[00:00] <darkxst> I watched a few plymouth animations on youtube, and many of them only run to 30% or so, I will try and look for a fedora one
[00:02] <jbicha> http://fedoraproject.org/get-prerelease Fedora 18 Alpha was released today
[00:04] <jbicha> but Fedora uses systemd these days, I'm guessing we should just use a loop for Quantal
[00:08] <darkxst> f17 livecd has a text based plymouth theme, which cut out at 60% progress on my VM
[01:13] <darkxst> jbicha, ok, will make it loop and remove logo and progress indicator then
[12:28] <smartboyhw> Hi jbicha
[12:38] <jbicha> smartboyhw: hi
[21:18] <darkxst> jbicha, made the looped version, but unable to get a video of it
[21:18] <jbicha> if you send the patch, I'll try it out
[21:21] <darkxst> sent
[21:23] <darkxst> I do need to remove all the ubuntu logo/progress code before packaging however
[23:39] <darkxst> jbicha, any chance of getting libcroco bumped to new upstream release before beta freeze?
[23:39] <darkxst> (it fixes some memory leaks in g-s)
[23:57] <TheLordOfTime> thought freeze hit already
[23:58] <jbicha> darkxst: that looks like a bugfix release, so sure we can update it


[07:16] <dholbach> good morning
[08:23] <davidcalle> Morning o/
[08:26] <dholbach> salut davidcalle
[14:07] <davidcalle> Hey popey , Marvin is very neat!
[14:07] <popey> thanks!
[14:14] <davidcalle> popey: I've... QA'ed it a little bit... Is he alright? I see the two devices being "claimed" for the last ~10 minutes
[14:14] <popey> oooh
[14:15] <popey> did you not get an email?
[14:15] <davidcalle> popey: nope. I uploaded an image file.
[14:15] <popey> ahhh
[14:16] <popey> well done :)
[14:25] <mhall119> QA testers, always breaking the rules
[14:31] <popey> heh
[14:31]  * dholbach uploads -1 apps
[14:37] <mhall119> popey: now you and balloons need to figure out how to use Autopilot to drive some further testing (with screenshots) of the app on the device
[14:37] <popey> that sounds like version 2.0!
[14:37] <popey> We'd need VC funding for that :D
[14:42] <davidcalle> ERROR: unpacking failed with '2':
[14:42] <davidcalle> dpkg-deb: error: '/tmp/tmp.VY8pBrjK0f/trolling.click' is not a debian format archive
[14:42] <balloons> indeed
[14:43] <popey> :D
[14:43] <popey> Had to put some more coins in the meter.
[14:43] <popey> Is that a thing in other countries?
[14:45] <mhall119> parking meter, yes
[14:46] <davidcalle> popey: in Paris, now, you need to buy a card and put money on it. Very fun when you need to park to actually go buy a card.
[14:47] <dholbach> davidcalle: take the metro! :-P
[14:50] <popey> mhall119, what about electricity meter?
[14:50] <davidcalle> dholbach: it's full of other people!
[14:50] <popey> In the UK some social / council housing would have a meter where you put 50p in and turn the dial for more electricty
[14:51] <popey> well, older houses, now it's a smart card
[14:51] <dholbach> davidcalle: stop complaining - it's not that bad: https://www.youtube.com/watch?v=b0A9-oUoMug :)
[14:56] <davidcalle> dholbach: http://parismetrosimulator.appspot.com
[14:58] <dholbach> very funny :)
[15:01] <mhall119> popey: our electric meters don't have coin slots
[17:10] <dholbach> all right my friends - I call it a day - see you all tomorrow!
[17:11] <dpm> have a nice evening dholbach
[17:11] <dholbach> you too :)


[00:21] <ScottL> rlameiro, pong
[00:22] <rlameiro> ScottL: :D hows your sunday going :D
[00:22] <rlameiro> ScottL: are you folowing the ml?
[00:23] <rlameiro> I tald Ckontros about ricardo and ana
[00:23] <rlameiro> maybe they can share some ideas
[00:51] <ScottL> rlameiro, i'm keeping up a little with the list
[00:52] <ScottL> rlameiro, cool about ckontros, ricardo, and ana...hopefully something comes from it  :)
[00:52] <rlameiro> ScottL: yeap :D
[04:42] <ScottL> TheMuso, i noticed a gross error on my part in the plymouth-theme-ubuntustudio package
[04:42] <ScottL> TheMuso, is it too late to fix this?
[04:43] <TheMuso> ScottL: No, but you have less tha 24 hours or so to fix it and get me a patch to upload.
[04:58] <ScottL> TheMuso, right, i'll do it in the morning (approximately seven hours hence)
[04:59] <ScottL> TheMuso, i believe it to be pretty straightforward, it seems that the *.png images didn't make it into the package
[04:59] <TheMuso> Ok
[05:00] <ScottL> i suspect it was my fault, probably forgot 'bzr add' :(
[05:05] <ailo> ScottL, How come it worked for a while?
[05:06] <holstein> i like the idea of XFCE
[05:06] <holstein> i dont know how avant got mixed in there though
[05:06] <ScottL> ailo, i suspect it worked because i was using my test build from ppa
[05:06] <holstein> i think AWN with xfce looks like osx did
[05:07] <holstein> and i dont need osx functionality
[05:07] <holstein> but, i think i like xfce
[05:07] <ailo> If we go for XFCE, I would rather have something more towards gnome, more towards regular Xubuntu
[05:07] <holstein> yeah
[05:07] <holstein> i mean, if a dock is mandatory
[05:08] <holstein> i prefer gnome do
[05:08] <ailo> But, as you said holstein, all ideas are good, and we can try them out
[05:08] <ailo> Or, you said, you won't mind giving awn a shot
[05:08] <holstein> sure
[05:09] <holstein> it just doesnt seem optional
[05:09] <holstein> i would like to have an option on the table
[05:09] <holstein> thats just xfce
[05:09] <holstein> without any OSX looking crap
[05:09] <holstein> but, thats just me
[05:09] <holstein> i
[05:09] <holstein> ll give it a look
[05:10] <holstein> but, i used to run AWN
[05:10] <holstein> in 9.04 and 9.10
[05:10] <ailo> I don't like the idea of AWN. I've tried it a while back, when I did use docks a lot, but I never thought AWN was any good
[05:10] <holstein> i think its too heavy
[05:10] <holstein> i thought it was kinda 'good' i guess
[05:10] <holstein> slick-ish
[05:10] <holstein> but, not worth the resources
[05:10] <ailo> Xubuntu has a nice default look
[05:11] <holstein> and, if you dont have 3d
[05:11] <ailo> But, the lower panel might be too much
[05:11] <holstein> then all that rendering happens on the CPU right?
[05:11] <ailo> Yeah, if you go for XFCE, you might as well keep it simple
[05:11] <holstein> i think 1 panel, kinda like we got
[05:11] <holstein> just xfce
[05:11] <ailo> Should be enough
[05:11] <holstein> or, some other light dock
[05:11] <holstein> if a dock is needed
[05:12] <holstein> wbar*
[05:12] <holstein> docky?
[05:12] <holstein> wbar was the one i ended up with
[05:12] <holstein> it was light
[05:12] <ailo> Docky is what is part of gnome do. Docky works, but I wouldn't want to add it as default
[05:12] <holstein> i forget the others
[05:12] <holstein> ailo: yeah, see, i wouldnt either
[05:12] <ailo> Docky improved at one point
[05:12] <holstein> and i feel like thats what the theme is
[05:12] <holstein> cory likes AWN
[05:12] <holstein> and thats great
[05:13] <holstein> i just want it to be an optional thing
[05:13] <holstein> because some nice discussion has already started on that thread
[05:13] <holstein> about resourses
[05:13] <holstein> anyways... we'll see
[05:13] <ailo> I feel like cory is very much pushing his own favorite thing, instead of looking at what the community wants
[05:13] <holstein> i know how to get rid of AWN :)
[05:14] <holstein> ailo: OK, i was getting that vibe too
[05:14] <holstein> and just wanted to make sure i wasnt mis-reading it
[05:14] <ailo> And that's fine with me. It's up to us to give options
[05:17] <ailo> Unity has been pretty unstable for me. There has been discussion whether they should use it as default for the final release
[05:18] <ailo> Both Unity and Gnome3 would probably be less stable, and need some serious tweaking to be usable
[05:18] <ailo> So, I would probably vote for XFCE too
[05:20] <ailo> Anyway, I think I won't have too much opinion on that now. I will try focus on other things. I might object to the use of AWN, but I will need to try that first
[05:37] <ailo> ScottL, One thing I haven't investigated yet is to make custom launchers. Have you done that on Gnome3?
[05:50] <ailo> ScottL, MacInnis is still the lead of art, right?
[05:52] <ailo> ScottL, I expect a part of his jurisdiction is being handled already if cory helps us move to XFCE (if that is what is decided later on).
