[02:29] <pmp6nl> Hello, I am hosting multiple sites.  Right now if I go to my ip address it displays one of my sites and I cannot edit other sites via the ip address.  Is there a wrong setting in the default server or does something special need to be done for each virtual hosts?  I want to my able to edit sites via ipaddress/directory.  thanks
[02:34] <rbasak> pmp6nl: if you go to a website via IP address, and your web server serves multiple sites from the same IP address, then there's no way for the web server to know which site to send back. So it sends the default one. If you want to fix that then you either need to browse the sites by name, or you need to use multiple IP addresses.
[02:35] <pmp6nl> rbasak, how do I browse by name?  Isnt there a way to do this with virtual hosts?  I am using apache
[02:35] <echosystm> whats the best way to NAT all incomming packets from one server to another?
[02:37] <rbasak> Use virtual hosts, and set the names up to point to the same IP address. Then use those names in your browser.
[02:37] <echosystm> iptables -t nat -A PREROUTING -p tcp -m multiport -dport 80,443 -j DNAT ... ???
[02:37] <rbasak> It sounds like you could do with reading http://en.wikipedia.org/wiki/Virtual_hosting#Name-based
[02:37] <echosystm> thats not what i want
[02:37] <echosystm> this is a poor mans router
[02:37] <echosystm> it needs to work at the transport level
[02:37] <echosystm> not the application level
[02:38] <rbasak> echosystm: sorry, my message was intended for pmp6nl on a different question, not you.
[02:38] <echosystm> oh sorry
[02:39] <pmp6nl> ok rbasak I will read up on that as I am confused about virtual hosts. thanks
[02:39] <rbasak> echosystm: sounds like you need http://www.netfilter.org/documentation/HOWTO//NAT-HOWTO-6.html#ss6.2 :-)
[02:42] <rbasak> echosystm: there's also ufw, which is a higher level wrapper around iptables. Eg. http://manpages.ubuntu.com/manpages/precise/en/man8/ufw-framework.8.html
[02:42] <echosystm> will packets stop after the first rule that they match? or will they continue through the chain
[02:43] <rbasak> the first packet goes through the DNAT chain. Subsequent packets go through the FORWARD chain only, appearing as if they're already NATted and magically going to the right place. If that makes sense.
[02:43] <rbasak> Sorry, didn't read the question. DNAT is a chain terminating target, ie. no more rules are processed after hitting a DNAT target.
[02:44] <echosystm> ok so lets say i have rule 1. send all traffic from IP X to IP Y
[02:44] <echosystm> then i have rule 2. send all traffic to IP Z
[02:44] <echosystm> if a packet coems from X, will it go to Y and then stop?
[02:45] <rbasak> If rule 1 is using DNAT, rule 2 will never be processed if a packet matches rule 1.
[02:46] <echosystm> cool
[02:46] <echosystm> thanks for that
[02:51] <pmp6nl> rbasak, how does apache determine the default virtual host?
[02:51] <rbasak> Good question. Sorry, I don't remember the answer.
[02:51] <rbasak> It might even be the first one that's defined.
[02:53] <pmp6nl> rbasak, ok, thanks
[03:00] <pmp6nl> Should virtual hosts be listed in apache2.conf?
[03:01] <jmarsden> pmp6nl: rbasak is correct, it uses the first one listed, which I think means the alphabetically first one if you use the Ubuntu/Debian file structure and one file per vhost under /etc/apache2/sites-enabled/ .  This is why it is conventional to name that one 000-default, so it is "obvious" to humans looking at the directory, that it is first in the list and is the default.
[03:01] <jmarsden> pmp6nl: Indirectly.  See above.
[03:02] <rbasak> Thanks jmarsden. This sounds familiar now. It's been a while since I've done virtual hosting with apache!
[03:02] <jmarsden> See /usr/share/doc/apache2/README.Debian.gz for useful info on the file structure involved.
[03:02] <twb> jmarsden: the "default" site is the first one found in "the" config file.  The logical config file is built by including (by default) all the files in sites-enabled.  They're added lexicographically; I assume this is because root's locale has an LC_COLLATE of C.
[03:03] <twb> If you went into httpd.conf and added a vhost before the include, that would become the default
[03:03] <pmp6nl> ok thanks jmarsden and rbasak .... can I rename one of the files to 000-default to make it the default or do I need to do something different.
[03:03] <twb> The fact that the file is called "default" has no bearing on how apache treats it, although obviously the 000 means it usually sorts to the top
[03:04] <jmarsden> twb: Yes, but you are not supposed to manually put sites into httpd.conf in Debian/Ubuntu :)
[03:04] <pmp6nl> ok, I dont even have a I dont have a /etc/apache2/httpd.conf file
[03:04] <twb> jmarsden: that's a nice theory :-(
[03:05] <jmarsden> pmp6nl: You should have an empty one, if you did a conventional install of Apache on Ubuntu server.
[03:05] <pmp6nl> jmarsden, ok, perhaps its just empty.  I will look.  whats the best way to rename a site under /etc/apache2/sites-available?
[03:06] <jmarsden> pmp6nl: mv should work fine
[03:09] <pmp6nl> Thanks jmarsden
[03:09] <jmarsden> pmp6nl: You're welcome
[04:26] <Mischinka> Does installing the desktop cause the server to run slower?
[04:26] <twb> It depends.
[04:26] <Mischinka> its on a vps
[04:27] <twb> We discourage using GUIs on servers.
[04:27] <Mischinka> Im trying to figure out an easier way to setup APED server to start and stop when nginx starts and stops.
[04:27] <twb> APED?
[04:28] <Mischinka> http://www.ape-project.org/wiki/index.php/Setup
[04:29] <Mischinka> how do i kill a script using 443 port?
[04:29] <twb> Good heavens, the developers are excitable fellows.
[04:29] <twb> Mischinka: you use netstat -nlp to find out what's on that port, then stop its service or equivalent
[04:30] <qman__> I wrote a script to do exactly that at my old job, to reset stuck SSH tunnels
[04:30] <qman__> unfortunately I don't have it to give you but it only took me about ten minutes
[04:31] <twb> qman__: you can probably just get the pid direct from lsof or so
[04:31] <qman__> I used netstat and some cuts and seds
[04:32] <qman__> stored to a variable and fed to kill after some sanity checking
[04:32] <Mischinka> Got it! sweet.
[04:32] <Mischinka> Oh how do i have a script run in background?
[04:32] <Mischinka> because its making me have to keep the putty terminal up.
[04:32] <qman__> you want screen
[04:33] <jmarsden> Mischinka: nohup /path/to/script    # could also work
[04:33] <twb> Well, that or nohup or atd or cron or ...
[04:33] <qman__> technically, running in the background requires adding & to the end, but that is still a child of your SSH session
[04:33] <qman__> you need to do something else to make it independent, screen is one easy way
[04:33] <Mischinka> hmm
[04:34] <Mischinka> didnt work..
[04:34] <qman__> setting it up in cron is the right thing to do when you need it run all the time or at regular intervals
[04:35] <qman__> I was not aware of nohup or atd until now
[04:35] <Mischinka> *sigh.. im not sure of how to run it in cron.
[04:36] <twb> qman__: people like you come into #screen all the time and ask how to start their quake server in screen at boot time, from /etc/init.d/ :-/
[04:36] <twb> Or rtorrent, that's another common one, because it has a "GUI" they want to attach to later on
[04:37] <rbasak> Mischinka: you could write an upstart job. Lots of documentation at http://upstart.ubuntu.com/cookbook/
[04:37] <qman__> I wrote a kludge using sudo, su, and screen to get srcds running at boot
[04:37] <qman__> because it won't run non-interactively, and won't log
[04:37] <twb> qman__: "non-interactively" as in it needs stdio, or it needs a non-dumb terminal?
