/srv/irclogs.ubuntu.com/2017/01/23/#ubuntu-server.txt

=== JanC_ is now known as JanC
patsTomsis there any way to find source for kernel which ubuntu was built?07:57
cpaelzerpatsToms: http://askubuntu.com/questions/2964/where-can-i-find-the-source-code-for-the-ubuntu-kernel ?08:10
cpaelzerpatsToms: if you just want source the third answer is probably your best which leads you to git repos at https://wiki.ubuntu.com/Kernel/Dev/KernelGitGuide08:11
patsTomsthanks08:11
=== giraffe is now known as Guest54596
samba35i am trying to configure dpdk 1st time on ubuntu 16.04.1 ,and i am getting this error/message when i run systemctl status dpdk09:30
samba35WARNING: incomplete spec in /etc/dpdk/interfaces  - BUS '' ID '' MOD ''09:30
cpaelzersamba35: can you pastebin the interface file you use?09:30
HinkDoes anyone know if there is a way to jail an executable and it's processes to be totally isolated within the system?09:31
samba35interface file from /etc/dpdk/interface ?09:31
cpaelzeryes samba3509:31
samba35thanks god you are here09:31
samba35its just one line   pci  (mac-id-of-nic )  uio_pci_generic09:32
samba35am i missing something i follow intel dpdk guide09:33
samba35and some setting from /etc/default/openvswitch-switch09:34
cpaelzersamba35: https://help.ubuntu.com/lts/serverguide/DPDK.html#dpdk-config-dev09:34
samba35DPDK_OPTS='--dpdk -c 0x3 -n 2'09:34
samba35ok thanks09:34
cpaelzerthe opts lack the permission fixes you likely need and also you lack to specify memory (might grab all but that is rearely what you want)09:35
cpaelzerfor the interfaces I wonder about the error if that is really all you have in there09:35
cpaelzerthis message is only reported if it can't split it up to three pieces09:36
cpaelzereven "foo bar foobar" should fail later09:36
samba35can i use pci based device or do i require pci express cards ? and do i require vfio (vt-d ) ? to run basic dpdk09:36
cpaelzeryou need a dpdk supported card - I doubt these days anybody has still old "only pci" cards09:37
cpaelzersuppoerted devices are also listed on the link I listed above09:37
cpaelzerincluding links to their device page in the dpdk doc09:37
cpaelzerwhich sometimes have constraints, special setup needs, firmware loads, ....09:38
samba35Network devices using DPDK-compatible driver is showing correct nic09:38
cpaelzerno vt-d needed09:38
cpaelzerif you really could just "pastebinit /etf/dpdk/interfaces" and list the link here09:38
cpaelzerI'd want to take a look09:38
cpaelzersamba35: and once your are add it also a status of dpdk devs09:39
samba35honestly speaking09:39
samba35there is only one line ,i am sorry  pci  0000:0mac    uio_pci_generic09:40
samba35'82566DC-2 Gigabit Network Connection' drv=uio_pci_generic unused=e1000e09:41
samba35this is a card09:41
samba35system is use ich1009:41
cpaelzerhrm09:42
cpaelzermaybe you have an empty line in it?09:42
cpaelzerso two things09:42
cpaelzerone - your card already seems to be assigned properly09:42
cpaelzersecond - that error that you mentioned - it comes out for every lind where it can't find values for the defines09:43
cpaelzergrep -v '^[ \t]*#' "$DPDK_INTERF" | while read BUS ID MOD; do09:43
cpaelzerif any of BUS ID or MOD is empty you see the error you mentioned09:43
cpaelzersamba35: yet since your card is assigned "drv=uio_pci_generic" I wonder if you might just have an empty line in the config09:44
cpaelzerif you do systemctl status dpdk does the output hold anything about either assigning or the card already be assigned?09:45
samba35dpdk_proc_info  when i run this command it show old card ,initally i try to configure this card but it did not work then i use other card09:46
samba35 Reassigning pci:0000:0mac to uio_pci_generic09:46
samba35Jan 23 14:49:48 ubuntu16 dpdk-init[1746]: WARNING: incomplete spec in /etc/dpdk/interfaces  - BUS '' ID '' MOD '09:46
cpaelzerwell, I wonder about "0000:0mac", but other than that it seems to follow your config09:47
cpaelzerand I still expect you have an empty line after the config09:47
cpaelzerthat would match the grep but not split into three valid arguments, which would cause your error message09:48
=== JanC_ is now known as JanC
zulcoreycb: i fixed glance this morning13:01
coreycbzul, ok thanks. what was wrong?13:02
zulcoreycb: glance-store was not installing its configuration files correctly so glance was not getting installed correctly13:02
coreycbzul, ok13:03
zulcoreycb: the rootwrap.conf file was being installed into /etc/glance/glance13:03
jamespagezul, coreycb: dealing with webob and a nova fixup for ocata-proposed today13:15
