=== BrianG61UK_ is now known as BrianG61UK [00:22] which shell is used in initramfs? [00:23] actual question: can I use "local" in its functions? [00:29] Sven_vB: I'm guessing the best answer will be found here? https://wiki.ubuntu.com/Initramfs [00:30] Sven_vB, almost certainly /bin/sh which is a link to dash, the dash manpage says it has local (it follows the POSIX shell spec) [00:31] Sven_vB: also "man initramfs-tools" will help you with working in initramfs [00:40] thanks! [01:10] hmm apt update [01:12] Command 'hmm' not found, did you mean: command 'mm' from deb multimail, command 'vmm' from deb vmm, command 'rmm' from deb mailutils-mh [01:14] no, as in: hmm wait, what? [01:15] but i see the strange sentence i created :-D [01:15] alias hmm="sudo" [01:34] Does Canonical know that systemd is very slow on optical media? [01:35] who still runs anything from optical media? === zbenjamin is now known as Guest64163 === zbenjamin_ is now known as zbenjamin [01:36] * pragmaticenigma raises hand [01:37] i can play dvds just fine [01:40] Essentially the "parallel loading" thing is very bad with a 300ms seek penalty. [01:53] My optical drive my be slow, but th elive DVD failed to boot: sevices time-out after 90 seconds. [01:54] (I checked the integrity of the disk yeasterday) [01:54] phillipsjk: is the drive running on a SATA connection or older IDE PATA connection? [01:58] IDE UDMA4 (66MB/s, does not support UDMA5) [01:58] It works sometimes, not every time [01:59] * phillipsjk is mostly venting [02:00] Ah, that might be why then. Anything that I've booted the Live DVD from is on newer SATA controlled optical drives. My older tech I use the mini.iso release for installs, don't attempt to boot live there. If you like phillipsjk, the #ubuntu-discuss channel is a better place to continue this discussion :-) [02:01] * phillipsjk got green on the next attempt [02:06] Using the command..sudo gedit /etc/lightdm/lightdm.conf..why is the paige blank [02:13] texla: blank typically means no file currently exists. check the file path, also use tab completion to make sure you don't have a typo [02:13] thunderbird with yahoo opens Yahoo UK login window but I am from the USA [02:13] how can i fix this [02:14] texla: Also, if you are running newer versions of ubuntu, gedit may not run with sudo [02:14] pragmaticenigma, I am running 18.04.3 [02:17] texla: Try as 'gedit admin:///etc/lightdm/lightdm.conf ' . [02:21] Bashing-om, says unable to handle the admin.. [02:21] JonelethIrenicus: You won't be able to. Though I don't believe there should be any issue with using the UK site instead of the USA version of the site to obtain the needed oauth token it is attempting to request. [02:21] texla: Load gedit first, then with the open file dialog use the admin:// method === not_phunyguy is now known as phunyguy [03:35] VMware Player default have in guest u-mate mouse ps/2 three buttons, my mouse have 5 + scroll buttons, but works only three buttons. There is an option to add other buttons? [03:36] There is an option to add other buttons in guest? [03:39] add mouse in guest as real usb mouse bad idea. [03:43] Add a mouse in the guest as the real USB of a mouse through the vmplayer settings the bad idea === doc-saintly23 is now known as Doc-Saintly [04:18] Can anyone recommend a simple remote management tool for Ubuntu? I have 3-4 computers and many of them sit behind a firewall. I usually just do port forwarding + dynamic IP + SSH + TeamViewer / AnyDesk to get my access, but this is pretty cumbersome. [04:19] Is there a free (or cheap) and easy thing I can use that will get my servers to connect to a proxy somewhere (I can host it myself) so I can easily access them behind the firewalls? It would be even better if it was something like Landscape where I could admin patches from a single place. [04:20] I tried remote.io, it's nice, but I don't like the idea of my traffic being routed through a "free" service, so I'd rather host it myself. [04:32] Doc-Saintly: maybe you can try in #ubuntu-server ? [04:33] Doc-Saintly: or are they all desktops? [04:34] Doc-Saintly: there were recently serious