| cpaelzer | good morning | 05:36 |
|---|---|---|
| === jelly-home is now known as jelly | ||
| yossarianuk | hi - I have a question about the default KSM setting (i.e ksm/kvm) | 10:15 |
| yossarianuk | i.e -> /etc/default/qemu-kvm - has '# Set to 1 to enable KSM, 0 to disable KSM, and AUTO to use default settings.' | 10:15 |
| yossarianuk | What are the default (AUTO) settings ? | 10:16 |
| === treaki_ is now known as treaki | ||
| yossarianuk | Hi - we are setting up an office squid proxy / gateway using Ipfire in a KVM vm (using ubuntu 16.04 as the KVM host) - as there is going to be a lot of network traffic through the vm is it a good idea to enable 'vhost_net'? | 10:44 |
| yossarianuk | I notice in Ubuntu the default setting in /etc/default/qemu-kvm is 'VHOST_NET_ENABLED=0' | 10:44 |
| yossarianuk | so logically should I set that to 'VHOST_NET_ENABLED=1'? | 10:45 |
| lordievader | Good afternoon | 10:51 |
| yossarianuk | ust wondering if it is more sensible to enable or disable in my situation (i.e a proxy/gateway vm that all office traffic will be flowing through) | 10:59 |
| cpaelzer | hi yossarianuk - just realized I answered you in #ubuntu already | 11:06 |
| cpaelzer | TL;DR yes I'd recommend vhost_net but it is very likely already loaded | 11:06 |
| cpaelzer | the config you refer only checks if qemu-kvm loads it which is a failsafe mechanism, but some other triggers might load it anyway | 11:06 |
| cpaelzer | so they do for me at least | 11:07 |
| yossarianuk | again thanks | 11:07 |
| cpaelzer | and KSM auto is enable it on bare metal but not in guests | 11:08 |
| ezethnesthrown | Hello, I have a problem. Please see at http://paste.ubuntu.com/24536348/ | 11:53 |
| cpaelzer | nacc: not sure IIRC - have you reworked the samba sections back then? any idea ^^ | 12:00 |
| cpaelzer | rbasak: I'm trying to hunt down an issue with uvtool that tries to break my virt tests all too often - after a while I'm now down to systems not agreeing on the images available | 12:00 |
| cpaelzer | rbasak: the systems share /var/lib/uvtool/libvirt (via container shared paths) | 12:01 |
| cpaelzer | so what is in one is also in the other | 12:01 |
| cpaelzer | that worked fine so far, but since I recently stared to have one more system that does stop sharing these paths by bindmounting something else over it things break too much | 12:01 |
| cpaelzer | rbasak: I only now start to dive into uvtool for this trying to understand what other paths they might read in those cases | 12:02 |
| cpaelzer | rbasak: but if something comes to your mind please let me know | 12:02 |
| teward | rbasak: cpaelzer: powersj: nacc: any of you going to be at the server team meeting tomorrow? | 12:02 |
| cpaelzer | teward: I would be there I think | 12:03 |
| cpaelzer | there is a chair pointer pointing to me | 12:03 |
| teward | cpaelzer: well i won't be able to be at the meeting tomorrow - i have a more important meeting at my job - make a note on the action item for me re: nginx release notes to push it to the next meeting for a status checkin | 12:04 |
| teward | i've got the bulletpoints on a notepad document, i've not gotten much further | 12:04 |
| teward | please :) | 12:04 |
| cpaelzer | ok, thanks teward for keeping us updated | 12:04 |
| teward | yeppers. | 12:04 |
| teward | Unrelated, anyone know how I can have a one-to-many SSH connection with one ingress and multiple backends based on the requested hostname? | 12:05 |
| teward | i'm not 100% clear on how to multiplex SSH that way, but... | 12:05 |
| teward | thought I'd ask :) | 12:05 |
| cpaelzer | teward: I think cluserssh does what you want? | 12:07 |
| teward | ooh prettu | 12:08 |
| teward | pretty* | 12:08 |
