=== ajmitch_ is now known as ajmitch === blackboxsw_bbl is now known as blackboxsw_away [05:32] good morning [05:44] rbasak: the revised edition of the squid tests will be added to squid4 by Amos [05:45] rbasak:for squid3 we have to device on next merge if we want to use them as they are now or if you want to move in the same shrinked version that will be in squid4 then [05:46] rbasak: we can talk later today about that === IdleOne is now known as Guest30325 === dkh is now known as notdaniel [08:45] Good morning [10:43] hey there [10:43] we upgraded trusty to xenial and mitaka to newton [10:44] we are hitting a few 'ulimit' issues [10:44] is there any limit in /proc for the routing of the packets in the namespaces on the network nodes [10:44] ? [11:48] hello [11:49] i wrote lxc launch ubuntu:16.04 and it downloaded 2 things.. adapted-kangaroo and cunning-gelding.. what are these for? Can't find much on google about this.. [11:50] I think... [11:50] Those are the randomy generated named the scripts generate for your two new containers. [11:51] If you chose to name your container it would use that name instead. If you do not specify a name it makes one up. That is based on the whole 30 minutes of lxc related stuff I have typed in on one afternoon. [11:51] :) [11:52] Thanks for the info [11:52] You are welcome. I hope it is at least vaguely correct. [11:52] but who does it download 2 containers when i asked for one? [11:52] The US should start waking up soon. [11:52] why* [11:52] what timezone are you in? [11:52] UK so currently BST which is... GMT+1 or UTC+1 [11:54] I am meant to be doing some testing using lxc for a bug that is probably fixed. I downloaded a something, connected to the container, logged in and then something. [11:54] so it's only one hour difference from where i am [12:00] Dunno. It is 13:0019 [12:00] for me [12:02] it's 14:02 for me [12:06] do i really need multicast on ubuntu server? [12:06] ufw is blocking it anyway [12:07] depends if you are serving stuff that you announce with multicast I guess [12:07] like cups services or whatever [12:10] my modem/router sends multicast requests to my ubuntu.. even tho upnp is disabled on the router xD [12:11] did you reboot the router after doing so [12:11] some routers only re-read configs on reboot, like crappy ISP ones :p [12:12] yes, i rebooted it [12:12] and you havent any smb shares going? [12:12] the ufw log says src=modem ip dest = 224.0.0.1 [12:14] so it's my modem.. maybe i should give my isp a call [12:16] well, upnp is not the only multicast out there, is there? [12:16] I'm thinking of mdns etc [12:17] yes, is why I asked if there were any smb shares or something in the router [12:17] or if it shares a printer perhaps [12:17] or maybe even media sharing [12:18] no, it's a pretty simple config.. it just acts dhcp for my internal lan [12:41] what is session c1 ? [13:04] cpaelzer: thanks for your help on that Nagios issue. added an SRU to the launchpad bug, if there's anything else I can do to help out with resolving that issue please let me know. [13:05] aaronr: thank you for your support [13:06] aaronr: the next thing to do is really create the updated packages [13:06] aaronr: the USBSD even we now de regularly is for people to learn doing so, otherwise this is down to waiting until priority made it happen by someone who already knows how [13:07] aaronr: that is the event I linked on the bug [13:07] whenever I see issue which would perfectly qualify for that even I kind of "offer" it more explcitly [13:07] after all we are a community, so I like teaching how things are done [13:07] i'm totally up for learning about that. :) I've done some packaging for PPAs before so I have a little experience, but I've not worked on any official packages, so not sure what differences there would be [13:07] not only for the sake of not doing them on my own :-) [13:08] lxc exec bash .. and I don't have to enter a root password.. not even when typing it as a regular user.. why? [13:08] aaronr: there are a few things which "shold be done" like on the versioning, on a proper changelog and so on [13:08] aaronr: but in general all of that is out there documented, yet as ducumentation is - it is useless if not guided through a bit [13:09] help-im-stuck: because you are in the lxd group [13:09] i see :o [13:09] yeah i remember that from reading docs before, although it's been a while. am i best off waiting until the next event and then tackling this during that? [13:09] happy to do so if that's best [13:10] aaronr: yeah if nobody else