| i- | I'm running Server 16.04, so I figured to ask here. | 00:46 |
|---|---|---|
| i- | I have kswapd0 running at 100% (almost) CPJ | 00:47 |
| i- | Dunno what I could do to fix this :P | 00:47 |
| sarnold | i-: is there anything interesting in dmesg output? | 00:52 |
| sarnold | i-: what does smartctl status look like on your drives? | 00:53 |
| i- | smartctl apparently gets an 'invalid argument' | 00:59 |
| i- | dmesg looks like normal | 01:01 |
| === JanC_ is now known as JanC | ||
| cpaelzer | i-: kswapd at 100% likely means you are staying below some watermarks | 07:01 |
| cpaelzer | i-: depending on numa setup you have one or more kswap kernel threads but that aside | 07:01 |
| cpaelzer | i-: usually I'd expect you now want to find where your memory is: | 07:02 |
| i- | this is actually an EC2 instance, btw | 07:02 |
| cpaelzer | good to know | 07:02 |
| cpaelzer | i-: a) spent with tools like smem or even just /proc/memofino and /proc/slabinfo | 07:02 |
| cpaelzer | i-: b) track a bit how much is going on in terms of discarding pages and vm effort on it | 07:03 |
| cpaelzer | for b there might be more modern things, but I still like systat for that | 07:03 |
| cpaelzer | http://www-05.ibm.com/de/events/linux-on-system-z/downloads/Tools-MK2-V7-Web.pdf pages 72/73 and 149 would be where I'd start | 07:05 |
| cpaelzer | i-: feel free to post the syststat and smem data somewhere to try to jointly interpreting them :-) | 07:05 |
| cpaelzer | i-: an output of /proc/meminfo /proc/slabinfo /proc/zoneinfo and /proc/pagetypeinfo along the other data can also help to shed some light | 07:07 |
| === Kenrins is now known as kenrin | ||
| cpaelzer | rbasak: I realized that it might be reasonable to spend at least a bit of time when doing a merge to check for outstanding bugs | 09:25 |
| cpaelzer | rbasak: most of the time this is just 30 minutes of cleanup, but sometimes one can find something important and add it right when merging anyway | 09:25 |
| cpaelzer | rbasak: as well as trying to push remaining delta to debian | 09:25 |
| cpaelzer | rbasak: I was wondering if we should add the two (pushing delta to debian + reviewing open bugs) to https://wiki.ubuntu.com/UbuntuDevelopment/Merging/GitWorkflow between step 6/7 or if you consider that "too much" | 09:26 |
| negev | hi, say i have rails installed and i want to configure a different apparmor profile for each rails app, is there a way to do that? | 10:09 |
| rbasak | cpaelzer: I think that's a good idea. | 10:16 |
| cpaelzer | rbasak: thanks I'll add a very short statement as soon as the wiki lets me in | 10:18 |
| === _degorenko|afk is now known as degorenko | ||
| cpaelzer | rbasak: fyi picking the exim4 merge - ok ? | 11:16 |
| cpaelzer | that is the next on my list, but you touched last so I wanted to hear an ack | 11:17 |
| rbasak | cpaelzer: sure, thanks. I'm reviewing your ntp merge right now. | 11:18 |
| cpaelzer | mdeslaur: you also uploaded exim4 recently - is it ok for you too that I take the work on the merge? | 11:18 |
| mdeslaur | cpaelzer: please take it, thanks | 11:19 |
| ktt9 | Hello. I have a problem with preseeding Ubuntu 16.04 server amd64. Patched boot command line seems to ignore preseed/early_command string. Am I missing something? | 11:43 |
| ktt9 | Same procedure works perfectly for e.g. 15.10 and earlier versions. | 11:44 |
| rbasak | ktt9: I'm not aware of anything that should have changed with that. I suggest you provide exact steps to reproduce in a bug report. | 11:45 |
| ktt9 | Okay, understood. | 11:48 |
| === iberezovskiy|off is now known as iberezovskiy | ||
| === utlmming is now known as utlemming | ||
| b3h3m0th | I opted for home folder encryption on ubuntu server 16.04 during installation. Now I want to be able to login as a different user and access my files. How do I do that ? | 13:38 |
| bekks | b3h3m0th: You dont. Because your home folder is encrypted per user. | 13:44 |
