/srv/irclogs.ubuntu.com/2024/02/15/#ubuntu.txt

=== chris14_ is now known as chris14
=== N3X15_ is now known as N3X15
P1roHi, i cant login from terminal/local keyboard, only tru ssh, and cant do sudo su ill get ( su: cannot open session: Cannot make/remove an entry for the specified session ) BUT sudo -u root /bin/bash does work ok, or any other sudo commando directly, what could be the issue with users ?04:01
MTecknologylook at auth.log and syslog04:04
sarnoldoh hey MTecknology :)04:04
sarnoldpoke around in /etc/pam.d/ and see if any of those configs look funny vs the others04:05
MTecknologysarnold: I'll give you $5k to fix my crap04:05
MTecknologyalso, hi :)04:05
sarnoldMTecknology: lol :D04:05
MTecknologythis looks like a helpful link -> https://serverfault.com/questions/90400/how-to-check-for-modified-config-files-on-a-debian-system04:06
MTecknologysarnold: I'm serious about that $5k ... I need a generic way to create an ubuntu installer (iso & ipxe) and I'm kinda desperate to not leave too much brain matter behind on this wall04:16
sarnoldMTecknology: oh man :/ config files on debian and derivatives are sadness :(04:35
sarnoldMTecknology: the "conf files" thing from dpkg is so brutal about how upgrades are handled a ton of packages go out of their way to manage config files in other ways.. none of these are complete solutions, just suggestions towards things that help04:36
MTecknologyAs soon as I get a brand new kernel panic on mac+vbox7 figured out, I should be moving on to making my installation support automatic tests for both debian 11 and debian 12, and my goal is to extend that to ubuntu04:38
MTecknologythe actual configuration part is handled by salt after the installation04:39
MTecknology(still my teckhost thing)04:39
MTecknologyhttps://github.com/MTecknology/teckhost (latest commit is still failing to build/test)04:40
MTecknologymaxcpus=0 seems like it might have helped, but I haven't been able to run any test long enough. That might require over 2x the amount of time to test04:42
sarnoldMTecknology: hmm, I keep hearing that there's a decent tool for making customized ubuntu images but I can't find the thing. I'm finding some repos with garbage docs and some repos with *very* garbage docs ..04:44
MTecknology1) make debian12 work 2) add support for multiple distros/releases 3) make sure debian11 still works 4) figure out how to make ubuntu work at all 5) work that into the test stack04:44
P1roohhh, thanks, well i have not auth or syslog under /var/log/...04:44
P1rothe modd files on debian its a realy good link04:44
sarnoldP1ro: very weird. what else is wrong with this system??04:44
MTecknologyP1ro: dmesg04:44
MTecknologysounds like you should be investigating this from a live image04:45
P1rowell i can log from ssh, root with sudo -u root /bin/bash04:45
MTecknologysarnold: If you find it and it actually works, I'll donate $50 to the project and $200 to your favorite charity (and buy you a venbeer)04:45
sarnoldMTecknology: mason's put a fair amount of effort into getting installers for debian and ubuntu, it's possible he's got something that might work for you -- but he might also have diametrically opposed ideas about what would work, too04:47
P1rosarnold: that could be a good tool, normally i have to install on a small usb, then create img from usb04:47
sarnoldP1ro: yeah, a lot of people want something like it :)04:47
P1roand well i was messing with limits.conf (max open files memory) some stuff, where i can found the default system files ?04:48
sarnoldP1ro: the usual stock-answer of "use a cloud-image and supply a cloud-init control file" often isn't very satisfying04:48
MTecknologymy current iso builder for debian -> https://github.com/MTecknology/teckhost/blob/master/iso/build_iso04:48
P1rosarnold: gentoo got one, dont know why there is none for debian, ubuntu, etc.04:49
MTecknologycloud-init is a massive mess of haphazard junk tossed into a bucket and given a .deb as a pretty bow ...04:50
