[00:00] sneakyimp1: The default should be fine as long as there is some unused space [00:04] jeremy31: what's with all these /dev/loopN things? [00:05] probably snapd [00:05] try 'mount', it will probably show a few squashfs images [00:10] sneakyimp1: :d .. To see the disk space usage ' df -h ' . [00:12] Bashing-om: all kinds of /dev/loopN cluttering up the output....what is that? [00:13] sneakyimp1: Mist like "snap" containers. [00:23] Bashing-om: but whyyyyy is it mucking up my drive listing? [00:24] when generating an ssh key pair, is 4096 bits still good? I.e., ssh-keygen -b 4096 [00:24] sneakyimp1: pastenin the outputs, we know exactly what you are seeing, please. [00:24] pastebin* [00:25] sneakyimp1: yeah, 4096 is still believed to be safe for rsa [00:25] or use ed25519 [00:25] sneakyimp1: you could also use -t ed25519 to use newer ecc crypto [00:26] sneakyimp1: but that requires servers to be new enough to support it [00:35] sarnold: thx for detail [00:37] Bashing-om: checkit...so many loopN thingamajigs https://paste.ubuntu.com/p/msjyCPttFk/ [00:37] sneakyimp1: looking. [00:39] sneakyimp1: Yup - snaps . Did you install them ? [00:40] Bashing-om: they must have come with the OS [00:40] Bashing-om: no idea what snaps are [00:43] sneakyimp1: I do not do snaps - as of yet. They are the new packaging format to support IoT. I can boot up a default 18.04 ubuntu if I must to compare. [00:44] Bashing-om: I *just* installed Ubuntu 18.04 and these came with. I'm guessing I have no need for them? Should I remove? [00:45] !snap | sneakyimp1 [00:45] sneakyimp1: Snaps are containerised software packages similar to flatpaks or appimage. For more info, see https://snapcraft.io [00:46] sneakyimp1: Not enough experience here to guide on removing snaps. Though I know it can be done. [00:47] Bashing-om: what a nuisance [00:47] sneakyimp1: Lemme reboot into ubuntu 18.04 and see what I have there to compare. [00:47] Bashing-om: word to the wise -- choose 'minimal install' option when installing U18.04 [00:48] Bashing-om: I appreciate that. I have installed exactly one app since the ubuntu 18.04 install finished -- pidgin (program I'm using to chat here) [00:48] Bashing-om: I'm guessing it might be some of the 'useful apps' that you get when you opt to have RhythmBox and that kinda stuff [00:48] sneakyimp1: My daily driver is a "roll my own" from a core install :) [00:52] sneakyimp1: "inquiring minds want to know" . I re-boot and we compare :) Will mot take that long to back out of here and into ubuntu. [00:53] i think you can safely remove all snaps but the core* and gnome-3-* ones [00:54] or all of them if you don't run the default gnome desktop [00:55] tomreyn: I am in fact running whatever GUI comes with Ubuntu Desktop 18.04.02 [00:58] sneakyimp1: Yup ! Them "snap" containers are also on my 18.04 ubuntu install: https://termbin.com/zgii . [01:00] Bashing-om: ARGGG. barf-o [01:02] sneakyimp1: Uh Huh - Reminds me why I now prefer a minimal install - and only install what I actually want :P === cyp3d_ is now known as cyp3d [01:03] Bashing-om: yep i'll probably go minimal install next time [01:04] sooooo if i want to copy files over my ethernet from one ubuntu machine to another, is SSH the way to go? Assuming I don't have a drive big enough? [01:05] yes, using either scp or rsync [01:06] rsync -Paviz some-files me@othermachine:targetdir [01:08] leave off -z if the files are compressed [01:10] the other options: keep partial files and show progress, set file attributes, verbose, itemize files [01:11] rsync checks the existing files at the target and only transfers the data that's missing [01:11] deltab: thanks for detail. === zbenjamin is now known as Guest65790 === zbenjamin_ is now known as zbenjamin [01:33] The Kubuntu installer seems to have overwritten my EFI to search for /boot on a newly created partition on my secondary SSD (because I chose to install on my secondary SSD when I launched the Kubuntu installer). My old /boot on my primary SSD still seems intact. What's the safe and correct way to fix EFI so it looks for my old /boot on my primary SSD again? [01:34] This is what I see in my /boot/efi/EFI/ubuntu/grub.cfg: https://bpaste.net/show/LURj [01:34] The UUID is the new /boot particition on my secondary SSD. [01:35] k_sze: hmm, did you run into this? https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/1396379 [01:35] Launchpad bug 1396379 in ubiquity (Ubuntu) "installer uses first EFI