[04:38] <twb> The latter is harder, I grant you
[04:38] <qman__> non-dumb terminal
[04:38] <twb> Best would be to fix the damn daemon to not need it, of course...
[04:38] <qman__> it does not function if it doesn't have a shell
[04:38] <twb> qman__: I'd probably look into faking that with a pty
[04:38] <twb> Also btw you shouldn't ever need BOTH sudo and su
[04:39] <qman__> I tried to use just sudo but I couldn't make it happy with the options
[04:39] <qman__> the main problem is I want access to the screen, but I want the server to run as a dedicated user
[04:39] <qman__> so root runs the first script at boot, sudos to me, to run the other script which sus to the daemon user
[04:40] <qman__> it's a mess
[04:40] <qman__> but it works
[04:41] <rbasak> screen has access control options. The daemon user could start the screen with options to give you permission to reach it.
[04:42] <Mischinka> question i have css that seems to be running from some sort of server cache..
[04:42] <twb> rbasak: screen's access control is... suboptimal.  I wouldn't trust it.  Also it's disabled by default in Debian and Ubuntu
[04:42] <Mischinka> im inspecting the site and it says the css tag is coming from http://website.com/:171
[04:43] <Mischinka> what does that mean?
[04:43] <twb> Mischinka: insufficient data
[04:44] <Mischinka> twb: excuse me?
[04:48] <twb> Mischinka: you provided insufficient data to answer your question.
[04:55] <Mischinka> Oh, I have an nginx php5-fpm server, and for some reason the CSS tag on something on the page is being overridden by a tag located at http://website.com/:171 and the original tag is from custom.css what is this :# http://i.imgur.com/W9CdY.png
[04:55] <Mischinka> Im trying to figure out if its being cached by the server or something..
[04:57] <twb> It sounds like you have nginx rewriting message bodies, which IMO is dumb
[04:58] <twb> The downside is, if you don't do it, the root anchor needs to be the same regardless of the vhost.  So e.g. you cannot have default.example.net/foo.example.net/bar.html and foo.example.net/bar.html be the same
[04:59] <twb> Although you can have default.example.net/foo/bar.html and foo.example.net/foo/bar.html be the same, because the path part (/foo/bar.html) is the same
[04:59] <twb> ...I hope that made sense, it wasn't very well put.
[04:59] <Mischinka> umm not really.
[04:59] <Mischinka> twb there is a screenshot of my site config: http://i.imgur.com/W9CdY.png
[05:05] <twb> It is difficult for me to look at images, please pastebin text
[05:51] <brainysmurf> Trying to migrate posix users to ldap, there isn't any migrate_common.ph file. I created one and attempted the migration with extended schema on but no luck getting any emails. No errors. Kinda stuck...
[05:51] <brainysmurf> nano migrate_common.ph
[05:53] <brainysmurf> woops: http://pastebin.com/b4AvY5Mq
[05:56] <brainysmurf> found some problems already, updated: http://pastebin.com/mqJrkHe0
[05:59] <echosystm> im trying to set up DNAT for port 80 of my firewall server
[05:59] <echosystm> i have done this: http://www.netfilter.org/documentation/HOWTO//NAT-HOWTO-6.html#ss6.2
[06:00] <echosystm> iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth0 -j DNAT --to <IP_ADDRESS>:8080
[06:00] <echosystm> then when i telnet my firewal on port 80 it just times out
[06:00] <echosystm> can anyone think of why this might be happening?
[09:02] <alex88> hello guys, after switching to ubuntu 12.04 so kernel 3.x i can't use multiple ip on single interface http://pastebin.com/0GFZZwTw
[09:03] <alex88> with that /etc/network/interfaces i can ping eth0:0 from local machine but from outside it doesn't respond
[09:15] <lynxman> morning o/
[09:23] <adac> I'm trying to get pam auth work with ldap, but /var/log/auth tells me the following: PAM (other) illegal module type: diese
[09:23] <adac> PAM pam_parse: expecting return value; [...Optionen]
[09:23] <adac> PAM (cron) illegal module type: diese....
[09:23] <adac> any ideas?
[09:33] <lynxman> adac: looks like a configuration file in pam that is incorrect
[09:33] <lynxman> adac: or pam config that is incorrect indeed
[09:33] <lynxman> where is the word "diese" in slapd.conf or in /etc/pam.d ?
[09:39] <adac> lynxman, yes it was a typo! thank you!
[09:39] <lynxman> adac: glad to be of help :)
[09:39] <adac> but the error message is strange
[09:39] <adac> hehe
[09:53] <vrturbo> anyone know how the maas server node dns names work with dnsmasq ?
[09:54] <vrturbo> built a maas server, everything working but the resolution of the dns names, this is breaking my juju deployments
[10:58] <KristianDK> On ubuntu 12.04 using the default LXC configuration, my containers does not get a DHCP ip address, although it seems that the default configuration sets up a <IP_ADDRESS> ip range for DHCP for containers. Does anyone know how to debug this? Syslog in container states "NO DHCPOFFERS received" and I was not able to find any errors on the LXC host
[11:14] <KristianDK> If I assign it a static ip in the DHCP subnet, it seems to work and I can communicate with the parent
[11:15] <KristianDK> also, it does not seem to have any routes available, e.g. i can ping the master, but nothing else
[11:42] <debuuuu> Hoi all.  Just wondering, how do you install a GUI once the server's installed?
[11:43] <_ruben> you usualy just don't
[11:44] <_ruben> if you want a gui, install the desktop version instead
[11:44] <debuuuu> But then it's not a server is it?
[11:44] <debuuuu> I'm making a simple game server
[11:44] <_ruben> define "server"?
[11:44] <zul> good morning
[11:45] <debuuuu> I'll have a game server running on the machine that I can connect to with a client I'm writing
[11:45] <_ruben> the most notable difference between -server and -desktop is the presence/lack of a gui
[11:45] <debuuuu> Client's just a simple JS-based app running in the browser.
[11:45] <debuuuu> So like,
[11:46] <debuuuu> I don't really know a lot about what makes a server a server, as you might've guessed :) This is partly why I wanted to play around
[11:46] <debuuuu> Is it possible to do what I described with an installation of Ubuntu Desktop?
[11:48] <brainysmurf> debuuu: Install the desktop version, don't worry
[11:49] <_ruben> sure
[11:49] <debuuuu> Ah, ok
[11:49] <debuuuu> So .. not sure how to phrase the question really, but how do you go about making that box accessible as a 'server' to clients anywhere else on the web?
[11:50] <_ruben> by connecting it to the internet
[11:50] <debuuuu> Ha
[11:51] <debuuuu> There's nothing more fancy than that eh?
[11:51] <_ruben> not much
[11:51] <debuuuu> Alright, well sweet :)
[11:51] <debuuuu> Ask stupid questions, get simple, stupid-feeling inducing answers :)
[11:52] <debuuuu> Thanks though, I'll install the desktop version and have a play around.
[12:00] <hallyn> zul: your libvirt passed tests on p.  i'm about to build/run on q, but all is looking good
[12:00] <hallyn> (i haven't looked closely at the pkg source, i'm going to trust the qrt on this one :)
[12:21] <hallyn> zul: you said you started MIR on dwarves-dfsg?
[12:24] <zul> hallyn: not yet i had yesterday off
[12:42] <bioman_> Hi
[12:43] <bioman_> Running 11.10 server. I've installed a DRBL. Got some issues : sometimes the PC that I want to backup or restore have a black screen. Any ideas please ?
