/srv/irclogs.ubuntu.com/2019/02/08/#ubuntu-server.txt

tanja84dkI have a small issue I'm trying to manually add a ca cert to a linux server I manage for someone else ( he runs every connection over internal proxy ) but for some reason update-ca-certificates does not pick up the cert I have added00:05
tanja84dkhow come does it not pickup the newly added cert when I update the cert database? I did put it in /usr/share/ca-certificates/extra/00:05
=== Sveta_ is now known as Sveta
dirtycajunhas anyone gotten arm64 working on the RPi 3 B+ ? Ive been fighting this for about 2 hours to no avail02:31
lotuspsychje!arm | dirtycajun can this help?02:32
ubottudirtycajun can this help?: ARM is a specific (RISC) processor architecture used in a variety of applications such as handhelds and networkdevices. For more information see https://wiki.ubuntu.com/ARM . For ARM specific support, stop by the #ubuntu-arm channel.02:32
dirtycajunah. have to go to another channel. roger02:33
dirtycajunactually that channel is for v6/v702:33
lotuspsychjewhat does that mean dirtycajun02:35
lotuspsychjemaybe if you explain your issue, volunteers can try to think along?02:35
dirtycajunhttps://wiki.ubuntu.com/ARM/RaspberryPi#Ubuntu_arm64.2FAArch6402:39
dirtycajuni followed the wiki arm64 documentation to a T02:39
dirtycajunbut it will not even load the bootloader02:39
dirtycajunwith armhf (v7) it boots just fine02:39
gislavedplease don't tell me netplan is buggyu as hell ?02:46
gislaved*buggy02:46
lordievaderGood morning07:39
ducassecpaelzer: i didn't get around to filing the debian libvirtd bug until this morning, it's number 92171309:20
cpaelzerducasse: thanks and ... subscribed09:22
=== Jezus is now known as Remy
=== Remy is now known as Remy^
ahasenackhi, anyone here familiar with systemd's .path files? To start units if certain path related conditions are met?11:18
ahasenackI'm trying to prevent the zpool import service from running until I have unlocked the luks-encrypted drives, it's a mirror pool11:18
ahasenackso I created /etc/systemd/system/paths.target.wants/zfs-import-cache.path11:18
ahasenackwith: https://pastebin.ubuntu.com/p/Q9mckDqbVy/11:18
ahasenackbut it seems to start as soon as one path exists, and I need both to be there (it's a mirror)11:19
ahasenackin other words, is that conditional an OR or an AND? The manpage isn't clear11:19
ahasenackactually, the file is /etc/systemd/system/zfs-import-cache.path11:20
ahasenackit's for the zfs-import-cache service11:21
ahasenackmaybe I need to specify the two paths under one directive11:25
* ahasenack tries that11:25
ahasenackhm, no, doesn't seem to work at all11:33
ahasenackrbasak: when you have a moment, I'd like to talk about https://code.launchpad.net/~orion-cora/ubuntu/+source/sssd/+git/sssd/+merge/36283711:44
rbasakahasenack: o/12:04
ahasenackrbasak: his patch is good, but I want to add dep8 tests on top12:04
ahasenackrbasak: my options?12:04
ahasenackrbasak: a) I add it, add myself to d/changelog, upload that12:04
ahasenackrbasak: b) I ask him to do it, upload that12:04
ahasenackor something else12:05
ahasenackin the case of (a), what happens to the mp?12:05
rbasakYou asked him already, right?12:05
ahasenackI did last night12:05
ahasenackbut I also have (a) ready12:05
rbasakIf you add to his commits and then upload tag the result, the MP should automatically get marked as merged I believe.12:05
rbasakI would make the " -- Orion..." tagline use your name unless he signs off on it.12:06
ahasenackand in the case of (a), d/changelog would have to list myself instead of him in the authorship line, right? I would just keep his name in []12:06
rbasakBut he'd still get credit with the "[Orion..." section.12:06
ahasenackright12:06
rbasakYou don't have to do it - nothing will stop you doing otherwise.12:06
rbasakBut it feels to me that the bottom tagline is a sign-off on the whole upload.12:07
ahasenackso if (a), use my name in the tagline, his name in []12:07
rbasakYes12:07
ahasenackif (b), I'm just in []12:07
rbasakRight12:07
rbasakAnd in (a), you'd also have a [] section to yourself too of course.12:07
ahasenackand we are not sure about what happens to the MP in the case of (a)12:07
rbasakI'm pretty sure that the MP will automatically be marked as merged.12:08
rbasak90%12:08
ahasenackbut d/changelog would not match12:08
ahasenacksince I would be changing the tagline12:08
rbasakIt's not required to match.12:08
rbasakgit-ubuntu only cares that the upload tag commit tree matches the dput exactly.12:08
rbasakIf so, the upload tag will end up as part of ubuntu/xenial-devel's history.12:09
