| rharper | hallyn: nothing wrong with adding a second disk, using curtin to install ubuntu to the second disk, and updating grub to boot into the second disk | 00:03 |
|---|---|---|
| hallyn | not a bad idea | 00:12 |
| hallyn | curtin works with kboot or something? | 00:12 |
| rharper | I think you could just dd the cloud-image to the second disk; and then have main grub chain-load to the target disk | 00:15 |
| rharper | the cloud-image auto expands the rootfs to the size of the disk on first boot | 00:15 |
| hallyn | can't get an actual second disk. maybe i can just chroot into a tree with ubuntu installer | 00:16 |
| hallyn | well that won't *quite* work... hm. turn the huge /home into an installer disk maybe | 00:18 |
| hallyn | yeah that should work | 00:19 |
| hallyn | chuckle. so i just extracted a lxc zesty rootfs into the home device. tweaked it. pointed grub at it. will it work? | 00:55 |
| hallyn | nah. i skipped a step. oh well. nothing to do but wait for reinstall now | 00:55 |
| moneylotion | hi all, i have two identical servers... running netatalk (afp)... one can clear gigabit speeds, the other 50 MB/s (max)... any ideas | 02:25 |
| moneylotion | running zfs... both systems, have very little fragmentation | 02:25 |
| moneylotion | fresh install on the slow system within the month | 02:25 |
| moneylotion | slow afp and smb | 02:26 |
| qman | identical hardware? identical disk layout? | 02:29 |
| sarnold | identical ashift? | 02:30 |
| moneylotion | qman - i just noticed something in my pfsense router.... now im getting full bandwidth over afp - huh - sorry | 02:30 |
| moneylotion | using vlans, and routing things over vpn... needed to local lan route | 02:30 |
| moneylotion | still only clearing 50 MB/s | 02:48 |
| moneylotion | the ashift is identical - the drives were migrated from an old install, where I was clearing full gigabit | 02:49 |
| moneylotion | just realized im running short lengths of cat 5e - would one machine be effected, even though they're right next to one another???? | 02:51 |
| moneylotion | ** 5e isn't certified for gigabit speeds | 02:51 |
| masber | hi | 05:11 |
| masber | how could I rename a bond interface? | 05:12 |
| === JanC is now known as Guest10980 | ||
| === JanC_ is now known as JanC | ||
| === JanC is now known as Guest18582 | ||
| === JanC_ is now known as JanC | ||
| cpaelzer | rbasak: hiho | 09:37 |
| cpaelzer | rbasak: any idea why ppa:uvtool-dev/master is rejected on some of my systems as ppa? | 09:37 |
| cpaelzer | I just started debugging, but it seems not to trigger always | 09:37 |
| cpaelzer | e.g. a local trusty container works | 09:38 |
| cpaelzer | while one on horsea has this | 09:38 |
| cpaelzer | rbasak: fyi not uvtool repo specific | 09:45 |
| cpaelzer | it seems something (lxd?) sets up and sets http proxy - but that is on a format that is failing | 09:45 |
| cpaelzer | on the "good" systems there is no http_proxy set at all | 09:46 |
| cpaelzer | http_proxy=http://[fe80::1%eth0]:13128 seems wrong isn't it? | 09:46 |
| cpaelzer | ping6 likes it, wget not | 09:48 |
| cpaelzer | Error parsing proxy URL http://[fe80::1%eth0]:13128: Invalid IPv6 numeric address. | 09:48 |
| cpaelzer | and apt key doesn't like it either | 09:48 |
| cpaelzer | ?: invalid HTTP proxy (http://[fe80::1%eth0]:13128): bad URI | 09:48 |
| cpaelzer | stgraber: maybe another change that came in by 2.0.9-0ubuntu1~16.04.2 ? | 09:53 |
| cpaelzer | that seems to be the diff between good/bad systems | 09:53 |
| cpaelzer | or .1 more likely given the change in .2 is so small | 09:54 |
| rbasak | I suspect various things will attempt to validate the address and not pass through the %eth0 | 09:59 |
| rbasak | I'm not sure there's an easy answer to this. I think it probably makes sense to treat the %eth0 thing as valid in http_proxy, but that would mean fixing all the upstreams and fixing all the different parsers out there. | 10:00 |
