[00:46] <i-> I'm running Server 16.04, so I figured to ask here.
[00:47] <i-> I have kswapd0 running at 100% (almost) CPJ
[00:47] <i-> Dunno what I could do to fix this :P
[00:52] <sarnold> i-: is there anything interesting in dmesg output?
[00:53] <sarnold> i-: what does smartctl status look like on your drives?
[00:59] <i-> smartctl apparently gets an 'invalid argument'
[01:01] <i-> dmesg looks like normal
[07:01] <cpaelzer> i-: kswapd at 100% likely means you are staying below some watermarks
[07:01] <cpaelzer> i-: depending on numa setup you have one or more kswap kernel threads but that aside
[07:02] <cpaelzer> i-: usually I'd expect you now want to find where your memory is:
[07:02] <i-> this is actually an EC2 instance, btw
[07:02] <cpaelzer> good to know
[07:02] <cpaelzer> i-: a) spent with tools like smem or even just /proc/memofino and /proc/slabinfo
[07:03] <cpaelzer> i-: b) track a bit how much is going on in terms of discarding pages and vm effort on it
[07:03] <cpaelzer> for b there might be more modern things, but I still like systat for that
[07:05] <cpaelzer> http://www-05.ibm.com/de/events/linux-on-system-z/downloads/Tools-MK2-V7-Web.pdf pages 72/73 and 149 would be where I'd start
[07:05] <cpaelzer> i-: feel free to post the syststat and smem data somewhere to try to jointly interpreting them :-)
[07:07] <cpaelzer> i-: an output of /proc/meminfo /proc/slabinfo  /proc/zoneinfo and /proc/pagetypeinfo along the other data can also help to shed some light
[09:25] <cpaelzer> rbasak: I realized that it might be reasonable to spend at least a bit of time when doing a merge to check for outstanding bugs
[09:25] <cpaelzer> rbasak: most of the time this is just 30 minutes of cleanup, but sometimes one can find something important and add it right when merging anyway
[09:25] <cpaelzer> rbasak: as well as trying to push remaining delta to debian
[09:26] <cpaelzer> rbasak:  I was wondering if we should add the two (pushing delta to debian + reviewing open bugs) to https://wiki.ubuntu.com/UbuntuDevelopment/Merging/GitWorkflow between step 6/7 or if you consider that "too much"
[10:09] <negev> hi, say i have rails installed and i want to configure a different apparmor profile for each rails app, is there a way to do that?
[10:16] <rbasak> cpaelzer: I think that's a good idea.
[10:18] <cpaelzer> rbasak: thanks I'll add a very short statement as soon as the wiki lets me in
[11:16] <cpaelzer> rbasak: fyi picking the exim4 merge - ok ?
[11:17] <cpaelzer> that is the next on my list, but you touched last so I wanted to hear an ack
[11:18] <rbasak> cpaelzer: sure, thanks. I'm reviewing your ntp merge right now.
[11:18] <cpaelzer> mdeslaur: you also uploaded exim4 recently - is it ok for you too that I take the work on the merge?
[11:19] <mdeslaur> cpaelzer: please take it, thanks
[11:43] <ktt9> Hello. I have a problem with preseeding Ubuntu 16.04 server amd64. Patched boot command line seems to ignore preseed/early_command string. Am I missing something?
[11:44] <ktt9> Same procedure works perfectly for e.g. 15.10 and earlier versions.
[11:45] <rbasak> ktt9: I'm not aware of anything that should have changed with that. I suggest you provide exact steps to reproduce in a bug report.
[11:48] <ktt9> Okay, understood.
[13:38] <b3h3m0th> I opted for home folder encryption on ubuntu server 16.04 during installation. Now I want to be able to login as a different user and access my files. How do I do that ?
[13:44] <bekks> b3h3m0th: You dont. Because your home folder is encrypted per user.
[13:44] <bekks> b3h3m0th: you need to login two users then.
[13:45] <b3h3m0th> I did not get that
[13:45] <JanC> well, you could still mount it AFAIK
[13:45] <b3h3m0th> yeah, that's what I want to do
[13:46] <bekks> the home of user A is decrypted when user A logs in. So login user A to get that home decrypted, and switch users, and login user B.
[13:46] <b3h3m0th> I want to do that without logging in to user A
[13:47] <b3h3m0th> technically speaking, I want to figure out the decryption passhrase and the decryption command for /home/A/ (given I know the unix password for user A) from user B's shell
[13:47] <bekks> b3h3m0th: https://help.ubuntu.com/community/EncryptedPrivateDirectory
[13:48] <JanC> it's using ecryptfs
[13:48] <bekks> b3h3m0th: There is no way to guess the passphrase for the encryption from the known user password.
[13:48] <bekks> There is entirely no relationship between them, technically. You MIGHT set the same passphrases, but thats not a requirement at all.
[13:49] <bekks> b3h3m0th: Instead of trying to crack, just ask user A.
