[07:22] Good morning [10:46] Hey there 👋 [10:46] !security [10:46] Security Updates are dealt with here: https://help.ubuntu.com/community/Security - See also !root, !firewall, !server, and !usn [10:46] start here flowinho [10:46] thank you lotuspsychje [10:48] flowinho: maybe if you share your specific purpose and services, volunteers can try to help you more specificly [10:50] flowinho: personally i also reccomend nmap your own ip aswell, to see how the outside world sees your server ports [12:15] is there any use of copying /etc/passwd and /etc/group file from / into a chroot when chrooting? [12:18] thing is,when i make a file using ssh like so : echo file|ssh user@chroot-host "cat > myfile" that file gets the proper owner regardless of presence of passwd and group file [15:45] #reddit-sysadmin [15:46] stop spamming [15:46] Maik, sorry, not trying to spam [15:47] trying to join a channel but hex cut my command [15:50] oh, ok :) [17:34] I just rebooted a prod 16.04 server after way too much uptime, and now lxc-* commands are all hanging, and no containers will start. Looking at htop, I see [lxc monitor] in "D" state. Help? [17:37] kill -9 of the hanging process kills the hanging command, but then the next command just hangs again [17:41] D usually means blocked on I/O [17:42] Do you have filesystem corruption or some kind of disk fault? [17:42] Not that I can see, but I will check again [17:43] NFS hang? [17:43] rbasak, there are no IO errors in dmesg; some of the containers depend on cephfs, but not all, and the cephfs mount seems fine [17:44] (it's only used for homes, not /) [17:44] I don't know then, sorry. [17:45] It does seems like too much of a coincidence that you're using cephfs and you (superficially) appear to have something blocked on I/O though. [17:45] I would exhaust that avenue first. [17:47] In the past, any cephfs error has been accompanied by tons of dmesg errors [17:47] I will tried to revert kernel but grub-reboot didn't work [18:36] rbasak, I rebooted with the cephfs mounts commented out and it still hangs. Trying now without nfs as well, but I'm not hopeful === lordcirth__ is now known as lordcirth === SuperKaramba is now known as BenderRodriguez === BenderRodriguez is now known as help === help is now known as BenderRodriguez === lordcirth__ is now known as lordcirth [19:45] Ok, so lxc-net is hanging on an iptables --wait command; but I have no idea why the iptables command is hanging. Maybe something else is hanging on the lock? === smoser1 is now known as smoser [20:00] strace it? [20:01] znf, was that to me? (sorry, I keep reconnecting) [20:01] yes, strace the iptables? :) [20:03] I tried, it's just a wait4( that doesn't seem helpful... I don't use lxcbr0 anyway, so I am trying USE_LXC_BRIDGE="false" and rebooting [20:13] Most of the containers have started now... === court_jester is now known as easter_egg