/srv/irclogs.ubuntu.com/2024/09/27/#ubuntu.txt

=== mrbutthead9 is now known as mrbutthead
LuckyMandoes ubuntu comes with a default ssh key pair?01:41
LuckyManI seem to have a key and I can't remember creating it01:42
rboxno01:43
rboxthat would be ridiculous01:43
LuckyManlol01:43
LuckyManwell I might have created it for some reason01:44
rboxprobaly so you could ssh to somewhere with a key01:44
LuckyManit might have been an incomplete configuration to access my raspbery pi01:44
LuckyManI never put the public key on it01:45
LuckyManI'm sure it wasn't for github, I just checked01:46
LuckyManhow do I delete it?01:49
rboxyou mean aside from using rm?01:50
demeplaisHello all02:48
demeplaisi need help02:50
LuckyMandemeplais, what do you need?02:53
nelginHe just said, help :)02:53
LuckyManlol02:53
* LuckyMan sends some help to demeplais 02:54
LuckyManI hope that solved it!02:54
=== mrbutthead5 is now known as mrbutthead
=== rue__ is now known as ruenoak
=== Non-BEAST is now known as Non-ICE
=== Juesto is now known as Juest
=== mrbutthead1 is now known as mrbutthead
=== not_phunyguy is now known as phunyguy
=== NewtonTrendy is now known as NewtonPumpkin
yziquelapt-key is undergoing deprecation in 24.04. however, methods/gpgv.cc in apt package source code still tries to use apt-gey in GPGVMethod::VerifyGetSigners(). or so it seems. anyway, this breaks my sudo aptitude update with an "Unknown error executing apt-key" when I follow instructions for the docker repo. how do i fix that ?08:38
mgedminwhat hapens if you use apt-get instead of aptitude?  I don't think aptitude is supported on ubuntu08:42
=== diogeness_ is now known as diogeness
yziquelmgedmin ah ? not supported ? guess it's a leftover of my old 2000s debian days, then...08:42
yziqueli'll try apt-get.08:42
mgedminI mean, aptitude is in universe08:42
mgedminand over time apt gained many of its features08:43
yziquelmgedmin sudo apt-get update seems to follow the same code path as i get the same 'Unknown error executing apt-key'. i like the aptitude TUI, though.08:44
yziquelmkay. this is going to be hellish to debug. oh, well...08:52
=== kimiamania2 is now known as kimiamania
fwehtmy vscode keeps crashing, is there any logfiles i can see more details?09:43
abdelhakfacing almost the same issue09:44
fwehtjournalctl has nothing helpful09:44
abdelhakwhen open up vscode + postman + firefox, my laptop just freezes09:45
fwehtah, for me its when i try to open a certain directory09:45
fwehtits weird because i just navigate into the directory, im not even open it with vscode, so im not sure if the error comes from vscode or from the file selector09:45
fwehtbut in a different application, like firefox, when i try to open the same directory, it works09:46
abdelhak@fweht there are few issues on the vscode officail repo in Github addressing a freezing and/or crashing problems in linux09:51
fwehtthank you!09:52
abdelhakyou are welcome09:52
abdelhakalso this issue appeared a week or two ago09:53
abdelhakand for my freezing problem, i found out few solutions, one of them is to increase the swap space09:54
abdelhakbut i didn't try it yet09:54
fwehtfor me its really the file selector interface.  when i open the folder from the terminal, it works, like `code-insiders /path/to/folder`09:58
RhondaI have the issue that a dist-upgrade from 22.04 to 24.04 fails.  On most systems it worked flawless, but on some it doesn't.  Right now it failed "dpkg-divert: error: cannot divert directories" on libc6 install.  When I look into the preinst of the new package, it wants to divert /lib64, which is an actual directory on that system.10:02
RhondaDoes anyone know how to fix that issue?10:02
abdelhaksorry, this my first install of the distro, and i installed the latest version10:09
taeaadDoes dconf-editor work for Xfce?10:20
fwehtmy vscode crashes with a lot of lines like this (where the number counts up), what does it mean? https://www.irccloud.com/pastebin/ZU1fzTJe/10:39
