/srv/irclogs.ubuntu.com/2018/01/08/#ubuntu-server.txt

ZeroWalkerwhere does nginx store the default page so i can edit it etc?00:10
ZeroWalkerokay found it;d00:34
wxlartul dot one image is fixed05:48
cpaelzergood morning06:16
masbergood afternoon, can I setup 2 ips in same nic or do I need to setup a sub interface for that?07:01
masberthe reason I ask is because I have this interfaces file content which doesn't work (second IP is not populating) https://bpaste.net/show/203d0158f4d907:01
hateballwith the old naming you would add an iface ens192.1 and set IP there07:02
hateballbut I am not sure what the syntax is now with the new naming07:02
cpaelzerthis should do "sudo ip addr add <IP/net> dev <device>"07:03
hateballsorry ens192:107:03
cpaelzernot sure on config files thou07:03
hateballmasber: I guess it should work if you just copy the section and put ens192:0 on the second device where you want the second ip07:05
hateballso you have ens192 section with .56, and ens192:0 section with .5707:05
masberyes, that is what I am trying to do now07:05
masbercopy the whole section?07:05
masberevent gateway and dns names?07:06
masberstill doesn't work07:06
masberhateball, this the file content https://bpaste.net/show/e5f60795916607:07
hateballmasber: yea, that's what I'd have done07:08
hateballbut I guess things might require different config now07:08
masberthen I just need to run sudo ifconfig ens192 down && sudo ifconfig ens192 up?07:08
hateballwell you are creating a new device, so you need to bring up ens192:0 also07:09
masberSIOCSIFFLAGS: Cannot assign requested address07:10
masberbut the IP is free no body is using that IP07:10
lordievaderGood morning07:10
rbasakjamespage, coreycb: FYI, I'm sprinting with Otto and Lars in BlueFin this week. If you have any questions for the others, this week as a good time :)09:38
rbasakEg. otto maintains galera-3 in Debian, and I think you have a percona-galera-3 in Ubuntu?09:38
jamespagerbasak: ack09:38
=== tinwood_ is now known as tinwood
tobascojamespage: could you please give your input on the following https://www.mail-archive.com/openstack-dev@lists.openstack.org/msg114532.html15:00
tobascothe ci fails on that from time to time which is the primary reason that ubuntu is non-voting for puppet, does not happen on centos and we are kind of stuck15:01
tobascoone of the two last things to fix causing failure in the ci piplines15:01
jamespagetobasco: hmm - looking at the error I would say the timeout is coming back from keystone (via keystoneauth1) ?15:16
jamespagemight be wrong - maybe the request is made via keystoneauth1 to neutron.15:19
jamespagetobasco: I'm not convinced the request is actually making it from nova->neutron15:21
tobascojamespage: i've been staring at it for a long time and what I can see the request actually gets to neutron-server, it's processed but it never responds to nova15:22
tobascoif you match the timestamps and when searching for the thing I said in that email you can see neutron-server says 200 for that15:23
jamespagetobasco: hmm - are you sure? I was trying to match up the req-<UUID> but could not see it in the neutron-server log15:23
tobascohm, I never compared req ids but went by URI matching timestamp when it was sent15:23
tobascoweird thing there are no restarts, all other tests passes and this doesn't happen every CI run just sometimes15:24
tobascowe never found a solution for it, i've been thinking apparmor but I have no insight into that15:25
tobasconeutron-server isn't run in apache either so no issues with wsgi apache -> wsgi apache or smth either15:25
jamespagetobasco: if apparmor blocked something you would see a DENIED in the syslog or kern.log15:25
tobascookok hm, i'm stuck at that my next step is basically running the integration testing manually until it occurs and check but not sure how that would help me either15:26
lucidguyReading through these patch notes and it seems all patches for ubuntu1604 are not avaialable yet?  Regarding Spectre/Meltdown?15:37
lucidguyAm I the only one scrambling to get this patched and confused?15:43
dnegreiraits on testing phase15:44
dnegreiratomorrow will be released as a regular update afaik15:45
dnegreirahttps://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown15:45
=== smoser1 is now known as smoser
catphishi'm looking to use lvm with sanlock, i notice ubuntu has packages for lvm, and for sanlock, but i can't find lvmlockd, do i need to recompile lvm, or is there simply a package i'm missing16:34
nacccatphish: hrm it does seem a bit odd, given manpage references: http://manpages.ubuntu.com/manpages/xenial/man8/vgchange.8.html17:05
naccpowersj: ping17:07
