[00:01] <nmatrix9> oerheks, got a prompt from the menu to update to the latest kernel on my desktop, I decided to upgrade, which kernel does Ubuntu 22.04 come with out of the box?
[00:01] <oerheks> next 22.10 will give 11.3.x
[00:02] <oerheks> nmatrix9, unlikely that done with updates.
[00:02] <oerheks> there is a weird tool on github that promises a newer kernel, unsupported here.
[00:02] <oerheks> also mainline is use at your own risk
[00:02] <oerheks> !mainline
[00:02] <nmatrix9> It was Ubuntu Mainline Kernel installer.
[00:03] <oerheks> reverse that, then your problem is solved.
[00:03] <nmatrix9> I can still boot to previous kernel version 5.16.*
[00:04] <oerheks> no, 5,15
[00:04] <nmatrix9> oerheks, ok
[00:04] <Bashing-om> !info linux-image-generic jammy | nmatrix9
[00:05] <nmatrix9> I'll be right back folks
[00:47] <nmatrix9> Hey folks, looks like that was the issue reverting to 5.15.0 resolved the evdi-dkms compilation issues.
[00:49] <Bashing-om> \o/ nmatrix9
[00:50] <nmatrix9> now I just need to resolve an issum with KVM, opengl is not available error, can't start up vm
[00:54] <Bashing-om> nmatrix9: listenaddress from that newer kernel ? https://discourse.ubuntu.com/t/sshd-now-uses-socket-based-activation-ubuntu-22-10-and-later/30189 breaking VMs ??
[00:55] <nmatrix9> Bashing-om, not sure what sshd what have to do with Qemu/KVM?
[01:17] <AragA> ola
[01:21] <johnfg> arraybolt3[m]: I did look in dpkg.log, and found out (sorta) what happened.  Still don't know why the script did this.  I *do* still have firefox, but it's no longer on the left side of my home screen.  And I don't remember having chromium, and it certainly wasn't in my favorites, but it's there now.
[01:22] <johnfg> So, I think I'll just remove chromium (don't like its data collection, or security) and put firefox back where it was.
[01:26] <AragA> serach
[01:27] <laguna> i need to find a copy of blender version 2.79 for ubuntu that will work with my hardware....or i might try to build it from scratch with the source code
[01:27] <laguna> all these updated programs keep requiring the latest and greatest hardware
[01:28] <laguna> in case there is a binary already built in the snap store or flatpak
[01:29] <laguna> or if there is a way to get the older version with apt
[01:33] <oerheks> somehow you can with snap https://snapcraft.io/blender
[01:34] <oerheks> good luck with that 2019 version
[01:34] <laguna> oerheks is the snap version 2.79b
[01:34] <oerheks> check yourself?
[01:34] <laguna> ok let me check it out
[01:37] <laguna> no it is blender 3.2.2 and it won't work with this old hardware
[01:37] <laguna> do i do snap remove blender to put things back to normal
[01:38] <oerheks> if you click on that list, there is 2.79
[01:39] <laguna> oerheks...what list...i just typed snap install blender --classic
[01:39] <oerheks> on https://snapcraft.io/blender
[01:47] <laguna> oerheks i dont see blender 2.79 in the web page or in the snap store
[01:47] <oerheks> there is, on the webpage.
[01:48] <laguna> oerheks let me look again
[01:48] <oerheks> if you click that 3.something, there is a list.
[01:53] <laguna> oerheks it works great just like gentoo....but i have to use snap run blender to get the right version to work
[01:54] <laguna> i used sudo snap install blender --channel=2.79/stable --classic      to get it
[01:56] <laguna> so i just have to remember to run it with snap run blender
[02:04] <user|78> I own an 1440p 170hz monitor and a 4K 60hz TV. I own a dual boot Desktop PC with a dedicated AMD GPU (RX580) that can output at max resolutions on Windows 10 and Kubuntu 22.04. I own a Laptop with Intel HD U620 Graphics with dual boot (Windows 10 and Kubuntu 22.04 too). The thing is, my laptop shows 1440p 60hz and 1080p 120hz on Windows but it does
[02:04] <user|78> not go higher than 1080p 60hz on Kubuntu, I tried running some xrandr commands that I saw online and I managed to force higher resolutions to appear as selectable options but when I selected them it was still 1080p 60hz.
[02:04] <user|78> Does anyone know how can I make my Laptop show higher resolutions? I haven't found anything online
[02:05] <user|78> I don't think its a hardware issue because the cables I'm using do 4K and 2K on Windows with the same exact laptop and with other devices too
[02:05] <highrate> can't change my gedit color theme while running it as root, anyone else had this problem?
[02:06] <user|78> I can do 1080p 120hz, 1440p 60hz and 2160p 30hz on Windows but none on that is an option in Ubuntu
[02:07] <highrate> (color theme and various other things)
[02:09] <oerheks> it is known that hdmi is not sufficient on linux, use DP
[02:10] <arraybolt3> oerheks: ??? That's news to me.
[02:11] <oerheks> lot of 60hrz issues disappear, is my experience
[02:20] <user|78> oerheks I just tried and that same cable on my Desktop PC with the exact same distro outputs 1440p 120hz and 4K 60hz on my monitor and TV respectively
[02:21] <user|78> so it's not an HDMI cable issue
[02:54] <user|78> well i fixed it by upgrading my kernel from 5.15.0-46 to 5.19.3 and now it does higher resolutions just fine
[03:02] <nmatrix9> Weird I'm getting a OpenGL only with works with 'Listen type' value 'none' with QEMU/KVM, is OpenGL no longer supported out of the box with Ubuntu 22.04?
[03:03] <highrate> any clementine users here?
[03:07] <lotuspsychje> just ask your issue in the channel highrate volunteers might have ideas after
[03:08] <arraybolt3> nmatrix9: I *think* that's expected behavior?
[03:08] <nmatrix9> SPICE GL support is local-only for now and incompatible with -spice port/tls-port
[03:09] <arraybolt3> Yeah, I seem to remember reading that, and I believe it's been that way even before 22.04.
[03:09] <arraybolt3> (I could be wrong, but I don't think so.)
[03:09] <arraybolt3> (Just not entirely sure on that.)