system partition found even when directed otherwise" [Medium,Confirmed] [01:37] sarnold, I think so. [01:38] When I launched the Kubuntu installer, I specifically told it to wipe and use my secondary SSD, in the hopes that it would not touch whatever is on my primary SSD. [01:40] :( [01:40] I finally got my hands on the touchscreen I wanted and now Ubuntu on-screen keyboard doesn't appear at all. I enabled it and followed the instructions but can't figure out why it doesn't work [01:40] My primary SSD has my Ubuntu 18.04 root partition in LUKS. [01:40] And my secondary SSH has this new Kubuntu 19.04 root partition in LUKS. [01:45] no there it works in the only place ubuntu tracks your typing for amazon. WHat a bucket of loser broke useless functionality [01:45] shit.. so that's a 4+ year bug that's still not fixed. :( [01:46] bout time I switched off ubuntu anyway [01:46] useless [01:49] this may be bug 1396379 [01:49] bug 1396379 in ubiquity (Ubuntu) "installer uses first EFI system partition found even when directed otherwise" [Medium,Confirmed] https://launchpad.net/bugs/1396379 [01:51] oh this was previously posted, ok [01:52] a second opinion is always nice though :) [01:57] Since it seems so well known, maybe it could just be listed in the release notes as a known bug, so it doesn't need to be fixed before the new new installer comes. [01:57] thankfully there are fixes and workarounds posted on that thread. [01:57] tomreyn: good idea [01:57] Especially the bottom half of this: https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/1396379/comments/8 [01:57] Launchpad bug 1396379 in ubiquity (Ubuntu) "installer uses first EFI system partition found even when directed otherwise" [Medium,Confirmed] [01:58] So I can restore EFI to the previous state and at least get back my completely working Ubuntu 18.04. [01:59] (I don't have time to customise and soup up my new Kubuntu install just now.) [01:59] need to get work done. === sauvin_ is now known as Sauvin === [b0b] is now known as b0b [03:30] good morning to all [05:14] Hi, I'm using Ubuntu 19.04 and for some reason the .minecraft directory is empty. This is weird because I have successfully ran the latest version of Minecraft so it should have files in it. Please help, thanks. :) [05:19] littleDJ: compare with this: https://linuxconfig.org/how-to-install-minecraft-on-ubuntu-18-04-bionic-beaver-linux [05:19] Thanks, I'll check it out! [05:19] littleDJ: see also snap find minecraft [05:20] Snap doesn't seem to be able to find Minecraft. [05:20] littleDJ: mc-installer 4.1 kz6fittycent - Minecraft Downloader and Installer looks useful [05:21] I'm using mc-installer already. [05:21] ah [05:22] I can't figure out why there is nothing in the .minecraft directory. [05:23] littleDJ: maybe check the snaps maintainer? snap info mc-installer (contact area) [05:23] k, one sec [05:27] I went ahead and asked the people of Reddit to see if they could help. [05:43] just use multimc [05:55] I have a question. [05:55] you can ask it hortiel [05:56] sudo ufw enable; sudo iptables -S ; still shows no rules of ufw, as if iptables is isolated and is not affected by ufw ?? earlier in 2016 it was different , ufw changed iptables ?? [05:57] does ufw act independently of iptables? [05:58] systemctl is-enabled iptables.service [05:58] disabled [06:00] hortiel: try adding a rule using ufw? [06:00] ufw enable is what I do best [06:00] what about your pc ; i want to know how does your iptables react to ufw enable? [06:00] i dont think that does much if anything [06:01] it adds a bunch of stuff [06:01] iptables -L https://termbin.com/sayp [06:02] ubuntu 16.04 here [06:03] what does systemctl is-enable iptables.service say? === morphis2 is now known as morphis [06:03] *is-enabled [06:11] hortiel: iptables.service does not belong to ufw. ufw.service does. And ufw is a wrapper to iptables. [06:11] ok [06:11] infact, I don't think iptables.service belongs to any package, that must be something custom you have there [06:16] hortiel: Failed to get unit file state for iptables.service: No such file or directory [06:18] EriC^^: also I had old unbuntu16.x and didn't want to download ubuntu19.x and I saw internet wifi option was missing , so I had this question of connecting wifi using 16.x ? how [06:18] in particular without using wpa_supplicant or other harder cmds. [06:19] no gui? [06:19] yes gui [06:19] no gui there is no option to connect enable wifi button, but the