/srv/irclogs.ubuntu.com/2017/06/08/#ubuntu-server.txt

ruben23hi there guys i have my Ubuntu server installed02:09
ruben23but as i check there is a internal firewall rules02:09
ruben23any chance how do i disable it adn removed it somehow.?02:09
ruben23any idea guys.?02:10
sarnoldruben23: if you want to uninstall ufw rather than configure it, feel free, just be careful you don't make mistakes configuring your services02:12
ruben23 sarnold: how do i disable or remove the ufw.? or maybe temporarly disable for testing purposes02:15
sarnoldruben23: 'ufw disable' if you want to turn it off02:15
sarnoldruben23: apt-get purge ufw if you decide you don't want it at all02:15
ruben23when disable this comes up again after reboot right..?02:16
sarnoldprobably02:17
ShellcatZerostupid question: is there some way to scroll line by line in the console instead of the half-page lengths with shift+pg up/down?03:09
ShellcatZeroI suppose I'll just use gnu screen03:26
hehehe16.04 server php 7  zlib is not there03:27
heheheany ideas why is kinda missing03:28
ruben23hi guys03:42
ruben23im currently on root on my ubuntu server and i have a username asterisk, any idea how do i access that.?03:43
ruben23without re login.?03:43
tarpmanruben23: su - asterisk03:47
tarpmanruben23: or sudo -u asterisk -i03:47
tarpmanruben23: the first one would prompt you for asterisk's password, the second would prompt you for your own password, otherwise they do largely the same thing03:47
ruben23tarpman: asterisk user have a script that runs successfully, but when i used root it does not run03:49
ruben23how do i make the root user be able to run the asterisk user permission also.?03:50
ruben23any idea.?03:50
tarpmanruben23: if the script is designed to be run as asterisk, probably you should run it as asterisk03:50
ruben23but i need to run it on root also, most of the time03:51
tarpmanwhy?03:51
ruben23coz during operation the default setup is on root03:51
ruben23during our monitoring03:51
tarpmanalso you can easily write a one-liner that does 'runuser - asterisk -c <the actual script>'03:52
tarpmanand run that as root03:52
ruben23but im not sure i to put it automatic03:53
ruben23coz by default when i run asterisk im at root03:54
ruben23and the system script just run automatically03:54
ruben23please help03:54
ruben23tarpman:..?03:56
tarpmansorry, I'm not understanding what you're trying to do03:57
ruben23s3cmd - is a script, when i run it manually on user asterisk it runs the script but with root in automatic it does not run03:59
tarpmanwhat do you mean by "in automatic"03:59
ruben23automatic means the script runs auto04:00
tarpmanare you trying to make a cron job? a system service? all of these things have features for running commands as specified users04:00
tarpmanit would help if you phrase your question in more general terms like "I have a script that uses s3cmd to back up my asterisk server to AWS and I want it to run periodically"04:00
tarpman(that might not actually be what you want, it's just a guess)04:01
ruben23ok this s3cmd script is set on na asterisk telephone system where when a calls comes in it is triggered to upload a recording to an AWS storage, now when we run the script runs but it does not upload at all, but when we used the user asterisk it runs and it uploads perfectly04:03
tarpmanok. what triggers it and why can't it trigger as asterisk?04:04
ruben23we manually used the user asterisk to run the script04:04
tarpmanand why can't it trigger a wrapper script of your own devising that calls runuser(8) like I suggested above?04:04
ruben23yes how do i invoke an asterisk user on a script.?04:05
ruben23i dont know how to do it04:05
tarpmanI haven't used s3cmd so I don't know what it would be depending on in asterisk's environment. probably needs the $HOME/.aws for credentials, or something like that04:05
tarpmanI already said, above04:05
tarpmanrunuser -l asterisk -c 'the command to run as asterisk'04:05
lordievader[m]Good morning05:44
=== beardfac1 is now known as beardface
=== beardface is now known as beardfac1
=== beardfac1 is now known as beardface
funabashianyone know how i can do so a user only can see his own home dir and nothing else with sftp?07:23
sarnoldfunabashi: do the users have shells that you'd still like them to be able to use?07:29
sarnoldfunabashi: I think the ChrootDirectory directive to sshd_config might be able to do the job, but if you also want them to be able to use a shell when they ssh in normally, it'll probably be trouble07:31
sarnoldfunabashi: if ChrootDirectory doesn't do it you might be able to wrap sftp-server with an AppArmor profile; this might require profiling sshd too. If you head down that route it'd be a good idea to have another terminal open with a root shell sitting somewhere handy but unlikely to be accidentally closed :)07:32
funabashino ssh access07:35
sarnoldaha, then ChrootDirectory sounds promising. :)07:35
sarnoldchroot normally has enough troubles that I don't like recommending it07:35
sarnoldbut if they just sftp and don't ssh, it'll probably work okay07:35
funabashisarnold: do maybe can recommend any guide for this?07:35
sarnoldfunabashi: I don't know of any off-hand, sorry07:36
sarnoldthe sshd_config(5) manpage is the best I know, and it's too terse07:36
=== frickler_ is now known as frickler
=== RoyK^ is now known as RoyK
=== med_ is now known as Guest72612
=== mhcerri_ is now known as mhcerri
=== sforshee` is now known as sforshee
naccjamespage: sorry, I've had some network issues at the sprint -- re: python-django, are you still blocked by the openstack stuff in proposed?14:32
jamespagenacc: I've not looked specificaly at the django stuff yet - but yes openstack  pike b1 is jammed in proposed - mostly blocked on kombu / celery compat atm I think14:33
naccjamespage: ok, if there's anything i can do to help, let me know :)14:34
powersjcpaelzer: your dpdk merge is empty14:41
naccpowersj: LP: #162776815:01
ubottuLaunchpad bug 1627768 in multipath-tools (Ubuntu) "multipath silently crashes with general protection" [Undecided,Triaged] https://launchpad.net/bugs/162776815:01
=== ratliff_ is now known as ratliff
tewardnacc: cool, I"m glad to hear my release notes section for NGINX on Server works as is :)15:34
jamespagecoreycb: I've pushed all of the b2 dependency updates to artful in perparation for b2's tomorrow15:43
coreycbjamespage: excellent15:44
JrWebDevhow do i stop the time from automatically syncing and adjust the time manually15:51
cpaelzerpowersj: has content now, thanks for the ping16:05
sarnoldJrWebDev: disable ntpd; you can then use date to set the time16:58
=== JanC_ is now known as JanC
hashwagonHey does preseed support copying a file from the installation media to the installed system?20:22
nacchashwagon: you can do arbitrary commands in a preseed20:57
=== cpaelzer_ is now known as cpaelzer
cpaelzerahasenack: http://pad.ubuntu.com/61wJGD7csl22:38
ahasenacklet's see22:38
cpaelzerahasenack: if you want to take a look at the old samba's22:38
ahasenackcpaelzer: the trusty nomination we talked about: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/82067923:14
ubottuLaunchpad bug 820679 in samba (Ubuntu) "nmbd and smbd will not be started again on transition from runlevel 1 to 2" [Medium,Triaged]23:14

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!