| rbasak | cpaelzer: ^ might be worth starting a bug in LP saying "cannot parse %eth0 in http_proxy IPv6 numeric address specifications" or similar and then adding tasks. | 10:02 |
| rbasak | stgraber: ^ any opinion? | 10:02 |
| Zero090 | does anyone have experience with the self hosted analytic platform piwik? | 10:08 |
| cpaelzer | rbasak: stgraber: I found it goign deeper with brauner | 10:10 |
| cpaelzer | it turns out that (recently?) a not "lxd init" install will have LXD_IPV6_PROXY set | 10:11 |
| cpaelzer | and if set all this cascade of things happens: lxd configs the proxy, sets http:proxy in a format that many tools hat and eventually my apt-add-repository fails | 10:12 |
| cpaelzer | it is in some sense broken setup, but since proxy seems to be on after lxd install (but off after an all-enter lxd init btw) more people might run into it | 10:13 |
| cpaelzer | stgraber: not sure it really is a bug or a config issue, let me know if you want a bug to e.g. change the defaults of /etc/default/lxd-bridge | 10:13 |
| cpaelzer | FYI - some related discussion with brauner going on in #server (to somewhat be able to track down logs for you later) | 10:16 |
| rizonz | does anyone know why I cannot ifdown a nic ? it's specified but it replies with... | 10:17 |
| rizonz | ifdown: interface eth1 not configured | 10:18 |
| rizonz | but eth1 is configured | 10:18 |
| rizonz | it is also up | 10:18 |
| Aison | rizonz maybe eth1 is configured by some other service | 10:38 |
| Aison | rizonz, is it listed in /etc/network/interfaces? or is it configured by systemd? | 10:39 |
| rizonz | Aison: yes, it's some double setting | 12:00 |
| === drab_ is now known as drab | ||
| drab | trying my luck again, anybody knows what would trigger a graphical mode for the ubuntu installer? | 12:09 |
| drab | I'm installing from mini.iso,but it still goes into a graphical mode (not GUI tho) | 12:09 |
| drab | and I can't figure out what does that or who would know/where to ask | 12:10 |
| drab | other than trying to look at the source code... | 12:10 |
| tsglove2 | Good morning everyone o/ | 12:45 |
| drab | moin tsglove2 | 12:53 |
| tsglove2 | hey yah drab ! | 12:53 |
| tsglove2 | How's it going over there? | 12:53 |
| drab | let's say it's 5:53 and I've been working for 1hr already :) | 12:53 |
| drab | how's things on your end? | 12:54 |
| tsglove2 | Superb! 8:55am over here | 12:55 |
| tsglove2 | Eager for today's projects. | 12:55 |
| tsglove2 | Plus working on a side project - virtual lab, trying to setup FreeIPA | 12:55 |
| tsglove2 | I like Canonical's Landscape... yet would like a 100% free solution/alternative. | 12:55 |
| tsglove2 | I think that is missing in order to have a big competition to Microsoft's Active Directory. | 12:56 |
| ikonia | tsglove2: foreman or katello | 13:35 |
| tsglove2 | ikonia, thanks! I had not heard of Katello... checking it out now. | 13:36 |
| tsglove2 | Foreman, I read about it... yet... didn't follow through. | 13:36 |
| ikonia | totally open source, more advanced functions than landscape | 13:36 |
| tsglove2 | I have no "actual" deployment at the moment for this FreeIPA install... (or foreman/katello)... yet would like to know the possibilities out there. | 13:36 |
| ikonia | designed for the enterprise | 13:36 |
| tsglove2 | Which one? Foreman? Katello? | 13:38 |
| tsglove2 | oh wow... it's the same project | 13:38 |
| tsglove2 | Katello was moved over to Foreman | 13:38 |
| tsglove2 | ok, got it | 13:38 |
| tsglove2 | https://theforeman.org/ | 13:38 |
| ikonia | sort of | 13:39 |
| tsglove2 | This is good. | 13:40 |
| hateball | That looks neat :o | 13:40 |
| tsglove2 | This is what I want to try. Foreman says it's for servers... yet I want to use it for servers and workstations (to do simple things like --> map user's network drives, coporate-mandated wallpapers, etc etc) | 13:40 |
