[00:05] <webPragmatist> and thats a big nope
[00:06] <erichammond> webPragmatist: This doesn't answer your question, but I prefer to use rsync over ssh.  That way I only have to worry about controlling a single point of access on the server (sshd).
[00:07] <webPragmatist> i am using rsync
[00:07] <webPragmatist> it's called rsync with xinetd so it will run as root and not bitch… but the problem is, well… it's bitching
[00:07] <webPragmatist> because it's not really running as root, it's running as like "nobody:
[00:08] <erichammond> webPragmatist: clarification: I prefer to do it over ssh rather than use rsyncd.
[00:08] <webPragmatist> oh
[00:08] <webPragmatist> lol
[00:08] <webPragmatist> i dunno about that jazz
[00:09] <webPragmatist> lsyncd doesn't use scp, etc.
[00:09] <webPragmatist> http://www.server-world.info/en/CentOS_5/lsync/1.html
[00:09] <webPragmatist> or rather it does but i don't care to try it
[00:09] <webPragmatist> rsyncd should work
[00:10] <erichammond> webPragmatist: rsync works over ssh without using "scp, etc."
[00:11] <webPragmatist> and you just use keys i suppose
[00:11] <webPragmatist> are you going to be around tomorrow?
[00:12] <webPragmatist> in general is the only difference the authentication? or what
[00:13] <webPragmatist> i put my clone in here if you have anything to say :)
[00:35] <ruben23> hi what is the latest upgraded kernel version of ubuntu-server..?
[00:35] <ruben23> like for ubuntu-8.04 LTS
[00:36] <Callum__> oh man, I've got a dead battery in one of my UPSs
[00:37] <Callum__> its so bad that its bulging in places
[00:38] <Callum__> since that 1500VA UPS is ancient, I am going to assemble a RBC7 battery for a newer APC SmartUPS 1500VA unit I have, but its going to set me back at least NZ$267 >_>
[00:38] <Callum__> and considering we're a non-profit, money isn't easy to set aside
[01:00] <billybigrigger> anyone here deal with alot of NFS shares?
[01:01] <multi_linux_dist> hi guys, i need a little help with my domainkey setup in the zonefile
[01:01] <multi_linux_dist> i have setted it up:  http://pastebin.com/aGSs4pby
[01:01] <multi_linux_dist> but dig
[01:02] <multi_linux_dist> sorry, dig _domainkey.mara-tour.ro TXT returns no answer
[01:02] <multi_linux_dist> do you have any idea why?
[01:04] <billybigrigger> ?
[01:04] <billybigrigger> looks ok to me here
[01:04] <billybigrigger> domainkey.mara-tour.ro.	0	IN	A	<IP_ADDRESS>
[01:05] <patdk-wk> billybigrigger,  that is a total foobar test :)
[01:05] <patdk-wk> he said txt, not a
[01:05] <patdk-wk> and it starts with a _
[01:05] <patdk-wk> dig -t txt _domainkey.mara-tour.ro
[01:05] <billybigrigger> thought he was looking for a mail record
[01:05] <patdk-wk> nope
[01:05] <billybigrigger> not familiar with txt sorry
[01:05] <patdk-wk> check: dig -t txt _domainkey.patrickdk.com
[01:06] <patdk-wk> he is looking to get dkim working
[01:06] <multi_linux_dist> yes
[01:06] <multi_linux_dist> patdk-wk: you are right, that is what i`m trying to do
[01:06] <billybigrigger> not familiar with dkim...looks like you've volunteered pat :P
[01:07] <patdk-wk> heh, you forgot to put a . on the end of your domains :)
[01:07] <patdk-wk> so it's not _domainkey.mara-tour.ro
[01:07] <patdk-wk> but _domainkey.mara-tour.ro.mara-tour.ro.
[01:08] <multi_linux_dist> patdk-wk: i will try it now, but tryied before and still nothing
[01:08] <patdk-wk> well, either it must just be, _domainkey
[01:08] <patdk-wk> or, _domainkey.mara-tour.ro.
[01:09] <patdk-wk> atleast based on the other examples i nthe file
[01:09] <patdk-wk> though _domainkey.mara-tour.ro. would be the safe garrentied way
[01:09] <patdk-wk> works
[01:09] <multi_linux_dist> works?
[01:09] <patdk-wk> ;; ANSWER SECTION:
[01:09] <patdk-wk> _domainkey.mara-tour.ro. 3600	IN	TXT	"'t=y"
[01:09] <patdk-wk> extra ' though
[01:09] <multi_linux_dist> it doesn`t to me
[01:10] <patdk-wk> you foobar'ed your test also? :)
[01:10] <multi_linux_dist> dig -t txt _domainkey.mara-tour.ro
[01:10] <patdk-wk> well, that won't work
[01:11] <multi_linux_dist> QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
[01:11] <patdk-wk> your local dns server is caching the bad result
[01:11] <patdk-wk> for up to an hour
[01:11] <multi_linux_dist> :D
[01:11] <patdk-wk> so you have to contact your server directly
[01:11] <patdk-wk> dig -t txt _domainkey.mara-tour.ro @<IP_ADDRESS>
[01:11] <multi_linux_dist> hehe
[01:11] <multi_linux_dist> :D
[01:12] <multi_linux_dist> patdk-wk: thank you very much!
[01:14] <patdk-wk> nohup dd if=/dev/urandom of=/dev/sdg bs=8192 > /dev/null 2>&1 &
[01:14] <patdk-wk> nothing better than running that on 3 drives
[01:14] <patdk-wk> just wish urandom was faster than 2MB/s
[01:18] <multi_linux_dist> patdk-wk: Authentication-Results: mx.google.com; spf=pass (google.com: domain of<EMAIL_ADDRESS>designates <IP_ADDRESS> as permitted sender<EMAIL_ADDRESS>dkim=pass<EMAIL_ADDRESS>[01:18] <multi_linux_dist> google says that dkim pass
[01:18] <multi_linux_dist> yahoo dont
[01:19] <multi_linux_dist> cache?
[01:19] <multi_linux_dist> why all my mails go into spam folder if the ip is not reported as spam?
[01:23] <gnoob> guys,  whats the easiest way to send e-mail from console?  want to make my server notify me when somthing happen trough bash script
[01:26] <zul> mail command?
[01:26] <Guest28494> Hey is there a way to configure ubuntu server to connect to a wireless accesspoint to install?
[01:27] <multi_linux_dist> telnet?
[01:27] <multi_linux_dist> php mail?
[01:28] <multi_linux_dist> you can run a php command via sh
[01:28] <multi_linux_dist> or telnet i thin
[01:28] <multi_linux_dist> think*
[01:28] <multi_linux_dist> but php is sure
[01:32] <Guest28494> Hey is there a way to configure ubuntu server to connect to a wireless accesspoint to install?
[01:34] <Guest28494> Or where are the packages that the server needs to install?
[02:11] <pnunn> Has anyone worked out how to move a windows image into ubuntu's eucalyptus cloud yet?
[02:50] <cs1> hi guys
[02:51] <cs1> i need some advice about setting up the server
[02:51] <cs1> firstly
[02:51] <cs1> about the networking
[02:52] <cs1> how do i go about setting up the network on the server?
[02:54] <cs1> hello?is anybody available there?
[02:55] <cs1> your guidance is truly appreciated
[03:06] <p1l0t> Does anyone know why ifconfig would not want to read from /etc/network/interfaces
[03:17] <p1l0t> I swear I have this one server that changing the interfaces file does NOTHING I can set the address manually but changing the interfaces file has no effect. Everytime it reconnects it goes back to some other settings!
[03:19] <p1l0t> It can't be the syntax because this syntax works in every other ubuntu machine I have
[03:19] <dhastha> Need help:  I am trying to install Ubuntu server 9.10 in virtual machine manager. But Virtual machine manager returns :  Unable to complete install: 'internal error unable to start guest: char device redirected to /dev/pts/0
[03:19] <dhastha> qemu: could not open disk image /var/lib/libvirt/images/UbuntuServer.img: No such file or directory
[03:23] <dhastha> How to install ubuntu server 9.10 in virtual machine manager?
[03:52] <qman__> p1l0t, ifconfig doesn't use those settings, it's strictly a manual override tool
[03:53] <p1l0t> oh
[03:53] <qman__> you should run `sudo service networking restart` to apply changes made there
[03:53] <p1l0t> wilco
[03:59] <cs1> how do i get about setting up the network for the server??
[04:10] <qman__> cs1, it is explained clearly in the Ubuntu Server Guide, linked in the topic
[04:11] <cs1> ok.
[04:11] <cs1> sorry
[04:11] <cs1> maybe i phrased my question wrong.
[04:11] <qman__> if you are having a more specific problem, please explain
[04:11] <cs1> i want to know is it REALLY necessary to setup the TCP/IP and stuff
[04:11] <cs1> because we are only running the server within the company enviroment
[04:11] <qman__> you can't communicate with the internet if you don't have TCP/IP
[04:12] <cs1> icic
[04:12] <cs1> sorry if i ask stupid questions as im new to this
[04:12] <qman__> you could potentially use a different protocol, but these days, TCP/IP is the only one in widespread use
[04:12] <cs1> icic.
[04:12] <qman__> novell IPX/SPX is long gone, and IPv6 hasn't taken off yet
[04:12] <cs1> so its better to setup TCP/IP??
[04:13] <cs1> how about DHCP??
[04:13] <cs1> is it neccesary??
[04:13] <qman__> DHCP operates over IP
[04:13] <qman__> DHCP is entirely optional
[04:13] <cs1> ok
[04:13] <cs1> regarding remote administration
[04:14] <cs1> say i dont want to set it up now
[04:14] <cs1> will i have trouble setting it up later in the future??
[04:14] <qman__> it being remote administration, that's easy
[04:14] <qman__> simply install the openSSH server
[04:14] <qman__> it can be done at any point in time
[04:14] <cs1> icic
[04:15] <cs1> so it wont cause the server to crash later on??
[04:15] <qman__> of course not
[04:15] <qman__> it wouldn't be very useful if it did
[04:15] <cs1> ok.
[04:15] <cs1> about DNS
[04:16] <qman__> DNS is also optional
[04:16] <cs1> not necessary to setup right??
[04:16] <cs1> ok
[04:16] <qman__> provided you don't mind using IPs to refer to your computers
[04:16] <cs1> i cant use host name to refer to the pc in the company??
[04:16] <qman__> not without some sort of name resolution
[04:16] <cs1> sorry
[04:16] <p1l0t> you can with dns
[04:16] <cs1> computer name
[04:16] <qman__> DNS is one way, there are many
[04:17] <qman__> you can set up the hosts files, or use netbios, though that one's a bit trickier with linux
[04:17] <qman__> DNS scales the best
[04:17] <cs1> i see
[04:18] <cs1> so in a way its better to setup DNS to avoid any unwanted problems later on?
[04:18] <qman__> as opposed to using hosts files, yes
[04:18] <qman__> since each computer's hosts file must be configured in order to work
[04:18] <qman__> while a DNS server can provide names to all computers on the network
[04:18] <cs1> icic
[04:19] <cs1> so without DNS,i will have to use the ip address to communicate with them??
[04:19] <qman__> yes
[04:19] <cs1> ok.
[04:19] <cs1> network authentication
[04:19] <cs1> which one is more flexible
[04:20] <cs1> OpenLDAP
[04:20] <cs1> Samba and LDAP
[04:20] <cs1> Kerberos
[04:20] <cs1> Kerberos and LDAP
[04:20] <cs1> im not sure what are the difference among this four
[04:20] <p1l0t> Depends on what you want to do
[04:20] <qman__> they are all more or less equally flexible
[04:20] <cs1> icic
[04:20] <qman__> setting up a working system with any of the above is quite a complex process
[04:21] <cs1> because we want to setup ERP on the server
[04:21] <cs1> so we want to setup the server to be stable
[04:21] <qman__> be aware that if you are trying to integrate with a microsoft active directory network, not all features are implemented in samba and you will have limited functionality
[04:21] <electrofreak> why isn't there a config in /proc/?
