/srv/irclogs.ubuntu.com/2020/07/19/#ubuntu-server.txt

=== Guest97669 is now known as catalase
=== kedar is now known as kedar_apte
Rubatohi06:30
Rubatoneed help06:33
ducasseRubato: what is your problem?06:46
ducasseplease be specific and provide details06:47
Rubatoi have a problem restarting sql server06:49
RubatoERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (111)06:50
Rubatoit seems the socket is already in use06:50
Rubatobut sql process06:50
Rubatobut if i kill the pid06:50
Rubatoit keeps coming back06:50
RoyKRubato: quite normal - systemd will often try to restart something that dies unexpectently - systemctl stop <servicename> is the way to go. Is this mysql or mariadb?08:40
=== disposable3 is now known as disposable2
=== jge1 is now known as jge
=== halvors1 is now known as halvors
technoobHi12:55
lotuspsychjewelcome technoob12:56
technoobIm a flask python programmer12:57
technoobWho here wanna talk12:57
lotuspsychjetechnoob: this channel is the ubuntu server support12:58
technoobOh12:58
technoobI see12:58
technoobWait is this the channel where they auto flush out inactive users?12:59
geosmilehow do i maintain my own private authenticated PPA - are there any good tools to help with this effort?14:21
RoyK^geosmile: something like this? https://www.dynamsoft.com/codepool/linux-debian-reporisory-reprepro.html14:38
geosmileRoyK^, Thanks. That was written for 14.04 - reprepro was last updated in 2019 - is there a tool that is well maintained for this? I also looked at aptly - same problem15:13
geosmilehttps://github.com/KanoComputing/kano-repository-manager - perhaps something like this but well maintained15:24
andolgeosmile: Not sure if I missed somewhat, but what is the "same problem" shared by reprepro and aptly?15:40
geosmileandol, they both are not actively maintained. aptly is worse than reprepro - comparing last updates15:40
geosmileandol, have you used any of those tools?15:40
andolgeosmile: I've used reprepro, and I've been happy enough with it. Aside from not having been updated since 2019, is there anything in paritcular missing/broken with reprepro?15:42
geosmileandol, it looks painful to use. Are there any wrappers that make it easier to use?15:43
geosmileandol, as far as I can tell, one can just host a nginx/apache server - host the files in a particular directory structure and apt-add-repo will work, am i correct?15:43
geosmileI see "dists" and "pool" directory - is that enough?15:44
andolWhat reprepro/aptly/etc does is that they generate, and sign, the needed repository metadata. Then however you host it is up to you. Using a web server is a common solution.15:44
geosmileandol, how do you add a authentication/password/key - so that the PPA can only be used by a machine that has that certificate/password?15:45
geosmileandol, https://github.com/KanoComputing/kano-repository-manager - also - do you know of a tool like this that is well maintained?15:46
andolWell, that depends on how/where you want to host your repositority, but in the case of apache/nginx you'd simply use its native access control.15:47
geosmileandol, if i put a password on nginx for example, how do you supply it to apt?15:48
andolgeosmile: From what I've understood you go with the https://username:password@server.example.com/ in your sources.list15:50
geosmileandol, can ssh be used ? or https is the only way?15:51
andolgeosmile: ssh ought to be usable as well.15:51
geosmiledeb ssh://repo-owner@repo.server.com:/home/repo-owner/debian/ ./15:54
geosmileYup, that works!15:54
geosmileandol, it seems that I've to store root@public keys of all the client machines - which might be a security hazard to some extent15:57
andolgeosmile: Surely you'll use a dedicted user for repository access?15:58
geosmileso the repo.server should have keys so that it can enter all the client machines?15:59
=== RoyK^ is now known as RoyK
=== halvors1 is now known as halvors
exalted_shmoHello! I'm having some difficulty with bridged networking within a docker container on ubuntu 18.04. Is this the right place to ask for help, or is there another channel that would be better?23:29
quadrathoch2no, just give us more information exalted_shmo :) hopefully somebody can answer your questions23:36
exalted_shmoSure! I am running ubuntu 18.04 server on digital ocean and I'm trying to run some docker containers, but within the container it seems the network is not active.23:37
exalted_shmoI can start a new ubuntu container with `docker run -dit --name ubuntu1 ubuntu bash`23:37
exalted_shmoand do `docker attach ubuntu1`23:37
exalted_shmobut when I do `apt update` apt cannot connect to any host23:38
exalted_shmothe DNS may be a problem, but I have also run other tests and found that I cannot even ping 8.8.8.8 from within the container23:38
exalted_shmoIf I run `docker run -dit --network=host --name ubuntu1 ubuntu bash` everything works as normal, so I was able to install ping that way and test it out.23:41
quadrathoch2as I don't run docker, I can only guess. did you look at your firewall exalted_shmo?23:43
exalted_shmothis is the current output of `ufw status`:23:44
exalted_shmo```Status: activeTo                         Action      From--                         ------      ----8000                       ALLOW       Anywhere                  OpenSSH                    ALLOW       Anywhere                  8000 (v6)                  ALLOW       Anywhere (v6)             OpenSSH (v6)               ALLOW       Anywhere (v6)23:44
exalted_shmoack, sorry about the formatting23:44
exalted_shmoI suspect the firewall is not configured correctly, but I am unsure what the correct configuration would be23:44
exalted_shmo```23:44
exalted_shmo```Status: activeTo                         Action      From--                         ------      ----8000                       ALLOW       Anywhere                  OpenSSH                    ALLOW       Anywhere                  8000 (v6)                  ALLOW       Anywhere (v6)             OpenSSH (v6)               ALLOW       Anywhere (v6)23:45
exalted_shmo```23:45
quadrathoch2exalted_shmo use paste.ubuntu.com for stuff like this23:45
exalted_shmoapologies, thank you23:46
exalted_shmohttps://paste.ubuntu.com/p/w5xzrD36qK/23:46
exalted_shmoit may also be significant that I recently upgraded from 14.04 with `do-release-upgrade`23:48
quadrathoch2do you deny outgoing traffic? just guessing here23:49
exalted_shmois there a way I could tell that that is the case?23:49
quadrathoch2ufw status verbose23:49
exalted_shmohttps://paste.ubuntu.com/p/mrQrmtJ2zd/23:50
quadrathoch2I'm pretty sure this could be a problem: deny (routed)23:51
exalted_shmopossibly, I did not set that explicitly, so I do not know how to change that one23:54
exalted_shmoI modified `/etc/default/ufw` and set `DEFAULT_FORWARD_POLICY="ACCEPT"` and then restarted ufw and now ufw status verbose says `Default: deny (incoming), allow (outgoing), allow (routed)`23:58
exalted_shmobut I am still having the same trouble within the containers23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!