/srv/irclogs.ubuntu.com/2018/11/13/#ubuntu-server.txt

rbasakLooks like you have third party apt sources enabled.00:01
rbasakLook in /etc/apt/sources.list and /etc/apt/sources.list.d/00:01
rbasakIf you add third party sources, you allow problems in those third party sources to break your system.00:01
rbasakI don't know for sure what's causing your breakage here, or if it's caused by a third party source.00:02
rbasakBut it's the first thing to eliminate, and the bump of openssl by that third party source makes it look more likely than not in this case, IMHO.00:03
rbasak(given the symptom you're reporting)00:03
TheHonorableKittthanks man, I'm gonna take a look at that, thanks very much00:03
patz0rhello, does anyone know how I can create a mirror of my OS drive to a second disk (OS already installed)06:26
patz0rI experienced some kind of issue and could not do it during installation06:26
cpaelzerpatz0r: no guarantee for your data as that is just a page I found, nothing I own - but https://www.considerednormal.com/2016/10/configuring-software-raid1-after-installation-of-ubuntu-16/ looks good I'd think06:37
patz0rthanks i'll check it out, worst case i can re-install but i'd have to do it over IPMI which i'd like to avoid06:38
patz0rit wouldn't allow me to create a mirror during install though, i could select both disks but not proceed through the md creation06:38
cpaelzerrbasak: no further action needed, I updated the bug06:48
patz0rcpaelzer, i'm going through that article you linked now, do you know whether I need to manually copy my 'efi filesystem' partition or if I can just do my linux filesystem?07:41
cpaelzerpatz0r: sorry I don't know, I'd think you better keep the efi out of the raid to be sure07:51
cpaelzerjust raid the other partition07:51
cpaelzerand keep the efi out of it07:51
patz0rcpaelzer, thank you, I will try that08:09
ahasenackgood morning11:04
ahasenacksmoser: rbasak: retrying apt-get update for a few times is one of the first things that was added to charmhelpers a long time ago, to give you an idea of apt-get update's reliability :)11:05
ahasenackrbasak: in this specific case, I think it was because the container was shutdown while some apt job was running, and that left a lock file in place11:06
ahasenackto generate a disco base image, I had to deploy cosmic, release-upgrade, and generate an image from that, since we don't have disco images yet (or didn't, haven't checked today)11:06
kstenerudDoes anyone know why rmadison prints multiple unstable releases for a package? For example rmadison -u debian nspr12:02
kstenerudor dovecot12:02
xnoxkstenerud, why not? it's not illegal to publish multiple versions of a thing in a suite.12:10
xnoxplus this is results from dak's postgres database12:10
xnoxkstenerud, this $ rmadison -u debian -S nspr -s unstable12:11
xnoxmight explain it better12:11
xnox4.12-2 built on hurd-i386, 4.19 built on kfreebsd, 4.20 on linux-any12:11
ahasenackkstenerud: could you please also upload a disco package to ppa:kstenerud/cosmic-fetchmail-gmailssl-1798786 ?13:21
ahasenackkstenerud: in the future you can drop the ${distro} prefix from ppas, as they can hold multiple releases13:21
ahasenackkstenerud: can you please squash the two changelog commits? https://code.launchpad.net/~kstenerud/ubuntu/+source/fetchmail/+git/fetchmail/+merge/35869914:04
ahasenackkstenerud: then I'm ready to sponsor14:04
ahasenackif you want14:04
smoserahasenack: yes. there is no reason to retry apt-get update14:16
ahasenackremember hash-mismatch errors? I still get those every now and then14:17
xnoxahasenack, on which repos and which releases?14:17
smoserthat is only possible on < xenial.14:17
ahasenackso I was told14:17
xnoxi only get it against debugsysms repo14:17
ahasenackbut I get it even in bionic14:17
xnoxcause that repo doesn't have by-hash publication.14:17
ahasenackthe cause might be different: might be a mirror being updated in a bad way14:17
xnoxahasenack, but which archieves of bionic?14:18
ahasenacka mirror14:18
xnoxahasenack, which mirror =)14:18
ahasenackbr.archive.ubuntu.com14:18
smoseryeah... its 2 separate things.14:18
xnoxand how it's done, and does it publish by-hashes?14:18
ahasenackI don't know, I don't maintain it. Just saying that retrying apt-get update still has its use cases14:18
