[07:23] <shaga> greetings all
[07:24] <shaga> anyone has problems with a source-list in installing edubuntu? it asked ip, dns and all from me but didn't use dhcp so the network didn't work. and the sources.list is now empty
[07:26] <shaga> network worked fine after I enabled dhcp after installation, I'm now at my work computer and trying to install edubuntu on this machine. I will copy the source.list from this to my computer then(this uses ips, dns and all custom)
[08:34] <JaneW> hello highvoltage
[08:35] <JaneW> highvoltage: I am here today ... (and looking for my office keys, which I gave HIlton)
[08:41] <highvoltage> now why would you do something like that :)
[08:44] <JaneW> highvoltage: dunno ;)
[08:45] <shaga> JaneW: good morning, do you know why edubuntu doesn't do dhcp-configuration during the first install phase? only asks ip/dns/gateway..
[08:46] <shaga> just thought I might ask now that I'm here :)
[08:49] <JaneW> shaga: there wasa discussion on the mailing list recently...
[08:50] <JaneW> flood alert...
[08:50] <JaneW> > I'm trying to install Edubuntu Preview 5.10.
[08:50] <JaneW> >
[08:50] <JaneW> > I know Ubuntu try to autoconfigure ethernet connection using DHCP during
[08:50] <JaneW> > installation. But Edubuntu doesn't try to find out a DHCP server to
[08:50] <JaneW> > autoconfigure. Instead, it ask me to enter the IP address manually.
[08:50] <JaneW> >
[08:50] <JaneW> > Is it intentional?
[08:50] <JaneW> yes, since the default install is a stadalone server install, we cant
[08:50] <JaneW> assume that a dhcp server is around.
[08:50] <JaneW> the installer should provide a deault value for the IP address, but due
[08:50] <JaneW> to a bug we found building the preview CD we needed to disable this
[08:50] <JaneW> feature... its solved now and will be enabled in tonights build again.
[08:50] <JaneW> the standalone workstation install behaves like a normal ubuntu install
[08:50] <JaneW> wrt IP adresses/dhcp.
[08:50] <JaneW> does that answer your question?
[08:50] <shaga> yeah, totally.. thanks :)
[09:09] <shaga> hmm, have to look how flash is being supported now on a amd64-platform..
[09:11] <shaga> btw, /usr/share/ubuntu-artwork/home/index.html still says hoary, but I think it has been spotted already
[10:14] <shaga> strange, apt-get dist-upgrade updated the ff's ubuntu welcome page.. nice one
[10:46] <highvoltage> and i was just on the virge of askin jeremy something :)
[10:46] <highvoltage> guys, what's the status on the gdm themes, splash screens, etc?
[11:36] <JaneW> highvoltage: welcome to the mailing list ;)
[11:37] <shaga> does it spam much? :)
[11:44] <JaneW> shaga: I get LOADS of spam, which I discard (and ban the sender) before it hits the list...
[11:44] <JaneW> shaga: aren't I nice? ;)
[11:44] <shaga> yes, so cute ;)
[12:22] <highvoltage> JaneW: i just subscribed under another address as well, we have people arguing with us that TSF is involved because of my e-mail address, so i changed it ;)
[12:22] <highvoltage> ogra: hi
[12:22] <highvoltage> ogra: do you know what we'll have for gdm themes / splash screens in edubuntu?
[12:22] <ogra> hey
[12:22] <JaneW> highvoltage: good call
[12:22] <ogra> bad DSL today :/
[12:22] <ogra> highvoltage, currently only the ones we have in the artwork-package
[12:22] <JaneW> NOTICE to all Canonical is NOT TSF and vice versa ;)
[12:22] <ogra> and as i said in the meeting, we cant offer much choice due to space issues, we can only replace whats there to save space...
[12:22] <JaneW> Burgundavia: thanks for fixing my typo fix ;)
[12:22] <Burgundavia> JaneW, hey, np
[12:22] <JaneW> Burgundavia: I kick myself many times a day over typos ;)
[12:22] <ogra> from #ubuntu-artwork tonight:
 hey
 will the default theme change for breezy?
 for instance something like edubuntu's
[12:22] <ogra> hehe
[12:22] <JaneW> LOL
[12:22] <JaneW> ogra: cool
[12:22] <ogra> :)
[12:22] <ogra> good tha we have a artwork package thats also installable in ubuntu ;)
[12:33] <JaneW> highvoltage: ping
[12:33] <JaneW> highvoltage: can ogra see the http stuff you have - even a screenshot will be fine?
[12:49] <highvoltage> ogra: i have the iso i downloaded on august 28, would i be able to dist-upgrade to the latest edubuntu from there?
[12:50] <highvoltage> JaneW: pong
[12:52] <ogra> highvoltage, if it installs ...
[12:53] <ogra> i'd suggest to rsync to the latest daily
[12:54] <ogra> takes only some minutes, therewere not much but essential changes... i guess the download would be around 10MB only but you get a far better iso
[12:55] <JaneW> highvoltage: can ogra see the http stuff you have - even a screenshot will be fine?
[12:59] <spacey> JaneW, can I mail you the document of stuff i want to do for ubuntu/school project. And see if you approve of it/if its possible to mentor me with it?
[01:00] <highvoltage> JaneW: there's not much to show currently, but i'll send it
[01:04] <highvoltage> JaneW: sent
[01:08] <JaneW> ta
[01:08] <JaneW> got it
[01:13] <highvoltage> ogra: ok, i'll download the latest iso image (i don't thing i have rsync access to that server)
[01:13] <ogra> highvoltage, everybody has
[01:13] <ogra> rsync rsync://cdimage.ubuntu.com/cdimage/
[01:13] <ogra> try that ^^
[01:14] <ogra> it should give you directory a listing
[01:16] <shaga> ssh: rysync: Name or service not known
[01:16] <shaga> rsync: connection unexpectedly closed (0 bytes received so far) [receiver]
[01:16] <shaga> rsync error: error in rsync protocol data stream (code 12) at io.c(434)
[01:16] <shaga> it gives me that at least
[01:16] <ogra> if so, go into the dir containing the breezy-install-i386.iso and just run the following (copy n paste)
[01:16] <ogra> rsync -a --progress rsync://cdimage.ubuntu.com/cdimage/edubuntu/daily/current/breezy-install-i386.iso breezy-install-i386.iso breezy-install-i386.iso
[01:17] <ogra> shaga, rsync, not rysync
[01:17] <shaga> hehe, typo
[01:17] <shaga> much better now
[01:19] <ogra> the changes between two dailies are about 1-2 MB regulary.... i download it in ~10min over 768K DSL here... its the quickest way to get the latest iso
[01:20] <shaga> are there updates to dhcp automatic configuration in latest iso?(so is it enabled for the first install phase)
[01:21] <ogra> there are updates to the dhcp server, but the corresponding autogeneration of the dhcp.conf for ltsp isnt in place yet... so if you change the defalt ip you have to adjust the ltsp dehp config afterwards...
[01:22] <ogra> s/dehp/dhcp
[01:22] <shaga> okay, thanks
[01:23] <ogra> if you dont want togo with the default ip for now, run a "dpkg --configure -a" after install...
[01:24] <ogra> (and after the changes indeed)
[01:24] <shaga> I enabled dhcp through graphic interface on my computer(this is just my work computer), but the problem was source.list being empty..
[01:25] <shaga> I'm gonna transfer that file from this machine to mine, because this has ip/dns-based network configuration so the file was generated as should
[01:28] <ogra> there is no graphical UI for the dhcp server
[01:30] <shaga> I just switched from manual ip configuration to dhcp
[01:31] <ogra> shaga, i was talking about the dhcp server .... in the default edubuntu install you will always have to set a IP manually, else ltsp wont work right
[01:31] <shaga> I'm not very familiar with the ltsp, yet.. I'll find out more about it once I'm through with this work
[01:42] <JaneW> shaga, is your surname delic?
[01:42] <JaneW> *efg*
[01:44] <shaga> I 'invented' shagadelic 6 years ago, I've been using just shaga for 4 years now
[01:44] <shaga> so yes I'm :)
[01:44] <JaneW> lol
[01:44] <JaneW> ok
[01:45] <JaneW> ogra: do we have any real assesibility suport in edubuntu 1.0? Specifically for vision impaired assistance?
[01:46] <ogra> JaneW, only the stuff we get from ubuntu, nothing additionally...
[01:46] <ogra> JaneW, do you know if TheMuso will be at UBZ ?
[01:46] <JaneW> there a msg on the mailing list asking aout this...
[01:46] <ogra> (Luke Yelavic)
[01:46] <JaneW> who is he/she again?
[01:46] <JaneW> oh right
[01:46] <ogra> he did the accessibility live CD
[01:47] <ogra> would be cool if we could talk to him and incorporate some of his work into dapper
[01:49] <JaneW> I don't see him on the list
[01:50] <ogra> hmm, ok...
[01:50] <ogra> so probably something we need to solve via IRC
[01:51] <JaneW> ogra: I hope my response to jelkner wasn't too rude...
[01:52] <ogra> nah
[01:52] <ogra> you pointed it out several times now...
[01:53] <JaneW> but how many times is he going to ask the same question....?
[01:53] <shaga> :)
[01:53] <ogra> JaneW, btw, did you see we are in the press...
[01:53] <JaneW> no, where?
[01:54] <ogra>  It is also being used at Yorktown High School in Arlington, Virginia, and is being championed by Jeff Elkner, a computer science teacher at the school. Mr. Elkner is one of the developers of Edubuntu, an Ubuntu variant specialized for use in schools.
[01:54] <ogra> http://www.redherring.com/Article.aspx?a=13538
[01:56] <JaneW> nice
[02:00] <JaneW> ogra: what the word on the edubuntu Live CD? will we have on, or not at all?
[02:01] <ogra> id have to talk that over with mdz.... but i think i can imagine waht he'll say...
[02:02] <ogra> so its rather a dapper thing... lets see, probably i can get a workstation liveCD without the server stuff...
[02:04] <JaneW> ogra: so answer this mail q... "Wondering if a Live CD is planned for desktop use."
[02:05] <JaneW> ogra: Not yet, but in future yes...?
[02:06] <ogra> yup...
[02:12] <JaneW> ok
[02:13] <highvoltage> ogra: thanks, that works.
[02:13] <ogra> :)
[02:14] <ogra> highvoltage, i have a cron job doing that for me every night... including wiping and burning a CDRW ... this way i have always the newest crack to test if i get up in the morning ;)
[02:18] <highvoltage> ogra: good idea, i'm going to set that up at home :)
[02:18] <ogra> ;)
[02:29] <JaneW> we now have 211 mailing list members
[02:30] <ogra> cool
[02:30] <shaga> I don't even know what mailing list is, but I believe I'm more updated by being on it :)
[02:33] <shaga> I actually know what it is usually, but now I'm not sure how it works when I'm actually in it..
[02:34] <shaga> :)
[02:36] <JaneW> lol
[02:37] <JaneW> when you are actually in it you GET the messages ;)
[02:39] <shaga> hehe
[02:40] <highvoltage> JaneW: i think once edubuntu launches, membership will rocket
[02:40] <JaneW> :)
[02:40] <shaga> you bet
[04:27] <jsgotangco> hi
[04:29] <shaga> hello hello
[04:46] <highvoltage> hi there
[04:46] <jsgotangco> hey highvoltage
[04:47] <highvoltage> hi jeremy
[04:47] <highvoltage> how are things looking on the doc side?
[04:47] <jsgotangco> i've been moving stuff to the wiki
[04:47] <jsgotangco> ogra just used About Ubuntu in our preview
[04:48] <jsgotangco> but i haven't given him the xml for yelp yet
[04:48] <jsgotangco> (its actually LinuxWorld over here i discussed about Ubuntu today and Edubuntu tommorow)
[04:48] <highvoltage> ok. who's responsible for the art, for edubuntu and ubuntu.
