/srv/irclogs.ubuntu.com/2017/12/11/#ubuntu-server.txt

lordievaderGood morning07:13
cpaelzerhi lordievader07:13
lordievaderHey cpaelzer How are you?07:16
cpaelzergood enough for a monday :-)07:17
cpaelzerand you?07:17
lordievaderHahaha. I'm doing allright.07:17
jamespagecoreycb: nova and glance b2's uploaded - doing heat and neutron next10:29
ahasenackgood morning11:10
Nafallomorning ahasenack11:16
ahasenackhello Nafallo11:16
jamespagecoreycb: cinder done; neutron failing a test and heat generally being awkward11:45
jamespagecoreycb: doing keystone11:45
jamespagecoreycb: keystone done; I'm going todo a snapshot of aodh if I can make it work12:09
jamespagecoreycb: barbican done12:24
coreycbjamespage: sounds good, i'll start in a bit12:33
jamespagecoreycb: neutron done12:48
coreycbjamespage: getting started with horizon13:53
jamespagecoreycb: ok working through the neutron-*'s now13:53
coreycbjamespage: are you using a bileto ppa?13:55
jamespagecoreycb: no14:07
jamespagejust local sbuild14:07
jamespagecoreycb: I've done a tweak to the watch file in my uploaded to tie the package to a specific series; dunno what you think about that14:08
jamespagemakes gbp import-orig --uscan dtrt14:08
coreycbjamespage: ok. i'm going to use https://bileto.ubuntu.com/#/ticket/3076. you're welcome to use it if you want.14:09
coreycbjamespage: ok i'll tie that in as well to the watch files14:09
coreycbjamespage: i usually specify the version on uscan so i'm indifferent but i think this is fine14:11
LilleCarlI was recommended to ask this here: "Can anyone explain why this part of interfaces config doesn't add the routes i'm asking it to add? https://gist.github.com/Lillecarl/d152e0f93405005ea2fd451f33645968" <- Running Ubuntu 16.04 server14:51
sdezielLilleCarl: those additional routes shouldn't be needed as they are relying on the default gateway anyways14:55
LilleCarl@sdeziel Well actually the device's got one direct wan connection and one lan connection14:56
LilleCarlIt's acting as a VPN server-ish14:56
LilleCarlSo the default route goes over ens16014:57
sdezielLilleCarl: then I'd remove the "gateway 172.30.30.1" line then as this one too tries to add a default gateway14:57
LilleCarlI'll do that14:58
sdezielLilleCarl: then if the "up" command still do not accomplish what you wanted, I'd suggest running them by hand and see if /sbin/ip spits an error on them14:58
LilleCarlsdeziel: Now the up commands worked14:59
LilleCarlIsn't that weird?14:59
LilleCarlAlso, thanks! :)14:59
sdezielLilleCarl: I don't know. Was br0 coming up at all before? Cause 2 default gateways could have prevent the second one (the one from br0) from working15:00
sdezielin other words, I don't know if ifup would capitulate on the "gateway" clause failing to apply15:00
LilleCarlsdeziel: It was functioning indeed, and "ip link" showed it as up15:00
LilleCarlBut yeah that explains it, trying to override default gw could fail the up scripts15:01
sdezielLilleCarl: yeah but that's one level too low ;). I guess the question should have been: did br0 had an IP configured?15:01
LilleCarlsdeziel: Wierdly enough it did, i was pinging it locally. I guess it's weird undefined behaviour15:02
sdezielLilleCarl: interesting problem :)15:03
LilleCarlIndeed, caused by stupid human as usually though ;)15:03
jlacroixGood {morning,afternoon,evening}. I'm still trying to get an external USB drive passed through to my KVM VM from the host. I tried going through virt-manager, and I also tried creating an XML file and attaching it. I've rebooted the host and guest many times. I also tried USB2/USB3 and switching the chipset. Has anyone been successful with this? (Ubuntu Server 16.04)15:50
cpaelzerjlacroix: yes I've doen it - did you check out the related known apparmor issues15:53
cpaelzerjlacroix: TL;DR while you are trying to attach in a 2nd window run "sudo dmesg -w"15:53
jlacroixcpaelzer I have seen that during google searching. I flat-out disabled apparmor on the host and guest, that didn't solve it15:53