jamespagethen I think we're all good13:15
coreycbjamespage, ok.  did webob need a delta on the sync debian?13:17
jamespagenope13:17
coreycbsync from13:17
patsTomsis there any way I can use private key to connect to ssh?13:28
hateball!ssh | patsToms13:30
ubottupatsToms: SSH is the Secure SHell protocol, see: https://help.ubuntu.com/community/SSH for client usage. PuTTY is an SSH client for Windows; see: http://www.chiark.greenend.org.uk/~sgtatham/putty/ for its homepage. See also !scp (Secure CoPy) and !sshd (Secure SHell Daemon)13:30
hateballthis bit in particular https://help.ubuntu.com/community/SSH/OpenSSH/Keys13:31
patsTomsso another question13:31
patsTomsby ssh-dss they mean private key?13:31
andolssh-dss might not be the key type you want...13:33
coreycbjamespage, these are ready to promote if you have a moment:  http://paste.ubuntu.com/23851946/13:39
=== Jalen_ is now known as Jalen
alex88hello everyone, after scheduling a shutdown how do I see the pending shutdown? tried `systemctl list-timers`, looked at atd.service, systemd-shutdownd.service, nothing13:50
=== JanC_ is now known as JanC
jamespagecoreycb, looking at those shortly13:57
coreycbjamespage, thanks13:57
lordievaderGood afternoon14:03
jamespagecoreycb, all done14:04
jamespageta14:04
cpaelzerjdstrand: thanks for your insight on bug 165819814:47
ubottubug 1658198 in libvirt (Ubuntu) "multi-level stacked qcow2 files are not properly handled in Apparmor" [Undecided,Incomplete] https://launchpad.net/bugs/165819814:47
rbasakcpaelzer: a mysql-5.7 security update landed recently. So anyone whose system would have a failure on mysql-server-5.7.postinst before will have received one on receiving that update.14:56
jdstrandcpaelzer: yw14:58
cpaelzerrbasak: I see - that explains the sudden spike of reports - all bad configs coming in to report on an update15:03
zulcoreycb/jamespage: i was thinking of going through https://qa.debian.org/developer.php?login=openstack-devel%40lists.alioth.debian.org and make sure the relevant stuff in universe archive is good15:16
zul(because im a masochist)15:17
coreycbzul, you could take a pass on upper-constraints to see how we stand15:20
zulcoreycb: sure15:20
FManI like Ubuntu Server, but people push me to deploy CentOS instead15:34
cncr04si used to use centos, ubuntu is superior in every way15:35
coreycbzul, i asked the release team to reject python-oslo.context  2.12.0-0ubuntu1 because it's > upper-constraints15:37
FManwould you like to give specific examples?15:37
zulcoreycb: ok sounds good15:37
cncr04subuntu packages get updated way faster then centos related ones. at least in my experence.15:39
delewisnewer kernels, too.15:41
delewisCentOS 7.x kernel is ancient.15:41
coreycbzul, stevedore is > upper-constraints too but that's already promoted to -updates.  we need to be check upper-constraints before uploading.15:43
zulcoreycb: ack15:43
joelioCentOS kernel in 7 is 3.10 but does have backports bear in mind - just to add some balance :)15:45
joelioI've noticed grsec stuff appearing in ubuntu sources, are there plans for full support soon?15:50
lordievaderThere are plans for the kernel itself to integrate grsec things. After all the grsec mess.15:52
joeliointeresting, thanks15:53
jgeprobably not the best channel but anyone know how to remove a file monitored by rsync?16:01
joeliojge: not sure what you mean by monitored?16:02
joeliothey're just files, so depending on which fs your rsyncing from remove it from there, there are also rsync flags to delete anything in the target dest that's not in source (--delete)16:03
jgekeep getting "mv:cannot stat 'some file..' No such file or directory, which is fine since it's not there anymore but how could I tell it to stop16:03
joeliomv? perms ok etc?16:04
joelioor is it changing under the hood as you begin the rsync job16:04
joelioif something is moved, it'll still have the inital tree of files so that could be the cause16:04
jgethe file does not exist on source or destination, so no perms to check16:04
joeliothat sounds... strange :)16:04
jgeI know...16:05
joeliowhere is the error too, rsync makes dot files when copying, so if it can't rename/move that might be a bit wtf16:05
jgelet me double check again, make sure is not a case of being monday and I'm slow ;)16:06
jgejoelio: it looks to be some sort of temp file, name starts with ~16:08
jge~$File.xlsx16:08
jgebut it's not in the destination or source16:09
joelioyea, that's not an rsync temp file, it'd be a randomly generated uid with a . at the start16:10
