| cpaelzer | good morning | 04:25 |
|---|---|---|
| lordievader | Good morning | 06:39 |
| _ruben | Checkmate: if /home isn't a separate filesystem from /, how is moving /opt to /home gonna help anything? | 08:47 |
| k_sze | I think I messed up my /boot or something. | 09:44 |
| k_sze | During `apt full-upgrade`, dpkg complained that there's not enough space (though I didn't check exactly which volume ran out of space). | 09:44 |
| k_sze | Now the machine can't boot into Ubuntu | 09:44 |
| k_sze | It just shows the boot menu where I can choose ubuntu or advanced options. | 09:45 |
| k_sze | And if I choose ubuntu, the screen goes black for a moment, and loops right back to the boot menu. | 09:45 |
| k_sze | Is there any easy way to fix that? Given that I have a live USB as well. | 09:45 |
| k_sze | By "boot menu", I mean GRUB | 09:49 |
| TJ- | k_sze: choose Advanced, then pick an older kernel version from the menu. The problem will be the /boot/ ran out of space whilst writing the new /boot/initrd.img | 09:52 |
| k_sze | (I didn't realise that I should regularly purge old kernels from /boot until today) | 09:53 |
| k_sze | I just kept installing updates without purging. | 09:54 |
| k_sze | I hope I still have a bootable old kernel. XD | 09:54 |
| k_sze | But what do I do once I get it booting? | 09:54 |
| k_sze | `apt autoremove` shall do the right thing? And then I can `apt full-upgrade` again? | 09:55 |
| k_sze | Hmm, and now I can't start a GNOME session. | 10:00 |
| k_sze | I get the "Failed to start session" message when I attempt to log into GNOME. | 10:01 |
| TJ- | k_sze: once it's booted, you manually delete the /boot/initrd.img-XXX files for the versions of linux-image-* that "apt autoremove" says it wants to remove | 10:02 |
| k_sze | I kept thinking this is a ubuntu server. I guess I'll ask in the normal #ubuntu channel. | 10:02 |
| TJ- | k_sze: I wrote a script to do it automatically if you want to try it | 10:03 |
| k_sze | Seems like everything works now. | 10:25 |
| k_sze | Thanks for the help. | 10:25 |
| === downtime is now known as uptime | ||
| Neo4 | hi, Who know what means "musti-server"? http://pix.toile-libre.org/?img=1523620041.png | 11:48 |
| Neo4 | Can I install on VM DNS server, VPS and other apps for test? | 11:50 |
| Neo4 | I want to install a 10 times all and get a skill :) | 11:50 |
| Neo4 | so muscle training ) | 11:51 |
| === miguel is now known as Guest50751 | ||
| rbasak | ahasenack: good morning! | 12:38 |
| rbasak | ahasenack: I'm looking at some server-next bugs. | 12:38 |
| rbasak | ahasenack: any opinion on my comment in bug 1659223 please? | 12:38 |
| ubottu | bug 1659223 in clamav (Ubuntu Xenial) "apparmor regression blocking freshclam process info" [Undecided,New] https://launchpad.net/bugs/1659223 | 12:38 |
| ahasenack | hello rbasak | 12:38 |
| ahasenack | rbasak: agreede, fixed in bionic | 12:40 |
| ahasenack | regarding xenial, it would need the change from https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1658239 fixed in xenial | 12:41 |
| ubottu | Launchpad bug 1658239 in apparmor (Ubuntu) "base abstraction missing glibc /proc/$pid/ things" [Undecided,Fix released] | 12:41 |
| rbasak | ahasenack: do you think we should do it? | 12:41 |
| ahasenack | or just include that change in clamav's profile | 12:42 |
| ahasenack | I don't know if it's just a warning, I can't remember | 12:43 |
| rbasak | ahasenack: yeah. But is it worth it? If it doesn't actually impact anything apart from the log message. | 12:43 |
| rbasak | ahasenack: how about I Won't Fix for Xenial for now, but invite people to reopen if there's a functional problem? | 12:43 |
