=== scjosh7 is now known as scjosh === waxfire9 is now known as waxfire === masterkorp2 is now known as masterkorp === caverton3 is now known as caverton === anzer8 is now known as anzer === Raqbit6 is now known as Raqbit === nizzan7 is now known as nizzan === Faradome5 is now known as Faradome === fmirkes_ is now known as fmirkes === Spr0cket- is now known as Spr0cket === Mibixy is now known as Mibix [00:51] hey all - for general security scanning/monitoring, would y'all suggest anything more than what Vuls does? Any alternative suggestions? [00:52] Vuls? [00:52] https://vuls.io/en/ [00:54] cryocaustik: there's also oscap, https://ubuntu.com/security/oval [00:55] cryocaustik: Ah, yeah I use https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html [00:55] And for code I use yarn or npm audit for node / js and safety for python [00:56] appreciate the suggestions; will check these out [00:56] Which is checked at build time by CI/CD. [01:58] I use ubuntu 20.04, it's lagging too much recently and the whole system freeze [01:58] I don't know how to start diagnose this issue [02:02] a common cause of laggy systems is trying to run more programs than you've got memory for; check free -h output to get a feeling for how much room you've got to work with, watch the output of vmstat 1 to see how much disk io, swap io, you've got, and try to see if there's spikes when your system stutters [02:04] also video drivers === WildSoft_ is now known as WildSoft === |san|- is now known as |san| === Rhvs is now known as Rhys [02:27] I've found that watching to see if swap changes in top is a very easy way to guage dynamic memory load, while the mere momentary presence of swap really doesn't mean much. [02:30] the nice thing about vmstat 1 is that you don't have to be watching top like a hawk, or remember what the number used to be, or write it down.. you just look for si and so, bi and bo columns, to easily see a history === TheMaster is now known as Unit193 === seednode04 is now known as seednode0 [02:54] Hi. How do I make the option "--unrestricted" stick in /etc/grub.d/10_header file? grub was upgaded today and the option was removed [02:59] In order words, an upgrade to grub always undo any changes to /etc/grub.d/10_header? [02:59] other words* [03:36] Is anyone running the Beta with Nvidia GPU? When the beta was release, Nvidia drivers were default, when installing fresh now, apt is patching and autoremove is removing nvidia drivers... Has anyone else seen this? [03:38] autoremove might remove older nvidia drivers, could be [03:39] I'm installing fresh. It definitely is 510 that is auto installed by default. It's strange, because it shows that it's utilizing the nvidia packages, but autoremove is saying they're not. May just be a "me" problem though. [03:39] Sorry, 510, the driver version. [03:40] no idea there, join #ubuntu-next for jammy support, i guess during uk office hours [03:40] I'll hop in there, thanks. [03:47] 8) [03:55] wondering how I can find out why "proftpd" on the apt repo latest available is 1.3.6b, but thats from 2019.... the latest non release candidate is 1.3.7 (1.3.6e) [03:57] i see we do get bugfixes https://ubuntu.com/security/CVE-2020-9273 [03:59] and what the relation is between version numbers.. http://www.proftpd.org/ [03:59] https://launchpad.net/proftpd-dfsg/+packages [04:03] Latest released version looks like the current uploaded version, as seen in https://github.com/proftpd/proftpd/tags [04:03] !info proftpd jammy [04:04] Kandidaat: 1.3.7c+dfsg-1build1 [04:09] yea, the relation for versions is .... tricky (for me to interpret) === manfromafar2 is now known as manfromafar [04:09] but I thought it would be 1.3.6e if I read it right [04:10] but when I do apt-get install proftpd, it returns: Note, selecting 'proftpd-basic' instead of 'proftpd' [04:10] proftpd-basic is already the newest version (1.3.6c-2). [04:11] Im on 20.04, and I regularly do update/upgrade [04:13] !info proftpd-basic focal [04:13] proftpd-basic (1.3.6c-2, focal): Versatile, virtual-hosting FTP daemon - binaries. In component universe, is optional. Built by proftpd-dfsg. Size 2,122 kB / 5,248 kB [04:14] you got the version meant to be for your ubuntu release FaTaL_gg [04:16] lotuspsychje, is strange, there are fixes in 1.3.6 beyond 1.3.6c, that I do not have. So if I want them I have to build it seems? [04:17] !info proftpd-basic jammy [04:17] proftpd-basic (1.3.7c+dfsg-1build1, jammy): Transitional dummy package for ProFTPD. In component universe, is optional. Built by proftpd-dfsg. Size 4 kB / 488 kB [04:17] FaTaL_gg: its adviced you stick to package versions meant for your ubuntu release, if you need/want higher package versions, try installing higher ubuntu release(s) [04:18] FaTaL_gg: see also !backports [04:22] Well, next LTS will be out pretty soon, seems best to just wait for that at this point. [04:23] lotuspsychje, I agree in principal and practice. Im only questioning it because some of the fixed bugs are noteworthy (memory corruption, connection failures, and systemctl service restart issue due to pid file permissions).... seems "dumb" that these fixes would not be pulled in (which prompted my coming here). I can live until next LTS, I've dealt with it this long. But still curious why it [04:23] wouldnt be included and updated. [04:25] lotuspsychje, would you mind helping me please? i dont use cups and use ufw but only "sudo enable ufw". Im not advanced re firewalls or ports, but ufw seems to have a rule or profile for cups service(im unsure which) [04:25] Unit193, yea, kind of what I was thinking before even asking the question. just strange (See 1.3.6d): http://proftpd.org/docs/NEWS-1.3.6d [04:26] those updates were released in 2020! .... so its been just about 2 years, and it was not updated in that time. [04:26] "sudo ufw app info CUPS" returns a brief description of what cups is and some of protocols supported then a mention of tcp/631, it doesnt state if the ports open [04:26] sudo ufw apps list # see cups [04:27] FaTaL_gg: As noted on the releases page, I don't see 'd' there. http://proftpd.org/ also indicates the version in Ubuntu is current, well Jammy at least. [04:27] when queried with sudo ufw status verbose or numbered no rules or profiles are shown other than what "sudo ufw enable", allows for which is outbound only [04:30] i feel stupid asking but that means no ports are open right? and no rules for cups exist right (tcp/631) [04:30] Unit193, it is listed there, ctrl-f 1.3.6d (and even an e), and look at the release notes & NEWS. [04:30] We are also happy to release 1.3.6d to the community. This is a maintenance release, containing backported fixes from the 1.3.7 release. The RELEASE_NOTES and NEWS files have more information. === esv_ is now known as esv === tomreyn_ is now known as tomreyn === fowl2 is now known as fowl === ubuntu is now known as Guest7188 [06:43] 有人嘛 [06:43] ??? [06:43] 哈哈哈 === ricardo is now known as Guest4765 === irc_standardnick is now known as captainkirk === Rhys is now known as Guest6037 [09:46] ey === irc is now known as amoros [10:29] hello === pascalm1 is now known as pascalm [10:44] !next [10:44] Jammy Jellyfish is the codename for Ubuntu 22.04. For technical support, see #ubuntu-next. For testing and QA feedback and help, see #ubuntu-quality. [11:04] why might my sd card write speeds be going so slow? [11:04] I have a quality samsung one with write speeds of 100mbps, and I tested it with gnome's disk tool, and got like 9mbps write speeds or such, and it does well, but when I try to use nextcloud or timeshift to write to it, I only get like 1 mbps [11:05] sorry, I get like 90mbps === jclsn90 is now known as jclsn [11:27] Does grub-mkpasswd-pbkdf2 accepts special chars like !