[00:23] <kevr> ssh server is resetting connection by default on install for 18.04 live
[00:26] <Squall5668> kevr: You said on #ubuntu you were using the installer script of adding your public key to the server and it didn't work. Make sure you haven't accidentally messed up the .ssh folder permissions
[00:27] <Squall5668> assuming that's what the installer is trying to do ofcourse. I haven't tried that option
[00:29] <sarnold> if you're using an rsa key make sure it's > 1024 bits
[00:49] <Pici> /2/25
[00:49] <kevr> Squall5668: it looks like it generated some errored out ssh_host_* keys
[00:50] <kevr> i fixed it by removing those and regenerating them with dpkg-reconfigure
[00:50] <kevr> seems like that bootstrapper github thing is broken possibly
[00:50] <Squall5668> interesting, thanks
[00:50] <kevr> np :) thanks for the help/reply
[00:51] <Squall5668> Well, you have much bigger oranges than I do if you trust an automated script/option/whatever to install your ssh key on a server for you
[00:51] <kevr> this isn't a production server
[00:51] <kevr> i was doing it for simplicity sake at the time
[00:52] <kevr> if i could just enter my pass there, it would just save me time of transferring it over layer from my other machine
[00:52] <kevr> also, i was curious if it actually worked
[00:52] <kevr> s/layer/later/
[00:53] <sarnold> ssh-copy-id and ssh-import-id tools may be useful
[00:53] <kevr> it's not a question of how to import ssh keys onto a linux box
[00:53] <kevr> i was more curious about the new feature than anything.
[07:00] <dpb1> bladernr: if you think that is necessary, changes to the release notes are welcome.
[08:22] <TheEagerPadawan> upgraded my ubuntu desktop from 17.10 to 18.04 and apperently i did something with the cryptsetup
[08:23] <TheEagerPadawan> orginally i thought it had something to do with ubuntu being more font of qwerty then azerty which doesn't seem to be the case
[08:23] <TheEagerPadawan> after some failled passwords i does drop my in intrafms (busybox)
[08:23] <TheEagerPadawan> any thought on how i can straighten this problem out :s
[10:44] <TheEagerPadawan> got a major major problem
[10:44] <TheEagerPadawan>  
[10:44] <TheEagerPadawan> so updated my ubuntu desktop 17.10 to 18.04 LTS yesterday.
[10:44] <TheEagerPadawan>  
[10:44] <TheEagerPadawan> Apperently it broke cryptsetupafter booting up as usually it asks me for the password to unlik sda3_crypt
[10:44] <TheEagerPadawan>  
[10:44] <TheEagerPadawan> when i provide it return the eroor cryptsetup(sda3_crypt): cryptsetup failed, bad password or optionscheck the error messages by pressing esc i get the following:
[10:44] <TheEagerPadawan>  
[10:44] <TheEagerPadawan> WARNING: Failed to connect to lvmetad. Failling back to device scanning
[10:44] <TheEagerPadawan>  
[10:44] <TheEagerPadawan> volume group "ubuntu-vg" not found
[10:44] <TheEagerPadawan>  
[11:03] <blackflow> TheEagerPadawan: do you have a bionic live cd/usb? did you try to manually unlock the luks container?
[11:04] <TheEagerPadawan> i do not have a live cd atm, very limited in regards to compute power atm
[11:04] <TheEagerPadawan> how would i go about unlocking the luck container?
[11:04] <TheEagerPadawan> luks*
[11:04] <blackflow> TheEagerPadawan: by using cryptsetup directly from the live env
[11:05] <TheEagerPadawan> ok let me rephrase it, i'm quite unfamiliar with the cryptsetup
[11:05] <blackflow> cryptsetup luksOpen /dev/sda3 sda3_crypt
[11:06] <blackflow> that creates the /dev/mapper/sda3_crypt block device which you can mount or run lvm scan on, don't know what your setup is
[11:06] <blackflow> in short, that mapper device is the unlocked, plaintext sda3
[11:07] <TheEagerPadawan> let's discuss further in DM
[11:07] <TheEagerPadawan> ok let me try to get back into a limited shell
[11:21] <SSMAdmin> Hi all.  Remote Desktop (VNC) related:  May I be misunderstanding how VNC works?  I had the impression I should be able to remote control server user A's desktop, while someone else is logged in to the server as user B.  I can not get this functionality, so I wonder if I misunderstand the use of VNC?  It works if I first (physically at the server) log in as user A, then remote connect as user A, but that is not what I wanted.
[11:22] <tomreyn> remote controlling linux servers is done using ssh.
[11:23] <SSMAdmin> tomreyn, this is a Home Theater PC server
[11:28] <nucc1> Hi, how do i configure a static IP on ubuntu server?
[11:28] <TheEagerPadawan> blackflow ait lets see what this does
[11:28] <SSMAdmin> tomreyn, I am aware "server admins" prefer to work in ssh consol to "control the server", but I am asking what is possible to achieve.  If VNC can not be set up to achieve what I want, how else can I achieve it?