[08:11]  * abogani waves all
[11:33] <abogani> ailo: You can find the new -lowlatency kernel with right configuration at https://launchpad.net/~abogani/+archive/snmp++/+packages
[11:33] <abogani> ailo: 39 I meant
[12:15] <ScottL> ailo, holstein :  if you do not like/want a dock then you should say something on the mailing list :)
[12:15] <ScottL> ailo, holstein :  because if no one voices a dislike cory will continue to move forward
[12:16] <ScottL> ailo, holstein : but hopefully we can talk with the AWN people and see if they can code my idea of selectable "context" menus
[12:16] <ScottL> the idea is thus:  the dock has a left and right side, the left is static and the right is dynamic or selectable or "context"
[12:17] <ScottL> the left (static) would have things like firefox, or gedit, or whatever launchers you always want visible on the bar
[12:18] <ScottL> the right, however, would show launchers depending on which "work flow" you selected from a "context selection" button on the dock
[12:18] <ScottL> so the first "launcher" on the right (dynamic or context) side would allow you to select "record audio" or "midi/sequencer" or "graphics"
[12:19] <ScottL> this would in turn make certain launchers visible on the right side of the dock that support that work flow
[12:19] <ScottL> record audio might have visible - qjacktl, ardour, rakarrak, guitarix, hydrogen
[12:20] <ScottL> midi/sequencer might have visible - qjackctl, qtractor
[12:20] <ScottL> we would include some sane defaults, perhaps similar to what i have just suggested, but refined and expanded
[12:20] <ScottL> and the user would be able to modify them as needed
[12:20] <ScottL>
[12:21] <ScottL> ailo, i did "pin" several launchers onto my favorites in gnome3 but did not create custom ones
[12:21] <ScottL> ailo, yes, mac is still art lead, i was hoping for something a little more definitive before going to him before emailing
[12:22] <ScottL> ailo, but i need to send the email anyways since it has gone public now
[12:22] <ScottL>
[12:22] <ScottL> TheMuso, i'm rather confused by what happened with the plymouth-theme-ubuntustudio package
[12:23] <TheMuso> ScottL: Right.
[12:23] <ScottL> TheMuso, it seems that only some of the images were not included
[12:23] <TheMuso> Right.
[12:23] <TheMuso> Were you working in a bzr branch?
[12:23] <ScottL> TheMuso, oh, and thanks for correcting me in the email
[12:23] <ScottL> TheMuso, i don't really remember...if i had to guess what i did, i probably did "apt-get source"
[12:24] <ScottL> TheMuso, however, i was able to get my source from ppa again and compared what is currently coming from the universe source to my ppa source
[12:25] <ScottL> as far as the plymouth theme, all the i could tell was different were the missing icons
[12:25] <TheMuso> Right, so re-add them.
[12:25] <ScottL> so, i'm building in ppa again and will test this afternoon when i get home (10.5 hours hence)
[12:25] <ScottL> TheMuso, is that too late so i can test it?
[12:26] <TheMuso> ok well freeze is in effect earlier than I thought, but it shouldn't matter for beta 2, as long as its fixed for final.
[12:26] <TheMuso> We can at least upload it and it will sit in the queue until beta 2 is out.
[12:26] <ScottL> TheMuso, okay, so the prudent plan is to test it well then upload which will be included on the final image?
[12:27] <ScottL> (since there is not an RC this time i believe)
[12:28] <TheMuso> Correct.
[12:28] <ScottL> TheMuso, right
[12:28] <ScottL>
[12:29] <ScottL> someone had mentioned that windows look bad in natty, like a mixture of gtk elements
[12:29] <TheMuso> In what DE?
[12:30] <ScottL> i can second that when you start with vanilla ubuntu in natty and install the ubuntustudio-look package :/
[12:30] <ScottL> TheMuso, it was the gnome-classic DE
[12:30] <TheMuso> oh yeah I remember seeing a bug about that, but the proposed fixes were too invasive.
[12:30] <TheMuso> I forgot about it though.
[12:31] <ScottL> heh, i thought the person reporting it had done something wrong on their end :P   at least until it happened to me
[12:31] <TheMuso> right
[12:31] <ScottL> okay, getting ready and going to work
[13:22] <scott-work> TheMuso: i'm sorry how i handled this with plymouth-theme-ubuntu, i really dropped the ball on it
[13:22] <scott-work>
[13:23] <scott-work> interestingly, there is a gnome remix of ubuntu happening:  http://justinstories.wordpress.com/2011/04/07/the-inevitable-is-here-ubuntu-gnome-remix/
[13:23] <scott-work> http://ugr.teampr0xy.net/
[13:23] <scott-work> https://launchpad.net/ubuntugnome/
[13:23] <TheMuso> scott-work: thats ok
[13:24] <scott-work> TheMuso: at best we narrowly get the package right and in on the final image, at worst it is busted
[13:25] <scott-work> TheMuso: that part is not so dramatic, however we (i) could have made sure the percentages were better for the "best" part
[13:26] <scott-work> i'm going to go back to the bug report for the theme and see what the diff looks like, maybe that will help me understand what happened
[13:28] <scott-work> TheMuso: Binary files /tmp/uKfwiDRBPp/ubuntustudio-look-0.38.3/lib/plymouth/themes/ubuntustudio-logo/animation.png and /tmp/sKyUvD2A5O/ubuntustudio-look-0.39/lib/plymouth/themes/ubuntustudio-logo/animation.png differ
[13:28] <scott-work> this is one of several lines in the diff that corelate to the missing files
[13:34] <TheMuso> Right, debdiffs cannot contain binaries.
[13:34] <TheMuso> Easiest way to solve that is attaching a tarball.
[13:34] <TheMuso> Anyway, I'm off to bed.
[13:40] <holstein> scott-work: i'll get on a response
[13:40] <holstein> i talked to cory in here about it
[13:40] <scott-work> holstein: okay :)
[13:40] <holstein> and he seemed to imply that the dock was not optional
[13:42] <scott-work> holstein: you might inspire someone else to voice their opinion about the dock :)
[13:42] <holstein> sure, but it seems like it should be the other way around
[13:42] <l3on> Hi all.. I'm looking for a "ubuntu-studio_logo" based on new Ubuntu Brand Guidelines... could anyone provide it to me?
[13:43] <holstein> i dont know why the dock is glued to the xfce idea
[13:43] <holstein> we dont have a dock now
[13:43] <holstein> anyways... i'll get on it :)
[13:43] <holstein> scott-work: we dont have a mock-up with the new font yet right?
[13:44] <l3on> example → http://crenk.com/wp-content/uploads/2010/04/new-ubuntu-logo-compared.jpg
[13:47] <scott-work> l3on: i'll have to look and see what we have available, i don't know that i have just the logo sitting around (especially as i'm at work on a windows machine )
[13:49] <scott-work> l3on: here's probably the best i can do on short notice:  http://scottalavender.deviantart.com/gallery/
[13:49] <scott-work> it's my deviant art gallery with various mockups of the logo (and other sorted detritus)
[13:52] <l3on> damn, white on black -.-
[13:55] <scott-work> this is probably the closest to what we are currently doing:  http://scottalavender.deviantart.com/gallery/#/d2zr4is
[13:55] <scott-work> except the text colors are not two-tone
[13:56] <scott-work> l3on: if you give me some more information about what you are trying to accomplish i might be able to help better
[13:56] <scott-work> and in about 10 hours time (when i'm back at home) i can probably find something better
[13:58] <l3on> scott-work: yes, get me some mins to show you something...
[15:48] <ailo> scott-work, I didn't realize you had those ideas about AWN. Didn't connect the dots.
[15:49] <scott-work> lol ailo, i don't always explain things very well :)
[15:49] <scott-work> ailo: good posts on the mailing list about the 1010 problems, by the way
[15:50] <ailo> Well, I tend not to connect certain things, which is why I often double-book.
[15:50] <ailo> scott-work, Yeah? Ralf does seem like a knowledgeable person. Don't want to feel like I'm pushing I'm around.
[15:52] <scott-work> ailo: i particularly liked how you tried to entice him to help with documentation with your offer to help edit his english
[15:52] <scott-work> for two reasons, i suppose
[15:52] <scott-work> one, it's good to honestly and in good-faith try to get people involved
[15:52] <scott-work> but two, sometimes it's a good thing to give people the opportunity to fix the things they are complaining about :)
[15:56] <ailo> Absolutely. That's what the wiki is for anyway. And we should just try to make sure it's up to date and somewhat easy to search trhough.
[16:12] <astraljava> paultag: Going to install OpenBSD 4.8 in a few. Btw. did you see my "invitation" on Diaspora?
[16:12] <paultag> astraljava: you rock :)
[16:12] <paultag> astraljava: no, I missed it
[16:12] <paultag> astraljava: I've not had internet, my ISP is messing with me again
[16:13] <paultag> the modem is just on a reset-loop
[16:13] <astraljava> Not nice.
[16:13] <paultag> so I'm only online now because I'm at my Uni
[16:13] <paultag> astraljava: moment :)
[16:14] <paultag> astraljava: all set :)
[16:23] <abogani> ScottL, scott-work: Are you around?
[16:23] <scott-work> yes i am abogani  :)   how are you today?
[16:23] <abogani> scott-work: Well thanks! And you?
[16:24]  * abogani is waiting to receive feedbacks about -29-lowlatency kernel...
[16:24] <scott-work> abogani: more or less okay :)
[16:24] <scott-work> -29 or -39 ?
[16:24] <abogani> 39
[16:25] <scott-work> right, i started to prepare for testing yesterday but ailo suggested waiting until it was fixed or stabilized or something (getting old and can't remember)
[16:25] <scott-work> abogani: is it ready again to test?
