[00:01] upstart had problems? bah! [00:05] well this is more an osx question, but regarding ssh [00:05] I am setting up a dotfiles repo to back up and share my dotfiles between computers [00:05] attemping to ln -s ~/dotfiles/sshconfig ~/.ssh/config [00:06] if I instead cp the file, it works as expected. But with the symlink, it doesn't seem to follow the symlink [00:13] RustyShackleford: ssh is picky about permissions. make sure the file is chmod 600, and the directory is 700. Even then it may not work, but that might help. [00:13] I will double check [00:15] yeah those are the permissions [00:17] I suppose copying it isn't the worst thing every [00:17] but it would be nice to edit it, have the changes reflected in my git repo, and then push it up [00:17] RustyShackleford: okay, next step, tracing the thing [00:17] RustyShackleford: I can't remember os x very well, it's probalby something like "kdump ssh localhost" followed by "ktrace" [00:18] RustyShackleford: look for the open() systemcall that refers to the ~/.ssh/config file [00:18] (searching for "config" is probably the best bet) [00:18] I'm curious if your ssh client uses the O_NOFOLLOW open flag. (mine doesn't.) [00:19] hm kdump is not found [00:20] okay what the heck is going on here?! [00:20] well it works lol [00:21] I had tried this a week ago, gave up when it was not working. So I just set it up again and this time it works :/ [00:23] hah :) [00:23] maybe you need to install some developer's kit to get decent syscall tracing tools on OS X? [00:24] how would you feel about keeping private keys in a (private) dotfiles repo as well [00:24] if your passphrase on the keys is decent, it's alright [00:25] I usually use no passphrase hah [00:25] i'm not so secure sometimes for the sake of convenience. I should also find a more secure way to store my passwords [00:33] RustyShackleford: have you tried verifying that the symlink actually worked? if you do an `ls -al` should return something like this: [00:33] lrwxr-xr-x 1 user staff 37 Aug 25 11:31 config -> /Users/user/dotfiles/ssh_config === Mobutils_ is now known as Mobutils [00:58] evening folks [00:58] regarding an iptables question, using s3 what do i need to allow inbound for it to work [02:28] do you think home internet connections throttle port 22? [02:28] RustyShackleford: depends on the ISP [02:28] comcast [02:29] just curious how I could test that [02:29] also curious if you get less spambots if you use an alternate port [02:29] RustyShackleford: IIRC they don't filter traffic in/out or throttle things on those ports, but only Comcast would have the answer [02:29] it'd be easier to just test rather than trying to -talk- to someone there who would know [02:29] RustyShackleford: security through obscurity only works... for a little bit. OBscuring the port is fine, but disable password auth, use key auth, etc. [02:29] yep. [02:30] sarnold: you need to be on hold for an hour before you can speak to someone worth a damn [02:30] RustyShackleford: only an hour? that's better than I expected :) [02:31] I had a server exposed to the internet for a while [02:31] RustyShackleford: Really? I have at least twenty :P [02:31] its crazy how many people try to log into my random ip address [02:32] RustyShackleford: service scanners, brute forcers, botnets, etc. drivebys most likely [02:32] fail2ban helps a bit [02:32] RustyShackleford: though, that's *anything* connected to the internet. [02:35] do you think they scan only 22, 80 and the obvious ones? [02:35] I wonder how much using 22000 or something would cut down on drive-bys [02:36] I put mine up on 2222 when I travel, and it gets plenty of scans; don't pretend it'll be silent up there [02:36] it may be less, but whole-internet scanning is commonplace and cheap these days [02:38] they don't scan every port though [02:38] can't remember if the ssh logs show which port they attempt to connect on [02:39] I could enable them both and see which gets more hits [02:39] er, the difference in the number of hits [02:40] 22 wins for sure [02:43] over 2000 hits on my ssh in the past 24 hrs [02:44] 99.3% for root [02:44] don't even have root ssh enabled, you silly bots === php_ is now known as php [04:47] I need a domain for this