=== markthom- is now known as markthomas === crimastergogo_ is now known as crimastergogo [09:34] hiya [09:35] a colleague of mine is running into https://bugs.launchpad.net/cloud-images/+bug/1792543 - who could help out with this? [09:35] Launchpad bug 1792543 in cloud-images "EKS AMI init process should not rely on non-standard tags and AWS CLI" [Undecided,New] [09:42] Hello. In a (typical?) RAID10 => LUKS => LVM setup, where would you insert a fast SSD (or two of them as RAID1) as bcache device? And does the RAID10 then still make much sense or would you replace it with RAID5 or 6? [09:54] Odd_Bloke: ^ can you help with this bug or is it somebody else? [11:49] vlt: Frankly, I would never replace RAID10 with any kind of parity RAID setup. As for the caching option... [11:49] vlt: I would add the SSD as an LVM caching volume. [11:51] vlt: Rather than using bcache/dm-cache directly. [11:52] vlt: man 7 lvmcache [12:23] this weekend my dell pe 4600 will be retired and replaced with a more modern hp mp350l dual 2.0ghz hexacore setup [12:35] openfire: Thanks for your answers. I'll definitely have a look at lvmcache. Why would you never use parity RAID instead of RAID10? I thought parity RAID's weakness is writing and that should be covered by the caching device. What other reasons are tehre? [12:44] vlt: Undetectable data corruption due to read errors during rebuilds. Most (all?) storage vendors consider parity RAID a dinosaur these days. [12:46] Ah, ok. [15:00] jamespage: can you please check https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/1750848 ? I'm confused how a rebuild of mimic can fix an issue with luminous. [15:01] Launchpad bug 1750848 in ceph (Ubuntu) "ceph 12.2.3 lint" [Low,Fix released] [15:01] nice name btw, cosmic disco ;) [15:02] frickler: some of the changelog history is missing from the comment; I did a load of work to cleanup the lintian awarnings on the mimic packages [15:02] I won't backport that [15:02] it does not materially effect the function of the package [15:03] jamespage: o.k., understood, but the plan would still be to support latest 12.2.x for the time being, just not fix that issue there, correct? [15:03] yup [15:04] ok, thx [15:23] hiya jamespage - how are you? [15:23] do you know who could help with https://bugs.launchpad.net/cloud-images/+bug/1792543? [15:23] Launchpad bug 1792543 in cloud-images "EKS AMI init process should not rely on non-standard tags and AWS CLI" [Undecided,New] [16:09] I am trying to setup static IP on 18.04 server by editing /etc/netplan/50-cloud-init.yaml [16:10] So far I can ping internal IP's and external domain names (google.com) but I cannot ping any internal hostname's [16:11] this is what the config looks like https://paste.ubuntu.com/p/rshmvDyC5X/ [16:12] what am I missing? [16:12] zetheroo: does it give you a specific error message? have you verified they're all on the same subnet? Are they on different subnets and there's a firewall restricting access? [16:12] zetheroo: is there an internal search domain? [16:12] check another system for any 'searhc domains' that it defaults to [16:12] teward: I am trying to reach hostnames on the same network in the same domain [16:12] that might be necessary [16:12] for the DNS resolutoin to work proper [16:13] yes, but where do I enter that info? [16:13] https://netplan.io/examples#dhcp-and-static-addressing [16:13] nameservers > search [16:13] underneath the ethernet device config [16:13] ah ok [16:14] brilliant - thanks === jelly is now known as khajiit === khajiit is now known as jelly [16:59] teward: thanks [17:09] I'm in the process of hardening an ubuntu server. Is there some software that I can scan the server with that will find vulnerabilities? [17:10] dougquaid: i like lynis as nice scanning tool, but security has very wide ranges [17:10] dougquaid: you can harden your server on so many different ways [17:10] dougquaid: first thing is gathering info on everything, like a hacker would do [17:11] !security | dougquaid [17:11] dougquaid: Security Updates are dealt with here: https://help.ubuntu.com/community/Security - See also !root, !firewall, !server, and !usn [17:11] thanks [17:12] dougquaid: nmap is also very good for information gathering on your ip's/locally and remotely [17:13] dougquaid: can you share with us wich services you run from your server? [17:14] cyphermox: for? oh, the netplan thing with zetheroo? [17:20] hello [17:22] I