[16:25] <abogani> scott-work: Yes
[16:26] <astraljava> paultag: Yup, nice! :)
[16:26] <scott-work> okay, then i will test it within the next three days - i need to finish updating the plymouth theme so that it actually works first
[16:26] <astraljava> abogani: I can do a test install tonight too.
[16:27] <abogani> astraljava: Thanks Janne.
[16:28] <abogani> astraljava: https://lists.ubuntu.com/archives/ubuntu-studio-devel/2011-April/003047.html Please remeber to install rtirq-init also!
[16:28] <paultag> astraljava: :)
[16:28] <astraljava> abogani: Alright, cool.
[16:28] <paultag> TTYL, got to head home
[16:28] <paultag> not sure when I'll have internet again :(
[16:28] <astraljava> Sure.
[16:28] <paultag> cheerio!
[16:28] <ailo> abogani, I am installing now. Will try on both 32bits and AMD64. Funny I had such different results using the -generic version.
[16:28] <astraljava> See ya!
[16:29] <abogani> ailo: If you want have constant results (more or less) you should put an heavy workload in background...
[16:30]  * abogani is thinking to add a package to provide that heavy background work.
[16:30] <abogani> to help testers.
[16:31] <ailo> abogani, I should compare what happens with a heavy workload on different kernels. If I get the same result as with previous -lowlatency, a heavy workload had no effect what so ever on jackd.
[16:32] <ailo> But, I am testing with different sound devices now, which I didn't before. I am suspecting my lack of reliability is caused by my onboard card.
[16:32] <ailo> abogani, A heavy workload package would be great. Then we know everyone will have used the same test.
[16:33] <abogani> ailo: Exactly.
[16:33] <abogani> It makes tests on the same machine comparable at least.
[16:33]  * abogani has to go.
[19:33] <ailo> Initial tests seem to show that even my onboard card is working slightly more reliable with 2.6.39. No xruns yet.
[19:34] <ailo> And the rtirq-init script..
[21:01] <ailo> scott-work, About testing the kernel. Don't think you need to do much more than start your favorite applications, and have them running for a while. Try using the lowest frames/period you can. For me 64 frames/period is the limit on one of my systems, without xruns.
[21:01] <ailo> scott-work, Don't forget to have rtirq-init installed, and make sure you booted with it installed.
[21:02] <ailo> scott-work, nvidia drivers won't work
[22:09] <ScottL> sorry, i'm home now, left work to go to doctors for my neck ended up going home with prescriptions
[22:10] <ScottL> ailo, i do like to open my favorite applications as a base line and get lowest stable settings, then i usually record four or five tracks
[22:11] <ScottL> i'm thinking of adding some plugins to the previously recorded track while recording a fourth of fifth track
[22:11] <ScottL> once i find something i like i might even "save" that testing project and reuse it each time a new kernel comes out, maybe store it on my web space and download it as needed


[00:10] <OvenWerks> Eickmeyer: I am satrting to question if plugins with a jack version should even show up in the menu. There are a lot of them... so many that most people will take one loo and not bother.
[00:10] <OvenWerks> *one look
[00:12] <OvenWerks> It is almost worth it's own menu, sub menus and  sub sub menus
[00:14] <Eickmeyer> OvenWerks: If you install the version of -menu from the Backports PPA, it has the jack versions of lsp-plugins in a submenu of the Effects submenu.
[00:14] <OvenWerks> I am not even sure providing lv2, vst, jack client and ALSA application make sense.
[00:14] <OvenWerks> cool, I will do that
[00:15] <Eickmeyer> In other words: I did a thing this morning.
[00:16] <Eickmeyer> Regarding DjZU's issue, I think it was a one-off.
[00:17] <OvenWerks> Anything that has an OSS variant should have the OSS variant .desktop file with NoDisplay=true
[00:18] <OvenWerks> we should not support OSS
[00:18] <Eickmeyer> Agreed.  As for me an my house, we shall have ALSA.
[00:20] <OvenWerks> it is not real time friendly
[00:21] <OvenWerks> totally file handle based... blockable
[00:21] <Eickmeyer> Right.
[00:22] <OvenWerks> however, I think the switch to plasma should get done first when GG opens up in a few weeks
[00:22] <OvenWerks> I have set mine up to look pretty much like what we have now.
[00:23] <OvenWerks> deskbar at the top, etc.
[00:25] <OvenWerks> the plasma default for menu is close to whisker but I switched to the win95 style menu whic for me is the most productive. (me being strange)
[00:25] <OvenWerks> in the past we have set the title bar colour of the focused window to Studio blue
[00:25] <Eickmeyer> Groovy Gorilla.
[00:26] <OvenWerks> GG
[00:26] <Eickmeyer> !20.10
[00:26] <Eickmeyer> I don't know if I'm going to go as far as customizing color schemes.
[00:27] <OvenWerks> so long as it contrasts... while I have a CDE look alike, I am not suggesting we do that
[00:28] <OvenWerks> breeze works quite well with gnomed titlebars for now (untill they change to make it look "new"
[00:30] <Eickmeyer> I think I'm going to keep Materia (I've already packaged the KDE version), but I'll change the inactive titlebar to a "light" color as the default. Basically, I'll make a new color scheme. Would that be a fair compromise?
[00:30] <OvenWerks> I'll know when I see it :)
[00:31] <OvenWerks> merely changing the text colour does not seem to be enough. a good Title bar BG difference helps a lot
[00:32] <OvenWerks> some of us are over 45...
[00:32]  * OvenWerks will be 60 this year
[00:33] <OvenWerks> but the rality for me is, if I don't like it I will change it :)
[00:34] <OvenWerks> so do what the artistic people like.... I'll try to be quiet and not throw too much popcorn
[00:35] <Eickmeyer> Hehe
[00:35] <Eickmeyer> In all fairness, I just turned 40.
[00:36] <OvenWerks> 4 more years to go...
[00:36] <eylul[m]> is suddenly actually feeling young in this conversation
[00:36] <Eickmeyer> Heh
[00:36] <OvenWerks> eylul[m]: you are probably about my daughter in law's age
[00:36] <Eickmeyer> Then there's tsimonq2 who is young enough to be my son. But not as young as my actual son. Just 10 years difference though.
[00:37] <eylul[m]> :))
[00:37] <eylul[m]> I would say that 10 years of age in that context is still quite a bit :))
[00:38] <Eickmeyer> That's true.
[00:38] <OvenWerks> my son is a Dr. chemmist his wife is an engineer... they met at university
[00:39] <eylul[m]> :))
[01:21] <StevenJayCohen> Both my kids are at university, they are 21. He's studying CS and she's studying documentary film
[06:15] <OvenWerks> just listening to https://soundcloud.com/davephillips69/the-spring-of-23
[06:15] <OvenWerks> made on Ardour
[06:16] <OvenWerks> Ardour 2 actually
[06:28] <StevenJayCohen> Oh, I'm sharing that to book twitter
[06:33] <StevenJayCohen> If a machine took stock Ubuntu 20.04, added the Low Latency Kernel and the Music stuff via Ubuntu Studio Installer, and wants to upgrade to 2X.04 in a year or two, does the upgrade take care of the Low Latency Kernel and the Music stuff? Or will I need to upgrade those after the fact via Ubuntu Studio Installer. I'm guessing that the Kernel will be updated, and possibly the pieces that I had installed too,
[06:33] <StevenJayCohen> but that I should re-install the Music stuff to pick up any new additions to the distro. Will Ubuntu Studio Control update automatically?
[15:39] <OvenWerks> StevenJayCohen: I do not know the answer to that question.
[15:40] <OvenWerks> StevenJayCohen: Eickmeyer says that there needs to be a ppa purge before upgrading can be done and I do not know what that does to the system
[15:41] <Eickmeyer> All the ppa purge does is remove the PPA and downgrade the packages that are in the PPA to whatever is in the repo.
[15:42] <OvenWerks> Eickmeyer: ok, so what happens to software installed out side of the release?
[15:42] <OvenWerks> are they upgraded?
[15:42] <OvenWerks> I think that is what is being asked
[15:43] <Eickmeyer> Anything that is in the repos and is installed on the system is upgraded.
[15:43] <OvenWerks> StevenJayCohen: so the answer to your question is "yes"
[15:44] <OvenWerks> StevenJayCohen: the Studio packages will also be upgraded
[15:44] <StevenJayCohen> Perfect
[15:45] <OvenWerks> Eickmeyer: I don't think a clean install will help DjZU. He is likely to make the same mistake on a new install
[15:46] <Eickmeyer> At least it would be a good starting point to see where he went wrong.
[15:47] <OvenWerks> I would like to see the line in /etc/passwd for this user
[15:48] <OvenWerks> the last entry should be: /sbin/nologin or /bin/false
[15:49] <OvenWerks> I am wondering if as a part of installing the sw he had to create this user and did so using the new user GUI
[16:04] <OvenWerks> Also the user number should be less than 1000
[16:04] <OvenWerks> A package install should take care of that...


[03:10] <caliculk> Does anyone here use an inventory management solution in the workplace that is compatible with Linux, OS X, and Windows and can perform SNMP scanning/polling, agent and agentless based information, has an API, and can pull serial numbers for all hard drives.
[05:47] <vbotka> caliculk, you might want to take a look at ansible.com
[09:44] <EmilienM> jamespage: hey, we're trying to deploy Mitaka on Xenial, we're having an issue with OVS
[09:44] <EmilienM> degorenko: can you past your logs here?
