| rizonz | tomreyn: ok | 00:05 |
|---|---|---|
| ChmEarl | when using ubuntu-server ISO, ubiquity is not used, only d-i? | 01:03 |
| rfkrocktk | Hello! We are running ami-9e158c89 in us-east-1, which is an Ubuntu 14.04 image. We had a very strange issue where three servers running RabbitMQ in a VPC simultaneously started freaking out, claiming they could not write to disk until the kernel killed the processes. When we reviewed this with our Amazon account managers and an actual EC2 developer, we were | 01:19 |
| rfkrocktk | told to reach out to Canonical and that there was a known bug in the enhanced networking drivers for Ubuntu 14.04. Is there a known bug? | 01:19 |
| pmatulis | rfkrocktk, maybe pastebin some logs | 02:43 |
| rfkrocktk | I'll try to do that, but I honestly think it was just AWS lying to us about some underlying problem 😈 | 02:45 |
| rfkrocktk | It was more of a general query regarding the enhanced networking driver in 14.04, are you aware of any significant (or otherwise) bug reports concerning it in 14.04 EC2 AMIs? | 02:46 |
| patdk-lap | rfkrocktk, if you didn't manually update the driver, yes | 02:50 |
| patdk-lap | I have a newer driver in my ppa | 02:50 |
| patdk-lap | it's documented from intel | 02:51 |
| rfkrocktk | can you link to the bug? how long ago was it? | 02:51 |
| patdk-lap | the bug is linked to right on aws ec2 page, where it documents the enhanced network option | 02:51 |
| rfkrocktk | trying to find | 02:51 |
| rfkrocktk | it's not on here: https://help.ubuntu.com/community/EC2StartersGuide | 02:52 |
| patdk-lap | http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sriov-networking.html | 02:52 |
| rfkrocktk | thank you patdk-lap | 02:54 |
| patdk-lap | that ubuntu page doesn't talk about enhanced networking at all | 02:54 |
| patdk-lap | https://launchpad.net/~patrickdk/+archive/ubuntu/production/+sourcepub/4863517/+listing-archive-extra | 02:54 |
| patdk-lap | I made it a dkms, unlike the aws page, you won't have to screw with it again on each kernel update | 02:54 |
| patdk-lap | never had any issues, ran some very large and high traffic mongo servers on it | 02:55 |
| patdk-lap | I should probably update my package | 02:58 |
| rfkrocktk | I can't seem to find the actual bug | 03:12 |
| patdk-lap | what? | 03:12 |
| rfkrocktk | like they mention that there is a bug but they don't clarify what it is | 03:13 |
| rfkrocktk | unfortunately | 03:13 |
| patdk-lap | yes, it's MANY bugs | 03:13 |
| rfkrocktk | 😬 | 03:13 |
| patdk-lap | svio support wasn't very good in versions < 2.14 | 03:14 |
| patdk-lap | if you are expecting aws to file a bug against ubuntu, your mistaken | 03:16 |
| patdk-lap | you would have to file that bug, aws couldn't care less | 03:16 |
| patdk-lap | aws already went and did the work and found that you need >= 2.14 to be stable | 03:16 |
| patdk-lap | the version in ubuntu 14.04 is 2.11.3-k | 03:17 |
| rfkrocktk | I'm just wondering why Canonical hasn't published an updated version of the driver in their EC2 AMI images. | 03:20 |
| rfkrocktk | If this is a known issue, then it would make sense for canonical to address it by publishing a fix. | 03:21 |
| patdk-lap | ask them | 03:21 |
| patdk-lap | I wouldn't assume they know about it though | 03:22 |
| patdk-lap | https://bugs.launchpad.net/cloud-images/+bug/1254930 | 03:23 |
| ubottu | Launchpad bug 1254930 in cloud-images "AMIs do not have EC2 Enhanced Networking flag set" [Undecided,Confirmed] | 03:23 |
| rfkrocktk | thank you, this is the bug | 03:25 |
| lordievader | Good morning | 09:00 |
| === disposable3 is now known as disposable2 | ||
| === jamespag` is now known as jamespage | ||
| Genk1 | Hello all | 12:13 |
| lordievader | o/ | 12:14 |
| Genk1 | What is the best strategy for a mail server High avaibility ? | 12:14 |
