[00:00] <keithzg> sarnold: no, there's a separate, unmanaged network for the iscsi host and clients.
[00:01] <keithzg> all the normal addresses are 10.1.x.x, and the iscsi ones are 10.0.x.x
[00:01] <sarnold> keithzg: ah :) good, that should be far easier to do.
[00:01] <sarnold> .. to the point of making me wonder why it doesn't just do that already?
[00:02] <keithzg> ...yeah that's what's confusing me. Suddenly when I want to ping any host, for example, it's trying to ping from the unmanaged iscsi network.
[00:05] <sarnold> keithzg: 'ip route list' will show you the routing table, perhaps all you need to do is move the 'default' route to a different gateway?
[00:06] <keithzg> sarnold: yeah, that makes sense, right now it's showing "default via <IP_ADDRESS> dev br1  metric 100" and should be 10.1.etc dev br0
[00:06]  * keithzg can't seem to find in the documentation for "ip route" how to change that
[00:07] <lvmer> I've been reading a bunch of security tutorials, but what is the best way to shield my LAN ubuntu server from internet traffic / etc.
[00:07] <sarnold> keithzg: that's the anoying thing; back in the day when you wrote all your own ifconfig and route commands fixin these things was easy. now you've got to find the right incantation in /etc/network/interfaces to get done what you want.
[00:07] <lvmer> do I have to like go to a library with a laptop & nmap my server's IP address?
[00:08] <sarnold> lvmer: step 1: netstat -anp   will show you what is open and which programs have those sockets open
[00:08] <sarnold> lvmer: step 2: install ufw, it'll make configuring firewall really easy
[00:09] <lvmer> sarnold: I have shorewall. Should I use ufw too?
[00:09] <sarnold> lvmer: step 3: configure applications to only listen on interfaces you want them to -- sometimes you only want them to listen on 10.x or 192.168.x and sometimes you want them on *
[00:09] <sarnold> lvmer: nah, one firewall thingy is enough.
[00:09] <sarnold> ufw is just easy enough that people'll use it. :)
[00:10] <sarnold> lvmer: I also like to make sure tha every program that listens on a network socket is confined by apparmor; the apparmor-utils package tool 'aa-unconfined' makes it easy to see which programs are listening but not confined.
[00:10] <sarnold> keithzg: that almost sounds like incorrect network masks ..
[00:11] <lvmer> sarnold:  aaaah all I've done with apparmor  is $ sudo apt-get install apparmor-profiles   lol
[00:12] <keithzg> sarnold: could be, I'm fairly dumb in regards to those specifics; I have both interfaces set for netmask <IP_ADDRESS>
[00:13] <sarnold> keithzg: hrm. that sounds like it fits what you wanted in the first place. :/
[00:14] <keithzg> sarnold: so I got it right? I guess this is one of those perverse debugging moments where finding out one *hasn't* made a mistake is disappointing!
[00:16] <sarnold> keithzg: well, obviously osmething is slightly wrong somwhere :) you've got the wrong results. I'm surprised though that it sounds to me like you should be fine.
[00:20] <keithzg> sarnold: yeah, it's quite the conundrum
[00:21] <sarnold> keithzg: can you pastebin the whole interfaces file? It might be overkill to the right person, but I'm not sure what specificxally to ask for. :)
[00:22] <keithzg> sarnold: http://pastebin.com/dagKBUEw
[00:23] <keithzg> there's probably some weird interactions with whatever systems the historical sysadmin of this infrastructure has set up over the years
[00:24] <sarnold> keithzg: okay, I know nothing of the bridge stuff :) SO, with that caveat out of the way, the 'broadcast' addresses look incorrect; they should probably be <IP_ADDRESS> and .... hrm.
[00:24] <sarnold> keithzg: is the 10.1.* a hole punched out of the middle of the 10.* range?
[00:24] <sarnold> .. or are there two ranges, 10.1.* and 10.0.* ?
[00:25] <keithzg> sarnold: in *theory* it should be two ranges, 10.1.* and 10.0.*
[00:25] <keithzg> I'm tempted to just change the iSCSI addresses all to an entirely different range, though, see what that accomplishes
[00:26] <sarnold> keithzg: okay; then the <IP_ADDRESS> ought to change to <IP_ADDRESS>, the <IP_ADDRESS> ought to change to <IP_ADDRESS>, and I think you need to remove the 'gateway <IP_ADDRESS>' line completely; two gateways configured in one file is probably just asking for trouble.
[00:27] <keithzg> sarnold: yeah I actually commented out the second gateway line recently, but it didn't seem to make a change so I figured I'd just paste the file as it had been for longer.
[00:27] <sarnold> hehe
[00:28] <sarnold> good debugging instinct. :)
[00:28] <shti> hi everyone. does anyone know what the maximum amount of IPv6 addresses I can allocate on one system are? is it limited by memory?
[00:30] <sarnold> shti: as far as I know, limited by memory; thousands ought to be doable on nearly anything; I'm not too sure about millions, but one hopes you could find out overnight :)
[00:31] <shti> i figured as much, thank you
[01:00] <keithzg> sarnold: thanks! that, along with a few other pieces of fiddling with other things that were wrong or conflictingly configured, seems to have solved nearly everything. Now I just need to tackle the actual iSCSI part . . . gulp.
[01:01] <sarnold> keithzg: woot! :)
[01:01] <sarnold> good luck there. that thing seems _huge_...
[03:25] <lvmer> sarnold: I don't think apparmor even runs on startup. But I didn't find anything 'unconfined.'  I only found 'enforce' and 'complain.'
[03:26] <sarnold> lvmer: aa-status will give you details on what's running..
[03:26] <lvmer> sarnold: ops. I made a mistake. sshd & apache2 are 'not confined'
[03:26] <sarnold> yeah, confining sshd requires administrator decisions
[03:27] <lvmer> sarnold: hum.
[03:27] <sarnold> and apache2 is so wide open that it is nearly impossible to provide a pre-written profile for it.
[03:27] <lvmer> sarnold: hum.
[03:27] <lvmer> sarnold: I installed both my servers the same way, but I'm thinking now... I only want samba on (1) of them. & I'll keep the other with everything to just fool around
[03:28] <lvmer> sarnold: should I just remove apache2? and php5?
[03:28] <sarnold> lvmer: I would; I try to keep what's running on my systems to just the minimum
[03:28] <lvmer> hey
[03:29] <lvmer> for dpkg -l   how can I output it to a file? lol
[03:29] <sarnold> lvmer: dpkg -l > filename
[03:31] <lvmer> sarnold: omg the paste doc is 500 long
[03:32] <sarnold> yes, there are a lot of packages on a standard system. :)
[03:32] <lvmer> sarnold: I have no idea what to remove & what not do lol :/
[03:32] <lvmer> sarnold: oooohhhh the horror: http://paste.kde.org/611126/
[03:33] <lvmer> am I allowed to remove vim? as I really just stick to nano.
[03:34] <lvmer> $ apt-get remove vim vim-common vim-runetime vim-tiny    ? xD
[03:34] <sarnold> heh, funny, removing nano is the first thing I normally do. :)
[03:35] <lvmer> sarnold: I kind of always understood programing, and setting up this server was frustrating, but it only took about a week.  And now.... seeing this list of 500 things long.... I litterally have no idea what they are. I feel like a teenage girl looking at the task manager processor list.
[03:36] <sarnold> the names will grow on you -- before long they'll be old friends. :)
[03:38] <lvmer> lol
[03:38] <sarnold> the 'deborphan' tool can help you clean up packages you're not using any more
[03:39] <sarnold> though it probably makes less sense on a brand-new install than one that's been running for a few years
[03:39] <lvmer> sarnold: so install to uninstall? I like it. :)
[03:39] <lvmer> bind9 bind9-host bind9utils  ??
[03:39] <sarnold> lvmer: yes, that does seem strange :) "apt-get install deborphan ; deborphan" --> _fewer_ packages installed...
[03:40] <sarnold> at least bind9-host is nice to have, you can run 'host foo' and get IPs, reverse lookups, MX entries, etc. awesome little tool.
[03:40] <lvmer> I just don't want to mess up my samba on this bad boy
[03:40] <lvmer> aaahh ok. good to know. I shall keep it then.
[03:41] <lvmer> ftp?
[03:41] <sarnold> sure, it's just the client program
[03:42] <sarnold> and sometimes wget or curl are annoying compared to an interactive ftp client.
[03:42] <lvmer> so many libs
[03:43] <lvmer> wait so uninstall ftp? or keep?
[03:43] <sarnold> keep ftp
[03:43] <lvmer> I do have 2 servers & this one is pretty much only samba
[03:43] <lvmer> ok
[03:43] <sarnold> you may never use it :) but it's nice to have when you do need it
[03:44] <lvmer> mysql ? xd?
[03:44] <lvmer> easy way to type all those bad names?
[03:44] <lvmer> mysql-client  .... client-core  common server... etc. lol
[03:45] <sarnold> just apt-get remove mysql-common will probably get all the rest of them -- they'll need the -common package to satisfy dependencies.
