/srv/irclogs.ubuntu.com/2016/12/13/#ubuntu-server.txt

EvilAngelman, zfs set compression=gzip-8 keeps my quad core i5 pegged easy02:28
EvilAngelnice to finally have software that actually uses all that hardware02:29
sarnoldbtw why gzip rather than lz4?02:30
EvilAngelcause these are archive drives02:30
EvilAngelI use lz4 on active stuff like nas drives02:31
sarnoldaha :)02:31
EvilAngelthe default though is off02:31
EvilAngelbut i'm pretty sure everyone could put their cpus to good use rather than wasting those precious cycles on .... ahem stuff02:32
=== Feren^IRCCloud_ is now known as Feren^IRCCloud
EvilAngelso, question, do any of you develop a stable vm env at home and then export it to your production server somewhere to be run?02:35
EvilAngelremote managing is easier when the vm is running on metal i can put my hands on. then once it's running well export it to the host somewhere else02:36
cpaelzerrbasak: hi, when you are online we should sync on the strongswan merge (outstanding todos, do we call it a improvement, depsite we knwo we can do more next time, can I upload, can I push delta to Debian, ...)08:03
cpaelzerrbasak: also if you tihnk you could do the ntp and logwatch merge review (really small reviews)08:43
AtuMDoes anyone know of a "howto" to get ubuntu to load PV drivers running on xen as a guest?09:05
ikoniaPV ?09:05
AtuMParaVirtual - xen driver09:07
smbparavirt... but I am not sure I understand the question. if its blkfront / netfront they might even be built-in09:08
AtuMI actually just checked.. those drivers do reside in the kernel modules09:08
lordievaderAtuM: Can you load them manually?09:08
smbthey were for most of the time (yakkety may differ)09:09
AtuMI would now have to trick the hypervisor to present these as such.. I am running OracleVM (Xen based)09:09
AtuMI can load them manually.. but i need to configure the vm definition first to present them as such09:09
smbAtuM, are your disk drives called xvd*09:09
AtuMsmb, nope.. they are IDE emulated.. (hda)09:10
AtuMsorry.. not true.. got them as xvd*09:10
AtuMso I just need to fix the network part...09:10
smbso the pv driver for that at least is loaded09:10
AtuMcurrently the one in use is just too slow09:11
lordievaderAtuM: If you can manually load them you can also put them in /etc/modprobe.d/09:11
smbAtuM, if /sys/modules/xen_netfront is there the pv driver for network is also running09:12
smbAtuM, that one is just not so easy to see from the device name09:12
AtuMsmb, I'm not quite 100%, but I'd say it's already using netfront.. so I should have an optimal system already...09:16
smbAtuM, at least using the pv drivers. I believe there was a change for stable updates at some point which was about performance issues. Not sure I can quickly find a link09:19
AtuMsmb, It seems alright.. hvm with pv drivers. So it's already up and running the way I need.. thanks smb. I was asking questions "while" examining the system. it needs no modification.. everything works fine09:23
AtuMnow to optimize the buffers and so on :)09:24
smbAtuM, Hm, I probably mis-remembered. I think I was thinking of bug 1602755 but that is rather something that would be needed on the host kernel.09:24
ubottubug 1602755 in linux (Ubuntu) "Tunnel offload indications not stripped from encapsulated packets, causing performance overhead" [Undecided,Fix committed] https://launchpad.net/bugs/160275509:24
metachr0nanyone know the currently preferred "libnss-ldap" or "libnss-ldapd" ... i have some syslog spam about "systemd-logind.service" with lots of "Starting Login Service" ... "Stopping Login Service" ... "Failed to forward Released message: No buffer space available"10:05
metachr0nassuming related to BZ #102447510:05
metachr0ner10:05
metachr0nBug #102447510:06
ubottubug 1024475 in libnss-ldap (Ubuntu) "libnss-ldap causes boot hang on 12.04 precise, 14.04 trusty" [High,Confirmed] https://launchpad.net/bugs/102447510:06
metachr0ni'm on 16.04 after recent upgrade from 14.0410:06
metachr0nas in last weekend during the wee hours of the night upgrade :)10:06
metachr0ni've got everything ironed out10:06
metachr0nexcept some slight login lag ... and tons of these sorts of messages10:07
metachr0nbtw -- predictable network interface names is a great thing10:07
metachr0noh was i talking with a bot :)10:08
cpaelzermetachr0n: not only a bot, yet this oen happens to respond to any bug numbers :-)10:40
cpaelzermetachr0n: I guess that has your answer https://wiki.debian.org/LDAP/NSS10:42
cpaelzermetachr0n: which is a bit "you have to chose" I know10:42
cpaelzerat least the answer to "currently preferred" libnss-*10:43
cpaelzerI haven't had an idea on the "no buffer space" yesterday nor do I have one today - sorry10:43
cpaelzermetachr0n: I can't find a a reasonable hint to share, but you likely searched the web as well without success10:47
cpaelzermetachr0n: that means down to debugging :-/10:47
cpaelzermetachr0n: if you think you have found a way to reproduce you might share that10:47
