[00:59] <VolUTFan> its all kinda quiet in here
[00:59] <soee> ;]
[01:03] <VolUTFan> Hey, there is a website that I remember, where you can go look up your closest mirror repo to your geographical location.  Anyone know what I am talking about
[01:03] <VolUTFan> it slips my mind what it was
[01:03] <Scunizi> So lets start a keypassX conversation.. Is it strictly for storage or does it recognize when I'm on a page requiring a password and automatically supply it?
[01:04] <Unit193> Has an "auto type" feature, but it doesn't have browser integration like that, no.
[01:05] <Scunizi> Actually what I really would like to do is get decent decorations for gtk apps running inside kubuntu.. they are currently ugly
[01:05] <Scunizi> Unit193: thanks.. just checking it out now.
[02:15] <VolUTFan> I found a menu bug in vivid with KDE Partition Manager trying to open.  Running cmd ubuntu-bug partitionmanager doesn't give me an option to add notes.  When you open the app from the menu, gives you an error, from terminal no problems.
[02:15] <VolUTFan> I asked on the dev channel, but no eyes on it yet
[02:15] <VolUTFan> thought you guys might know
[02:16] <VolUTFan> that was the very first thing I tried to run too.  Hit the bug right off the bat
[02:34] <VolUTFan> wow, ive not had vivid1 loaded more than 30 minutes and I have already found 3 bugs
[02:37] <Guest75803> q
[02:40] <VolUTFan> hey guest, whats up
[04:56] <luminoth> Evening all
[08:05] <lordievader> Good morning.
[10:43] <yossarianuk> if I install Plasma/kde/whateveritscalled 5.2 will I loose access to krdc ?
[10:44] <yossarianuk> and (the program i'm running) Konversation
[10:44] <valorie> yossarianuk: I'm using konvi in plasma 5 right now
[10:44] <valorie> in vivid beta
[10:45] <valorie> Incredible: please stop doing that
[10:45] <yossarianuk> ah - sorry konversation has been ported...
[10:45] <yossarianuk> im looking at - http://developer.kde.org/~cfeck/portingstatus.html
[10:45] <yossarianuk> krdc ==> red
[10:45] <valorie> I would suggest vivid beta, and not trying the next ppa
[10:45] <yossarianuk> does that mean I could use the old version of krdc ?
[10:46] <valorie> yossarianuk: that I don't know - probably
[10:46] <valorie> most have a transitional lib if they've not been ported
[10:46] <yossarianuk> valorie: if you are on a 15.04/plasma 5 system now can you see if its available in the repo ?
[10:47] <valorie> the package name would be kdrc ?
[10:47] <yossarianuk> yes
[10:47] <valorie> no, apt-cache search doesn't find it
[10:48] <valorie> of course that could be because we've simply not packaged it yet
[10:49] <yossarianuk> valorie: ok thank you ..
[10:50] <valorie> help is always welcome, both for the porting, and for the packaging
[10:51] <yossarianuk> Due to my works decision to use vmware i need access to rdp to work vshpere - krdc seems to setup things like clipboard copying, etc correctly (unlike xfree-rdp) - i'll perhaps try 15.04 beta @ home...
[10:51] <yossarianuk> I make the latest nvidia package (without updating xorg like xorg-edgers) I would love it if kubuntu had the latest nvidia driver in its repos....
[10:52] <yossarianuk> i'd happily contribute that
[10:53] <valorie> is there a packagename I can check for ya?
[10:53] <valorie> because I'm sure that would be welcome
[10:54] <valorie> particularly if you put it in a PPA and test it first
[10:55] <yossarianuk> i'm not at home and its ust a local package - but I have made the latest stable nvidia driver for ubuntu 14.10 - version- 346.47 . I know there is the nvidia-latest package but that isn't the latest....
[10:56] <yossarianuk> I have an old PPA I haven't used for a while - I should be able to upload to that .
[10:57] <valorie> and then blog about it or something so you get some testers
[10:57] <yossarianuk> valorie: ok
[11:05] <yossarianuk> I find it insane that Ubuntu (and variants) stick with an older version of the Nvidia driver, i.e a version that has known bugs in (fixed in later versions) and supports less h/w ... So I would be happy to work to build the driver - it could be a selling point over ubuntu (if you a gamer you are losing out not having the latest stable nvidia driver)
[11:53] <lpaalp1> hi, how can I make sure removable media can only be mounted by my user and not others?