ahasenackok12:09
ahasenackit will, but his mp has something that won't be merged12:09
ahasenackand that's the d/changelog as he wrote it12:09
rbasakLaunchpad machinery does the MP automatic mark as merge. To work that out, Launchpad only cares that the proposed branch of an MP has become an ancestor of the target branch, which it will be.12:09
ahasenackah, ancestor12:09
ahasenackgotcha12:09
rbasakYou'll have added a commit to the end of his branch changing d/changelogl12:09
ahasenackmy branch will have his as part of my history12:10
ahasenackright12:10
rbasakSo long as you don't rebase his branch, and only build on it, it should be fine.12:10
rbasakRight12:10
ahasenackvery cool12:10
ahasenackok, thanks12:10
ahasenackI might as well do (a) then, I don't want to lose this fix again12:10
rbasakThe only bit of this I'm not totally sure about is Launchpad's machinery.12:10
ahasenackbut I was worried about the perception to him, if he would see his branch being rejected or sometihng12:10
kstenerud90I'm getting a strange error from autopkgtest-build-lxd:12:10
rbasakI assume it cares only about the ancestor.12:10
rbasakBut if not, just mark the MP as Merged manually :)12:11
ahasenacksure12:11
kstenerud90$ autopkgtest-build-lxd ubuntu-daily:disco/amd6412:11
kstenerud90Detected local apt proxy, using http://10.105.237.1:3142 as container proxy12:11
kstenerud90Creating autopkgtest-prepare-oLv12:11
kstenerud90Starting autopkgtest-prepare-oLv12:11
kstenerud90Timed out waiting for container to boot12:11
=== kstenerud90 is now known as kstenerud
ahasenackkstenerud: it's possible it cannot reach the proxy12:11
ahasenackbetween Starting and Timed out, you have some time, you can lxc exec into it and poke around12:11
kstenerudahasenack: I'm not sure why it's even trying to use a proxy, let alone a proxy on address .112:11
ahasenackkstenerud: do you have apt-proxy installed, something like that? env vars set?12:12
ahasenackmight also be set in /etc/apt/apt.conf.d/*12:12
kstenerudNo apt-proxy. Not sure hat env vars to look for12:12
ahasenackenv|grep -i proxy12:12
ahasenackand grep -i proxy -r /etc/apt12:12
ahasenacklxd might also have a proxy configured, that's via lxc config ....something I don't remember.....12:13
kstenerudgmm12:13
kstenerud /etc/apt/apt.conf.d/01acng:Acquire::http::Proxy "http://127.0.0.1:3142";12:13
kstenerudWhat would have caused that?12:13
ahasenackapt install apt-cache or what is its name12:14
ahasenackalthough "01acng" is a funny name12:14
kstenerudweird... it's apt-cacher-ng. I've uninstalled it12:14
ahasenackpurged?12:14
ahasenackalthough "remove" should have disabled that I believe, since the service is removed12:15
kstenerudI don't even remember installing it to begin with... weird12:15
ahasenackyou were asking about it the other day12:15
kstenerudyeah, I messed with installing it in an lxd container12:15
kstenerudmaybe I mistyped and installed it in my host...12:16
ahasenackmaybe you confused prompts and did in on your host too12:16
ahasenackyeah12:16
kstenerudwow... even apt purge doesn't get rid of the file12:17
kstenerudOK, cache gone, but autopkgtest still times out. According to the logs, nothing's happening12:19
kstenerudhmm12:20
kstenerudFeb  8 12:20:27 autopkgtest-prepare-xwc snapd[505]: handlers.go:394: Reported install problem for "lxd" as eaf84f2a-2b9b-11e9-9d86-fa163e102db1 OOPSID12:20
kstenerudSame error I saw when disco tries to update snapd12:21
kstenerudMight be related to https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/181517312:27
ubottuLaunchpad bug 1815173 in snapd (Ubuntu) "snapd package upgrade hangs in disco container" [Undecided,New]12:27
ahasenackkstenerud: login and poke around12:39
ahasenackkstenerud: and/or list processes from the host, you should see the container processes12:39
ahasenackand it could still be a network/proxy issue, you can check with netstat if there are SYN_SENT connections for example, or what it is trying to reach12:40
kstenerudautopkgtest-build-lxd ubuntu-daily:cosmic/amd64 works fine; disco hangs and dies12:41
ahasenackrbasak: git question, any idea why that zz* file is showing up in "git add -i untracked", but not in git status? I also tried "git status --ignored": https://pastebin.ubuntu.com/p/HxW8Z7VWkZ/12:51
rbasakahasenack: it skips entire untracked directories I think.13:00
rbasakahasenack: try "git status -u --ignored" maybe?13:00
ahasenackrbasak: ah, then it shows up13:00
ahasenack$ git status -u --ignored|grep zz13:00
ahasenackdebian/initramfs-tools/share/hooks/zz-dhclient13:00
* ahasenack should add a "git realstatus" alias13:01
