[00:32] Hi, I have a laptop with external monitors. Everytime my computer goes to sleep all the windows just pile up in one area and I have to reposition them all again. [00:32] It actually stopped happening for a while but now it's back and it's a big pain in the butt [00:40] iffraff, when you say "to sleep" do you mean the monitors shut off or something else? [00:41] well, yes, good question, I think it's when then monitors shut off no matter how breifly. [00:42] So if I step away for 15-20 minutes I have to log back in and the windows are all pooched. [00:45] iffraff, I can't find anything that would point to that behavior. I have the same issue with other operating systems though, so I know it's not unique to Ubuntu or Gnome [00:46] rather, it seems it's not a priority to restore window positions have power saving [00:47] hmmm, so perhaps I just need to find a script that will automatically position my windows for me. Although I have two different instances of chrome in different parts of the screen so that wouldn't work there. [00:48] I missed the original question, but surely window positions shouldn't change when the computer sleeps? [00:49] akk: Hi, I have a laptop with external monitors. Everytime my computer goes to sleep all the windows just pile up in one area and I have to reposition them all again. [00:53] akk, What I believe is happening is when the power save shuts down the monitor, something is thinking the monitor is removed from the setup, and moves all the windows to the remaining desktop [00:53] iffraff: That's really strange. It shouldn't do that. Default ubuntu desktop? [00:53] hi friends! Has anyone had any luck pairing apple airpods to ubuntu 18.04? [00:53] iffraff, are you using Wayland or X.org? [00:53] Yeah, pragmaticenigma, that's what it sounds like. The windows will all squish together if you actually unplug from the monitor. [00:53] I know I see it happen a lot with monitors connected via display port [00:54] But normally that shouldn't happen from just turning the monitor off, I do that all the time. [00:54] less with VGA/DVI/HDMI [00:54] (granted I don't run the default desktop) [00:55] My ext monitor is on an HDMI coming from a usb-c dock, but to the computer it shows up as DP-1 so I guess X thinks it's a displayport. [00:55] a) I am on vanilla ubuntu 18.04 b) I'm not sure wayland vs x.org. [00:56] oh and c I'm using all hdmi. and d) I am using a using an external gpu but this was happening when I only had one external monitor and using the laptop gput [00:56] gpu rather [01:27] iffraff, I could see that the external GPU would cause this kind of behavior... but if it was doing it even locally connected to the computer that seems strange. as far as wayland versus X.org... that's usually something selected when you login [01:28] iffraff, this command may work: "echo $XDG_SESSION_TYPE" when run from a terminal window inside your GUI session [01:29] it says x11 [01:29] asphyxia, you might find this help thread useful: https://askubuntu.com/a/1063582 === guiverc2 is now known as guiverc === Leion1 is now known as Leion === Leion1 is now known as Leion === Leion1 is now known as Leion [02:21] Microsoft Edge is officially coming to Linux soon https://www.windowslatest.com/2019/11/06/microsoft-edge-is-officially-coming-to-linux-soon/ [02:23] !discuss | Skipp_OSX [02:23] Skipp_OSX: Want to talk about Ubuntu, but don't have a support question? /join #ubuntu-discuss for non-support Ubuntu discussion, or try #ubuntu-offtopic for general chat. Thanks! [02:23] oh sry === nt0__ is now known as nt0 === zbenjamin_ is now known as zbenjamin [02:51] Anyone familiar with PIP error messages? I installed PIP, tried to install and use YouTube-DL.. got error.. in the process now PIP will not work either [02:52] Were you installing it in a virtualenv, or as --user, or as root? [02:53] not super familiar with Ubuntu yet.. I did sudo apt install python3-pip [02:53] I then used pip to install youtube-dl [02:54] youtube-dl was responsive, but wouldn't download any of my playlist [02:54] It's the second one I was asking about, how did you use pip to install youtube-dl? [02:54] so I tried to