[04:48] <highvoltage> cool!
[04:49] <jsgotangco> highvoltage: artwork? its a different team (no idea if we have our own artwork contribs atm)
[04:49] <highvoltage> that's what i'm a bit worried about :{
[04:49] <highvoltage> :P
[04:49] <jsgotangco> highvoltage: i actually did my whole presentation in edubuntu workstation
[04:51] <jsgotangco> highvoltage: our icons and fonts look really good atm
[04:52] <highvoltage> yep.
[04:53] <highvoltage> i haven't seen the gdm or splash screens yet, so i'm just a bit nervous about that.
[04:53] <jsgotangco> our gdm is still the same (with the edubuntu logo)
[04:53] <jsgotangco> as well as the splash
[04:54] <jsgotangco> unfortunately our boot splash is still ubuntu
[04:54] <jsgotangco> (not sure if it was designed to be easily replaced)
[06:10] <magnon> woah
[06:11] <magnon> I got my montreal plane tickets
[06:11] <magnon> and I havent paid for them yet
[06:11] <jsgotangco> nice
[06:11] <magnon> well
[06:11] <magnon> their reg system was weird
[06:12] <magnon> I filled in my card (without coverage) as preferred payment method
[06:12] <magnon> I hit register the trip, assuming to get a payment method choice
[06:12] <magnon> nah, registered, non-refundable :P
[06:13] <jsgotangco> enjoy UBZ =)
[06:13] <magnon> ubz?
[06:13] <jsgotangco> ubuntu below zero =)
[06:13] <magnon> oh right
[06:13] <magnon> :P
[06:14] <magnon> I keep saying ubuntuconf or something to that extent
[06:14] <magnon> knowing that its totally wrong
[06:14] <jsgotangco> you'll enjoy it
[06:14] <jsgotangco> ogra and janew are fun people
[06:14] <magnon> hehe
[06:14] <magnon> I hope so
[06:14] <jsgotangco> oh i guarantee it
[06:15] <jsgotangco> there's a chance i might catch up
[06:15] <jsgotangco> but no guarantees
[06:15] <magnon> I just hope I get time for edubuntu before the conf
[06:15] <magnon> and before release
[06:16] <magnon> we kinda got assignments for other stuff with considerable economic value... right now that needs to come first
[06:16] <magnon> like, I want to keep my apartment and stuff like that :P
[06:16] <jsgotangco> the conferences are meant for people to just brain dump on ideas and write specs for it and work it out afte rthe conf
[06:16] <jsgotangco> so its quite long term
[06:16] <magnon> yeah, good
[06:16] <magnon> that's what we think we will work on
[06:16] <magnon> long term, like deployment summer 2006 stuff
[06:16] <jsgotangco> the conference gives a chance for people speared across the globe to at least meet up
[06:18] <magnon> 40 minutes to party meeting
[06:18] <magnon> election on monday... time to get to work in opposition
[06:19] <jsgotangco> and if you have a gpg key make sure it gets signed
[06:19] <magnon> right, after using Mac for so long on my laptop I almost forgot that I have a gpg key to use :P
[06:20] <jsgotangco> the sheer number of DDs during an ubuntu conference will make your stats jump
[06:20] <magnon> :D
[06:20] <magnon> maybe I should get around and just make a new one
[06:20] <jsgotangco> sure as long as you have your secret key
[06:21] <magnon> it's not like I ever used it for external things
[06:21] <jsgotangco> it'll come in handy in the future
[06:21] <magnon> and I haven't been completely careful with the secret key :S
[06:21] <magnon> and I changed email addies since last using it I think too :po
[06:22] <jsgotangco> you can add/delete addies from an existing key
[06:22] <magnon> I know, it's just another argument to making a new one since noone who emails me at my current addy has the key
[06:23] <jsgotangco> bottom line is: don't miss it especially if mako is organizing it
[06:23] <magnon> and since I created it without revokation keys etc. etc. the most secure thing would probably be to forget that one
[06:24] <magnon> 35 minutes to meeting :P
[06:25] <magnon> brb, have to get dressed properly
[06:26] <magnon> although our coalition didnt win the election, we went from 2 to 10 mandates in the parliament \o/
[06:26] <magnon> so it's halfways meeting halfways party :)
[06:26] <jsgotangco> hehe
[06:28] <jsgotangco> see you later i gotta sleep =)
[06:28] <magnon> tomorrow then I guess
[06:28] <magnon> probably having the day off to move things to my new place
[06:43] <mpt> magnon: There's a nice GPG plug-in for Apple Mail, I use it
[06:44] <mpt> and a decent "GPG Keychain Access" utility, too
[08:00] <linescann> ogra: Hi, you got a minute
[08:00] <ogra> sure
[08:00] <linescann> you well ?
[08:00] <ogra> yup
[08:00] <ogra> a bit under pressure, release is near :)
[08:01] <linescann> good.  What state is the 64bit version at
[08:01] <ogra> should be good...
[08:01] <linescann> not good about under pressure :)
[08:01] <linescann> cool.  I have got a Sun V20z here that I want to put into a local school
[08:01] <ogra> at least it was during preview tests... but i'd suggest a recent daily, there were some improvements
[08:02] <linescann> whens release ?
[08:02] <ogra> the dynamic dhcp.conf generation isnt included yet, so best is to run through the install with the offered default IP and adjust the values post install
[08:03] <ogra> oct 13th
[08:03] <linescann> cool.  I am just downloading it now.  I just want to do a proof of concept on the Sunfire.
[08:03] <ogra> currently i'm fighting with things like http://bugzilla.ubuntu.com/show_bug.cgi?id=15244
[08:04] <linescann> just looking now
[08:06] <ogra> 14967 and 12942 are also release critical...
[08:06] <linescann> You having issues with other stuff not clearing out
[08:06] <ogra> nope
[08:07] <linescann> hmmm
[08:07] <ogra> its only the ssh session that cant be established for 30-45 sec
[08:07] <ogra> and there only the X forwarding...
[08:07] <linescann> you just using ssh for admin control
[08:07] <ogra> so i suspect there is a sshd bug, but thats up to our ssh admin
[08:08] <ogra> nope, ssh is the core of our ltsp
[08:08] <ogra> we dont use X at all in the network...
[08:08] <linescann> ah.  I need to have a good look at the specs.
[08:08] <ogra> its all shh tunneling
[08:09] <ogra> so you have a encrypted connection by default
[08:09] <linescann> benefits other than that ?
[08:09] <ogra> you dont need X on the server ;)
[08:10] <linescann> obvious really :)
[08:10] <ogra> its easy to connect to simply any machine on the net that has a ssh server running :)
[08:10] <linescann> blond moment
[08:10] <ogra> no need to configure anything there :)
[08:11] <linescann> I am really interested to see how you have done things and see how it would scale for what we do
[08:11] <ogra> and even better i can work with default settings on the dubuntu CD, i dont need any -config package... thats a guarantee for upgradeability
[08:12] <ogra> and you can mix edu/ubuntu without probs :)
[08:12] <linescann> re bug 14967 kde user here.  Zero gnome experience
[08:12] <ogra> its kernel related...
[08:12] <linescann> mixing would make long term support so much easier for all
[08:12] <ogra> inotify triggers non existing events
[08:13] <linescann> helps if I read down further
[08:13] <linescann> saw gnome and went cold :)
[08:13] <ogra> edubuntu is in principle only a collection of 3 meta packages, the single parts of it are all ubuntu parts
[08:13] <ogra> (plus some installer tweakage)
[08:14] <linescann> spoken to a few guys over here in Schoolforge that have started using it.  Verdict is good :)
[08:15] <linescann> will kubuntu drop in over edu as it does ove ubuntu ?
[08:20] <linescann> re 12942 is it happening on pxe or etherboot or both
[08:21] <ogra> PXE
[08:21] <linescann> I did an upgrade of my ltsp server over the summer and one classroom (pxe) started doing similar stuff
[08:22] <ogra> hmm, so mdz's idea about the NIC not being initialized fast enough might be right...
[08:24] <linescann> wasnt there something on the ltsp wiki about this ?
[08:25] <linescann> is it a specific make/model of card or pxe in general
[08:25] <ogra> it happens for all users it seems... so its not NIC specific...
[08:29] <linescann> I am just trying to find my notes but they are at the office.  I have a feeling one of my guys tweaked the pxecfg/defaults file
[08:29] <linescann> and all was well :)
[08:29] <ogra> hmm
[08:30] <ogra> would be nice to know what he did :)
[08:31] <linescann> I think the answer was on the ltsp wiki but I cannot find it at the moment
[08:32] <ogra> there is a link in the bugreport... but that doesnt work, i tried already
[08:33] <linescann> it is something to do with block sizes I think.  Just loops on not responding ? yes
[08:33] <ogra> yup
[08:34] <linescann> have you tried this MOPTS=nolock,ro,wsize=2048,rsize=2048 in the pxelinux.cfg/default ?
[08:35] <ogra> yup
[08:36] <linescann> hmmm.
[08:36] <ogra> i thonk our initrd doesnt accept the MOPTS option...
[08:36] <ogra> i already notified our initramfs maintainer
[08:37] <linescann> ah.  I think this might be the issue.  You using your own client kernel ?
[08:38] <ogra> its the default ubuntu kernel... with some additional options for mkinitramfs
[08:38] <ogra> as i said, we're working with default ubuntu packages as much as we can :)
[08:39] <linescann> I have a feeling that this is where your issue may be.
[08:39] <linescann> Does it happen in all switch speed environments ?
[08:41] <linescann> re default kernel, I meant what is sat in the tftp server for the clients to load ?
[08:44] <ogra> DEFAULT vmlinuz ro initrd=initrd.img
[08:44] <ogra> the rest is done in initramfs
[08:46] <linescann> I think that is were to look.  It does sound like a block size issue
[08:47] <ogra> i'll try it after dinner... now i'll take a short break, working since 12h in a row already :)
[08:48] <linescann> I know the feeling.  I am off to put the kids in their box for the night and kick the wife :)
[08:49] <linescann> have a good night :)
[08:53] <ogra> night linescann
[09:18] <linescann> ogra:  just found some notes on our wiki.  The issue was with the stock ltsp 2.4.26 kernel that comes with ltsp 4.1.  The 2.6.9 one worked on this side but had issues in other areas.
[09:19] <linescann> We used the MOPTS option to fix it.
[09:20] <ogra> i'll try again later, i'll have to work on 15244 anyway today
[09:23] <linescann> good luck :)
[09:23] <ogra> thanks :)
[10:33] <rickfitz> Anyone know if there's a problem with edubuntu-devel list?
[10:33] <rickfitz> I posted 7 hours ago, and seen nothing from anyone since then.
[10:37] <ogra> rickfitz, i dont see anything in the queue from you
[10:38] <rickfitz> I posted at 13:29 UTC. Just noticed there's nothing there from anyone (unless I'm not receiving them)
[10:39] <ogra> hmm, the last mail from today is form 17:22 here
[10:39] <ogra> so it sounds like a problem on your side...
[10:40] <ogra> btw, i could reproduce your screensaver bug....
[10:40] <ogra> after half an hour of staring at my blank screen :)
[10:40] <rickfitz> So at least my mail did get through.
[10:41] <rickfitz> I set my timeout to 2 mins to save my sanity.
[10:41] <ogra> looks like i missed to set the blank only option for the random function :( i'll try to fix it on the weekend
[10:42] <rickfitz> Just realised - I'm thinking of the wrong posting. The later one was about a missing path in the thin client environment.
[10:43] <rickfitz> It's missing /usr/games.
[10:43] <ogra> yup
[10:43] <ogra> https://launchpad.net/malone/bugs/2274/
[10:44] <ogra> its on my list for ltsp... but i have some other stuff to fix before iu can touch it again
[10:45] <rickfitz> OK
[10:45] <mpt> ogra: Are you going to UBZ?
