:57] <jayjay> kyestone still reports idle hook failed
[16:57] <jayjay> config-changed
[16:58] <stokachu> jayjay: oh.. right
[16:58] <stokachu> jayjay: ugh sorry why did i think it was rabbitmq
[16:58] <stokachu> jayjay: can you send me the unit-keystone-0 log?
[16:58] <jayjay> lol
[16:58] <stokachu> theres been this ipv6 issue with rabbitmq
[17:03] <jayjay> stokachu: https://ssw.solcon.nl/qdisk/download/972592784574489333c04f81492838714575
[17:05] <stokachu> looking
[17:06] <jayjay> ERROR juju-log FATAL ERROR: Could not determine OpenStack codename for version 8.1
[17:06] <jayjay> INFO worker.uniter.jujuc server.go:172 running hook tool "juju-log" ["-l" "ERROR" "FATAL ERROR: Could not determine OpenStack codename for version 8.1"]
[17:07] <stokachu> yea just saw that
[17:07] <stokachu> hmm
[17:07] <stokachu> jamespage: what was ^ from again?
[17:08] <stokachu> jayjay: https://bugs.launchpad.net/charms/+source/keystone/+bug/1572358
[17:09] <stokachu> jayjay: what does juju status keystone give you?
[17:12] <jayjay> stokachu: http://pastie.org/private/wk1ovfwaprvdcc3yikra
[17:15] <jayjay> stokachu: so its a known bug
[17:15] <stokachu> jayjay: checking the revision you have versus the latest
[17:16] <stokachu> jayjay: so juju resolved keystone/0; juju upgrade-charm keystone
[17:17] <jayjay> Added charm "cs:trusty/keystone-255" to the environment.
[17:17] <stokachu> jayjay: see if the error still occurs
[17:17] <stokachu> jayjay: it should reinitialize itself
[17:18] <stokachu> jayjay: you'll probably want to do that to all the charms deployed
[17:20] <jayjay> keystone is started now :)
[17:20] <stokachu> jayjay: cool yea, for some reason you're running some older charm revisions
[17:20] <stokachu> jayjay: not sure why though as we pull from the latest
[17:21] <jayjay> stokachu: awesome
[17:21] <stokachu> jayjay: you'll want to run openstack-status again to make sure neutron gets setup
[17:22] <jayjay> stokachu: yes, keystone is still complaining about ports which should be open but are not
[17:23] <stokachu> jayjay: can you post an updated unit-keystone-0.log file?
[17:24] <jayjay> stokachu: yes, one moment
[17:30] <jayjay> stokachu: cant find the /var/log/juju direcotry anymore
[17:30] <jayjay> am i missing something?
[17:30] <stokachu> did you juju ssh keystone/0?
[17:31] <jayjay> :):)
[17:31] <jayjay> there it is :)
[17:31] <jayjay> i was sleeping
[17:35] <jayjay> stokachu: https://ssw.solcon.nl/qdisk/download/1552257545574490d7721ad56293922517332
[17:36] <stokachu> sec
[17:36] <stokachu> jayjay: yea im not sure about that one, best to ask the charmers in #juju about it
[17:37] <stokachu> jayjay: i would run juju upgrade-charm first on your services though
[17:37] <jayjay> stokachu: ok i will try that
[17:37] <jayjay> stokachu: thanks so far
[17:37] <stokachu> jayjay: np
[17:38] <terje> hi, I'm using uvtool to provision a VM. I have a bridged interface it's attaching to, br0.
[17:39] <terje> How can I specify the IP to use on that interface/network?
[17:40] <jamespage> stokachu, jayjay: upgrade your keystone charm
[17:40] <stokachu> jamespage: yea hes on 255 now
[17:41] <stokachu> but seeing [WORKLOAD-STATUS] blocked: Ports which should be open, but are not: 5000, 35357
[17:42] <jayjay> yes
[18:08] <jayjay> stokachu: i restarted haproxy and now everything is Unit is ready :D
[18:10] <stokachu> nice
[18:12] <jayjay> yes, thanks again for your help
[19:07] <Sagar> how much a 32GB dedicated server running apache2 and php7.0-fpm is cable of handling concurrent users?