[03:15] <nmatrix9> arraybolt3, ok, just seems a bit confusing because if I change the Display Spice server settings Listen Type to "none", the KVM display is blank, nothing is rendered.  How can I use the KVM?
[03:25] <Guest92> I start my nice ubuntu 22.04 one day and gdm3 won't start
[03:26] <Guest92> I remember all the dumb shit people do
[03:26] <Guest92> God knows yall gona pay for Your own sins one day fuck off
[05:12] <morganu> re setting background/wallpaper 20.04 I can change pictures but i dont see the uptions for fit to acreen tile zoom whatever. Where are they?
[05:17] <morganu> I will check back by searching on my username to see if any replies. Till morning.
[06:51] <CelticSeaSalt1> Hey guys
[06:52] <CelticSeaSalt1> What server OS is most updated, maintained and secure?
[06:52] <CelticSeaSalt1> Im considering between Ubuntu Server, Alpine, or Whonix
[09:25] <MXE> Hello, I have an issue with getting any second monitor connected with my Ubuntu LTS machine, the system doesn't detect it at all
[09:26] <lotuspsychje> MXE: keep a journalctl -f running and plug your external monitor, then !paste the output to this channel
[10:47] <mort> uh, I updated from ubuntu 20.04 to 22.04 on a web server, and now nginx doesn't work and its error log just contains: 2022/08/29 10:45:24 [crit] 844#844: *180 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 178.128.240.138, server: 0.0.0.0:443
[10:48] <mort> I googled it, and found https://pullanswer.com/questions/ssl_read-failed-ssl-error-0a000126-ssl-routines-unexpected-eof-while-reading (as literally the only result on google)
[10:48] <mort> apparently nginx 1.18 doesn't work with openssl 3, yet ubuntu 22.04 ships nginx 1.18 and openssl 3?
[10:48] <mort> how am I and that one guy seemingly the only people in the world who has encountered this issue?
[10:49] <mort> ubuntu 22.04 can't have shipped with a broken nginx + openssl combo, right? More people would have noticed nginx not working at all, right?
[10:50] <murmel> mort: #ubuntu-server is probably the better place to ask.
[10:51] <mort> might be, thanks
[11:01] <konrados> Hi. Fresh ubuntu 20 installation, root is using bash, but a newly created user is under dash - which surprised me a bit, is this normal? Or is this some kind of custom build from my hosting company?
[11:03] <lotuspsychje> murmel: any progress on your crash?
[11:09] <alive> Where can I find documentation about zfs-on-root, especially the encryption part, on Ubuntu 22.04?
[11:10] <alive> I'm trying to create a new recovery key, since the one that I generated during install didn't get written anywhere but the installers ramdisk
[11:10] <lotuspsychje> alive: there's currently a bug around zfs + encryption on jammy, better to await a bit
[11:11] <lotuspsychje> alive: bug #1970066
[11:12] <alive> Unfortunately, I am already using this installation for my main workstation.
[11:12] <Codenut> ls
[11:13] <alive> Also I am in no hurry to remove the firefox snap but it seems like we're heading towards an ie5.5+windows explorer type of situation with Ubuntu and Snap
[11:14] <alive> I'd still like to know how I manage my encryption passwords. Is it done through the /dev/zd0 device?
[11:20] <ravage> alive, the system unlocks /dev/mapper/keystore-rpool on boot. it is an ext4 partition that conrains system.key to unlock your zfs pool
[11:21] <ravage> *contains
[11:23] <alive> Thank you, I found out that the /dev/zd0 luks device is what is actually containing my keyslots.
[11:24] <alive> Is there anywhere this information is formalized?
[11:28] <ravage> did not find anything really. figured that out myself
[11:29] <alive> wow, thanks for relaying the info then ravage
[11:49] <konrados> Hey, I'll try again:) As a root, being on bash, I did `sudo useradd -m konrad` - why 'konrad' did 'dash' as the default shell?
[11:50] <konrados> Is this some sort of customized ubuntu, or I'm stupid? :)
[11:51] <konrados> *why 'konrad' did GET 'dash' as the default shell
[11:53] <akossh> konrados: I believe that dash is the default shell for Ubuntu users.
[11:54] <konrados> akossh, thanks, afaik it's not, can't google that, do know how to check it out? I can install on a VM a new ubuntu, but is there a simpler way?
[12:13] <anddam> what is the proper way to update a hirsute hippo to working condition?
[12:13] <anddam> currently even an update fails since the repo has no Release file for it
[12:13] <lotuspsychje> anddam: hirsute is eol by now
[12:14] <lotuspsychje> anddam: best to clean install a supported ubuntu release from this channels topic
[12:15] <anddam> from zero or over the existing system?
[12:17] <lotuspsychje> anddam: the longer you wait to update an eol release, the more chance of security flaws see !usn
[12:18] <lotuspsychje> anddam: its possible to !eolupgrade , but i would go for clean install
[12:19] <anddam> it's a vm used for internal testing, not mine btw
[12:20] <anddam> I am kinda "the linux guy" so a coworker asked me if I could help
[12:20] <lotuspsychje> !eolupgrade | anddam
[12:21] <geirha> it'll be time consuming, because you have to first upgrade from 21.04 to 21.10, then from 21.10 to 22.04 to land on a supported release
[12:21] <lotuspsychje> anddam: even faster in a VM, more reason to clean install
[12:30] <anddam> first thing I said to them when I saw the error was "install an LTS"
[12:34] <anddam> they were puzzled about why something called "21.something" was EOL already
[12:39] <brkcore> I have a usb that timeshift creates back ups on it. As well as I have some additional files on it. The USB is encrypted. Now all text files odt, txt ect. are empty
[12:40] <brkcore> what can I do, i tried to copy these files on the local disk but they are still empty, no text in them
[12:40] <brkcore> must be the encryption itself, nothing to do with the timeshift back ups I guess
[12:41] <brkcore> stupid idea to encrypt a usb, it will stay encrypted for ever
[12:42] <brkcore> and its a good one, 64GB Samsung .. used it for years, my favorite one :/
[12:44] <brkcore> and the files are just 0 bytes size
[12:51] <SoCkEt7> why i can't execute : IP = $(torsocks wget -qO- https://api.ipify.org) && echo $IP ?
[12:52] <SoCkEt7> there's functions before to get a new tor circuit.