[12:45] <bioman_> It's 10.10 with 3.3.7 kernel or 3.2.18
[12:52] <bioman_> I have the DRBL screen that displays properly, then -I think- 320x240 and when it want to get a higher resolution : black screen and nothing happens
[12:55] <ikonia> bioman_: the DRBL package you are using is not an ubuntu package
[12:56] <ikonia> bioman_: talk to the people who make the package for help/issues
[12:57] <bioman_> ikonia: hello :) I know this you told me yesterday... Hoped that someone here would have had this issue and a fix ;)
[12:57] <ikonia> no, as the package is not made by the people who make the ubuntu packages
[12:58] <ikonia> bioman_: as you know I told you this yesterday, why do you keep asking for people to fix issues here
[12:58] <ikonia> you know where the package people are - you know where their bug logging/support system is, please try to use it, it's their package with their problems
[12:58] <bioman_> ikonia: just hoping that's all :(
[12:59] <ikonia> bioman_: yes, but you've been told 3 - 4 times
[13:02] <bioman_> ikonia: maybe 5 ;) I'll stop bothering you all, sorry...
[13:05] <zul> hallyn:  you know you are running the meeting today right?
[13:06] <hallyn> yeah.  i hope the slacker last time updated the agenda :)
[13:06] <zul> hallyn: funny that you say that :)
[13:08] <hallyn> zul: thanks.  I knew it was coming up this time, but always hate being caught off guard with that
[13:08] <zul> hallyn: everyone has
[13:33] <raubvogel>  For those of you running vms (say, kvm), how do you sync the clock on a vm that was been saved/paused for a while when it comes back? I tried putting 'tinker panic 0' on the top of the ntp.conf file but so far it has been ignored.
[13:45] <hallyn> zul: all tests pass, push it :)
[13:45] <hallyn> oh, except for hte dwarves issue
[13:45] <hallyn> guess you can't push it
[13:45] <zul> damn it..
[13:46] <zul> lemme do that right now
[13:46] <ogra_> just add some giants ... that will level out the dwarves
[13:49] <zul> hallyn: https://bugs.launchpad.net/ubuntu/+source/dwarves-dfsg/+bug/1002891 fyi
[13:49] <hallyn> zul: i dunno if you have any sort of scripts depending on libvirt's dumpxml output, if you do, note there are some changes (see the qa-regression-test changelog)
[13:49] <zul> linky?
[13:49] <hallyn> pfft.  i dunno
[13:50] <hallyn> https://code.launchpad.net/~ubuntu-bugcontrol/qa-regression-testing/master
[13:51] <hallyn> in particular http://bazaar.launchpad.net/~ubuntu-bugcontrol/qa-regression-testing/master/changes/1692?start_revid=1692
[13:55] <Daviey> hallyn: i think you are up for chair btw.
[13:55] <hallyn> Daviey: thanks.  (read up ^ :)
[13:55] <hallyn> zul: just looking at debdiff for one last check, then i'm done with your libvirt
[13:56] <Daviey> hah
[13:56] <zul> hallyn: cool..once dwarves gets looked at then i think we are good
[13:56] <hallyn> hopefully my ap stays good for the duration of the meeting.  (new one arrives wed)
[14:10] <grendal-prime> oi
[14:10] <grendal-prime> ok so have a vm of 12.04 server
[14:12] <grendal-prime> i removed  /etc/udev/rules.d/70-persistant-net.rules file.  (because i use to have to do that to get the interfaces to enumerate properly after changing the switches that the box was connected to)
[14:12] <grendal-prime> aparently thats differnt.  Now i need to regenerate that file.
[14:12] <grendal-prime> the script that i thought i did that with is not working they way it is expected
[14:22] <_ruben> grendal-prime: file should be recreated at boot time
[14:23] <grendal-prime> ya that was not hapeing..now it is...werid
[14:24] <grendal-prime> actually...umm werid it did not get created...
[14:33] <ikonia> the rules files do not get generated at boot time
[14:33] <ikonia> the rules files are static files
[14:33] <ikonia> the devices they make are what get regenerated
[14:34] <_ruben> ikonia: when did that change? must say i havent *removed* the file in ages, but i did used to do so without problems
[14:34] <ikonia> I've never seen the rules files get regenerated
[14:34] <pedor> hi, could please someone recommend a webhost?
[14:34] <ikonia> they are normally static files,
[14:34] <ikonia> pedor: no
[14:35] <ikonia> _ruben: what do you think re-generates them ?
[14:35] <pedor> ikonia, which channel I can go?
[14:35] <ikonia> pedor: no idea
[14:36] <ikonia> _ruben: curious to if ubuntu has a different way of working with udev and actually has dynamic config files
[14:36] <_ruben> ikonia: some part of udev i'd expect, never really dug into the details, just used to blow away that file when mac addresses changed
[14:36] <ikonia> _ruben: I've never seen the mac addresses in the rules files
[14:37] <ikonia> ahhh I see
[14:37] <_ruben> # This file was automatically generated by the /lib/udev/write_net_rules
[14:37] <ikonia> the network one is generated
[14:37] <ikonia> but others are static
[14:37] <ikonia> yes, just looked properly
[14:37] <ikonia> same with the CD
[14:38] <_ruben> it being autogenerated makes for "new" interfaces to be added properly
[14:38] <_ruben> quite a simple yet nice feature
[14:39] <_ruben> unless your mac addres(ses) keep changing for some reason :)
[14:40] <jdstrand> hallyn: doesn't your KiB changes to test-libvirt.py need to be special cased for quantal? this script is run for SRUs and security updates
[14:40] <ikonia> yes, that makes sense
[14:41] <jdstrand> hallyn: oh, I didn't notice the '?'
[14:42] <grendal-prime> ok well...what should i do at this point then?
[14:42] <grendal-prime> is there a way to trigger the recreate?
[14:42] <grendal-prime> and the mac addresses do change in this environment...allot.
[14:47] <hallyn> jdstrand: right, if i didn't mess up for a change, it should just work.  though it's getting brittle
[14:47] <jdstrand> getting ;)
[14:47] <jdstrand> it started brittle
[14:47] <jdstrand> feel free to thank me for that :)
[14:48] <hallyn> hopefully they can hold off on more needless formatting changes for awhile
[14:48] <ikonia> grendal-prime: look at the script suggested that actually creates the file, try running it
[14:48] <jdstrand> what's the fun in that?
[14:48]  * jdstrand is a little jaded on useless changes
[14:48] <ikonia> grendal-prime: it may depend on a blank file being there in the first place so it can update it rather than create it, etc etc, look at what that trigger script does
[14:48] <hallyn> the fun of having time to work on other new stuff
[14:48] <jdstrand> heh
[14:48] <hallyn> jdstrand: +1 on that
[14:50] <grendal-prime> ya i was looking throught that. I didnt seen anything...ill try just creating the file..reboot and see what happens. if that doesnt work..i guess ill buld another machine copie it over.
[14:51] <grendal-prime> can you look into the file and see if there is anything besides the typical interface info?
[14:51] <grendal-prime> i thin i found something about whats nomcal in there
[14:52] <ikonia> grendal-prime: I wouldn't suggest that
[14:52] <ikonia> grendal-prime: I'd suggest actually reading the trigger script - seeing what it needs, fixing what it needs, then running the script
[14:52] <ikonia> grendal-prime: if there are any problems/output you should see it, where as rebooting you'll end up chasing your tail to chase problems
[14:52] <ikonia> (unless there is a dependency that this script can only be run at boot time - which I don't think it can)
[14:54] <silentpj> hello, i have problem with 12.04 server amd64 not installing grub (grub installation failed) on vmware ESXi 5, does anybody know how to install it properly?