security flaws on teamviewer aswell, so best to find other protocols [04:42] lotuspsychje they're usually desktop installs with a few server things running. [04:42] Yea :\ I moved away from TV for a number of reasons... Started using Anydesk now. [04:43] But the security flaws help me understand why they pretty much blocked out access to older server versions. [04:43] Doc-Saintly: anything remote, that is connected to internet too, is potentially a security risk, as malicious users hunt for those [04:43] Yep, understood :) [04:44] I _can_ do stuff like autossh, but it turns into a big head ache, not as resilient as I want it to be. [04:44] Doc-Saintly: i think doing your work with ssh and fail2ban protect will be your best bet [04:44] my goal is that I just install something, set up a simple config and forget it. [04:44] Doc-Saintly: id suggest idle in #ubuntu-server perhaps they know some desktop management software you can use easy from server [04:44] Thanks, will ask them :) === argonaut_ is now known as argonaut === CarlFK1 is now known as CarlFK === gry_ is now known as gry [09:04] Hi, bought Canon Lide 220 scanner (listed on SANE compat.) and it works fine if resolution is down to 600dpi. If I select 1200,2400 or 4800 (using a tiny area of 1cmx1cm) all freezes.. any suggestions? (Ubuntu 19.04 Gimp 2.10.8) [09:45] hi there, so I wanted to install this https://support.toggl.com/en/articles/2410832-toggl-desktop-for-linux [09:46] but the software center can't install it, so is it okay to install toggl using snap as I found here https://snapcraft.io/install/toggldesktop/ubuntu [09:47] Please help. :) [09:52] is it secure to install via snap? [10:08] rhoks, as "secure" as from any repository that is not first party (ubuntu or debian) [10:19] cool [10:19] thats fine I got using snap [10:28] good good [10:39] i try use ubuntu 19.04 as development of new server for ready for next 20.04 version. [10:40] i use ansible for automation [10:40] problem is ssh service is not start after reboot [10:40] no error, after login normally to my vm using GUI and restart ssh everything work well [10:40] Ububtu supports software Snaps, right? [10:42] TabMasher: yes, but the snaps themselves are not supported here [10:47] I can visit the snap store, but what is needed to allow (chrome/firefox) to install snaps from the browser. I was hoping there was a way to click and have it install a snap package. I know this might be a bit off topic, but any help would be appreciated. [10:47] Not sure where else to look for help. [10:48] i'm guessing that would require a browser plugin [10:52] (as you might have guessed, i don't know if one exists) [10:52] you can try asking in #snapcraft [10:54] TabMasher: ^^ === juboxi is now known as jubo2 [10:58] this channel and ##windows are tied for worst channels on freenode [10:58] wop wop [11:15] Hiyas all === tlaxkit is now known as gnu-linuxera [11:35] Is there a kernel command line or something that I can use to drop to a shell in initramfs instead of booting the system? [11:36] break=mountroot iirc [11:37] I'll try it. thanks [11:37] ok [11:47] lowryder: break=init is the last, also break=mount, break=premount, or for a full list in order of when they trigger do "grep maybe_break /usr/share/initramfs-tools/init" [11:47] oops, not lowryder lowin but tab-complete+quit don't mix === lotus|i5 is now known as lotuspsychje [12:47] hey y'all [12:48] welcome mheld [12:48] how can we help you today? [12:49] can anybody point me to resources regarding modifying click-and-drag behavior with a multi-touch trackpad? click and drag works but if I use a second finger to continue dragging, the only thing I'm able to do is make the window scroll with the second finger (and not move the cursor) [12:50] ha looks like this person has the same exact issue -> https://askubuntu.com/questions/1112017/18-10-laptop-touchpad-two-finger-click-and-drag-stops-working-after-update [12:51] mheld: wich ubuntu version/kernel are you on? [12:51] 19.04 [12:51] mheld: it also worked for you before, and stopped working after an update? [12:52] it never worked for me in the firstplace [12:52] ok [12:52] but it's the same issue, with the same machine [12:52] (I only installed ubuntu on this machine recently) [12:52] mheld: maybe you can try tweaking things out with gnome-tweak-tool or dconf-editor [12:53] tap-and-drag is the option you seek for correct? [12:55] mheld: /org/gnome/desktop/peripherals/touchpad there are tweaks to finetune [12:55] I don't partcularly want to use tap (prefer to click -- it's a clickable trackpad) [12:55] Hey guys [12:55] but I'll futz with that, thanks lotuspsychje [12:55] welcome destinydriven [12:55] Is it at possible to get the latest passenger working with nginx 1.17+ on ubuntu 18.04 bionic? It's currently stuck at nginx. 1.14.0 which is pretty old. [12:56] !latest | destinydriven [12:56] destinydriven: Packages in Ubuntu may not be the latest. Ubuntu aims for stability, so "latest" may not be a good idea. Post-release updates are only considered if they are fixes for security vulnerabilities, high impact bug fixes, or unintrusive bug fixes with substantial benefit. See also !backports, !sru, and !ppa. [12:56] Hi lotuspsychje [12:56] here is the relevant output from sudo apt list --installed: https://paste.ubuntu.com/p/SxwYQVwhMc/ [12:57] lotuspsychje, yes I'm aware but 1.17+ is available for bionic. I think the limitation is passenger or something [12:57] destinydriven: backports or a higher ubuntu version could help you with higher versions [12:58] I'm just wondering why nginx won't update from 1.14.0 to 1.17 [12:58] destinydriven: another approach would be filing a !bug to nginx and describe whats not working [12:58] !info nginx bionic [12:58] nginx (source: nginx): small, powerful, scalable web/proxy server. In component main, is optional. Version 1.14.0-0ubuntu1.6 (bionic), package size 3 kB, installed size 43 kB [12:59] hmm [12:59] destinydriven: thats how ubuntu works, ubuntu versions stick to the specific package versions [12:59] I see [13:00] !info nginx disco [13:00] nginx (source: nginx): small, powerful, scalable web/proxy server. In component main, is optional. Version 1.15.9-0ubuntu1.1 (disco), package size 3 kB, installed size 43 kB [13:00] lotuspsychje: no dice but thanks [13:00] I do have a bionic vm without passenger and it's currently at 1.17.3 though. [13:00] destinydriven: 19.04 if you want that version [13:00] I only stick to LTS [13:01] mheld: can you pastebin your dmesg please? [13:01] And getting help from #passenger has proven to be very difficult [13:03] destinydriven: can you explain why passenger doesnt work on 1.14? [13:04] lotuspsychje, it works. I'm just concerned as to why nginx won't upgrade past 1.14.0 [13:04] destinydriven: why concerned? [13:05] Aren't the later versions patched with security updates and perf. Improvements? [13:05] lotuspsychje: https://pastebin.com/KH76K2tq [13:05] destinydriven: when security flaws are found, bionic version will also get patched [13:05] destinydriven: higher versions have indeed newer features [13:06] lotuspsychje, thanks [13:06] mheld: 0.000000] Kernel is locked down from EFI secure boot; see man kernel_lockdown.7 uefi settings could possibly influence your hardware, did you try legacy boot ubuntu? [13:07] mheld: you could also check if your bios is up to date [13:23] hello how i can back from 18.04 to 16? [13:23] someone can help to me? [13:24] mircx1: downgrading isnt supported on ubuntu, clean install instead [13:24] mircx1, why don't you tell us what your real issue is? [13:25] ubuntu 18.04 [13:25] i want back to 16 [13:27] this a possible please? [13:27] mircx1: did you read what i just said? [13:27] mircx1: As said, no it is not possible without a clean, full installation. [13:29] mircx1, so what's your issue with 18.04? [13:30] yes this my version ubuntu this [13:31] no kidding [13:31] lol [13:32] ohh come one [13:32] please i want to know how i back to 16 [13:32] i not like the 18 [13:32] !download | mircx1 [13:32] mircx1: Ubuntu installation CDs can be downloaded from http://releases.ubuntu.com - Mirrors can be found at https://wiki.ubuntu.com/Mirrors - PLEASE use the !torrents to download !Disco, and help keeping the servers' load