powersjnacc: sup17:07
naccpowersj: were you and stgraber able to figure out what's going on with the git-ubuntu jenkins ci?17:08
powersjnacc: sorry, tbh I forgot to chase that down with the ec2 merge last week, let me add it to my list and I can probably look later today or tomorrow17:08
powersjthat work?17:08
naccpowersj: that's great, thanks17:08
naccpowersj: do you want a bug filed?17:11
powersjnacc:  yeah that would be great!17:11
naccpowersj: in lp:usd-importer or the github project or ... ?17:12
powersjusd-importer17:13
naccpowersj: ack, will do it in a moment17:14
catphishnacc: thanks for looking, the manuals and example configs suggest it can be enabled, but i don't think it's compiled, i wonder if this is something i could talk to the package maintainer about, might be a matter of stability17:18
DammitJimis my understanding correct that there will be a patch for ubuntu released tomorrow for meltdown?17:20
nacccatphish: i'd file a bug, yeah17:20
catphishthanks17:21
catphishi'm interested in using it next year, so would be great to find out if it's on course to be in the builds used in 18.0417:21
catphishi'd really rather avoid my own hacky builds17:22
rbasakDammitJim: see https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown17:23
catphishit's my intention to run kvm across several hosts and store the VM disks on a single large SAN LUN to allow VM migration, lvmlockd seems like the best solution by far17:23
DammitJimthanks17:34
DammitJimrbasak,17:34
naccxnox: when you get a chance, could you look at LP: #1740892 ? And correct my systemd ordering comments, if I'm wrong18:11
ubottuLaunchpad bug 1740892 in corosync (Ubuntu) "corosync upgrade on 2018-01-02 caused pacemaker to fail" [Undecided,In progress] https://launchpad.net/bugs/174089218:11
powersjwxl: do you remember what the date was on the artful ISO that had install failures? I kicked the automation on artful and the one dated 2018-01-08 passed18:19
wxlpowersj: 20180105.1 if i remember correctly18:22
naccxnox: just put another update up18:35
naccdpb1: --^ I think that should give slashd & co. enough of a hint of what to fix. I think it's working (broken) as expected right now, and I don't see how upstream is making the assertion that it's nnot18:36
* dpb1 reads18:36
naccdpb1: the last update is verbose, but I think is the most useful18:37
naccjamespage: --^ i'm sure you'll get the LP notification, but also FYI18:37
dpb1slashd: looks like that could be a simple fix, if the 'PartOf' directive is correct.  could use an xnox or another systemd expert to chime in though18:41
naccdpb1: i thikn partof is too strong, the wants= in the last is all that's needed (but it introduces a corosync -> pacemaker dependency). My reading of the manpage is that if corosync is installed and pacemaker is not, it should not impact corosync's status18:43
dpb1nacc: what happens in that case?18:43
slashddpb1, yep will do some testing today. Hopefully we can get a fix soon, and then wait for the build farm to become operational.18:44
dpb1uninstall pacemaker, does corosync still start/stop correctly?18:44
dpb1ok18:44
dpb1right18:44
dpb1not like we can do much more til tomorrow (hopefully)18:44
naccdpb1: yeah, i'm doign that now, it looksl ike it does18:44
naccdpb1: basically unsastifiable Wants= (since there is no pacemaker.service) have no impact on commands affecting the configured service (ie. corosync in this case)18:45
dpb1makes sense18:45
dpb1good18:45
nacci don't know how much we care aobut that case for this bug, but in generall it should be fine (i'd still like xnox to look at it)18:45
naccpowersj: LP: #1741949 filed and assigend to you18:46
ubottuLaunchpad bug 1741949 in usd-importer "git-ubuntu CI failing with LXD" [High,Confirmed] https://launchpad.net/bugs/174194918:46
powersjthx18:46
naccpowersj: i gave one example, but it's hitting every CI run, afaict18:46
naccpowersj: possibly switching to using the snap will 'fix it' :)18:46
powersjheh I'll try locally then18:46
naccpowersj: ack, although we should debug and figure out why a snapd path is being used at all if we're not using hte lxd snap in the VM18:47
slashdthanks nacc18:52
naccslashd: yw, let me know if you need anything else18:53
krambiorixHi, i have this cronjob that runs at night... It takes the performance of the server totally down... Am i doing something wrong? https://pastebin.com/1PjYKx7W18:53
sdezielkrambiorix: I'd recommend piping mysqldump into gzip and save the uneeded IOs. I don't know if zip can be used in a pipeline18:55
sarnoldyou're using pipes incorrectly18:56
krambiorixsarnold, howcome?18:57
