/srv/irclogs.ubuntu.com/2016/08/31/#ubuntu-server.txt

danny_I truely hate nfs now00:12
trippeh_danny_: that is normal00:45
trippeh_:-)00:45
RoyKdanny_: why?00:51
patdk-laptrippeh_, they are effective for local transfers, more effective for higher latency though00:54
patdk-lapthe increased/dynamic window scaling for ssh helps a crapload00:54
patdk-lapthe crypto changes doesn't help as much with aes-ni, sure00:55
danny_RoyK, Permissions issues, I can mount it but it won't let me open it sometimes, I change something and I can open it but can't put anything into it01:53
FarhaadNhi, how can i execute 2 command , in one secend? i need 2 command exacly run togheter05:32
FarhaadNtogether*05:34
hateballFarhaadN: is "command1 & command2" not exact enough ?05:34
SlingFarhaadN: 1 second is an eternity, what do you mean with together? are the commands related?05:34
Slingis this a concurrency problem you're trying to solve or do you just want 2 things to run really fast after each other05:34
FarhaadNno not enough05:35
hateballFarhaadN: have a look at parallel05:35
FarhaadNSling: i need together ,not after each other05:35
SlingFarhaadN: give more details if you want better help :)05:36
FarhaadNi need to run 2 command for voip service to find what channel is hangup and writ to 2 file,and then search one by one channel in 2nd file05:37
sarnoldFarhaadN: what have you tried so far? what about it didn't work?05:38
sarnoldas Sling points out, one second is an eternity05:39
=== cpaelzer_ is now known as cpaelzer
FarhaadNif i run my 2 commands after each othe ,properly one of them not exacly what i am need05:41
FarhaadNsry my language05:41
FarhaadNis bad05:41
FarhaadNhow can i run command parallel?05:41
sarnoldcommand1 & command 205:42
sarnoldthe & puts the first command in the background05:42
FarhaadNyou mead if i use & , 2 commands run in one moment?05:43
FarhaadNmean*05:43
FarhaadNor run command 1 , and then run command 2?05:44
hateball& means it starts the second one straight after it starts the first one05:45
hateballFarhaadN: but as I said, have a look at the command parallel05:45
sarnoldFarhaadN: try this: "sleep 2 & sleep 2 & echo hi"  -- then hit enter a few times05:45
FarhaadN[1] 497405:50
FarhaadN[2] 497505:50
FarhaadNhi05:50
FarhaadNoutput is05:50
FarhaadNwhat is that?05:51
sarnoldnote how the 'hi' shoewd up immediately05:51
sarnoldhit enter again05:51
sarnoldand the shell will then tell you about the two commands that have also finished05:51
FarhaadNhateball: can u tell me command for use parallel?05:51
FarhaadNsarnold: yes , when use few time,is goes up05:51
FarhaadNyou mean commands exec emediatly?05:52
sarnoldyes05:52
FarhaadNtanx for helps hateball, Sling and sarnold  ;-)05:54
sarnoldhave fun FarhaadN :)05:54
hateballFarhaadN: the command is called "parallel"05:59
hateballFarhaadN: "man parallel" to read how it works05:59
FarhaadNhateball: tnx man06:29
=== jamespag` is now known as jamespage
=== gnuoy` is now known as gnuoy
=== iberezovskiy_off is now known as iberezovskiy_
jamespageddellav, coreycb: https://bugs.launchpad.net/ubuntu/+source/pyopenssl/+bug/161876509:04
ubottuLaunchpad bug 1618765 in python-cryptography (Ubuntu) "TypeError: cannot instantiate ctype 'EVP_MD_CTX' of unknown size" [Undecided,New]09:04
jamespagefor crypto issue09:04
jamespageI think we'll need to bump in a new pyopenssl version09:04
ddellavok, i'll take a look jamespage09:05
jamespageddellav, I'm on it - focus on the other oslo bits for now09:06
ddellavallllrighty09:06
jamespageddellav, oh also uploaded os-vif to experimental09:06
jamespagehopefully that will get through the NEW queue quickly09:06
ddellavawesome09:06
xnoxcoreycb, obviously ipmi test failed on armhf & ppc64el =) so actually restrict ipmi test to armhf/ppc64el. Pushed to master https://git.launchpad.net/~ubuntu-server-dev/ubuntu/+source/ceilometer/commit/?id=d8500b77fa9f3f619439bac404da1d7469be066a09:30
xnoxshould be good to go, with next proper release.09:30
jonahHi all, you'll have to excuse my ignorance as I've always been a cPanel user, but I've just set up a small lamp server without any gui tools etc. In cPanel though you tend to have a site that has it's own home user, then it's own databases and users for mysql. So I'm just trying to get my head round how this works without cPanel to keep things relatively secure. If I just want say 5 sites on this small server, do I make each site it's own09:48
