/srv/irclogs.ubuntu.com/2018/01/17/#ubuntu-server.txt

HyD3If i have a ubuntu 16 server and a vm how can i make the vm have access to internet but exclude host machine..just need a nudge in right direction02:16
HyD3I want host to have no access at all02:16
keithzgHyD3: Since the host is providing the network device to the guest I don't even know if that'd be possible, at least not to the degree I'm aware of with the hypervisors I've used (KVM and VirtualBox).02:30
keithzg(Not provably and completely, at least; obviously you could get this *apparently* true just with firewall rules and such)02:31
patdk-lapthere are MANY ways to do it02:39
patdk-lapbut with that limited amount of info, no idea what way you need, or if any of them would work for you02:39
patdk-lapyou are talking about network design02:39
patdk-lapor you can take the real way02:40
patdk-lapand just pass the network card through to the vm, and not have a network card even installed on the host02:40
keithzgpatdk-lap: Fair enough; I just haven't seen any ways to pass PCI (or such) devices to VirtualBox or KVM guests, I mean I know it's possible in some scenarios but don't you need additional hardware support too? Although I suppose if you're willing to use a USB network adapter, *that* is super simple in the shiny GUI interfaces, even. Although yeah it was an ambiguously made request from someone who then quit the channel, so ¯\_(ツ)_/¯04:09
lordievaderGood morning07:25
=== cpaelzer_ is now known as cpaelzer
ahasenackrbasak: hi, good morning, around?11:31
rbasakahasenack: o/11:34
ahasenackrbasak: got some prelim results for the zstd packaging, lemme paste11:35
ahasenackrbasak: xenial: https://pastebin.ubuntu.com/26404010/11:35
ahasenackrbasak: artful: https://pastebin.ubuntu.com/26404013/11:35
ahasenackrbasak: I'm now testing a release upgrade11:35
ahasenackmight just use dist-upgrade with sources pointed at artful, tbh11:36
ahasenackbionic will be like artful11:36
rbasakLooks good so far I think?11:37
ahasenackyes11:37
Neo4hi11:47
Neo4what might I install for send mail on ubuntu?11:48
ahasenackNeo4: as a server, or do you mean an email client?11:51
Neo4ahasenack: I don't know, on my ubuntu server, mail php function doesn't send messages11:52
Neo4it doesn't work11:52
ahasenackah, you need "/usr/bin/sendmail"11:52
ahasenackI'd suggest postfix11:52
Neo4postfix? it's MTA11:53
Neo4mail transfer agent11:53
ahasenackbut it provides that binary which php is calling, and can be configured to just send email out11:53
ahasenackthere are simpler alternatives, of course11:53
Neo4I want also have mail like name.mydome11:53
ahasenacknote that you will need a "smart relay" for these alternatives, as they only know how to deliver to the next hop, not to the internet at large11:54
Neo4if I install postfix shall I have mails?11:54
Neo4ahasenack: well, I'll customize droplet on digitalocean now and will install there all needed app11:55
Neo4will do it for test11:55
Neo4I'm going install there roundcobe11:55
Neo4http://roundcobe.net11:55
Neo4https://roundcube.net/11:56
ahasenackrbasak: release upgrade results look good as well, I will update the bug12:18
tobascojamespage: coreycb sorry if i've asked this before, im working on keeping ubuntu supported in upstream openstack puppet modules and for the ocata packages panko-api and nova-placement-api depends libapache2-mod-wsgi12:54
tobascolike this: nova-placement-api : Depends: libapache2-mod-wsgi but it is not going to be installed12:54
tobasco/usr/bin/apt-get -q -y -o DPkg::Options::=--force-confold install nova-placement-api12:54
tobascoshould i interpret this as the modules must make sure all apache requirements is met before installing that package? so dropping the eventlet support for those two would probably be it12:55
tobasco*queens not ocata, seems like im tired today12:56
rbasaktobasco: "...but it is not going to be installed" usually is apt being unable to resolve a conflicts.13:07
rbasakIf (for debugging) you give apt an explicit list that includes libapache2-mod-wsgi, it should tell you exactly what the reason is.13:07
tobascorbasak: ty i will test13:29
tobascorbasak: didn't get much more help from the output but seems to be some dependency issues13:32
tobascohttps://pastebin.com/KyQNhC9013:32
tobascoor it seems to be a conflict because of the first "removing gnocchi", "removing libapache2-mod-wsgi-py313:33
tobascoconflict when it needs libapache2-mod-wsgi but it already has libapache2-mod-wsgi-py3 installed13:34
Neo4I've got error http://pix.toile-libre.org/?img=1516196072.png13:35
Neo4now let encript doesnt work?13:35
rbasaktobasco: OK so your problem is that libapache2-mod-wsgi-py3 and libapache2-mod-wsgi conflict and both can't be installed at once.13:43
rbasakI think that is probably because Apache can't embed both Python 2 and Python 3 at once.13:44
