[00:18] <wallyworld> thumper: babbageclunk will coprrect me, but the BootstrtapRaft() bit is called during bootstrap to set up the cluster; i can't recall exaxctyl what it stores
[00:18] <babbageclunk> It stores the raft configuration into the raft log
[00:18] <wallyworld> so for a running system being upgraded, we don't bootstrap
[00:18] <wallyworld> so miss that api call
[00:19] <thumper> ah...
[00:19] <thumper> ok
[00:19] <thumper> how big a change is the k8s api?
[00:20] <wallyworld> not that big - need to return a struct instead of a string for getting info to set up a pod
[00:20] <wallyworld> most of the attrs in 2.4 will be empty
[00:20] <thumper> that's fine
[00:20] <thumper> get it done
[00:20] <wallyworld> will do
[00:21] <wallyworld> need to pave way for storage in 2.5
[01:04] <veebers> Is there a way to get 2.2.9 working with snap installed lxd?
[01:05] <wallyworld> veebers: not sure tbh, may require the apt version
[01:05] <wallyworld> thumper: here's that refactoring pr for the api params https://github.com/juju/juju/pull/8844
[01:05] <veebers> wallyworld: ah apt lxc not apt juju that makes sense ^_^
[01:06] <veebers> shoot, I only recently migrated from apt installed lxd to snap installed
[01:06] <wallyworld> joy
[01:08] <veebers> going to spin up an ec2 instance and use that as the host ^_^
[01:08] <wallyworld> that works
[01:23] <babbageclunk> wallyworld: what's the right way to get all controller machines from state?
[01:28] <babbageclunk> wallyworld: ooh, looks like State.ControllerInfo has it - and then I guess I can ask each machine for their address.
[01:44] <wallyworld> babbageclunk: i think so, let me have a look
[01:44] <wallyworld> yeah that works but i thought we had another way, i'll poke around
[01:46] <babbageclunk> I'm struggling to work out how to select the right address for each machine.
[01:46] <babbageclunk> Trying to follow how the peergrouper does it is doing my head in.
[01:48] <babbageclunk> I could do it sort-of-heuristically using the api addresses from the agent config: when I find a machine with an address that matches an api address then I can match them up
[01:49] <anastasiamac_> wallyworld: thumper: unskipping test PRs for reviews - 8840:8843 PTAL?
[01:50] <wallyworld> babbageclunk: there's got a be a better way
[01:50] <thumper> anastasiamac_: I'd like to see the premerge check passing before approving
[01:50] <wallyworld> i can poke around
[01:50] <babbageclunk> wallyworld: thanks
[01:51] <anastasiamac_> thumper: only 1 out of 4 had an un-related failure... the other 3 passed...
[01:54] <wallyworld> babbageclunk: did we need a HO?
[01:54] <babbageclunk> wallyworld: yeah, might be good - in standup?
[01:54] <wallyworld> sure
[01:55] <thumper> anastasiamac_, wallyworld: I'd prefer to push back on the test changes, just because it is introducing more churn without much benefit at this stage
[01:55] <thumper> I'd prefer them to land post 2.4.0 release
[02:02] <anastasiamac_> thumper: ack
[02:03] <anastasiamac_> thumper: in fact, m happy to unskip them in develop branch instead
[03:16] <veebers> wallyworld: you think the "--agent-stream" addition to juju-upgrade is worth putting in 2.4 release notes?
[03:17] <wallyworld> veebers: i think so yeah
[03:17] <veebers> sweet, I'll make is so
[03:18] <wallyworld> as it's a usability improvement
[03:47] <veebers> I'm being dense, how can I change an agent stream for an upgrade? (juju upgrade-juju -m controller --agent-version 2.4-rc2 --agent-stream=proposed won't work because the controller doesn't support that ^_^)
[03:51] <veebers> ah, rtfm helps; juju model-config -m controller agent-stream=devel
[05:00] <wallyworld> babbageclunk: how goes the patch?
[05:01] <babbageclunk> wallyworld: just testing it now - think I have a problem with timing start up, might need to have the raft worker start later.
[05:01] <wallyworld> you can gate on !upgrading... you doing that?
[05:03] <babbageclunk> yup
[05:10] <wallyworld> babbageclunk: so this timing issue is not new then
[05:10] <babbageclunk> Oh, I mean, the raft worker wasn't gated on upgrade, but now it needs to be, so I'm doing it now
[05:19] <veebers> wallyworld: you have a quick sec? https://pastebin.canonical.com/p/SvjPwMpgHB/ I set the agent-stream, but juju-upgrade without an explicit version (i.e. 2.4-rc2) it chooses 2.3-rc2 (from a base 2.2.9 install). That's expected behaviour right? (If I understand the upgrade-juju help correctly)
[05:20] <wallyworld> i think it goes +1 by default, can check
[05:22] <wallyworld> veebers: first look - the code seems to say it will upgrade to the version of the juju client if not specified
[05:23] <veebers> wallyworld: I think that's right, just re-reading the help docs)
[05:23] <veebers> wallyworld: ack, that matches my expectations and what I'm seeing. Thanks :-)
[05:23] <wallyworld> good, docs match code :-)
[05:23] <veebers> even better ^_^
[12:20] <enrico_> hello, please anyone to help: trying to deploy and getting this ->  no obvious space for container "0/lxd/0", host machine has spaces: "default", "overlay", "provider", "storage" <-- any idea?
[12:21] <rick_h_> enrico_: check out https://docs.jujucharms.com/2.3/en/network-spaces and then the binding syntax
[12:22] <rick_h_> enrico_: basically juju is saying you've got 4 spaces and we're not sure how to setup the container because we don't know which network interfaces need to be setup in which way to make sure the application is on the right network
[12:28] <magicaltrout> how's the hangover rick_h_ ?
[12:29] <rick_h_> magicaltrout: :) drink responsbily
[12:29] <enrico_> rick_h_: thanks you... I've tried to follow the doc.. Juju recognizes the 4 spaces defined in MAAS and in to my bundle I've binded them  using the example here https://jujucharms.com/nova-cloud-controller/
[12:29] <rick_h_> enrico_: ok, so the nova-cloud-controller is what you're putting in 0/lxd/0?
[12:31] <enrico_> rick_h_: yes but I've got the same error for the others services I've spread over others containers! so something wrong with my syntax ?
[12:32] <rick_h_> enrico_: maybe, juju isn't liking the binding and fails because it doesn't know what to do
[12:33] <enrico_> rick_h_: please look at https://pastebin.com/3sXEFgtV as example of my conf
[12:33] <enrico_> rick_h_: Can I do that: mgt: default ? when my space is named default ?
[12:33] <rick_h_> enrico_: right, this is application binding so that the endpoint on the application is bound to the space.
[12:33] <rick_h_> enrico_: looking for example
[12:35] <Guest53> GM I keep getting the following in three OSDs that have been rebooted.  Two of the OSDs are stuck in upgrading state.  The ceph cluster is operational.
[12:36] <Guest53> unit-ceph-osd-0: 08:09:20 DEBUG unit.ceph-osd/0.config-changed Error ENOENT: key 'osd_osd5_luminous_done' doesn't exist
[12:36] <Guest53> unit-ceph-osd-0: 08:09:20 INFO unit.ceph-osd/0.juju-log osd5 is not finished. Waiting
[12:36] <Guest53> unit-ceph-osd-0: 08:09:20 DEBUG unit.ceph-osd/0.config-changed Error ENOENT: error obtaining 'osd_osd5_luminous_start': (2) No such file or directory
[12:36] <Guest53> unit-ceph-osd-0: 08:09:20 INFO unit.ceph-osd/0.juju-log Monitor config-key get failed with message: b''
[12:36] <Guest53> unit-ceph-osd-0: 08:09:21 INFO unit.ceph-osd/0.juju-log waiting for 16 seconds
[12:36] <rick_h_> enrico_: so I'm looking at https://jujucharms.com/glance/265 and I don't see any endpoint called mgt
[12:36] <rick_h_> enrico_: so I think the thing is getting those bindings to be the real endpoints on the charm bound to the space
[12:37] <enrico_> rick_h_: oooook so the endpoints names are predefined with the charms and I have to use them as they are ! Ok make sense ! Thanks you !  going to try
[12:38] <rick_h_> enrico_: right, so that the juju can help the charm tell it what data it knows about needs to go over what networks
[12:38] <rick_h_> enrico_: e.g. ceph has a data plane for ceph->ceph communication that something like keystone will not
[12:39] <enrico_> rick_h_: yes okok I was missing that key thanks you :)
[12:39] <rick_h_> enrico_: np, good luck!
[12:41] <acss> Sorry entered as Guest53 can anyone tell me why I would get the key osd_osd5_luminous_done
[12:41] <acss> from above in the chat
[12:42] <acss> This seems to be created by juju
[13:57] <acss> Hello I have three OSDs and it appears there is some way juju is references keys to the wrong hosts.  On hostname osd6 I keep getting an error unit.ceph-osd/0.config-changed Error ENOENT: key 'osd_osd5_luminous_done' doesn't exist
[13:57] <acss> on hostname osd5 I get unit.ceph-osd/0.config-changed Error ENOENT: key 'osd_osd4_luminous_done' doesn't exist
[13:58] <acss> Can anyone please tell me the direction to look into to find the why this is happening?
[13:59] <hml> acss: have you asked in #openstack-charms?
[14:00] <acss> No I can try that thank you


[00:52] <pmatulis> pleia2, hi, i hear you are a free agent now :(
[00:52] <pleia2> pmatulis: indeed :\
[00:55] <pleia2> pretty gutted to leave the teams I'm on, I loved my job
[00:56] <pleia2> but new beginnings and all, I'm sure it'll all be ok and I'll find another great thing
[00:57] <pmatulis> come to the 'buntu mothership perchance? :D
[00:58] <pleia2> I've had a few chats, but it won't work out
[00:59] <pleia2> I think my requirements are a bit much for a small-ish company
[00:59] <pleia2> (salary, event travel)
[00:59] <pmatulis> you like to travel you mean?
[01:00] <pleia2> I travel about 25% of the time to speak at conferences
[01:00] <pleia2> do about 100k of travel per year
[01:00] <pleia2> HPE was paying for that, looking for someone else to now ;)
[01:00] <pmatulis> people around me travel a fair amount
[01:00] <pmatulis> but, if you looked into it already, ok
[01:01]  * pleia2 nods