sarnoldP1ro: if you've got your apt sources configured with deb-src lines, you could apt-get source libpam-modules   to download the sources for the package that owns that file .. or you could use dpkg's --force-confnew flag .. that's pretty inconvenient, I'm not sure how to do that one04:51
MTecknologyI'm pretty sure I even saw it describe itself that way04:51
sarnoldMTecknology: lol, sounds right :)04:51
sarnoldMTecknology: OH! I think this was the thing I was thinking of https://github.com/ubuntu-bartenders/ubuntu-old-fashioned?tab=readme-ov-file -- but there's way more references to cloud providers in here than I thought04:56
MTecknologyI don't think I understand the documentation for this. Is this capable of building an installer, or is it meant for making cloud-based images targeted for specific platforms?05:02
sarnoldI *think* it's intended to build an installed image, not an installer .. :(05:09
MTecknologyah, I need an installer05:10
MTecknologybut certainly has a similar spirit :)05:11
sarnoldMTecknology: I'm off for the night, good to see you again :)05:24
rboxnb 2516m4hg3bbbbbb983+06:02
MTecknologyshould I take the hint and give up for the night?06:16
=== pushkarnk1 is now known as pushkarnk
radiant241I'm on Windows10 + Xubuntu +NixOS (last one is on a separate disk). I want to try fixing my windows with Dism commands and such. It may cause problems to my boot order. Meaning I may lose access to any of these OSes or all of them.I have USB disks. What should I burn to my USB disks so I can recover my NixOS or Ubuntu OSes should any problems08:18
radiant241occur?08:18
radiant241are systemresque and sparkylinux enough for this?08:18
MTecknology"burn to usb" ??08:21
MTecknologymight wanna look into something like ventoy08:21
radiant241MTecknology yeah but I'm wondering if I actually need a ubuntu live image to fix ubuntu or can I use those two distros to fix grub or systemd-boot or stuff08:24
radiant241Also how to know about my boot order? whether I use GRUB or anything else?08:24
MTecknologyah, gotcha finnix is a good one to add08:24
=== pushkarnk1 is now known as pushkarnk
=== chiselfu1e is now known as chiselfuse
=== JanC is now known as Guest1755
=== JanC_ is now known as JanC
ecmСлава Україні!10:16
=== DocMors is now known as _DocMors
=== _DocMors is now known as DocMors
thisisjaymehtaYou know we dont study Russian in school. It would help if you write in English.11:10
thisisjaymehtaI need help with setting a command to autorun at startup.11:18
thisisjaymehtaThis is the command: pacmd load-module module-alsa-sink device=hw:Audio,1 control='PCM',111:19
thisisjaymehtaI added it in crontab with @reboot, but it doesn't work11:20
=== Proton0539372826 is now known as Proton053937282
zambais 1:7.6p1-4ubuntu0.7 considered safe for CVE-2023-38408?12:01
-ubottu:#ubuntu- The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408>12:01
zambait seems like versions before this is vulnerable: 1:7.6p1-4ubuntu0.7+esm1)available with ubuntu pro or ubuntu pro (infra-only12:01
zambabut i don't have +esm1. do i need ubuntu pro to get the security patch? what's the deal?12:02
=== five6184806 is now known as five618480
=== five6184804 is now known as five618480
=== TomyLobo2 is now known as TomyLobo
BluesKajHi all13:19
tuxinatorhi13:28
tuxinatorno matter what i do, my apparmor always complains this when starting/restarting cups-browsed even if i add a profile and change it to complain mode https://pastebin.com/2uCVzwag13:29
=== TomTom_ is now known as TomTom
willcl-arkI'm having issues using `perf` on 23.10.. many error messages of the form "addr2line /root/.debug/.build-id/fb/<id>/elf: could not read first record". Just wondering if there are any known issues with this in kernel 6.5.0-17 ?15:02
leftyfbwillcl-ark: apt-cache policy iperf | nc termbin.com 999915:04
=== pushkarnk1 is now known as pushkarnk
willcl-arkleftyfb: https://termbin.com/b87y15:15
leftyfbwillcl-ark: how did you install iperf?15:16