[12:47] <Tunnel_Bunny> yoyo
[12:52] <BluesKaj> Hiyas all
[14:48] <Walex> yossarianuk: that's not quite right. There are newest versions of nVidia in various PPAs.
[14:57] <yossarianuk> Walex: yes not in the main repo.
[14:57] <yossarianuk> also the main one people use 'xorg-edgers' can also update various other packages (such as xorg)
[15:07] <soee> anyone using Trojitá ?
[15:32] <donniezazen> soee: I have used it. Not anymore.
[15:39] <Walex> yossarianuk: the main repo is based on the idea that it is essentially frozen: for a long period for LTS, for a short period and then abandoned for non-LTS.
[15:40] <Walex> yossarianuk: if people want newer nVidia drivers and stay in a "main" release, the answer is the same as for nearly every package: in the next release.
[15:46] <yossarianuk> Walex: but other packages get bux fixed
[15:46] <yossarianuk> *bug*
[17:14] <apparle> hi folks, can someone here help me debug issues in dual screen configuration? The mouse seems to be moving fine, but otherwise the gui is not responding, and is weirdly tiled across monitors.
[17:25] <apparle> The problem is specific to plug-in/out of the external monitor. If I restart lightdm, the problem gets resolved but I can't afford to restart my session everytime I connect an external monitor.
[17:59] <VolUTFan> how do I back up the sudo crontab with rsync
[17:59] <VolUTFan> or can I?
[20:36] <Roey> hi!!
[20:37] <Roey> hey all, when will Krita 2.9 come to Kubuntu?
[20:38] <genii> !info krita vivid
[20:38] <Roey> yeah..
[20:38] <genii> Apparently after 15.04
[20:38] <Roey> omg...
[20:38] <Roey> sigh
[20:39] <Roey> which is in one month
[20:39] <Roey> that's not so bad then
[20:50] <VolUTFan> I killed off virtualbox and reinstalled from the download.virtualbox.org repo.  Seems to be fine, plus its updated.  Now I can get those expansion packs
[21:57] <VolUTFan> Any of ya'll have some advice for me?  im running 14.10 Plasma4 and recognize that avconv isn't part of the distro at this point, however.  What I have is some scripts I pre-wrote from the earlier version of Kub and I used avconv to retranscode my movie files so I can stream my media over my network through ps3mediaserver.  I would like to be able to use avconv, so is there any procedure I can use to get that package on my box
[21:57] <VolUTFan> without breaking 14.10
[22:01] <genii> VolUTFan: It's in the package called libav-tools
[22:01] <genii> !info libav-tools
[22:01] <VolUTFan> I just literally found that about 2 seconds before you hit enter
[22:02] <VolUTFan> the thing is, its not included in 14.10, so will it break utopic if I install it?  both avconv and ffmpeg are excluded in utopic
[22:03] <genii> VolUTFan: I have both installed on my Utopic and nothing's broken yet :)
[22:03] <VolUTFan> ok, good news, if your able to do it, then I should be able to as well
[22:19] <vijay13> hi ! my kubuntu 14.10 got crash and everything is black except i can excess terminal , when i am running "plasmashell " i am getting this error: http://pastebin.com/XPCRBLVs can someone help me get my desktop back ? please :(
[22:22] <alket> you are runing Plasma 5 PPA ?
[22:22] <alket> i mean kubuntu-next ?
[22:23] <vijay13> alket: yes
[22:23] <alket> screen.xrandr11: This backend is only for XRandR 1.1, your version is:  1 . 4
[22:23] <alket> did you get a kernel update recently ?
[22:24] <mokush> vijay13: try chown vijay13:vijay13 -R /home/vijay13/.cache/
[22:24] <mokush> then try restarting the sddm service if that's what you're using
[22:26] <vijay13> mokush: actually i am new to kubuntu and dont know how to do that ?
[22:26] <vijay13> mokush: i mean how can i start sddm service
[22:27] <mokush> vijay13: did you run the chown command above?
