[13:21] <benc> I'm writing an upstart script for an erlang server
[13:21] <benc> the erlang server has a script that can start/stop/ping it
[13:22] <benc> how do I combine it with the upstart script?
[13:22] <benc> when using "status myserver" I guess I'm asking upstart what it thinks but this functionality is already implemented in the server itself
[13:26] <Keybuk> Upstart is designed with the idea that services don't just fall over by themselves and stay running
[13:26] <Keybuk> so you should find that your "status" script is unnecessary
[13:27] <Keybuk> gee, hang around for the answer, why don't you
[13:52] <benc> what is the upstart version on ubuntu 10.10?
[13:57] <Keybuk> benc: 0.6.7-1 currently
[13:57] <benc> thanks
[13:58] <Keybuk> benc: http://launchpad.net/ubuntu/+source/upstart is the place to check that kind of thing out
[14:01] <benc> ok
[14:02] <Keybuk> benc: before you vanished earlier, I was going to suggest the following
[14:02] <Keybuk>   exec command-to-start-erlang-server
[14:02] <Keybuk>   pre-stop exec command-to-stop-erlang-server
[14:03] <Keybuk> that may or may not work for you
[14:03] <Keybuk> if it doesn't, you may be able to do
[14:03] <Keybuk>   pre-start command-to-start-erlang-server
[14:03] <Keybuk>   post-stop command-to-stop-erlang-server
[14:03] <Keybuk> (with no exec or script)
[14:03] <Keybuk> err pre-start exec, post-stop exec
[14:03] <Keybuk> but no exec/script on their own
[14:03] <benc> your first suggestion seems right
[14:03] <benc> what about status?
[14:04] <benc> which is ping in my server script
[14:04] <Keybuk> there isn't support for overriding that in 0.6
[14:04] <Keybuk> because upstart assumes that if the pid is alive, then the service is running
[14:04] <benc> and logs?
[14:04] <benc> maybe if the pid is alive the erlang server is running. not sure
[14:05] <Keybuk> there's a conversation on ubuntu-devel about extending the "service" command to run custom status scripts
[14:05] <Keybuk> that might interest you
[14:07] <benc> on ubuntu-devel in irc?
[14:07] <JanC> the mailing list
[14:08] <benc> thanks. searching
[16:11] <pmatulis> is it possible to ensure a network-required upstart job (upon shutdown) will always have the network resources available?
[21:24] <soren> What would be a common reason why "stop foo" would hang?
[21:27] <JanC> upstart looking at the wrong PID ?
[21:29] <soren> Possibly.
[21:29] <soren> I guess this thing may not actually be daemonising properly.
[21:31] <soren> Ah...
[21:31] <soren> Right, of course.
[21:32]  * soren plays around a bit
[21:44] <soren> Oh, I see what's going on.
[21:44] <soren> Darn it.
[21:44] <soren> I need a "expect <forks three times>".
[21:45] <JanC> soren: good luck with that ;)
[21:45] <ion> You need Upstart 0.10 :-)
[22:23] <SpamapS> soren: guessing you have a script + an oldschool daemon (forks twice) ?


[03:42] <_andy_> Hi there! I'm having issues with my AD DC showing up in the network.
[03:42] <_andy_> I am able to resolve NetBIOS to an IP address and vice versa, but when searching for computers over the network, the domain controller does not show up.
[03:50] <_andy_> Hi there! I'm having issues with my active directory domain controller showing up on the list of NetBIOS computer on the network.
[06:00] <lordievader> Good morning.
[08:27] <adsc> does ubuntu server automatically use kexec/ksplice technology or do we have to restart after a kernel update?
[08:27] <lordievader> For the time being you need to restart after a kernel update.
[08:28] <lordievader> Perhaps with Wily or 16.04 you no longer need to.
[09:04] <RoyK> adsc: http://www.zdnet.com/article/no-reboot-patching-comes-to-linux-4-0/
[09:07] <jpds> adsc: You don't HAVE to restart for a kernel upgrade
[09:11] <RoyK> jpds: well, unless you have hotpatching, you'll still be running the same old kernel code :P
[09:12] <jpds> RoyK: Well, if the kernel upgrade in question doesn't touch any modules you use...
[09:13] <adsc> ok, thx...I was just confused because a colleague claimed that after a kernel patch he ran uname -a and it showed the new kernel already
[09:14] <adsc> which was surprising me, because I set up the system and haven't installed any ksplice or similar technology
[09:14] <adsc> but I guess he was just wrong, then
[09:15] <jpds> ksplice wouldn't even change what uname -a shows
[09:16] <jpds> adsc: You just see a load of "ksplice_*" entries in lsmod
[09:16] <mufloirc> hi guys
[09:18] <mufloirc> I'm having an issue with the maas region controller in Ubuntu 14.04 (maas-region-controller 1.8.0+bzr4001). Basically I'm trying to import the boot resouces with this command "sudo maas e4 boot-resources import" but it fails.
[09:19] <jpds> mufloirc: Tried importing from the web UI?
[09:19] <mufloirc> no, with the cli
[09:19] <jpds> mufloirc: Tried importing from the web UI?
[09:20] <mufloirc> looke like the the signature is not good
[09:20] <mufloirc> "gpg: Signature made Tue Sep  1 02:46:44 2015 CEST using RSA key ID 476CF100\ngpg: BAD signature from "Ubuntu Cloud Image Builder"
[09:21] <ivoks> mufloirc: using proxy?
[09:21] <mufloirc> no, I'm not using proxy
[09:22] <ivoks> Signature made Tue Sep  1
[09:22] <ivoks> sounds like today :0
[09:22] <RoyK> adsc: should work with linux 4.x
[09:25] <adsc> good to know, thanks
[09:26] <jpds> mufloirc: Yeah, apparently that broke today, they're working on it
[09:27] <mufloirc> thanks jpds
[10:15] <rbasak> utlemming: could you take a look at bug 1489675 please?
[10:41] <jamespage> morning smb - hows dpdk looking?