[10:45] <rickfitz> I'm confused. Where are bugs meant to be posted? I looked on bugzilla.
[10:45] <ogra> http://bugzilla.ubuntu.com/show_bug.cgi?id=12942 , 15244  and 14967 are my worst nightmares currently
[10:46] <ogra> rickfitz, yes, this one was misplaced
[10:46] <ogra> mpt, what a question :)
[10:47] <ogra> mpt, didnt i promise you to bring hoary CDs ?
[10:47] <mpt> ogra: True, but your travel details aren't on the wiki page, and nor are you in the Canonical IRC channel
[10:49] <mpt> which made me wonder :-)
[10:50] <ogra> whoops
[11:15] <linescann> ogra: you still arround
[11:16] <ogra> yup
[11:18] <linescann> just to let you know. Breezy does not like LSI SCSI controllers on Sun V20z
[11:18] <linescann> mptscsi errors
[11:19] <ogra> linescann, jbailey is in #ubuntu-devel ;)
[11:19] <linescann> I shall pass it on
[11:20] <linescann> don't seem to have much luck install ubuntu on any of my hardware.  doesnt like blades or sunfires :(
[11:21] <ogra> hmm, i have no such HW available to test :/
[11:21] <linescann> I got stacks, but cant use them to help you guys.......F**"& frustrating
[11:21] <ogra> we have a sparc guy, but that wont help much with a sun fire
[11:22] <linescann> nah.  Opteron units.


[00:05] <qman__> upstart, by design, fires everything up simultaneously as soon as it can, unless configured dependencies preclude it
[00:05] <qman__> so if you depend on something having already been done, you need to configure that in your script
[00:07] <SpamapS> samuelkadolph: startup is emitted at the very very very beginning of pid 1's existence
[00:07] <SpamapS> samuelkadolph: you need to 'start on filesystem' .. not startup
[00:11] <samuelkadolph> That fixed it, thanks qman__ and SpamapS. I am curious about why trying to redirect the io breaks it but not launching the server itself.
[00:17] <minashokry> hello everyone, my box has many domains and subdomains on it, I have jenkins running on port 8081. I want jenkins to be accessible only using jenkins.domain.com so that I can set up authentication on this subdomain. I am using apache proxy module for this. now I want to disable accessing it using any other domain by using 8081 port. how can I do this?
[00:19] <samuelkadolph> If you are using ProxyPass then just block 8081 with your firewall or bind jenkins to <IP_ADDRESS> so only apache can access it
[00:20] <minashokry> how can I do any of these? I tried many things but still failing
[00:21] <samuelkadolph> Stop unblocking the port with your firewall and if you don't have a firewall, get one.
[00:24] <minashokry> I prefer the second solution
[00:24] <minashokry> when I bound jenkins to <IP_ADDRESS>, it became not-accessible even from apache
[00:25] <samuelkadolph> Then you are using the wrong url
[00:25] <samuelkadolph> If it's http://localhost:8081/ change it to http://<IP_ADDRESS>:8081/
[00:26] <minashokry> this isn't what I want to do. I want it to be accessible only by using subdomain.domain1.com and not by anything else like domain2.com:8081
[00:28] <samuelkadolph> Then you have to block external access to 8081 and ProxyPass to localhost:8081 from that domain only
[00:31] <minashokry> in my virtual host file of subdomain.domain1.com, I have PassProxy / http://<IP_ADDRESS>:8081, and jenkins is bound to <IP_ADDRESS>. now, I see a blank page when requesting subdomain.domain1.com
[00:31] <minashokry> the good news is domain2.com:8081 is giving nothing
[00:31] <samuelkadolph> Having a trailing slash with ProxyPass is very important
[00:33] <minashokry> I have it on file, sorry for forgetting it here
[00:36] <samuelkadolph> What does the error_log say?
[03:59] <twb> Is it possible to have mlocate scan the local filesystems daily, but only scan remote (i.e. NFS) filesystems on a Sunday, when the bandwidth spike won't be noticed?
[05:57] <philipballew> i was unable to configure my dchp during the install as i was offline. how can i do that now that i am connected?
[06:14] <Diee> hi
[08:20] <jits> hi guys . i have a dual nic system .. one nic is connected to a network with multiple vlans, and other nic is the internet connection .. when the request comes without vlan then it gets to intenret fine, but requests from vlan are not working on most sites..
[08:21] <jits> i believe most sites are not responding to requests with vlan id .. so we need to strip it for requests going out to internet .. how do i do that ?
[08:25] <jits> where do i set vlan=no for internet connection ?
[08:55] <greppy> c
[09:16] <uvirtbot`> New bug: #816313 in openssh (main) ""ssh -b x.x.x.x" or "ssh -o BindAddress=x.x.x.x" does not work." [Undecided,New] https://launchpad.net/bugs/816313
[09:30]  * twb bets triangle routing
[09:30] <twb> Oh, or he's just not untagging correctly..
[10:49] <tixo5> hi, just wondering if anybody has used iRedMail? have any opinions on it ?
[10:53] <tixo5> as i am struggling to setup mailserver a little, i mean its running fine but i want virtual users etc
[11:12] <tixo5> anyone around that can help with taking a server snapshot ?
[11:39] <alamar> tixo5: what do you mean by that?
[11:40] <tixo5> like some shared hosting providers, allow a server snapshot, like a full image of the server
[11:40] <tixo5> im setting up a VPS for first time, and would like to do something similar
[11:40] <tixo5> possible to take a full image via shell ?
[11:46] <overrider_> I am going to install a minimal x server with fluxbox on my server - is there any way i can prevent apt-get from pulling all the xorg-drivers except the one i really need (intel)? Is that even benefitial in order to keep thinks as light as possible or should i just do the old sudo apt-get install xserver-xorg xserver-xorg-core fluxbox
[11:50] <smb> zul, Whenever you get online, could you ping me?
[11:51] <zul> smb: ping i saw the depwait for ipxe i just added it to the seeds
[11:52] <smb> zul, Ah ok, then that get sorted already. The other thing I wanted to chat about is your thoughts on the grub config idea
[11:52] <zul> smb: sure
[11:53] <zul> smb: what was the idea again
[11:53] <tixo5> whats the best packaged backup solution for ubuntu ?
[11:53] <smb> Well basically to have two distinct sets of command line arguments for dom0 kernels and "normal" kernels
[11:54] <smb> an not the same being used for both as currently
[11:54] <zul> ok..
[11:54] <smb> At least I (not sure that is common though) have the problem of using two different console definitions for both
[11:55] <smb> When I start a normal kernels console=ttyS1 and for xen dom0 its console=hvc0
[11:55] <zul> oh this is the serial console stuff?
[11:55] <zul> right
[11:56] <smb> right
[11:56] <zul> yeah im all for it, if you can give me a debdiff for it :)
[11:56] <smb> zul, That should be possible. :-P
[11:57] <smb> Have not prepared one yet. But basically running it in locally modified environment
[11:58] <zul> smb: sweet....go for it then
[12:16] <tixo5> best backup solution for ubuntu server?
[12:17] <tixo5> rsnapshot?
[12:18] <WinstonSmith> http://duplicity.nongnu.org/
[12:23] <tixo5> ok thanks ill take a look
[12:24] <tixo5> beta software?
[12:25] <tixo5> ideally i would like to take the backup via SSH to my local machine
[12:25] <WinstonSmith> they have a stable release
[12:26] <WinstonSmith> and it supports ssh, ftp, DAV, etc
[12:26] <tixo5> ok
[12:26] <alamar> tixo5: you want a snapshot of the vps?
[12:26] <WinstonSmith> you can also use it with duply http://duply.net/ which is a console frontend
[12:26] <tixo5> yes basically
[12:27] <alamar> you could just use lvm snapshots or depending on the vps technology you use vzdump/vzsnapshot for example if it is openvz
[12:27] <tixo5> before i wipe it and start again, incase i mess up etc
[12:27] <tixo5> yes its openvz
[12:27] <tixo5> doesnt my provider need to support that ?
[12:27] <jane-> my router says Primary DNS Server 	<IP_ADDRESS> Secondary DNS Server 	<IP_ADDRESS> ,    how can i know which public dns the ip refers, whats the name of that dns 2. how can i make my own dns and get the list of all the websites of the world?
[12:27] <alamar> tixo5: .. I thought you were the provider
[12:27] <tixo5> jane-: #dns
[12:28] <jpds> jane-: A list of all the websites in the world?
[12:28] <tixo5> no alamar i have a VPS container, i have setup everything else myself
[12:28] <tixo5> but being the first time i am worried i have done a few things a little messy, so want to start from scratch
[12:29] <tixo5> i am unable to take a snapshot or  use the snapshot without my provider supporting that right ?
[12:32] <jane-> jpds yes. webs and ips, thats what dns do.
[12:32] <jpds> jane-: Why would you want that?
[12:32] <WinstonSmith> JanC:
[12:32] <WinstonSmith> ermm
[12:32] <jane-> i want to make my own dns
[12:32] <tixo5> jane, you need BIND DNS running
[12:32] <tixo5> with a master zone
[12:32] <WinstonSmith> jane-: whois  <IP_ADDRESS> for ex. ?
[12:33] <tixo5> then add A records and such
[12:33] <jpds> jane-: But you want your own DNS records for every website in the world?
[12:34] <jane-> jpds yes.
[12:34] <tixo5> what are you on about
[12:34] <tixo5> lol
[12:36] <shauno> that's "you're crazy" territory.  usually for sites you don't handle, your dns server would query upstream & cache.  trying to take a snapshot of every site in existance would be exceptionally difficult (even if you're google)
[12:37] <tixo5> WinstonSmith: that duplicity is meant to backup local systems to another server?
[12:37] <jane-> how public dns work then. they have a list. dont they?
[12:38] <tixo5> not sure if im right, but all zones are hosted by many servers all over the work
[12:38] <tixo5> so com will be hosted
[12:38] <jpds> jane-: No, they query other DNS servers.
[12:38] <WinstonSmith> tixo5: not the whole system ( well not partitions) only files. and it can backup locally or remotely (ssh, ftp, dav, etc)
[12:38] <tixo5> then the (.)
[12:39] <tixo5> WinstonSmith: i sort of want to take a snapshot, is this impossible without support from the VPS provider?
[12:39] <WinstonSmith> tixo5: can't help you there, never used VPS.
[12:39] <jpds> jane-: They don't have their own copies for every DNS record in existance.
[12:40] <jane-> jpds then who does
[12:40] <jpds> jane-: Noone.
[12:40] <jamespage> Daviey: ack a sync for me? (https://bugs.launchpad.net/ubuntu/+source/tomcat7/+bug/816393)
[12:40] <uvirtbot`> Launchpad bug 816393 in tomcat7 "Sync tomcat7 7.0.19-1 (universe) from Debian unstable (main)" [Wishlist,New]
[12:41] <jane-> if my router states pri dns and sec dns. that means it goes to that ip and fetchs ips of websites according to their names.... doesnt it ?
[12:41] <jpds> jane-: Yes.
[12:41] <GreenDance> Hi
[12:41] <jpds> jane-: And those DNS servers, will forward requests they don't know the answers to, to other DNS servers.
[12:42] <tixo5> ya
[12:42] <tixo5> each zone jane- is hosted by another server
[12:42] <tixo5> (www)(.)(domain)(.)(com)
[12:42] <tixo5> not always but u get the idea
[12:42] <jane-> jpds ok. and those others dns servers can be any in world.. ? isnt there a main   one         dns serveR that has all ?
[12:43] <jpds> jane-: No, they send DNS requests down the chain.
[12:43] <jane-> jpds how many are there any way. any gues?
[12:43] <jpds> jane-: . nameservers, go to .com nameservers, which go down to ubuntu.com nameservers, etc.