| ahasenack | I would test it to see if freshclam works or not, I think that's the crux of the issue | 12:43 |
| ahasenack | also, the bug says "regression", I would check if that's true | 12:44 |
| rbasak | I'm not too worried about that, because the bug itself seems unimportant and is resolved in the development release. | 12:44 |
| rbasak | So I see no need to dig further - but if someone does and finds something worthy of attention, that's still fine. | 12:45 |
| rbasak | cpaelzer, ahasenack: as I'm going through the server-next bugs, there are a number I want to drop from that queue because I don't think they're important enough. Would it be worth us running through the list together in a HO perhaps? | 13:08 |
| ahasenack | I don't have the spare cycles :/ | 13:14 |
| rbasak | OK | 13:30 |
| rbasak | We can defer it. | 13:30 |
| Neo4 | Guys, how easy manage your server? | 13:59 |
| Neo4 | is it way for speed up? | 14:01 |
| Neo4 | https://www.amazon.com/Managing-Linux-Systems-Webmin-Administration/dp/0131408828/ref=sr_1_fkmr0_3?ie=UTF8&qid=1523628016&sr=8-3-fkmr0&keywords=managin+unix+system+with+webmin | 14:01 |
| Neo4 | I have this book | 14:01 |
| Neo4 | for effective manage your system we need set up control panel, doesn't it? | 14:02 |
| Neo4 | don't it* | 14:02 |
| Neo4 | I'm a newbie, Who know how I can rapidly learn web hosting? | 14:03 |
| Neo4 | I am interestiong everything that relate to VPS | 14:03 |
| dpb1 | rbasak: tag them as "should-drop" or something. | 14:03 |
| rbasak | Good idea, thanks. | 14:05 |
| Neo4 | dpb1: What control panel do you use? | 14:05 |
| Neo4 | see this https://www.virtualmin.com/ | 14:05 |
| Neo4 | I don't know what chose | 14:05 |
| Neo4 | :( | 14:05 |
| Neo4 | wirtualmin or webmin | 14:05 |
| dpb1 | bash4life | 14:06 |
| Neo4 | the best ISPmanager | 14:06 |
| Neo4 | dpb1: ??? | 14:06 |
| Neo4 | dpb1: what is bash4life ? | 14:07 |
| Neo4 | dpb1: what contral panel do you sugest to use? | 14:08 |
| m1dnight_ | what dpb1 is telling you is that you don't need a control panel. You just do stuff in the commandline. | 14:08 |
| m1dnight_ | What will you do when your controlpanel says "ERROR" ;p | 14:08 |
| m1dnight_ | webhosting is fairly easy, given you have enough experience with the shell. | 14:09 |
| Neo4 | it's difficult, I do, but for install VPS I spend 4 hours and more | 14:09 |
| m1dnight_ | you want to host vps's? | 14:09 |
| Neo4 | yes | 14:09 |
| Neo4 | I want to learn this theme | 14:09 |
| m1dnight_ | and you have no experience with the commandline? | 14:09 |
| Neo4 | have, and not good impressions | 14:09 |
| Neo4 | I used ISPmanager, it's very nice , here I would able to change php versions easy | 14:10 |
| m1dnight_ | the best you can use I guess is virt-manager whic is a GUI on top of virtlibd | 14:10 |
| m1dnight_ | allrighty.. | 14:10 |
| Neo4 | set up database user, create db, create FTP account | 14:10 |
| m1dnight_ | is anyone else confused here? | 14:10 |
| m1dnight_ | vps or website hosting. | 14:10 |
| m1dnight_ | php version, dbs and ftp accounts seem to relate to webhosting, not vps hosting. | 14:11 |
| Neo4 | for vPS too | 14:11 |
| Neo4 | m1dnight_: of course I can use SSH, but if I want to give access somebody, suppose for some folder for test something, I couldn't give SSH access | 14:12 |
| m1dnight_ | sure you can | 14:12 |
| m1dnight_ | you can chroot a user into his home directory | 14:12 |
| Neo4 | yes, all of this I can doing manyally and spend much time | 14:13 |
| m1dnight_ | ftp is an ancient protocol and should not be used. | 14:13 |
| Neo4 | I think to try some panes, sudenly there all will faster? | 14:13 |
| m1dnight_ | i have no idea about admin panels that allow you to do all this. | 14:13 |