[10:41] <smb> jamespage, lonely
[10:42] <smb> jamespage, I filed bug 1487538 for ffe but I am not sure I have done the right steps to get MOTUs (or whomever) take notice
[10:54] <jamespage> smb, does not need a motu - either rbasak or myself can sponsor that
[10:55] <rbasak> jamespage: well, we're both motus :)
[10:55] <smb> jamespage, just that rbasak mentioned it needs probably acks before sponsoring
[10:56] <rbasak> smb, jamespage: my only concern really is that we don't create a future ABI nightmare, so I wanted to get ABI agreement from upstream before uploading.
[10:56] <rbasak> smb: it needs an FFe ack from a release team member before upload
[10:56] <rbasak> Sorry I've been slow with getting the upstream communication sorted. My todo list is still too long :(
[10:57] <rbasak> I'm catching up with maintenance and sponsoring today, then have to get some juju sponsorship done. But we can sync when arges is up maybe.
[10:57] <jamespage> rbasak, smb: a sync sounds like a good idea
[10:59] <smb> jamespage, rbasak Yeah. Not sure timewise. Tuesdays are meetingful.
[10:59] <smb> But maybe we can squeeze something in after either your or our irc meeting
[11:17] <jamespage> rbasak, fwiw I'm also participating in a thread on the ovs ML re DPDK which is pertinent to this conversation.
[11:23] <rbasak> jamespage: thanks. We'll sync as soon as we can.
[12:23] <smb> rbasak, jamespage, would you have time in about 1.25hrs? (for the sync)
[12:29] <rbasak> smb, jamespage, arges: 1400 UTC? Yes for me. I've sent an invite as a starting point - we can move.
[12:30] <jamespage> rbasak, +1
[12:30] <rbasak> smb: on a separate note, who looks after HWE related DKMS issues? I triaged https://bugs.launchpad.net/ubuntu/+source/iscsitarget/+bug/1483415
[12:31] <smb> rbasak, jamespage, arges +1 (for meeting)
[12:31] <smb> rbasak, I might. It a bit of a shared duty
[12:31] <jamespage> rbasak, urgh - could we bump it 30 mins
[12:33] <smb> if it is shortened to 30mins as well...
[12:33] <rbasak> smb: do you know of any testing we do for HWE+DKMS? It seems sub-optimal to me that we have to be reactive on this.
[12:34] <rbasak> jamespage: I have no objection but looks like +30 minutes would clash for smb and arges
[12:34] <smb> rbasak, there is testing usually. think something broke for a bit recently
[12:36] <arges> +30m is fine too. smb we can move our mtg?
[12:38] <smb> arges, maybe a bit. thought there is other things following up. But potentially we don't need the full hour and can dynamically start
[12:40] <rbasak> smb, jamespage, arges: OK, moved.
[12:50] <smb> rbasak, So we checked and that should be fixed in the current update of the hwe kernel (3.19.0-26)
[12:57] <rbasak> smb: I'm sorry, it isn't hwe at all. He's using Wily.
[12:57] <rbasak> Err
[12:57]  * rbasak is very confused
[12:57] <smb> rbasak, in the bug report its 3.19
[12:57] <smb> thats not wily
[12:57] <rbasak> I think I'm looking at the wrong bug
[12:58] <rbasak> Sorry, triaging too many bugs at once
[12:58] <rbasak> smb: you're right. Thanks for the comment.
[12:59] <smb> rbasak, no worries. yw. Its unfortunate the kernel on the iso has that flaw... and people tend to not update
[14:32] <smoser> rbasak, have you done any thing other than triage https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1481337
[15:07] <samba35> is there any way to change log level for dmesg
[15:41] <smb> rbasak, OK, let me know how the updated paragraph for dpdk sounds to you
[15:53] <jamespage> coreycb, is troveclient blocking all of the other openstack packages via heat failing its build/dep8 tests?
[15:53] <coreycb> jamespage, yes
[15:54] <coreycb> jamespage, everything should be freed up once the troveclient FFE gets through and we can sync the new version
[15:56] <jamespage> coreycb, as that's such a blocker, I'd be tempted to sync it without the FFe right now
[15:57] <jamespage> coreycb, I just found:
[15:57] <jamespage> http://tarballs.openstack.org/python-troveclient/python-troveclient-master.tar.gz#egg=python-troveclient
[15:57] <jamespage> in the test-requirements of openstack-trove
[15:57] <jamespage> urgh
[15:57] <coreycb> jamespage, yeah.. wasn't sure if I should open a bug on that or what
[15:57] <coreycb> jamespage, fine by me if we can sync it without an ffe
[15:58] <jamespage> coreycb, I was trying to see the heat dependency on it - I'm assuming its not expressed correctly upstream
[16:04] <coreycb> jamespage, I opened a bug for trove's test-requirements.txt
[16:05] <coreycb> jamespage, shall I go ahead and sync troveclient?
[16:05] <jamespage> coreycb, wait a sec
[16:17] <smoser> rbasak, have you done any thing other than triage https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1481337 . wondering if you have thoguht on how hard to push on a fix for that.
[16:18] <rbasak> smoser: no, only triaging the bugs that I'm assigning - not looking deeply into anything.
[16:18] <rbasak> smoser: I'm fine with it if you think it's more effort to SRU than it's worth, which it sounds like it is now that you've looked.
[16:18] <smoser> well, its definitely not "just cherry pick patch"
[16:18] <rbasak> smoser: maybe we can drop the SRU bug task importance to Low and I'll take it off my radar
[16:23] <dork> yikes
[16:27] <jamespage> coreycb, I'll sync it over - you'll get kudos and I'll get any release team flak
[16:28] <coreycb> jamespage, ok thanks very much.  definitely need to move forward on liberty so I think it's worth it.
[16:28] <jamespage> coreycb, if its the fix for a blocking issue, I think we can skip the FFe tbh
[16:28] <coreycb> jamespage, good point
[16:34] <jamespage> coreycb, ok synced - you can probably rebuild heat now
[16:34] <jamespage> well in a bit
[16:34] <jamespage> once its published
[16:34] <coreycb> jamespage, ok will do
[16:34] <jamespage> coreycb, urgh - its stuck in NEW
[16:35] <coreycb> jamespage, oh gosh, because of the epoch?
[16:35] <jamespage> coreycb, no cause of the python3 support
[16:38] <jamespage> coreycb, accepted
[16:39] <coreycb> jamespage, awesome
[16:45] <Kalimero> i want to include my .htaccess to darkstats webui but i dont know where the wbfiles laying. any hints?