| Genk1 | I have postfix and devecot running on the same server and I want to create a backup (slave) for taking control in case of the master faillure | 12:15 |
| bhuddah | having more than one, i guess. | 12:15 |
| refeaime | Hi chat | 12:16 |
| bhuddah | Genk1: what level of HA are you aiming for? | 12:16 |
| Genk1 | bhuddah, I didn't get the point ? can you explain more please ? thanks | 12:17 |
| bhuddah | Genk1: it's not necessarily a fail-over setup you want. you can also have active-active setups. it all depends on what your goal is. and your budget. | 12:18 |
| Genk1 | bhuddah, I have a distant cloud environment of 3 VM | 12:18 |
| Genk1 | bhuddah, my goal is to always have the service UP and I guess an active-active setup is not necessary in my case | 12:19 |
| Genk1 | I don't have a huge traffic | 12:19 |
| bhuddah | Genk1: "always" is impossible. | 12:19 |
| Genk1 | bhuddah, Ok let's say a 99.99 % avaibility then :) | 12:19 |
| bhuddah | Genk1: it sounds like a simple backup will be enough. | 12:20 |
| bhuddah | Genk1: depending on the size of the mail store you might need some time to restore though. | 12:21 |
| Genk1 | bhuddah, you mean a secondary MX server ? | 12:21 |
| bhuddah | Genk1: i just mean a traditional data backup. regular and tested. | 12:21 |
| Genk1 | bhuddah, OK, what's about the cost in system faillure ? do I have to operate manually ? | 12:21 |
| Genk1 | bhuddah, hmm | 12:22 |
| bhuddah | as long as your downtime is shorter than a couple of days you won't lose any mail. so you just gotta make sure that you can restore quick enough. (in a couple of hours) | 12:22 |
| Genk1 | bhuddah, you mean to simply backup files and be able to mount a server quickly ? | 12:22 |
| bhuddah | Genk1: you can get quite quick with that if you train it regularly. | 12:23 |
| Genk1 | bhuddah, I see, but the problem is that the operators need to answer mails as fast as possible | 12:23 |
| Genk1 | bhuddah, the corporate activity is depending heavily on emailing system | 12:24 |
| bhuddah | the system will fail. sooner or later. | 12:25 |
| bhuddah | a good single system will last years and years before you have unscheduled downtime. | 12:26 |
| Genk1 | bhuddah, OK I see | 12:27 |
| Genk1 | what if I want to go with an MX backup ? | 12:27 |
| Genk1 | having 2 servers operating if the master fail the secondary server takes control ? | 12:27 |
| bhuddah | of course you can grow your system to multiple mx servers | 12:28 |
| bhuddah | cluster operation is necessarily a lot more complex than single server systems. | 12:28 |
| Genk1 | bhuddah, you're absolutly right | 12:29 |
| Genk1 | but what can you suggest me for a multiple mx setup ? | 12:29 |
| bhuddah | it's a trade off where you might gain little and have a lot more risk to handle. | 12:29 |
| bhuddah | i'd run with multiple active MX's then. | 12:30 |
| Genk1 | especially if I have 2 systems to put in HA (Postfix and devecot) | 12:30 |
| bhuddah | they can throw mails in a centralized backend storage pool. | 12:30 |
| Genk1 | hmm | 12:30 |
| bhuddah | and users access that storage pool via the dovecot server(s) | 12:31 |
| Genk1 | bhuddah, perfect thank you al ot | 12:39 |
| bhuddah | Genk1: good luck. | 12:40 |
| Genk1 | bhuddah, Ah! one last question please. how about the storage pool ? what can you suggest me for a clouding environement ? using Gluster, NFS.. for example ? | 12:41 |
| bhuddah | usually whatever you already have for storage. | 12:41 |
| Genk1 | bhuddah, hmm I don't think that our hoster has a lot of things to offer in that area | 12:42 |
| bhuddah | some might just use a NAS. others might have a larger SAN storage. | 12:42 |
| Genk1 | bhuddah, what's about rsync ? | 12:42 |
| bhuddah | no. it must be real-time. in that case. | 12:43 |
| Genk1 | bhuddah, wow OK that's the difficult point then | 12:44 |
| bhuddah | HA systems are complicated. | 12:45 |