[11:29] <pedrojbm> hello ^^
[11:29] <nucc1> https://paste.ubuntu.com/p/Q9ncdSMJvQ/ i've got that netplan yaml file
[11:29] <nucc1> when i apply it, i doon't see any gateway and i can't reach the internet.
[11:29] <TheEagerPadawan> blackflow: is returns the message no key available with this passprashe
[11:30] <blackflow> TheEagerPadawan: and you're sure it's not keymap error? if you type the passphrase on the command line, it's exactly as it should be?
[11:30] <TheEagerPadawan> on the limited cli that i'm currenty in (initramfs) yes
[11:31] <TheEagerPadawan> also found this - but i don't really understand it
[11:31] <TheEagerPadawan> https://bugs.launchpad.net/cryptsetup/+bug/1767527
[11:33] <TheEagerPadawan> brb
[11:35] <TheEagerPadawan> so it seems like some dev f'd up :s
[11:35] <blackflow> TheEagerPadawan: I can't see that bug right now, I have an issue with my ubuntu box atm... but crypttab is irrelevant when you use cryptsetup directly, that's for initramfs and related tools.
[11:36] <pedrojbm> I am trying to install ubuntu server into HP Gen8 with 2 drives in raid 1 (hardware) but I see 2 drives in installation.
[11:36] <blackflow> TheEagerPadawan: I'm assuming the encryption was set up by the installer?
[11:38] <TheEagerPadawan> well the encryption was setup on 17.04 ofc
[11:38] <TheEagerPadawan> eg an earlier version of ubuntu
[11:46] <TheEagerPadawan> any further thoughts?
[11:50] <SSMAdmin> How can I achieve similar Virtual Mode VNC functionality as described here: https://www.realvnc.com/en/connect/docs/server-modes.html without signing up for their Entreprise Subscription.
[12:06] <TheEagerPadawan> blackflow: any further thoughts?
[12:25] <Neo4> how to ban user if he send many mails?
[12:45] <nucc1> how does one execute a script in response to network events? it seems like you can no longer use /etc/network/if-pre-up.d/ for example
[13:39] <blackflow> Alright, so moving the discussion from -hardened.... the end result of flipping a single sysctl and adding a few lines to /etc/modules is a total meltdown of gnome, even after upgrade to 18.04, which required complete reinstallation of the system.
[13:40] <blackflow> This is Ubuntu in 2018.
[13:44] <JanC> GNOME isn't exactly a server thing...
[14:40] <JanC> SSMAdmin: VNC itself allows what you want, but your VNC server might not (or might be configured to not allow it or something); try to look at the logs on the server side to see why it doesn't work...
[14:58] <RoyK> SSMAdmin: not using realvnc is a good start - x11vnc has some of what you want - nomachine my have the rest
[14:58] <RoyK> nomachine isn't really OSS, though
[14:59] <RoyK> SSMAdmin: looks like x11vnc should be able to do it
[14:59] <SSMAdmin> JanC, my VNC server is only what is buildt in Ubuntu 18.04, I activated "Sharing - Screen Sharing" in desktop tools area.  So there is no errors, just limited functionality..i guess
[15:00] <SSMAdmin> RoyK, thank you. Do you know a guide how to set it up?
[15:01] <compdoc> have they continued to develope vnc? I got so tired of the clipboard sharing between client/host not working well, I left vnc long ago
[15:02] <RoyK> SSMAdmin: try googling it - there are modes of "shared" and "once" and so on set on the commandline - I haven't tried to setup things the way you want
[15:02] <SSMAdmin> I wonder if it may be better to set up https://wiki.x2go.org/doku.php/doc:newtox2go
[15:03] <tomreyn> x2go is open source, nomachine nx is not. functionality is similar.
[15:05] <SSMAdmin> Here is a x2go setup guide for Debian 8, can anyone see anything here that would have to be changed for working in Ubuntu 18.04? https://www.digitalocean.com/community/tutorials/how-to-set-up-a-remote-desktop-with-x2go-on-debian-8
[15:08] <RoyK> SSMAdmin: *reading*
[15:11] <RoyK> SSMAdmin: looks good
[15:13] <SSMAdmin> RoyK, I wonder about this part: "Install and configure a complete desktop environment that's similar to what you would get with Debian XFCE from a bootable DVD on your local PC:
[15:13] <SSMAdmin> sudo apt-get install task-xfce-desktop"
[15:14] <SSMAdmin> Is that installing a Debian desktop on my Ubuntu server, will that go well?
[15:15] <RoyK> probably the same thing
[15:15] <RoyK> but AFAICS you can disable the autostart of the x server on your machine
[15:15] <samba35>  can some one please correct my understanding , if i use kni (kernel mode drivers)  then i dont require phyiscal hardware right ?
[15:16]  * RoyK has no idea about kni
[15:16] <SSMAdmin> RoyK, ok...but why would I disable the autostart?