willcl-arksorry, it's perf i'm struggling with, not iperf15:16
willcl-arkfrom binutils15:17
leftyfbah, it's from linux-tools-common15:17
oerheks!info perf-tools-unstable15:18
ubottuperf-tools-unstable (1.0.1~20200130+git49b8cdf-1ubuntu1, mantic): DTrace-like tools for Linux. In component universe, is optional. Built by perf-tools-unstable. Size 101 kB / 495 kB15:18
ogra_ravage, uh, what evil did you do to get stgraber so upset ?15:30
* ogra_ would have asked in #ubuntu-discuss, but ravage isnt there ... 15:31
ravageheh15:34
ravagei started an nginx proxy for about an hour15:34
ravageseems to be evil15:34
ravagewanted to understand how they block lxd out. was a success 🙂15:34
ogra_obviously evil enough to have him post on your membership application15:35
ravageyep i saw it. let him post whatever he likes15:35
ravagethe post does not say anything really15:35
ogra_it says you are an abusive person ...15:35
ravagei find his post kind of toxic. not sure who the bad person is here15:36
ravagebut hey15:36
ravage"i do not know you at all... but"15:36
leftyfbIt sounds to me like ravage was just testing workarounds for community-hostile actions by an open source project15:37
ogra_yeah ... i know stephane pretty well and am rather shocked by him in recent times15:37
ravageit really was just because i was curious what that all is about15:38
ravageand i needed to spawn a debian container for a test 🙂15:38
ravagelet me join discuss with my bridge15:38
mccHello, I am attempting to run a closed-source program on amd64. It depends on libc++, and it is failing with the run-time link error `undefined symbol: _ZNSt3__123__libcpp_debug_functionE` . I have tried installing both the libc++1.16 and libc++1.17 packages, both exhibit the error. I suspect they expect some specific version or distribution of libc++ but have struggled getting the vendor to explain the exact environment they expect.16:04
mccIs there any coherent way of figuring out what the different way between the linked libc++ and my local libc++ could be, given that mangled symbol name?16:05
mcchmm, ok. digging around in release notes it appears I need libc++1.14 :(16:10
ogra_mcc, you could use pbjdump or some such to find the libc version the binary actually wants ... if it matches any LTS version of ubuntu you could try to package it as a snap as "just installing" a different libc (or libstdc++) will likely cause problems if not put away inside some containerization16:11
ogra_s/pbjdump/objdump/16:11
mccok. i was about to ask if i was gonna need docker or something but snap is an interesting idea16:11
mcci tested by installing libc++1.14 and it worked, but libc++1.15 doesn't16:12
mccyour point about not screwing up the rest of my system is taken D: in this case tho i didn't even have libc++ installed until i installed this app16:12
ogra_docker might work too ... i personally just find snaps easier to create 🙂16:14
mccthat makes sense. i don't know how to use either :O but i've already got snapd on this machine but not docker so snapd would be more natural.16:14
mccWait, this is weird. This is really weird.16:17
mcchttps://reviews.llvm.org/D12736016:17
mcc"This commit removed symbols implementing debug mode in the non-debug configuration of the library. Using the debug mode now requires a differently-configured version of libc++."16:18
mccThat's… I think from the libc++ 15 release notes, but I can't find the true release notes page16:19
mcchttps://libcxx.llvm.org/ReleaseNotes/18.html16:19
mccThis site has release notes for 18 and 19 but not earlier versions…16:19
mcc"By default, the legacy debug mode symbols are not provided with the library anymore. If you are a vendor and need to re-enable them, please use the LIBCXX_ENABLE_BACKWARDS_COMPATIBILITY_DEBUG_MODE_SYMBOLS CMake flag, and contact the libc++ developers as this will be removed in LLVM 16. Furthermore, please note that LIBCXX_ENABLE_DEBUG_MODE_SUPPORT is not honored anymore." well I guess that's besides the point.16:20