server [04:47] i'm so uncreative [06:17] RustyShackleford: uncreative.space :P [07:00] how do i run tor, in a ubuntu 16.04 ? [07:00] i need an app to use tor as proxy [07:00] so i need tor to be runing on the machine [07:00] how do i do it? [08:00] coreycb, I remember that it was suggested that was a good idea [08:49] jamespage: I pushed the openvswitch changes to the repo and uploaded [08:49] jamespage: I also added the ubuntu1 release you had in the repo and tagged yours and mine so that repo matches reality [08:50] cpaelzer, good morning! [08:50] sorry yesterday was frenetic for a number of reasons [08:50] * jamespage looks [08:51] jamespage: totally fine - as I said I want to help not to disturb :-) [08:51] jamespage: so I did what I announced to you and know that in case of blergh we can still fix and upload more if needed [08:51] jamespage: I also have something written up for the ovs-dpdk charming that I'm about to send [08:52] jamespage: anyone but you to add as CC on that? [08:52] a.k.a did get that work to be done by somebody else? [08:52] cpaelzer, no it will get in the right queue === _degorenko|afk is now known as degorenko === Malediction_ is now known as Malediction [10:34] Whats the major difference between a standard Ubuntu server install and a minimal one? just fewer packages install by default? [10:39] Pjusur: if you're referring to the options in the traditional installer, then that's the only difference. [10:40] rbasak: Yes :), the F4 option after boot before install, tnx mate [11:04] powersj: for bug 1629890, my understanding of the typical use case for mongodb says that it's more than wishlist for the process limit to be so low - I'd make it High rather than Wishlist [11:04] bug 1629890 in mongodb (Ubuntu) "/lib/systemd/system/mongodb.service should set LimitNOFILE" [Wishlist,Triaged] https://launchpad.net/bugs/1629890 [11:04] Also bitesize perhaps? [12:38] hello [13:19] jamespage, is network access in unit tests limited to ppas? python-k8sclient tests are getting 404's when backporting to the staging ppa, but ran ok on yakkety. [13:19] lack of network access, that is [13:19] coreycb, hmm [13:20] the builders all have limited egress [13:20] jamespage, ok, interesting [13:50] I am trying to write a custom log for Apache. For any log entry ending with 0, I am using this declaration, just to test ```CustomLog "|/bin/bash -c 'if [ awk \'{print $NF}\'` -eq 0 ]; then logger -s ; fi" combined``` Nothing gets logged to syslog in this case. However, if I just do logger -s, then the entry is logged completely. [14:16] rbasak, ok - however the link you provided makes me think we shouldn't yet [14:18] powersj: I stuck it in the backlog. Perhaps we should just check deeper that mongodb doesn't use FD_SET. [14:18] (it seems unlikely) === JanC is now known as Guest96823 === JanC_ is now known as JanC [16:23] Does anybody know the way to propose changes to UCA(Ubuntu Cloud Archive). There is problem with file io.murano.zip [1] which is contained in murano-common package [2] . The problem is file io.murano.zip exist in package (murano-common) but it is in the wrong directory(/usr/share/murano-common/ but should be in /var/cache/murano/meta/).[1] https://review.openstack.org/#/c/250436/ [2] http://mirror.regionone.osic-cloud1.openstack.org/ubuntu-clou [16:23] d-archive/pool/main/m/murano/ [16:23] coreycb maybe ^^ [16:25] kaslcrof, hi which release of openstack is this for? [16:55] coreycb, it is for newton [17:02] kaslcrof, I think it makes sense where it is stored in /usr/share/murano-common. but if you want we can switch over to #openstack-pkg and we can chat with zigo to get his thoughts (since this package originates in debian). [17:08] thanks coreycb [17:10] coreycb, many thanks. [17:48] coreycb: barbican uploaded [17:48] zul, thanks [17:51] smb: thx for the libvirt SRU upload! will verify asap [18:39] jamespage, zul, ddellav: I had to manually backport python-k8sclient to newton-staging. for some reason backport_package couldn't backport it successfully (maybe interference with port 8080?). [18:39] coreycb: ack [20:08] coreycb: bug deweeding is so much fun [20:09] zul, what are you up to? [20:09] coreycb: deweeding ubuntu/nova bugs on launchpad [20:10] zul, awesome