[08:19] <dholbach> good morning
[11:57] <popey> davmor2, you test using vcards / vcf files now and then?
[11:58] <davmor2> popey: yup I send them via contacts app from one device to another
[11:58] <davmor2> popey: why?
[11:58] <popey> i need a valid vcf file to test something
[11:59] <davmor2> popey: infact I tend to send you contact because short of your address I have all the other fields filled out :)
[11:59] <davmor2> popey: ah just sms yourself a contact :)
[11:59] <davmor2> popey: you can also use dekko now too :)
[12:00] <davmor2> popey: at least DanChapman added it not sure if it is in the store with that yet
[12:00] <popey> looking at bug 1447721 to add vcard support to file manager
[12:00] <popey> it's simple to do, just need a vcard to test it
[12:02] <davmor2> popey: try and use one like your wife for example where you have name, number, email, work email, address etc, open gmail tap on attach and open contacts select that contact all good
[12:03] <davmor2> popey: or sms it
[12:03] <davmor2> popey: either way works :)
[12:03] <DanChapman> davmor2: yeah the share vcard fix is not in the store just yet.
[12:04] <popey> hmmm
[12:04] <davmor2> popey: what's up
[12:05] <popey> just trying to figure out how
[12:05] <DanChapman> popey: you could also just export you google contacts in the web ui and get a nice big vcf file
[12:05] <davmor2> popey: which do you want gmail or sms
[12:06] <popey> right, used an android device to email me a contact
[12:06] <popey> will detatch that and put on phone, thanks chaps!
[12:06] <davmor2> popey: no worries
[12:09] <popey> \o/ patch works
[12:09] <popey> I can share vcards from file manager now
[12:10] <popey> best two lines I've written today!
[12:11] <DanChapman> :-D
[14:04] <DanChapman> bzoltan_: hey! i'm having some troubles trying to get dekko to run using the ubuntu sdk desktop kit due to Ubuntu.Content and Ubuntu.PushNotifications not being installed. Shouldn't these be included in the desktop kit as they are part of the sdk?
[14:05] <bzoltan_> DanChapman: thanks for reminding me, let me fix that...
[14:08] <bzoltan_> DanChapman: we need to build the qtdeclarative5-ubuntu-content1 and qtdeclarative5-ubuntu-push-plugin with the Desktop Kit
[14:10] <DanChapman> bzoltan_, :-) oh brilliant thanks! I wasn't sure if I had a broken install or something. So I can  just expect to get that in a coming update?
[14:12] <bzoltan_> DanChapman: a week or two
[14:13] <DanChapman> bzoltan_: ok thanks
[14:18] <ahayzen> balloons, o/ do you know what 'Unable to get "use_description_for_commit" configuration for music-app-ci' means on jenkins? https://core-apps-jenkins.ubuntu.com/job/generic-update-mp/213/console
[14:21] <brendand> ahayzen, it's expecting to find use_description_for_commit in here: https://core-apps-jenkins.ubuntu.com/job/generic-update-mp/213/parameters/
[14:21] <ahayzen> balloons, oh cmake
[14:21] <ahayzen> brendand, oh ..
[14:23] <ahayzen> brendand, how do i fix that? or is that something you guys normally setup?
[14:24] <ahayzen> interestingly another one passed, maybe a rerun will be enough
[14:26] <brendand> ahayzen, that job succeeded though?
[14:26] <brendand> ahayzen, they all say that but still succeed
[14:26] <ahayzen> oh ok
[14:26] <ahayzen> must have been the cmake issue i found inside
[14:28] <brendand> ahayzen, i'm not sure it has anything to do with cmake - it's in that voteOnMergeProposal script/command which I can't see the source for
[14:28] <ahayzen> brendand, eg this one passes https://core-apps-jenkins.ubuntu.com/job/generic-update-mp/216/console
[14:29] <ahayzen> brendand, i assume this is failing https://core-apps-jenkins.ubuntu.com/job/generic-update-mp/213/console due to the inner error here https://core-apps-jenkins.ubuntu.com/job/music-app-ci/14/console
[14:29] <ahayzen> its just not as obvious as the old jenkins :-/
[14:29] <ahayzen> or maybe i'm just clicking the wrong link with the new jenkins :-P
[14:30] <brendand> ahayzen, generic-update-mp is passed PASS or FAIL as the parameter --status for voteOnMergeProposal based on the upstream job (music-app-ci)
[14:31] <brendand> ahayzen, so yes it says DEBUG: FAILED because that job failed
[14:31] <brendand> ahayzen, the jbo itself is not failing though :)
[14:31] <brendand> job
[14:31] <ahayzen> brendand, yup :-) just blame me not adjusting to the new bot :-)
[14:34] <brendand> ahayzen, so in summary the use_description_for_commit thing is a bug probably but doesn't impact on the outcome of the job
[14:34] <ahayzen> brendand, yup thanks for looking :-)
[14:57] <bzoltan_> DanChapman: one possible impediment is that many of the build dependencies of these two APIs exist only since Vivid, so building them for trusty might be tricky
[17:25] <dobey> is anyone around familiar with low level qt development?
[17:38] <ogra_> dobey, like hacking GUI apps in a basement  ?
[17:38] <dobey> ogra_: like determining if a qt main loop is running or not
[17:39] <ogra_> :)
[17:55] <beni_> hei can anyone here help me with my ubuntu sdk trouble
[17:56] <beni_> i need help
[17:58] <mcphail> beni_: we won't know until you ask your question :)
[18:00] <beni_> i need to create an app, a WLAN Scanner --> grpahical view , and listview of available networks
[18:00] <beni_> which project do i have to create?
[18:00] <beni_> the app should work on ubuntu touch
[18:02] <beni_> is there a way to create such kinde of app in pure "c++" or in pure "qml"?
[18:02] <mcphail> beni_: Suspect you're going to need one of the projects with a qml frontend and a c++ backend. There are templates for that in the SDK which are quite self-explanatory
[18:03] <beni_> yeah thanks, but there is another problem i have
[18:03] <beni_> when i use a qml app with c++ backend i cant change the design
[18:03] <beni_> "designer" says that it cant find the qmlplugins
[18:04] <beni_> i already reinstalled "ubuntu sdk" and also "ubuntu"
[18:04] <beni_> but it still doesnt work
[18:05] <beni_> mcphail do you know what i can do?
[18:06] <mcphail> beni_: designer doesn't work, I'm afraid
[18:06] <beni_> what can i do?
[18:07] <mcphail> beni_: I'm afraid you have to define the UI in code. At least QML makes it easy
[18:07] <beni_> so this is usually so?
[18:07] <DanChapman> It's probably easier to do it in code than use that designer anyway :-D
[18:07] <mcphail> beni_: this is a known issue with qtcreator and custom UI components. All the Ubuntu components are custom
[18:08] <beni_> so you would reccomend me to do it in code? :)
[18:08] <DanChapman> It's the only way to do it atm
[18:09] <beni_> ok do you know if its possible to make a graphical view of all these networks, like its usual for a wlanscanner?
[18:11] <mcphail> beni_: of course. I think there is a scanner app in the store already
[18:11] <beni_> do you know the name?
[18:13] <mcphail> beni_: I'm trying to find it, but the uappexplorer search function is awful :(
[18:13] <beni_> i found a network scanner but it hasnt got graphical view of networks
[18:15] <mcphail> beni_: hmm. Thought there was one but I can't find it so I may be havering...
[18:15] <beni_> so can i use its source code somehow?
[18:16] <mcphail> beni_: I suspect you're going to need information on channel and signal strength?
[18:16] <beni_> yes
[18:17]  * mcphail wonders how you can get that information in a confined app...
[18:18] <mcphail> beni_: there is an unconfined app which does it - https://open.uappexplorer.com/app/wifiscanner.mzanetti
[18:19] <mcphail> beni_: suspect that information won't be available to a confined app, so you won't get it into the normal store. mzanetti might be able to advise ^^
[18:19] <beni_> thank you for your help, you helped me very much
[18:19] <mcphail> beni_: np. Happy hacking :)
[18:28] <dobey> or how to run a single qt test inside a qt main loop, without doing so for all tests
[22:15] <rickspencer3> hey kenvandine
[22:16] <rickspencer3> so, my addSoundDialog
[22:16] <rickspencer3> looking at it now, it looks pretty self-contained
[22:17] <rickspencer3> have you considered creating some dialog components for the sdk that wrap up all the complexity of peerpicker, connections, contentstore, etc...?
[22:17] <rickspencer3> like "AddMusicDialog"?


[04:43] <tdaitx> hello bug squad! I need to add tasks for Trusty and Precise for OpenJDK 7 to LP:#1611598 with importance High (all jamvm packages are broken with the 2.6.7 update - packaged but not uploaded yet until the fix is in place)
[14:35] <tdaitx> teward, thanks for the help on LP: #1611598 ;-)
[15:57] <teward> tdaitx: you're welcome it needs approvals though
[17:40] <hggdh> teward, tdaitx: Precise and Trusty tasks approved
[17:40] <tdaitx> hggdh, teward thanks! ;-)
[17:50] <hggdh> tdaitx: thank *you* for working on this
[18:11] <tdaitx> hggdh, teward: could you please set importance as High in LP: #1611598 for both Trusty and Precise? Without that fix the jamvm is completely broken and for some archs that is the fastest VM available
[18:13] <hggdh> tdaitx: done
[18:13] <tdaitx> =D
[21:27] <KodiakFi> Hello ya'll - I'm a RHEL sysadmin but I noticed something Red Hat is in the process of fixing for RHEL also affects Ubuntu 16.04 - https://bugzilla.redhat.com/show_bug.cgi?id=1255507
[21:27] <KodiakFi> I just happened to have a host running a live version of 16.04 and thought I'd compare just for fun though we aren't a Ubuntu shop
[21:28] <KodiakFi> I believe it affects any distro using NetworkManager in an environment that uses MS DHCP and MS Dynamic DNS
[22:33] <hggdh> cyphermox: ^
[22:44] <teward> hggdh: thanks for taking care of tdaitx's items there, and thanks for approving the task nominations :)
[22:44]  * teward got busy as hell
[22:44] <teward> heck*
[22:44] <hggdh> hellck?
[23:29] <teward> hggdh: s/hell/heck/  <-- this should have been done, but my mind went away :
[23:29] <teward> (too busy trying to write up one of my scripts for code review by the community on the Code Review StackExchange site)