[19:09] <sarnold> it depends upon your application
[19:10] <OerHeks> apache has a limit set http://httpd.apache.org/docs/1.3/mod/core.html#maxclients
[19:12] <Sagar> assuming the best config?
[19:12] <Sagar> will it be able to handle 10K realtime users?
[19:12] <jrwren> it depends entirely on the applictaion.
[19:12] <Sagar> wp site is what i am runnng
[19:13] <OerHeks> say 25-50 mb, so that would be 600 users
[19:13] <Sagar> 600 realtime users?
[19:13] <OerHeks> and then your networkspeed ...
[19:13] <Sagar> i was running 1k realtime users on a 2gb vps of digital ocean
[19:14] <OerHeks> we are guessing, with such minimal info
[19:19] <Sagar> Suggest me the best?
[19:21] <nacc> Sagar: that's not how this works, tbh. "best" depends entirely on your workload and doesn't really mean anything wrt your original question (you asked for a quantitative answer, "best" implies qualitative)
[19:23] <patdk-wk> !best
[19:23] <patdk-wk> !poll
[19:24] <patdk-wk> damn bot must be getting altimzers
[19:24] <sarnold> nacc: when you write your application you need to cache all the things: use page caching to cache entire pages, fragment caching to cache all the rendered fragments, memcached or similar to cache 'business objects' and avoid roundtrips to the database, etc. writing scalable webpages takes a huge pile of work.
[19:24] <sarnold> sigh. not nacc. Sagar of course.
[19:24] <nacc> sarnold: :)
[19:25] <patdk-wk> and it highly depends on the usecase
[19:25] <patdk-wk> personally, I like to run like a wordpress site, locally
[19:25] <patdk-wk> then push a *static* copy of it publically
[19:25] <patdk-wk> means no one can leave comments or anything, but I don't care or want that
[19:25] <Sagar> so if you have a good config apache + varnish + php fpm along with a single wp running
[19:25] <Sagar> what would u say?
[19:25] <sarnold> thank you, comment sections are the worst :)
[19:26] <patdk-wk> varnish isn't a caching solution
[19:26] <patdk-wk> it's a solution when you *cannot* do proper caching in the application
[19:26] <nacc> Sagar: what would we say about what?
[19:26] <Sagar> patdk-wk: what about laravel?
[19:26] <Sagar> with memcache?
[19:26] <patdk-wk> never heard about laravel
[19:27] <Sagar> nacc: about the concurrent users? how much the server can handle
[19:27] <Sagar> laravel a php framework
[19:27] <patdk-wk> that is unknown
[19:27] <patdk-wk> you have to benchmark php
[19:28] <patdk-wk> if laravel is a php thing, then your just talking about php
[19:28] <patdk-wk> why confuse it with something else
[19:40] <kpettit> Anbody have recommendation for creating a self contained app/script that's easy to move arround?  I can't seem to find anything easier that bash.  Python and such always have dependencies that are painful
[19:41] <sarnold> perl's often installed but that's getting to be less common these days..
[19:41] <sarnold> and perl's datastructures are annoying if you aren't content with only arrays, hashesh, and int/float/string
[19:42] <patdk-wk> python has datastructures?
[19:42] <patdk-wk> python was really annoying me yesterday with itself
[19:44] <sarnold> python classes are easier to use and build arbitrary forests/graphs/networks of datatstructures.. perl references and worse perl OO is just exhausting. I'm pretty grumpy about python but if shell/sed/awk or perl don't work out, python's not a terrible choice
[19:47] <patdk-wk> took me awhile, but I got python working the way a *think* is correct
[19:47] <patdk-wk> no idea, but it gives me the result I'm looking for atleast :)
[19:47] <patdk-wk> I'm just too used to C, asm, perl, ...
[19:47] <patdk-wk> give me pointers, dont hide them from me
[19:51] <kpettit> sarnold: perl still has the same dependency hell though right?  with modules and versions, etc
[19:51] <kpettit> I'm just wanting to make something that's self contailed that I can put on any server and can run.  Bash is the only thing I can think of that's like that
[19:51] <nacc> python is present in all ubuntu these days (iirc)
[19:51] <patdk-wk> bash cannot do that
[19:51] <nacc> but "any server" is perhaps broader than that
[19:52] <patdk-wk> it has dependency hell on all the other programs you use to write the bash script :)
[19:52] <nacc> heh
[19:52] <kpettit> yeah but Ive got to deal with ubuntun from 10.04 to 16.04 and a bunch of centos machines
[19:52] <patdk-wk> besides the forkbombing bash does :)
[19:53] <kpettit> so I'm trying to make something generic that'll work on most linux systems out of the box without having do install a bunch of junk.