[22:27] <kameswav> Hi all, what is the command name of the network manager in KDE. I am on Kubuntu 14.04
[22:27] <kameswav> I want to invoke it when I am in awesome window manger
[22:27] <vijay13> mokush: yes
[22:27] <genii> vijay13: To restart sddm, login to command-line prompt, then: sudo service sddm restart
[22:27] <mokush> vijay13: everything good? no errors? if everything is ok there, run: sudo service sddm restart
[22:34] <bprompt_> hmm
[22:34] <bprompt_> kameswav:     I don't think you can, since it's a plasmoid
[22:35] <bprompt_> kameswav:    you could simply install  network-manager-gnome, should be a very small install, and then just run "nm-applet" to launch it
[22:35] <bprompt_> and that'd work on any window manager,  I use it on lxde
[22:37] <kameswav> bprompt_: Thanks for the responce. I use many of the KDE tools and hence was thinnking of not going with any gnome tools if and where possible, because they pull in gnome dependencies.
[22:37] <kameswav> Its a bummer that there is no way to invoke a network manager plasmoid
[22:37] <bprompt_> hehhe
[22:39] <bprompt_> nothing wrong with that, I've heard that many times, from gnome users or unity or whatever else about kde or another, that may have been a concern back in the days the HDD were 4gbs or so
[22:39] <kameswav> I will give network-manager-gnome a try now.
[22:39] <bprompt_> not today, besides..... lemme look at mine really quick .....
[22:39] <bprompt_> kameswav:     network-manager-gnome is a whooping 4.7mbs in my case heeh
[22:40] <vijay13> mokush:  "sudo service sddm restart" simply shutdowns screens and never run it again
[22:40] <vijay13> i had go restart the pc
[22:42] <genii> kameswav: kde-nm-connection-editor
[22:42] <genii> ( assuming that plasma-nm is installed which it should be by default)
[22:43] <kameswav> genii: Perfect. That is what I am looking for. Thanks a lot. Is there a similar command for the battery manager
[22:43] <genii> That's the binary the plasmoid actually calls
[22:43]  * bprompt_ doesn't see plasma-nm, in 12.04
[22:44] <genii> kameswav: Give me a couple minutes to find out
[22:45] <kameswav> genii: Yeah sure
[22:45] <bprompt_> hmmm doesn't plasma need to be loaded for any plasmoid to execute?  since in another window manager the plasma component wouldn't be loaded
[22:49] <kameswav> bprompt_: Good question. I dont have an answer to that. May be genii can reply. Currently, I am on Kubuntu and have installed awesome wm in it. I logout and log back in to awesome.
[22:49] <genii> I'm not sure, sorry :)
[22:50] <bprompt_> kameswav:     iirc, plasma needs to be loaded for the plasmoid to run, and whilst kwin does that, since it uses it, others window  managers do not
[22:51] <bprompt_> kameswav:    whilst network-manager-gnome , regardless of its naming, is not gnome dependent per se, it'd run on any system tray
[22:51] <kameswav> bprompt_: I will get back with a reply in 2 min. Logging into awesome now.
[22:51] <keithzg> You can definitely run plasmoids on their own
[22:52] <bprompt_> in my case my install .debs are only 4.7mbs for network-manager-gnome, so is small install, and I prefer it also to kwin's manager anyhow
[22:53] <keithzg> It's a bit unweidly to run plasmoids as their own apps, since they won't exactly be tray-able then, just freestanding windows, but I've done that before in Openbox.
[22:53] <bprompt_> hmm
[22:53] <kameswav> I am back. I can confirm that it works in my setup. I mean I can use kde-nm-connection-editor, open it and connect to my wifi network
[22:53] <keithzg> Yeah, frankly I did use nm-applet as well when I was running a laptop with Openbox, even though the rest of my apps were KDE.
[22:53] <bprompt_> openbox I think uses plasma framework, thus it loads it
[22:54] <keithzg> ...no.
[22:54] <bprompt_> hmmm
[22:54] <keithzg> Openbox is just a WM, nothing more. I used plasmoidviewer to open plasmoids.