[14:55] <zul> Daviey: ping (re: cloud-archive stuff)
[14:55] <ttx> Daviey: was talking to zul about the Ubuntu openstack QA PPAs that could replace the openstack PPAs
[14:55] <ttx> Looks like you would have:
[14:56] <ttx> - PPA for tip of stable/essex on Precise -> staging area for Essex/Precise cloud archive
[14:56] <patdk-wk> silentpj
[14:57] <patdk-wk> the issue is the grub bootloader in the mbr isn't updated
[14:57] <patdk-wk> just have grub update it
[14:57] <ttx> - PPA for tip of master on Precise -> general QA for Folsom/Precise cloud archive
[14:58] <zul> ttx:  for the openstack-qa yes ppa for tip stable/essex on precise
[14:58] <zul> stable/essex is the SRUable stuff so it goes into proposed
[14:58] <ttx> - PPA for milestone-proposed on Precise -> staging area for Folsom/Precise cloud archive
[14:59] <Daviey> ttx: hey
[14:59] <ttx> PPA for tip of master on Quantal -> staging area for Folsom/Quantal (main archive)
[14:59] <silentpj> patdk-wk: thanks, so it's bug...
[14:59] <Daviey> ttx: Can we continue this later, swapping tasks atm. :/
[14:59] <patdk-wk> yep
[14:59] <ttx> zul: well "stable/essex on Precise" covers two things
[14:59] <ttx> Daviey: sure
[15:00] <ttx> zul: covers Essex/precise cloud archive and Essex/Precise main archive SRU, now ?
[15:00] <ttx> s/now/no
[15:00] <patdk-wk> bug #978464
[15:00] <zul> ttx: no essex/precise was always going to go into main archvie sru
[15:01] <ttx> zul: oh, right.
[15:01] <zul> tip of master for folsom on precise -> cloud-archive
[15:01] <zul> tip of master for folsom on quantal -> main archvie
[15:01] <zul> doh...
[15:02] <zul> ttx: tip of master for folsom on precise -> openstack-qa
[15:02] <zul> ttx: milestone (and possblly release candidates as well) on precise -> cloud-archive
[15:02] <ttx> ack
[15:03] <ttx> zul, Daviey: I'll sum that up in an email that you can read and comment when you have time
[15:03] <grendal-prime> grrrr
[15:03] <zul> ttx: cool
[15:03] <grendal-prime> i cannot just get it to recreate the file.
[15:04] <grendal-prime> and ive tried creating the file empty so it can have somewhere to write data..that does not work. the trigger script if i try and run it askes for interface name..
[15:04] <ikonia> grendal-prime: ok, so give it an interface name
[15:04] <ikonia> you've got to work it through until you find the critera to make it work
[15:05] <ikonia> then - you'll understand why it's not being triggered at boot
[15:05] <zul> ttx: CVEs are handled normally in the security archvie as well :)
[15:06] <grendal-prime> yes but you see...there has to be a process somewhere that would start from scratch...
[15:06] <silentpj> patdk-wk: hmm, I'm doing clean install, not sure how to fix it from minimal env on the server cd
[15:06] <grendal-prime> when i run the write_net_rules script it just says missing $interface
[15:06] <patdk-wk> heh? clean install?
[15:07] <patdk-wk> there is no problems with clean installs
[15:07] <patdk-wk> I have done a few hundred precise installs onto esxi 5
[15:07] <silentpj> patdk-wk i have problem with clean install...
[15:07] <patdk-wk> well, I have no clue what your issue could be then
[15:10] <grendal-prime> that file is normally called by persistent-net-generator.rules
[15:11] <silentpj> patdk-wk: 64bit?
[15:11] <ikonia> grendal-prime: so pass it the interface argument
[15:12] <patdk-wk> both 64 and 32
[15:14] <grendal-prime> tried that as well didnt work.
[15:15] <ikonia> grendal-prime: in what way didn't work
[15:15] <silentpj> patdk-wk: wierd, any customisation? I did default install, next->next style...
[15:16] <patdk-wk> I do normal installs, and vm installs
[15:16] <patdk-wk> and also iscsi root installs
[15:17] <grendal-prime> well i run  the 75-persistent-net-generator.rules script i just get permission denied
[15:18] <ikonia> ok, so look at why
[15:18] <ikonia> do you have permission ?
[15:18] <grendal-prime> no execute on the file
[15:18] <ikonia> ok, so there you go
[15:18] <ikonia> work it through
[15:19] <grendal-prime> ran it with bash
[15:19] <grendal-prime> but um ..didnt put anything in the file
[15:21] <bioman> Hi
[15:22] <ikonia> grendal-prime: set -x , work it through
[15:22] <bioman> Trying to build DRBL package (backportpackage --build --workdir=/root/drbl) but it complains about non existing gpg key. I tried to generate one with gpg --gen-key with no luck...
[15:25] <bioman> Using 12.04
[15:27] <grendal-prime> i can get it to execute but it does not generate anything
[15:27] <grendal-prime> rrrrr
[15:27] <esuave> can anyone tell me how to connect to an FTPS server from command line?
[15:27] <esuave> im trying to connect to a certain IP on a certain port
[15:28] <nathwill> esuave: http://blogs.reliablepenguin.com/2009/08/11/ftps-with-lftp
[15:28] <nathwill> lftp is pretty nice
[15:29] <esuave> cool thanks!
[15:30] <ikonia> grendal-prime: walk it through step by step and see what the trigger for re-generating it
[15:30] <ikonia> grendal-prime: set -x
[15:33] <axisys> how do I setup automatic security update?
[15:35] <rbasak> axisys: https://help.ubuntu.com/community/AutomaticSecurityUpdates
[15:36] <axisys> rbasak: thanks
[15:43] <grendal-prime> where do you adjust dns?
[15:44] <streulma> esuave: do you mean sftp ?
[15:45] <esuave> ftps? is it the same thing?
[15:46] <streulma> sftp is over ssh scp
[15:46] <rbasak> ftps != sftp: http://en.wikipedia.org/wiki/Ftps
[15:46] <streulma> ok
[15:46] <streulma> I havn't heard of ftps
[15:47] <esuave> yeah i know.. me either.. im trying to connect to someones ftps server
[15:54] <bioman> nobody knows how to successfully build the quantal drbl package ?
[16:00] <smoser> hallyn, your presense is requested in #ubuntu-meeting
[16:00] <smoser> or presence even.
[16:04] <patdk-wk> ftps breaks ftp hopelessly :)
[16:08] <znf> Hello. What exactly happened to byobu and screen? I used to have "themes" (color for background and foreground of the byobu "frame"), but now in 12.04 I can't find this (this is an upgraded install)
[16:08] <znf> I've removed everything byobu and screen related from my profile, and it launched tmux, read about how to change it back to screen, but I still can't find the themes
[16:12] <rbasak> zul, SpamapS: FYI, merge is https://code.launchpad.net/~racb/ubuntu/quantal/apache2/988819 to fix bug 988919. I haven't managed to test it yet though.
[16:12] <rbasak> err, bug 988819
[16:12]  * znf hails the SpamapS
[16:12] <zul> rbasak: cool
[16:21] <syria_> Hi, COuld you please help me with configuring openvpn on my VPS 10.04 lts please? so I can use it on my ipad??
[16:28] <grendal-prime> ya this is werid..i just built a brand new system and there is nothing in that /etc/udev/rules.d/70-persistant-net.rules file.
[16:30] <grendal-prime> where the hell is this information stored now
[16:32] <rbasak> grendal-prime: it's still there, AFAIK. But I think it might be skipped on certain VMs. Is yours a VM?
[16:33] <grendal-prime> yes
[16:33] <grendal-prime> but...why then is one machine where it was deleted giving me so much trouble then
[16:34] <grendal-prime> i need to be able to rebuild that information
[16:34] <rbasak> See /lib/udev/rules.d/75-persistent-net-generator.rules for details of how and what is skipped. You can override that file by copying it to /etc/udev/rules.d/
[16:35] <rbasak> Or you can just write your own rule to do what you need. The /lib/udev/write_net_rules script coudl help you with this
[16:35] <grendal-prime> rbasak, i tried that.