[00:00] <wgrant> jelmer: 15 minutes? kdebase too almost 9 hours...
[00:00] <wgrant> s/too/took/
[00:01] <jelmer> wgrant: it depends on the machine. pear importing kdelibs4 seems to take 15 minutes to figure out what revisions to fetch, 3 minutes to fetch the actual 1k revisions and then some time importing tags and moving branches around
[00:01] <mwhudson> each machine has to build the cache separately
[00:01] <wgrant> Ah, I see.
[00:01] <mwhudson> which is lame, but...
[00:02] <wgrant> The cache should be shared across the whole repo, though, right?
[00:03] <jelmer> wgrant, yes
[02:35] <StevenK> thumper, lifeless: Do either of you have a few moments to look over a quick MP I put up?
[02:35] <thumper> StevenK: sure
[02:36] <StevenK> thumper: https://code.edge.launchpad.net/~stevenk/launchpad/fix-ssh-keys-make-lp-user/+merge/32543
[02:42] <thumper> StevenK: which soyuz test uses it?
[02:44] <StevenK> thumper: Sorry, was distracted by mumble. lib/lp/soyuz/doc/sampledata-setup.txt
[02:44] <StevenK> Which calls utilities/soyuz-sampledata-setup.py
[02:45] <thumper> this is starting to make me hurl
[02:45] <thumper> what does that do?
[02:45] <StevenK> Haha, I knew I should have warned you
[02:46] <StevenK> utilities/soyuz-sampledata-setup.py sets up the database so developers can run Soyuz locally
[02:46] <thumper> so it isn't part of the actual test suite?
[02:46] <thumper> let me put this another way:
[02:47] <thumper> we should NOT be calling utility scripts from the test suite
[02:47] <StevenK> Well, the way I found this bug is via the test suite
[02:47] <StevenK> And I think the bug should be fixed
[02:48] <StevenK> But I'm happy to propose another branch that just removes that whole doctest
[02:49] <thumper> is the purpose of the doc test to make sure that the script doesn't break?
[02:49] <StevenK> Yes
[02:50] <thumper> what should be done then, is to move the guts of the scripts into something like lp.soyuz.tests or lp.soyuz.scripts.tests
[02:50] <thumper> and test that
[02:50] <thumper> and have the utility scripts call into those tested functions
[02:50] <thumper> you have two choices
[02:51] <thumper> 1) keep pulling on the thread and move the buts that need to be tested into lp.soyuz.<wherever>.tests
[02:51] <thumper> (or scripts)
[02:51] <thumper> and have the tests in tests
[02:51] <thumper> or
[02:52] <thumper> 2) take the easy way out, file a bug and add an XXX comment referencing the bug, and tag it tech-debt
[02:53] <StevenK> I'll do 2, and have a discussion about it when Julian isn't sick
[02:54] <thumper> ok
[02:54] <StevenK> thumper: But in either case, this is a real bug in make-lp-user, and should be fixed.
[02:54] <thumper> ack
[02:55] <thumper> file the bug, add the comment, and I'll approve it
[02:55] <StevenK> Yup, doing so now
[02:58] <StevenK> thumper: Bug filed, comment added, branch pushed.
[04:36] <wgrant> thumper: Why shouldn't it be called?
[04:36] <wgrant> The point is to test the script.
[04:36] <wgrant> And running the script is probably a reasonable way to do that.
[04:38] <thumper> if it is a tested script it should be in lp.soyuz.scripts
[04:38] <thumper> it is all about expectation
[04:38] <thumper> utilities are extra bits
[04:38] <thumper> the test suite should test lib/lp
[04:38] <thumper> not utilities
[04:38] <thumper> although it does test cronscripts and other scripts
[04:39] <thumper> but I think utilities is too much
[04:39] <wgrant> Why?
[04:39] <wgrant> Why not test it? What does it cost?
[04:39] <thumper> I'm not saying the code should be untested
[04:39] <thumper> it is about expectation
[10:04] <adeuring> On call: adeuring || reviewing: bryce || queue: []  || This channel is logged: http://irclogs.ubuntu.com/ || https://code.launchpad.net/launchpad/+activereviews
[13:08] <jelmer> Hi Abel, can I add a branch to your queue?
[13:33] <adeuring> jelmer: sure
[13:36] <jelmer> adeuring: Thanks, the MP is at https://code.edge.launchpad.net/~jelmer/launchpad/128259-async-1/+merge/32439
[13:54] <adeuring> jelmer: the last assertTrue() in testSuccess() needs something like "in log_lines"
[13:58] <jelmer> adeuring: Nice catch. I wonder if the matchers that James and lifeless have been working on has is useful here.
[13:58] <adeuring> jelmer: maybe; haven't used them
[13:59] <adeuring> yet
[14:20] <adeuring> jelmer: r=me, with a few more nitpicks
[14:20] <jelmer> adeuring: Thanks!
[14:45] <EdwinGrubbs> lifeless: can you look at the db changes in this branch? https://code.edge.launchpad.net/~edwin-grubbs/launchpad/bug-490659-series-timeout/+merge/32555
[14:55] <bac> hi adeuring
[14:55] <adeuring> hi bac!
[14:55] <bac> adeuring:  i'm sprinting this week and won't be doing reviews full-time today
[14:55] <adeuring> bac: ok, no problem.
[14:55] <bac> but i'll be doing reviews for branches coming out of our sprint
[14:55] <adeuring> bac: even better :)
[14:56] <bac> adeuring:  didn't want you to think i'd abandoned you
[14:57] <adeuring> bac: so, do you want to review sinzui's branch or shall i do it?
[14:59] <sinzui> bac said he would since he cares about the feature
[14:59] <sinzui> adeuring, ^
[14:59] <adeuring> sinzui: thanks;
[15:00] <sinzui> adeuring, bac will review all my branches because we are sprinting together.
[15:00] <adeuring> sinzui: thanks for the clarification
[15:46] <leonardr> adeuring, i would appreciate a review of https://code.edge.launchpad.net/~leonardr/lazr.restful/check_total_size_active_on_call/+merge/32590
[15:46] <adeuring> leonardr: sure
[15:59] <salgado> rockstar, yesterday I had a chat with flacoste and he suggested a change to https://code.edge.launchpad.net/~salgado/launchpad/layer-specific-navigation/+merge/32358, which you approved yesterday.  care to have a look at the incremental changes: http://bazaar.launchpad.net/~salgado/launchpad/layer-specific-navigation/revision/9640 and http://bazaar.launchpad.net/~salgado/launchpad/layer-specific-navigation/revision/9642 ?
[16:33] <adeuring> leonardr: r=me
[16:36] <leonardr> adeuring, thanks
[17:20] <rockstar> salgado, those changes look fine to me.
[17:20] <salgado> rockstar, cool, thanks!
[17:55] <salgado> is there anybody willing to do a small review for me? https://code.edge.launchpad.net/~salgado/launchpad/vostok-traverse-package/+merge/32599
[18:30] <leonardr> salgado, let's trade
[18:30] <leonardr> i need a follow-up
[18:30] <leonardr> https://code.edge.launchpad.net/~leonardr/launchpad/new-lazr.restful-and-friends/+merge/32474
[18:30] <salgado> leonardr, deal!
[18:36] <salgado> leonardr, approved.  out of curiosity, have you changed total_size into a link because it may be expensive to compute and not always necessary?
[18:36] <leonardr> salgado: exactly
[18:37] <salgado> cool
[18:40] <leonardr> salgado, why did it become necessary to remove the security proxy on the bug?
[18:40] <leonardr> and what does the .. syntax in your zcml mean?
[18:47] <leonardr> does it make sense to add a test that shows you can't traverse to a source package on some site other than vostok?
[18:47] <leonardr> answer me those questions three and i will approve your branch
[18:50] <salgado> leonardr, I think the makeBugTask() method was not used anywhere, or it's used by tests which log in as admins before calling it
[18:50] <leonardr> ah
[18:50] <salgado> the .. syntax means relative paths; '..' is the parent directory
[18:50] <leonardr> ok
[18:51] <salgado> and you can traverse to source packages on the launchpad.dev vhost
[18:51] <leonardr> but your mp says "it's only possible to traverse to distro series and source packages on the vostok.dev vhost"
[18:51] <leonardr> did you mean that it's not possible to traverse to anything else on vostok.dev?
[18:52] <salgado> what we want is to make sure that in vostok.dev you can only traverse to a subset of those you can traverse to on launchpad.dev
[18:52] <leonardr> ok, the language was ambiguous
[18:52] <leonardr> r=me
[18:52] <salgado> yeah, I guess I should change that to "it's possible to traverse only to ..."
[18:52] <salgado> on vostok.dev it's possible to traverse only to ...
[18:53] <salgado> I'll do that change
[18:53] <salgado> thanks leonardr
[18:54] <salgado> oh, that's in the mp.  I thought it was in the code
[18:54] <salgado> duh
[20:58] <lifeless> EdwinGrubbs: hi
[21:11] <EdwinGrubbs> lifeless: hi
[21:15] <lifeless> I've replied on the MP
[21:31] <lifeless> but I'd be very happy to chat realtime as well if thats useful
[22:54] <mars> salgado, have a minute to review https://code.edge.launchpad.net/~mars/launchpad/fix-ec2-shutdown-617598/+merge/32633 ?
[22:58] <salgado> mars, care to add a comment explaining why we use 'at' instead of shutdown +X?
[22:59] <mars> salgado, good idea, will do
[22:59] <salgado> r=me with that
[22:59] <mars> great, thanks!
[23:04] <jelmer> Could somebody perhaps re-review https://code.edge.launchpad.net/~jelmer/launchpad/update-bzr-git/+merge/32527 ? Tim already approved the changes itself but I had to fix two tests as well.
[23:13] <mars> jelmer, why is the 'from dulwich.repo import Repo as GitRepo' on line 36 right beside the test code?
[23:14] <mars> jelmer, and should you be using .getUniqueString() as the message parameter?
[23:15] <jelmer> mars: This isn't a valid excuse, but the reason I did it that way is because that's what the old code was doing to import run_git as well.
[23:16] <mars> hehe, yep, saw that :)
[23:16] <mars> jelmer, up to you.  I'll stamp it r=mars.  And about the import statement?
[23:17] <mars> oh, "It did that before" for /both/ the string and the import statement
[23:18] <jelmer> mars: Yep. But I agree the imports should be at the top of the file and using getUniqueString() is preferable to using "dsadsa".
[23:18] <mars> ok, I would at least change the import statement - it will stand out when others read the code :)
[23:18] <jelmer> mars: Thanks for the review.
[23:19] <mars> and if .getUniqueString() is already there, just takes a few ^W to fix it
[23:26] <jelmer> I have no idea what ^W does, but I think I understand what you mean :-)
[23:26] <mars> readline delete word left
[23:27] <mars> dangerous to learn, because it is also Gnome/CUA 'Close Window and lose everything you were doing because you were typing too fast and hit Enter instead of Cancel on the Save dialog'
[23:28] <jelmer> Heh, that's my first association with ^W as well.
[23:29] <jelmer> Anyway, I'm off.
[23:29] <jelmer> mars: Thanks again for the review, and have a nice weekend!


[07:21] <jrib> robdeman: hello
[07:21] <robdeman> hey jrbi
[07:22] <jrib> robdeman: how did you get in this situation?
[07:22] <robdeman> ehrm jrib that is :)
[07:22] <robdeman> well I installed Ubuntu 6.10 Server - LAMP (no gui)
[07:22] <jrib> _phantom_: someitmes there are classes here about ubuntu (not recently) but we also use it when we need a place with less traffic
[07:22] <robdeman> then I installed Subversion using apt-get
[07:22] <robdeman> then I learned that the Subversion that comes with Ubuntu is too old
[07:23] <robdeman> so I removed it and compiled Subversion myself
[07:23] <_phantom_> jrib: oh right sounds like fun ;-) Ill have to come in here now and again then
[07:23] <robdeman> then I learned that the Apache2 version that comes with Ubuntu is compiled against older ART libs
[07:23] <robdeman> si I removed apache2 and compiled apache2 from source
[07:23] <robdeman> well, that was such a nightmare that I now want to undo
[07:24] <robdeman> I just want to get Apache2 + Subversion from the repositories and no more compiled stuff
[07:24] <jrib> ok, so have you managed to remove those two things?
[07:24] <jrib> the compiled ones that is
[07:24] <robdeman> I am pretty sure about that
[07:24] <jrib> and subversion is ok now?
[07:24] <robdeman> I accidantely removed /etc/inid.d/apache2 by hand
[07:24] <robdeman> jrib: subversion is not installed yet
[07:25] <robdeman> its just removed
[07:25] <jrib> ok, lets handle apache then
[07:25] <robdeman> ok
[07:25] <robdeman> >> thanks for helping me out here
[07:25] <jrib> robdeman: sudo aptitude remove apache2-common && apt-cache policy apache2-common     on pastebin please
[07:26] <robdeman> http://pastebin.ca/445009
[07:27] <jrib> apt-cache policy apache2 | grep -i Installed
[07:28] <robdeman> jrib: Installed: (none)
[07:28] <jrib> ok, now:  sudo aptitude install apache2
[07:29] <jrib> pastebin if there is anything interesting
[07:29] <robdeman> jrib: http://pastebin.ca/445014
[07:30] <jrib> ok, ls /etc/init.d/apache2
[07:31] <robdeman> jrib: /etc/init.d/apache2
[07:31] <robdeman> but wait: I created that file
[07:31] <jrib> created how?
[07:32] <robdeman> using Nano, just an empty file
[07:32] <jrib> is it still empty?
[07:32] <robdeman> b/c when I did apt-get remove apache2-common it complaine dthat It could not remove that missing file...
[07:32] <robdeman> ye sits still empty
[07:32] <robdeman> it wasnt replace by the original one
[07:32] <jrib> ok remove apache2-common again
[07:32] <robdeman> sudo apt-get remove apache2-common ?
[07:32] <jrib> yes
[07:33] <robdeman> I did
[07:33] <robdeman> want the output in pastebin?
[07:33] <jrib> does /etc/init.d/apache2  still exist?
[07:33] <jrib> robdeman: not unless there were errors
[07:33] <robdeman> here it is http://pastebin.ca/445016
[07:34] <jrib> k, that looks fine
[07:36] <robdeman> mm
[07:37] <jrib> does /etc/init.d/apache2  still exist?
[07:37] <robdeman> oop ssorry: yes
[07:37] <jrib> delete it
[07:37] <robdeman> ok
[07:37] <jrib> sudo aptitude install apache2
[07:38] <robdeman> http://pastebin.ca/445024
[07:38] <jrib> robdeman: check /etc/init.d/apache2 now
[07:39] <robdeman> jrib: ls: /etc/init.d/apache2: No such file or directory
[07:39] <robdeman> strange eh?
[07:39] <jrib> indeed
[07:39] <jrib> is that the only file that's missing?
[07:39] <robdeman> I guess?
[07:40] <robdeman> also .. it doesnt download a fresh installer package...
[07:40] <robdeman> it just uses some cached copy of /apache2-common_2.0.55-4ubuntu4_i386.deb
[07:40] <robdeman> I dont understand why it doesnt geta fresh one, I replaced the sources.list with some standard stuff\
[07:40] <jrib> well delete it from /var/cache/apt/ if you want, but I don't think it matters
[07:41] <robdeman> oh well in that case
[07:42] <robdeman> I think I already tried that yesterday indeed
[07:42] <robdeman> so, are we lost here?
[07:42] <jrib> pastebin /etc/heh I'm laughing at /var/lib/dpkg/info/apache2.2-common.preinst
[07:42] <jrib> ignore the "pastebin /etc"
[07:43] <robdeman> so: /var/lib/dpkg/info/apache2.2-common.preinst ?
[07:43] <jrib> nah, it's not helpful, but it'sf unny
[07:45] <jrib> lets try purging instead of removing
[07:46] <jrib> sudo aptitude purge apache2-common
[07:46] <jrib> you might need to 'touch /etc/init.d/apache2' like you did last time
[07:49] <jrib> 	dh_installinit -a -r --init-script=apache2 debian/apache2.2-common.init.d -- start 91 09
[07:49] <jrib> I guess we may need to understand dh_installinit a bit more if this doesn't work
[07:51] <robdeman> mm
[07:52] <robdeman> http://pastebin.ca/445047
[07:54] <jrib> try: sudo aptitude purge apache2 apache2-mpm-worker apache2-common
[07:55] <robdeman> http://pastebin.ca/445054
[07:55] <jrib> oh you pressed yes last time :)
[07:55] <robdeman> eh?
[07:56] <jrib> you installed thttpd
[07:56] <robdeman> I did?
[07:56] <jrib> maybe remove that if you don't want it
[07:56] <robdeman> I dont want it..
[07:56] <robdeman> ok
[07:56] <jrib> ok then sudo aptitude install apache2
[07:57] <robdeman> ah errors while removing thttpd http://pastebin.ca/445057
[07:57] <robdeman> shall I continue with sudo aptitude install apache2 ?
[07:58] <jrib> heh great, another headache, yeah lets get apache2 in there
[08:00] <robdeman> ah bingo I think http://pastebin.ca/445059
[08:00] <jrib> cool, now just check to make sure it worked
[08:00] <jrib> robdeman: pay attention to the mesage though.  You will need to change that later
[08:01] <robdeman> well
[08:01] <robdeman> I think /etc/init.d/apache2 is own by root or eomthing? only sudo can access it
[08:01] <jrib> yes
[08:01] <jrib> but thttpd is in the way right now, we need to get rid of it
[08:02] <jrib> try  sudo /etc/init.d/thttpd stop
[08:04] <robdeman> ok I did
[08:04] <robdeman> I changed /etc/init.d/apache2 to 0755 ... b/c it didnt do anything
[08:05] <robdeman> hey this is strange:
[08:05] <robdeman>   /etc/init.d/apache2 stop ---> shows ' * Stopping apache 2.0 web server..  [ok] '
[08:05] <robdeman> but
[08:06] <robdeman> but /etc/init.d/apache2 start ---> doesnt feedback anything
[08:06] <jrib> Setting Apache2 not to start, as something else appears to be using Port 80. To allow apache2 to start, set NO_START to 0 in /etc/default/apache2. Apache2 has been set to listen on port 80 by default, so please edit /etc/apache2/ports.conf as desired. Note that the Port directive no longer works.
[08:07] <jrib> that may be why
[08:08] <robdeman> port 80 is open according to my portscanner
[08:08] <jrib> is it thttpd or apache2 though?
[08:09] <robdeman> not sure how can I check that?
[08:09] <jrib> check which one is running
[08:09] <jrib> ps -ef | grep apache
[08:09] <robdeman> ah //usr/local/apache2/bin/httpd
[08:09] <robdeman> that is my compiled version sint it
[08:09] <jrib> heh
[08:10] <jrib> /usr/local/bin contain any apache stuff?
[08:10] <robdeman> no
[08:11] <jrib> hmm I wonder how it starts
[08:11] <robdeman> I think I know
[08:11] <robdeman> Webmin started it
[08:11] <jrib> oh
[08:11] <robdeman> using apache2ctl
[08:11] <robdeman> but
[08:11] <robdeman> webmin cannot find it anymore
[08:11] <robdeman> since I removed the compiled version of apache
[08:11] <robdeman> maybe I just need to reboot
[08:12] <jrib> the init.d/apache2 script uses apache2ctl as well
[08:12] <jrib> I'd get rid of thttpd then reboot
[08:13] <robdeman> sweeet its back!
[08:13] <robdeman> how could I get rid of thttpd  ?
[08:14] <robdeman>  /etc/init.d/apache2 is back and it works
[08:14] <robdeman> I just killed all processes
[08:14] <robdeman> of httpd
[08:14] <robdeman> and then started apache2
[08:14] <robdeman> now it works
[08:15] <jrib> if thttpd is stopped, then try 'sudo aptitude remove thttpd' again
[08:17] <robdeman> jrib: http://pastebin.ca/445094
[08:17] <jrib> robdeman: try to read /var/lib/dpkg/info/thttpd.prerm and see why it is trying to do
[08:17] <jrib> s/why/what
[08:18] <robdeman> jri: mm http://pastebin.ca/445100
[08:19] <jrib> robdeman: meh, just comment the line where it tries to stop it
[08:20] <robdeman> sweeete
[08:20] <robdeman> removed :)
[08:26] <robdeman> pfewwwf
[08:26] <robdeman> thanks buddy
[08:26] <robdeman> that helped me a lot
[08:33] <jrib> np
[08:41] <robdeman> jrib: /etc/inid.d/apache start --> still no feedback
[08:41] <robdeman> any idea why?
[08:42] <jrib> robdeman: no, not sure
[08:43] <jrib> robdeman: what about "restart"?
[08:43] <robdeman> log says: http://pastebin.ca/445141
[08:44] <robdeman> restart -> no feeback either
[08:44] <jrib> robdeman: not sure, you can dig around the script, it's all bash
[09:13] <robdeman> ok I fixed it
[09:13] <robdeman> jrib: thanks
[09:13] <robdeman> a bunch!