re-install it and that's when pip started acting up [02:54] sorry I did [02:55] And what were the error messages? (Don't paste here if they're long, use the pastebin in the channel topic) [02:55] sudo apt-get install youtube-dl then did sudo pip install --upgrade youtube-dl [02:55] original message is that the pip directory is not owned by current user [02:55] so I did chown [02:55] on pip and pip/http [02:55] I'm curious, did you try the ubuntu version of youtube-dl first? apt install youtube-dl [02:56] This sounds like a mess. pip via sudo is not generally recommended, maybe because it tends to lead to problems like this [02:56] though that particular one sounds strange if you used sudo for both the initial pip install and the later one. [02:57] I just googled how to install [02:59] The curl thing on http://ytdl-org.github.io/youtube-dl/download.html usually works for me [02:59] well geez [02:59] curl didn't work for me [02:59] but I always try the built-in one from apt first [02:59] but anyway [02:59] I just did what you said above [02:59] sudo apt install youtube-dl and it's working [02:59] and only do the newer one if the apt one doesn't work [02:59] yay! [03:00] however, I'm not sure what to do with the pip errors I was getting earlier, in case I ever want to use pip again [03:00] or get rid of pip somehow [03:00] I'd try pip uninstall youtube-dl [03:00] (with sudo) [03:00] but it might not work -- sudo pip is notorious for messing things up, and the python community always recommends against it [03:01] though a lot of people still do it, and I do see that the youtube-dl page suggests it after their first suggestion of curl [03:01] ok [03:01] I got this used laptop, formatted and installed only Ubuntu as [03:01] I have an arcade game that uses linux [03:01] and I'm hacking the graphics and music in it [03:02] It's also possible that pip uninstall will mess up the youtube-dl you got from apt [03:02] so if you do the uninstall and youtube-dl no longer works, try sudo apt install --reinstall youtube-dl [03:02] I removed the music in game already (it was 1950's music) and I put in punk music and some of my friends band [03:02] That's one problem with sudo pip, it can overwrite system-installed files. [03:03] ok [03:03] so far everything else is working fine.. Gimp, Audacity, and I haven't tried ffmpeg yet [03:03] Those should all be safe from any pip or youtube-dl changes. [03:04] yeah those were easy to install [03:04] It's unfortunate the way pip is set up -- they make it really confusing and doing the wrong thing is easier than doing the recommended thing [03:04] but don't ever try to tell people on #python that, you'll get flamed to a crisp, they're very defensive about pip. [03:05] (The recommended way is virtualenv, and that does work very well once you figure out how to set it up) [03:05] should I update python? [03:05] I get message 2.7 is going to be outdated in 2020 === [1]MrMobius is now known as MrMobius [03:09] You can have both python2 and python3 at the same time. [03:09] k [03:10] I write most of my stuff in python3, but I keep all the python2 stuff around too, eventually it'll fade away. [03:11] Anyway, thanks for the help! [03:11] Ubuntu has separate packages for most libraries, e.g. there's python-pip and python3-pip [03:11] the python- version is python2 [03:11] You're welcome. [03:11] Glad you got it working! === the_ant1 is now known as the_ant === the_ant1 is now known as the_ant [03:55] Is there an *official* guide to installing/importing a root CA in Ubuntu? [05:27] Hello. Is there a list of Linux kernels and when they became available in Ubuntu's main repositories? I want to downgrade my kernel, but I am not sure which version I should downgrade to. [05:31] chris062689: downgrading is not supported, for official kernels see !mainline [05:32] one can boot in a previous kernel, but why do you need that? [05:32] btw on launchpad you find all released and wiped kernels for your ubuntu version, and dates === The_Milkman1 is now known as The_Milkman [08:17] If I take the AWS RDS root certificate (https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem), and convert it to .crt, why is the .crt so much smaller - 65k vs 1k? [08:18] What I ran is `openssl x509 -outform der -in rds-combined-ca-bundle.pem -out rds-combined-ca-bundle.crt` [08:18] What am I missing/ [08:32] k_sze: DER is a binary format, PEM is a base64 encoded variant of it with additional header and footer. but the main reason can be that only one of the certificates of the bundle was converted. [08:36] about the latter theory (certificates from bundle not coverted) you can compare the outputs of openssl x509 -in rds-combined-ca-bundle.pem -inform pem -text -noout vs openssl x509 -in rds-combined-ca-bundle.crt -inform der -text -noout [08:42] tomreyn, odd, no difference. [08:44] which is strange, given that the .pem *should* just be a base64 encoding of the .crt. [08:45] 65k vs 1k makes no sense. [08:49] chattr command does not let me protect directory on USB device says [08:52] Hello. Any idea why systemd-timesyncd refuses to sync (to ntp.ubuntu.com) if system time is 2050-11-06 (for some reason)? I get "Nov 6 19:06:17 ferschl systemd-timesyncd[864]: Timed out waiting for reply from 91.189.89.198:123 (ntp.ubuntu.com)." [08:52] missing \ in path? [08:54] flog: I feel that question lacks some context [08:54] k_sze: it only converts the first certificate. [08:55] I'm looking for a place to talk about microk8s and the operating systems to use with it. Is #ubuntu the place or the microk8s folks hang somehwere else? [08:55] geirha: flog was answering to my question [08:55] tomreyn, and so the `openssl x509 -in rds-combined-ca-bundle.pem -inform pem -text -noout` only outputted the first cert in the file anyway? [08:56] k_sze: i would think so, yes [08:57] I don't see ~/.ssh/id_rsa.pub I want to add my key to git. HOw can I get it? [08:57] See? My hatred towards openssl's UX is justified. [08:57] I have no idea how to inspect, in a human-readable manner, a .PEM file that contains more than one cert. [08:58] was the command in response it doesn't show <\>. ins response I get [08:59] k_sze: you may need to split the certificates into separate files, then feed them into openssl one by one. but i'm not certain on this, better ask in #openssl or maybe ##security or ##crypto [09:07] What is the leanest deployment that is capable of running the microk8s snap? [09:08] Ubuntu Server 18.04 seems overkill if all I need is to run a snap. Are there better ways I've overlooked? [09:08] Sakara: this is not the right place. maybe ask in #ubuntu-server, but more likely there's yet a different place you can find using !alis [09:08] !alis [09:08] Alis is an IRC service to help you find channels. For help on using it, see "/msg Alis help list" or ask in #freenode. Example usage: "/msg Alis list http" [09:09] thanks tomreyn I'll check in there. [09:09] maybe 'ubuntu core' is what you're looking for in an OS. [09:10] I've been trying to find a download link for 'ubuntu core' to boot a small vm tomreyn and I can't find anything. I think ubuntu core is more focused at people make embedded things. [09:10] k_sze: csplit -z -f rds-combined-ca-bundle -b %02d.pem rds-combined-ca-bundle.pem '/^-----BEGIN CERTIFICATE-----$/' '{*}' [09:11] k_sze: ...would split the bundle up into separate files for you. [09:12] Sakara: yes, ubuntu core targets IOS. [09:12] * IOT [09:12] tomreyn, thanks! [09:12] Trying to find a way to run the microk8s snap with as little other software running around it is a little tougher than I expected. [09:13] Sakara: this is still the wrong channel [09:13] yup [09:17] Intelo: 1) Did you expect there to be a key? 2) What does "adding to git" mean here? [09:31] Any idea where the session selector went in Eoan? [09:31] I can not longer log into i3 [09:31] no* [10:13] hi, friends. [10:14] I have a CentOS 7 Server with two nics. (eth0 and eth1), the traffic of eth0 input traffic I want to roll-out to eth1. [10:14] I have a Ubuntu 16.04 Server with two nics. (eth0 and eth1), the traffic of eth0 input traffic I want to roll-out to eth1. [10:21] ldl: are they on the same network? === the_ant1 is now known as the_ant [10:34] Anyone else noticed that 19.10's update-grub and os-prober are generating debug output into the journal ? [10:38] seems we how have to specifically set OS_PROBER_DISABLE_DEBUG to prevent it [10:44] but not clear where, it isn't passed on from /tc/default/grub === Leion1 is now known as Leion === VegetarianFalcon is now known as OppressedByVegan === shakahl_ is now known as shakahl === OppressedByVegan is now known as AngryBird [11:43] my bluetooth stopped working again [11:44] "a2dp-sink profile connect failed for XX:XX:XX:XX:XX:XX: Protocol not available" [11:49] Hi :) === The_Milkman1 is now known as The_Milkman === enko-h is now known as enko [12:01] * mgedmin gave up and plugged in a cable === AngryBird is now known as VegetarianFalcon === PowerTower_121 is now known as PowerTower_120 === SIa_ is now known as SIa === SIa_ is now known as SIa [13:05] hi [13:05] how do I make the live system *not* mount drives automatically? [13:06] and how do I switch the terminal keyboard layout to a different one than english? [13:07] terminal as in linux console you get on ctrl+alt+f3 etc? [13:16] mgedmin: emulator [13:18] yeet [13:19] yo [13:22] the keyboard layout in gnome-terminal is the same as elsewhere in the desktop and can be changed from System Preferences -> Region and language -> Input sources [13:22] hi any compatible msword in ubuntu? [13:22] help; ubuntu has gone crazy on me and it will not launch X windows ; nor will it upgrade to latest kernel without killing itself [13:22] should i just format? [13:23] btw: i used this program called “TASKSEL” and it royally destroyed my fresh stock ubuntu install in a seconds! [13:23] great job UBUNTU! [13:23] hi any compatible msword in ubuntu? [13:24] TASKSEL should BE BANNED! [13:24] why is this even allowed to exist?!!?! [13:24] enrio: libreoffice not good enough? [13:24] hello all [13:24] should be renamed to: DIEUBUNTU [13:24] Di Eubuntu? [13:24] libreoffice is more like openoffice [13:25] tasksel will kill ubuntu in seconds [13:25] see for yourself: apt install tasksel and start crying [13:25] how can one program do so much damage?! [13:25] what did you do with it? remove core desktop components? [13:25] I thought tasksel was included by default in ubuntu? [13:25] i told it to uninstall CUPS [13:25] it decided to uninstall EVERYTHING [13:26] how may I make a access point throught usb , dhcp server ? [13:26] tasksel is included .. but is obviously so buggy it should be destroyed [13:26] now tasksel will not even run any more [13:26] Works for me (tm) [13:26] machine will not boot into X windows [13:26] Just checked [13:27] machine will not upgrade to latest kernel without dying (initrd is half the size.. missing modules/etc) [13:27] why?! [13:27] i really wish i knew how to fix this problem... [13:27] reinstall? [13:27] everything i do seems to make it worse [13:27] never had this problem before with other flavors of linux [13:27] You said it was a new install, so not much, if anything will be lost [13:27] yeah.. i just never had a machine kill itself using a built in program [13:28] .e.g tasksel [13:28] that is a very dangerous program! [13:28] first and last time i will use for sure [13:28] anything where you need sudo can be dangerous [13:28] thanks Ecko [13:28] no duh [13:28] rm -rf can kill your ubuntu just as well [13:28] no duh [13:28] but it's less obvious that removing cups might mess something up [13:28] so tasksel must have a script called rm -rf ? eh? [13:29] didnt know [13:29] that's worth a bug report [13:29] it’s already been reported [13:29] but never fixed [13:29] hence the anger [13:29] do you have a bug link? [13:29] sure [13:30] do you want to share it with us? [13:30] I see three possibilities in the (surprisingly short) tasksel bug list [13:31] maybe mine will be a unique corner case #4 [13:32] That's like winning the lottery! [13:32] You should be happy :) [13:32] no? [13:32] more like winning Russian roulette [13:32] !tasksel [13:32] Tasksel is a Debian/Ubuntu tool that installs multiple related packages as a co-ordinated "task" onto your system, see https://help.ubuntu.com/community/Tasksel for more information. Use tasksel only to INSTALL tasks, not to remove them. It will remove every package listed within the removed task! see