[04:22] <cs1> so its better to use Kerberos??
[04:22] <qman__> no, samba is the only real way to integrate with active directory
[04:22] <cs1> aahh
[04:22] <cs1> ok
[04:23] <qman__> you can get basic authentication if you make some undocumented tweaks to your windows servers
[04:23] <qman__> but other than that, there isn't much
[04:23] <p1l0t> If you have any Windows computers on your network you will want samba more then likely
[04:23] <cs1> yes.
[04:24] <qman__> yes, samba provides the best way to communicate with windows
[04:24] <qman__> as limited as it is
[04:24] <cs1> limited as in??
[04:24] <qman__> samba's authentication is on the same level as windows NT 4
[04:25] <qman__> getting it to work with active directory is an exercise in frustration, to say the least
[04:25] <qman__> and you won't get anything more than simple authentication
[04:25] <cs1> ok.
[04:25] <qman__> none of the extra features like group policy are available
[04:25] <cs1> sounds extremely hard to setup then
[04:25] <qman__> it's definitely an advanced-level task
[04:26] <cs1> i see.
[04:26] <p1l0t> I wouldn't say extreme but it does take a little reading
[04:26] <cs1> ok.
[04:26] <cs1> for the remote administration, its better to use OpenSSH or eBox??
[04:26] <cs1> i read in forums, ebox seems to be the more favorable option
[04:27] <qman__> if you like hold-your-hand interfaces, then yes
[04:27] <qman__> but be prepared for little bugs and things to pop up
[04:27] <p1l0t> I use SSH but I have not tried eBox
[04:27] <qman__> and definitely make sure you lock down your internet access to it
[04:27] <qman__> I use SSH exclusively
[04:27] <electrofreak> what is eBox?
[04:27] <qman__> !ebox
[04:28] <electrofreak> oh, ewww. lol
[04:28] <cs1> in other words SSH is more stable than ebox??
[04:28] <p1l0t> More secure for sure
[04:28] <electrofreak> eBox is likely more user friendly... I wouldn't even classify eBox and SSH together
[04:29] <qman__> because of the way ebox and similar interfaces work, if you try to do things manually as well as use ebox, you will be in a situation where the 'automagic' code is fighting with you over your manual settings
[04:29] <qman__> confusing things can happen
[04:29] <qman__> so unless you plan to use ebox exclusively, I suggest not using it
[04:29] <cs1> icic.
[04:30] <electrofreak> yeah, I would likely not like ebox because it wont be flexible enough
[04:30] <cs1> icic.
[04:30] <cs1> we want flexibility
[04:30] <cs1> thats why we are looking for options
[04:30] <p1l0t> automagic code has fighting me my whole life - hence why I switched to linux... of course now even linux is starting with auto-magic but at least my servers are still fairly pure
[04:30] <cs1> before we start setting up the server.
[04:31] <qman__> ebox fills the niche of cookie-cutter setups
[04:31] <qman__> custom setups are better served manually
[04:31] <cs1> ok.
[04:31] <electrofreak> cs1: ah... doing some research for work or something? definitely play with this stuff in VMs to get a feel for things
[04:32] <cs1> yes.
[04:32] <cs1> im doing research for work
[04:32] <qman__> yes, definitely set up a test system and play with it
[04:32] <qman__> make sure it will work for you before you commit to it
[04:32] <cs1> its better to run things in VM before doing it on the server right??
[04:32] <p1l0t> Or just stick it on some old computer and learn with it
[04:33] <p1l0t> I started a few years ago just because the Windows crashed on this old computer we had. No I run the company on that server. lol
[04:33] <cs1> LOL
[04:33] <cs1> about setting up the security for the server
[04:33] <cs1> im not entirely clear about this
[04:34] <p1l0t> Ubuntu is pretty good with being configured by default for security. Just read carefully about the changes you make
[04:34] <cs1> icic.
[04:34] <cs1> so i can setup up the server without have to fiddle with the security options>?
[04:36] <qman__> there aren't any "security options" per se
[04:36] <cs1> icic.
[04:36] <cs1> about the monitoring part
[04:36] <p1l0t> Well it depends what you do. Security options is kind of a vague statement
[04:36] <qman__> security is not something that you just "turn on", it is a philosophy you follow throughout your system design
[04:36] <cs1> hrmm
[04:36] <cs1> ok
[04:36] <qman__> ubuntu is secure by default, so you only need to worry about the things that you add or configure
[04:37] <cs1> ok
[04:37] <qman__> set up a proper firewall preventing internet access to things that should not have it, etc
[04:37] <electrofreak> what is the server going to be used for?
[04:37] <cs1> to host ERP system
[04:37] <cs1> Enterprise Resourcing system
[04:38] <p1l0t> I wish I knew what that was
[04:38] <cs1> ermmm
[04:38] <cs1> http://en.wikipedia.org/wiki/Enterprise_resource_planning
[04:39] <cs1> here is the lin
[04:39] <cs1> *link
[04:39] <cs1> hope it helps
[04:39] <cs1> how about monitoring part??
[04:39] <cs1> from the documentation
[04:39] <cs1> i can see there are 2 ways to go
[04:39] <cs1> 1 is using Nagios
[04:39] <cs1> another is Munin
[04:40] <qman__> Nagios is a good platform
[04:40] <qman__> I have not used Munin
[04:40] <qman__> but if you're only monitoring one system, either is overkill
[04:41] <p1l0t> I am actually working on my own system, but I have much more to learn about MySql
[04:41] <qman__> they're designed to be full network reporting infrastructures
[04:41] <cs1> ok
[04:41] <cs1> File servers
[04:41] <qman__> for windows clients, samba is king
[04:42] <qman__> for linux clients, there are lots of options
[04:42] <cs1> ok.
[04:42] <electrofreak> nfs is probably the best option for linux clients
[04:42] <cs1> thats for the DNS right??
[04:42]  * giovani cringes
[04:42] <cs1> ic
[04:42] <qman__> NFS has specific weaknesses
[04:42] <SpamapS> cs1: Munin is for instrumentation (graphing mostly). Nagios is for alerting.
[04:42] <cs1> such as??
[04:42] <qman__> it is wholly insecure without a tightly knit directory service
[04:43] <SpamapS> cs1: Munin can feed alerts to Nagios
[04:43] <qman__> if high throughput and performance is not critical, sftp is a great option
[04:43] <qman__> secure authentication and easy to use linux-to-linux
[04:44] <cs1> i see
[04:44] <qman__> there are many more options though, especially if you're looking into distributed file systems
[04:44] <cs1> i have no idea about file server
[04:44] <SpamapS> nfsv4 is not insecure
[04:44] <cs1> ok
[04:45] <SpamapS> most of the weaknesses in nfs were eliminated w/ v4
[04:45] <cs1> what other options do i have??
[04:45] <SpamapS> but its still more complex than samba
[04:45] <qman__> SpamapS, you still need a directory service to set up per-user access
[04:46] <qman__> NFS works great in specific situations
[04:46] <cs1> i see
[04:46] <qman__> but there are plenty where it is a poor choice too
[04:46] <SpamapS> qman__: yeah, I really wish people would just standardize on a single LDAP schema and one kerberos implementation so we can stop saying "it depends"
[04:46] <qman__> Windows can interact with samba directly
[04:46] <qman__> anything else you choose will require you to install software on windows clients
[04:47] <cs1> all the computer in the company uses linux
[04:47] <cs1> but we wanna prepare ourselves just in case we have 1 or 2 windows platform
[04:47] <qman__> then, your options go way up
[04:47] <cs1> LOL
[04:47] <cs1> this is head cracking
[04:48] <qman__> tons of options with neat features, like AFS
[04:48] <cs1> what does AFS stands for?
[04:48] <qman__> there are about as many options are there are keys on your keyboard
[04:48] <qman__> Andrew File System
[04:48] <cs1> geez
[04:48] <SpamapS> Areallyhardtogetrunning File System
[04:48] <giovani> haha
[04:48] <SpamapS> at least, it was 6 years ago
[04:49] <giovani> I suppose if you expect solutions that are out of the box to work well
[04:49] <SpamapS> My theory is it was a ploy by CMU to encourage people to get advanced degrees trying to understand it.
[04:49] <giovani> you will be disappointed
[04:49] <giovani> well, AFS wasn't written by CMU
[04:49] <qman__> http://en.wikipedia.org/wiki/Category:Network_file_systems
[04:49] <qman__> just to give you an idea
[04:49] <cs1> @.@
[04:49] <cs1> thats alot
[04:50] <giovani> AFS was an IBM project originally
[04:50] <cs1> the chat application
[04:50] <giovani> then became CMU
[04:50] <cs1> can i add this feature in later on?
[04:51] <cs1> or its better to perform it while i setup my server
[04:51] <qman__> I don't know what you mean by "the chat application"
[04:51] <SpamapS> http://www.itp.uzh.ch/~dpotter/howto/kerberos  <-- NFSv4 + LDAP + Kerberos = pages and pages of fun repetitive steps that could be packaged just like MS packages ActiveDirectory
[04:51] <electrofreak> cs1 you can setup any thing at any time
[04:51] <qman__> you can install anything at any time, but be aware that sometimes changing things breaks them, so any changes you make later you will want to perform on a test system first
[04:51] <cs1> aaahhh
[04:51] <cs1> ok
[04:52] <cs1> because im looking at the documentation for ubuntu server
[04:52] <cs1> there is a part called chat applications
[04:52] <qman__> SpamapS, that's my biggest feature request for ubuntu server, a tasksel-style ready to go directory setup
[04:53] <SpamapS> qman__: I believe it was discussed at UDS Maverick
[04:54] <cs1> guys...what is version control system??
[04:54] <SpamapS> cs1: wow
[04:54] <cs1> SpamapS : yes?
[04:55] <qman__> it is a system to keep track of versions and changes to files
[04:55] <qman__> mostly used for source code or important documents
[04:55] <cs1> i see
[04:55] <SpamapS> cs1: version control is just so vital, I'm surprised that you would ask. I'm sorry, I don't mean to imply anything by that.
[04:56] <qman__> yes, it's a critical part of the development process of any software
[04:56] <SpamapS> qman__: Should be used for config info too
[04:56] <cs1> i see i see.
[04:56] <SpamapS> FreeBSD figured that out a long time ago.. we're just not figuring it out w/ etckeeper.
[04:56] <cs1> so its a MUST to have??
[04:56] <qman__> only if you have something you need to keep track of
[04:56] <SpamapS> s/development of any software/infrastructure of any company/
[04:57] <cs1> ok.
[04:57] <qman__> such as a software project, some important documents, or anything that changes that you need to keep track of
[04:57] <cs1> i see i see.
[04:57] <SpamapS> like, say, /etc/apache2/* ;)
[04:57] <cs1> SpamapS : i ask about it because i have no idea what is it about. =)
[04:58] <qman__> version control is especially important if you have multiple people working on something
[04:58] <cs1> aaahhh
[04:58] <SpamapS> qman__: Its pretty vital to keep track of changes to system configurations IMO.
[04:58] <KurtKraut> How do I change my server locale?
[04:58] <cs1> about windows networking
[04:58] <qman__> if someone deletes something important from a file, you can get it back
[04:58] <twb> SpamapS: the other really annoying thing about nfsv3/krb/ldap is I don't have a turn-key way to get SSO
[04:59] <cs1> seems like windows networking is the hardest of all right??
[04:59] <qman__> integration with windows is handled mostly with samba
[04:59] <SpamapS> qman__: what if you hae one person.. but that person quits. Its going to be vital to your organization to be able to understand why that person did things.. version control can definitely help untangle messes and timebombs.