[22:54] <bprompt_> k
[22:54] <keithzg> Openbox doesn't really rely on much else, 'tis why it can be nice to run sometimes. But it's a rather bare session, gotta provide your own amenities, doesn't even come with a taskbar or tray :)
[22:55] <vijay13> keithzg: is there a way to fix this : http://pastebin.com/7VUQaafu my desktop is completely blank
[22:55] <bprompt_> I find network-manager-gnome pretty flexible, and een in kwin, I'd prefer it, the network manager plasmoid... has been improved some though, not as much, but some
[22:55] <bprompt_> s/een/even/
[22:55] <keithzg> bprompt_: Don't necessarily disagree on that, yeah.
[22:57] <keithzg> vijay13: Can you provide some context? I assume from the references to Breeze that you're running Plasma 5 on either 14.10 or 15.04.
[22:58] <vijay13> keithzg: yeah it's Plasma 5  on 14.10
[22:59] <kameswav> genii: Were you able to figure out what the battery widget is called?
[22:59] <keithzg> vijay13: Hmm. I'm at work right now and have kept my desktop(s) at a nice, stable 14.04, so I can't double-check much here unfortunately, but, so you're logging in and just getting a blank desktop then? And thus trying to start plasmashell manually?
[23:00] <keithzg> vijay13: At home my laptop was running 14.10 with Plasma 5 for a while, and I didn't necessarily have the best luck with sddm.
[23:00] <keithzg> vijay13: I generally had to run "sudo service sddm restart" after *every* boot, otherwise I'd get issues not dissimilar to yours.
[23:01] <genii> kameswav: Still poking around
[23:01] <vijay13> keithzg: yeah but when i do "sudo service sddm restart" my screen is getting off for permanent
[23:01] <vijay13> keithzg: i have to reboot the laptop
[23:01] <kameswav> genii: thanks
[23:02] <keithzg> vijay13: What about your VTs?
[23:02] <vijay13> keithzg: VTs ? sorry didnt get :(
[23:02] <genii> kameswav: Looks like it calls javascript in it's directory
[23:02] <keithzg> vijay13: Sorry, "virtual terminals", ie. ctrl+alt+f1, ctrl+alt+f2, etc.
[23:03] <keithzg> Generally ctrl+alt+f7 (or sometimes f8) will get you to your normal X11 session, but at least some of the first six should be available as console logins.
[23:03] <vijay13> yeah i can access that now
[23:04] <vijay13> keithzg: but let me try to open that after "sudo service sddm restart"
[23:04] <keithzg> vijay13: Yeah, It's from there that I've run "sudo service sddm restart", and just in general from there you can try and debug the status of things when the graphical side of things has failed.
[23:04] <vijay13> keithzg: okay i ll run it there then
[23:07] <genii> kameswav: The battery applet is odd. It runs the qml scripts in /usr/share/kde4/apps/plasma/plasmoids/battery/contents/ui/  which in turn pulls in some javascript in /usr/share/kde4/apps/plasma/plasmoids/battery/contents/code/
[23:07] <genii> I'm not sure the qml code can be ran directly
[23:07] <vijay13> keithzg: well that too is not working
[23:08] <keithzg> vijay13: You might want to just switch back to KDM instead.
[23:08] <vijay13> keithzg: KDM ?
[23:08] <keithzg> vijay13: I'd also recommend getting on IRC with another computer or with your phone/tablet/etc, so that we could help while your session is down, heh
[23:09] <keithzg> vijay13: Well, that or lightdm. Those are the two older display managers; sddm is the new replacement.
[23:10] <keithzg> vijay13: On 15.04 (although I wouldn't recommend upgrading to it since it's obvious still VERY unstable) I've had more success with lightdm than sddm.
[23:10] <kameswav> genii: Oh thats bad. I was just checking this link. https://forum.kde.org/viewtopic.php?f=67&t=117713
[23:11] <kameswav> If the name of the plasmoid is known then I could use it. I will try it with other plasmoids
[23:12] <genii> kameswav: The plasmoid is just called "battery" without the quotes of course
[23:12] <bprompt_> kameswav:    how about running, "kwin"?  there's an idea
[23:12]  * bprompt_ ducks
[23:12] <vijay13> keithzg: thanks :) wait a minute i ll setup irc on new device and ping you
[23:12] <genii> Hehe
[23:12] <kameswav> bprompt_: I am sorry, I did not get you
[23:13] <genii> kameswav: The other odd thing it does is use kcmshell4 to pull up the systemsettings power management page
[23:13] <bprompt_> kameswav:    kwin is kde's default window manager, runs plasma and any plasmoids
[23:14] <bprompt_> kameswav:   you seem to want to retrofit a van because you don't like the original van, so you modify it and in the end, would look like the original van, how about just using the original van from the getgo?