difficult one that say edit connection,etc [06:20] there is gui, but don't know how to interpret it to enable wifi, as no direct way [06:20] I tried and failed, feel stupid [06:40] what on earth are they talking about.... === imsurit_ofc is now known as imsurit === b1anc is now known as Heinem [07:40] Hi, is there a preferred way to store or persist netfilter / nftables rules? [07:43] nils_: isn't there a service that does that? [07:45] blackflow, I'm looking at netfilter-persistent, I'm not sure that it does anything. [07:46] nils_: no, that package is weird. you have to write hooks for nftables, for netfilter-persistent, while there's already a hook for iptables-persistent. for nftables, there should be a service for it, but I forgot which package provides it. [07:46] documentation says it executes the plugins from /usr/share/netfilter-persistent/plugins.d but there are no plugins, maybe they are provided by something else. [07:46] well duh! nftables.service from nftables package [07:46] !info nftables [07:46] nftables (source: nftables): Program to control packet filtering rules by Netfilter project. In component universe, is extra. Version 0.8.2-1 (bionic), package size 188 kB, installed size 593 kB (Only available for linux-any) [07:47] nils_: no, you have to write your own if you wanna use netfilter-persistent === imsurit_ofc is now known as imsurit [07:47] is a mess alright. [07:48] blackflow, thanks, I didn't realize it comes with a systemd unit, I can work with that. [07:52] blackflow, seems to me everyone is still on iptables these days or going straight to BPF. [07:55] nils_: yeah. I use iptables, don't see a need to switch to nftables. There's talk about EBPF-based firewall in the (near?) future replacing nftables... so... [08:09] Hey, I'm having trouble with Evince, it just doesn't print - the printer acts for a moment as if it's receiving data, then does nothing. I'd be troubleshooting CUPS and/or the printer if it weren't for the fact that Okular works perfectly fine on the same machine. Is there something about Evince that I might be forgetting to run? Some GNOME-specific print service? (I'm on i3) [08:11] Trieste: you should still check CUPS for any error log entries first. Could be malformed PS packet from Evince, or something like that. [08:22] blackflow, nothing in CUPS error log, the http interface simply shows the job as "Completed" [08:33] Firefox, which calls up the same GTK print dialog, also works... === imsurit_ofc is now known as imsurit [09:02] How do I lock multi screen settings in such a way that the system doesn't have to reset everything each time the system wakes up from screen power-saving ? === popgreen is now known as panorain === mouses- is now known as mouses [09:27] Hello, I'm new to packaging my own software for ubuntu. after packaging and installing the package (contains a little hello-world python script) I try to execute it. It says "command not found". What am I doing wrong?? [09:29] berphi__: did you use chmod +x on the file to make it executable? [09:29] yes, I did [09:30] howdy [09:30] berphi, using ./command [09:31] My Xbox One controller seems to work in Steam configuration, but in Saints Row 4 it doesn't work at all. Any suggestions? The game supposedly has full controller support. [09:31] I have another game installing while I troubleshoot this issue. [09:34] Hi there, has anyone been seeing trouble after the latest docker update in Xenial/Bionic? [09:35] I tried searching the mailing lists and launchpad yesterday but didn't find anyone else seeing an issue [09:39] good day. I created an LVM volume, copied my entire root filesystem there and now I'm trying to boot from it. I have configured an entry in grub but despite the entry being /dev/volume_group0/logical_volume0 when booting completes the root volume is still mounted in /dev/sdbX [09:39] It's the game. An Xbox One controller not working with a game that has full controller support. [09:40] Perhaps I should just use my Xbox One controller for Game Pass and forget Steam. [09:40] Jubei: you may need to run update-grub and also update your /etc/fstab (be careful though) === TheMesquito_ is now known as TheMesquito [09:42] CountryfiedLinux: You might want to ask Steam support [09:42] jeremy31: I created the python file, so that I can execute with ./my_script.. after that I use "bzr dh-make" to get the debian folder with all the meta data. after that I use "bzr builddeb -- -us -uc" to package