| Genk1 | bhuddah, true, and cost a lot | 12:45 |
| bhuddah | you can calculate how much a day or two downtime cost. | 12:45 |
| Genk1 | bhuddah, but I don't see the need for a real-time stuff ? I think that 1 min and more is tolerable in our case | 12:46 |
| bhuddah | and then you know what you can invest to mitigate that. | 12:46 |
| Genk1 | bhuddah, yes true | 12:46 |
| bhuddah | Genk1: the point isn't the speed but the shared locking because there are multiple paths through the system. | 12:46 |
| Genk1 | bhuddah, you're right | 12:47 |
| patdk-lap | bhuddah? your cheap vps provider will last years and years before you have any kind of outage? not true | 12:48 |
| patdk-lap | I don't know why you want to get all fancy attempting to make this HA | 12:49 |
| cpaelzer | coreycb: zul: hi, the qemu triggered nova test opn ppc64el failed again - did you happen to find what it really is? | 12:49 |
| patdk-lap | just use simple dovecot built in HA | 12:49 |
| zul | cpaelzer: no i wasnt able to reproduce it | 12:49 |
| patdk-lap | http://wiki.dovecot.org/Replication | 12:49 |
| bhuddah | patdk-lap: you get what you pay for. certainly. so the cheapo vps provider will fail earlier :) | 12:49 |
| coreycb | cpaelzer, zul: well for our failing deployment which hit a similar issue, it was due to needing a newer version of seabios backported to the cloud archive | 12:50 |
| zul | cpaelzer: i was thinking of getting back on a ppc64el and running autopkgtest | 12:52 |
| cpaelzer | zul: ok, the seabios in zesty is pretty new (4 weeks) | 12:56 |
| cpaelzer | zul: your access on the machine of last week should still be good | 12:57 |
| cpaelzer | zul: please let me know if I can help to resolve | 12:57 |
| zul | k | 12:58 |
| zul | coreycb: im going to start on the rc1 candidates but not upload them | 13:40 |
| coreycb | zul, ok | 13:41 |
| jdstrand | tomreyn: fyi, 'ufw disable' is good enough | 13:52 |
| jemoo | Help! i can not send mail from one pc to another which are in the same network! | 14:38 |
| jemoo | i only see the mail in side the sender pc /var/mail....lab1 | 14:39 |
| jemoo | the sender pc is using exim4 and the receiver pc is using postfix | 14:42 |
| jemoo | helpp!!!! | 14:42 |
| jemoo | any one in here and help! | 14:44 |
| jemoo | Help! i can not send mail from one pc to another which are in the same network! | 14:48 |
| jemoo | i only see the mail in side the sender pc /var/mail....lab1 | 14:48 |
| jemoo | Helppp! | 14:48 |
| jemoo | Help! i can not send mail from one pc to another which are in the same network! | 15:22 |
| jemoo | i only see the mail in side the sender pc /var/mail....lab1 | 15:23 |
| lordievader | !patience | jemoo | 15:37 |
| ubottu | jemoo: Don't feel ignored and repeat your question quickly; if nobody knows your answer, nobody will answer you. While you wait, try searching https://help.ubuntu.com or http://ubuntuforums.org or http://askubuntu.com/ | 15:37 |
| sonu_nk | i am installing webmin on ubutnu server.. but when i tried lsb_release -a it is showing me " No LSB modules are available. | Distributor ID: Debian | Description: Debian GNU/Linux 8.6 (jessie) | Release: 8.6" | 16:16 |
| Ussat | FYI: https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html | 16:17 |
| pmatulis | !webmin | 16:23 |
| ubottu | webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. | 16:23 |
| Pici | also that | 16:24 |
| blueking | I have a firewall on ubuntu... have set policy rules and zones... app on ubuntu itself does it use loc or fw ? | 18:12 |
| patdk-wk | what firewall software are you using? | 18:13 |
| patdk-wk | but normally anything on the machine itself is fw | 18:13 |
| blueking | ok | 18:13 |
| blueking | so what are 'loc' for ? | 18:13 |
| patdk-wk | no idea, what did you configure loc as? | 18:14 |
| blueking | loc = local ? | 18:14 |