[16:50] <smb> rbasak, [repost] OK, let me know how the updated paragraph for dpdk sounds to you
[16:56] <teward> i assume i missed the server meeting.
[17:04] <njbair> where would the relevant logs be for the "waiting for network configuration" startup delay?
[17:05] <teward> njbair: nowhere, my guess is you have an 'auto eth0' or something in there that's holding up network booting, either by DHCP wait, or otherwise
[17:05] <teward> (maybe in the boot logs, but if it's just waiting for configuration by DHCP, etc, it might not be listed)
[17:06] <njbair> both of my interfaces are configured statically
[17:07] <njbair> don't I want the auto eth0 line to bring up the interface automatically?
[17:08] <teward> let it error out then check network information and see which one failed to 'configure' or rise up.  If neither have no config, then i'm not sure how you'll check... (most of mine come up instantly, and they're static configured too)
[18:33] <Wicaeed> LVM/Virtualization question: Is there any difference, from an LVM standpoint, of adding an additional virtual disk to a VM vs. giving expanded capacity to an already existing virtual disk?
[18:34] <Wicaeed> Oh, right, when you add capacity to an existing virtual disk fdisk doesn't see the additional capacity until you reboot. Herp
[18:59] <RoyK> Wicaeed: iirc echo '- - -' > /sys/class/scsi_host/host0/scan
[19:00] <bekks> Ah, good old SCSI reset :)
[19:01] <RoyK> Wicaeed: have used that several times with vmware guests ;)
[19:01] <Wicaeed> orly
[19:23] <patdk-wk> doesn't work on pvscsi :)
[19:23] <patdk-wk> you have to use something else to reset it
[20:22] <Tangurin> Hi! aynone online?
[20:22] <Tangurin> anyone*
[20:23] <bekks> Tangurin: Look at "/names".
[20:24] <Tangurin> Ahh! I ask because this weird server crash just happened to me! I was logged in to the site I am building, in the administration. When I press edit (an AJAX request is sent) the server crash! the Apache2 crash I guess! how is this possible? a site crash apache2?
[20:24] <bekks> Look at the logs.
[20:28] <Tangurin> what log should I look in bekks I am looking in?
[20:28] <bekks> Tangurin: /var/log/
[20:29] <Tangurin> bekks: okey but there is 1000 logs, where should I start :)
[20:30] <Tangurin> bekks: when I press the save button in my administration, all my sites at the server goes offline and I get kicked from SSH! where is the logs for that, where do you think? :)
[20:30] <bekks> Tangurin: As I already told you.
[20:32] <Tangurin> bekks: you told me /var/log/
[20:33] <bekks> I did.
[20:33] <bekks> Whats unclear with that? :)
[20:35] <Tangurin> I don't know where to look :/ bekks , This is so weird, I press save, an AJAX request is sent, and directly the server goes down
[20:36] <bekks> Tangurin: So look at the logs in /var/log/
[20:36] <Tangurin> bekks:  okey I will try find something
[20:37] <bekks> You will find logs in there.
[20:38] <Tangurin> bekks: I find them but I don't know which one to look for or what to find!
[20:39] <bekks> So look at the logs which are younger than your crash. And no need to use exclamation marks all the time.
[21:18] <JaguarDown> Hi all newbie here. Upon trying to restart the services clamav-daemon and clamav-milter, the daemon "clamd" appears to successfully stop but upon attempting to start it tries to change ownership of two files but says operation not permitted. Then clamav-milter stops but can't remove the PID file, tries to chown same two files, and kill the clamav-milter process, and set the GID but can't due to "operation not permitted"
[21:18] <JaguarDown> http://pastebin.com/8qmSMLwM
[21:18] <JaguarDown> Formatting got weird, not sure why. I am sure I have file permissions wrong somewhere but don't know where. I am following a tutorial to set up email and have rechecked everything exactly.
[21:18] <JaguarDown> Just wondering if anybody had any experience with this.
[21:26] <JaguarDown> This is the page of the tutorial I am currently on http://arstechnica.com/business/2014/03/taking-e-mail-back-part-3-fortifying-your-box-against-spammers/2/
[21:28] <poorvikrampandit> Hi, just had a pretty major emergency where my Ubuntu server (running on a VMWare ESX vm with 2048 MB RAM, 1 CPU allocated) became completely unresponsive.
[21:28] <bekks> poorvikrampandit: Add more CPU, more RAM.
[21:28] <tgm4883> +1
[21:28] <poorvikrampandit> Is it bad practice to run a memory & CPU-intensive application (image cropping server) on the same system as Postgresql and web application? I'm worried about Postgres becoming inconsistent (the OS killed the application, but I'm sure postgres could get killed too)
[21:28] <bekks> poorvikrampandit: It is a bad practice to grant less resources than you need.
[21:28] <tgm4883> than you need on a regular basis
[21:29] <tgm4883> But yea, more resources!
[21:29] <bekks> +1
[21:32] <poorvikrampandit> bekks: How do I convince my boss the problem is RAM?
[21:33] <poorvikrampandit> err, resources.
[21:33] <bekks> Repeat the sentence to him.
[21:33] <bekks> Last time we ran database hosts with 2GB RAM was like... 2000.
[21:33] <poorvikrampandit> So does it sound like we are doing too much with too little, and not that our image cropping service is using too many resources?
[21:34] <bekks> You are doing to much with too little.
[21:34] <tgm4883> poorvikrampandit: you could watch the resources and then see what it does when you put load on it
[21:34] <tgm4883> but I'd add more ram and a second CPU
[21:34] <bekks> At least.
[21:34] <tgm4883> sorry, yes. At least that. Depending on how many users you intend to have
[21:35] <poorvikrampandit> You are being very helpful and I admit I am terribly out of my league. How much should I ask for?
[21:35] <tgm4883> I don't build VMs with less than 1 CPU anymore
[21:35] <mybalzitch> how could you have less than 1 cpu in a vm
[21:35] <bekks> poorvikrampandit: Double the resources.
[21:35] <tgm4883> poorvikrampandit: what does your host machine have for resources?
[21:35] <bekks> poorvikrampandit: If the problem persists, analyze resource usage to see wether you need even more RAM or CPU or both.
