/srv/irclogs.ubuntu.com/2016/09/19/#ubuntu-server.txt

=== dzragon^ is now known as dzragon
=== JanC is now known as Guest19696
=== JanC_ is now known as JanC
=== TariusWork is now known as Tarius
=== Tarius is now known as TariusWork
=== Tarius- is now known as Tarius
nix_https://www.youtube.com/channel/UCyJtqKcPDtdGPzTjhdUIQ-Q/live <-- livestreaming linux setup06:44
nix_https://www.youtube.com/channel/UCyJtqKcPDtdGPzTjhdUIQ-Q/live <-- livestreaming linux setup07:06
lordievaderGood morning07:56
jamespagecoreycb, ddellav: picking up neutron* rc1's08:54
rbasaklamont: poke for the bind9 resolvconf fix please. Should I just add a delta to Ubuntu for now?09:01
rbasakpowersj: is the server ISO oversize issue due to ghostscript still an issue? And if so, who is taking point on that?09:01
=== velovec is now known as aderyugin
jamespageddellav, coreycb: ceilometer underway10:40
rbasakObservation of the day: one can type "ip link" with the right hand only. Beats ifconfig :)10:43
jamespageddellav, coreycb: ceilometer uploaded11:07
jamespagerbasak, does the git debian importer tool work ok with experiemtnal11:07
jamespagerbasak, for the openstack packages we oftern need to work against experimental; to-date we've done that directly in debian git repos, but that's about to change as pkg-openstack in debian is moving dev workflow to openstack project...11:08
rbasakjamespage: good question11:42
rbasaknacc: ^11:42
* rbasak isn't sure11:42
rbasakI'm sure we can adapt it if needed11:42
jamespagecoreycb, ddellav: also merged oslo.db and pymysql from debian11:44
coreycbjamespage, that sounds scary11:54
coreycb:)11:54
coreycbjamespage, I've been hitting issues with DFS and oslo.db pymysql11:54
jamespagecoreycb, there where some breaks but that should now be resolved aiui11:55
coreycbjamespage, hopefully.  I had to downgrade pymysql to 0.7.6 and it fixed my issues.11:57
jamespagecoreycb, lets hope so11:59
jamespagecoreycb, ok lets block pymysql for now12:02
jamespageI'll request that in -proposed asap12:02
jamespageit mis-aligns us with upstream12:02
coreycbjamespage, might be a good idea12:02
coreycb+112:02
jamespagecoreycb, block and rejection requested12:05
jamespagecoreycb, removed from proposed12:09
=== petevg is now known as petevg_afk
lamontrbasak: let me see what I can do right now13:53
jamespagecoreycb, ddellav: either of you two doing rc1 for barbican?14:06
coreycbjamespage, nope14:07
jamespageddellav, ?14:07
smosernacc, so... silly me tried:14:07
smoser git clone git://git.launchpad.net/~usd-import-team/ubuntu/+source/walinuxagent14:08
smoserusd-import --no-push -v --directory=walinuxagent walinuxagent14:08
smoserthat fails because walinuxagent (--directory) does not have a git or gitwd dir.14:09
smoserthis would seem to me to be the most useful/expected path for "update"14:09
smoseris that supportable ?14:09
ddellavjamespage yes i am14:10
jamespageddellav, ok I won't14:11
jamespagelemme know and either coreycb or I can sponsor14:11
ddellavjamespage will do14:11
powersjrbasak, definitely still an issue. ISO is sitting at 812MB14:28
ddellavjamespage coreycb plz review lp:~ddellav/ubuntu/+source/barbican14:36
jamespageddellav, on it14:37
jamespageddellav, merged and uploaded - thanks!14:46
jamespageddellav, do you have a list of outstanding rc's still?14:46
ddellavjamespage i've just been keeping track of what you guys are reporting and i grab whatever is on the corey's script output that is not been done yet14:47
jamespageddellav, so what's left?14:47
ddellavjamespage this is what i have so far: http://paste.ubuntu.com/23203081/14:47
ddellavjamespage the debian sync's mostly but they have not been updated in debian yet. sahara, senlin, zaqar14:48
DonutloopHas the APT tool a API ?15:08
DonutloopThat i can write a custom command. I want write a apt-security cve tool15:09
cpaelzerjamespage: hey FYI I uploaded a new DPDK today15:28
jamespagecpaelzer, aweomse - we should get ovs 2.6.0 this week as well15:28
cpaelzerjamespage: it should (tm) have no binary implications, well maybe due to fixing the last remaining lintian issue15:28