[12:43] <GreenDance> Hi, I have a server which is shared between me and others, (my server), I allow them http://mydomain/theirsite, but how can I stop the users from looking at eachothers files, uploading a php directory listings allows access to others files /site1/ /site2/ etc.
[12:44] <jpds> jane-: What exactly are you trying to accomplish?
[12:44] <tixo5> GreenDance: are you using virtualhosts?
[12:44] <GreenDance> tixo5 yes
[12:45] <tixo5> each user is a unix system user?
[12:45] <tixo5> or all the same user
[12:45] <tixo5> as thats probably your issue
[12:45] <jane-> jpds just studing, and may be ill make my own dns
[12:45] <jane-> small one
[12:45] <GreenDance> tixo5, same users
[12:46] <jane-> are they all legitimate dns servers, and what if i want to make my own, bind dns resolver ?  ill need a list of ip names and corresponding names , how can i get it ?
[12:46] <GreenDance> tixo5, same user*
[12:46] <jane-> jpds ^
[12:46] <GreenDance> apache:apache
[12:46] <GreenDance> i think
[12:47] <GreenDance> tixo5: if I create a unique linux user for each person, would that work?
[12:47] <tixo5> well if you want different permissions i would use different users per/site
[12:47] <tixo5> yes, there is probaably other ways
[12:47] <tixo5> you could create virtual users using a mysql backend
[12:47] <GreenDance> really?
[12:47] <GreenDance> :o
[12:47] <GreenDance> :D
[12:48] <tixo5> well my mailserver's users are stored in a database
[12:48] <tixo5> so i dont see why not
[12:48] <jpds> jane-: Install bind9 on a machine somewhere?
[12:49] <tixo5> jpds that was my original reply
[12:49] <jpds> jane-: https://help.ubuntu.com/10.04/serverguide/C/dns.html
[12:49] <tixo5> jane-: #dns will me more help
[12:50] <jane-> hm
[12:51] <tixo5> jane-, i am running BIND on my server
[12:51] <tixo5> i host my own DNS records
[12:51] <tixo5> somebody else hosts the (.) and (com)
[12:52] <tixo5> you may need your domain registrar to add a 'glue record' to the (.)
[12:52] <Kurisutian> Hey guys! Maybe somebody in here can help me with this: When logging in to my ubuntu server, the appearing statistics summary page shows the /home directory instead of the root directory... unfortunately I have no clue how to change that... does anyone know where I can do that?
[12:53] <jane-> tixo5 is it possible to make a new domain , e.g not .com  but .moc  ?
[12:54] <tixo5> no
[12:54] <tixo5> as far as i am aware
[12:54] <tixo5> there are 'bodies' that govern things like that
[12:54] <tixo5> the internet would become a crazy place is that was possible
[12:55] <Pici> ICANN has allowed generic TLDs to be registered, but it costs a prohibitive amount of money to do so.
[12:55] <tixo5> money is the solution to most things, in this context ill stick with it not being possible
[12:55] <jane-> tixo5 if i make a list of .moc and supose some people make my server as their pri dns. then they can see a different google.moc   ?
[12:56] <tixo5> again jane, for 5th time your better off asking in #dns
[12:56] <jane-> k
[12:56] <Kurisutian> nobody knows where to change the information on the login summary page?
[13:06] <smoser> lynxman, around ?
[13:15] <adac> guys, how to add a system user on command line?
[13:15] <j3roth> Kurisutian, you want to change th motd that displays on login?
[13:17] <WinstonSmith> adac: man adduser
[13:17] <j3roth> adac: Correction: man useradd
[13:18] <WinstonSmith> both should work
[13:36] <uvirtbot`> New bug: #816414 in nut (main) "[MIR] nut (nut-doc, nut-client, nut-server)" [Undecided,New] https://launchpad.net/bugs/816414
[13:43] <lynxman> smoser: here
[13:43] <tixo5> rsync'ing / root is a bad idea?
[13:45] <smoser> lynxman, i put one question in the merge proposal, but then i had some others.
[13:45] <lynxman> smoser: shoot
[13:45] <lynxman> tixo5: it normally is
[13:46] <smoser> tixo5, rsyncing it to another system, or carefully to another drive will work, though capturing the state of a live filesystem is less than ideal.
[13:46] <smoser> lynxman, i had intended that "include_once" would be really just "download_once"
[13:46] <tixo5> i was trying to backup to my local machine over ssh but obviously cant use root as ive disabled login, so need to setup the daemon
[13:46] <smoser> but you implemented as "include_once".
[13:46] <tixo5> is there any other better backup solutions to images the partition of my VPS
[13:46] <tixo5> guess that impossible
[13:47] <lynxman> smoser: it is download once as far as I see it
[13:47] <lynxman> smoser: yeah, wasn't that what we agreed the naming convention would be? :)
[13:47] <smoser> tixo5, rsync is probably reasonable. you *can* still use rsync as root.
[13:47] <Daviey> smoser: wait what.. you are advocating using rsync as root?
[13:48] <tixo5> can from the system
[13:48] <tixo5> but not remotely
[13:48] <smoser> in order to read files that are root-protected that is generally required.
[13:48] <tixo5> i was looking more for a VPS snapshot
[13:48] <tixo5> this cant be done from within the system right ?
[13:49] <smoser> tixo5, you can do it, you just have to have rsync client tell the server to use a different "rsync client"
[13:49] <smoser> see man page
[13:49] <smoser> --rsync-path=/home/smoser/my-rsync
[13:49] <tixo5> rsync is totally different to snapshot though
[13:49] <smoser> where my-rsync has something like: exec sudo rsync "$@"
[13:49] <tixo5> i want an image of my VPS ideally
[13:49] <Daviey> smoser: i think we need a rsync-rootwrap.
[13:49] <smoser> we do indeed.
[13:50] <smoser> we need more setuid executables i think
[13:50] <smoser> lynxman, hold on
[13:50] <lynxman> smoser: holding on :)
[13:50] <tixo5> smoser: if i rsync'ed /,   installed fresh OS and restored
[13:50] <tixo5> everything wouldnt work right ?
[13:51] <smoser> tixo5, well, probably would. or very close.
[13:51] <smoser> but i would be surprised if there werent some issues.
[13:52] <tixo5> so, i am looking for a solution like VPS snapshot
[13:52] <smoser> or at least would not be surprised if there were some issues
[13:52] <tixo5> is that impossible without admining the dedicated server my VPS is on ?
[13:52] <smoser> tixo5, you'd run into the same sets of issues (at least some of them) with block level
[13:52] <smoser> some would be different
[13:53] <smoser> you need to sync the filesystem to the block device (fs_freeze) before you snapshot
[13:53] <tixo5> most VPS providers alllow snapshot images to be created, and restored
[13:53] <smoser> but then, you still get a "live" filesystem.
[13:53] <tixo5> hmm
[13:53] <smoser> when you start form that live filesystem, at very least that volume will be dirty and need fsck (maybe fs_freeze woudl handle that... id don't know)
[13:53] <smoser> its the same as if you lost power
[13:53] <smoser> which *normally* is fine
[13:54] <tixo5> so your basically saying theres not much different between using rsync, and a VPs providers snapshot of the system
[13:55] <tixo5> wish my provider allowed for offsite images to be taken
[13:55] <tixo5> dont see why that would be so difficult
[13:55] <smoser> lynxman, if os.path.isfile(includeonce_filename): continue
[13:55] <tixo5> thanks for help anyway
[13:56] <smoser> block level snapshots are more complete than filesytem level
[13:56] <smoser> more complete == safer
[13:56] <tixo5> and its impossible for me to do that from my VPS?
[13:56] <smoser> for instance, some things that rsync would not pick up are your filesystem UUID or LABEL
[13:56] <smoser> which may exist in /boot/grub/grub.cfg
[13:56] <smoser> if not restored, your system might not reboot.
[13:57] <tixo5> leaving it pretty painful to backup/restore
[13:58] <lynxman> smoser: that's what I do, I just name it a bit differently
[13:58] <smoser> block level is going to be safer. filesystem level is going to be smaller.
[13:58] <smoser> neither are perfect.
[13:58] <smoser> perfect is shutdown, snapshot, start
[13:58] <tixo5> i can do block level?
[13:58] <smoser> (imo)
[13:58] <smoser> well, you can...
[13:59] <tixo5> shutdown, snapshot is what i want to do
[13:59] <smoser> dd if=/dev/sda of=- | ssh system 'dd > disk.img'
[13:59] <tixo5> but i have not got those features in my client panel so i cant do it right?
[13:59] <smoser> i'm really not very familiar witih vps's, but it sounds reasonable that they do not hvae block level snapshots exposed to you.
[14:00] <tixo5> most do, but mine is cheap :)
[14:02] <smoser> lynxman, ^
[14:07] <lynxman> smoser: replied to you in the middle of the rsync thread :D
[14:08] <smoser> lynxman, right. you 'continue'
[14:08] <smoser> so you never process that include again
[14:09] <lynxman> smoser: hence include-once
[14:09] <smoser> right.
[14:09] <smoser> i would have preferred "download-once"
[14:09] <smoser> to suffice for the one time url
[14:09] <smoser> i dont see a real-need for process-once
[14:09] <smoser> as most things are 'per-instance' anyway
[14:09] <smoser> (ie, your mcollective stuff is per-instance)
[14:09] <lynxman> smoser: for certs for example makes sense, that's what I had in mind
[14:10] <smoser> why does it make sense?
[14:10] <smoser> you have other controls over whether or not to act on the data more than once.
[14:10] <smoser> i think the data should be present to cloud-init so it *could* act on it
[14:10] <smoser> if it was a module or soemthing that should be acted on every time
[14:10] <lynxman> smoser: hm okay let me paint you an scenario
[14:11] <lynxman> smoser: you get temporary certs, which mcollective uses to connect to a provisioning collective, then it gets fed new certs for the "global" collective once its authenticated and properly provisioned
[14:11] <lynxman> smoser: that is actually the scenario I had in mind, in this scenario I just need these certificates once, and that data should not be acted upon ever again, if so it'll reset the machine status
[14:15] <smoser> lynxman, thats fine
[14:15] <smoser> that situation works fine
[14:15] <smoser> you can process that hunk multiple times
[14:15] <smoser> because mcollective module only runs per_instance
[14:15] <smoser> which means once (the first boot)
[14:15] <smoser> no side effects will occur the second time
[14:17] <robbiew> zul: ping...I got 10 pandaboards...how many you need for OpenStack on ARM testing :P
[14:17] <zul> robbiew: one would be good
[14:19]  * RoAkSoAx would like one if there's one to spare :)
[14:19] <robbiew> zul
[14:19] <robbiew> cool
[14:19] <robbiew> RoAkSoAx: yeah...I think I can swing that
[14:19] <smoser> lynxman, i have this suggested change: http://paste.ubuntu.com/652442/
[14:19] <RoAkSoAx> robbiew: cool thanks ;)
[14:20] <robbiew> zul: so is it possible to have OpenStack installed across multiple pandaboards...with only LXC
[14:20] <robbiew> i.e. multiple compute nodes
[14:20] <zul> robbiew: it should be able...maybe two then
[14:20] <robbiew> zul: ;)
[14:21] <lynxman> smoser: well if you wish that feature instead of mine, sounds good :)
[14:21] <lynxman> robbiew: can I have one? I promise to feed it nicely
[14:21] <smoser> i think its generally a superset of function
[14:21] <lynxman> robbiew: :D
[14:21] <lynxman> smoser: fair enough :)
[14:21] <smoser> the other question i had, lynxman
[14:22] <smoser> the private key should be 0600 right?
[14:22] <lynxman> smoser: hm I think so, wasn't sure so I didn't implement it yet
[14:22] <lynxman> smoser: wanted to test it first once merged and then make the change if needed
[14:22] <lynxman> smoser: but it makes sense
[14:23] <smoser> lynxman, you know, you are allowed to test things *before* i merge them
[14:24] <smoser> its even generally smiled apon
[14:24] <lynxman> smoser: lol ;) I normally do
[14:24] <lynxman> smoser: this one is highly experimental though
[14:25] <smoser> lynxman,
[14:25] <smoser> well, can yo udo 2 things for me
[14:25] <smoser> i will push a brnach with some changes to your code
[14:25] <smoser> can you build it and test it?
