[08:34] <mehjari> hi, can anyone help setting up gui in ubuntu server 18.04? i get to remote desktop screen where it shows me "xrdp - just connecting" popup with session dropdown having multiple options.. i tried alll of them but nothing seems to work :(
[08:43] <mehjari> "systemctl status xrdp-sesman.service" shows this line "ExecStop=/usr/sbin/xrdp-sesman $SESMAN_OPTIONS --kill (code=exited, status=1/FAILURE)"
[08:43] <mehjari> i am not sure if it is relevant
[09:56] <tomreyn> mehjari: a GUI is usually the main difference between a server and a desktop (there can be others, such as different hardware, workloads etc.) Do you really need a GUI on your server, or could you also manage it on a remote shell?
[09:59] <tomreyn> another option would be webmin, a web UI for managing systems. experienced system administrators would usually also frown at this, but might prefer it over a GUI.
[09:59] <mehjari> tomreyn, i am trying to start a vagrant box in Ubuntu server, it is giving me SSH retry error. some online forums suggested that i should check what is the status of VirtualBox UI at that point, is there any popup etc.
[09:59] <mehjari> therefore, as much as i hate installing GUI on server, i have to try GUI.
[10:02] <rbasak> mehjari: I don't know about VirtualBox, but if you were using libvirt+KVM instead, then you could run virt-manager on a different box and connect it to the running libvirt instance on the server to see what the problem is - so no GUI needed on the server itself.
[10:02] <rbasak> Does VirtualBox not have support for something like that?
[10:05] <cpaelzer_> rbasak: mehjari: I think you can expose the display
[10:05] <cpaelzer_> like you'd expose VNC on libvirt
[10:05] <cpaelzer_> and you can then attach to that
[10:05] <cpaelzer_> yeah, this looks good https://www.techrepublic.com/article/how-to-connect-to-a-virtualbox-vm-desktop-remotely/
[10:06] <cpaelzer_> just the first hit on search engine, I did not try it myself
[10:06] <cpaelzer_> that would allow to see early boot of the guest and such
[10:06] <cpaelzer_> and IIRC virtualbox can control all on cmdline as well
[10:06] <cpaelzer_> although I don't know hot to enable the remote display feat there I'm sure that can be found
[10:09] <mehjari> if vbox is stuck at the popup "enable SLAT2" or VTIX technology in BIOS (which i want to rule out), the it doesn't show up with controlvm cli api as far as i can tell
[10:09] <mehjari> i am not sure if they have logs which can reflect the state of UI at certain point
[10:10] <mehjari> the Ubuntu VM is in Azure, and MSFT is charging monies, so i wanted a quick solution.. -.-
[10:12] <Greyztar> hello,is it normal that with snap apparmor isnt working,this is not on Ubuntu though but on Debian,just wonder in general if apparmor isnt ment to work on other installs with snap?
[10:13] <Greyztar> and also is it so that apparmor is sort of the sandboxing function of apps?
[11:03] <tomreyn> mehjari: in case this is still relevant, some folks in #vbox tend to be rather responsive.
[11:05] <tomreyn> Greyztar: /join #snappy
[11:06] <Greyztar> tomreyn: thanks i looked for #snap but didnt find any
[11:50] <mehjari> tomreyn, thanks, will sync with vbox. :)
[14:53] <Ussat> Well, looks like Canonical might get a new customer....have a call scheduled with a SA today to disscuss Landscape
[16:32] <teward> landscape is fun.  :P
[16:32] <teward> (I use it for all my new servers now xD)
[16:50] <lordcirth> teward, Isn't it expensive? Or is there a community version?
[16:52] <teward> lordcirth: it does get expensive yes.  (In this case I already have seats)
[16:52] <teward> (and those're fixed-price not per-minute)
[16:54] <RoyK> most of what landscape does is easily achivable with simple scripts
[16:54] <RoyK> or packages already available in ubuntu
[16:55] <RoyK> so just setup your ansible playbook to add that to your machines and - well - no problem
[18:29] <rbasak> https://pastebin.ubuntu.com/p/dPQx4RyyzF/
[18:29] <rbasak> How can I figure out what's using all that memory?
[18:29] <rbasak> Is that a kernel memory leak?
[18:30] <lordcirth> rbasak, highly unlikely. Are you low on memory?