mgedminRhonda: why is /lib64 an actual directory on your 22.04?  it's not a standard configuration, do you know what created it?  does it belong to some package?10:40
mgedminon my 22.04 /lib64 is a symlink to /usr/lib6410:40
mgedmindpkg -S /lib64 says it belongs to the libc6 package10:41
Rhondamgedmin: I don't know, no.  It's historic, and /lib also exists as directory and not symlink to /usr/lib10:41
RhondaWith the help of busybox I got that fixed for /lib64, but then on the next step it breaks with a segfault in the new postrm script.10:42
mgedminouch10:43
mgedminbtw when you say dist-upgrade, I hope you actually meant do-release-upgrade?10:47
RhondaNo, I don't, because do-release-upgrade doesn't support upgrading to 24.04 yet because there is no 24.04.1 release yet10:49
mgedminum, are you from an alternate reality?10:51
RhondaI don't know, am I? :)10:52
mgedmincurl https://changelogs.ubuntu.com/meta-release-lts | grep 24.04.110:52
mgedmin24.04.1 was released a month ago10:52
RhondaOh, when did that happen without me noticing. :)10:52
mgedmin(and prior to that you could upgrade to 24.04 by doing do-release-upgrade -d)10:53
RhondaI'm so used to doing manually the sed -i -e s/jammy/noble/g that I haven't checked whether that's not needed anymore. :)10:53
sixwheeledbeastI wouldn't do that10:53
sixwheeledbeast24.04.1 is released you should do-release-upgrade10:54
Rhondasixwheeledbeast: Yes, I just found out about that.10:54
sixwheeledbeastit was released and then recalled but it's now available again.10:54
lotuspsychj3and make a backup before upgrade :p10:55
RhondaOh. apt install usrmerge  # now the symlinks are proper  \o/10:55
sixwheeledbeasteven so you can force the 24.04 upgrade with the upgrade tool10:55
mgedminhuh, I thought usrmerge was part of the standard install10:55
Rhondalotuspsychj3: In case it really breaks I'm going to reinstall, things are in puppet.  But reinstall is more cumbersome on that hoster so I'd like to avoid that.10:55
mgedminat least my changelog has no record of me manually installing it10:55
mgedminah, hosting providers, let me tell you about a /usr/sbin/run-parts shell script that tries to add a random delay to stagger cron jobs before exec'ing the real /bin/run-parts10:57
RhondaIt's also priority required, so I'm also unsure why it wasn't on there.10:57
Rhondamgedmin: yeah, we got all weird stuff at times. :)  But that's one of the few corner cases installs somehow10:58
mgedminthis badly-written script was using the IP address as a random seed, but wasn't expecting hostname -i to start returning IPv6 addresses, which happened after a do-release-upgrade to 22.0410:59
mgedminso then every day cron started emailing me bash syntax errors until I figured out the reason10:59
Rhondahaha11:01
RhondaWell, we had "issues" with libc6 upgrade "breaking" puppet runs for postgres.  It checks some things, but wasn't aware of the collate related changes that postgres 16 no warns about, producing additional output and thus didn't know what to do. xD11:02
* Rhonda hugs apt install usrmerge tightly. It seems to have fixed the issue. Or maybe do-release-upgrade additional magic on top of that. Either or, they both are golden.11:03
mgedminyay11:03
* mgedmin was desperately trying to remember the package name, but thought it was usrmove, couldn't find any trace of it in apt policy/apt search, and mistakenly decided that it was maybe no longer used/needed/no longer even existed11:04
RhondaxD11:06
fwehti narrowed my problem somewhat down, vscode crashes when i open a folder in the file selector (like not fully open it in vscode, just navigating into the folder) and it happens only when there is a valid json file in the folder.  so my question, is this related to vscode or to the file selector (which would be part of the operating system)?  i assume vscode has no access to files during the selection process?11:10