[19:53] <kpettit> I love python, but it annoys the crap out of me when I have to deploy it to other systems
[20:08] <sarnold> kpettit: I hesitate to suggest it since their community tends to encourage loads of practices I disagree with, but Go aims to provide you with a single executable that you can copy from machine to machine, so long as the architecture matches, it ought to run.
[20:08] <nacc> heh
[20:16] <nacc> rbasak: is it expected for squid3's autopkgtests to fail under lxc (appears to be apparmoer related, which i'm assuming would need nested apparmor)
[20:17] <rbasak> nacc: the test is supposed to declare if it requires full virt.
[20:17] <nacc> rbasak: well, the version in trusty, running in lxc under xenail doesn't pass tests for me :)
[20:18] <nacc> for test_zz_apparmor
[20:18] <rbasak> nacc: so yes if it does that, no if it doesn't. But yeah, if nested apparmor is needed, then perhaps the test should declare it needs full virt.
[20:18] <rbasak> nacc: try adt-virt-qemu. adt-buildvm-ubuntucloud is useful.
[20:18] <nacc> rbasak: just says 'needs-root'
[20:18] <nacc> rbasak: ack, can do, just slower :)
[20:29] <coreycb> ddellav, manlia's uploaded.  make sure you subscribe ubuntu-mir to the bug so the MIR team is notified to review it.  https://launchpad.net/ubuntu/wily/+queue?queue_state=1&queue_text=
[20:29] <ddellav> coreycb ok, will do
[20:36] <cliluw> If I'm making Debian packages for Ubuntu, do I want to install ubuntu-dev-tools or the devscripts package?
[20:38] <nacc> cliluw: well, you'd be making Ubuntu packages for Ubuntu, to be clear :)
[20:38] <nacc> cliluw: and i use tools from both, tbh
[20:42] <cliluw> nacc: According to the apt-cache, it seems devscripts breaks and replaces ubuntu-dev-tools.
[20:43] <nacc> cliluw: heh, let me look aagain
[20:43] <nacc> cliluw: i have both installed acc'g to apt-cache right now :)
[20:44] <nacc> cliluw: version specific breaks and replaces
[20:44] <cliluw> nacc: Oohh, ok!
[20:45] <synchronet> Hi, why do we get updates all the time?
[20:46] <synchronet> do the guys who write the code have their head up thier ass?  I thought they were pros?
[20:47] <synchronet> load of php updates tonight
[20:47] <synchronet> cant they get it right?
[20:47] <rbasak> You should ask for a full refund.
[20:47] <synchronet> yep
[20:47] <sarnold> synchronet: https://www.jwz.org/doc/cadt.html
[20:47] <synchronet> happy to chip in but geez
[20:47] <shewless> Hi. Is this the right place to ask about "conjure up"? I just want to know if the LXD option uses containers to run the "controllers" of openstack or if it just uses LXD as the compute nodes - if that makes any sense
[20:48] <synchronet> always kfg updates
[20:48] <synchronet> sarnold:  I never click anything
[20:48] <shewless> stokachu: rbasak said you might be able to help if you're there
[20:49] <sarnold> synchronet: this one should be clicked :) I think it'll resonate
[20:49] <synchronet> I never click anything
[20:50] <synchronet> I dont trust any fkr
[20:50] <synchronet> 26 years on the web has about done me
[20:51] <sarnold> synchronet: you've been on the web for 26 years and don't know jwz.org? O_o
[20:51] <nacc> heh
[20:51] <synchronet> I dont know anything thz days
[20:53] <synchronet> Lost in Space
[21:02] <stokachu> shewless: it is pure LXD for both controller and compute nodes
[21:02] <stokachu> no kvm at all
[21:06] <stokachu> shewless: i gotta go afk but leave me any messages here and ill answer them when i get back tonight
[21:14] <synchronet> stokachu: seems a cool guy
[21:18] <kpettit> sarnold: I haven't ever tried Go.  But it's worth a look.  Never had a reason to try it before, so worth a look at least
[21:25] <jrwren> https://www.jwz.org/doc/cadt.html  the funny thing is, i filed a netscape2.0 bug in 1995 which was closed in the exact same way upon the rewrite.