[16:36] <grendal-prime> the write_net rules script asks for $INTERFACE  but all the syntax i tried just errors
[16:38] <rbasak> Here's an example if you just want to write a rule yourself. I just took it from my laptop's rules.d: SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="XX:XX:XX:XX:XX:XX", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"
[16:38] <grendal-prime> two machines nither one of them have anything in that file.....one comes up fine the other comes up but complains about limited network functionality
[16:40] <grendal-prime> and acts very strange...takes like 2 min to boot. werid.
[16:41] <grendal-prime> rbasak, you said i can override that file by copying the 75-persistent-net-generator.rules into the /etc/udev/rules.d/ folder?
[16:41] <grendal-prime> thats the first thing i tried and it did not work.
[16:41] <rbasak> You can override any file in /lib/udev/rules.d by copying it into /etc/udev/rules.d I think
[16:42] <rbasak> That's the net rules generator rules file.
[16:43] <rbasak> Where are you getting a message about limited network functionality from?
[16:45] <grendal-prime> on bootup
[16:45] <grendal-prime> and it takes 2 min to boot..
[16:47] <rbasak> Do you have network-manager installed?
[16:47] <grendal-prime> base install..server 1204
[16:47] <grendal-prime> is that thing installed by default now?
[16:49] <grendal-prime> also there is all this stuff about ignoring interfaces from certain vendors?
[16:49] <grendal-prime> like...vmware and kvm.
[16:49] <grendal-prime> how the hell is that suppsed to work
[16:49] <koolhead17> hi all
[16:50] <grendal-prime> and no network manager is not installed
[16:50] <rbasak> With virtual machines, you should just get eth* in the same order every time, so no need to rename interfaces. I assume that's the principle on which udev net generator rules rules skip them anyway
[16:51] <rbasak> If you need them renamed/reordered because of your existing configuration, I'd just add the rules manually and then leave them be.
[16:52] <grendal-prime> yaaaa thats gonna suck
[16:52] <rbasak> Use my example above and stick in into /etc/udev/rules.d/99-custom-interface-names or something
[16:52] <grendal-prime> there is nothing that will just look at whats there and build that file for me.
[16:53] <rbasak> I'm sure upstream will happily accept a patch that adds a script to help people write their own rules :-)
[16:54] <grendal-prime> ya i think ill just grab the one from 10.04 install and throw it in there.
[16:54] <grendal-prime> ya so on boot that box comes up with "waiting for network configuration"
[16:54] <grendal-prime> then after a min it says "waitng for 60 more seconds"
[16:55] <bioman> grendal-prime: beacause you're surely on DHCP and getting no address
[16:56] <grendal-prime> no thats not true
[16:56] <grendal-prime> i have to assign the address
[16:56] <grendal-prime> there is no dhcp on that network. The problem is we build it on one network, then we need to move it to a different network when we deploy
[16:56] <grendal-prime> its a router
[17:00] <bioman> Still with my secret key non available when I "backport --build --workdir=/root/drbl drbl". I have searched for a gpg key with "gpg --search-keys drbl" and found one. What should I do please ?
[17:01] <bioman> ls
[17:08] <grendal-prime> ya setting up that file myself does not work as well.
[17:08] <grendal-prime> still does the same thing on boot.
[17:08] <grendal-prime> this is very werid
[17:10] <silentpj> patdk-wk: i've tried again, still the same problem, accessed the logs, found "chroot: can't execute 'grub-probe': No such file or directory"
[17:10] <patdk-wk> like I said, I have no clue what your issue is on install, and no idea what grub-probe does
[17:10] <patdk-wk> normally use, grub-install /dev/sda
[17:10] <adam_g> can someone please nominate bug 998137 for oneiric?
[17:27] <bioman> I finally managed to create a drbl package. How do I install it please ?
[17:29] <SpamapS> bioman: dpkg -i file.deb
[17:31] <bioman> SpamapS: hey my friend :) Installed but missing dependencies :(
[17:32] <SpamapS> bioman: sudo apt-get -f install
[17:37] <bioman> SpamapS: thanks
[17:44] <bioman> SpamapS: disaster : drbl package installed in /usr but calling other files in /opt/drbl/...
[17:46] <bioman> SpamapS: and lots of files missing :(
[17:50] <bioman> cd
[18:00] <pingswept> What's the difference between the 12.04 AMI's that are from the original release on 2012-04-24 and the more recent daily builds? Security fixes?
[18:11] <SpamapS> pingswept: security+updates
[18:11] <SpamapS> pingswept: basically everything you'd have gotten from 'apt-get update && apt-get upgrade' will be included
[18:12] <pingswept> SpamapS: Thanks. Just what I wanted to know.
[18:58] <axisys> looks like hitting a bug
[18:58] <axisys> # ifdown eth3
[18:58] <axisys> ifdown: interface eth3 not configured
[18:59] <axisys> # ifup eth3
[18:59] <axisys> RTNETLINK answers: File exists
[18:59] <axisys> Failed to bring up eth3.
[18:59] <axisys> [   35.512732] ADDRCONF(NETDEV_CHANGE): eth3: link becomes ready
[18:59] <axisys> what gives?
[19:01] <axisys> all routing works too..
[19:01] <axisys> so why these odd messages?
[19:01] <smoser> ifdown eth3; ifconfig eth3 down;
[19:02] <smoser> it wasn't down, but 'ifupdown' thought it was
[19:02] <smoser> or, you have actually 2 interfaces trying to write the same route
[19:02] <smoser> (rtnetlink file exist)
[19:03] <axisys> eth2 is public network.. eth3 is private network
[19:03] <stgraber> the -v flag of ifup will also show you exactly what returned the netlink error
[19:03] <axisys> not trying the same route
[19:04] <axisys> stgraber: http://paste.ubuntu.com/1001487/
[19:06] <axisys> let me add the down option for eth3..
[19:07] <axisys> since it is trying to add the route that is already there from initial ifup eth3 I think.. like smoser suspected
[19:08] <Guest17303> Guys I am following the ubuntu-server guide for DNS, I am currently here: https://help.ubuntu.com/8.04/serverguide/dns-configuration.html
[19:08] <stgraber> axisys: ifup is basically telling you that something already set the IP address of the interface (and makes it fail to set it again). Manually removing the IP (ifconfig eth3 <IP_ADDRESS>), then running ifup again should work
[19:08] <Guest17303> im a little confused at the part where it says : "Also, create an A record for ns.example.com. The name server in this example: "
[19:09] <axisys> stgraber: it sure did.. thanks
[19:09] <Guest17303> I assume it wants me to create another copy of db.local and make changes to it, but it doesnt give a name of the file if thats the case
[19:10] <Guest17303> Anyone able to offer some insight into this?
[19:49] <hallyn> jdstrand: so for the pc-0.12 problem, here is what i'm printing to /var/log/libvirt/libvirtd.log.  http://paste.ubuntu.com/1001608/
[19:49] <hallyn> It seems kind of underwhelming.  non-attention-etting
[19:49] <hallyn> getting
[19:49] <hallyn> OTOH at least it's a start, and something we can look for in bug reports...
[19:50] <hallyn> i wonder if there is a good way to pass a msg onto virsh to print out
[19:52] <fraterm> !pastebin
[19:55] <fraterm> If someone could help me with a good way to fix my system so that this: http://imagebin.org/213476 stops happening I'd appreciate it.
[19:55] <guntbert> !here | fraterm
[19:56] <fraterm> package-data-downloader crashes because something in my system may be corrupt, as you see the imagebin graphic:
[19:56] <fraterm> Title package-data-downloader crashed with KeyError in convert():'paquetes'
[19:56] <fraterm> paquetes is spanish for packages.
