[00:00] and it doesn't need that second admin user? [00:02] just login as root to do it [00:02] it's just that you can't be logged in as the user you want to encrypt [00:03] at least where you run the command at [00:05] ah, I'll need another tutorial for that XD https://itsfoss.com/ubuntu-login-root/ [00:05] I get that this is easy for you [00:05] but that seems to be ~20 commands in total. it's not easy for me and I don't think it quite falls under "just one command" :) [00:06] anyways, thanks for the help! I'll catch some sleep and think about whether to do this again tomorrow === NotEickmeyer is now known as Eickmeyer === ingrim9 is now known as ingrim [00:58] well, RDP is extremely slow when scrolling.. dunno if ubuntu is to blame or my rdp android client [00:59] but anyway I'm back to VNC with Xorg, giving up on wayland [01:02] maybe the problem was the encryption slowing RDP down, but there were no options to remove it (I'm using an ssh tunnel with a firewall so rdp/vnc can only be accessed from localhost, and dont need another encryption layer) [01:14] and I guess when ubuntu drops support for xorg, I may need to drop ubuntu === user03 is now known as gchound [01:28] bparker / anotheryou: ecryptfs has security relevant shortcomings and isn't recommended anymore. [01:29] use 'full disk' encryption via dm-crypt luks or a supported file system encryption. [04:09] halo [05:22] Hi, just to confirm, the language Ubuntu 22.04.3 Terminal uses is Bash right? [05:23] kotgc: Yes! [05:24] Frostly, thx, I'm off the bash channel :-) [06:32] i hope to forward traffic from A VPS to B vps with iptables , and A VPS listen destination port "1080" , the PREROUTNG rule like "iptables -t nat -A PREROUTING -p tcp --dport 1080 -j DNAT --to-destination 60.234.77.235", then using "ufw allow 1080/tcp",check status is "1080/tcp allow anywhere", then i check from client "nc -vz 60.235.45.114 1080", connection is fail. i noticed all opened port have a application accordingly , if using iptables , how to let that port [06:32] open? [06:46] xxy: are you sure 60.234.77.235 is the right ip address? that's a mobile network operator from new zealand (whereas 60.235.45.114 appears to be a china telecom ip address). NAT'ing traffic over the Internet is probably not a good idea, unless you encapsulate it in a VPN. [06:50] (and usually mobile networks do CGNAT - you would not be able to connect to a specific endpoint directly anyways) [06:59] xxy: please choose where to discuss this: here or in #linux or in #networking - thanks. [07:00] tomreyn: sorry, that ip is not my VPS IP. my VPS IP is "69.165.76.202" , [07:02] tomreyn: and i notice my VPS no direct public IP , it's a private address when i use "ip a " in that host [07:03] xxy: you provided two ip addresses above, which one is to be replaced by "69.165.76.202", and which one is "VPS A" and "VPS B"? (we don't strictly need to know the IP addresses, just the architecture, unless you'd like someone helping test things). [07:04] tomreyn: the relay VPS address is "69.165.76.202" that port is "1080" , [07:05] so that would be "VPS A" [07:05] tomreyn: yes === nncanepa2 is now known as nncanepa [07:07] tomreyn: the problem is my client can't connect VPS A which display connect refuse . then i check port with "nc -vz ip:port" ,it can't connect success [07:10] xxy: a TCP connection from your client to VPS A's 1080/tcp can only succeed if the connection from VPS A to VPS B' tcp/1080 can be established and something is actually listening on this port on "VPS B" [07:11] maybe discussing this in #networking was actually the better choice, because you may first want to get a better idea of how this network should be designed properly. [07:12] what you're doing there might work, but it's most likely not a good setup, and - i guess - not what you really want. [07:15] tomreyn: my application is xray , xray client is my pc ,and xray server locate on B VPS , and A VPS relay traffic from client request to B VPS for accelerating net speed. this is all. === zaki_fl is now known as zaki [07:22] xxy: i'm not sure what you mean by xray, possibly jfrog's? are any of these systems actually running ubuntu? [07:22] tomreyn: xray is a proxy which can bypass GFW, [07:23] i see [07:23] tomreyn: https://github.com/XTLS/Xray-core [07:27] xxy: i just looked at this, but i don't think i understand how the protocols or server works. there's a good chance someone in #networking will be more familiar with either this approach, or another one for what you're trying to achieve. [07:29] tomreyn: do you mean talking in #networking? [07:30] xxy: yes [07:31] because this is hardly ubuntu related really. this software is not packaged in ubuntu and most people here won't be familiar with it. [07:39] sd [07:39] what is chat [07:39] dolpiwn open [07:39] terminal [09:11] tomreyn: luks seemed difficult to install just for my partition too :/ [09:11] but thanks for the info [09:26] is there any logical reason as to why gparted is included in the usb