[03:46] <lvmer> oh... so that happens automatically?
[03:46] <sarnold> it'll prompt :)
[03:50] <lvmer> if I remove bind9  ... it says dnsutils & ubuntu-standard also remove
[03:50] <lvmer> bad?
[03:52] <lvmer> sarnold: look how much progress I've made:  http://paste.kde.org/611150/
[03:52] <lvmer> sarnold: lol xD
[03:53] <sarnold> lvmer: 'nsupdate' from 'dnsutils' might be very nice to hold on to.. I don't know if it is used by default, but it -might- be...
[03:53] <lvmer> yah I held on to them
[03:54] <lvmer> sarnold: I can't seem to remove apache2.2-common  is the file special?  it shows up as 'rc'
[03:54] <sarnold> lvmer: woo. :) that's pretty good. run deborphan and see if there are any libraries you don't need any more... that's probably enough, though. my development workstation has 1807 packages installed. :)
[03:54] <sarnold> lvmer: 'rc' means 'remove configured' -- the configuratoin files are still there, in case you re-install, but the package isn't currently installed
[03:54] <sarnold> lvmer: you can use dpkg --purge or apt-get purge to _also_ remove the configuration files
[03:55] <lvmer> oh how do I get rid of those?
[03:55] <lvmer> ah
[03:59] <lvmer> could I type sudo apt-get remove vim-*  ??
[04:00] <sarnold> try it with 'vim-*' -- with the quotes
[04:01] <sarnold> if there is something in your current working directory that matches vim-<something>, the shell will expand the * and not give the right results to apt-get
[04:01] <lvmer> double or single?
[04:01] <sarnold> either
[04:02] <sarnold> (that tip goes for way more than just apt-get -- if you want to find all files ending with .orig, you should also use quotes here: find . -name '*.orig'   )
[04:02] <lvmer> sarnold: :) k
[04:03] <lvmer> installed deborphan
[04:03] <lvmer> ah. -a
[04:04] <lvmer> http://paste.kde.org/611180/
[04:05] <lvmer> anything weird?
[04:05] <sarnold> maybe mysql-client-core-5.5
[04:06] <sarnold> if you don't care about mysql or mysql clients on this machine, you can remove that
[04:06] <lvmer> sarnold: my computer is a dell 4500 from 2001... it is impossible for it to use wireless should I uninstall wireless stuff?
[04:06] <lvmer> I did remove most mysql
[04:06] <sarnold> lvmer: you could remove the wireless stuff if you want, but that might threaten to remove things you want to keep
[04:07] <lvmer> ah
[04:07] <sarnold> how much memory is in this system? if four gigabytes of RAM or less, you can probably also ditch the linux-generic-pae kernel
[04:07] <lvmer> 1gb lol...
[04:07] <lvmer> if that
[04:07] <ScottK> sarnold: For recent releases it's all PAE
[04:07] <lvmer> I'll check
[04:07] <sarnold> ScottK: oh??
[04:08] <sarnold> lvmer: don't touch linux-generic-pae :)
[04:08] <sarnold> ScottK: thanks :D
[04:08] <ScottK> amd64 has been all PAE for awhile and i386 as of 12.10.
[04:08] <lvmer> sarnold: I actually surprisingly have 2gb.... wow.
[04:08] <sarnold> ooh
[04:08] <sarnold> speed demon from 2001 :)
[04:09] <lvmer> Now that I think about it... I think I threw away the 2 computers from 2000 & 2001... this bad boy might be an 03 xD
[04:09] <sarnold> makes sense to drop plain old x86 kernels. they're definitely the minority these days and the pae kernels probably boot pre-pae machines just fine.
[04:10] <lvmer> what is whoopsie and getty?
[04:10] <lvmer> gam_server? winbindd?
[04:10] <sarnold> lvmer: whoopsie handles the "this program has crashed, send a report?" crash reporting service; getty provides the login: prompt on your consoles.
[04:11] <lvmer> sarnold: um.... I have a lot of 'getty -8 38400 tty'
[04:11] <lvmer> sarnold: in 'htop'
[04:11] <sarnold> lvmer: probably seven? :)
[04:11] <sarnold> .. or six?
[04:11] <lvmer> sarnold: .... lol
[04:12] <lvmer> sarnold: ok you win
[04:12] <sarnold> one for each virtual console, alt+f1, alt+f2, alt+f3, .. , alt+f6
[04:12] <sarnold> X runs on alt+f7
[04:12] <lvmer> sarnold: o
[04:12] <lvmer> sarnold: never used alt+ any f
[04:12] <sarnold> you probably have to use control+alt+f1 to swap to the virtual consoles from within x
[04:13] <lvmer> sarnold: I'm on putty too btw.
[04:13] <lvmer> landscape-common ?
[04:13] <sarnold> landscape.ubuntu.com -- a management framework
[04:17] <lvmer> The following packages will be REMOVED:
[04:17] <lvmer>   crda* linux-generic-pae* linux-image-3.2.0-29-generic-pae* linux-image-3.2.0-33-generic-pae*
[04:17] <lvmer>   linux-image-generic-pae* wireless-regdb* wireless-tools*
[04:17] <lvmer> good or bad? lol
[04:18] <sarnold> bad :)
[04:20]  * ScottK has a computer from 2001 running precise.
[04:20] <lvmer> scottk: lol how you do that?
[04:20] <sarnold> ScottK: you haven't replaced it with a pandaboard? :)
[04:20] <lvmer> sarnold: oooo bad? dang. lol
[04:20]  * ScottK doesn't usually replace working hardware.
[04:20] <ScottK> Also it's my test server.
[04:20] <lvmer> ........ lol
[04:21] <lvmer> I must know how to ***
[04:21] <lvmer> lol
[04:21] <lvmer> * test
[04:21] <lvmer> lol
[04:21]  * ScottK also has one from 1999/2000 running Hardy (it missed the ACPI cutoff date in the BIOS, so that's the latest it can run) doing file storage.
[04:22]  * lvmer test
[04:22] <lvmer> lmao
[04:22] <sarnold> ScottK: yeah, I can definitely understand that urge. but man, a few watts, no heat, no fan... granted, storage speed on panda is s s l l o o w w
[04:23] <lvmer> test
[04:23] <sarnold> lvmer: /me test
[04:23] <sarnold> oh I see you already found it
[04:23] <lvmer> sarnold I know I did it up there xD
[04:23] <lvmer> sarnold: what is umode?
[04:23] <ScottK> They help keep the basement warm.
[04:23] <sarnold> lvmer: time to learn a new tool :) "apt-cache show umode"
[04:23] <lvmer> ? lol
[04:24] <sarnold> ScottK: hehe
[04:24] <lvmer> unknown command
[04:24] <sarnold> ohhh, umode, that must be from your irc client -- user modes
[04:25] <sarnold> lvmer: still, it's time ot learn a new command :) try "apt-cache show ureadahead"
[04:25] <lvmer> no way
[04:26] <lvmer> I'm not cache'ing anything
[04:26] <lvmer> lol
[04:26] <lvmer> what does it do?
[04:26]  * lvmer lvmer is not so gullible
[04:27] <sarnold> lvmer: apt-cache will show you data from the packages visible to apt-get
[04:27] <lvmer> oh lol
[04:27] <sarnold> apt-cache search and apt-cache show are two immensely useful little commands on debian / ubuntu systems
[04:28]  * lvmer has just realized
[04:28] <lvmer> ok I'm going to stop that before I get banned. lol. I appriciate it. I'm checking it out.  btw: I couldn't find 'umode' lolz :p
[04:30] <sarnold> lvmer: about umodes: http://freenode.net/using_the_network.shtml
[04:31] <lvmer> sarnold: yup. :) thanks again. :)
[04:33] <sarnold> 'night lvmer :)
[04:33] <lvmer> sarnold: good night
[04:48] <lvmer> I have no swap space.... is this bad? I'm running lvm2. & I just noticed in htop: swp 0/0MB
[05:22] <greppy> lvmer: how much RAM do you have?
[05:35] <lvmer> greppy: 2GB.... I sware I thought I had swap when I installed. I don't see it anymore though... in df -h or fstab or htop.
[05:49] <ScottK> Depends on what you're doing with the box.
[05:51] <qman__> it's only bad if you require more memory to perform the tasks you're attempting
[07:19] <ranjan> Hi all, is there an  official channel for Ubuntu Cloud?
[07:19] <ranjan> have some doubt related to Ubuntu Cloud Live CD
[07:49] <lifeless> ranjan: here is fine to ask
[07:54] <Kartagis> can you help me with roundcube? #roundcube is kind of dead
[07:58] <ranjan> lifeless, how can i use nova-volume in ubuntu cloud live?
[08:01] <blkperl> Kartagis: what kind of help?
[08:02] <Kartagis> blkperl: I'm getting "Make sure that the configured database exists and that the user has write privileges DSN: " but the database is there
[08:03] <rbasak> ScottK: what do you think of https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/1027061/comments/14 ?