[13:54] <JanC> https://help.ubuntu.com/community/EncryptedPrivateDirectory#Recovering_Your_Mount_Passphrase
[13:54] <Zardoz84> I need help with a nearly catastrophic problem with Ubuntu Server (14.04) on a Intel FakeRAID
[13:55] <Zardoz84> We replaced a failing hard drive by another, and looks that the rebuild process instead of copying the data of the good disk to the new disk, has doing opossite! Now I have a raid volumen that is empty !
[13:55] <bekks> Zardoz84: No it is time to restore your backup.
[13:55] <JanC> b3h3m0th: see there how you can get the mount passphrase
[13:56] <Zardoz84> But lucky, we had a separate raid 1 to store the data
[13:56] <Zardoz84> that have a BTRFS filesystem. I boot from the Ubuntu server cdrom on rescue mode, to check the data volumen, and I can't mount the partition
[13:57] <bekks> So you dont have a backup?
[13:57] <Zardoz84> fdisk says that there is a single partition of GPT type, and when I try to list the partitions using -t gpt, I get an error
[13:58] <Zardoz84> bekks: Yes, but I'm trying to restore the data hard disks
[13:58] <bekks> Zardoz84: Can you please anwer my questions?
[13:58] <bekks> Zardoz84: Do you have a backup?
[13:58] <Zardoz84> bekks: Yes, I have backups of the data but I'm trying to restore the data hard disks
[13:59] <bekks> Zardoz84: they were overwritten. Restore your backup.
[13:59] <Zardoz84> I know that I would need to reisntall the OS, but I need to know why this happen, so the next time that we replace a hard disk, we not get a server down for a entire day
[13:59] <JanC> don't use fake raid
[14:00] <Zardoz84> bekks: As I said, I know that the SO volumen is lost and I need to reinstall it. What I'm worried, is about the data volume that looks that is Ok, but I can mount the partition
[14:00] <bekks> Zardoz84: USe a hardware raid controller.
[14:00] <JanC> and I wouldn't use btrfs either
[14:00] <Zardoz84> JanC: Sadly, I can't choose the hardware
[14:00] <bekks> Zardoz84: Do you have a BACKUP on SEPARATE drives?
[14:00] <Zardoz84> We have a backup on a network drive, so YES
[14:01] <JanC> you can ignore intel fake raid and use linux software raid
[14:01] <bekks> Zardoz84: So reinstall that thing, forget about whatever is on those disks, and restore. your. backup.
[14:02] <Zardoz84> :( My kingdom for a real RAID....
[14:47] <RoyK> bekks: I'd use mdraid over hwraid any day
[14:47] <RoyK> s/use/choose/
[14:48] <b3h3m0th> bekks:  no need of asking user A
[14:48] <b3h3m0th> I am user A
[14:48] <b3h3m0th> :)
[14:48] <b3h3m0th> I did not set the passphrase
[14:48] <b3h3m0th> it was set up during installation
[14:48] <b3h3m0th> of ubuntu server
[14:48] <bekks> Then you are logged in as user A :P
[14:49] <b3h3m0th> but there is a catch
[14:49] <b3h3m0th> my ultimate intention is to set up (home folder encryption) and (key based ssh)
[14:50] <b3h3m0th> so, if home folder encryption is there, the ssh keys in home folder cannot be verified
[14:50] <b3h3m0th> so I am using https://stephen.rees-carter.net/thought/encrypted-home-directories-ssh-key-authentication
[14:50] <b3h3m0th> in that, I can login using my keys of user A
[14:51] <b3h3m0th> but then I have to unlock using my password
[14:51] <bekks> You could have asked that about an hour earlier.
[14:51] <b3h3m0th> but I want my decryption passhrase to be different from my unix password
[14:51] <b3h3m0th> for security reasons
[14:51] <bekks> Your initial question was totally different from your ssh issue.
[14:51] <b3h3m0th> yeah, I did not want to be off topic
[14:52] <b3h3m0th> brb. logging on. dinner
[14:55] <JanC> why would an ssh question be offtopic and an ecryptfs question not?
[14:58] <patdk-wk> I think he means offtopic to the problem at hand, he was attempting to solve
[15:00] <JanC> well, even more reason to describe the exact same problem instead of something unrelated?
[15:22] <b3h3m0th> back
[15:23] <b3h3m0th> so the command mentioned in https://stephen.rees-carter.net/thought/encrypted-home-directories-ssh-key-authentication is not present in ubuntu server 16.04
[15:23] <bekks> Which command...?
[15:24] <b3h3m0th> ecryptfs-mount-private
[15:25] <b3h3m0th> I'm wondering how it is mounted by ubuntu when I login normally
[15:27] <bekks> Check wether the package ecryptfs-utils is installed.
[15:28] <b3h3m0th> what was the command ?
