/srv/irclogs.ubuntu.com/2018/08/06/#ubuntu-server.txt

cpaelzergood morning04:00
=== bhuddah_ is now known as bhuddah
=== Olivier[m] is now known as lordievader
simulantHi does anyone know an easier way to pull up a list of ip addresses that successfully logged into an email account on ubuntu server within the last day or two? Mail log has 1000s of entires to try look through with login failures and various other messages in there... Any easier way?12:02
rbasaksimulant: grep?12:10
rbasaksimulant: most admins would use a combination of things like grep/egrep, sed, awk, cut, sort, uniq, etc.12:10
simulantrbasak: ok thanks12:48
RoyKrbasak: or just perl or python ;)12:57
rbasak"Just"13:00
tafa2does anyone run their own hypervisor (promox/vmware/similar) in the cloud on a dedicated server? I've got several VPS's now and have done some quick maths and it'll basically be cheaper for me to get a dedi and just portion it out the way I want13:00
tafa2was wondering if anyone did this and woudl advise against doing so?13:01
rbasaktafa2: you might try lxd13:01
* tafa2 googles lxd13:01
rbasakYou can run it on a single VPS13:01
ahasenackthat's a pro tip13:02
_KaszpiR_tafa2 in general it is possible but usually you are responsible for the whole automation process, and usually it's not worth it unless you already have it13:04
tafa2yeah I figured as much :)I'm running a few locally at home and at $dayjob (hyper-v, and prox) just wondering if anyone13:07
tafa2has done and would just recommend to sticking to regular VPS's13:07
tafa2for example, I forget I'd have to order (and justify) additional IP's13:08
=== miguel is now known as Guest35331
tafa2rbasak is lxd basically containerised OS's?13:13
tafa2so... docker but for an OS?13:13
rbasaktafa2: right13:13
tafa2Interesting... what's the benefit over KVM for example?13:13
rbasakHigher density is the main reason13:13
rbasakYou don't have to dedicate RAM on a per-contaner basis13:14
rbasak(though you can apply limits)13:14
tafa20o13:14
rbasakFaster starts/clones/etc, easier to manage.13:14
tafa2so the each lxd image gets it's own root shell, seperate environment but no allocated RAM?13:14
rbasakeg. usually you'd set up containers on the same filesystem so no messing with loopback mounts for management.13:15
tafa2just uses it from a "pool"13:15
rbasakEach container sees its own stuff only, as if it's the only OS on the system.13:15
rbasakHowever a container process is just a process like any other13:15
rbasakThat you can see from the host if you "ps".13:15
rbasakTry it: on Ubuntu, "lxc launch ubuntu:bionic my-first-container" and "lxc exec my-first-container bash"13:16
tafa2I'm on the online tutorial now13:16
tafa2pretty cool13:16
rbasakIt's what Docker was originally based on. Your description of "like Docker but for OSs" seems backwards to me because I was using lxc before Docker existed :)13:16
tafa2lol13:18
tafa2I get you13:18
tafa2I've spun it up13:18
tafa2It's interesting, but a faff - although everything is separate I don't feel like its a truly independent OS/environment in terms of access13:19
tafa2looks like there'd be a lot of messing around with internal network assignements13:20
rbasakYou can arrange the network how you like - much like a VM.13:25
rbasakBridge host NICs through, or apply through NAT, etc.13:25
rbasakNetworking is essentially no different to using VMs.13:25
rbasakIt's also possible for containers to share the same network namespace as the host, though I'm not sure if lxd supports that.13:26
rbasakcpaelzer: if you're taking the samba reviews, shall I take apache2?13:34
* rbasak claims it13:34
ahasenack\o/13:35
cpaelzerrbasak: yes that is ok13:48
cpaelzerI'm juts now able to start on the samba MPs13:48
rbasakcpaelzer: nice job figuring out the race in the dovecot test. That one had defeated me when I looked a few years ago.13:49
cpaelzerit is ugly++13:50
cpaelzerand I'm not entirely sure it is "the same" as the arm one you hunted13:51
tobascojamespage: just got this issue in production https://bugs.launchpad.net/neutron/+bug/166775613:51