[04:59] <cs1> ok
[04:59] <SpamapS> cs1: actually setting up samba to talk to windows clients is pretty simple
[04:59] <cs1> so just install Samba an configure it??
[04:59] <qman__> file sharing with samba is easy
[04:59] <qman__> authentication is not
[05:00] <cs1> ok
[05:00] <cs1> authentication as in accessing each other file?
[05:00] <qman__> that is, active directory authentication
[05:00] <SpamapS> qman__: agreed. it can be.. maddening. ;)
[05:00] <qman__> user-based file permissions is also fairly simple
[05:00] <cs1> i see
[05:00] <cs1> perghhh...information overload on my head now
[05:01] <SpamapS> cs1: just figure out the next thing you need to do.. leave the rest for after thats done.
[05:01] <qman__> SpamapS, I can definitely see the value there, I don't really use it myself because I'm pretty much a one-man IT department, even with the jobs I do for other people
[05:02] <cs1> how about backups??
[05:02] <qman__> but bringing others into the equation, that would be critical
[05:02] <qman__> backups have even more options than file sharing
[05:02] <cs1> Bacula is a software to handle backup?
[05:02] <SpamapS> qman__: one man IT depts. are actually *more* important to wrap in version control. :)
[05:03] <SpamapS> cs1: I am a huge fan of Bacula
[05:03] <cs1> easy to use??
[05:04] <SpamapS> cs1: depends on your setup.. if you just backup "everything everywhere" .. then its easy because the config file is very simple.
[05:04] <electrofreak> I'd suggest rsnapshot, too. I've never used bacula, tho
[05:04] <SpamapS> cs1: if you start trying to get tricky w/ different file sets and agents and policies.. its still not all that "hard" .. but its not point and click. ;)
[05:05] <cs1> about the networking part
[05:05] <cs1> we have router and switch on our server
[05:05] <qman__> most of my backups consist of tar commands in a cron script
[05:05] <SpamapS> rsnapshot is good for very simple setups. Its kind of like Apple's Time Machine without the pretty graphics. ;)
[05:05] <cs1> do we still need to configure TCP/IP??
[05:05] <electrofreak> SpamapS: and it works.
[05:05] <qman__> cs1, you cannot access network resources if you don't configure TCP/IP
[05:06] <SpamapS> cs1: I think you may need to think about getting some training.
[05:06] <electrofreak> SpamapS: please don't compare it to TimeMachine... I hate TM with a passion
[05:06] <cs1> yeah
[05:06] <SpamapS> cs1: we can answer questions, but the reason you're feeling overwhelmed is you need a stronger foundation.
[05:06] <cs1> i seriously need training now
[05:07] <electrofreak> ubuntu is absolutely a very good "first linux server" tho...
[05:07] <SpamapS> electrofreak: TM has saved me at least 3 times now.. so I <heart> TimeMachine.
[05:07] <qman__> if you really want to understand how it works, I suggest starting with a routers & routing course
[05:07] <qman__> it will give you a strong understanding of what networking really is
[05:07] <qman__> then move on to the server administration stuff
[05:07] <SpamapS> cs1: though being forced to learn it all "on the job" can be great training. :)
[05:08] <cs1> yeah
[05:08] <electrofreak> but if it's your first encounter with linux... or running a server in general... it will definitely be overwhelming
[05:08] <cs1> thats what im going through now
[05:08] <SpamapS> actually I know a kid who started out in IT at 16 racking servers for a hosting company..
[05:08] <SpamapS> one of the best sysadmins/webdevs I work with now, 5 years later.
[05:09] <SpamapS> never saw Windows other than on his laptop.
[05:09] <electrofreak> some people just really have a nac for it
[05:09] <SpamapS> Yeah, the key is that you like trial and error. :)
[05:09] <cs1> wow
[05:09] <cs1> that kid is smart
[05:10] <qman__> I find the people that know the most and do the best work are the ones who take the time to learn and understand how it works on a basic level
[05:10] <qman__> don't just memorize commands or "this is how it's done"
[05:10] <SpamapS> memorization is what you do to get a paycheck
[05:10] <cs1> LOL
[05:10] <cs1> agree
[05:10] <SpamapS> deep understanding comes from a desire to master your domain. :)
[05:10] <cs1> i see
[05:10] <cs1> you guys have been great help
[05:10] <cs1> thank you so much
[05:11] <electrofreak> this channel is open 24x7!
[05:11] <twb> You're confusing memorization with deliberately inserting dead-man heisenbugs.
[05:11] <twb> electrofreak: except bank holidays and the Queen's birthday
[05:11] <cs1> LOL
[05:11] <electrofreak> lol
[05:12] <cs1> ok
[05:12] <cs1> 1 more question
[05:12] <cs1> what steps do i have to take in order to setup the server...
[05:12] <electrofreak> install it you mean?
[05:12] <cs1> the company will be using the server to host the ERP system
[05:13] <cs1> yaya
[05:13] <cs1> install it
[05:13] <qman__> download the iso, burn to CD
[05:13] <cs1> ok
[05:13] <qman__> boot it in the server and follow the on-screen instructions
[05:14] <electrofreak> well, download and burn the ISO... insert it into the drive, boot up, and follow the step-by-step. installing ubuntu is as easy as it gets.
[05:14] <cs1> ok
[05:14] <electrofreak> I do it for fun sometimes.
[05:14] <cs1> but i mean when configuring the whole server to perform what we want the server to do for us
[05:15] <qman__> the Ubuntu Server Guide covers most common tasks very well, once it's installed
[05:15] <electrofreak> https://help.ubuntu.com/10.04/serverguide/C/index.html
[05:16] <cs1> thanks
[05:16] <cs1> so before doing it on a server
[05:16] <cs1> its better to install it on a VM right??
[05:16] <cs1> to test out everything
[05:16] <qman__> whether you use a real server or a VM doesn't matter
[05:16] <cs1> before we migrate to server
[05:16] <cs1> aahh
[05:16] <cs1> ic
[05:16] <qman__> what does matter is that you don't take your business down to do it
[05:17] <cs1> haha
[05:17] <qman__> do it in a sandbox, a test system
[05:17] <cs1> thats crazy
[05:17] <electrofreak> VM is just easy to play around with things...
[05:17] <cs1> i see
[05:17] <qman__> if you have extra hardware to play with, feel free
[05:17] <cs1> haha
[05:17] <qman__> if not, a VM is a good way to do it
[05:17] <cs1> now my brain is hanged
[05:18] <cs1> LOL!!
[05:18] <electrofreak> good luck sir!
[05:18] <cs1> haha
[05:19] <cs1> thanks
[05:19] <cs1> im not sir btw..=P
[05:19] <electrofreak> ooo, opps. my bad
[05:20] <cs1> haha
[05:20] <cs1> its ok
[05:20] <cs1> =)
[05:20] <cs1> anything else i missed out?
[05:20] <cs1> in making more out from the server??
[05:21] <electrofreak> make sure the hardware you put it on is a stable machine...
[05:21] <electrofreak> not something thats going to catch fire every other day or whatever
[05:21] <cs1> haha
[05:21] <cs1> yeah
[05:21] <cs1> i mean software
[05:21] <qman__> yeah, don't buy brand new overclocker hardware, or grandma's old computer, get something you can trust
[05:22] <cs1> what is etckeeper btw??
[05:22] <qman__> etckeeper is version control for your /etc directory, in other words, your system configuration files
[05:23] <cs1> so its a must have??
[05:23] <qman__> highly recommended
[05:23] <cs1> ok
[05:23] <cs1> great
[05:24] <cs1> im still not very clear about the networking thingy
[05:24] <cs1> maybe like you guys have said
[05:24] <cs1> i need training
[05:24] <qman__> networking is the basis on which everything we talked about runs
[05:24] <qman__> it is essential
[05:24] <cs1> but by setting up the TCP/IP,it wont affect the switch and router right?
[05:25] <electrofreak> oh, if the server is just going to be a client behind an existing router/switch setup... then you shouldn't have any problems.
[05:26] <cs1> what about using the server as a host?
[05:26] <cs1> will it have problems?
[05:26] <qman__> no, the networking only gets complicated once you start using the server as a router or firewall
[05:26] <cs1> haha
[05:26] <cs1> OK
[05:26] <qman__> pretty much, you will configure an address for it to use, and leave it alone
[05:27] <cs1> ok
[05:27] <cs1> i think thats all for now
[05:27] <qman__> but an understanding of how it works is very useful when you run into trouble elsewhere
[05:27] <cs1> now i have to discuss about it to my boss
[05:27] <qman__> definitely look into a good book or a course on it
[05:28] <cs1> haha
[05:28] <cs1> ok
[05:28] <cs1> will invest in a good book
[05:29] <qman__> "is my network working" is to system administration as "is it plugged in" is to desktop support
[05:29] <cs1> haha
[05:30] <electrofreak> it should be said I guess that out of the box, ubuntu server will get an IP from the DHCP server (your router) and "just work"
[05:30] <qman__> but if you don't set it static, that will change from time to time causing many headaches
[05:30] <twb> IMO if you ask for static networking, you probably ACTUALLY want fixed DHCP
[05:31] <electrofreak> just set the IP to something OUTSIDE of the DHCP range
[05:31] <twb> That's where downstream is just a dump DHCP client, but upstream (the router) is configured to always and only allocate <IP> to a particular MAC
[05:31] <qman__> yes, but then your DHCP server becomes a single point of failure
[05:32] <qman__> fine for less important things, but this server sounds pretty important
[05:32] <twb> qman__: in static networking, you have TWO points of failure
[05:32] <twb> qman__: because if the network configuration of either end changes, your network won't
[05:32] <twb> ...work
[05:32] <electrofreak> yea, I don't use static assignments on my DHCP server... I just give it a range and then systems that need a static IP, I set a static IP on that system
[05:33] <twb> For a mission-critical core host like the LDAP/Kerberos server, I might use static networking.
[05:33] <twb> I certainly wouldn't use static networking for something less important like apache servers.
[05:33] <qman__> anything that needs to still work when the internet goes down, I use a static IP
[05:34] <electrofreak> that's a good rule of thumb
[05:34] <twb> Your DHCP leases are served by the internet?
[05:34] <qman__> basically, the file server, and the DHCP server
[05:34] <qman__> a reserved lease is good for just about everything else
[05:34] <electrofreak> twb, no I think he just means deciding one what needs a static IP...
[05:35] <twb> It's also worth mentioning that DHCP poisoning can occur on untrusted networks
[05:35] <electrofreak> all sorts of stuff can happen on untrusted networks ;-)
[05:35] <twb> Which for something like the auth server, would leave you exposed to MITM
[05:36] <twb> electrofreak: by "untrusted" I mean things like LANs where you have idiot end users with zombified windows laptops, rather than the conventional stuff like "the internet"
[05:36] <qman__> I've run into those
[05:36] <qman__> nasty buggers
[05:36] <qman__> try to hijack your network with bad DHCP and DNS information
[05:37] <electrofreak> ha, it's always fun to take all the available DHCP addresses with one machine :-P
[05:38] <qman__> one windows machine gets infected, starts its own DHCP and DNS, serves other nodes on the network
[05:38] <qman__> and starts hijacking google searches with malware
[05:40] <electrofreak> I guess we bored 'em
[06:04] <yosi> hi all, I'm running 10.04...  but i just did an upgrade.. and now my SSHd dones't work...   when i log on locally, if i turn ListenAddress (to restrict the SSH host addresses) everything works fine,  if it turn it back on, can't connect from any of the listed IPs, but everything worked fine before i did the upgrade...   did they do something to the SSHd in the latest upgrade?
[06:06] <yosi> anyone, any ideas?
[06:10] <yosi> error: Bind to port 22 on *.*.*.* failed: Cannot assign requested address.
[06:10] <yosi> is what i get in my auth log
[06:16] <jmarsden> yosi: One of the addresses in your ListenAddress line is incorrect, or does not exist on your system, most likely.