[21:35] <tgm4883> mybalzitch: heh, I meant 2 CPUs
[21:36] <tgm4883> mybalzitch: although I suppose if you are oversubscribed enough it's like having half a CPU
[21:36] <poorvikrampandit> bekks: That sounds doable if I kick off the other VMs running on the same machine (the host has 6GB and 2 3 GHz cores)
[21:36] <tgm4883> poorvikrampandit: how many users are you planning on?
[21:37] <tgm4883> are we talking 10, or 1000
[21:37] <bekks> poorvikrampandit: Oh geez. Replace the host with current system.
[21:40] <poorvikrampandit> tgm4883: Around 200 users with current hardware budget.
[21:42] <poorvikrampandit> What I'm most worried about is this image cropper causes the kernel to go OOM on Postgres and data becomes inconsistent. Does moving the image cropper to its own VM sound like a way of insuring against this? It would at least guarantee the web app stays on,
[21:43] <bekks> poorvikrampandit: Then get a server with enough RAM.
[21:43] <bekks> poorvikrampandit: And split services into separate VMs.
[21:44] <tgm4883> Yes, separate VMs would help here
[21:48] <poorvikrampandit> Okay, so if you had a psql & redis, a web application (Node), image cropper (Golang), page rasterizer (another troublesome service written in go that thumbnails web pages), plus various other little go services that are more benign, how would you split them into VMs? I'm thinking what I can do is put the data-critical stuff (DBs, web app, services that aren't resource-intensive) on one VM, and the 2 resource-intensive s
[21:49] <bekks> One critical service - one vm. A bunch of logical dependant uncritical services - one vm.
[21:52] <poorvikrampandit> So I should split into two VMs even if I can't get a faster machine?
[21:52] <poorvikrampandit> err, more RAM
[21:53] <bekks> Ermm - no.
[21:53] <bekks> If you cant get more CPU/RAM on your current host, get new hardware.
[21:54] <poorvikrampandit> What if I'm stuck with the hardware I have, but I can kick the other VMs off and then have the full 6 GB to play with?
[21:54] <bekks> You wont get more CPU then, since you have to leave one physical CPU for your host.
[21:54] <bekks> And then - you have one CPU only for your VM.
[21:54] <JaguarDown> Not that anyone was listening but please disregard my last question. The problem lied with not using sudo after the && operator. The tutorial's commands were being carried out in a root shell whereas I was playing it safe and using sudo for everything. Thanks anyway though.
[21:55] <poorvikrampandit> Well, the machine has 2 cores -- we just only have one allocated right now to this service
[21:55] <bekks> poorvikrampandit: two cores - one for the host, one for the vm. no more cores left.
[21:56] <bekks> poorvikrampandit: your hardware just has too less resources.
[21:56] <poorvikrampandit> The VM can't use both cores if I tell VMware to let it use both?
[21:56] <bekks> Do NOT do that.  Write it down the hallway. Print it on all flags inside and outside your office.
[21:57] <poorvikrampandit> Hmm, what do I do then if I can't get better hardware?
[21:57] <bekks> poorvikrampandit: Cry, or change your employer.
[21:58] <bekks> poorvikrampandit: if you cant get more resources, the situation will not change.
[21:58] <sarnold> poorvikrampandit: maybe you can rent better hardware from hetzner or amazon or digital ocean?
[21:58] <sarnold> poorvikrampandit: for some stupid reason managers love renting things at twice the price of buying things.
[21:58] <bekks> sarnold: :D
[21:58] <poorvikrampandit> bekks: I can't ameliorate by going from 2048 to the full 6GB?
[21:59] <poorvikrampandit> Yeah, the hardware is rented.
[21:59] <dasjoe> sarnold: I tried to rent out some storage servers, they preferred to buy them :(
[21:59] <bekks> poorvikrampandit: Using 6GB RAM will leave no RAM for your host. VMware ESXi has a requirement of at least 2GB for the host.
[21:59] <sarnold> dasjoe: ha! :)
[22:00] <sarnold> dasjoe: ohhhh, I understand now. boo. :( sorry to hear it.
[22:00] <poorvikrampandit> Okay, what do I do to keep this thing on until the new server comes in?
[22:00] <dasjoe> sarnold: still a good deal, but renting them out would've created passive income
[22:00] <bekks> poorvikrampandit: Nothing. Hope that your problem will not occur again.
[22:00] <sarnold> dasjoe: hey does that mean you're selling pre-made boxes now? :)
[22:02] <poorvikrampandit> I may be reshuffling the chairs on the titanic's deck, but what if I just move the offending service to one of the other VMs (shutting down what's on that VM)? Then at least ImageCropService can't bring down the web app & Postgresql.
[22:03] <jelly> poorvikrampandit: since you're using ESX as host, you should be able to see some performance graphs in the fat client of the flash web client
[22:03] <jelly> and maybe deduce what the bottleneck was, this time
[22:04] <poorvikrampandit> jelly: Good idea
[22:04] <dasjoe> sarnold: I'm still thinking about doing it at a larger scale, yes. This box was built for a regular client, have some blinkenlights during a scrub: http://i.imgur.com/f7Xl3nf.gifv
[22:05] <tgm4883> bekks: 2GB? I don't think ESXi uses that much by default. I'm not even sure you can force it that high
[22:05] <sarnold> dasjoe: so very coool :)
[22:05] <jelly> tgm4883: heh, that "much"
[22:06] <tgm4883> jelly: that's a significant amount for something running nothing else but a hypervisor
[22:06] <poorvikrampandit> It might be possible to move ImageCropper to EC2 if I can get a static IP.
[22:07] <jelly> tgm4883: it's not much slack space for a meager 72GB RAM host
[22:10] <tgm4883> jelly: It's possible I'm thinking about something else. I thought there was a setting in ESXI to set the memory that could be used by ESXi, and I thought it defaulted to 768MB and maxxed at around 1.5GB
[22:13] <poorvikrampandit> Should I look at moving the CPU-intensive services to EC2 as an option? I doubt I can get any more RAM.
