| === aditya_ is now known as aditya | ||
| === lotuspsychje__ is now known as lotuspsychje | ||
| ddstreet | cpaelzer__ i have a libvirt xml that won't start because virsh isn't creating an apparmor profile for it...you know of anything that might cause libvirt to do that, or what the best way to debug libvirt's call to virt-aa-helper? | 11:40 |
|---|---|---|
| ddstreet | this is on disco host | 11:40 |
| ddstreet | guest xml is https://pastebin.ubuntu.com/p/V5NcWkg2Pg/ | 11:41 |
| phobosoph | hi | 11:53 |
| phobosoph | Would a perfect upgrade from Ubuntu Server 16 to 18 result in a system that is Ubuntu Server 18 (LTS)? It would be basically undistiguishable? | 11:53 |
| phobosoph | This isn't windows, rigth? :) | 11:54 |
| lotuspsychje | phobosoph: before lts upgrading you might wanna read the releasenotes | 11:54 |
| lotuspsychje | phobosoph: i think for server lts upgrades its important to know some relevant package versions upfront right? | 11:55 |
| phobosoph | yes | 11:55 |
| phobosoph | lotuspsychje: but when the upgrade finished, the resulting 18 system would be identical - more or less -to a fresh 18 install, right? | 11:55 |
| phobosoph | the package installer would simply overwrite the existing stuff, cleaning up old stuff ,et | 11:55 |
| phobosoph | so like a imaging thing on package-level | 11:55 |
| phobosoph | ? | 11:56 |
| lotuspsychje | phobosoph: well nothing can beat a clean install, but the idea of an lts upgrade 'should' work like a charm | 11:56 |
| Ussat | there will still be cruft left over, but mostly like a fresh 18 | 11:57 |
| lotuspsychje | phobosoph: apt always wants to heal itself too | 11:57 |
| Ussat | It doesnt change to netplan if I remember correctly | 11:57 |
| phobosoph | that's good | 11:57 |
| phobosoph | because netplan should be kept :) | 11:57 |
| lotuspsychje | phobosoph: https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes#Ubuntu_Server | 11:57 |
| Ussat | been a while since I have done one though | 11:58 |
| sdeziel | phobosoph: without a clean install, you'd probably have a FS with different features enabled (metadata_csum comes to mind for ext4) | 11:58 |
| phobosoph | sdeziel: can I change this afterwards? easily? | 12:01 |
| sdeziel | phobosoph: apparently that's doable https://ext4.wiki.kernel.org/index.php/Ext4_Metadata_Checksums#Detailed_Instructions | 12:02 |
| phobosoph | thanks man! | 12:02 |
| phobosoph | ubuntu/debian/*nix is awesome | 12:02 |
| sdeziel | phobosoph: that's just an example to highlight that many things would be subtly different | 12:03 |
| phobosoph | sdeziel: what else would be different subtly? :/ netplan + fs. But kernel, all packages and everything else would be upgraded | 12:07 |
| sdeziel | phobosoph: yes, the packages would be upgraded and you'd be fully supported | 12:07 |
| phobosoph | good! | 12:08 |
| phobosoph | for everything else, ansible is used. Sure, it won't enforce the whole system state, just the application/services. | 12:08 |
| sdeziel | phobosoph: some packages might be left as uninstalled but not purged, some .dpkg-* files may be left behind. Not a concern usually, it's just that one can usually distinguish when a box was dist-upgraded :) | 12:09 |
| phobosoph | ok | 12:09 |
| phobosoph | sdeziel: theoretically I could even search for this stuff and remove it afterwards | 12:10 |
| sdeziel | absolutely | 12:10 |
| cpaelzer__ | ddstreet: yes I have some commands that help doing that | 12:16 |
| cpaelzer__ | just a sec | 12:16 |
| === cpaelzer__ is now known as cpaelzer | ||
| Ussat | I have not done a upgrade in a while, but I recall it was pretty smooth in all I did do | 12:20 |
| cpaelzer | ddstreet: you need to be on the system or copy off the disk files | 12:22 |
| cpaelzer | ddstreet: but the TL;DR is that you can run it like sudo /usr/lib/libvirt/virt-aa-helper -r -d -u 'libvirt-d007102b-7ac8-46b0-a634-2ef994ba620f' < disco-gl-set.xml | 12:22 |
| cpaelzer | adapt the UUID to yous and the filename | 12:22 |
| cpaelzer | then this would do what it would do on guest startup | 12:22 |
| cpaelzer | ddstreet: looking at the XML I'd expect skiboot.lid to not be accessible | 12:24 |
| cpaelzer | without the disks (as I don't have them) and without skiboot it works for me | 12:24 |
| phobosoph | Ussat: I am backing up everything now and then start the upgrade :) | 12:25 |
| phobosoph | I have terrible memories of windows updates, hehe | 12:25 |
| cpaelzer | ddstreet: /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper does not allow /usr/share/skiboot/skiboot - so it will fail on that for sure | 12:25 |
| Ussat | Welll TBH Win updates are pretty smooth now | 12:25 |
| Ussat | but I have done about 50 prod Ubuntu updates and all went well | 12:25 |
| Ussat | but all done with em now | 12:25 |