[06:18] <yosi> hmmmm..  well ist s list of 3 external ips... my home and work ip's...    it was working for the last 6 months until i did a apt-get upgrade today
[06:18] <yosi> could that have changed something?
[06:19] <yosi> its a list*
[06:21] <yosi> the next line after that error in my auth log is:
[06:21] <yosi> fatal: Cannot bind any address.
[06:23] <jmarsden> Um... ListenAddress is for addresses to *listen* on not for a list of remote addresses!  man sshd_config and read it.
[06:23] <jmarsden> It says:    ListenAddress             Specifies the local addresses sshd(8) should listen on.
[06:25] <jmarsden> To restrict where people can ssh in to the server from, use ufw or any other iptables-based packet filter.
[06:27] <yosi> oh u are right!
[06:27] <yosi> i mis read it
[06:27] <yosi> so those are the local address, i guess if u have multiple ips
[06:27] <yosi> yikes...
[06:28] <EvilTrek> where are sshd config files stored?
[06:28] <yosi> so all these months, i guess that feature hasn't been working as inteneded
[06:28] <jmarsden> EvilTrek: /etc/ssh/
[06:28] <yosi> is there any way to restict the IPs entering SSH without setting up a firewall...
[06:28] <EvilTrek> thanks
[06:28] <yosi> i find ip tables so complicated...
[06:29] <jmarsden> yosi: ufw is simpler
[06:29] <yosi> what does ufw stand for?
[06:29] <yosi> is it as good as iptables?
[06:30] <EvilTrek> and which line do i edit to deny password auth and allow publickey auth only?
[06:30] <jmarsden> It uses iptables underneath.  It is just a simple command line interface to it.
[06:30] <EvilTrek> last time I edited sshd_config was about a year ago xD
[06:30] <jmarsden> EvilTrek: man sshd_config to read all about it.
[06:30] <yosi> is it part of ubuntu or do i need to load it?
[06:30] <EvilTrek> jmarsden:  ty
[06:31] <jmarsden> yosi: It is part of Ubuntu but you may need to apt-get install ufw , I am not sure if it gets installed by default on Ubuntu Server.
[06:31] <yosi> thanks...
[06:31] <yosi> i will try..
[06:32] <jmarsden> EvilTrek: You probably want PasswordAuthentication No
[06:32] <yosi> since i need to only restict ssh, is there any facility in SSHd to oly allow connections from a certain host?
[06:32] <jmarsden> yosi: You're welcome
[06:32] <EvilTrek> jmarsden:  yeah i found it, already edited, and since its on a VPS, i'm rebooting it now xP
[06:34] <jmarsden> yosi: I don't think so, but man sshd_config would talk about it if it exists :)
[06:34] <yosi> thanks
[06:34] <yosi> will read it nwo
[06:34] <jmarsden> EvilTrek: There is no need to reboot for that, just restart sshd :)
[06:34] <EvilTrek> jmarsden:  i also edited a few other things that required a restart for (system updates since i'm lazy at updating)
[06:56] <cs1> guys
[06:56] <cs1> i would like to ask whether windows platform users can login into Linux server
[07:01] <yosi> i figured out i could restrict SSH to certain clinetas using TCP wrappers
[07:02] <jmarsden> cs1: See /topic and read the Server Guide, especially https://help.ubuntu.com/10.04/serverguide/C/windows-networking.html
[07:25] <cs1> is LVM necessary during RAID installation??
[07:26] <twb> LVM and RAID are orthogonal
[07:27] <cs1> aaahh
[07:27] <cs1> ok
[07:27] <cs1> thanks
[07:32] <SpamapS> cs1: these days, not using lvm is sort of like choosing a car with manual windows/locks/etc. It has a place, but you need a good reason. ;)
[07:32] <cs1> icic
[07:32] <twb> Does lucid's upstart still run rcS.d and rc2.d jobs by default?
[07:33] <SpamapS> twb: it still runs all of rc.
[07:33] <twb> I *think* so...
[07:33] <SpamapS> twb: /etc/init/rc.conf
[07:33] <cs1> about the RAID + LVM...if follow the steps shouldnt be a problem right??
[07:34] <cs1> because i will start installing the server soon
[07:34] <cs1> =S
[07:34] <twb> cs1: md, fake or hardware RAID?
[07:34] <cs1> whats the difference btwn those 3???=S
[07:35] <twb> Whether the raid is done by linux, badly by the CPU, or by an expensive dedicated coprocessor
[07:36] <cs1> i think is done by linux
[07:36] <SpamapS> cs1: basically, do you have a RAID card, or just some SCSI/SATA/SAS drives?
[07:36] <cs1> Sata drives
[07:36] <cs1> not RAID card
[07:36] <SpamapS> cs1: md then
[07:36] <cs1> ok
[07:37] <SpamapS> cs1: md == multi device
[07:37] <cs1> so i just follow the steps in the RAID guide???
[07:37] <SpamapS> cs1: its Linux's built in software RAID
[07:37] <cs1> https://help.ubuntu.com/community/Installation/RAID1%2BLVM
[07:37] <twb> cs1: if you're using md RAID and LVM, you can set up both at install time using the Ubuntu Server install media.
[07:38] <cs1> icic
[09:57] <huats> morning
[11:36] <AlexC_> morning
[11:36] <AlexC_> I've got an issue with one of our servers here regarding SSH. We can login just fine, however it is slightly delayed. Looking in /var/log/auth.log we see:    reverse mapping checking getaddrinfo for alex.office.local [<IP_ADDRESS>] failed - POSSIBLE BREAK-IN ATTEMPT!
[11:37] <twb> .local is reserved for MDNS
[11:37] <AlexC_> doing a 'host <IP_ADDRESS>' comes back with 'alex.office.local' and a 'dig a alex.office.local' comes back with <IP_ADDRESS>
[11:37] <AlexC_> MDNS?
[11:37] <twb> zeroconf/bonjour/rendezvous
[11:38] <twb> You cannot use .local on a 192.168 network.
[11:38] <AlexC_> hum, I thought that was one of the purposes of it?
[11:38] <twb> You thought wrong.
[11:38] <AlexC_> however, if this was the issue - our other server does not result in this error and works just fine
[11:39] <twb> Well, I didn't say it was the ONLY issue
[11:39] <twb> Ultimately the problem is that libc (nsswitch.conf) isn't reverse resolving your IP back to the expected hostname.
[11:40] <AlexC_> what could cause this?
[11:40] <twb> Er, getting it wrong
[11:40] <cwillu_at_work> AlexC_, was that host run from the server with the issue?
[11:40] <twb> You should be using "getent hosts".
[11:41] <twb> host(1) is not a valid test, because it always and only uses DNS.
[11:41] <AlexC_> cwillu_at_work: yes
[11:41] <cwillu_at_work> what twb said
[11:42] <AlexC_> $ getent hosts <IP_ADDRESS>    <IP_ADDRESS>     alex.office.local
[11:42] <cwillu_at_work> the other server probably isn't configured to resolve mdns hostnames, or it's later in the resolve order (which I think it incorrect, as it ends up putting out a dns request that's guaranteed to fail)
[11:42] <twb> Yeah; I still think the problem is using .local on the wrong network
[11:42] <AlexC_> what is advised to use instead of .local?
[11:42] <twb> IME it gives these kinds of bizarro failures
[11:42] <twb> AlexC_: I use .lan, because it's the OpenWRT default.
[11:45] <AlexC_> twb: if it makes any difference, there is a Windows Active Directory server on the network, which was setup before I got here to use '.local'
[11:46] <twb> Just because it was someone else who fucked up doesn't make it right.
[11:49] <AlexC_> ok, I'll see about changing to .lan
[12:04] <ramseyd_> Hi guys
[12:04] <ramseyd_> quick question:
[12:04] <ramseyd_> I am trying to get latest version of cherokee web server on my ubuntu 10.04 using apt-get
[12:04] <ramseyd_> But it keeps giving me this error:
[12:04] <ramseyd_> W: Failed to fetch http://ppa.launchpad.net/cherokee-webserver/ppa/ubuntu/dists/lucid/main/binary-amd64/Packages.gz  404  Not Found
[12:04] <ramseyd_> Even though, that link is correct
[12:05] <ramseyd_> Anyone knows what could be wrong?
[12:05] <ramseyd_> here is what a wget of that link gives me : http://dpaste.org/sIdK/
[12:17] <ramseyd_> Someone can answer my question please?
[12:49] <AlexC_> if I'm not putting users in a chroot, and clients would like SSH access - what sort of things should I do to protect certain files? Is it bad practice to remove read access on some files/directories?
[12:55] <hallyn> jdstrand: gmorning - i was wondering, were you planning on merging libvirt 0.8.2 soon-ish?
[12:56] <pmatulis> AlexC_: if these clients are not your own people then i wouldn't allow non-chroot access.  otherwise set up a separate system just for ssh access
[12:59] <AlexC_> pmatulis: have you got a guide or reference for chroot SSH? Everything I see is very old and contradicts what other guides say
[12:59] <AlexC_> I can't find any solid or trustworthy resource
[13:01] <redshirtlinux> Hello everyone, does anyone know a reason why running updates on an Ubuntu 9.04 server might break the servers ability to talk to LDAP?  The server is a hosts a front end via apache and tomcat.  The site is made up of java, php, and html.
[13:19] <pmatulis> AlexC_: i made some notes about it.  i don't remember it being terribly hard.
[13:19] <pmatulis> AlexC_: what's stopping you?
[13:38] <codeshepherd> I find 50 instances of console-kit-daemon running in my server.. . what does it do? Do I really need it? how do I stop it?
[13:53] <codeshepherd> no one here uses console kit daemon ?
[13:54] <jmitchell> are there any bind9 ninjas in the house?
[13:55] <jmitchell> how can i get bind9 to use/allow login's and passwords for dyndns updates to it? I want to copy changeip.com or dyndns.org's type of setup
[13:55] <jmitchell> i am currently generating keys instead
[13:55] <smoser> anyone want to help with https://bugs.launchpad.net/ubuntu/+source/xinetd/+bug/43574
[13:56] <smoser> it just needs sponsoring.
[13:56] <smoser> branch attached.
[13:56]  * jmitchell takes a look at the link\
[13:59] <jdstrand> hallyn: I'm working on updates for libvirt and will do it as part of that
[14:02] <AlexC_> pmatulis: I guess it's knowing what programs I want them to have access to, the directory structure and generally how to set it up
[14:03] <D347H-C0D3> Hi gys... I just used debootrap for ubuntu 8.04 on my ubuntu 9.04(hosted on virtual box). When i tried installing xfce desktop on ubuntu 8.04 the folowing error came: http://paste.ubuntu.com/464024/
[14:06] <pmatulis> AlexC_: well if they need access surely they know what for, no?
[14:14] <soren> smoser: Does anything take care not to install the init script anymore?
[14:14] <smoser> soren, yes. dh handles that.
[14:15] <smoser> theres magic that, and on upgrade, there is magic that replaces /etc/init.d/xinetd with a link to /lib/init/upstart-job
[14:15] <smoser> s/^theres magic that,//
[14:16] <soren> smoser: Neat. :)
[14:18] <hallyn> jdstrand: awesome, thanks
[14:21] <AlexC_> pmatulis: yes, though I mean the more core gnu utils
[14:22] <pmatulis> AlexC_: you have to at least provide a shell for them.  i remember having to copy over manually files for even that to work - it's not great
[14:23] <AlexC_> pmatulis: this is what I don't like, it just seems like one big dirty hack. What happens regarding system updates for files I've copied?