Neo4I do it, now works https://american-chat.ru/13:44
ahasenackrbasak: hi, could you please reimport libzstd? In bionic, the archive has 1.3.3, but ubuntu/devel has 1.3.2 in git. Same for ubuntu/bionic-devel (only 1.3.2)13:45
rbasakahasenack: ack13:45
ahasenackthx13:45
ahasenackrbasak: you know, this sru story is making this package grow a delta now :/13:45
rbasakYeah13:45
rbasakIt's only for the transtiional purpose though, right? It will be able to be synced post Bionic.13:46
ahasenackI think so13:46
ahasenackrbasak: could you please accept my two new nominations in https://bugs.launchpad.net/ubuntu/+source/libzstd/+bug/1717040 ?13:47
ubottuLaunchpad bug 1717040 in libzstd (Ubuntu Zesty) "Please backport libzstd 1.3.1+dfsg-1 (universe) from artful" [Undecided,In progress]13:47
tobascorbasak: thanks for your help :)13:52
rbasaktobasco: you're welcome!14:05
rbasakahasenack: Accepted Artful. But I'm not sure we need it for Bionic. Use the main task to track Bionic. Otherwise when C opens we'll get another task which can be confusing.14:06
ahasenackthe main one was marked fix released already, I didn't want to change that, but I can if you think it's better14:07
rbasakReopen it14:07
rbasakAdding a Bionic task wouldn't work around that. The main one would just disappear (it'd say "Tracked in Bionic")14:07
ahasenackok14:07
rbasakahasenack: import done14:18
tobascojamespage: what14:20
tobasco*what's the reason for forcing installation apache for gnocchi-api package?14:20
tobascoi understand forcing python3 to use it, but forcing operators to run under apache will need them to run gnocchi on another node and it cannot be colocated with other services because it depends on libapache2-mod-wsgi-py3 package14:21
jamespagetobasco: tl;dr don't install gnocchi-api - use python3-gnocchi and gnocchi-common instead14:34
jamespagegnocchi-api *is* the apache configuration for gnocchi with mod-wsgi-py314:35
tobascothat makes more sense, thanks :)14:37
Neo4who know how to send mail? I installed postfixe and have tried send mail using this14:58
Neo4echo "This is the body of the email" | mail -s "This is the subject line" neovichnn@gmail.com14:58
Neo4I didn't see males14:58
masonNeo4: http://www.postfix.org/docs.html is useful14:59
Neo4mason: I used this guide and 3 step doesn't work https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-postfix-as-a-send-only-smtp-server-on-ubuntu-16-0415:00
masonNeo4: Oh. Heh. Just occurred to me... If this is a fresh install on a DO machine, you might have had bad luck with your IP address assignment.15:02
masonLook at /var/log/mail.log to see if the system delivered your email. It might have been flagged as spam.15:03
Neo4yes fresh15:03
Neo4how to test bad luck or good?15:03
Neo4my ip on DO 165.227.148.9415:04
masonNeo4: Well. One thing you can do is install rblcheck.15:04
masonBut it shows you as not-listed, so that's good.15:05
masonCheck your logs to see what happened when you sent the mail.15:05
Neo4I don't know how15:07
masonless /var/log/mail.log15:08
tobascojamespage: but gnocchi-api systemd unit files are still in gnocchi-api package right? so either way it's a lot of customization or forcing to install apache15:15
tobascoatleast i don't get one, so i assume so15:15
ahasenackrbasak: hm, zstd uses d-shlibmove in d/rules, and on xenial it's complaining:15:16
ahasenackE: line [Provides:.*libzstd-dev] not found in debian/control section for libzstd1-dev15:16
ahasenackbuild log: https://launchpadlibrarian.net/353790577/buildlog_ubuntu-xenial-amd64.libzstd_1.3.1+dfsg-1~ubuntu0.16.04.1~ppa4_BUILDING.txt.gz15:16
ahasenackrbasak: do you know why athat is?15:16
ahasenackthat*15:16
ahasenackdo I need a Provides: libzstd-dev in the libzstd1-dev package? It has a conflicts with libzstd-dev, btw15:17
rbasakI'd never heard of d-shlibmove before, sorry.15:18
Neo4mason: I got this in folder /var/mail/ in file neo15:24
Neo4http://dpaste.com/1HGMRS415:24
masonNeo4: Ah, yeah. Are you setting this up as a spam cannon or something?15:25
masonIf not, you've got an abused IP address.15:25
Neo4I set nothing15:25
Neo4I didn't get spam even15:26
Neo4spam folder is empty15:26
jamespagetobasco: no - its only apache config and maintainer scripts15:26
masonNeo4: Right. GMail refused delivery because of your IP reputation.15:26
jamespagetobasco: http://paste.ubuntu.com/26404947/15:26
Neo4mason: why do you think so?15:27
masonNeo4: This is out of your control. Try a new IP address. If you're very new to mail you don't want to try tackling rehabilitating your IP address rep.15:27
masonNeo4: I think so because I read the message you put on the pastebin. :)15:27
Neo4I change host name15:27
Neo4neo@ubuntu-s-1vcpu-1gb-fra1-01 seems it's wrong?15:28
Neo4well, know install it on my second VPS15:29
masonNeo4: Nothing to do with your hostname.15:31
masonBut yes, try on a different VM.15:31