| phobosoph | hm, not sure if this chanel is the right one... | 12:37 |
| phobosoph | I want to take backups regularly | 12:37 |
| phobosoph | storage should be cheap, I am ok with more expensive retrieval | 12:37 |
| phobosoph | ideal with file delta, european data protection compliance thing | 12:37 |
| phobosoph | are there good + cheap services for backing up data off-site? | 12:37 |
| Ussat | I can tell you what we do, its good but not cheap | 12:43 |
| phobosoph | Ussat: ok, tell me :) I think I get too cheap when it comes to data which is probably bad | 12:45 |
| Ussat | We are a fairly large IBM shop. we use TSM | 12:45 |
| Ussat | IBM Spectrum Protect its new name | 12:46 |
| ddstreet | cpaelzer *wow* the problem was that it doesn't allow accessing files in /usr/share? that's an incredibly obfuscated way to communicate the error to users :-) | 14:16 |
| ddstreet | especially since using /usr/share/AAVMF/AAVMF_CODE.fd for arm guests works fine | 14:16 |
| ddstreet | cpaelzer thnx tho - it's working now that i copied skiboot into a per-guest copy in /var/lib/libvirt/images/ | 14:17 |
| ddstreet | cpaelzer do you happen to know why usr.lib.libvirt.virt-aa-helper doesn't allow using the known, installed by ubuntu packages, loader files, like skiboot? | 14:17 |
| cpaelzer | ddstreet: because no one ever asked for it i guess | 14:21 |
| ddstreet | ah | 14:21 |
| ddstreet | so no specific security reason then | 14:21 |
| cpaelzer | no | 14:21 |
| ddstreet | ok interesting thnx! | 14:21 |
| cpaelzer | common things -> default profile; uncommon things loacl override | 14:22 |
| cpaelzer | if nobody asked ever => uncommon :-) | 14:22 |
| amitkm9204 | Hi guys | 14:46 |
| amitkm9204 | I want to know about ndtrack command | 14:47 |
| amitkm9204 | As i am getting high cpu utilisation due to this command | 14:48 |
| weedmic | what was the command you typed amitkm9204? | 14:50 |
| amitkm9204 | using top | 14:50 |
| amitkm9204 | I getting high cpu utilisation | 14:50 |
| amitkm9204 | Command name is ndtrack | 14:50 |
| weedmic | if u use htop, it will give u a more usable interface - u can order the dynamic table by many different ways | 14:51 |
| OerHeks | where does ndtrack come from? cannot find it in the repos | 14:51 |
| weedmic | i am unfamiliar with "ndtrack" | 14:51 |
| weedmic | no man page, in google I get proffered ndtrack.exe :D | 14:52 |
| OerHeks | flexnetservice? | 14:52 |
| weedmic | so it's something you are using wine to use - that would certainly use some cpu points | 14:53 |
| phobosoph | hi | 20:06 |
| phobosoph | so I run do-release-upgrade | 20:06 |
| phobosoph | it didn't start but it aborted | 20:07 |
| phobosoph | (Ctrl+c) | 20:07 |
| phobosoph | when I now run it again, it doesn't want to upgrade | 20:07 |
| phobosoph | how can I reset it? | 20:07 |
| sdeziel | phobosoph: are you sure it didn't run to completion the first time? | 20:08 |
| phobosoph | not | 20:09 |
| phobosoph | I cancelled it very early, nothing started yet | 20:09 |
| phobosoph | but apparently it thinks there is nothing to be upgraded, probably the sourceslist? | 20:09 |
| sdeziel | phobosoph: cat /etc/os-release to check | 20:09 |
| sarnold | are you sure it's not still running in a screen somewhere? | 20:13 |
| phobosoph | 16.04 | 20:13 |
| phobosoph | so not 18 | 20:13 |
| phobosoph | not upgraded | 20:13 |
| phobosoph | hm | 20:15 |
| phobosoph | sarnold: pretty sure | 20:15 |
| phobosoph | So what can I do? :/ | 20:28 |
| phobosoph | so that I can at least finish the upgrade? | 20:28 |
| phobosoph | or reset it that it asks for upgrading? | 20:28 |
| phobosoph | it didn't start | 20:28 |
| sdeziel | phobosoph: I'd start by pasting the error you get when running it | 20:29 |
| albert23 | phobosoph: check if /etc/apt/sources.list refers to bionic instead of xenial. If it points to bionic there is indeed no LTS upgrade available | 20:31 |
| phobosoph | Please install all available updates for your release before upgrading. | 20:34 |
| phobosoph | so it is probably the sources, right | 20:34 |
| phobosoph | how can I reset the apt sources back to 16? | 20:34 |
| catbadger | Hi | 22:09 |
| catbadger | I have a server with 2 nics. i want to install squid and set it up as a gateway/transparent proxy for the internal network. can someone explain what i need to do with netplan to achieve this? | 22:10 |
| catbadger | i have that little bit of knowledge on me haha | 22:11 |
| catbadger | i'm following this tutorial https://veesp.com/en/blog/how-to-setup-squid-on-ubuntu | 22:12 |
| catbadger | it employs /etc/networking/interfaces... i need to use netplan now i guess | 22:12 |
| phobosoph | alright, it seems that I just have to replace 'bionic' (18) with 'xenial' (16) in /etc/apt/sources.list to restore | 22:37 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!