ubottuLaunchpad bug 1667756 in neutron "Backup HA router sending traffic, traffic from switch interrupted " [High,Fix released]13:51
tobascodo you still support xenial mitaka? is these two allegable for backport to xenial/mitaka13:52
tobascohttps://review.openstack.org/#/c/460924/ https://review.openstack.org/#/c/482847/13:52
tobascocoreycb: ^13:52
coreycbtobasco: assuming they backport fairly cleanly then it shouldn't be a problem13:59
coreycbtobasco: yes we do support xenial/mitaka13:59
tobascowant me to add the distro to that bug and add a comment?14:00
coreycbtobasco: i can do that. if you happen to be able to provide mitaka versions of those patches that would help speed up the process. they can be attached to the bug.14:01
tobascoi haven't tried applying those newton patches on mitaka14:02
* rbasak takes the open-vm-tools review14:18
=== kklimonda_ is now known as kklimonda
ahasenackrbasak: I prepared the SRU paperwork for pmdk and ndctl (#1781269 and #1781268), it needs sponsorship14:33
ahasenackis that something you could card and do?14:33
rbasakahasenack: yes. Carded.14:36
ahasenackthanks14:36
=== Guest26876 is now known as giraffe
setraanybody knows about a decent CEFS Cluster setup guide, which really works?15:15
tobascocoreycb: tried looking through a cherry-pick but it seems a lot of stuff changed15:17
coreycbtobasco: that might make it tough to do15:20
tomreynsetra: my guess you mean CEPH15:28
tomreyn*is15:28
rbasakahasenack: may I have comment permission on your git-ubuntu FAQ document please15:58
rbasak?15:59
setratomreyn, yes that is what I meant... :-)16:14
tewardbleh, can an ubuntu-server list moderator approve my message?  Apparently, since my email change over, my @ubuntu.com address is auto-stuck in the moderation queues >.>16:33
ahasenackrbasak: done16:53
tewardshoutout to powersj for once again helping me with the nginx bug triage.  I probably need to update the duplicate detection triggers16:57
tewardyour help is always appreciated powersj  :)16:57
powersj:) had one come up today so figured I'd go through your list16:57
powersjhaving those templates makes it real easy16:58
tewardindeed.  i'm finding more and more though that these're 'delayed' bug submissions so I need to sniff through the logs,16:58
tewardpowersj: you might be interested in a feature proposal i wrote16:58
tewardhttps://bugs.launchpad.net/ubuntu/+source/nginx/+bug/178222616:58
ubottuLaunchpad bug 1782226 in nginx (Ubuntu) "Allow NGINX to install but not start during postinst if another process is bound to port 80" [Wishlist,Triaged]16:58
tewardso I can get rid of those stupid "err: bound to port" bugs **once and for all** lol16:59
powersjnice!16:59
tewardi'm working on getting that working, but i've had https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1781971 as a more important "this should be done first" thing from Andreas16:59
ubottuLaunchpad bug 1781971 in nginx (Ubuntu) "nginx daemon should be provided in a package that doesn't have dependencies to systemd (or nginx-common)" [Wishlist,Triaged]16:59
powersjah yeah I read that one as well today17:00
tewardthat one's got an interesting headache fixing though17:00
tewardnginx-daemon in my test builds doesn't have a depend on nginx-common in the debian/control...17:00
teward... but it gets an nginx-common dependency anyway when built17:00
ahasenackyou mean andres17:00
tewardoops yes17:00
tewardsorry i'm fast-reading over four screens today :|17:00
tewardanyways, IDK why it's adding nginx-common when I don't declare it in its dependencies, so blah.17:01
ahasenackI'm used to tha tparticular confusion :)17:01
tewardhashtag HelpWanted :P17:01
=== Pici` is now known as Pici
TJ-teward: through one of the declared dependencies?17:08
tewarddidn't see any.  the only thing it depends on are the libnginx-* dynamic modules that aren't third party modules that nginx-core would have otherwise depended on, otherwise it has no declaration of any other dependencies that I'm aware of which would pull in nginx-common17:09