[18:30] <rbasak> https://pastebin.ubuntu.com/p/svVbxh7k9m/
[18:30] <rbasak> lordcirth: I am. My system has 32G, but it's thrashing.
[18:30] <rbasak> https://pastebin.ubuntu.com/p/RD7sqVCQFR/
[18:30] <rbasak> No swap, but I added some to give me some headroom.
[18:31] <lordcirth> I see. Are you running any network filesystems, or anything which would keep a lot of files open?
[18:31] <rbasak> No
[18:31] <lordcirth> rbasak, also, what Ubuntu version and kernel version?
[18:32] <rbasak> 4.4.0-139-generic with livepatch
[18:32] <rbasak> 16.04
[18:32] <rbasak> I could just reboot
[18:32] <rbasak> But I don't like doing that
[18:32] <rbasak> Because I'd like to fix the problem for next time too
[18:32] <rbasak> This is a desktop btw.
[18:32] <lordcirth> rbasak, what's your uptime?
[18:32] <rbasak> 175 days
[18:32] <lordcirth> That's pretty long for a desktop
[18:32] <lordcirth> What graphics drivers?
[18:32] <JanC> maybe the live patching messed something up?
[18:33] <rbasak> AMD
[18:33] <rbasak> My graphics setup is pretty non-standard, so a leak there could be likely.
[18:33] <rbasak> 01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Curacao PRO [Radeon R7 370 / R9 270/370 OEM] (rev 81)
[18:33] <lordcirth> Updating your graphics drivers without a reboot can cause all sorts of problems.
[18:33] <rbasak> I'd just like to know how to pin the leak down to something, if there's any such mechanism possible.
[18:34] <lordcirth> That's beyond my skills. But I'd consider 175 days uptime on a desktop unreasonable and just reboot it
[18:34] <JanC> also, this isn't the proper channel to discuss desktop issues maybe  ;)
[18:34] <OerHeks> sudo canonical-livepatch status --verbose # gives fixes ""  ?
[18:34] <lordcirth> True, I didn't even notice
[18:35] <rbasak> JanC: yeah, maybe :)
[18:35] <rbasak> I don't need any desktop specific answer
[18:35] <JanC> maybe the kernel people can give some pointers
[18:35] <rbasak> Just some help grokking kernel memory information, which isn't desktop specific
[18:35] <rbasak> smem, etc
[18:37] <OerHeks> if status says livepatch:  state: applied, you need to reboot anyway, and run ful-upgrade, there might be more kernels and patches waiting...
[18:38] <OerHeks> 175 days ... awesome
[18:38] <sarnold> rbasak: wow; are those counts going up over time?
[18:39] <rbasak> sarnold: AFAICT, yes.
[18:39] <OerHeks> rbasak, what is the output for inodes: df -i
[18:40] <rbasak> OerHeks: looks OK. I don't want to paste that (privacy) but apart from snap loopback devices (squashfs), the highest IUse% is 36% for /, so I don't think it's that.
[18:41] <OerHeks> oke, just checking.
[18:41] <rbasak> I appreciate the thought :)
[18:42] <OerHeks> then livepatch should be the culprit, AFAIK, waiting
[18:42] <rbasak> Earlier I sent SIGSTOP to firefox and snap related process, so I can't run livepatch right now.
[18:42] <rbasak> (since they were causing the thrashing)
[18:43] <rbasak> I could resume the snap ones I guess now that I've added swap
[18:43] <rbasak> I'm quite sure rebooting will fix the issue, but I'd prefer to find bugs before I remove all the evidence :)
[18:43] <JanC> it might be useful to talk to the kernel and graphics devs
[18:45] <rbasak> Hmm.
[18:45] <rbasak> "canonical-livepatch status" hangs, but I don't know if I caused that by interfering with it earlier.
[18:46] <TJ-> rbasak: can you scan /proc/[1-9]*/pagemap to discover where the memory is allocated?
[18:46] <rbasak> TJ-: I don't think it's allocated to any process
[18:46] <rbasak> TJ-: based on smem output from https://pastebin.ubuntu.com/p/svVbxh7k9m/ earlier
[18:47] <sarnold> rbasak: can you get bcc tools on this system? https://github.com/iovisor/bcc/blob/master/tools/memleak_example.txt
[18:48] <sarnold> rbasak: if not, perf trace can probably do a similar job, but these are nice tools :)
[18:48] <rbasak> sarnold: is that packaged? :)
[18:50] <OerHeks> https://github.com/iovisor/bcc/blob/master/tools/memleak.py
[18:50] <OerHeks> easy peasy
[18:52] <TJ-> rbasak: ah, does "smem -w" confirm its kernel mem ?
