[02:16] <HyD3> If i have a ubuntu 16 server and a vm how can i make the vm have access to internet but exclude host machine..just need a nudge in right direction
[02:16] <HyD3> I want host to have no access at all
[02:30] <keithzg> HyD3: Since the host is providing the network device to the guest I don't even know if that'd be possible, at least not to the degree I'm aware of with the hypervisors I've used (KVM and VirtualBox).
[02:31] <keithzg> (Not provably and completely, at least; obviously you could get this *apparently* true just with firewall rules and such)
[02:39] <patdk-lap> there are MANY ways to do it
[02:39] <patdk-lap> but with that limited amount of info, no idea what way you need, or if any of them would work for you
[02:39] <patdk-lap> you are talking about network design
[02:40] <patdk-lap> or you can take the real way
[02:40] <patdk-lap> and just pass the network card through to the vm, and not have a network card even installed on the host
[04:09] <keithzg> patdk-lap: Fair enough; I just haven't seen any ways to pass PCI (or such) devices to VirtualBox or KVM guests, I mean I know it's possible in some scenarios but don't you need additional hardware support too? Although I suppose if you're willing to use a USB network adapter, *that* is super simple in the shiny GUI interfaces, even. Although yeah it was an ambiguously made request from someone who then quit the channel, so ¯\_(ツ)_/¯
[07:25] <lordievader> Good morning
=== cpaelzer_ is now known as cpaelzer
[11:31] <ahasenack> rbasak: hi, good morning, around?
[11:34] <rbasak> ahasenack: o/
[11:35] <ahasenack> rbasak: got some prelim results for the zstd packaging, lemme paste
[11:35] <ahasenack> rbasak: xenial: https://pastebin.ubuntu.com/26404010/
[11:35] <ahasenack> rbasak: artful: https://pastebin.ubuntu.com/26404013/
[11:35] <ahasenack> rbasak: I'm now testing a release upgrade
[11:36] <ahasenack> might just use dist-upgrade with sources pointed at artful, tbh
[11:36] <ahasenack> bionic will be like artful
[11:37] <rbasak> Looks good so far I think?
[11:37] <ahasenack> yes
[11:47] <Neo4> hi
[11:48] <Neo4> what might I install for send mail on ubuntu?
[11:51] <ahasenack> Neo4: as a server, or do you mean an email client?
[11:52] <Neo4> ahasenack: I don't know, on my ubuntu server, mail php function doesn't send messages
[11:52] <Neo4> it doesn't work
[11:52] <ahasenack> ah, you need "/usr/bin/sendmail"
[11:52] <ahasenack> I'd suggest postfix
[11:53] <Neo4> postfix? it's MTA
[11:53] <Neo4> mail transfer agent
[11:53] <ahasenack> but it provides that binary which php is calling, and can be configured to just send email out
[11:53] <ahasenack> there are simpler alternatives, of course
[11:53] <Neo4> I want also have mail like name.mydome
[11:54] <ahasenack> note that you will need a "smart relay" for these alternatives, as they only know how to deliver to the next hop, not to the internet at large
[11:54] <Neo4> if I install postfix shall I have mails?
[11:55] <Neo4> ahasenack: well, I'll customize droplet on digitalocean now and will install there all needed app
[11:55] <Neo4> will do it for test
[11:55] <Neo4> I'm going install there roundcobe
[11:55] <Neo4> http://roundcobe.net
[11:56] <Neo4> https://roundcube.net/
[12:18] <ahasenack> rbasak: release upgrade results look good as well, I will update the bug
[12:54] <tobasco> jamespage: coreycb sorry if i've asked this before, im working on keeping ubuntu supported in upstream openstack puppet modules and for the ocata packages panko-api and nova-placement-api depends libapache2-mod-wsgi
[12:54] <tobasco> like this: nova-placement-api : Depends: libapache2-mod-wsgi but it is not going to be installed
[12:54] <tobasco> /usr/bin/apt-get -q -y -o DPkg::Options::=--force-confold install nova-placement-api
[12:55] <tobasco> should i interpret this as the modules must make sure all apache requirements is met before installing that package? so dropping the eventlet support for those two would probably be it
[12:56] <tobasco> *queens not ocata, seems like im tired today
[13:07] <rbasak> tobasco: "...but it is not going to be installed" usually is apt being unable to resolve a conflicts.
