[06:19] morning all [06:30] morning nsnzero. got my internet working at my new house, wanna cry, I mean, see? [06:30] :-P [06:31] welcome back superfly - lol [06:31] nsnzero: http://www.speedtest.net/my-result/a/2798383711 [06:33] i dont even get 1mbs [06:34] I got a 300Mbps down, 30Mbps up connection. [06:35] i am so jealous [06:38] I'll be working from home, so I need to make sure that I can always do what I need to (which includes video conferencing). [06:40] only 30Mbps up, not that impressive, shitty american internet :p [06:54] Mornings Ubuntu-ZA [06:55] 300mbs is faster than my lan [06:56] * andrewlsd lurks again [06:59] but 10 is not :p [07:18] Hi all [07:22] morning theblazehen [07:22] hi nsnzero [07:30] one question : why when i use vboxmanage in tmux the virtual machine closes when the terminal after detaching tmux from it [07:36] nsnzero: Does a vm console pop up, or is it headless? [07:38] theblazehen: headless - it starts fine - runs fine - but closes as soon as i end the ssh session - it runs in tmux [07:38] nsnzero: Any reason for virtualbox over kvm? [07:39] Running a relatively recent distro? [07:39] Does your tmux stay alive? [07:39] no reason - it was the first vm i tried out [07:40] (Thinking about https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825394) [07:40] running 16.04 [07:40] tmux staying alive - good question - let me check [07:40] If you're running on linux, I'd go with kvm (or Xen, if you like. But kvm is more popular) [07:40] jSimple too [07:40] s/j// [07:41] Just `sudo tasksel`, select Virtual Machine Host and install `virt-manager` [07:43] nice - theblazehen [07:52] +1 for virt-manager [07:53] virtualbox is nice for running Windows in a VM, with shared folders etc. but if you need to run other VMs and/or have them start at boot time or even primarily run them headless, then KVM via virt-manager FTW. [07:55] Only annoying thing with kvm is networking, theres no nice solution to bridge AND be able to access host IP [07:55] ^ hmm yip. I tend to run two bridges. [07:55] or use laptop wifi for internet and laptop eth for bridge of vms. [07:56] (when they need internet access) [07:59] I have some gross script that adds a macvlan interface onto the hypervisor with the same IP as main network card :( [08:00] https://pastebin.com/N8xQ2GRk < I don't like it though and I worry that at times it might be the cause of weird network issues [08:00] virtual box is good for us beginners [08:01] I really wish there was just an official way to do this [08:01] otherwise really happy with kvm though :p [08:01] MaNI: A normal bridge Just Works for me? [08:02] * nsnzero is slowly becoming a hard core linux user [08:02] nsnzero: Easier to `tasksel` and `apt install virt-manager` than virtualbox :) [08:03] It's okay on windows though [08:03] theblazehen, with 2 network cards you mean? It's easy enough to get it working on a machine with two cards but this machine only has one [08:04] or you mean you are using bridging instead of e.g. macvtap? IIRC that doesn't scale well if you are running multiple VMs it's fine for 1 VM [08:04] MaNI: Nope, just one. Just a normal bridge, with your IP on the bridge not directly on the nic [08:04] > or you mean you are using bridging instead of e.g. macvtap? IIRC that doesn't scale well if you are running multiple VMs it's fine for 1 VMyeah, that [08:04] virtual box doesnt auto mount usb disks - which is irritating [08:04] Well, works great with plenty of containers [08:05] I'll probably just shove another network card in here at some point and be done with it [08:06] MaNI: Or are you talking say 100+ VMs on a host, with decent hardware? [08:06] I tend to have 5 VMs running on my dev box at any given time [08:07] * theblazehen didn't have issues with around 6 VMs and 40 containers on old desktop-running-as-server [08:08] I don't recall bridging working for me in this scenario, but I may remember wrong, or something may have changed - I