[23:18] <kameswav> bprompt_: hehehe :). You are right. I should look for solutions within awesome wm.
[23:18] <jpwhiting> hmm, fresh vivid beta install on macbook, sometimes it doesn't wake up when reopening the lid
[23:19] <jpwhiting> ctrl-alt-f1 f2 etc. don't show a tty either
[23:19] <jpwhiting> screen is just black
[23:19]  * bprompt_ wonders what's so awesome about awesome wm
[23:19] <jpwhiting> fan is running though, so I think it's alive
[23:24] <vijay13-tmp> keithzg: hi! okay now i have am other pc , so where to start (sorry if i am taking much of your time)
[23:26] <genii> jpwhiting: Maybe go to the gui console ( f7) and try entering your password in blind
[23:30] <vijay13-tmp> keithzg: can i install lightdm just by sudo apt-get lightdm ?
[23:30] <keithzg> vijay13-tmp: Yup.
[23:31] <vijay13-tmp> keithzg: first i have to switch to VT ?
[23:31] <keithzg> vijay13-tmp: Probably for the best, yeah, although just for installing it you won't need to per se.
[23:32] <keithzg> vijay13-tmp: When you install it, it'll prompt you to decide which to be set as your default display manager, and you can also just switch between them via "sudo service (whatever) stop" and then "sudo service (whatever2) start" to bring one down and the other up.
[23:33] <jpwhiting> genii: I have it set to not log out
[23:33] <jpwhiting> or require password, etc.
[23:34] <genii> Hm
[23:35] <genii> jpwhiting: Do you have lights that say if the caplock, scroll lock, and numlock keys are active? If so and all three are blinking on and off repeatedly, this is symptom of a kernel crash
[23:36] <jpwhiting> I have a caps lock key, and it's not blinking when this happens
[23:36] <jpwhiting> it seems like the machine is down, but the fan is blowing out the back, so I know it's not off
[23:36] <genii> OK.
[23:36] <jpwhiting> only seems to happen when on battery
[23:36] <jpwhiting> may have something to do with this: http://askubuntu.com/questions/295105/refind-breaks-standby-mode-on-macbook-air-5-2
[23:37]  * jpwhiting tries the refind install.sh --ownhfs trick, maybe that will help
[23:38] <genii> jpwhiting: I suspect may be related to this bug from 14.04 https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1311724 ...I think I would open a new bug report for it on Launchpad, anyhow. And perhaps mention it in #ubuntu+1 ( not just for ubuntu but all *buntu vivid versions in there)
[23:38]  * jpwhiting looks
[23:40] <jpwhiting> I don't think it's waking up while the lid is closed
[23:42] <genii> jpwhiting: Was it plugged in when the lid closed or on battery?
[23:42] <jpwhiting> on battery
[23:43] <jpwhiting> with plenty left, even after I restart it (by holding the power button to force it to shut off) and start it up again
[23:44] <genii> Might try attaching the power plug. I had a bug before where it needed the power cord pulled out and plugged back in before it resumed from suspend
[23:44] <jpwhiting> ah, the refind reinstall shouldn't help it's waking fine when in OS X on lid open
[23:44] <jpwhiting> heh, ok I'll try that next time I hit this :)
[23:45] <jpwhiting> thx
[23:47] <vijay13-tmp> keithzg: everything went fine , but in lightdm i am getting "failed to start session" when entering password
[23:48] <keithzg> vijay13-tmp: Hmm. Wonder why it works in 15.04 but not 14.10.
[23:48] <keithzg> vijay13-tmp: You might want to try kdm instead, then, although I suspect you won't have much better luck.
[23:49] <genii> keithzg: I think the default for 14.10 is lightdm-kde-greeter
[23:50] <keithzg> genii: Yeah, but that's definitely what I saw last night when I upgraded to 15.04, and that let me log into a plasma 5 session just fine.
[23:50] <keithzg> So either I'm crazy or there was some sort of fix/improvement in the meantime.
[23:50] <genii> Interesting.