[15:16] <RoyK> well, if you don't want a graphical console on your server…
[15:17] <RoyK> I don't like that
[15:18] <RoyK> meaning - I generally don't use a gui on a server - text suffices
[15:19] <samba35> kernel native interface i mean
[15:19] <SSMAdmin> RoyK, I know too little about these things to know what you are talkning about.  I just want to be able to remote connect to user A desktop environment, while user B is watching netflix on his/her desktop displayed on our livingroms TV screen
[15:21] <RoyK> SSMAdmin: yes, and AFAICS that shouldn't necessitatea x11 server running on the server
[15:21] <RoyK> - Unlike VNC, X2Go sets up the environment when you log in, so you don't need to leave an X server running all the time. Plus, your session continues running even after you disconnect, which means that when you reconnect you'll find everything as you left it, just like on a local desktop.
[15:21] <RoyK> from the link you posted
[15:21] <SSMAdmin> RoyK, I already have ubuntu-desktop installed on the 18.04 server, so my familiy can watch films and browse the net.  While my family is doing whatever they want to do with the machine in the living room, I would like to be albe to sit in my computer room remote controlling my server login with a full desktop enviroment
[15:21] <RoyK> obviously meaning you'll need quite a bit of RAM if you want a lot of users
[15:22] <RoyK> looks so, yes
[15:22] <RoyK> I've only read what you posted, though - haven't used this myself
[15:22] <compdoc> SSMAdmin, the default gnome desktop is installed?
[15:23] <SSMAdmin> I have only two users.  My family watching video or browsing the internet in front of the servers TV screen, and med connecting and doing work in the background from remote controlled connection.  Thats my plan, anyway
[15:23] <SSMAdmin> compdoc, yes
[15:23] <SSMAdmin> compdoc, apt install ubuntu-desktop
[15:24] <RoyK> SSMAdmin: how much memory does the server have?
[15:24] <SSMAdmin> 4G
[15:24] <compdoc> Ive tried that, and x2go would only allow me to connect to the console desktop. I have to use the Mate desktop to allow multiple logins
[15:24] <RoyK> SSMAdmin: make sure you have some swap, then, preferably on an ssd, since gnome is rather on the heavy side
[15:25] <RoyK> or get more memory
[15:25] <SSMAdmin> compdoc, ok, so I have to uninstall ubuntu-desktop and install the Mate one?
[15:25] <compdoc> I used to install Server and then the mate desktop, but now with 18.04, I just install the minimal version of Ubuntu Mate
[15:26] <compdoc> last time I looked, the ppas to install Mate are not ready yet
[15:26] <SSMAdmin> compdoc, what minimal version?  Is it a minimal server version with mate desktop in it?
[15:26] <compdoc> but there might still be a way to install it. your have to search it
[15:27] <compdoc> ubuntu server and ubuntu desktop are the same thing now. one just has a gui
[15:27] <SSMAdmin> RoyK, I think I have some 4 - 8 G swap on a ssd, so that may be enough?
[15:28] <compdoc> I use minimal installs becuase i dont use bluetooth and allthe other crap
[15:29] <SSMAdmin> compdoc, thanks, good to know, then I can save me all the hazzle of installing the server, and installing desktop on top of it :-)
[15:29] <compdoc> yeah, its nice
[15:29] <tomreyn> !info ubuntu-mate-cloudtop
[15:29] <tomreyn> !info ubuntu-mate-cloudtop xenial
[15:30] <compdoc> but basically, you just need a 2d desktop. doesnt have to be mate
[15:30] <SSMAdmin> compdoc, sorry but I dont understand this minimal install yet.  Is it some option during installation, or is it a separat iso image?
[15:30] <compdoc> yes, option when installing the 18.04 desktop
[15:30] <compdoc> I mean the desktop install dvd
[15:31] <SSMAdmin> understand now, thank you
[15:33] <SSMAdmin> hmm, installing the ubuntu-mate-cloudtop...what about my family sitting in front of the server itself in the livingroom, can they log in as ususal as if they are logging in to standard desktop environment?
[15:34] <compdoc> they need the x2go client
[15:35] <SSMAdmin> so they need a client machine, that defeats the purpose of doing this in the first place
[15:36] <compdoc> you mean they log into the console?
[15:36] <compdoc> thats works as normal
[15:37] <SSMAdmin> Why should it be so damn complicated?  Currently my family log in to watch tv (or whatever), while I am able to ssh into my user on the server.  It should be just as easy to serve me my own graphical desktop
[15:37] <compdoc> thats exactly what will happen
[15:37] <SSMAdmin> they log into the desktop, start their internet browser, watch netflix or whatever
[15:37] <compdoc> you need the x2go client, then
[15:38] <SSMAdmin> I will need it, I can use whatever I have to use in order to remote connect to MY user environment, but my family should not need an extra client machine just to log into the server sitting right in front of them under the TV
[15:39] <compdoc> they dont. i misunderstood what you were saying
[15:39] <compdoc> only the remote viewer needs it
[15:39] <SSMAdmin> compdoc, ok, then I am the one misunderstanding :-)
[15:41] <SSMAdmin> Ok then, is it an easy way to just remove ubuntu-desktop and install mate?
[15:43] <SSMAdmin> Or...*scratching my head*...do my family need ubuntu-desktop, while I am using mate?  Sorry for all these stupid questions, but I am trying to learn
[15:46] <Guest69> Hi! Is it possible to install the new Ubuntu 18 LTS without any network?