[12:53] <SoCkEt7> Typically i want to  IP = $(torsocks wget -qO- https://api.ipify.org) && locateIp($IP) ..
[12:54] <konrad_> SoCkEt7, I'm not an expert in bash, but can you try removing spaces, so IP=$(...)
[12:55] <SoCkEt7> trailling spaces ? Really ?
[12:55] <konrad_> Bash is weird, that is why I try to not use it :)
[12:55] <SoCkEt7> i'm on VIM i'll use jetbrain IDE for bash i think.
[12:55] <SoCkEt7> Yeah very weird
[12:55] <SoCkEt7> to name VAR and call $VAR
[12:56] <konrad_> When I tried to learn how to `if` in bash I decided to drop it :)
[12:59] <SoCkEt404> yeah but i dont want to switch to a sub language for that function..
[12:59] <konrad_> I get it, so simple things I do in bash, but a bit more complicated in ... javascript (with nodejs)
[12:59] <konrad_> Does it work now?
[13:24] <alive> ravage: The information is hereby documented 'somewhere' on the internet. https://nixy.dk/posts/ubuntu-zfs-encryption-key-management/
[13:25] <ravage> alive, oh great. will bookmark that one :)
[13:25] <ravage> this could also be useful for the official documentation
[13:27] <lotuspsychje> alive ravage the tuts from linuxconfig are usualy pretty great too; https://linuxconfig.org/configuring-zfs-on-ubuntu-20-04
[13:29] <ravage> yes sure. but the Ubuntu wiki should not be a link collection :(
[13:29] <lotuspsychje> agree ravage
[13:33] <BluesKaj> Hi all
 why i can't execute : IP = $(torsocks wget -qO- https://api.ipify.org) && echo $IP ?
[13:41] <SoCkEt7> <SoCkEt7> there's functions before to get a new tor circuit.
[13:44] <ravage> that torsock command makes no sense at all. to get the IP in $IP do
[13:44] <ravage> IP=$(wget -qO- https://api.ipify.org) && echo $IP
[13:44] <ravage> but i already told you that same command days ago
[13:54] <ogra> SoCkEt7, because shell is not python ... you can not use spaces around the equal sign when trying to assign something to a variable ...
[14:35] <webchat71> Dear all, wondering if you can help me find out if the version of openssh-server(openssh-server/focal-updates,now 1:8.2p1-4ubuntu0.5 amd64) i have installed, has "ExposeAuthInfo" keyword available for use?
[14:36] <webchat71> I have added this keyword to sshd_config and it did not complain but not sure if it is working as expected hence the question, how do I check if the keyword(ExposeAuthInfo) is supported in my version of openssh-server
[14:41] <kushalkumaran> webchat71: check manpage for sshd_config
[14:42] <ogra> also check twice that you edited sshd_config and not ssh_config ... mixing up the two files is a very common error 😉
[14:46] <ioria> it's enabled from 1:7.6p1-1 afaik webchat71  :  apt changelog ssh | grep -i "ExposeAuthInfo" -B 22 -A 4
[16:09] <mordant> I'm trying to set permissions in a folder for future files and I'm using chmod g+rws to set future RW permissions for the group. However, I'm seeing new files not having W access. What am I doing wrong?
[16:12] <Payam10> Hi
[16:12] <Payam10> How do I check if a driver is installed?
[16:12] <Payam10> Like Nvidia?
[16:18] <TomyWork> mordant, for that, you'd set the umask
[16:19] <TomyWork> mordant, the default umask on most distros is 022, meaning 0777&~022=0755 is the default for directories and 0666&~022=0644 is the default for files
[16:20] <TomyWork> if it's a systemd service, there's a config option for that
[16:20] <TomyWork> https://www.freedesktop.org/software/systemd/man/systemd.exec.html#UMask=
[16:20] <mordant> TomyWork, that's...confusing, but I appreciate the info. Not systemd, it's a web application writing some temporarily stored files from uploads
[16:21] <TomyWork> mordant, why havent you made that a systemd service yet? :)
[16:21] <mordant> what...the uploads?
[16:21] <TomyWork> the web application
[16:21] <mordant> well I did just get it moved off of fedora core 3 a week ago, past dev left it there to rot for almost 20 years
[16:22] <TomyWork> i assume you're starting it from a screen session or something
[16:22] <mordant> legacy php, no
[16:22] <TomyWork> oh so it runs in an apache or something?
[16:22] <mordant> correct
[16:22] <TomyWork> so give the umask to the apache
[16:22] <mordant> it's nginx, I'll look into that, thank you
[16:22] <TomyWork> via a systemd drop-in unit
[16:23] <mordant> I wouldn't just edit the fpm.service file?
[16:23] <TomyWork> https://www.freedesktop.org/software/systemd/man/systemd.unit.html  <--- ctrl-f drop-in
[16:23] <mordant> gotcha
[16:24] <TomyWork> mordant, if you edit fpm.service, it'll get overwritten in the next update
[16:24] <TomyWork> (potentially)
[16:24] <mordant> good point
[16:24] <mordant> thanks TomyWork, that's a big help
[16:24] <TomyWork> it's /etc/systemd/system/fpm.service.d/yourdropinunit.conf i think
[16:25] <mordant> so additional final question, what's the umask equivalent for 775?
[16:25] <TomyWork> 002
[16:25] <TomyWork> it's octal
[16:25] <TomyWork> hexadecimal's little brother :)
[16:25] <mordant> got it, thank you
[16:26] <centHOGG> Hiya, has anyone here setup a dual-boot along with windows 11 s-mode laptops? TIA, asus l510 works with 22.04.1 fine out-of-box. Would it be okay to install and hope grub finds w11s no problemo?
[16:26] <EriC^^> s-mode?
[16:26] <TomyWork> shit mode
[16:26] <TomyWork> secure boot i guess
[16:26] <centHOGG> yeah, MS version of chromebox heh
[16:27] <EriC^^> hmm never seen that before
[16:27] <EriC^^> centHOGG: i'd guess it would work if ubuntu alone is working
[16:29] <mordant> TomyWork, ok so issue, I'm stuck on php5.6-fpm from legacy code (for the time being), doesn't look like it lives in systemd. Googling around notes /etc/init/php-fpm.conf
[16:33] <mordant> TomyWork, stackoverflow suggests a cp /lib/systemd/system/php5-fpm.service /etc/systemd/system/ and editing that though. Will that change the php5.6-fpm service to run via systemd then? do I need to disable the init one? So many questions
[16:33] <jhutchins> mordant: I thought it was an on-demand process.