low! [13:32] reinsatll it [13:33] i want back not download this all [13:33] mircx1: ok, you can stop trolling now [13:34] why you cant help to me? if you dont know then not give to me link for download it [13:34] mircx1: You were just given the link. [13:35] but i dont need to link only i need to understand how i back to 16 this all [13:35] mircx1, google is your friend if you don't look at the above post [13:36] I'm looking for info on how to get rid of systemd, if it's possible. [13:40] mircx1: you can't downgrade, your only option is to reinstall [13:41] ubuD104: it isn't, so start looking for a systemd-free distro [13:42] really? looks like I have something to do now. Give me a week I'll figure it out. [13:42] been using linux for a month now [13:42] have fun [13:43] even pinning maybe? [13:43] not to familiar with that [13:43] ubuD104: makes no sense at all, the system supervisor is by its nature tightly embedded into all service packages [13:43] ubuD104: pinning is not for replacing systemd.. [13:44] ubuD104: if you've only been using Linux for a month why would you want to replace the standard system supervisor which is integral ? [13:44] i'm hearing you can erase it but it keeps coming back is that correct? [13:44] anyway, this is quickly veering offtopic (wwhich i suspect was intended all along) [13:45] you are talking about ubuntu correct? [13:45] ubuD104: yeah, it's easy to erase it; turn the PC off [13:46] ya linux just comes natural to me and i've been looking at logs and systemd reminds me of you know that other program [13:47] if I purge a program and turn off the pc and turn it back on it's still purged [13:47] so the power button doesn't erase it [13:47] ubuD104: it's probably a dependecy for a metapackage of the base system, I think it would be simpler to try another distro with a different init system [13:48] your probably right, I was just wondering if there was a "majic pill" out now [13:49] I think it'll be more trouble for you than it's worth [13:49] anyway, if you replace the system supervisor it is no longer ubuntu, so not supported here [13:49] ubuD104: you can of course just not use systemd, all you need do for that is add to the kernel command-line in /etc/default/grub "init=/bin/bash" [13:49] ya i see myself reinstalling ubuntu 100 times in the next few days haha [13:50] ok thanx though guys [13:50] ubuD104: check out Devuan, it's basivally Debian stable with old init [13:50] never heard of it ok cool because ubuntu is my favorite so far [13:51] PS I absolutely love linux I try to get everyone I know to try it [13:53] thanx for the suggestion i'm going to get it right now I find Debian a little difficult, still new at this [13:54] then switching the init system is probably not a good place to start :) [13:54] does it completely change things? [13:54] it has a jessie release I see [13:55] and don't buy into the "systemd is evil" talk without a good reason [13:55] ya those log files made the nightmares come back [13:55] its not good ill tell you that [13:56] no need to know my location and what camera i use in the consecutive scripts [13:57] ubuD104: its ok..you can stop trolling now [13:57] haha ok buddy have a good one guys [13:57] dolt [14:00] what's the command to tell gnome to show all open windows? [14:00] (the one that is mapped to the super key) [14:02] mheld: systemsettings/devices/keyboard all your hotkeys are there [14:36] I currently have Ubuntu installed on /dev/sda1 it's a 120GB SSD which is almost out of room. I have a SATA drive with 500MB of space avail. How do I relocate my entire Ubuntu system to a 450GB partition /sdb3 [14:47] Hello everyone :) I have a strange question. I'm using an old lubuntu release(16.04) and it's not supported by lubuntu team since april 2019, but as I can see, there will be a "Ubuntu community support" until 2021, does that mean that it's still safe to use? [14:55] nmzm, yes [14:56] BluesKaj, thanks! Then I can still use it while waiting a 19.10 release. But what exactly mean "Community support"? Not official updates? [14:59] Manny you can do something like "dd if=/dev/sda of=/dev/sdb