[15:21] <kyrofa> Hey there, it seems that my snaps that are set to "Built automatically" in the build schedule are not actually building automatically. Are there known issues there?
[15:21] <kyrofa> The git branches appear up-to-date, but the snaps aren't triggering builds
[15:22] <jugmac00> kyrofa: This is a known issue and we know how to fix the issue. I think I will implement the fix later this evening.
[15:22] <jugmac00> https://bugs.launchpad.net/launchpad/+bug/1964620
[15:23] <kyrofa> Thank you jugmac00, I will manually trigger until then


[00:41] <Scary_Guy> @mrgoodcat no not the bell.  Though if they included those at prompts that would be awesome I guess.  It's more about it actually getting used.
[02:50] <greg-g> OK, it's late where ya'll are but: If I were in the market for "a thing I can put in the living room to play movies via things like Netflix and Amazon Prime but also some stuff I have locally on a NAS or laptop, whatever is easier" what should I get?
[02:51] <greg-g> And good effing lord did we do something wrong to the humble "TV" that I now have to type all that ^ to reference what I want now.
[02:51] <OERIAS> Hello Michigan
[02:52] <OERIAS> may I ask a university question?
[02:52] <OERIAS> is UMich good for CS?
[03:12] <jrwren> yes, very.
[11:44] <rick_h> greg-g:  I've followed wirecutter lately and been done ok. Just don't get anything vizio ugh
[14:02] <jrwren> what's wrong with vizio?
[14:03] <cmaloney> They're a privacy nightmare, and believe that selling your information is the only way to sell cheap TVs.
[14:05] <rick_h> ugh, I got one for the rv and it's a mess. Can't remove apps, get ads when you turn on the tv, and then there's the privacy issues/etc
[14:05] <rick_h> and it's slow and a pita to use and /me throws tv against rocks
[14:24] <greg-g> got it, no vizio. I was looking at the Roku TVs. There's a used 55" Samsung roku tv for sale relatively near by
[14:25] <rick_h> honestly, the best things are getting tvs without all the crap in them and then going roku + chromecast and works a ton better.
[14:28] <jrwren> costs more... cuz the cheapo TVs they make money on all the spying and ads that you just mentioned :(
[14:28] <rick_h> yea, but at least then I could upgrade my roku to the new one with 4k support and such vs a whole new everything
[14:29] <rick_h> and ime here with limited wifi the tv will choke on a disney+ movie on the app, but it'll cast just fine from my phone
[14:29] <rick_h> so the apps don't seem to do as well with streaming qulity/adjustments
[14:38] <cmaloney> Yeah, I'd try to get the most stripped-down TV possible and then connect a separate device
[14:39] <cmaloney> it's when they put the device in the TV that things go horribly wrong
[14:48] <jrwren> thankfully, that has not been my experience.
[14:48] <jrwren> but I'm guessing it is because my TV is just old enough and yet just new enough.
[14:49] <jrwren> and we only use the amazon app built into the TV
[14:49] <jrwren> and the TV is wired, not wifi.
[14:50] <rick_h> heh yea so we don't use amazon but disney+, netflix, and of course the tv doesn't have google play but that's where my movies live I pay for/rent a lot so that I can only cast from my phone
[14:50] <jrwren> ugh :(
[14:50] <rick_h> always a juggle of stringing wires together just right
[14:50] <jrwren> i wonder if there is a kodi app for google play.
[14:50] <jrwren> ugh... search for that and you get kodi on the google play app store.
[14:51] <rick_h> yea https://play.google.com/store/apps/details?id=org.xbmc.kodi and then you can cast that using chromecast/etc it looks like
[14:51] <jrwren> yeah, I was thinking the inverse.
[14:52] <jrwren> kodi on an rpi running an app that lets you play google play videos.
[14:52] <rick_h> oic
[14:52] <jrwren> but sounds like google play videos has no api and is proprietary.
[14:52] <rick_h> with this lock down I've been consuming enough media stuff I'm debating going back to having an android tablet
[14:52] <rick_h> as I hate watching stuff on my phone but anything that's too adult I can't watch because I'm in this trailer with the boy.
[14:52] <jrwren> because greg-g's original question included, "also some stuff I have locally on a NAS..>" which IMO kodi is the best for.
[14:53] <rick_h> yea, that would help with that. I think some tvs even have plex apps but all depends
[14:53] <greg-g> jrwren: I was looking at kodi, but all the guides on getting netflix/amazon video setup included random (and different! depending on which guide I read) github repos for the plugins :/
[14:54] <jrwren> right.
[14:54] <jrwren> I'd not use it for that.
[14:54] <greg-g> github user accounts like "XSkullKillerXX" (made up, but close)
[14:54] <jrwren> I'd get a roku for those, and an rpi3 (because 4 gets too hot) for kodi
[14:54] <greg-g> ahhhhh
[14:55] <jrwren> either 4 gets too hot, or I have a bad 4, because my 4 crashes WAY too much :(
[14:55] <jrwren> I mean... $40 for roku, $35 for rpi and you probably have an unused microsd for the rpi, and you are set.
[14:55] <jrwren> IMO.
[14:55] <greg-g> bummer, I just have a 4, but can get a 3 of course ;) (need to leave one avail for fun projects with rowan)
[14:55] <jrwren> well, if your 4 isn't in use, then it is definitely worth trying with kodi.
[14:56] <jrwren> kodi's twitch app has been nice to watch some of the recent live concerts on the TV instead of laptop.
[17:40] <zarozombie> everyone having fun?
[17:54] <cmaloney> So far so good.  I understand that transferring things from point A to point B takes time. But seeing two trucks on Sunday with a promise that it would be delivered on Sunday, and having a delivery truck make a notable effort to stop in front of our house makes me leery that it will ever happen
[18:01] <waldo323_> what kind of wine?
[18:02] <cmaloney> St. Julian
[18:02] <cmaloney> so it's not something like 21 year old Brandy or Cognac or what-not
[18:02] <cmaloney> or a 1944 Margaux
[18:02] <waldo323_> hmm i don't have any of that, and haven't been drinking what is here
[18:03] <cmaloney> St. Julian is a Michigan winery
[18:03] <cmaloney> so we were hoping it would show up before our anniversary (on a lark)
[18:03] <cmaloney> Since we're not going to Frankenmuth this year
[18:03] <waldo323_> used to pass the signs for it along i94
[18:03] <waldo323_> which day is that?
[18:04] <cmaloney> and St.Julian makes a lot of Frankenmuth wines
[18:04] <cmaloney> Sunday
[18:04] <cmaloney> https://www.wine-searcher.com/find/margaux+medoc+bordeaux+france/1944
[18:05] <waldo323_> while what i have isn't st julian's if i have something you could use i'd be happy to give it to you
[18:05] <waldo323_> (if it can be done safely)
[18:05] <cmaloney> waldo323_: No worries. thank you
[18:05] <cmaloney> Actually my parents got us some proseco (Kirkland) so we're all set
[18:06] <cmaloney> It's more the principle than anything
[18:06] <waldo323_> ah :)
[18:06] <cmaloney> since I tolkd JoDee that FedEx might be better than UPS ground
[18:06] <cmaloney> and FedEx is my least favorite carrier next to DHL
[18:07] <rick_h> oh geeze, dhl is the worst
[18:07] <cmaloney> Yeah, DHL has a package compression algorithm.
[18:10] <rick_h> lol, and a routing algorithm that weights towards moving away from you as much as towards you
[18:25] <cmaloney> That's just efficiency.
[18:29] <zarozombie> truck stop and drove by that was a good laugh for me...sorry
[18:36] <cmaloney> No worries. My life is comedy
[18:36] <greg-g> cmaloney: happy early anniversary :)
[18:44] <jrwren> i used to drink a lot of St. Julian when I was younger and drank wine :)
[18:44] <jrwren> happy anniversary cmaloney
[18:52] <rick_h> cmaloney:  congrats sir congrats
[18:52] <cmaloney> Thanks!
[18:53] <zarozombie> 2 more week and my first batch of homemade wine will be done :D
[18:53] <zarozombie> how may year is it now?
[19:02] <cmaloney> 17 years
[19:02] <cmaloney> Though we've known each other 27 years
[19:09] <zarozombie> 10 is good xp b4 marrage my opinion
[19:11] <jrwren> i only lasted 6... almost 7
[19:18] <zarozombie> mine was 3ish lol
[19:19] <cmaloney> I mean, it was more logistics that kept us from getting married beforehand
[19:19] <cmaloney> she was in school so I didn't want to screw up her loans and what-not
[19:19] <cmaloney> so we got married when she went to grad school
[20:32] <mrgoodcat> cmaloney: o/ decade club
[20:32] <mrgoodcat> congrats
[20:32] <mrgoodcat> kim and I also dated for 10 years before getting married, if that wasn't clear
[20:39] <cmaloney> <3
[22:30] <cmaloney> https://jitsi.decafbad.net/MichiganUsrGroupMeeting20200512


