=== not_phunyguy is now known as phunyguy [03:21] Hi, quick question. I learnt recently that you can add ip routes to a custom table in firewall configuration (e.g. for WireGuard). I would like to know what characters are allowed in the table's name. Specifically, are alphanumerics and _ (underscore) allowed, or is it just numbers? (I've seen quite a few examples that use '1234' and '123' as table [03:21] names.) [03:21] E.g. command to give you an idea of what the 'table name' is that I'm referring to: `ip rule add iif wg0 table 123` === genii is now known as genii-core [03:38] Ah, shoot. That was a dumb question considering there are default tables named 'default' and 'main'. :P [03:38] Must rest now. [06:05] Good morning [08:52] hi! i have a problem with setting up ufw on a diskless client running ubuntu server via NFS. whenever I enable UFW the system hangs because there must be some rule which is preventing system to get NFS packets from the NFS server. If I set DEFAULT_INPUT_POLICY to ACCEPT, then it works ok (but not something I'd desire). I tried all possible rules [08:52] already to even allow all traffic from local network, but it still hangs the system... I would really appreciate any tip that would led me into the right direction... Thanks! === dbungert1 is now known as dbungert === genii-core is now known as genii [18:20] Hello - please could I ask for help installing a Linux Image package [18:20] I'm following a tutorial to run an ubuntu-KVM [18:21] And windows inside of it - https://medium.com/axon-technologies/installing-a-windows-virtual-machine-in-a-linux-docker-container-c78e4c3f9ba1 [18:21] At step 7 I'm getting an 'unable to find package' when I try to run apt-get install [18:23] The result of my $(name -r) is 5.4.0-88-generic - so I guess I'm looking for something else that will work that I can install instead? [18:28] anyone has any experience with cors problem in nginx with python servers - https://dpaste.org/8NvjĀ ? I could use some help. Thanks. [18:28] atjb: that feels pretty strange.. I didn't think the containers would be able to load kernel modules [18:29] It's the first time I've tried the tutorial - but it makes sense. In my experience, containers run pretty much anything inside them [18:29] But then again - I'm a novice [18:42] Ok - I've done a search and there's linux-image-5.4.0-87-generic & linux-image-5.4.0-89-generic - Signed kernel image generic available [18:43] uName on my build is 5.4.0-88-generic [18:44] Should I go for one version before or after? [18:44] I can't imagine it'll make much difference? [18:45] it's probably worth rebooting into the newer kernel [18:45] though I think we're doing kernel updates today, I'm not sure if those are out the door yet or not [18:48] Ok - fair enough, I'm just going to run with it [18:48] It's a learning exercise so no worries if it fails :) [19:00] why put a VM hypervisor inside a docker container? That does seem extremely silly [19:03] that was my first thought too, but I realized I don't know off-hand how to do the "differential disks" kind of thing in libvirt and this guide knows a way to not bother learning it :) [19:22] differential disks? [19:22] Isn't that what we have on our tractors!? [19:22] dunno how else to say "let ten instances all share a qcow2 or zfs dataset and only write their own changes" [19:23] lol [19:23] * genii makes vroom vroom sounds in the corner [19:23] genii: more of a constant roar if you please :) [19:26] sarnold: looks simple to do for me at least; LVM snapshots [19:27] TJ-: ah I never got the hang of lvm :) [19:27] it's SO simple and flexible :) [19:27] I think it's something that would just happen if you use zvols backing storage but I've not actually tried it myself.. [19:31] pvcreate /dev/sda1; vgcreate VG /dev/sda1; lvcreate -n VM-base -L 30G VG; ... lvcreate --snapshot --size 1G --name snap01 VG/VM-base [19:33] and of course the space can be thin-provisioned and images RAIDed and shared over iSCSI [19:41] qcow2 files can have backing files and possibly backing device (never tested the later). I'd be curious to have a qcow2 "delta" file backed by a base zvol ;) [19:41] I guess I'm just learning, so I dunno if putting a hypervisor inside. Docker container is a good idea or not [19:42] But at my stage I'm putting everything inside docker containers - so I guess I want to try this [19:42] I'd like a Remote Desktop, and this looks a good way to get one === BOWnbERTHA0 is now known as BOWnbERTHA [20:06] well the issue is, by the time you make kvm work inside a docker container, you have removed all security of the docker container, so it's pointless