[15:46] <Guest69> I can't get past the network part on the install
[15:48] <JanC> SSMAdmin: I think GNOME uses its own internal VNC server
[15:48] <JanC> it's called "vino"
[15:49] <SSMAdmin> JanC, ok...and this one has limitations, or could it be easy to configuring it to allow what I want to do?
[15:49] <JanC> I'm not sure
[15:50] <JanC> but looking at documentation for the correct VNC servers (so vino, not realvnc or such) might be useful
[15:50] <SSMAdmin> Anyway, you guys have helped me enough, I need to start testing some of your suggestions instead of going talk-circles with myself dragging you all with me
[15:51] <JanC> maybe the VNC client matters too
[15:51] <SSMAdmin> I try installing a mate server on a virtualmachine, and then x2go on top of that, then I see what happens
[15:52] <TheEagerPadawan> how does one decrypt a private desktop on ubuntu 18.04 , ecryptfs-recover-private doesn't seem to be available
[15:54] <blackflow> TheEagerPadawan: you left before I came back, I noticed one thing with upgrade to 18.04, the locale changed.
[15:54] <JanC> TheEagerPadawan: it's in 'ecryptfs-utils'
[15:54] <blackflow> I had to switch usage of Z and Y in the passphrase
[15:54] <blackflow> s/locale/keymap
[15:55] <TheEagerPadawan> JanC: there is no install candidate for that in on my linux live cd
[15:55] <TheEagerPadawan> blackflow: ok and how do i approach that , from the live cd or from the initramfs
[15:55] <blackflow> TheEagerPadawan: on the passphrase prompt. Do you have Z or Y in the passphrase? swap them when typing it.
[15:56] <TheEagerPadawan> i do not have a z or y
[15:56] <JanC> TheEagerPadawan: do you have universe enabled?
[15:56] <blackflow> TheEagerPadawan: otherwise, I've had a total meltdown of 17.10 which upgrade to 18.04 did not fix, so I'm nuking everything and reinstalling another OS, so I can't be of any more help there.
[15:56] <TheEagerPadawan> what do you mean with universe
[15:56] <JanC> universe repositories
[15:56] <TheEagerPadawan> need to check will try blackflow approach first
[15:57] <TheEagerPadawan> yeah ubuntu is going to get a ton of flack for this
[15:57] <JanC> for what?
[15:57] <TheEagerPadawan> ok here comes a long story
[15:57] <JanC> ecryptfs-utils is still installed for me after upgrade...
[15:58] <TheEagerPadawan> so i updated my ubuntu 17.10 to 18.04 yesterday , apperently it broke cryptsetup after booting up as usually it asks me for the password to unlik sda3_crypt
[15:58] <TheEagerPadawan> unlock *
[15:58] <TheEagerPadawan> when i provide it return the follow error: cryptsetup(sda3_crypt): cryptsetup failed, bad password or optionscheck the error messages by pressing esc i get the following:
[15:59] <TheEagerPadawan> WARNING: Failed to connect to lvmetad. Failling back to device scanning
[15:59] <JanC> seems like you were missing lvm2 or something like that?
[15:59] <TheEagerPadawan> volume group "ubuntu-vg" not found
[15:59] <TheEagerPadawan> cannot process volume group ubuntu-vgAfter a few failed logins i get dropped in a shell though any thought on how to defuck this
[15:59] <blackflow> note that lvm and no vg found is the consequence of the LUKS container not unlocking (the pv that contains the vg)
[15:59] <TheEagerPadawan> found this https://bugs.launchpad.net/cryptsetup/+bug/1767527could
[15:59] <blackflow> so you basically have one problem there: inability to unlock the LUKS container with the same passphrase
[16:00] <TheEagerPadawan> create a live live linux usb disk, managed to unlock the partition itself by providing the password as usual
[16:00] <TheEagerPadawan> however the home folder it self is also encrypted , ...
[16:00] <blackflow> TheEagerPadawan: I'd really advise trying to boot form a rescue/installation USB/liveCD/env thingy, and try cryptsetup manually.
[16:00] <TheEagerPadawan> so wooo ...
[16:00] <blackflow> TheEagerPadawan: that way you can verify if the upgrade borked the LUKS headers. if it did, say g'bye to it, unless you backed it up.
[16:01] <JanC> well, he just said he could unlock it...
[16:01] <TheEagerPadawan> seriously if i find the person responsible for this mess, terrible things
[16:02] <blackflow> JanC: could or couldn't?
[16:02] <TheEagerPadawan> the partition is unlockable via liveusb
[16:02] <TheEagerPadawan> need to figure out how to get access to my encrypted homefolder though
[16:02] <blackflow> ah, k.
[16:02] <JanC> blackflow: you can read what he said yourself, right?
[16:03] <TheEagerPadawan> well kinda spamming in frustration so ...
[16:03] <blackflow> JanC: I was going on a previous convo with TheEagerPadawan, I guess I missed the new info.
[16:04] <blackflow> TheEagerPadawan: in which case, back up, nuke & pave.