[16:33] <jhutchins> mordant: Does the init method fail?
[16:34] <mordant> jhutchins, no, I'm just trying to change umask stuff without it getting purged on an update later
[16:34] <mordant> jhutchins, it's working fine in init
[16:35] <mordant> https://ispire.me/running-php-fpm-with-different-user-group-using-umask/ this is basically exactly what I'm looking at doing
[16:37] <TomyWork> mordant, systemd actually generates service units for all /etc/init.d scripts
[16:37] <TomyWork> but what's the service called now? fpm? php5-fpm? php-fpm?
[16:38] <mordant> this is totally out of my wheelhouse, so I apologize if the questions are dumb. I know that when I have to restart fpm, I have to do it via init.d. It's called php5.6-fpm
[16:39] <mordant> ok I lied, I can restart it via systemctl
[16:39] <mordant> dont know why I thought otherwise
[16:39] <mordant> however I don't see it listed in the /etc/systemd/system/ list
[16:40] <mordant> wait, I found it. It's in multi-user.target.wants
[16:40] <mordant> alright cool, I feel better
[16:43] <mordant> TomyWork, so /etc/systemd/system/multi-user.target.wants/php5.6-fpm.service symlinks to /lib/systemd/system/php5.6-fpm.service, how do I add a drop-in for this then?
[16:45] <c_89> I installed PyCharm Communtity Edition via flatpak, but when I run: Python packages> install> beautifulsoup4, it seems to never finish installing?
[16:48] <TomyWork> mordant, try /etc/systemd/system/php5.6-fpm.service.d/yourdropinunit.conf
[16:48] <mordant> ok cool, that's what I thought reading your link. Thank you!
[16:48] <TomyWork> don't forget the [Service] section header at the top :D
[16:49] <TomyWork> I keep forgetting that
[16:53] <mordant> TomyWork, yea I got that, good call
[16:53] <mordant> TomyWork, I appreciate the hand holding, thanks again
[16:58] <c_89> ?
[17:08] <jhutchins> c_89: That's more of a python question than an ubuntu question.  Where did you get the flatpak?
[17:10] <c_89> jhutchins `flatpak install com.jetbrains.PyCharm-Community`
[17:13] <mordant> TomyWork, so now that I have this setup; is there a way to see if the conf is loaded in?
[17:15] <ravage> systemctl show php5.6-fpm
[17:15] <mordant> ravage, got it, thanks
[17:16] <jhutchins> c_89: Any support links on their web page?
[17:16] <c_89> jhutchins https://flathub.org/apps/details/com.jetbrains.PyCharm-Community
[17:20] <mordant> alright, systemd didnt load in my drop-in; is it because the service file lives in the /etc/systemd/system/multi-user.target.wants and my config lives in /etc/systemd/system/php5.6-fpm.service/conf.conf?
[17:27] <ravage> mordant, did you do a "systemctl daemon-reload" `
[17:27] <mordant> I did a systemctl restart php5.6-fpm
[17:31] <ravage> so that is a no :)
[17:32] <mordant> it is :(
[17:33] <mordant> well, did it, my drop-in wasn't loaded as far as I can tell
[17:33] <ravage> i tested it with the excact same service and changed the Description
[17:33] <ravage> that worked
[17:34] <mordant> well what the hell am I doing wrong, this seems dead simple
[17:36] <ravage> mkdir -p /etc/systemd/system/php5.6-fpm.service.d; printf "[Unit]\nDescription=MY CUSTOM DESCRIPTION" > /etc/systemd/system/php5.6-fpm.service.d/custom.conf;systemctl daemon-reload; systemctl show php5.6-fpm.service| grep Description
[17:36] <mordant> ...I didn't add .d in my folder name, that might do it
[17:37] <mordant> yup, that was it. You rule, ravage
[17:38] <kushalkumaran> systemctl edit can help
[17:38] <ravage> 👍
[17:50] <Teckla> Anyone have a link handy to the Ubuntu desktop SHA256 sum?  I'm having difficulty finding it on their website.
[17:51] <oerheks> it is on the iso too.. https://ubuntu.com/tutorials/how-to-verify-ubuntu#3-download-checksums-and-signatures
[17:51] <ravage> Teckla, https://releases.ubuntu.com/jammy/SHA256SUMS
[17:51] <oerheks> jups that is the one for 22.04.1
[17:52] <oerheks> note: 22.04 <> 22.04.1
[17:52] <Teckla> ravage: Thank you.  Not sure why I'm struggling so badly to find it myself.
[17:53] <Teckla> oerheks: Ah, darn it!  I must have navigated to that page half a dozen times, and somehow, missed the link in there each time!
[17:53] <Teckla> oerheks: Thanks :)
[17:53] <oerheks> have fun!
[17:54] <Teckla> My vision is not the best.  Somehow, the link doesn't "stand out" to me.
[17:54] <Teckla> Anyway, thanks folks, looking forward to installing this upgrade
[17:54] <ravage> :) have fun
[17:58] <serp> I see that ufw now has "route allow" that should do port forwarding...   i am trying to use it to forward a port to another ip (i only have one interface).  If I have a box A with ip 192.168.1.10 and running a service on port 5555, and i have a box B (192.168.1.11) that i want to set up a forward to that service.  From box B I can connect to box A
[17:58] <serp> on that service just fine.   What I want is connecting to box B on port 5555 will forward on to A.  On box B, I am using a command like "ufw route allow to 192.168.1.10 port 5555" but that doesn't seem to be working.   I have done this before with iptables.  Trying to figure out what I'm missing with ufw.
[18:06] <ravage> serp: did you enable ip forwarding via sysctl in general?
[18:20] <johnfg_> hi folks.  Have most things working since the upgrade to 22.04.  Some challenges with openldap/slapd restore, but got it done with help from #openldap.