livedisk, but NOT the full desktop install? [09:26] seems like an odd choice to me [09:38] I would gladly pay someone here 10 or 15usd to setup a mailcow server on my droplet.. this is hell of a pain [09:49] ough, found a tutorial how to encrypt a partition with the ubuntu installer but the ubuntu installer does not seem to have the option to create encrypted partitions anymore :( [09:50] stuck on this step: "[after setting up a 300mb /boot in the partition manager], with the rest of the space make an encrypted volume. This will create a single LV partition. Modify it to be the selected root / partition. Saying it differently, hit the "change" button on /dev/mapper/sdaX_crypt and set the mount point to /" [09:51] yeah what happened to the luks page [09:51] I guess it should look like this: https://i.imgur.com/qNDcIkP.png [09:51] but it seems "simplified" to this: https://i.imgur.com/iihlIw4.png [09:53] https://gist.github.com/superjamie/d56d8bc3c9261ad603194726e3fef50f [09:54] if somebody is interested in setting up mail server for me for 10usd, contact in private msg [09:55] raxor2k: just use ubuntu server and read the online manuals how to do it [09:55] thank you nshire. it shouldn't be that complicated, but that guide looks straight forward at least :) [09:56] still tempted to just kill windows not to deal with this hmmm... [09:56] raxor2k: https://www.hostinger.com/tutorials/how-to-install-and-setup-mail-server-on-ubuntu/ [09:58] nshire: ugh no, don't really want to touch efi :( hmmm... [09:58] respawn: i will try, once again [09:59] I think I'll do the unsecure home encrypion [09:59] seems at least doable [09:59] for me [10:00] efi system partition isn't a big deal [10:00] it can be rewritten if broken [10:00] as long as you don't lose any encryption keys [10:01] haha, that sounds... safe [10:01] I'll do the insecure home encryption and call it a day [10:01] I think it technically fulfills my works requirements [10:01] and if they have nobody to set up linux for me that's their problem [10:01] respawn: i have my own domain inside domeneshop.no, and i can point a DNS to my droplet inside digital ocean, do i need to install bind9 ? [10:04] anotheryou, do you have important data you want to keep on the drive [10:07] nshire: kinda: a windows installation/license I intended to keep (with no data in it yet, fresh laptop) [10:08] license should be auto tied to the mobo if it was connected to the internet [10:14] I guess, yes [10:15] yea maybe I just wipe windows and do the full disk install... [10:15] great, my fresh ubuntu doesn't get past starting gdm.service on boot. love this [10:15] sorry, got a bit grumpy XD [10:15] maybe I just do the full install and see where that gets me [10:16] was just curious to test win11 and maybe use it privately a bit === TomTom_ is now known as TomTom [11:27] ok, somehow managed with popos :) [11:27] did have to fix the boatloader though XD [11:28] do you happen to know if I can re-enable bitlocker in windows after setting up my linux partition? [11:37] both, popos and windows are offtopic here [11:41] well the windows question is a generic one and just as true for ubuntu. And I wonder if it would affect ubuntu. [11:41] but ok, I'll head out :) [11:41] thanks anyways [11:45] ubuntu sucks, and so does its community. sorry for the bad news [12:00] I want to migrate some system currently using libpam_ldap to sssd. I have successfully set up a client using sssd from scratch, but I am unsure how to safely move a server already running libpam_ldap to sssd. Which services should I stop, what packages should be uninstalled and in which order for instance. Anyone has a good pointer to some resources on this? [12:06] Miroboru: could this be what you seek for? https://ubuntu.com/server/docs/service-sssd-ldap [12:25] anybody here experience xwayland crashing after installing/uninstall an app on snap? [12:25] kinda interesting experience [12:26] Your_Dog: check /var/crash for new items [12:27] yeah, have seen in there. _usr_bin_Xwayland.1000.crash [12:29] Your_Dog: see if your bug exists here first, https://bugs.launchpad.net/ubuntu/+source/xwayland/+bugs?orderby=importance&start=0 [12:30] Your_Dog: if not, you can try to file a new !bug and follow the (private) bug procedure for crashes [12:31] !bug [12:31] If you find a bug in Ubuntu or any of its official !flavors, please report it using the command « ubuntu-bug » - See https://help.ubuntu.com/community/ReportingBugs for other ways to report bugs. [12:33] alright, ill try to sort this out first and test a few things out, seems like its a new bug [12:47] https://grapheneos.org/ [12:48] ^ Anyone have experience using this on Android? Perhaps this question may be off topic here, but even a referral to the proper channel would be helpful, thanks. [12:56] im asking for the last time, before im going to fiverr/upwork: someome who wants to set up mail server on my droplet for 10usd ? [12:56] raxor2k: this isnt the place for such requests [12:57] lotuspsychje: Not really, that is just for installing sssd on a clean system. I have now installed and set up sssd, including chanding nsswhich.conf to read passwd: files sss ... and so on. It is still authenticating using pam_ldap though, not sssd_pam as on the machine set up from scratch [12:58] I find this really weird - I though nsswhich.conf was the only placed where this is set... [12:59] EriC^^ : fine, upwork it is === Casper26_ is now known as Casper26 === nncanepa4 is now known as nncanepa [13:42] its cold outside 12,4F outside inside i have 66F its getting cold in building [13:48] Hey, i am running a computer with ubuntu server, and it seems the dns records have been messed up. since i have to resort to typing ip adresses other than the actual URL. how do i fix that? === nncanepa0 is now known as nncanepa [14:21] Hi all === JanC is now known as Guest2079 === JanC_ is now known as JanC [15:28] How can i make my own icon in the launcher menu? [15:29] i mean add new application with icon. I have a script and i want to open the terminal with that script. Because i use it so often i want to add a launcher [15:32] ph88: https://p.haxxors.com/gnome.txt [15:35] ph88 or https://askubuntu.com/a/1428566/ [15:35] thank you guys [16:38] hi [16:39] how is it possible to remove "Try or Install Ubuntu" and such from grub? [16:39] Kartagis: for what purpose would you want that? [16:39] that option only exists on the live images and not on installed systems [16:40] ravage: on my installed system, it does exist. [16:40] Also what ravage said - when the installer runs the grub-install and update-grub scripts it will detect and automatically name what's there [16:40] Menzador: I want to directly boot into my installed system. [16:41] Is your live media removed from your computer system? [16:41] a default Ubuntu install does not have that entry [16:41] make sure you do not boot from the install media [16:41] after installation, ubuntu asks you to remove the installation media. maybe you missed this step. === fling_ is now known as fling [17:13] Is there a messenger client that supports slack, discord, irc, matrix, meta messenger? [17:13] i think that is offtopic here. but you can use all those protocols with matrix bridges [17:14] bleeper cloud offer that as a paid service i think [17:14] ok, nothing in the repos though? (22.04) [17:15] i dont think so [17:15] thanks [17:39] I miss the days when you got to choose what software gets installed during OS installation. === he1 is now known as hel [17:59] telgareith: you can pick a minimal option at setup and install your wanted packages later? [18:00] I think that was just a statement  [18:00] Hi! [18:01] My notebook was stolen, and looking on the users dashboard ir recommended to go to de #is channel. But I can't find it [18:02] !alis | webchat35 [18:02] webchat35: Alis is an IRC service to help you find channels. For help on using it, see «/msg Alis help list» or ask in #libera - Example usage: «/msg Alis list http» [18:07] Thanks! I'll look with alis [18:28] hi [20:32] my system starts becoming crazy after i run a game on ubuntu with the drivers installed [20:32] for an example the whole desktop freezes to the point where i cant reach tty [20:32] Im not sure what causes the bug [20:36] do you think it might be because i didnt process vulkan shaders ? [20:37] marcopolo: what games are you running [20:38] warframe [20:45] I dont know if it has any inpact but i might have processed 30% of the shaders with my cpu because i forgot that i didnt have the gpu graphics installed [22:29] Hello. I am new to Ubuntu Support. There has been an issue with Ubuntu 23.10 that I can't seem to figure out. It's probably a bug related to the Gnome Desktop + Wayland + Nvidia more than likely. Whenever my laptop wakes from being inactive the gnome desktop UI is all broken with icons not rendering and the overview not working at all. The only way to fix it is by logging out and logging back in which really hurts my [22:29] productivity. I have a screenshot of what I see if it's useful. [22:30] sounds like you should file a bug report [22:37] I'll look into doing that rbox. === Acou_Bass is now known as Piece_Maker [23:06] when would an ubuntu LTS release move to the 6.2 kernel? np if no exact answer [23:06] MrMobius: the HWE kernel for Ubuntu 22.04 LTS has been on 6.2 for a while now [23:09] leftyfb: forgive me since i dont understand exactly how it works. I have 22.04.3 on three machines and uname -r gives 5.15. is the kernel update separate from apt update? I ask because I have to keep rebuilding my wifi driver but apparenly it's included in 6.2 [23:10] MrMobius: sudo apt install linux-image-generic-hwe-22.04 [23:10] !hwe | MrMobius [23:10] MrMobius: The Ubuntu LTS enablement stacks provide newer kernel and X support for existing LTS releases, see https://wiki.ubuntu.com/Kernel/LTSEnablementStack [23:11] MrMobius: What wifi device? [23:14] jeremy31: Realtek RTL8723DU [23:14] leftyfb: thanks === shlom is now known as V1A