cpaelzerbut mostly LDAP-setup-complexity does not like reproducing cases10:47
=== amoralej|off is now known as amoralej
rbasakcpaelzer: FYI, 1636846 is a duplicate of 1592669, a known issue.12:22
rbasakbug 159266912:22
ubottubug 1592669 in mysql-5.7 (Ubuntu) "postinst fails when daemon is not running (or is disabled by policy-rc.d)" [High,Triaged] https://launchpad.net/bugs/159266912:22
rbasakI'll mark as such12:22
cpaelzerthanks rbasak12:22
metachr0ncpaelzer: rbasak: thanks and i will let you know if i find a workaround13:09
cpaelzerrbasak: I just remembered that I asked this morning on strongswan and other merge review status - time for a short sync if you are around13:10
* cpaelzer considers that it might be lunchtime for rbasak13:10
rbasakcpaelzer: I'm here, but still catching up :-/13:23
rbasakcpaelzer: how long will you be around today?13:23
coreycbzul, can you take a look at the libvirt-python backport failure for ocata?13:32
cpaelzerrbasak: in 1.5 hours from now starts meetinmania, after that is done I'm dpleted of energy (ends with IRC meeting)13:37
metachr0ni have attempted to restart systemd-logind and then i have got the status and journalctl info here:  http://pastebin.com/QrshipKR13:40
metachr0nif anyone has any ideas13:40
=== GMR_Master is now known as teranet
rbasakcpaelzer: OK, how about a hangout in five minutes?13:41
metachr0nthere are some "Failed to activate service 'org.freedesktop.systemd1': time out" but i've ensured dbus is good to go13:41
metachr0nnot sure what this is but ssh is a bit slower as well :)13:41
cpaelzerrbasak: ok13:42
=== amoralej is now known as amoralej|lunch
=== amoralej|lunch is now known as amoralej
cpaelzerjamespage coreycb zul : I think bug 1601986 is more for you to triage, could one of you take a look ?15:26
ubottubug 1601986 in python-cryptography (Ubuntu) "RuntimeError: osrandom engine already registered" [Undecided,New] https://launchpad.net/bugs/160198615:26
cpaelzerand if you want - let me know if you have a LP group that I should subscribe in case something is very "openstacky"15:26
coreycbcpaelzer, agreed we can triage that15:28
arrrghhhis anyone familiar with AptGet/Offline or apt-medium?  I'm a bit confused on how to proceed here, I'd just like to get as much in the way of updates onto a USB key for an upgrade from 14.04 to 16.04.  I'll have the software for 16.04 on a usb key, but I'd like to predownload as many updates as possible to expedite the process on-site...15:32
cyphermoxhi16:33
cyphermoxI've already asked for this to rbasak in a PM, but I would need juju-core and juju-core-1 imported, please :)16:34
cyphermoxrbasak: ^ in case you don't have the time16:34
rbasakI'll do it now.16:34
cyphermoxta16:35
cyphermoxwe'll use those to prepare juju uploads from now on16:35
rbasakIt might take a while.16:36
rbasakIt's going back to raring for juju-core.16:36
nacc:)16:36
rbasakAlso, it fails, so this might be a job for nacc. I'm just re-running with verbose.16:37
naccrbasak: i'm still catching up on last week's backlog, but i'll be looking at cron-ing this week16:37
naccrbasak: fun!16:37
rbasakNow it appears to hang.16:40
rbasakThis may be that libgit Xenial bug thing.16:40
rbasaknacc: can I hand juju-core over to you, please?16:40
* rbasak tries juju-core-116:40
naccrbasak: yes16:40
=== BioKee is now known as Guest42715
naccrbasak: running it now, locally16:40
rbasakjuju-core-1 failed too, with a quilt push failure.16:41
rbasakThat was the same as the juju-core failure.16:41
rbasaknacc: so both over to you please.16:41
naccrbasak: ack16:41
rbasakThis might be a fuzz thing perhaps?16:41
naccrbasak: will see16:41
naccrbasak: i've got to the zesty upload in juju-core-1 without error16:50
naccrbasak: and juju-core to 1.13.2-0ubuntu1 without error16:50
rbasaknacc: interesting. Perhaps a consequence of Xenial?16:53
rbasakProbably not worth investigating further until after I've upgraded if it recurs.16:53
rbasakThank you for processing those!16:53
rbasakI'm running util-linux for a separate reason righ tnow.16:54
naccrbasak: ack16:54
nacccyphermox: juju-core-1 is done16:54
naccjuj-core will take a while, i expect16:54
nacc*juju-core16:54
tewardrbasak: since i missed the meeting.  Nginx merge candidate will be available probably by EOD Thursday in a PPA, with debdiffs for review.  Call for testing will go out over the ML for the usual tests: installation from clean, upgrade from existing, removal, etc. for installation issues, there shouldn't be any "upgrade" issues, though there may be since we introduce dynamic modules17:38
teward(I missed the meeting for exams, sorry)17:39
rbasakteward: sounds good. Thanks!17:40
rbasaknacc: interesting error importing util-linux:17:40
rbasak12/13/2016 17:28:50 - DEBUG:stderr: dpkg-source: error: syntax error in /tmp/tmp3y515osf/util-linux-2.13~rc3/debian/control at line 14: duplicate field Depends found17:40
rbasakLooks like that was in 2.13~rc3-517:41