[18:21] <johnfg_> I'm getting this now when I try to do an apt full-upgrade:
[18:21] <johnfg_> The following packages have been kept back: gnome-shell gnome-shell-common gnome-shell-extension-prefs ubuntu-advantage-tools
[18:21] <johnfg_> 0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.
[18:21] <johnfg_> What's wrong?
[18:22] <ravage> probably nothing. what does "apt policy gnome-shell" output?
[18:23] <serp> ravage: yes in /etc/ufw/sysctl.conf
[18:24] <johnfg_> Installed: 42.2-0ubuntu0.2, and the candidate is for 22.04.
[18:24] <ravage> serp, ok. i never really used ufw. but if you know how it works with iptables you should be able to debug it by inspecting the iptables output?
[18:25] <arraybolt3[m]> johnfg_: There's this new thing called "phased updates" that causes this to happen a lot of times, it just fixes on its own given time. Basically, updates have been released, but they're being gradually rolled out to the users in stages rather than all at once. Keeps the server from getting slammed, makes it so that if there's a bug in a package it's more likely that the update can be stopped before it makes it to you.
[18:25] <ravage> johnfg_, there are usually more lines. anything about phased and a percentge?
[18:25] <ravage> *percentage
[18:25] <ravage> if yes: https://wiki.ubuntu.com/PhasedUpdates
[18:27] <johnfg_> ravage: I didn't want to flood: https://paste.ubuntu.com/p/vpHgWx2Smc/
[18:27] <tomreyn> johnfg_: it does say "phased" and a percentage.
[18:28] <johnfg_> so, just be patient, and try again later?
[18:29] <ravage> yep. you can do "apt upgrade gnome-shell gnome-shell-common gnome-shell-extension-prefs ubuntu-advantage-tools"
[18:29] <ravage> but you can also just wait until they update with the regular upgrade command
[18:30] <johnfg_> Well, that was easy :-)  Thanks so much guys!
[19:26] <craigbass76> Whta are folks using these days to make calls from their Ubuntu machines? There used to be some google service that gave you a phone number, but I don't know what's out there these days.
[19:26] <enigma9o7[m]> Have you heard of a device called a telephone?
[19:26] <oerheks> me neither, still those services need a registered phone number, to work.
[19:27] <dobbicorp> enigma9o7[m]: the hell is this thing?!
[19:27] <dobbicorp> i still use gopher
[19:27] <dobbicorp>  and irc
[19:30] <snailsonalj> Debian has the debianlive project https://wiki.debian.org/DebianLive that using a series of shell scripts to make a live debian ISO. Does ubuntu have the same thing, only for ubuntu?
[19:31] <oerheks> all our iso' s have a live mode, and uses those tools too, AFAIK
[19:32] <snailsonalj> So the exact debianlive is also used to make the live ubuntu ISOs, no derivative project at all?
[19:33] <oerheks> yes, https://manpages.ubuntu.com/manpages/jammy/man7/live-config.7.html
[19:33] <snailsonalj> Okay that's awesome. Thanks.
[19:39] <enigma9o7[m]> I think skype can call phones?  But it's been years since I've used it...
[19:40] <luna__> enigma9o7[m]: yep if you pay extra for it
[19:40] <oerheks> there is a snap for that
[19:40] <dobbicorp> enigma9o7[m]: nice, yeah, besides joke, i used to cal via skype
[19:40] <dobbicorp> luna__: exactly
[19:46] <dobbicorp> oerheks: what is snap?
[19:47] <oerheks> https://snapcraft.io/skype
[19:47] <oerheks> a funny way to publish Proprietary blobs
[19:47] <dobbicorp> oerheks: so snap is just a skype client?
[19:48] <ali_> hi
[19:48] <ali_> for all ubuntu users
[19:48] <dobbicorp> hi
[19:48] <oerheks> its a package system, created by canonical
[19:48] <oerheks> !snap
[19:48] <arraybolt3[m]> Snap is a package manager that you can install software with.
[19:48] <arraybolt3[m]> Skype is available for Ubuntu as a Snap package.
[19:49] <dobbicorp> ahh
[19:52] <ali_> exit
[19:52] <ali_> exit
[20:13] <Teckla> Ah, Ubuntu.  I missed you.  <3
[20:13] <Teckla> Everything working perfectly  :)
[20:15] <arraybolt3[m]> \o/
[20:39] <question2> how do i make my live usb stick read only and with only one partition?
[20:41] <question2> this is because i like to have the sha256sum of the entire usb stick to be always the same, for tamper evidence.
[20:48] <Mathisen> i doubt that will work, atleast with a normal usb. maybe with a usb with an physical write protect switch
[20:49] <Mathisen> you could on the otherhand keep a list of checksums for all the files and see if any file has been changed.
[20:51] <sarnold> Mathisen: note that question2 has already left
[20:52] <Mathisen> .. i have quit/part disabled not the first time :) thanks anyway
[20:53] <sarnold> hehe
[20:55] <Mathisen> i have a question: one folder is anoying me i cant delete it. it is totaly empty but i still get "rm: cannot remove 'Folder': Device or resource busy" when trying to delete it.  nothing is mounted and there is no hidden files
[20:55] <Mathisen> i cant reboot this machine as it is a VPS server
[20:55] <Mathisen> got things running
[21:01] <Teckla> Is it possible to "edit the properties" of program icons on Ubuntu?  I'd like to add the option/flag "--force-dark-mode" when Chrome starts.
[21:02] <enigma9o7[m]> of course
[21:02] <EriC^^> Teckla: there's a .desktop file probably in /usr/share/applications with an Exec= line you can edit
[21:02] <enigma9o7[m]> first copy the desktop file from /usr/share/applications to .local/share/applications
[21:02] <enigma9o7[m]> probably google-chrome-stable.desktop or something
[21:02] <enigma9o7[m]> once you've put it in ~/.local/share/applications then edit it
[21:03] <enigma9o7[m]> change the Exec line like eric said
[21:03] <EriC^^> you'll probably want to edit the name= thing too so you dont have 2 google-chrome's
[21:03] <Teckla> Awesome, thank you both very much!
[21:04] <enigma9o7[m]> why would you have two?
[21:05] <EriC^^> cause there's 2 .desktop files with the same name=, if he types google-chrome into the dash it'll show 2, one the /usr/.. and the other .local
[21:05] <enigma9o7[m]> oh... dont rename the desktop file, thats important, or the local one won't override the system one.  but nobody suggested that anyway.