| cpaelzer | I'm not clear on "multiple backends based on the requested hostname" but it gives you one-to-many ssh | 12:08 |
| teward | cpaelzer: i think it'd be best if I diagram it | 12:08 |
| cpaelzer | That tool is my poor mans mass deployment helper | 12:08 |
| cpaelzer | sometimes | 12:08 |
| teward | I have a server with multiple LXD containers on it, each with SSH. To get into it i have to first SSH to the host machine, then SSH into the specific container | 12:08 |
| teward | i'd like to cut out one of the 'hops' in what commands i type, if possible. | 12:08 |
| teward | s/into it/into one container/ | 12:09 |
| cpaelzer | yeah ok that works as well | 12:09 |
| cpaelzer | you need a proxy ssh setup on your client | 12:09 |
| teward | cpaelzer: any idea on how i'd go about that? | 12:09 |
| teward | i've googled but am head-scratching | 12:09 |
| cpaelzer | to pass any command to foo-container actually to the host and fromt here to the container | 12:09 |
| cpaelzer | I can paste a snippet, let me search my notes | 12:09 |
| teward | thank you kindly :) | 12:09 |
| teward | i'm trying to take the fifteen or so VPSes and consolidate on one massive system heh | 12:10 |
| teward | allllll the services >:D | 12:10 |
| cpaelzer | teward: that matches what I did and has some nice text around https://www.cyberciti.biz/faq/linux-unix-ssh-proxycommand-passing-through-one-host-gateway-server/ | 12:11 |
| cpaelzer | combine that with cluserssh and you can do stuff on all containers at once | 12:11 |
| teward | nice. | 12:12 |
| teward | cpaelzer: that'll help because now i can create SSH configs for each 'container' heh. I'll just have to set up some command evils for the SSH without-password part to the containers... but that shouldn't be too hard. | 12:13 |
| teward | since the containers aren't directly SSH exposed to the 'net... :P | 12:13 |
| cpaelzer | exactly | 12:13 |
| teward | (CBA to buy a /24, wayyyyyyy too expensive) | 12:13 |
| teward | s/buy/rent/ | 12:13 |
| teward | ah heck, my license for avast expired. | 12:13 |
| teward | damn, that means my mailserver has no AV protection | 12:13 |
| teward | ah well after my next big paycheck comes in that won't be an issue heh | 12:14 |
| teward | (it's $150/yr. Not bad but outside my current budget) | 12:17 |
| ezethnesthrown | Hello, I have a problem, the text is quite long. Please see at http://paste.ubuntu.com/24536348/ | 12:17 |
| rbasak | cpaelzer: that's all that uvtool cares about. But it uses libvirt's API to manipulate everything inside images/, and libvirt has its own in-memory cache of what that directory contains IIRC. So that could fall out of sync. | 12:26 |
| cpaelzer | rbasak: interesting hint, thanks | 12:27 |
| rbasak | cpaelzer: libvirt does support multiple image pool types. There might be one that is sufficiently networked? | 12:28 |
| rbasak | Then you'd only need to bind mount metadata/ | 12:28 |
| rbasak | Once uvtool-libvirt is installed I doesn't touch the pool configuration again IIRC. | 12:28 |
| rbasak | (except perhaps on removal/purge) | 12:28 |
| cpaelzer | that might be a workaround | 12:28 |
| rbasak | If it is indeed the problem. | 12:28 |
| cpaelzer | but surely implementing that is as work intensive as understanding what goes on with the current one | 12:28 |
| cpaelzer | and understanding the current issue might reveal something that puzzles me some time now | 12:29 |
| cpaelzer | here it seems reproducible | 12:29 |
| rbasak | That makes sense | 12:29 |
| cpaelzer | so I want to know | 12:29 |
| cpaelzer | I can in that env e.g. show that query reports no images, and the subsequent sync fails because the file is already there | 12:29 |