[08:08] <blkperl> Kartagis: what do the database logs say? do they show failed connection attempts
[08:09] <Kartagis> blkperl: nothing in roundcube logs. do you mean imap server logs?
[08:12] <blkperl> Kartagis: what database are you using? mysql, postgres?
[08:12] <blkperl> sqlite?
[08:12] <Kartagis> mysql
[08:12] <blkperl> go look at those logs
[08:12] <blkperl> also check that the user has write privs in mysql
[08:14] <Kartagis> create database db;grant all on db.* to user@localhost identified by 'pass'; <--- this was my line
[08:16] <blkperl> can you connect to the database from the roundcube server?
[08:17] <Kartagis> yes
[08:19] <Kartagis> I've also imported the databasr schema. that must mean I have at least INSERT access, no?
[08:20] <stiv2k> hi
[08:20] <stiv2k> how can i see which program on my server is causing 2.79 load average.... but cpu usage is low
[08:21] <Kartagis> htop
[08:21] <stiv2k> why htop
[08:21] <stiv2k> over regular top
[08:21] <Kartagis> it is more detailed
[08:21] <stiv2k> oh
[08:27] <stiv2k> well
[08:27] <stiv2k> transmission daemon is using like 10% cpu and 11% mem
[08:28] <stiv2k> its the most active process i have... yet my load average is very high
[10:12] <freakynl> Hi, I'm using automatic updates on some servers. Now it mails me that a reboot is required, but only the make package has been updated. I'm not used to linux requiring reboots for anything but kernel (services are usually just restarted when updated). This however is neither a service nor a kernel and make isn't actively used either :/
[10:26] <vezq> check are you running the latest kernel
[10:27] <vezq> uname -a and compare to files in /boot
[10:40] <freakynl> vezq: heh thx, my spamfilter ate that e-mail :/
[10:43] <freakynl> it was consistent tho', it ate all of the auto update messages from that day. Must not like some package
[12:13] <Cuacrzz> Does anyone know how to change metric settings on my l2tp vpn settings like that checkbox on Windows, because i'm connected and it works but all pages are blocked right know
[13:06] <nopz> When one rsync a directory to another, does it just send the changed bytes or the whole file is transfered for each modification ?
[13:11] <qman__> changes only
[13:11] <qman__> well, there's some caveats to that
[13:13] <qman__> but yes, it only transfers changed bytes by default
[13:18] <nopz> cool thank you
[13:18] <Cuacrzz> Does anyone know how to change metric settings on my l2tp vpn settings like that checkbox on Windows, because i'm connected and it works but all pages are blocked right know
[13:20] <nopz> Regarding inotify, if i lookup a folder by registering to its events, does it watch automatically every child folders in it ?
[13:21] <Kartagis> qman__: how about if there are some deleted files from source?
[13:23] <RoyK> nopz: from the manual:  Inotify monitoring of directories is not recursive: to monitor subdirectories under a directory, additional watches must be created.
[13:24] <nopz> Ho thank you RoyK, do you have a link pointing to that?
[13:25] <nopz> Ok it's at the bottom of the man page
[13:31] <ScottK> rbasak: I think the package is designed to use debconf and since they didn't, they are on their own.  That said, I think it would be a useful improvement.
[13:33] <rbasak> ScottK: I think puppet is probably doing DEBIAN_FRONTEND=noninteractive apt-get install postfix, and then the postinst is clobbering main.cf
[13:33] <rbasak> ScottK: is that your understanding when you say they're on their own?
[13:34] <rbasak> (I haven't verified this though)
[13:40] <rbasak> ScottK: need to go offline but I'll check the logs to see if you've responded.
[13:50] <lamont> ScottK: I decided to add a comment there. (1027061)
[13:50] <ScottK> lamont: Thanks.
[14:11] <caribou> quick question : what is the best way to upgrade the kernel in an Openstack/canonistack instance ?
[14:11] <caribou> without using a different cloud image, just need to test a new kernel
[14:25] <Akendo> hi
[14:26] <Akendo> Hey jamespage, My Cinder + Ceph is working. But without authentication
[14:27] <jamespage> Akendo, libvirt uuid still proving problematic?
[14:27] <Akendo> Just a question out of my mind, can it be that you have to create a extra client instead of using client.admin for this?
[14:27] <Akendo> Yes
[14:27] <Akendo> I'll solve it late, I just wanted to ensure that the connection is working.
[14:28] <jamespage> Akendo, I do that yes; client.admin is like 'root' whereas cinder only needs access to pools/rbd's
[14:29] <Akendo> But shouldn't it be possible to use this "root" for everthing in the beginning? This is justa proof of concept for me, it shound't have to much complexbility
[14:31] <jamespage> Akendo, what rbd_user did you specify?
[14:32] <Akendo> For now admin
[14:32] <Akendo> But late I think it will be one use per tenant
[14:32] <Akendo> So that this tenant have it's own access credentails
[14:32] <jamespage> Akendo, I think thats right
[14:33] <Akendo> First I have to get a feeling for Ceph with OpenStack ;-)
[14:34] <Akendo> One Question, that keeps going torugh my mind is: How does the single pool per tenant will behavior with this placement groups? It's a "hard" limit for my Pool?
[14:49] <pmatulis> hallyn: hey.  looks like bug #1057024 is still not done.  i just posted
[14:51] <zul> jamespage: ping
[14:51] <jamespage> zul, pong
[14:51] <zul> jamespage: fyi the quantum proxy ip stuff got merged into the stable/folsom tree
[14:52] <jamespage> zul, yeah - I've been watching gerrit mp's
[14:52] <jamespage> w00t!
[14:52] <zul> jamespage:  ok cool
[14:52] <jamespage> zul, thanks for pushing on that btw
[14:52] <jamespage> Akendo, not sure single pool per tenant makes sense?
[14:52] <zul> jamespage: no worries all a part of the days work..
[14:53] <Akendo> Why not?
[14:53] <jamespage> Akendo, well the pool in ceph is completely abstracted from the users of Openstack
[14:54] <Akendo> Sure
[14:54] <jamespage> Akendo, and you can only configure it once in cinder, and not on a per tenant basis
[14:55] <Akendo> Ah
[14:55] <Akendo> Really?
[14:55] <Akendo> hm...
[14:55] <Akendo> That indeed a problem then I didn't think of yet
[14:57] <hallyn> pmatulis: the p11-kit thing is separate and was supposed to be fixed long ago.  but yes, there is also the new bug 1080912 i'm trying to reproduce right now
[14:57] <hallyn> slangasek had wanted me to change the fix for that bug, and the new way doesn't seem to be as robust as doing it by hand
[14:57] <hallyn> pmatulis: do you still have access to that box?
[14:58] <hallyn> well lemme see how my box does after a 11.10->12.04 upgrade
[15:00] <pmatulis> hallyn: indeed i do
[15:02] <hallyn> pmatulis: great - what does /dev/kvm look like?  (ls -l and getfacl)
[15:03] <pmatulis> hallyn: not good at all i'm afraid
[15:03] <pmatulis> sudo ls -l /dev/kvm
[15:03] <pmatulis> ls: cannot access /dev/kvm: No such file or directory
[15:06] <Akendo> pmatulis,  modprobe kvm is working?
[15:08] <pmatulis> Akendo: yes it does, that looks like the beginning of a workaround
[15:08] <Akendo> What is lsmod |grep kvm displaying?
[15:09] <pmatulis> Akendo, hallyn: indeed, after loading the module i can start my guests
[15:09] <hallyn> pmatulis: do you ahve the ugprade logs?  did 'start qemu-kvm' fail?
[15:09] <Akendo> ;-)
[15:09] <hallyn> bc that should have loaded the module
[15:09] <pmatulis> hallyn: let me take a look for the logs
[15:10] <pmatulis> hallyn: note that i rebooted twice.  once after the upgrade, and once again after upgrading qemu-kvm
[15:10] <pmatulis> (-proposed)
[15:10] <hallyn> hm.
[15:11] <hallyn> so it wasn't loaded at all after reboot.  that's bad.  and weird
[15:11] <pmatulis> hallyn: agreed
[15:11] <pmatulis> hallyn: i'll update the bug
[15:11] <hallyn> pmatulis: to be sure, did all work well under oneiric on that box?
[15:13] <ninjix> anyone running a 12.04 based OpenStack with Quantum + Open vSwitch?
[15:13] <Akendo> That can happend from time to time, then you should add kvm to the /etc/modules.conf
[15:14] <Akendo> Can you past me via pastbin the dmesg output?
[15:14] <pmatulis> hallyn: yes, all worked very well on 11.10
[15:14] <Akendo> ah
[15:14] <Akendo> btw: /etc/modules for Ubuntu
[15:17] <fleish> can someone help me translate this EDAC info into a which DIMM is actually reporting errors? EDAC MC1: CE row 1, channel 0, label "CPU#1Channel#0_DIMM#1": Corrected error (Socket=1 channel=0 dimm=1) ... my manual/board labels the  DIMMs P1_DIMM{1,2,3}{A,B,C} & P0_DIMM{1,2,3}{A,B,C}
[15:19] <hallyn> pmatulis: odd, my test box had /dev/kvm just fine :(
[15:19] <hallyn> pmatulis: i  suspect yours deserves a new bug
[15:19] <pmatulis> wonderful
[15:24] <Akendo> jamespage, Do you know of any bug in glance that can't list the uploaded image to ceph?