[21:05] <enigma9o7[m]> It shouldnt Eric, if so somethings broken.
[21:05] <JoeLlama> Got 80GB of ram on a box and I'm installing lubuntu...  How much swap space do I need?
[21:05] <EriC^^> oh if it's the same filename it takes the .local instead?
[21:06] <enigma9o7[m]> Yes.
[21:06] <Mathisen> JoeLlama, depends on what the machine is gonna do. i assume this is not a normal machine with that kinda memory.
[21:06] <Mathisen> anyway for normal use you dont need any swap with that amount
[21:07] <JoeLlama> sure Mathisen...  it's a server but mostly gunnna be used as a RAID 6 box with one or two users and it's doing light duty stuff
[21:07] <JoeLlama> hrm i wanna assign some area to swap space
[21:07] <JoeLlama> maybe um...
[21:08] <Teckla> Great, found it, thanks again enigma9o7[m] and EriC^^  :)
[21:08] <JoeLlama> like what perhaps 16 GB Mathisen?
[21:08] <Mathisen> just use a swap file for hibernation if you need that and you bee good
[21:08] <Mathisen> no need realy for a partiton
[21:08] <JoeLlama> hrm okay
[21:08] <arraybolt3[m]> I get away with no swap on a 32GB RAM system. Swap is entirely unneeded unless you're doing unimaginably heavy work.
[21:08] <JoeLlama> yeah still gunna do a partition
[21:08] <EriC^^> no problem Teckla :)
[21:08] <JoeLlama> just so it's there
[21:08] <arraybolt3[m]> (On a system with 80GB RAM)
[21:09] <JoeLlama> hrm really?
[21:09] <JoeLlama> hi arraybolt3[m]
[21:09] <arraybolt3[m]> It'll just wear out you drive faster if it does anything.
[21:09] <arraybolt3[m]> JoeLlama: 👋
[21:09] <JoeLlama> ok so maybe no swap is that an option when I set up lubuntu?
[21:09] <JoeLlama> and it's 8 drives arraybolt3[m] :)
[21:09] <arraybolt3[m]> Yep.
[21:10] <JoeLlama> ok ok so I know when I intall I gotta choose the "other" option when allowcating space on the drive... or it simply won't install
[21:10] <arraybolt3[m]> Right but you'd like them all to work and keep working. :)
[21:10] <enigma9o7[m]> No swap is a risk tho, cuz it means if you ever do overuse your ram (open too many tabs at once) it will kill stuff, instead of swapping it.
[21:10] <JoeLlama> it errors out
[21:10] <enigma9o7[m]> Its better, unless you have no disk space at all, to have a swap disk.
[21:10] <enigma9o7[m]> or swap file i mean
[21:10] <JoeLlama> ended up with 5.4 TB of RAID 6 space
[21:10] <arraybolt3[m]> (sorry for being slow, dealing with a kitten on my lap)
[21:10] <enigma9o7[m]> and better to never use it
[21:10] <Helenah> enigma9o7[m]: Not true.
[21:10] <JoeLlama> hrm enigma9o7[m] so like create  swap space?
[21:11] <Helenah> I have a lappy with limited RAM
[21:11] <Helenah> It's swapping like hell
[21:11] <Helenah> and nothing is getting killed
[21:11] <JoeLlama> oOo kitten :)
[21:11] <Helenah> I'm using 3 GiB of SWAP
[21:11] <arraybolt3[m]> 80GB RAM is more RAM than some systems have disk space. You could almost certainly comppile Chromium without swap on that machine (and that's saying something).
[21:11] <enigma9o7[m]> Joe: if you'r einstalling, dont create a sperate thing, let ubuntu create a swap file.  that will give you the most freedom.  you can resize that file whenever you want if you dont want default.
[21:11] <JoeLlama> oh ok so if I wanna hibernate then I need a swap right?
[21:12] <enigma9o7[m]> If you create a swap partition, you're stuck with that partition forever, and theo nly advantage it has over a swap file is that every distro can use it if you multi boot.
[21:12] <arraybolt3[m]> Yes hibernation does require swap.
[21:12] <JoeLlama> well I have to set up my own partitions manually apparently
[21:12] <enigma9o7[m]> Yes but swap file is fine for hibernation too.
[21:12] <JoeLlama> or the install fails
[21:12] <Helenah> I got 2 web browsers open (qutebrowser and firefox) and like a lot of tabs open in both, then there is my terminal emulator and SSH sessions so I'm not sure where you got your information from about things getting killed instead of swapping.
[21:12] <arraybolt3[m]> But hibernation is crummy.
[21:12] <JoeLlama> how much swap space do I need to hibernate?
[21:12] <arraybolt3[m]> Helenah: That's what happens if you *don't* have swap.
[21:12] <question2> how do i make my live usb stick read only and with only one partition?
[21:12] <arraybolt3[m]> (And you have limited RAM.)
[21:12] <Helenah> arraybolt3[m]: Oh
[21:12] <question2> this is because i like to have the sha256sum of the entire usb stick to be always the same, for tamper evidence.
[21:12] <Helenah> woops
[21:13] <arraybolt3[m]> JoeLlama: At least as much as you have RAM in your system, so about 80 GB.
[21:13] <Helenah> Why explain the obvious?!
[21:13] <Helenah> You can't use something that doesn't exist... :D
[21:13] <enigma9o7[m]> joellama: that depends how much ram you're using, cuz it needs to be able to save all your ram and all your swap.
[21:13] <arraybolt3[m]> Helenah: Debating over to swap or not to swap :)
[21:13] <JoeLlama> oh really? :(
[21:13] <JoeLlama> that's quite a bit of space arraybolt3[m]
[21:14] <arraybolt3[m]> JoeLlama: Yeah, hibernation saves the entire contents of your system's RAM to disk, into the swap file. So 80GB RAM, means 80 GB swap to hibernate.
[21:14] <JoeLlama> but when you hibernate it stores all that ram?
[21:14] <JoeLlama> yeah makes sense
[21:14] <JoeLlama> so then...
[21:14] <JoeLlama> no swap :)
[21:14] <question2> how do i make my live usb stick read only and with only one partition?