[13:07] <rbasak> If (for debugging) you give apt an explicit list that includes libapache2-mod-wsgi, it should tell you exactly what the reason is.
[13:29] <tobasco> rbasak: ty i will test
[13:32] <tobasco> rbasak: didn't get much more help from the output but seems to be some dependency issues
[13:32] <tobasco> https://pastebin.com/KyQNhC90
[13:33] <tobasco> or it seems to be a conflict because of the first "removing gnocchi", "removing libapache2-mod-wsgi-py3
[13:34] <tobasco> conflict when it needs libapache2-mod-wsgi but it already has libapache2-mod-wsgi-py3 installed
[13:35] <Neo4> I've got error http://pix.toile-libre.org/?img=1516196072.png
[13:35] <Neo4> now let encript doesnt work?
[13:43] <rbasak> tobasco: OK so your problem is that libapache2-mod-wsgi-py3 and libapache2-mod-wsgi conflict and both can't be installed at once.
[13:44] <rbasak> I think that is probably because Apache can't embed both Python 2 and Python 3 at once.
[13:44] <Neo4> I do it, now works https://american-chat.ru/
[13:45] <ahasenack> rbasak: hi, could you please reimport libzstd? In bionic, the archive has 1.3.3, but ubuntu/devel has 1.3.2 in git. Same for ubuntu/bionic-devel (only 1.3.2)
[13:45] <rbasak> ahasenack: ack
[13:45] <ahasenack> thx
[13:45] <ahasenack> rbasak: you know, this sru story is making this package grow a delta now :/
[13:45] <rbasak> Yeah
[13:46] <rbasak> It's only for the transtiional purpose though, right? It will be able to be synced post Bionic.
[13:46] <ahasenack> I think so
[13:47] <ahasenack> rbasak: could you please accept my two new nominations in https://bugs.launchpad.net/ubuntu/+source/libzstd/+bug/1717040 ?
[13:47] <ubottu> Launchpad bug 1717040 in libzstd (Ubuntu Zesty) "Please backport libzstd 1.3.1+dfsg-1 (universe) from artful" [Undecided,In progress]
[13:52] <tobasco> rbasak: thanks for your help :)
[14:05] <rbasak> tobasco: you're welcome!
[14:06] <rbasak> ahasenack: Accepted Artful. But I'm not sure we need it for Bionic. Use the main task to track Bionic. Otherwise when C opens we'll get another task which can be confusing.
[14:07] <ahasenack> the main one was marked fix released already, I didn't want to change that, but I can if you think it's better
[14:07] <rbasak> Reopen it
[14:07] <rbasak> Adding a Bionic task wouldn't work around that. The main one would just disappear (it'd say "Tracked in Bionic")
[14:07] <ahasenack> ok
[14:18] <rbasak> ahasenack: import done
[14:20] <tobasco> jamespage: what
[14:20] <tobasco> *what's the reason for forcing installation apache for gnocchi-api package?
[14:21] <tobasco> i understand forcing python3 to use it, but forcing operators to run under apache will need them to run gnocchi on another node and it cannot be colocated with other services because it depends on libapache2-mod-wsgi-py3 package
[14:34] <jamespage> tobasco: tl;dr don't install gnocchi-api - use python3-gnocchi and gnocchi-common instead
[14:35] <jamespage> gnocchi-api *is* the apache configuration for gnocchi with mod-wsgi-py3
[14:37] <tobasco> that makes more sense, thanks :)
[14:58] <Neo4> who know how to send mail? I installed postfixe and have tried send mail using this
[14:58] <Neo4> echo "This is the body of the email" | mail -s "This is the subject line" neovichnn@gmail.com
[14:58] <Neo4> I didn't see males
[14:59] <mason> Neo4: http://www.postfix.org/docs.html is useful
[15:00] <Neo4> mason: I used this guide and 3 step doesn't work https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-postfix-as-a-send-only-smtp-server-on-ubuntu-16-04
[15:02] <mason> Neo4: Oh. Heh. Just occurred to me... If this is a fresh install on a DO machine, you might have had bad luck with your IP address assignment.