| cpaelzer | rbasak: so effectively an affected guest can not make it working again (other than rm'ing files) | 12:30 |
| rbasak | IIRC, query reflects metadata/ exactly | 12:33 |
| rbasak | Is it doing that in your failure case? | 12:33 |
| cpaelzer | rbasak: output is different on two systems sharing the dir | 12:34 |
| rbasak | The actual image can be there when the metadata is not. This is for images being removed while still being used. | 12:34 |
| cpaelzer | I verified they are still in sync (md5sums, touched files appear, ...) | 12:34 |
| rbasak | cpaelzer: that's puzzling. I can jump into a hangout to do some debugging with you if you can reproduce that difference right now? | 12:37 |
| rbasak | cpaelzer: though can you just double check that /var/lib/uvtool/libvirt/metadata/ really is the same directory on both affected machines? | 12:38 |
| cpaelzer | rbasak: it is active right now if you have a few minutes I'd be happy | 12:38 |
| cpaelzer | surely faster with more eyes/brains | 12:38 |
| ezethnesthrown | Hello, I have a problem, the text is quite long. Please see at http://paste.ubuntu.com/24536348/ | 13:07 |
| ezethnesthrown | Hello, I have a problem, the text is quite long. Please see at http://paste.ubuntu.com/24536348/ | 14:06 |
| cpaelzer | rbasak: fyi new test runs the shared screen is now gone due to cleanup | 14:12 |
| === med_` is now known as med_ | ||
| ezethnesthrown | OK nevermind my bad | 14:30 |
| === tyhicks` is now known as tyhicks | ||
| rbasak | cpaelzer: np | 14:38 |
| ahasenack | ezethnesthrown: sorry about your problem with the smbldap guide | 15:00 |
| ahasenack | ezethnesthrown: I hope to get to that area of ubuntu-server pretty soon | 15:00 |
| ahasenack | in fact, I want to update this to current ubuntu: https://github.com/panlinux/openldap-dit/tree/master/doc (just imported it from LP) | 15:02 |
| nacc | ezethnesthrown: aiui, you have to create the file | 15:30 |
| nacc | ezethnesthrown: an example is shipped with smbldap-tools | 15:30 |
| nacc | ezethnesthrown: as documented in the README.Debian file | 15:33 |
| nacc | ezethnesthrown: specifically SMBLDAP-TOOLS bit | 15:33 |
| nacc | ahasenack: so i think a short term fix is to copy out those bits into server guide (that you need to take the example config and do stuff to it to match your local install) | 15:34 |
| ahasenack | yeah | 15:35 |
| ahasenack | I think I'll start on that after this samba fix | 15:35 |
| nacc | ahasenack: thanks | 15:35 |
| cpaelzer | ahasenack: nacc: but next serverguide release is way way out | 15:39 |
| ahasenack | we can update the current one, right? | 15:39 |
| ahasenack | i.e., fix it | 15:39 |
| cpaelzer | ahasenack: nacc: I had another case which I wanted to fix in doc, but that will need time | 15:39 |
| nacc | cpaelzer: agreed, i'm saying as a fix to the current release | 15:39 |
| nacc | iirc, pmatulis has taken such thing with bugs | 15:39 |
| cpaelzer | ahasenack: no it only updates the user readable html/pdf on explcit releases | 15:39 |
| cpaelzer | yes you can "bug" them and ask | 15:40 |
| nacc | that's how i got the original serverguide fixed | 15:40 |
| cpaelzer | they will share doc release plans | 15:40 |
| nacc | hrm, maybe i'm misremembering | 15:40 |
| cpaelzer | nacc: yeah I pushed a few dpdk things that way as well | 15:40 |
| cpaelzer | nacc: but | 15:40 |
| cpaelzer | nacc: recently I wanted to add some libvirt things and got told that it will really take a while | 15:40 |
| ahasenack | seems silly not to be able to correct docs. It's not a rewrite | 15:40 |
| nacc | that policy seems less in the best interest of our users | 15:40 |
| nacc | oh adding things is diifferent, imo | 15:40 |
| ahasenack | right | 15:41 |