| patdk-wk | if I make a very broad guess, loc might mean local, and stand for anything coming from the local network | 18:14 |
| blueking | ah ofc 'facepalm' | 18:15 |
| blueking | was thinking local = machine itself | 18:15 |
| patdk-wk | I don't use local in any of my firewall configs | 18:16 |
| drab | hi, trying to preseed some boxes where the OS disk already has some stuff on it. No matter what I try I keep being prompted about what to do with my disk | 18:39 |
| drab | I would like to simply tell the install to nuke whatever is there and install as if it was a blank drive, ignoring all partitions | 18:39 |
| drab | anybody that has had that problem and has a working config? | 18:40 |
| genii | drab: Use the partitioning recipe section in the sample preseed file to go by. It has the other options given as well to automatically proceed and so on. https://help.ubuntu.com/lts/installation-guide/example-preseed.txt | 18:45 |
| genii | drab: The relevant section says "# This makes partman automatically partition without confirmation, provided | 18:47 |
| genii | # that you told it what to do using one of the methods above." with the d-i options to use below | 18:47 |
| drab | genii: yeah I already have all of that, and it works on blank drive, but not on a drive on which for example windows had been installed on | 18:53 |
| drab | or another version of ubuntu for that matter | 18:53 |
| drab | I've seen some people having similar problems if the drive in question had lvm on it and the autodetect would find the volumes and try to reuse them despite the options in the preseed | 18:56 |
| drab | some of those folks seem to have sort of abused the d-i early_command to delete the VGs and delete the MBR | 18:57 |
| genii | drab: I had before an automatic install system with preseed. Unfortunately I do not currently have access to the preseed options that were used. But when for instance it stalled I would examine the output of console 4 for what kind of input it was expecting then alter the preseed accordingly | 18:58 |
| drab | genii: how do you check? I guess I'll test that later, I thought I cycled through all the terminals and don't remember a way to see what questions exactly it was asking | 19:11 |
| drab | if that was possible that'd be great | 19:11 |
| genii | With server install it gives you 4 terminals, tty0 is the default you see, tty1 and tty2 you can use to gain a commandline, tty4 is where you can see output like what commands are currently being executed to produce whats on the first terminal | 19:13 |
| genii | tty3, rather | 19:13 |
| drab | genii: ok,thanks, I'll try to look at that output and see if I can recognize a question. Is there an obvious link between what shows on screen and a preseed option? | 19:23 |
| genii | drab: It should actually be showing you something like the actual d-i command which is currently running | 19:24 |
| zul | coreycb: updating openstack cruft in universe | 19:48 |
| rharper | dannf: hey, testing out the smbios paramters in qemu-system-aarch64; can you test passing in '-smbios type=1,manufacturer="Foobar"` and then in the booted image see if this shows up in /sys/class/dmi/id/* ? | 20:02 |
| dannf | rharper: checking.. | 20:09 |
| dannf | rharper: $ sudo grep -ir Foobar /sys/class/dmi | 20:13 |
| dannf | $ | 20:13 |
| rharper | modprobe sysfs_dmi ? | 20:14 |
| rharper | also, dmidecode | 20:14 |
| rharper | I was on an arm64 cloud (beisner had one) which had /sys/class/dmi/* populated, Xenial image IIRC | 20:15 |
| dannf | rharper: it is populated | 20:15 |
| dannf | rharper: there just isn't any file that contains that string | 20:15 |
| rharper | ok, that was what I saw as well | 20:15 |
| rharper | so smbios on qemu aarch64 isn't working | 20:15 |
| rharper | =( | 20:15 |
| rharper | but it should be =) | 20:15 |
| dannf | rharper: however, iirc, ARM may rely on a newer version of the spec | 20:15 |