[15:27] <ninjix> I see there are what look like tokens in the Ubuntu Openstack supplied configuration files. Things like %SERVER_USER%. Most of the tutorials call for you to replace these but is there a better Canonical way for configuring the services?
[15:30] <Akendo> Hey ninjix
[15:30] <Akendo> Checkout the nimbis-keystone-init on github
[15:30] <ninjix> Akendo: hi
[15:31] <Akendo> Maybe not whay you mean, but it can help you to setup all important stuff  for you
[15:31] <Akendo> Then your using a tenant called service
[15:32] <Akendo> I hope this can you help
[15:33] <ninjix> thanks. I've been holding off with the helper scripts while I familiarize with the Folsom release
[15:33] <Akendo> Great ;-)
[15:34] <ninjix> then wants I understand how to better use Quantum and Open vSwitch, I'm going to look into a MaaS+Juju rollout
[15:35] <ninjix> wants ?? -> once :)
[15:37] <ninjix> Akendo: are you running Openstack?
[15:38] <jamespage> Akendo, not that I know of - I have not seen that issue
[15:40] <jamespage> Akendo, just out of interest can you see it with nova image-list ?
[15:42] <ninjix> Akendo: sorry, better question is are you running it in production?
[16:31] <tonyyarusso> I'm getting millions of lines like this in my syslog:  "Nov 20 10:30:14 ntop ntop[1180]:   **WARNING** Packet # 37334012 too long (len = 2546)!"  What's that mean?
[16:55] <lvmer> I've got a LAN server with just samba on it. Is there a good way to maximize the computer solely for samba? aka: like dedicate lots of ram to caching files that are typically requested, etc.
[17:00] <rbasak> That'll happen automatically for you
[17:01] <lvmer> rbasak: really?
[17:01] <rbasak> The kernel uses available memory to cache what it can
[17:01] <lvmer> in [global] I setup: socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 SO_SNDBUF=65536
[17:01] <lvmer> I was thinking about doubling it to 131k or so
[17:02] <lvmer> rbasak cause right now my server is only using 62mb of ram.... lolzzzzzzz
[17:03] <lvmer> ops I thought I was in the samba channel. -_-
[17:10] <lvmer> sshd is 'not confined' by apparmor, how shall I change this?
[17:14] <hallyn> gah
[17:14] <hallyn> bad changelog
[17:14] <jdstrand> lvmer: that is acually a particularly challenging application to confine because it is designed to spawn shells
[17:14] <jdstrand> lvmer: I recommend looking at http://wiki.apparmor.net/index.php/Pam_apparmor_example
[17:15] <jdstrand> lvmer: you might also want to join #apparmor on OFTC and discuss it there
[17:15] <lvmer> jdstrand: ah. :/  yes I did #apparmor.  I was guessing it would be easy with only 1  sshd allowable computer / ip.
[17:16] <lvmer> jdstrand: ty for the starting place. I am looking through it now.
[17:16] <jdstrand> lvmer: the experts in #apparmor usually don't come online until around now
[17:16] <RoyK> lvmer: it's little point adding IPTOS... and the SO_ stuff - the default values are ok
[17:17] <RoyK> lvmer: that is, unless you're on a 10Gbps network and really want full throughput, all the default values should be ok. It'll be either your network or the I/O on the server being the bottleneck
[17:18] <lvmer> royk: yup you seem right on that. noticed no difference.
[17:18] <lvmer> royk: definitely server I/O
[17:18] <lvmer> royk: 12 year old computer ftw... lolz.
[17:18] <RoyK> lvmer: what sort of disksystem?
[17:18] <RoyK> single IDE drive? ;)
[17:18] <lvmer> royk: IDE lol
[17:18] <lvmer> royk: 3 stripe raid
[17:18] <RoyK> raid-5?
[17:19] <lvmer> royk: but the dell motherboard is attrocious
[17:19] <lvmer> royk: raid 0
[17:19] <lvmer> royk: lol trust me, it doesn't help much with the bus speed of this Dell.
[17:19] <RoyK> raid-0 is a bit like BASE jumping with an umbrella...
[17:20] <lvmer> royk:  all information has 2 other separate backups & is non-essential. I know the risks.
[17:20]  * RoyK uses RAID-6 for most stuff these days
[17:20] <lvmer> royk: I'm actually hoping these hd's fail so I can buy a $300 computer this christmas
[17:20] <RoyK> well, obviously, if you handle the downtime and restore, no problem
[17:20] <lvmer> royk: lol that will def. be the hard part.
[17:20]  * RoyK wants uptime... http://xkcd.com/705/
[17:21] <lvmer> royK: but the server is only 1 week old.... & I've re-installed 2x already from stupid mistakes. so I don't think it'll take more than 1 day.
[17:21] <lvmer> royk: trying to configure rsync for configs, but right now I just copy/paste them to NAS
[17:21] <RoyK> if you can do with the space on two drives, use raid-5 and change later or add more drives later
[17:22] <RoyK> that is, if you have a NAS, why do you want a fileserver?
[17:22] <lvmer> royk: ide drives? no freaking way
[17:22] <lvmer> royk: cause it's a windows temp. nas lol
[17:22] <lvmer> royk: and it sucks
[17:23] <lvmer> royk: also this was mostly just supposed to be a fun project to get my feet wet.... into linux which is clearly much faster.
[17:23] <RoyK> you can get a mobo + cpu + memory for almost nothing, probably $150 will go a long way
[17:23] <lvmer> royk: ok last question.... here I'm done explaining my logic lol. idc if it is flawed.
[17:23] <RoyK> or at least $200
[17:23] <lvmer> royk: yes... that is why I est. $300....
[17:23] <lvmer> royk: 3TB HD... xD
[17:24] <lvmer> royk: which will be sata
[17:24] <RoyK> lvmer: install sysstat and start it, and it'll collect performance data for you
[17:24] <RoyK> or perhaps munin
[17:24] <lvmer> royk: why?
[17:24] <RoyK> you'll see quickly where the bottleneck is
[17:24] <lvmer> royk: k
[17:24] <RoyK> sysstat / sar is basically terminal stuff, munin makes nice graphs
[17:25] <lvmer> royk: ok how do I use this? never used sysstat
[17:26] <lvmer> nvm I got a tut
[17:26] <RoyK> apt-get install sysstat - vi /etc/default/sysstat - enable it - /etc/init.d/sysstat start
[17:26] <RoyK> run 'sar'
[17:27] <RoyK> !uupdate
[17:28] <lvmer> royk: ?
[17:28] <RoyK> just tried to ask the bot about uupdate
[17:28] <lvmer> o
[17:28] <lvmer> !uupdate
[17:28] <RoyK> !mail server
[17:29] <lvmer> royk: ok I ran sar.... I don't get it
[17:29] <lvmer> royk: shows cpu
[17:29] <lvmer> royk: that's it.
[17:29] <lvmer> royk: and a restart
[17:29] <RoyK> no need to restart
[17:29] <RoyK> and man sar
[17:29] <RoyK> it'll show a lot more
[17:29] <RoyK> sar 1 12
[17:30] <RoyK> and it'll check status every second for 12 seconds
[17:30] <RoyK> what you get in the %iowait column is the time the system spends waiting for i/o, eg slow drives
[17:31] <lvmer> should it be  sar -i 12
[17:31] <RoyK> just 'sar <secs> <number of polls>' will do
[17:32] <RoyK> like
[17:32] <RoyK> http://paste.ubuntu.com/1372914/
[17:33] <RoyK> this system is running a crashplan backup where the client spends a lot of cpu time and waits for i/o a bit
[17:33] <lvmer> http://paste.kde.org/611492/
[17:34] <RoyK> guess this wasn't during a copy?
[17:34] <RoyK> your system's mostly idle
[17:34] <lvmer> royk: this lan is small & barely gets accessed
[17:34] <RoyK> start a large copy operation and try again
[17:34] <lvmer> royk: if I did a copy the disk I/o bottle neck would be obvious...
[17:34] <lvmer> royk: k
[17:35] <RoyK> also, you can use
[17:36] <RoyK> !pastebinit
[17:36] <lvmer> royk: ah that is helpful.
[17:36] <lvmer> royk: wait I blocked all 80 ports... only 137, 139, & 445 work. xD
[17:37] <RoyK> also outgoing?
[17:37] <RoyK> if you just used ufw to only allow those ports, all outgoing access should work
[17:37] <lvmer> shorewall
[17:37] <lvmer> ufw sucks
[17:38] <RoyK> well, ufw works
[17:38] <lvmer> http://paste.kde.org/611498/
[17:38] <lvmer> royk: outgoing works now. I shall use that command it is grand.