[19:57] <fraterm> guntbert, overview after pasting I guess.
[19:57] <guntbert> fraterm: :)
[19:58] <fraterm> system was a well running 11.10 i have 2 non ubuntu packages jenkins and vmware workstation.
[19:58] <guntbert> fraterm: hmmm - we are talking about "server" here?
[19:59] <fraterm> it is server.
[19:59] <fraterm> in that it is the server version of the OS.
[20:00] <guntbert> fraterm: try without the GUI   -     sudo apt-get update; sudo apt-get upgrade
[20:02] <fraterm> I'll have to pastebin this one.
[20:03] <guntbert> please do
[20:05] <fraterm> http://paste.ubuntu.com/1001659/
[20:09] <jdstrand> hallyn: message seems fine. getting it to virsh may be problematic. I always found libvirt's message handling fairly confusing because of how some messages override others, etc
[20:09] <guntbert> fraterm: that makes it much clearer - the problem seems to  lie with flashplugin-installer - I am not able to help with that and will probably not find anyone in this channel - ask in #ubuntu please
[20:10] <fraterm> Can do, guntbert thanks.
[20:14] <fraterm> guntbert, it's a madhouse in there, just sayin.
[20:15] <guntbert> fraterm: did you disable the display of joins and parts?
[20:18] <hallyn> jdstrand: or maybe I should be recommending 'pc', which I assume is always aliased tothe lastest machine type
[20:18] <hallyn> I'm still not comfortable with providing a script to automatically do it.  maybe i'm being a wuss...
[20:18] <jdstrand> that may be best, yes. I forgot about that. I'd check on your assumption, but it sounds right
[20:18] <jdstrand> hallyn: well, you could provide a script to help people do it
[20:19] <jdstrand> I'm guessing many people are not familiar with the xml and just use virt-manager
[20:19] <hallyn> Hmm
[20:19] <hallyn> How do we help them discover that tool?
[20:20] <jdstrand> it could be in the libvirtd message
[20:20] <jdstrand> but that isn't super discoverable
[20:20] <hallyn> (was thinking that as i hit return :)
[20:20] <hallyn> no, but probably the best match to those who need it
[20:23] <antihero> How do I view the output of programs started with upstart
[20:24] <guntbert> antihero: they are not meant to have output, they are just writing logs
[20:25] <hallyn> jdstrand: no, actually i think using type=pc might break migration for some people (as i'm doing some research)
[20:25] <antihero> guntbert: but with supervisord I can do supervisorctl tail -f JOBNAME
[20:25] <kantlivelong> anyone know of a CLI lightscribe app? I just need basic text printing...
[20:25] <antihero> ok
[20:26] <antihero> how can I re-scan all my conf/job files
[20:26] <antihero> once I change them
[20:27] <guntbert> antihero: no idea about supervisor...  - I may know less about upstart than you do :)
[20:28] <axisys> i manually upgrade apts using ``sudo aptitude full-upgrade'' .. should I rather run ``sudo aptitude safe-upgrade'' ?
[20:30] <guntbert> axisys: safe is better :-) but be careful with aptitude anyway
[20:30] <guntbert> !aptitude
[20:35] <axisys> gnuyoga: so use apt-get instead ?
[20:36] <axisys> gnuyoga: nm
[20:36] <axisys> guntbert: so use apt-get instead ?
[20:36] <guntbert> axisys: it looks that way - I do it
[20:37] <axisys> guntbert: what is aptitude safe-upgrade equivalent ?
[20:37] <axisys> with apt-get
[20:37] <axisys> sudo apt-get upgrade <-- is it safe or full ?
[20:38] <guntbert> axisys: there is no exact equivalent, I use upgrade on a regular base and if something gets stuck, dist-upgrade
[20:55] <KristianDK> Where would you get help for dnsmasq-dhcp?
[21:00] <peydude> hello
[21:01] <peydude> anyone using 12.04 LTS Maas ?
[21:01] <peydude> my 1st node says it can't find the specified version in the mirror but I can manually get to it
[21:02] <mwcampbell> I'm running amavisd-new with SpamAssassin as described in the Ubuntu 12.04 server guide. If I want to manually train SA's Bayesian filter, should I run sa-learn as the amavis user?
[21:07] <mgw> has anybody used openssh-lpk on precise?
[21:20] <Fleep> I'm running Ubuntu on an EC2 instance as a Postgres database server and in the past couple of days it's gone unavailable periodically forcing us to stop/start the instance and get new hardware. It's using an EBS volume as it's main drive so we still have all the logging. Where can I start looking for issues? I've checked in /var/log/dmesg and /var/log/syslog and haven't found anything notable when the outages began. Anywhere else I
[21:20] <Fleep> should be looking?
[21:28] <RoyK> Fleep: have you checked if it's running out of memory? shouldn't happen, but can block the system quite badly
[21:28] <Fleep> RoyK: We have seen OOM Killer stuff pop up from time to time. We don't have historical monitoring set up (getting Nagios set up now for that purpose)
[21:29] <Fleep> If there's no logged info, that seems like a pretty common culprit, yeah?
[21:29] <RoyK> dmsg
[21:29] <RoyK> desg
[21:29] <RoyK> argh!
[21:29] <RoyK> dmesg
[21:29] <RoyK> that's the kernel's log
[21:29] <RoyK> check /var/log/syslog
[21:30] <Fleep> See original message
[21:30] <Fleep> I checked both
[21:30] <RoyK> the oom killer steps in when everything else has been tried
[21:30] <Fleep> Hard to read dmesg, but I can't find anything in particular relating to running out of memory. It's not timestamped though, so it's hard to tell.
[21:31] <RoyK> syslog really should log that
[21:32] <Fleep> Yeah, nothing I an see about that really
[21:32] <Fleep> Except, hmm
[21:32] <RoyK> unless the oom killer killed syslogd/rsyslogd first
[21:32] <Fleep> Postgres is the most likely culprit, and dmesg occasionally logs: postgres (752): /proc/752/oom_adj is deprecated, please use /proc/752/oom_score_adj instead
[21:33] <RoyK> how much memory does this vm have?
[21:33] <Fleep> 3.75GB
[21:34] <Fleep> er
[21:34] <Fleep> Excuse me, 1.7GB
[21:34] <Fleep> EC2 c1.medium
[21:35] <RoyK> until you setup nagios or perhaps icinga (a nagios fork, a *wee* bit better imho), try to make a cron job that just does "ps axfv" to a file or an email address periodically
[21:37] <Fleep> Not a bad idea
[22:22] <Mischinka> How do I turn off/on output buffering? (my joomla installer is saying it needs to be off)
[22:28] <LordOfTime> Mischinka:  didnt i just say check the PHP documentation?
[22:28] <LordOfTime> in #nginx :/
[22:29] <JanC> sounds like a bug in the joomla installer anyway?
[22:30] <LordOfTime> well php might have output buffering in it
[22:30] <LordOfTime> on in it*
[22:30] <Mischinka> hmm.. maybe my configs are way off.
[22:52] <Mischinka> How do I completely remove nginx and reinstall it with all new config files?
[22:54] <LordOfTime> Mischinka:  apt-get purge nginx; apt-get install nginx ?
[22:55] <LordOfTime> you'll lose *ALL* confs though
[22:55] <LordOfTime> !crosspost | Mischinka
[22:56] <LordOfTime> and replace "Ubuntu channels" with "support channels" since you're cross posting here and in #ngignxd
[22:56] <LordOfTime> #nginx*
[22:58] <Mischinka> Actually those were different questions.