#$%&? [12:22] Hi guys. Came here from here https://help.ubuntu.com/community/Full_Disk_Encryption_Howto_2019. I want to know if it is possible today to easily enable disk encryption during installing ubuntu ( with win10 already installed) [12:25] Guest81, not during install. [12:25] esv, can you give me a proper manual? [12:27] not really, I did a regular lvm install on a disk partition, then booted again on the usb disk and started mocking with it on a chrooted environment, I did not make notes of the process. [12:33] ok [12:33] thanks [12:36] i am trying to get my grub to be hidden and boot immediately, unless I hold down shift. It is necessary to put GRUB_DISABLE_OS_PROBER=true to disable the overwrite in that script, correct? [12:38] semitones: no, that's just so it doesnt pick up other OS and add to grub menu [12:38] which ubuntu release are you on semitones ? [12:38] what about the part that rewrites the timeout if it is zero. Has that been removed? I guess I can look in it [12:38] 20.04 lubuntu [12:39] semitones: can you type 'cat /boot/grub/grub.cfg | nc termbin.com 9999' and paste the link here? [12:39] sure [12:40] https://termbin.com/2fro0 [12:40] EriC^^, so is the recordfail = 0 normally, and it is 1 if boot fails? [12:42] have you played with the GRUB_TIMEOUT_STLYE=hidden option? [12:42] semitones: ok, edit /etc/default/grub and set it to "GRUB_TIMEOUT_STYLE=hidden" and "GRUB_TIMEOUT=0" and also "GRUB_RECORDFAIL_TIMEOUT=0" [12:42] then sudo update-grub [12:42] i have all those already except GRUB_RECORDFAIL_TIMEOUT I have equal to 10. I figured this means, if the boot fails, it will reset the timeout to 10? [12:43] yeah [12:44] semitones: try to set it to 0, also you might need to edit cat /etc/grub.d/30_os-prober and add a comment # before "adjust_timeout" [12:44] thanks I couldn't remember where that file was [12:45] EriC^^, I can also just disable the entire OS prober if I'm not installing any OS, right? [12:45] it's on the last line for me btw [12:45] semitones: yeah [12:46] Thanks, I'll give it a try! [12:46] no problem [12:49] Hi all [12:49] esv, wow ... full disk encryption is a simple checkbox in the installed (in 20.04 at least) under the advanced partitioning options ... there is no need for anything else [12:49] s/installed/installer/ === mkv is now known as m4v [12:51] if you have full disk encryption, what do you do if you need to recover data on a hard disk? [12:56] ogra, I did not want to encrypt my whole disk but a partition on it. The checkbox goes away when you select install on a disk partition [12:56] esv, well, that is not full disk encryption then 🙂 [13:01] https://termbin.com/jzzp [13:03] ogra, you're right, but I believe that is the setup Guest81 was after. [13:03] i doubt it [13:03] "I want to know if it is possible today to easily enable disk encryption during installing ubuntu ( with win10 already installed)" [13:04] right, if he wanted to preserve the win10 environment, he'd had to do a multiboot setup on the same disk. [13:04] the in-installer setup is exactly designed for this use case (utilizing secure-boot and a proper UEFI key that can work well with pre-installed windows) [13:11] wow, would be cool to test. === diskin is now known as Guest2753 [14:06] hello [14:07] hi [14:07] given a apt config 'deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main' what is the url to download the index of the repo? === ignorand1 is now known as ignorand [14:16] HY2022HY, that would download the PAckages file ... like: https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages [14:34] thank you ogra [14:55] quando sai o ubuntu 22.04 [15:31] hi [15:32] I'm having problems with a client that's trying to connect to a secure server using TLSv1.2 and apparently it can't find any match cipher [15:32] based on wireshark, it supports TLS_PSK_WITH_AES_128_CCM_8, TLS_PSK_WITH_AES_256_CCM_8 and TLS_EMPTY_RENEGOTIATION_INFO_SCSV [15:33] how can I add/enable support for these ciphers, even if it's globally? [15:33] the server machine is using ubuntu 20.04 btw, thx [15:38] mamonetti, ssh -vvv user@ip [15:46] ioria: actually it's the other way around, I have the server and the client app (I have no access to it) is the one that doesn't seem to