tewardi'll have to dig deeper17:09
tewardit's probable I'm just missing something :p17:09
TJ-teward: as in ${misc:Depends} ?17:13
tewardthat... might be why, hmm.17:14
TJ-teward: is nginx-daemon a new binary package ?17:14
tewardTJ-: it replaces the binary component of the nginx-core package, yes, and doesn't depend on nginx-common directly (which was requested by andres)17:14
tewardnginx-core therefore is more or less a package that has some configuraiton and tests in it, but otherwise doesn't contain a binary nginx executable, that is provided by nginx-daemon in this 'test' build to get it done17:15
tewardany way to see what misc:Depends expands into?17:15
tewardTJ-: if this works I owe you a beer.17:20
tewardi had a feeling it might be something stupid so :P17:21
TJ-dh_gencontrol deal with it, so maybe look at the build log in detail17:22
tewardwell that just happened (my hardline dropped o.o)17:28
dlloyddid you make it out of the matrix in time17:28
tewardlol17:31
tewardI **am** the matrix!  *evil laughter*17:31
philaneoushi guys im having issues with SSL certificates via letsencrypt. i cant get the the redirection to work. HTTPS works locally but when i run an ssl checker the certificate is not found. It's also not accessible outside of the LAN on 443.17:42
tewardTJ-: confirmed it was the misc:Depends17:43
tewardnot sure how to alter that so it doesn't add nginx-common to everything...17:43
TJ-teward: is there something in debian/rules adding it statically?17:44
TJ-teward: debian/dh_nginx:234:                addsubstvar($package, "misc:Depends", nginx_depends());17:45
tewardyep that'd be it there17:47
tewardTJ-: it adds it to all the packages o.O17:47
tewardthat's... not good?17:47
tewardmight have to trim that for this to work properly, and that'd not be nice to do17:47
tewardTJ-: though I might be able to adjust that to avoid certain packages and strings... such as for the modules and the nginx-daemon binary package17:48
tewardTBH I stared at this for eight hours on Saturday before saying "I need a break" o.O17:48
tewardguess I missed lots of these things17:48
TJ-teward: it only looks to be included if the package being built contains a module. Is that the case with nginx-daemon?17:54
TJ-teward: if so, you can edit the line "if ($package !~ m/libnginx-mod-\w+?/)" to include a match for nginx-daemon17:54
tewardTJ-: actually the way it's doing that is it adds everything17:58
tewardTJ-: the dep add is *after* that check17:58
TJ-teward: oh yeah... my indentation was confusing me17:58
tewardthis sounds like a bug in the code, because that line adds nginx-common to all the modules17:58
tewardTJ-: i can adjust this to make it have a secondary conditional that it needs to not match that regex and also not match nginx-daemon17:59
TJ-teward: the commit log talks about soemthing dynamic17:59
tewardbut this also sounds like a bug in the package and that i need to poke that upstream17:59
tewardTJ-: libnginx-mod-* includes compiled .so module binaries, yes.17:59
tewardbut they don't depend on nginx-common, they just have a requirement on one of the nginx binaries being installed17:59
powersjahasenack, the 1404 name is not related to 14.04 ;)17:59
tewardTJ: so `nginx-daemon | nginx-full | nginx-light | nginx-extras` makes sense, but you could technically install just the .so without any additional configs18:00
teward*except* for the fact that it would then fail to load that module unless you have an nginx.conf built to do it18:00
tewardTJ-: so i'm starting to think that this might not be doable within the confines of what's needed because of those dynamic modules...18:00
TJ-teward: right. This in the commit log suggests why "Not all modules are ready for dynamic building"18:00
tewardTJ-: i think we're talking two separate 'issues' here18:01
teward(1) Binary moduels that're dynamic18:01
teward(2) Modules compiled inot the code18:01
tewardthe problem with (1) is that you need nginx-common because it creates the config struct that the modules then install into18:01