| rharper | was going to file a bug and have someone look at fixing qemu | 20:15 |
| dannf | maybe type needs to be updated? | 20:15 |
| rharper | not sure | 20:15 |
| rharper | but it's been in qemu for almost 2 years | 20:16 |
| dannf | lemme dig up a bug... | 20:16 |
| rharper | cool | 20:16 |
| rharper | dannf: the goal here is to have openstack nova pass the OpenStack Nova product name into the guest so cloud-init can know it's on an OpenStack cloud and do the right thing with datasources | 20:16 |
| dannf | rharper: i don't think the bug i was looking at is relevant. yeah, doesn't seem to work. | 20:20 |
| rharper | ok | 20:20 |
| rharper | it's likely regressed; I suspect that some thigns work | 20:20 |
| rharper | for example, -uuid still works | 20:20 |
| dannf | 1:2.6.1+dfsg-0ubuntu8 | 20:20 |
| rharper | but other stuff doesn't | 20:20 |
| rharper | dannf: if you file a new bug, can you add me to it? or do you want me to file one right now? | 20:48 |
| dannf | rharper: i'd say go for it, but feel free to subscribe me in case upstream needs a quick test | 20:51 |
| rharper | dannf: ok | 20:52 |
| === Grapes is now known as Guest63940 | ||
| blueking | anyone into lacp/bonding ? | 21:32 |
| blueking | just wonder what mode I should choose | 21:32 |
| === Guest63940 is now known as Gr8pes | ||
| rharper | dannf: https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1662345 | 22:06 |
| ubottu | Launchpad bug 1662345 in qemu (Ubuntu) "smbios parameter settings not visible in guest" [Undecided,New] | 22:06 |
| dannf | rharper: cool | 22:08 |
| drab | blueking: fwiw I've just put in a quad port nic into my machine and will get to that question shortly | 22:14 |
| sarnold | doesn't it boil down to the question, why do you want it? redundancy or throughput? | 22:15 |
| blueking | throughput... | 22:33 |
| drab | still afail it's not as easy as x $num_of_nics | 22:41 |
| drab | that's not how LCAP works | 22:41 |
| drab | I've been reading around and to achieve that sort of multiplier ppl seem to have done weird shenanigans with vlans etc | 22:41 |
| sarnold | really? I haven't seen any vlan shenanigans | 22:45 |
| sarnold | but if you've only got two computers involved and use only say two tcp connections between them, there's a 50% chance both connections will be sent over the same NIC.. | 22:45 |
| patdk-wk | lacp doesn't give you throughput, only redundency | 22:46 |
| patdk-wk | to get throughput with lacp requires a LOT of clients | 22:47 |
| patdk-wk | if you want throughput, you need to use roundrobin, not lacp, and switches don't like roundrobin | 22:47 |
| sarnold | they don't? oh :/ | 22:47 |
| sarnold | I've always been under the impression there were three types available: active/passive, hash-based, and round-robin, and I've always had the impression that round robin was more expensive than hash, so no one used RR... | 22:50 |
| drab | I was aware that switches didn't like RR tho, but yeah, that was my impression too, lcap in the end doesn't really give you tput | 22:52 |
| drab | especially not for a single connection, which is what most people think of when wanting to use bonding | 22:53 |
| drab | ie cp a large file over nfs or something | 22:53 |
| drab | s/was aware/wasn't aware/ | 22:53 |
| sarnold | yeah, "but it could do two of those at once" is often little solace when you're waiting forever for a file copy to finish :) | 22:54 |
| patdk-wk | sarnold, there are like 6 or 7 types | 22:58 |
| patdk-wk | rr is the best, but it only works on DIRECT links, server to server | 22:58 |
| patdk-wk | I use it for my HA links | 22:58 |
| patdk-wk | active/backup is fine if you just need simple failover and have simple switches or something | 22:59 |
| patdk-wk | lacp (hash) works good if you have a switch that does lacp also, but getting > single port speed is not a goal of lacp | 22:59 |
