[00:58] and most of it is, how to make a mailserver, not how to make it work well, keep out spam, and have all the goodness one normally wants [00:59] but then all that stuff is mostly subject to ones needs and desires, and time === imr is now known as i- === tikund is now known as sikun [04:17] hi all. anyone on xenial have applied latest openssl version against oracle padding issue? I have applied latest and still get an F rating at ssllabs.com. [04:18] alnr: to be clear, did you just apt-get install the openssl package specifically? or an apt-get upgrade to get all the packages? [04:18] alnr: have you restarted the process in question to make sure it gets the new library? [04:19] i did apt install openssl after doing apt update. and did restart nginx after that [04:20] did it include the libssl1.0.0 package in the process? [04:21] i didnt notice. but i also did an --update-only for libssl1.0.0 as well [04:23] test [04:25] alnr: what does this get you? dpkg -l '*ssl*' | awk '/ii/ {print $2 "\t" $3}' [04:25] alnr: what does this get you? dpkg -l '*ssl*' | awk '/ii/ {print $2 "\t" $3}' [04:30] libssl1.0.0:amd64 1.0.2g-1ubuntu2 and openssl 1.0.2g-1ubuntu4.1 [04:33] i noticed that /usr/share/doc/libssl1.0.0/changelog.Debian.gz is not mentioning the patch at all [04:34] alnr: aha; apt-get install libssl1.0.0 and restart your webserver [04:39] thanks sarnold . i am upgraded to a "B", much better [04:40] alnr: yay :) [04:40] !oracle [04:40] i am checking but i think the ubuntu advisory only instructs to apt install openssl, as opposed to libssl1.0.0 [04:41] alnr: the updates are tested with apt-get update && apt-get upgrade --- that's the recommended way to install updates [06:55] I have installed a 16.04.1 Ubuntu Server on an openstack platform with Apache2 and i am trying to run roundcube which is a PHP webapplication. When visiting the main page of roundcube on this new server, i see PHP code instead of the roundcube application. Somehow the PHP is not executed but printed. What am i doing wrong?? [07:02] Hi, I’d love to use Ubuntu Server for a WordPress + WooCommerce site. Should I stick with something like a droplet from Digital Ocean or perhaps I should try my luck with running my own server and following a decent hardening how-to guide? [07:02] What would you suggest? Thanks ahead of time for any advice. [07:03] woodrag: did you go for an fpm or a mod_php install? [07:04] explore: I suspect DO has far more bandwidth than you do, no? [07:04] fpm [07:04] ?? [07:05] that runs php in a stand-alone daemon rather than in the web browser process [07:06] mod_php [07:06] apache2.... [07:11] I guess what I am asking is that is a droplet from Digital Ocean a pre-hardened virtual host? Do they do all the kernel updates? [07:11] Or is it entirely my responsibility? [07:12] entirely your responsibility [07:12] sarnold: ah [07:13] hmmm [07:14] the unattended-upgrades package may help in that case [07:14] it won't restart services [07:14] or reboot with new kernels [07:14] but it may help === beisner- is now known as beisner === dcmorton_ is now known as dcmorton [07:17] sarnold: thank you === spammy is now known as Guest98918 [07:21] sarnold: i am trying tu setuo mod_php 7 into apache2 on ubuntu server 16.04.1 but somehow i keep seeing code instead of he results of the executed code....;-( [07:22] woodrag: I think that usually means mime-types are incorrect or something -- justto be sure, are you perhaps following a guide for a 12.04 or 14.04 ubuntu instead of a 16.04? [07:23] sarnold: shouldn't php7 be running on this new distri out of the box??? [07:23] woodrag: if it's installed, yes [07:24] i installed int using apitude [07:24] which i use for all installs.... [07:24] but i never install php.... i use perl ;-) === FManTropyx2 is now known as FManTropyx === Mobutils_ is now known as Mobutils [07:48] i have installed php-7 on ubuntu 16.04.01 but i see the php-code instead of the results of the executeion of the code..... ;-( [07:49] woodrag: still? bummer. okay, check the apache logs? [07:50] sarnold: no special messages in the logs [07:51] sarnold: just a 200 ok in the acces.log and not errors in error.log [08:03] sarnold: any hints?? [08:04] This shouldn't be hard right?? [08:04] woodrag: indeed I'd expect it to be straightforward but I've never used php [08:05] me needer.... this is why ;-( === bekks_ is now known as bekks [09:27] my /usr/games directory is empty [09:28] So install games. [09:32] can I install backgammon? [09:33] on a server? [09:34] I loved playing backgammon on OpenBSD :) [09:39] FManTropyx: the bsdgames package claims to have backgammon [09:55] FManTropyx there’s a really good tank game [09:55] BZtank or something [09:56] bzflag? [09:56] something like that yes [09:56] can Ubuntu Server run X? [09:56] sure, apt-get install whatever you want [09:56] oh [09:57] the "server" systems just come pre-configured with package selections more aligned to the usual roles -- it's all the same sofware as the desktop, though, so you can still do whatever you want with the things [09:58] so e.g. networkmanager doesn't get in the way, or X chew up a few hundred megabytes of RAM you'd rather use for something else :) [09:59] very nice [10:04] sarnold: awesome, thank you! :D (Last updated on Friday, October 10, 1997.) [10:05] that's the good old backgammon game ;) [10:05] * sarnold . . o o O O ("oh hey, 1997, it's even pretty new") [10:06] yes kids, 1997 feels like it's just three years ago... [10:08] wow 19 year old code [10:08] it’s like fermented tofu [10:16] explore: make that Kæstur hákarl ;) [10:17] nope nope nope nope NOPENOPENOPENOPENOPENOPENOPENOPE [10:17] RoyK: fermented tofu is not that pungent [10:17] RoyK: you know what though, in my neck of the woods they managed to figure out how to eat shark meat in a pretty normal way [10:17] they render the shark meat to paste and make fish balls [10:17] taste okay [10:18] should be available from Hong Kong, China to Japan [10:18] most fisherpeople would throw shark back in the water [10:19] hákarl isn't so bad, really, if you just starve for a week or three first and have some good brennivín with it ;) [10:21] RoyK: i would be so happy if i have the good fortune to visit Northern Europe [10:21] and try all these delightful and crazy food [10:21] explore: you won't find hákarl outside of Iceland, beleive me :) [10:22] RoyK: so is it just tradition or do people get addicted to these food? [10:22] but you can find surströmming in Sweden, as a good alternative [10:22] like, really addicted, can’t live without it sort [10:22] just tradition [10:22] ah [10:23] bbiab [10:25] Hi [10:31] ho [10:38] I don't know how on-topic this is, hope it's OK. I have a VM with Ubuntu Server 16.04.1, and a VM with Ubuntu MATE 16.04.1. I assumed they'd be identical except for default packages installed, but apparently not. On both machines, I apt installed postgresql, and I got a systemd service, which is currently running according to "systemctl list-units". However, on server, systemd-cgtop [10:38] shows resource usage for the postgres service/cgroup, but on desktop/mate, there's nothing. In fact, the desktop's systemd-cgtop only has init.scope, user.slice, and system.slice. [10:39] I guess I'm trying to understand why server has that additional info [10:39] if I want a setup identical to server, but with a GUI, should I just install server and apt-get a desktop environment? [10:42] probably [10:42] but then - why a gui? [10:43] apt-get install ubuntu-desktop should work (if you really need that) [10:47] RoyK: I'm writing a webapp that would run a server, and I figured it would be simpler if my dev machine was identical. [10:47] *run on server [10:48] I would've liked to know why that difference was there, though [10:48] ic [10:50] rangergord: I'd recommend a VM similar to the server and keep the desktop/X things on the desktop [10:51] so, what I have now? But there are annoying differences like missing info from systemd-cgtop [10:52] rangergord: is the production machine a physical one? [10:55] I'm considering moving from FreeNAS to Ubuntu-Server. Anyone with a similar experienc? [10:55] RoyK: yeah, I'm just playing around with Virtualbox cause I'm on a laptop [10:55] GLaDER: And whats your specific question? [10:55] GLaDER: not the same thing at all. If it's for a NAS, stay with FreeNAS [10:55] GLaDER: iirc freenas uses zfs, so you should be able to import the zpool with zfsonlinux [10:57] rangergord: depends what you want - freenas is rather hard to use to anything but NAS/SAN things - perhaps (s)he wants to put a web server or some VMs on the box... [10:59] I do use it as a NAS, but I am having repetetive issues with FreeNAS' inability to handle its plugins well. Considering moving my pool (RoyK, doesn't Ubuntu-Server support ZFS out of the gate?) to get away from that. [11:03] bekks: My specific question would be "Can I move my ZFS Pool to ubuntu-server from FreeNAS w/o issues?" [11:03] GLaDER: ah - I forgot which channel I was in - yes - ZFS is supported in 16.04 [11:04] GLaDER: I'd not bet on that, most important thing are the zpool versions