[17:39] <lvmer> 12:36:52 PM     all      0.00      0.00      0.00    100.00      0.00      0.00
[17:39] <lvmer> 100 I/o wait
[17:39] <RoyK> system isn't under heavy load...
[17:39] <lvmer> royk: nope not at all
[17:39] <RoyK> well, you get such hichups from time to time
[17:39] <lvmer> royk: it only runs smbd
[17:39] <RoyK> you may want to check your drives with smartctl
[17:40] <lvmer> royk: uninstalled nearly everything except shorewall, denyhosts, fail2ban, etc.
[17:40] <lvmer> royk: are you trolling me?
[17:40] <RoyK> no
[17:40] <RoyK> old drives have a tendency to fail
[17:40] <lvmer> royk: ..... I already know my hd's are bad
[17:40] <lvmer> royk: they are 12 year old IDE HDDs.... lol
[17:40] <RoyK> and smartctl asks the drives if they have known errors
[17:40] <RoyK> if they have, they'll slow things down
[17:40] <RoyK> old drives != bad drives
[17:41] <lvmer> smartctl notfound
[17:41] <lvmer> john@UBUNTUSERVER2:~$ sudo apt-get install smartctl
[17:41] <lvmer> Reading package lists... Done
[17:41] <lvmer> Building dependency tree
[17:41] <lvmer> Reading state information... Done
[17:41] <lvmer> E: Unable to locate package smartctl
[17:41] <lvmer> john@UBUNTUSERVER2:~$
[17:42] <RoyK> apt-get install smartmontools
[17:43] <lvmer> is libsensors4 important?
[17:43] <RoyK> lvmer: don't remember the dependencies or smartmontools, but another set of libraries won't hurt
[17:47] <lvmer> john@UBUNTUSERVER2:~$ smartctl --scan
[17:47] <lvmer> /dev/sda -d scsi # /dev/sda, SCSI device
[17:47] <lvmer> /dev/sdb -d scsi # /dev/sdb, SCSI device
[17:47] <lvmer> /dev/sdc -d scsi # /dev/sdc, SCSI device
[17:47] <lvmer> what next?
[17:48] <RoyK> smartctl -H ...
[17:48] <lvmer> meh.
[17:48] <RoyK> or smartctl -t short /dev/blah to start a short test or -t long to start a long test
[17:49] <lvmer> permission denied
[17:49] <RoyK> -t long shouldn't be needed very often, but if you haven't run any tests yet, it might be worth it
[17:49] <lvmer> oh ops.. sudo lol
[17:49] <lvmer> no fails, but errors :/
[17:50] <RoyK> pastebin?
[17:51] <lvmer> http://paste.ubuntu.com/1372945/
[17:52] <lvmer> what do you think?
[17:52] <RoyK> I think the drive has bad sectors
[17:52] <RoyK> dmesg will probably give you some error messages
[17:53] <RoyK> I/O sort of thing
[17:53] <lvmer> .... too manyz
[17:53] <lvmer> http://paste.ubuntu.com/1372956/
[17:54] <RoyK> nothing there about I/O errors
[17:54] <lvmer> ah good
[17:54] <lvmer> yah I couldn't see until I checked the url
[17:54] <lvmer> too squished
[17:54] <RoyK> bunch of apparmor messages, but no I/O stuff
[17:55] <lvmer> still thinking bad sectors?
[17:55] <lvmer> or what?
[17:55] <RoyK> snartctk says si
[17:55] <RoyK> so
[17:55] <RoyK> ops
[17:55] <RoyK> smartctl says so
[17:55] <RoyK> # 1  Short offline       Completed: read failure       90%     25545         6298162
[17:55] <lvmer> :/
[17:55] <RoyK> try -H on the other drives
[17:55] <lvmer> fix attempt worth it?
[17:55] <RoyK> you can't fix sectors
[17:56] <lvmer> http://paste.ubuntu.com/1372961/
[17:56] <RoyK> what you can do, is use redundancy to avoid data loss
[17:56] <RoyK> seems you've started a long test on that one and it's still running
[17:57] <RoyK> Total time to complete Offline
[17:57] <RoyK> data collection: 		(  430) seconds.
[17:57] <lvmer> possibly a long time ago
[17:57] <lvmer> before installing ubuntu
[17:57] <RoyK> you can stop the test and run a short test
[17:59] <RoyK> or just try to initiate a short test
[17:59] <RoyK> might do it
[18:08] <RoyK> lvmer: really, finding a 120GB drive unused somewhere shouldn't be much of a problem, I guess people are throwing those away regularly these days.... better get a new one (or three), convert to raid-5 and sleep well at night
[18:09] <RoyK> or even better, get a new box and setup raid-5 on sata drives from the start
[18:11] <lvmer> ...................................... the information stored here is superfluous. I'm done this troll storm.
[18:12] <RoyK> ?
[18:12] <RoyK> troll storm???
[18:13] <lvmer> I told you from the start the information stored on the hdd's is redundant and useless.... why would I care if they fail?
[18:13] <RoyK> well, ok, just saying that at least one of your drives are dying
[18:13] <lvmer> eta?
[18:13] <RoyK> and it's less hassle to just use raid-5 in the first place to avoid recreating everything
[18:14] <RoyK> ETA is not possible for drives
[18:14] <RoyK> sometimes they die without notice
[18:14] <RoyK> sometimes they give you a warning with S.M.A.R.T.
[18:14] <RoyK> that warning usually means something is bad, but the drive may live another month or even a year after that
[18:15] <lvmer> have you ever rebuilt a raid 5 array? the build time is ridiculous
[18:15] <lvmer> I'd rather use 1
[18:15] <RoyK> no, it's ok
[18:15] <RoyK> I've rebuilt RAIDs of all known levels ;)
[18:15] <lvmer> how long did the 5 take  / size?
[18:16] <RoyK> for a 5x2TB RAID, about a day, perhaps a bit more
[18:16] <RoyK> far less than restoring the lot
[18:16] <lvmer> definitely more
[18:16] <RoyK> with 120GB drives, a few hours
[18:16] <lvmer> lucky you had 5x drives though
[18:16] <lvmer> imagine 10tb with 3 drives
[18:16] <lvmer> you'd be building forever
[18:17] <RoyK> I wouldn't use RAID-5 with such amounts of data
[18:17] <RoyK> I'd use RAID-6 so that it can take a second failure during rebuild
[18:17] <lvmer> 5x2tb = 10tb............. * .8 = 8tb....
[18:17] <lvmer> your not far off
[18:17] <RoyK> currently 6 drives in RAID-6 in my home server ;)
[18:17] <lvmer> that's a good setup
[18:17] <RoyK> plus a spare
[18:18] <lvmer> hard with without a raid controller though?
[18:18] <lvmer> what mb?
[18:18] <RoyK> just linux md
[18:18] <RoyK> software raid
[18:18] <RoyK> some cheap - sec
[18:18] <RoyK> ASrock M3A UCC
[18:18] <RoyK> with some PCIex SATA controllers I got off ebay cheaply
[18:19] <RoyK> I've been working with storage long enough not to trust 'hardware raid' more than what can be done in software
[18:19] <RoyK> it's software after all, even the 'hardware raid', the only difference is it's running on another chip
[18:20] <RoyK> usually with less cpu power and with a narrow memory bus, meaning usually slower
[18:20] <RoyK> I'd guess 90% of enterprise storage have 'software raid', only they hide it
[18:21] <lvmer> good to know
[18:21] <RoyK> A Dell EqualLogic controller take up to a minute to reboot - that's not hardware - it's its OS booting
[18:22] <RoyK> and probably linux at the base, since Dell uses linux for most stuff these days
[18:25] <RoyK> lvmer: even if you can restore quickly, using RAID-5 for this setup can probably teach you a few things about storage ;)
[18:55] <SpaceBass> I'm trying to do an apt-get upgrade and keep getting an error that the MD hash for base-files is invalid … or smiler, will paste bin… this is the 3rd time this has happened and always results in needing a fresh install.
[18:55] <SpaceBass> error: http://pastebin.ca/2253510
[18:56] <sarnold> SpaceBass: check dmesg. I expect your hard drive is dying.
[18:56] <SpaceBass> sarnold, thought that was the problem the first two times, so I've replaced it each time. This is new, fresh SSD (as were the others)
[18:57] <sarnold> SpaceBass: oohhhhhhhhh.
[18:59] <SpaceBass> although perhaps you are right sarnold, the drive doesn't look heathy http://pastebin.ca/2253514
[19:00] <sarnold> SpaceBass: can you test the drive in a different machine or usb enclosure or something?
[19:00] <SpaceBass> sarnold, in theory, but since this is the 3rd error on the same box, all with SSDs (different make/models), I'm not more suspicious of the motherboard or controller
[19:01] <sarnold> SpaceBass: yes, I suspect your motherboard or controller are the problem instead of the harddrive, but putting the drive into something else may be easier than putting a new motherboard in :)
[19:01] <SpaceBass> which sucks… b/c I'm starting to loath this kind of hardware support…. might be time to replace with a mac mini (data is on external raid anyway)
[19:02] <SpaceBass> putting the ultimate solution aside, any tips on resurrecting this install and getting apt-get upgrade functioning?
