[07:15] good morning [07:17] mcseccne1: which terminal to use is up to personal preference, i like roxterm, xfce4-terminal and rxvt. you should be able to run chromium. what do you mean by 'lack of graphics' if you are running i3 and xterm? [07:20] urxvt, "rxvt-unicode" is good. [07:20] Hey. [07:21] yeah, that is actually what i meant, mea culpa [07:21] Ok :) [07:22] Can't find roxterm on Ubuntu 18.04, is it associated to the rox filer? [07:22] I also used Aterm and Eterm back in the days like 15 years ago... [07:23] same project [07:23] there's a ppa, iirc [07:23] Good morning [07:23] Ok. [08:17] ah ok thank you Ducasse i didnt know if i3 and xterm were enough to show chromium from the same installer as a desktop (non headless) [08:31] mcseccne1: it is, you should be fine [08:31] ok thanks ill give it a shot [11:20] good afternoon [11:41] TJ-: alot of intel related bugs on 5.0 and higher up [11:41] TJ-: got currently 3 bugs on 5.4 20.04 xorg crash, kernel oops, and dock ontop bugs [11:42] wanna see the ID's? [11:42] The difference here is there is no trace in logs, no crashes reported, nothing! [11:43] hmmz [11:43] and it's across hardware GPU types [11:44] one report in +1 yesterday bug #1861590 [11:44] bug 1861590 in linux-signed-5.4 (Ubuntu) "Intel GPU hangs constantly under load. After closing offending application, all GPU intensive programs run degraded" [Undecided,New] https://launchpad.net/bugs/1861590 [11:45] my xorg bug, duped: bug #1854147 [11:45] bug 1853266 in xorg-server (Ubuntu) "duplicate for #1854147 Xorg/Xwayland segfaults in OsLookupColor() from funlockfile() from glamor_get_pixmap_texture() from glamor_create_gc()" [Undecided,Confirmed] https://launchpad.net/bugs/1853266 [11:46] and kernels oops due to iwlwifi on 5.3: bug #1854146 [11:46] bug 1854146 in linux (Ubuntu) "Kernel oops on 5.3.0-18" [Undecided,Confirmed] https://launchpad.net/bugs/1854146 [13:32] !crosspost is Please don't ask the same question in multiple Ubuntu channels at the same time. If you asked on one channel and wish to ask elsewhere later, state so on the original channel first of all. See also !guidelines [13:33] i think the current !crosspost is not as useful, but further improvement welcome. [13:38] I usually go with: Please ask your question in one channel at a time. It will be easier for you to follow suggestions and avoid getting duplicate or conflicting responses from different places. [14:53] that's also a good angle [15:03] I'm sure it could use some polish :) === akemhp_ is now known as akem [16:58] o/ [16:58] Ussat: all boxes on bionic? [16:59] I was saying, we have a few hundread EH/Cent systems in the enterprise proper, but Ubuntu server has so much more support in the bio/genetic community [16:59] between 16.04 and 18.04 now [16:59] kk [16:59] We still have 4 labs to bring under our wing [16:59] Ussat: the comment I made un -server wasn't meant to be a hit against you. It's to help prevent someone later coming in and potentially giving misinformation. [17:00] Nope, I get it, no offence taken [17:00] :-) [17:00] appreciate the direction [17:00] elipses are hard to interpret... just wanted to help you know where my mind was [17:01] So, we have settled on basically 2 flavours of Linux, RH/Cent for the general enterprise and Ubuntu for almost all things medical [17:01] and We have AIX also [17:02] fancy [17:02] Well, AIX runs the EPIC EMR, just no other way to do it [17:02] Linux almost everything else [17:03] All the *nix does kerberos auth against AD.....but its not in AD proper, and I am ok with that [17:07] Even our "workstations" are server installs + mate. [17:07] Ussat, could you give more info about the exact implementation you use for that? i have to get some sort of authentication for users in a mixed environment, was thinking about using Samba instead of AD to start with [17:09] Well, we have local users, but the password auth is via kerberos. we have a /etc/krb5.conf file that has all the information in it needed, then just make sure krb5-user libpam-krb5 libpam-ccreds auth-client-config are installed [17:10] I can pastbin a krb5.con file here for ya (let me sanatize it) [17:13] https://pastebin.com/PYEQYQre [17:13] there ya go [17:14] We have a LOT of win systems with a fairly big AD tree, we are a university, so it was easier for me to do krb auth [17:14] does that help ? [17:15] yeah, it's a start. thank you! :) [17:15] Really IMHO if youre in a mixed env, its easier IMHO to auth with kerberos against AD [17:15] NO, a big FUK you to RH and Cent for changing the whole scheme in 8 on how its done... [17:16] They no longer support pam_krb5, which means I have to use realmd, which is fine except that now I have two different schemas to maintain [17:16] was LDAP considered, or just Kerberos? (i know the difference) [17:17] No, we never considered LDAP [17:17] Ussat: please keep the language family friendly in the ubuntu channels [17:17] sorry [17:17] tnx [17:17] sorin-mihai, basically, because we already user kerberos on AIX and wanted to have as much the same as possible [17:18] i see, makes sense [17:20] OPLus, when I wakled into this, we basically had no linux strategy.....it was every department forr themself...... [17:20] Plus [17:20] bah... [17:20] dyslexia rocks :) [17:21] beside the usual differences and quirks between rh/cent and ubuntu, which we all feel now and then, do you see any real reason for keeping rh/cent in that environment? [17:21] Yes, a lot of what we do requires RHEL for support [17:22] We are transitioning some RHEL/Cent to Ubuntu [17:22] BUt we run some things which are just not supported on Ubuntu. Not that they couldnt be....but the vendor says RHEL. [17:23] I mean when it comes down to it, Linux is Linux [17:23] yeah, so basically just vendor lock in [17:23] Ya [17:23] and being a hospital, having no support on certian things makes the govt very unhappy [17:24] not like that 'support' is actually used frequently, or is it? [17:25] Not at all [17:25] I can count the number of times I have called Forte Research in the last 5 years on one hand [17:25] i've seen quite a few cases where 'support' was required but 'never' used. lol [17:26] sorin-mihai, Ya, thats a LOT here [17:26] as a hospital we have all sorts of regulations to follow [17:27] Could I run Forte Research on Ubuntu, sure.....would we get fined for it, absolutely [17:28] lol. you're using thin clients or just 'normal' workstations [17:29] i'm about to be required to setup some 200 thin clients, i wonder if it still makes sense nowadays in big environments, price cutting for the workstations being the 'problem to solve' [17:30] It depends. If the Dr or post-doc student just needs a linux system to do his stuff on, we have a compute cluster they can ssh into with Galaxy as a front end to the HPC. If they need graphical stuff, like DNA modeling, its generally a ubuntu-server install with a mate desktop + nvidia CUDA drivers [17:31] it really depends on their needs, we have a 3 page PDF we send out to access their needs/requirements [17:32] Even with that, we may still spend more time finding out what they REALLY need..... [17:33] that make sence ? [17:34] yeah :) [17:34] We tried the Ubuntu desktop install, and while "simpler" had to much cruft [17:34] we did not need [17:35] We have all our build scripts in a local gitlab, so whoever needs access has access to what is always the latest [17:36] and almost all of our admin is done via ansible [17:37] using tower or something like semaphore/awx or just pure ansible? [17:38] Just pure ansible. We looked at tower and AWX, could not justify the cost [17:38] I mean ya I know AWX is free, but it really "bought" us nothing [17:38] not now anyway, not ruleing it out in the future [17:39] Always re-evaluating [17:41] i just can't believe it, speaking of it, RH just sent me another invitation to download tower trial. lol [17:50] Ya.....their sales people love me......always calling/emailing [18:04] pragmaticenigma: unity desktop is still an official package in the repos, that does mean canonical still provides it somehow? [18:05] !info unity-desktop [18:05] Package unity-desktop does not exist in