[21:25] <synchronet> :)
[21:27] <synchronet> some one will kill hundredes of people one day and claim insanity and sat the internet made me do it
[21:27] <synchronet> say
[21:28] <synchronet> its getting beyond something, not sure what
[21:28] <synchronet> is it just money these days?
[21:29] <synchronet> cant run a simple website without constant interferance?
[21:30] <synchronet> update needs so they can spam you more
[21:30] <synchronet> and always to enhance your experience etc
[21:30] <synchronet> well kffkd off here at the mo
[21:30] <nacc> synchronet: i feel like this is a bit of a rant that is better suited for #ubuntu-offtopic :)
[21:31] <synchronet> yeah, sry, bad day
[21:31] <synchronet> stopped
[21:31] <nacc> synchronet: :) no problem
[21:31] <synchronet> :)
[21:31] <synchronet> ty
[22:03] <arooni> is it a stupid idea to add my ssh/deploy user to the 'root' group so i dont have run sudo to edit nginx virtual server files ?  am i just being lazy lol?
[22:11] <patdk-lap> I can't imagine why you would need that
[22:12] <patdk-lap> why would you *not* want to run sudo?
[22:14] <synchronet> patdk-lap:  how come other distros are not afraid of root,
[22:15] <synchronet> I have never had a server hacked in my life
[22:15] <patdk-lap> lucky you
[22:16] <synchronet> maybe
[22:16] <patdk-lap> I have been hacked twice, and by the same kernel vaunerability each time
[22:17] <patdk-lap> first, the server was slow in getting patched
[22:17] <synchronet> had a client hacked but that his WPress end
[22:17] <patdk-lap> second, the CVE was not compiled into that kernel, by the kernel packager
[22:17] <synchronet> also in 14.04 and proftp there is an expolit
[22:17] <patdk-lap> oh, websites being hacked are a multible day issue for me
[22:18] <synchronet> I just basically kicked a client with 5 dedicateds because he could not keep his wp sites up to date, sad but a major pain
[22:18] <patdk-lap> synchronet, that isn't part of ubuntu though
[22:18] <patdk-lap> proftpd is part of universe
[22:18] <patdk-lap> universe is unmaintained :)
[22:19] <synchronet> patdk-lap:  agreed, its what viryualmin drags in, they fixed it now apparently
[22:19] <sarnold> kpettit: there's a lot about go the language that looks nice. It looks like a nice application programming language but a poor systems programming language.
[22:19] <synchronet> virtualmin sry
[22:19] <patdk-lap> I have and keep my own proftpd as with any other software I need, in my production ppa
[22:20] <sarnold> patdk-lap: why do you use proftpd? it looks .. iffy.
[22:20] <patdk-lap> I only use it for myself in one location :)
[22:20] <patdk-lap> but I do maintain it for others that use it heavily
[22:20] <patdk-lap> for sftp mainly
[22:21] <synchronet> be nice if Ubuntu did its own hosting CP
[22:21] <patdk-lap> hosting CP?
[22:22] <synchronet> I just do hosting mainly
[22:22] <synchronet> yeah like virtualmin cpanel etc
[22:22] <patdk-lap> yuk
[22:22] <synchronet> whatever
[22:22] <synchronet> gui guy here
[22:22] <patdk-lap> I once attempted to use that other cpanel thing for customers before
[22:22] <patdk-lap> wh??
[22:23] <synchronet> centos have a panel I believe?
[22:23] <patdk-lap> filed a bug report, that the admin user used md5 password hashes, and I need that corrected before I could deploy it, as a paying customer
[22:23] <patdk-lap> they marked my bug as, won't fix
[22:23] <patdk-lap> I left them
[22:23] <synchronet> :)
[22:24] <synchronet> might as well get off the planet these days
[22:24] <terje> anyone here know much about uvtool?