sarnoldI think sdeziel's point of using gzip instead of zip is probably a good start -- once you re-write it around that to not use local file storage you'll be on the right path18:57
sarnoldkrambiorix: when you use > foo to write stdout to a file, then use | to pipe stdout into another program, you've written an error..18:58
nacckrambiorix: what is your intent in that (very long) line?18:58
sarnoldkrambiorix: you *probably* intended to use && to run the next command only if the previous command succeeded18:58
sdezielmysqldump | gzip -9 | ssh root@10.10.10.3 'cat > /home/backups/sqlbackup$(date +\%Y\%m\%d\%H\%M\%S).sql.gz'18:59
sdezielshould avoid writing anything locally18:59
krambiorixsdeziel, wow is that a simplified version?18:59
krambiorixyes i needed &&19:00
sarnoldyeah, sdeziel's suggestion is spot-on19:01
sdezielkrambiorix: it's a suggested version to be tested :) I recommend not passing the mysql password in your cron job and use ~/.my.cnf instead.19:01
krambiorixsdeziel, but shouldn't | be && then?19:01
sarnoldit runs the risk of not actually saving something useful if the connection is terminated or destination storage is full or whatever19:01
krambiorixsarnold, but that's not a problem19:02
sdezielkrambiorix: the all "|" version streams the dump over to the remote machine, hence sarnold's point19:02
krambiorixsdeziel, ok thx i'll test it19:04
sdezielkrambiorix: for the password thing, I think the simplest way is to use "mysqldump --defaults-extra-file=/etc/mysql/debian.cnf"19:04
krambiorixsdeziel, but where's the nice thingy?19:05
sdezielkrambiorix: you can add it yourself but I don't think you'll benefit much from it because most of the work will be done by mysqld19:05
krambiorixsdeziel, ok thanks, i'll let you knwow!19:06
sdezielwell, gzip might be a bit taxing so yeah, nicing it would be a good idea19:06
krambiorixsdeziel, should i put nice in front?19:07
sdezielkrambiorix: if you put that pipeline in a script, you could add this line before calling mysqldump: renice +19 -p "$$" > /dev/null19:07
naccrbasak: ahasenack: cpaelzer: would be good if you could look at https://code.launchpad.net/~nacc/usd-importer/+git/usd-importer/+merge/333499 and the corresponding bug and help me think about the implications :)19:07
krambiorixsdeziel, does that do something to the running processes?19:09
sdezielkrambiorix: it renices the "main" script so all the child will inherit the lower priority19:10
krambiorixsdeziel, okay that's nice, i'll put it in a script19:10
sarnoldgzip's only going to max out one core at the absolute worst though19:11
sarnoldand if it does give you trouble maybe switching to lz4 or similar would work out19:11
krambiorixok, it seems to have worked!! THanks guys!19:19
sarnoldexcellent ;) have fun19:19
krambiorixsarnold, sdeziel i want to add the document backup line also in the script: https://pastebin.com/HuFjJKwT   -> how could i make this shorter?19:23
nacckrambiorix: that still looks ... wrong to me?19:23
sarnoldkrambiorix: with a similar transformation, tar cf - /home/myfils | gzip | ssh root@10.10.10.3 'cat > ...'19:24
nacckrambiorix: the whole point of pipes is that you would't have the same file referred to multiple times19:24
krambiorixow ok19:26
xnoxnacc, PartOf=/ConsistsOf= is not as strong as BindsTo=/BoundBy=19:51
xnoxConfigures dependencies similar to Requires=, but limited to stopping and restarting of units. When systemd stops or restarts the units listed here, the action is propagated to this unit. Note that this is a one-way dependency — changes to this unit do not affect the listed units.19:51
xnoxWhen PartOf=b.service is used on a.service, this dependency will show as ConsistsOf=a.service in property listing of b.service. ConsistsOf= dependency cannot be specified directly.19:51
xnoxRequires is all about "starting" and "stopping"19:52
xnoxPartOf is kind of like, "oh and by the way, restart that too, if you can" a wants-like stanza, for "stopping/restarting"19:52
xnoxcause wants is like "oh and by the way, start that too, if you can"19:52
xnoxBindsTo= would be too strong, and would actually require two things to be always present.19:53
xnoxnacc, re-reading the bug again, not sure how above is relevant.19:54
xnoxwill add to my to do to read/do19:54
krambiorixsarnold, i tried the documentbackup thing but i had to stop it because my server space was full20:13
krambiorixnow it's still full, where can i find that temp file?20:13
sarnoldkrambiorix: "that temp file"?20:13
krambiorixsarnold, well, i asume it creates a temp file because i can't find the zipped file in the path /home/myfiles20:14
krambiorixbecause the zipping was stopped20:14