[14:24] <pmatulis> AlexC_: heh, you ask too many questions
[14:25] <AlexC_> questions lead to knowledge :P
[14:25] <pmatulis> AlexC_: and pain
[14:25] <pmatulis> AlexC_: i can send you my notes if you would like
[14:25] <AlexC_> that would be great
[14:26] <AlexC_> thankfully most of our clients will use SFTP, of which chroot is incredibly simple
[14:27] <pmatulis> AlexC_: dumped notes in a private window
[14:28] <AlexC_> thanks, I'll read over :)
[14:43] <sommer> morning all
[14:58] <freakynl> hi, i'm having quite a bit of issues with ufw (the so called (not so)-uncomplicated firewall). Running ubuntu server 10.04 amd64 with ufw (because apparently that's the only iptables thing actually supported by ubuntu). It's main problem is the default config... who/what decided it would be nice to have a 3 connections per minute by default on *EVERY* connection on a *server*? Point me there, I'll bring the bat :). Anyways, anyone know how to
[14:59] <pmatulis> freakynl: cool down
[14:59] <AlexC_> freakynl: shorewall. end of :)
[15:01] <freakynl> pmatulis: actually I am pretty calm, I just find it extremely hard to believe nobody else runs into it / this is default ufw rules on a *server*. 3 connections / min with a 10 burst is absolutely nothing for a webserver especially if clients don't pipeline
[15:01] <jdstrand> freakynl: a) shorewall and iptables are both supported. b) only the 'limit' command has a 3 connections per minute default. allow does not
[15:03] <freakynl> jdstrand: before hitting any allow rules i created with ufw (mainly for 80/443) it hits the ufw-logging-deny chain which blocks it (it goes input -> ufw-before-input -> ufw-logging-deny)
[15:03] <freakynl> jdstrand: but there's something like iptables-save/restore from init.d then?
[15:06] <jdstrand> freakynl: actually, I mispoke, the limit command is 6. the '3' you are seeing is for the logging chain, yes
[15:07] <jdstrand> freakynl: that limit can be adjusted by adjusting your log level in ufw
[15:08] <jdstrand> freakynl: see the LOGGING section in 'man ufw' for details
[15:10] <jdstrand> freakynl: but, based on your comment, it sounds like the packets aren't matching your allow rule, which is why it is going to logging-deny (and therefore your default policy) in the first place
[15:13] <jdstrand> freakynl: as for iptables-restore, see 'man ufw-framework' for details on how things are put together. basically, there is no iptables-save (you use the 'ufw' command or edit files directly) and an iptables-restore action happens on boot (or start/reload)
[15:21] <Daviey> Is anyone ACK'ing SRU's today?
[15:21] <Daviey> bah, wrong channel
[15:32] <freakynl> jdstrand: thanks for the explanation. Actually they do hit allow, otherwise the backup clients wouldn't be able to backup at all and the website wouldn't be accessible. Currently almost all backup clients, depending on what they're doing (ie it occurs when uploading many small files) log 'network connection issues' every 5-10 mins. It then stops backing up for like 5 mins and then tries again. It hits the log/block due to not being allowed by
[15:53] <Daviey> zul, Are you able to look at bug 313275, soonish?
[15:53] <zul> Daviey: i could be persuaded yes
[15:54] <Daviey> zul, R-O-C-K-I-N-G
[15:54] <Trek> i'm getting a weird issue with things related to something with perl failing.  Pastebin: http://starfleet.pastebin.com/E1uXrcyw
[15:54] <Trek> any idea how to fix it?
[15:55] <pmatulis> Trek: did you google for 'perl: warning: Setting locale failed.' ?
[15:55] <Trek> pmatulis: yah, had issues finding it (slow slow slow internet)
[15:56] <Daviey> Trek, Let us know if your search engine doesn't help you find a solution, and we'll crack on.
[15:56] <Trek> standby, since GOOGLE IS TAKING 15 MINUTES TO LOAD
[15:56] <Trek> grr stupid caps
[15:58] <Trek> o.o
[15:58] <Trek> well google found a result...
[15:58] <Trek> but...
[15:58] <Trek> i get new issues too o.o
[15:59] <Trek> standby
[15:59] <Trek> http://starfleet.pastebin.com/2YMhWT6D
[15:59]  * Trek thinks his install is borked
[16:09] <sherr> Trek: Google gets lots of hits for : "Cannot set LC_CTYPE to default locale" +ubuntu
[16:10] <zul> smoser: ping
[16:10] <smoser> here
[16:13] <zul> smoser: im thinking this might help you guys http://people.canonical.com/~chucks/xen-mask-out-xsave-for-hvm-guests.patch
[16:13] <smoser> jjohansen-afk, ^
[16:32] <RyanP> I have Ubuntu Server 10.04 setup with LDAP authentication, and am using the LDAP server to authenticate client computers to the server. On the clients, everything works. On the server, I can login fine, but attempting to change the password I get the error: 'passwd: Authentication token manipulation error'
[16:47] <n0n0x> Has anyone ever used sysbench on ubuntu?
[16:47] <sherr> RyanP: that LDAP error seems to happen a lot and you will get a lot of hits on Google for it. Might be worth checking there first.
[16:49] <RyanP> sherr: I spent a bunch of time on Google, and most of the links seemed to just say something like 'This is sometimes something to do with LDAP.' but nothing more helpful than that.
[16:57] <[diablo]> hi, anyone know a big table database shipping with LTS please?
[16:57] <binBASH> big table database?
[16:58] <binBASH> I thought until now only google got BigTable :D
[17:01] <oru_work> is there any suspicious activity here ? http://www.pastebin.org/397564
[17:02] <oru_work> whats that ghostscript ?
[17:03] <sherr> oru_work: why don't you look it up on the web - easy to track down. Why are you asking about "suspicious" activity?
[17:04] <jjohansen> smoser: yeah that is essentially what I did
[17:05] <ScottK> kirkland: Is it reasonably safe/possible to convert from unencrypted to encrypted home directory on 10.04?
[17:21] <hallyn> ScottK: looks like ecryptfs-migrate-home might do it for you.  I'm going to test it right now actually.  You're on maverick?
[17:21] <ScottK> I have systems on maverick, but the one in question is lucid.
[17:26] <hallyn> ScottK: ok - i'm testing in a lucid vm then.  I'm curious about it myself, to be able to answer other ppl.  (for myself i prefer hand-mounting ecrytpfs'd subdirs - don't know why - old dogs and all that)
[17:27] <webPragmatist> anyon here use rsyncd?
[17:28]  * ScottK prefers it to automagic and reliable to having to think about it.
[17:42] <hallyn> ScottK: <shrug> it worked perfectly for me.  I created a new temporary user with sudo privs, logged in as him, then did ecryptefs-migrate-home -u hallyn;  did a 'switch user' to hallyn to verify files were ok, 'switch users' back and rm -rf /home/hallyn.<random>
[17:42] <maek> is there a way to copy the contents of the install dvd and use it for a network based install source?
[17:42] <hallyn> ScottK: if/when the per-user keyring is honored to deny file reads, i might do all-home encrypted, but as it is, once you log in, any user able to descend your /home/$USER can read all your decrypted files...  so i try to keep encrypted dirs unmounted when possible,
[18:01] <webPragmatist> ScottK: hey
[18:01] <n0n0x> is it possible that mutexes got 4~5 times slower on x86_64 compared to x86? At least that's what sybench is telling me.
[18:02] <webPragmatist> under /etc/default/rsync what's yalls default RSYNC_ENABLE
[18:02] <webPragmatist> true?
[18:02] <robbiew> ttx: wanted to get together in Prague to make sure things are in line for 10.04.1...is there anyone in Server focused on this?
[18:03] <maek> in preseed how do you tell the server to use a different repo to install from other then archive.ubuntu.com or the mirror of said repo?
[18:03] <robbiew> ttx: just want to be sure I don't leave anyone out
[18:17] <SuperLag> Any of you guys use Tomcat on Ubuntu Server?
[18:18] <SuperLag> I've added all the tomcat6-* packages, and edited the tomcat-users.xml file to add the default users who were commented out... but when I try to bring up the Tomcat Manager, I'm still getting an "access denied" message
[18:37] <SuperLag> *sigh*
[18:37] <SuperLag> I figured it out. :/
[18:37]  * SuperLag kicks himself
[18:45] <ttx> robbiew: that would be zul (and possibly me)
[18:46] <robbiew> ttx: ack..thnx
[18:47] <Ast001> Hello after installation of Ubuntu 10.04 server I have got fonts so small that I need microscope to read anything. How can I enlarge that ?
[18:49] <matt_keys> I'm trying to connect to a remote kvm host via ssh. using just the hostname, I can't log in as root by default so I used username@kvmhost. It prompts for the password and authenticates, but then it closes connection with "File "/usr/share/virt-manager/virtManager/connection.py", line 896, in _try_open None], flags) File "/usr/lib/python2.6/dist-packages/libvirt.py", line 111, in openAuth if ret is None:raise libvirtError('virCon
[18:49] <Jeeves_> Ast001: Uh, on your monitor?
[18:49] <Jeeves_> Or via ssh? :)
[18:49] <Ast001> yes I am unable to configure anything
[18:50] <Ast001> on monitor
[18:50] <Jeeves_> Hmm, goed question.
[18:50] <matt_keys> Ast001: try text mode install?
[18:50] <Jeeves_> matt_keys: He allready installed
[18:50] <Jeeves_> and the serverinstaller is textmode :)
[18:50] <Ast001> I installed ubuntu
[18:50] <matt_keys> oh... try holding ctrl down and using the scroll wheel
[18:51] <zul> ttx: are we planning on updating openldap its getting kind of stale in maverick
[18:51] <Ast001> ok
[18:52] <Ast001> ctr + mouse wheel changes nothing
[18:52] <ttx> zul: we should, maybe sync with mathiaz on that
[18:53] <matt_keys> Ast001: http://ubuntuforums.org/showpost.php?p=4322584&postcount=3
[18:53] <Ast001> ok thanks
[18:53] <Ast001> I will try that
[19:06] <RyanP> I have Ubuntu Server 10.04 setup with LDAP authentication, and am using the LDAP server to authenticate client computers to the server. On the clients, everything works. On the server, I can login fine, but attempting to change the password I get the error: 'passwd: Authentication token manipulation error'
[19:31] <pmatulis> is there a mailing list manager that integrates well with ldap (to hold membership data)?
[19:34] <ForestBear> hey guys I have a server set up with nginx, I can see it on my own computer by LAN computers (connected to the same router) cannot see it?
[19:37] <b14ck> Hey all. I'm trying to compile some software that requires the linux source code. I've installed linux-headers-2.6.32-23 linux-image-2.6.32-23-server and linux-source-2.6.32  but they aren't showing up in /usr/src. My question is: How can I force the package manager to 're-install' those packages fresh without removing them and breaking my install?
[19:59] <sherr> "linux-source" should give you a .tar.bz2 file to extract in /usr/src - are you sure you need it though? Module compilation just needs headers I think.
[20:00] <pmatulis> he's gone
[20:00] <sherr> OK, thanks.
[20:01] <Kream> can anyone recommend a lightweight http webserver with support for http digest authentication?
[20:03] <pmatulis> Kream: lighttpd
[20:13] <norbiAnevem> hy guys
[20:13] <ubuntu_love> can you please help me with some info
[20:14] <ubuntu_love> i have a domain key
[20:14] <ubuntu_love> public and private and spf
[20:14] <ubuntu_love> but yahoo says that domainkey is neutral=it doesn`t exists
[20:14] <ubuntu_love> it is that possible that dkim-milter doesn`t sign the mail with the domainkey?
[20:15] <ubuntu_love> or yahoo server is checking that with dig TXT _domainkey?
[20:31] <ccheney> kirkland, found you don't really need a mirror, approx is good enough :)
[20:41] <ScottK> ubuntu_love: domainkey and dkim aren't the same thing.
[20:53] <ubuntu_love> ScottK: could you please check this report: http://pastebin.com/KFXF07hg
[20:54] <ubuntu_love> it says that the domain key is invalid
[20:56] <ScottK> ubuntu_love: It says domainkeys neutral (which is due to no signature).  Your mail has a DKIM signature, not a domainkeys signature.