joelioare you doing something recurstively and it's bringing in that file? Or is a process writing to that area outside of rsync and it's a temportal file, so rsync reads it in the file listing but but the time it's come to copy, the temporary file has gone16:11
jgejoelio: it's a network share, with several people working on that excel sheet at times16:14
jgeso it gets saved, that file gets deleted16:14
frickleris it possible that Dir::Etc::SourceList is still mentioned in the man page of apt-get, but has no effect anymore?16:15
fricklerah, nevermind, need to override sourceparts instead16:24
joeliojge: yea, sounds about right.. is the network share something that you can snapshot? If so, do that and backup the snapshot - otherwise you'll always get inconsistent backups depending on the update frequency of that share16:25
joelioif you need to maintain the two in sync, checkout unison instead, you might have a better experience16:26
jgejoelio: I need the two to be in sync, I've looked at unison and ended up going with osync.. I can't do snapshots on that fs, so I just added an exclusion list to ignore "~$" files for now16:34
joelioyea, sounds reasonable16:35
=== beardfac1 is now known as beardface
DammitJimso, I've asked before, but do you guys know where I can look since my Ubuntu 16 servers are taking 8 minutes to shut down?17:41
DammitJimthis is happening on new install and upgrades17:41
DammitJimI narrowed it down to the fact that I use a logical volume for /var17:41
sarnoldhuhn17:41
sarnoldthat's interesting17:41
DammitJimyeah, If I have just a logical volume for /home and not for /var, the problem doesn't exist17:42
sarnoldmy own server seemed like it never shut down when I issued shutdown -h now but I chalked that up to servers being weird hardware and just smack the power button. I've never tried waiting eight minutes. ;)17:42
DammitJimbut I don't know where to look to figure out where the problem resides or what is waiting for /var?17:42
tewardI just never shut off my servers :P17:42
tewardI have a graceful shutdown process of course for my VMs, but :P17:42
DammitJimI try not to, but this will hurt me when I do a dist-upgrade to 50 servers17:42
sarnoldteward: well, the last time was at 4am when the UPSes were making the world's worst noise. heh.17:43
tewardsarnold: heh17:43
tewardsarnold: were they on the verge of selfdestruction?  :P17:43
DammitJimoh man, we had a power outage on Saturday... I'm still bruised from that17:43
DammitJimso, do you know what I should do?17:43
sarnoldDammitJim: I've heard suggestions that setting systemd's journal to persistant mode so that you can inspect previous boots can sometimes help.17:43
DammitJimhow do I do that?17:44
sarnoldteward: no, but after ten minutes I figured the power wasn't coming back right away. (It took 31 hours. I was not pleased.)17:44
tewardsarnold: ouch17:44
sarnoldDammitJim: systemd-journald(8) has the two-liner instructions17:44
DammitJimoh gosh, I was just told by the president that if power goes out, I need to drive to the office... I hope I don't have to wait 31 hours to go home!17:44
DammitJimsarnold, so, I need to do research on systemd-journald to figure out 2 lines I need to change to set persistent mode?17:45
sarnoldDammitJim: well, you could just run them and hope for the best :) but five minutes to read the manpage would't hurt17:45
DammitJimyeah, I am just trying to understand your suggestion17:46
DammitJimso, I am reading about systemd-journald17:47
DammitJimsarnold, I need to find out how to set up persistent mode?17:47
sarnoldDammitJim: if you search for 'pers' in systemd-journald manpage, you'll quite quickly find the two lines to paste :)17:47
DammitJimI found them17:47
DammitJimjust trying to understand what that does17:48
DammitJimit seems related to /var/log/journal17:48
sarnoldsystemd maintains its own journal17:48
DammitJimmaybe that mount is "unmounted" before it finishes the download and systemd still wants to write to it?17:48
sarnoldrather than syslog's simple plain-text format, this thing is binary and easily broken17:48
tewardsarnold: so, I'm gonna work on the merge sometime this week, maybe friday, for nginx to Zesty, do you need to do a cursory security review or are we good to go with me just doing the merge?17:48
tewardIt still needs Release team review anyways, because it needs work on which binaries go to which pockets.17:48
sarnoldteward: no need, and better to not wait for me, I'm afraid I'm already holding up too much work for our teammates17:49
tewardsarnold: that was more a generic question not a "put it on your list of crap to do" :p17:49