| bekks | b3h3m0th: you need to login two users then. | 13:44 |
| b3h3m0th | I did not get that | 13:45 |
| JanC | well, you could still mount it AFAIK | 13:45 |
| b3h3m0th | yeah, that's what I want to do | 13:45 |
| bekks | the home of user A is decrypted when user A logs in. So login user A to get that home decrypted, and switch users, and login user B. | 13:46 |
| b3h3m0th | I want to do that without logging in to user A | 13:46 |
| b3h3m0th | technically speaking, I want to figure out the decryption passhrase and the decryption command for /home/A/ (given I know the unix password for user A) from user B's shell | 13:47 |
| bekks | b3h3m0th: https://help.ubuntu.com/community/EncryptedPrivateDirectory | 13:47 |
| JanC | it's using ecryptfs | 13:48 |
| bekks | b3h3m0th: There is no way to guess the passphrase for the encryption from the known user password. | 13:48 |
| bekks | There is entirely no relationship between them, technically. You MIGHT set the same passphrases, but thats not a requirement at all. | 13:48 |
| bekks | b3h3m0th: Instead of trying to crack, just ask user A. | 13:49 |
| JanC | https://help.ubuntu.com/community/EncryptedPrivateDirectory#Recovering_Your_Mount_Passphrase | 13:54 |
| Zardoz84 | I need help with a nearly catastrophic problem with Ubuntu Server (14.04) on a Intel FakeRAID | 13:54 |
| Zardoz84 | We replaced a failing hard drive by another, and looks that the rebuild process instead of copying the data of the good disk to the new disk, has doing opossite! Now I have a raid volumen that is empty ! | 13:55 |
| bekks | Zardoz84: No it is time to restore your backup. | 13:55 |
| JanC | b3h3m0th: see there how you can get the mount passphrase | 13:55 |
| Zardoz84 | But lucky, we had a separate raid 1 to store the data | 13:56 |
| Zardoz84 | that have a BTRFS filesystem. I boot from the Ubuntu server cdrom on rescue mode, to check the data volumen, and I can't mount the partition | 13:56 |
| bekks | So you dont have a backup? | 13:57 |
| Zardoz84 | fdisk says that there is a single partition of GPT type, and when I try to list the partitions using -t gpt, I get an error | 13:57 |
| Zardoz84 | bekks: Yes, but I'm trying to restore the data hard disks | 13:58 |
| bekks | Zardoz84: Can you please anwer my questions? | 13:58 |
| bekks | Zardoz84: Do you have a backup? | 13:58 |
| Zardoz84 | bekks: Yes, I have backups of the data but I'm trying to restore the data hard disks | 13:58 |
| bekks | Zardoz84: they were overwritten. Restore your backup. | 13:59 |
| Zardoz84 | I know that I would need to reisntall the OS, but I need to know why this happen, so the next time that we replace a hard disk, we not get a server down for a entire day | 13:59 |
| JanC | don't use fake raid | 13:59 |
| Zardoz84 | bekks: As I said, I know that the SO volumen is lost and I need to reinstall it. What I'm worried, is about the data volume that looks that is Ok, but I can mount the partition | 14:00 |
| bekks | Zardoz84: USe a hardware raid controller. | 14:00 |
| JanC | and I wouldn't use btrfs either | 14:00 |
| Zardoz84 | JanC: Sadly, I can't choose the hardware | 14:00 |
| bekks | Zardoz84: Do you have a BACKUP on SEPARATE drives? | 14:00 |
| Zardoz84 | We have a backup on a network drive, so YES | 14:00 |
| JanC | you can ignore intel fake raid and use linux software raid | 14:01 |
| bekks | Zardoz84: So reinstall that thing, forget about whatever is on those disks, and restore. your. backup. | 14:01 |
| Zardoz84 | :( My kingdom for a real RAID.... | 14:02 |
| === unreal_ is now known as unreal | ||
| RoyK | bekks: I'd use mdraid over hwraid any day | 14:47 |
| RoyK | s/use/choose/ | 14:47 |
| b3h3m0th | bekks: no need of asking user A | 14:48 |
| b3h3m0th | I am user A | 14:48 |
| b3h3m0th | :) | 14:48 |
| b3h3m0th | I did not set the passphrase | 14:48 |
| b3h3m0th | it was set up during installation | 14:48 |
| b3h3m0th | of ubuntu server | 14:48 |