am installing ubuntu server on a machine that has no graphical output, but I have a serial terminal 115200n8. I am supposed to pass additional kernel command line parameters such as "console=tty0 console=ttyS0,115200n8" but I can't find in the install menu where I am supposed to type it [17:24] By sending F3 it says "To use one of these boot methods, type it at the prompt, optionally followed by any boot parameters. For example: boot: install acpi=off", but if I do "install console=tty0 console=ttyS0,115200n8" it says "Loading install... failed: No such file or directory" [17:25] same for "expert console=tty0 console=ttyS0,115200n8" "Loading expert... failed: No such file or directory" [17:25] teward: yup [17:27] but if I do "memtest" it goes "Loading /install/mt86plus... ok", so the boot prompt seems working. Are "install" and "expert" correct references? [17:29] cyphermox: ah, cool. yeah i keep that examples page bookmarked :P [17:29] since it explains some of those questions real easy :) [17:29] teward: yup, and I'll do one big update of it very soon [17:29] could you please confirm me that the "install" and "expert" boot options are correct? The documentation is mesleading [17:31] cyphermox: cool, let me know when that happens, can't wait to see even more examples and know even more about Netplan! :D [17:37] thank you for your consideration. I'm dropping ubuntu server for a good debian, which has a working install bootloader [19:01] wat ? [19:01] I have never had an issue with a Ubuntu install bootloader [19:02] Ussat: You need to be more special to encounter it. [19:02] I see, reading up [19:03] I have not installed a debian in a long time, but I dont expect its a lot different [19:04] Not for the server install, certainly. [20:13] giaco, i typically use F6 to modify the cmdline of the installer. [20:14] giaco, i don't think failing to pass the right cmdlines is considered to be a broken bootloader, especially since this is installer only and not the installed system. [20:15] xnox: contrary to what you are saying, failing to add kernel parameter at boot, especially at intaller boot, can be considered a severe fault [20:16] xnox: moreover, using the ubuntu netinstall image the behaviour is different and the same command line options are working [20:16] giaco, are you using non-ubuntu netinstall images and those are broken? [20:16] so is the the ubuntu server 18.04 iso (the ~900MB one) that is not working [20:17] xnox: no, the ubuntu netinstall is working, the normal iso is not [20:17] giaco, live or non-live one? cause the live one, which uses subiquity, has probably incorrect help text on the scren. [20:17] giaco, right, we should fix that. One second, let me give you two links. [20:18] giaco, http://cdimage.ubuntu.com/releases/bionic/release/ubuntu-18.04.1-server-amd64.iso this is the "old" server installer, which uses d-i, and should use all the same kernel cmdline parameteres as netinstall image does. [20:18] this is the one that did not work https://www.ubuntu.com/download/server [20:19] xnox: I don't think is a matter of bootloader feature availability: the parameters are passed straight to the kernel [20:20] btw I've succeeded in installing ubuntu server 18.04 using netinstall + parameters "console=tty0 console=ttyS0,115200n8" [20:20] giaco, eeeee..... well..... some of them are also parsed by initramfs, and also parsed by installer, to launch the installer on the right console. [20:21] giaco, i suspect that the one pointed at https://www.ubuntu.com/download/server is a subiquity based one, and doesn't in fact support multiple consoles and doesn't start installer on ttyS0 [20:21] only starts it on tty0 [20:21] actually tty1 [20:21] well, I need ttyS0 anyway, which is not started by default on netinstall [20:22] giaco, we have two server .iso; this looks like a legitimate bug in one of them; please try this iso http://cdimage.ubuntu.com/releases/bionic/release/ubuntu-18.04.1-server-amd64.iso [20:22] this one must support console=ttyS0,115200n et.al. correctly; and the same params as netinstall does, as they are built similarly. [20:22] the image from https://www.ubuntu.com/download/server is very different beast. [20:22] I didn't know that, sadly [20:22] giaco, or like for other architectures look at http://cdimage.ubuntu.com/releases/bionic/release/ to download for the whatever arch you need it for [20:23] But now I'm into configuring the