=== nchambers is now known as god === god is now known as nchambers === JanC_ is now known as JanC === amoralej|off is now known as amoralej === _degorenko|afk is now known as degorenko [11:30] Hi can anyone please help with TCP Wrappers? Are they supported in 16.04 LTS as standard or do I have to install a package? Also how can I check if an application is built to support them? [11:30] Thanks for any help with this [11:44] Is there a way to add tcp-wrappers support into a package with apt or do you have to compile from source to get tcp wrappers? === iberezovskiy|off is now known as iberezovskiy === amoralej is now known as amoralej|lunch [13:59] Is it the thanksgiving weekend right ? :) I guess most people on holiday ? [13:59] :) [14:00] jamespage: looks like we have another chance to work together https://bugs.launchpad.net/nova/+bug/1644839 [14:00] Launchpad bug 1644839 in OpenStack Compute (nova) "If flavor has more than 32 cpus cannot spawn instance if glance image has hw_vif_multiqueue_enabled='true'" [Undecided,New] [14:03] hi [14:04] Should I place my `.sock`s in `/run` like everyone else, or should I create a new dir like some people, e.g. /softwarename/var/api/api.sock [14:21] Anyone knows how to check the value for MAX_TAP_QUEUES for Kernel 4.4.0-47-generic #68~14.04.1-Ubuntu SMP ? [14:24] zioproto, hello! [14:25] jamespage: hello :) I am dealing with a nice bug in production [14:25] as a workaround I told my use to upload a glance image with hw_vif_multiqueue_enabled='false' [14:25] so he can boot the instance [14:25] but he gets then the slow networking [14:26] the patch is easy, I can rework https://review.openstack.org/#/c/332660/ === amoralej|lunch is now known as amoralej [14:28] cloning git clone git://kernel.ubuntu.com/ubuntu/ubuntu-trusty.git to see if MAX_TAP_QUEUES changes from vanilla kernel [14:36] jamespage: the ubuntu kernel is different [14:36] #define MAX_TAP_QUEUES DEFAULT_MAX_NUM_RSS_QUEUES [14:36] this brakes nova [14:36] :( [14:37] zioproto, trusty is 3.13 right? [14:37] oh wait I see you're using the 4.4. kernel [14:39] yes [14:39] so there is this patch in nova that hardcodes some values [14:39] there is also nice reference table of this values, with URL to the git of vanilla kernel [14:40] jamespage: look at this review https://review.openstack.org/#/c/332660/ [14:41] I am runnig this kernel linux-generic-lts-xenial 4.4.0.47.34 [14:43] zioproto, xenial kernel - http://paste.ubuntu.com/23532517/ [14:43] should be defaulting to 256 [14:44] jamespage: seems that value is changed when building the kernel for trusty [14:45] hmm [14:45] Linux zhdk0088 4.4.0-47-generic [14:45] how can I check it at runtime ? [14:46] frickler: how you find that out ? [14:49] zioproto, I see the same stanza in drivers/net/tun.c in the xenial HWE branch [14:49] zioproto: ah, no, sorry, I was looking at the wrong branch [14:50] Did you guys see my stacktrace in the bug report ? [14:50] so according to the comment in baf71c5c1f80d82e92924050a60b5baaf97e3094, this should be good for 256 vCPUs [14:51] but I get [14:51] Invalid number of queues (= 46), must be a postive integer less than 31. [14:52] zioproto: just to make sure, you do run on a system with > 32 cpus? [14:53] http://paste.ubuntu.com/23532554/ [14:53] yes because If I remove the multiqueue property from the glance image I am able to boot the instance [14:54] I have 48 CPUs on the sistem [14:54] and now the instance is running [14:54] I told the user [14:55] zioproto, which libvirt version are you using? [14:55] to boot from a different glance image where I decorated the image with hw_vif_multiqueue_enabled='false' [14:55] jamespage: 1.2.16-2ubuntu11.15.10.4~cloud0 [14:55] zioproto: so as I workaround maybe try to set the limit in the nova code you referenced to 31 instead of 256 [14:55] actually that message comes from qemu [14:55] frickler: yes that would work but I dont want to carry local patches [14:56] frickler: I need to come up with a solution that will be accepted in openstack upstream [14:56] jamespage: qemu 1:2.3+dfsg-5ubuntu9.4~cloud2 [14:58] give me a sec [14:59] zioproto, yup you're being blocked by qemu [14:59] zioproto: maybe the limit 31 31 is imposed by qemu, so nova is wrong in using that kernel value. [15:00] VIRTIO_PCI_QUEUE_MAX == 64 in the version you're using [15:00] 64 /2 -1 [15:00] (VIRTIO_PCI_QUEUE_MAX - 1) / 2 [15:00] jamespage: you rock ! how did you find that out ? [15:00] it is surely arch specific, I've had s390 on 64 cpus, but then no PCI there [15:00] zioproto, been poking at qemu today - but 2.7 [15:00] where its 1024 [15:01] I need to update this bug: https://bugs.launchpad.net/nova/+bug/1570631 [15:01] cpaelzer, that constant has a new name [15:01] Launchpad bug 1570631 in nova (Ubuntu) "With hw:vif_multiqueue_enabled, libvirt driver fails with VM larger than 8 vCPU" [Low,Fix released] [15:01] VIRTIO_QUEUE_MAX [15:01] not PIC [15:01] PCI rather [15:01] include/hw/virtio/virtio.h:#define VIRTIO_QUEUE_MAX 1024 [15:01] thats from 2.7.0 [15:01] thanks jamespage [15:01] cpaelzer, yw [15:01] I just say it is arch specific as I had 64 running already [15:02] cpaelzer, I'm putting qemu in a snap with libvirt [15:02] ah thanks, just wondered what you do with that atm [15:03] zioproto, xenial qemu has: [15:03] VIRTIO_QUEUE_MAX [15:03] =include/hw/virtio/virtio.h:#define VIRTIO_QUEUE_MAX 1024 [15:04] zioproto, so this looks like an issue isolated to the liberty UCA version you're using [15:04] right, that would mean that nova has to check the qemu version in addition to the kernel version and set its limit accordingly, I guess [15:04] zioproto: but x86 HW virt is limited to stay <=HW-cpus IIRC - so you can go to 48, but not test e.g. 256 (maybe that can be tuned thou) [15:04] jamespage: MIN_QEMU_VERSION in nova is still at 1.5.3 [15:04] jamespage: should we make a patch just for the ubuntu packages ? [15:04] frickler, youch [15:04] zioproto, for qemu [15:04] ? [15:05] zioproto, or for nova? [15:05] jamespage: may be bumped to 2.1.0 for pike iiuc [15:05] \o/ [15:05] that's still not enough for 1024 [15:05] cpaelzer: around? Can I give you an intermediate report on this strongswan merge review? I'd like to talk it over with you before the complexity of our delta makes me lose my mind :) [15:05] rbasak, oh I remember that one [15:06] cpaelzer: http://paste.ubuntu.com/23532604/ are my current notes. [15:06] rbasak: I'll get a visitor to teach math to soon, but til then ok [15:06] cpaelzer: hangout? Two minutes. [15:06] rbasak: give me two minutes to clean up the next evil merge [15:06] rbasak: ok [15:06] jamespage: I guess for nova [15:06] zioproto: if you don't come up with something else, I'll propose a patch to nova upstream next week [15:06] Snap :) [15:07] gotta run for the weekend now [15:07] I am also on my way to the weekend [15:07] lets meet again here on monday :) [15:07] cpaelzer: https://hangouts.google.com/hangouts/_/canonical.com/strongswan?hl=en-GB&authuser=0 [15:08] zioproto, frickler: have a nice one guys [15:35] bye !! === degorenko is now known as _degorenko|afk === iberezovskiy is now known as iberezovskiy|off [17:52] guys, i have got a server with root enabled by default. how can i turn it off again? [18:02] hhee: First, make sure you have a user with sudo rights so you don't lock yourself out of the system. If all good there, sudo usermod -L root ...will lock the root again [18:04] hhee: To make sure it took: sudo grep root /etc/shadow ...and make sure the second field is an exclamation mark, like: root:!: [18:06] genii, got it. already create usual user [18:06] genii, thx a lot [18:06] :) [18:09] Glad to assist [18:15] genii, well another question [18:15] seems like i didn't have apropriate record in sudoers file [18:16] which way more eight to add user with sudo right? [18:16] rights* [18:21] got it [18:21] ! [18:22] hhee: the usual way in ubuntu/debian is to add the user to the 'sudo' group [18:22] tarpman, got it, thx :) [18:22] hhee: usermod -aG sudo username [18:22] ok === amoralej is now known as amoralej|off [18:28] guys. question. [18:28] does ubuntu-server has groups for install software? how can i do it? [18:28] for example LAMP and mail server [18:30] im reading man apt, but dont see smth similar [18:30] hhee: yes. have a look at tasksel [18:32] tarpman, got it. very handy. [18:33] one more question. after many command in ssh session i have got something like this - perl: warning: Setting locale failed. [18:33] perl: warning: Please check that your locale settings: [18:34] after locale command [18:34] got - locale: Cannot set LC_CTYPE to default locale: No such file or directory [18:35] what i did wrong? [18:35] what's your locale set to? [18:35] tarpman, i thought it was utf8 [18:35] (run the locale command with no arguments to get a summary) [18:35] tarpman, LANG=en_US.UTF-8 [18:35] not set - LANGUAGE= and LANGUAGE= [18:36] sorry and LC_ALL= [18:37] hhee: do you have language-pack-en installed [18:39] tarpman, cool. got it. i have found http://askubuntu.com/questions/162391/how-do-i-fix-my-locale-issue [18:39] tarpman, and there is solutions [18:39] ok [18:39] tarpman, big tnx for awesome support. [18:39] have a nice day! [18:39] not sure those are the best solutions, but if they work, fine :) [18:39] seems like work :) [19:06] guys. another quesion about sudo :) [19:07] i tried - sudo cat file.conf > file2.conf [19:07] bash: file2.conf: Permission denied [19:07] which way to do it? [19:07] yes, because 'cat file.conf' runs under sudo, but '> file2.conf' happens in your own shell, outside of sudo [19:08] you want: sudo tee file2.conf < file.conf [19:08] which reads from file.conf in your current shell and writes to file2.conf under sudo [19:08] tarpman, cool... thx :) [19:27] tarpman, another question [19:27] sudo cd /var/log/apache2/ [19:28] sudo: cd: command not found [19:28] how can i handle this? :) [19:28] hhee: if "cd" did exist as a standalone command, what would it do? [19:28] hhee: your shell would spawn a "sudo" process, which would execute "cd", and then exit [19:28] hhee: meanwhile your shell is exactly where it was, nothing's changed [19:29] tarpman, i need some group of command.. i have to think [19:29] hhee: I don't know what you're trying to do. maybe you want to cd /var/log/apache2 and then sudo something in there. or maybe you want to open a root shell (sudo -s or sudo -i) and do stuff in that shell [19:32] tarpman, got it. sudo -i what i need [19:32] tarpman, thx again :) many times === binia is now known as binia_the === binia_the is now known as binia