| bekks | Then you are logged in as user A :P | 14:48 |
| b3h3m0th | but there is a catch | 14:49 |
| b3h3m0th | my ultimate intention is to set up (home folder encryption) and (key based ssh) | 14:49 |
| b3h3m0th | so, if home folder encryption is there, the ssh keys in home folder cannot be verified | 14:50 |
| b3h3m0th | so I am using https://stephen.rees-carter.net/thought/encrypted-home-directories-ssh-key-authentication | 14:50 |
| b3h3m0th | in that, I can login using my keys of user A | 14:50 |
| b3h3m0th | but then I have to unlock using my password | 14:51 |
| bekks | You could have asked that about an hour earlier. | 14:51 |
| b3h3m0th | but I want my decryption passhrase to be different from my unix password | 14:51 |
| b3h3m0th | for security reasons | 14:51 |
| bekks | Your initial question was totally different from your ssh issue. | 14:51 |
| b3h3m0th | yeah, I did not want to be off topic | 14:51 |
| b3h3m0th | brb. logging on. dinner | 14:52 |
| JanC | why would an ssh question be offtopic and an ecryptfs question not? | 14:55 |
| patdk-wk | I think he means offtopic to the problem at hand, he was attempting to solve | 14:58 |
| JanC | well, even more reason to describe the exact same problem instead of something unrelated? | 15:00 |
| b3h3m0th | back | 15:22 |
| b3h3m0th | so the command mentioned in https://stephen.rees-carter.net/thought/encrypted-home-directories-ssh-key-authentication is not present in ubuntu server 16.04 | 15:23 |
| bekks | Which command...? | 15:23 |
| === Guest51132 is now known as med_ | ||
| b3h3m0th | ecryptfs-mount-private | 15:24 |
| b3h3m0th | I'm wondering how it is mounted by ubuntu when I login normally | 15:25 |
| bekks | Check wether the package ecryptfs-utils is installed. | 15:27 |
| b3h3m0th | what was the command ? | 15:28 |
| b3h3m0th | something with --policy | 15:28 |
| b3h3m0th | nm | 15:28 |
| b3h3m0th | yes it is | 15:29 |
| b3h3m0th | oh | 15:32 |
| b3h3m0th | that command did work | 15:32 |
| b3h3m0th | path issues | 15:32 |
| b3h3m0th | and the passphrase is my unix password | 15:33 |
| b3h3m0th | how insecure of ubuntu server it did not even ask me for passphrase while setup :( | 15:33 |
| bekks | You could always change that. | 15:36 |
| b3h3m0th | hmm | 15:37 |
| genii | The Server meeting seems sparsely attended today | 16:17 |
| teward | happens | 16:18 |
| teward | some of us were delayed due to other things (read: workplace requirements) | 16:18 |
| teward | probably | 16:18 |
| teward | (that was me) | 16:18 |
| Pinkamena_D | Hello all, I am looking for the best solution to allow usernames / passwords from an active directory server to be used to log in with SSH to ubuntu server. This is the only feature I am looking for, no mountings/printers/user info, etc. Can anyone recommend a good guide? | 16:20 |
| sypher | Pinkamena_D: Simple LDAP might work, but you could also check out Centrify. It has a free version, if you don't require zoning. | 16:21 |
| sypher | Pinkamena_D: Install the agent, join the domain, done. One of my largest clients uses it extensively, it's very good. | 16:21 |
| Pinkamena_D | This is a commercial organization so I am not sure if that would work | 16:22 |
| sypher | Pinkamena_D: So is Centrify. | 16:22 |
| Pinkamena_D | Meaning, I don't need to worry about licensing. | 16:23 |
| sypher | Pinkamena_D: It's free version isn't a trial or anything like that. It's ONLY AD authentication. The paid version has a lot more features, if you require them. | 16:23 |
| Pinkamena_D | hmm, well I will look into it | 16:23 |
| sypher | Pinkamena_D: The free version has a 200-system limit in terms of licensing. | 16:24 |
| Pinkamena_D | In case this idea does not end up going over well, do you have any info on the pure LDAP solution you mentioned before? | 16:25 |
| sypher | Pinkamena_D: https://help.ubuntu.com/community/ActiveDirectoryHowto - Which, incidentally, mentions Centrify. | 16:26 |