| m1dnight_ | So I can't help you, sorry | 14:13 |
| Neo4 | m1dnight_: read this, they have very attractive features, haven't they? | 14:15 |
| Neo4 | http://pix.toile-libre.org/?img=1523628871.png | 14:15 |
| Neo4 | I didn't use them, but it looks like if you will use it will much better that do all manually | 14:15 |
| Neo4 | than* | 14:16 |
| Neo4 | I'm interesting what people use here? | 14:16 |
| Neo4 | anyone use control panel for desctop? | 14:16 |
| Neo4 | it is said it's frequently unix linux users use it | 14:16 |
| ogra_ | home users prehaps ... | 14:17 |
| ogra_ | most professionals will simply use the shell | 14:17 |
| Neo4 | ogra_: why? maybe opposite? Home use shall and professional control panel? | 14:18 |
| ogra_ | (and specifically webmin being a pile of security holes is likely something nobody will use in a professional environment .... it was removed from the debian and ubuntu archives for a reason) | 14:18 |
| Neo4 | professionals don't want to spend type type comands, they will rather use interface | 14:19 |
| Neo4 | ok | 14:19 |
| Neo4 | ogra_: what has ubuntu in archive ? | 14:19 |
| ogra_ | most professionals i know want control and not abstraction | 14:19 |
| Neo4 | what panels has ubuntu in archive? | 14:19 |
| ogra_ | no idea, i never used any | 14:20 |
| m1dnight_ | you have the paid ubuntu landscape thing, no? I actually have no idea what that does, though.. | 14:20 |
| Neo4 | ogra_: you didn't use any, is it now time to try some? :) | 14:21 |
| ogra_ | not really :) | 14:21 |
| Neo4 | m1dnight_: noither am I | 14:21 |
| Neo4 | ogra_: neither am I) | 14:22 |
| Neo4 | no I will use, better tried and then say it's bad | 14:22 |
| Neo4 | ogra_: see what I found https://www.rosehosting.com/blog/best-open-source-hosting-control-panels/ | 14:23 |
| Neo4 | this things are thrived, it means they are actively used, perhaps | 14:23 |
| Neo4 | are thriving* | 14:24 |
| Neo4 | we don't have to be a command line guru in order to manage simple web site | 14:25 |
| m1dnight_ | no, you can do it with simple commands. | 14:25 |
| m1dnight_ | Instead of forcing your way around the commandline, bite the bullet :p | 14:25 |
| m1dnight_ | it's all just files anyway.. | 14:26 |
| Neo4 | yes, I can do, but my future clients won't, They will require CP | 14:27 |
| Neo4 | for to be expert I must learn at least a few of theme | 14:28 |
| m1dnight_ | okay | 14:28 |
| m1dnight_ | I've only used one.com and they rolled their own I think. | 14:28 |
| Neo4 | Cpanel and ISPmanager, it's obligate, and one opensource | 14:29 |
| Neo4 | m1dnight_: I used ISPmanager, Used and skill to install and customzie are different things | 14:29 |
| Neo4 | m1dnight_: by the way do you know what could mean 'multi-server'? | 14:30 |
| Neo4 | http://pix.toile-libre.org/?img=1523629807.png | 14:30 |
| ogra_ | well, if you want to sell services using these tools,i'd suggest to do a security audit and usablility research and then pick the best ... after all you are giving your business into the hands of the developers of that panel software | 14:32 |
| Neo4 | who know what means "multi-server"? | 14:32 |
| Neo4 | ogra_: I'm going to build site using wordpress, 'online stores' and for this I need VPS, What I will say my client, use command line? | 14:33 |
| ogra_ | ... if their tool does a minor mis-configuration of a database or website and all credit card data of all users of your customers are exposed online all of a sudden your business will quickly be broke :) | 14:33 |
| Neo4 | ogra_: oh, no, there not credit cards in database nor other data | 14:34 |
| ogra_ | if i'd use any of such panels i'd hire a security specialist and have her review the tools from the ground up (including the source) before giving my business in the hands of the devs of these tools | 14:35 |