cpaelzerlikely you see apparmor denies, and likely the bugs I linked have the fixes that you can add to your conffiles15:53
jlacroixShould I run the dmesg on the host or guest?15:54
cpaelzerwell if you disabled apparmor fully then this isn't the issue :-)15:54
cpaelzerjlacroix: I recommend to track two things then15:54
cpaelzer1. in a 2nd console dmesg -w - what happens on the try to atatch15:55
jlacroixAre these apparmor issues with the guest or the host? Or both? When reading I wasn't sure if they were referring to the guest or host when talking about apparmor15:55
cpaelzer2. in 3rd console track /var/log/libvirt/qemu/<guestname>.log - is there an issue reported15:55
cpaelzerjlacroix: the issues were the host being more on the secure than on the comfortable side15:55
cpaelzerjlacroix: this needed some work/research to sort out rules that work but are not considered insecure15:55
cpaelzerbut demsg will show you if this still is an issue15:56
cpaelzercoreycb: I believe automation tricked you when picking 1710019 into cloud archive15:56
cpaelzercoreycb: there is (a lot) detail in the bug - TL;DR this was cancelled from -proposed for zesty but picked for Ocata now15:58
coreycbcpaelzer: got it, thanks. i'll update the bug.15:59
jlacroixThanks cpaelzer, I'll try that out when I get home. I'm remotely connected via SSH right now and so far I don't see anything in the logs on the host. But perhaps I will when I disconnect and reconnect the drive. But as of right now there is nothing in the log file and it has not cycled15:59
jlacroixI'm assuming the usb disk would show up with lsusb or lsblk if successfully passed through16:01
coreycbcpaelzer: are you +1 to reverting that then?16:04
cpaelzercoreycb: well we reverted it in proposed until dannf had the chance to sort out the details16:04
cpaelzercoreycb: so that particular change on the actual release did never show up16:04
cpaelzercoreycb: thereby yes I'm +1 to also pull it out of UCA for now16:05
coreycbcpaelzer: ack16:05
cpaelzerjlacroix: give it a try and let us know16:05
cpaelzerjlacroix: you could pastebin both logs if you are unsure what they show you16:06
jlacroixcpaelzer the log for the VM in question contains no errors. The dmesg contains nothing regarding the usb drive, other than "new usb device found"16:08
cpaelzerjlacroix: is this the demsg of the host?16:09
jlacroixcpaelzer: yes, the host16:09
cpaelzerwell that means it was atatched (or tried to) and comes back to the host16:10
cpaelzerthat is why it is seeing it as new device16:10
cpaelzerhmm16:10
cpaelzerand what does virsh attach ... tell you16:10
jlacroixHonestly the "new usb device found" could just have been when the host was booted16:10
cpaelzerit must say failed "foo" then right?16:10
cpaelzerjlacroix: that is why I meand sudo dmesg -w16:11
cpaelzerthat follows16:11
cpaelzerso you can add a few empty lines with enter16:11
cpaelzerthen do the action16:11
cpaelzerand report only what appears as new events16:11
cpaelzerjlacroix: the same works on the guest log file if you use "tail -f" on it16:12
jlacroixWhen I run "virsh attach-device" it says "device attached successfully"16:16
cpaelzerjlacroix: then doesn#t that sound good to you?16:25
cpaelzerjlacroix: so the host thinks all is fine16:25
cpaelzerjlacroix: you can now do the same with dmesg but in the guest16:25
jlacroixcpaelzer, yes that sounds great. But lusb, lsblk, and fdisk -l show no extra disks16:25
cpaelzerjlacroix: when you detach/attach you should see the device appearing16:26
cpaelzerdo you?16:26
jlacroixI do not16:26
cpaelzeryou do not see anything in guest dmesg when you do so?16:27
jlacroixCorrect, nothing16:27
cpaelzerweird16:27
cpaelzersorry jlacroix I never had that combination16:27
cpaelzerunfortunately all you do is what I do, so your steps are not valid to reproduce on my end16:27
cpaelzerjlacroix: could you try various USB devices and check if all behave that way?16:28