[23:50] <keithzg> Maybe a little of both ;)
[23:50] <genii> heh :)
[23:51]  * keithzg is sad about lightdm's reduced role, just as it was getting nice and reliable; curse you, Canonical's CLA!
[23:53] <vijay13-tmp> keithzg: something has gone terribly wrong, when i am trying to run sudo command in VT it says Login incorrect
[23:53] <keithzg> vijay13-tmp: Err, have you indeed logged in?
[23:53] <keithzg> (sorry if that's a silly question, just making sure)
[23:54] <vijay13-tmp> keithzg: oh my god i have gone mad now
[23:54] <keithzg> vijay13-tmp: What does the output of the "groups" command say?
[23:54] <vijay13-tmp> i hadnt logged in :(
[23:54] <keithzg> hah! yeah, that'd do it ;)
[23:55] <genii> vijay13-tmp: When you try to login with your usual name and password it gives you the "failed to start session" and kicks you back to login?
[23:56] <vijay13-tmp> keithzg: only thing unsolved is not able to login into lightdm screen
[23:57] <vijay13-tmp> keithzg: genii i mean it asks for password and when i enter the password it says failed to start session
[23:58] <genii> That's a symptom of messed up permissions in your home folder, or missing home directory
[23:58] <genii> It can also be a missing default shell but that's unusual
[23:58] <vijay13-tmp> genii: is there fix for it ?
[23:59] <keithzg> vijay13-tmp: what does "ls -l /home" show?


[02:20] <xibalba> anyone know how i could see if IPTables is causing this ?  IP <IP_ADDRESS> > <IP_ADDRESS>: ICMP host <IP_ADDRESS> unreachable - admin prohibited filter,. I'm trying to SSH from 4.3 to 4.9
[02:20] <xibalba> I can pign it no problem
[06:22] <lordievader> Good morning
[13:56] <teward> xibalba: short of digging in your rules on 4.3 and 4.9 not really, and we'd need to see the current ruleset to help you debug that
[13:56] <teward> xibalba: however if the iptables rules on both boxes are *not* set up and are just running 'default' they wouldn't be blocking that
[14:49] <xibalba> thanks teward , figured it out. had nothing to do w/iptables, i was barking up the wrong tree
[14:49] <xibalba> it was firewall related just not on the iptables side
[15:00] <teward> hehehe, good.  enjoy
[16:51] <SlowJimmy> if i open up the internet in my iptables list is it still safe since i am on a gnu linux or will people stumble over my server and breach it?
[16:57] <sarnold> it depends what services you run, how you configured them, etc. first things first, make sure you're using ssh key auth to log in, disable ssh passwords, then perform netstat audit of all listening services
[17:20] <catbadger> hi. I'm trying to install mod_perl 1.31 on apache1... anyone know why it's looking for mod_perl_hooks.pm when it doesn't exist in the zip?
[17:27] <tomreyn> catbadger: apache 1, as in apache httpd 1.x?
[17:27] <tomreyn> if so, which ubuntu version are you running there?
[17:28] <catbadger> tomreyn yes. ubuntu 18.04. I'm dockerizing a dumpsterfire legacy app to eventually modernize it
[17:30] <tomreyn> catbadger: well i'm afraid you're on your own with running prehistoric apache httpd and mod_perl versions on ubuntu 18.04
[17:31] <tomreyn> i guess i'd just accept the downtime and migrate it properly.
[17:31] <catbadger> ok thanks anyway.
[17:45] <SlowJimmy> sarnold highly appreciated thank you freind!
[17:46] <sarnold> SlowJimmy: you're welcome :) have fun
[18:06] <ahasenack> rbasak: around? Quick question about a bug
[18:06] <ahasenack> rbasak: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/1697339
[18:06] <ahasenack> rbasak: it's a bug in the code that -D behaves incorrectly
[18:07] <ahasenack> but I just found out that there is no mechanism to actually pass that option (or any other) to rpc.gssd via the distro config files
[18:07] <ahasenack> so I wonder if it's worth to fix the bug without fixing this other issue of having no nice way to pass the parameters
[18:07] <ahasenack> I imagine people who really need to pass a parameter just override the systemd service via /etc/systemd/
[18:08] <ahasenack> but there is nothing to set in /etc/default/<somefile> that will be carried over to the systemd service
[18:48] <rbasak> ahasenack: if someone were to report to me that the default service can't pass paramaeters, I would probably advise that the user can override in /etc/systemd/system
[18:48] <rbasak> ahasenack: given that, I'd say that if the daemon doesn't behave as documented with some parameter, then it is a valid bug and valid for SRU.