ahasenackgranted, in the case of a bad mirror, retrying for just a few minutes will probably not help14:18
xnoxahasenack, we need to see your apt-get update log when it happens14:18
smoseron < xenial, its known problem. but in my experience retrying is unlikely to fix the issue. especially retrying within seconds... what change would you expect in that case to make it work?14:18
xnoxahasenack, please pastebinit next time it happens.14:19
smoseron xenial+, it really should not happen.14:19
ahasenackwill do14:19
smoserand we should not just program in retries to ignore it.14:19
xnoxbut to me it looks like it is updated badly.14:19
xnoxactually, no, looks fine14:20
rbasakA by-hash mirror still needs to sync in the correct order14:21
rbasak(new by-hash first, then InRelease update, then delete expired by-hash entries)14:22
xnoxcountry mirrors should be using 2stage sync, which does that.14:22
rbasakI don't think you can check it's doing that correctly as an external observer.14:22
xnoxwell, i'm trying to spot if their by-hashes are out of date ;-)14:22
rbasakYou're a human being trying to spot a subsecond race? OK :)14:23
xnoxrbasak, i believe ahasenack is a human too ;-) and is catching it14:23
smoserxnox is not mere human14:23
rbasakI said he gets them now and then.14:23
rbasakWhich is rather different from looking on just one moment :)14:24
xnoxsmoser, i wonder if you gonna come to the curtin + s390x call =)14:27
xnoxunless it's an rharper only thing.....14:27
smoserxnox: you can add me. i have a conflict at the first half hour there.14:27
smoserbut itmight end early14:28
zetherooI am having trouble trying to monitor the new time/date service on Ubuntu 18.04 with Zabbix. Prior to Ubuntu 18.04 we were able to monitor using the Zabbix key 'net.udp.service[ntp]' but now with timedatectl/timesyncd this is no longer working.14:29
xnoxsmoser, you have mail14:29
ahasenackzetheroo: via snmp?14:29
ahasenackjust curious14:29
zetherooThe guys in the Zabbix channel don't seem sure what to do about this so I am asking here ..14:29
zetheroo ahasenack: no, using the Zabbix Agent14:30
zetheroothe question is more how things changed in Ubuntu from 16.04 ?14:30
ahasenackzetheroo: what exactly was that monitoring before, a process? An open port?14:30
tewardbecause in 16.04 it didn't use timesyncd, IIRC it used ntp/ntpd14:30
tewardwith a local only listener14:30
zetheroohttps://help.ubuntu.com/lts/serverguide/NTP.html.en14:31
zetheroo'Since Ubuntu 16.04 timedatectl / timesyncd (which are part of systemd) replace most of ntpdate / ntp.'14:31
tewardas i said - that's what's changed.14:31
smoserahasenack: wrt retrying... i dropped the apt retry because what it was really doing was waiting fo the system to boot.14:31
tewardoop i'm tired disregard.14:31
zetherooBut, yes, it didn't seem to be an issue with 16.04, only really noticed it in 18.0414:32
smoseri replaced that with better logic to determine when the system was booted.14:32
ahasenacksmoser: ok, got it14:32
tewardzetheroo: if the key is net.udp.service[ntp] then it's likely it was testing ithe NTP UDP socket locally14:32
smoseri'm not entirely opposed to retry-ing on apt-get update... but i'd  lke it to be more intentional14:32
smoserahasenack: does it ever actually fix the problem for you?14:32
zetherooteward: right14:33
zetherooand we were also using this key to look if the process was running: system.run[ntpstat > /dev/null 2>&1; echo $?]14:33
ahasenacksmoser: not really, it would have to retry for a long time, or I would have to be lucky and the situation (mirror, or flaky network) to resolve itself by coincidence14:33
smoserin either xenial or <xenial, you're effecitvely just hoping that the mirror will fix itself during your wait.14:33
smoserright.14:33
xnoxahasenack, and you are not behind an apt-caching proxy or like a local squid-apt-proxy deployed, anything like that?14:33
ahasenacksmoser: given the failure, I just noted that the retry was removed, and decided t oask14:33
ahasenackxnox: I am, but when that happened I removed the proxy to test, and it still failed14:34
smoserso... i dont' see the point in retrying if its not going to do anything in the majority of cases.14:34