tewardwhich includes the modules-available18:01
TJ-teward: that sounds about correct18:01
tewardwhich means that what andres wants is not doable18:02
ahasenackpowersj: go figure :)18:02
tewardTJ-: if that's the case, then I'll have to reply as such on the bug, because it's not able to be done in a way that would work for what andres and their team needs18:03
teward... actually...18:04
teward... we may be able to just install nginx-daemon without the third party modules18:04
tewards/third party modules/dynamic modules/18:04
tewardit'd strip a good portion of nginx functionality out18:04
teward(at least, the functionality those modules provide)18:04
tewardbut it'd work...18:04
TJ-teward: you've defined nginx-daemon as a flavour ? if so can't you just statically link the popular/common  modules into it? or is that not what is wanted?18:06
tewardTJ-: this is an 'in the works' package.18:07
tewardnot the final18:07
tewardonce i figured out the deps issue I was going to fix it18:07
tewardhowever the original request was the binary that nginx-core provides without nginx-common18:07
tewardhence the original 'scope' discussion I had with andres as to what exactly was being requested18:08
tewardi'll have to think about how to approach this18:09
tewardbut I won't be able to do that while these coworkers of mine are rude noisy [CENSORED] right next to my cube and they aren't even discussing work18:09
tewardthis is a wishlisted feature, of course, of more importance before FeatureFreeze of this cycle is which NGINX branch to track18:10
tewardand i'm still waiting for that email to be released from the mod queue on the mailing list so I can get everyone's input :P18:11
TJ-teward: the only noise I have is birds tweeting, and tapping on the roof of my inside-out room :)18:11
tewardTJ-: heheh.  You're lucky then :P18:13
tewardI'm stuck with noisy inconsiderate coworkers WHO I HOPE ARE READING THIS HUGE PRINT OVER MY SHOULDERS.18:13
teward(it's been one of those days...)18:13
teward*pops in earbuds and blasts metal music to drown them out*18:13
TJ-ha! and now a Husky come to howl at me for her dinner :)18:14
=== pesari_ is now known as pesari
tewardTJ-: I think what I'll do is strip nginx-daemon to a separate package excluding the dynamic modules, and leave that in nginx-core.  Once that's done the daemon can be installed separately minus the featuresets that were in the dynamic modules18:50
tewardthat should settle andres' request as well as solve nginx-core.18:50
tewardbut that's a problem for tomorrow ;P18:50
leftyfbdavidlopez: while you CAN install a GUI onto your server, it will in no way make properly configuring your server easier. In fact, it will slow you down in many ways including adding unnecessary resources to your server. If you have any interest in learning, the terminal is where it's at.19:19
tomreynso this channel is +z, bu thtere are no ops20:45
tomreyn*but there20:45
leftyfbwait, can you see this?20:45
tomreynyes20:45
tomreynyou're registered20:45
leftyfband philip___ isn't?20:45
tomreyni guess not20:45
tomreyn-NickServ- philip___ is not registered.20:46
tomreynso unregistered users can type here, and assume they've been read. but in fact only ops would get to see them. and there are no users with mode +o here (currently)20:47
tomreynmeaning unregistered users just speak to /dev/null without being aware of it20:47
leftyfbkinda sad that there's no +o's here20:48
powersjThere are ops and if you need something I believe you can ask in #ubuntu-irc20:54
powersjThey turned on registering after a lot of spam20:54
rbasakUnit193: ^22:46
Unit193rbasak: What's up?22:46
rbasakSee backscroll please?22:46
rbasakDo we need to do something about that?22:47
Unit193rbasak: I'd think for this channel +r would be best, personally.  I'm not a named op here though.22:48
Unit193rbasak: Poked somewhere else, hopefully it's solved soon.22:52
rbasakUnit193: thanks!22:58

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!