=== jelly-home is now known as jelly
ahasenackrbasak: git workflow logical step question13:59
ahasenackrbasak: we have a delta which is adding an apparmor profile13:59
ahasenackrbasak: at some point later, that apparmor needed a fix, and that has a bug number14:00
ahasenackrbasak: so now the delta looks like a) add apparmor profile; b) fix apparmor profile (#XXXXXX)14:00
ahasenackrbasak: I would squash those two together and leave just "add apparmor profile"14:00
ahasenackrbasak: but then I would lose the bug number from the changelog entry, is that relevant?14:00
ahasenackrbasak: I think not, because it will be mentioned in older changelog entries14:00
rbasakahasenack: I agree. You can drop the bug reference and rely on older changelog entries.14:05
ahasenackok14:05
ahasenackhi, does anybody know what's wrong with https://pastebin.ubuntu.com/p/Q9mckDqbVy/ ? I need a logical "AND" between those two path conditions, but what I'm seeing is that as soon as one of those two paths becomes available, the corresponding unit is started15:45
sdezielahasenack: have you tried ConditionPathExists instead?15:53
ahasenacksdeziel: that is for service units, not path "units"15:53
ahasenackbut yes, I tried that for the actual service unit15:54
ahasenackit won't start then, but I would like it to automatically start then those paths become available15:54
ahasenackif I use ConditionPathExists in the foo.service file, I have to, after unlocking the disks, issue a restart for foo.service15:54
ahasenackwith .path, this happens automatically15:54
sdezielahasenack: I'd see what #systemd folks have to suggest15:56
sdezielahasenack: but if I understood your requirements properly, in the .path I'd use both PathExists but would add the 2 corresponding ConditionPathExists clauses in the .service15:58
sdezielahasenack: this would kick the .service as soon as one of the PathExists is matched but then the ConditionPathExists that are logically AND'ed in the .service would do what you want, I think15:59
lordcirth_sdeziel, that would cause the service unit to start when 1 is up, then stop because both aren't up15:59
sdeziellordcirth_: I was hoping it wouldn't start due to the other ConditionPathExists not being met16:00
lordcirth_ahasenack, What about making a 2 .path units, then making the service dependent on both?16:00
lordcirth_sdeziel, docs say that if ConditionPathExists is false, it will count it as started but do nothing16:00
ahasenacksdeziel: the service is being kicked just fine16:02
ahasenackbut too soon. Just one path of those 2 needs to exist16:03
lordcirth_ahasenack, I think .service depending on 2 .paths is the correct answer16:03
sdezielahasenack: could you share the .service too?16:03
ahasenacksure, it's a standard ubuntu one16:03
ahasenackhttps://pastebin.ubuntu.com/p/jZSHB8rPPG/16:04
ahasenackand the corresponding .path one: https://pastebin.ubuntu.com/p/5k2gXgxx2w/16:04
ahasenackI have disabled zfs-import-cache.service16:05
ahasenackI even get a warning when I do that, saying that the corresponding .path service might still start it16:05
ahasenackthe manpage allows for multiple conditions, but fails to explain how they are considered16:06
ahasenack"obvious", someone must have thought :)16:06
lordcirth_ahasenack, alternatively, have you considered getting ZFS 0.8 and using ZFS's built-in encryption?16:09
lordcirth_It's at rc3 status16:09
ahasenackmy other laptop is using that16:10
ahasenackbut this is for a home server nas-like, that I want to be able to reboot unattended and later login and unlock the disks, remotely16:10
ahasenackso far this other laptop is doing fine with 0.816:10
ahasenackand nice initramfs integration, with just a small bug or two16:10
lordcirth_ahasenack, you can configure 0.8 to import the pool, do scrubs, etc on boot and then give it the key later16:12
sdezielahasenack: I just tested what I proposed and it worked16:13
ahasenacksdeziel: two .path services or what?16:14
sdezielahasenack: one .path (2 PathExists) and one .service (2 ConditionPathExists)16:14
ahasenacklordcirth_: yeah, that could perhaps work. Not on that laptop which has zfs on /, but on the nas, maybe. But I think I cannot zfs send anymore then, unless all my pools are 0.816:14
ahasenacksdeziel: and if you remove the ConditionPathExists from the service, it stops working?16:15
lordcirth_yeah, you would need 0.8 to receive an encrypted pool16:15
ahasenackbecause then it should be like what I have. If it still works for you, then I have something else wrong16:15