[22:14] <poorvikrampandit> (beyond the physical 6GB)
[22:16] <jelly> you should investigate what really happened, first
[22:17] <tgm4883> poorvikrampandit: I think you should probably look at how much that would cost, vs buying more ram
[22:18] <YamakasY> hi guys
[22:18] <YamakasY> anyone a clue why the mysql.log files keep empty when I enable logging ?
[22:18] <poorvikrampandit> Am I going to need to double my RAM&CPU again when I go from 4 users to 8 users, or is this more to do with a baseline cost to get the databases (postgres, redis) & services up and running?
[22:19] <dasjoe> It might be more cost efficient to "upgrade" this servers resources by buying a newer server instead
[22:19] <tgm4883> poorvikrampandit: you shouldn't need to double at that point. I think you're under the baseline just for running that
[22:22] <prudentmav> how can I have a new /var/www/$user/ created when I run adduser?
[22:22] <prudentmav> I want a public and logs dir in the user dir as well
[22:22] <tgm4883> prudentmav: you need to tell it to create the home directory and where it should be located
[22:22] <sarnold> prudentmav: look for /usr/local/sbin/adduser.local in adduser(8)
[22:29] <poorvikrampandit> tgm4883: How do I know what the baseline is?
[22:32] <sarnold> to a first approximation, add gobs of swap space, load it all, and see how deep into swap you are
[22:33] <sarnold> that's only a first-approxmiation because it ignores the performance improvement you might get if more data fits into the kernel's block, page, and dentry caches -- most of which will be dropped under memory pressure
[22:34] <sarnold> but if you're five gigs deep into swap, adding six gigs more RAM would help. if you ten gigs deep, adding twelve would help. etc.
[22:34] <shauno> is it typical behaviour for LDS to run many copies of the same processes?  in particular, 6 copies of process-usns and 8 copies of process-alerts looks out of place to my eye
[22:36] <sarnold> shauno: that may just be how they are multithreaded; check pstree output, do they all originate from the same parent process? if so, it's likely running as designed. if not, itm ight be worth further investigation.
[22:38] <shauno> well, my attention was drawn to it because landscape keeps alerting it's "exceeding run timeout".  which is why it's getting an odd look
[22:39] <sarnold> sounds like a well-deserved odd look :)
[22:39] <shauno> if I understand pstree correctly, this looks like 8 seperate copies where the 2nd is launched before the first dies?  http://paste.ubuntu.com/12249134/
[22:40] <jelly> or it's just some of the cron jobs never die, and they don't use locking to avoid running in parallel either
[22:41] <jelly> (which in turn points to a possible different underlying issue)
[22:41] <sarnold> yeah, I'm with jelly. please file a bug, make sure to include that output...
[22:42] <jelly> update_security has nothing to do with LDS, does it?
[22:42] <sarnold> those ought to have some locking around them, but there's probably something else broken to make the first one not die.. once the first one doesn't die, all bets are off..
[22:42] <jelly> and yet there are seven of those as well
[22:44] <jelly> if the kernel or filesystem is confused, all kinds of hangs like that can happen.  It's a nice way to find bugs that only happen in extreme conditions, but I'd bet those jobs are just collateral damage
[22:45] <sarnold> check dmesg, there may be IO errors logged htere
[22:47] <shauno> almost nothing in dmesg, my only even since boot (~18 hours) was [30155.163525] perf interrupt took too long (2501 > 2500), lowering kernel.perf_event_max_sample_rate to 50000
[22:53] <poorvikrampandit> Okay, I wasn't able to get any more RAM, and couldn't get rid of all the other VMs, but I did negotiate moving the CPU/RAM intensive processes (ImageCrop.go and PageRasterizer.go) to their own instance, so the data-critical web app & postgres are no longer in danger of OOM.
[22:54] <poorvikrampandit> Production will use two of the VMs now instead of one: 2 GB VM for mission critical, 1.5 GB VM for ImageProxy & PageRasterizer.
[22:54] <poorvikrampandit> Maybe this buys time?
[22:55] <poorvikrampandit> My boss will turn into Alec Baldwin in Glengarry/Glenross if this goes down again.
[22:59] <sarnold> more memory shouldn't be too bad, something like $310 USD for another 32 gigs of ddr4.. http://www.crucial.com/usa/en/poweredge-t630/CT6236763
[22:59] <dasjoe> He shouldn't skimp on hardware, then
[23:02] <poorvikrampandit> It's rented hardware. (Unless they'll let me into their datacenter pop in another SIMM.)
[23:04] <sarnold> 140EUR/mo can get you 128 gb of memory: https://www.hetzner.de/hosting/produkte_rootserver/px121ssd -- maybe they can be more competitive. or maybe you can move to hetzner. :)
[23:04] <RevertToType> i cannot get sound out of my ubuntu-server install
[23:05] <RevertToType> alsa nope, pulseaudio nope
[23:05] <RevertToType> def recognizes the soundcard as "there"
[23:06] <RevertToType> aplay /testwavs plays them but no sound through the speakers, alsa-mixer is wrenched up all the way, no bios issues, no acpi volume button messing me up
[23:06] <sarnold> RevertToType: check permissions on the /dev/ nodes for the audio devices. iirc consolekit or something similar normally chowns those to logged in users when doing lightdm or whatever, but those pathways may not be used in a server install
[23:06] <sarnold> RevertToType: also, note that alsa starts muted; perhaps it needs to be unmuted?
[23:07] <RevertToType> wouldn't alsa-mixer set that?
[23:07] <sarnold> it might, that might be the MM at the bottom of the sliders..
[23:07] <sarnold> but it might also let you slide volumes around withuot actually unmuting, too
[23:10] <poorvikrampandit> sarnold: Are hetzner reputable?
[23:11] <poorvikrampandit> We've suffered from a lot of bozo hosts (like one in New York State that let the servers overheat and had bad RAM)?
[23:11] <sarnold> poorvikrampandit: I think they have a bit of reputation as a 'bargain' outfit, but I haven't heard any specific complaints about services or customer service
[23:13] <poorvikrampandit> Hmm, what does bargain mean?
[23:15] <sarnold> cheap, thrifty
[23:22] <Tangurin> Hi! I use Laravel on my ubuntu server but something is really wrong and the server crash and I get logged out from SSH and all sites on the server goes down when I trying to do a simple ajax request at the page! the /var/log/apache2/error.. doesn't tell me anything, where can I look for more information?