[16:04] <TheEagerPadawan> well yeah that is the idea
[16:04] <TheEagerPadawan> but i need to be able to unlock my home folder :s
[16:04] <JanC> maybe check if '/sbin/lvmetad' is installed on the upgraded system?
[16:04] <blackflow> TheEagerPadawan: you had /home encrypted atop of LUKS?
[16:05] <JanC> TheEagerPadawan: like I said, add universe repo, install ecryptfs-utils
[16:05] <TheEagerPadawan> just a sec
[16:06] <TheEagerPadawan> well i should really give it to the linux audit team
[16:06] <TheEagerPadawan> here have fun with this xD
[16:06] <TheEagerPadawan> so back into the linux live cd - 511GB encrypted harddisk
[16:07] <TheEagerPadawan> double click - provide password - decrypts and mounts to  /dev/dm-1
[16:07] <TheEagerPadawan> now what :)
[16:07] <TheEagerPadawan> and yes blackflow home folder was encrypted as well as the partition it self
[16:08] <TheEagerPadawan> ok now how do i add this universe repo
[16:09] <blackflow> sure it's not already enabled? see in /etc/apt/sources.list orwhatsthepath
[16:12] <JanC> the GUI has an option for that, right?
[16:13] <TheEagerPadawan> got bionic main restricted, bionic security main restricted and bionic-updates main restricted
[16:13] <blackflow> "GUI isn't exactly a server thing...."
[16:13] <JanC> he's on a live USB
[16:14] <TheEagerPadawan> don't care it's a desktop but i come here for the more hardcore question
[16:14] <blackflow> TheEagerPadawan: add 'universe' for example after 'main', run apt update
[16:14] <JanC> so then ad 'universe' after 'main' & 'restricted'
[16:14] <JanC> add*
[16:15] <JanC> (only add it once)
[16:15] <JanC> (once on the same line, I mean)
[16:21] <RoyK> SSMAdmin: any luck with x2go?
[16:21] <TheEagerPadawan> well this is not promising
[16:24] <SSMAdmin> compdoc, earlier you said "ubuntu server and ubuntu desktop are the same thing now. one just has a gui".  Maybe I am wrong, but I have the impresson that is not the case.  One difference between the two, is that the server during installaton ask where to install the GRUB loader, while the desktop version just assume it should be installed at /sda1 or something like that.  That actually happened to me, and sda1 was actually
[16:24] <SSMAdmin> another storage harddrive, I had to do the installation all over again after first physically disconnecting all extra harddrives.  Of course it could have been some error on my part, but if not..then there is difference between server and desktop
[16:24] <TheEagerPadawan> https://ibb.co/jG4a17
[16:24] <SSMAdmin> RoyK, I have not started yet, had to download desktop iso
[16:24] <RoyK> ok
[16:24] <SSMAdmin> family and children running around too
[16:25] <blackflow> SSMAdmin: no, the desktop installer also asks where to install grub
[16:28] <SSMAdmin> blackflow, ok, then there must have been an error on my part, sorry about that
[16:28] <blackflow> TheEagerPadawan: try giviing the path to the home dir
[16:29] <TheEagerPadawan> well i don't have the mountphrase which is a tad of an issue
[16:30] <blackflow> SSMAdmin: the difference between server and desktop is in the (meta)packages installed, that's pretty much it. there's ubuntu-minimal, ubuntu-server, ubuntu-desktop, that pull in adequate packages. also the new netplan.io NIH thingy is using different backends for network config, systemd-networkd on servers or NetworkManager on desktops.
[16:30] <blackflow> TheEagerPadawan: well you unlocked the LUKS container right?
[16:30] <TheEagerPadawan> yes
[16:30] <blackflow> did you mount the filesystems on it?
[16:30] <TheEagerPadawan> yes
[16:31] <blackflow> so you'd have the path to the .../home/ in it, right?
[16:31] <SSMAdmin> I just tried installing ubuntu desktop 18.04, I saw no option to choose MATE, where do I make that choice?
[16:31] <TheEagerPadawan> yeah, which contains the private desktop that we are are recovoring
[16:31] <TheEagerPadawan> install mate-desktop ssmadmin or download it from ubuntu mate directly
[16:31] <JanC> ecryptfs encrypted home uses your login password
[16:32] <blackflow> TheEagerPadawan: right, so can you give that path to ecryptfs-recover-private thing?
[16:32] <blackflow> I never used that tool, but am looking at the manpage of it, suggests you can give it the path
[16:32] <JanC> which it needs to decrypt the key
[16:32] <TheEagerPadawan> yeah but i asks for the mount passphrase
[16:32] <SSMAdmin> TheEagerPadawan, ok, then I have to install ubuntu server, and then apt install mate-desktop?  I thought it would be a choice to make during install of the desktop iso version
[16:32] <JanC> the key should be somewhere in your home
[16:33] <blackflow> ...... the encrypted home? :)  or liveusb home?
[16:33] <TheEagerPadawan> well which is fricking encrypted
[16:33] <JanC> the key is encrypted with your login password
[16:34] <blackflow> SSMAdmin: why not use UbuntuMATE official isos?