sarnoldkrambiorix: if you switched to tar and gzip as I suggested, there is no temporary file -- the output of one tool is fed to the input of the other tool in small blocks and shipped off the OS without ever hitting the disk20:15
krambiorixsarnold, the zipping is more than 10GB and i can't find any file but my server is full20:15
sarnold"my server" -- source or destination?20:15
krambiorixsarnold, source20:16
sarnoldkrambiorix: pastebin df -h output .. maybe there's something easy ..20:17
krambiorixsarnold, https://pastebin.com/v9SVFYu320:17
cpaelzernacc: commented on the MP, let me know if I shot into the wrong direction20:18
cpaelzernacc: I thought I give it a review for the race you mention intentionally without syncing with you - it is either giving it a new POV that might be interesting - or - be total crab20:18
cpaelzernacc: in case of the latter ignore it or if you want use replying on my example to better outline the actual problem with the cache race that you see20:19
sarnoldkrambiorix: okay, try using du -x / | sort -n    to find the largest directories20:19
krambiorixsarnold, nothing special20:28
sarnoldkrambiorix: hrm, the second thing you pasted showed making a zip file of /home/myfiles/ and storing the zip file in /home/myfiles/ ..20:29
sarnoldkrambiorix: how many times did you run that tool? :)20:30
naccxnox: I thought requires is all about starting and stopping, but at least on xenial, it seems to be only about stopping :)20:33
naccxnox: but thank you20:33
nacccpaelzer: thanks20:34
krambiorixsarnold, one time20:34
krambiorixsarnold, i see that /root/.cache is rather big20:34
sarnoldkrambiorix: hrm, the usual theory with ~/.cache/ directories is that they can be removed at any time20:35
naccxnox: i think what we want to ensure is that whenever corosync starts/stops/restarts that, if pacemaker is also present, it is also started/stopped/restarted20:35
sarnoldkrambiorix: but it might be worth looking around in there to find out _what_ writes there. that's strange.20:35
krambiorixsarnold, i don't see new files20:37
krambiorixsarnold, my server storage had 80% and now 99%20:37
krambiorixsarnold, forget it, i took a copy of my files folder before testing the script20:38
krambiorixi'm so sorry :)20:38
mburke2nacc: hello!21:02
naccmburke2: hiya!21:03
naccdpb1: --^ mburke2 is having trouble getting in touch with canonical for support21:03
lucidguyWhy is it taking so long for Ubuntu to provide official patches for Meltdown&Spectre?21:03
rbasaklucidguy: see https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown21:04
rbasaklucidguy: all further discussion in #ubuntu-hardened please.21:04
lucidguyrbasak: I'm aware of that page, thats how I know the official updates are not available??21:06
rbasaklucidguy: your question has an answer on that page there. If you want to talk about this further, using the #ubuntu-hardened channel please, as that's where security discussions take place. Questions asking for security updates are off topic on this channel. And most of the relevant people aren't even in this channel.21:07
rbasak*use* the #ubuntu-hardened channel please. Sorry for the typo.21:08
lucidguySo, what topics are allowed?  Any topic that doesn't have it's own channel I guess.  Kinda Silly21:10
sdeziellucidguy: the idea is to reach the relevant people21:10
rbasakGenerally we try to stick to not more than one channel for any given topic. Then the conversation doesn't get scattered everywhere, and people who are interested don't miss most of the conversation.21:11
rbasakhttps://wiki.ubuntu.com/IRC/Guidelines21:11
rbasak"Ask your question in the channel that is most relevant to your query. Don't post in multiple Ubuntu channels or in channels with unrelated topics."21:11
mburke2dpb1: I subscribed to Ubuntu Advantage on AWS today and am trying to get an ESM token. I don't see any way to get one from AWS, Launchpad, or other sites (like auth.livepatch.canonical.com provides for live patch). I tried filling in the support form on support.canonical.com and haven't received any confirmation that it was received21:23
mburke2and none of the canonical phone numbers are picking up21:23
slashdmburke2, ping me in private message please.21:38
naccslashd: thanks!21:39
naccrbasak: i'd really like to get, if at all possible, at least your current testing spike stuff landed -- so that i can rebase on to it for other lp-beta stuff22:40
naccrbasak: let's sync on that tmrw, if you have the time22:40
mburke2nacc / slashd, I seem to be all setup now. thank you very much for your help, I really appreciate it!22:57
slashdmburke2, my pleasure23:01
dpb1glad to hear23:03

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!