[09:44] <degorenko> yep
[09:44] <degorenko> http://paste.openstack.org/show/497463/
[09:45] <degorenko> http://paste.openstack.org/show/497467/
[09:45] <EmilienM> it sounds similar to https://bugs.launchpad.net/networking-ovs-dpdk/+bug/1512701
[09:47] <EmilienM> maybe do we need openvswitch-switch-dpdk ?
[09:47] <EmilienM> degorenko: can you run "dpkg -l | grep openvswitch" ?
[09:48] <degorenko> EmilienM, http://paste.openstack.org/show/497469/
[09:49] <EmilienM> jamespage: do we need something else when deploying openvswitch-switch package?
[09:51] <jamespage> EmilienM: nope
[09:51] <jamespage> EmilienM: status looks ok
[09:53] <EmilienM> jamespage: we also have an issuel with SSL deployment. The same Puppet manifests to deploy SSL certs on Trusty does not work on Xenial, see https://etherpad.openstack.org/p/puppet-openstack-xenial
[09:53] <EmilienM> we have a lot of [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)
[09:53] <EmilienM> something changed in Xenial for SSL certs?
[09:56] <EmilienM> degorenko: I'm adding the Horizon failure in the etherpad, you missed it
[09:56] <degorenko> are you about failed tempest tests?
[09:57] <EmilienM> yes
[09:57] <EmilienM> jamespage: we're trying to deploy Mitaka on Xenial, we have some issues
[09:58] <EmilienM> degorenko: I'm going to enable SSL again so we can have the failures available in logs
[09:58] <degorenko> EmilienM, what we should to do with openvswitch? :)
[09:59] <EmilienM> degorenko: I have no idea
[09:59] <degorenko> :(
[10:03] <EmilienM> jamespage: if you can help us that would be awesome, please let us know what you think about our issues in the etherpad. Thanks
[10:24] <jamespage> EmilienM: sorry juggling a few things todo so will be a bit async on responses
[10:24] <jamespage> EmilienM, degorenko: OK lets look at ovs first...
[10:25] <jamespage> you should not need the -dpdk binary for general use
[10:25] <jamespage> and the path looks just fine for the database.
[10:29] <jamespage> things to look at:
[10:29] <jamespage> check perms on /var/run/openvswitch/db.sock
[10:30] <jamespage> look in /var/log/openvswitch/*
[10:30] <jamespage> might give some further clues...
[10:36] <EmilienM> jamespage: thx for looking, I'm a bit afk for lunch, with reply in async
[10:42] <degorenko> jamespage, root@de-xenial:~/puppet-openstack-integration# ll /var/run/openvswitch/db.sock
[10:42] <degorenko> srwxr-x--- 1 root root 0 May 17 15:06 /var/run/openvswitch/db.sock=
[10:42] <degorenko> cat: /var/run/openvswitch/db.sock: No such device or address
[10:43] <jamespage> degorenko, is the trailing '=' a typo or actually whats in the directory?
[10:44] <degorenko> jamespage, http://paste.openstack.org/show/497480/
[10:44] <degorenko> i don't know why was added =
[10:44] <degorenko> :)
[10:46] <jamespage> degorenko, ok have one running as well - my /var/run/openvswitch looks comparable to yours
[10:46] <jamespage> and cat /var/run/openvswitch/db.sock does the same thing
[10:46] <jamespage> but
[10:46] <jamespage> I can add a bridge to the configuration
[10:46] <jamespage> http://paste.ubuntu.com/16487891/
[10:47] <jamespage> degorenko, anything useful in /var/log/openvswitch?
[10:47] <degorenko> jamespage, nothing, but let me look one more time
[10:47] <degorenko> jamespage, ovsdb-server has: 2016-05-18T10:46:51.182Z|01882|ovsdb_jsonrpc_server|WARN|Dropped 11 log messages in last 56 seconds (most recently, 6 seconds ago) due to excessive rate
[10:47] <degorenko> 2016-05-18T10:46:51.182Z|01883|ovsdb_jsonrpc_server|WARN|punix:/var/run/openvswitch/db.sock: connection exceeded maximum (330)
[10:48] <degorenko> and nothing interesting in ovs-vswitchd log
[10:48] <jamespage> degorenko, anything in syslog?
[10:49] <degorenko> jamespage, i see several neutron errors, but it is related to already posted error during creating bridge - and same error i see in syslog
[10:50]  * jamespage scratches his head
[10:50] <jamespage> degorenko, can you do a ovs-vsctl show?
[10:51] <jamespage> just wondering what is working and what's not
[10:51] <jamespage> also anything in /etc/default/openvswitch-switch ?
[10:51] <jamespage> other than the stock installed file
[10:52] <degorenko> jamespage, i found this in syslog http://paste.openstack.org/show/497480/
[10:52] <EmilienM> degorenko: do you have enough memory on the VM?
[10:52] <jamespage> degorenko, I think thats a previous pastebin
[10:53] <degorenko> 2 gb more free, 5.6 from 7.8
[10:53] <degorenko> EmilienM, ^
[10:54] <degorenko> jamespage, file /etc/default/openvswitch-switch is empty
[10:54] <jamespage> that's ok
[10:54] <degorenko> only comment lines
[10:56] <jamespage> on the deployment I have running we run it in a 1.5G instance for network nodes - and thats working fine...
[10:57] <degorenko> jamespage, show command also failed with same error
[10:58] <jamespage> degorenko, its related to 2016-05-18T10:46:51.182Z|01883|ovsdb_jsonrpc_server|WARN|punix:/var/run/openvswitch/db.sock: connection exceeded maximum (330)
[10:58] <jamespage> the socket is full - are both ovs processes still running?
[10:59] <degorenko> jamespage, http://paste.openstack.org/show/497483/ - yes
[11:01] <jamespage> degorenko, can I access your instance/
[11:01] <jamespage> ?
[11:01] <degorenko> no :( it is under private network
[11:02] <degorenko> jamespage, ^
[11:03] <jamespage> degorenko, what was the syslog thing you found?
[11:04] <degorenko> jamespage, well, i see a lot of request for creation bridges and then
[11:04] <degorenko> jamespage, http://paste.openstack.org/show/497484/
[11:04] <degorenko> after that i have database connection error
[11:05] <jamespage> degorenko, hmm
[11:05] <jamespage> degorenko, something is getting wedged, but I've not seen this before
[11:05] <jamespage> degorenko, can you try a restart of openvswitch-switch pls
[11:06] <degorenko> jamespage, full log for ovs commands: http://paste.openstack.org/show/497485/
[11:06] <degorenko> that's all i have from syslog related only ovs
[11:06] <jamespage> ovs was functional
[11:06] <degorenko> yes, it was
[11:06] <jamespage> and then after a few hours borked in some way
[11:07] <degorenko> i can redeploy it again
[11:07] <degorenko> and we will have fresh logs
[11:07] <degorenko> but anyway
[11:07] <degorenko> we have issue, that during second puppet run for idempotency - service was restarted
[11:07] <jamespage> degorenko, before you do "netstat -an | grep openvswitch" would be useful
[11:08] <degorenko> yeah
[11:08] <degorenko> to many connections
[11:08] <degorenko> http://paste.openstack.org/show/497486/
[11:08] <degorenko> jamespage, ^ that's not a full output
[11:09] <degorenko> i have 404 lines after this command
[11:09] <jamespage> degorenko, ok so we need to figure out what's holding those connections open
[11:09] <jamespage> sudo lsof | grep /var/run/openvswitch
[11:10] <jamespage> degorenko, I see this sort of thing:
[11:10] <jamespage> http://paste.ubuntu.com/16488179/
[11:11] <degorenko> jamespage, yep, http://paste.openstack.org/show/497487/
[11:11] <degorenko> i have a lot of db.sock
[11:11] <jamespage> from which processes?
[11:13] <degorenko> jamespage, root     17422  0.0  0.0  24732  2036 ?        S<s  May17   0:00 ovs-vswitchd: monitoring pid 17423 (healthy)
[11:13] <degorenko> root     17423  0.1  0.6<PHONE_NUMBER>4 ?        S<Ll May17   1:37  \_ ovs-vswitchd unix:/var/run/openvswitch/db.sock -vconsole:emer -vsyslog:err -vfile:info --mlockall --no-chdir --log-file=/var/log/openvswitch/ovs-vswitchd.log --pidfile=/var/run/openvswitch/ovs-vswitchd.pid --detach --monitor
[11:13] <degorenko> so, both processes which i posted above
[11:14] <degorenko> all db.sock from ovsdb-server /etc/openvswitch/conf.db -vconsole:emer -vsyslog:err -vfile:info --remote=punix:/var/run/openvswitch/db.sock --private-key=db:Open_vSwitch,SSL,private_key --certificate=db:Open_vSwitch,SSL,certificate --bootstrap-ca-cert=db:Open_vSwitch,SSL,ca_cert --no-chdir --log-file=/var/log/openvswitch/ovsdb-server.log --pidfile=/var/run/openvswitch/ovsdb-server.pid --detach --monitor
[11:17] <jamespage> degorenko, might seem like an odd question but is self host resolution ok?
[11:17] <jamespage> degorenko, any spurious output on sudo XX comands?