sarnoldDammitJim: so my hope is that by setting it persistent it'll have a place to write the things it wants to write during shutdown. It's a longshot, but as my usual debugging approach is "read the logs then the source", it feels like a natural hope :)17:50
sarnoldteward: normally once something is in main we don't bother re-reviewing17:50
DammitJimsarnold, you are 100% on this. I don't have eyes where I need them17:50
DammitJimand this sounds like would allow me to read something?17:50
tewardsarnold: well, the exception was the HTTP/2 stuff17:51
DammitJimso, what you are helping me with is to have a log that I can read the next time I boot the server up because systemd will normally log to a volatile location, right?17:51
tewardsarnold: but you're not wrong :)17:51
sarnoldDammitJim: that's my hope. I don't know for sure that systemd is actually logging anythuing then, but it's the only idea I've got.17:51
sarnoldDammitJim: exactly17:51
DammitJimthanks17:51
DammitJimlooking and testing17:51
sarnoldteward: right. but I'd be wasting my time looking over http/2 code, if it worked at all that would mean it's already too complex for me to find issues by inspection17:52
tewardheh17:52
tewardsarnold: well, we also know that the core headaches we had were w2ith the 3rd-party HTTP2 library implements that were evil on many of the webservers17:52
tewardNGINX rolls their own so :P17:52
sarnoldheh yeah.17:53
sarnoldI'd trust the nginx team way more than the average group of yahoos17:53
DammitJimsarnold, so, actually, I found the section that talks about creating the folder and setting tmpfiles17:53
DammitJimis that what you were refering to?17:53
sarnoldDammitJim: yes17:54
DammitJimok, cool. I'm taking a snapshot and running updates17:54
tewardsarnold: true statement, but we also have pretty good rapid-reply responses to things with them17:54
DammitJimwhat's funny is the system freezes only after I do an: apt-get upgrade17:54
tewardcoord. between Debian and Ubuntu nginx needs to improve, but eh17:54
DammitJimjust installing ubuntu 16 doesn't hang on shutdown17:54
sarnoldDammitJim: o_O that's insanely strange17:55
DammitJimso, 1 of the gazillion packages that gets updated must be the cause17:55
DammitJimblah17:55
DammitJimbrb17:56
DammitJimthanks sarnold17:56
DammitJimdoes Ubuntu change from EST to EDT when the timezone is set up to America/New York?18:46
DammitJimlike when one runs `date`18:46
sarnoldwell, the time doesn't _change_, like it does on windows systems. instead, all the time-and-date routines know the transition points and print the correct time.18:49
DammitJimright, so right now my boxes say EST18:49
DammitJimwhen summer comes, it should print EDT18:49
sarnoldbut the kernel just keeps counting seconds since 0:00:00 1 Jan 1970 UTC18:49
DammitJimjust because of the fact that I picked America/New York, right?18:49
sarnoldright18:49
DammitJimthanks18:49
DammitJimso, basically there is no way to NOT observe DST when one is on an eastern time zone18:50
sarnoldDammitJim: you could set the timezone of the box to report UTC if you wanted to skip timezone nonsense18:51
DammitJimyeah, the developers would go crazy on that18:52
DammitJimLOL because they don't do utc conversions, yet18:52
DammitJimwe are still in the process18:52
zulcoreycb: ping we are pushing it with python-sphinx, python-stevedore, python-docutils18:55
coreycbzul, hmm?18:57
zulcoreycb: just going through my upper-constraints check18:57
coreycbzul, we should evaluate the diffs of what we have vs the upper-constraints versions19:00
coreycb zul, oslo.context too19:01
zulcoreycb: http://pastebin.ubuntu.com/23853429/ (None - No status, ??? - Unknown Status - X - Cutting it close)19:01
zulcoreycb: oslo.context got bumped this morning19:02
coreycbzul, ok cool19:02
zulcoreycb: but yeah ^^^19:02
coreycbzul, that must not have landed yet though19:03
zulcoreycb: not yet19:03
zulcoreycb: my eyeballs are going squirley19:03
coreycbzul, castellan and gabbi should get bumped19:04
zulyeah..19:04
zulill put it on my list19:04
coreycbzul, and might as well bump the tempests19:04
zulyeah19:05
zulcoreycb: http://paste.ubuntu.com/23853450/19:05
coreycbzul, thanks19:07
zulreno probably as well19:18
zulcoreycb: tempest updated ;)19:37
rangergordHi. I'm using Ubuntu Server to run an embedded app. My application dependencies come from various sources: official apt, 3rd party PPAs, manual downloads, python pip, etc. I do not trust those dependencies to still be downloadable in a year or two or three, so I would like to freeze what I got right now, and have a way to copy those dependencies on new systems. What is the simplest and19:57