[18:53] <rbasak> Looks like it is packaged but only from Bionic :-/
[18:53] <rbasak> TJ-: right - it's under 'kernel dynamic memory'
[18:55] <sarnold> rbasak: hey it is! :D bpfcc-tools
[18:55] <sarnold> rbasak: haha, thanks, I hadn't realized it'd been packaged up yet.
[18:57] <TJ-> rbasak: "smem -m | tail" might help a bit more
[18:58] <rbasak> Biggest is <anonymous>                                120    38624  4634930
[18:58] <rbasak> What are the units?
[18:59] <TJ-> "smem -m | head -1" :) == " Map                                       PIDs   AVGPSS      PSS "
[18:59] <rbasak> I did look there! Those aren't units I understand.
[18:59] <TJ-> The unshared memory (USS) plus  a  process's  proportion  of  shared  memory  is
[18:59] <TJ->        reported as the PSS (Proportional Set Size).  The USS and PSS only include physical memory usage
[18:59] <TJ-> "man smem"
[19:00] <rbasak> Those still aren't units!
[19:00] <TJ-> rbasak: not my fault!
[19:00] <rbasak> OK, but my question still stands then :)
[19:01] <TJ-> rbasak: I'd guess kB the same as free reports?
[19:02] <rbasak> TJ-: as long as it's not "pages" or something, then that's only ~5G so not my leak :(
[19:03] <TJ-> rbasak: it is infuriating when it doesn't say
[19:03] <rbasak> Agreed!
[19:04] <TJ-> rbasak: use "-k" it shows the units
                                120    36.0M     4.2G
[19:05]  * TJ- hugs the man-page
[19:05] <TJ-> rbasak: so no help there then
[19:05] <compdoc> so gay
[19:05] <TJ-> compdoc: if you are, so what?
[19:09] <rbasak> I backported Bionic's bpfcc to Xenial.
[19:09] <rbasak> But I get
[19:09] <rbasak> $ sudo /usr/sbin/memleak-bpfcc -o 60000
[19:09] <rbasak> /virtual/main.c:18:1: error: could not open bpf map: Invalid argument
[19:09] <rbasak> is maps/stacktrace map type enabled in your kernel?
[19:09] <rbasak> It might be time to give up.
[19:09] <rbasak> Thanks to everyone for trying :)
[19:12] <OerHeks> :-)
[19:23] <mwheeler-> I just did a fresh install of lanscape on ubuntu 16.04, and when I try to register computers, they won't register and there's a "missing/invalid csrf token" error in the server logs.. google search turns up nothing.. any ideas?
[19:25] <OerHeks> maybe a strict setting in firefox/chrom(ium), https://get.todoist.help/hc/en-us/articles/208951085-CSRF-token-error-messages
[19:26] <mwheeler-> OerHeks: the weird thing is that I get the error when trying to register a computer with the landscape-config command
[19:26] <mwheeler-> so landscape client can't talk to landscape server .. getting CSRF error
[19:27] <TJ-> mwheeler-: are you having to go through a proxy?
[19:27] <mwheeler-> nope, no proxy, and both client and server are on the same L2 subnet
[19:27] <mwheeler-> they're VMs on the same host
[19:33] <TJ-> can you tell if the token is missing, or invalid - the latter could mean multiple connections causing confusion, the former I'm not sure what
[19:34] <mwheeler-> good question.. I didn't pay that close attention to the tcpdump.. I'm blowing away the VM right now and rebuilding it just to see if there was something screwy with it.. it was my general "use and abuse" server when I needed to test something
[19:35] <TJ-> mwheeler-: it sounds like the kind of error coming up from a library, most likely Python
[19:37] <mwheeler-> TJ-: yeah, in the log message I see zopepublication.py .. so it is likely further down in the stack than landscape
[19:42] <TJ-> mwheeler-: "zope" look to be the underlying framework they're using
[19:43] <mwheeler-> yep
[19:43]  * TJ- recalls trying Zope some years ago and running away, scared
[19:43] <mwheeler-> I feel that way about most web frameworks
[20:02] <JanC> CSRF token issues might be a result of an ad blocker or such (blocking cookies or whatever)