jonahhome user, or do I just put them in seperate directories in /var/www/vhosts/site1 /var/www/vhosts/site2 etc. If I do the latter do I just login to mysql to make databases and users - or will these not then work as they're all under one main user? Or if I make each user it's own linuc user with home dir, will those marry up with mysql? Just a little confused how this works with permissions/chown etc...09:48
xnoxjonah, create mysql database per website. Use separate credentials for each per-site mysql database (non-admin)10:06
xnoxcoreycb, nova-scheduler.service fails to start simply after package installation, and hence autopkgtest fails - see https://bugs.launchpad.net/ubuntu/+source/nova/+bug/161881210:07
ubottuLaunchpad bug 1618812 in nova (Ubuntu) "nova-scheduler autopkgtest fails" [Undecided,New]10:07
jonahxnox: so don't bother with different linux users, just have different database users and databases?10:07
xnoxjonah, yeah.10:07
jonahxnox: and then do I just chown them all to my normal ubuntu sudo user?10:07
jonahxnox: the site files I mean10:07
xnoxjonah, thats minimal separation. why ubuntu?10:07
xnoxwhy not www-data?10:08
xnox(all webservers on ubuntu use www-data user to serve websites)10:08
jonahxnox: ah ok, just as I login with my normal user to make the files, create the site files whatever, so then I just chown them instead to www-data...?10:09
xnoxjonah, just read this https://help.ubuntu.com/lts/serverguide/10:09
jonahxnox: I just ask in terms of users really because say one site is a cms and a hacker gets in with a mysql injection or something, won't they then be able to insert a file that can also get at the other sites due to them all using www-data rather than their own user perms?10:12
xnoxjonah, no... because mysql user cannot write to www-data owned directories.10:13
xnoxjonah, if you care about security, you can run all of your websites and databases inside lxc containers with lxd and/or juju local provider.10:13
xnoxthat way things are namespaced and protected/isolated from each other. But uses a little more resources.10:14
jonahxnox: so the mysql user is safe, but what about if say the cms is bruteforced and then a file can be uploaded from the backend - would that then mean all the files use the sames owner and can be compromised?10:14
ddellavany chance i can get unbanned from #ubuntu? Looks like the bot banned a few billion ipv6 addresses10:25
=== AndroUser2 is now known as ajikny
ajiknyJanC: Thanks.. Issue solved. We gave up on diagnosing kb11:35
coreycbxnox, I'll take a look and include your change in the next upload.  thanks again for the fixes!11:57
ddellavcoreycb ready for review: lp:~ddellav/ubuntu/+source/python-oslo.cache, lp:~ddellav/ubuntu/+source/python-oslo.db, lp:~ddellav/ubuntu/+source/python-oslo.vmware, lp:~ddellav/ubuntu/+source/python-oslotest, lp:~ddellav/ubuntu/+source/designate12:01
coreycbddellav, great, will look shortly12:01
ddellavcoreycb im working on horizon b3 right now but (as usual) horizon is fighting me12:01
coreycbddellav, oh is it out?12:01
ddellavstupid debuild applies the patches, then complains that the files have changed because of the applied patches12:01
ddellavyea12:01
ddellavcoreycb according to your little webapp ;)12:02
ddellavvery helpful :)12:02
coreycbddellav, oh yeah look at that :)  "webapp"12:03
ddellavhey, it's on the web and it's app-like so the name is appropriate12:03
ddellavheh12:03
coreycbxnox, were you planning on fixing the nova-scheduler issue?12:09
coreycbxnox, just planning my next move, I don't want to dup any work12:10
munskingHello, i'm trying to set up an ubuntu web server, but i need php 5.x, is that still in the official repos?12:22
rbasakmunsking: yes - use 14.04.12:30
munskingrbasak: dang, i just spent a few hours setting up and configuring 16.0412:30
xnoxmunsking, you can run lxc 14.04 container with php.12:31
xnoxand reverse proxy to that from the 16.04 host.12:31
munskingxnox: alright, i'll take a look at that12:31
NetworkingProAnyone familiar with lsof?12:34
=== JanC is now known as Guest73215
=== JanC_ is now known as JanC
xnoxmunsking, $ lxc start ubuntu:x myphpserver -> $ lxc exec myphpserver bash12:34
xnoxin $ lxc ls -> you will see it's ip address.12:35
coreycbjamespage, beisner: when you get a chance, can you promote cinder 2:7.0.2-0ubuntu1~cloud1 to liberty-proposed?13:03
jamespagecoreycb, yah13:04
coreycbjamespage, thx13:04
jamespagecoreycb, done13:08
=== pavlushka is now known as Guest11248
coreycbddellav, oslo.db is failing -- https://launchpadlibrarian.net/281914828/buildlog_ubuntu-yakkety-amd64.python-oslo.db_4.13.0-0ubuntu1_BUILDING.txt.gz13:51