[11:18] <degorenko> jamespage, he he, yes, it is
[11:18] <degorenko> ubuntu@de-xenial:~$ sudo -i
[11:18] <degorenko> sudo: unable to resolve host de-xenial
[11:18] <jamespage> degorenko, can you pastebin /var/log/openvswitch/ovsdb-server.log pls
[11:18] <jamespage> degorenko, hmm
[11:18] <degorenko> but i 'm not sure that we have same error on our infra slaves
[11:19] <jamespage> degorenko, are there alot of ovs-vsctl processes hanging around?
[11:19] <jamespage> or ovs-* processes - might be other cli tools
[11:19] <degorenko> jamespage, http://paste.openstack.org/show/497488/ - yes
[11:20] <degorenko> ~200
[11:20] <jamespage> degorenko, this is your problem
[11:20] <jamespage> degorenko, when there is spurious output on the sudo command, neutron-openvswitch just spins loads of those monitor processes and everything collapses...
[11:21] <jamespage> that's consuming all of the socket connections, resulting in what you see now...
[11:21] <jamespage> degorenko, EmilienM: this might be a diff in the  xenial image vs trusty image...
[11:22] <degorenko> jamespage, hmmm, ok, thank you for help, i'll rebuild my vm, then will add my host name to /etc/hosts and try to redeploy
[11:22] <jamespage> degorenko, np
[11:24] <jamespage> coreycb, hey - I switch the newton neutron builds to using ostestr - build speed picked up alot in the PPA's
[11:24] <jamespage> and seems more reliable...
[11:25] <jamespage> sort alot of sqlite racey things before - which I think is the cause of the FTBFS in yakkety for the mitaka point relase uploads...
[11:25] <jamespage> coreycb, also backported git-buildpackage for trusty for liberty and mitaka - should be able to switch --merge-mode=replace on soon
[11:35] <jamespage> coreycb, replace mode re-enabled...
[11:40] <coreycb> jamespage, awesome thanks
[11:47] <jamespage> coreycb, I also switched over keystone for newton
[11:47] <jamespage> appears to test alot faster now
[11:47] <jamespage> 19 mins vs 1hr
[11:47] <coreycb> jamespage, wow, that's a huge improvement
[12:34] <jamespage> coreycb, keystone in ppa is now 16 mins vs 52
[12:35] <coreycb> jamespage, that is really awesome.  my laptop is burning up here running neutron tests. :)
[12:46] <coreycb> beisner, these packages are ready for promotion to kilo-updates.  they've tested successfully and have aged 7 days in kilo-proposed.  http://paste.ubuntu.com/16490018/
[12:47] <beisner> coreycb, are there any pre-requisite charm upgrades tied to those package revs?
[12:47] <coreycb> beisner, no not for these
[12:48] <coreycb> beisner, while you mention it, I'm going to make a card to generalize that charm-helpers minor point release versioning so we don't have to deal with that.
[12:49] <beisner> coreycb, yes that'd be really nice.  it seems like an easy win to not potentially break folks, and ... peace of mind :-)
[12:49] <coreycb> beisner, definitely
[12:50] <beisner> coreycb, jamespage - kilo-proposed has libvirt-python and qemu.  are those needing to go as well?
[12:51] <coreycb> beisner, not yet for qemu, that's new
[12:51] <beisner> coreycb, ack
[12:51] <coreycb> beisner, not sure about libvirt-python
[13:01] <jamespage> coreycb, beisner: libvirt-python ++ yes please
[13:02] <jamespage> https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1539506
[13:02] <jamespage> for reference
[13:02] <jamespage> coreycb, reverted merge-mode again
[13:02] <jamespage> apparently my backported package was foobar.
[13:02] <coreycb> jamespage, doh
[13:03] <coreycb> jamespage, need anything?
[13:10] <jamespage> coreycb, nah - back in now - testing atm
[13:11] <jamespage> coreycb, hows microversion-parse?
[13:11] <coreycb> jamespage, oh sorry, I'll work on it, I thought you said it was done
[13:18] <jamespage> coreycb, nope
[13:31] <EmilienM> jamespage: for the SSL errors, everything works fine on Trusty, but same manifests fail on Xenial, I have some logs
[13:31] <EmilienM> Error: Could not prefetch keystone_service provider 'openstack': Execution of '/usr/bin/openstack service list --quiet --format csv --long' returned 1: SSL exception connecting to https://<IP_ADDRESS>:35357/v3/services: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)
[13:32] <EmilienM> http://logs.openstack.org/30/308530/16/experimental/gate-puppet-openstack-integration-3-scenario003-tempest-ubuntu-xenial/cd44c41/console.html#_2016-05-18_10_16_38_727
[13:32] <EmilienM> apache logs: http://logs.openstack.org/30/308530/16/experimental/gate-puppet-openstack-integration-3-scenario003-tempest-ubuntu-xenial/cd44c41/logs/apache/
[13:36] <jamespage> EmilienM: deploying now to see if I can reproduce
[13:36] <EmilienM> jamespage: thanks for your help
[13:36] <jamespage> EmilienM: np
[13:36] <jamespage> want to see you unblocked so you can start testing out newton packages :-)
[13:36] <EmilienM> so here's how we deploy SSL :
[13:37] <jamespage> EmilienM: oh I have a way to deploy SSL :-)
[13:37] <EmilienM> 1) we drop /etc/ssl/certs/puppet_openstack.pem file
[13:37] <EmilienM> I mean, we put the file at this place
[13:37] <jamespage> sure
[13:37] <EmilienM> 2) we run /usr/sbin/update-ca-certificates -f
[13:38] <EmilienM> 3) we put the cert in /etc/keystone/ssl/private/cert.pem (etc for every project)
[13:38] <EmilienM> that's all I think
[13:38] <EmilienM> it used to work fine with Trusty
[13:39] <jamespage> EmilienM: is that for the CA cert?
[13:40] <EmilienM> the CA cert is put in /etc/ssl/certs/puppet_openstack.pem
[13:40] <jamespage> EmilienM: hmm ok
[13:40] <EmilienM> well
[13:40] <EmilienM> in fact we use the same cert for both
[13:40] <EmilienM> https://github.com/openstack/puppet-openstack-integration/tree/master/files
[13:41] <EmilienM> we have a crt & key for ipv4 & ipv6 (because we deploy apache and use ::1 or <IP_ADDRESS>)
[13:41] <jamespage> EmilienM: any way you can turn up and capture the output of update-ca-certificates?
[13:41] <jamespage> -v would be useful
[13:42] <EmilienM> jamespage: yes! we can do it
[13:42] <EmilienM> degorenko: I'm going to update the patch ^
[13:43] <jamespage> EmilienM: awesome
[13:43] <jamespage> EmilienM: looking at the log I think you're writing it to /usr/local/share/ca-certificates/puppet_openstack.crt
[13:43] <jamespage> and then running update-ca-certifcates
[13:43] <EmilienM> yeah
[13:45] <EmilienM> jamespage: can I run it afterwards the puppet run?
[13:45] <jamespage> yup
[13:47] <EmilienM> ok let's try
[13:54] <jamespage> EmilienM: testing out my Juju deployed SSL openstack xenial mitaka foo now
[13:54] <EmilienM> excellent
[13:54] <EmilienM> jamespage: how do you deploy SSL?
[13:54] <EmilienM> can you point me to the charms?
[13:54] <EmilienM> (see how good is my vocabulary)
[13:55] <jamespage> EmilienM: kinda the same way you do  - the keystone charm acts as a CA for everything else, and provides signed certs back to related services
[13:55] <EmilienM> ok same yeah
[13:55] <jamespage> which then use them and update their endpoint entries todo https
[13:56] <jamespage> EmilienM: OK so I'm looking functional with https enabled...
[13:56] <jamespage> EmilienM: that's from a xenial client to a xenial cloud
[13:56] <EmilienM> ok, let's see
[13:57] <jamespage> EmilienM: that's good because it broadly means we're not looking at a code fault somewhere in the stack on installed things...
[13:57] <jamespage> EmilienM: how do you generate your CA and cert? I wonder whether its something about them that xenial does not like
[13:58] <EmilienM> jamespage: on http://www.selfsignedcertificate.com/
[13:58] <EmilienM> I'm very lazy, I know.
[13:58] <EmilienM> but it just works
[13:59] <jamespage> EmilienM: so how does the chain of trusty work with those?
[13:59] <jamespage> puppet_openstack.crt is the cert for the signing CA?
[13:59] <EmilienM> jamespage: yes
[14:00] <EmilienM> our certs are here: https://github.com/openstack/puppet-openstack-integration/tree/master/files
[14:00] <EmilienM> we have a pair of cert/key for ipv4 & ipv6
[14:01] <jamespage> hmm this rings a bell for some reason...
[14:01] <jamespage> EmilienM: I suppose those match to localhost right?
[14:02] <EmilienM> jamespage: <IP_ADDRESS> and ::1
[14:02] <EmilienM> we don't match on localhost because we want to test ipv4 & ipv6 endpoints
[14:02] <EmilienM> jamespage: but ipv6 tests don't run on ubuntu, so consider <IP_ADDRESS> only.