| nacc | fixing bugs should be allowed, if it's not, i think we should bring it up to the doc team | 15:41 |
| cpaelzer | I agree, but my case wasn't important enough to set me into the mood to punch this through | 15:41 |
| ahasenack | it has to have the SRU spirit | 15:41 |
| nacc | cpaelzer: ack, i think i saw your case | 15:41 |
| cpaelzer | yeah, "SRU spirit" covers most of it | 15:41 |
| cpaelzer | not random doc changes | 15:41 |
| nacc | cpaelzer: right, in this case, a missing step (at least_) that causes the next step to fail | 15:42 |
| cpaelzer | ahasenack: lets ask on ubuntu-doc ML how/if they would agree to handle those | 15:42 |
| cpaelzer | and share/discuss the feedback in the IRC meeting | 15:42 |
| cpaelzer | and drive via actions from there | 15:42 |
| nacc | +1 | 15:42 |
| cpaelzer | ahasenack: would you do the initial mail to them or should I? | 15:42 |
| ahasenack | cpaelzer: I think you have more context now | 15:44 |
| cpaelzer | hehe | 15:44 |
| cpaelzer | ok | 15:44 |
| cpaelzer | leave a task open and you'll get it :-) | 15:44 |
| ahasenack | np :) | 15:45 |
| cpaelzer | ahasenack: nacc: I set you to cc | 15:51 |
| ahasenack | thx | 15:51 |
| * ahasenack -> lunch | 15:51 | |
| cpaelzer | I was in a hurry so enjoy my surely intersting fast writeup :-) | 15:51 |
| nacc | cpaelzer: ack | 15:51 |
| === a1berto_ is now known as a1berto | ||
| cpaelzer | nacc: I see you pushing all the merges to done, if you could take an eye on the three in the review queue for the importer that would be very kind | 16:08 |
| nacc | cpaelzer: yep, im swtiching tack this week back to the importer and will review | 16:08 |
| cpaelzer | nacc: in order of complexity dovecot, ntp, strongswan | 16:08 |
| nacc | cpaelzer: tbh, for these three, on some level, im trusting you | 16:08 |
| cpaelzer | I trust myself as well :-) | 16:08 |
| nacc | cpaelzer: in that, you've done the merge, i just need to get them into the importer, right? | 16:08 |
| nacc | cpaelzer: or do you need a full merge review as well? | 16:08 |
| cpaelzer | nacc: the poitn I learned is that there are always issues - and we don#t need to stop the line but discussing them is step one | 16:09 |
| nacc | cpaelzer: ack, ok -- one takes longer than the other :) | 16:09 |
| cpaelzer | nacc: I don't need a formal review, yet on strongswan a pair of eyes would be nice | 16:09 |
| nacc | cpaelzer: and, on some level, if you could upload these (and maybe you can?) you aren't technically gated by me normally | 16:09 |
| nacc | cpaelzer: ack, strongswan was complicated before | 16:09 |
| nacc | rbasak: what state is your linter in? | 16:10 |
| cpaelzer | nacc: there is a lot of "known to drop delta" left that I made more clear in the MP and such | 16:10 |
| cpaelzer | nacc: I'd want to upload them tomorrow, so getting them into the importer and tagged would be nice | 16:10 |
| cpaelzer | nacc: tests are all good, so the issues left shoudl be easily possible as ubuntu2 or next-cycle as applicable | 16:11 |
| rbasak | nacc: not really usable yet, sorry. I just have pieces. | 16:11 |
| rbasak | nacc: it doesn't do merges at all yet. | 16:11 |
| nacc | rbasak: np, just checking :) | 16:11 |
| nacc | cpaelzer: ok, i'll bump it up my list | 16:12 |
| rbasak | nacc: but the script in wip/review can be used for merges. | 16:12 |
| cpaelzer | fyi I don't have merge bugs on these as they were trivial, but integrated that into my process so I'll in future open one in any case I think | 16:14 |
| nacc | cpaelzer: i'm also tempted to just give you upload rights to the git repos | 16:15 |
| nacc | or wait until we figure out where upload tags will live properly | 16:15 |