rbasakThat causes this failure:17:41
rbasak12/13/2016 17:28:50 - INFO:Command exited 25: dpkg-source --print-format /tmp/tmp3y515osf/util-linux-2.13~rc317:41
naccrbasak: hrm, so that would be a case that would need a source level patch, possibly, again?17:41
tewardrbasak: and should I have issues with the dynamic modules being a pain (because I have to also determine which are Main and which are not), then we'll likely do what we did during Yakkety, grab the latest nginx stable (do we want to go to mainline?) and then just merge later after the fact.17:42
rbasakI think so, unless we can find some other way instead of --print-format, or if we fix dpkg-source to not barf at that.17:42
naccrbasak: right17:42
rbasakFiled bug 164964617:44
ubottubug 1649646 in usd-importer "Failure parsing debian/control causes util-linux import failure" [Undecided,New] https://launchpad.net/bugs/164964617:44
=== Karunamon|2 is now known as Karunamon
naccrbasak: thanks17:49
nacccyphermox: juju-core should be imported now too18:28
=== devil is now known as Guest88459
=== amoralej is now known as amoralej|off
=== amoralej|off is now known as amoralej
=== amoralej is now known as amoralej|off
wwalker(need) to set LANG=en_US.UTF-8 _early_  . I've set /etc/default/locale but that only affects interactive sessions.  I need daemons to have the corect LANG value and prefer to not edit every daemon separately.   Any ideas?  (also already tried /etc/environment, no joy)22:14
wwalkerubuntu server 14.0422:14
terabytehey22:28
terabytewhat does it mean for an APT repo to be 'signed'.22:28
terabyteI thought you only sign individual packages, not the 'repo'.22:28
sarnoldwwalker: try adding LANG=en_US.UTF-8 to your kernel command line: http://man7.org/linux/man-pages/man7/bootparam.7.html23:01
sarnoldterabyte: it's exactly the opposite -- packages aren't signed. there are hashes of signatures in files on the archives, and those files have hashes in signed files.23:01
terabytesarnold, i see.....23:02
terabytesarnold, so what is the purpose of the _gpgorigin file located in my package. no use in the context of apt-get when validating?23:03
sarnoldterabyte: where did you get a _gpgorigin file? I don't see any in any of the packages I've got unpacked23:05
terabytesarnold, it's the result of running a command like this: "debsigs --sign=origin -k E732A79A test_1.0-7_amd64.deb"23:06
terabytewhere E732 would be the private key on a keyring23:07
terabyteI wrote the software in the package and signed it this way hoping that apt-get would be happy to see that signature on the package, and the packaging tool I used provided support for that functionality. It also provides support for signing 'source' and 'dsc' files, but I didn't know how they would be used since the package host I use only supports uploading of individual packages....23:08
terabyteSounds like the problem is that my provider doesn't allow me to sign my repo, and as long as I can't do that, individually signed packages are not authenticated in the eyes of apt-get, would you agree?23:09
sarnoldterabyte: well, there's a lot of different things going on. I think you can probably forget all you've learned about debsig, I don't think anything uses it anywhere23:10
terabytealright23:10
sarnoldterabyte: at least launchpad builders require a signed .dsc file before they'll build a binary package from source23:10
sarnoldterabyte: and apt-get will require that the apt repository itself be signed23:10
terabytei see...23:11
sarnoldbut there's nothing that enforces source -> binary -> apt-get downlaods chain of trust -- launchpad does it for us in the ubuntu community but that's by no means a requirement..23:11
terabyteone last thing. this snapcraft packaging thing... is that likely to gain traction and replace .deb?23:11
sarnoldsupplant, perhaps23:13
sarnoldI think it's an awesome fit for mostly-unattended style systems, IOT things, maybe even cloud guests. I'm don't think it's going to take off in desktop and serverland.23:13
sarnoldover the last thirty years we've built up a fair number of expectations for how things work on those sorts of machines and snap just does things differently.23:14
terabyteright23:14
sarnoldsorry, got distracted for a bit23:15
sarnoldanyway, a tool I use for a local apt repo is apt-ftparchive23:15
sarnoldit's wrapped in a few handy shell scripts but hopefully it's a good start for you23:16
terabyteyeah the alternative is have my own repo manager as you say and manage it myself on some amazon free tier...23:16
terabyte:D alright thanks for the info23:16
sarnoldterabyte: there's also this thing https://www.aptly.info/ which looks neat but I've never used it23:17
sarnoldcomplete with "Publish your repositories directly to Amazon S3 as public or private repositories"  :)23:17
terabyte:)23:18
=== EvilAngel is now known as masterpussygrabb
wwalkersarnold: thank you , I was hoping to avoid that, but maybe not... :-)23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!