https://launchpad.net/bugs/574287 [13:34] heh, I skipped that one because of an unclear title ("when tasks overlap", what does that even mean) [13:34] but bugs 1338223 and 1779645 appear to be duplicates [13:34] bug 1779645 in tasksel (Ubuntu) "Critical bug in tasksel: `tasksel remove task-name` removes whole system " [Undecided,Confirmed] https://launchpad.net/bugs/1779645 [13:34] bug 1338223 in tasksel (Ubuntu) "Tasksel has deleted all my data!" [Undecided,Confirmed] https://launchpad.net/bugs/1338223 [13:35] upstream bug claims this was fixed back in 2012?! [13:36] that does not appear to be correct [13:37] thanks for the info: [13:37] i guess it should probably just be removed, there's still apt ^task [13:37] i spent all night trying to get things back to normal but without luck [13:37] Zilly, you might need to start in Recovery (or login in tty if working) and reinstall your ubuntu-desktop package [13:37] ioria: thanks - i tried that already [13:37] Zilly, what command exactly ? === Leion1 is now known as Leion [13:38] sudo apt install -y ubuntu-desktop [13:38] note that tasksel also has a --test mode [13:38] tomreyn: cool - thanks for the dryrun info [13:38] Zilly, apt install --reinstall ubuntu-desktop^ [13:39] Zilly, note the caret ^ [13:39] what does the caret do? [13:40] it operates on tasks, like tasksel [13:40] but apt always prompts by default [13:40] Zilly, call set of packages [13:40] k [13:41] hmm E: Couldn't find task 'cups' [13:42] Zilly: do you remember which command you ran there which caused the problems? [13:42] it's probably called print-server or something like that [13:42] tomreyn: i actually used the menu (gasp) [13:42] i deselected “CUPS” and began removing my entire machine and stopped [13:42] ah right there's print-server [13:43] when it got to the my RUNNING kernel [13:43] and said; do you want me to shoot myself or not? [13:43] i said no!.. now the kernel is stuck and will not ugprade. [13:43] it wanted to uninstall the running kernel package [13:44] things went very downhill quickly after that [13:45] ioria: apt install --reinstall ubuntu-desktop^ <— still running…HUGE [13:45] on package 1060... [13:46] uninstalling the running kernel image is not strictly a problem, not if you have others installed and can thus still boot. but i see what you mean, it's not something the average user wants to do and tasksel is a bit of a dangerous tool and it doesn't really warn about this. [13:47] now when i ‘try’ to install the lastest kernel ; it does so , but the new kernel is broken (missing many modules/etc in initrd) so the system will not boot up all the way [13:47] i have never seen anything like that before in my life [13:48] surprise learning experience [13:49] once you have the system restored, sudo update-initramfs -k all should rebuild the initrd images, and then hopefully they won't be missing stuff any more [13:50] make that sudo update-initramfs -u -k all [13:50] (ideally apt hooks will run that for you automatically) [13:50] (usually they do that more often than you'd like...) [13:51] can you tell my why /lib/modules/ is half the size of current version (latest - 1) ? [13:51] because how can the initrd be the right size if /lib/modules is incomplete? [13:51] i’ve never seen this kind of behavior before [13:51] is this after you finished installation? [13:52] this was last night [13:52] i’m still running apt install --reinstall ubuntu-desktop^ [13:52] there are several packages that install stuff into /lib/modules, e.g. linux-headers-5.3.0-19-generic, linux-modules-extra-5.3.0-19-generic, linux-modules-5.3.0-19-generic === Leion1 is now known as Leion [13:52] Zilly, before the initramfs rebuilt, i suggest you run : apt install --reinstall linux-generic [13:52] possibly you still have linux-modules but not linux-modules-extra, or something similar [13:52] yeah; i manually installed all those (5.3.0-20) tho. [13:52] i’m on 5.3.0-19 [13:52] my /lib/modules/5.3.0-19-generic is 260M [13:53] same [13:54] k. just ran: sudo update-initramfs -u -k all [13:54] my previous kernel, /lib/modules/5.3.0-13-generic, is 259M [13:54] if you still see a 50% size difference, I'd like