bs=1M", the run gpart to fix the messed up partition table (assumg GPT) and resise the partion. This also assumes you are not using btrfs. [14:59] hey guys, i tried to clone my disk. But i got an error about mixed MBT and GPT tables. So i deleted the GPT table and now i don't get grub anymore. How can i fix this ? [15:04] nmzm, most users here would recommend upgrading to 18.04 LTS, however there is "unofficial" support by the ubuntu community [15:05] for 16.04 [15:05] Oh. thanks for the info, BluesKaj [15:21] I just installed kubuntu and after the boot menu i select to boot it from grub and then my screen just goes black [15:22] !nomodeset | thyriaen [15:22] thyriaen: A common kernel (boot)parameter is nomodeset, which is needed for some graphic cards that otherwise boot into a black screen or show corrupted splash screen. See http://ubuntuforums.org/showthread.php?t=1613132 on how to use this parameter [15:23] ducasse, awesome - thanks [15:24] Manny a more proper way may be to use a liveDVD to create the new partion table, unmount the old parttion, dump old | restore new. The run grub as needed. The filesystem needs to be unmounted because ext4 does not support snapshots. [15:26] * phillipsjk does not think dump/restore is install by default [15:36] thank you [15:39] phillipsjk, i have super grub2 and rescatux .. how can i restore grub with them ? [15:39] no idea, and I am off to work. [15:54] Morning [15:55] early 2008 imac, when trying to log into wifi it fails. Sees router fine, just fails on password [15:56] Any hints? [16:00] Coraxyn: ubuntu version/kernel please? [16:00] 18.something [16:00] Coraxyn: details matter please [16:00] Got it yesterday from Ubuntu.com [16:01] 18.04. LTS ? [16:01] So it runs fine, sound, everything [16:01] Think so thyriaen [16:01] what encryption did you choose during setup connection? [16:01] Can select correct router (one am using now) [16:02] When clicked it spins for long time them errors out [16:02] Connection Failed [16:02] lshw sees hardware fine [16:02] Even driver version looks good [16:02] Broadcom [16:02] wpa-psk / tkip? [16:02] Mm, 6.30.something [16:03] wpa2 personal [16:03] So all asks for is password [16:04] (wifi password) [16:04] Have to say this is first attempt at Linux :) [16:05] Coraxyn, welcome :=) [16:05] <-nervous [16:05] ;) [16:05] what about ? [16:05] Linux [16:05] Toasting this machine === SuperL4g is now known as SuperLag [16:05] how would that happen ? :P [16:05] On OS X atm [16:05] Coraxyn: please focus on actual ubuntu issues [16:06] <- idiot :) [16:06] K [16:06] So fails when trying to connect to specific router [16:06] wrong password maybe ? [16:06] No [16:07] keyboard location stuff ? [16:07] maybe it is a router thingy, locked lease on the mac adress, router reset would help [16:07] Oh [16:07] Will try this [16:07] Will take some time [16:07] BRB [16:07] Coraxyn: please pastebin: uname -a && lsb_release -a && sudo lshw -C network [16:09] Lotus [16:09] Oops [16:09] lotuspsychje: will have to reboot this machine and come in on pad [16:26] Back [16:28] Lotuspsychje command again please [16:28] Coraxyn: pastebin: uname -a && lsb_release -a && sudo lshw -C network [16:30] No net from ubunto [16:30] Coraxyn: connect with a cable? [16:31] Wifi [16:31] Am on ipad atm [16:31] Coraxyn: without details, volunteers cant help you.. [16:32] Product: bcm4321 802.11/abgn [16:32] Logical name: wls4 [16:33] Driver version=6.30.223.271 [16:33] Anything else needed? [16:33] Coraxyn: kernel version? [16:35] Linux coraxyn-imac5.0.0.23-generic #24~18.04.1-ubuntu smp [16:35] Coraxyn: update your system please [16:36] How, no network [16:36] !uptodate | Coraxyn [16:36] Coraxyn: To ensure you have all the latest known patches and security updates for your ubuntu installation, please update with the following command: `sudo apt update && sudo apt upgrade`. See also !upgrades and !security; you may also need to run `apt full-upgrade`. [16:36] Coraxyn: connect with an ethernet cable [16:36] Router is on another floor === Grldfrdom is now known as Grldfrdom_ [16:37] Installed via thumb drive [16:37] Sorry [16:38] Can reinstall