[20:57] <ScottK> ubuntu_love: Which Ubuntu release are you using?
[20:57] <ubuntu_love> ScottK: i downloaded the ubuntu server today
[20:57] <ubuntu_love> the server from i send the mails is a fake centos
[20:57] <ScottK> Then support for it's off topic here.
[20:58] <ubuntu_love> ScottK: ok, thank you!
[21:04] <ScottK> hallyn: Worked great.  Thanks.
[21:07] <hallyn> ScottK: cool, glad to hear it
[21:31] <n0n0x> Isn't there any way to check how ECC memories are performing? I mean, how many times ECC saved my server
[21:36] <effowe> Hi: I'm running Ubuntu Server 10.04 and am trying to learn more about /etc/rc*.d, runtimes, and startup processes. running sysv-rc-conf still shows packages that are no longer installed, can someone point me to a comprehensive guide / tutorial to removing unused startup processes from their runtime directories so that they no longer show up in sysv-rc-conf?
[21:39] <piov> hi...any iptables helpers here...need help with port based routing
[21:44] <Kream> anyone here use munin?
[21:50] <ruben23>  hi guya anyone can recommend cheapest hosted server..?
[22:04] <MTecknology> !info php5-gd2
[22:04] <MTecknology> !info php-gd2
[22:05] <guntbert> !info php5-gd | MTecknology
[22:07] <MTecknology> guntbert: thanks :)
[22:07] <guntbert> MTecknology: you're welcome :-)
[22:07] <Kream> anyone here use munin?
[22:09] <guntbert> Kream: why don't you ask your real question? (I myself know nothing about munin though)
[22:09] <MTecknology> Kream: I use nginx, it has some of the same letters. :)
[22:10] <piov> when i do port based routing (mark..ip route...ip rule...etc), traffic routes fine outbound, but inbound syn/ack packets are not forwarded to the client from the linux firewall?
[22:11] <piov>  i can see the packets hit the prerouting chain, but they never get to the forward chain
[22:11] <piov> any ideas?
[22:12] <piov> problem similar to http://linux.derkeiler.com/Newsgroups/comp.os.linux.networking/2007-09/msg00095.html
[22:28] <webPragmatist> how hard would it be to retrofit this to ubutun
[22:28] <webPragmatist> ubuntu*
[22:28] <webPragmatist> http://www.server-world.info/en/CentOS_5/lsync/1.html
[23:15] <theacolyte> Am I missing something, or why is escape not letting me enter grub settings (looks like likewise open broke AGAIN - and I can't log in using any username/password combnations)
[23:15]  * theacolyte needs to get into init 1
[23:18] <theacolyte> No amount of mashing escape is working
[23:23] <theacolyte> Eh, nevermind, I'm just going to roll back to 8.04
[23:23] <theacolyte> 10.04 has been extremely painful
[23:32] <webPragmatist> how can i make a init.d script start at boot
[23:47] <qman__> webPragmatist, update-rc.d
[23:47] <webPragmatist> aww eff LOL
[23:48] <webPragmatist> well i don't feel as bad… it just uses the start-stop-daemon too … i just created an init.d that was already somewhere on the interweb http://code.google.com/p/lsyncd/source/browse/package/debian/init.d?r=73
[23:51] <webPragmatist> well
[23:51] <webPragmatist> that doesn't even seem to specify runtimes?


[12:49] <antdillon> cjohnston, Ping
[13:12] <cjohnston> antdillon: pong
[13:21] <antdillon> cjohnston, Hi Chris, have you had time to take a look at my merge proposal?
[13:22] <cjohnston> antdillon: 2 things... I'm not entirely sure why the key signing party is being put on the site and not left on the wiki
[13:23] <cjohnston> I read it the mp but wouldn't say that I reviewed it
[13:23] <cjohnston> afaik mhall119  is responsible for the site so I was leaving it for him
[13:23] <antdillon> cjohnston, I was asked by the Event Organiser here at Canonical to add it
[13:24] <cjohnston> works for me
[13:24] <antdillon> cjohnston, Ah ok I'll ask him, I wasnt sure who was in change and you were the creator of the project so added you
[13:26] <cjohnston> np.. ya, the project was created for a somewhat different reason and changed to allow the site so we don't have 700 projects, just 699
[13:26] <antdillon> cjohnston, Cool thanks, I've re-assigned the mp to Michael Hall
[13:27] <cjohnston> antdillon: i just read it more closely and I'm fine with it as it is
[13:27] <antdillon> cjohnston, I just need to merged in as im not a member of the team
[13:27] <cjohnston> ahh
[13:28] <cjohnston> when I get out of bed ill work on that
[13:28] <antdillon> cjohnston, Jezz your in bed lol ... ok ill leave ya to get ready :)
[13:29] <cjohnston> lol. its only 630
[13:37] <nigelb> cjohnston: only 699. I think you forgot a few :D
[13:53] <cjohnston> 699?
[13:53] <cjohnston> that isnt a valid time
[13:56] <cjohnston> antdillon: https://code.launchpad.net/~uds-organizers/uds-project/wordpress-theme
[13:58] <antdillon> cjohnston, Awesome thanks Chris


[07:26] <jtv1> bigjools: let me just look up the change that's needed...
[07:26] <rvba> jtv1: bigjools: Did you guys manage to run the script end-to-end?
[07:26] <bigjools> jtv1: thank you sir
[07:26] <jtv1> rvba: I'm running it now.
[07:27] <bigjools> rvba: I think jtv did, I have been out all day so only just getting up to speed
[07:27] <jtv1> It's actually imported an image already.
[07:27] <jtv1> It takes a while, obviously.
[07:27] <rvba> jtv: are you using the int-fix-boot-imgs patch?
[07:28] <jtv> No, not yet.
[07:28] <jtv> Wanted to see the "before" state first.
[07:28] <rvba> Okay.
[07:28] <jtv> bigjools: edit mirror_info_for_path
[07:28] <jtv>     policy = policy_read_signed
[07:28] <jtv> becomes:
[07:28] <jtv>     policy = lambda content, *args, **kwargs: content
[07:28] <bigjools> thanks
[07:28] <jtv> That'll teach it.
[07:29] <bigjools> now I get ValueError: No JSON object could be decoded
[07:29] <jtv> Hwrg
[07:30] <jtv> Source URL is http://maas.ubuntu.com/images/ephemeral-v2/daily/streams/v1/index.json ?
[07:30] <jtv> I should get used to calling it "source path" really.
[07:30] <bigjools>     - path: "http://maas.ubuntu.com/images/ephemeral-v2/daily/streams/v1/index.json"
[07:31] <jtv> release "trusty", arch "i386", subarches "generic"?
[07:31] <bigjools> well it has * * * at the moment
[07:31] <jtv> All as strings?
[07:32] <jtv> Because we originally had subarches: ['*'] in the example, but it should be a string.
[07:32] <jtv> Double-quoted, I think.
[07:32] <jtv> (Not that it's likely to matter)
[07:32] <rvba> subarches is a list.
[07:32] <bigjools> all strings
[07:32] <bigjools> doesn't make any different
[07:33] <bigjools> I am running straight from the integration branch here, you must have other changes
[07:34] <jtv> Nope.  But I did have that error earlier...  I wonder if it's just its way of saying "I didn't find anything matching your requirements."
[07:34] <jtv> Try setting arch/subarches/release.
[07:35] <jtv> rvba: did subarches become a list?  In the integration branch as I have it (pulled earlier today) it was still a comma-separated string.
[07:35] <bigjools> ok how are you running the script?
[07:35] <bigjools> I use bin/py scripts/maas-import-pxe-files
[07:36] <rvba> jtv: AFAIK, it's been a list since the beginning of the week… let me check…
[07:36] <bigjools> it's currently not a list
[07:36] <jtv> bigjools: ah-HAH.  That'll import the globally installed maas modules, won't it?
[07:36] <jtv> Try running sudo PYTHONPATH=./src scripts/maas-import-pxe-files
[07:37] <jtv> rvba: no, the pserv.yaml in the branch used to say "[*]" but that didn't actually work.
[07:37] <rvba> Him, something is wrong then.
[07:37] <rvba>  subarches = Set(if_missing=['*'])
[07:37] <rvba> That's how it's defined.
[07:37] <rvba> s/Him/Hum/
[07:38] <jtv> When you pasted examples for Julian yesterday, you had subarches as a single comma-separated string.
[07:38] <bigjools> jtv: I don't have globally installed modules :)
[07:42] <bigjools> rvba, jtv: ok so I am not sure what else I need to do here to get the script working
[07:42]  * bigjools dist-upgrades
[07:42] <jtv> Careful!
[07:43] <jtv> Remember the old and new pserv.yaml are mutually incompatible.
[07:43] <jtv> If you have an old pserv.yaml with a new codebase, or vice versa, the upgrade hangs.
[07:43] <bigjools> jtv: I am not using any packages
[07:43] <jtv> OK
[07:43] <bigjools> this is completely from branch
[07:43] <bigjools> on a fresh canonistack instance
[07:45] <jtv> Not promising it'll help me understand, but do you have a traceback?
[07:45] <bigjools> jtv: http://paste.ubuntu.com/7129350/
[07:45] <jtv> thx
[07:45] <bigjools> looks like it barfs on the index
[07:45] <jtv> Most likely, yes.
[07:45] <rvba> bigjools: I'm running the script now…
[07:46] <jtv> For me it completed the download, then broke because it didn't have the int-fix-boot-imgs branch yet.
[07:46] <jtv> Which I'm trying now.
[07:46] <jtv> bigjools: that looks like a failure I had earlier.
[07:46] <jtv> And I'm pretty sure I fixed it by changing pserv.yaml.
[07:46] <bigjools> I am going to have to break for a bit shortly, I am home alone with twins
[07:46] <bigjools> there's only so much kids tv that will sate them
[07:48] <rvba> Script running okay thus far (here is my pserv.yaml http://paste.ubuntu.com/7129354/)
[07:48] <rvba> Okay, it failed in the end because I don't have the changes from int-fix-boot-imgs.
[07:48] <rvba> jtv: same as what you got.
[07:48] <jtv> bigjools: the "boot" part of my pserv.yaml is http://pastebin.ubuntu.com/7129356/
[07:49] <jtv> Now going to try with the new branch, which includes some label stuff so it'll find a new reason to break.
[07:51] <rvba> Running the int-fix-boot-imgs branch (plus Scott's fixes which are only in trunk)…
[07:52] <rvba> uec2roottar running…
[07:52] <rvba> Script finished running without errors.
[07:52]  * rvba checks the output…
[07:52] <bigjools> so I have a pristine int branch with rvba's pserv.yaml and I get the json decode error
[07:53] <jtv> And then... commissioning, deploying with fpi, and deploying without fpi!
[07:53] <jtv> bigjools: what about the policy patch?
[07:53] <bigjools> I have that
[07:53] <bigjools> that's it
[07:53] <bigjools> you guys must have other changes
[07:53] <jtv> Did you try the pserv.yaml segment I pasted?
[07:53] <bigjools> I used rvba's
[07:54] <bigjools> who said his was working
[07:54] <rvba> Output looks sensible but I don't see the label in the images' path http://paste.ubuntu.com/7129368/
[07:54] <bigjools> it was the same as mine
[07:54] <jtv> I have similar results, basically what I expected.
[07:54] <jtv> Now to work the label in there, and make sure it's not "daily".
[07:55] <rvba> Well, it should be whatever is in simplestreams' data.
[07:55] <bigjools> eventually yes but it's broken ATM
[07:56] <jtv> Actually, in the simplestreams data I'm seeing paths like precise/amd64/di/20101020ubuntu136.15/raring/generic/di-initrd
[07:57] <jtv> ...which are nothing at all like what we have.