[21:14] <enigma9o7[m]> and what arraybolt3 says assumes you werent using more than 80gb ram either, like you didn thav eanything swapped.
[21:14] <Helenah> arraybolt3[m]: Oh dear!
[21:14] <arraybolt3[m]> JoeLlama: Yep. That's why hibernation works. Then when you turn the system on next the saved RAM is loaded back into the RAM.
[21:14] <JoeLlama> and when I install I can specify no swap right?
[21:14] <Helenah> That doesn't sound good. :D
[21:14] <arraybolt3[m]> JoeLlama: Yes.
[21:14] <enigma9o7[m]> You need as much space as you're using.  So if you're using 32GB of ram+swap, you need 32GB of swap to save it for hibernation.
[21:14] <Helenah> Best just hibernating directly to the root partition on the disk and not to the swap...
[21:15] <arraybolt3[m]> question2: That sounds tricky but doable. You might wait for the noise to calm down so that the next time you ask someone who knows how to do that can answer. Don't worry, you are not forgotten, and we do want to help make it work.
[21:15] <JoeLlama> oh um.. I can do that?
[21:15] <JoeLlama> I don't think I'm going to hibernate anyways
[21:15] <JoeLlama> sounds crummy :)
[21:16] <Helenah> JoeLlama: Yeah sounds terrible... lol
[21:16] <JoeLlama> ok thanks...
[21:16] <arraybolt3[m]> JoeLlama: I've never had hibernation be anything more than a nuisance. So yeah, I'd just go with no swap.
, xubuntu 18.04.5 is still like that but xubuntu 22 is not anymore
[21:16] <JoeLlama> well in the old days hibernating was kind of a g ood thing when we had less resources I think
[21:16] <JoeLlama> but not today
[21:16] <enigma9o7[m]> question2: what happens when you try?  you create one partition only when you format it.  put your data on it.  then set it read only.
[21:17] <question2> it has two extra partitions, that are writable.
[21:17] <enigma9o7[m]> I keep my computer in the back room hibernated all the time.
[21:17] <JoeLlama> today we can do what I did buy a used server for like 100 USD
[21:17] <enigma9o7[m]> Other than rebooting of course.  Cuz its hardly ever used.
[21:17] <enigma9o7[m]> And when we do use it, dont wanna wait for it to boot, its an old pentium 4 running debian.
[21:17] <JoeLlama> came with 8 drives 80 GB ram dual power supplies etc
[21:17] <enigma9o7[m]> so hibernate works fine
[21:17] <enigma9o7[m]> I can push the on button and be using it 10 seconds later.
[21:18] <enigma9o7[m]> and otherwise, its powered off.
[21:18] <JoeLlama> if anyone wants to buy used servers for 100 USD I know a guy :)
, what it is the live cd that should stay on the usb
[21:18] <arraybolt3[m]> JoeLlama: Quick unrelated but still important question, have you done anything to avoid possible electromagnetic interference from that server? I think running them in a residential area without extra shielding could cause problems with the FCC.
[21:18] <question2> thats what i want to use the live usb stick
[21:18] <arraybolt3[m]> (Depending on the server, obviously.)
[21:18] <JoeLlama> arraybolt3[m] it's a big slab of machine lotta metal
[21:19] <JoeLlama> not really worried about it but I'll turn on a radio and see how badly it's affected
[21:19] <JoeLlama> but yes FCC regs are a concern
[21:19] <arraybolt3[m]> JoeLlama: What manufacturer and model? Dell PowerEdge something or other? Or...?
[21:19] <enigma9o7[m]> Q2, I don't understand what you're saying.  Are you just tryinig to write an iso to usb?
[21:19] <JoeLlama> in our area we all have internet or cable... not much radio going on
[21:19] <JoeLlama> still... it matters
[21:20] <JoeLlama> Dell PowerEdge R720
[21:20] <arraybolt3[m]> enigma9o7: When you write an ISO to a USB, it makes a writable partition (or maybe two?). Q2 wants to not have that.
[21:20] <JoeLlama> fans are pretty noisy if it gets hot or when you startup
[21:20] <JoeLlama> it has 6 server fans and 2 PS fans
[21:20] <enigma9o7[m]> That doesnt  happen for me.
[21:21] <enigma9o7[m]> How are you writing the iso?  dd?
[21:21] <enigma9o7[m]> some isos are like hybrid whatever, they come with  multiple partitions tho
[21:21] <JoeLlama> I use dd
[21:21] <enigma9o7[m]> but if theres one partition on the iso and you write it with dd, itll come out one partition
[21:22] <question2> yes i use dd
[21:24] <JoeLlama> k thanks :)
[21:26] <question2> i just opened gparted on it and the usb stick just shows iso 9660
[21:29] <question2> https://pastebin.com/i6xT9j9C
[21:30] <question2> what if i dd if=/dev/zero of=/dev/sdb4 ?
[21:31] <sarnold> question2: oh hey were you wanting the read-only usb? https://www.kernel.org/doc/html/latest/admin-guide/device-mapper/verity.html
[21:51] <question2> ?
[21:52] <question2> i do sudo sha256sum /dev/sdb
[21:52] <question2> and i expect it to be the same
[21:53] <question2> what debian distro currently has this on their isos?
[21:53] <question2> again
[21:53] <question2> xubuntu 18.04.5 is still like that but xubuntu 22 is not anymore
[21:53] <question2> xubuntu 18.04.5
[21:53] <question2> is like :
[21:54] <oerheks> xubuntu 18.04 is EOL
[21:54] <arraybolt3[m]> oerheks: They're trying to show that something used to work but now no longer works.
[21:54] <question2> #/dev/sdb1 /disk on the output of lsblk
[21:55] <question2> now i have writeable
[21:55] <oerheks> oh dd should work, sync after that
[21:55] <question2> linux mint always was like that i guess
[21:55] <question2> i use dd
[21:55] <question2> sync?
[21:55]  * oerheks runs away from mint issues
[21:56]  * question2 remains
[22:34] <jhutchins> Zeroing a drive before writing an (installer) image to it is a waste of time and cycles.
[22:35] <jhutchins> (So it partitioning and formatting.)