Neo4why that doesn't work?15:32
Neo4it should be in spam15:32
masonRead the message you put in the pastebin. They refused deliery for the reasons they state.15:32
masonThat's a complete and thorough answer.15:32
Neo4there exists firewall15:34
Neo4ufw15:34
Neo4suddenly he is block postfix?15:34
masonNeo4: No, Google blocked you. Not your firewall.15:35
tobascojamespage: okok15:36
tobascoty15:36
tobascocould we add a systemd unit files in the gnocchi-common package?15:37
tobascoif you use gnocchi-api for apache config what if you want to run it standalone, then it would cover all use cases, custom wsgi, apache wsgi or standalone15:38
Neo4mason: yes, I got message from other vps15:38
tobascomight already be supplied for the other packages, i assume only gnocchi-api is apache backed15:38
Neo4mason: why google block my vps on digitalocean?15:38
rbasaksystemd unit files in a -common package in general sounds inappropriate. I don't know the specifics in this case though.15:39
rbasakSince we usually want multiple things to consume -common packages, including things that may not want services.15:39
rbasakFor example, mysql-server-5.7 depends on mysql-common, amongst other things.15:40
rbasakSo does mysql-server-core-5.7.15:40
masonNeo4: They included their reasoning in the pastebin you shared. It's really that easy, unfortunately.15:40
rbasakUsers can consume mysql-server-core-5.7 if they want the binaries but no service.15:40
rbasakThe systemd unit exists in mysql-server-5.7 only.15:40
tobascorbasak: i totally agree, however i think the overall forcing users to run apache py3 which cannot be un on the same node as other py2 apache wsgi stuff is a bad idea15:41
Neo4mason: and what shall I do?15:41
Neo4rbasak: it means google is bad mail server?15:42
masonNeo4: No, it means the IPs you've tried are problematic.15:42
masonGoogle being a bad mail server is a separate issue. :)15:42
rbasaktobasco: AIUI, that isn't what's going on here though. You aren't forced to install that particular package.15:42
Neo4mason: why my ip is problematic?15:43
Neo4it's new IP15:43
masonNeo4: Someone has used it before you then.15:43
Neo4mason: and it means I can't send any message? Other servers will accept my massage  s15:44
Neo4not google15:44
tobascorbasak: somewhat true, it's still not a complete usable package. it's alot of work when trying to support multiple os in puppet modules if rhel supply systemd files or py2 with apache and ubuntu supplies py3 apache and no systemd files. that means i have to add custom systemd files to puppet modules instead of them being in the package15:45
masonNeo4: Correct.15:45
tobascocustom systemd files for a specific os even so15:45
masonNeo4: Look at SPF and DKIM. Maybe you can rehab what you've got.15:47
tobascoso instead of breaking existing packages why not add a gnocchi-api-apache package that depends on gnocchi-api and supplies the dependencies and configs that breaks usage alongside other stuff15:47
rbasaktobasco: sounds like a feature request.15:48
rbasaktobasco: AIUI, it doesn't break existing packages.15:49
rbasakIt's just that two particular packages aren't co-installable. But they never were. And presumably everything still works if you use multiple machines, containers or VMs so co-installability isn't a problem in that case.15:50
rbasakSo the packages are still usable; just not in the particular way that you want.15:50
Neo4mason: see I got message from adress www-data@v119512.kvm.test-hf.su , how I can send mail from other addresses?15:50
masonNeo4: Look at SPF and DKIM. Maybe you can rehab what you've got.15:51
Neo4I want something like this admin@hacker.pro . Can I got it?15:51
masonProbably.15:51
Neo4mason: how?15:51
Neo4using postfix?15:52
tobascorbasak: true, my use-case is that i cannot test it in an aio installation, so ci is broken and ubuntu support will be removed upstream for puppet modules if not resolved15:52
masonIt's just a domain. Since everything's a TLD nowadays I assume that is too. Buy it.15:52
masonAnyway, I'm off for a bit. o/15:52
rbasaktobasco: well, you _can_ test it. You just need to take care of starting the services yourself in (AIUI) your unique test-environment-only use case.16:13
rbasaktobasco: and those systemd units wouldn't be used in production, right? So they don't need to be tested for your results to be good.16:14
rbasaktobasco: anyway, I'm just a spectator. I have no decision wrt. those packages.16:16
rbasaktobasco: just making the observation16:16
jose-phillipshi18:10
jose-phillipssomeone can help me with a issue with multipath iscsi diskless server18:10
jose-phillipsim trying to perform a multipath18:10
jose-phillipsbut i get this error18:10
jose-phillipslibdevmapper: ioctl/libdm-iface.c(1876): device-mapper: reload ioctl on ROOTDISK failed: Device or resource busy18:11

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!