rangergordsafest way to do this? Imaging the partition and restoring it on new systems?19:57
rangergordalso wondering what issues could arise from having different HW. It will always be x64, but like, will the new system fail to boot cause the old one had 1 soundcard and 2 network cards but the new one has 0 soundcards and 1 network card?20:01
rangergordwill/could20:01
sarnoldman that all sounds so brittle20:02
tarpmanrangergord: if you don't plan to port your app forward to future versions of (for example) the system packages it relies on, IMO you should just install it on a virtual machine so you can carry that forward to whatever hardware you like in future20:02
tarpmanrangergord: but you really do need a plan for taking into account, for example, security issues in your dependencies that are only fixed in newer versions20:03
sarnoldif it were me I'd go to more effort to copy the original sources, and document how to perform the install. THat way you stand a chance of addressing security updates in the component pieces.20:03
rangergordsarnold: I already documented how to perform the install, I have a script that does it, it's just not reliable. especially npm (Node/Javascript package manager) is the weakest link in the chain, there's packages that stopped working for a week even though I'm pinning specific version.20:05
rangergordI like the idea of a VM20:05
sarnoldrangergord: holy cow, npm, pip, apt, ppas.. russian roulette!20:05
rangergordsarnold: it's a Node webapp...and I have to use Python for the the work Node can't do, need pip to get the snmp library, and I save on Postgres.  :P20:06
rangergordPPAs is for latest Node LTS20:07
=== jelly-home is now known as jelly
theGoati have a syslog-ng box forwarding me events where the IP addresses are spoofed.  but none of the events are getting written.  i go lookin the logs and see this:  kernel: IPv4: martian source 192.168.1.13 from 1.2.3.4, on dev eth1 -- are the packets being dropped?20:25
sarnoldI thought the kernel only had options to -log- the martians; if you want them dropped, I think you have to use iptables to do it20:26
theGoatok...i'll have to some more digging.  thanks20:26
sarnoldtheGoat: please report back what you find, if you find something :) thanks20:30
theGoatwill do20:31
theGoatdoing some goodling i came across: https://wiki.ubuntu.com/BasicSecurity/Firewall. when i checked /proc/sys/net/ipv4/conf/eth1/rp_filter it was set to 1.  if i set it to 0, what do i have to restart for the change to take effect?20:56
rbasaktheGoat: it takes immediate effect on eth1 I believe21:27
theGoatok....hmmmmm.....still seeing the martian packet events....i'll have to do more digging21:28
sarnoldtheGoat: the logging happens via net.ipv4.conf.*.log_martians -- does rp_filter do the trick?22:31
=== Darkman802_ is now known as Darkman802
DammitJimsarnold, you still around?22:38
sarnoldhey DammitJim :) any luck?22:39
DammitJimwell, for some reason after doing that, the system no longer hangs!22:39
DammitJimhow do I read the journal logs?22:39
sarnoldjournalctl22:39
DammitJimI did see that the system was having a hard time unmounting /var22:39
sarnoldiirc you can use -b 1 or -b 2 to select previous boots22:39
DammitJimbut this time it just kept going22:39
DammitJimI can't copy and paste from the server, but this is kinda what it says: Starting Unattended Upgrades Shutdown... Unmounting /var... Stopped Apply Kernel Variables... umount: /var: target is busy22:41
DammitJimvar.mount: Mount process exited, code=exited status=3222:41
DammitJimFailed unmounting /var22:41
tarpmanDammitJim: https://github.com/systemd/systemd/issues/867 probably22:42
DammitJimis my system trying to unmount var before some other service needs it?22:42
DammitJimthanks tarpman ... reading22:42
DammitJimgosh, that issue is old22:43
tarpmanbut unfixed afaik22:43
tarpmanalso why can't you copy and paste from the server?22:43
DammitJimI am not ssh'd... just VMWare consle22:43
DammitJimconsole22:43
DammitJimand on another machine22:43
DammitJimcrap, so this problem exists for real?22:45
DammitJimthanks sarnold and tarpman22:45
DammitJiminteresting, though that the systemd changes I made helped22:45
DammitJimI had also changed the timeouts, but I don't think it's even waiting the 30 seconds22:46
DammitJimbut thanks. I think I might switch all my servers over to that22:47
DammitJimI gotta run22:47
DammitJimhave a good one22:47
sarnoldtarpman: nice find. ugh.22:49

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!