ahasenackxnox: of course, after a while (30min?), it worked again14:34
xnoxahasenack, but did you clear local apt state too?14:34
zetheroosince 18.04 neither of these checks work anymore ... so I am wondering what would we be looking for / monitoring with the new time sync service?14:34
xnoxahasenack, cause little does it know...... if it already saw inconsistent stuff.14:34
ahasenackxnox: apt-get clean, I don't remember if I rm-f'ed the files14:34
ahasenackthe list files, that is14:34
ahasenackwhatever remains in /var14:34
ahasenackzetheroo: you could be looking for the process, or for the actual clock/time14:35
zetherooahasenack: I've been trying to find out what the process is that keep the system time sync'ed14:36
ahasenackzetheroo:  2627 ?        Ssl    0:00 /lib/systemd/systemd-timesyncd14:36
tewardzetheroo: just for kicks, install chrony, and add a 'listen' directive to the end of it, then restart the service and see if Zabbix gets a reply?  It might just be querying the local TCP port directly.14:36
tewardif Zabbix gets a data set then it's probably querying the local ntp service directly with NTP requests14:37
ahasenackzetheroo: you can also use timedatectl to query its status14:37
ahasenacktry "timedatectl status"14:37
ahasenackmaybe you can change your monitoring to call that and parse its output14:37
teward^ this also14:38
zetherooteward: According to the Zabbix docs the net.udp.service key 'Checks if service is running and responding to UDP requests.'14:39
tewardzetheroo: which means it's querying NTP over udp/123 by default14:39
zetheroothere is a separate key for TCP 'net.tcp.service'14:39
tewardzetheroo: same difference except tcp/12314:39
tewardbut as i stated, there's nothing responding to NTP requests locally on that port14:40
zetheroobefore 18.04 all we had to do was install ntpstat and the checks were working14:40
ahasenackafaik you can still use ntp14:42
ahasenackit's just not the default14:42
teward^ this14:42
zetherooI already tried that14:43
tewardahasenack: though, ntpstat relies on ntpq it seems under the hood14:43
zetherooinstalled ntpstat and still nothing14:43
tewardahasenack: so if NTPd isn't running ntpq might not reply.14:43
tewardtherefore ntpstat may fail14:43
ahasenackwell, I mean, switch back to everything ntp-based14:43
zetherooapparently you have to actually switch14:43
ahasenackapt install ntp14:43
ahasenackthat will remove chrony14:43
tewardyep14:43
ahasenackand disable timesyncd iirc14:43
rbasakWait, what are you trying to achieve?14:44
zetherooI would really rather use the default services14:44
rbasaktimesyncd is just a client. Looks like you were checking that a server was working before14:44
rbasakDo you actually want/need a server?14:45
ahasenackit seems easer for him to get back to ntp rather than switch the monitoring tool to timesyncd14:45
ahasenackrbasak: I think in the ntp days, even on a client, there was always an open udp port used by it14:45
rbasakYes14:45
rbasakBut what is the actual check for?14:45
rbasakTo check that the service is up?14:45
ahasenackcompliance? :)14:45
rbasakRegular systemd service monitoring will check that.14:45
rbasakTo check that the time is believed to be in sync?14:45
zetherooI mean, I thought maybe others were monitoring the time/date info on their servers which were using timedatectl/timesyncd14:46
rbasakThat wasn't being checked before.14:46
zetherooIt would be a start to be able to monitor that the time/date sync service is running14:47
rbasakzetheroo: it doesn't make sense, now that we're running a more pure client, to expect what you were doing before to work exactly. You're going to have to define what you actually want checked.14:47
rbasakOK, so use systemctl status systemd-timesyncd.service for that14:47
smoserahasenack: https://bazaar.launchpad.net/~smoser/+junk/check-archive/files14:47
zetheroook14:47
rbasakHopefully your monitoring system has a way to integrate better with systemd to check service statuses though.14:47
smoserthat is 'check-archive'. run like:14:47
smoser  check-archive -v http://br.archive.ubuntu.com/ubuntu trusty-updates14:48
smoserit will checksum all files comparing against the indexes14:48
smoserand stores headers and such.14:48