support any of the ciphers offered by the server [15:47] I've tried this to listen at the server: openssl s_server -key server.key -cert server.crt -accept XXX [15:47] and I get this: 139654811542848:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../ssl/statem/statem_srvr.c:2283: [15:48] mamonetti, if you can access the client : ssh -Q cipher [15:48] I'm afraid I can't [15:48] no idea then sorry [15:49] thx anyway [15:49] some algorithms are not available by default [15:54] mamonetti, https://discourse.ubuntu.com/t/default-to-tls-v1-2-in-all-tls-libraries-in-20-04-lts/12464 [15:59] actually the client hello offers TLSv1.2 based on this https://ibb.co/rkDXYzM === ansivirus_ is now known as ansivirus [16:10] ам5негрит [16:25] Quando sai a versão final do pop os 22.04 [16:26] luizubuntu: internet says the 30th [16:26] oh sorry, that was for 20 [16:28] luizubuntu: anyway I'd expect it to be relatively immediately after Ubuntu's release [16:29] eu estou usando o pop os 21.10 [16:30] luizubuntu, https://discourse.ubuntu.com/t/jammy-jellyfish-release-schedule/23906 [16:30] we do not support pop_os here ... you have to ask in one of their channels [16:30] luizubuntu: when Ubuntu releases 22, shortly thereafter, popos will release their version [16:36] Obrigado matsaman [16:48] Morning. Long time user (since 14x) first time in the channel. [16:49] 140 AD? [16:50] My team is really excited about LXD 5s features and I have been running the Jelly fish (fresh installs, and upgrades). If you were to do a fresh server install would you just roll forward or wait. [16:50] Ubuntu 14.x, no doubt [16:51] delmar: if you're already established, I would wait. If you are starting a new thing, I would push forward [16:51] but if you have time on your hands, you can play with it in a dev environment all you want? [16:52] Lxd has been pushing me to adopt LTS much sooner than I used to. [16:53] I mean, it really shouldn't matter [16:53] if you test properly, a transition will go smoothly [16:53] if you have a redundant fallback, a reversion will go smoothly [16:53] so do what you like =) [16:56] For the past 8 years I have waited 6-months to a year for the rough edges to go away. I just wanted to get an opine from the community. I am gong to do what seems best in the long run for my team  if that what you mean by do what I want. [16:56] delmar, lxd is a snap, the underlying distro is totally irrelevant for that, you can run lxd 5 on something as old as 14.04 [16:57] Is there a server/ubuntu channel. [16:57] there is #ubuntu-server, yes [16:57] Sweet! [16:58] Thanks. [16:58] delmar, we usually nly release an LTS to tha actual masses with the first .1 image release ... if you want to play safe, you wait that long ... [16:59] (i.e. only when the .1 is out former LTS users get the automic upgrade prompt ) [16:59] *automatic [16:59] I am gonna ask how the server team ' [16:59] ][g/ (because cats) [17:01] delmar, but eiher way, as i said above, you can use lxd 5 on your current install today ... just switch the snap to the candidate channel, that has 5.0.0-c5bcb80 [17:02] (if you are brave to try a pre-release 🙂 ) [17:03] (please don't run lxd 5 on 14.04 :) [17:03] feels and then decide. The snaps make it possible to deploy on almost all of our current linux systems (centos7 because Autodesk/Maya only supports RHEL) But I am trying to pull the infrastructure into the present. (we also have vm servers running fc26 and until I pushed really hard most of our FBSD servers had eol'd 11-12.x) [17:04] So I was trying to get a feel for what would last us through the end of our current 3 year project. [17:07] I am leaning towards just deploying/instrumenting(ansible) the jelly fish (with the default lxd5, pgsql14,etc) By the time I get the deployments down and the cluster configured and tested it will be the LTS anyways. Thanks for the feedback. [17:11] sarnold: I am not deploying anything that will EOL anytime soon. (I did verify that lxd4 could be deployed on c7 (YUK)) [17:12] delmar: good good :) [17:18] ogra: is ubuntu-server on libra? I seem to be the only one there. [17:23] delmar: hmm, is the missing '#' in your question important? irc channels almost always need a '#' but maybe you're using a client that does something else if it's missing.. [17:27] ....fracking spellcheck,..... [17:32] hello, how do i 100% upgrade to 22.04? i did apt upgrade and flatpak update, also snap refresh. but as example the gnome screenshot app is still version 41 not 42. other things looks fine [17:35] !next | mei[m] [17:35] mei[m]: Jammy Jellyfish is the codename for Ubuntu 22.04. For technical support, see #ubuntu-next. For testing and QA feedback and help, see #ubuntu-quality. [17:37] sarnold: Thanks I was in #ubuntu-server. (DOH) [17:37] with a period at the end. [17:38] ubottu: little slow on the uptake here :) [17:38] delmar: how so? [17:39] /msg nickserv identify K5rddd [17:39] lol [17:39] jianwu: time to change your password [17:39] yes [17:39] jianwu, ahh, it's spring ... the lawnmowers return from the south and it is time for a new password [17:40] changed.ty [17:40] 😄 [17:50] delmar: ayha [17:50] Hello, I have a 4k TV monitor attached to my PC, I have user interface scaling at "Double", and many apps run fine. however some other apps like VLC for example, have a very very small and unreadable interface. increasing the font size doesn't help as it won't increase them within the app (only on the borders). what is the solution to this? [17:50] delmar: aha, also :) [17:52] MaximB, QT_AUTO_SCREEN_SCALE_FACTOR=0 em /etc/environment [17:52] Tenta isso [17:52] *Try this [17:52] Worked for me in Raspberry OS [17:53] em: command not found [17:53] PTNapivoski: that is not helpful [17:54] leftyfb, it was a problem with VLC font size [17:55] it may be related [17:55] PTNapivoski not only vlc, some other apps too [17:55] PTNapivoski: no, it's a problem with some applications not understanding the scaling settings. [17:55] yeah:( [17:55] is there a solution? [17:56] PTNapivoski: though you were close [17:56] MaximB: try https://unix.stackexchange.com/a/443531 [17:57] MaximB: ~/.xessionrc might be a better place to put it though [17:59] ^_^ [18:19] thanks, this worked: Exec=env QT_SCALE_FACTOR=1.5 /path/to/app [18:19] but factor by 3 [18:20] MaximB: did you try adding that ENV to ~/.xsessionrc so it applies to all qt apps? [19:31] leftyfb, alkisg: Just wanted to thank you guys for the help yesterday. I reinstalled 20.04 and she runs beautiful now. Thanks again! [19:51] hey all. How does the the "Software" application decide which software it shows? It looks pretty limited and curated. [19:53] Dunno. But if you're looking for all packages, try synaptic (or apt search from command line). [19:54] Although software also usually includes snap store, and can include flathub if so configured. [19:55] enigma9o7[m]: thanks, I'm familiar with the terminal. I was about to write a guide about how to install a certain software on Ubuntu and only discovered that you actually cannot install that software on a vanilla Ubuntu system without using a terminal [19:56] At least, synaptic can be installed through "Software". I think it is sad that "Software" is the default. [19:56] Now I'm curious... [19:56] puredata [19:57] yeah synaptic is more like a package manager as it lists all packages [19:57] whereas gnome software is like an app sture [19:57] (store) [19:57] yeah. that app store concept is pretty daft [19:58] but your actual question, now im more curious, i wonder how an app gets itself in there [19:59] puredata is programming environment for realtime audio processing.. it would belong either to developer tools or to audio & video [20:00] It [20:01] It's listed in Plasma's discover.... [20:01] as an audio player [20:04] discover is from KDE? [20:05] * enigma9o7[m] uploaded an image: (570KiB) < https://libera.ems.host/_matrix/media/r0/download/matrix.org/UIAVKTxUxobElqqJZOwJzKvS/image.png > [20:05] Yeah its the appstore tool