/srv/irclogs.ubuntu.com/2017/12/01/#ubuntu-server.txt

=== rypervenche_ is now known as rypervenche
=== led_ir23 is now known as led_ir22
=== Raboo_ is now known as Raboo
lordievaderGood morning07:06
mojtabaHello, I have installed openvpn and stunnel. I am running openvpn through cmd. I am seeing "Initialization Sequence Completed" as the last statement, and I can connect to my local network. But I cannot open websites like youtube.com. Do you know how can I check what could be wrong?08:47
jamespagemorning all09:23
mojtabaHello, I am configured openvpn and stunnel, but when I try to traceroute youtube, it gives me a fake ip address: 10.10.34.3409:41
mojtabahttp://paste.ubuntu.com/26087878/09:41
mojtabaI have these lines in the openvpn server config file.09:41
mojtabapush "dhcp-option DNS 10.8.0.1"09:42
mojtabapush "dhcp-option DNS 208.67.222.222"09:42
mojtabapush "dhcp-option DNS 208.67.220.220"09:42
mojtabapush "dhcp-option DNS 8.8.8.8"09:42
mojtabaBut it seems dnsmasq is overriding my dns setup. http://paste.ubuntu.com/26087915/09:42
mojtabaDo you know what should I do?09:42
mojtabaMy server is in Canada, and I am in Iran now.09:42
lordievadermojtaba: That is netwoekmanager controlling the resolving (with dnsmasq). Though normally it should use the DNS servers it gets from the DHCP.10:18
ahasenackthis is weird, this morning's apt update has a new entry: http://pastebin.ubuntu.com/26088344/11:00
ahasenackHit:6 http://179.184.158.85:80/pdata/0211cbbab141e5bb/security.ubuntu.com/ubuntu artful-security InRelease11:00
ahasenacknever saw that before11:00
ahasenackthat ip belongs to my isp, or to one of its customers11:00
ahasenackis that a cdn for security.u.c?11:01
rbasakowner:       TELEFÔNICA BRASIL S.A11:30
rbasakI think they may be doing a redirect to their own cache maybe?11:30
rbasakhttps://www.reddit.com/r/Ubuntu/comments/7dpnwl/requests_to_archiveubuntucom_being_redirected_on/11:31
rbasakIt's safe as long as their cache doesn't go stale.11:31
rbasakapt does have options for staleness checking but they aren't enabled by default IIRC.11:32
rbasakMax-ValidTime11:35
gun1xFrickelpit: i totally missed your message yesterday. please say gun1x if you say something for me.12:10
gun1xFrickelpit: i am checking locale now12:10
gun1xFrickelpit: it worked by changing locale from gb to us, thank you12:12
LopeI'd like to run many FTP servers on a single public IP address, each FTP server inside a LAN IP for it's respective VM. I'd like to run some kind of reverse proxy server on the root server (that has the public IP). I've searched the repos for FTP reverse-proxy servers but didn't find anything. I've heard that jftpgw can do it but it looks like it was last updated in 2004!12:27
jamespagecoreycb, beisner: I've uploaded fresh pxc-5.6, percona-galera-3 and percona-xtrabackup to bionic12:30
jamespagethat gets things up-to-date for development12:30
jamespagepxc and galera updates really need to go back to xenial/zesty/arftul as well12:30
coreycbjamespage: ack12:54
=== tomreyn_ is now known as tomreyn
ahasenackrbasak: do you know about dpkg-query -f '${Conffiles}'? The manpage just says "internal"13:17
ahasenackI'm trying to parse this sed13:17
ahasenackwhich seems overkill13:17
ahasenack dpkg-query -W -f='${Conffiles}' mail-stack-delivery | sed -n -e "\' /etc/dovecot/conf.d/99-mail-stack-delivery.conf ' { s/ obsolete$//; s/.* //; p }"13:17
ahasenackas the output of dpkg-query seems to be just a file and md5, and some spaces that can be more easily removed than that sed sequence13:17
ahasenackin particular, " obsolete" doesn't show up, at least in this case I am at13:18
rbasakIs that trying to get a list of conffiles that mail-stack-delivery has on the system?13:18
ahasenack# dpkg-query -W -f='${Conffiles}' mail-stack-delivery ;echo13:18
ahasenack /etc/dovecot/conf.d/99-mail-stack-delivery.conf 257ba5af418b630ef4d8075100bf780913:18
ahasenackjust one, and its md513:18
rbasakObsolete conffiles happen if a newer package version doesn't ship a conffile but doesn't explicitly remove it. Then it remains on the filesystem but dpkg considers it obsolete. Which is usually a bug.13:18
ahasenackbut a simple awk would fetch the md5 in that output13:19
rbasakIf a conffile is obsolete, perhaps that output has an additional field so the awk would grab the wrong field number.13:19
* rbasak is guessing13:19