[17:53] <fling> what does SAUCE: mean?
[18:05] <ogra> patches on top
[18:38] <Jeremy31> Seems to be a lot of bugs about UBSAN in 5.15 kernels
[20:11] <fling> ogra: UBUNTU: means non upstreamed patches?
[20:11] <fling> SAUCE: too? what is the difference


[19:46] <mup> Bug #1813770 changed: bump macaroon-bakery dependency <MAAS:Fix Released by ack> <https://launchpad.net/bugs/1813770>
[19:46] <mup> Bug #1895646 changed: MAAS doesn't configure IPMI on enlistment <MAAS:Fix Released by ltrager> <https://launchpad.net/bugs/1895646>
[19:49] <mup> Bug #1813770 opened: bump macaroon-bakery dependency <MAAS:Fix Released by ack> <https://launchpad.net/bugs/1813770>
[19:49] <mup> Bug #1895646 opened: MAAS doesn't configure IPMI on enlistment <MAAS:Fix Released by ltrager> <https://launchpad.net/bugs/1895646>
[19:52] <mup> Bug #1813770 changed: bump macaroon-bakery dependency <MAAS:Fix Released by ack> <https://launchpad.net/bugs/1813770>
[19:52] <mup> Bug #1895646 changed: MAAS doesn't configure IPMI on enlistment <MAAS:Fix Released by ltrager> <https://launchpad.net/bugs/1895646>


[08:15] <[omicron]> hi guys
[08:15] <[omicron]> anyone is using some tools to lockdown the gnome desktop?
[08:15] <[omicron]> i'm trying to block some features with gconf-editor, but nothing works


[09:30] <skorj> i guess i shouldn't be too surprised how few people are here
[09:43] <fignew> ><(((">


[08:52] <mpt> xnox, did you ever see this? https://lists.ubuntu.com/archives/ubuntu-installer/2012-November/001150.html
[08:55] <infinity> mpt: A preseed of "tasksel tasksel/first multiselect" (that is, a blank selection) should probably solve his issue.
[08:59] <infinity> mpt: Oh, except we have ubuntu-standard in standard, and I bet the installer runs "taskel -ris" or "tasksel -nris", which will pick up those priorities regardless.
[09:00]  * mpt doesn't know what tasksel is :-)
[09:00] <infinity> mpt: His only hope may be to skip tasksel entirely, if he's that offended by out standard set.
[09:00] <infinity> mpt: tasksel is a curses GUI for picking tasks.  It's also the last thing you see on a d-i or server install.
[09:01] <infinity> mpt: But when run with flags like -r -i -s, etc, it installs everything of priority required, important, standard, respectively.
[09:01] <infinity> mpt: Which *could* be what's happening when people frustratedly try to not install the standard task and get it anyway.
[09:01] <infinity> (Wild conjecture, it's 2am, and I can't be bothered to hunt the relevant code)
[09:02] <infinity> That said, I'm unconvinced it's much of a problem to install standard by default.  It's trivial for people to remove it with a late_command if they're really offended by it, or to hack d-i.
[09:11] <mpt> Ah, so that's the bit where you check a [*] checkbox for things like "Web server"
[09:11] <infinity> Right.
[10:15] <cjwatson> mpt: I think I already sorted him out by private mail
[10:15] <mpt> ah, ok
[10:16] <cjwatson> copied my answer to the list now
[10:17] <cjwatson> (for the record, with preseeding: "tasksel tasksel/skip-tasks string standard")
[10:29] <mpt> thanks
[10:34] <xnox> neat preseed value.
[16:04] <superm1> cjwatson: would you mind looking at the approach in bug 1105289? in order to make our oem image in time we're probably going to have to (at least temporarily) fork grub-installer/ubiquity w/ it, but it would be better if the same thing would eventually be landing upstream for next time we resync
[16:04] <ubot2> Launchpad bug 1105289 in grub-installer (Ubuntu Raring) "Factory Installation w/ secure boot needs a force flag" [Undecided,New] https://launchpad.net/bugs/1105289
[16:12] <cjwatson> actually I'd rather not introduce new interface for this in that way, because the plan is to make grub-install just install the SB image automatically on UEFI systems
[16:15] <stgraber> superm1: can't you just preseed the additional -signed packages and a late command doing "grub-install --uefi-secure-boot"? may be easier on maintenance than forking ubiquity/grub-installer
[16:15] <superm1> cjwatson: Ok, that sounds like a better solution indeed. any particular reason that you didn't do that initially?
[16:16] <cjwatson> superm1: didn't think of it; when I did think of it, didn't have time
[16:16] <superm1> ah
[16:16] <cjwatson> Steve suggested it at UDS and I took a work item
[16:16] <cjwatson> it's on my list for 13.04 / 12.04.3
[16:17] <superm1> great to hear, thanks
[16:18] <superm1> stgraber: that's a good point, i'll have to look into it to see if it's workable for us
[19:24] <johnsterdotcom> I'm trying to use automatic-ubiquity to automate a 12.04 install. I've passed it a preseed file with ever so many 'd-i ...' commands, but I'm still not able to install/remove some packages, and my network is half-baked. Is there better (ie: more reliable) set of ubiquity-specific verbs I should be using? For instance, I've found 'ubiquity        ubiquity/keep-installed string icedtea6-plugin' ... that's what ma
[19:25] <xnox> some are documented here: https://wiki.ubuntu.com/UbiquityAutomation
[19:25] <xnox> note that typically tasksel is not running, so one cannot install/remove packages as easily.
[19:26] <xnox> you can presseed ubiquity/success_command with something like 'in-target apt-get install pkgs..."
[19:34] <johnsterdotcom> I'll look into that doc ... and the apt-get trick will be handy, absolutely
[19:34] <johnsterdotcom> thank you
[23:28] <johnsterdotcom> i am still having an issue where the /etc/network/interfaces file is has:
[23:28] <johnsterdotcom> auto eth0
[23:28] <johnsterdotcom> iface eth0 inet manual
[23:28] <johnsterdotcom> but nothing else
[23:29] <johnsterdotcom> is that a known issue?
[23:42] <xnox> mine doesn't even have that. Only "auto lo"
[23:42] <xnox> do you have network-manager installed?
[23:42] <johnsterdotcom> yes
[23:47] <xnox> not sure, how you got that. Unless that's how the network was configured during the install and got copied into the target?
[23:47] <xnox> i'm not sure, how it ended up looking like that for you.
[23:53] <johnsterdotcom> d-i netcfg/choose_interface select eth0
[23:53] <johnsterdotcom> d-i netcfg/dhcp_timeout string 300
[23:53] <johnsterdotcom> d-i netcfg/get_hostname string your_host_name
[23:53] <johnsterdotcom> d-i netcfg/get_hostname seen true
[23:53] <johnsterdotcom> d-i netcfg/get_domain string example.com
[23:53] <johnsterdotcom> d-i netcfg/get_domain seen true
[23:53] <johnsterdotcom> d-i netcfg/disable_dhcp boolean true
[23:53] <johnsterdotcom> d-i netcfg/dhcp_failed note
[23:53] <johnsterdotcom> d-i netcfg/get_nameservers string <IP_ADDRESS>
[23:53] <johnsterdotcom> d-i netcfg/get_ipaddress string <IP_ADDRESS>
[23:53] <johnsterdotcom> d-i netcfg/get_netmask string <IP_ADDRESS>
[23:53] <johnsterdotcom> d-i netcfg/get_gateway string <IP_ADDRESS>
[23:53] <johnsterdotcom> d-i netcfg/confirm_static boolean true
[23:54] <johnsterdotcom> I assume it wants to edit /etc/network/interfaces and not the network-manager config
[23:56] <xnox> is all of that for ubiquity preseed?
[23:57] <johnsterdotcom> no there's quit a lot more.
[23:57] <xnox> typically ubiquity preseed is very short. E.g http://paste.ubuntu.com/1595235/
[23:58] <xnox> to rely on automatic networking configuration as usually that should just work with typical dhcp based networks....
[23:58] <xnox> above preseed is used to automatically install ubiquity desktop cds in our jenkins lab.