[14:02] <jamespage> ok
[14:03] <jamespage> EmilienM: verbose output of that update-ca-certifcates looks like it might help
[14:03] <jamespage> EmilienM: I'd like to check that your cert is getting into /etc/ssl/cert/ca-certificates.crt
[14:03] <EmilienM> yeah, CI is currently running
[14:03] <jamespage> you can grep for a line or so in that file to match
[14:08] <jamespage> EmilienM: might be relevant
[14:08] <jamespage> http://www.python.org/dev/peps/pep-0476/
[14:08] <jamespage> trusty has a pre 2.7.9 python 2.7 version
[14:09] <EmilienM> ok I have logs
[14:09] <EmilienM> a sec
[14:10] <jamespage> EmilienM: OK my SSL cloud appears completely functional, so it must be something todo with the way you're doing cert and building the trusty chain
[14:10] <jamespage> just a hunch
[14:10] <jamespage> trust chain
[14:10] <jamespage> not trusty...
[14:10] <EmilienM> ok
[14:10] <EmilienM> I'm trying to get the logs
[14:11] <EmilienM> job is still running, will show output in a few min
[14:12] <jamespage> ok stepping away for a bit...
[14:12] <jamespage> biab
[15:03] <jak2000> my network card not bringup at the start/boot, i need do a ifdown eth0 and then ifup eth0 how to fix it?
[15:29] <nacc> rbasak: i assume you're gone already, but if not o/; and if so, can we sync up tmrw AM?
[15:42] <smb> hallyn, somehow your 1.3.4 libvirt merge did upgrade without issues and it even seems to boot Xen PV and HVM guests... I wonder what I am doing wrong... ;) nice job
[15:54] <hallyn> smb: did you get a systemctl preset error on upgrade?
[15:54] <hallyn> once i finish testing my kernel patch i was going to try and reproduce that with a minimal empty pkg set
[15:57] <smb> hallyn, hm, not that I remember. I might have missed it if it did not cause a upgrade failure. But systemctl status on libvirtd was ok. Not sure whether one would now expect libvirt-bin to be the alias (or whether that actually is possible)
[15:58] <hallyn> smb: it is now the alias, and on clean installs that works
[15:59] <EmilienM> jamespage: http://logs.openstack.org/30/308530/18/experimental/gate-puppet-openstack-integration-3-scenario002-tempest-ubuntu-xenial/e17a5b4/console.html#_2016-05-18_15_26_02_283
[15:59] <smb> hallyn, ah ok. so that would be the only odd thing "systemctl status libvirt-bin" reports it as not running. Even after reboot...
[16:00] <EmilienM> jamespage: and http://logs.openstack.org/30/308530/18/experimental/gate-puppet-openstack-integration-3-scenario002-tempest-ubuntu-xenial/e17a5b4/console.html#_2016-05-18_15_26_13_161
[16:00] <hallyn> smb: yeah i think that may even be the whol eproblem - maybe systemd is trying to set up the symlink for the Alias and that fails bc something already exists
[16:02] <smb> hallyn, I believe that is what is done. But I don't know how one is supposed to cleanly do that switch-over
[16:02] <hallyn> :)  I can tell you that it worked before an init-system-helpers update in yakkety
[16:02] <hallyn> so it still may really be a bug there
[16:03] <hallyn> or, i was always doing something wrong and the old code just let it fly
[16:05] <smb> hallyn, :) I would not want to claim I knew what is right or wrong when it comes to systemd... one thing I just noticed is that status reports active running and then "bad" whatever that means
[16:14] <jeeves_moss> is the pagkage PuppetMaster still broken for 16.04?  I'm trying to install it through apt-get, and it fails
[16:15] <nacc> jeeves_moss: fails how?
[16:15] <jeeves_moss> nacc: "Job for puppetmaster.service failed because a timeout was exceeded. See "systemctl status puppetmaster.service" and "journalctl -xe" for details."
[16:16] <jeeves_moss> nacc: full error  --->  http://pastebin.com/3KNDZ4Nx
[16:17] <nacc> jeeves_moss: anything in the referred to logs (feel free to pastebin them too)
[16:17] <jeeves_moss> one sec.  I'll have a look once this wget is done
[16:19] <xnox> smoser, is it possible to do "xnox hates cloud-init networking" via cloud config drive and/or via user data and/or vendor data?
[16:22] <jeeves_moss> ugh, I miss having a box in the datacenter.  Trying to do a setup at home takes forever!
[16:27] <jeeves_moss> nacc: lol.  looks like it couldn't make the .pid file.  <rolls eyes>
[16:29] <nacc> jeeves_moss: permissions?
[16:29] <jeeves_moss> nope.
[16:30] <jeeves_moss> nacc: "puppetmaster.service: Failed to read PID from file /run/puppet/master.pid: Invalid argument"
[16:30] <nacc> jeeves_moss: does said file exist? and have valid contents?
[16:31] <jeeves_moss> the file didn't exist.  so I tried touching the file, and re-running the installer
[16:33] <nacc> jeeves_moss: it probably needs a pid in it
[16:33] <nacc> jeeves_moss: but i might be wrong
[16:33] <jeeves_moss> nacc: http://pastebin.com/WWWw7Hny
[16:34] <nacc> jeeves_moss: that still happens you mean? or was the original error?
[16:35] <jeeves_moss> nacc: orignial error.  new server, new install
[16:35] <nacc> jeeves_moss: and after `touch` it gets further?
[16:35] <nacc> jeeves_moss: just fyi, it would be good to file a bug (or see if one si filed) for puppetmaster that it fails to install due to the above
[16:36] <jeeves_moss> I had a look through the service file, and it should be "master.pid"
[16:37] <jeeves_moss> I'm going to see if it fails again.
[16:37] <jeeves_moss> would be nice if I can fil a bug.  would be the first one I've ever filed
[16:37] <nacc> !bug | jeeves_moss
[16:38] <nacc> :)
[16:39] <jeeves_moss> typical.  most things I want are always broken
[16:40] <nacc> jeeves_moss: fwiw, the version in 16.04 (and yakkety) is the same as in debian, so it's probably a debian bug, really -- would be good to verify if it happens there too
[16:41] <nacc> not strictly necessary, but it will probably get asked in teh bug :)
[16:41] <jeeves_moss> nacc: lol.  no body's got time for 'dat.   -->  http://s2.quickmeme.com/img/a0/a0ed68c2b414e58e131e7fa1c7ac66e4df4a14d30df577734812cdb95d9aaa99.jpg
[16:43] <jeeves_moss> ohhhh, new error!!!  java ins't installed.  might be a dep problem here guys
[16:43] <jeeves_moss> <rolls eyes>  all of this to manage 8 machines
[16:45] <nacc> jeeves_moss: puppet shouldn't need java? it's a ruby tool
[16:45] <nacc> i thought
[16:46] <jeeves_moss> hummm, we shall see.  I tried intstalling the latest snapshot from puppetlabs, and that's what I got.  so, we shall see
[16:46] <nacc> jeeves_moss: hrm? so not the ubuntu pacakge?
[16:46] <jeeves_moss> no, I grabbed the latest from their site.  if it installs, then the one oin the repo is suspect
[16:48] <jeeves_moss> nacc: it says puppetserver requires java
[16:49] <nacc> jeeves_moss: "it" being their version?
[16:49] <nacc> their being puppetlabs?
[16:50] <jeeves_moss> yes.  the latest from puppetlabs.  if that package works, then there is something wrong with the package in the ubuntu repo
[16:50] <nacc> well, they are different versions clearly
[16:51] <sdeziel> jeeves_moss: puppetmaster (ruby based) is not to be confused with puppetserver (java based)
[16:51] <nacc> sdeziel: thanks
[16:51] <sdeziel> nacc: np
[16:53] <jeeves_moss> sdeziel: any ideas on how to fix this install issue?
[16:54] <sdeziel> jeeves_moss: the puppetserver or the puppetmaster on?
[16:54] <sdeziel> s/on/one/
[16:54] <jeeves_moss> sdeziel: puppetmaster
[16:55] <jeeves_moss> sdeziel: this is the error we are getting.  http://pastebin.com/3KNDZ4Nx
[16:56] <sdeziel> jeeves_moss: I don't have any experience with puppetmaster directly. I've only used "puppetmaster-passenger" on Trusty
[16:57] <sdeziel> jeeves_moss: if you pastebin "systemctl status puppetmaster.service" and "journalctl -xe" I could look at them though
[16:57] <jeeves_moss> sdeziel: the outputs are in http://pastebin.com/3KNDZ4Nx
[16:58] <sdeziel> jeeves_moss: I only see the apt install failure log
[17:00] <jeeves_moss> hummm.  one sec.  it looks like even the latest pagakge from puppetlabs suffers the same issue
[17:01] <sdeziel> jeeves_moss: upstream focus seems to be on the Java based daemons (puppetserver and puppetdb) so it's possible they legacy version isn't in top shape
[17:01] <jeeves_moss> hummmm
[17:02] <jeeves_moss> at this rate, I should just abandon this mess
[17:02] <sdeziel> jeeves_moss: but for those you will get better support in their own channel
[17:03] <jeeves_moss> I've asked in there,  it's a ghost town!
[17:04] <sdeziel> jeeves_moss: hmm OK. If you want a puppetmaster/server and want to use the upstream apt repo, you are better off using Trusty because they don't yet officially support Xenial as the server role
[17:06] <jeeves_moss> sdeziel: fun.  how do I get the previous release if I'm installing with Apt-get?
[17:07] <sdeziel> jeeves_moss: apt-get install foo=<version>
[17:07] <jeeves_moss> hummm, google!!