| tsglove2 | I am going to setup the FreeIPA lab, play with it, then will do the same with Foreman | 13:41 |
| ikonia | tsglove2: works great for workstations | 13:43 |
| tsglove2 | ikonia, Foreman? | 13:44 |
| ikonia | tsglove2: I have it managing 15000 workstations, and another 8000 servers | 13:44 |
| tsglove2 | damn | 13:44 |
| drab | tomreyn: fwiw the answer was fb=false | 13:44 |
| tsglove2 | ikonia, then let me shoot you a question: What I want, is to not have to touch Microsoft Active Directory. I have a small client (12-13 workstations), which they want to move over to Linux. | 13:45 |
| ikonia | ok ? | 13:45 |
| ikonia | tsglove2: are these 12-13 workstations stand alone or part of a bigger network | 13:46 |
| drab | ikonia: can foreman work with preseeding and ansible? | 13:46 |
| tsglove2 | Oh no... sorry, just shooting talk. | 13:46 |
| ikonia | drab: it can | 13:46 |
| drab | I briefly looked at it, but it seemed more complexity than I needed and I already have most of it automated with preseed and ansible | 13:46 |
| drab | so wasn't sure what it'd buy me | 13:46 |
| drab | but we kinda need a ui to give to junior admin | 13:46 |
| ikonia | drab: depends what you want, | 13:46 |
| drab | and I'm still lacking an inventory | 13:46 |
| ikonia | drab: it's much more than a gui | 13:46 |
| ikonia | is full lifecycle management with public API's for external automation | 13:47 |
| drab | ikonia: well the provisioning part I have, pxe boot, configs, etc and ansible takes care of settings up hosts as they shuold be | 13:47 |
| drab | and I have nagios for monitoring of the nodes | 13:47 |
| ikonia | drab: so that takes approx 90 minutes to port into foreman | 13:47 |
| drab | but it's all a tad fragmented | 13:47 |
| ikonia | as foreman just overlays ontop of the pxe process to manage the lifecycle | 13:47 |
| tsglove2 | wow now I want to finish with my FreeIPA lab, so i can jump into Foreman | 13:48 |
| drab | ikonia: will it be able to kickoff jobs too? one of the things I was looking at that I'm missing is implementing rundeck or similar | 13:48 |
| drab | to kick off ansible job through an api | 13:49 |
| ikonia | drab: yup | 13:49 |
| drab | ok, that sounds interesting | 13:49 |
| drab | do you know of anybody using it with ansible? homepage says puppet, chef, salt, but no ansible | 13:49 |
| ikonia | use the katello components and you get things like package lifecycle process etc | 13:49 |
| ikonia | drab: I have many clients, I have it running with ansible, puppet and chef | 13:49 |
| ikonia | (as in many differnt client using it in different ways) | 13:50 |
| drab | good to know, thank you, will try to set it up and maybe hit you up if you don't mind | 13:50 |
| drab | glad I ran into this convo | 13:50 |
| ikonia | sure | 13:50 |
| ikonia | the next release has a terrform extension to the api - so you can call foreman functions from terraform | 13:50 |
| ikonia | (to give you context) | 13:50 |
| drab | so the monitoring is also done with external tools? no wheels reinvented? | 13:51 |
| drab | does it like import data ala pnp4nagios? | 13:51 |
| ikonia | reporting is internal, but "monitoring" is normally an external service | 13:51 |
| drab | ok | 13:52 |
| ikonia | however monitoring tools such as zabbix/nagios/datadog (just examples) all have functions that plugin to it | 13:52 |
| drab | I was also looking at influxdb, migrating to that from nagios pnp | 13:52 |
| ikonia | eg: if a host goes down, replace it | 13:52 |
| ikonia | or scale two more | 13:52 |
| drab | ok, cool, I don't need anything that fancy, just trying to give ppl here something esier to work with so I don't need to do it all myself | 13:52 |
| drab | and some cohesive view and admin point is sorely missing | 13:52 |
| ikonia | I can't give you numbers, but I've used it to create a tiered support system that reduced costs massively | 13:53 |