[02:18] <xubuntu817> olá
[02:19] <xubuntu817> instalei xubuntu 14.04 no meu notebook porem a resolução de tela fica em 640x480
[02:19] <xubuntu817> tem como aumentar
[02:20] <xubuntu817> ???
[02:20] <xubuntu817> pois com esta resolução é muito ruim
[02:22] <genii> !br
[02:25] <xubuntu817> obrigado
[06:46] <Senpos> Hello. I have installed Xubuntu 14.04 yesterday and got an error during updating.  You know, i have created /boot partition before installation with 100M amount. Can it be a problem?
[06:53] <cfhowlett> Senpos xubuntu creates it's own boot installation partitions - could be you confused it.
[06:56] <Senpos> So what should i do?  I read few installation guide and there were no problems with creation of separate partition for boot.
[06:59] <cfhowlett> Senpos problem?  No.  but why bother?  Anyway, ask in #ubuntu - I don't have enough knowledge to troubleshoot/solve the issue.
[06:59] <Senpos> OK, thanks for response.
[08:07] <Chris0123> leave
[08:08] <Chris0123> quit
[15:56] <HappyAlk> thanks
[16:05] <Guido1> Hello, I have a littlle trouble with my Lenovo e540 with xubuntu. If i close the laptop it goed in a sleep or hypernate moode and i can't get it out of it any more
[16:49] <abanabee7> Guido1, have you have you updated it with pat-get or with the Software Updater?
[16:50] <abanabee7> apt-get*
[16:51] <Guido1> abanabee7: yes, i have xubuntu 14 the newest updates.
[16:51] <Guido1> with the software updater
[16:54] <abanabee7> Guido1: hummmm, then I'm not sure. Personally I have mine set so that it doesn't lock the screen or anything when I close the laptop, so I can open it & work
[16:54] <abanabee7> and when 14 1st came out there was a bug that involved exactly what you described. Maybe someone else will have an idea on what you can do. I am still kinda new myself
[16:55] <elijar> running xubuntu on an old Compaq Presario c500, whenever i shut laptop, it screen locks. When I open laptop, screen comes back on, but when I login, screen shuts off and will not come back on until I reboot
[16:56] <Guido1> abanabee7: i would like if it saves energy by closing (usefull if i go from home to the university)
[16:57] <Guido1> abanabee7: if i don use the laptop i get a black screen and have to enter my pasword. that's nice and want the same after closing
[16:58] <Guido1> i got the laptyop new end last month
[16:58] <abanabee7> Guido1: I have heard from someone else that if you use xflock before you close it it can lock the screen, which then closing it makes it hibernate fine, & can come back up without problems, not sure it that would help
[16:59] <Guido1> abanabee7: what is "xflock"?
[17:00] <xubuntu415> noob here. I have Xubuntu already but need to know how to UPDATE/UPGRADE Xumbutu to the latest version. Help!
[17:01] <abanabee7> Guido1: xflock is how XuBuntu locks the screen. if you open a terminal & type xflock4 it will lock your screen, so that you can then close it. or u can use the Lock Screen Button on Wisker Menu
[17:01] <xangua> xubuntu415: what xubuntu version did you install
[17:01] <Guido1> abanabee7: okee, i will try that
[17:02] <baizon> xubuntu415: launch the software updater
[17:45] <elijar> whenever i shut my laptop, and open it back up and unlock the screen the monitor turns off and will not turn back on until i hard reboot
[17:49] <elijar> anyone have any ideas on how i could remedy this?
[17:52] <abanabee7> elijar:  I have heard from someone else that if you use xflock before you close it it can lock the screen, which then closing it makes it hibernate fine, & can come back up without problems, not sure it that would help
[18:44] <snuggyfoo> Does anyone know how to find the version of an installed program if it doesn't have "--version" option?
[18:52] <Dragon64> which program are you trying to find the version for
[18:57] <Pici> snuggyfoo: try: apt-cache policy packagename
[19:06] <snuggyfoo> sorry, I figured it out
[19:06] <snuggyfoo> I was trrying to find the version of 'pianobar' which i installed from src
[20:01] <MavKen> anyone happen to use netbeans?
[20:01] <MavKen> s it possible to highlight text and have it wrapped?  for example add <a href=""> before and </a> after?
[20:04] <bazhang> perhaps try in #netbeans
[20:04] <MavKen> thanks
[20:05] <bazhang> np
[20:16] <elijar> abanabee7: thanks ill give it a shot
[20:17] <abanabee7> elijar: let me know how it goes, if i am on :)
[20:18] <Aergan> Hi, does anyone have any tips regarding launching Xchat on login? I'm using the Application Autostart method, which loads Xchat, however it doesn't load my GTK theme
[22:00] <xubuntu935> hello
[22:01] <satya164> ochosi: you there?
[22:01] <satya164> bluesabre, you there?
[23:05] <xuboo> hello
[23:06] <xuboo> I was wondering if someone could help me troubleshoot no audio, I've followed guides online but no luck
[23:08] <MavKen> run "sudo apt-get update -y && apt-get upgrade -y && apt-get dist-upgrade -y && apt-get autoremove -y
[23:08] <MavKen> "
[23:08] <MavKen> reboot computer
[23:09] <MavKen> I had that happen a few times on my ubuntu & xubuntu machine
[23:10] <xuboo> got some errors
[23:10] <xuboo> W: Failed to fetch http://ppa.launchpad.net/ubuntu-audio-dev/ppa/ubuntu/dists/trusty/main/binary-i386/Packages  404  Not Found
[23:10] <xuboo> Some index files failed to download. They have been ignored, or old ones used instead.
[23:10] <MavKen> sudo apt-get clean
[23:11] <MavKen> then run the above again
[23:11] <xuboo> same result
[23:12] <MavKen> strange
[23:13] <MavKen> sorry... that has always fixed it for me, but I dont go through launchpad either, sounds like their issue
[23:16] <xuboo> ill try to reboot see if that did anything
[23:23] <MavKen> keep getting 25% off emails from godaddy for ev ssl....may just do it
[23:26] <MavKen> ever heard of ssls.com ? 4.99/yr?