it and "sudo gdebi -n .deb to install it [09:43] dpkg -L to see what files it installed [09:43] however, I didn't create a Makefile or anything like that.. I just have the "debian-folder" and my python-script.. is something missing? I can't see, WHERE it is installed after using "gdebi" [09:44] berphi__: you can try the find or locate commands [09:44] geirha: ahh, ok. it says /usr/share.. [09:45] You probably need to create a setup.py that specifies that python script is supposed to be installed as a command [09:46] geirha: yes, I think you are right, I'll take a look at how to create a proper setup.py! [09:46] jeremy31: locate works as well, thank you [09:47] I'm tring to file a bug at https://bugs.launchpad.net/ubuntu/+source/linux-snap and I'm getting an "Oops!" "Sorry, something just went wrong in Launchpad." 500. Is launchpad having issues, or should I be submitting it elsewhere? [09:53] sits thank you I'll try that === jug0 is now known as sotelio [09:55] Nakato: Server might be busy, try again later === imsurit_ofc is now known as imsurit [10:00] It's failed multiple times, and it fails instantly, so I don't know. I'm pretty frustrated and about to just mail security instead of dealing with LP. [10:00] Is there an IRC channel for LP, I didn't see it on the list. [10:00] #launchpad [10:01] how dangerous is it to extract a very large gzip (256gb) on ubuntu? [10:01] will it freeze/hang [10:02] Thanks [10:03] am asking because i tried to extract this gz file in windows and it completely froze after some time and i had to hard power off [10:31] Nakato: did you use ubuntu-bug packagename for creating the bug? [10:34] hey cfhowlett ; ) [10:34] cyberpolice: it shouldn't hang the whole system. But you may need lots of free disk space. you should use "tar" application on cli. [10:34] yowza ^3 lotuspsychje [10:35] cyberpolice: I'm afraid the answer is it depends. The machine and where the archive is being packed to are the significant factors [10:35] cyberpolice: it will probably hammer your disk too [10:36] cyberpolice: e.g. over where I am we unpack 100s of gigabytes of data but the machines have lots of RAM and fast disks [10:36] rory: depends on where its unpacked to right? [10:37] 256GB packed file(s) is just insane in my opinion [10:38] lotuspsychje: I think that depends entirely on the context [10:38] sits: yeah if you're extracting it to the same disk it's stored on, it will be laggier. and if it contains very many small files, it would be slower than fewer large files, probably [10:38] rory: I'm in total agreement [10:39] sits: feel free to share in #ubuntu-discuss what you guys pack 100gb for? [10:39] lotuspsychje: machine learning workloads [10:44] lotuspsychje: I'm not sure what the package name would be. It's in the build tooling for https://snapcraft.io/pc-kernel [10:45] I've ended up submitted it to 'snap-core18'. The LP channel helped me figure out what the oops was, which was the package name. [10:46] Nakato: for snaps, you cant use launchpad i think, see snap info pc-kernel for the contact [10:47] Nakato: in this its canonical, but still i dont think they use launchpad for this project [10:47] *case [10:52] Is there a place I can get that without running `snap`? I can't hit the snapcraft api where I have snap installed. [10:53] Nakato: do you mean you cant trigger snap info? [10:57] I cannot. I'm firewalled off, and I found the bug when attempting to reproduce the build. [10:57] nHi folks [10:59] Nakato: https://paste.ubuntu.com/p/DRMdrtD699/ [11:00] lotuspsychje: Thanks for that! I'll use that if the launchpad bug does not pan out. [11:08] sits: actually its a 91 gb gz file that contains a dd image of 256gb ssd [11:09] sits: i used dd if=/dev/sda | gz -c file.img.gz, or something close to that [11:09] just uncompress it with gzip then [11:09] it will not lag your system too much, as it's a single-threaded operation. [11:10] yes i tried, and it died in windows, and had to hard shut off (causing who knows what damage the disk that it was on, and being extracted to). and afraid same thing will happen on ubuntu [11:10] was it a bad idea to gzip the image [11:10] cyberpolice: Yeah - ideally you wouldn't have compressed it [11:11] cyberpolice: hindsight etc. [11:11] i dont know why archwiki suggests it [11:11] this is ubuntu support [11:11] cyberpolice: runs of zeros often compress well [11:12] how do i disable the touchpad while typing? [11:12] absence: there's an option in