to hear more [13:55] i saw 50% size when instlaling 5.3.0-20 [13:55] .e.g: apt install -y linux-headers-5.3.0-19-generic, linux-modules-extra-5.3.0-19-generic, linux-modules-5.3.0-19-generic [13:55] err . s/19/20/g/ [13:55] rebooting now [13:55] wait, is there a new kernel already? augh [13:55] well a reboot will fix my bluetooh [13:56] ok: i’m kind of back where i started [13:57] machine will boot into 5.3.0-19; i see the a ‘new’ logo (green circle w/ small triangles and 4 progress dots?) [13:57] but that is all that happens [13:58] now the screen is black w/ a blinking cursor [13:58] about a minute later (now).. i am able to switch to a virtual console [13:58] and login via console. (no X) [13:58] any ideas? [13:59] is your system configured to depend on / expect to have out of tree modules? [13:59] i honestly don’t know [13:59] which ubuntu version is this? [14:00] 19.10 [14:00] do you have proprietary drivers installed? [14:00] nvidia [14:00] see thats out of tree [14:00] k [14:01] chances are those were removed, too [14:01] ubuntu-drivers install [14:02] how do i get those back? [14:02] ubuntu-drivers install [14:02] sorry; didnt’ realize that was a command :) [14:03] tomreyn: thank you for your patience [14:03] Howdy all [14:03] you're welcome, Zilly [14:05] tomreyn: i have a GUI login screen [14:05] you are an amazing person so far [14:06] i didn't write this software ;) [14:06] hahaha [14:06] now if you can get me to the latest kernel .. heheh [14:06] i am somehow stuck [14:07] can you run this and post the url it returns here? sudo /bin/true && cat &>/tmp/aptlog < <(sudo apt-get -y update 2>&1; apt-cache policy 2>&1; sudo apt-get -syV full-upgrade 2>&1;); nc termbin.com 9999 it doesn't modify anything about your system, just gathers info on apt [14:08] one sec [14:09] where on earth did you find a linux-image-5.3.0-20-generic, Zilly? [14:09] it showed up in the repo last night [14:09] but now it seems to be ‘hidden’ ? [14:09] https://packages.ubuntu.com/search?keywords=linux-image-5.3.0-20-generic [14:09] doesn't see it [14:10] !info linux-image-5.3.0-20-generic [14:10] Package linux-image-5.3.0-20-generic does not exist in eoan [14:10] probably in -proposed then [14:11] https://termbin.com/ht4v [14:13] weird. it sure did update to it last night [14:13] but now it’s so confused about it’s existence [14:13] this is a system76 machine btw [14:14] keep getting this when trying to install their package(s): linux-system76 : Depends: linux-generic (= 5.3.0-20.21+system76~1572304854~19.10~8caa3e6~dev) but 5.3.0.19.22 is to be installed [14:14] Zilly: okay, this generally looks fine. i don't know whether you should be using http://ppa.launchpad.net/system76-dev/stable/ubuntu (which is where the -20 kernel comes from) but i assume you can tell [14:14] the above error is what perplexes me [14:15] so that's an issue with their PPA [14:16] ok [14:16] it came installed; and i cant seem to reinstall it (contains firmwware packages, et al) [14:16] i’m tempted to just install PopOS (blasphemy!) ha [14:17] now this is why I no longer complain that vendors don't sell me laptops with linux preinstalled [14:17] I want my hardware to work with stock ubuntu images damnit [14:18] hehe [14:18] it’s working though [14:18] you can set up apt pinning so that you'll only install packes from this PPA you explicitly choose to [14:19] is that certificate pinning ? [14:19] or just generic pinning? [14:19] apt version pinning [14:19] k [14:19] i think the 'proble' you're seeing is the grey lines on the "overview of published packages" here: https://launchpad.net/~system76-dev/+archive/ubuntu/stable?field.series_filter=eoan [14:19] !pinning [14:19] pinning is an advanced feature that APT can use to prefer particular packages over others. See https://help.ubuntu.com/community/PinningHowto [14:19] terrible UX [14:21] pinning is a way to make things worse unless you're careful [14:21] i see [14:22] i believe this is starting to make more sense now [14:22] i do really appreciate all the help! [14:22] you guys are really underrated [14:24] thanks for your appreciation. :) === Grayson_ is now known as Grayson [14:52] I booted