[15:03] <mason> Look at /var/log/mail.log to see if the system delivered your email. It might have been flagged as spam.
[15:03] <Neo4> yes fresh
[15:03] <Neo4> how to test bad luck or good?
[15:04] <Neo4> my ip on DO 165.227.148.94
[15:04] <mason> Neo4: Well. One thing you can do is install rblcheck.
[15:05] <mason> But it shows you as not-listed, so that's good.
[15:05] <mason> Check your logs to see what happened when you sent the mail.
[15:07] <Neo4> I don't know how
[15:08] <mason> less /var/log/mail.log
[15:15] <tobasco> jamespage: but gnocchi-api systemd unit files are still in gnocchi-api package right? so either way it's a lot of customization or forcing to install apache
[15:15] <tobasco> atleast i don't get one, so i assume so
[15:16] <ahasenack> rbasak: hm, zstd uses d-shlibmove in d/rules, and on xenial it's complaining:
[15:16] <ahasenack> E: line [Provides:.*libzstd-dev] not found in debian/control section for libzstd1-dev
[15:16] <ahasenack> build log: https://launchpadlibrarian.net/353790577/buildlog_ubuntu-xenial-amd64.libzstd_1.3.1+dfsg-1~ubuntu0.16.04.1~ppa4_BUILDING.txt.gz
[15:16] <ahasenack> rbasak: do you know why athat is?
[15:16] <ahasenack> that*
[15:17] <ahasenack> do I need a Provides: libzstd-dev in the libzstd1-dev package? It has a conflicts with libzstd-dev, btw
[15:18] <rbasak> I'd never heard of d-shlibmove before, sorry.
[15:24] <Neo4> mason: I got this in folder /var/mail/ in file neo
[15:24] <Neo4> http://dpaste.com/1HGMRS4
[15:25] <mason> Neo4: Ah, yeah. Are you setting this up as a spam cannon or something?
[15:25] <mason> If not, you've got an abused IP address.
[15:25] <Neo4> I set nothing
[15:26] <Neo4> I didn't get spam even
[15:26] <Neo4> spam folder is empty
[15:26] <jamespage> tobasco: no - its only apache config and maintainer scripts
[15:26] <mason> Neo4: Right. GMail refused delivery because of your IP reputation.
[15:26] <jamespage> tobasco: http://paste.ubuntu.com/26404947/
[15:27] <Neo4> mason: why do you think so?
[15:27] <mason> Neo4: This is out of your control. Try a new IP address. If you're very new to mail you don't want to try tackling rehabilitating your IP address rep.
[15:27] <mason> Neo4: I think so because I read the message you put on the pastebin. :)
[15:27] <Neo4> I change host name
[15:28] <Neo4> neo@ubuntu-s-1vcpu-1gb-fra1-01 seems it's wrong?
[15:29] <Neo4> well, know install it on my second VPS
[15:31] <mason> Neo4: Nothing to do with your hostname.
[15:31] <mason> But yes, try on a different VM.
[15:32] <Neo4> why that doesn't work?
[15:32] <Neo4> it should be in spam
[15:32] <mason> Read the message you put in the pastebin. They refused deliery for the reasons they state.
[15:32] <mason> That's a complete and thorough answer.
[15:34] <Neo4> there exists firewall
[15:34] <Neo4> ufw
[15:34] <Neo4> suddenly he is block postfix?
[15:35] <mason> Neo4: No, Google blocked you. Not your firewall.
[15:36] <tobasco> jamespage: okok
[15:36] <tobasco> ty
[15:37] <tobasco> could we add a systemd unit files in the gnocchi-common package?
[15:38] <tobasco> if you use gnocchi-api for apache config what if you want to run it standalone, then it would cover all use cases, custom wsgi, apache wsgi or standalone
[15:38] <Neo4> mason: yes, I got message from other vps
[15:38] <tobasco> might already be supplied for the other packages, i assume only gnocchi-api is apache backed
[15:38] <Neo4> mason: why google block my vps on digitalocean?
[15:39] <rbasak> systemd unit files in a -common package in general sounds inappropriate. I don't know the specifics in this case though.