[22:24] <patdk-lap> yes, no one *should* get my database, or hash, but lets be relistic
[22:24] <patdk-lap> expecially with closed source software
[22:24] <terje> I'm trying to use cloud-init with uvtool but it never seems to read my config
[22:25] <synchronet> terje: I cant help sry
[22:25] <terje> :/ it's one of those I've been banging my head on. :(
[22:25] <synchronet> never give up
[22:25] <terje> never surrender
[22:26] <synchronet> where there is a will ...
[22:28] <sarnold> terje: heheheh
[22:28] <sarnold> terje: do you get any error messages?
[22:29] <terje> sarnold: so my situation is..
[22:29] <terje> I'm not using vibr0, I'm using br0 so I can have my VM directly on my nic
[22:30] <terje> so using uvt-kvm works just fine, as in my VM boots up, I can virsh console to it
[22:30] <terje> and it's waiting for an IP via DHCP
[22:30] <terje> I'm trying to use cloud-init, specifically meta-data to set it's IP statically
[22:30] <terje> and that part just doesn't work.
[22:30] <patdk-lap> no idea what a uvtool is :)
[22:31] <terje> so, no error messages that I have seend.
[22:31] <terje> seen, even
[22:31] <sarnold> patdk-lap: this thing https://help.ubuntu.com/lts/serverguide/cloud-images-and-uvtool.html
[23:17] <rbasak> terje: I wrote uvtool.
[23:17] <rbasak> terje: I'm not sure about your static IP case.
[23:18] <rbasak> That's cloud-init's responsibility. uvtool doesn't really do anything with cloud-init stuff apart from pass it on.
[23:18] <rbasak> Is it metadata or userdata you're using?
[23:18] <rbasak> Whichever way, are you using --user-data or --meta-data in your "uvt-kvm create" call?
[23:19] <rbasak> Because if not, uvt-kvm will create its own and thus possibly scupper whatever else you're trying.
[23:19] <sarnold> rbasak: is libvirt's idea of networking getting in the way here?
[23:22] <rbasak> That depends on what terje is expecting I think. libvirt packaging sets up a bridge and dnsmasq IIRC. But he might have changed that. uvtool and libvirt VM creation just connects the guest's NIC to a bridge by default.
[23:40] <keithzg> Anyone know of any decent small-business scale Windows antivirus products (okay, I know that's already thinning the herd precipitously, but bear with me) that can be centrally managed from an Ubuntu server?
[23:41] <keithzg> Our office's Bitdefender license is expiring and I'd rather not rely on a Windows server to shepherd the Windows instances.
[23:49] <stokachu> keithzg: nothing like bit defender, there's clamav by that's just for mail
[23:51] <stokachu> keithzg: I thought windows had something like windows defender that was included
[23:52] <jjohnston> hello I'm wondering if someone here can help me with conjure-up, lxd and maas
[23:53] <devster31> what should I look at if the sync command hangs indefinitely?
[23:53] <stokachu> jjohnston: which version of maas?
[23:53] <jjohnston> MAAS Version 2.0.0 (beta5+bzr5026)
[23:54] <stokachu> what issue are you having
[23:54] <jjohnston> maas is actually pretty happy its more lxd bridge and conjure-up authenticating against maas that I'm having issues with
[23:54] <stokachu> what version of juju?
[23:55] <jjohnston> so i have my hosts in a ready state in maas and am running conjure-up openstack using the lxd option
[23:55] <jjohnston> when I select the lxd domain created by the lxd configuration wizard it complains that lxdbr0 is missing
[23:56] <jjohnston> lxdbr0 IS missing, but no matter what I do the re-configure lxd wizard won't add the interface
[23:56] <stokachu> ah
[23:56] <stokachu> try running like lxc list
[23:57] <stokachu> see if the interface gets activated then
[23:57] <jjohnston> negative
[23:57] <jjohnston> i've even done lxd init and run through resetting everything to no avail
[23:57] <stokachu> yea ice hit this issue as well
[23:57] <stokachu> I've*
[23:58] <jjohnston> so if I go the "use existing maas" option in conjure-up and I put in the api endpoint and api key, it bails with a key error as well
[23:58] <stokachu> trying to remember what I had to do
[23:59] <stokachu> jjohnston: you just ending the IP?
[23:59] <stokachu> entering*
[23:59] <jjohnston> no i put the fqdn
[23:59] <jjohnston> with http://
[23:59] <stokachu> try just the ip
[23:59] <stokachu> no http
[23:59] <jjohnston> k