| thatstevecena | Hello. I'm having problems with Ubuntu 14.04LTS, Postfix & DKIM failing to verify signatures. My install runs fine for a few hours but ultimately starts failing signatures due to "no padding data". Has anyone seen this? | 17:31 |
| ezethnesthrown | What does this mean [[ bash: /usr/sbin/smbldap-populate: cannot execute binary file: Exec format error ]] | 17:44 |
| nacc | ezethnesthrown: what does `file /usr/sbin/smbldap-populate` say? | 17:44 |
| ezethnesthrown | Tried 'cat' it now the CLI broke | 17:45 |
| ezethnesthrown | smbldap-populate is a command | 17:45 |
| nacc | ezethnesthrown: yes, i know | 17:45 |
| nacc | ezethnesthrown: can you please tell me what the command i asked for says? | 17:46 |
| nacc | ezethnesthrown: if it's a binary, you don't wnat to `cat` it | 17:46 |
| ezethnesthrown | It says exactly that. Straight up error | 17:46 |
| nacc | ezethnesthrown: what? | 17:47 |
| nacc | ezethnesthrown: it says "Straight up error"? | 17:47 |
| ezethnesthrown | No | 17:47 |
| ezethnesthrown | There's no prompt | 17:47 |
| nacc | ezethnesthrown: `file` doesn't output such a thing | 17:47 |
| ezethnesthrown | I'm sorry. I'm a bit lost here | 17:48 |
| nacc | ezethnesthrown: so you ran `cat` on a binary? you probably need to start a new terminal session | 17:48 |
| ezethnesthrown | Rebooted | 17:48 |
| nacc | ezethnesthrown: ok, that was probably unnecessary | 17:48 |
| nacc | ezethnesthrown: run `file /usr/sbin/smbldap-populate` | 17:48 |
| ezethnesthrown | [[ /usr/sbin/smbldap-populate: gzip compressed data, max compression, from Unix ]] | 17:49 |
| nacc | well you can't run a data file | 17:51 |
| nacc | ezethnesthrown: what version of ubuntu? | 17:51 |
| ezethnesthrown | nacc: 16.04.2 LTS | 17:51 |
| ahasenack | rbasak: hey, where is the merge report output again? | 17:51 |
| ahasenack | I had http://people.canonical.com/~rbasak/merges.html from before you had commit access | 17:51 |
| nacc | ezethnesthrown: http://paste.ubuntu.com/24538078/ is what it should output | 17:52 |
| nacc | ezethnesthrown: that's from a fresh 16.04 container | 17:52 |
| nacc | ezethnesthrown: not sure what you're using | 17:52 |
| nacc | ezethnesthrown: `apt policy smbldap-tools` in a pastebin please | 17:52 |
| rbasak | ahasenack: http://reqorts.qa.ubuntu.com/reports/ubuntu-server/merges.html but it looks like the cronjob is still failing so it's very out of date. I'll need to sort that out :-/ | 17:57 |
| ezethnesthrown | nacc: http://paste.ubuntu.com/24538099/ | 17:58 |
| nacc | ezethnesthrown: hrm, that's worrisome, same version here | 17:59 |
| nacc | ezethnesthrown: this is a VPS or anything? did you do any changes after installing? | 17:59 |
| ezethnesthrown | nacc: I'm installing in Virtual Box | 18:00 |
| ezethnesthrown | nacc: I followed the Samba and LDAP guide and the guide at the bug post | 18:00 |
| nacc | ezethnesthrown: can you run `dpkg -V smbldap-tools` ? and/or `dpkg -C smbldap-tools` | 18:01 |
| ezethnesthrown | dpkg -V smbldap-tools > [[ ??5?????? /usr/sbin/smbldap-populate ]] | 18:02 |
| ezethnesthrown | dpkg -C smbldap-tools > [[ ]] | 18:02 |
| nacc | ezethnesthrown: yeah so you've changed it from how it isinstalled | 18:02 |
| nacc | ezethnesthrown: 5 is 'file contents have changed' | 18:02 |
| nacc | ezethnesthrown: so ... what did you do? :) | 18:03 |
| ezethnesthrown | I did 'sudo dpkg-reconfigure slapd' I few times | 18:03 |
| ezethnesthrown | A few times* | 18:03 |
| ezethnesthrown | nacc: Thank you for your time. I'll restart then | 18:04 |
| nacc | ezethnesthrown: np, i don't thnk the dpkg-reconfigure should have changed the contents of an executable | 18:05 |
| nacc | ezethnesthrown: something else must have happened, but i don't know what | 18:05 |
| nacc | rbasak: do you have time this week for a importer/git sync? | 18:08 |