[15:39] <rbasak> Since we usually want multiple things to consume -common packages, including things that may not want services.
[15:40] <rbasak> For example, mysql-server-5.7 depends on mysql-common, amongst other things.
[15:40] <rbasak> So does mysql-server-core-5.7.
[15:40] <mason> Neo4: They included their reasoning in the pastebin you shared. It's really that easy, unfortunately.
[15:40] <rbasak> Users can consume mysql-server-core-5.7 if they want the binaries but no service.
[15:40] <rbasak> The systemd unit exists in mysql-server-5.7 only.
[15:41] <tobasco> rbasak: i totally agree, however i think the overall forcing users to run apache py3 which cannot be un on the same node as other py2 apache wsgi stuff is a bad idea
[15:41] <Neo4> mason: and what shall I do?
[15:42] <Neo4> rbasak: it means google is bad mail server?
[15:42] <mason> Neo4: No, it means the IPs you've tried are problematic.
[15:42] <mason> Google being a bad mail server is a separate issue. :)
[15:42] <rbasak> tobasco: AIUI, that isn't what's going on here though. You aren't forced to install that particular package.
[15:43] <Neo4> mason: why my ip is problematic?
[15:43] <Neo4> it's new IP
[15:43] <mason> Neo4: Someone has used it before you then.
[15:44] <Neo4> mason: and it means I can't send any message? Other servers will accept my massage  s
[15:44] <Neo4> not google
[15:45] <tobasco> rbasak: somewhat true, it's still not a complete usable package. it's alot of work when trying to support multiple os in puppet modules if rhel supply systemd files or py2 with apache and ubuntu supplies py3 apache and no systemd files. that means i have to add custom systemd files to puppet modules instead of them being in the package
[15:45] <mason> Neo4: Correct.
[15:45] <tobasco> custom systemd files for a specific os even so
[15:47] <mason> Neo4: Look at SPF and DKIM. Maybe you can rehab what you've got.
[15:47] <tobasco> so instead of breaking existing packages why not add a gnocchi-api-apache package that depends on gnocchi-api and supplies the dependencies and configs that breaks usage alongside other stuff
[15:48] <rbasak> tobasco: sounds like a feature request.
[15:49] <rbasak> tobasco: AIUI, it doesn't break existing packages.
[15:50] <rbasak> It's just that two particular packages aren't co-installable. But they never were. And presumably everything still works if you use multiple machines, containers or VMs so co-installability isn't a problem in that case.
[15:50] <rbasak> So the packages are still usable; just not in the particular way that you want.
[15:50] <Neo4> mason: see I got message from adress www-data@v119512.kvm.test-hf.su , how I can send mail from other addresses?
[15:51] <mason> Neo4: Look at SPF and DKIM. Maybe you can rehab what you've got.
[15:51] <Neo4> I want something like this admin@hacker.pro . Can I got it?
[15:51] <mason> Probably.
[15:51] <Neo4> mason: how?
[15:52] <Neo4> using postfix?
[15:52] <tobasco> rbasak: true, my use-case is that i cannot test it in an aio installation, so ci is broken and ubuntu support will be removed upstream for puppet modules if not resolved
[15:52] <mason> It's just a domain. Since everything's a TLD nowadays I assume that is too. Buy it.
[15:52] <mason> Anyway, I'm off for a bit. o/
[16:13] <rbasak> tobasco: well, you _can_ test it. You just need to take care of starting the services yourself in (AIUI) your unique test-environment-only use case.
[16:14] <rbasak> tobasco: and those systemd units wouldn't be used in production, right? So they don't need to be tested for your results to be good.
[16:16] <rbasak> tobasco: anyway, I'm just a spectator. I have no decision wrt. those packages.
[16:16] <rbasak> tobasco: just making the observation
[18:10] <jose-phillips> hi
[18:10] <jose-phillips> someone can help me with a issue with multipath iscsi diskless server
[18:10] <jose-phillips> im trying to perform a multipath
[18:10] <jose-phillips> but i get this error
[18:11] <jose-phillips> libdevmapper: ioctl/libdm-iface.c(1876): device-mapper: reload ioctl on ROOTDISK failed: Device or resource busy