systemsettings & gnome-tweak-tool [11:13] bounded [11:14] lotuspsychje: is systemsettings the thing called "Settings"? nothing there under mouse & touchpad === imsurit_ofc is now known as imsurit [11:14] absence: yeah my bad, only in gnome-tweak-tools [11:15] cyberpolice: my comment was eaten. You should be OK if your system has enough resources etc. [11:15] cyberpolice: but I'd avoid using a GUI tool and be careful about where you unpack it to [11:16] absence: and also in dconf-editor [11:16] lotuspsychje: thanks, found it. but odd, it's already on [11:18] sits: ok, thanks! ill try it [11:18] absence: maybe its something else you need? why did you need to disable it, anything happen? [11:20] lotuspsychje: i accidentally do stuff with the touchpad while typing, because i unconsciously rest my hands on it [11:20] or near it, and brush against it with my fingers [11:20] or something [11:20] random stuff happens :) [11:20] yeah my gf has the same issue, i disabled touchpad totaly there, working with a wireless mouse now [11:32] isn't there an option to disable the touchpad during keystrokes? [12:01] What is the name of Qt dev package on Ubuntu? [12:01] I need the include directory for CodeBlocks [12:10] I am running vsftpd on ubuntu. Ive configured it for anonymous upload but when I try to access it via ftp it prompts for credentials. Anyone have any idea what to adjust? https://paste.ubuntu.com/p/MT8r5KssM7/ - config [12:18] tcpdump: ftp always prompts for credentials you can insert anonymous - anonymous and should log you in [12:20] dnegreira: yes sir, Ive tried that, too. :/ [12:20] lines 46-65 repeat in lines 78-97 - copy paste issues? [12:21] anon_upload_enable is unset, i expect it to default to NO [12:22] write_enable is unset, i expect it to default to NO [12:22] tomreyn: let me review [12:22] probably... if there's one thing I love about Fedora its fpaste. :D [12:22] look for vsftpd documentation on how to configure anyonymous uploads, adjust your configuration, try again. [12:23] fedora? [12:23] oh, we have !pastebinit on ubuntu [12:23] !pastebinit [12:23] pastebinit is the command-line equivalent of !pastebin - Command output, or other text can be redirected to pastebinit, which then reports an URL containing the output - To use pastebinit, install the « pastebinit » package from a package manager - Simple usage: command | pastebinit [12:25] thanks [12:25] Do I need to open port 20 as well? based on this - connect_from_port_20=YES [12:28] this would mean the ftp server would itself initiatie connections from (fixed) port 20 towards the 'client' in active mode [12:29] are you familiar with why ftp is often considered a terrible protocol whose use should be prevented or restricted to a minimum then? [12:29] had you considered alternatives such as sftp, https? [12:31] tomreyn: Im making an intentionally compromised server for a CTF event. [12:31] So this is perfect! :D [12:31] anonymous FTP still asks for username/password, tcpdump , are you saying that anonymous isn't working? Have you restarted the service after making config changes? [12:32] JimBuntu: thats all correct. Having said that, tomreyn pointed out I may have my config messed up. Im reviewing it now. [12:32] i see, now ftp makes a lot more sense. [12:32] tcpdump, if making a CTF device, please don't forget telnet :-) [12:36] hello everyone, I've just updated my Ubuntu VM and now where the login screen should be there's a purple screen, after several reboots sometimes it has the Ubuntu logo in the bottom middle [12:37] What is the Cross GCC path? [12:37] I've booted into recovery mode assuming that there's some graphics problem, some guides recommend to reinstall ubuntu-desktop and unity but I can't even get there because DNS resolution in console doesn't work [12:38] Google didn't gave me any good advise [12:39] By the way pinging something in the Internet like 8.8.8.8 works, I've added to /etc/systemd/resolved.conf the public Google DNS 8.8.8.8 but that doesn't help at all [12:41] the file /etc/resolv.conf doesn't have any nameserver entries, also not the systemd-resolve which should be 127.0.0.53, it's just mentioned in a descriptive text in the file [12:41] siodor: i need to leave for now, but you should discuss the virtualization type / software (and host OS) you're using (adding version numbers wont hurt), and the ubuntu version (and variant, architecture), whether you host OS and virtualization are fully updated. [12:42] and