[23:36] <billybigrigger> hey all, just wondering if someone can help me with openvpn
[23:37] <billybigrigger> i can get my server up and running...but having problems connecting from a win7 client
[23:37] <billybigrigger> and the server logs don't seem to be helpful at all
[23:49] <Mischinka> How do i add an ftp user to: /var/www/website.com ?
[23:51] <helpme472> hello all
[23:51] <helpme472> how I can set sftp on my proftpd without shell access
[23:53] <helpme472> any one here
[23:55] <helpme472> how I can set sftp on my proftpd without shell access


[02:19] <asac> cyphermox_: how can i mount nexus 4 storage properly?
[02:19] <asac> cyphermox_: like not the face nautilus stuff so i can use cd etc.
[02:20] <asac> cyphermox_: guess first i have to prevent nautilus to not deal with this?
[02:20] <asac> guess on -touch better
[06:13] <dholbach> good morning
[06:14] <Tribaal> hi dholbach
[06:14] <dholbach> hi Tribaal
[07:08] <doko_> jtaylor, matplotlib tests start failing: https://jenkins.qa.ubuntu.com/view/Utopic/view/AutoPkgTest/job/utopic-adt-matplotlib/lastBuild
[08:02] <Tribaal> hi all - I need my package to create a /var/log/mypackage directory - what's the recommended way to do it? postinst?
[08:04] <Tribaal> I feel there should certainly be a "better" way to do it since it seems like such a common thing to do...
[08:06] <Tribaal> or should I use a debian/mypackage.dirs file?
[08:06]  * Tribaal is confused
[08:06] <seb128> Tribaal, that works yes
[08:06] <Tribaal> seb128: what's the recommended way to do it then?
[08:07] <seb128> Tribaal, not sure there is only "one recommended" way
[08:07] <seb128> you could make the make install from your software create it, create it from the rules, from a .dirs, etc
[08:07] <Tribaal> seb128: so either is fine? Nice. I'll go for the mypackage.dirs option then, seems easy enough
[08:07] <Tribaal> ok
[08:07] <Tribaal> less work = win
[09:43] <jtaylor> doko_: seems wxversion is 3.0 but it the rest 2.8
[09:49] <jtaylor> which I do not understand, there is no wxversion 3.0
[09:49] <jtaylor> has it been removed from proposed?
[10:14] <doko_> jtaylor, no, there is a new version in proposed
[10:15] <jtaylor> not of 3.0
[11:10] <jtaylor> oh its from another source pacakge
[11:11] <jtaylor> ScottK: what are your plans with the wxpy 3 transition now that you changed wxversion to 3.0?=
[11:11] <jtaylor> rebuild everything against 3.0?
[11:20] <Mirv> anyone else noticing PPA uploads going to /dev/null and no e-mail about acceptance/rejection?
[11:24] <Mirv> from some other uploads it's just me, hmm hmm
[11:24] <Mirv> unless that I'm uploading for trusty series instead of utopic matters
[11:31] <sveinse> Hi. There is no more firmware-libertas in trusty and I cannot find the firmware binary files in any other package either. Anyone can recollect why this has happened?
[11:34]  * Mirv found the reason, finally. using a wrong GPG key apparently results in silence.
[11:35] <Mirv> sveinse: maybe they were collected to the linux-firmware package? dpkg -L linux-firmware | grep libertas lists a lot for me
[11:37] <sveinse> Mirv, I am looking for sd8686.bin, but unless this has been renamed to something else, it is not found in the linux-firmware package IFAICS
[11:38] <Mirv> sveinse: I see sd8686_v9.bin and v8 at least (although I'm on 14.10)
[11:40] <directhex> i see sd8688.bin
[11:40] <directhex> sd8686_v8.bin and sd8686_v9.bin too
[11:51] <sveinse> Mirv, directhex: ah, there it is. Thanks
[11:52] <rbasak> xnox: bug 1355992 claims the last samba merge inadvertently dropped an upstream cherry-pick. Please could you take a look?
[12:13] <ScottK> jtaylor: I don't have a plan, I just fixed an FTBFS.
[12:14] <ScottK> Mirv: I can confirm using the wrong GPG key gets silence.  I've done it before.
[12:17] <infinity> jodh: You around?
[12:18] <infinity> jodh: LP: #901038 is a much nastier bug than the severity implies.
[12:18] <infinity> jodh: Pretty much anything that does a 'telinit u' on upgrade just explodes very unintuitively, and it takes a Very Long Time to get back to a sane enough state that retrying the upgrade fixes it.
[12:19] <infinity> jodh: Like, well over a minute on the machines I'm doing this on right now.
[12:20] <infinity> jodh: So, I think having 'telinit u' block until completion is correct, but it would also be good to sort out WHY this takes so long.  I'd expect it to be seconds (or less than a second), not minutes.
[12:43] <infinity> Riddell: Ahh, good ol' ppc54el. :P
[12:44] <Riddell> by the ubuntu7 upload my typing is showing my frustration!
[12:44] <infinity> :)
[12:46] <asac> however, i tested multiple times yesterday and dont know why, but i never 99had the big time lag in the indicator/infographics screen
[12:47] <asac> but sure its still there
[12:47] <asac> oops
[12:47] <asac> :)
[12:48] <doko> asac, Mirv, whoever: unity-scope-click autopkg tests fail. is this being worked on? blocks gcc-4.9
[12:48] <doko> tvoss, ^^^
[12:52] <ogra_> doko, talk to the lander (marked on the landing spreadsheet)
[12:53] <infinity> ogra_: "The lander" is a pretty opaque thing to people working on the distro.
[12:53] <asac> truish
[12:53] <ogra_> infinity, well, it is the name that is in the column named "lander"
[12:53] <ogra_> :P
[12:53] <asac> hehe
[12:53] <asac> ogra_: where is the landing log again?
[12:54] <ogra_> you mean the spreadsheet URL ?
[12:54] <infinity> ogra_: Yeah, I'll reiterate the above.  That column doesn't exist to someone working on the distro. :P
[12:54] <ogra_> https://docs.google.com/a/canonical.com/spreadsheet/ccc?key=0AuDk72Lpx8U5dFVHQ3FuMDJGLUZCamJfSjYzbWh3Wnc&pli=1#gid=0
[12:54] <ogra_> now it does :P
[12:54] <infinity> ogra_: And encouraging people to look things up on a spreadsheet at a magic URL won't help it go away or get fixed properly.
[12:54]  * infinity shrugs.
[12:55] <infinity> Anyhow, this one has nothing to do with "the lander", it looks like a dep of unity-scope-click stopped linking pthread, and it needs to explicitly link it itself.
[12:55] <infinity> So, anyone upstream would do.
[12:55] <ogra_> infinity, so who else would you expect to look up the name of the person you want to talk to ?
[12:56] <infinity> ogra_: I'd expect the uploader recorded in LP to not be a bot, but I've beaten this horse a few thousand times.
[12:56] <ogra_> ther is a person that is responsible for getting this package into the archive ... the name of that person is noted down in the spreadsheet
[12:56] <asac> changelog suggests Michal Hruby
[12:56] <asac> Alejandro J. Cura (alecu)
[12:57] <dobey> hrmm?
[12:58] <infinity> dobey: Is your perking up you volunteering to take ownership of unity-scope-click sucking at linking? :)
[12:58] <dobey> infinity: it's a "what is the problem exactly?" :)
[12:58] <infinity> https://jenkins.qa.ubuntu.com/view/Utopic/view/AutoPkgTest/job/utopic-adt-unity-scope-click/lastBuild/ARCH=amd64,label=adt/artifact/results/log
[12:58] <asac> ogra_: where? i dont see the list of component owners in there anymore
[12:58] <infinity> dobey: Missing a -pthread or -lpthread
[12:59] <infinity> dobey: Which it was likely always missing, but a transitive dep probably pulled it in and recently stopped doing so.