| drab | I can believe that, I've seen the benefits of stuff like that before, just not specifically foreman, hence trying to find a solution | 13:55 |
| drab | most places I've been at before had something custom due to size/internal stuff | 13:56 |
| drab | so never really looked into it | 13:56 |
| ikonia | you could look at maas too | 13:56 |
| ikonia | I don't think it's as advanced/mature/feaure rich though | 13:56 |
| drab | and from the old days I had the impression it was a provisioning tool for RH... but I guess that was its very beginning | 13:56 |
| drab | I'll take a look, thanks | 13:56 |
| ikonia | it's hard to be dissapointed by it, being honest | 13:57 |
| tsglove | darn it... now I want to try Foreman | 14:11 |
| smoser | rbasak, upload uvtool | 14:28 |
| smoser | ? | 14:28 |
| smoser | to artful. as in.. would you upload uvtool to artful ? | 14:28 |
| rbasak | OK | 14:30 |
| rbasak | Oh | 14:31 |
| rbasak | smoser: artful isn't open yet. | 14:31 |
| rbasak | But yes, I should when it is. | 14:31 |
| smoser | oh. i thought it was | 14:31 |
| stgraber | cpaelzer: that's nothing new, http_proxy being set that way has been happening since before LXD 2.0 | 14:55 |
| stgraber | cpaelzer: and the value we set it is absolutely valid, even a lot of software indeed don't parse it properly | 14:56 |
| stgraber | cpaelzer: starting with LXD 2.3+ we don't have that proxy anymore, instead just not providing the container with an eth0 if the user didn't configure networking, but for the 2.0.x series we won't be doing any change to that behavior | 14:57 |
| smoser | bug 1 | 14:58 |
| ubottu | bug 1 in Ubuntu Malaysia LoCo Team "Microsoft has a majority market share" [Critical,In progress] https://launchpad.net/bugs/1 | 14:58 |
| drab_ | ikonia: do you know if there's anything to use foreman with qemu (without libvirt) and lxd (for which there's no frontend really)? | 15:56 |
| === drab_ is now known as drab | ||
| drab | also, urm, just read through the katello page, this is why I guess I stayed away from it... it just soudns like RH/puppet/yum/ruby stuff | 15:59 |
| drab | does it actually integrate with ubuntu in any decent way? katello's home page starts with "yum and puppet repositories" and continues on that line | 16:00 |
| smoser | rbasak, why did you not think artful was open ? | 16:05 |
| nacc | smoser: #ubuntu-release says archive: closed | 16:06 |
| nacc | smoser: artful has been created but not yet active aiui | 16:06 |
| Ussat | drab, it is very much RH centric | 16:06 |
| smoser | xnox, ^ | 16:06 |
| nacc | smoser: i assume there's some latency for the release copy? | 16:06 |
| smoser | nacc disagrees with you too | 16:06 |
| nacc | heh | 16:06 |
| nacc | it's possible /topic just hasn't been updated yet | 16:06 |
| drab | Ussat: yeah, definitely looks like it, just found a thread where ppl are even asking if katello will ever support debian and it's from last year so not terribly old... | 16:07 |
| drab | not sure how ikonia has it going | 16:07 |
| Ussat | drab, I work with it a lot at work | 16:07 |
| drab | Ussat: so is it like hammering a sqaure peg through a round hole? | 16:08 |
| drab | to make it work with ubuntu that is | 16:08 |
| Ussat | a very small round hole | 16:08 |
| drab | lol | 16:08 |
| xnox | nacc, .... dude irc topic doesn't matter. | 16:09 |
| xnox | yes, it is in pre-open freeze, but that simply means the uploads land into unapproved queue, and they will be accepted by hand at the moment. | 16:09 |
| Ussat | drab, even getting it to work with RHEL involves ancient banned black arts | 16:09 |
| xnox | or once britney is up, they will accept everything pending there. | 16:09 |
| nacc | xnox: i wasn't saying it as fact, tbh -- i was just trying to answer smoser's query, as rbasak may not be around | 16:09 |