whether they are known to support this guest OS. [12:42] My Ubuntu VM worked perfectly before I've ran the suggested updates [12:43] It's Ubuntu 18.04 on VMWare Workstation 15.1.0 running on Windows 10 1809 [12:43] later tomreyn thanks! [12:47] Alright, here's my vsftpd.conf file - still cant get anonymous ftp to work... Anyone else see anything Im missing? https://paste.ubuntu.com/p/ZbB6YPZZPR/ [12:55] siodor: check /etc/nsswitch.conf for the hosts: line [12:55] I had to change mine the other day. Couldn't connect to anything, anywhere, by name. Just like you [12:56] The old line is like this: #hosts: files [NOTFOUND=return] dns myhostname mdns4_minimal [12:56] I changed it to this: hosts: files mdns4_minimal [NOTFOUND=return] dns myhostname [12:56] And it worked [12:56] hello everyone, could someone help me out with determining if my SSD is broken [12:56] Gparted shows /dev/sda 238 GB gnome disk shows 256GB [12:57] kdbNL: https://www.techrepublic.com/article/how-to-check-ssd-health-in-linux/ [12:57] its LVM by ubuntu base install [12:57] thanks ill check it out [12:57] but i think its partitioned wrong, i know its old already [12:57] i dont understand why gparted would report a different size [13:03] thanks for the smartctl information, i did the scan, it shows my ssd as the correct size and in the database. it passed self-health check. [13:04] is gparted just unable to deal with lvm? is it normal for ubuntu base install to just do 1 giant /root VG and a 1GB /swap_1 ? [13:06] moin [13:06] any idea on network-manager vs openvpn lz4 compresion? [13:12] CatPasswd, I've just added a nameserver 8.8.8.8 entry into the /etc/resolv.conf file to temporarely having apt-get function properly [13:12] As for the purple frozen login screen, this fixed it for me https://askubuntu.com/questions/1149957/unable-to-login-to-account-in-ubuntu-18-04-vmware-workstation-15-after-update [13:14] Seems like python 3.7.4 compilation on ubuntu 18.04 needs manual ssl compilation. Are there any workarounds for this - Python requires an OpenSSL 1.0.2 or 1.1 compatible libssl with X509_VERIFY_PARAM_set1_host(). [13:16] how do i install java [13:16] E: Unable to locate package java [13:19] apt-cache search openjdk [13:22] ok [13:53] -ChanServ!ChanServ@services.- NOTICE sqirt :[#ubuntu] Welcome to #ubuntu! Please read the channel topic. This channel is logged at irclogs.ubuntu.com. Use of this channel implies acceptance of terms at https://wiki.ubuntu.com/IRC/TermsOfService [13:59] -ChanServ!ChanServ@services.- NOTICE sqirt :[#ubuntu] Welcome to #ubuntu! Please read the channel topic. This channel is logged at irclogs.ubuntu.com. Use of this channel implies acceptance of terms at https://wiki.ubuntu.com/IRC/TermsOfService [14:00] sqirt, no need to post that [14:35] just upgraded my cpu to i7 in a laptop any idea what i can use this horsepower for? [14:35] except to put 32gb of the memory lol [14:37] parak0vsky: only ubuntu questions here please [14:42] Does anyone know how I would use find to display all unmodified files from the last 30 days [14:42] without showing directory? === wagle_ is now known as wagle [14:45] NixNixDicPix: man find is your best help. Look into -f and -mtime [14:47] find /path/to/files -mtime n #where +n for greater than n, -n for less than n, n for exactly n. [14:47] Hi, I got a server with firewall confiugred as in https://bpaste.net/show/VUxK , It's not mentioned that port 8983 is open in the firewall but I can access it via the browser and also verified using nmap! what's wrong here? the server is using firewalld I guess [14:48] `find -type f -newermt "2019-06-10 00:00:00" \! -newermt "2019-07-10 00:00:00"` - still shows the directory tho [14:48] https://bpaste.net/show/Ffr3 [14:50] zanshin is there not flag to drop showing directories [14:50] because that otherwise would be a perfect command [14:52] NixNixDicPix: I am not sure what's your question but -type f would drop directories [14:53] edgy: Can you share the output of `iptables -S`? [14:54] adrian_1908: sure: https://bpaste.net/show/uBHk [14:55] Give me a single command that will find all files not modified in the last 30 days under `/tmp/etl_landingzone/` Note: The output should only include files not directories. [14:55] this was the actual question [14:55] edgy: do you use some intermediate tool, or what's the reason for there being so many iptables chains? [14:56] NixNixDicPix: -type f is part of the answer for the find command [14:57] yeah that drops the directories [14:57] Im reading [14:57] NixNixDicPix, https://stackoverflow.com/questions/23070245/get-all-files-modified-in-last-30-days-in-a-directory [14:57] the rest depends on if you have mtime on your filesystem [14:57] adrian_1908: yes, this is virtualmin control panel defaults [14:57] adrian_1908: I also know that firewalld comes with all these default zones [14:58] thats wrong that shows modified [14:58] I been there [14:59] adrian_1908: I am not familiar with firewalld but is there any thing fishy in that output like missing a reject rule for the remaining ports? [15:00] edgy: It's a bit difficult to reason about the firewall with all those chains. I could imagine one of them being responsible for the port being open. Have you tried listening to another random port to see if the problem applies in general? [15:01] adrian_1908: in my case where I am asking only about an incoming port should I only care about the IN_public_allow [15:02] NixNixDicPix, then just change the line.... and use - instead of + on the time/date you want [15:03] using that example on the page would be -30 instead of +30 [15:03] edgy: yes, that alone would suffice. But I doubt you're able to remove the other chains, are you? [15:05] adrian_1908: I don't want to mess with the defaults. I just want to understand the issue [15:05] edgy: or can you instruct virtualmin to leave the firewall rules to you? For most use cases, these should be simple enough. [15:06] adrian_1908: virtualmin by default figured out most of the open ports on the server and added it automatically to the firewalld, I can't understand what you meant by instruct virtualmin to leave rules for me [15:07] edgy: I mean, tell virtualmin to stop setting firewall rules and do it yourself. Personally, I would much rather start with very simple rules and add what I need, instead of trying to decipher a complex ruleset someone else came up with. [15:09] or just use UFW on you *buntu [15:09] adrian_1908: yes, definitely I can do that but I want to get familiar gradually with firewalld since it has integration with fail2ban and other advanced features. It's more of learning than a problem that I need to solve [15:11] edgy: I see. I would look in the documentation then, or see if you can find a community dedicated to that tool/framework. [15:12] edgy: `-A IN_public_allow -p tcp -m tcp --dport 1025:65535 -m conntrack --ctstate NEW -j ACCEPT` your probably your culprit, so try to remove whatever sets that rule. [15:12] adrian_1908: excellent spot! [15:13] adrian_1908: I guess those are added for passive ftp [15:15] adrian_1908: yes! that fixed it. I am feeling stupid now :( Thanks a lot [15:16] you're welcome :) [15:20] I am having trouble with the ubuntu package xl2tpd_1.3.6+dfsg-4_amd64. I have noticed that it was last updated in 2015 and I would like to replace it with the version from Xelerance which last updated in April as shown here: https://github.com/xelerance/xl2tpd/releases Are there any issues that I should be aware of??? [15:22] I have a command `yq` ... not exactly sure how I installed it, but I would like to be able to do this: https://mikefarah.github.io/yq/merge/ ... how can I find out if what I have is the same application (if it is, I would think I need to update it because it doesn't seem to work) [15:23] ash_worksi, 'which yq'? [15:24] lordcirth: /home/ash-m/.local/bin/yq [15:24] ash_worksi, sounds like you might have used pip [15:25] Can anyone tell me what php7.2-dba provides? [15:25] lordcirth: oh you're probably right [15:25] 1.3.6+dfsg-4ubuntu0.16.04.2 last updates (universe) 2018-07-30 [15:25] not 1015 [15:25] ash_worksi, 'pip list | grep yq' [15:25] the description is pretty uninformative: "This package provides the DBA module(s) for PHP." [15:25] DEPRECATION: The default format will switch to columns in the future. You can use --format=(legacy|columns) (or define a format=(legacy|columns) in your pip.conf under the [list] section) to disable this warning. [15:26] and it's there [15:27] ash_worksi, so, 'pip install --upgrade yq' [15:27] perhaps with --user? [15:27] lordcirth: well, this seems to have apt instructions... is there a way to tell if they're one and the same? [15:29] oh no, this is a go package... should I uninstall yq through pip before attempting to install mikefarah/yq ? [15:30] that would be much less confusing, yes [15:32] lordcirth: after `pip uninstall yq; ... apt install yq -y` I get: `bash: /home/ash-m/.local/bin/yq: No such file or directory [15:32] I guess I need to logout? [15:33] ash_worksi, just get a new shell, eg by running 'bash' [15:33] what's the better method for securely transferring files these days, SFTP or FTPS? [15:34] neat [15:34] thanks [15:34] becool, neither? Don't use FTP [15:34] what should i use then? [15:34] becool, depends, what's the use case? [15:35] transferring files from a client over the internet [15:35] scp or rsync are easy to set up [15:35] security is handled for you by ssh [15:36] how will a user authenticate and stay locked to their home directory? [15:37] becool, you need various untrusted users to log in and access only their home directories? [15:38] i need users to be able to send/receive files they upload to us. i need them to be able to list their files and directories [15:38] can't do that with scp or rsync [15:38] and i need it to be encrypted. so it's either sftp or ftps [15:38] becool: SFTP [15:38] adrian_1908: thanks [15:39] I guess it depends on the audience but I feel like that should be more of just a web form/listing. [15:40] Yeah, "users" and "needing to know what SFTP is" may not mix well. [15:41] just have some simple auth on a web application with an upload form and an index for listing files. [15:42] Or Nextcloud [15:42] how will i be able to lock each user account to a separate home directory with sftp? will it default to the home dir for their account? will it still work if i disable shell access for users ('chsh -s /usr/sbin/nologin')? [15:43] becool, besides FTP, owncloud is an other solution [15:43] i think ftps is the best balance between users being able to connect and keeping things secure [15:43] OerHeks: i'll check it out [15:44] OerHeks, becool Nextcloud replaces Owncloud [15:44] I know this isn't really the channel for it, but if anyone has any pointers to improve this script, I'd appreciate it: https://gist.github.com/ash-m/1199927a13ebf4818401a24f92b2098e [15:45] it interactively changes passwords in the passwd file dovecot uses (since dovecot is apparently set up that way here) [15:48] the concept is that you run the command like `dovechpass ash.m lordcirth@irc.com ...`; the major loop iterates over each argument, the first inner loop collects accounts from the passwd file, the second inner loop collects a password from the user and the third inner loops iterates over each username collected in the first loop to just gawk-replace lines in the passwd file [15:51] the idea is that if you enter a partial account, it collects everything matching at the beginning; so if i just did `dovechpass ash` it would collect names like `ash.m@me.com ash.worksi@me.com ash.mobile@me.com` and give me a single prompt to change the password for all those accounts [15:52] if I did `dovechpass ash.m@me.com ash.mobile@me.com`, I'd get two prompts [15:54] as-is, a possibly unexpected behaviour might be if you ran `dovechpass ash.mobile@me.com ash` which would set the password for ash.mobile@me.com to the first one provided and then reset it the second one provided. [15:54] although it would tell you it's doing so. [15:56] I guess I could have another array which keeps track of accounts that were set and just continue out if it's found. [15:56] thank you for helping me rubber duck that [15:56] that's an easy fix [16:00] lol, glad to be of service [16:01] best support ever! [16:01] Though my main suggestion would be to consider running a web frontend for this rather than a bash script that handles passwords. [16:01] (as in, a web frontend maintained by other people) [16:04] lordcirth: it's sort of just a utility to change passwords in /etc/dovecot/passwd [16:04] lordcirth: it got bigger and bigger as the requirements kept changing [16:06] initially it was just the gawk statement using '{ if(index($0, acct)){ sub(/:.*/,pass); }; print }' [16:07] but the problem with that was that `doveadm pw` uses the username in hashing the password [16:08] so if you did `dovechpass ash` then it would set passwords for ash.m ash.worksi and ash.mobile all using the same password with user "ash" which would fail [16:08] ash_worksi: seems overly too complex. you can always use SQLite and make it much, much simpler. [16:08] "overly too complex" is a very ironic statement [16:09] :P [16:09] well, it's also a bit offtopic for #ubuntu :) [16:09] that's true [16:10] but I was more looking for pointers in terms of sharpening my bash skills anyway [16:10]