[07:13] <lordievader> Good morning
[10:05] <ginggs> rafaeldtinoco: hi, do you plan to merge cacti?
[10:38] <rafaeldtinoco> ginggs: hum, i wasnt planning to (myself) but I saw we are way behind now
[10:39] <rafaeldtinoco> ginggs: ill give it a try today
[10:47] <ginggs> rafaeldtinoco: thanks!
[10:53] <ginggs> rafaeldtinoco: i believe my change there can be dropped and php-gettext can be removed.  i wasn't sure about your changes
[10:53] <rafaeldtinoco> ginggs: just realized now, were you going for it ?
[10:53] <rafaeldtinoco> i said i was going to do it and never asked #)
[10:56] <ginggs> rafaeldtinoco: i looked, and would have sync'd if it were possible, but i think your changes are still required
[10:56] <rafaeldtinoco> i have upstreamed them back then
[10:56] <rafaeldtinoco> let me echeck
[10:58] <rafaeldtinoco> ah ok just remembered
[10:58] <rafaeldtinoco> debian was still using mysql-server-5
[10:58] <rafaeldtinoco> thats why some of these changes havent been merged there
[10:58] <rafaeldtinoco> let me check now
[11:00] <rafaeldtinoco> rbasak: any plans on mysql-server-8 for sid before our freeze ?
[11:00] <rafaeldtinoco> orelse I'll merge cacti now and keep my delta
[11:00] <rafaeldtinoco> and later I'll suggest it to cacti in debian
[11:47] <rbasak> rafaeldtinoco: no - Skuggen was looking into it, but currently it FTBFS on sid
[11:54] <rafaeldtinoco> ah.. i "wonder" why
[11:54] <rafaeldtinoco> thanks!
[13:39] <rafaeldtinoco> ginggs: alright, finished the merge
[13:40] <rafaeldtinoco> will propose it and submit it to a ppa
[13:40] <rafaeldtinoco> willing to test ?
[13:41] <rafaeldtinoco> (ill run autopkgtest and give it a try anyway if you cant test it)
[13:43] <ginggs> rafaeldtinoco: sure, i'll give it a spin, but only tomorrow
[13:43] <rafaeldtinoco> sounds good
[13:48] <rafaeldtinoco> https://usercontent.irccloud-cdn.com/file/TDRQgsLf/upgrade.png
[13:48] <rafaeldtinoco> upgrade seems to have worked
[13:48] <rafaeldtinoco> lets try vanilla install now
[14:01] <xibalba> is that cacti ?
[14:01] <xibalba> i didn't think i was still actively developed
[15:57] <KungFoo> I just enabled media wiki - a2enmod mediawiki
[15:58] <KungFoo> but I want it on the ssl side of my apache server how to?
[15:58] <KungFoo> this is for a personal server, I'm not an apache guru
[16:02] <gp> I am trying to get a simple hello world microk8s working without much luck on ubuntu bionic.  I cannot get the registry to respond via curl.  What am I doing wrong here? https://dpaste.org/JHZ2
[16:03] <gp> I am having to save my built image from docker and then import with microk8s.ctr image import
[16:04] <weedmic> fyi there is also a #docker - it doesn't sound like what u describe is ubuntu related
[16:04] <gp> weedmic: It is microk8s. Last time I asked for help they pointed me here
[16:05] <gp> Trying to use this https://ubuntu.com/tutorials/install-a-local-kubernetes-with-microk8s#1-overview
[16:06] <sdeziel> KungFoo: I would have expected a "a2ensite" instead of "a2enmod" but anyway, if you want to enable SSL/TLS: "sudo a2enmod ssl && sudo service apache2 restart" should do it
[16:11] <KungFoo> thanks, that worked
[16:11] <KungFoo> I guess I wasn't expecting that
[16:11] <KungFoo> so the configuration that you enabled are available on both 80 and 443?
[16:11] <KungFoo> how can you make media wiki *only* ssl
[16:11] <gp> Anyone have a sharable Vagrantfile that provisions a working microk8s environment by chance?
[16:12] <sdeziel> KungFoo: to answer that I'd need to see the mediawiki sites-enabled or conf-enabled file (pastebin)
[16:20] <weedmic> np, I just thought they might know more.
[16:25] <gp> Is there a more appropriate channel for microk8s on Ubuntu?
[16:26] <gp> weedmic: thanks btw. I will check with the docker channel too
[16:42] <genii> gp: You might want to try the #kubernetes channel
[19:06] <DeeJayTwo> Hi
[19:07] <DeeJayTwo> I have a server on 18.04.3 which take a lot of time spinning and detecting all drives. It often says it doesn't find vg-ubuntu and drops to initramfs...
[19:07] <DeeJayTwo> Is there a way to set a higher wait time ?
[19:19] <DeeJayTwo> I'm waiting a bit and I see the drives detected in the console.. then from initramsfs, I just type exit and it boots...
[19:32] <sdeziel> DeeJayTwo: not sure but I'd try adding "rootdelay=X" to your boot args
[20:22] <DeeJayTwo> sdeziel: thank you!
[22:50] <jayjo> I have a cluster of ubuntu servers, and I'm looking to maintain the trust infrastructure for both a TLS PKI and an SSH CA. I have a PKCS11 device to store the keys on. Can the same root key sign both a TLS x.509 PKI intermediate cert and also use ssh-keygen to generate CA certs? Can there be any trust integration? I don't mind maintaining two separate intermediate certs, but are they under a single
[22:50] <jayjo> root? Or do I need two entirely different structures?
[22:52] <sdeziel> jayjo: SSH CA are not related to x509
[22:53] <sdeziel> so AFAIK, it's not possible to use the TLS PKI for it
[22:53] <jayjo> what is the difference? Seems like I can choose my algo, so both private keys can be rsa 2048. Is it just different metadata, encoding, and wrapper for each one? But the actual key -could- be the same?
[22:54] <jayjo> I have a SmartCardHSM that can store more than one and intermediates, so it's OK if I have to need to have two independent trust "trees". I would just very much rather have one with two subsidiaries
[22:56] <jayjo> For TLS, PKI is necessary. I'm trying to allow access to servers to a small group of administrators using smart cards. Whether just 2-factor (OTP) or actually storing the key on the smart card and using a CA to establish trust is what I'm looking for
[22:56] <sdeziel> jayjo: I could explain the details but the OpenSSH folks specifically didn't want to touch X.509 with a ten foot pole so they came up with their own (much simpler apparently) solution
[22:57] <sdeziel> s/could explain/could not explain/
[23:10] <jayjo> roughly, is the mechanism the same? Do end users submit to me CSRs so my root can sign their keys?
[23:10] <jayjo> and I sign them with ssh-keygen ?