[14:26] <smoser> lynxman, lp:~smoser/cloud-init/include_once_and_mc_cert
[14:26] <lynxman> smoser: will give it a shoot
[14:27] <robbiew> RoAkSoAx: hey...interested in getting cobbler to work with ARM images?
[14:29] <RoAkSoAx> robbiew: though that zul already had that working..
[14:29] <RoAkSoAx> zul: ^^
[14:29] <robbiew> RoAkSoAx: nope
[14:30] <RoAkSoAx> robbiew: yeah why not
[14:30] <zul> RoAkSoAx: the ground work is there already just needs to be followed through
[14:30] <RoAkSoAx> zul: cool ;)
[14:31]  * smoser re-reads above, and for the 4.23e8'th time he realizes he may have sounded rude.
[14:31] <smoser> sorry, lynxman
[14:31] <lynxman> smoser: no worries, really
[14:32] <robbiew> RoAkSoAx: cool, thx...then will send you 2 boards ;)
[14:32] <RoAkSoAx> robbiew: hehe ok ;)
[14:33] <Daviey> zul / RoAkSoAx: they need to work with u-boot PXE loader, and be as ready as possible to work with native PXE booting.
[14:33] <zul> Daviey: agreed
[14:33] <Daviey> (might need to use NCommander for support on that)
[14:42] <hggdh> oh, NCommander has been package for Ubuntu?
[14:42] <hggdh> :-)
[14:42] <robbiew> RoAkSoAx: send me an email with your mailing address and phone, and I'll handle the rest
[14:42] <robbiew> smoser: interested in a panda board?
[14:42]  * NCommander apt-get instakk's himself
[14:43] <hggdh> heh. BTW, NCommander, thank you for rooting my android, works perfectly :-)
[14:43] <RoAkSoAx> robbiew: will do
[14:44] <smoser> RoAkSoAx, i'm not un-interested.
[14:44] <smoser> i would plug one in and give it a try.
[14:44] <robbiew> smoser: cool
[14:45] <robbiew> smoser: can you shoot me an email with your address and phone...I can take care of the rest
[14:45]  * robbiew notes he should have this...but won't "go there"
[15:07] <fullstop> The heartbeat + pacemaker in ubuntu-server 10.04.. is this a long-term cluster plan for ubuntu or are they moving elsewhere?
[15:09] <smoser> utlemming, https://gist.github.com/1100458
[15:10] <utlemming> smoser: nice :)
[15:18] <apw> kirkland, hey ... i have an external usb drive on a server that i'd like to be a luks encrypted volume, got any experience of monting those during boot ? and i'd like to have it
[15:24] <kirkland> apw: I don't, but kees does
[15:24] <kirkland> apw: kees uses a usb drive just like that
[15:37] <lsheeba> Kind attention please , im getting shell booters and host booters hitting my server , how can i trace whos doing it and how can i stop them
[15:38] <lsheeba> and is their some kind of special support for such problems , that im willing to be greatful in paying the sum of hes help knowledge
[15:44] <alamar> lsheeba: what are shell and host booters?
[15:44] <lsheeba> It consists of some php flooding shells and a gui.
[15:44] <lsheeba> the gui pings the shells and gives them a command to flood a certain IP
[15:44] <lsheeba> since the shells can be on servers with high bandwidth connections, it can be a powerful flooding method.
[15:45] <lsheeba> it hurts my servers badly , all of my local network cant ping the server then
[15:45] <zul> er...turn it off then?
[15:45] <alamar> so block their ips and try to get upstream to nullroute them
[15:45] <lsheeba> their offline
[15:45] <lsheeba> im on my personal pc running ubuntu 11.04 desktop
[15:45] <kim0> Howdy folks, Ubuntu cloud days (day-2) starting in #ubuntu-classroom on the hour .. see you there
[15:45] <lsheeba> ive blocked all oversea's ip's and allowed local ip's only and still how do they get access ?
[15:45] <alamar> (and in addition contact the hoster's abuse department of the infected servers)
[15:46] <lsheeba> im running a small GSP
[15:46] <lsheeba> with a static ip that i have purchased
[15:47] <tixo5> booters
[15:47] <tixo5> arent meant not to be tracked
[15:47] <tixo5> they use shells hosted on other servers that have been hacked
[15:47]  * tixo5 shows his blackhat side :(
[15:47] <lsheeba> cyber crime department  didnt help much , well didnt help at all
[15:48] <tixo5> i gave you your answer
[15:48] <lsheeba> any solution?
[15:48] <lsheeba> tixo5,
[15:48] <tixo5> a WAF?
[15:48] <tixo5> or ddos module for apache
[15:48] <thisismygame> Hello, is anyone here familiar with mdadm raid arrays? I just got the mdadm alert email saying a drive was removed from the array. It is now marked as faulty. I was curious if there is any way to see a log of when/where/how this happened?
[15:49] <lsheeba> do u know of any specialized guru who will accept a payment to perform our security liabilities for this GSP , personal-aid not an organizational request because then we couldve gone for expensive firewall hardwares
[15:50] <thisismygame> Further, I am curious if anyone can help with replacing the failed drive with a new drive. The new drive will be a new model and likely new make. Which specs are necessary to be consistent among hard drives across mdadm raid arrays?
[15:50] <tixo5> i do penetration testing, securing servers it not my area, although i know a decent amount
[15:50] <tixo5> i have work shortly but i will add you incase i can help
[15:50] <lsheeba> Thanks a bunch
[15:50] <StevenR> thisismygame: one thing at a time. Review the system logs at the time of the alert
[15:51] <jpds> lsheeba: Rate-limit network traffic on a per-IP basis?
[15:51] <lsheeba> i theory the problem of other gsp's here attacking me because of my price range in cost per slot
[15:52] <lsheeba> jpds, ive tried that , and it puts pressure in hogging the router's cpu " 100% "
[15:53] <thisismygame> StevenR: I just looked at dmesg and /var/log/messages. dmesg has nothing related, and /var/log/messages, is, from what I can tell, empty. :o
[15:53] <StevenR> thisismygame: /var/log/syslog
[16:00] <RoyK> tixo5: what do you use? openvas?
[16:00] <tixo5> for pentests?
[16:00] <RoyK> yep
[16:00] <tixo5> many many many tools
[16:01] <tixo5> i specialise in web app security
[16:01] <RoyK> ok
[16:01] <tixo5> trying to go for a niche :)
[16:01] <RoyK> any tool in particular?
[16:01] <tixo5> not being a large company i cant afford the larger tools like webinspect
[16:01]  * RoyK has a scan running with openvas against his office computers
[16:02] <tixo5> openvas and such are only good for finding outdated packages rly,
[16:02] <tixo5> thats all it really does
[16:02] <tixo5> compares versions
[16:02] <RoyK> I know
[16:02] <RoyK> that's why I wondered about other tools, specifically for probing webapps
[16:03] <tixo5> webapps, opensource like w3af
[16:03] <tixo5> not a bad framework, quite buggy atm though
[16:03] <RoyK> k
[16:03] <RoAkSoAx> Daviey: ping
[16:03] <tixo5> there is a distro called 'Samurai' that has some really nice tools, just waiting on their 11.04 ubuntu update, as jaunty is  pain for me
[16:03] <RoAkSoAx> Daviey: /win 22
[16:03] <RoAkSoAx> argh
[16:04] <tiphares> how can i merge 2 folders in ubuntu?
[16:05] <RoyK> tiphares: rsync?
[16:05] <RoyK> or what do you mean 'merge'?
[16:05] <Daviey> RoAkSoAx: o/
[16:05] <RoyK> unison perhaps
[16:05] <RoAkSoAx> Daviey: i'll ping you again after the meeting ;)
[16:06] <tiphares> i have 2 folders, 1 contains a,b,d, folder 2 contains b,c,d, and i want to marge them into ONE folder, containing a,b,c,d
[16:06] <Daviey> RoAkSoAx: cool
[16:07] <RoyK> tiphares: rsync -avP folder1/ folder2/ newfolder
[16:07] <RoyK> iirc
[16:07] <RoyK> tiphares: that won't help you with collisions, though, the data from folder2 will overwrite whatever came from folder1 (or was it the other way around?)
[16:08] <tiphares> doesn't matter which ones overwrite the other
[16:08] <thisismygame> StevenR: oh, they moved it. yea this has some relevant info. Buffer I/O error, dev sda, sector 0
[16:08] <tiphares> as they both contain some of the identical files
[16:08] <tixo5> why cant you just copy
[16:08] <tixo5> move* sorry
[16:08] <RoyK> tiphares: then just rsync, or as tixo5 said, copy or move - but rsync may be easier
[16:08] <tixo5> depending on size rsync will be better
[16:09] <RoyK> tiphares: if you have f1 and f2 and you want all in f2, cd f2; rsync -avP ../f1/. .
[16:09] <tiphares> hm
[16:09] <tiphares> oke, never used rsync, i'll check it out thanks
[16:10] <tixo5> tiphares: it sounds like your over compicating somwething :P
[16:10] <tixo5> somethign*
[16:10] <tixo5> o god
[16:10] <tiphares> yeah i don't know
[16:10] <tiphares> i'm a noob
[16:10] <RoyK> tixo5: rsync isn't really complicated, though :)
[16:10] <tiphares> coming from windows; when i have 2 folders named pictures, with some of the same files in them, i can just drag and drop either folder and "merge" it with the other one
[16:11] <tiphares> that's what i want to do
[16:11] <tiphares> though, using a shell, of course
[16:11] <RoyK> tiphares: mv f1/somedir f2
[16:11] <tiphares> what happens when some files conflict then?
[16:12] <RoyK> just use rsync
[16:12] <RoyK> it's the easy way
[16:12] <tiphares> i'm confused :(
[16:12] <RoyK> or cp -R f1/* f2
[16:12] <RoyK> tiphares: the unix way: There's More Than One Way To Do It
[16:13] <tiphares> copying files wont really merge though
[16:15] <RoyK> tiphares: cd f2; rsync -a ../f1/. .; cd ..
[16:15] <thisismygame> StevenR: I think we can call this drive deceased.   http://pastebin.com/4JW5qT4j
[16:15] <RoyK> tiphares: then remove f1
[16:16] <RoyK> or something
[16:16] <tiphares> thing is i have limited space, and the folders i want to merge are pretty big
[16:16] <tiphares> but ye
[16:16] <tiphares> trying out some of the stuff now
[16:16] <tiphares> :p
[16:16] <tiphares> kind of overwhelmed with alternatives
[16:17] <tiphares> rsync man page is like a book though
[16:17] <RoyK> just use -a
[16:17] <RoyK> that'll cover most of what you need
[16:18] <RoyK> add -v to make it verbose
[16:18] <tiphares> i'd like to know what it does before i use it:p
[16:18] <RoyK> -P isn't needed
[16:18] <RoyK> -a == --archive => keeps all sorts of attributes, ownership etc
[16:19] <tiphares> ah i see
[16:19] <tiphares> -v = verbose = ?
[16:19] <RoyK> yes
[16:19] <RoyK> -P is --partial --progress
[16:19] <tiphares> dno what verbose means :(
[16:19] <RoyK> --partial won't be needed unless working with BIG files locally, but -P is short and adds verbosity :P
[16:20] <RoyK> verbose == noisy
[16:20] <RoyK> verbose != quiet
[16:20] <tiphares> yeah alright now you lost me completelyt
[16:20] <Pici> verbose means it is going to tell you about every action it does.
[16:21] <tiphares> ah like logging
[16:21] <StevenR> thisismygame: looks kinda that way, yes.