[18:49] <rbasak> ahasenack: however, Importance: Low as I see you agree, as it's an obscure use case likely to affect very few users.
[18:56] <ahasenack> rbasak: it's a patch-on-a-plate
[18:57] <ahasenack> but once I found out that there is no way to pass the parameter to the daemon without using an override, I felt like that was another bug in its own
[19:08] <rbasak> ahasenack: I don't think you need to tackle all the bugs :)
[19:09] <rbasak> It can be worked around, too.
[19:09] <rbasak> This one can't I think?
[19:11] <ahasenack> it can't
[19:11] <ahasenack> needs a code patch
[19:13] <rbasak> I mean "another bug on its own"
[19:14] <ahasenack> via an override, yes
[19:14] <ahasenack> maybe
[19:14] <ahasenack> you would have to override many things, as the wrapper in the middle doesn't know about GSSDARGS
[19:14] <ahasenack> it's a mess, just like NFS
[19:15] <ahasenack> # dpkg -L nfs-common|grep systemd.*service|wc -l
[19:15] <ahasenack> 10
[19:15] <ahasenack> in which world is that sane
[19:15] <ahasenack> 10 services for a file server
[19:15] <ahasenack> ftp works better, and also has kerberos auth, and can also have tls/ssl

[19:17] <sarnold> ouch, "ftp works better"
[19:17] <teward> > ftp works better
[19:17] <teward> in what world is this statement NOT heresy?
[19:21] <ahasenack> :)
[19:21] <ahasenack> never had to reboot a server because of a stuck ftp server, that's true
[19:22]  * teward classifies ahasenack as a heretic and sends ahasenack to the Gulag.
[19:22] <ahasenack> nfs gets even clients stuck
[19:22] <teward> :P
[19:22] <teward> sftp > ftp
[19:22] <sarnold> I thought -osoft was the default these days?
[19:23] <ahasenack> I challenge someone to explain to me all thost 10+ services needed to run nfsv4
[19:23] <ahasenack> and that wasn't even counting the kerberos servers
[19:23] <teward> i mean, I hate NFS as much as the next guy too
[19:23] <teward> but FTP?
[19:23] <teward> you're LOOKING for self-torture at that point
[19:23]  * ahasenack whispers dput
[19:59] <teward> ahasenack: dput can be configured to SFTP.
[19:59] <teward> :P
[19:59] <ahasenack> I tried, it hangs
[20:01] <sarnold> interesting; I think most of us on the security team moved to sftp a few years back
[20:02] <sbeattie> ahasenack: err, wut?
[20:02] <ahasenack> well, I didn't try *yesterday*, but some months ago
[20:02] <ahasenack> and lp has many bugs about it. Some fix released, some expired
[20:03] <sbeattie> ahasenack: been using it without issue for quite some time.
[20:03] <sbeattie> obviously your mileage varies.
[20:03] <ahasenack> obviously
[20:03] <ahasenack> let's use nfs! :)
[20:04]  * sbeattie weeps
[20:05] <teward> sbeattie: including for straight upload.u.c uploads (such as for the repos)?
[20:05] <sbeattie> hrm, probably not.
[20:05] <sbeattie> I rarely if ever do that.
[20:06] <sbeattie> but thousands of packages to ppas.
[20:07] <ahasenack> it always hung with a ppa for me
[20:07] <ahasenack> I wasn't uploading to the archive yet
[20:12] <sbeattie> hrm, I do recall an issue a while ago where I think launchpad was having problems looking up public keys, but that was fixed relatively quickly.
[20:14] <sbeattie> That said, ftp is simpler than nfs, if not better; my favorite house of cards was my backup "solution" for one host involved rsnapshot to an nfs mount over openvpn over usb wifi; it would hang on shutdown because the openvpn tunnel would get brought down before the nfs unmount.