| patdk-wk | now, the other two tlb and alb where made to get >single port speeds, but they require the switch and the client machines to behave with it | 23:00 |
| patdk-wk | tlb normally works, and does so by sending packets out multible links in a round-robin type way, but receiving only on a single link | 23:00 |
| sarnold | o_O | 23:01 |
| sarnold | that sounds crazy | 23:01 |
| patdk-wk | the issue is, it uses multible mac addresses to send, and some clients that gets confusing (mac based auth checks) | 23:01 |
| sarnold | heh | 23:01 |
| patdk-wk | so while it worked great for *normal* things | 23:01 |
| patdk-wk | I could not login to my network switch using that link | 23:01 |
| patdk-wk | cause it would verify the source mac was the same as the user logged in on | 23:01 |
| sarnold | hah | 23:02 |
| sarnold | that even sounds like a good idea on the face of it.. | 23:02 |
| patdk-wk | alb takes it a step more, and spoofs the arp to the clients to balance incoming traffic | 23:02 |
| sarnold | all this sounds like compelling reasons to just buy nicer hardware | 23:02 |
| patdk-wk | lacp can load balance from the hash sure | 23:03 |
| patdk-wk | but it's VERY hard to maintain that balance and to balance it, unless you have a LOT of clients | 23:03 |
| patdk-wk | so for a home, lacp won't do crap for you | 23:03 |
| patdk-wk | unless you just want a more advanced active/backup | 23:03 |
| sarnold | how does it help with backup? | 23:03 |
| sarnold | does it automatically re-do the hashing alg if a link goes down? | 23:04 |
| patdk-wk | yes | 23:04 |
| sarnold | alright that's friendly enough | 23:05 |
| patdk-wk | as long as you don't setup a static lacp, static lacp uses any active port, if it's plugged into a lacp configured thing or not | 23:05 |
| patdk-wk | dynamic lacp will use what is configured on the other side for lacp only | 23:05 |
| patdk-wk | so if you plug in your laptop into a server lacp configed port by accident, everything doesn't go nuts | 23:05 |
| sarnold | but then you're trusting lacp to dtrt -- does it? :) | 23:06 |
| patdk-wk | it should, it's simple | 23:06 |
| patdk-wk | if not, your switch has issues | 23:06 |
| sarnold | yay | 23:06 |
| sarnold | hehe | 23:06 |
| patdk-wk | reminds me of my netgear switch, that send broadcast packets across every vlan | 23:06 |
| sarnold | which returns to "buy nicer hardware" | 23:07 |
| sarnold | "you asked for broadcast" | 23:07 |
| patdk-wk | but I marked a vlan tag on it, not ALL vlans | 23:07 |
| patdk-wk | that caused some fun tcpdumps | 23:07 |
| Pinkamena_D | I just closed a server image but I want it to appear mostly unused, is there any semi automated way to remove all of the log files? | 23:14 |
| Pinkamena_D | cloned* | 23:14 |
| sarnold | Pinkamena_D: try this on something unimportant first: for f in /var/log/* ; do > $f ; done | 23:15 |
| Pinkamena_D | so that looks like it would just truncate all of the files under /var/log ... does it do subdirectories too? | 23:17 |
| sarnold | no, just those files | 23:17 |
| sarnold | you could add /var/log/*/* if you wanted files in the subdirs | 23:17 |
| Pinkamena_D | I guess that should be good enough | 23:18 |
| Pinkamena_D | thanks! | 23:18 |
| === jerrcs- is now known as jerrcs | ||
| === lfrlucas_ is now known as lfrlucas | ||
| === magicalChicken_ is now known as magicalChicken | ||
| === v12aml_ is now known as v12aml | ||
| === not_phunyguy is now known as phunyguy | ||
| === arlen_ is now known as arlen | ||
| === Dmitrii-Sh_ is now known as Dmitrii-Sh | ||
| === petevg_ is now known as petevg | ||
| === fyxim_ is now known as fyxim | ||
| === wolsen_ is now known as wolsen | ||
| === cargonza_ is now known as cargonza | ||
| === AndyWojo_ is now known as AndyWojo | ||
| === DalekSec_ is now known as DalekSec | ||
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!