/srv/irclogs.ubuntu.com/2017/03/09/#ubuntu-server.txt

=== not_phunyguy is now known as phunyguy
=== ShaRose_ is now known as ShaRose
=== Agent_ is now known as Agent
lordievaderGood morning.08:24
=== Piper-Off is now known as Monthrect
kukuhey guys, is there a way to have a list of logged for a specific user?09:43
ikonialist of logged ?09:43
kukuikonia: i mean list off ssh connections for a specific user09:47
kukuof*09:47
kukulastlog for example lists only the last connections for each user09:48
ducasseis there a difference between the zfs.ko that comes with the kernel and the zfs-dkms package? both are the same version, afaict.09:59
ghone_Hello all,12:49
ghone_I'd like to ask you guys how do you cope with ubuntu server updates in environment where there is uat,dev,test,nfr (so all non-prod servers) and also prod servers.12:50
ghone_If I do an upgrade of i.e. UAT environment, leave it for testing for a week (or longer), then upgrade, NFR (and again leave it for a while)12:52
ghone_the whole process for non-prod servers might take a few weeks. By the time I get to prod servers there might be new packages released12:53
ghone_but we need predictable result so reach some level of updates across all environments before do next round.12:53
ghone_Red Hat has Satellite server where I can create channels snapshots.12:54
ghone_Is there any way I can upgrade ubuntu servers with all patches released before YYYY-MM-DD ?12:54
rbasakCanonical has Landscape.12:55
rbasakI believe there are various other third party tools you can use.12:55
rbasakOr you can run your own mirror manually using reprepro or similar.12:56
ghone_rbasak: thanks :-)12:59
=== laurent__ is now known as lau
coreycbjamespage, ocata proposed tests passed for xenial-proposed and zesty-proposed, minus the volume boot charm issue13:20
jamespagecoreycb: I concur - promotion in progress13:29
jamespagezul: is nova-lxd 13.3.0 in a queue somewhere?15:12
zuljamespage: it should be15:13
jamespagezul: don't see it here - https://launchpad.net/ubuntu/xenial/+queue?queue_state=1&queue_text=15:13
jamespagezul: nm I'm blind - its there15:14
zuljamespage: heh15:15
zioprotohello guys. I am migrating in Mitaka from LBaaSv1 to LBaaSv2. I managed to do the migration and the horizon panels for LBaaS disappeared. Is this stuff packaged in ubuntu ? https://github.com/openstack/neutron-lbaas-dashboard15:34
zioprotoI always have 'enable_lb': True, in my horizon config15:40
zioprotocoreycb, jamespage who is familiar with the ubuntu packaging for Horizon ?15:46
fricklerzioproto: I don't think it is packaged, we install from pypi: http://git.openstack.org/cgit/openstack/cookbook-openstack-dashboard/tree/recipes/neutron-lbaas-dashboard.rb15:46
zioprotofrickler: so I can add it with 'pip install ??'15:48
zioprotofrickler: all the infrastructure now is installed with .deb packages here ... I should not fish files with pip ... it is difficult to reproduce the deployment.15:48
fricklerzioproto: yes, you need to install version 1.0.0 for mitaka+newton and also get the panel file15:49
zioprotowhat is the pip package name ?15:49
zioprotoneutron-lbaas-dashboard ?15:49
frickleryes15:49
zioprotobut if I do 'pip install neutron-lbaas-dashboard' it will destroy half of my system ? :D15:50
coreycbzioproto, frickler, neutron-lbaas-dashboard is packaged in ocata15:50
zioprotoI am afraid that 'include_recipe 'openstack-dashboard::horizon'' means destroy the already installed horizon :D15:50
zioprotocoreycb: yes but LBaaSv1 is dropped in Newton, and to have the web interface for LBaaSv2 we need that package ! :O15:51
zioprotoLooks like I will have to run a Ocata Horizon against a Mitaka cloud15:51
fricklercoreycb: ah, nice, but you'll need 2.0.0 for ocata I think15:52
zioprotothis LBaaS is the most unsupported feature ever in Openstack ! #rant15:53
jamespagezioproto: frickler, coreycb: we can update the dashboard for lbaas v2 still15:53