[23:22] <RevertToType> thank you sarnold
[23:22] <RevertToType> now to figure out why my networking periodically drops
[23:22] <sarnold> RevertToType: got it? :) what was it? :)
[23:22] <RevertToType> it was re-muting despite alsactl saving
[23:22] <sarnold> Tangurin: check all the logs
[23:22] <sarnold> RevertToType: oof. :/
[23:23] <RevertToType> but i already have a bashlogin script so it's all good
[23:23] <Tangurin> sarnold: what shall I look for, I can't see anything wrong
[23:24] <RevertToType> hrm... my wpa-2 connection every once in a while drops... then i need to ifdown/ifup and re-dhclient ... anything offhand a common ish?
[23:25] <sarnold> Tangurin: out-of-memory killer, segmentation faults, kernel panics, block io errors, etc etc..
[23:25] <Tangurin> sarnold: thanks
[23:26] <Tangurin> sarnold: init: failsafe main process (766) killed by TERM signal is this something?
[23:31] <RoyK> if you see massive errors on a server (or even desktop) it's usually something bad in the hardware. try a memory test first. also, a bad PSU can make your day longer, in bad terms


[00:06] <basil60> Hi I'm using Ubuntu 12.04 with xfce 4.8 as a GUI. What do I change my keyboard layout to, so if I press shift+3, I get a hash instead of a pound (english currency) symbol?
[00:10] <sheptard> basil60: google changing your locale
[00:10] <basil60> my locale is correct I believe
[00:12] <basil60> mostly en_AU.utf-8
I've got the change keyboard command...just not which option gives mu us international
[00:14] <sheptard> http://dry.sailingissues.com/us-international-keyboard-layout.html
[00:14] <sheptard> that's US international
I'd been on that site. Which is more appropriate - generic 102 key intl or 105 key?
[00:15] <basil60> or 104?
[00:45] <basil60> Hi fixed my keyboard layout...but when I punch in my password now, it's not recognised. I wasn't running as root - just a normal user. How can I change my passwd to something recognisable under the new keyboard layout? Please?
[07:03] <wkmanire> What specifically makes a DNS server authoritative for a domain?
[07:03] <wkmanire> I'm trying to get set up a slave to zone transfer from my master following the Official Ubuntu Serve guide.
[07:04] <wkmanire> I can't get the zone to transfer and I get this message in syslog.
[07:04] <wkmanire> Mar 15 23:40:28 ubuntu5 named[760]: client <IP_ADDRESS>#6962: received notify for zone 'wkmanire.net': not authoritative
[07:05] <wkmanire> Although the master DNS is resolving all of the sub domains for my network with no problems.
[07:21] <wkmanire> nevermind
[07:21] <wkmanire> I made a mistake
[08:54] <lordievader> Good morning.
[11:03] <PeterGriffin> Hi there. I have a cupple of servers on my net with 1000 Mb network interfaces and a few with 100 Mb. The speed between them is awfully slow, like 5K. Is it possible this to be caused by the differentspeed setting of the interfaces?
[11:04] <SpamapS> PeterGriffin: use ethtool to check what they're actually linked at
[11:06] <PeterGriffin> what in the output shows this
[11:06] <PeterGriffin> Do you mean the actual speed being set
[11:07] <SpamapS> PeterGriffin: sometimes auto-negotiation fails.. or silly things happen like it chooses half duplex
[11:07] <bekks> You should check duplex settings and MTU sizes, too.
[11:07] <SpamapS> PeterGriffin: just 'sudo ethtool eth0'
[11:07] <SpamapS> on a single flat layer 2 I would be surprised if MTU was an issue
[11:08] <SpamapS> you have to try really hard to screw that up
[11:08] <bekks> Or just play with "oh, wow, those jumbo frames sound cool." :)
[11:12] <arrith> can test network speed with iperf
[11:12] <arrith> could be application-level issue
[11:12] <PeterGriffin> this is the ethtool output on both sides of the problem http://pastebin.com/NBmACLhq
[11:13] <bekks> And how do you "test" the connection speed?
[11:14] <PeterGriffin> I showld mention that there are some switches and an optic between them, but the speed is bad only when connecting with the servers, not other Kubuntu desktops.
[11:15] <PeterGriffin> Well not very precisely actually. I send a bog file with netcat and monitorthe  progress.
[11:15] <bekks> So you have to check all physical links, maybe there is somethjing odd.
[11:16] <PeterGriffin> big* file
[11:17] <PeterGriffin> but when I send a file using exactly the same route, but from my laptop, the speed is ok
[11:17] <PeterGriffin> doesn't this exclude the phisical links
[11:18] <bekks> No.
[11:18] <SpamapS> PeterGriffin: tracepath otherbox
[11:18] <bekks> Unless you connect your laptop to the same switch port as the "other" computer you are trying it with.
[11:19] <SpamapS> PeterGriffin: give iperf a try
[11:23] <PeterGriffin> bekks: I didn't use exactly the same port. What I did is I changed the whole switch, so I suppose the port wouldn't matter. I did this on both sides just to be sure. Only I had one extra switch so I was able to have a new switch only on one side at a time.
[11:24] <bekks> So use iperf for further investigations.
[11:24] <PeterGriffin> SpamapS: tracepath reaches the other end
[11:24] <SpamapS> PeterGriffin: with pmtu == 1500 ?
[11:24] <PeterGriffin> I will
[11:24] <PeterGriffin> SpamapS: yes
[11:24] <PeterGriffin>  1:  <IP_ADDRESS>                                          0.097ms pmtu 1500
[11:24] <PeterGriffin>  1:  <IP_ADDRESS>                                         1.008ms reached
[11:25] <SpamapS> PeterGriffin: ok, -> iperf
[11:25] <PeterGriffin> these are the endpoints. The route does not show
[11:25] <PeterGriffin> iperf it is ... :)
[11:26] <bekks> being in the same network, no route is need.
[11:26] <bekks> *needed
[11:30] <PeterGriffin> I have never used iperf so I started the server and the client without options. It connects, but it does not showanything useful.
[11:31] <PeterGriffin> do I need to send a file throu it or something?
