[00:19] <jrwren> lol, this conversaton is bad.
[00:19] <jrwren> I'm so sorry.
[00:19] <jrwren> What I meant was all the wikimedia things.
[00:19] <jrwren> and it is your responsibility because you are the most awesome wikimedia person.
[14:48] <greg-g> jrwren: :)
[17:04] <jrwren> i need help. I have a linux server install that rebooted. I cannot find what triggered the reboot. Syslog doesn't show anything. The only idea I have left is that it has been rooted. I can find no evidence that this is true either.
[17:04] <jrwren> It was cleanly shutdown. There is no OOM killer message. Syslog shows services cleanly stopping but does not show what triggered the shutdown.
[17:12] <jrwren> bah, its been offline, unplugged from inet for days. Still, I'd like to know why it rebooted.
[17:15] <cmaloney> jrwren: Where is the server located? Local or cloud provider or ... ?
[17:17] <jrwren> my basement.
[17:17] <jrwren> an old laptop
[17:17] <cmaloney> I'd check thermal issues
[17:17] <jrwren> oh! good call!
[17:17] <cmaloney> those might not make it to the OS level
[17:18] <cmaloney> Barring that it could be a memory issue that wasn't logged
[17:18] <cmaloney> unfortunately I've had a number of reboots that haven't left anything of consequence in the logs after reboot
[17:19] <jrwren> this is just so weird that it was a clean shutodwn.
[17:19] <cmaloney> That is weird
[17:19] <cmaloney> no FSCK at all?
[17:19] <jrwren> something triggered a "reboot"
[17:19] <cmaloney> Ubuntu server?
[17:19] <jrwren> i don't nkow. I didn't see it come up. if it did fsck on reboot, it did so cleanly.
[17:19] <jrwren> Yes, it is ubuntu
[17:19] <cmaloney> Check if there was a security package installed that required a reboot
[17:19] <cmaloney> you might have that turned on
[17:20] <cmaloney> not sure if it'll wait for permission to reboot in that case
[17:20] <jrwren> maybe, but, why now? when the package had to have been installed for a week since its been offline for a week or so.
[17:20] <jrwren> the timing makes no sense.
[17:20] <cmaloney> I'm just grabbing at straws now
[17:21] <jrwren> *dough*
[17:21] <jrwren> authlog is separate from syslog
[17:21] <jrwren> *doh*
[17:21] <jrwren> May  6 11:07:00 cloudy systemd-logind[2010]: Power key pressed.
[17:21] <jrwren> May  6 11:07:00 cloudy systemd-logind[2010]: Powering Off...
[17:21] <jrwren> May  6 11:07:00 cloudy systemd-logind[2010]: System is powering down.
[17:22] <cmaloney> hah
[17:22] <cmaloney> that's awesome
[17:22] <jrwren> my kid pressed the power key and then lied to me!!!
[17:22] <cmaloney> ruh roh
[17:22] <cmaloney> time to play the "do you have something to tell me" game
[17:24] <cmaloney> "You can lie to your parents, but you damn well better not lie to the sysadmin"
[17:28] <jrwren> she is a good liar.
[17:28] <jrwren> i don't know how to get the truth from her.
[17:44] <cmaloney> Only way I can think of is to make the truth less painful than the lie
[17:44] <cmaloney> but I'm not sure how to enact that