| sypher | Pinkamena_D: Oh, I didn't know this. Centrify is in the Ubuntu partner repo. | 16:27 |
| sypher | Pinkamena_D: So you'd only have to enable the repo and install the package. | 16:27 |
| Pinkamena_D | nice | 16:28 |
| sypher | Pinkamena_D: Or, well, it was for precise. | 16:32 |
| === netsinn is now known as jiggalator | ||
| harsh410 | hi | 17:08 |
| harsh410 | in need of some guidance for cloud | 17:09 |
| harsh410 | hi in need of some guidance for cloud | 17:09 |
| bekks | harsh410: you're in need of asking a support question then. :) | 17:11 |
| harsh410 | ok and is this the forum | 17:12 |
| harsh410 | ?? | 17:12 |
| bekks | This is an IRC channel. | 17:12 |
| harsh410 | and it is for helping right | 17:13 |
| harsh410 | if u cant better say no | 17:13 |
| harsh410 | let others do that | 17:13 |
| bekks | If you dont want help, better say it. | 17:13 |
| bekks | Or ask your actual support question. | 17:13 |
| harsh410 | ofcourse i need it | 17:13 |
| sypher | Then ask your question. | 17:13 |
| genii | harsh410: A specific question is easier to answer than a generalized one | 17:16 |
| harsh410 | u should have said so right away ......I want to set up a local cloud based system for 30 users of my office .i want a file sharing server and most importantly office softwares . i have been able to perform file sharing on virtual m/c i want to perform services as a service | 17:16 |
| harsh410 | for office softwares like libre write | 17:16 |
| bekks | 0726 191122 < bekks> harsh410: you're in need of asking a support question then. :) | 17:18 |
| bekks | I did. It was my first comment. You preferred to chitchat instead. | 17:18 |
| harsh410 | help me . if u can please..i may not know the protocols of discussion but my intentions are clear | 17:19 |
| bekks | You want to setup a fileserver. | 17:19 |
| bekks | As a VM, as you told us. | 17:19 |
| harsh410 | yes | 17:20 |
| harsh410 | yes | 17:20 |
| bekks | So whats the issue with that? | 17:20 |
| harsh410 | i was able to set up a file server and perform file sharing.next thing i want is to provide office applications as service | 17:20 |
| harsh410 | to users | 17:20 |
| bekks | Install an Ubuntu VM, install the file server services you need/want, and there you ho. | 17:20 |
| sypher | s/ho/go/ | 17:21 |
| bekks | If you want to provide office applications to users, you would have to provide a desktop for each user. | 17:21 |
| harsh410 | can the services be shared to them | 17:21 |
| harsh410 | if they dont install the softwares | 17:21 |
| harsh410 | if thin clients are given to them? | 17:21 |
| RoyK | !ltsp | 17:22 |
| ubottu | LTSP is the Linux Terminal Server Project, which adds thin-client support to Linux servers. See chapter 3 of the !edubuntuhandbook, http://www.ltsp.org and/or http://en.wikipedia.org/wiki/Linux_Terminal_Server_Project | 17:22 |
| bekks | Thats "giving a desktop to the users". | 17:22 |
| harsh410 | okay sounds useful and how are softwares like libre installed and managed? | 17:23 |
| RoyK | harsh410: read up on ltsp | 17:24 |
| === sypher is now known as SaaSsy | ||
| === SaaSsy is now known as sypher | ||
| === jiggalator is now known as Guest7651 | ||
| === netsinn is now known as nis10 | ||
| === nis10 is now known as netsinn | ||
| === netsinn is now known as jiggalator | ||
| === iberezovskiy is now known as iberezovskiy|off | ||
| === degorenko is now known as _degorenko|afk | ||
| === jiggalator is now known as netsin_ | ||
| === netsin_ is now known as jiggalator | ||
| === jiggangalator is now known as jiggalator | ||
| === XinZhao is now known as Xinny | ||
| === jiggalator is now known as netzin | ||
| n2deep | Has anyone here been able to get cloud-init to execute a /sbin/modprobe command in the past? | 21:32 |
| === w0rg is now known as b4r | ||
| === Kenrinx is now known as kenrin | ||
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!