fwehtbut why would the file selector even parse a json file before opening it?  thats so weird11:11
skraitozhi all11:25
skraitoz:)11:25
skraitozhow is ubuntu11:25
* skraitoz so no one here , find me at https://ascension.gg elune as skraitox then see ya all ... .11:31
=== LuckyMan is now known as Guest8683
fwehtcan i downgrade a snap package when i reinstalled it in the meantime, i.e. i have no cache of older versions?11:56
BluesKajHi all12:07
=== noze` is now known as noze
=== HER is now known as hernan
=== hernan is now known as HER
brenndotox release on echo listen to physical devicecommands if not its remote ... sudo apt install tox    habs im apt angehängt13:59
brenndoso sieht ein virenprogramm aus das braucht nichmal interface und is unbeatable14:01
brenndoecho hide14:04
brenndoecho listen14:04
brenndoalles im paket tox angehängt14:05
brenndohaha zB als copyinfo14:07
brenndo`14:11
lotuspsychj3!ops | brenndo14:11
ubottubrenndo: Help! Channel emergency! (ONLY use this trigger in emergencies) - CarlFK, DJones, el, Flannel, genii, hggdh, ikonia, krytarik, mneptok, mwsb, nhandler, ogra, Pici, popey, sarnold, tomreyn, Unit193, wgrant14:11
brenndoexpected expression14:12
brenndook ask i help14:13
=== RandomZero5 is now known as RandomZero
yziquelis there any way to get apt-get to fetch packages not from an HTTP url but from an unix socket ?15:25
=== fling_ is now known as fling
tomreynyziquel: the sources.list(5) man page lists supported URI types. socket is not one of them.16:43
hggdhquestion: is IPv6 supported for the Ubuntu repo mirrors in Azure? Or where can I ask about it?16:57
ravagei guess for azure infra you would need to ask Microsoft16:58
ravagehttps://p.haxxors.com/e8kkkd4w.txt17:00
ravagebut it looks v4 only17:00
hggdhravage: no, not really. Canonical uses the Microsoft CDN; how the CDN is used is Canonical's responsibility17:07
=== fling_ is now known as fling
ravagewell. the IP i get is owned by Mictosoft17:08
ravagealso this is a pure community support room. so if it is managed by Canonical you would seek support by them17:09
hggdhthe IP is owned by MSFT cuz it is under Azure. But yeah, I need to find who to ask this in Canonical17:10
hggdh(also keep in mind that ALL *.archive.ubuntu.com are managed by Canonical)17:11
ravageonly because there exists an alias does not mean the infrastructure it leads to is managed by the same entity17:11
CosmicDJhggdh: what? that is simply not true. Almost all archive mirrors are not operated by Canonical, see https://launchpad.net/ubuntu/+archivemirrors17:13
ravageat least the country mirror URLs mostly are not17:14
ravagede.archive.ubuntu.com just because thats one i know for sure it not17:14
ravage*is not17:16
=== catties is now known as kitties
enigma9o7I'm curious how ESM support works, I thought security issues were typically fixed, but I see 18.04 is listed as 'vulnerable' and not vulnerable/wip or needs eval, etc.  https://ubuntu.com/security/CVE-2024-4717617:33
-ubottu:#ubuntu- CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. D... <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47176>17:33
enigma9o7This is one of the CUPS related CVE's from yesterday I just decided to follow up on out of curiosity.17:34
enigma9o7"ESM provides 10 years of security updates for Ubuntu Main packages and 23,000+ Ubuntu Universe packages, including additional security updates from Canonical for critical and high priority CVEs. "17:34
enigma9o7I did try "sudo pro fix CVE-2024-47176" and it says no fix available.17:37
-ubottu:#ubuntu- CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. D... <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47176>17:37
enigma9o7although I don't think that's necessary when doing regular updates anyway.... but it's listed in the status info so I tried it.17:37
topcat001I never use (and disable) the auto detection features of cups.17:41
topcat001I tend to also disable avahi when possible. It is another vector.17:43