| m1dnight_ | the databases will be empty *magic* | 14:35 |
| Neo4 | ogra_: TLS | 14:35 |
| ogra_ | ?? | 14:35 |
| ogra_ | ABC | 14:35 |
| Neo4 | ogra_: force user to use TLS | 14:35 |
| ogra_ | see, i cn trhow around acronyms too :) | 14:36 |
| RoyK | m1dnight_: https://xkcd.com/327/ ? | 14:36 |
| Neo4 | ogra_: web interface, there all security it's TLS and use strong password | 14:36 |
| ogra_ | Neo4, and that helps how ? | 14:36 |
| m1dnight_ | ABC :D | 14:36 |
| ogra_ | if the interface code has a bug and breaks security of your webserver, it doesnt matter if your users interact securely with it | 14:37 |
| m1dnight_ | Neo4: the point here is that its very easy for a bug in the webpanel to execute a command that has unwanted side effects | 14:37 |
| Neo4 | ogra_: TLS, encrypt all data and adversary can't access site | 14:37 |
| m1dnight_ | Neo4: but it's not adversaries you're worried about | 14:37 |
| m1dnight_ | endusers are just as dangerous... | 14:37 |
| Neo4 | ogra_: man in the middle, this is the main problem, if client strong care about security you must install valid certificate and force him use strong password | 14:38 |
| ogra_ | lol | 14:38 |
| blackflow | that's not really true. the CA model for TLS certificates is fundamentally broken and shouldn't be considered "secure" for most intents and purposes. | 14:38 |
| ogra_ | man in the middle is a possible attack vector, but surely not "the main problem" | 14:39 |
| Neo4 | m1dnight_: do you sink client can harm site using CP? | 14:39 |
| m1dnight_ | yes. | 14:39 |
| RoyK | and don't do something as silly as for instance zabbix, which indeed is a nice system, but all passwords are stored as non-salted md5 hashes | 14:39 |
| m1dnight_ | assume so, unles you had the aforementioned security audit... | 14:39 |
| Neo4 | blackflow: who will care out attack on simple online store? You don't need somebody. | 14:39 |
| blackflow | RoyK: still? in 2018? | 14:39 |
| RoyK | blackflow: yes | 14:40 |
| blackflow | lol. | 14:40 |
| m1dnight_ | such security. | 14:40 |
| blackflow | Neo4: just saying that using TLS does not make it magically "secure". the whole model relies on trusted CAs, which have repeatedly proven untrusted. | 14:40 |
| Neo4 | ogra_: for WEB it's main, what could be other problems? As it said broken CPanel itself. I think many users are using it and they would long ago niticced it and corrected | 14:41 |
| ogra_ | m1dnight_, well, how else would the callcenter support verify you are you if they couldnt see your cleartext password on their screen ;) | 14:41 |
| m1dnight_ | ... | 14:41 |
| m1dnight_ | Youre kidding right? | 14:41 |
| Neo4 | blackflow: users don't know what is certificate, Do you know many people who know what is TLS? | 14:41 |
| Neo4 | blackflow: they will accept easy invalid certificate if attacker will send it, I think for little store it's not problem | 14:42 |
| m1dnight_ | oh, didn't pick up on the sarcasm there, ogra_ :p sorry | 14:42 |
| blackflow | Neo4: what does that have to do? you mentioned MITM. TLS does not absolutely protect against MITM with the current CA model. | 14:42 |
| ogra_ | m1dnight_, i'm never kiddng ... ;) | 14:42 |
| Neo4 | not exists person who has motive to broken that shity store | 14:42 |
| blackflow | Neo4: do customers input credit card data in that store? | 14:43 |
| Neo4 | blackflow: in 99% cases its protect | 14:43 |
| ogra_ | m1dnight_, there is actually a current case where telekom.at stores passwords in clear text only and callcenter employees can see the first 4 chars in theit UI | 14:43 |
| ogra_ | *their | 14:43 |