supported. [11:04] bekks: Okay, is there an easy way to check that? [11:04] (If you only have a hard way, that's fine too.) [11:05] GLaDER: which zpool version do you have on your freenas? [11:05] And maybe you want to ask in #zfsonlinux, too [11:05] bekks: freenas is based on openzfs, so it should be the same thing [11:06] RoyK: thats what could be confirmed by ryao in #zfsonlinux, e.g. [11:07] GLaDER: pastebin "zpool upgrade -v" [11:08] Will look into it. [11:09] http://pastebin.com/4kBMumMK [11:09] RoyK: ^ [11:18] GLaDER: seems my debian install with zfs 0.6.5.7-8-jessie supports more than that (with zfs from http://zfsonlinux.org/) [11:18] RoyK: is that an issue? [11:18] not at all [11:18] I.e. moving to something "better" shouldn't cause issues - aight? [11:18] the other way would be an issue [11:19] (Y) [11:19] Is it as simple as pulling out the drives and then import them in ubuntu? [11:19] so if you import the pool on something newer, you may choose to upgrade the pool and add feature flags, but then, you can't go back [11:20] preferably export the pool first - it's the preferred way [11:21] Roy you are in iceland? [11:21] I am asking because you said something about a shark dish. [11:22] You said it’s not available in Europe, but something similar is in Europe. [11:22] Nevermind I am not probing where you are from, don’t worry. [11:22] We can talk shark in #cooking lol. [11:23] Or is that ##cooking? [11:31] explore: no, but I've studied the language a bit and I've been there four or five times [11:31] four [11:32] RoyK: oh wow, that’s really fantastic :-) [11:32] explore: Icelanders have this other dish, Kæst skata (lit. rotten stingray) which is about the same (in .is and .fo), but unlikehákarl, whiich is eaten cold, skata is cooked, usually outside at christmas time, with portable gas things, to avoid the stink sticking to the walls. I'm not kidding ;) [11:32] s/unlikehákarl/unlike hákarl/ [11:33] Iceland must lack in things like sugar, salt, vinegar, everything. [11:33] Maybe that’s why they treasure those naturally pungent dishes? [11:33] not in modern food [11:34] in 'traditional' food like þorramatur (as above) it's rather salty and dried or fermented fish and meat [11:34] Oh okay at least they have salty to go on. [11:34] explore: where're you from? [11:34] I am Taiwanese. [11:34] From the island. [11:35] explore: perhaps we could continue this in #ubuntu-offtopic - it's not really ubuntu talk ;) [11:36] The closest we have, in asia, to Iceland is probably Hokkaido. [11:36] RoyK: yeah this is logged and stuff. [11:36] And off topic. [11:38] If not Hokkaido then Sakhalin. [11:50] Hi === negronjl_ is now known as negronjl === diytto_znc is now known as diytto === Guest98918 is now known as spammy [20:20] How do I tell If I had an intruder in my server change something? [20:20] should I just wipe everything to be safe? [20:20] somethingdope: By commparing the compromised system with your last known not-compromised backup. [20:21] *comparing even [20:21] bekks, Yeah, I don't have any of those [20:21] bekks, I set it up yesterday [20:21] Then your data isnt valuable enough to be kept. Reinstall that server. [20:22] bekks, k, Its an Open media vault server, I set the main box up and gave it access to wifi [20:22] bekks, then I let it alone for a few hours and then tried to log in to the web gui and the default credentials that worked initially no longer worked [20:23] bekks, I dunno if I'm dumb or paranoid [20:23] How is openmediavault related to Ubuntu? [20:24] bekks, Its built on debian and this is the most alive server related irc I know [20:24] So it is totally unrelated to Ubuntu. [20:24] Please proceed to the openmediavault community then. :) [20:25] bekks, dead irc, plus 90% of the cli side of server admin should be the same I imagine [20:25] Still doesnt make it ontopic in here. [20:26] its not like I'm interrupting a bustling conversation [20:26] heh [20:26] that's not how irc works. please be courteous. anyone here who is interested in discussing open media vault will laos be in the open media vault channel, if there is one. [20:26] And your issue was already answered: 0827 222133 < bekks> Then your data isnt valuable enough to be kept. Reinstall that server. [20:26] *also [20:28] bekks, yeah I got the information I needed, which is that I need to make backups of my backup server somewhere and compare it intermitently, [20:29] somethingdope: The basic information given was: "Reinstall that server." [20:29] I was mostly looking for a command to check the last time a user accessed