bionic [18:05] !info ubuntu-unity-desktop [18:05] ubuntu-unity-desktop (source: ubuntu-unity-meta): The Ubuntu Unity desktop system. In component universe, is optional. Version 0.1 (bionic), package size 2 kB, installed size 8 kB (Only available for amd64; arm64; armhf; i386; ppc64el) [18:06] lotuspsychje: it's un universe... I thought that was where community developed projects went [18:07] I also didn't say it wasn't supported... just said it wasn't being developed [18:07] ok, but its still being worked on right? [18:07] its not like its a dead project [18:08] still the users choice to install [18:09] the masses will probably jump from xenial to gnome3, but its also possible some will continue using unity too [18:14] lotuspsychje, i know about unity8.io but i'm not sure how 'support' will be for that, didn't try it [18:14] sorin-mihai: unity8 is loved on the ubports community, also still alive [18:15] sorin-mihai: that's part of the open source community... trying things to see what works and what doesn't [18:16] heh, wasn't much of a fan of unity, most of the systems i used had gnome anyway. that being said, i'm not sure it's the same unity that was previously the default in ubuntu, or is it? [18:16] sorin-mihai: It's a continuation of the original... not a fork [18:56] grinn.. https://whynotsecurity.com/blog/teamviewer/ [18:56] fresh from the press https://ubuntu.com/blog/why-you-should-buy-a-pre-installed-ubuntu-workstation [18:58] Not sure I agree "For a PC to receive this level of quality assurance it needs to be certified" [18:59] "For an operator to believe manufacturer quality assurance for the OS they need to be certified (the operator that is!)" [21:20] UWN616 is on the streets: https://wiki.ubuntu.com/UbuntuWeeklyNewsletter/Issue616 . [21:27] Just got myself a battery portable projector, "Laser Beam C200", does miracast+HDMI ... size of a smart phone. Cannot recommend it highly enough. Amazing quality and lumens output even over a 3m throw, auto-focused too [21:28] oh wow, miracast; I think my nexus 4 could do that [21:32] "Currently unavailable" on Amazon [21:33] pretty pricey. $399 [21:33] yeah, it's a bit high for a "eh lets try it out" kind of thing [21:33] but if you do presentations often, something that tiny might be perfect [21:36] :) [21:36] and dumping VGA is always a good sign [21:36] some clients have to tote around adapters these days to remain compatible with expected standards [21:41] The laser makes it much better than standard portable DLP types [21:42] I've currently got it projecting over 5 meters and its overflowing my 2.5m diagonal projection screen [21:43] I got it to do pop-up presntations without needing to cart around a big lump or cables [21:43] It pairs to Bluetooth speakers too - has an inbult speaker but VERY quiet [21:44] it's actually running Android Lollipop OS too, an can install/run standard Android applications [21:45] Shame Linux *still* has no ability to act as a *cast source, miraclecast project looks to be abandoned [21:57] not a fan of such protocols myself, seldom reliable [21:58] (polite version ;) ) [22:01] daftykins: I've found it very reliable - I also use it to cast to my big screen in the inside-out room [22:02] pfff [22:02] I've got a miracast receiver combined with a remote controlled HDMI switch there [22:03] TJ-: oh you might find this fun, seems the timeout period in Firefox helped me brick my first device during a firmware update... USB TTL adapter arrived today and now i've got it back to life thanks to https://www.dutn.nl/repairs/reparaties_gs724t.html [22:03] I think maybe folks trying to use it on 2.4GHz would have problems, but on 5GHz there should be plenty of bandwidth [22:04] * daftykins pats his Ubiquiti UAP-AC-LITE access point [22:04] I've got a 748TP - had 6 small howling fans in so I removed them and fitted on 120mm fan in the top (doing a cut-out) and it can't be heard now :) ... reliable devices [22:05] i swapped out the single 40mm Delta for a Noctua :D [22:05] We just bought some UAP-AC-LRs and investigating installing openwrt on them