| m1dnight_ | jezus :p that's horrible | 14:44 |
| ogra_ | one would think such a big company would know better :) | 14:44 |
| Neo4 | blackflow: who indentionaly want kill you something like USA gavernment of course they decrypted it, bride VPS host and get privet key or will use other ways | 14:44 |
| blackflow | ... | 14:44 |
| Neo4 | Who want you they find ways hit you | 14:44 |
| m1dnight_ | :D | 14:44 |
| Neo4 | but you don't need those people, TLS enough secure for our aims | 14:45 |
| blackflow | Neo4: do you intend to operate in EU? | 14:45 |
| Neo4 | blackflow: they want, they will leave their phones and data where deliver product, then manager will call them and will give bank number where they will pay and then they will send product | 14:46 |
| blackflow | and, will customers input credit card data through that connection to the webstore, even if you don't store the CC data locally? | 14:46 |
| Neo4 | blackflow: or send product and then user pay on the postofice, | 14:47 |
| blackflow | so, no CC payments? | 14:47 |
| Neo4 | its for Ukraine clients, I haven't learned schemes how it works yet | 14:47 |
| Neo4 | blackflow: no, in Ukraine exists 'private bank' they has his own pay and when you order something little manger call you and then send SMS with account number | 14:48 |
| Neo4 | you send there money and recall manager, then he send product, | 14:48 |
| blackflow | alrighty. | 14:49 |
| Neo4 | but he offer you pay in time getting in the post office, you can pay immidiately or when it arrived | 14:49 |
| Neo4 | blackflow: they also afraid whether you pay or not | 14:49 |
| Neo4 | blackflow: Here not like in Amazon or Ebay, you must pay instantly | 14:49 |
| Neo4 | but I'm going to do online stores on WP for English people as well, for other client, need to learn their pay systems | 14:51 |
| Neo4 | we deviated from theme... :) | 14:51 |
| Neo4 | well, as we see this domain not popular here, all users prefer use command line, and even barely heard about them... | 14:55 |
| Neo4 | I always though in ubuntu server must sitting users who work with web hosting | 14:55 |
| m1dnight_ | Neo4: i think we can conclude that most people will either use the commandline, or roll their own CMS for webhosting. | 14:56 |
| Neo4 | it's like "who don't know they are speak and who know they are silence" | 14:56 |
| m1dnight_ | It has been mentioned *numerous* times at this point, that most of the free webpanels out there are unsecure heaps of crap. If you want to use one, make sure you use a secure one, but my guess is you won't find one. | 14:56 |
| Neo4 | m1dnight_: yes, more easier command use command line | 14:56 |
| blackflow | the webhosting standard is cPanel, but that doesn't run on Ubuntu. | 14:57 |
| Neo4 | m1dnight_: ok, I will be know | 14:57 |
| Neo4 | blackflow: why? | 14:57 |
| blackflow | why what? | 14:57 |
| Neo4 | Cpanel could be run on any Unix like OS? | 14:57 |
| blackflow | no, only CentOS | 14:58 |
| Neo4 | Ok, I didn't know that | 14:58 |
| blackflow | It used to run on Debian iirc, but for several years now it's CentOS only. | 14:58 |
| Neo4 | I used ISPmanager on ubuntu | 14:58 |
| blackflow | well... like m1dnight_ said, the free ones are unsecure heaps of... | 14:59 |
| Neo4 | it was when I first time install my VPS I bought it with ISP, there had to pay for license | 14:59 |
| blackflow | There is also VestaCP but I know little about it. Supposedly runs on Ubuntu. | 14:59 |
| blackflow | thing is, if you want to get into webhosting industry, you really have just one choice - cPanel or Plesk. The users will require it, especially for one-click migrations, even if you had something else. | 15:00 |