tomreynenigma9o7: "Security updates for ESM releases will be released shortly." https://ubuntu.com/blog/cups-remote-code-execution-vulnerability-fix-available18:05
tomreynthose will likely need to be backported, which can involve a relevant development effort.18:06
=== codyshepherd_ is now known as codyshepherd
=== Hobbyboy|BNC is now known as Hobbyboy
=== nightstrike_ is now known as nightstrike
=== isnessness is now known as ugjka
=== rpittau_ is now known as rpittau
=== effortDee_ is now known as effortDee
=== Menzador_ is now known as Menzador
=== sa_ is now known as sa
tomreynenigma9o7: also, the specific cve id you mentioned (2024-47176) was evaluated as medium priority which is not (guaranteed to be) covered by ESM according to the "What’s covered?" paragraph on https://ubuntu.com/security/esm18:15
tomreyn... which may contradict the statement more to the top of the same page - "ESM enables continuous vulnerability management for critical, high and medium CVEs."18:16
mgedmin"In this instance, the coordinated disclosure date had to be moved up, balancing the need for adequate preparation and delivering updates as soon as possible. This affected our plan to simultaneously release security updates for all Ubuntu versions, including ESM."18:22
pikaciuHello ? Is anybody here ?18:27
tomreynpikaciu: yes, there are people here18:28
pikaciuHello! I have a suggestion regarding the default software included in Ubuntu's ISO. Many users appreciate the usefulness of Neofetch for quickly displaying system information. Would it be possible to replace some less-used applications, like the GNOME games, with Neofetch in future releases? It would improve customization and provide users with more relevant tools. Thank you for considering this!18:29
JanCI'm not sure Neofetch is the best tool for that really?18:32
=== kitties is now known as catties
tomreynpikaciu: (primarily volunteer driven) IRC is not a good place to post feature (or change of default) requests. you could maybe file a bug report against neofetch for this purpose. but i'd not get my hopes up too much that is would replace other software on this18:32
tomreyni assume this ends the conversation?18:33
JanCif you want to discuss this more, maybe #ubuntu-discuss is a better place also18:35
tomreynthey left, unless you meant me, then i'm aware, thanks.18:36
JanCyeah, I didn't see until after  :)18:37
chuckyoufarlieI can ssh to a slurm host, and from there run -18:37
chuckyoufarliesrun -p gorman-gpu --x11 --gres=gpu:1 --pty /bin/bash18:37
chuckyoufarlieto get a shell on a gpu node. From that shell on the gpu node, I can run glxgears and other X apps.  But, when I try to run emacs, it fails with -18:37
chuckyoufarlie; emacs18:37
chuckyoufarlie(emacs:3839301): Gtk-WARNING **: 13:51:56.544: cannot open display: localhost:90.0srun: error: _half_duplex: wrote -1 of 174818:37
chuckyoufarlieThe node is running Ubuntu 22.04.2. I've updated emacs.18:38
chuckyoufarlieAny help would be appreciated18:40
JanCsounds like you are trying to run GUI version of emacs?18:41
tomreynand in parallelization?18:42
tomreynpackage emacs-nox provides the non GUI variant18:43
TygerTunghello19:28
chuckyoufarlie@JanC @tomreyn I'm trying to help a user who wants to run emacs on a gpu-node to debug his code.19:30
tomreynchuckyoufarlie: that's kind of you.19:31
chuckyoufarlieI've told him not to do that.19:31
chuckyoufarlieI told him to just run gdb in the shell. But he's more comfortable with emacs.19:31
tomreyn<tomreyn> package emacs-nox provides the non GUI variant19:32
chuckyoufarlieAlso to note, I can ssh directly to the node (because I set it up. Not all users have direct ssh access to nodes) and run emacs via X.19:32
chuckyoufarlieI'll see if he will run emacs in the shell. He probably won't like it.19:32
tomreyni have not worked with slurm / srun, so i can't immediately tell why glxgears and other X apps seem to start on an X display which is available, and the emacs GUI won't19:35