with latest non stable? [16:39] Coraxyn: you can try, but its more usefull to understand why your wifi doesnt connect first [16:40] Catch 22 [16:40] Coraxyn: try a terminal= journalctl -f and disconnect wifi and enable again [16:40] Coraxyn: then please tell the volunteers here in the channel wich errors you see [16:40] im bbl [16:41] Thanks [16:42] Whoa [16:43] Connection failrequest timeout [16:44] Dhcpdiscover on wls4 to 255.255.255.255 ??? [16:44] Hmm [16:46] Put in manual ip stuff [16:46] Worked === Coraxy is now known as Coraxyn [17:40] when my computer boots i just get a blinking underscore. I'm able to boot into windows using usb super grub and i'm also able to mount hdd linux from a live CD. How can i fix this ?? [17:43] maybe to say it simpler. When using super grub 2 live usb i can boot into any OS i want of my HDD. But when i normally start my PC i just get a blinking underscore. [17:43] Before in clonezilla live cd shell i had a MBR + GPT and i deleted the GPT and these problems started to appear [17:45] ph88: simply restore from the backup that you took just before you made destructive changes to disk geometry or partitions [17:45] don't have backup [17:45] oh [17:45] figured you might since you mentioned clonezilla [17:45] well i have one now from the files i care about .. because like i said i can just boot into my HDD without problem using USB super grub 2 [17:46] but i don't have an entire disk backup [17:46] actually i was trying to clone my entire disk ... then it said it couldn't because mixed MBR + GPT and it advised to deleted the GPT .. after which problems started [17:59] ph88: did you remove the GPT? [18:02] " i had a MBR + GPT " .. unlikely, you can only have one [18:08] pragmaticenigma, yes i did [18:09] OerHeks, clonezilla reported: This disk contains mismatched GPT and MBR partition [18:16] so what is the situation; you transferred back a MBR backup onto a gpt disk, or gpt backup on mbr disk? is this an UEFI machine? [18:18] i used gdisk, it reported mbr on patition 1 and GPT on partition 4 and i wiped the GPT ... that's it [18:18] uefi yes === nykanen is now known as AnF1fin [19:24] * independent !chk in #Canada [19:24] !chk in #Canada [19:24] independent: I am only a bot, please don't think I'm intelligent :) === gry_ is now known as gry [20:20] I bought a Logitech C922 Pro Stream, but it won't work on my fully updated ubuntu 19.04. Any idea why? I changed a few usb ports until it was detected (I can see it on lsusb) but I get this error from journalctl: https://paste.ubuntu.com/p/fDpCgGgxF3/ [20:20] Any pointers are apreciated... :) [20:35] hi [20:36] Is 16.04 affected by this CVE-2019-1563? [20:36] https://people.canonical.com/~ubuntu-security/cve/CVE-2019-1563 [20:37] "needed" -> yes [20:37] biberao: ^ [20:37] oh ok [20:37] what does it mean DNE? [20:37] please [20:38] "does not exist" [20:38] ah [20:39] so i upgraded because of a newer version of openssh [20:39] i.e. the given package does not exist in this ubuntu release [20:39] and now openssl is vulnerable:\ [20:39] i don't think openssh is affected by this, not directly anyways. [20:40] why did you need a newer openssh version? [20:40] and what did you upgrade from? [20:40] ...and to [20:41] 6.5 to 7.2 [20:41] i was having a problem with adding certain kex and ciphers [20:41] within the same ubuntu release? [20:42] no [20:42] 14.04 to 16.04 [20:42] i see so 14.04 is end of life anyways, unless you have ESM [20:42] ya [20:42] !ESM [20:42] Canonical offers paid extended security support for end-of-life LTS releases through the Ubuntu Advantage program. For more information, see https://ubuntu.com/esm . ESM is not an Ubuntu community offering; please direct questions about it to Canonical directly. [20:42] nope [20:42] i upgraded [20:42] so it was high time to upgrade it. [20:43] now you are running an ubuntu release which is currently affected by a (medium priority) security issue. this will likely be fixed soon. === im0nde_ is now known as im0nde [20:45] https://www.openssl.org/news/secadv/20190910.txt consider it to be of 'low severity' [20:45] hehe [20:47] so the