into revovery mode and have network connection running with dhclient eno1. However, there is no DNS service yet. How do I get nam resolution? [14:52] Entering nameserver 8.8.8.8 to /etc/resolv.conf doesn't help; i get the message its not a file [14:58] dbacc: By default, DNS resolution is managed by systemd-resolved ... The resolve.conf file is no longer being used unless you have purposefully changed your network settings [14:58] dbacc: that's a symlink which is probably dangling right now [14:59] join #centos === musician20004 is now known as musician2000 [15:06] I have a tomcat9 app that gives an error about not being able to write to a specific directory. I have ensured the directory has write permissions for the tomcat user, and can successfully touch a file in the directory as that user. [15:06] I have also tried making the directory world-writable with chmod 777, but still get the error. [15:06] What's weird is that if I configure the tomcat app to use /tmp, it has no problem. What is the difference between a world-writable directory and /tmp? [15:07] I'm also not finding anything in kern.log that would indicate any Apparmor denies [15:07] hi all [15:07] g3poandlsl: /tmp as a special purpose in the file system and allows anyone to write there [15:08] pragmaticenigma, understood, but how is that any different from a chmod 777 directory? [15:09] g3poandlsl: I believe /tmp is hard coded to have exemptions. I'd have to research that to know for sure [15:09] g3poandlsl: Can the application touch or create the file? Purhaps tomcat is looking for the folder/file to be owned by the tomcast process [15:09] g3poandlsl: Where are you trying to write said file from tomcat? [15:10] g3poandlsl: Do you have something like selinux or apparmor running? [15:10] The directory is owned by tomcat. If I do a sudo -u tomcat touch testfile, it successfully creates the file as the tomcat user [15:11] Pricey, no SELinux, but apparmor is running. Again, I checked kern.log and found no denies for the tomcat service or that directory [15:12] g3poandlsl: Can you paste the error? [15:12] g3poandlsl: Sorry, missed the part about apparmor earlier - do you see other denies in the log you're looking at? [15:13] [main] ERROR o.x.e.i.ServletEnvironment - Configured permanent directory [/var/lib/xwiki/data] is not writable. [15:13] g3poandlsl: Does it have access to list /ar/lib/xwiki ? [15:14] There are other denies for profile="/usr/bin/man", different PID than tomcat [15:15] drwxr-xr-x 2 tomcat tomcat 4096 Nov 6 08:36 data [15:15] g3poandlsl: What about on /var/lib/xwiki ? [15:16] sorry, /var/lib/xwiki is drwxr-xr-x 4 root root 4096 Nov 6 12:00 . [15:16] g3poandlsl: ps -ef | grep tomcat ---- it's definitely running as the tomcat user? [15:18] g3poandlsl: xwiki either needs to be owned by tomcat, or a member of the root group and group writeable added to the /var/lib/xwiki directory ... [15:18] *or tomcat a member of the root group [15:18] tomcat 25753 1 99 10:17 ? 00:00:39 /usr/lib/jvm/... [15:19] Huh, I'm stumped. [15:20] I imagine adding the tomcat user to the root group might allow the app to write to the directory, but I don't consider that safe for production [15:20] g3poandlsl: Are there existing files not owned by tomcat in that directory? [15:20] g3poandlsl: then change the owner/group of the /var/lib/xwiki to tomcat [15:21] g3poandlsl: find /var/lib/xwiki/data \! -user tomcat -print [15:21] Pricey, the directory is empty [15:21] g3poandlsl: The output of that command is empty? [15:21] g3poandlsl: Nothing hidden etc. ? [15:21] pragmaticenigma, I have tried that and still get the error [15:22] g3poandlsl: Did you applie it recursively? [15:22] pragmaticenigma: I wish I thought of that. [15:22] Pricey, find returns empty output, so does ls -lha /var/lib/xwiki/data [15:23] pragmaticenigma, yes, with chown -R tomcat:tomcat /var/lib/xwiki [15:23] g3poandlsl: I give in. Let everyone know if you figure it out? https://forum.xwiki.org/t/permanent-directory-is-ignored-and-data-is-in-tomcat-work-directory/4095/7 [15:23] Pricey, you found my post :) [15:23] Thanks for the help [15:26] g3poandlsl: Ouch :-) [15:26] Sorry! [15:27]