| blackflow | (one choice = I meant one set of choices, between the two) | 15:00 |
| blackflow | The VPS industry is a bit different. There's Proxmox, and of course VMWare proprietary stuff, as well as OpenStack. | 15:01 |
| Neo4 | blackflow: see, ISP manager is secure? We can for not serious client use not secure opensource panel cause we won't have motivated serious adversaries, and for good client that I think I won't have we could use Cpanel | 15:01 |
| blackflow | Neo4: however, definitely not something you should be getting into WITHOUT years of experience administering servers WITHOUT panels. | 15:02 |
| Neo4 | blackflow: yes, it's broad domain | 15:02 |
| Neo4 | blackflow: do you know people who has lack of knowledge for them it's difficult even use Cpanel | 15:03 |
| Neo4 | ordinary people know only how to turn on computer and sing in in social network | 15:03 |
| blackflow | ordinary people do not buy hosting services. webmasters do. | 15:03 |
| Neo4 | it's majority, you need to orient on this sort of person | 15:04 |
| tomreyn | the only way you should start a shared web hosting business in 2018, if at all, is with a deployment framewórk aat its core, with a light user self service web panel as a frontend to queue tasks. | 15:04 |
| blackflow | btw, I'm in the hosting industry since early 2000s. | 15:04 |
| Neo4 | blackflow: if person has some little busness he can order online store for 200 - 300$ and have hostingtoo | 15:04 |
| Neo4 | they buy | 15:04 |
| blackflow | yes, that's software as a service, SaaS. you can buy turnkey Magento solutions for that, for example, and iirc it can even get cheaper than that, to start with. | 15:05 |
| Neo4 | it's not true, not everybody has money to hire personal, even average bussnes, Who has money they will appeale to real good firms for do shop, not for you | 15:05 |
| blackflow | Neo4: yeah but what are we talking about here? What do you want to offer? What kind of service? shared hosting with a panel for webmasters? managed online store SaaS? what? | 15:06 |
| Neo4 | tomreyn: I watched on youtube there you can resell prapeared hosting | 15:06 |
| blackflow | yes, cPanel resellers. Cheapest and most numerous. | 15:06 |
| tomreyn | Neo4: so you're business will be based on watching youtube videos? | 15:07 |
| tomreyn | ok i guess that's off topic here, i won't push this further. | 15:08 |
| Neo4 | blackflow: yes, online store on wordpress, registered domain, and VPS with cpanel, + TLS certificate, Client pay me for example 300$ and I did these all and in the end give him all access to site and instruction how to use it | 15:08 |
| blackflow | wordpress is a blog platform. you should not be basing an online store business on it. There are far better tools, specialized, and far more secure, than WP. | 15:08 |
| Neo4 | blackflow: it could be not bad bissness, I watch firms that do sites from 1000$, but for start we can take 200 - 300 untill will well work scheme | 15:08 |
| Neo4 | blackflow: no, it has woocomerce, that is the moust popular online store platform for a while | 15:09 |
| blackflow | all based on wordpress? | 15:09 |
| Neo4 | tomreyn: yes, buy prapered theme on themforest, put to wordpreess, install woocomerce and all needed plugins, write config and site is done | 15:10 |
| blackflow | Neo4: see, that's the problem, you lack experience. all those WP modules are hacks atop of a blogging platform. Take a look at their code internally and you'll see why that is. Encoding fields as [tags] in the main "body" of a "post" to simulate data.... | 15:10 |
| blackflow | WP is a blogging platform. If you want to get serious about online shops, there's specialized tools designed for that. | 15:11 |