[17:22] <coreycb> jamespage, https://git.launchpad.net/~corey.bryant/ubuntu/+source/python-microversion-parse
[17:59] <davethenoob> hi there everyone
[17:59] <davethenoob> I wonder if I could get a little advice please?
[18:00] <davethenoob> about me running my home server with Ubuntu Server installed
[18:00] <jak2000> my network card not bringup at the start/boot, i need do a ifdown eth0 and then ifup eth0 how to fix it?
[18:01] <genii> davethenoob: A more specific question might be more useful for someone to give an answer to :)
[18:01] <patdk-wk> !ask
[18:02] <patdk-wk> !poll
[18:02] <patdk-wk> !best
[18:02] <patdk-wk> damn bot
[18:02] <TJ-> !giveupwhilstyoureahead
[18:02] <davethenoob> hah. fair point. So I have my server installed and have had owncloud running on it and all good. Except that it started running slow and would upload photos to owncloud, which made me think it could have been a ddos attack. My question is can you recommend some good steps to do tonight to help minimize that risk?
[18:02] <jak2000> patdk-lap any advice?
[18:03] <davethenoob> thanks in advance
[18:03] <davethenoob> its 14.04
[18:03] <beisner> coreycb, oh i forgot to confirm that i pushed kilo-proposed to updates, except for qemu earlier.
[18:06] <coreycb> beisner, cool thanks
[18:06] <genii> davethenoob: Move ssh from port 22 to something more obscure, above 1024. Use key based authentication and not password based. Install and configure fail2ban
[18:08] <patdk-wk> genii, how does any of that help?
[18:08] <patdk-wk> he wants ddos protection
[18:08] <patdk-wk> you cannot protect yourself against a ddos unles you have enough bandwidth to handle it, or you hide behind someone that does
[18:08] <patdk-wk> you could completely firewall port 22 and not evne have ssh or any other service open
[18:08] <davethenoob> i have a home server that I want to access from outside home with owncloud and subsconic
[18:08] <patdk-wk> but your still vaunerable to a ddos
[18:09] <davethenoob> I have pasted an iptables rule into terminal
[18:09] <davethenoob> iptables -A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT
[18:09] <davethenoob> that one
[18:09] <patdk-wk> davethenoob, what is the goal?
[18:09] <patdk-wk> cause nothing you do on that server will help protect you from a ddos
[18:09] <patdk-wk> that limits http connects, not ddos
[18:09] <genii> patdk-wk: When someone is trying to bruteforce ssh passwords, it effectively chews up all the bandwidth and can cause outages
[18:09] <davethenoob> and used iptables persistent for it
[18:10] <patdk-wk> genii, yes, but that is hardly ddos protection
[18:10] <patdk-wk> he asked for ddos
[18:11] <patdk-wk> now to do more, stop bad/unwanted things from using your bandwidth, there are millions of things yo ucan do
[18:11] <patdk-wk> but you should find out what is using your bandwidth to find out what you should attempt in what order
[18:12] <patdk-wk> but no matter what you do, it is a simple job for someone to ddos you, just by flooding too much traffic to you
[18:12] <patdk-wk> it doesn't matter if you have an iptables rule that says DROP all incoming
[18:25] <davethenoob> thanks for advice guys.
[18:25] <davethenoob> After thinking, I think im gonna just make it a local server and not accessible outside
[18:25] <davethenoob> for safety
[18:26] <davethenoob> or start off local then maybe make it web-facing when I have some more knowledge / confidence
[18:44] <roaksoax_> ~/win 8
[19:07] <fellayaboy> can someone help me on how a thinclient connects to a vm on either xenserver or vsphere esxi?  how do i setup a thinclient to connect to a vm on a server?
[19:09] <patdk-wk> what is this *thinclient*?
[19:09] <fellayaboy> what protocol does the thinclient use to boot into a vm?  what server serves the thinclient
[19:09] <fellayaboy> a thin client machine - no cd/dvd, no hard drive.  just boots a VDI off the network.
[19:10] <fellayaboy> very small and minimal machine
[19:10] <patdk-wk> ok, but what does that have to do with a vm at all?
[19:10] <fellayaboy> i assumed a thin client connects to a vm
[19:10] <fellayaboy> how does it work then
[19:11] <patdk-wk> I guess this is more a question to your thinclient seller
[19:11] <fellayaboy> someone give me the basics pooo lease
[19:11] <patdk-wk> you need to know what your thinclient supports, what it can do
[19:11] <patdk-wk> I dunno what you mean by connects to a vm
[19:11] <fellayaboy> have u ever worked/setup a thinclient before patdk-wk
[19:12] <patdk-wk> the *standard* definition of a thin client is a basic monitor/keyboard has no, or very little programs installed
[19:12] <patdk-wk> fellayaboy, around 15years
[19:12] <fellayaboy> i thought a thin client machine boots an operating system off a server somewhere
[19:12] <patdk-wk> it might, it might not
[19:12] <patdk-wk> that depends on the thin client
[19:12] <fellayaboy> i see
[19:12] <fellayaboy> well in this case lets say it does
[19:12] <patdk-wk> it might have a 1gig cf card or something
[19:13] <fellayaboy> whats cf?
[19:13] <patdk-wk> yes, but I don't know what one oyu have, what it wants to do, does it do iscsi? nfs? http? how does it boot, what image does it expect?
[19:13] <patdk-wk> is it pxe? dhcp?
[19:14] <fellayaboy> so thin clients can boot straight to iscsi, nfs, http, pxe
[19:14] <patdk-wk> thinclients is a generic term that means nothing
[19:14] <fellayaboy> i see ok makes sense
[19:14] <patdk-wk> it is a catchall for any simple, reimagable bare-minimal workstation
[19:15] <patdk-wk> a thinclient could be custom hardware, that runs customfirmware
[19:15] <patdk-wk> it could be normal computers
[19:15] <patdk-wk> it could be normal computers that boot remotely, centrally
[19:15] <patdk-wk> but generally they are stripped down graphics, minimal ram, ...
[19:16] <fellayaboy> well, i want to create a system where i can use cheap inexpensive thin clients that connect to a centralized server, where they can run an operating system.
[19:16] <patdk-wk> normally only powerful enough generally to remote into something else, like using rdp/vnc
[19:16] <fellayaboy> through the network
[19:17] <patdk-wk> sounds like yo uwant to recreate vmware view with desktop hardware
[19:17] <patdk-wk> your going end up running a full blown desktop os on the clients, in order to run vnc, if you roll this yourself
[19:17] <fellayaboy> i guess that would be it.. ihavent used vmware view, ive used esxi server and client and rdp to connect to vm
[19:18] <fellayaboy> but never used a thin client to connect to one
[19:19] <fellayaboy> i want to have inexpensive thin clients connect to server. have the server do all the work etc.  and so that i can expand it all i want of course.  add more vm's, more endpoints. put all the load on the server.
[19:20] <fellayaboy> using 10gbps network card if have to with heavy duty switch/router etc
[19:20] <patdk-wk> you cannot put all the load on the server
[19:20] <patdk-wk> you can only put the cpu/ram load onto the server
[19:20] <patdk-wk> all graphics load will be on the client
[19:20] <patdk-wk> and on the server
[19:21] <fellayaboy> well not all, just want to have inexpensive endpoints thus thin clients
[19:21] <patdk-wk> and the vnc/rdp/... protocol processsing on the client
[19:21] <fellayaboy> that part is fine
[19:21] <fellayaboy> so theres  some thinclients that have in there bios a vnc/rdp protocol running already? or some kind of embedded os ?
[19:21] <patdk-wk> yes
[19:22] <fellayaboy> oh i see that makes sense
[19:22] <fellayaboy> and some have to option to boot off iscsi and nfs right
[19:23] <fellayaboy> what i want to do is create a Point of Sales network system.  say for a store.  using all open source technology
[19:23] <patdk-wk> maybe, those are getting not as thin then
[19:23] <fellayaboy> i see
[19:23] <fellayaboy> well now i know that some thinclients use vnc rdp in there embedded os
[19:23] <fellayaboy> that gives mea little headstart and some clarity
[19:23] <fellayaboy> thank you patdk-wk
[19:41] <mikedep333> So the Vagrant Xenial cloud images are currently broken. In the past, ultlemming fixed a Vagrant cloud image issue ASAP. Is he or someone else able to fix this?
[19:41] <mikedep333> https://bugs.launchpad.net/cloud-images/+bug/1565985
[19:49] <OerHeks> mikedep333, interesting.
[19:50] <OerHeks> dpkg -s virtualbox-guest-utils  is missing.. and post #7 about standard ssh keys missing..
[19:50] <OerHeks> i am glad about that last part, security wise
[19:51] <mikedep333> Yeah. Empirically, the ssh solution is working, but the shared folders is not.
[19:52] <OerHeks> not even after manual install, like post #5?
[19:52] <mikedep333> it looks like someone builds the virtualbox kernel modules without the package being installed
[19:52] <OerHeks> jups
[19:52] <OerHeks> corporate
[19:52] <mikedep333> the other virtualbox packages are not installed either
[19:53] <OerHeks> is it fixed v20160518.0.0 (last release 2 hours ago) ?? https://atlas.hashicorp.com/ubuntu/
[19:53] <mikedep333> So I should use those images rather than the ones on http://cloud-images.ubuntu.com/ ?
[19:54] <OerHeks> those are the same, see the last comment.