[16:34] <JanC> it's somewhere in a hidden directory IIRC
[16:35] <JanC> probably ~/.ecryptfs/Private.sig
[16:35] <JanC> (not on the USB, of course, your old home!)
[16:35] <JanC> or somewhere in that directory
[16:35] <TheEagerPadawan> well i can't access that
[16:36] <JanC> eh?
[16:36] <TheEagerPadawan> since it is encrypted ain it :p
[16:36] <JanC> ecryptf is a stacked filesystem
[16:36] <JanC> so you should be able to access it
[16:37] <TheEagerPadawan> could you be a bit more precise i'm working from an live usb
[16:37] <JanC> (there might be permission issues, I guess)
[16:37] <TheEagerPadawan> managed to decrypt the harddisk
[16:37] <TheEagerPadawan> or partition rather
[16:37] <TheEagerPadawan> still have a strugle with the desktop
[16:37] <JanC> eh?
[16:37] <TheEagerPadawan> LUKS decrypted, home dir not
[16:37] <SSMAdmin> blackflow, downloading now, I was not aware until now that there is official mate iso :-)
[16:38] <blackflow> TheEagerPadawan: I think what JanC is suggesting, is that you look into /path/to/mounted/LUKS/partition's/home/
[16:38] <JanC> and your username under that
[16:38] <JanC> and then .ecryptfs/
[16:39] <JanC> I _think_ that's where it stores the encryption key
[16:40] <TheEagerPadawan> home   .ecryptfs   name
[16:41] <TheEagerPadawan> welp those directory have a 1000 permission
[16:41] <TheEagerPadawan> can i savely chmod themN
[16:42] <JanC> do you want to fix it or just save data?
[16:42] <TheEagerPadawan> save data at this point
[16:42] <TheEagerPadawan> aready frustrated enough
[16:44] <JanC> then I guess chown could be okay, I guess (but for some files, especially configuration files, chmod may break things; e.g. when you want to save ssh keys or such)
[16:44] <blackflow> consider that frustration as a valuable lesson never to upgrade stuff without having a working backup :)
[16:45] <JanC> if it's just documents & such, it doesn't really matter how you get access to them, I guess...
[16:48] <TheEagerPadawan> true and it always get the one time you forget to do so ^^
[16:48] <TheEagerPadawan> well going to grab so food first
[16:48] <TheEagerPadawan> then have another crack at it
[16:48] <JanC> (you could also work as root to be preserve user/permissions & such with the right commands)
[16:48] <TheEagerPadawan> well feel free to provide them
[16:50] <JanC> cp can do that with the -p option
[16:50] <JanC> or rsync
[16:50] <JanC> or cp --preserve=... (see manpage)
[17:13] <TheEagerPadawan> well before i do i need to figure out how to unlock the private directory
[17:13] <TheEagerPadawan> private desktop *
[17:13] <TheEagerPadawan> or how to defuck the crypto during boot
[17:16] <SSMAdmin> In this guide UbuntuMATE is mentioned as an alternativ, does this mean in MATE I do not need to install XFCE? https://www.digitalocean.com/community/tutorials/how-to-set-up-a-remote-desktop-with-x2go-on-debian-8
[17:17] <SSMAdmin> (remember I am not a tech guy)
[17:18] <TheEagerPadawan> xfce and mate are two different desktop environments
[17:18] <SSMAdmin> I have installed UbuntuMATE, now trying next step - installing and configuring x2go
[17:18] <SSMAdmin> TheEagerPadawan, ok, thank you
[17:20] <SSMAdmin> In MATE, above guide says I need "compositing disabled".  What is compositing, and where do I disable it?
[17:22] <SSMAdmin> OK, I think I understand, compositing is related to a video card.  So when testing MATE in a virtualbox virtualmachine, I should disable compositing, while installing it on my Home Theather box with a graphic card I should leave compositing enabled?
[17:31] <TheEagerPadawan> JanC and blackflow ... any further suggestions ?
[17:32] <blackflow> TheEagerPadawan: nope, sorry. I never worked with ecryptfs. as for the luks issue.... the whole cryptsetup + systemd thing is pretty much broken, issues already filed. I run my own initramfs.
[17:34] <TheEagerPadawan> well have a ticket is all fine and all: https://bugs.launchpad.net/cryptsetup/+bug/1767527
[17:34] <TheEagerPadawan> an actually solution is something else ofcourse
[17:34] <JanC> if that is your issue, it's easy to fix?
[17:36] <TheEagerPadawan> well be my guest ....
[17:38] <TheEagerPadawan> honestly i have no clue anymore been fighting this mess since early this morning ...
[17:39] <SSMAdmin> AMAZING stuff.  Installed UbuntuMATE, then x2go server, then x2go client on a client machine.  Everything works as I wanted.  Thanks everyone who has helped: tomreyn JanC RoyK compdoc blackflow TheEagerPadawan :-)
[17:39] <TheEagerPadawan> well that is one problem solved
[17:40] <blackflow> TheEagerPadawan: you and I bud. and all I wanted was to block module loading after boot. if only I knew that I'd have to nuke and pave the entire system because of that..... I would have gone out biking, the day was splendid.
[17:41] <SSMAdmin> TheEagerPadawan, yes, I have another challenge.  If I reinstall the server using UbuntuMate instead of UbuntuServer, what will happen to my currently installed software Raid1?
[17:41] <TheEagerPadawan> well i would have studied for OSCP
[17:41] <TheEagerPadawan> but well thanks to a certain ubuntu dev
[17:43] <blackflow> TheEagerPadawan: I don't think it's anyone specific. The whole project quality is.... well...   :)
[17:44] <blackflow> I mean just look at netplan. textbook NIH, solution in search of a problem.
[17:45] <TheEagerPadawan> well i expected more of ubuntu to be honest, i mean it one of the biggest names in the linux world
[17:46] <RoyK> SSMAdmin: nice - guess I'll gotta try that one day :)
[17:50] <SSMAdmin> RoyK, I actually only used two small parts of the digitalocean x2go guide, that was apt install server and apt install client, MATE seems to be ready for this stuff
[17:53] <SSMAdmin> Guys, in my currently installed Ubuntu Server 18.04..could I just uninstall/remove ubuntu-desktop and install MATE gui?
[17:54] <TheEagerPadawan> are you working in a vm :)
[17:56] <SSMAdmin> TheEagerPadawan, for testing UbuntuMATE yes, but my real server is not a vm, its a physical computer sitting under the TV in the family livingroom :-)
[17:56] <JanC> SSMAdmin: first install 'ubuntu-mate-desktop', then switch to it, then remove 'ubuntu-desktop' & whatever you don't need
[17:57] <SSMAdmin> JanC, ok, how to I switch to ubuntu-mate-desktop?
[17:57] <TheEagerPadawan> JanC any further thoughts on my issue(s)?
[17:57] <JanC> SSMAdmin: you should be able to switch on the login screen, I think
[17:57] <TheEagerPadawan> if you logout, you can switch desktop environment (there should be a cog) - SSMAdmin
[17:58] <SSMAdmin> Ok, thought I could do it easily in the ssh terminal
[17:58] <TheEagerPadawan> ssh ain't a gui mate
[17:58] <tomreyn> the cog shows up once you chose / entered the user name to login as, below the password field.
[17:59] <SSMAdmin> I know ssh is not a gui :-)
[17:59] <SSMAdmin> I just want to replace one desktop environment with another, I dont need both of them
[18:01] <JanC> I'm sure you can change the default somehow; see the gdm manual (or that for whatever DM you are using)
[18:06] <TheEagerPadawan> still trying to resolve this whole crypto missery
[18:09] <JanC> maybe the ecryptfs thing works better when you work as uid 1000 ?
[18:27] <TheEagerPadawan> how?
[18:35] <tomreyn> sudo -u 1000 -i
[18:37] <TheEagerPadawan> unable to initialize policy plugin
[18:47] <SSMAdmin> Anyone know what is the difference between 'apt install ubuntu-mate-desktop' and 'tasksel install ubuntu-mate-desktop'?
[18:50] <tomreyn> run this: tasksel --test install ubuntu-mate-desktop
[18:51] <tomreyn> ...and you shall know the differences
[18:55] <TheEagerPadawan> still having the same crypto issues ......... sigh
[18:58] <SSMAdmin> Oh boy!  I have initiated apt install ubuntu-mate-desktop on my live server, and are now presented with a question about choosing between 'gdm3' and 'lightdm'.  I have no idea what this is, what should I choose?
[18:59] <SSMAdmin> Beforehand I have ubuntu-desktop installed
[19:08] <JanC> they are both "display managers" (they implement the graphical login screen & such)
[19:09] <JanC> gnome-shell needs gdm3, but MATE should work just fine with lightdm (and ubuntu mate uses the latter by default IIRC)
[19:13] <SSMAdmin> JanC, chose lightdm, crossing fingers and toes
[19:37] <TheEagerPadawan> still fighting the same issue(s) i had this morning
[19:38] <TheEagerPadawan> help is welcome ofcourse
[19:48] <SSMAdmin> JanC, the lightdm vs gdm3 dialog box was about choosing a default display manager.  Is it possible to configure it so that the user can choose at log in screen what display manager to use?  Or if I misunderstand this, I want my family to be able to continue using Unity, while I use MATE from remote x2go connection.  How can I achieve this?
[19:50] <JanC> SSMAdmin: you can choose a desktop environment at the login screen
[19:53] <SSMAdmin> I figured it out, cool :-)
[20:34] <TheEagerPadawan> still running into the sameproblem peeps
[20:41] <compdoc> too eager are you, padawan
[20:43] <Tempadoros> Hello everyone. I just tried upgrading an 16.04 server to 18.04 server and I'm trying to get the samba dc back up and running. I'm getting a weird error on krb services though. "Cannot open DB2 database '/etc/krb5kdc/principal': No such file or directory"
[20:43] <Tempadoros> That file doesn't exist on my backup either, so I wonder why it's looking for it? I'd appreciate any help
[20:48] <TheEagerPadawan> eager to solve this mess yes
[20:53] <JanC> Tempadoros: maybe also try asking in #samba (also note that in general LTS upgrades aren't recommended before the .1 version is out)
[20:54] <Tempadoros> JanC: It's a test no worries. Thanks, I'll try there after I look around a bit more.
[21:10] <TheEagerPadawan> i stop trying for today *sigh*
[21:14] <Tempadoros> Of course it was because of systemd as usual. If anyone else has the same issue, systemd-resolved was grabbing udp 53 so samba dns was dead
[21:23] <JanC> that's not a systemd issue per sé
[21:23] <JanC> you should file a bug report, because that seems like something not only you would run into
[21:25] <JanC> and it would probably apply to other services which want to use UDP 53
[21:25] <Tempadoros> Well it's AD, I should have checked if DNS was up before anything else. Still I probably will.
[21:29] <JanC> Tempadoros: when upgrading it probably shouldn't add an extra DNS server though...
[21:34] <compdoc> just now installed samba on my new 18.04 server, and works great with my netplan .yaml
[21:35] <JanC> compdoc: in full AD mode incl. DNS or just the file sharing?
[21:40] <compdoc> ooops, youre right. just file sharing. my bad
[21:50] <compdoc> do you people know of a good site that explains setting up AD? I know someone that could use it
[21:53] <Tempadoros> Well, the samba wiki is good
[21:59] <SSMAdmin> Crazy idea:  On x2go server machine run a group meeting in meet.jit.si or appear.in, and having my own video camera running on my x2go client computer.  Is that possible?
[22:00] <SSMAdmin> stupid idea, I found another way to do it :-)
[22:38] <teward> just a note to server team members: There's going to be an additional packaging delta added to nginx in C-cycle, because third party module compatibility is "more limited" in the current build - it needs an option called "--with-compat" enabled to allow third parties to add their own modules, either as packages or as one-offs outside the packaging, and it's recommended to have it enabled (by nginx)
[22:38] <teward> but neither we nor Debian do.
[22:38] <teward> if there's any objections to that let me know.
[22:38] <teward> I'm going to have to check with the SRU team to see if we can apply that in 18.04 via -updates, it doesn't add any real features or functional chagnes, but might be outside the scope of a standard SRU...
[22:52] <rbasak> teward: thanks. Is there any downside to --with-compat? Why isn't it enabled by upstream by default?
[23:13] <JanC> well, if it allows external modules then it does add a very real feature, right?  :)
[23:51] <teward> rbasak: it *is* enabled upstream
[23:51] <teward> JanC: you can build them currently, but you need to do a complete recompile along with the existing package, which already ships dynamic modules
[23:51] <teward> rbasak: upstream nginx.org enables it.  Debian nginx doesn't enable it.
[23:52] <teward> upstream nginx.org actually recommends enabling it from a packager's perspective
[23:52] <teward> I probed Debian for their reasoning in Debian Bug 897926 (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=897926)
[23:52] <teward> and i haven't had a reply yet.
[23:52] <rbasak> teward: I'm asking why the configure script requires --with-compat rather than just defaulting to it.
[23:52] <JanC> teward: you mean you need to do a complete recompile of nginx for every 3rd party module you build?
[23:53] <teward> JanC: without the with-compat, then yes.
[23:53] <JanC> ugh
[23:53] <teward> and it has to be compiled alongside the existing packaging.  Which is why with-compat was introduced
[23:54] <teward> JanC: so beyond the existing dynamic modules of which some third-party ones are in Universe as part of the nginx source package, it prohibits others from adding external third-party dynamic modules without first adding to the packaging
[23:54] <teward> which defeats the purpose of the dynamic modules :P
[23:54] <teward> rbasak: the correct answer to your statement is "Undefined"
[23:54] <JanC> still sounds like a feature then, even if not for end users  :)
[23:54] <teward> I have a separate off-list inquiry to the NGINX upstream contacts.
[23:54] <teward> JanC: which is why I said it'll be added in C-cyle
[23:54] <JanC> or not for most end users at least
[23:54] <teward> i haven't finished the internal debate for SRU justification
[23:54] <rbasak> teward: if there is a reason, I think we should know what it is before enabling it
[23:55] <rbasak> teward: if there's no reason, then they should just make it default upstream
[23:56] <rbasak> Right now it feels rather like ./configure --make-better
[23:56] <rbasak> Seems superfluous :)
[23:56] <teward> rbasak: well, considering I have 6 pending inquiries for this on my direct email alone
[23:56] <JanC> ./configure --fixme
[23:56] <teward> and that's just from this week
[23:56] <teward> it begs consideration
[23:57] <teward> rbasak: i think http://mailman.nginx.org/pipermail/nginx-devel/2016-October/008920.html is relevant
[23:58] <teward> since this is really explaining what goes on behind the scenes
[23:58] <teward> and I think it explains what dynamic modules *require*
[23:58] <teward> so the package changes done by Debian to make 'dynamic modules' doesn't really make dynamic modules
[23:58] <JanC> teward: does the module ABI change on security fices or bug fixes?