| Neo4 | blackflow: there don't need programming nothing, only customization, of course you need know CSS and HTML | 15:11 |
| blackflow | just because everyone and their dog rush to WP (and most of them regret installing random plugins), that's another story. | 15:11 |
| Neo4 | blackflow: no, you understand nothing, I see you dont know anything about wordpress | 15:12 |
| blackflow | lol. | 15:13 |
| blackflow | if you say so. | 15:13 |
| Neo4 | blackflow: https://wordpress.org/plugins/woocommerce/ | 15:14 |
| Neo4 | blackflow: the most popular shot in the world for a while | 15:14 |
| blackflow | most popular based on what audit? | 15:15 |
| Neo4 | the bigest number of shotps use woocomerce as well as the biggest number of sites use wordpress | 15:15 |
| Neo4 | blackflow: I forgot, I read about that in some blog, or in book, It's not precise data | 15:16 |
| blackflow | you mean it's random, unverified and you don't even have the source of it. Got it ;) | 15:19 |
| blackflow | Neo4: but okay. you seem to know all what you need and want to use. Good luck in your business. | 15:19 |
| Neo4 | blackflow: Thank, I know what I need, but I stupid to implement it... | 15:20 |
| blackflow | then start playing with it. after a while you'll gain knowledge and experience. | 15:24 |
| Neo4 | ok | 15:25 |
| Neo4 | I'll try | 15:25 |
| boxrick | I would like to pull a package and all associated dependencies, but rather than install them throw the debs on my package mirror | 15:51 |
| boxrick | Is there a simple way, other than finding each dependency and manually getting each one | 15:51 |
| rbasak | boxrick: I would use chdist and --download-only for that. | 15:52 |
| boxrick | Any example commands, or shall I just look through the man pages? | 15:53 |
| Neo4 | boxrick: what do you want to do? Remove dependencies? | 15:54 |
| boxrick | In this case, I want to download a package, all its dependencies and throw it into an aptly repo | 15:54 |
| boxrick | aptly ( package mirror ) | 15:54 |
| Neo4 | what read about DNS? I badly know how it works | 16:29 |
| Neo4 | want to improve knowledge | 16:29 |
| Neo4 | I've got this book | 16:31 |
| Neo4 | https://www.amazon.com/Security-Management-Press-Networks-Services/dp/1119328276/ref=sr_1_1?ie=UTF8&qid=1523636451&sr=8-1&keywords=dns+security+management | 16:31 |
| Neo4 | is it good one? Worth to read it? | 16:31 |
| Neo4 | that book looks like not my level | 16:32 |
| ProCycle | Is there a way to find out what or who deleted a folder? After rebooting my server /var/run/mysqld/ went poof. I checked my bash history and didn't delete it myself | 18:25 |
| sarnold | are you sure you're looking in the right place? /var/run is a symlink to /run on my system, and /run is a tmpfs | 18:26 |
| sarnold | it goes away *every* reboot | 18:26 |
| ProCycle | Hmm good point. The problem is mysqld couldn't create a socket or pid file | 18:26 |
| ProCycle | Had to manually create the directory with the right perms | 18:27 |
| sarnold | strictly speaking, yes, you can install auditd rules to watch for unlink, rmdir, and rename syscalls, but you have to install the rules beforehand | 18:27 |
| ProCycle | I'll try rebooting and see if it does it again | 18:27 |
| ProCycle | Hmm yep it's gone again. So I guess the question is why can't it create the file it needs? | 18:28 |
| === devil is now known as Guest61956 | ||
| sarnold | anything in dmesg? mysql logs? | 18:29 |
| ProCycle | Didn't see anything in dmesg, checking elsewhere | 18:33 |
| ProCycle | This seems to be a problem for two different machines with similar configurations | 18:35 |
| ProCycle | I think it narrowed it down to the fact that the default service creates that folder, but the mariadb@ services don't | 18:38 |