[19:54] <mikedep333> ok
[19:55] <mikedep333> I'll try them out, thanks
[22:00] <davethenoob> hello again. thanks for help earlier
[22:02] <davethenoob> I have opted for local home server with computer running ubuntu server. I know just have a pptp port open so i can vpn into home network and upload any new photos to my owncloud
[22:02] <davethenoob> are there any security measures to put in place when taking this route at all please?
[22:03] <sdeziel> davethenoob: pptp is known insecure
[22:03] <sdeziel> davethenoob: for alternatives you could check out OpenVPN or some IPsec implementations
[22:04] <davethenoob> umm. is it easy to swap?
[22:04] <davethenoob> I am complete noob to server stuff. Im just learning the ropes. Im php dev by trade
[22:04] <davethenoob> which do you suggest between the two?
[22:05] <sdeziel> davethenoob: OpenVPN as you'll be able to reuse the pptp port (TCP/1723)
[22:05] <Sling> davethenoob: why not just use SSH to manage the server?
[22:05] <sdeziel> davethenoob: this will save you a trip to your router's config
[22:06] <davethenoob> all i need it for is to access music on my subsonic, or photos on owncloud, both through android apps pointing to 192.168.x.x
[22:06] <davethenoob> I just want a vpn to access it outside
[22:07] <sdeziel> davethenoob: OpenVPN is available on Android as well
[22:07] <davethenoob> sdeziel so i just apt-get install the openvpn, disable pptp and enable openvpn?
[22:09] <sdeziel> davethenoob: that's a good starting point. Then you'll want to head to https://openvpn.net/index.php/open-source/documentation/howto.html for the configuration
[22:10] <sdeziel> davethenoob: you can also take a look at https://help.ubuntu.com/community/OpenVPN but I'd recommend to avoid bridged VPN (tap), prefer the tun/routed style
[22:12] <davethenoob> https://help.ubuntu.com/16.04/serverguide/openvpn.html
[22:12] <davethenoob> ?
[22:13] <sdeziel> davethenoob: that's actually an excellent guide
[22:14] <davethenoob> darn it
[22:14] <davethenoob> just realized im using my raspberry pi as vpn server
[22:17] <sdeziel> davethenoob: I have to go. Good luck with the VPN
[22:45] <Bae> anyone here good with the apparmor?
[22:45] <sarnold> hi Bae, what's up?
[22:49] <Bae> hey sarnold. glad i found someone who uses the project. i have a question about it. when i installed it and set it enabled what i saw was that it creates profiels for every bin/ binary out there. that means it creates some for ping etc. all that jazz. my question was about the default state of such bin files in the context of apparmors. as in, are they all set BY DEFAULT to inherit permissions/rules from its parent (calling process?) ?
[22:50] <sarnold> Bae: it depends upon the profile of the calling process. If the calling process is unconfined, then the "attachment specification" at the start of the profile says which programs to confine and with which profile
[22:50] <Bae> an example of this would be. say i made a nodejs file that calls the ping binary. would the ping binary BY DEFAULT (right after installing apparmor) be set to inherit apparmor permissions from the parent? as in if the parent is not allowed to access the network the ping service would be denied by apparmor?
[22:51] <sarnold> Bae: does your nodejs program run confined or unconfined?
[22:51] <Bae> sarnold, confined. and that will be enforced
[22:52] <sarnold> Bae: if you want to allow ping to run as expected, you could use /bin/ping Px,   rules in the nodejs program's profile
[22:53] <Bae> sarnold, a better example i thought up right now would be something like say, if my nodejs profile is not allowed to edit a file in directory say /home/someone/blockedDir/. i would add deny rules in the nodejs profile. cool. but what if nodejs calls another process to run (another binary) that is set to access that very folder? i want to make sure that that child process binary cannot also access that particular folder ONLY if nodejs calls it
[22:54] <sarnold> Bae: if you want to forbid ping's networking but still let it be run (for whatever reason...) you could use /bin/ping Cx -> ping,  rule, then add a "child profile", something like "profile ping { ... }"  to your nodejs profile..
[22:55] <sarnold> Bae: if you want to forbid ping's networking but still let it be run (for whatever reason...) you could use /bin/ping Cx -> ping,  rule, then add a "child profile", something like "profile ping { ... }"  to your nodejs profile..
[22:55] <Bae> OH i see what you mean sarnold. so that means i could leave the ping binary as is. and then in the node js {} i add a nest that shows the binary for ping {} that disallows it. cool.
[22:56] <Bae> shows the rules for ping {}*
[22:56] <sarnold> Bae: you could also use 'ix' rules instead of 'cx' -- then they'd run with the same privileges. But I like to encourage Cx where practical, since it can often be a drastic reduction in what privileges are allowed where
[22:56] <Bae> i should say
[22:57] <Bae> sarnold, if i were to use ix (inherit right? ) i would have to set ix in the ping binaries profile right ? not in the branched profile of the nodejs one
[22:58] <sarnold> Bae: btw, even though apparmor does all you to write e.g. "allow /home/** r, deny /home/sarnold/** r," it's really best to stick to _whitelisting_ as much as you can. It's often possible to construct attacks that get at data that is denied via a "deny" rule
[22:58] <Bae> yeah thats the plan. the deny thing was an example. my idea is to only whitelist certain directories and functions
[22:58] <sarnold> Bae: the nodejs' program's profile would use "/bin/ping ix," -- and the global /bin/ping profile is left alone completely
[22:58] <sarnold> Bae: okay, good, good :)
[22:59] <Bae> sarnold, the /bin/ping ix in the nodejs programs profile is not saying "inherit rules from ping" ?
[22:59] <Bae> because i want the ping to inherit from node. not node to inherit from ping
[22:59] <sarnold> Bae: correct; it is saying "when executing ping, it inherits this current profile"
[23:00] <Bae> ok let me do a quick clarification example if u dont mind
[23:00] <sarnold> or, rather, "when a program executing in this profile executes ping, ping inherits this current profile"
[23:01] <Bae> AH Yes
[23:01] <Bae> ok
[23:01] <Bae> so in here: http://pastebin.com/ArQFSCeF this is saying. when ping is born from nodejs app. ping inherits from nodejs app. right?
[23:02] <sarnold> Bae: ahh, skip the "-> child1," bit when using ix rules
[23:02] <Bae> thats from the site lol
[23:02] <Bae> sorry
[23:02] <sarnold> Bae: it is? can you link me? :)
[23:03] <Bae> maybe they did it for clarifications but here: so sarnold to ensure maximum security
[23:03] <Bae> ugh
[23:03] <Bae> http://wiki.apparmor.net/index.php/QuickProfileLanguage
[23:05] <Bae> so sarnold to ensure maximum security what i could do then is in the nodejs app i could put all the names of binaries that are profiled and tell them all to inherit rules from the nodejs app. in this way, any sort of exploit into the nodejs children processes would be thwarted. what do you think about it ?
[23:05] <sarnold> Bae: you should only need to add 'ix' rules for programs that your nodejs program actually executes
[23:06] <Bae> sarnold, so what is best way to see what programs nodejs executes? or rather, apparmor detects that the nodejs program executes ?
[23:06] <sarnold> Bae: if it only ever calls awk and sed, for example, you could just add /usr/bin/awk ix, /bin/sed ix, and be done :)
[23:06] <sarnold> Bae: aa-logprof should prompt you for them, but.. that family of tools is cranky. please file bugs as you find them. :)
[23:06] <Bae> oh ok
[23:07] <Bae> yeah i was thinking of something like valgrind that shows all the processes as you run it
[23:07] <Bae> but in apparmor :p
[23:07] <sarnold> Bae: you'll find them in the logs: apparmor="DENIED" operation="exec" profile="/tmp/bash" name="/tmp/ls" pid=21726 comm="bash" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[23:08] <sarnold> or apparmor="ALLOWED" if you're running the profile in learning mode, of course
[23:09] <Bae> so the best way for me to proceed right now to ID these processes first would be to run it in permissive mode and generate logs and unit test the full app
[23:09] <Bae> then grep those logs for all the processes generated. then add those in the nodejs app profile in apparmor with the ix
[23:09] <sarnold> you ought to be able to get apparmor to report all execs using something like (UNTESTED): "/tmp/bash { file, audit /** ix, }"   :)
[23:09] <Bae> to make sure that all the processes nodejs can ever generate, will be inheriting rules from the original one :)
[23:10] <Bae> ah thank you so much sarnold you are very helpful :D
[23:10] <sarnold> Bae: the aa-genprof tool should step you through those steps :)
[23:10] <Bae> yeah i did that lol. it just generates a boilerplate
[23:11] <Bae> i want something i can look through. that i can see those logs and see exactly what file is called and where
[23:11] <sarnold> aha then you sound like you -do- want to do things by hand. :)
[23:11] <stoned> Hello, I'm having trouble finding the xdebug config file in ubuntu server
[23:11] <Bae> i do yes sarnold
[23:11] <Bae> anyway i will be saving this conversation
[23:11] <Bae> i dont mind getting my hands dirty
[23:13] <sarnold> Bae: there's also #apparmor on irc.oftc.net in case there's no one around here who can help
[23:15] <Bae> oh i did not know that! thanks so much :)
[23:15] <sarnold> sure thing :) have fun :)
[23:15] <Bae> yeah sarnold thank you so much for all your help