[00:06] cpaelzer: postgresql-10 is now blocked by the freeze, feel free to pick it up from here (pg-repack has already migrated) === uplime- is now known as uplime === markthomas_ is now known as markthomas === Foritus_ is now known as Foritus === devil is now known as Guest39994 [01:05] Can anyone recommend a web app I Can install on my home server to allow basic file management to a specific server location (upload, download, delete) through the browser? [01:06] remaining space on partition would be nice too [01:08] owncloud or nextcloud seemed popular [01:23] (Nextcloud is awesome) [01:25] paul__: I would definitely look into Nextcloud for that. Nice, clean web interface, good controls, sync clients, etc. You can also set quotas on users. === mundus2018 is now known as mundus === devil is now known as Guest38148 [06:05] Good morning [06:29] nacc: I see pg-10 is now just waiting for freeze as you said [06:30] nacc: there is not much more to do, I pinged the release team, but we are good if that migrates next week as well [06:30] nacc: IIRC after the beta spins are complete it should migrate prior to release [06:30] or do you think without pings it will automatically become a post release SRU? === thib_ is now known as thib === cpaelzer_ is now known as cpaelzer === ahasenac` is now known as ahasenack === ahasenack is now known as Guest7888 === Guest7888 is now known as ahasenack [12:44] tyhicks: think i figured out why the Precision (on the 4.4 kernel) still broke despite removing intel-microcode - i updated the BIOS, which as i proved with the XPS, also updated the microcode [12:44] trying your 4.4 kernel now === TJ_Remix is now known as TJ- [13:07] hallelujah, 4.4.0-119 working with SSSD [13:11] tyhicks: many thanks for your hard work fixing this [13:46] Gargravarr: thanks for the testing! [14:15] rbasak: hi, since you know debian [14:15] rbasak: https://anonscm.debian.org/gitweb/?p=collab-maint/logwatch.git I'm trying to see the commit for "dovecot: Ignore "Logged out" and "Debug" lines. closes...", at the very end of the "short log" section [14:15] but I get "bad object id" [14:15] is anonscm.debian.org broken? [14:19] ahasenack: https://anonscm.debian.org/cgit/collab-maint/logwatch.git/commit/?id=f431e2e386af0da575d58fe80748199849d705ef [14:19] ahasenack: maybe a bug? I went via the log page. [14:20] ahasenack: also given the move over to salsa I wonder if somebody broke something doing something by hand to the repo. [14:20] thanks [14:39] ddstreet: hi, [14:40] ddstreet: I'm doing some bug triaging, and this old-ish bug came up: https://bugs.launchpad.net/ubuntu/+source/vlan/+bug/1701023 [14:40] Launchpad bug 1701023 in vlan (Ubuntu Trusty) "(on trusty) version 1.9-3ubuntu10.4 regression blocking boot completion" [High,Confirmed] [14:41] does that ring a bell? The bug fixed since 10.1 (which is the last working package for the reporter) is https://bugs.launchpad.net/ubuntu/+source/vlan/+bug/1573272 [14:41] Launchpad bug 1573272 in vlan (Debian) "default gateway route not installed for bond interfaces through reboot" [Unknown,New] [14:41] 3 attempts even [15:02] cpaelzer: ack [15:07] Hey Everyone, I was wondering how do I download an older version of SQLite? I'm looking for SQLite 3.10.1 but I'm not able to find a download link on SQLite.org to the older version. I was wondering if theres a method I could use directly in APT to request an older version of the application? [15:07] OliPicard: https://launchpad.net/ubuntu/+source/sqlite3 -> View full publishing history [15:08] tyhicks: so which combination of intel_microcode and kernel is it that causes SSSd to go down in flames? [15:08] OliPicard: click on the version string you want, then see the Downloads section [15:08] rbasak: Thank you Robie :) [15:08] i'm looking at machines in Landscape and trying to figure out which ones are safe to upgrade [15:09] Gargravarr: intel-microcode with 3.20180312.0 in the version string with any of the recent 4.4 and 4.13 kernels (since January) [15:10] okay. i've got a machine with that version microcode and kernel 4.13.0-26 [15:10] i assume upping the kernel (before the current patch is released) would be Bad :) [15:11] are previous versions of the microcode affected? [15:18] Gargravarr: you could downgrade the microcode if you wanted to run the latest kernels [15:18] Gargravarr: you could also uninstall the intel-microcode package until the new kernels are available [15:34] i might do that, thanks for clarifying === niedbalski_ is now known as niedbalski [17:26] Hey, is the live ISO (Subiquity) going to completely replace d-i for 18.04, or will both options