ddellavcoreycb thats the same error i saw when i was building in yakkety without the delta (the patch)13:53
ddellavi builds fine for me locally, i'll push it up to a PPA13:53
coreycbhmm, which patch?13:53
ddellavcoreycb are you building from the ubuntu/newton branch?13:55
ddellavcoreycb pymysql-default.patch13:55
coreycbah, yeah that's what I'm prob missing13:55
rbasakcpaelzer: if there is no objection to my post about ntpdate, does that allow you to Won't Fix (with reference to the thread in a comment) all of the ones you're blocked on? Or would there be any left?14:35
jamespagecoreycb, ddellav: crypto problems sorted in xenial and yakkety14:39
jamespageoslo.config is failing to backport atm14:39
coreycbjamespage, \o/14:39
ddellavjamespage  :D14:39
coreycbjamespage, ddellav: all of ddellav's packages from earlier today are uploaded now14:41
jamespage\o/14:41
ddellavcoreycb yay14:41
med_hi, is there a way to remove all but the latest two kernels in a stream in Ubuntu server like there is in yum?14:43
med_zul, jamespage, kirkland ^14:45
med_coreycb, ^14:45
smbmed_, usually "sudo apt-get autoremove --purge" should do what you want (and also clean other unneeded packages)14:46
med_smb, yep we're considering that without the purge14:46
med_(purge takes some config files we likely need)14:46
med_was looking for a kernel specific solution as I'm running out of space on /boot (specifically)14:47
med_ah kirkland has buried this in byobu14:48
med_purge-old-kernels14:48
kirklandmed_: you're welcome.14:48
med_:-)14:48
med_maybe only on newer (xenial)14:50
med_doesn't work in my trusty env14:50
med_yep in xen not in t14:51
med_5.103 or newer14:51
med_ah previously in bikeshed14:52
coreycbddellav, what's left for non-client libraries?14:58
coreycbhi med_  o/14:59
ddellavcoreycb afaik the only one left is oslo-log and that was a bit of a pickle. The version currently available won't build for me. It's throwing test failures14:59
coreycbddellav, got a link to any?15:01
ddellavcoreycb just pull-lp-source python-oslo.log. I went and updated it but it's still failing at the same test. Even when built via ppa15:02
coreycbddellav, ok I'll take a look15:03
radish_hi everyone! Just a quick question: On my mysql server, character_set_server and collation_server are set to the defaults latin1 and latin1_swedish_ci respectively. If I would change them to utf8 and utf8_general_ci respectively, will this affect existing databases/tables/data?15:15
ddellavcoreycb can you move your bug back to fix committed and comment that it needs to be re-promoted? I did yaql and monasca but this one is owned by you: https://bugs.launchpad.net/ubuntu/+source/python-aodhclient/+bug/155241515:45
ubottuLaunchpad bug 1552415 in python-aodhclient (Ubuntu) "[MIR] python-aodhclient" [High,Fix released]15:45
coreycbddellav, done15:50
coreycbddellav, I'm going to work through the rest of the deps from the upstream report this afternoon and come back to oslo.log17:23
ddellavcoreycb ok, what are some of the ones you're going to work on? I guess it's not super clear which ones need updating17:24
coreycbfor now I'm working from here to see what's done: https://private-fileshare.canonical.com/~coreycb/ca_upstream_versions_newton.html17:25
coreycbddellav, ^ after that I just refer to upper-constraints.  at this point we will likely limit our uploads to openstack specific packages, unless a non openstack-specific package needs to get updated.17:26
coreycbsince we're past feature freeze17:26
coreycbddellav, although, be careful with that report. the os-brick upstream version from https://github.com/openstack/releases/tree/master/deliverables/newton doesn't match what's in upper-constraints.17:33
coreycbddellav, https://review.openstack.org/#/c/360878/17:34
cpaelzerrbasak: rbasakI think that will allow me to close all formerly assigned - I''ll do so and let you know only in case there are any left17:44
cpaelzerrbasak: I was able to drop all but bug 1046340 due to that reference17:59
ubottubug 1046340 in ntp (Ubuntu) "ntp package missing logcheck exceptions file /etc/logcheck/ignore.d.server/ntp" [Low,Triaged] https://launchpad.net/bugs/104634017:59
cpaelzerrbasak: and that one remains at low prio waiting for Debian17:59
UNIcodeXduring the install process, i'm asked if i want to encrypt my home directory, to which i replied 'yes'. but then i have the option to use encrypted LVM. could anyone advise me on how to proceed?18:08
sarnoldthe encrypted home directories are done using ecryptfs; this allows different users to have different keys/passwords for their data18:10