[19:02] <sarnold> SpaceBass: agreed, I spent a few weeks trying to track down data corruption problems and eventually found MCE events :/ horrible few weeks...
[19:02] <SpaceBass> sarnold, there was a time I like that kind of troubleshooting….but I'm with you, horrible
[19:03] <sarnold> _maybe_ you can fiddle wit hthe BIOS and change the way it uses the sata ports; change from 'legacy' to 'ahci' or the other way around.
[19:04] <SpaceBass> sarnold, good idea, I'll test
[19:04] <SpaceBass> it's on ahci now, I'll try legacy
[19:04] <SpaceBass> (when i get home tonight, using SSH into that box  currently)
[19:04] <RoyK> SpaceBass: a friend of mine had two SSDs dying on her rather rapidly, the third still works after half a year...
[19:06] <RoyK> SpaceBass: try smartctl -H
[19:06] <RoyK> check if the drive think it's bad
[19:07] <SpaceBass> command not found :(
[19:07] <RoyK> apt-get install smartmontools
[19:07] <SpaceBass> can't… apt-get fails
[19:12] <SpaceBass> looks like another fresh install in my future… not the end of the world, but not happy about it
[19:29] <RoyK> SpaceBass: never good to see a drive failing - that's why I mirror things or use RAID-6 ;)
[21:19] <koolhead17> thanks for all! happy appreciation day :)
[21:19] <koolhead17> *2


[01:32] <chmac> I can't resolve www.smile.co.uk through `getent hosts www.smile.co.uk` but it resolves fine through `dig www.smile.co.uk`
[01:33] <chmac> nsswitch.conf reads "hosts:          files mdns4_minimal [NOTFOUND=return] dns mdns4"
[01:33] <chmac> resolv.conf lists <IP_ADDRESS> then my ISP's nameservers
[01:33] <chmac> dig @<IP_ADDRESS> works fine, as does dig @ispnameserver
[01:34] <chmac> I'm not running nscd, I haven't installed it
[01:34] <chmac> Any suggestions other than rebooting?
[02:15] <kgoetz> hi all. has anyone here had systems where the installer gets an IP address, but your still told that network dhcp autoconfig failed and you hae to reconfigure?
[03:22] <cxo> anyone know if i can have ubuntu server install on < 512mb flash?
[03:31] <hessml> good evening
[03:32] <hessml> anyone here have experience with ipmi serial over lan?
[03:38] <cxo> ipmi serial over lan, thats intense
[03:38] <hessml> i sort of have it working
[03:39] <hessml> i get all the boot messages
[03:39] <hessml> i get the login prompt
[03:39] <hessml> i can login
[03:39] <hessml> i get a login message
[03:39] <hessml> then the console locks up
[03:40] <hessml> its driving me nuts
[03:40] <cxo> are you pxe booting?
[03:40] <hessml> no
[03:40] <cxo> which version are you running?
[03:41] <hessml> i followed the  instructions on this page which seemed pretty good execpt for the locking me out https://help.ubuntu.com/community/IPMI
[03:41] <hessml> 8,0.4 server
[03:41] <hessml> intel/amd 64bit
[03:42] <cxo> i honestly dont think anyone in here has the expertise
[03:43] <cxo> ipmi is kinda something only enterprise worries about
[03:43] <cxo> and for very specific tasks
[03:44] <hessml> enterprise? how about us poor people with large clusters of very cheap computers?
[03:44] <cxo> haha
[03:44] <cxo> openmosix, be happy
[03:44] <hessml> openmosix doesn't have ufw
[03:45] <cxo> i heard there is work on shared memory, but havent heard much of it
[03:45] <ScottK> I thought openmosix was shut down.
[03:45] <cxo> kinda
[03:45] <cxo> there is still one or two hackers on it
[03:46] <hessml> anyway, ipmi is available on just about any computer you buy for a CO-LO. It adds about $50-100. It is better than a remote PDU because it gives you more functionality.
[03:47] <hessml> my servers all cost less than a $1000 and they all have IPMI
[03:48] <emgent> Pseudo clustering project --> https://launchpad.net/herd
[03:49] <hessml> so which chat has the IPMI people?
[07:04] <kraut> moin
[07:04] <cxo> moin
[07:05] <cxo> how do you tell gcc which linker to use, and not default to "ld" ?
[07:06]  * kgoetz looks at ebox and wonders what he thinks
[07:06] <kgoetz>   An internal error has ocurred. This is most probably a bug, relevant information can be found in the logs.  An internal error related to a template has occurred. This is a bug, relevant information can be found in the logs.
[07:06] <kgoetz> :| not a lot is the answer
[11:32]  * \sh is stupid somehow
[11:33] <\sh> did anyone has a running config for moinmoin on hardy?
[11:33] <\sh> s/did/does/
[11:36] <\sh> damn..solved
[11:45] <mouser25>  I have setup openvpn and it woks fine,  Im useing it now.  I was wondering if there was a way I could send port specific data across a tun connection insted of static routes for things like irc, aim, msn exct
[11:45] <mouser25>  I dont want to make a static route for every irc server that I would like to connect to
[11:46] <Kamping_Kaiser> perhaps by port
[11:47] <Kamping_Kaiser> use iptables on your gateway to point it over the vpn
[11:49] <mouser25> how will the client know to route the port to the vpn device and not the inet device
[11:49] <Kamping_Kaiser> is vpn running on your local machine?
[11:50] <Deeps> iptables mangle rules?
[11:50] <Deeps> apply a fwmark
[11:51] <Deeps> and then use ip rule to match the fw mark and lookup a different routing table (e.g. vpn table, where the default gw is via your vpn)
[11:52] <Deeps> iirc, -t mangle -I PREROUTING -p tcp --dport 6667 -j fwmark --fwmark 2, would add fwmark #2 to any data going over port 6667
[11:52] <Deeps> s/over/to/
[11:52] <Deeps> google knows better
[11:53] <mouser25> dont know what to look for
[11:53] <Deeps> see the first three things i said
[11:53] <Deeps> iptables, mangle, fwmark, ip rule (part of the iproute package)
[11:54] <Deeps> hell, first hit on google for iptables fwmark looks relevant, bon appetit :)
[11:55] <mouser25> Thanks for pointing me in the right direction
[12:02] <mouser25> now just to find iptables for windows :(
[12:05] <Deeps> heh, windows, forget about it
[12:05] <Deeps> you're also asking the wrong channel too
[12:05] <Deeps> this is #ubuntu-server, not #openvpn or #windows
[12:06] <mouser25> the server is ubuntu
[12:06] <Deeps> and openvpn is running on there?
[12:06] <mouser25> the server side
[12:06] <Deeps> your client side needs to be ubuntu too
[12:06] <Deeps> or at least, linux
[12:06] <mouser25> I know
[12:07] <mouser25> My work computer cant be linux they wont let me
[12:07] <Deeps> as your client side needs to know where to route the packets, and afaik windows doesn't have any tools that can do that
[12:07] <mouser25> bummer
[12:07] <Deeps> then i guess you're SOL for now then
[12:07] <mouser25> well thanks for the help
[12:07] <Deeps> if you're trying to get around work firewalls, my suggestion would be to use putty + dynamic ssh tunnel
[12:07] <Deeps> which creates a local SOCKS proxy for you running on localhost:<whateverport you define in putty>
[12:07] <Deeps> and then tell whichever apps you wanna route around the firewall to use that socks proxy
[12:08] <mouser25> I started out with that, the connection here is so poor that it drops out alot
[12:08] <mouser25> my server is in Iowa and im in Romania
[12:08] <Deeps> if you dont wanna route per ip, ssh tunnel over the pn
[12:08] <Deeps> vpn
[12:09] <mouser25> ok,  That is a good thought
[12:09] <Deeps> it's absolutely horrid and will lead to all sorts of nasties when dealing with dropped tcp packets if your vpn is tcp rather than udp
[12:09] <mouser25> will give that a try
[12:09] <Deeps> but then your vpn shouldn't be any more reliable than your ssh connection if it's tcp anyway
[12:09] <mouser25> it seems to be
[12:10] <Deeps> alternatively, cygwin + autossh could probably serve your needs too
[12:11] <mouser25> it might have more to do with me changing to port 443 and the firewall is leaving my trafic alone now
[12:11] <Kamping_Kaiser> tbh, this is now a ##windows problem.