| ezethnesthrown | nacc: Is it inside smbldap files? I don't think I tampered anything inside. But I'll report here if it happens again. | 18:09 |
| nacc | ezethnesthrown: yes, that file (/usr/sbin/smbldap-populate) is fromm smbldap-tools afaict, and should be a perl script | 18:10 |
| ezethnesthrown | nacc: I can't recall | 18:13 |
| nacc | ezethnesthrown: you'd have to have been root to do so, and just imo, you should always konw what you did as root :) | 18:13 |
| ezethnesthrown | nacc: Thank you. I'll keep that in mind | 18:14 |
| cpaelzer | nacc: upload rights to the repos would help with trivial thigs at least | 18:21 |
| cpaelzer | nacc: and I think I can decide when to push and when not to | 18:23 |
| nacc | cpaelzer: yeah | 18:23 |
| nacc | cpaelzer: our eventual goal is if you can upload a srcpkg you can upload the corresponding tag | 18:23 |
| nacc | cpaelzer: but that needs lp stuff, etc. | 18:23 |
| cpaelzer | nacc: and in the worst case it is easy for you to catch me :-) | 18:23 |
| cpaelzer | nacc: I know the target | 18:24 |
| nacc | cpaelzer: yeah :) | 18:24 |
| cpaelzer | nacc: yet given that we mainly sync server and I have server + a few as upload rights ... | 18:24 |
| nacc | cpaelzer: yep | 18:24 |
| cpaelzer | nacc: the remaining subset isn't that big | 18:24 |
| nacc | cpaelzer: yeah | 18:24 |
| === lordievader is now known as Guest16696 | ||
| === Guest16696 is now known as lordievader | ||
| ezethnesthrown | nacc: Works magically now | 19:09 |
| nacc | ezethnesthrown: did you reinstall? | 19:10 |
| rbasak | nacc: yeah, let's arrange something. | 19:27 |
| nacc | rbasak: thanks | 19:30 |
| greenmanspirit | Hello all! I am trying to preseed NIS and when I reboot, rpcbind won't start. Is there something like networkmanager-wait-online that centos has? I am guessing the network isn't ready when rpcbind tries to start. | 19:54 |
| sarnold | which release? 16.04 uses a different service framework than 14.04.. | 19:55 |
| * sarnold -> lunch | 19:55 | |
| greenmanspirit | sarnold, 16.04 | 19:56 |
| nacc | greenmanspirit: well on server, you wont' have networkmanager | 20:05 |
| nacc | greenmanspirit: if someting depending on network it shoulbe After=network.target in the service file, i think? | 20:06 |
| nacc | greenmanspirit: but i would thing rpcbind would be generally broken if it won't start becasue it needs networking and network isn't up in your case | 20:10 |
| nacc | cpaelzer: i did dovecot just now, but let's do it at the same time, as there is a bit of an inherent race | 20:14 |
| manukapua | im trying to delete a samba user after i deleted their unix account but get errors from smbpasswd - x and pdbedit -x , do i have to recreate the unix accoint before deleting the samba one ? | 20:14 |
| nacc | cpaelzer: tmrw AM for the others? | 20:14 |
| greenmanspirit | nacc, rpcbind doesn't have After=Network in the rpcbind.server file | 20:17 |
| manukapua | answered my own question - apparently yes | 20:18 |
| manukapua | have a fun mad day all : ) | 20:18 |
| greenmanspirit | sorry, After=network.target | 20:19 |
| gartral | ok so i migrated my server from that half-ass VPS into a better host annd i'm still having issues with apache | 21:02 |
| gartral | nacc sarnold thank you by the way, for other day | 21:04 |
| sarnold | hey gartral ;) | 21:10 |
| gartral | sarnold: I figured it out | 21:11 |
| gartral | it was a port collision between my vpn server and apache | 21:11 |
| sarnold | gartral: woot | 21:13 |
| Anonymes | hi | 21:17 |
| gartral | sarnold: arrrrrrrrrrgh | 21:34 |
| gartral | this is a game of catch 22 wrapped in a game of catch 22 | 21:35 |
| sarnold | uhoh :) I was hoping that was the 'argh' of "i can't believe that mistake was so simple" :) | 21:35 |