ahasenacksounds reasonable13:19
rbasak"The manpage just says "internal""13:19
rbasakSounds like the script shouldn't be doing this at all.13:19
ahasenackalso reasonable13:19
ahasenackas it might change I suppose13:20
rbasakI'm not sure there's necessarily a way to fix it though.13:20
rbasakThough I don't know for certain, my gut says this kind of hack is needed because the model of packaging that mail-stack-delivery needs to do its job doesn't work very well with dpkg and debs.13:20
ahasenackthe idea of one package changing the configuration of many others?13:20
rbasakYeah that kind of thing.13:21
rbasakI used to do "configuration management" using custom local debs that pulled in dependencies and configured them in around 2003.13:21
rbasakIt doesn't work very well.13:21
ahasenackgit ubuntu lint isn't happy with that dovecot branch, I can't get it to run: http://pastebin.ubuntu.com/26089211/13:28
ahasenackany ideas?13:28
ahasenackthe branch is https://code.launchpad.net/~paelzer/ubuntu/+source/dovecot/+git/dovecot/+ref/bionic-merge13:29
cpaelzerfor the sake of not beeing alone IÄve seen exactly this conffile + sed in multiple packages13:30
cpaelzerthat doesn't mean it is right or wrong, just FYI13:30
cpaelzerahasenack: is there a comment in the MP about an issue with that I should look at - or did you just wonder what dpkg could report in those cases?13:31
ahasenackcpaelzer: I was wondering about the " obsolete$" case13:31
ahasenacksince the manpage didn't talk about it13:32
cpaelzerwell it can has this appendix or not13:32
cpaelzerthe sed is meant to drop it if it is there13:32
cpaelzerI had such changes, but rbasak already explained how it happens13:32
ahasenackyep, all good13:33
ahasenackany idea about the lintian?13:33
ahasenackdoes it run on your local copy of the branch?13:33
cpaelzerahasenack: it didn't on strongswan, let me check dovecot ...13:33
ahasenackrbasak: thanks for the endorsement!13:34
jamespagecoreycb: just saw a load of these from pike-proposed -  sbuild-build-depends-ceilometer-dummy : Depends: python-gabbi (>= 1.30.0) but it is not going to be installed13:36
ahasenackcpaelzer: iproute2 down to just 1 test failure, arm13:38
coreycbjamespage: hmm13:38
ahasenacka timeout in a test called "201-freqaccumulation"13:38
cpaelzerahasenack: did you check it in any way more than the retry we did?13:38
ahasenackcpaelzer: last evening we had 3, this one and two others13:39
ahasenackthe others seemed like infra problems13:39
cpaelzeryeah13:39
ahasenacktimeout launching the adt vm13:39
cpaelzermaybe even this one13:39
ahasenackslangasek clicked the retry button for me13:39
cpaelzerahasenack: so on dovecot "git ubuntu lint" passes13:39
ahasenackthis one, I looked at the code but didn't come up with any ideas, I would have to run it locally13:39
cpaelzerbut I had to remove some confusion on it first - especially since I had new/debian (from last merge) and another new/debian that I pushed13:39
ahasenackcpaelzer: can you push --force just to be sure I get all the bits? Or you rather not13:40
cpaelzerahasenack: hmm does autopkgtest work on arm "as usual"13:40
cpaelzerahasenack: how does the linter fail you?13:40
cpaelzeris it missing any tag or such?13:40
ahasenackcpaelzer: http://pastebin.ubuntu.com/26089211/13:40
ahasenackI did git fetch paelzer --tags already13:41
cpaelzerumm, I don't get this :-/13:41
cpaelzerahasenack: and you are on the bionic-merge branch when you do this?13:41
ahasenackyes13:41
ahasenackwhen I started the review a couple of days ago, I did git checkout -b paelzer-bionic-merge paelzer/bionic-merge13:42
ahasenackand I have been getting your updates without problems13:42
cpaelzerahasenack: I saw that I needed to drop the ~ppa version for the linter13:43
cpaelzerreasonable, I just didn't want 20 commits adding and removing them13:43
ahasenacksure13:44
cpaelzerahasenack: I also pushed an updated new/debian - that was the one conflicting for me from last merge13:44
ahasenackdoesn't seem to be what's confusing it here13:44
cpaelzerahasenack: could you fetch branch and tags and check again?13:44
cpaelzerahasenack: with verbose, I'll do the same13:44
cpaelzermaybe we spot the difference13:44
ahasenackno change: http://pastebin.ubuntu.com/26089277/13:45
ahasenackI see a tag update for new/debian13:45
cpaelzerahasenack: http://paste.ubuntu.com/26089281/13:46