chuckyoufarlieI'm more concerned with why other X apps work, but not emacs.19:35
tomreynmaybe you just need to export the right DISPLAY19:35
chuckyoufarlieBut it's already exported. I mean, I can run other X apps and 'echo ${DISPLAY}' returns - localhost:90.019:36
dvitekI have encountered a substantial slowdown (~1000%) running python3 -c "import timeit; print(timeit.Timer('for _ in range(0,1000): pass').timeit())" on Cisco UCS servers when upgrading from ubuntu21 to ubuntu22.  Disabling hyperthreading in the BIOS seems to reduce the slowdown to "only" 40% or so instead of 1000%.  The same experiment on other19:36
dvitekhardware shows the upgrade makes no difference.  Anyone seen anything like this?19:36
dvitekI have confirmed on about a dozen cisco ucs servers (rack and blade) and a dozen supermicro (rack) servers.19:37
dvitekevery version <= 21 is fast, every version >= 22 is slow19:38
dvitekeven containers running old python binaries on 22 exhibit the 22 slowness, so I don't think it's in userland19:39
chuckyoufarlie@dvitek are you running python3 in both cases?19:40
dvitekyes.  I even have fixed python binaries compatible with various OSs so that I can get apples to apples comparisons19:40
chuckyoufarlieHave you tried running python3 with strace?19:41
dvitekand even say a ubuntu18 container on a ubuntu22 host is slow19:41
dvitekyeah, it makes something like 250 syscalls in 112 seconds on the slow systems19:41
dvitekI've used perf, the time is spread around with no smoking guns19:41
dvitekbarely any context switching19:41
chuckyoufarlieAre the python3 binaries linked against the same libraries?19:42
dvitekwhen using the ubuntu18 container, yes, even glibc should be identical19:42
dvitekeven ran the experiment with various livecds to confirm it could repro in a totally clean environment19:43
chuckyoufarlieAnd, to be clear, you're only seeing this on the Cisco UCS hosts?19:43
dvitekcorrect19:43
dvitekand "gets much better" once hyperthreading is disabled, even though HT did not have this effect on old versions19:44
=== Sidewyz1 is now known as Sidewyz
tomreyntry mitigations=off19:45
dvitekI had someone on my team try that already.  also tried changing various kernel scheduler parameters back towards what they used to be in ubuntu21 -- no dice19:45
chuckyoufarlieHave you tried taking a host that is already version ≤ 21, updating it, then doing an in-place upgrade to 22?19:46
dvitekAll the upgrades were done as clean installs.  None of the <= 21 installs exist anymore, but I can boot off installation media to run experiments.19:46
dvitekalso, sysbench's cpu test suffers -- 25% slowdown -- but nowhere near as badly as this python test19:47
dvitekI haven't isolated the difference since they both seem cpu bound, but I imagine the python test is doing a bunch of junk on the heap that sysbench would avoid19:54
pedahzurIs there a quick and easy way to "export" a set of PPAs to which you have subscribed to another machine? I have a bunch of files in my /etc/apt/sources.list.d/ Instead of finding all those third-party repos, and running apt-add-repo again, it would be nice to be able to "export" on my old system, and "import" on the new system.22:42
ravageCopy the files?22:42
tomreynthat'll miss the signing keys22:43
pedahzurravage: Yeah, I can do that, but I'll miss the keys, as tomreyn observed.22:43
tomreynbut you can copy those, too22:43
ravageBut maybe check if you need all those PPAs22:44
ravageIf you use more than 3 something is maybe not right :)22:44
tomreynif they're PPAs, though, then "apt-add-repository ppa:this/that" can actually be easier / faster22:44
pedahzurTrue. Maybe I should just start keeping a list. And, not all the repos have [signed-by=...] in their .list file, so finding the key might be a pain.22:45
=== sam__ is now known as Guest3604

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!