=== docmax_ is now known as docmax
esc4rg0t__Is there any fix for "Warning firmware error detected FWSM:..." on Ubuntu Server LTS regarding ixgbe driver?...19:55
topcat001willcl-ark: Are you trying to record DWARF call stacks?20:25
ashafqI think Ubuntu erased my UEFI boot. Is there a way to get it back?20:26
mdwashafq: as another OS boot entry?20:31
mdw*as in20:32
oerheks!uefi20:32
ubottuUEFI is a specification that defines a software interface between an operating system and platform firmware. It is meant as a replacement for the BIOS. For information on how to set up and install Ubuntu and its derivatives on UEFI machines please read https://help.ubuntu.com/community/UEFI20:32
oerhekshow do you tell ubuntu wiped uefi ?20:32
mdwI presume they are talking about a boot entry being missing, likely needs to readd it with efibootmgr20:33
LuminelHey!20:45
Luminelubuntu users don't use IRC anymore?20:45
arraybolt3yeah we do20:45
arraybolt3we're getting Matrix added on as a new primary chat platform for support and whatnot, but IRC will remain supported for the foreseeable future20:46
ashafqmdw: I think somehow the encryption key got wiped from TPM and the PC no longer recognize /dev/nvme*,20:48
ashafqI can't even mount it with a recovery disk20:49
ashafqUnless I am missing something.20:49
ashafqlspci shows the device, but not lsblk.20:49
ashafqThere are no "official support" for this, is there? I would love to pay someone just to fix it as I don't have the time to fix it.20:53
sarnoldMTecknology: I heard back that https://github.com/canonical/ubuntu-image is the 'current official' tool for building images20:58
oerheks>> https://snapcraft.io/ubuntu-image20:59
MTecknologysnap exclusive, eh? that's cute21:04
oerheksno, one could build it easily21:06
MTecknologyMy chuckle is toward the distribution method, not the project itself. It's a golang project, so plenty of other distribution methods are trivial ... they just want to push their pet project21:14
oerheks...21:15
MTecknologyThis is interesting21:18
MTecknologysarnold: I'm also looking at live-build; it looks like it could be a "generic" approach that uses debootstrap and works for debian and ubuntu.21:19
seer__what are the "downsides" to enabling ubuntu pro?  (And my opensource system is pushing me to a $ubscription $ervice!!  ??)22:33
seer__What are the downsides of not installing ubuntu pro?22:34
jeremy31seer__: Isn't Ubuntu Pro free?22:34
arraybolt3it is22:34
ravageYou don't get the Updates 22:34
ravageThat's the downside 22:34
arraybolt3of not enabling it22:34
jeremy31Might be a topic better off in #ubuntu-discuss22:35
arraybolt3I'm not aware of any downsides with enabling it, unless your OEM explicitly doesn't support it22:35
cbreakI don't see any point in using ubuntu pro22:35
ravageThen don't 22:35
cbreakindeed.22:35
leftyfbcbreak: seer__: https://discourse.ubuntu.com/t/ubuntu-pro-faq/3404222:36
seer__I found this vague article (it seems particular but it isnt) https://www.linuxandubuntu.com/home/ubuntu-pro-vs-ubuntu22:38
seer__thanks leftyfb22:39
leftyfbseer__: that article is half-truths22:40
leftyfbthe one you posted22:40
MTecknologyIt looks like the most useful bit of info is underneath "What if I don’t want to opt-in to Ubuntu Pro? [...]"  It sounds like "ubuntu pro" is ~"Universe security updates are covered by a dedicated team"22:45
leftyfbMTecknology: if you don't want to enable pro, your system functions exactly the way it has up till now, with some nagging when you run updated in the CLI and now GUI, though I think there's workarounds to disable that22:47
leftyfbPro is Canonical updating packages from the universe repo which historically were only updated by community maintainers22:47
leftyfbfor the most part22:48
leftyfbthe other features are kernel livepatching and additional security not typically implemented by individuals22:48
seer__goed zo22:53
=== thelounge91 is now known as cheesefish

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!