so we can use SDR [22:05] daftykins: I've got a LITE and an LP. I need to run another ethernet for my other LITE at some point [22:05] daftykins: also got the gateway [22:05] ah, are you fussed about the privacy issues that've been in the news about what they report back? [22:06] my apprentice is on vacation currently, but that'll be one of his projects when he gets bac [22:06] how do you guys manage them? i tried out the controller software here on my Bionic server VM, was disappointed to see it still relies on an EOL mongodb via PPA with expired key right now [22:06] no, haven't seen that. Not that I really care to be honest. As long as they're not sending my web traffic to facebook or google for ads I don't care. If it's to improve performance or something I'm for it [22:06] daftykins: no... implementing SDR throughout so we can program the network, and research indicates openwrt on these works fine, and openwrt supports the SDR tooling [22:07] daftykins: I use a pi 3 [22:07] I'm really eyeing one of their 48 port PoE managed switches but it's expensive. [22:08] :) i got this netgear 24 port managed switch for free in essence but i'm not too fond of the fan noise even with the noctua installed [22:08] They're expensive to run too, if all 48 ports are PoE just due to the size of PSU required [22:08] well, I'd only be using 3, maybe 4 for PoE [22:08] i've only got the AP so i am happy with the injector for that [22:09] makes a mess of my server cabinet [22:09] leftyfb: possibly better off getting a smaller slave PoE 6-8 port switch [22:09] also doesn't make for a nice and tidy cabinet :) [22:09] I can pick up a 5 port PoE for under $100, but it won't really clean up much [22:09] leftyfb: fits into a 1U faceplate usually [22:10] i suppose i can either prove this Firefox timeout thing, or just give up and TFTP flash to the current firmware then with this Netgear (i followed the guide in resurrecting it with the oldest version available, first) [22:11] then i can finally resume playing with VLANs ;) [22:11] daftykins: seems strange ... I've not noticed that in all the firmware HTTP updates I've used it for on lots of devices [22:11] nor me, and yet here we are [22:12] https://photos.app.goo.gl/rmJ3FfcCa49ka7c56 a litle outdated since I've shifted things for the rackmountable gigabit Comcast modem [22:12] daftykins: might be worth running a tcpdump underneath next time you try to see what happens. [22:12] nice and clean! [22:13] not as much as I would like [22:13] i think i was at a small biz that represents you guys personal hell today, 5 users... 100% EOL software [22:15] surely that's "oh 'el" ? [22:15] :D [22:15] i'm hoping that'll be the director's response to my email explaining how bad things are [22:20] TJ-: oh do you remember i mentioned hdparm helped me brick an mSATA SSD by seemingly setting a master password other than what i typed in? i'm sure you have better things to do but i was going to toss it, but i'd happily post it your way for fun :) [22:21] daftykins: lol ... you're the 2nd person to suggest that this week! had someone wanting to send me some bricked Zyxel IAGs (CPEs) [22:21] :D [22:22] daftykins: I don't have the time these days to tackle those things, or the inclination. I've come to the conclusion tha tif manufacturers want to make their product turn into bricks I'll simply use something else that doesn't cause me headaches [22:23] daftykins: hence the focus on SDN for routers/switches so the hardware is as dumb as possible and i can use software to program the control plane [22:23] understandable, i think hdparm just can't be trusted for that feature due to (perhaps) chipset or firmware incompatibility [22:24] i think it's going to meet a destructive end, then [22:31] Are they brand-name or no-name OEM ? [22:31] SanDisk U100 but were supplied to Samsung OEM for in a friends old laptop, neither company wants anything to do with helping [22:32] Ahhh, so likely the firmware was slightly customised [22:32] no hits online looking for a manufacturer password, even if hdparm seemed to send what you type