| ProCycle | Probably a bug I get to report... yay | 18:41 |
| sarnold | if nothing else, the logs collected by the bug report tool may help point out the problem :) | 18:44 |
| ProCycle | I'm comparing /lib/systemd/system/mariadb.service and mariadb@.service and it is missing the step where it creates that directory | 18:45 |
| ProCycle | Among other things | 18:45 |
| ProCycle | Missing this line | 18:48 |
| ProCycle | ExecStartPre=/usr/bin/install -m 755 -o mysql -g root -d /var/run/mysqld | 18:48 |
| ProCycle | Thanks for your help once again :) I'll take this up with the mariadb people | 18:50 |
| sarnold | woot | 18:50 |
| sdeziel | ProCycle: RuntimeDirectory=mysqld is probably better | 18:52 |
| ProCycle | I figure that's a holdover from init.d | 18:54 |
| sdeziel | MySQL's service unit has: | 18:54 |
| sdeziel | RuntimeDirectory=mysqld | 18:54 |
| sdeziel | RuntimeDirectoryMode=755 | 18:54 |
| ProCycle | Oracle mysql? | 18:56 |
| === iarp_ is now known as iarp | ||
| ProCycle | I'm going to add an override... once I can remember how to do it | 18:58 |
| sdeziel | systemctl edit $foo | 18:59 |
| sdeziel | ProCycle: yes, mysql as provided by the mysql-server package in Ubuntu | 18:59 |
| ProCycle | Does it have a mysqld@.service file? Do they do the same in that one? | 19:03 |
| ProCycle | It seems that RuntimeDirectory= gets deleted when the service stops so it wouldn't be appropriate for multiple services all using the same runtime directory | 19:04 |
| ProCycle | Though maybe a better way is to simply create a /var/run/mariadb%I directory for each | 19:05 |
| sdeziel | ProCycle: with MySQL on Xenial, there is only 1 unit: https://paste.ubuntu.com/p/ktv9Np5GPF/ | 19:07 |
| ProCycle | Ah so to run multiple instances you need to use mysqldmulti or whatever it was called | 19:07 |
| sdeziel | I guess so | 19:08 |
| ProCycle | I like mariadb's way, it's so much easier to manage through systemd instead of yet another manager | 19:08 |
| ProCycle | sans this one bug | 19:09 |
| === devil is now known as Guest55708 | ||
| ahasenack | nacc: do you have a moment to review https://code.launchpad.net/~ahasenack/ubuntu/+source/autofs/+git/autofs/+merge/343237 ? It's a simple revert of the immediate previous change and fixes a segfault. Test included in the mp | 19:51 |
| ahasenack | nacc: I can then start reviewing g-u again | 19:51 |
| nacc | ahasenack: looking | 19:52 |
| ahasenack | thx | 19:52 |
| nacc | ahasenack: you've already tested this, i assume? do you need me to upload? | 19:53 |
| ahasenack | yes and yes | 19:53 |
| nacc | ahasenack: ok one moment | 19:53 |
| ahasenack | bug reporter confirmed that not linking with tirpc fixes it for him, and I confirmed as well | 19:54 |
| ahasenack | and you can try the test case, it's quick | 19:54 |
| ahasenack | the ppa built the debs already, they are just not published yet | 19:54 |
| nacc | ack | 19:55 |
| ahasenack | I used wget https://launchpad.net/~ahasenack/+archive/ubuntu/autofs-no-tirpc-1745817/+build/14756265/+files/autofs_5.1.2-1ubuntu3~ppa1_amd64.deb | 19:55 |
| nacc | ahasenack: looks good | 20:01 |
| ahasenack | nacc: did you try it? | 20:01 |
| nacc | ahasenack: yeah | 20:02 |
| ahasenack | cool | 20:02 |
| ahasenack | if I had more time, that would make an excellent dep8 test | 20:02 |
| ahasenack | nacc: I'm starting with https://code.launchpad.net/~nacc/usd-importer/+git/usd-importer/+merge/343143 | 20:13 |
| ahasenack | nacc: I have to run to an appt in a few, but I'll continue when I'm back | 20:13 |
| nacc | ahasenack: sure, thanks | 21:57 |
| ahasenack | back | 22:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!