[11:35] <arrith> http://www.reddit.com/r/linux/comments/1maws6/checking_lan_transfer_speed_under_linux/
[12:29] <PeterGriffin> Ok. I did some learning and testing with ierf. I make the desktop server for iperf and start a connection from the ubuntu-servers as clients (both of them). When test UDP connection it is just fine. But when I start a TCP connection it fails. tcpdump shows that the iperf server sends ack for each packet, but the client recieves only a small part of them. So may be somewhere on the network they are lost and that makes the
[12:29] <PeterGriffin> connection fail.
[14:45] <SpamapS> PeterGriffin: I'd postulate that there is a bad cable, bad switch, switching loop, etc.
[14:50] <PeterGriffin> ok. I'll check again everything. Thanks for your help.
[17:30] <raj__>  which folder should be used for storing data to be used freely by all users(or preferably sudoers) of system ?
[17:30] <el_seano> raj__: I'm a fan of /srv, personally
[17:31] <raj__> el_seano: /srv.. what kind of files does that contain ?
[17:31] <el_seano> raj__: nothing, out of the box
[17:32] <raj__> okay
[17:32] <el_seano> later revisions of the FHS recommend using it as a place for data stored by services
[17:32] <el_seano> e.g., ftp, http, whatever
[17:32] <raj__> i mainly want to store some bash scripts that are used by all sudoers..
[17:32] <el_seano> raj__: http://www.pathname.com/fhs/pub/fhs-2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM
[17:33] <el_seano> ah, probably simpler would be one of the */bin's
[17:33] <el_seano> like /usr/share/bin
[17:33] <el_seano> otherwise, just make a /srv/bin and ensure that it's added to the path of your skeleton file, set guid, etc
[17:34] <raj__> okay..
[17:35] <el_seano> one org I worked with actually pointedly didn't add our sysadmin team's script directory to our PATHs, largely with the thinking of "If you're going to be using the gun, you need to unlock the safe"
[17:38] <raj__> el_seano: hmm.. thanks for the pointers..
[17:38] <el_seano> sure
[17:38] <el_seano> if you're not familiar with skel or guid, look at the man pages for chmod and useradd
[18:29] <raj__> how does the '-f' in 'bash -f script.sh' make a difference ? what is it for ?
[19:22] <cwiggs> can someone help me with an NFS mount problem i'm having with my server?  I've tried everything i can think of.
[19:23] <bekks> cwiggs: Just state the problem then, please :)
[19:23] <cwiggs> the nfs mount works on all computers except one, and i don't see anything in the logs on either the client or the server
[19:23] <cwiggs> when i run mount.nfs in verbose mode it doesn't list anything, just hangs forever
[19:24] <cwiggs> i restarted nfsd on the server already
[19:24] <cwiggs> and checked the exports file
[19:24] <cwiggs> everything looks good, in fact, this server did mount fine until recently
[19:24] <cwiggs> i've done all updates as well
[19:24] <bekks> "mount.nfs" is an incomplete command, and please dont use enter as a punctuation sign.
[19:24] <cwiggs> okay
[19:26] <cwiggs> when i run mount -t nfs -v it outputs
[19:26] <cwiggs> "mount.nfs: timeout set for Sun Mar 16 12:27:43 2014"
[19:26] <cwiggs> "mount.nfs: trying text-based options 'vers=4,addr=<IP_ADDRESS>,clientaddr=<IP_ADDRESS>'""
[19:26] <cwiggs> and now it just hangs there
[19:26] <cwiggs> nothing in syslog for the server or client
[19:27] <bekks> Which is an incomplete command.
[19:27] <bekks> You need to specify the share and the mountpoint.
[19:27] <cwiggs> "sudo mount -t nfs -v <IP_ADDRESS>:/mnt/sdb1 /mnt/sdb1/"
[19:27] <cwiggs> i did
[19:27] <cwiggs> i just didn't type it here to save time
[19:27] <cwiggs> the command above is what i typed
[19:28] <bekks> Which did not save time at all. And DONT use enter as a punctuation sign. Please.
[19:28] <cwiggs> without the ""s of course
[19:28] <bekks> So is the server actually sharing that share, using NFS v4?
[19:28] <cwiggs> yes
[19:28] <cwiggs> yes.*
[19:29] <cwiggs> Like i said above, i have a few other computers that are accessing that share using NFS.
[19:30] <cwiggs> "/mnt/sdb1	<IP_ADDRESS>/24(rw,async,no_root_squash,nohide)" is what /etc/exports contains.
[19:30] <bekks> Thats a NFS v3 export line.
[19:31] <bekks> Mount it using NFS v3, not v4.
[19:31] <cwiggs> You're right, my mistake.
[19:32] <cwiggs> I can't remember the option for using v3 off the top of my head.
[19:32] <bekks> vers=3
[19:34] <cwiggs> Thank you, that fixed it.
[19:36] <cwiggs> Does anyone know how to make autofs use nfsv3?
[19:42] <cwiggs> bekks: btw, thank you for your help.
[19:57] <raj__> do bash scripts need to have any extension like .sh.. I used .sh extension with my "bash scripts".. & now realised it .. should I remove the .sh extension from those files ?
[20:02] <RoyK> raj__: no, extensions aren't necessary on unix systems
[20:02] <RoyK> just chmod +x, and a file is runnable
[20:02] <raj__> RoyK: thanks!!
[20:03] <RoyK> with scripts, usually the first line contains something like '#!/bin/bash' which tells the shell which interpretor to use
[20:09] <raj__> RoyK: Thanks a lot !! when I  use any extension like .sh the editors on my desktop identify the file as a script but without extension they have no clue, for that purposes if I keep any extension, what should it be ? .sh worked but mine  is a bash file
[20:12] <jrwren> there is nothing wrong with having a .sh or .bash extension.
[20:20] <RoyK> jrwren: didn't say that - just said it wasn't mandatory ;)
[20:21] <jrwren> RoyK: I was not attempting to correct you. ;]  Just trying to help our raj__
[20:21] <RoyK> raj__: if run from the shell, it doesn't matter. it's not like on windows where files are run in different instances on behalf of their extensions
[20:23] <raj__> RoyK: yes I understood that.. Thank you very much! :)
[20:23] <raj__> jrwren: yes, I got that.. thanks jrwren !! :)
[20:24] <RoyK> if only ubuntu had proper zfs support...