for KDE plasma. [20:16] rdz, gnome-software shows (or tries to show) every application that has a garphical menu entry ... [20:17] *graphical ... [20:21] ogra: oh, that's good to know. Thanks for that hint! [20:25] rdz, https://www.freedesktop.org/wiki/Distributions/AppStream/ is what is used as metadata backend by most desktop SW managers nowadays ... if you want puredata to show up in them you should ask th maintainers to make sure their apps shows up in their DB [20:26] ogra: great. that's also very valuable [20:35] getting 503 errors on ubuntu.com [20:38] forgotmynick: Looks like they're having gremlins: https://downforeveryoneorjustme.com/ubuntu.com [20:38] who we gonna call? ghost busters [20:39] Hopefully anybody useful is too busy dealing with it to answer the phone. [20:42] my sata ssd has stopped working which was the boot drive for my nas. i've ordered a replacement which is coming in 4 days. i don't need to recover anything from the ssd but i was hoping there was something i could do to get it to boot. when i plug the ssd into ubuntu or windows, it locks the computer, like it's struggling to read [20:43] can anyone offer any suggestions? [20:45] take off the protective sticker and leave it on the windowsill in direct sunlight for about 24 hours, then try refromatting it [20:48] forgotmynick: you realize that a NAS is just a little computer, some storage, and an OS, frequently even a Linux one, that is pointlessly locked down so you are forced to keep buying things through this particular company, right? [20:48] like a raspberry pi connected to a network, and some storage connected to the rpi, that's a NAS, too [20:49] one you can actually maintain [20:49] (although there are better choices than an rpi) [20:57] Hello [20:59] hi messiah [21:00] I joined IRC chat after 20 years [21:00] cool [21:02] missed salvation by that much [21:20] forgotmynick: Just because you've nothing to loose: Put the drive in the refrigerator overnight. Get your system ready, and quickly connect and scan the drive. [21:20] forgotmynick: There's a small chance it'll work for a minute or two. [21:20] is that something people do with SSDs? [21:21] forgotmynick: Nevermind, sorry, that only works with spinneys. [21:21] If you're using the old freezer trick it's a good idea to put it in a freezer bag first and suck all the air out [21:21] okay, I figured but what do I know [21:21] matsaman: it is now 😂 [21:21] hahahah === pascal_ is now known as Guest3995 [21:21] I've never had a spinner failure myself, but I got to try the put-on-side-and-tap trick on someone else's failing drive the other month [21:22] actually worked long enough to back it up [21:22] cute little record players that they are [21:54] is there a local for Ubuntu focal that's basically en_US.UTF-8 but with ISO 8601 date (yyyy-mm-dd)? [21:54] *locale [21:56] in some places in some apps I was able to achieve it with LC_TIME set to swedish, but then I can't tell weekday names [22:10] Sven_vB: Man page says " -I[FMT], --iso-8601 >> output date/time in ISO 8601 format." , Does this help ? [22:12] Bashing-om, I seem to have missed some messages due to disconnect [22:13] I'll check if you might refer to some of the locale tools [22:13] oh, the date command maybe. in that I could use just %F [22:14] the most important apps would be Thunderbird and Claws Mail [22:21] Sven_vB: Would that I had the greater experience - I use neither - but I would think there are options on the config files ? [22:25] hi [22:33] Bashing-om, if so, I couldn't find them [22:34] The documentation at http://kb.mozillazine.org/Date_display_format would suggest to write a shell script [22:34] Sven_vB: I too looked on my Email client - did not find such :( [22:34] ( for Thunderbird) [22:42] genii, thanks! en_DK is indeed a good solution. [22:44] !cookie | genii [22:44] genii: Wow! You're such a great helper, you deserve a cookie! === fling_ is now known as fling === vlm_ is now known as vlm === JoeBk_ is now known as Joebk