difference between before your upgrade and now is that before your upgrade to 16.04 your system was most likely affected by this (and many other) security issue, and would not have received a security fix. now your system is affected by this issue (but not too many others) and will likely get a security fix. [20:48] true [20:48] so be happy and consider upgrading to 18.04. [20:48] should I? [20:48] :D [20:49] why? [20:49] i cannot answer this, don't know which older software versions you may depend on. [20:49] the system is 2days old [20:49] lol [20:49] its a lxc container [20:53] newer ubuntu releases come with newer software versions, which often provide more or improved functionality. this can be a good enough reason to upgrade. but ubuntu 16.04 LTS (with the default unity desktop or as a server) is supported until april 2021 so you can keep using it until (close to) then. [20:54] its server [21:08] tomreyn: going to try this https://demo.bigbluebutton.org/gl [22:26] hello! is it possible to block internet connection (not loopback interface) to a single process? [22:29] giaco: yes if the PID doesn't change [22:34] TJ-: Ok. How? [22:35] I was on the AppArmor path, but it smeels like too big tool for the job [22:35] I would accept also the quick dirty way [22:36] giaco: oh, I'm thinking of user not process! the 'owner' module ("-m owner --userid XXX") [22:37] giaco: owner can be used if the process has its own user account, which is how I handle such isolations [22:37] TJ-: I can create an ad-hoc user [22:37] giaco: indeed, that's how I do it [22:38] giaco: you can also create a net namespace and out the process in it, so it has no internet routing [22:38] s/out/put/ [22:39] Is there a way to tell ubuntu to jump ip depending on what user been signed in ? [22:39] TJ-: this is also a good idea, but it will connect to 127.0.0.1? [22:39] lets say the guest user is sign in. It would grab 10.0.0.12 [22:40] And if my user is sign in it would grab 10.0.0.13 [22:40] giaco: only inside the namespace... there is no connection to the host unless you create it [22:41] raidghost: you could do that with per-user Network Manager connections, with some unique DHCP tag being sent by the DHCP client so the DHCP server issues a different IP address based on it [22:42] hi :) are there situations (maybe Live CD casper CoW overlay?) where there could be a delay in file detection even locally (no network involved), i.e. program A lists a directory, B creates a file in it, A reads the dir again but could miss the new file? [22:43] TJ-: Diff to setup? [22:47] TJ-: oh dear, the namespace solution is complicated [22:48] actually it makes sense. Isolating the loopback interface is actually one of the main reason to use a network namespace [22:50] giaco: "ip netns add my-ns; ip netns exec my-ns mycommand" [22:51] raidghost: you'd have to ensure the DHCP server can be configured to do it; gateway/routers with web-interfaces might not be so easy to do that with [22:52] Thanks for the advice! i will check it out ;) [22:53] TJ-: mycommand would not reach a service running in root namespace [22:55] TJ-: would not even reach 127.0.0.1 [22:55] giaco: indeed, unless you enable it to [22:55] TJ-: is is possible by wiring up veth and stuff, but is quite long to do [22:56] TJ-: testing firejail [22:57] giaco: that's how you'd do it, add a veth pair, move one into your namespace, add IP addresses at each end [23:02] TJ-: same problem with firejail. Easy to isolate the process from network, difficult to just block access to Internet [23:02] hi guys [23:03] i have a USB flash driver that has Ubuntu Live Iso on it but since i installed VirtualBox i dont need the USB flash to boot ubuntu and i want to format it HOWEVER THE COMMAND df -h doesnt show the disk present what can i do to find that disk location [23:09] giaco: seems easy to me, assuming your netns and a veth0 in the host side "iptables -I FORWARD -i veth0 -d 0.0.0.0/0 -j REJECT" [23:10] aleksandrdvorkin, Maybe you have to mount the drive manually. [23:10] giaco: systemd's IPAddressDeny/IPAddressAllow stuff comes to mind, and might be useful? [23:10]