[12:12] <mouser25> with a posible linux solution :P
[12:12] <Deeps> kaiser's right, but heh, gl finding someone in there with a clue of anything linux related. windows fanboys hate linux much like linux fanboys hate windows
[12:14] <mouser25> Thanks for the help i have to get back to work
[12:15] <Kamping_Kaiser> corp firewalls suck :| glad i dont have one at my current work
[12:15] <Deeps> hehe i love them, the more restrictive the better
[12:16] <Deeps> learn loads trying to break around them
[12:16] <Kamping_Kaiser> there is that, but i learned heaps about windows, and i didnt really want to ;) [i also learned a lot about novell and braindead network design]
[12:17] <Deeps> i still maintain that the ideal desktop is windows xp
[12:17] <Deeps> with a ubuntu vm running in the second screen
[12:17] <Deeps> or vice versa
[12:17] <Kamping_Kaiser> it seems we disagree on that point
[12:17] <Deeps> but i cant work without both
[12:18] <hads> Each to their own
[12:18] <Deeps> one key sticking point i remember from my last job was the complete fail of DFS under samba
[12:18] <Deeps> but yeah, i wouldn't want many windows servers ;)
[12:19] <Kamping_Kaiser> DFS?
[12:19] <Deeps> distributed file system
[12:20] <Deeps> raid over samba, i guess
[12:20] <Kamping_Kaiser> ah, i see
[12:20] <Deeps> remarkably easy to setup
[12:20] <Deeps> many of the windows services are, and work surprisingly well on a small scale
[12:21] <Deeps> if you can get them for free (or close to), it's ideal, as pretty much any numpty can come along and set up all sorts with a few button clicks
[12:21] <Deeps> it's when you try to scale up and start having to pay MS's regular pricing that it stops being particularly useful
[12:21] <Deeps> and/or want internet facing services i guess
[14:27] <lukehasnoname> Happy Canada Day!
[14:31] <nxvl> good morning!
[14:32] <lukehasnoname> Happy Canada Day!
[14:40] <shingalate1> Any reason an ftp user would be able to log in with /bin/bash as their shell but not /bin/false ?
[14:41] <Kamping_Kaiser> yes there is
[14:41] <shingalate1> I'm using vsftpd
[14:54] <shingalate1> oh okay
[15:03] <shingalate1> figured it out /bin/false wasn't listed in /etc/shells
[15:05] <lukehasnoname> I like /bin/stfu better
[15:16] <Ballena> Hi. Does anyone know where I can find a help channel for BitlBee?
[15:32] <mm_202> Hey guys, how would I empty the 'Trash' via the shell?
[15:33] <mm_202> Meh rm -rf .Trash-1000 works.
[17:04] <melter> why don't i get postfix's default /etc/aliases file when i install it?
[17:04] <lamont> did the file already exist?  it won't create one
[17:04] <melter> who owns that file?
[17:04] <melter> if i remove it and reinstall postfix, it creates it
[17:04] <lamont> "the admin" :-(
[17:04] <melter> what package?
[17:05] <lamont> $MTA sort of owns it... I don't know of a single MTA that purges it on --purge
[17:06] <lamont> more to the point, exim4 doesn't
[17:06] <melter> postfix doesn't either
[17:06] <lamont> and it's not attached to any package as a conffile
[17:06] <lamont> melter: right.  I copied the behavior of exim4
[17:07] <melter> postfix has a nice default file containing aliases for abuse, operator, etc., but none of that gets put into the /etc/aliases file
[17:07] <lamont> ah, you mean upstream postfix?
[17:07] <melter> yes
[17:08] <melter> and that's the way it works in gentoo, too
[17:08] <lamont> yeah - I've never grabbed that..  maybe I should
[17:08] <melter> also, the main.cf file is misconfigured by default because if dhclient bugs
[17:08] <melter> *because of
[17:08] <lamont> could you smack a bug into either launchpad or debian's bts asking that the upstream aliases file be delivered on virgin install (or at least something based on it)
[17:09] <lamont> misconfigured in what way?
[17:09] <melter> there's a bug in dhclient that causes it to sometimes not set the hostname provided by the dhcp server
[17:10] <lamont> sounds like a dhcp bug, not a postfix bug... :(
[17:10] <melter> so if i set my hostname to "foo" when i installed, it should be overwritten when i boot, but it doesn't
[17:10] <melter> by default, postfix uses gethostname to get the hostname
[17:11] <melter> but ubuntu re-configures it to foo.example.com, which doesn't exist
[17:11] <lamont> except that the postfix postinst sets myhostname == fqdn
[17:11] <nxvl> nealmcb: about the oscon question, i have just checked my dates and i will be on the states just after the oscon :(
[17:11] <nxvl> so i can't make it
[17:11] <lamont> since historically asking glibc for fqdn got you just the first component..  thanks glibc
[17:12] <nealmcb> nxvl: too bad - looks like a good one
[17:12] <nxvl> yes
[17:12] <nxvl> but i have already ask for my vacations, and have the flight tickets and all
[17:13] <melter> does anyone know how to turn off dhclient? would uninstalling it work?
[17:14] <lamont> network managler kind of likes dhclient
[17:14] <lamont> OTOH, just configuring the interface in /etc/network/interfaces would do that
[17:14] <melter> also, why does hardy ship with such an old version of dhcpcd?
[17:14] <lamont> as in telling it 'inet static' with the right stuff, instead of 'inet dhcp'
[17:16] <lamont> I don't even have a dhcpcd on my machine that I can find...
[17:16] <melter> it's not installed by default, but 3.0.18 has a bug fix i need
[17:16] <melter> and ubuntu ships with 3.0.17
[17:17] <lamont> that would be because 3.0.17 was the current (debian) version at the time that the freeze for hardy hit
[17:17] <lamont> intrepid has 3.2.3-1.1
[17:17] <melter> i know, i already tried it :)
[17:17] <melter> i wish i could put it on production machines right now :)
[17:18] <lamont> "old" equates to < 3 months old at release date, which by most schedules is still pretty shiny-new
[17:18] <lamont> most commercial schedules, that is
[17:19] <lamont> afk for a nit
[17:19] <lamont> bit, even
[17:20] <melter> i'm pretty sure 3.0.18 was out more than just 3 months ago
[17:23]  * delcoyote hi
[17:25] <melter> what's ubuntu-minimal? is it ok to remove it?
[17:28] <nijaba> melter: if you wan't to wipe your install, sure
[17:29] <nijaba> melter: minimal is the smallest set of packages to have ubuntu boot...
[17:31] <melter> so if i let apt-get remove it when i uninstall dhcp3-client, that would be a bad thing
[17:37] <nxvl> ScottK: i find my descriptions very clear
[17:37] <nxvl> ScottK: don't you?
[17:38] <ScottK> nxvl: I'd have to look again.
[17:39]  * ScottK is in a phone meeting right now.
[19:06] <kirkland__> buenos tardes
[19:07] <lukehasnoname> hola
[19:07] <nxvl> kirkland__: buenAs tardes
[19:07] <nxvl> :D
[19:07] <kirkland__> nxvl: :-)
[19:09]  * kirkland__ votes for a UDS on the Mayan Riviera
[19:09]  * lukehasnoname Houston, Texas
[19:09] <nxvl> kirkland__: i'm trying to make all of you come to peru
[19:10] <lukehasnoname> Great... smog and.... green water
[19:10] <nxvl> kirkland__: to see how it is like in the reality
[19:10] <nxvl> :P
[19:10] <kirkland__> *lukehasnoname couldn't be more wrong
[19:10] <lukehasnoname> how so
[19:10] <kirkland__> nxvl: peru sounds great
[19:11]  * ogra still waits for the iceland UDS ... free natural hot tubs everywhere and good beer
[19:12] <lukehasnoname> kirkland__: Have y'all ever thought about how awesome technology is that there are undersea cables connecting us?
[19:14] <kirkland__> lukehasnoname: agreed.  Neal Stephenson's Cryptonomicon has an interesting storyline about undersea cables
[19:14] <lukehasnoname> how am I wrong about Houston?
[19:15] <kirkland__> lukehasnoname: no, you're right, Houston's coastline sucks
[19:15] <lukehasnoname> heh
[19:15] <kirkland__> lukehasnoname: I'm talking about the Yucatan Pennisula, Carribean side
[19:15] <kirkland__> Houston != Mayan Riviera, not sure where you got that from
[19:15] <lukehasnoname> I like Houston, and I love the coast, but our water isn't the clearest
[19:15] <lukehasnoname> as in, it's opaque
[19:16] <lukehasnoname> but I still play in it
[19:18] <nxvl> Lima is in the coast
[19:18] <nxvl> :D
[19:20] <melter> what's the proper way to remove dhcp3-client? "apt-get remove dhcp3-client" will also remove ubuntu-minimal
[19:21] <nxvl> ubuntu-minimal is just a metapackage
[19:21] <nxvl> to install more other packages
[19:21] <nxvl> so it doesn't hurt to remove ir
[19:21] <nxvl> it
[19:22] <melter> nxvl, that's not what nijaba said earlier
[19:22] <melter> "if you wan't to wipe your install, sure"
[19:23] <melter> "minimal is the smallest set of packages to have ubuntu boot..."