jlacroixYes, I can try that when I get home. I don't have physical access until this evening16:28
TJ-jlacroix: The guest OS needs the PCI hotplug drivers too; acpiphp and pci_hotplug usually16:31
TJ-jlacroix: I saw similar issues with both raw PCI devices and USB devices with minimal 'cloud' kernels16:32
jlacroixThanks I'll try that now16:32
sdezielas anyone been able to run memtest86+ (or any other mem-test) on a UEFI machine?16:33
jlacroixTJ I don't see those packages available16:33
jlacroixI do have acpid16:34
TJ-They're kernel modules16:35
jlacroixThanks for the response, but those modules are there.16:38
TJ-sdeziel: as far as I recall it doesn't support UEFI since it's a 16-bit executable16:39
TJ-jlacroix: are they loaded?16:39
sdeziel$ grep -A3 EFI /etc/grub.d/20_memtest86+16:39
sdeziel# We need 16-bit boot, which isn't available on EFI.16:39
sdezielif [ -d /sys/firmware/efi ]; then16:39
sdeziel  exit 016:39
sdezielTJ-: indeed, thanks. I'm going to try with the upstream provided ISO for now16:40
jlacroixTJ: I'm not really sure, they are in the kernel config marked "y", I think that means compiled in and not module if I'm not mistaken16:40
TJ-jlacroix: yes, that is correct. So the guest is a 'fat' bare-metal kernel, not one designed for virtual machines/'cloud' ?16:41
jlacroixTJ: Correct. It was installed using the ubuntu-server ISO and not ubuntu-minimal or anything weird16:41
TJ-jlacroix: in the guest does "lsusb" show USB hub(s)?16:41
jlacroixIt does, it shows four of them16:42
TJ-jlacroix: also, is the device you're attaching a mass storage device? sometimes it needs "usb_storage" module manually loading16:42
jlacroixTJ: The disk I'm attaching is a USB hard disk, no hub between them16:43
TJ-jlacroix: there has to be a hub16:43
jlacroixTJ: Sorry what I mean is, I didn't add one between them16:44
TJ-jlacroix: OK, that's fine, the VM should have one already defined in its hardware description, and the kernel has default drivers for them16:44
TJ-jlacroix: does 'virsh dumpxml' show the device with a "<hostdev mode='subsystem' type='usb' managed='yes'>" node?16:57
jlacroixTJ: It does17:08
jlacroixTJ: Sorry, managed: no17:08
TJ-jlacroix: for USB that is ignored so it doesn't affect things17:21
TJ-jlacroix: one data-point. When the device is removed from the host and attached to the guest, the HOST dmesg/kern.log should show something like "usb 2-2: reset high-speed USB device number 6 using ehci-pci"17:24
jlacroixThanks TJ and cpaelzer for all your help. I'll troubleshoot more this evening18:59
arooniit appears that my ubuntu server is not allowing connections when i connect via unlimited vpn (my vpn provider).  any way to find out if certain ip's are blocked somehwo?  i have already stopped the fail2ban service19:09
tomreynarooni: what makes you think it's the server that's blocking it?19:53
sarnoldgood question; on some services I wind up blocking entire VPN netblocks due to abuse from time to time19:55
sarnoldit could be your service provider has done the same19:55
tomreynsome tests: (1) do a traceroute through the VPN, compare it to how it looks without VPN; (2) ping through the VPN and without the VPN, do both get through?; (3) run "nc -l -vv -p 8000" on the server and connect to it through the VPN and without the VPN from your client by running "nc -vv IP_ADDRESS_OF_SERVER 8000"; both server and client should report that the connection is established.19:56
arooni                                                                                                       sarn20:02
aroonisarnold: how do i test to see whether its the server or my hosting provider20:02
aroonioops liooks like tomreyn mentions it20:02
aroonii wish my networking knowledge was a bit better :)20:03
=== lukasa_ is now known as lukasa
=== Kamilion|ZNC is now known as Kamilion
=== StoneTable is now known as aisrael
=== rfleming is now known as rfleming_

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!