[08:05] <jtv> bigjools: I remember the weird thing when I got that error was that the JSON was not empty.
[08:05] <rvba> jtv: the new list_boot_images() in int-fix-boot-imgs seems to work.  Of course, right now it returns the empty list because the label is not yet part of the path.  But I did  manual test (adding the label as part of the images' path manually) and list_boot_images returned something sensible.
[08:06] <jtv> That's good.  I'm having some more trouble getting mine to work.  :(
[08:07] <jtv> Looks like I'm missing an update somewhere...  simplestreams looks for <url>/index.json/streams/v1/index.sjson
[08:07] <jtv>  — so it's not doing the "URL to the index plesae" yet.
[08:08] <jtv> Merging update from latest integration branch.
[08:10] <jtv> Success!
[08:15] <rvba> With that diff (it includes a couple of changes from the int-fix-boot-imgs branch) I get the layout we want: http://paste.ubuntu.com/7129439/
[08:16] <jtv> "this"
[08:17] <jtv> Do you get "release" and "alpha-2" as the labels?  Or always "daily"?
[08:18]  * rvba checks
[08:19] <rvba> I downloaded only trusty/amd64/generic and for that image the label is daily.
[08:19] <jtv> Yay!
[08:19]  * rvba includes saucy, re-runs the script.
[08:19] <jtv> We'll need to hard-code that to "release"
[08:20] <jtv> But that's fine — the important thing is that the label is in the dir structure.
[08:20] <rvba> I don't understand… shouldn't we just expect Scott to fix that?
[08:21]  * jtv invites rvba to ponder that option for a bit
[08:21] <rvba> saucy→daily
[08:22] <jtv> Yeah.
[08:22] <jtv> If it gets fixed before release, then yes, we can just pretend "daily" is a workable label.  But otherwise...
[08:26] <jtv> For some reason memory usage seems to have jumped.  My little server is getting really slow.
[08:31] <jtv> Review needed: supporting both the old and the new config items, to avoid upgrade breakage.  https://code.launchpad.net/~jtv/maas/support-new-pserv-config-items/+merge/212110
[08:36] <rvba> jtv: why do you want to make that part of trunk MAAS now?  Shouldn't we land this with the rest of the int. branch… if and when we do so?
[08:37] <jtv> It can complicate testing.  I want to land it in both.
[08:41] <rvba> New diff with the tgt_entry() method fixed http://paste.ubuntu.com/7129525/
[08:42] <rvba> err: http://paste.ubuntu.com/7129527/
[08:48] <jtv> rvba: does that include my int-fix-boot-imgs branch by the way?
[08:49] <jtv> My version adds "label" in one more place.
[08:49] <rvba> Weird, this should include the changes you made in your int-fix-boot-imgs branch.
[08:49] <rvba> You say you see something missing?
[08:52] <rvba> jtv: btw, subarches should really be a list.  It works with '*' only because a string happens to be an iterable.
[08:52] <jtv> Christ.
[08:52] <jtv> But then why does "generic" work?
[08:54] <rvba> It should work (as in, not crash) but not download anything.
[08:54]  * rvba tries
[08:56] <rvba> Hum, looks like the config does something funky: if I set 'subarches: "generic"' in pserv.yaml, I get 'filter['subarches']=['generic']'
[08:56] <rvba> If I use a list in the config, I get the same list in filter['subarches'].
[08:57] <rvba> I guess that's a feature.
[08:59] <jtv> Heaven protect us from features.
[09:26] <bigjools> help, jtv, rvba.  What are you two doing differently with your branches to mine such that I get that json error?
[09:29] <rvba> bigjools: I don't know really… can I get access to your canonistack instance?
[09:30] <bigjools> rvba: one sec
[10:00] <rvba> jtv: when you're done with testing the diff I sent you, would you mind also getting the most recent changes from the int. branch into your int-fix-boot-imgs branch?  This way, we will be able to build a package from it and test the package.
[10:03] <rvba> jtv: oh, looks like you did that already :)
[10:03] <jtv> :-P
[10:10] <allenap> Merging trunk has resolved the ### INVALID STRING ### stuff, but the region-worker Celery keeps spawning.
[10:11] <rvba> jtv: Are you integrating my diff or should I create another branch on top of yours?
[10:12] <jtv> rvba: I'd make it a separate branch.
[10:13] <rvba> jtv: all right, I'll do it.
[10:13] <jtv> Now, why does that diff not apply?
[10:13] <jtv> (I was briefly distracted by travel stuff)
[10:16] <rvba> jtv: this one will probably do: http://paste.ubuntu.com/7129865/
[10:18] <rvba> jtv: https://code.launchpad.net/~rvb/maas/use-labels-in-import-script/+merge/212125
[10:18] <jtv> looking...
[10:18] <jtv> "patch" is taking forever on my test machine.
[10:18] <jtv> The performance really dropped quite dramatically.
[10:20] <allenap> Arg, it’s python-librabbitmq. It causes a seqfault when starting region-worker.
[10:20] <allenap> segfault even.
[10:20] <jtv> Ouch.
[10:21] <bigjools> allenap: didn;t we replace that package with another one?>
[10:21] <bigjools> we did
[10:21] <bigjools> it's not installed here
[10:22] <bigjools> allenap: uninstall it and see what happens
[10:25] <allenap> Everything works :)
[10:26] <allenap> I have a branch to forbid that package: https://code.launchpad.net/~allenap/maas/forbidden-deps/+merge/212128
[10:26] <bigjools> reviewing
[10:28]  * bigjools AFK for 10m
[10:55] <rvba> jtv: +1 on https://code.launchpad.net/~jtv/maas/int-fix-boot-imgs/+merge/212082
[10:55] <jtv> Thanks.
[10:55] <jtv> I'm already trying from a package, by the way.
[10:55] <rvba> jtv: https://code.launchpad.net/~rvb/maas/use-labels-in-import-script/+merge/21 is officially up for review
[10:56] <rvba> jtv: Same here :)
[10:56] <jtv> Not having much luck pxe-booting though.
[10:56] <rvba> I'm just getting the lab ready.
[10:59] <jtv> By the way, when landing into the integration branch, don't forget to mark the branches (as opposed to the MPs) as merged.
[10:59] <jtv> I'll review your branch.
[10:59] <rvba> Ta.
[11:01] <jtv> I have high hopes for the simplestreams cache...
[11:02] <jtv> I'm re-running the import script after wiping all of my boot-resources directory — *except* the cache.
[11:02] <jtv> Yup.  Nice & fast!
[11:05] <bigjools> jtv: where and what is caching?
[11:05] <jtv> bigjools: images get dowloaded into /var/lib/boot-resources/cache
[11:05] <jtv> ...and the rest is extracted from there.
[11:07] <jtv> rvba: are you getting the following error?
[11:07] <jtv> [2014-03-21 18:06:20,750: ERROR/MainProcess] Task provisioningserver.tasks.report_boot_images[27842890-96bb-4543-8263-1a8ef4dfdff4] raised unexpected: TypeError('<itertools.chain object at 0x7f65809c5b10> is not JSON serializable',)
[11:07] <jtv> I thought I'd fixed one of those, but...
[11:07] <jtv> Anyway, I'll write up a fix.
[11:08] <strikov> Guys, i just built maas packages with 'make package' and cluster-controller depends on 'shim-signed' package which is provided only for amd64.
[11:08] <bigjools> fuck
[11:09] <rvba> uh-oh
[11:09] <rvba> jtv: ta, branch is landed.
[11:09] <jtv> I hope that merely means that a build failed..?
[11:09] <rvba> strikov: make sure you pull the latest version of the integration branch, we just landed 2 branches.
[11:19] <jtv> allenap: thank you once more for fixing the pserv tests.  Unless you were the one who broke them, in which case, I hate you.  :)
[11:19] <allenap> jtv: Hehe, no I didn’t break them :)
[11:19] <rvba> jtv: didn't see that error… but I didn't get that far yet.  I know where the problem is… but so do you :)
[11:19] <jtv> Yup.  This is what happens when you play with itertools!
[11:19] <rvba> heh
[11:20] <bigjools> allenap: your opinion required.  Blake's branch seems amd64 only.
[11:21] <bigjools> it uses shim-signed which is only on amd64
[11:21] <allenap> bigjools: The UEFI one? It only works for amd64, indeed.
[11:21] <bigjools> allenap: yeah, does it check for amd64 before using it?
[11:21] <bigjools> it's in m-i-p-f
[11:21] <allenap> bigjools: Ah, I hope so.
[11:21]  * allenap checks
[11:22] <bigjools> allenap: it doesn't
[11:22] <allenap> Dammit.
[11:22] <bigjools> yup
[11:22] <bigjools> allenap: I don;t know how to do an arch-specific dependency in packaging but I am going to learn quickly :)
[11:23] <allenap> bigjools: I’m losing you now. Why does this impact packaging?
[11:23] <bigjools> allenap: we (where we is probably you at this point) should change mipf to check even though we're going to get rid of that script.
[11:24] <bigjools> allenap: I added a dependency on shim-signed but that makes the package unbuildable on i386
[11:24] <bigjools> and it's an arch-indep package which only builds on i386
[11:24] <allenap> s/i386/amd64/ ?
[11:24] <bigjools> so the packaging should only depend on it if installing on amd64
[11:25] <bigjools> no i386 intentional
[11:25] <rvba> jtv: I'm landing a change to pserv.yaml to make subarches a list.
[11:25] <rvba> (that's a feature we shouldn't hide)
[11:25] <jtv> Very well.
[11:25] <allenap> Huh? This makes no sense to me.
[11:25] <bigjools> allenap: the arch indep builders are all i386
[11:25] <bigjools> but the package now needs amd64
[11:25] <bigjools> even though it's technically arch indep
[11:25] <allenap> Why does the package need amd64?
[11:26] <bigjools> because shim-signed is a binary package that only exists on amd64
[11:26] <allenap> Can we change that?
[11:26] <bigjools> I added it as a cluster controller dependency
[11:26] <allenap> It’s just a blob.
[11:26] <allenap> Afaik.
[11:26] <bigjools> yeah I need to make it arch dependent
[11:26] <bigjools> it is
[11:27] <jtv> rvba: pushed a fix to the json bug.
[11:28] <allenap> bigjools: Do you mean arch *in*depedent? Or arch dependent for building, so that binaries can be prepared for each arch?
[11:28] <rvba> jtv: ta. I see you've removed the call to chain()…  without removing the import.
[11:28] <jtv> Ah.  So I forgot to check for lint.  :-)
[11:28] <rvba> jtv: I'll do it in the branch I'm working on now.
[11:29] <jtv> Ta.
[11:29] <jtv> Now, where is this boot images UI?
[11:29] <jtv> I want my list of boot images!
[11:30] <bigjools> allenap: I mean to make it so that it only depends on shim-signed if you are installing on amd64
[11:31] <bigjools> otherwise the dependency cannot be fulfilled
[11:31] <strikov> allenap, bigjools: I see this issue while trying to install package on armhf: https://pastebin.canonical.com/106925/
[11:31] <bigjools> strikov: can you use public paste
[11:31] <bigjools> allenap: that paste is the result of this problem
[11:31] <bigjools> thank you strikov
[11:32] <strikov> bigjools, allenap: sorry, here it is: http://pastebin.ubuntu.com/7130103/
[11:32] <allenap> bigjools: That’s fixing the wrong thing, though I grant it’s probably the path of least resistance right now. There’s no reason why MAAS installed on i386 can’t netboot an amd64 system using UEFI.
[11:33] <bigjools> allenap: very true
[11:33] <rvba> allenap: the path of least resistance would be to include that blob in MAAS' tree and remove the dependency, wouldn't it?
[11:35] <allenap> rvba: Ah, yes, though we may find that our sticky-out bits are at risk from the scythes of the security team.
[11:35] <rvba> Hum, good point.