rbasakcpaelzer: thanks!18:10
rbasakcpaelzer: I wonder if that one is worth a delta. What do you think?18:10
sarnoldthe encrypted lvm is probably faster but all the data is going to be encrypted with the one key18:11
UNIcodeXsarnold, thanks. that's on top of drive encryption, if it were to also be enabled? is the drive encryption LUKS based? I think I have that right...18:12
sarnoldUNIcodeX: yeah, the lvm / encrypted disk ought to be LUKS .. I haven't looked lately :/18:13
cpaelzerrbasak: yeah, especially not particularly important, but since I'm like 75% done anyway already probably the easiest way to handle it18:13
cpaelzerrbasak: not sure about an SRU thou, but easy enough to be fixed in Yakkety at least18:13
cpaelzerrbasak: I assigned to myself, but don't know yet when I get to it18:13
rbasakcpaelzer: sure, thanks.18:16
UNIcodeXsarnold, thanks. Do you know if it makes use of the patch, which is talked about on the Kali site? The patch allows the definition of a nuke password.18:16
sarnoldUNIcodeX: I'd be surprised but I haven't looked :)18:17
UNIcodeXsarnold, k18:18
UNIcodeXsarnold, I found what I needed to know. Here it is in case you'd be interested in it. http://linuxbsdos.com/2014/01/14/apply-the-nuke-patch-to-luks-cryptsetup-in-linux-mint-16-and-ubuntu-13-10/18:18
sarnoldneat18:20
kirklandmed_: purge-old-kernels has been around for ages in bikeshed;  honestly, it's not supposed to exist at all, as 'sudo apt autoremove' should just work18:24
kirklandmed_: alas, apt autoremove doesn't actually work in many cases18:24
kirklandmed_: so purge-old-kernels is kind of a stop-gap, hack18:25
kirklandmed_: but it's saved many people who have long running cloud instances (more than a year old), and their little 8GB root disk fills up with 37 kernels in /boot18:25
kirklandmed_: it's a standalone shell script that you can wget or bzr or git grab and run on any Ubuntu machine18:26
b3h3m0thCan ubuntu server 14.04 running on 16 gigs ram and 3gz quad core xeon processors handle ~5000 tcp connections to a socat wrapper running a process ?19:34
sarnoldb3h3m0th: that sounds like a definite "maybe" :)19:41
sarnoldb3h3m0th: how long do the processes live? how long do the connections live? how much data through them?19:42
ogra_and how good is your network card/connection19:42
NetworkingProhey everyone19:49
NetworkingProAnyone know a command that can dump the contents of memory relating to a particular appliation?19:49
sarnoldNetworkingPro: gdb's gcore command https://sourceware.org/gdb/onlinedocs/gdb/Core-File-Generation.html19:50
b3h3m0thsarnold:  child process spawned by the socat (each instance of the app socat is running) runs for under a minute19:54
b3h3m0thand TCP traffic is there from start to end of that minute19:54
b3h3m0thactually << 1 min19:54
b3h3m0th~10 seconds19:54
b3h3m0thso in the worst case, all 5000 users connects simultaneously19:55
sarnoldhow long does it take to exec each of those?19:56
Exec...19:56
sarnoldlol19:57
b3h3m0ththe process is interactive session19:59
b3h3m0thwith sigalarm of 15 seconds19:59
sarnoldsounds promising20:00
danny_What are the advantages of Ubuntu-server over debian?  Systemd?22:12
RoyKdanny_: debian 8 has systemd22:58
RoyKdanny_: tbh, I prefer debian over ubuntu for servers22:58
danny_RoyK, Yeah, I just wanted to hear why I might be wrong about debian being generally better for servers22:59
danny_RoyK, I guess if you need something really up to date on a server for some reason22:59
RoyKthen either debian backports or some fresh ubuntu install23:01
RoyK(or fedora, if you're completely out of your mind)23:01
danny_other than that I guess just familiarity with ubuntu23:02
jesseghahaha how stupid. So I stuck latest ubuntu-server ISO on an external USB mass storage unit because, I mean, in 2016, who really wants to burn a *CDROM*? OK great, install fails, because it can't mount the cdrom. Yes, Virginia, the path "/dev/sr0" seems to be hardcoded into ubuntu server installation scripts! LOL LOL. So I deleted /dev/sr0 and symlinked it to /dev/sdb and now it's happily installing23:02
RoyKmanaging ubuntu is about the same as debian23:03
* RoyK hands jesseg a stack of floppies23:04
sarnoldjesseg: how strange, I did the same dd to usb and it worked flawlessly first try :/23:05
sarnoldjesseg: please file bug, 'ubuntu-bug debian-installer', I think that'll get it to the right place23:05
RoyKsarnold: perhaps he's installing Hardy ;)23:05
sarnoldRoyK: hehe :)23:05

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!