smoserof responses.14:48
smoserit reports happy right now on trusty-updates14:49
zetheroo rbasak: I was just thinking that ...14:50
smoserhttp://paste.ubuntu.com/p/YKhQMqzvBN/14:50
tomreynI'm tracking some high / medium 'importance' bugs, where progress feels slow. Some of them are in 'triaged' state (and have been for a while), others confirmed. and there are yet others which have been 'new' for months.15:25
tomreyni'm sure everybody is working on more important things and i most likely just don't understand how priorities are internally set (i'm entirely serious here), but with my admittedly very limited insight, it feels the priorities may be wrong, and stable server-live installers which are more suitable for an LTS release should be provided soon.15:29
tomreyn</polite-rant>15:29
rbasaktomreyn: could you provide your best example of a mistriaged bug please?15:30
tomreynthis is hard to tell, i'll post a couple.15:35
tomreynbug 1783413 has been handled, but only in curtin, so nothing has changed from a user perspectiver from what i understand.15:35
ubottubug 1783413 in subiquity "failed creating LVM on top of md devices" [Undecided,New] https://launchpad.net/bugs/178341315:35
tomreynbug 1784124 remains 'new' since end of july15:35
ubottubug 1784124 in subiquity "subiquity raid+lvm installation failed" [Undecided,New] https://launchpad.net/bugs/178412415:35
rbasakThanks15:36
tomreynbug 1785354 - if i understand it correctly, means that any system installed with the released server-live installer doesn't get regular file system checks. i would have assigned higher piro then.15:37
ubottubug 1785354 in curtin "/etc/fstab: fs_passno is 0 for all file systems" [Medium,Triaged] https://launchpad.net/bugs/178535415:37
tomreynbug 1783129 is high prio, but continues to affect anyone using the released (not daily snapshot) installer15:38
ubottubug 1783129 in subiquity "Only "main" component enabled after install" [High,Confirmed] https://launchpad.net/bugs/178312915:38
tomreyni'll stop here. thanks for having a look, rbasak15:38
tomreynto anyone seeking commercial consultance, in the current state, i can only recommend to not use the server-live LTS installer, and this is seven months post release.15:41
ahasenackkstenerud: can I upload https://code.launchpad.net/~kstenerud/ubuntu/+source/fetchmail/+git/fetchmail/+merge/358699 ?15:41
tomreyn(which is not what i want to do.)15:41
openfireI still use the "alternate" installer, frankly.15:44
ahasenackkstenerud: around?15:48
ahasenackcpaelzer: will you finish this review, or should I grab a slot? https://code.launchpad.net/~kstenerud/ubuntu/+source/openssh/+git/openssh/+merge/35849115:57
rharpertomreyn: thanks for the feedback; and thanks for filing those bugs and testing16:03
=== cshep is now known as platonical
iklaI'm trying to install 18.04 server on a machine and it boots up and the screen starts flickering and the installation menu does not come up.17:15
iklaany ideas?17:15
iklastandard onboard graphics17:15
xnoxikla, is it serial console or graphical?17:27
xnoxikla, can you change to a different tty?17:27
xnoxikla, you can try the alternative server cd too (linked in a separate link from the download pages)17:27
xnoxsmoser, do spill the beans =)17:42
mdeslaurcpaelzer: hi! Mind if I release postgresql 10.6 as a security update?19:17
tomreynrharper: i didn't file all of them, just some. thanks to you and all dev's for your continuous work. IMO 18.04 server is really a great improvement over 16.04, netplan is nice (except for some edges where it doesn't work so well, yet), and subiquity / curtin will surely be nice (and much nicer) once they cover the features d-i provides. keep up the good work! :)19:55
=== kallesbar_ is now known as kallesbar
sleepeeHas anybody tried to create an Ubuntu VM with virt-install?23:55
sleepeeand used the --extra-args option?23:56
sarnoldfive or six years ago23:56
rbasakvirt-install is mostly deprecated by cloud images.23:56
rbasakTry multipass - https://github.com/CanonicalLtd/multipass - it's much easier23:57
rbasakAnd way quicker because there's no need to run an installer.23:57
sleepeei'm just trying to create a vm on a local kvm host.23:58

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!