patdk-wksomeone cloned me?15:28
cpaelzerwhich was rpath15:28
cpaelzerjamespage: so we might need a no change rebuild, but if you up ovs 2.6 anyway that would do it just as well15:29
jamespagecpaelzer, ack15:29
cpaelzerjamespage: symbols and all that were untouched, so it should be good - let me know if anything happens when you push latest ovs and I might be able to help15:29
jamespageokies15:29
=== _torriz is now known as torriz
rbasakpowersj: https://launchpad.net/ubuntu/+source/samba15:44
rbasakhttps://wiki.ubuntu.com/Bugs/Tags15:45
smoserrbasak, i'm guessing you're about EOD15:59
smoserbut do you have thoughts on my usd-import questions to nacc above ?15:59
rbasaksmoser: seems reasonable that it should autocreate. I thought it did though.16:02
rbasakCould that be a recent regression?16:02
smoserrbasak, the difference is i dont have a gitwd and git dir16:03
smoseri have a .git16:03
smoseri wanted to point it at a "normal" git clone16:03
rbasakAh, I see.16:03
rbasakThat's a bit trickier I think. Your particular case seems reasonable, but we're assuming you have all the remote tracking branches have the right names and tag names etc.16:04
rbasakI think?16:04
smoserprobably, but you'd think that i do...16:05
smoseri cloned a branch that was created by  usd-import16:05
smoseroh.... but i would need the branches locally too i guess.16:05
NOVAtechihello all.16:12
NOVAtechiwith mdadm is the metadata the new way of showing which raid level and how many devices?16:13
NOVAtechiARRAY /dev/md/0  metadata=1.2 UUID=149b996f:ec0e9fd3:056621ee:ab58ac2b name=zeus.016:13
allenI'm trying to sftp from my local macbook to the remote server16:23
alleni was able to retrive files, no problem, but when uploading, it says "Entering dirname/" and then takes me back to the sftp> prompt16:24
allenno indication of a succesfful upload, no status bar for each individual files. What am I diong wrong?16:24
naccsmoser: yeah, it's on my roadmap to not rely on xgit16:24
naccsmoser: but for now, you need an xgit-style local setup16:24
naccsmoser: alternatively, use the importer itself to re-import with --no-clean, and it will setup a local directory (specified or in /tmp) with the appropriate configuration16:25
naccrbasak: jamespage: it knows about experimental, yes (well, it knows about anything published acc'g to launchpad)16:26
rbasaknacc: I wonder how well it would work with Ubuntu's packaging not derived from Debian though?16:26
rbasakI haven't thought it through.16:26
naccrbasak: i guess i'd need more context, i was purely asnwering the question of experimental :)16:27
smosernacc, right. just want to re-use that tree16:28
smoseri dont have the original 'directory'16:28
smoserdo i need it? or will usd-import dtrt if ij ust run it again16:28
rbasakpowersj: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/157970816:28
ubottuLaunchpad bug 1579708 in mysql-5.7 (Ubuntu) "mysql maintainer scripts fail if files in /etc/mysql have been deleted locally" [Undecided,Invalid]16:28
naccsmoser: it will dtrt -- but let me clarify if i know what you're asking :)16:29
smoseri jsut dont want it to re-do everything16:29
naccsmoser: if you run `usd-import -d <dir> pkgname -o usd-import-team`, the importer should set up a remote pointing to usd-import-team's git repository for that pkg. It will check what the status of all the remote branches are (version/publish date) and then it will compare against lp's source pkg publishing history. Anything new it needs, it will `pull-{lp,debian}-source`, and import. Then it will push16:31
nacc(unless --no-push) is given. Preusming usd-import-team's tree is current, all of that would be skipped, and you'd just hav ea directory with git/ gitwd/ (so suitable for xgit) that has a remote with all the appropriate references you need. You'd just need to `git checkout -b <remote branch>` to do local work16:31
naccsmoser: that is the intent, at least :)16:31
smoserok.16:32
rbasakOdd_Bloke: do you know about bug 1624596? Found during triaging. Not sure why ~ubuntu-server still has a subscription.16:32