[20:18] <sarnold> yeah that sounds likely to fail when there's a strong breeze or the moon, mars, and jupiter all line up at once
[20:22] <ahasenack> lining up is rare, nfs failing isn't :P
[20:34] <nacc> i read that as "a strong breeze on the moon, mars and jupiter all line up at once"
[20:34] <nacc> it was such an elegant visual
[20:35] <sarnold> haha :)
[20:36] <teward> lol
[20:36] <nacc> and even less probable
[20:36] <teward> the probability FTP falls to a very easy to execute vulnerability, though, is much higher than the probability of NFS failing.
[20:37] <ahasenack> nfs is safe, you mean? :)
[20:37] <sarnold> though I've got to be honest, if I hadto expose one of nfs or ftp to the great unwashed internet, I think I'd pick ftp. You can wrap that in apparmor, seccomp, rlimits, and cgroups. NFS runs right in the bloody kernel..
[20:37] <ahasenack> you can't even run an nfs server in a container
[20:38] <ahasenack> and it's not just one service you would be exposing
[20:38]  * ahasenack points up at the wc -l output
[21:05] <A_D> I configured netplan to add a v6 to one of my interfaces, along with a gateway for it to use. It does not seem to correctly add routes for the gateway on the interface. The gateway is within the netmask set on the interface
[21:06] <A_D> is there something I missed or is this possibly a known bug
[21:07] <xedniv> anyone here with firewalld experience?
[21:37] <mason> xedniv: It's generally better to just ask your question rather than ask to ask or survey.
[21:40] <sarnold> A_D: how did you try to apply the new configuration? did you get any error messages or warnings in the logs or dmesg?
[21:41] <mason> xedniv: I've got to take off, but if you ask your question later and I see it, and you're still here, I'll see if I can answer it.
[21:42] <xedniv> mason, thanks buddy, im writing it now
[21:42] <xedniv> so i have multiple zones, the host runs a kvm libvirtd instance, and i have two bridges for two vlans
[21:42] <mason> xedniv: Oh, alright, if you ask it soon I'll stick around.
[21:42] <xedniv> im seeing rejected packets for both, and i cant route from another host despite adding it tot he trusted/ACCEPT zone
[21:43] <mason> xedniv: Is this on Ubuntu?
[21:43] <xedniv> ex. FINAL_REJECT: IN=brvlan1001 OUT=brvlan1001 PHYSIN=bond0.1001 PHYSOUT=vnet0
[21:43] <xedniv> yes
[21:43] <xedniv> lts
[21:43] <xedniv> ive managed iptables manually always but i decided to try firewalld (famous last words)
[21:43] <mason> heh
[21:44] <mason> Well. The wisdom of doing that aside, it ends up just generating iptables rules for you, and those can be examined. I hit a funny issue not long ago. Let me find the reference.
[21:46] <mason> xedniv: Oh, hrm. Seems likely unrelated, but the issue I hit was https://access.redhat.com/solutions/3550201
[21:47] <mason> xedniv: But it's worth seeing if it's something vaguely similar.
[21:48] <mason> Sorry, I was expecting I'd be more helpful!
[21:48] <sarnold> paywalled :(
[21:48] <mason> Bah, is it?
[21:48] <sarnold> yeah
[21:50] <mason> sarnold: If you have a developer account, that'd work to get you into that.
[21:50] <sarnold> oh? I thought it was Customers Only, hehe
[21:50] <xedniv> mason, how can I add a dest port to a rich rule?
[21:51] <sarnold> mason: heh, there's a Google+ logo at the bottom of https://access.redhat.com/subscription-value/ that can probably be yanked off :)
[21:51] <xedniv> im puzzled though as the trusted zone should handle the host im connecting from and yet it gets rejected
[21:51] <xedniv> sarnold, hey lol
[21:51] <mason> xedniv: Well, you're bridging, and that ends up being "special"
[21:52] <xedniv> paywalled!
[21:52] <xedniv> lemme see
[21:52] <xedniv> ouch
[21:53] <mason> Hm, https://superuser.com/questions/990855/configure-firewalld-to-allow-bridged-virtual-machine-network-access seems very similar
[21:53] <mason> Alright, got to go have my shot. \o/ I'll be back later.
[21:54] <sarnold> see ya mason, thanks :)
[21:54] <xedniv> see you man, thank you!
[22:08] <xedniv> mason, i applied the fix, but now i cant firewall the bridge from the host
[22:08] <xedniv> :(