picked it until then that would be great [13:10] aaronr: but if you happen to prefer other timing than every other week on wednesdays let me know [13:10] aaronr: I do not insist on the timing, we jsut happen to try to keep these days free for it [13:11] aaronr: if no one shows up there is always plenty to fill the days, but vice versa if one is active and willing we could do on another day [13:11] aaronr: next event is on 10th May, and if you want to do on another day catch me here and give me a bit headroom to clean up other tasks [13:11] ah okay, in that case when I get some free time am I okay to just pop in here and ask for a little help? if so, I should be able to tackle it this week, or i can just book some time in for may 10th [13:13] aaronr: ok both work, you will find me here [13:13] aaronr: and if I'm not around nacc and rbasak are the others to catch for this [13:14] cpaelzer: okay great. i'll try and tackle it this week at some point then. I'll give one of you a shout once I get a bit of time to look at it [13:14] thanks again for all your help on this [13:15] nacc: I think I found a nice new importer case :-) [13:15] nacc: well I'm talking too early let me check the detauls first and then I'll file something for you [13:17] cpaelzer: well I want to know too :-) [13:17] just found the reasons I think [13:17] rbasak: nacc: https://packages.debian.org/search?suite=sid&searchon=names&keywords=exim4 [13:18] The last version never migrated for Debian on "hurd-i386" it seems [13:18] that makes unstable/sid have 4.89-1 AND 4.89-2 for tools like rmadison and such === blackboxsw_away is now known as blackboxsw [13:19] nacc: rbasak: it seems usd merge picks the first version for the tagging of new/debian [13:19] I'd think it should pick the last in that case [13:19] although it might differ case by case dependign what the reason is [13:20] The importer should be blind to build issues - it sees source only. [13:20] rbasak: nacc: oh I see it is not only the tagging, there isn't even a lpusip/import/4.89-2 [13:20] And 4.89-2 is published in sid, so that's all it should care about. [13:20] Right [13:20] So either it hasn't imported 4.89-2 yet or there's some different issue with it. [13:20] Perhaps the empty directory bug? [13:20] Those should block imports now. [13:20] (until we've fixed it) [13:21] nacc will need to check the importer log to see why 4.89-2 isn't imported. Or we could try importing manually to see. [13:21] rbasak: he imported it a few days ago for me manually [13:22] rbasak: I'm checking what the dates of that upload are, but I think it was in his manual run [13:23] usd.source_information.SourceExtractionException: Empty directory/ies found in source package, which are not representable in git. Please report a bug at https://bugs.launchpad.net/usd-importer. [13:23] So that's the reason. The import would be buggy. [13:23] -2 is form 20th April and his re-upload was on 27th, so it should be there [13:23] oh I see [13:24] rbasak: you said that is "The empty dir bug" it didn't introduce himself to me :-) [13:24] that is bug 1687057 I assume? [13:24] bug 1687057 in usd-importer "git cannot represent empty directories by default" [Undecided,Confirmed] https://launchpad.net/bugs/1687057 [13:24] Yes. I just updated the bug. [13:25] rbasak: lets talk about that later when we sync anyway [13:25] ack [13:25] rbasak: I can pick another package for now [13:58] C-Otto: Just a follow-up on cloud-images.u.c. lost+found has been removed === daniel is now known as Guest47234 === Guest47234 is now known as Odd_Bloke [14:21] hi, does Ubuntu Server want to be the bug subscriber for LP: #1200296 ? [14:21] Launchpad bug 1200296 in ubuntu-meta (Ubuntu) "[MIR] spice-vdagent" [Wishlist,Confirmed] https://launchpad.net/bugs/1200296 [14:23] nacc: for the first time used the "warp up all" usd merge finish, but I get missing debian/control.in [14:23] nacc: is that a known issue or should I file something so you can look deeper? [14:28] jbicha: I don't think ~ubuntu-server wants to be touching the spice stuff at all, but perhaps we have to because qemu :-/ [14:28] I still don't "want" to touch it [14:28] :-) [14:29] I think it'll be between cpaelzer and dpb1 to decide :) [14:30] need to read on the history of those decisions first [14:30] and dpb1 likely is a bit busy atm [14:30] I'll keep the bug open to look at it [14:31] there are also more MIRs on accelerated 3d on virt, but that was new and then full of CVEs at first [14:31] so that didn't pass yet either [14:31] even Debian dropped it