| xnox | thus one can upload things into artful. | 16:09 |
| drab | Ussat: ok, thanks for your input | 16:10 |
| smoser | nacc, i just like to have people fight :) | 16:10 |
| * xnox is building artful packages in my ppa, and uploading things into unapproved shortly | 16:10 | |
| drab | Ussat: I guess I'll try it in a VM and see what happens, I'm not wanting too much, just trying to get some central inventory and place to trigger ansible | 16:10 |
| smoser | and now we all have more info on what is open and such, so end result is good. | 16:11 |
| nacc | smoser: +1 | 16:12 |
| Ussat | drab, ya it IS doable, because we have some Ubuntu here also that I need to pound it into | 16:13 |
| Ussat | but not something I am looking forward to. | 16:14 |
| rbasak | smoser, xnox, nacc: yeah, I was going from the topic in #ubuntu-release. I always considered it polite to wait until the customary "it's open" announcement. | 16:24 |
| xnox | rbasak, since proposed migration there is no need to wait for anything. because things are appropriately shoved into unapproved; and archive team flush it when things are ready. | 16:25 |
| xnox | rbasak, we care about developer velocity, and everyone should be able to develop all the time =) | 16:25 |
| xnox | (and e.g. upload to `devel` even if the name is not known yet) | 16:26 |
| rbasak | xnox: perhaps then the archive should never be "closed"? :) | 16:28 |
| === med_ is now known as Guest76746 | ||
| drab | ok, this is really weird | 19:56 |
| drab | it's like a service started inside the chroot is creating stuff in /run outside of the chroot... | 19:56 |
| drab | I'm trying to get ssh going in the chroot after an install, I do an mkdir /var/run/sshd but the dir isn't there when I look | 19:58 |
| drab | but there's a sshd dir and sshd.pid in /run on the host/installer | 19:58 |
| sarnold | can you paste your script? | 19:59 |
| drab | sure, sec | 20:00 |
| drab | sarnold: http://dpaste.com/0T71JHF | 20:02 |
| sarnold | crazy :/ | 20:04 |
| drab | ppl tell me that a lot, yeah | 20:04 |
| drab | :) | 20:04 |
| drab | Apr 21 12:50:24 sshd[8778]: fatal: Missing privilege separation directory: /var/ | 20:05 |
| drab | run/sshd | 20:05 |
| drab | that's in sshlog | 20:05 |
| drab | eeer, syslog | 20:05 |
| drab | the thing is, if I get a shell, chroot /target bash | 20:05 |
| drab | and mkdir /var/run/sshd it works | 20:05 |
| drab | I don't even have to restart sshd | 20:05 |
| sarnold | drab: normally /var/run/ is a symlink to /run, which is a tmpfs.. | 20:06 |
| tarpman | that wouldn't be systemd's shared mounts thing again, would it? | 20:06 |
| sarnold | tarpman: oh hell. it might be. | 20:06 |
| sarnold | drab: read this see if it feels irght https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739593 | 20:07 |
| ubottu | Debian bug 739593 in systemd "systemd makes / shared by default" [Important,Open] | 20:07 |
| tarpman | I was pleased to note schroot's latest upload finally started unsharing mounts automatically | 20:07 |
| tarpman | uh, debian upload | 20:07 |
| drab | so I need to do mount --make-rprivate /var/run/ ? | 20:09 |
| drab | but yeah, it sounds like something is going on, because I thought I saw the symlinks in the root host | 20:12 |
| drab | then chrooted, came out, and they are gone... I swear they were there | 20:12 |
| tarpman | I think it'd be --make-rprivate /run if anything. but I don't remember clearly | 20:14 |
| drab | ok, testing that to see what happens | 20:16 |
| ikonia | drab: I don't think you can use qemu without libvirt, you can use it with lxd with the docker plugin | 20:37 |
| sarnold | ikonia: oh? | 20:44 |
| ikonia | sarnold: ? | 20:45 |
| sarnold | ikonia: I'd love to know more about using qemu via lxd rather than libvirt | 20:45 |