[16:21] <StevenR> thisismygame: I think you need to tell mdraid to remove it, and then add another drive.
[16:22] <tiphares> rsync man page is 2642 lines
[16:22] <tiphares> that's madness
[16:22] <StevenR> tiphares: why is it madness?
[16:23] <RoyK> Dora:~ roy$ man rsync | wc -l 3562
[16:23] <RoyK> that is - wc -l returned 3562...
[16:23] <RoyK> tiphares: there's no need to read it all
[16:24] <tiphares> no that's why i'm here
[16:24] <tiphares> heh
[16:24] <RoyK> again, -avP will be quite sufficient
[16:24] <tiphares> yeah
[16:24] <tiphares> i get you
[16:24] <RoyK> cd /target/dir/whereever/it/is and rsync -avP /source/dir/ .
[16:24] <tiphares> just trying to figure out what it's actually doing
[16:25] <RoyK> make sure you add the / at the end of source dir - otherwise it'll create the sourcedir in your dir
[16:25] <RoyK> you can move that out later, of course...
[16:26] <RoyK> so /source/dir/ means /source/dir/* (except /source/dir/* won't move 'hidden' files starting with .)
[16:50] <RoAkSoAx> Daviey: ok
[16:50] <Daviey> RoAkSoAx: Hey!
[16:50] <RoAkSoAx> Daviey: howdy ;)
[16:50] <Daviey> RoAkSoAx: What is the status of redhat-cluster?
[16:51] <RoAkSoAx> Daviey: as in?
[16:51] <RoAkSoAx> Daviey: redhat-cluster is soon to be dead
[16:51] <Daviey> It seems it might uninstallabale
[16:51] <RoAkSoAx> Daviey: is there a bug #
[16:52] <RoAkSoAx> Daviey: cause last time I check it was
[16:52] <Daviey> RoAkSoAx: no, i litterally just checked the REPORT
[16:52] <RoAkSoAx> Daviey: link
[16:52] <Daviey> wow, i can't spell today
[16:52] <Daviey> http://cdimages.ubuntu.com/ubuntu-server/daily/current/report.html
[16:53] <RoAkSoAx> Daviey: will take a look at it
[16:54] <RoAkSoAx> Daviey: just installed it and didn't receive any failures
[16:55] <Daviey> RoAkSoAx: same here, best i can think is main/universe mistmatch?
[16:55] <RoAkSoAx> kages could not be authenticated
[16:56] <RoAkSoAx> Daviey: maybe it is a sources mistmatch as when I first tried to update it showed something that some packages couldnot be authenticte
[16:56] <RoAkSoAx> Daviey: but was resolved by sudo apt-ge tupdate
[16:56] <Daviey> interesting
[16:56] <Daviey> RoAkSoAx: lets spend no more time on it, and see what the cdimage shows tomorrow
[16:56] <RoAkSoAx> Daviey: yeah
[16:56] <RoAkSoAx> Daviey: anyways, I wanted to talk about bug #789266
[16:56] <uvirtbot`> Launchpad bug 789266 in cobbler "Cobbler: Missing yum-utils & other cobbler related utils" [Wishlist,Triaged] https://launchpad.net/bugs/789266
[16:57] <RoAkSoAx> Daviey: according to what I can see, yum-utils Depends on yum
[16:57] <RoAkSoAx> Daviey: do we really want to install yum in our systems?
[16:57] <Daviey> RoAkSoAx: ok
[16:57] <RoAkSoAx> Daviey: when deploying cobbler?
[16:57] <RoAkSoAx> Daviey: (note that for reference I'm checking the spec file for yum-utils which depends on yum)
[16:57] <Daviey> makes sense
[16:58] <RoAkSoAx> Daviey: do we really want that?
[16:58] <RoAkSoAx> do we really need yum to be installed?
[16:59] <RoAkSoAx> Daviey: and packaging yum-utils will also mean packaging python-kitchen
[17:00] <Daviey> RoAkSoAx: oh golly.
[17:01] <Daviey> RoAkSoAx: Do we really need yum to be entirely installed for this basic support of it?
[17:01] <RoAkSoAx> Daviey: as I can see in the "reposync" binary, yes we do:
[17:01] <RoAkSoAx> from yum.misc import getCacheDir
[17:01] <RoAkSoAx> from yum.constants import *
[17:01] <RoAkSoAx> from yum.packageSack import ListPackageSack
[17:01] <RoAkSoAx> import rpmUtils.arch
[17:03] <Daviey> RoAkSoAx: Have you taken a sniff to see how much effort is involved in just the python bindings?
[17:04] <Daviey> I suspect they will suck without the world() avaliable, but i wonder if they provide enough just for basic support?
[17:05] <RoAkSoAx> Daviey: no I havent but from what I can see, there's lots of stuff that access yum modules
[17:05] <RoAkSoAx> and databases and stuff
[17:06] <RoAkSoAx> Daviey: so my wild guess is that it would need a great deal of tweaking for basic support
[17:06] <Daviey> RoAkSoAx: I'm hessitant to suggest just ripping out the rpm support.
[17:06] <RoAkSoAx> Daviey: I can just go ahead and finish packaging yum-utils to have it on archives
[17:06] <RoAkSoAx> Daviey: make it depend on yum
[17:06] <Daviey> I don't think Orchestra should just provide ubuntu/debian support :(
[17:06] <RoAkSoAx> Daviey: and then see what happens
[17:06] <Daviey> RoAkSoAx: sounds good to me.
[17:07] <Daviey> I think time investigating viablity is worth it.
[17:07] <Daviey> at least we've tried to support it that way
[17:07] <RoAkSoAx> Daviey: yeah and it doesn't really hurt having yum-utils in the archives, since we have yum already
[17:09] <Daviey> RoAkSoAx: GPWM
[17:11] <kirkland> Daviey: for our first rev, i think we need to get ubuntu/debian support "right" and working well
[17:12] <Daviey> kirkland: totally agreed.
[17:12] <kirkland> Daviey: and i think we can do that without being evil or hostile toward other distros
[17:12] <kirkland> Daviey: s/can/should/ :-)
[17:12] <Daviey> kirkland: which is what we are doing :)
[17:12] <kirkland> Daviey: \o/
[17:47] <altice> anyone using TACACS+?
[17:47] <altice> I am having trouble compiling from source
[17:47] <altice> and also it has long been since removed from the Repos
[18:04] <fullstop> altice: I am.
[18:05] <fullstop> altice: ftp://ftp.shrubbery.net/pub/tac_plus/tacacs%2B-F<IP_ADDRESS>.tar.gz
[18:05] <fullstop> and I just did ./configure to prepare it for install.. but this was a long time ago -- there is a chance that I slightly changed the source and do not remember.
[18:06] <altice> yea that's what someone suggested
[18:06] <altice> I saw someone elses insights on that
[18:06] <altice> however, they did not apply to the errors I was getting
[18:07] <altice> I'm talking now with developers to see about getting this put into the repo after I get it figured out and working
[18:07] <fullstop> altice: what errors?
[18:07] <fullstop> errors building or running?
[18:09] <altice> building
[18:09] <altice> I upgraded some in house servers to ubuntu 10.04 LTS
[18:09] <altice> and I have to compile from source again for TACACS
[18:10] <altice> fullstop: here's a pastebin of the output from makefile
[18:10] <altice> http://pastebin.com/rsqRMefT
[18:16] <fullstop> altice: one moment.. let me see if mine still builds.
[18:17] <fullstop> altice: here is my full build output: http://pastebin.com/dEebuV4k
[18:18] <fullstop> I am x86_64
[18:19] <fullstop> Also 10.04 LTS
[18:20] <altice> I believe mine are xenon cores, i686
[18:20] <altice> what version of tacacs did you use?
[18:20] <fullstop> The same version I sent in the link above..
[18:20] <fullstop> tac_plus version F<IP_ADDRESS>
[18:21] <fullstop> You are not trying to make -j 4 or anything, right?
[18:21] <altice> you sent a link?
[18:21] <altice> or you mean my link?
[18:21] <fullstop> no, I sent a link to the tac_plus source
[18:21] <fullstop> that's the one I am using
[18:21] <altice> ohhh, psht gah, completely missed that
[18:21] <altice> yea I'm using the same ver
[18:22] <fullstop> can you make clean and pastebin the output from a fresh make?
[18:22] <altice> from the same source (shrubbery)
[18:22] <altice> sure thing
[18:22] <fullstop> I went through the trouble of setting up tac_plus purely so I could restrict access to the ASA for the rancid process.
[18:23] <fullstop> Other than that, I just have to trust myself with the ASA.  ;-)
[18:23] <altice> lol, to be honest with you fullstop
[18:23] <altice> I have no idea what you just said ;)
[18:23] <altice> I know tacacs+ purly from a AAA standpoint and cisco gear
[18:24] <altice> authorization, access, accounting
[18:24] <altice> (authentication)
[18:24] <fullstop> I wanted to set up RANCID (also from shrubbery), but I wanted to restrict the rights of the RANCID user.
[18:24] <altice> never read into that, what is it used for?
[18:25] <fullstop> rancid periodically pulls the running configuration of network equipment and puts them in version control.
[18:25] <altice> mine is all based on access to network equipment. Who can log in, what commands they can use, and keeping a record of what config changes were done
[18:25] <fullstop> It lets you keep track of changes
[18:25] <altice> o0o0o really?
[18:25] <altice> :) I might want to look into that
[18:26] <fullstop> Yes, that's what I use tac_plus for as well, but just to restrict access for the process that gets the configurations.
[18:26] <altice> I'll write that down, RANCID might be useful in the future.
[18:26] <fullstop> There's a fork of RANCID which will let you use git as your backend if that's your thing.
[18:26] <altice> my punch list is starting to get huge.......
[18:26] <fullstop> http://www.shrubbery.net/rancid/
[18:26] <altice> honestly, I don't do enough development work to be sold on using git
[18:33] <altice> fullstop: okay I have the make file pasted, the whole ong
[18:33] <altice> one(
[18:33] <altice> fullstop : http://pastebin.com/DRFmEbjt
[18:34] <fullstop> altice: try just "make" instead of "make tac_plus"
[18:36] <fullstop> df
[18:36] <fullstop> whoops
[18:37] <altice> okay
[18:38] <altice> ;) no way it was really that simple
[18:38] <altice> hahaha
[18:38] <fullstop> hahaha
[18:38] <altice> wtf mate
[18:38] <fullstop> cheers
[18:41] <altice> thanks for your help
[18:41] <fullstop> no problem.  Have fun!
[18:41] <altice> I'm still going to push to have this included in the repos
[18:42] <fullstop> It wouldn't be a bad idea.  It took me a while to find the source.
[18:45] <tiphares> can rsync only copy stuff from a to b, and not move stuff?
[18:45] <CrazyGir> it "syncronizes"
[18:45] <genii-around> If you're moving stuff thats not really synchronising....
[18:46] <altice> tiphares: have you read through the man pages and examples for rsync?
[18:46] <altice> it should explain it
[18:46] <tiphares> man pages for rsync are massive, so i thought i'd ask
[18:46] <altice> it's kind of like updating backups of files, you only care about recent stuff
[18:46] <altice> sure sure
[18:46] <tiphares> what's the point of this channel if people can't ask about stuff
[18:46] <altice> hey hey, don't get offended
[18:47] <altice> just wanted to mention that the resource was available
[18:47] <tiphares> i'm not, just sayin :>
[18:47] <tiphares> i found the mv tool insufficient
[18:47] <tiphares> so looking for alternatives
[18:47] <CrazyGir> tiphares: I generally start with questions, get them answered in the manpages, get new questions from reading the manpage, then experiment and ask for hlep
[18:48] <CrazyGir> tiphares: what are you doing that mv is not sufficient?