[15:28] <b3h3m0th> something with --policy
[15:28] <b3h3m0th> nm
[15:29] <b3h3m0th> yes it is
[15:32] <b3h3m0th> oh
[15:32] <b3h3m0th> that command did work
[15:32] <b3h3m0th> path issues
[15:33] <b3h3m0th> and the passphrase is my unix password
[15:33] <b3h3m0th> how insecure of ubuntu server it did not even ask me for passphrase while setup :(
[15:36] <bekks> You could always change that.
[15:37] <b3h3m0th> hmm
[16:17] <genii> The Server meeting seems sparsely attended today
[16:18] <teward> happens
[16:18] <teward> some of us were delayed due to other things (read: workplace requirements)
[16:18] <teward> probably
[16:18] <teward> (that was me)
[16:20] <Pinkamena_D> Hello all, I am looking for the best solution to allow usernames / passwords from an active directory server to be used to log in with SSH to ubuntu server. This is the only feature I am looking for, no mountings/printers/user info, etc. Can anyone recommend a good guide?
[16:21] <sypher> Pinkamena_D: Simple LDAP might work, but you could also check out Centrify. It has a free version, if you don't require zoning.
[16:21] <sypher> Pinkamena_D: Install the agent, join the domain, done. One of my largest clients uses it extensively, it's very good.
[16:22] <Pinkamena_D> This is a commercial organization so I am not sure if that would work
[16:22] <sypher> Pinkamena_D: So is Centrify.
[16:23] <Pinkamena_D> Meaning, I don't need to worry about licensing.
[16:23] <sypher> Pinkamena_D: It's free version isn't a trial or anything like that. It's ONLY AD authentication. The paid version has a lot more features, if you require them.
[16:23] <Pinkamena_D> hmm, well I will look into it
[16:24] <sypher> Pinkamena_D: The free version has a 200-system limit in terms of licensing.
[16:25] <Pinkamena_D> In case this idea does not end up going over well, do you have any info on the pure LDAP solution you mentioned before?
[16:26] <sypher> Pinkamena_D: https://help.ubuntu.com/community/ActiveDirectoryHowto - Which, incidentally, mentions Centrify.
[16:27] <sypher> Pinkamena_D: Oh, I didn't know this. Centrify is in the Ubuntu partner repo.
[16:27] <sypher> Pinkamena_D: So you'd only have to enable the repo and install the package.
[16:28] <Pinkamena_D> nice
[16:32] <sypher> Pinkamena_D: Or, well, it was for precise.
[17:08] <harsh410> hi
[17:09] <harsh410> in need of some guidance for cloud
[17:09] <harsh410> hi in need of some guidance for cloud
[17:11] <bekks> harsh410: you're in need of asking a support question then. :)
[17:12] <harsh410> ok and is this the forum
[17:12] <harsh410> ??
[17:12] <bekks> This is an IRC channel.
[17:13] <harsh410> and it is for helping right
[17:13] <harsh410> if u cant better say no
[17:13] <harsh410> let others do that
[17:13] <bekks> If you dont want help, better say it.
[17:13] <bekks> Or ask your actual support question.
[17:13] <harsh410> ofcourse i need it
[17:13] <sypher> Then ask your question.
[17:16] <genii> harsh410: A specific question is easier to answer than a generalized one
[17:16] <harsh410> u should have said so right away ......I want to set up a local cloud based system for 30  users of my office .i want a file sharing server and most importantly office softwares . i have been able to perform file sharing on virtual m/c i want to perform services as a service
[17:16] <harsh410> for office softwares like libre  write
[17:18] <bekks> 0726 191122 < bekks> harsh410: you're in need of asking a support question then. :)
[17:18] <bekks> I did. It was my first comment. You preferred to chitchat instead.
[17:19] <harsh410> help me . if u can please..i may not know the protocols of discussion but my intentions are clear
[17:19] <bekks> You want to setup a fileserver.
[17:19] <bekks> As a VM, as you told us.
[17:20] <harsh410> yes
[17:20] <harsh410> yes
[17:20] <bekks> So whats the issue with that?
[17:20] <harsh410> i was able to set up a file server and perform file sharing.next thing i want is to provide office applications as service
[17:20] <harsh410> to users
[17:20] <bekks> Install an Ubuntu VM, install the file server services you need/want, and there you ho.
[17:21] <sypher> s/ho/go/
[17:21] <bekks> If you want to provide office applications to users, you would have to provide a desktop for each user.
[17:21] <harsh410> can the services be shared to them
[17:21] <harsh410> if they dont install the softwares
[17:21] <harsh410> if thin clients are given to them?
[17:22] <RoyK> !ltsp
[17:22] <bekks> Thats "giving a desktop to the users".
[17:23] <harsh410> okay sounds useful  and how are softwares like libre installed and managed?
[17:24] <RoyK> harsh410: read up on ltsp
[21:32] <n2deep> Has anyone here been able to get cloud-init to execute a /sbin/modprobe command in the past?