fricklercoreycb: also I cannot find the package in UCA, is it in -proposed only?15:53
zioprotoguys I had to implement the alembic migration my self in neutron to upgrade from LBaaSv1 to LBaaSv2, a nightmare15:54
zioprotonow, what happens if somebody deployed a LBaaSv1 with ubuntu charms ? how to you do the migration to LBaaSv2 ? you also implemented a alembic migration for this in the charm ?15:55
zioprotoor... we can confirm I am the ONLY production user in the world for Openstack LBaaS ?? :)15:55
zioprotojamespage: LBaaSv2 it is supported in the charm! :) https://github.com/openstack/charm-neutron-gateway/blob/master/templates/newton/lbaas_agent.ini16:01
zioprotojamespage: do you have also a migration strategy ?16:01
zioprotofrom LBaaSv1 ?16:01
jamespagezioproto: yes its supported in the charm since lbaasv1 was removed16:01
jamespagezioproto: no we don't have a migration strategy - I don't think there is one right?16:01
zioprotojamespage: yes, there is one now ! I migrated today16:01
zioprotoI miss only the web panels16:02
jamespagezioproto: yeah cause the dashboard does not have native support - needs the extra project16:02
jamespagezioproto: is your migration approach something that could be contributed into lbaas?16:02
zioprotojamespage: everything I did is summarized here: http://lists.openstack.org/pipermail/openstack-dev/2017-March/113628.html16:03
zioprotojamespage: there is a guy that contributed with a partial script for alembic migration.16:04
zioprotoI had to do some small patching to that script, and the migration worked, but it is not very robust16:04
zioprotoI tested on our staging cloud16:04
zioprotoit will be fun next week when I try the migration against the production db16:04
coreycbfrickler, jamespage, zul, yeah we could use a 2.0.0 update for lbaas-dashboard16:05
coreycbfor ocata16:05
zulwe could..16:05
zulcoreycb: gimme a sec :P16:06
frickler1.0.0 is a year old and pretty buggy. I must admit that I haven't tested 2.0.0, though16:06
coreycbfrickler, well, 2.0.0 was released last month16:07
fricklercoreycb: yes, I was talking with johnsom at the time when trying to figure out which version to use for Newton. and he told me that 2.0.0 is for Ocata and 1.0.0 was for Mitaka, but since no new release was made for Newton, I should continue to use 1.0.0 there16:09
coreycbfrickler, ok thanks16:10
coreycbfrickler, i don't think we can provide the lbaas-dashboard to mitaka/newton without significant changes to openstack-dashboard16:11
coreycbzul, jamespage ^16:11
zulcoreycb: no we cant16:11
zioprotoI plan to run Horizon directly in Ocata even if the rest of the infrastructure is Mitaka/Newton. I dont see another solution16:12
zioprotoI will move Horizon to a different VM or Docker container ...16:12
zulcoreycb: we changed how horizon was installed didnt we?16:13
jamespagezul: doing a run through vmware-nsxlib, vmware-nsx and neutron-taas for ocata release16:13
jamespagethey all popped out shortly afterwards16:13
grendal_primei got a werid one here...i have a kvm virt host that i also use as the router for several virtual and phisical legs of a network.  the network is segmented so that if we need to change the media to connect to any of the legs, (ie put in a cellular mifi or wireless  bridge) we can just change the route at the server to point to the different subnet.16:13
zuljamespage: thanks one off my todo list16:13
zuljamespage: i think neutron-taas is still a git snapshot though16:14
jamespagezul: no there is a 1.0.0 release but its not up on tarballs.openstack.org16:14
jamespageonly in git16:14
grendal_primeone of these legs goes through some calamp viper radios (ip over rf super slow but work)  the come happens every 60 seconds and then fails,  if i sniff the subnetwork at the router  it continus to work.??16:14
zuljamespage: what about pypi?16:15
jamespagezul: no cigar - I expect its a misconfiguration in project-config - I'll follow up afterwards16:16
zuljamespage: ack16:16
jamespagehttps://www.irccloud.com/pastebin/ivxpiRQh/16:17
jamespagezul: awesome ^^16:17
zuljamespage: i get that all the time though especially with anything keystone related though16:18
coreycbzul, yes we moved static assets from /usr/share/ to /var/lib16:19
coreycbzul, and the additional dashboards always used /var/lib16:19
zulcoreycb: oic16:19
zulcoreycb/jamespage/anyone else: lbaas-dashboard is uploaded16:30
zuljamespage: i tested ceph in my ppa i think its ok but i only smoked tested it16:31
jamespagezul: push your stuff to git and upload to the staging PPA's we can smoke test if directly once in proposed16:32
zulack16:32
hh2010hello.  i keep having issues managing two network interfaces on my Amazon AWS.  i did a system reboot yesterday and now theres no incoming traffic coming through on eth1.  any ideas what i should look into?16:40
hh2010ip route seems to be set up well.  the second interface says it is up and running with private ip that works on loopback.  but cannot connect to it from other hosts, even on the same network16:40
=== Guest2979 is now known as karstensrage
patdk-wkhh2010, nothing you said means anything, aws networking is NOT the same network, EVER16:48
hh2010hrmm the only reaosn i said that was that in the past ive been able to connect using SSH or do SCP to the private ip address16:48
hh2010from another AWS instance16:49
hh2010but i guess thats just because i was connected to both16:49
patdk-wkaws is virtualized, aws could be having issues with their network, hosts, ...16:50
patdk-wkor you could have applied a security policy to the instance, network, ...16:50
hh2010ok... do you have any thoughts on how i could test either of those?16:51
hh2010i feel like it might not be AWS becuase this happened after i did a system reboot yesterday16:51
hh2010wait...16:51
hh2010i think i got it16:52
hh2010the iprule for eth1 wasnt getting added on reboot16:52
hh2010because i added "metric 150" to eth1 in /etc/network/interfaces... for some reason that stops it from adding the ip rule to lookup the table for default gateway16:54
patdk-wkheh16:55
patdk-wkhh2010, best way to test for an aws issue, is to stop the instance, and restart it16:56
=== freakynl is now known as Guest63434
aesthetikFinish Quest and get $110!19:10
aesthetikhttps://richmondberks.com/?ref=rbd11897219:10
aesthetik- Make 1,5% Daily profit !19:10
aesthetik- Invite a friend and get 1$ as a gift !19:10
aesthetik- Comissions of 10% !19:10
DammitJimis there an appropriate place to place ssl certificates on an ubuntu server?19:17
sarnold/etc/ssl/ ?19:18
DammitJimthanks sarnold19:18
DammitJimprobably /etc/ssl/certs?19:21
DammitJimit doesn't matter if they are provided or self signed, right?19:21
sarnoldand private/ for the key19:21
DammitJimI do need keys, don't I?19:21
sarnoldit depends what you're doing with the cert19:22
DammitJima python application is going to be accessing these19:22
tomreynand do what with them?19:31
tomreyneither way, /etc/ssl/{certs,private} is the right place to store X.509 certificates19:32
DammitJimthanks19:40
=== JanC is now known as Guest31591
=== JanC_ is now known as JanC
jgrimmnacc, can you remind me the location of the file that showed intentionally skipped/bad autopkgtesting? .. context you noticed python-boto was in that list20:22
jgrimmtho i'll note that python-boto seems to have 1) gotten demoted to universe 2) seems to have disappeared from 'update-excuses'? tho i just got a kindly nag note.20:23
jgrimmnacc, doh i was looking at debian. never mind to #2 comment21:31
=== Guest63434 is now known as freakynl
DoowHi, I'm trying to figure out why apache isn't starting automatically on my server (ubuntu server 16.10). It's enabled in /etc/rc2-5.d, but I can't find anything about it in the logs at all. It starts without problems if I start it manually22:10
=== Monthrect is now known as Piper-Off
=== Piper-Off is now known as Monthrect

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!