again after a few weeks === Ussat-1 is now known as Ussat [15:43] hi there, when I do a df, I see following: /dev/md2 1.8T 1.7T 0 100% / [15:44] df -i gives me /dev/md2 121561088 27353493 94207595 23% / [15:45] how come the harddisk as 100GB free but I can't write any more data to it? [15:47] ndee: what message do you get when you try to write? [15:47] nacc: I deleted now some files and I can write again [15:50] nacc: but how can the display in "df" be off for about 100GB? [15:50] ndee: you haven't said any error messages or what you were trying to write [15:50] ndee: so i don't know [15:53] nacc: the message was: No space left on device [15:54] ndee: does that filesystem has reserved space for the root user? By default, unless you changed that during mkfs, it will [16:01] ndee: if it's an ext* file system: sudo dumpe2fs -h /dev/md0 | grep ^Reserved [16:01] md1 rather in your case [16:01] i mean md2 [16:04] tomreyn: umpe2fs 1.42.9 (4-Feb-2014) [16:04] Reserved block count: 24311012 [16:04] Reserved GDT blocks: 908 [16:04] Reserved blocks uid: 0 (user root) [16:04] Reserved blocks gid: 0 (group root) [16:04] 24311012 * ${block_size} [16:04] block_size is further down, remove the grep and use |less [16:05] the block_size is 1kb [16:05] ah no, 4096 [16:05] jup, that matches it around [16:05] thanks! [16:06] you can change that setting with tune2fs [16:06] -m (percentage) or -r (actual count) [16:26] ahasenack: if you ahve any questions on the nginx triage guidelines up there, let me know - I know powersj, rbasak, and others had asked me how to handle certain triage cases so I put the special cases up :p [16:27] (since some of them are "Not Going To Happen" and we didn't want to step on any workflows I have in place heh) [16:27] (in case that wasn't clear during the meeting, I didn't want to steal the entire stage for too long :P) [16:27] teward: you are quite the diva :) [16:28] nacc: i'm semi-attention-whorey if that's what you mean :P [16:28] teward: lol [16:28] just glad I resolved the FTBFSes with the assist from Debian heh === xibalba_ is now known as xibalba === JanC is now known as Guest15747 === JanC_ is now known as JanC [17:21] I have an ubuntu server without a gui, but I want to install a minimal version of the xubuntu desktop on it. What packages do I need for that? [17:28] teward: oh, it's ok, I just wanted to know what the "template" for the mysql triage page would look like, that's all [17:28] ahasenack: i think the 'template' is slightly different [17:28] in that there's no real template. [17:28] but if the MySQL page uses the nginx page i wrote as a start point, that's cool :) [17:29] I think that's the intention :) [17:32] https://wiki.ubuntu.com/ServerTeam/mysql is our start [17:32] somehow my quick attempt with the NGINX page happened to make the template for mysql heh [17:38] dougquaid: apt install xubuntu-core or xubuntu-desktop at a guess [17:47] <__Yiota> ok, is anyone experiencing issues with services on 16.04? [17:50] __Yiota: 'services'? [17:50] <__Yiota> yes [17:50] <__Yiota> pgpool2, nginx, haproxy [17:50] <__Yiota> they fail to start sometimes [17:50] being more specific next time might help. [17:50] __Yiota: and what 'issues' [17:50] __Yiota: your statement is so vague as to be contentless [17:50] I haven't had issues with 'nginx', and 'fail to start' suggests you should be looking at error logs lol [17:51] <__Yiota> that's the thing, the error logs don't show anything [17:51] <__Yiota> pgpool2 logs, haproxy logs, all clean [17:51] <__Yiota> sudo service haproxy status shows it has started without errors [17:51] <__Yiota> I guess the issue is we built our cookbooks on 14.04 [17:52] __Yiota: don't rely on that [17:52] <__Yiota> we upgraded without testing, pinning these issues down is hard [17:52] `sudo systemctl -l status [SERVICE]` [17:52] <__Yiota> is there a system.d log? [17:52] <__Yiota> thank you teward [17:52] get the actual useful data from there lol, stop relying on upstart stuff. [17:52] or dedicated service error log files (for example, /var/log/nginx/error.log heh) [17:52] <__Yiota> I see [18:25] <__Yiota> hi [18:25] <__Yiota> I created an ssh tunnel to my node's ip [18:25] <__Yiota> I pointed chrome to the SOCKS proxy on localhost [18:25] <__Yiota> everytime I create the SSH tunnel, no other computer except mine can access it [18:26] <__Yiota> I've closed the SSH tunnel and I can still access the node via DNS via load balancer [18:26] <__Yiota> and im also able to access it via the node's ip [18:26] <__Yiota> any ideas? [18:30] __Yiota: autossh? [18:31] <__Yiota> ssh -D 8080 -C -N me@node_ip [18:31] try autossh === kooldavi_ is now known as kooldavi [18:53] so.. i'm trying to create a lxc vpn and i've done so.. it's working but i don't know how to check for dns-leaks and such from the commandline.. any ideas? [18:55] help-im-stuck: there's a website listed in https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1685391 that may be helpful; I've never tried it but someone else recentlypointed it out.. [18:55] Launchpad bug 1624317 in systemd (Ubuntu) "duplicate for #1685391 systemd-resolved breaks VPN with split-horizon DNS" [High,Confirmed] [18:56] so it's broken? [18:56] no idea [18:56] i block my isp:s dns servers with ufw [18:57] be sure to block tcp too [18:57] yes, both [18:58] but in tcpdump, when i boot my lxc and it connects.. i can see that it talks to isp dns:es.. [19:00] but after that it's all ok [19:00] maybe it should be like that.. === CodeMouse92 is now known as codemouse92__ === codemouse92__ is now known as CodeMouse92__ [19:12] I would like to have a vpn+dnscrypt in one lxc.. that acts like a nat router and give other lxc:s ip:s.. === CodeMouse92 is now known as CodeMouse92__ [19:29] how about the -new- lxd and lxc.. no more config files to edit and everything should be done by lxc command ? [19:30] lxc start .. etc [19:31] are there any additional info about this new config system? [19:40] help-im-stuck: https://linuxcontainers.org/lxd/introduction/ should be a starting point for everything lxd related [19:44] * mason bookmarks that. [19:48] been reading there all day :) [20:02] This is also reading through if you are new to lxd 2.0 https://stgraber.org/2016/03/11/lxd-2-0-blog-post-series-012/ [20:02] worth reading* [20:10] powersj, thanks [20:11] help-im-stuck: lots of good blog posts there indeed [20:14] I am using ubuntu 16.04-server and am having issues with a vsftpd(secure) connection. Would it be ok to ask questions pertaining to that here or is there a btter spot? [20:14] ufw is NOT the issue btw. [20:18] Anyways https://gist.github.com/skittishtrigger/889dd213e7ab6eba93b573ca06760f7b is my current setup. Initial tests before securing went fine but after adding the chroot list connections started timing out (connected but timeout after 20sec) [20:20] nevermind. I apologize. I found a better channel for that. thank you thoguh. [21:06] hi, ive got 2 ubuntu servers (1 14.04 and 1 on 16.04) when i SSH into them the 14.04 serv has tab-autocompletion whilst 16.06 doenst, any experience with it? [21:09] Dynamiiic: apt install bash-completion [21:10] apt list | grep auto-complete [21:10] WARNING: apt does not have a stable CLI interface. Use with caution in scripts. [21:10] auto-complete-el/xenial,now 1.3.1-2 all [installed] [21:11] yet it wouldnt auto-complete parameters like apt-get (install) like 14.04 would [21:11] it would only complete apt-get [21:12] Dynamiiic: auto-complete-el is completion for emacs. not for your shell. [21:12] apt-get install bash-completion [21:12] bash-completion is already the newest version (1:2.1-4.2ubuntu1.1). [21:13] is your shell bash? [21:14] oh wow. [21:14] i simply connect thru ssh, the 14.04 server seems to start in bash whilst 16.06 doenst [21:14] excuse me for the troubles [21:14] if you want to change your login shell to bash: chsh -s /bin/bash [21:15] dont recall doing that on the 14.04 one tho, was that default back then? [21:15] it should be default on 16.04 as well. I can't say why your 16.04 server would be different [21:16] maybe some difference in how your user was created/configured. idk [21:16] hmm, etc/passwd shows: [21:16] $uname:x:1000:1000:,,,:/home/$uname:/bin/bash [21:16] ok. if you ssh in and do echo $SHELL - does that say /bin/bash? [21:17] or ls -l /proc/$$/exe ? [21:17] check your ~/.bashrc, the lines for enabling completion may be commented out [21:17] I've been porting my own .bashrc for so long I have no idea what the default looks like any more :) [21:18] $uname@hostname:~$ echo $SHELL [21:18] $uname@hostname:~$ ls -l /proc/$$/exe [21:18] lrwxrwxrwx 1 $uname $uname 0 May 2 23:17 /proc/8581/exe -> /bin/bash [21:18] $uname@hostname:~$ [21:18] oh, echo $SHELL returns /bin/bash [21:18] well, on the 14.04 install its commented out but still works [21:19] tried ucommenting on 16.06 but that didnt do the trick [21:19] un* [21:19] takes effect after you either source ~/.bashrc or log out and in again [21:19] not sure whether the default /etc/bash.bashrc has completion uncommented or not [21:20] default its uncommented i believe [21:30] guess i didnt remember to source ~/.bashrc after editting [21:30] fixed, thanks alot [21:30] strange it wasnt on by default tho [21:31] also, if running a small wordpress site on a low-memory server would you guys recommend nginx or apache? [21:34] whichever you understand better [21:34] I prefer nginx because it feels simpler in all respects [21:34] i can setup both but looking for performance [21:34] then make it a high-memory server? :) [21:35] I suspect wordpress caching / database performance may matter more than which front end you're running [21:35] haha, running it for a small company that belongs to a friend, he doenst want too much hosting costs/year so i suggested i´d setup a server for him [21:35] a 256MB serv should be sufficient for his traffic, but think nginx is better optimized [21:36] that would be my expectation too but I can't promise that it's based on anything scientific :) [21:36] it's hard to go wrong with nginx [21:57] hello people. I think have completely broken my php installation and need help. this is the error that i'm getting: https://pastebin.com/Y0w10T1s [21:59] vagvaf: eww. I think I'd aim for apt-get purge for all those php things and try to return to a clean slate quickly. Be sure to backup whatever -is- configured first if you've got anything configured.. [22:00] sarnold, i don't. let me try it [22:00] hmm, missing things [22:01] just phpmoddisable or whatever all the stuff [22:01] that should fix it up [22:01] well, fix fpm so it runs [22:01] oh? I figured it was unhappy at the apt level too [22:01] probably what is hanging it all up [22:01] it is, cause the install package for fpm isn't sucessful cause the restart of fpm fails [22:02] so making it start clean, will fix it up and it will fix up the other stuff [22:02] and likely have only one thing to fix afterwards [22:02] the big question I have, is why have mod-php and fpm installed at the same time [22:02] they are redundant [22:02] or maybe, disable fpm from systemd so it doesn't attempt to start it [22:03] but that doesn't always work out during package update time [22:03] so, i purged php.* and reinstalled it. i get no errors anymore but my localhost/info.php returns a blank page [22:04] well, could do that too :) [22:04] now what did you install? [22:04] mod-php or php-fpm? [22:04] you can only use one or the other, or even php-cgi [22:04] you can have them all installed, but useless to attempt to use more than one [22:05] php php-common php7.0 php7.0-cli php7.0-common php7.0-fpm php7.0-json php7.0-opcache php7.0-readline [22:05] ok, did you configure apache to use php-fpm? [22:06] patdk-lp no..i will look for it [22:06] see if a php file is in /etc/apache2/mods-enabled too [22:06] one of those might have pulled in mod-php [22:06] not sure if php does or not [22:07] if you wouldn't have specified all those, but let it pull in dependencies itself, yo uwouldn't get into this whole mess so badly :) [22:07] but it being blank is odd [22:07] i just installed php it drew everything else by itself ;) [22:07] unless php is working [22:08] what do you mean just installed? [22:08] apt-get install php7.0-fpm [22:08] that wouldn't pull in cli [22:08] you might need cli, but not websites [22:08] apt-get install php [22:08] ya, that is too generic [22:09] you didn't tell it what php yo uwanted so it made a guess [22:09] cli/cgi/fpm/mod [22:09] i don't see a php file in /etc/apache2/mods-enabled [22:10] ok [22:10] restart apache [22:10] then tell is what happens [22:10] looks like, apt-get install php, picks fpm/mod/cgi [22:10] likely fpm first [22:10] to help your sanity, if you just want it simple [22:11] apt-get remove php7.0-fpm; apt-get install libapache2-mod-php7.0 [22:11] aaah thanks :D [22:11] mod-php is much easier, but ends up using more memory normally [22:11] and you have to be careful what apache threading model you use [22:11] but it's *simple* [22:11] if you just want to leave most htings at default settings [22:12] fpm is great, but does require a lot of manual work, but is highly flexable :) [22:13] still blank page [22:13] what does apache log say? [22:14] in /var/log/apache2/, likely access/other/error [22:14] or is this server public and I can test? [22:15] no it's not public [22:15] hold on [22:16] this is the message: https://pastebin.com/1AW8y41H [22:16] nothing in the other files? [22:16] hold on [22:18] it worked! [22:18] could have been browser caching issue [22:20] thanks a lot!! [23:50] since when do Xenial LXD images come with SSH password auth disabled by default