[01:09] <urgodfather> hello, im banging my head in on configuring a remote dedicated server new nic. i only have kvm access and maint. mode will not work. i can confirm that there is in fact a netplan yaml but i cannot for the life of me get it to initialize on boot. it was incorrect, so i have updated with the correct info using bash from the kernel. would anyone be
[01:09] <urgodfather> willing help me nudge this along?
[01:19] <compdoc> this looks interesting:  http://www.yamllint.com/
[01:20] <compdoc> has the interface name changed?
[01:23] <urgodfather> yes
[01:24] <urgodfather> i think (?)
[01:24] <urgodfather> lol
[01:24] <urgodfather> not to mention its a german keyboard in kvm
[01:25] <sarnold> warum sie haben es kaputtmachen?
[01:28] <compdoc> maybe:  sudo netplan try
[01:28] <urgodfather> from kernel?
[02:29] <Wally> I'm looking at the logs for Ubuntu, whenever I attempt to login with an AD user it spits out "Jan 22 13:28:45 ubuntu systemd-resolved[539]: Server returned error NXDOMAIN, mitigating potential DNS violation DVE-2018-0001, retrying transaction with reduced feature level UDP." I'm pretty sure this is why tis not working, any ideas would be appreciated
[02:31] <Wally> Pretty sure it's a DNS issue -_-
[02:32] <sarnold> Wally: this discussion may help you understand it better https://github.com/systemd/systemd/pull/8608
[02:34] <Wally> ah
[05:27] <zxvff> Hi all. I am having a difficult time migrating a server to a new ubuntu instance. it's an ubuntu server but apache2 is running from /etc/apache-sp. How do I update my systemd script to use the /etc/apache-sp locatio instead of /etc/apache2?
[05:27] <zxvff> I can't find the location of the init script that runs the command to start apache
[07:24] <lordievader> Good morning
[07:25] <lordievader> zxvff: You want an systemd override (systemctl edit apache2.service), else your edit will be overwritten on the next update. That said, why not migrate your apache-sp to /etc/apache2?
[07:33] <samba35> i have setup basic bridge with ovs-vsctl add br and ovs-vsctl add-port to my nic
[07:34] <samba35> and i have guest on kvm ,now how do i assing ip address to guest from host
[07:54] <lordievader> DHCP?
[07:55] <samba35> yes try but its now working
[07:55] <samba35> or i am doing some thing wrong
[07:56] <lordievader> Firewall dropping the requests/answers?
[07:58] <samba35> no firewall no appliation firewall
[07:59] <lordievader> Start tcpdumping then
[07:59] <samba35> ok
[07:59] <samba35> sorry but i have very little or equal to no idea on how to read output
[08:01] <lordievader> What you are looking for is if the server sees the dhcp request (and answers it), and on the client to see if the answer is being received.
[08:02] <samba35> ok
[08:02] <samba35> let me give try
[08:03] <samba35> will also refresh packages
[08:04] <samba35> brb
[10:05] <weedmic> If anyone needs to know how to manipulate both icon size and precise placement of icons in plasma5 kde, let me know.  I have it all figured out now.
[10:06] <lotuspsychje> weedmic: hows that related to ubuntu server please?
[10:06] <weedmic> some use de = plasma
[10:07] <lotuspsychje> but its not a server specific question
[10:13] <lotuspsychje> weedmic: could try #plasma ?
[10:53] <lordievader> More suited for #kubuntu
[13:19] <coreycb> sahid: re: networkx ussuri backport, yes it seems more and more packages are needing 2.x. I've been trying to patch packages back to 1.x in ca-patches but it's getting more likely that we need to backport networkx
[13:19] <coreycb> sahid: I started trying to but it gets very involved
[13:21] <bipul> I'm looking for a help regarding X forwarding on ssh inside Ubuntu server.
[13:23] <sahid> coreycb: i was considering doing a revert of dc6495cfa1c8e1dc95bad554a55f0b4e8e360abe
[13:23] <coreycb> sahid: in taskflow?
[13:23] <sahid> yes
[13:24] <sahid> i mean condiring prepare a patch for ca-patches that to revert it
[13:25] <coreycb> sahid: let's do that for now and carry it in ca-patches
[14:03] <coreycb> sahid: horizon's uploaded, thank you
[14:04] <sahid> coreycb: ack
[14:33] <coreycb> sahid: looks like we'll also need a ca-patch to six.patch to s/python2/python in d/control
[16:16] <jayjo> is it possible to set up EITHER a yubikey or Google Authenticator two-factor auth for ssh on ubuntu, but not both?
[16:16] <jayjo> Similar to how on google (for example) you can register multiple second factors in case one becomes unavailable, but you don't have to use each of them on each login
[16:39] <pragmaticenigma> jayjo: This thread seems to be close to achieving what you're looking for... it might start you down the right path? https://serverfault.com/a/222655
[16:40] <pragmaticenigma> I haven't heard of the ability to choose one or the other on login... you'd have to have some way to prompt the user which they're choosing
[16:48] <lordcirth_> jayjo, I'm pretty sure in PAM you could set it to prompt for both, but only require one to pass. That's pretty clunky though.
[16:49] <pragmaticenigma> lordcirth_: How would PAM be able to identify which one is being used though?
[16:49] <lordcirth_> pragmaticenigma, it prompts for one, and then the other, and in one you just press enter and submit emptystring
[16:50] <lordcirth_> And it ORs then
[16:50] <pragmaticenigma> ah, simple solution :-)
[16:50] <lordcirth_> Very kludgy
[16:50] <pragmaticenigma> At the moment, I haven't seen anything better. Except to ask users on setup which they prefer and setup the user to only use that option
[16:56] <lordcirth_> It *might* be possible to present one text prompt, and run it past both methods
[16:57] <lordcirth_> For example, Yubikey auth works if you type your password, then your yubikey, or yubikey -> newline -> password
[17:27] <jayjo> If I were to allow users to decide which one they prefer, would there be any way to bypass the 'preferred' one if it became misplaced?
[17:27] <jayjo> Thanks for the resources, definitely on the right track
[17:42] <pragmaticenigma> I'm sure anything is possible
[18:56] <jayjo> I found this feature just searching through ubuntu docs: https://help.ubuntu.com/community/SSO/FAQs/2FA
[18:57] <jayjo> is this for ubuntu in general or just for login.ubuntu.com ? It does mention "You can add multiple 2fa devices to your account; the system will auto-detect which one you use at each login. We recommend having at least two devices associated with your account so you will have a backup in case the main device fails or locks you out. It's also required to have a "printable backup codes" device in case
[18:57] <jayjo> all your electronic devices become unavailable.
[18:59] <sarnold> jayjo: all the services that use the canonical-supplied 2fa mechanism (which isn't entirely the same as all canonical services that have logins, I think I've seen third-party projects integrating with the login.ubuntu.com single-signon before..)
[20:44] <teward> jayjo: anything that uses login.u.c and its SSO system is bound to that
[20:44] <teward> some third party services utilize it as well, but that ONLY applies to login.u.c and the SSO system that goes with it
[20:45] <teward> those statements don't apply to other SSO systems/providers which don't integrate with Canonical's SSO.