ubottubug 1624596 in walinuxagent (Ubuntu) "ephemeral-disk-warning.service causes ordering cycle on multi-user.target" [Medium,Triaged] https://launchpad.net/bugs/162459616:32
smoserrbasak, i will / am looking at that.16:34
=== degorenko_away is now known as degorenko
=== tikund is now known as sikun
rbasak$ rmadison taglibs-standard jakarta-taglibs-standard16:48
rbasak taglibs-standard         | 1.2.5-2                | yakkety/universe | source16:48
rbasakhcdist yakkety-proposed apt-cache showsrc taglibs-standard16:48
naccjamespage: if you want to give me an example src package, i can do a side-import of it for you to look at16:48
rbasakhcdist yakkety-proposed apt-cache showsrc taglibs-standard16:49
rbasakPackage-List:16:49
rbasak libtaglibs-standard-impl-java deb java optional arch=all16:49
rbasak libtaglibs-standard-jstlel-java deb java optional arch=all16:49
rbasak libtaglibs-standard-spec-java deb java optional arch=all16:49
rbasakrmadison libtaglibs-standard-impl-java libtaglibs-standard-jstlel-java libtaglibs-standard-spec-java16:49
rbasak libtaglibs-standard-impl-java | 1.2.5-2 | yakkety/universe | all16:49
rbasak libtaglibs-standard-jstlel-java | 1.2.5-2 | yakkety/universe | all16:49
rbasak libtaglibs-standard-spec-java   | 1.2.5-2 | yakkety/universe | all16:49
rbasakcpaelzer: ^16:49
=== dames is now known as thedac
naccrbasak: ok, hit an interesting case -- i was testing if my pygit2 conversion was good (leading to the same git trees as the old importer). Tested with at. On yakkety, dpkg-parsechangelog fails on the first debian ssphr, correctly. But in 16.04 it doesn't (so it successfully imported in the past...). I'm on yakkety now. Would you say just run in 16.04 for now? Or should I fix up at like I have for apt?17:21
naccI'm guessing that dpkg-parsechangelog has gotten stricter/more correct in 16.1017:21
=== degorenko is now known as _degorenko|afk
naccoh, it looks like dpkg-dev moved from programs to perl modules17:25
smosernacc, whati'd i do wrong17:25
smoser http://paste.ubuntu.com/23203695/17:25
naccsmoser: this would appear to be wrong: "WARNING:root:No objects found in remote git://smoser@git.launchpad.net/~usd-import-team/ubuntu/+source/walinuxagent" (not your fault). let me debug quickly if i can17:26
smoserah.17:26
smoseryeah, smoser@17:27
smoserno. that should be ok. the smoser@ shoudlnt mbetter17:27
naccright17:27
naccsorry, what i menat, was thats tatement is wrong17:27
nacc*that statement17:27
naccas it has objects17:27
smoserright.17:27
naccgive me a few minutes to dig17:28
naccsmoser: heh, i blame you17:30
naccsmoser: ok, your git / git+ssh change17:30
naccsmoser: so the problem is, git+ssh allows user@17:31
smoseryep17:31
naccsmoser: but git doesn't17:31
smoseryeah, i was just going to suggest you stop taking changes from smoser17:31
naccheh17:31
nacci think i can fix it quickly17:31
smosernacc, http://paste.ubuntu.com/23203720/17:33
naccyeah basically17:33
smoserhm..17:34
smoseri still get the no objects warning though17:34
smosernah. it was dirty dir. never mind.17:34
naccwell, my version works :) http://paste.ubuntu.com/23203725/17:34
naccsmoser: should be fixed in git17:37
naccsmoser: nice, the pickup did seem to work, too, it imported 3 new versions since last import (i assume that's right, i've not actually checked)17:38
smosernacc, horay!17:39
smoserpush?17:39
smosernacc, the vast majority of the 2 minutes 26 seconds for me was dist_sinfo.launchpad_versions_published_after17:45
naccsmoser: i ran with --no-push17:45
naccsmoser: yeah, it's a slow algorithm for correctness17:45
naccsmoser: we can probably optimize it at some point, but it's a lot of launchpad interactions (as it needs to be) and then looping to get to the point in the history we need to be17:46
smoseryeah.17:46
nacctbh, most of the code is naive in favor of correctness/ease of understanding :)17:47
smosersure.17:47
smoserso i'm running it without --no-push now17:47
smoserbut to make sure i understand this...17:48
smoseryou could in your tree just add the remote and push17:48