the system [20:29] bekks, which I do plan to do, I'm concerned about the future of this system [20:30] somethingdope: Ask the openmediavault community, we dont know anything about their systems and their commands. [20:30] bekks, I will, but again, its just debian [20:31] And again, no on in here supports something else rather than Ubuntu, in here. [20:31] If you feel like you need support for another system, please proceed to the appropriate support community. [20:32] *no one [20:38] Hello all. I did do-release-upgrade from 14 to 16.04 and now things don't work. For example, I can't ssh to the box now. Thoughts? [20:39] Check wether the ssh server is running. [20:40] i uninstalled and reinstalled openssh-server. seemed to do the trick [20:41] Starting it would have been sufficient. [20:41] it said it was. I restarted it too, no issues [21:42] anyone utilizing an HP p410 RAID controller in anything? [21:42] I bet people do. [21:42] But whats your specific question? [21:42] how well is it supported [21:43] win 2k12 r2 performance is terrible [21:43] ESXi 6.0 it is terrible [21:44] Then you are doiung things wrong, the P410 works fine with Windows and ESX. [21:44] so far... it's taken nearly 30 minutes to install ubuntu server on esxi [21:44] not quite sure what I could be possibly doing wrong [21:44] Too less resources for the Ubuntu VM. [21:44] Wrong ESX configuration. [21:45] 4GB RAM & 8 vCPUs [21:45] configuration is fine [21:45] And how many cores does the host have? [21:45] 24 logical [21:45] And how many are in use already by other vms? [21:45] none [21:46] first VM [21:46] At least one is in use for the hypervisor. [21:46] obviously [21:46] you asked VMs not overall. [21:47] I'd doublecheck the ESX config and the system config before assuming the raid controller isnt running fine. [21:47] I had to replace the controller, it was a p410i before but I must not have noticed this was just a 410 [21:48] the previous one could easily write at speeds up to 900mb/s [21:48] Depending on the raid setup. [21:48] raid 5 [21:48] And the 410i is just the onboard variant of the 410. [21:49] no, the onbard is the b210i [21:49] at least on this server [21:49] And how many disks of which type and speed do you have in your R5? [21:49] So its a blade? [21:49] 4x 2TB WD Blacks [21:49] no it is a 1u [21:49] which server model? [21:49] four disks in a raid 5 arent suppossed to be very fast. [21:50] + generation [21:50] and the 2TB arent fast disks, [21:50] much faster than what I'm seeing now [21:50] than it used to be I mean [21:50] Which server model and generation is that? [21:51] 380 g6 I think, I can't recall of the top of my head [21:51] Ouch. Horrible old crap. [21:51] g6, wow [21:51] old still works fine, well did. [21:51] yeah, I'm only seeing 10mb/s write speeds [21:52] ugh.. I'm gonna run back into the data center and see what the hell is going on. Maybe swap the controller back to the old one and put the new ram in it. [21:52] Or maybe get a new server :) [21:52] i never worked with g6, but doesn't the ilo hint at the raid's health? if so, check it first. [21:53] we are now just phasing out the Pentium 4 servers [21:53] just now... [21:53] I bet support for that thing is more expensive than a new server. [21:53] warranty is long over [21:54] hasn't had any hardware problems [21:54] until now2 [21:55] brb [22:23] sikun: check the battery on the raid controller, they do eventually die [22:24] I did get a new one of those as well [22:24] the old one was bulging [22:26] if you just put it in - the initial charge does take 24-48 hours IIRC, and then you may even need a cold boot to get it actually activated - memory is fuzzy on that part [22:27] you could also just do software raid [22:28] yeah [22:28] I think I'm going to pull the controller out [22:28] that would allow for raid6 without the need to buy a license [22:28] and either use on board which is the b210i [22:28] or disable the raid controller alltogether [22:29] and no need to use crappy tools to manage and debug a proprietary raid. [22:31] using the separate controller can make sense, though, since they often have better specs than the onboard ones, or can support sas while onboard just do sata. i haven't checked this specific models' specifications, though. [22:32] onboard can do sas [22:34] yeah, vmware doesn't have hardware acceleration support for the 410 [22:47] coreycb: python-event 0.19.0-2 (from exp.) looks buildable on yakkety if you want to sync it [23:55] $ conjure-up openstack [warning] Unable to get Juju Version what should i do?