[18:48] <tiphares> i'd like the option to exclude stuff from moving
[18:48] <tiphares> couldnt' figure out how to do that with mv
[18:49] <CrazyGir> I am trying to forward several ports on a VM server to specific VMs (running ubuntu 10.4). I found some IPTables notes and came up with the following, but ufw seems to fail when I put this in before.rules and restart ufw: -A PREROUTING -i br0 -p tcp --dport 9000 -j DNAT --to-destination <IP_ADDRESS>
[18:49] <CrazyGir> tiphares: this is unix, you combine tools
[18:49] <CrazyGir> so use find or something (to create the list you want) and then run through xargs with mv
[18:49] <altice> or write a script to do your dirty work
[18:49] <CrazyGir> OR, create a list of files in txt, and cat this to xargs
[18:49] <altice> true
[18:50] <altice> you can use grep to filter out things you want
[18:50] <CrazyGir> eg, you can do all sorts of things here :)
[18:50] <altice> also true
[18:50] <CrazyGir> small utilities to do specific things, combined in the ways that you need
[18:50] <altice> power of unix tools
[18:50] <CrazyGir> amen
[18:50] <tiphares> yeah i'm aware of that i can make this happen with scripts
[18:51] <CrazyGir> you don't need scripts
[18:51] <tiphares> but i'm sorta new to nix, and wondered if there's pre defined tools to do this
[18:51] <CrazyGir> cat list.txt | xargs mv ...
[18:51] <CrazyGir> done.
[18:51] <CrazyGir> create that list however you need to
[18:52] <altice> yep, listen to Gir, that's a good method to approach this
[18:52] <tiphares> hm
[18:53] <tiphares> i'm confused :(
[18:53] <altice> make a list of the file names your trying to move
[18:53] <tiphares> manually?
[18:53] <altice> hehe yes that or do it a more elegant way
[18:53] <tiphares> may i ask for some input there
[18:53] <altice> okay so.......first things first where are the files located
[18:53] <altice> all in one folder?
[18:54] <tiphares> yeah
[18:54] <altice> k good
[18:54] <altice> we can generate a list
[18:54] <altice> easier since it's in one folder
[18:54] <altice> are there similar strings of letters that you want to move and some you dont?
[18:55] <tiphares> yeah
[18:55] <altice> i.e.........all the files that begin with 'erg'?
[18:55] <altice> give me an example?
[18:55] <tiphares> T*R* is the stuff i want to move into another folder
[18:56] <altice> so begin with T<anything>R<anything> ?
[18:56] <tiphares> or actually, i want to move anything but T*s.A*
[18:56] <tiphares> but yeah, can start off simple
[18:56] <altice> okay so are you using regular expressions? do you understand those character combinations?
[18:56] <tiphares> not using regex, just using * for wildcard
[18:57] <tiphares> i'm awfully worthless at regex
[18:57] <altice> if you do an "ls T*R*" does it give you what you want?
[18:57] <altice> regex is powerful, ESPECIALLY for what your trying to do now
[18:57] <altice> I'd highly suggest reading up on it, even though there is a steep learning curve at first
[18:57] <tiphares> yeah i know, i have it on my bucket list:P
[18:58] <tiphares> i am familiar with it
[18:58] <altice> haha, should be a little more important than a "kick the bucket" list
[18:58] <tiphares> heh
[18:59] <altice> so basically you can use "ls" and wildcards
[18:59] <tiphares> ls -lad T*R*
[18:59] <tiphares> gets me the dirs
[18:59] <tiphares> i want
[18:59] <altice> perfect
[18:59] <altice> now pipe that into a txt file
[19:00] <tiphares> can i do all of that with a command
[19:00] <altice> ls -lad T*R* > output.txt
[19:00] <altice> yep
[19:00] <alamar> what is it you want to achieve?
[19:00] <altice> now you have a new file named output.txt right?
[19:00] <altice> everything in there you need?
[19:00] <tiphares> cool that worked out nicely altice
[19:00] <altice> excellent
[19:01] <altice> now use Gir's method
[19:01] <altice> cat list.txt | xargs mv
[19:01] <tiphares> linux 101 for dummies atm alamar :P
[19:01] <tiphares> xargs = ?
[19:01] <altice> and then mv where you want
[19:02] <altice> http://www.cyberciti.biz/faq/linux-unix-bsd-xargs-construct-argument-lists-utility/
[19:02] <alamar> you could just use find for folder(-type d) and -exec mv the {} to the destination
[19:02] <altice> I'm not familiar with that, alamar, go ahead and walk through that
[19:03] <alamar> find searchpath/ -type d -iname *matchme* -exec mv "{}" destination/ \;
[19:03] <alamar> or -name if it shall be case sensitive
[19:04] <tiphares> so many things in there i have absolutely no clue what is
[19:04] <tiphares> :D
[19:04] <alamar> or -regex if you want to use regular expressions for matching
[19:04] <alamar> well OR you just stick to what you've just been told by altice ;)
[19:05] <tiphares> i'll write your version down in my notes:p
[19:24] <CrazyGir> I am trying to forward several ports on a VM server to specific VMs (running ubuntu 10.4). I found some IPTables notes and came up with the following, but ufw seems to fail when I put this in before.rules and restart ufw: -A PREROUTING -i br0 -p tcp --dport 9000 -j DNAT --to-destination <IP_ADDRESS>
[19:31] <jdstrand> CrazyGir: can you paste your before.rules file?
[19:32] <alamar> what is this rule supposed to do?
[19:37] <CrazyGir> sorry, got kicked
[19:37] <CrazyGir> jdstrand: it's got a lot more in it than I understand
[19:37] <alamar> then I'll ask again. what is this rule supposed to do?
[19:38] <CrazyGir> alamar: all I want to do is forward tcp to port X on the br0 interface to a specific IP
[19:38] <alamar> I do not see any destination nor that you are using the nat table
[19:39] <CrazyGir> isn't that the DNAT --to-destination <IP> part?
[19:39] <CrazyGir> I could also rephrase my question..
[19:40] <alamar> oh sorry I didn't see it when scrolling in my backlog
[19:40] <CrazyGir> what should my iptables entry look like to ensure port X does to a specific IP?
[19:40] <alamar> but -t nat is missing
[19:40] <CrazyGir> is what I have correct
[19:40] <CrazyGir> ok, so I should add -t nat
[19:41] <CrazyGir> anything else?
[19:41] <alamar> iptables -t nat -A PREROUTING -i br0 -p tcp --dport 9000 -j DNAT --to-destination <IP_ADDRESS>
[19:41] <CrazyGir> I'm adding this to before.rules,  from what I have read this is the place to do so?
[19:42] <alamar> <IP_ADDRESS>:9000
[19:42] <alamar> if you want to work with ufw it probably is
[19:43] <alamar> (but I don't know what format/syntax/whatever works in there)
[19:43] <alamar> as I said... layering something above iptables shoots yourself in the foot when you want something more than "port open/closed" ;p
[19:45] <kirkland> jamespage: ping
[19:45] <jamespage> kirkland: pong
[19:45] <kirkland> jamespage: just wanted to touch base with you one more time on hadoop/cdh
[19:46] <jamespage> kirkland: sure
[19:46] <kirkland> jamespage: I was asked earlier today if we should target our hadoop packages for Canonical Partner instead of the Ubuntu Archive
[19:46] <kirkland> jamespage: I didn't know if you had any plans to improve upon the latest state of packages from iamfuzz and negronjl, and try to push them to Universe ...?
[19:46] <kirkland> jamespage: if not, we're going to be religated to pushing them to Partner
[19:47] <kirkland> jamespage: I'd like to think that Ubuntu users would benefit from them in Universe
[19:47] <kirkland> jamespage: but at this point, we'd need a Platform champion to help push that
[19:49] <jamespage> kirkland: so I want to pickup hadoop/cdh longer term but we need to sort out how we work with upstream first
[19:49] <jamespage> kirkland: so I think that for this release partner is really the only realistic choice
[19:49] <kirkland> jamespage: is that attainable for Oneiric?
[19:49] <kirkland> jamespage: okay
[19:49] <kirkland> jamespage: that gives me something I can work against, schedule wise
[19:50] <kirkland> jamespage: we'll target Partner and/or a PPA for Oneiric
[19:50] <jamespage> kirkland: I think that is the only choice ATM
[19:51] <jamespage> kirkland: are you going to go with the packages your team has produced or use the upstream distribution packages?
[19:51] <jamespage> from CDH
[19:52] <kirkland> jamespage: we haven't made a firm decision yet, but I think we were leaning toward our packaging
[19:52] <jdstrand> alamar: fyi, ufw uses plain iptables-restore syntax in its rules files
[19:52] <kirkland> jamespage: do you have an opinion or information to add?
[19:52] <alamar> jdstrand: from what it looks like there are also different things going on in the files
[19:53] <jamespage> kirkland: I think working with the upstream CDH packages will give you a smoother line for support/bugs etc...
[19:53] <jamespage> kirkland: but I have not looked at that packaging
[19:53] <kirkland> jamespage: interesting, okay
[19:53] <jdstrand> no. these are just fed into iptables-restore. granted, various chains are setup, etc, but the rules files are no more than straight iptables
[19:53] <kirkland> jamespage: yeah, i was looking for specific information why one might be better than another
[19:56] <jamespage> kirkland: well you get better support for older releases but nothing newer than maverick ATM
[19:56] <jamespage> kirkland: so that might actually answer your question
[19:56] <kirkland> jamespage: ah, yeah
[19:57] <jamespage> kirkland: that said they do publish a full suite of hadoop plus friends - http://tinyurl.com/3mkyqtw
[20:18] <tiphares> so, can someone tell me where i screwed up the syntax here; cat filename | xargs mv TARGET
[20:23] <alamar> tiphares: try mv -t TARGET
[20:23] <alamar> xargs appends the input to the command string and mv, without specifying it further, treats the last input word as destination
[20:25] <tiphares> didn't change much
[20:27] <alamar> tiphares: what's the exact problem?
[20:28] <tiphares> still working on my previous problem
[20:28] <tiphares> moving certain stuff into a specific folder
[20:28] <alamar> I meant with the cat X | xargs mv -t Y
[20:28] <tiphares> right
[20:28] <tiphares> it returns this
[20:28] <tiphares> mv: invalid option -- 'r'
[20:28] <tiphares> Try `mv --help' for more information.
[20:30] <alamar> tiphares: try cat foo | xargs mv -t TARGETDIR --
[20:30] <Guest62894> when adding the iptables line to before.rules, and then stopping/starting ufw, it freaks with: ERROR: problem running ufw-init
[20:30] <jdstrand> Guest62894: can you use paste.ubuntu.com and paste your before.rules file?
[20:30] <Guest62894> bah. I should be CrazyGir..
[20:31] <alamar> Guest62894: do logs tell you anything more specific? also it wouild be recommendable to paste your before.rules file somewhere
[20:31] <tiphares> that worked alamar
[20:31] <tiphares> :S
[20:31] <tiphares> that seems confusingly random
[20:31] <alamar> tiphares: pardon me?
[20:31] <tiphares> adding '--' worked
[20:32] <Guest62894> there we go :)
[20:32] <Guest62894> bah!
[20:32] <alamar> tiphares: "--" prevents anything afterwards from being interpreted as commandline argumeents
[20:32] <alamar> this works with every command
[20:32] <alamar> more or less
[20:32] <alamar> let's say most commands
[20:32] <tiphares> oh
[20:33] <alamar> probably with all commands using getops*
[20:33] <CrazyGir> there we go :)
[20:33] <tiphares> i learn something new everytime im here :P
[20:33] <tiphares> awesome
[20:33] <Pici> more, less, and most all support that.