mean it's been a few years since I looked I've just been using the same solution since I first set it up (which is the script) [08:08] Was only getting around 7 gbit/s between containers, but that was more an issue of mtu / cpu / ram speed I think [08:08] Yeah, I've only been running that many VMs + containers for like a year or so [08:09] or it may have even been some hardware (or kernel) specific gotcha - can try it again when I get a break I guess [08:09] though maybe I should anyway just shove in an extra card - it's only like R100 or whatever for another network card and that solves everything [08:10] can i import vbox images into kvm ? [08:11] you can import vbox harddrives, you'll have to reconfigure the hardware part of the machine [08:11] nsnzero: Yeah, check `qemu-img` [08:11] mani theblazehen thanks [08:13] MaNI, eh. On new server just getting 11 gbit/s between containers. dunno how exactly it's done between them, but it may be slowed down a bit due to NUMA stuff? [08:23] No idea, I'm not a hardware/networking guy :p [08:27] Either way, IMO if you're doing more than 10 gbit/s between VMs then it's either storage, in which case, pass through an iSCSI LUN as a direct block device, then it's just guest running storage <-> host, not storage guest<->host<->guest, or you'll likely be CPU bound anyway (I'm guessing) if you're passing that much application data. Or memory speed bound [08:28] Or different NUMA zones like this case I guess, could slow you down [08:28] Right. That's a valid use case if you have multiple CPUs [08:30] Although in that case if application isn't NUMA aware, which it should be if you run multiple instances and not just for replication, you can use shared memory between containers afaik, may be faster than overhead of TCP/IP [08:31] Not a huge improvement, but container -> guest network gets 12.6 gbit/s over TCP/IP [08:32] Just running a http://ark.intel.com/products/64590/Intel-Xeon-Processor-E5-2650-20M-Cache-2_00-GHz-8_00-GTs-Intel-QPI though [08:32] maxing out a single cpu core [08:34] For comparison, direct to localhost is just 30.6 gbit/s [08:34] hehe, my needs are quite a bit more modest than anything like that, I just need dev VMs that can access the rest of the network at reasonable speeds while being able to also ping the hypervisor and not have to be on a different subnet :) [08:35] * theblazehen still thinks if your application traffic needs more than 10 gbit/s you should probably use more physical hardware [08:35] Heh, yeah :p I like taking things too far though [08:35] Have you _seen_ my hardware specs? lol [08:36] yeah I can only dream of hardware like that [08:37] which reminds me, I should upgrade soon now that theres finally some consumer CPU competition again [08:37] https://linx.li/lawf60tu.txt (I normally use around 64 GiB more RAM, so it's not all wasted) [08:37] Although an i7-4790k still ends up a bit faster than my Xeon though. At least I have 2 of them [08:37] And an i7-4790k can't address 384 GiB RAM :p [08:38] If that nigerian prince gets back to me soon I'll be upgrading to full flash storage though [09:03] ... Would anyone be interested in a south african FidoNet node? [09:09] is it like freenode ? [09:09] nsnzero: It's a BBS basically [09:10] ok nice old school [09:10] Yeah [09:11] * theblazehen thinks that phone call costs will make people not really want to use it though [09:11] (FidoNet is basically a network of BBSs if I understand right) [09:12] And exposing it over telnet or something kinda gets rid of the cool part or running a BBS anyway [09:13] they all use dsl lines - before its was only dial-up [09:14] nsnzero: yeah. So these days people would probably prefer to telnet into node, rather than dial in [09:14] In which case, why bother running a BBS [09:16] nostalgia theblazehen [09:17] nsnzero: Heh. /me never got to experience it in the first place :( [09:18] looked cool in the old movies - but i also didnt have the thrill