new system, I don't really have time to go back and retry [20:23] giaco, i'm sorry =/ this is quite low-level details, and i know this because well, i build these images. [20:23] Can I keep it as homework for next time? [20:24] giaco, i will open the bug report to fix console=ttyS0 support on the other image (the one from https://www.ubuntu.com/download/server ) [20:24] xnox: oh, well. Thank you for helping me [20:24] giaco, btw. on the https://www.ubuntu.com/download/server there is a link to these other images [20:24] I'm curious: why splitting? [20:24] giaco, under the green button tehre is "see our alternative downloads." in blue [20:25] is there a "dev/prod" into ubuntu server installer ? [20:25] giaco, we are working on making the new one; but clearly it would be irresponsible to stop building the old one, given that it is impossible to find all corner cases. [20:25] xnox: right. Well, glad to help [20:25] cause we re-wrote the installer from scratch (the new one) [20:26] plus we dont' have encryption yet in the new one [20:26] giaco, so yeah, hence the download page does say "This release uses our new installer, Subiquity. If you need support for options not implemented in Subiquity, such as encrypted filesystem support, the traditional installer can be found on the alternative downloads page." [20:26] or in your case "has buggy console=" [20:26] =) [20:28] xnox: well, you know, I just went through XD [20:28] giaco, can you explain again to me your system you are using? you need to boot it using console=ttyS0,115200n8 but it is otherwise x86_64 machine right? [20:28] with a serial connection / bootloader on the serial console? [20:28] https://bugs.launchpad.net/subiquity/+bug/1770962 [20:28] Launchpad bug 1770962 in subiquity "Support serial-port based install" [Undecided,New] [20:28] xnox: yes, this https://www.pcengines.ch/apu3a2.htm [20:29] thanks. [20:29] giaco, for now please use the alternative iso, i pointed you to =/ [20:29] also, once installed, Ubuntu is so much nicer than Debian ;-) [20:30] xnox: and I connect with this https://www.pcengines.ch/usbcom1a.htm [20:30] xnox: subiquity supports RAID (software, FAKERAID, hardware RAID controllers-controlled arrays, etc.), right? [20:31] giaco, thanks. [20:31] giaco, and when you booted that broken iso; it did boot and show bootloader (cause you are describing things like F3 and etc) but you didn't manage to boot to installer, correct? [20:32] thanks to you. I didn't know I was looking at something new. I tend to consider the boot part of solid server OS quite bulletproof. I not even considerer an "old option". My fault [20:32] giaco, this is helpful. i'm sorry you had this experience, but i'm glad you shared it with us. [20:32] giaco, i might want to update the website to also mention that serial console is not working. [20:33] giaco, note, on all other architectures we are still pointing to old installer, as those are typically done via non-graphical terminals. [20:33] I confirm. I was able to see the bootloader menu, preff F-keys, type at boot: prompt, start memtest. But install, expert, cli and other were not accepting console options. Without them I was that it was loading something but hey no feedback no party [20:33] Cool, thanks! [20:34] * Without them I saw that something was loading [20:34] giaco, yeah, most likely there was a very pretty installer on tty1 which you couldn't see. [20:35] giaco, if you launch the new ISO in a qemu/kvm you will see how simple, and pretty it is. Full-terminal curses ui, with minimal steps, import of ssh keys, and very quick install speed. [20:36] I tend to be the guy with null-modem cables in 2018 [20:36] =))))))))))))))) but also! thank you =) [20:36] giaco, i might try to fix this, and will try to ping you when it's done. [20:36] giaco, can you subscribe to https://bugs.launchpad.net/subiquity/+bug/1770962 ? [20:36] Launchpad bug 1770962 in subiquity "Support serial-port based install" [Undecided,New] [20:37] just added a comment to that bug report, about your experience. [20:37] teward, LVM, RAID, Bonds, Vlans => are all there. [20:38] teward, fakeraid is partial [21:10] ok, new network manager. What is netplan? And why is not picking my interfaces? Error in network definition //etc/netplan/01-netcfg.yaml line 9 column 10: br0: interface enp1s0 is not defined [21:10] but ip a | grep enp1s0: enp1s0: mtu 1500 qdisc mq state DOWN group default qlen 1000