[19:24] <nxvl> yes
[19:24] <nxvl> but ubuntu-minimal is just a metapackage
[19:24] <nxvl> the rationale is:
[19:24] <nxvl> if some package tries to remove ubuntu-minimal it is needed
[19:24] <nxvl> but if you want to remove it for some reason
[19:24] <lukehasnoname> Meaning it's likea shopping cart of packages. Once you put the packages in the pantry (your computer) you dont' need the cart
[19:24] <nxvl> is up to you
[19:25] <nxvl> the problem here is dhcp3-client not ubuntu-minimal
[19:25] <nxvl> :D
[19:25] <melter> nxvl, YES
[19:25] <nxvl> i mean
[19:25] <nxvl> the one who will break you system
[19:26] <nxvl> lukehasnoname: exactly
[19:35] <lukehasnoname> must... learn... LDAP...
[19:37] <lukehasnoname> l33t
[19:48] <jpds> So... find a book on it.
[19:48] <lukehasnoname> I know
[19:49] <lukehasnoname> don't hate, jpds
[19:49] <RoAkSoAx> lol
[19:54] <mathiaz> kees: jdstrand: what would you answer to bug 244406 ?
[19:54] <uvirtbot`> Launchpad bug 244406 in mysql-dfsg-5.0 "File load data infile'file-name' fails" [Undecided,Won't fix] https://launchpad.net/bugs/244406
[19:57] <jdstrand> mathiaz: I agree with the "Won't Fix", but might guide him on how to add /var/www to the profile rather than just going with complain mode
[19:57] <jdstrand> mathiaz: this statement is false: "mysqld already applies the necessary restriction and that the apparmor restriction is redundant"
[19:58] <jdstrand> mathiaz: in the very limited scope of what he is trying to do, that is correct, but considering mysqld as a whole, it is not accurate
[20:02] <kees> mathiaz: I've got nothing to add.  :)  jdstrand covered it with the "add what you need" part.  People will slowly get used to the extra MAC systems, and they just need to add more perms.
[20:19] <[diablo]> evening #ubuntu-server
[20:19] <[diablo]> guys, xen / ubuntu 8.04 related q's
[20:19] <[diablo]> ?
[20:19] <[diablo]> #?
[20:23] <jpds> !ask | [diablo]
[20:23] <[diablo]> !ask sarcasm
[20:23] <[diablo]> ;)
[20:24] <[diablo]> ok.. well, I've been using KVM for quiet some time, maybe near 1 year... Today I started with new company, and their very into Xen ... I had a proper headache with 8.04 (x64) and xen
[20:25] <[diablo]> broken packages
[20:25] <[diablo]> no intel graphics support
[20:25] <[diablo]> when booting xen kernel
[20:25] <[diablo]> now I know (and I completely agree with) that Ubuntu is geared towards KVM
[20:26] <VilasBoas> hey i need a litle help
[20:26] <VilasBoas> I'm installing on my ubuntu hasrdy a Lamp server but the phpmyadmin isn't working it can't find it :(
[20:26] <[diablo]> but should I drop for the moment even the idea of getting Xen running nicely in Ubuntu?
[20:26] <[diablo]> I'm assuming less attention is going to be paid to the fixes and patches than KVM
[20:28] <[diablo]> here @ home.. I installed xen on my Q6600 box  ....  the nvidia drivers seem not to have been built around the xen kernel...
[20:28] <[diablo]> it's a touch frustrating to use nv
[20:29] <[diablo]> VilasBoas, you 'cant find it'
[20:29] <[diablo]> ?
[20:29]  * [diablo] advises VilasBoas to look under his bed
[20:29] <VilasBoas> Diablo: do you whant to go .........
[20:29] <[diablo]> VilasBoas, you've installed it right?
[20:31] <VilasBoas> yes i have but when i go to http://localhost/phpmyadmin it appears black
[20:31] <[diablo]> black?
[20:32] <VilasBoas> yes black
[20:33] <[diablo]> you checked the apache logs?
[20:34] <VilasBoas> if it is working
[20:34] <VilasBoas> the apache logs
[20:34] <[diablo]> any messages
[20:35] <VilasBoas> it's working
[20:35] <[diablo]> but look in the logs
[20:35] <[diablo]> it must say something
[20:35] <VilasBoas> how can i do that?
[20:35] <[diablo]> erm
[20:36] <[diablo]> in the /var/logs/apache
[20:36] <VilasBoas> i was folling the instrutions in http://www.guiaubuntupt.org/wiki/index.php?title=Ubuntu_hardy
[20:36] <[diablo]> no idea, i don't follow tutorials to do things like that
[20:36] <VilasBoas> of how to install a lamp server
[20:36] <VilasBoas> :(
[20:37] <[diablo]> VilasBoas, I assume there is some documentation on the ubuntu site
[20:38] <[diablo]> a LAMP is more than common
[20:39] <VilasBoas> ok thank you
[20:39] <VilasBoas> :(
[20:40] <[diablo]> VilasBoas, https://help.ubuntu.com/8.04/serverguide/C/index.html
[20:40] <[diablo]> a start?
[20:41] <[diablo]> http://www.ubuntugeek.com/ubuntu-804-hardy-heron-lamp-server-setup.html
[20:41] <[diablo]> maybe too
[20:43] <[diablo]> VilasBoas, tengo que pasar mi perro... adios
[20:43] <VilasBoas> adios diablo and thanks
[21:17] <sourcemaker> how can I log the access.log from apache to mysql database?
[21:27] <LMJ> hello
[21:27] <LMJ> sourcemaker : why you wanna explode your mysql database? ;)
[21:30] <sourcemaker> LMJ: that's right :-)
[21:30] <LMJ> sorry, gtg
[21:30] <LMJ> CU
[21:37] <nxvl> soren: did you have a amd64 machine near you?
[21:40] <nxvl> or does anyone has a amd64 machine on hands and wants to build and run lintian on a package for me
[21:45] <zul> nxvl: sure put it somewhere I can get it
[21:49] <nxvl> zul: http://revu.ubuntuwire.com/revu1-incoming/augeas-0807012110/augeas_0.2.0-0ubuntu1.dsc
[21:49] <soren> nxvl: I have nothing but amd64 machines anymore.
[21:50]  * soren builds
[21:50] <nxvl> soren: my brain is in reverse mode and english not my native lenaguaje, have you just said that you only have amd64 machines or that you don't have them anymore?
[21:51] <soren> I only have amd64 machines.
[21:52] <nxvl> \o/
[21:52] <zul> nxvl: host not found
[21:52] <nxvl> what?
[21:52] <nxvl> http://revu.ubuntuwire.com/details.py?package=augeas
[21:52] <soren> Worked for me..
[21:52] <nxvl> for me to
[21:52] <nxvl> zul: check you dns
[21:53] <zul> nxvl: nm it hicked up
[21:53] <soren> Weird, my intrepid schroot is b0rken.
[21:57] <nxvl> need to go to the classroom, be back in 10 minutes
[22:01] <VilasBoas> i have a big problem i was trying to install a LAmp server but when i try to open a php file the firefox ask me if i what to save or to open the script
[22:02] <VilasBoas> can anyone please help me
[22:05] <nxvl> ok back
[22:05] <nxvl> any results?
[22:08] <joebob777as7> I set up a hardy server and install gnome. I want to add a printer to be able to share it and printers doesn't show up under the control panel...
[22:09] <joebob777as7> can someone point me in the right direction?
[22:15] <soren> nxvl: Worked for zul.
[22:16] <soren> nxvl: I'm building on intrepid now. I failed on hardy.
[22:16] <soren> joebob777as7: #ubuntu
[22:17] <soren> VilasBoas: Your apache server isn't interpreting your php files. Restart apache, and try again after you've completely restarted your web browser.
[22:17] <soren> They have an annoying tendency to cache mimetypes.
[22:19] <soren> nxvl: zul didn't have any lintian warnings either, by the way.
[22:20] <nxvl> \o/
[22:20] <soren> nxvl: By the way: I know that norsetto found some mistakes in your copyright file, but I have to say I was impresed at the copyright file that was already there.
[22:20]  * nxvl HUGS soren and zul
[22:20] <nxvl> yeah, i fixed thos warning already
[22:21] <nxvl> soren: thanks! i was trying to have it really explicit
[22:21] <soren> Yeah. Good job.
[22:21] <soren> Sometimes I think getting the copyright file right is the hardest part of packaging. :)
[22:22] <nxvl> yes
[22:22] <nxvl> not the hardest, but the teduis
[22:23] <ScottK> It's the area where I most often find problems in a package after another MOTU has given it a +1.
[22:23] <nxvl> yeah, we are developers, not lawyers, so most people focus more on techical things
[22:24] <ScottK> OTOH, it's a wonderland for the pedantic.  I've found debian/copyright problems in packages put up for review by an archive admin.
[22:34] <soren> ScottK: Heheh :)
[22:34]  * soren wanders off
[22:51] <nxvl> soren: http://revu.ubuntuwire.com/details.py?package=augeas <- 0.2.1 is out
[23:02] <joebob777as7> i'm trying to tunnel to my cups shared printer at my office. Here is the command i'm running, ssh -L 1234:localhost:631<EMAIL_ADDRESS>when i go add the printer it doesn't show up anywhere how can i figure out the device uri to tupe in cups?