of bbs [09:18] * theblazehen got rid of a PCI modem because I never expected to want to use it :( [09:18] Yeah. Wargames ftw [09:18] nsnzero: Did you know that hackthissite has a phreaking section? [09:19] no never knew that [09:19] * theblazehen also liked that kind-of phreaking? scene in wargames [09:19] war dialing [09:20] telnet telehack.com [09:20] And https://www.youtube.com/watch?v=o5b5GWDqYrk a real phreaking scene [09:20] nice ty nsnzero [09:20] its got a WOPR server there somewhere [09:23] Nice [09:26] nsnzero: Did you get to it, or just know it's there? [09:30] i got to it - lol - everything from the movie is there including thermo-nulcear war [09:30] nice [09:33] its got 25 000 hosts to explore and hack into [09:33] http://telehack.com/telehack.html [09:33] wow, nice. ty nsnzero [10:08] there just shoved a second NIC in and put all the VMS as macvtap|eth1 - hooray for hardware solutions [10:13] MaNI: but then you're limited by speed of the NIC :/ [10:14] most the traffic is to external boxes anyway [10:14] Ah [10:15] * theblazehen wishes my whole network was 10 gbit :( Only (storage + my pc) and server have 10 gbit connection between them [10:16] MaNI: sudo brctl show [10:17] http://pastebin.methlab.lsd.co.za/5zvv316p.txt [10:17] I use a bridge to share network, so that VMs and containers can all talk to each other too. [10:17] one network. [10:17] admittedly, sometimes I remove eth0 from it so that they can't access external stuff. [10:18] andrewlsd: Nice idea. Have you looked a `ebtables`? [10:18] theblazehen: I have _looked_ at ebtables. I haven't had a cause to use it yet. [10:18] http://pastebin.methlab.lsd.co.za/boehzrnn.txt my `brctl show`. Basically the same thing [10:18] andrewlsd: Heh. Try to avoid it :p [10:19] except you have a bond device :-D [10:19] Ended up just dropping everything to iptables when I used it [10:19] andrewlsd: Yeah, but bridge is the same :p [10:19] I configured LXD not to start its own bridge. [10:20] (ditto for `libvirt`) [10:20] interesting that your `virtbr0` has Spanning Tree Protocol enabled. [10:21] Hmm. Was the default IIRC [10:21] I use br0 for VMs anyway [10:22] nsnzero: `apt install bsdgames`, `wargames` :) [10:23] Hmm. /me should actually rewrite my `hangman` solver properly [10:34] The more I use perl the less I like it [11:26] * theblazehen never knew that going from web interface admin -> command execution was a big deal... /me has some reporting to do in that case... [11:26] https://www.cvedetails.com/cve/CVE-2017-6334 [12:13] have good afternoon everyone [17:50] evening all [18:03] Hi nsnzero [18:05] hi superfly [18:06] * superfly is busy getting all his Red Hat accounts set up [18:06] They take security seriously. [18:07] * nsnzero wonders why he cant ssh into his server [18:08] Hi nsnzero, superfly [18:08] superfly: Nice. What you going to be working on there? [18:09] hi theblazehen [18:09] theblazehen: I'm a testing engineer on the CloudForms team. CloudForms Red Hat's "product" version of ManageIQ [18:10] congrats superfly [18:11] theblazehen: do you think installing kvm messed up my ssh settings ? i didnt reboot after installing as well [18:16] superfly: Nice [18:16] nsnzero: How so? [18:16] Can't ssh in? [18:18] nope - no errors just no response - server is up [18:20] Can you `ssh -vvv teh.server`? [18:20] it emails me its system state every 30 minutes [18:20] Does it hang after sending version string? [18:20] You can ping it? [18:20] connection timeout after a long wait [18:20] Does IP come from dhcp or static? [18:21] dhcp [18:21] You should have gotten a new IP [18:21] Can probably check hostname on dhcp server [18:22] Otherwise check arp cache if your local pc is on same lan perhaps [18:22] Or just nmap the network if you run on a /24 [18:22] i suppose it just needs a reboot [18:23] it connected fine on the lan early now it just not responding [18:28] evening Kilos [18:39] have a good night all [19:00] night guys.