cpaelzerlets compare these :-)13:46
ahasenackah13:46
ahasenackhttp://pastebin.ubuntu.com/26089284/13:47
ahasenackmine doesn't get far13:47
ahasenacksame when I pass target-branch13:47
ahasenacklet me try cloning it fresh elsewhere13:47
cpaelzerahasenack: also try a few different things as target-branch13:48
cpaelzerprobably debian/sid, bionic-merge ,... ?13:48
cpaelzerI'm not really sure what it would/should expect as that arg13:48
ahasenacksame on a fresh clone13:50
ahasenackhttp://pastebin.ubuntu.com/26089308/13:51
ahasenackwill have to check the code13:51
ahasenackI won't block on this13:53
ahasenackwould be cool to see what's going on, though13:53
cpaelzerahasenack: I just see in my inbox you listed more small/medium comments - thanks I'll take a look13:54
ahasenackcpaelzer: the ssl ones, let's not go crazy there. I think just the postfix one13:54
ahasenackI verified ssl3 is not enabled in dovecot (imap, pop)13:54
ahasenackwe can file a separate bug to revise those settings13:54
ahasenackwhat do you think?13:54
cpaelzerI didn't read all your feedback yet, so I might be out of context13:55
ahasenackok, take your time13:55
cpaelzerbut that seems right (to be disabled) right?13:55
ahasenackit should, but we explicitly *enable* it for postfix in mail-stack-delivery :)13:55
cpaelzerI'll read and think through and ping you later13:55
cpaelzernot yet fully out of my inbox for today13:55
cpaelzerahasenack: I can partially reproduce and partially avoid the linting issue - will let you know14:01
ahasenackheh :)14:01
jamespagecoreycb: looking at pxc-5.6 it basicaly produces one package with binaries in it; a meta package and some debug symbols14:01
cpaelzerahasenack: I see conflicts around old/ubuntu != old/ubuntu14:01
cpaelzerbut - between the two hashes is no diff14:01
jamespagecoreycb: and I think you'll need xtrabackup >= 2.4 as well14:01
jamespage2.3 is the 5.6 aligned version afaict14:01
cpaelzerahasenack: as if linter and importer would not agree if they should use the same commit reperesenting an import14:01
cpaelzerahasenack: I think you should report a bug - I confirm it fails from a new clone + checkout14:04
cpaelzerahasenack: but it works with http://paste.ubuntu.com/26089367/14:04
coreycbjamespage: ok14:06
ahasenackyeah, that worked too14:06
cpaelzerahasenack: it must internally know how to call it right14:06
ahasenackminus the lp integration, I had to open the url manually14:06
cpaelzerahasenack: that should be enough of a lead to spot the code issue14:06
ahasenackI'll file the bug14:06
cpaelzerthanks14:06
cpaelzerkilling mails, then looking to your MP feedback14:06
cpaelzeroh and checking my Triage list for today ...14:06
cpaelzer:-/ 30 is a lot for a friday14:08
ahasenackthat's between yesterday and today?14:09
cpaelzeryep14:09
cpaelzerbut I see at least some share is from doko's pytohn3 burst14:10
ahasenackI have a few in my inbox that I want to respond to, the usual sssd and samba combo14:10
ahasenackbut first finish this review14:10
cpaelzerFYI - if anyone being php could help verifying bug 1721607 for the SRU release that would be great15:35
ubottubug 1721607 in php7.0 (Ubuntu) "please update to latest upstream release 7.0.24" [Undecided,Incomplete] https://launchpad.net/bugs/172160715:35
xpistosHey guys. quick question, I have a few different files in test.tar.gz. one file has the string "grep for zoo" in it. I am trying to grep for that in the gz file but since it isn't a compressed log, it doen's know what to do with the request. since zgrep doesn't support -r or -R is there a way to search that gz file for the string without extracting it?17:15
Posterzcat will push it to stdout, from there you can use a standard grep17:16
Posterthough if you've got multiple files in there you'd need to untar it :|17:17
dpb1a tar is just a linear concat of files with some metadata, you can grep it without untaring17:17
dpb1zcat or gzip -c should work17:17
dpb1of course, if you have binary data, it could get interesting, but... :)17:18
sdezielcpaelzer: I can run some basic tests but is there something specific to test?17:21
xpistosdpb1: thanks, it isn't giving me what I am looking for but isn't really important it was just an afterthought while working on strengthening my bash scripting17:25
=== keithzg_ is now known as keithzg

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!