be available? [17:28] both will be available [17:28] and supported [17:31] dpb1, thanks! [17:32] I was just playing with the live one to answer some questions and it's come along nicely. [17:32] thoughts so far? [17:32] I mean, it's pretty much final at this point of course [17:32] but we have things in store for 18.04.1. [17:54] hi, when you get a chance, it would be great for you to update https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes [17:55] Beta release is scheduled for today-ish and the Server section is incomplete (I filled out the Desktop section but didn't know what y'all wanted to highlight) === tomaw_ is now known as tomaw [18:27] I'm trying to figure out what the apache varible HTTP_REFERER could contain but there seems to be no documentation. Anyone know if it gives the full url or just the domain? [18:28] Or how I might expose the contents of that varible so I can find out? [18:34] https://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html [18:35] ProCycle: the referer is included in the default logging of Apache [18:36] So it sounds like it's the full url [18:36] grep -w combined /etc/apache2/apache2.conf [18:36] ProCycle: it is whatever the browser/UA decided to put in [18:36] Trying to redirect people coming from scam coupon sites to a disclaimer page [18:50] ProCycle: the best way to have a webserver print the value of a variable is probably a http response header (make up your own X-header (e.g. X-VAR-REFERER) and have the webserver return it and the value of the variable. [18:51] you can then view this with curl, wget or the web development utilities integrated into firefox or chromium [18:51] Interesting approach, thanks === hehehe is now known as Guest7680 === Guest7680 is now known as hehehe [19:12] Well shoot I get a redirect loop because the redirect doesn't strip the referer header which triggers the rewrite again [19:13] Putting [L] at the end doesn't stop it, and putting [END] breaks my server [19:36] Huh I don't get why it just loops. The only thing I can think of it's because the host uses a nginx reverse proxy for apache [19:37] Guess it's time to move to a better host === _KaszpiR__ is now known as _KaszpiR_ [20:24] trying to connect to a mysql server from another machine... ri [20:25] lets reprhrase that [20:25] if i cant telnet to that ip / port number; theres going to be no hope to connecting via mysql right [20:26] arooni: indeed, if you you cannot telnet to $IP:3306, then the mysql client won't be able either [20:27] whats weird is that i have allowed access via ufw from this ip address and port number; and restarted ufw [20:27] am i missing something ? [20:27] arooni, are you sure that mysql is listening on that ip instead of only on localhost? [20:27] well i did telnet locally to 3306 and it did work [20:28] i.e. telnet localhost 3306 [20:28] (from the machine running mysql server) [20:28] and ufw reports 3306 ALLOW 192.168.1.100 [20:33] fixed it; apparently a bind-address of localhost in mysql conf disallows it to thikn about listening to any remote connections [20:34] arooni: yes, that seems correct. [20:34] obviously [20:35] i credit my amazing insomnia for making me stupider today [20:35] it's a good thing that it only listens locally by default too :) [20:35] agree [20:35] do i have to do something when i make ufw changes or are they live immediately [20:40] arooni: if you use the ufw command (eg, ufw allow to any port 3306 from 192.168.1.100), it is leve immediately [20:40] live* === mikal_ is now known as mikal [22:26] teward: ping -- you've got some noise in your last nginx merge (i'm fixing it up) -- will probably need you to sanity check what i end up dropping (e.g., you've got undocuemnted chagnes to debian/gbp.conf and d/p/0003....patch [23:35] Huh what would cause the root account to write files as -rw-r----- but directories as drwx------ [23:36] so group can read files but can't read directories... [23:37] the modes are computed by what the application requested for the operation along with the umask in place at the time [23:40] so when I run sudo is it using the root account umask or the user running sudo? [23:43] ProCycle: like everything else with sudo, it's complicated :) see umask_override and umask in sudoers(5) for the details .. [23:51] Hmm so, it's complicated. Best just set file permissions afterwards [23:52] Writing a backup service file so need to make sure files it makes have the right permissions so the backup server can grab them [23:53] systemd.exec(5) has a UMask= setting you may find helpful [23:56] Ah cool that looks useful === miguel is now known as Guest94040