[11:36] <allenap> blake_r’s original approach was to download from the archive. Perhaps we need to reconsider that?
[11:37] <bigjools> he was downloading the source package
[11:37] <bigjools> which is problematic, not everyone has sources enabled
[11:38] <jtv> Or if downloading directly, we'd lose built-in signature verification.
[11:49] <bigjools> allenap: I think we need to revert blake's branch then
[11:50] <allenap> bigjools: Or fix it.
[11:50] <bigjools> and fold its changes, with the shim-signed stuff, into the new script
[11:50] <bigjools> well the new script is nearly done
[11:50] <bigjools> let's not do the work twice
[11:50] <allenap> bigjools: There was a lot more work in Blake’s branch than just m-i-p-f. Do we want to revert all of it?
[11:50] <bigjools> no not at all
[11:51] <bigjools> just the bits that are going to break without shim-signed :)
[11:52] <allenap> bigjools: The rationale for reverting versus ploughing through is because it’s blocking QA?
[11:52] <bigjools> allenap: it'll block everything, I think mipf will crash
[11:53] <bigjools> we could comment out that one line in it
[11:53] <allenap> bigjools: Yeah, let’s hack round it to unblock things.
[11:54] <bigjools> can't tell if you're serious or being sarcy...
[11:56] <allenap> bigjools: Serious :) Agreeing with you.
[11:56] <bigjools> allenap: oh good :)
[11:57] <bigjools> allenap: are you ok to do that while I unfcuk the packaging?
[11:57] <allenap> bigjools: I need to work around all references to the shim, right?
[11:57] <bigjools> allenap: I think it's just one call you can comment out to the new func
[11:57] <bigjools> see the diff to mipf
[11:58] <allenap> bigjools: So, don’t call update_uefi_boot_loader at all?
[11:58] <bigjools> allenap: just don't call it at all for now to unblock and then fix later
[11:59] <bigjools> so yes :)
[11:59] <bigjools> allenap: also remove shim-signed from required-packages
[11:59] <allenap> Okeydoke.
[12:00] <allenap> bigjools: Is there a bug about this?
[12:00] <bigjools> allenap: no
[12:02]  * allenap files one
[12:04] <bigjools> ok packaging fix just went in
[12:04] <allenap> I have lots of tests to disable.
[12:06] <bigjools> oh well :/
[12:08] <allenap> bigjools: https://bugs.launchpad.net/maas/+bug/1295644
[12:11] <bigjools> thanks allenap
[12:13]  * bigjools sleeps
[12:22] <allenap> bigjools: Fwiw, by reusing your packaging branch every time, each revision gets tagged with the same bugs. See https://code.launchpad.net/~maas-maintainers/maas/packaging.
[12:22] <allenap> It also means I can’t link that branch to the bug.
[12:26] <allenap> rvba: Do you have time for a quick (critical) review fix? https://code.launchpad.net/~allenap/maas/disable-uefi-temporarily/+merge/212150
[12:44] <rvba> allenap: looking now
[12:55] <strikov> Could someone review my patch to allow us to use different keyrings for different sources: http://bazaar.launchpad.net/~strikov/maas/new-import-script-integration.keyring-per-each-source/revision/2155 Thanks
[12:56] <rvba> strikov: I'll have a look
[13:02] <rvba> strikov: looks good, but you need to fix the test_config.py tests (yes, we have unit-tests for this): ./bin/test.maas ./src/provisioningserver/tests/test_config.py
[13:28] <strikov> rvba: thanks for the review, does it look better: http://bazaar.launchpad.net/~strikov/maas/new-import-script-integration.keyring-per-each-source.2/revision/2155
[13:29] <strikov> rvba: Ran 25 tests in 0.719s
[13:29] <strikov> OK
[13:29] <rvba> strikov: cool.  Looks good.  If testing is okay, land it.
[13:30] <rvba> strikov: maybe also update pserv.yaml (I know the value is the default, but it's a good example)
[13:30] <strikov> rvba: will do
[13:35] <strikov> rvba: Pushed with pserv.yaml change. Thanks.
[15:08] <rvba> allenap: time for a tiny review? https://code.launchpad.net/~rvb/maas/build-depe/+merge/212173
[15:09] <allenap> rvba: Sure!
[15:10] <allenap> rvba: Oh man, the deps are not sorted.
[15:10] <rvba> allenap: ahhhhh!
[15:11] <rvba> allenap: fixed
[15:12] <allenap> rvba: If you have a few minutes, can you look at my rpc-ident-redux branch, https://code.launchpad.net/~allenap/maas/rpc-ident-redux/+merge/212070? You only actually need to review the interdiff, http://paste.ubuntu.com/7129526/, which is a lot shorter.
[15:12] <rvba> allenap: k
[16:00] <allenap> rvba: Have you noticed shells taking a long time to exit when closing? I hit Ctrl-d in a screen “tab” and it can take 20-30 seconds for bash to exit. At least, I assume it’s bash taking its time.
[16:00] <allenap> It’s been doing it for a couple of weeks, maybe more.
[16:02] <rvba> allenap: no, it clearly doesn't do that for me.
[16:02] <tych0> hi allenap, any idea what this is? http://paste.ubuntu.com/7131290/
[16:03] <tych0> i'm getting lots of them
[16:03] <tych0> and a clue is that my dhcp server seems to not be working
[16:10] <allenap> tych0: Mmm, was there a request path anywhere near that?
[16:11] <tych0> not in maas.log, might be in apache's logs, though, let me look
[16:12] <tych0> yeah, access.log is totally empty
[16:12] <tych0> error.log doesn't have any timestamps close to that one
[16:14] <allenap> tych0: Is the DHCP server down, not giving out addresses? Or is it that leases are not getting into MAAS? (Not sure what outward indication there would be of that…)
[16:15] <tych0> allenap: it appears to not even be giving out addresses, although i restarted maas-dhcp-server
[16:16] <tych0> allenap: is there a log for it somewhere?
[16:18] <allenap> tych0: The leases file in /var/lib/dhcp might have something useful. Otherwise look in /var/log/syslog.
[16:21] <tych0> yeah, /var/lib/dhcp/dhcpd.leases is empty
[16:24] <allenap> tych0: Are you happy to dig around, try to find out why it’s not running, or not populating the leases file at least?
[16:31] <tych0> allenap: yeah, that's what i'm doing now
[16:31] <tych0> this might be an lxc, thing, actually
[16:40] <tych0> ah, nope
[16:40] <tych0> lxc is asking for one
[16:40] <tych0> it just isn't getting anything back
[16:58] <tych0> ah
[16:58] <tych0> i had dnsmasq running
[17:17] <allenap> tych0: Phew, it’s not another MAAS bug :)
[17:56] <Fishy_> hi!
[18:00] <Fishy_> i am trying to follow the newbie install tutorial and getting stuck.. any pointers?  http://paste.ubuntu.com/7131844/
[18:01] <Fishy_> i guess sudo maas-import-pxe-files   works
[18:01] <Fishy_> but document says thats only for sub 1.3
[19:20] <tcollins> Ive just setup my first MAAS server and now I have an issue with PXE booting.  I can successfuly get an IP, but nodes cannot find a pxelinux.cfg
[19:20] <tcollins> does maas create this or do I have to do it manually?
[20:07] <tcollins> seem tobe an access problem.  in maas.log getting "SuspiciousOperation: Invalid HTTP_HOST header (you may need to set ALLOWED_HOSTS):"
[20:36] <Fishy_> I am trying to do the same thing ;)
[20:37] <Fishy_> running maas server on a bridge, trying to expose the dhcp and dns from my maas server without trashing my entire network
[20:37] <Fishy_> and feed into a pxe boot
[21:01] <Fishy> humm what is "Router Ip"
[21:01] <Fishy> the upstream gateway of mine?
[21:05] <tcollins> I set mine the same as the maas server
[21:06] <tcollins> im trying to bridge as well
[21:10] <tcollins> ok I got it to PXE boot, had to reinstall and start from scratch
[21:11] <tcollins> followed these: http://frugnul.blogspot.com/2013/04/maas-not-tutorial.html
[21:27] <Fishy> hum
[21:28] <Fishy> by default, the little lxcbr0 bridge that juju added to my local machine, is not exposed to the world
[21:28] <Fishy> i think I need to add my eth0 to be behind it
[21:29] <Fishy> so that it can be exposed
[21:29] <Fishy> but beyond what I have done before
[21:30] <tcollins> do you have physical machines, who are they just on the same machine?
[21:40] <Fishy> right now I have 2 phical machines
[21:40] <Fishy> 1) desktop I am on now.  want it to keep connected to current network (192.168.78) as a client..  but also want it to host a new maas network (as <IP_ADDRESS>)
[21:40] <Fishy> 2) a laptop I want to boot off PXE, and grab the <IP_ADDRESS> broadcast
[21:40] <Fishy> and get added to maas
[21:41] <Fishy> have a maas server up
[21:41] <Fishy> his IP is set to <IP_ADDRESS>
[21:41] <Fishy> laptop cant even ping that though
[21:41] <Fishy> so that network is local to my box
[21:42] <Fishy> so its like a need a bridge in front of my bridge
[21:42] <Fishy> to tie my real eth0 to both networks
[21:42] <Fishy> argh, networking hard


[03:11] <maclin_> ballons, There is a problem of rebuilding state of Ubuntu Kylin on ISO tracker. We cannot request a rebuild now. Could you help to confirm it？
[07:29] <pitti> jibel: FYI, I killed the dkms meta-jobs on wolfe* this morning
[07:29] <pitti> jibel: the wolfes needed an urgent reboot, pretty much everything was segfaulting again
[07:30] <pitti> so I did the usual round of dist-upgrade/cleanup/reboot, and setup-lxc is happy again
[07:30]  * pitti now retries all failed stuff
[07:30] <jibel> pitti, okay, FYI, wazn-adt is down and waiting for CI to wake up
[07:34] <pitti> jibel: do you get ppc64el failure mails? I don't seem to; I only get the fixed mails
[07:34] <jibel> pitti, yes, me too
[07:45] <jibel> pitti, the notification trigger seems to be misconfigured
[07:50] <pitti> jibel: yay "jenkins fixed" spam :)
[07:50] <jibel> pitti, notifications are sent for "regressions" and "fixed" but not for 1rst failure, I'll fix that
[07:51] <pitti> jibel: ah, thanks
[08:07] <jibel> pitti, was there any reason to not enable notification for armhf?
[08:13] <jibel> pitti, configurations have been updated
[08:13] <jibel> we should receive notifications on 1rst failure, and fixed
[09:52] <pitti> jibel: thanks!
[09:53] <pitti> jibel: armhf> it's still not very stable yet, and we haven't put so much importance on those compared to the ppc64el tests
[10:02] <pitti> jibel: hm, the new polib broke i18nspector, and yet it got promoted through britney again :/
[10:02] <pitti> yesterday when I looked it was "test running / not considered"
[10:11] <davmor2> Morning all
[10:29] <jibel> pitti, I saw that, I'm on a test case, it is because there a 2 records for i18inspector in that order:
[10:29] <jibel> i18nspector 0.13.3-1 FAIL i18nspector 0.13.3-1 polib 1.0.4-1
[10:29] <jibel> i18nspector 0.13.3-1 PASS i18nspector 0.13.3-1
[10:30] <jibel> and only the second record is considered
[10:30] <pitti> jibel: ah, that's because teh PASS one ran earlier with the previous polib, and it's just in the wrong order?
[10:30] <jibel> while britney shoud consider polib/i18pector = FAIL
[10:30] <jibel> i18petore/i18pector=PASS
[10:31] <jibel> pitti, yes
[10:31] <jibel> pitti, actually the order shouldn't matter
[10:32] <pitti> jibel: is that again the same bug as with libgcc1 or libffi?
[10:32] <jibel> pitti, libffi is different because tests are marked as PASS everywhere