| ikonia | sarnold: you are missing a bit of backscroll / history there, sorry, it's also a bit off topic for here, but I drab was asking about a differnt tool and I was saying you "can't" use qemu without libvirt using that tool, but you CAN use it with lxd via the docker plugin | 20:46 |
| sarnold | ikonia: oh. dang. :/ thanks for the explanation | 20:46 |
| ikonia | sarnold: yeah, I've just re-read what I typed and without the history it does look like an interesting setup | 20:47 |
| drab | sarnold: the mount rprivate made no diff | 20:53 |
| drab | still same error | 20:53 |
| drab | on the host /run has the sshd dir | 20:53 |
| drab | /run inside the chroot does not | 20:53 |
| drab | I've no idea why mkdir is doing nothing when ran from the late-command script | 20:54 |
| drab | it works just fine if I run it manually | 20:54 |
| drab | unless there's some sort of namespace thingie that bug was referring to that I don't get | 20:54 |
| drab | and it exists when I run ssh from the late command, but is delete when the script finshes | 20:54 |
| drab | in which case... wait... maybe I can move the mkdir to the preseed file | 20:55 |
| * drab goes to test that | 20:55 | |
| drab | \o/ | 21:20 |
| drab | so adding a "mkdir /target/run/sshd" from the late-command line worked | 21:20 |
| sarnold | that makes me question everything else in that script | 21:21 |
| tarpman | you're running an sshd inside d-i? o.O | 21:22 |
| drab | sarnold: I think it's just because /run is special | 21:23 |
| drab | and a symlink to a tmpfs | 21:23 |
| drab | everything else in the script works | 21:23 |
| drab | tarpman: yes | 21:23 |
| drab | so the workflow is reboot the box -> pxe boot -> mini.iso install with defaults -> ansible run | 21:24 |
| drab | ->reboot | 21:24 |
| drab | this way by the time the host comes back it's fully configured | 21:24 |
| tarpman | interesting | 21:24 |
| drab | I've had too many problems with post-reboot being wonky | 21:24 |
| tarpman | I tried to do a similar thing in the past, with puppet | 21:24 |
| drab | especially around interfaces and other stuff due to "predictable naming" and netcfg bugs etc | 21:24 |
| tarpman | run a puppet agent in late-command | 21:24 |
| drab | yeah, the thing is, I wanna push to the new instance, not pull | 21:25 |
| tarpman | never got it working reliably, all sorts of weirdness :\ | 21:25 |
| drab | because pulling implies that I have to make the repo available to each instance and that's more problems | 21:25 |
| drab | tarpman: fair enough | 21:25 |
| drab | my very first ansible role completed :) | 21:25 |
| drab | so end-to-end success \o/ | 21:25 |
| drab | sarnold: why would you question the rest of the script? I guess it all makes sense, the sshd was the only service running | 21:25 |
| drab | and the only thing touching a fs on a tmpfs | 21:26 |
| sarnold | drab: if a mkdir in the script didn't do what you expected why would anything else in the sciprt/ | 21:26 |
| drab | so per bug you pointed out I guess there's something going on with namespaces and ssytemd maybe, I don't claim to understand it | 21:26 |
| drab | sarnold: because the mkdir was making ad ir in a "special fs" | 21:26 |
| drab | like I said everything else touches things that are on the actual device mounted at / | 21:26 |
| drab | ie the installed system | 21:26 |
| drab | while that mkdir was touching a symlinked path to a tmpfs location | 21:27 |
| drab | that is shared with the host | 21:27 |
| drab | so it was special in respect everything else | 21:27 |
| drab | s/was/is | 21:27 |
| drab | to everything* | 21:27 |
| drab | brb | 21:27 |
| imightbestupid12 | so i set the chmod 777 / for my webserver running as root and i was wondering what do i need to do to revert those changes? | 23:55 |
| sarnold | chmod 755 / | 23:57 |
| imightbestupid12 | thank you | 23:58 |
| imightbestupid12 | so 755 is the default always right/ | 23:58 |
| sarnold | yes | 23:58 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!