ahasenacklordcirth_: 0.8 is the common destination, 0.7 would be the sending side. I remember testing this, but I can't remember in which direction16:15
ahasenackI think it was 0.7 to 0.8 and it failed, but I would have to retest to be sure16:15
lordcirth_that should work, but test16:15
sdezielahasenack: the 2 ConditionPathExists are need as it's where the logical AND is applied16:15
lordcirth_sdeziel, but ConditionPathExists doesn't do the right thing. He needs it to wait until both are true, then run the service. ConditionPathExists skips starting the service.16:18
lordcirth_ahasenack, btw, how did you install 0.8? Is there a .deb?16:19
sdeziellordcirth_: ahasenack: my test stuff: https://paste.ubuntu.com/p/WCHtN2TxR8/ when I touch /tmp/foo-a, nothing happens with foo.service16:20
sdezielfoo.service only get started when I then touch /tmp/foo-b16:21
sdezielafter touching only foo-a, I get this: https://paste.ubuntu.com/p/P4vMsp8Yfv/16:23
lordcirth_So it starts then fails, yes16:25
lordcirth_sdeziel, and does it get automatically started again when you touch /tmp/foo-b?16:26
sdeziellordcirth_: It never started until both conditions were met16:26
sdezielI read "start condition failed" as "not starting due to unmet conditions"16:27
lordcirth_I see16:28
sdezielthe journal extract is from an older run which can cause some confusion16:28
lordcirth_The docs aren't very clear, then16:29
ahasenackbrb, in a call16:29
ahasenacklordcirth_: from the make deb or sometihng target from upstream 0.816:56
lordcirth_ahasenack, so you built a .deb?16:56
ahasenackyes16:56
ahasenacka bunch16:56
ahasenackone of which is a dkms16:56
ahasenackI should probably update the git branch and build new ones16:58
ahasenacksomething for the weekend16:58
ahasenacksdeziel: it still sounds like the .path file should be enough to trigger the start of the service, and that ConditionPathExists is just a safeguard16:59
ahasenacka safeguard that shouldn't be needed16:59
lordcirth_0.8 is on rc3. Hopefully there will be a stable release soon.17:00
ahasenackI have rc217:00
ahasenack0.8.0-rc2_42_g06f3fc2a417:00
ahasenackthey are saying it's an OR :(17:03
sdezielahasenack: both PathExists from the .path do trigger the start of the service. The 2 ConditionPathExists are merely there to have the AND logic17:14
sdezielahasenack: the PathExists are documented to behave as OR conditions17:14
sdezielahasenack: so I don't agree on the "safeguard" word, I'd call this glue logic to have the 2 conditions AND'ed17:15
ahasenackI'll give it a try, now that it is established that the [Path] conditions are OR'ed17:19
=== lotuspsychje_ is now known as lotuspsychje
TheHonorableKittOk people's of the great majestic. I need ya help. Getting errors when I try to do apt-get update. Check it, please tell me what I have to do to fix these prollems without uninstalling software. https://pastebin.com/7eg2TUhy20:47
=== TheHonorableKitt is now known as THKitten
sdezielTheHonorableKitt: wait a little (both for the mirror sync to complete and for your question to be answered...)20:49
THKittenwot?20:49
THKittenI've tried to do this update twice now, once three days ago, failed, and again today, failed. figured it was time to speak up20:50
PosterIt looks like you're missing the public key for yarnpkg, please follow the instructions noted here with curl and apt-key add: https://github.com/WhitewaterFoundry/WLinux/issues/28920:51
sdezielTHKitten: hmm, I though you left but you renamed20:51
THKittenheh20:51
THKittenyeah I don't like the long name20:51
sdezieland yes, either remove the yarnpkg repo or import the gpg key proper20:52
THKittenok, ran the command mentioned in that link. tried again, still get errors: https://pastebin.com/p126MfuU20:53
sdezielone less error20:55
sdezielso linode mirrors are still sync'ing it seems but you have more problems with apt.typesafe.com20:55
THKittenyeah I dunno how to fix that one, I tried fixing it before but could never figure it out20:56
PosterNot finding their key listed, did you install the linked package? http://apt.typesafe.com/20:57
lordcirth_The package which contains the keys and is served without TLS... whyyy20:57
THKittenyeah I couldn't figure it out :(20:58
lordcirth_THKitten, did installing that package not fix it?20:58
THKittenone sec, I have to remember how to install debs.20:59
THKittennope21:01
THKittenhow do I find out what app is even using typesafe? I might not need it...21:01
sarnoldremove it and see what breaks? :)21:07
THKittenlulz21:07
lordcirth_THKitten, https://www.ostechnix.com/list-installed-packages-certain-repository-linux/21:16

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!