[00:49] <supercool> How do I load a command with high priority on ubuntu server?
[00:49] <supercool> Could someone help me please?
[02:26] <dpb1> supercool: look at the 'nice' command.   'man nice' for more info.
[02:26] <supercool> dpb1: I got high sd from top
[02:27] <supercool> guess it is not a inside issue but a server restriction of usage
[02:27] <supercool> I use renice -n -20 -p # but didn't solve nothing
[03:08] <JanC> also look at schedutil
[03:09] <JanC> *schedtool
[05:18] <DirtyCajun> can someone talk to me about snaps on ubuntu server ... am i seriously going to need to manage packages from 2 separate sources now?
[05:22] <lynorian> DirtyCajun, you do not really need to need snaps if you do not want to you can still use all .deb
[05:23] <DirtyCajun> lynorian, filebot (A wonderful program) has apparently moved completely to snaps.
[05:23] <lynorian> I have not heard of filebot
[05:23] <DirtyCajun> lynorian, its a great file/folder automation tool for media
[05:25] <lynorian> DirtyCajun, I cannot find it in the repos
[05:25] <lynorian> in trusty even
[05:25] <DirtyCajun> lynorian, sudo snap find filebot
[05:25] <DirtyCajun> im on 16.04.2
[05:26] <lynorian> well if you used it without snaps you were already getting them from a seperate place
[05:26] <DirtyCajun> lynorian, it was originally directly a .deb file from their site.
[05:27] <lynorian> DirtyCajun, yes that is another source so I do not understand your question
[08:19] <jushur> didnt subtitles get labeled eligal some court in EU a few months back?
[08:19] <jushur> by some*
[08:51] <TafThorne> jushur: Fan made sub-titles according to a Dutch court.  So that is a court within the EU but not an EU level court.  For those of you playing in the US think like a county (I do not think this was a big Dutch court yet) making a rulling.  There are probably bigger national courts for the Dutch (so like a State level court) that could weigh in and then after that someone might take it to an EU (federal) level court.
[08:52] <TafThorne> Looks like that was going on at the end of April this year.
[14:53] <jonfatino> Does anyone here work with Dell or HP servers a lot? I remember dell or hp used to have a tool that you could install on a massive amount of servers and it would collect all the stats for those servers. So when migrating to new servers you know how much resources you need etc
[14:53] <jonfatino> I just can't remember the name of the utility.
[15:05] <Poster> Dell is Open Manage iirc
[15:05] <jonfatino> This is just a standalone application you can install on any server (virtual / etc)
[15:06] <jonfatino> Just collects stats / resource usages / etc for 7 days then emails you
[15:49] <mwhahaha> jamespage, coreycb: did you guys ever get the fix for sqlalchemy issues pushed to updates? http://logs.openstack.org/68/473268/1/check/gate-puppet-magnum-puppet-beaker-rspec-ubuntu-xenial/a1745a6/logs/magnum/magnum-conductor.txt.gz#_2017-06-12_08_07_37_626
[15:49] <jamespage> mwhahaha: lemme check - I've had alot of plates spinning in the last week or so
[15:50] <jamespage> mwhahaha: ah right - we pushed through updates to make magnum install; but that would appear to be an incompatibility with sqla 1.1.x
[15:51] <mwhahaha> jamespage: ok, not a huge pressing issue but the magnum beaker jobs are blocked
[15:51] <coreycb> jamespage, mwhahaha: i uploaded a new version of python-oslo.db in an attempt to fix that.  i wasn't positive that was the right fix but seemed relevant.
[16:50] <macskay> hi guys trying to setup snort on my remote server running xenial. my ip ends with 111 and has a netmask of /27, so i set the home_net to 97/27 but when trying a port scan on my server the ids is not sending an alert. what could that be?
[16:54] <rbasak> macskay: I'm not sure you've provided enough for a diagnosis, but you may find the "ipcalc" tool useful if you don't know about it.
[16:55] <genii> Do you have broadcast ip set to .127 ?
[17:12] <blizzow> RHEL offers a couple packages to manage virtualization tuning called tuned and tuned-adm. Is there an equivalent for ubuntu?
[17:42] <hehehe> hi
[17:43] <hehehe> I am running web app file permissions set to 660 and dirs to 770, now I moved from 14.4 to 16.4 appamor disabled, 403 yet to go
[17:43] <hehehe> what else can i check?
[17:47] <hehehe> btc 2400
[17:47] <hehehe> thats still above 1900
[17:47] <hehehe> why btc is overloaded?
[17:49] <hehehe> lol wrong channel
[17:50] <dpb1> hehehe: you were confusing me to no end
[17:51] <hehehe> dont mind last lines
[17:51] <hehehe> the question is about file permissions
[17:51] <hehehe> I run a web app on 14,04 and 16.04
[17:52] <hehehe> using 660 and 770 as permissions
[17:52] <hehehe> but on 16,04 its yet to work
[17:52] <Poster> make sure www-data is either the owner and/or group
[17:52] <hehehe> that is done
[17:53] <Poster> is it owned by www-data:www-data or something else?
[17:54] <hehehe> nr1
[17:54] <hehehe> www-data
[17:54] <Poster> ok it sounds like you may have a path issue, can you pastebin the relevant configuration files?
[17:55] <hehehe> path issue?
[17:55] <hehehe> you mean nginx home path?
[17:55] <Poster> yes, either the path to the files is incorrect or the www-data user cannot access it
[17:56] <hehehe> well if I change permissions it does work
[17:56] <Poster> change to what?
[17:57] <sarnold> btw the 'namei -l /path/to/file' tool is superb. It saves a bunch of repetitive ls -l
[18:00] <hehehe> just a moment
[18:00] <hehehe> going to check something
[18:09] <hehehe> Poster: I dont know
[18:10] <hehehe> Poster: I guess permissions were inherited from 14.4 tar archive
[18:10] <hehehe> cant be sure
[18:14] <hehehe> something went wrong
[18:14] <macskay> genii: Yes
[18:15] <dpb1> sarnold: til, thx
[18:15] <macskay> rbasak: Well basically this: https://unix.stackexchange.com/questions/370709/snort-not-firing-alerts?s=1|2.6134
[18:16] <sarnold> dpb1: yeah isn't that nice? :) I'm surprised it's not more widely used
[18:17] <hehehe> Poster: 755 644 works
[18:17] <rbasak> macskay: I don't know snort, but what cutrightjm said. <IP_ADDRESS>/27 is unusual. I'd expect .96 unless snort is special somehow.
[18:25] <fallentree> hehehe: that means the web server is not running as www-data or the dirs/files that have g+r (regardless of o+r) are not in the group www-data
[18:26] <hehehe> r the dirs/files that have g+r (regardless of o+r) are not in the group www-data how I can check if they are in a group
[18:26] <hehehe> or not?
[18:27] <sarnold> hehehe: namei -l is wonderful.
[18:27] <hehehe> cool
[18:28] <hehehe> sarnold: but whats it for?  I use ls all
[18:28] <hehehe> to see who owns files and dirs
[18:29] <sarnold> hehehe: ls -l is nice but it doesn't show you parent directories, only the specific thing you ask for. but the permission denied messages may be coming from directories higher up.
[18:30] <sarnold> hehehe: you need to know the user:group and permissions of all directories and the target file in a pathname when a program reports 'permission denied'.
[18:30] <hehehe> sarnold: fair point I did issue chown -r from the top dir, one above html root
[18:30] <hehehe> i see
[18:31] <hehehe> handy tool
[18:32] <hehehe> www-data www-data index.php
[18:32] <hehehe> and above same
[18:32] <hehehe> its some kinda of small thing but I am yet to recall what is it
[18:35] <hehehe> brb I may fix it now
[18:35] <fallentree> hehehe: how are you running php? unless apache with php DSO, it's not the webserver that reads index.php
[18:35] <hehehe> i use nginx and php fpm 7
[18:35] <fallentree> if it's fastcgi, then it's the fastcgi daemon (eg. php-fpm) and user it runs under, not www-data (unless you configured it to run as www-data)
[18:35] <hehehe> :)
[18:36] <hehehe> fallentree: yes could be that also
[18:36] <hehehe> going to recheck
[18:36] <fallentree> with fastcgi, the web server sends a fastcgi request to php process, it doesn't check or touch the php files
[18:38] <hehehe> i see
[18:38] <hehehe> thanks for explaining
[18:38] <hehehe> kinda common sense
[18:43] <sarnold> once you understand how simple the unix access controls are you'll have trouble remembering that you used to find them difficult :)
[18:43] <hehehe> :))))))))))))
[18:43] <hehehe> lol
[18:43] <hehehe> well so yes fallentree u were right
[18:44] <hehehe> I checked box1 setup -where friend helped me
[18:44] <hehehe> and box n2
[18:44] <hehehe> listen.owner = www-data
[18:44] <hehehe> listen.group = www-data
[18:44] <hehehe> ;listen.mode = 0660
[18:44] <hehehe> in box nr 1 listen mode is uncommented and set to 0666
[18:49] <hehehe> I have changed listen mode to 0666 yet to work
[18:49] <fallentree> 666 is not good, why world rw?
[18:49] <fallentree> set up proper groups and permissions instead
[18:50] <hehehe> fallentree: what is listen mode for anyway?
[18:50] <fallentree> it's the owner of the socket file
[18:50] <teward> it sets the permissions on the listener socket on the system.  You should probably *not* be messing with it.
[18:50] <fallentree> example setup: you have multiple pools each running under different user, so you set the socket ownership to thatuser:www-data and 0660 mode
[18:51] <fallentree> so nginx can rw to the socket
[18:51] <teward> but unless you have such a setup, you should leave it alone.
[18:51] <fallentree> teward: it was designed exactly to be messed with
[18:51] <hehehe> correct
[18:51] <hehehe> messing is good, and you learn :D
[18:51] <fallentree> no, the proper answer is: learn what it does and decide how to set it up
[18:51] <teward> fallentree: you're right, but i mean for a basic setup :p
[18:51] <fallentree> all else is black magick
[18:51] <teward> like a 'bare minimum'
[18:51] <fallentree> no
[18:51] <teward> (the rest is blackmagicks)
[18:51]  * teward yawns
[18:52] <fallentree> servers are not for users who don't understand how it works
[18:52] <hehehe> its very easy to understand
[18:52] <fallentree> of course.
[18:52] <hehehe> onc explained
[18:52] <hehehe> once
[18:52] <sarnold> hehehe: if you set that mode 666 then you allow all users on the system to execute code with the privileges of the fpm service
[18:53] <hehehe> thats not good
[18:53] <sarnold> it's no big deal if it's a single-user machine and you don't care what happens; it's terrible if you've got multiple untrusted services or users on the system
[18:54] <hehehe> so to sum up so far - I got 1 socket running owner is www:data group www:data, I want to use 660 and 770 permissions
[18:55] <fallentree> hehehe: the socket must reflect ownership/mode so that BOTH nginx and php-fpm user can read and write to it. if both run as www-data, then yes, that's okay
[18:55] <hehehe> yes they both run as such
[18:55] <hehehe> idea is that dirs and files can be accessed only by owner and or group
[18:55] <hehehe> which seems secure :)
[18:55] <hehehe> well I meant modified
[18:56] <fallentree> hehehe: if you want secure, also don't have the files owned and writable by the user running the php process.
[18:56] <fallentree> only readable, but not writeable
[18:57] <fallentree> that's why owning files to www-data is a bit insecure. the better setup is where the files are owned by root, in group www-data. 750 on dirs and 640 on files. fpm socket www-data:www-data, 0660.
[18:58] <fallentree> however, only root can change those files (which is why it's secure). if you want sftp access, then it requires a different, a bit more complex setup.
[18:59] <hehehe> fallentree: why would sftp nessesiate a bit more complex setup if I sftp as root?
[18:59] <hehehe> I can then change files via chown
[18:59] <fallentree> because you shouldn't sftp as root
[19:00] <hehehe> its stfp so password cant be stolen
[19:00] <hehehe> so whats the risks?
[19:00] <hehehe> or  maybe use pem?
[19:00] <fallentree> sftp requries ssh access as root and that should be avoided
[19:00] <fallentree> (sftp as root requires....)
[19:00] <hehehe> fallentree: but I use 70+ random char passwd
[19:00] <hehehe> :)
[19:01] <hehehe> so yes ok some can try and guess it and get tired
[19:01] <fallentree> hehehe: history lesson: few years ago a debian maintainer fskced up and weakened ssh keys security, reducing the possible combinations to only 65k
[19:02] <hehehe> oooo
[19:02] <fallentree> that's why you should never allow root to log in
[19:02] <hehehe> oki I can create some other user to login
[19:02] <fallentree> in such a case, an attacker breaking through 65k combinations would still have to sudo things so there's additional layer of security
[19:02] <hehehe> 65K is alot
[19:02] <hehehe> but not really
[19:03] <hehehe> if they ssh from say 50,000 ips
[19:03] <fallentree> it's a few minutes to try all on a system that doesn't ban failed attempts
[19:03] <hehehe> its fast
[19:03] <hehehe> fallentree: but since then it was fixed right?
[19:03] <fallentree> if they try from 65k ips, it'd be broken through in a fraction of a second :)
[19:03] <fallentree> it was fixed. the lesson here is to NEVER trust things.
[19:03] <hehehe> lol
[19:04] <fallentree> the principle of least privilege should be your guide, if you want secure.
[19:04] <fallentree> you don't need to log in as root, so reduce that privilege.
[19:06] <hehehe> I do need sftp access
[19:06] <hehehe> so setup some ordinary user and login as him?
[19:09] <fallentree> yes
[19:09] <hehehe> ok
[19:10] <fallentree> but you can't chown/chmod php files to www-dat, those would have to be owned by the sftp user (if you want to manipulate the files over sftp), which is insecure as php can write own files.
[19:10] <fallentree> that's where you use apparmor to fine tune what php-fpm can read or write.
[19:11] <fallentree> OR
[19:11] <fallentree> run php-fpm as another unprivileged user, and put that user into the sftp user group.
[19:12] <fallentree> that way you can have files 640 (and dirs 750). sftp user can read/write, php process can only read. also put nginx (user www-data) into that sftp user group so it can read static files.
[19:12] <fallentree> if php needs to write (uploads), have a specific directory for that, owned by the user running php-fpm, but then the sftp user won't be able to change those.
[19:13] <fallentree> it's a trade-off any way you look at it. either it's easy but insecure, or secure but inconvenient.
[19:13] <fallentree> convenient (sftp can rw, php+nginx can read) but secure requires complex (apparmor)
[19:15] <hehehe> ok changing conf
[19:16] <hehehe> first i will implement . the better setup is where the files are owned by root, in group www-data. 750 on dirs and 640 on files. fpm socket www-data:www-data, 0660.
[19:16] <hehehe> to see  how that works :)
[19:18] <hehehe> drwxr-x--- 8 root www-data added root to group www-data changed permissions
[19:18] <hehehe> yet to work
[19:25] <hehehe> now for some reason it gives nginx error index.html is foiden
[19:25] <hehehe> forbiden
[19:25] <hehehe> but its index.php ...
[19:25] <hehehe> I am going to to shop to buy food
[19:31] <fallentree> hehehe: do you have the "index" directive for the server{} ? if you want index.php to respond to example.com/  (without index.php explicitly stated), you need to set the "index" directive to index.php
[20:32] <hehehe> home again
[20:45] <hehehe> and yes I have index directive  think
[20:46] <hehehe>     index index.html index.htm index.php;
[20:46] <hehehe> it does work with less rescrtictive permissoions
[20:47] <tomreyn> hehehe: are you mixing up 'index' and 'DirectoryIndex'?
[20:48] <tomreyn> ignore this remark if this is nginx ratehr than apache httpd
[20:49] <hehehe> it is nginx
[20:56] <tomreyn> hehehe: if it says 'access forbidden' for index.html when you requested / then it means the web server thinks that the /index.html location exists and it should handle it somehow. this could be, for example, because you pass all requests (not just those for paths ending in .php) to php-fpm
[21:06] <hehehe> tomreyn: I am planing to run open cart app on more secure permissions
[21:06] <hehehe> its nearly ready
[21:06] <hehehe> tomreyn: well nginx setup passed only php to php fpm
[21:07] <hehehe> maybe its something to do with app code?
[21:21] <zxliu> I'd there some way to install server packages from an ISO on a desktop system looking at virtual machine host group.
[21:22] <nacc> zxliu: can you rephrase your question? you are on a desktop system and want to install server packages?
[21:22] <sarnold> zxliu: apt-get install whatever
[21:22] <nacc> zxliu: just install them, server and desktop use the same packages
[21:22] <sarnold> skip the iso, the packages are liable to be out of date anyway
[21:22] <nacc> sarnold: +1
[21:22] <zxliu> in the past apt hasn't allowed adding ISO sources for installing
[21:23] <sarnold> eh? apt-cdrom has been there for ever, and it's always been confusing to me why anyone would bother with it :)
[21:23] <zxliu> nacc that is about right
[21:23] <zxliu> sarnold why should it be confusing?
[21:23] <nacc> zxliu: are you in an offline mode?
[21:24] <zxliu> yes for building the base layer
[21:24] <sarnold> zxliu: because in the time it takes to spin up a cd-rom you can often have downloaded the package entirely over the network..
[21:24] <zxliu> ahem
[21:24] <zxliu> we have reasons
[21:25] <zxliu> the question does specify "from an iso
[21:25] <nacc> zxliu: have you tried to use apt-cdrom? -- or you mean you are inthe installer and want to add more ISOs from there?
[21:26] <zxliu> the desktop is installing now the server is laid down and U want to lift it into the desktop on a virtual machine
[21:27] <zxliu> nacc so in the past yes apt-cdrom was tried
[21:27] <nacc> zxliu: i'm unable to follow that sentence. desktop is installing *then* server is laid down? "want to lift it"?
[21:27] <zxliu> and I expect the same thing to happen when this is installed the solution was to run a local web server to serve the apt packages
[21:28] <zxliu> but the package database needs rebuilt is that so?
[21:28] <sarnold> that's not a bad option, apt-ftparchive, aptly, among other tools, can make that process reasonable enough
[21:28] <zxliu> laid down the n the disk
[21:28] <zxliu> then it can be copied into a VM "lifted
[21:29] <zxliu> ftp?
[21:29] <sarnold> I rsync the entire archive to a local machine and used NFS mounts for a while; I stopped doing that because NFS mounts with a portable laptop were more annoying than they could have been..
[21:30] <sarnold> yeah, don't worry about the ftp too much, we use the output of apt-ftparchive with apache or nginx as part of the workflow on the security team
[21:30] <zxliu> so specify ftp::localhost/packagedir in the a apt config
[21:32] <zxliu> so what needs be done then an extra script package for building an apt repo?
[21:32] <zxliu> the server has an httpd installed
[21:33] <sarnold> or 'deb http://<IP_ADDRESS>/ubuntu main' or whatever..
[21:35] <zxliu> this can't be done until the server is up and running for the are installed on the same disk
[21:36] <zxliu> so what command can be found for checking the deps of package group virtual machine host looks like the quickest route is to issue dpkg install commands singly
[21:37] <sarnold> can you rephrase that question?
[21:37] <nacc> zxliu: do you mean the virt-host task?
[21:37] <nacc> isn't it something like
[21:37] <nacc> apt install virt-host^
[21:38] <zxliu> how can the packages and package dependencies for package group virtual machine host be resolved to a list for manual install with dpkg
[21:39] <nacc> zxliu: well, you'd need all the packages in the tasks, all their dependencies, all their dependencies, ... until it stops growing, right?
[21:39] <nacc> zxliu: why not just set up a repo?
[21:39] <zxliu> repo requires a repo
[21:40] <zxliu> I went through the possible routes in this chat
[21:40] <hehehe> I set up server as following now - php fpm user and group www data , files owned by root who is in a www data group and I get following error - 2017/06/12  [error] 269#269: *4 FastCGI sent in stderr: "Unable to open primary script: /home/op/gd.com/index.php (No such file or directory)" while reading response header from upstream, client: xx.xxx.xxx.xxx, server: www.gd.com, request: "GET /index.php HTTP/2.0", upstream:
[21:40] <hehehe> "fastcgi://unix:/run/php/op.sock:", host: "www.gd.com"
[21:41] <zxliu> I can download a small script package if needed over cellular data.
[21:41] <zxliu> I don't want to be download packages ges located on the install ISO.
[21:41] <zxliu> What package is needed from the repo to setup a repo?
[21:42] <zxliu> I can run the httpd in a chroot.
[21:43] <zxliu> from the other part while on the desktop then do apt http://<IP_ADDRESS>/Ubuntu main
[21:44] <zxliu> so I copy the packages over too var/www/ubuntu
[21:44] <zxliu> is there something which scans and builds the package database for apt
[21:44] <nacc> jamespage: mwhudson: do you happen to know if celery 4.0.2 is compatible woth python3.6? i'm getting pretty close, but the tests seem to be pegging my cpu and not making any progress with 3.6 :)
[21:45] <zxliu> ..well there's worse things to lose
[21:46] <zxliu> although wadya know looks like desktop doesn't boot after install
[21:46] <sarnold> zxliu: if all the files are local just read them off the filesystem; I've got a line like this in my apt.sources on my archive mirror: deb file:///srv/mirror/ubuntu/ xenial main restricted
[21:47] <zxliu>  so it accepts file://
[21:47] <zxliu> fine
[21:47] <zxliu> great answer
[21:48] <sarnold> yeah way better than running a web server just for apt for local use :)
[21:48] <hehehe> :))
[21:48] <zxliu> sarnold not way better but the right start
[21:48] <hehehe> sarnold: any idea what is my mistake
[21:49] <hehehe> :)
[21:49] <zxliu> so the servers in the VM need to access it o er http
[21:49] <nacc> 'servers in the VM'?
[21:49] <zxliu> overheating again , possibly why it didn't boot
[21:50] <sarnold> hehehe: sorry, no, I'm not very familiar with php
[21:50] <hehehe> if all files owned by root can www data user who owns php fpm sock send them via nginx? based on same group ownership
[21:50] <zxliu> a laptop with a couple about as powerful as towers with radiators
[21:51] <sarnold> hehehe: the error you pasted was "no such file or directory" -- no amount of permissions fiddling will fix that :) figure out why the file isn't there: is fastcgi looking in the wrong place? looking for the wrong thing? etc
[21:51] <hehehe> file is there
[21:51] <hehehe> nginx root dir is correct
[21:52] <sarnold> hrm maybe that means the socket doesn't exist?
[21:52] <hehehe> socket exist
[21:52] <hehehe> it was all working 100% but with new more secure conf  yet to work
[21:52] <hehehe> maybe problem is - socket is owned by www-data and files by root? although they are in same group
[21:52] <zxliu> why not play?
[21:53] <hehehe> zxliu: what do u want to do? :)
[21:53] <zxliu> have some private property
[21:53] <hehehe> ...
[21:54] <mwhudson> nacc: no idea sorry
[21:54] <zxliu> maybe a fingernail clipping that the public can't touch
[21:54] <nacc> mwhudson: np, just figured i'd ping to see :)
[21:54] <mwhudson> nacc: i had to backport a patch for kombu to get the tests to pass
[21:54] <nacc> zxliu: at this point, you're spamming the channel, please stop
[21:54] <hehehe> getent group www-data - www-data:x:33:root
[21:54] <hehehe> root is da group
[21:55] <mwhudson> so it might be worth checking celery upstream too?
[21:55] <nacc> mwhudson: ack, will look on celery's github. They say it's supposedly working, but possibly only on master.
[21:55] <zxliu> a crescent fingernail clipping and then from there security can expand possibly too a wife
[21:55] <hehehe> sarnold: all I did - I changed file owner to root
[21:55] <hehehe> I will change it back to www data and see whats up
[21:55] <mwhudson> nacc: https://github.com/celery/celery/issues/4000 <- implies it works, i guess you've seen that too?
[21:55] <zxliu> celery is down
[21:55] <nacc> mwhudson: yeah that's where i started, not much progress from that :)
[21:56] <zxliu> where are youns that you think your working on my hardware which is disassembled
[21:58] <zxliu> the only thing up is an overheating laptop
[21:58] <hehehe> sarnold: now it does not give cant open index.php error just 403
[21:59] <hehehe> sarnold: could it be that open cart code does not make it easy to make it work with most secure settings?
[21:59] <sarnold> hehehe: it's possible, most shopping carts are terrible rubbish
[21:59] <sarnold> hehehe: but I'd hope you could make this work
[21:59] <zxliu> I put some foam earplugs in a plastic tube and sealed it with wax. sure enough home was raided and the earplugs touched
[22:00] <hehehe> sarnold: where do u think potential issue would b?
[22:00] <hehehe> I think I just have to identify area of conflict and fix it
[22:00] <sarnold> hehehe: i'm not sure. when it doubt follow the log files ..
[22:00] <zxliu> When angels deserve to diiiiiiiiiiiiiiiiiiiiie
[22:00] <zxliu> born of electeicity
[22:01] <zxliu> while I born in the flesh
[22:01] <zxliu> when angels deserve to diiiiiiiiiiiiiiiiiiiiie
[22:02] <zxliu> the virtual machine can bridge me into the ram
[22:02] <nacc> zxliu: please stop.
[22:02] <zxliu> where the egos of angels go
[22:03] <zxliu> what do you want to do lay my brain down on an arctic icecap
[22:03] <zxliu> talk about health problems
[22:04] <zxliu> this little CPU overheats
[22:05] <zxliu> and your running ram frogs that say "werk" "werk"
[22:06] <zxliu> while the entire GOD damned town takes turns on every aspect of your soul
[22:06] <zxliu> not foresaken but earned
[22:06] <zxliu> of course in the end foresaken is seen that way
[22:08] <zxliu> how bout a fingernail clipping?
[22:08] <zxliu> can me own a fingernail clipping
[22:08] <zxliu> or da police come and strip all posessions
[22:09] <zxliu> hold the door open for the town to continue to pilliage almost the lowest class home on earth
[22:11] <zxliu> waiting for the CPU to cool down
[22:11] <randymarsh9> hello
[22:12] <zxliu> hello randymarsh9 can you go pay exorbitant prices for some fake plant food gmo and bring it over for tricking the body into thinking itbis not hungry
[22:13] <zxliu> while DNA degenerates
[22:13] <hehehe> hi
[22:13] <zxliu> light purple need kidney beans
[22:13] <zxliu> "red"
[22:14] <compdoc> zxliu, just say NO! to drugs plz. tyvm
[22:14] <zxliu> if it were that easy
[22:15] <zxliu> haven't you seen the population dropping dead from illicit drugs?
[22:15] <zxliu> growing and hunting food requires a community and I don't mean of drug users
[22:16] <nacc> genii: thanks
[22:16] <sarnold> genii: <3
[22:16] <genii> np
[22:17] <genii> @comment 77064 Spam
[22:17] <hehehe> sarnold: I think biggest mistake listen to someone advice and implementing it asap
[22:17] <hehehe> as then stuff just hangs in da air half way :D
[22:18] <sarnold> hehehe: aye that can be an issue. in the end we're all responsible for our own systems.. it's on us to know as much as we need to run the systems..
[22:18] <hehehe> ys
[22:20] <hehehe> I say main reason many people dont code  other people dont have time desire to explain
[22:20] <hehehe> if say 99% of people were to become good at coding we need social coding clubs offlines enmasse
[22:20] <hehehe> but that will bring existing people salaries to the ground
[22:20] <hehehe> :)
[22:20] <hehehe> so maybe thats also a demotivator for soe
[22:21] <hehehe> some
[22:21] <hehehe> and security can be never ending hole
[22:21] <hehehe> lol
[22:22] <sarnold> the better developers will always have more opportunities and more interesting problems to solve; doubled incentives to keep progressing onwards and upwards :)
[22:22] <hehehe> dude most coders are $$%^& and some are cool :D
[22:23] <hehehe> I do agree with you
[22:23] <hehehe> its better to share what you know
[22:23] <hehehe> so all can progress and you will also enjoy more
[22:38] <nacc> mwhudson: found it, buried in a semi-unrelated AWS change :)
[22:39] <mwhudson> nacc: haha
[22:39] <nacc> top-level commit message: "AWS DynamoDB result backend (#3736)"
[22:39] <nacc> relevant line: "* Fix endless loop in logger_isa (Python 3.6)"
[22:40] <mwhudson> nice
[23:02] <hehehe> is it a security risk if file own by a root?
[23:02] <hehehe> I dont think so
[23:02] <hehehe> like web app files owned by root
[23:13] <dpb1> everything is owned by root anyway
[23:13] <dpb1> i.e., root can chown root:root on any file
[23:15] <dpb1> having a file user permission as root is just saying that it's a "default" owner, or a system file.  something like that.
[23:17] <tarpman> the downside is that only root can modify files owned by root. that means your process deploying/updating those files, or any process that needs to write to them, has to run as root, which _could_ be a massive security hole if the code isn't extremely trustworthy
[23:18] <tarpman> for files deployed from a deb package, owned and updated by the package manager, never written to by anything else - root ownership makes sense
[23:18] <tarpman> for web app files deployed by an automated script or something, I'd prefer a non-root deploy user that the script can run under
[23:23] <nacc> jamespage: re: celery, upstream (4.0+) has removed celeryd, celerybeat, celeryd-multi. Does it make sense for our package to still be called celeryd? Or should we switch to  binpkg called 'celery'?
[23:27] <hehehe> :)
[23:27] <hehehe> true
[23:28] <hehehe> dpb1: do u know nginx and php?
[23:28] <hehehe> I seems to be experiencing some simple issue but yet to nail it
[23:28] <hehehe> :D
[23:28] <nacc> hehehe: teward is not around, but maintains nginx in ubuntu -- i'd just wait til he's around for help, he's quite fast to fix/explain :)
[23:31] <hehehe> hehe o well I may as well read a bit
[23:31] <hehehe> nacc: is there some cool video that explains all nginx and php fpm?
[23:33] <nacc> hehehe: i'm not sure
[23:33] <hehehe> so far I understood - when visitor comes to site 1) nginx serves html 2) php-fpm serves php via nginx
[23:33] <hehehe> right?
[23:34] <hehehe> just to understand entire server mechanics
[23:35] <nacc> jamespage: finally, do you have testcases or otherwise that would help verify/vet my changes to celery are good? beyond the upstream test suite itself
[23:36] <hehehe> https://serversforhackers.com/video/php-fpm-configuration-the-listen-directive
[23:36] <hehehe> this one is pretty good for php :D
[23:52] <nacc> jamespage: woot, celery 4.0.2 built :)
[23:54] <hehehe> what is celery!!!
[23:54] <hehehe> "
[23:55] <sarnold> hehehe: http://www.celeryproject.org/
[23:55] <nacc> sarnold: thanks :)
[23:56] <nacc> hehehe: i'm just trying to unblock the new openstack in 17.10
[23:56] <sarnold> I just hope there's no follow-up questions :) "uh distributed job runner hey lookit the time!"
[23:56] <sarnold> nacc: sheesh good luck
[23:56] <nacc> mwhudson: jamespage: i've added my debdiffs to the bug, i would like to spend some time testing it in practice, but both build and pass their tests
[23:56] <sarnold> nacc: every round another two dozen dependencies
[23:56] <hehehe> follow up questions are good
[23:56] <nacc> where both = celery + billiard
[23:56] <hehehe> to archieve 100% clarity
[23:56] <nacc> sarnold: yeah, I'm just helping with this bit :)
[23:57] <hehehe> sarnold: dont  love it when all is crystal clear
[23:57] <hehehe> mmmm
[23:57] <nacc> sarnold: kombu needs a newer celery, which pulls in some new upstream versions of deps
[23:57] <hehehe> dont you )
[23:57] <sarnold> nacc: do I want to know what kombu is? :)
[23:57] <hehehe> nacc:  I have tried open stack a bit heat and ceilometer
[23:58] <hehehe> but I dont know how to scale apps with it yet
[23:58] <nacc> sarnold: nah, and tbh, i barely do, but i know how to deal with uscan/uupdate and package interdeps/rebuilds/etc
[23:58] <sarnold> nacc: :)
[23:59] <hehehe> sarnold: lol php bitch wants to load index html for some reason
[23:59] <hehehe> I triple checked all configs
[23:59] <hehehe> nowhere its said to load html :D
[23:59] <hehehe> check this out https://www.dynatrace.com/blog/proper-configuration-running-php-nginx/