smoserright?17:48
naccsmoser: yep, although with your change, i'd need to change git/config to use git+ssh and my username17:49
smoseryeah.17:49
naccsmoser: i think i adjusted the code already to change that on each run17:49
smoser(add the remote)17:49
naccso you could do --no-push -d ... then immediately do the same without --no-push and it should just work17:49
naccthis in the pygit2 version, though17:50
naccso will be in master hopefully soon :)17:50
smosernacc, speed is not a big deal. as the goal is this is running automated and already ran when i looked to pull17:50
naccsmoser: yep, exactly17:51
naccsmoser: yeah, speed is only important for the part that is currenty slow (in my experience), which is loading an existing large repo17:51
naccsmoser: the pygit2 conversion fixes that, afaict17:51
naccsmoser: then the cronjob should be close to bound by the number of publishes since last run17:52
blizzowSo I went to do a dist-upgrade on a couple of servers, and I find mysql-common is installed on there...I do an apt-get remove mysql-common and only see the following packages getting removed:18:48
blizzowlibdbd-mysql-perl libmysqlclient20 mysql-common18:48
blizzowIs mysql-common part of the base install somehow now?18:49
cliluwIs there a way to let a user have superuser privileges without letting them impersonate root?18:49
blizzowOr is apt not showing me what actually depends on mysql-common?18:49
lunaphytecliluw: well, define "have superuser privileges", but generally, that's what sudo is for.18:49
cliluwlunaphyte: We want to let users do "sudo" but not let them do "sudo su" or "sudo -i".18:50
lunaphytesadly, it's been bastardized by ignorant cargo cult admins to mean "run everything with sudo when you are the admin anyway"18:50
blizzowcliluw: then you need to enumerate a list of commands that sudo can run.18:51
lunaphytecliluw: what does "do sudo" mean though?  running sudo by itself is not of value18:51
lunaphyteyour goal should never be to "let users run sudo".  instead, your goal should be to let users run specific commands, or do specific things, which can then be accomodated by way of sudo18:52
blizzowIn your sudo config instead of ALL:ALL, you need to have ALL:/commandsyouwanttolettheuserrun.18:53
sarnoldcliluw: sudo is configurable, almost too configurable; it's easy enough to give someone a specific command, but be aware that if you give them e.g. sudo edit permission then they can just use vim's ! feature to execute a shell.. most programs let people execute shells or arbitrary commands somehow, so be careful if you try to use this to lmiit what people can do18:53
lunaphyteblizzow: i don't understand what you're asking.  i don't recall mysql-common being present in a base install, but either way, what difference does it make [aside from crappy bloat]?  if you need libdbd-mysql-perl, then the other two come with it.  if not, remove them.18:53
blizzowlunaphyte: I removed it, I was just curious if mysql-common creeped in as bloat like lxc containers did.18:54
lunaphytei hope not, but sadly, it wouldn't be a huge surprise.18:55
lunaphyteit's become pretty ridiculous the number of packages i now remove from a "minimal" install in order to make it *actually* minimal18:55
lunaphyteand don't get me started on dependency nonsense :)18:55
blizzowIt's been brutal lately.18:56
blizzow!18:56
cliluwblizzow: You have a good point about using whitelisting instead of blacklisting.18:56
blizzowGuess it's time to set up my own seed server and start doing installs that way again.18:57
blizzowcliluw: check this out... http://askubuntu.com/questions/500679/block-a-command-from-sudo-user18:58
blizzowYou can blacklist su, but the article says it's pretty ineffective.18:58
rattkingyou can run 'aptitude why package' to see what pulled the package in.. assuming you dont consider apitude bloat :)18:59
sarnoldapt-get purge should give a similar reason, no? :)19:00
lunaphyteindeed.  using sudo in an attempt to blacklist commands is a fool's errand19:00
rattkingby seeing what it wants to take with it? yeah I suppose it would19:00
lunaphyterattking: yes, i consider aptitude to be bloat19:00
lunaphytei can't remember the last time i wished i hadn't purged aptitude19:01
blizzowratking: thanks!  Just what I was looking for. Ansible requires aptitude, so I'm forced to use it.19:01
lunaphyteansible requires aptitude?  blech19:01
lunaphyteactually requires it?  or artificially requires it by way of absurd package dependencies?19:02
blizzowlunaphyte: yep.19:02
blizzowactually requires it.  also requires python-simplejson19:02
lunaphytethat's rather unfortunate19:03
lunaphytei can't image it genuinely needs aptitude, and couldn't do everything needed via any number of other mechanisms19:03
blizzowUnfortunately it does.  Not exactly my favorite management tool, but otterwise, I'm probably forced to use puppet or chef (super gross).19:06
lunaphyteyou consider chef to be less desirable than ansible?19:06
blizzowyeah, I do.  At least ansible runs over ssh, doesn't have an agent running and checking in all the time, and more importantly is not written in ruby/erlang.19:08
lunaphytehmm, interesting.19:08
blizzowTalk about bloat just to get a current ruby/erlang install.19:08
lunaphytealthough erlang isn't so bad19:08
lunaphyte[in the grand scheme of things]19:08
lunaphytewould you take chef over puppet?19:08
blizzowLast erlang dealings I had was installing couchdb and having to install particular boost libraries to get the right version of erlang.  Don't even get me started on the hipster ruby let's build our own packaging system outside of established methods shitshow.19:09
lunaphytewell yeah, ruby for sure19:10
sarnoldblizzow: they -all- succumb to that :(19:10
sarnoldblizzow: pip, gems, hell even lua has luarocks19:11
blizzowI'm really not familiar enough with puppet to give it a nod over chef.19:11
* sarnold glares at cpan19:11
blizzowsarnold: I know, and it's a total pain in the c*ck to keep my ops people from installing weird shit in new and interesting ways.19:12
lunaphytethat mentality has become progressively worse with each iteration of the interpreted language of the month club.  first with perl and cpan, which was tolerable but frustrating, then on to php with pear, and after that pythong and its eggs, then ruby and its gems, and most recently lua and its rocks :(19:12
blizzowoh, I see the go headache already beginning.19:13
sarnoldwell underway :(19:13
* nacc wonders if rants could go to #ubuntu-offtopic :)19:13
lunaphytethen you add cargo cult admins who manage systems by effectively doing things like "curl 'http://www.somedumbblog/tld/' | sudo bash", and it's a surprise as many systems actually function at all19:13
lunaphyteyeah, fair enough.19:14
lunaphytethis soapbox was starting to wobble anyway :)19:14
ThiagoCMChey guys, how to disable cloud-init network capabilities for deermined vNICs only?20:02
PryMar56lunaphyte, how Cal Tech & Feynman'esque20:19
PryMar56reminds me of the Commencement speech in May '74 by Feynman20:19
lunaphytewhich was that?20:21
PryMar56lunaphyte, the cross compare of script languages and repo from 12:1520:22
PryMar561 hour ago20:22
lunaphyteah20:23
ThiagoCMCApparently, Cloud Init Network capabilities is "all or nothing", I have instances with 3 interfaces and it is runnign DHCP against all of it! But I only need it to configure the first vNIC, but, how???20:40
=== tikun is now known as sikun
=== sikun is now known as sikun_
k2gremlinAnyone have a DNS blip recently using 8.8.8.8? Had some really weird dns issues for about 3-4 minutes. Cleared up when I changed to 8.8.4.422:23
=== MrBIOS_ is now known as MrBIOS
Fikik2gremlin, I generally don't like google dns anyway, far too slow compared to my local or even other public dns out there22:41
lunaphytewho in their right mind would ever run a server and use a third party dns service anyway?22:46
k2gremlinlunaphyte, Sorry, Just happened to be in this channel when problem came up on my Win10 PC at home.23:00
=== MrBIOS_ is now known as MrBIOS
=== alexisb is now known as alexisb-afk

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!