[00:00] day [00:46] folks [00:46] did you use dapperlinux? [00:58] correction https://dapperlinux.com/features.html [01:59] Hi all. I have been muddling through apache2 for the past two days trying to get everything up and running properly. I still cannot seem to get my images to show up on the live site. I checked both my html and css code via validation service with no errors. Any hints on where to look online? === giraffe is now known as Guest89848 [03:21] is it normal to see this syslog verbose intensely like this... cmiiw, it seems related to the docker service http://vpaste.net/YcYc9 [08:17] coreycb: FYI - I pushed the tests your zesty SRU on libvirt was blocked on, it is now good in pending-sru except waiting a few days more as usual [08:25] hi Does the SSL include XSS protection as well? [08:38] sonu_nk: no I'd think http://www.computerweekly.com/tip/Cross-site-scripting-explained-How-to-prevent-XSS-attacks [08:38] there are zillions of sources, this was just the first somewhat readable that came up on a search [09:57] sonu_nk: SSL does not provide any security for the contents of a page, hence XSS attacks are still possible. [10:49] sonu_nk: SSL, that is, TLS, is just transport safety, it doesn't do anything about bad code on the page, as lordievader says [10:57] ok === amonrahx is now known as am0nrahx [15:49] whats a good webpannel for ubuntu server virtual machine host [15:49] 16.04 [16:10] can someone confirm this is the right way of configuring automatic updates using automatic-updates? https://help.ubuntu.com/lts/serverguide/automatic-updates.html [16:12] (I'm using an ec2 instance) [16:38] maas has its own channel probably? [17:17] Masterphi: Correct, unattended upgrades probably the most common way of doing automatic updates with apt. [17:18] :+1: thx [17:18] Np [18:45] Hi [18:45] How do I untar a folder/file ? [18:46] tar tf filename.tar | less -- make sure it will untar what you expect; then tar xf filename.tar [18:48] sarnold: the compressed file uses .tar.gz extension [18:49] It means the file is zipped then tarred? [18:49] supercool: these days tar recognizes several different compression formats, including gz, and 'x' works on the ones it knows [18:49] supercool: the other way around -- tarred, then gzipped [18:50] So I keed tar tf filename.tar | less [18:50] keep* [18:50] yeah; you don't want to be surprised if it has ../../etc/passwd in the tarball or something similar :) [18:51] :D [18:51] Alright, let me test it. [20:56] hi, I'm trying to do transparent proxying and also do transparent dns redirection using a box that's not the gw [20:56] any thoughts on the best approach? [20:57] right now the content filtering it's happening on the gw, a simple iptables REDIRECT from port 80 to 8080 [20:57] but if I move the cf to another box that won't work since REDIRECT is local only [20:57] I could NAT, but that seems nasty to do on LAN, and I [20:57] 'd end up with double NAT (that + nat'ing again on the GW) [20:58] for dns, there's people with hardcoded dns's which I'd like to redirect to our internal one [20:58] so again outgoing requests to port 53 should be redirected to an internal server [20:59] is [D/S]NAT with iptables the best solution to this kind of thing? [21:12] so i'm following https://help.ubuntu.com/lts/installation-guide/amd64/ch08s07.html and setting the boot parameter rescue/enable=true via PXE, but the installer keeps trying to preseed/install, any help appreciated. [21:15] phibs: just to be sure, hwo do you determine that the installer keeps trying to preseed/install? because that page you linked does say that a few screens of the installer will be shown [21:15] no note in the corner of the display? [21:16] if I remove the earlycmd exit from my preseed, it asks partitioning questions etc [21:17] mmmhk, lemme try just out of curiosity, I have pxe here for installs, but never use it for recovery, for that I just boot a liveCD over pxe [21:17] nod I hear ya [21:18] also working on just building my own images with debirf as an alternative [21:18] and thanks! [21:22] nope, that didn't work for me either... no clue why. not very helpful I know [21:22] well, I feel better now at least. [21:23] what if you just use the shell during the installer? would that help? [21:23] it's just busybox, but maybe it's enough? [21:23] Yeah i'm trying to present a nice environment for my techs to debug stuff [21:23] so more control would be better [21:23] oh, I see [21:23] (and them not having to do extra stuff) [21:24] debirf built me a kernel/initrd, so it's possible that route will work nicely [21:24] liveCD is not an option? too much stuff to load? that would even give you a GUI if that's the kind of tech you deal with [21:24] oh, ok, had never heard about debirf, looks nice [21:25] don't need/want a gui, a lot of times we're debugging with SOL (IPMI) [21:30] fair enough [21:30] (otherwise yeah, good suggestion) [21:37] phibs: ah, I got it [21:37] what you gotg! [21:37] phibs: I have a bunch of diff isos, server, mini, desktop and alternate [21:37] I had a hunch and tried alternate and the pxe param worked [21:38] oh... [21:38] yeah this is just using http://archive.ubuntu.com/ubuntu/dists/$DISTRO-updates/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/initrd.gz [21:38] lubuntu alternate install to be precise, "Rescue mode" popped up in the corner and it dropped me to the prompt to enter rescue mdoe as expected [21:38] yeah, that's what I tried too initially [21:38] and indeed it did not work [21:39] I also tried with server, same problem [21:39] grr [21:39] actually lemme test once more just to be sure, but mini/netboot did not work for sure [21:39] this is why we can't have nice things [21:41] ok, I was wrong, I guess I tried diff minis... server works too [21:41] so it's just the mini/netboot that does not work with rescue/enable=true [21:41] the others do [21:43] hmm [21:43] which exact one did you use, the installer initrd/kernel? [21:44] (and did you specify a preseed url) [21:45] the way I set up pxe is: download iso, unpack, copy files to srv/nfsroot and then copy stuff from install/ to tftp etc [21:45] ubuntu-16.04.2-server-amd64.iso [21:45] using that iso [21:45] yes I used preseed to specify my internal mirror, language, etc [21:46] ah ok, thanks [21:46] we use pure initrd, no nfs [21:49] yeah that's what I do for mini/netinstall, but not for server/dekstop installs [21:49] and it seems you can't do rescue with mini/netinstall [21:50] ;0 [21:51] even tho since June I'm just using mini + ansible and haven't touched server/desktop isos once [21:52] nice. [21:52] we take the server ones and customize a bit adding other debs and tools [21:54] thanks for your help btw [21:54] hey phibs :) [21:54] sarnold: yo ;0 [21:56] phibs: my pleasure, it was good to know [21:57] .o/ sarnold [21:57] hey drab :) [22:02] any thoughts about the transparent content filter question? :) [22:07] bbl [22:07] man I can't find the blog post from a pal that I thought would help. I've asked, but he might have gone to bed already. [22:10] guyssssss please add openstack-dashboard version 11.0.3 to the repos ... we just have 11.0.2 and this version has some major interface bug and you can't deploy istances with volumes... 11.0.3 was already published by openstack devs. [22:11] anybody know whom i can span with this request? are the guys who manage ubuntu packages here on irc? can we make their day bad so they push the packages faster? :)) [22:11] gheorghe_: what bug number? [22:20] sarnold i can search if you want. should i? does this info help? [22:22] gheorghe_: issues with bug reports tend to get fixed faster than issues witohut bug reports; I was just going to see if the bug report looked at all useful, filed in the right place, etc [22:23] sarnold the bug got already fixed. the package is just not available within the ubuntu repo [22:24] gheorghe_: if there's no bug filed against an ubuntu package then no one will ever find out about it :)