[20:34] <jrwren> why zfs? isn't btrfs supposed to be the future?
[20:41] <RoyK> jrwren: yes, it's possibly the future, but it's been the future for a long time
[20:41] <RoyK> jrwren: and I'd rather want something that works in the present
[21:21] <raj__> $ rm "-home.hist"           says: rm: invalid option -- 'h'         Try `rm --help' for more information.
[21:21] <raj__> deleting the above file fails.. how do I delete the above file successfully .. ?
[21:21] <sheptard> raj__: \-
[21:21] <sheptard> \-home.hist
[21:21] <raj__> sheptard: trying out
[21:21] <raj__> sheptard : didn't work but acutually the actual file name is a bit more complex.. tried:                   rm  \-home-raj-.history
[21:21] <raj__> sheptard , the actual file name is "-home-raj-.history", how could I remove ?
[21:21] <raj__> sheptard: sorry it was due to my mistake.. fixed!!
[21:29] <raj__> when i give a space before writing a command in terminal.. it does not appear in history.. is that a way to skip history ???
[21:36] <RoyK> raj__: rm -- -home.hist
[21:36] <RoyK> -- terminates the parsing of options
[21:50] <miceiken> hi guys, total noobie on the security front here. I'm running a simple ubuntu server, what precautions should I take? will a firewall suffice?
[21:50] <Patrickdk> well, a firewall works
[21:50] <Patrickdk> as long as you never make connections into or out of the server
[21:50] <Patrickdk> might as well unplug it and get the same security
[21:51] <Patrickdk> you have to worry about everything, any program that makes connections from pulling in something bad
[21:51] <markthomas> miceiken: you haven't said anything about what you're doing with the server, or anything about the environment it's in.  You can get some general rules-of-thumb that way, but it will be of limited use.
[21:51] <Patrickdk> and anything listening for connections, doing something bad (like webservers)
[21:52] <Patrickdk> and this assumes no one has console/ssh access
[21:52] <miceiken> sorry markthomas, I'm renting a VPS - for now I'm running a few services, nothing major but I have a mail server, web server, an irc bouncer and stuff like that
[21:52] <miceiken> I'm most worried about someone gaining control over my server
[21:53] <Patrickdk> so every insecure thing you could locate :)
[21:53] <markthomas> miceiken: is this system behind a firewall?  Does it have local users besides yourself?
[21:54] <miceiken> I am the only user, but the system has multiple users "running" different services. And no, no firewall.
[21:56] <markthomas> miceiken: First, start with something like this: https://help.ubuntu.com/10.04/serverguide/firewall.html
[21:57] <markthomas> miceiken: then, if this is a VPS, one of the most vulnerable attack points will be one you haven't mentioned yet: how are you logging into the system to administer it?  SSH?
[21:58] <miceiken> markthomas, yep, ssh with plain username/password auth
[21:59] <markthomas> miceiken: that is where you need to start your security efforts.  If someone compromises your account, that's a serious problem.
[22:00] <markthomas> miceiken: Start with authentication.  If you can, use a keypair for authentication and disable password logins.  Of course, make sure root ssh is disabled for good measure, even if you have the root password "locked"
[22:01] <markthomas> miceiken: then, look into an application called fail2ban.
[22:01] <miceiken> keypair is what? private ssh keys?
[22:01] <markthomas> miceiken: yes.  man ssh-keygen
[22:02] <RoyK> miceiken: just run ssh-keygen and then ssh-copy-id yourserver:
[22:03] <RoyK> user@yourserver, perhaps, if you haven't setup ssh aliases
[22:03] <markthomas> miceiken: one you've done that, you need to review the docs for every service you've listed.  If this is running services you care about (i.e. you're running a business on this instance) then you'll want to get some help.
[22:04] <miceiken> ah right, well no, it's only private use, I just want to take the basic measures to prevent anything
[22:06] <markthomas> miceiken: It'll be a fun learning project.
[22:06] <markthomas> RoyK: thanks for jumping in.  I have to drop off for awhile.  miceiken, have fun.
[22:08] <miceiken> thanks for your help markthomas
[22:08] <miceiken> RoyK, can I use sudo passwd -l <user> to disable log in to a user account?
[22:08] <miceiken> by disabling I mean login
[22:16] <RoyK> miceiken: better google it - http://www.cyberciti.biz/faq/linux-disable-user-account-command/ was ok
[22:17] <RoyK> miceiken: locking a user by changing the password won't disable her/him to login with ssh keys
[22:17] <miceiken> okay, thanks
[22:18] <miceiken> if I have 2 computers I want to access ssh from - do I make 2 seperate keys? or do I use the same? (I'm asking because of the username@HOST part)
[22:18] <RoyK> you can use the same keys
[22:18] <RoyK> ssh keys are just like any other cryptographic keys
[22:19] <RoyK> I usually use a set of keys per machine
[22:19] <RoyK> if one is stolen or otherwise lost, I don't need to change the keys for everything
[22:20] <RoyK> a set of keys meaning a public and private key, the set that's generated with ssh-keygen
[22:34] <miceiken> how can I tell if it works though RoyK?
[22:35] <miceiken> I set PasswordAuthentication to no in ssh_config but it still prompts me when I connect
[22:40] <miceiken> duh sshD
[22:43] <miceiken> thanks RoyK - got it all set up now


[02:59] <chris411> this working?
[03:01] <chris411> can someoen help with a login loop proplem?
[03:02] <chris411> mm me thinks everyone is off?
[03:14] <chris411> Hi is anyone here apart from me?
[03:14] <zkriesse> Hello chris411
[03:15] <zkriesse> chris411: Need something my friend?
[03:15] <chris411> Hi - am i in the right place to get some help on using Xchat software so I can get some help?
[03:16] <zkriesse> Actually join the #ubuntu-beginners channel
[03:16] <chris411> with a login "loop" problem
[03:16] <zkriesse> And I will help you there
[03:16] <chris411> on 10.04
[03:16] <chris411> um ok i'll try
[03:21] <chris411> exit?
[05:19] <jfauxy> I'm here
[05:20] <jfauxy> Does anybody know why I should get Ubuntu?  I already have linux mint.
[22:08] <sirmacik> hey class (: