| lotuspsychje | good morning to all | 01:10 |
|---|---|---|
| lotuspsychje | leftyfb: oO ;p | 01:46 |
| lotuspsychje | you want him? | 01:46 |
| leftyfb | nah | 01:47 |
| leftyfb | got my own issues I'm dealing with | 01:47 |
| lotuspsychje | what you playin with leftyfb | 01:47 |
| leftyfb | main server was down for 2 hours(gotta fix monitoring). It was rebooted (don't know why) and I just finished fixing why it came back up without network(stupid -modules packages) | 01:48 |
| lotuspsychje | ouch | 01:48 |
| lotuspsychje | what server Os leftyfb | 02:00 |
| leftyfb | 16.04.5 | 02:00 |
| lotuspsychje | found something in the logs? | 02:00 |
| leftyfb | I'm not finding anything | 02:00 |
| leftyfb | nope | 02:00 |
| leftyfb | auth.log, syslog, kern.log, last | 02:01 |
| tomreyn | what kind of server is this? | 02:02 |
| leftyfb | PowerEdge R310 | 02:02 |
| leftyfb | Dell | 02:02 |
| tomreyn | i guess it'll have some more logs then | 02:02 |
| leftyfb | what do you mean? | 02:03 |
| tomreyn | the remote out of band managment stuff, can't remember dell's name for it right now | 02:03 |
| tomreyn | it probbaly provides some hardware monitoring log | 02:03 |
| leftyfb | ipmi/iDrac | 02:03 |
| tomreyn | right | 02:03 |
| tomreyn | idrac is what i meant | 02:04 |
| leftyfb | sel log | 02:04 |
| tomreyn | exactly, nothing there either? | 02:04 |
| leftyfb | looking ... | 02:04 |
| lotuspsychje | debug logs? | 02:04 |
| leftyfb | I started looking for the exact term the moment you started mentioning it :) | 02:04 |
| lotuspsychje | or the last command can help? | 02:04 |
| leftyfb | nope | 02:04 |
| leftyfb | nothing there, only "reboot" | 02:04 |
| tomreyn | :-/ | 02:04 |
| leftyfb | nothing in SEL | 02:05 |
| tomreyn | might be better to switch it to not reboot automatically on failure next time | 02:05 |
| tomreyn | ..so you can see whats on the console from idrac | 02:05 |
| leftyfb | you think a failure caused it to properly reboot(ACPI)? | 02:06 |
| tomreyn | well if trhere's nothing in the logs, it sounds like a hardware issue, right? or a kernel issue which could not get logged in time | 02:07 |
| leftyfb | reboot system boot 4.15.0-29-generic Sat Aug 4 18:17:43 2018 - Sat Aug 4 20:51:28 2018 (02:33) | 02:07 |
| tomreyn | i think there's an optio in most bioses/uefis to stop the system from getting rebooted / power cycled on failures. it's normalöly enabled. i'm suggesting you might want to disable it. | 02:07 |
| leftyfb | that's all I've got | 02:07 |
| lotuspsychje | leftyfb: ups could rebooted it? | 02:08 |
| lotuspsychje | if logs doesnt show anything, we should look external things? | 02:09 |
| leftyfb | I don't have any of the apc tools installed | 02:09 |
| lotuspsychje | hmm | 02:09 |
| lotuspsychje | leftyfb: can you trigger var log messages from the day? | 02:10 |
| lotuspsychje | morning guiverc_d | 02:11 |
| leftyfb | trigger? Also, /var/log/messages hasn't been a thing in years. You mean syslog/auth.log | 02:11 |
| lotuspsychje | yeah | 02:12 |
| leftyfb | https://pastebin.ubuntu.com/p/MzqjQ4rTMp/ | 02:13 |
| leftyfb | that's from syslog | 02:13 |
| lotuspsychje | lets c | 02:13 |
| leftyfb | reboot happened around 18:17 or so .. closer to 18:14 I think | 02:14 |
| lotuspsychje | leftyfb: what kind of service your server running/purpose? | 02:15 |
| leftyfb | apache2 on the host and in a couple lxc containers | 02:15 |
| lotuspsychje | should be stable that | 02:15 |
| leftyfb | yep | 02:15 |
| leftyfb | been doing this stuff for over 20 years :) | 02:16 |
| leftyfb | iDrac has a nice "Last Crash Screen" feature, but nothing was captured. I don't think it was a crash though | 02:17 |
| lotuspsychje | leftyfb: ssh on it? use anti bruteforce? | 02:18 |
| leftyfb | yep and yep | 02:18 |
| lotuspsychje | checked those attempts yet? | 02:18 |
| lotuspsychje | on the time of shutdown | 02:19 |
| leftyfb | root has a randomly generated 23 character password that I don't know (on purpose) only accessible via ssh keys from 2 ip address's. I have fail2ban on. ssh running on a non-standard port | 02:19 |
| lotuspsychje | check anyway :p | 02:21 |
| lotuspsychje | you never know they got in | 02:21 |
| leftyfb | oh this is cool as hell | 02:21 |
| leftyfb | iDrac saves a recording of the last 3 boot sequences | 02:21 |
| lotuspsychje | aha | 02:21 |
| tomreyn | well, some may like it, others may hate it | 02:22 |
| tomreyn | there's also https://help.ubuntu.com/lts/serverguide/kernel-crash-dump.html | 02:22 |
| tomreyn | but i assume you'll know | 02:22 |
| leftyfb | if someone "got in" to ssh via a non-standard port using my private key and somehow spoofed the 2 ip address's that's allowed, one of which is local, there's no way in hell they left any sort of tracks | 02:22 |
| tomreyn | the @ characters in your log make it look like a kernel crash | 02:22 |
| leftyfb | tomreyn: that's what I was thinking. | 02:23 |
| leftyfb | oh man, it shows me logging in to the local console and troubleshooting for a bit. Cool as shit | 02:24 |
| tomreyn | scary as shit :P | 02:25 |
| leftyfb | I love it | 02:25 |
| leftyfb | it's a dedicated interface on my LAN, not accessible to the outside | 02:25 |
| leftyfb | different VLANs | 02:26 |
| tomreyn | that's probably fine. i just don't like the idea of having the host OS effectively run in a sandbox with lots of security cameras and some other operating systems around it, where you have no idea what their limits are, how they work, and how they may be susceptible to compromise, too. | 02:28 |
| leftyfb | I'm partial to OOB BMC's | 02:28 |
| lotuspsychje | !info watchdog | 02:29 |
| ubot5 | watchdog (source: watchdog): system health checker and software/hardware watchdog handler. In component universe, is extra. Version 5.15-2 (bionic), package size 81 kB, installed size 263 kB | 02:29 |
| leftyfb | it was sort of my thing when I worked at Canonical :) | 02:29 |
| lotuspsychje | could be usefull too, but not sure if it can go in the past | 02:29 |
| tomreyn | i like to have OOBs, i just want them to be well defined, well designed, and most of all sully open source and fully documented. | 02:30 |
| leftyfb | I think iDrac meets most, if not all of those | 02:30 |
| lotuspsychje | kk | 02:30 |
| leftyfb | especially since it fully complies with ipmi | 02:30 |
| tomreyn | luckily we'll likely get this in the years to come. | 02:30 |
| tomreyn | idrac is proprietary, not open source, not documented (in terms of hardware and software), afaik. | 02:31 |
| lotuspsychje | i like lynis system scan too, but thats if you a bit more paranoid :p | 02:31 |
| tomreyn | well, libre software was not on my requirements list. | 02:31 |
| leftyfb | I really gotta setup another nagios server | 02:37 |
| leftyfb | another day ... gonna call it a night | 02:38 |
| lotuspsychje | nite leftyfb | 02:40 |
| lotuspsychje | Bashing-om: next time, donate to lotus computers ok? https://www.omgubuntu.co.uk/2018/08/elementary-os-hires-cassidy-james | 02:50 |
| lotuspsychje | pm for my bank account | 02:50 |
| Bashing-om | lotuspsychje: looking. | 02:50 |
| lotuspsychje | lol | 02:50 |
| Bashing-om | lotuspsychje: Must be a trend started ... as the GNOME Foundation aslo recently got a donation that enabled paid staffing . | 02:55 |
| lotuspsychje | yeah | 02:55 |
| lotuspsychje | next: lotus computers :p | 02:55 |
| lotuspsychje | i understand when you retire, you dont know what to do with all your money :p | 02:56 |
| Bashing-om | lotuspsychje: I smell a fallacy somewhere :P | 02:57 |
| lotuspsychje | haha | 02:57 |
| Bashing-om | I would be greatly pleased with a small donation of a Ryzen7 box :P | 02:59 |
| lotuspsychje | yeah sure, how about 10 with million $ | 02:59 |
| Bashing-om | lotuspsychje: Well, yeah ..if ya gonna wish .... wish *BIG* . | 03:00 |
| lotuspsychje | to be able to help volunteers, we need a good machine right?? | 03:00 |
| * lotuspsychje hope that donate guy reads the ubuntu logs | 03:01 | |
| Bashing-om | lotuspsychje: Consider how much smoother my work flow would be with modern hardware ... now that would be support :) | 03:02 |
| lotuspsychje | yes! | 03:03 |
| lotuspsychje | wb pragmaticenigma | 03:37 |
| pragmaticenigma | alo | 03:37 |
| lotuspsychje | been going slow | 03:37 |
| pragmaticenigma | that'd be a nice change of pace | 03:38 |
| ducasse | good morning | 06:20 |
| lotuspsychje | good afternoon to all | 10:22 |
| tomreyn | good morning lotuspsychje ;) | 10:31 |
| tomreyn | you just joined a few mins before i did ;) | 10:31 |
| lotuspsychje | hey tomreyn had a nice night :p | 10:31 |
| tomreyn | err after | 10:31 |
| tomreyn | yes, full 6 hours | 10:31 |
| lotuspsychje | too hot again? | 10:31 |
| tomreyn | sorry, missed your response, LP. not too hot, maybe too much daylight ;) | 11:14 |
| lotuspsychje | no sweat | 11:14 |
| tomreyn | not yet | 11:16 |
| lotuspsychje | haha | 11:16 |
| BluesKaj | Hi folks | 12:28 |
| lotuspsychje | hey there BluesKaj | 12:29 |
| BluesKaj | hey lotuspsychje | 12:37 |
| JimBuntu | Hita BluesKaj . Great morning to you and yours! | 13:07 |
| BluesKaj | 'Morning JimBuntu, thanks...the same to you and yours :-) | 13:08 |
| lotuspsychje | hey pragmaticenigma | 13:32 |
| pragmaticenigma | hey | 13:33 |
| lotuspsychje | pragmaticenigma: support steady today | 13:34 |
| pragmaticenigma | only on for a moment | 13:35 |
| lotuspsychje | sure tyt, have a coffee :p | 13:35 |
| pragmaticenigma | can't ... got places to be, things to do | 13:35 |
| pragmaticenigma | I do not understand how someone things a support channel is the appropriate place to talk about their misives on flash | 13:38 |
| lotuspsychje | pragmaticenigma: <amagard> Hi folks. Anyone any hint why Flash Plyaer won't work on my ubuntu 18.04, neither in Firefox nor Chromium web browser ? | 13:39 |
| lotuspsychje | was his origin question | 13:39 |
| pragmaticenigma | perhaps, but the commentary after wasn't OT | 13:40 |
| lotuspsychje | true | 13:40 |
| lotuspsychje | ppl think when flash works in windows, everything is ok | 13:41 |
| pragmaticenigma | Also, flash is not insecure, regular updates are provided when vulnerabilities are found. Personally, I don't have it installed on my machines, only because adobe is pulling the plug 2020 (unless they're like microsoft and extend it another X years while companies finally remove it from their sites) | 13:41 |
| pragmaticenigma | If I desperately need flash for something, I have google chrome installed, which includes their sandboxed implementation | 13:41 |
| lotuspsychje | flash is widely abused | 13:45 |
| lotuspsychje | but hey alot of apps got 0day exploits | 13:46 |
| pragmaticenigma | it is, but to out-right dismiss it as vulnerable is spreading FUD in my mind. I have only ever been stung by flash once, and it was my own doing. I honestly believe a person has to really try to find a way to get their computer compromised these days. | 13:47 |
| lotuspsychje | i dont agree with that | 13:48 |
| lotuspsychje | windows boxes are like full of malware just by browsing the web | 13:50 |
| lotuspsychje | i always warn users for using bad protocols | 13:51 |
| lotuspsychje | vnc,ftp,flash,.. | 13:52 |
| lotuspsychje | ssh when not protected gets hammered 24/7 also | 13:52 |
| pragmaticenigma | I still call FUD on that... I have several windows boxes that I maintain for family. They only run Window's Defender full time, and I run other programs once a month. These machines are more or less vanilla installs with updates installed regularly. | 13:53 |
| lotuspsychje | its not because its updated, they are not infected | 13:53 |
| lotuspsychje | i would call it reality instead of fud | 13:53 |
| pragmaticenigma | lotuspsychje: you just made the claim that owning a windows machine is vulnerable | 13:54 |
| lotuspsychje | pragmaticenigma: depends from the owner | 13:54 |
| lotuspsychje | but alot of owners are infected yes | 13:54 |
| pragmaticenigma | that's not a fault of the machine if the owner is doing bad things. computer do as they're told | 13:54 |
| pragmaticenigma | they're not sentient... yet | 13:55 |
| lotuspsychje | the owners choice is also the Os | 13:56 |
| lotuspsychje | scan any windows pc with malwarebytes and youl get 500 hits | 13:57 |
| lotuspsychje | unless the owner maintains his Os a bit | 13:57 |
| pragmaticenigma | I don't agree with that generalization | 13:58 |
| lotuspsychje | then there are rootkits, virusses,browser exploits and scanners 24/7 | 13:58 |
| lotuspsychje | the world is one big scanning warzone, thats reality mate | 13:58 |
| lotuspsychje | not a general statement | 13:58 |
| lotuspsychje | same for android..playstore is a joke full of malware | 14:02 |
| lotuspsychje | ive been warning my customers dont use pc banking on android | 14:03 |
| pragmaticenigma | okay, i'm out ... this conversation is fruitless and really taking a turn for the worse | 14:04 |
| lotuspsychje | later ;) | 14:04 |
| lotuspsychje | leftyfb: server back in business? | 14:05 |
| leftyfb | it was last night, pretty quickly. I was just trying to find out the "why" | 14:05 |
| lotuspsychje | kk | 14:05 |
| leftyfb | I cringe thinking of all the packages someone_ has installed from ppa's, manually or from source. | 14:37 |
| daftykins | :) | 14:37 |
| leftyfb | and there we go | 14:38 |
| mwsb | Arch is still the best server os. It's just minimal and you know it's flaws | 14:42 |
| leftyfb | mwsb: It's nice to have an opinion isn't it? | 14:43 |
| mwsb | It's a fact. daftykins knows | 14:45 |
| leftyfb | mwsb: incorrect | 14:45 |
| daftykins | xD | 14:48 |
| leftyfb | <someone_> leftyfb I solved the problem, I have downloaded all .deb files from pkgs.org and after I installed them to take place of oibaf files, I executed sudo apt -f install and that is it and everything is perfect now ." | 17:14 |
| * leftyfb sigh | 17:14 | |
| leftyfb | some people just refuse to listen/learn and are just hell bent on making a mess | 17:14 |
| daftykins | xD | 17:15 |
| tomreyn | BenderRodriguez: connection issues? | 20:21 |
| daftykins | time to sort 'em :) | 20:21 |
| tomreyn | not happening | 20:42 |
| daftykins | hmm? | 20:46 |
| tomreyn | its ok-ish, he got kicked, but only after he bragged about how he rickrolled folks, follewed by much discussion in #ubuntu, followed by more discussion in #ubunutu-ops. so he was able to deal his damge, which trolls consider winning. like he did twice yesterday, and the day besfore. | 20:51 |
| daftykins | this is the guy above? or someone else | 20:51 |
| tomreyn | no, no. its this person now called 'rekt' in #ubuntu | 20:52 |
| tomreyn | previously rooik | 20:53 |
| daftykins | ah | 20:55 |
| tomreyn | the only way to deal with such classic trolls is to kickban them immediately, leaving an explanatory (ban) message for the rest of the channel. since only then they can't do harm, can't disrupt, can't score in what they consider to be a game. | 20:57 |
| daftykins | *shrug* glad to not encounter such anymore | 20:58 |
| tomreyn | how do you do that? got his isp on ignore? | 20:58 |
| daftykins | i'm not in that channel | 20:59 |
| tomreyn | oh :) a hideous approach to solve this issue ;) | 21:00 |
| daftykins | oh it's not from choice :) | 21:01 |
| daftykins | this is why i often ask what's going on in there, can't see for myself | 21:01 |
| tomreyn | i see | 21:04 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!