| gartral | sarnold: I need a valid ssl cert, so I go through and try to use a let's encrypt cert for 'simplicity'... except certbot only uses port 443 and that port is already taken up by openvpn | 21:40 |
| sarnold | gartral: can't LE do dns too? | 21:41 |
| sarnold | gartral: and probably openvpn can be made to run on another port, if only temporarily | 21:41 |
| sarnold | gartral: I know some people run their vpn on ALL PORTS, so a simple nmap from their hotel room or airplane or whatever can often find a way through that's... ahem... cheaper than usual :) | 21:42 |
| gartral | sarnold: yea but I have ~30 or so devices on this vpn | 21:45 |
| gartral | most of which are family, and I don't need my mother screaming at me that her internet broke (again, because I had to re-issue cert packets to everyone from the the server move) | 21:46 |
| sarnold | gartral: ouch that's a lot of devices to reconfigure | 21:46 |
| gartral | yes it is... everyone tells me I'm a good IT guy... I don't think so but meh | 21:47 |
| sarnold | gartral: stand up a second server? | 21:52 |
| gartral | sarnold: moneies | 21:52 |
| sarnold | gartral: it's only got to live for an hour or something to get certbot to work; if you haven't used it already, aws's free tier may be enough? | 21:55 |
| === manjo` is now known as manjo | ||
| eatingthenight | Hey i am pxe booting an image and i see this passed in as the command line argument for /proc/cmdline root=live:/genesis.iso | 22:50 |
| eatingthenight | what does that do specificly. | 22:50 |
| eatingthenight | i'm puzzled where it's getting the iso from since it's booting over ipxe using the initrd and vmzlinuz | 22:50 |
| eatingthenight | I read the kernel docs and it doesn't mention anything about live: and everything I have found is using live:http://.... | 22:51 |
| eatingthenight | which make sense | 22:51 |
| nacc | eatingthenight: root= is not parsed by the kernel | 22:52 |
| nacc | eatingthenight: it's parsed by the init process, i think | 22:52 |
| nacc | eatingthenight: i don't where genesis.iso lives, because that's not ubuntu afaict? | 22:52 |
| eatingthenight | nacc: correct sorry i just figured people here may know a bit more about the command line boot args | 23:30 |
| eatingthenight | it's a custom image | 23:30 |
| eatingthenight | but I belive /genesis.iso in this case would mean it was baked into the image. | 23:31 |
| nacc | eatingthenight: i *think* that live: is just a prefix to something (init? not sure) that says it's a livecd rootfs. i'm guessing that if you're pxe booting, maybe it knows to alos look on the network for the iso | 23:32 |
| nacc | it being the boot processe | 23:32 |
| eatingthenight | aa ok, so might be looking it up on a sftp server on the network | 23:36 |
| nacc | eatingthenight: yeah, i'm not 100% on that, but i'd believe it | 23:36 |
| eatingthenight | hmm, darn. That does sound correct to me but the sftp server that it is using only contains the ipxe kpxe file. | 23:40 |
| eatingthenight | just checked to make sure. very strange. | 23:40 |
| nacc | eatingthenight: is it in the initramfs by any chance? | 23:41 |
| eatingthenight | hmm i dont see that file but i see this pre-udev/30dmsquash-liveiso-genrules.sh which looks interesting | 23:45 |
| eatingthenight | o ok https://www.redhat.com/archives/rhl-list/2009-December/msg01582.html looks to confirm that that is what does it | 23:52 |
| eatingthenight | looks like some legacy stuff from the liveiso creator | 23:52 |
| eatingthenight | nacc: thanks for the help! I'm somewhat satisfied knowing that it's custom to liveiso | 23:53 |
| nacc | eatingthenight: yw | 23:53 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!