[00:08] <Gumby`> rhpot1991: my patches are unrelated to sasc-ng
[00:08] <Zinn> Gumby`: sasc-ng is a method to ILLEGALLY receive cable or satellite broadcasts via a fake software dvb-s/c device.  It is forbidden from being discussed in #ubuntu-mythtv, #ubuntu-mythtv-dev, #mythtv-users, and #mythtv.  If you would like to learn more about it, please refer to its developers and keep any and all discussions about it there.
[01:55] <rhpot1991> Gumby`: good, just wanted to warn since most vague patch references are related to it
[03:39] <qwebirc33453> Are there any companies that sell mythtv systems?
[03:40] <qwebirc33453> Never mind - http://www.mythtv.org/wiki/Commercial_MythTV_System
[19:25] <qwebirc82760> Hi, have issue with Mythbuntu and hdhr. It appears that when using the mythtv for recording i receive lots of artifacts and choppy audio/video. Watching network I see drops (packet loss?) occur at same time the artifacts happen. I have updated hdhr firmware (which supposedly had a fix for simillar issue).
[19:25] <qwebirc82760> But issue still occurs.
[19:25] <qwebirc82760> Occurs more often on HD channels and when recording multiple shows at once
[19:26] <qwebirc82760> Anyone have ideas or suggestions?