[20:33] <Pici> <.<
[20:33] <CrazyGir> jdstrand: my before.rules (written by someone else) is quite long, and works fine by itself
[20:34] <jdstrand> CrazyGir: well, I need to see what you added and where to see what the problem is
[20:34] <CrazyGir> when I add this line, it fails: -A PREROUTING -i br0 -p tcp -t nat --dport 9000 -j DNAT --to-destination <IP_ADDRESS>:9000
[20:34] <jdstrand> CrazyGir: a diff of before and after is likely good enough
[20:34] <CrazyGir> I added it at the end
[20:34] <CrazyGir> before COMMIT
[20:35] <alamar> Pici: well as I said most do. but it's probably related to the use of the getopt-family of functions for commandline parsing
[20:35] <jdstrand> CrazyGir: that is your problem. the before.rules only has the *filter table
[20:35] <Pici> alamar: I know, was just playing with the words you chose to use to describe that.
[20:36] <CrazyGir> jdstrand: ah, so I'm a bit confused
[20:36] <jdstrand> CrazyGir: see 'man ufw-framework', the 'Port Redirections' section
[20:36] <alamar> CrazyGir: as I understand there are different sections like *nat and *filter
[20:36] <CrazyGir> where should I be putting port redirections?
[20:36] <alamar> within the *nat section
[20:36] <CrazyGir> okies
[20:36] <CrazyGir> okies
[20:37] <alamar> jdstrand: this is by the way what I meant with other stuff in the file ;)
[20:37] <jdstrand> alamar: it is still all iptables-restore
[20:37] <jdstrand> you can't mix and match rules for different tables
[20:37] <alamar> CrazyGir: when you put it in the nat section you will probably not need to refer to the nat table
[20:37] <CrazyGir> and this is why I love pf
[20:37] <jdstrand> you need a *filter table, and a *nat table and the right rules need to go in the right places
[20:37] <alamar> CrazyGir: you could use iptables directly
[20:38] <CrazyGir> it's iptables that is nuts :)
[20:38] <alamar> no it isn't
[20:38] <CrazyGir> alamar: the 'nat seciton' you are referring to.. is this in before.rules?
[20:39] <jdstrand> CrazyGir: read the ufw-framework man page like I said :) it has what you need, I promise :)
[20:39] <jdstrand> EXAMPLES, then Port Redirections
[20:39] <CrazyGir> jdstrand: yea, I'm ther
[20:39] <CrazyGir> I see there are 2 things i need for this to work
[20:40] <CrazyGir> not just the one line I had
[20:40]  * jdstrand nods
[20:40] <CrazyGir> :)
[20:40] <jdstrand> well, this is an example
[20:40] <jdstrand> it is assuming the firewall is mostly closed, which is why the filter table part is there (ie, as documented, it will work with ufw)
[20:41] <jdstrand> anyhoo, gotta run
[20:41] <CrazyGir> not sure I follw you there, but thanks
[20:41] <CrazyGir> I would call this "mostly closed"
[20:41] <alamar> before.rules could be added to man 5
[20:43] <alamar> jdstrand: TIL about iptables-save & iptables-restore; thank you
[20:44] <hallyn> kirkland: ooh, qemu v0.15.0-rc0 was tagged
[20:45] <hallyn> updating my main virt laptop to onieric today, then i'll try a sync and see hwo it goes
[20:46] <CrazyGir> when starting ufw, and it fails, is there a way to get a specific line number that it errored on?
[20:47] <CrazyGir> ERROR: problem running ufw-init <--- not helpful
[20:47] <jdstrand> unfortunately, no
[20:47] <CrazyGir> seriously?
[20:47] <jdstrand> you can run ufw-init manually
[20:47] <CrazyGir> ufw disable; ufw-init ?
[20:47] <jdstrand> /lib/ufw/ufw-init reload
[20:48] <CrazyGir> kks
[20:48] <jdstrand> CrazyGir: yes, disable fine. then you will want to update /etc/ufw/ufw.conf manually to 'enable' it, then use ufw-init manually
[20:49] <hallyn> doh', tehre i ago again, confusing the trees
[20:49] <hallyn> 0.14.1 it is
[20:49] <alamar> ah so now I understand why you did not like me badmouthing ufw :)
[20:49] <jdstrand> hallyn: fyi, I uploaded a new qemu-kvm today
[20:50] <CrazyGir> jdstrand: what do you mean by this? then you will want to update /etc/ufw/ufw.conf manually to 'enable' it
[20:50] <hallyn> i saw the push.
[20:50] <jdstrand> hallyn: not sure if 0.14.1 has the fixes or not...
[20:50] <hallyn> yeah, not sure, but i'll be checking of course
[20:50] <jdstrand> CrazyGir: ufw-init will short circuit if the firewall is disabled
[20:50] <hallyn> still hoping 0.15.0 comes out before freeze :)
[20:51] <jdstrand> CrazyGir: since 'ufw enable' is not working for you, you need to stop the short circuit. that is done by setting ENABLED=yes in /etc/ufw/ufw.conf
[20:55] <CrazyGir> ah, yes, I have that
[20:57] <CrazyGir> hrm, ufw-init doesn't like the *nat I included per the manpage
[20:57] <CrazyGir> before COMMIT
[20:58] <alamar> you probably really should paste it somewhere
[20:58] <RoyK> !pastebin
[20:58] <jdstrand> CrazyGir: the *nat is after COMMIT
[20:58] <jdstrand> CrazyGir: see, each table starts with:
[20:58] <jdstrand> *<table name>
[20:58] <jdstrand> rules for the table
[20:58] <jdstrand> COMMIT
[20:59] <jdstrand> so, you need:
[20:59] <jdstrand> *filter
[20:59] <jdstrand> your regular rules
[20:59] <jdstrand> COMMIT
[20:59] <jdstrand> *nat
[20:59] <CrazyGir> ah
[20:59] <CrazyGir> ok
[20:59] <jdstrand> your new rules from ufw-framwork for PREOUTING
[20:59] <jdstrand> COMMIT
[21:00] <RoyK> does ufw have NAT in recent versions of ubuntu?
[21:00] <jdstrand> RoyK: not via the cli, no
[21:00] <RoyK> imho the lack of nat in ufw is a major drawback
[21:00] <hallyn> only via the gui? :)
[21:00] <CrazyGir> hah
[21:00] <jdstrand> hallyn: hah, uuh, no :)
[21:01] <RoyK> adding nat support to ufw must be a rather tough task - I guess an hour or three for a decent programmer :P
[21:01] <kirkland> hallyn: neat
[21:02] <kirkland> hallyn: you merging?
[21:02] <jdstrand> RoyK: the feature is planned, and I hear what you are saying. it is something I would like myself. that said, the primary audience is for bastion hosts/desktops/server, not for routing firewalls
[21:02] <hallyn> kirkland: i'll take 0.14.1 tomorrow at least
[21:02] <jdstrand> RoyK: patches welcome and all that :)
[21:02] <RoyK> jdstrand: still, quite a lot of people would like to use a server for NATing
[21:02] <jdstrand> yep
[21:02] <RoyK> jdstrand: I don't have that need atm, so I don't think I'll spend much time on it
[21:03] <jdstrand> :)
[21:03] <CrazyGir> jdstrand: this is going better, but iptables is not happy with the following, is there a way to get more specifics on what it doesn't like? -A PREROUTING -p tcp -i br0 -t nat --dport 9000 -j DNAT --to-destination <IP_ADDRESS>:9000
[21:03] <alamar> CrazyGir: the "-t nat" is not necessary in this setup
[21:03] <jdstrand> CrazyGir: get rid of the '-t nat'
[21:03] <CrazyGir> didn't you tell me to put it in there alamar ?
[21:03] <CrazyGir> :P
[21:03] <alamar> CrazyGir: for iptables yes
[21:03] <jdstrand> CrazyGir: you already specified the table via '*nat'
[21:03] <alamar> I said iptables ....
[21:03] <CrazyGir> hah
[21:03] <CrazyGir> :)
[21:04] <CrazyGir> ok, much better
[21:04] <CrazyGir> jdstrand: that makes more sense _now_ ;)
[21:04] <CrazyGir> slowly piecing together my understanding with iptables here
[21:04] <CrazyGir> I appreciate the patience
[21:04] <jdstrand> CrazyGir: if you are going to be fiddling a lot with before.rules, I recommend reading the iptables man page
[21:04] <CrazyGir> I'm hoping to limit it to this one set of port forwards
[21:05]  * jdstrand nods
[21:05] <CrazyGir> these servers are all setup (and actually someone else's responsibility)
[21:05] <alamar> so stop messing with his fw setup1!!!! ;)
[21:05] <CrazyGir> I'm responsible for the VMs running on these servers
[21:06] <CrazyGir> but I'm responsible for the VMs, and he's floating somewhere in some water somewhere in greece
[21:07] <alamar> CrazyGir: I wasn't serious ;)
[21:07] <kirkland> hallyn: FYI, I just turned off my email subscription to ~ubuntu-virt's monitored packages (kvm, libvirt, and friends)
[21:07] <kirkland> hallyn: please explicitly subscribe me to any bug that you'd like my attention to
[21:07] <kirkland> hallyn: it's been ages since I've needed to do anything on any of those bugs beyond the excellent work that you, mdeslaur, and jdstrand already do
[21:08] <kirkland> hallyn: so I turned off that swath of bugmail (so I can focus on other swaths of bugmail) :-)
[21:08] <kirkland> Daviey: ^
[21:14] <Daviey> kirkland: Yeah, i think we have it covered in ~ubuntu-server, thanks for letting us know.
[21:14] <kirkland> Daviey: np;  never hesitate to subscribe me, if I can help
[21:16]  * Daviey subscribes kirkland to all bugs :)
[21:16]  * kirkland runs for cover
[21:24] <CrazyGir> hah
[22:05] <hallyn> kirkland: thx for the heads-up.  (just left the faraday cage^W^Wporch for a minute :)
[22:29] <kirkland> hallyn: heh, cool
[22:30] <kirkland> hallyn: i think my airstream is a faraday cage
[22:38] <martyn> kirkland : Close to it .. Aluminum isn't known for being radio-transparent
[22:38] <martyn> kirkland: What's got you in an airstream?
[22:39] <kirkland> martyn: fun thing to have sometimes
[22:39] <martyn> Well, sure :)  I was wondering if you were travelling...
[22:40] <martyn> I've gone to various Burning Man related events in an airstream ... it was 60's retro fun :)
[22:40] <kirkland> martyn: ah, no, not at the moment
[22:40] <kirkland> martyn: nice;  mine's a 1968
[22:40] <martyn> Hoo .. that's nice
[22:41] <martyn> Hard to keep the aluminum skins in perfect condition.. but they are wonderful trailers
[22:41] <martyn> Got a kitchen in yours?
[22:41] <martyn> (some had 'em, many didn't .. beautiful mini kitchenettes though)
[22:41] <kirkland> martyn: yup
[22:43] <kirkland> martyn: it's pretty nice
[23:51] <hallyn> oh ffs, i go to all the trouble to instal lwindows so i can install firmware update, and the update fails to install
[23:51]  * hallyn hates firmware junk


[02:50] <ubotu> New bug: #127650 in xfs (universe) "Please sync xfs 1:1.0.4-2 from Debian (unstable) to Gutsy (universe)" [Undecided,New]  https://launchpad.net/bugs/127650
[11:22] <ubotu> New bug: #125053 in xorg (main) "I cannot see the mouse." [Undecided,New]  https://launchpad.net/bugs/125053
[03:58] <ubotu> New bug: #127729 in xorg (main) "xserver crushing several times a day" [Undecided,New]  https://launchpad.net/bugs/127729
[03:59] <ubotu> New bug: #127728 in xorg (main) "Random black screen" [Undecided,New]  https://launchpad.net/bugs/127728
[04:20] <ubotu> New bug: #126570 in libxcursor (main) "gnome-system-log crashed with SIGSEGV" [Undecided,New]  https://launchpad.net/bugs/126570
[11:15] <ubotu> New bug: #127822 in libxinerama (main) "Wine (and GLX) apps crash with Xinerama" [Undecided,New]  https://launchpad.net/bugs/127822