[22:41] <ogra> jhutchins, well, if you sha256sum the whole device but do not fully fill it with the dd'ed image, your sha256 sum might differ between drives
[22:41] <ogra> zeroing makes sure there are no crufty bytes anywhere
[22:43] <ikonia> an image is not an installer
[22:45] <ogra> ??
[22:47] <jhutchins> ikonia: Right, not necessarily.
[22:47]  * ogra fails to see the context
[22:48] <jhutchins> People write images to drives for other reasons, but we seldom deal with those here.
[22:48] <xMopx> is archive.ubuntu.com having problems? a fresh docker image is telling me "is not signed"
[22:48] <ogra> (it does not really matter whats in the img ... the topic was about sha-summing the whole device)
[22:49] <ikonia> xMopx: does archive sign docker images ?
[22:49] <jhutchins> Still, writing an image to a drive overwrites all of the data in the range of the image, so zeroing is redundant.
[22:49] <xMopx> ikonia: ah i should clarify. I meant for apt
[22:49] <ogra> jhutchins, what about rest of the drive ?  🙂
[22:49] <ikonia> xMopx: what is the relevance of a docker image then ?
[22:49] <ikonia> (For context)
[22:49] <xMopx> easy way of saying it's a fresh unmodified system
[22:49] <ikonia> no it's not
[22:50] <ikonia> a docker image is very different than an install
[22:50] <ikonia> hence asking
[22:50] <xMopx> and in either case it is unmodified, by me, from the vendor
[22:50] <jhutchins> ogra: Shouldn't be an issue, the MBR/FAT have been overwritten, even if it's accessible working with the image shouldn't read past it's end, shouldn't touch the "rest of the drive".
[22:50] <ikonia> so you're not actually running an ubuntu install, you're running an ubuntu container from $somewhere - logging into it and trying to do apt install type operations
[22:50] <jhutchins> Unless you're being tricky and writing multiple images to the same drive.  Which people do I guess.
[22:51] <xMopx> anyway, apt looks upset like this: https://pastebin.com/raw/8DaWGKuq
[22:51] <ikonia> xMopx: can you just clarify the setup - is it as I said above
[22:51] <ogra> jhutchins, well, sha256sum will checksum the whole drive if you do something like "sudo sha256sum /dev/sdb" ... i.e. what was stated above ...
[22:51] <xMopx> ikonia: it's not clear to me what you want to know
[22:52] <ikonia> xMopx: you're not actually running an ubuntu install, you're running a container with an ubuntu install from $somewhere, logging into the container and doing apt operations ?
[22:52] <ogra> jhutchins, so the leftover data that was not overwritten by writing the image will indeed cause differences between tw USB sticks
[22:52] <jhutchins> ogra: I believe you're correct.
[22:52] <ogra> jhutchins, for that (very special case) you should zero the drives befoe writing to them
[22:52] <xMopx> ikonia: sure
[22:53] <ikonia> xMopx: and where did the container come from ? what's it's container ID
[22:53] <jhutchins> ogra: So how do you tell sha256 to read the image, not the rest of the drive/
[22:53] <jhutchins> ?
[22:53] <xMopx> ikonia: it's the official image published by canonical.
[22:53] <ikonia> xMopx: straight from the canonical repo ?
[22:54] <ogra> jhutchins, you could read from the disk with dd and pipe that nto sha256sum i guess ... that way you could limit the read size
[22:57] <jhutchins> In my own experience, the file transfer is the most likely step to corrupt an image.  Burning an actual disk was somewhat iffy, but dd is pretty reliable.
[22:57] <jhutchins> To each their own precautions.
[23:00] <xMopx> ikonia: straight from where canonical publishes them, yes.
[23:01] <arraybolt3[m]> jhutchins: When I have to just read part of a drive, I use "head" and pipe the output (usually to cmp to verify that a USB drive wrote good)
[23:01] <ikonia> xMopx: I just hit 3 different mirrors on archive, all show correct signing
[23:01] <xMopx> weird
[23:01] <ikonia> xMopx: have you mounted any volumes on the container ?
[23:01] <xMopx> ikonia: no
[23:02] <ikonia> is it possible you've got an older container than the current release ?
[23:02] <xMopx> i can't seem to pull a newer one, and the existing one is ~3 weeks old
[23:02] <ikonia> is this something you normally do - or is this the first time you've tried it
[23:03] <ikonia> I've seen vendors remove files from the containers such as sig files to stop people tampering with them, so they are immutable, but I don't believe canonical does that
[23:04] <xMopx> it's the first time i've seen this on this machine. It's just a machine i develop docker images on regularly
[23:05] <ikonia> xMopx: just for interest maybe trying to install a snap package
[23:05] <ikonia> I wonder if the sigs are there for that
[23:05] <xMopx> looks like snap isn't shipped in the container image
[23:05] <ikonia> interesting
[23:06] <ikonia> I'm not a user at this moment of the ubuntu images so I can't really comment and don't have a container host at hand to test
[23:06] <ikonia> that error suggests the repo key files are missing
[23:06] <ikonia> (or at best wrong)
[23:06] <oerheks> maybe your update issue is just diskspace, docker system prune
[23:06] <ikonia> I'd not expect that behaviour from an official ubuntu image personally
[23:06] <ikonia> and as far as I can see archive.ubuntu.com is functioning fine
[23:07] <ikonia> it's not going out of a proxy is it ?
[23:07] <xMopx> hmm, i do fill up this machine from time to time but i was pulling a few images to test this now
[23:07] <sparetire> I used to have a boyfriend named "Ubuntu"
[23:07] <xMopx> no, i can't think of anything "weird" here. It's docker desktop on a macbook
[23:07] <ikonia> sparetire: that's not really a topic for here
[23:07] <sparetire> k
[23:08] <xMopx> ikonia: thanks for taking a look. Definitely seems like something specific to that one machine...
[23:08] <ikonia> xMopx: really, so same image working on others too ?
[23:08] <ikonia> (other machines)
[23:09] <xMopx> it works on my other machine BUT said machine is ARM (rather than amd64), so it is a different base image
[23:10] <xMopx> first machine was amd
[23:10] <sarnold> arm stuff is on ports.ubuntu.com, not archive.ubuntu.com
[23:11] <oerheks> oh good spot, sarnold
[23:11] <xMopx> ah
[23:13] <xMopx> huh, a Trusty base image is fine on the problem machine