[12:59] <ogra_> asac, the first column ?
[12:59] <dobey> weird
[13:00] <asac> ogra_: well, that requires you to be lucky and find a landing of this component
[13:00] <ogra_> asac, so you want package names ?
[13:00] <asac> ogra_: searching unity-click yields nothing on pending nor archive for me :)
[13:00] <ogra_> ask sil2100 :)
[13:01] <infinity> ogra_: No, more info on the spreadsheet isn't helpful, we need to fix this so we can actually track from LP/changes.
[13:01] <asac> infinity: doko: check with your teammate... we also have a landing commitlog that has the info: http://people.canonical.com/~lzemczak/landing-team/
[13:01] <infinity> Having a spreadsheet that grows infinitely so I can do an upload blame for a package from 8 months ago isn't sane.
[13:02] <ogra_> asac, thats post landing
[13:02] <asac> think having a concatenated log that has all landings would be nice for these things until better solution arises
[13:02] <infinity> ogra_: This is all post-landing.
[13:02] <asac> ah in proposed its still in pending?
[13:02] <ogra_> the package in question hangs before entering the archive
[13:02] <infinity> ogra_: The package is in the archive.
[13:02] <ogra_> wint show up in that changelog
[13:02] <dobey> infinity: hmm, what triggered this autopkgtest?
[13:02] <infinity> dobey: gcc-4.9 upload.
[13:02] <lullis> Hello, all. I have a few questions regarding (I think) lightdm. I am looking for a way to allow users to authenticate remotely, but first of all they need to get a connection to a OpenVPN Server.
[13:02] <ogra_> infinity, yu mean it is in the release pocketalready ?
[13:03] <doko> but the test doesn't compile anything afaics
[13:03] <infinity> ogra_: Yes.
[13:03] <ogra_> oh, i thought it is stuck in autopkgtests
[13:03] <infinity> doko: It... Compiles lots of things?
[13:03] <dobey> infinity: weird
[13:03] <lullis> I was looking at the docs for lightdm, but it does not provide anything related to network connections, so my guess is that any of current greeters won't be able to have a "network applet". Is that correct?
[13:03] <infinity> ogra_: No, it's an autopkgtest regression, probably due to dep churn.
[13:03] <dobey> infinity: the same package passed under the glibc upload.
[13:04] <infinity> dobey: The glibc upload that's older than the package?
[13:04] <dobey> according to http://people.canonical.com/~ubuntu-archive/proposed-migration/update_excuses.html anyway
[13:04] <ogra_> infinity, ok
[13:04] <dobey> 2.19-4ubuntu2
[13:05] <infinity> dobey: Yeah, I'm not sure what you're driving at.
[13:05] <infinity> dobey: That glibc upload was in July.
[13:05] <infinity> dobey: This new autopkgtest triggered today.
[13:06] <doko> yep, but once it fails, and once it suceeds. it references the very same autpkg run
[13:06] <dobey> infinity: i mean, the only thing i see that changed is gcc-4.9. i'd like to understand why it had the -pthread before and now it doesn't
[13:06] <infinity> doko: The reference is just bad UI.
[13:06] <infinity> doko: It succeeded when it ran in July, the link just links to the latest.
[13:06] <infinity> (so it becomes a stale lie)
[13:06] <doko> dobey, ahh, that's a fix. where do you see this?
[13:07] <infinity> It never had -pthread...
[13:07] <infinity> It may have been pulling it in silently via a dep.
[13:07] <doko> dobey, where do you see the problem?
[13:08] <infinity> doko: In the test log?
[13:08] <infinity> doko: https://jenkins.qa.ubuntu.com/view/Utopic/view/AutoPkgTest/job/utopic-adt-unity-scope-click/lastBuild/ARCH=amd64,label=adt/artifact/results/log
[13:08] <dobey> doko: in the test log
[13:08] <dobey> infinity: and why wouldn't it still be doing that though, if the dep hasn't changed as well?
[13:08] <infinity> doko: It's clearly missing a -pthread, but the latest build in the archive also doesn't have one there, so...
[13:09] <infinity> doko: So, your assertion is that in the last 4 days, none of the 293 build deps changed?
[13:10] <dobey> infinity: well, if the build-deps of unity-scope-click had changed, it would have caused an autopkgtest run, and it would have failed then, no?
[13:10] <doko> infinity, dobey: so the change is that when using thread from libstdc++ it now always emits a reference to pthread_create, which it didn't before. meaning that problems are now catched at link time, and not at run time
[13:11] <dobey> doko: ok, so libstdc++ change is the cause? that's what i wanted to know
[13:11] <infinity> doko: Ahh, so this is an intentional change in g++/libstdc++ ... Kay.
[13:12] <doko> dobey, not ok if you use this information to blame me ;-P  do you see where things are missing the -pthread?
[13:12] <infinity> doko: That seems like something we might want to comb a rebuild test for once this is in.
[13:12] <dobey> doko: i'm not blaming you. i'm just trying to understand why it worked before, and now it doesn't
[13:14] <doko> infinity, https://gcc.gnu.org/ml/gcc-patches/2014-08/msg01366.html
[13:14] <doko> dumb bot
[13:14] <infinity> doko: And maybe a short note to -devel telling people that they might start seeing "undefined reference to symbol 'pthread_create@@GLIBC_2.2.5'" in their C++ projects, and what that means.
[13:15] <lullis> No one? Maybe someone could point me where to go to ask lightdm-specific questions?
[13:15] <dholbach> lullis, you could try #ubuntu-desktop
[13:15] <infinity> doko: The upstream change looks entirely sane and reasonable to me, just a bit unintuitive (as the last 5 minutes demonstrate), so a heads-up to -devel and a grep of the next rebuild test would both be good, IMO.
[13:16] <infinity> dobey: Are you going to own hunting down which component actually needs the -pthread (unity-scope-click, or one of its deps, or both), and getting it fixed?
[13:16] <infinity> dobey: Or delegate same to someone else. ;)
[13:17] <lullis> dholbach, I imagine there it would be about dealing with configuration of existing greeters. What I am looking is to possibly understand how I would go around writing my own (adding an openvpn connection setup applet)
[13:17] <lullis> I will try, though.
[13:17] <dobey> infinity: i don't have much choice really. damn national holidays in europe and south america :)
[13:17] <dholbach> lullis, the folks who wrote lightdm should be hanging out there
[13:18] <doko> infinity, wanted to wait with the test rebuild until you had a chance to address https://bugs.launchpad.net/ubuntu/+source/gcc-4.9/+bug/1352836  afaiu this is pending upstream, I have the gcc backport done
[13:22] <doko> jtaylor, ScottK: did you come to any conclusion about the missing wx.py?
[13:22] <jtaylor> doko: I filed an RC bug in debian
[13:22] <jtaylor> lets see what debian does
[13:23] <jtaylor> debian bug 758209
[13:24] <jtaylor> can we force numpy into utopic? the matplotlib failure has nothing to do with it
[13:25] <dobey> doko, infinity: https://code.launchpad.net/~dobey/unity-scope-click/explicit-pthread/+merge/230973 looks correct?
[13:26] <infinity> dobey: Except for the unnecessary whitespace change, sure.
[13:26] <infinity> dobey: Assuming it works.
[13:26] <doko> dobey, well, usually you build with -pthread in both CFLAGS and LDFLAGS
[13:27] <infinity> -lpthread should work fine.
[13:27] <doko> sure
[13:27] <infinity> And it's used other places in the same codebase.
[13:27] <infinity> So, meh.
[13:29] <infinity> dobey: Might be prettier with some CMakey macro.
[13:30] <doko> jtaylor, we can blame dholbach for sponsoring these packages ;-P
[13:31] <infinity> dobey: The tests use "${CMAKE_THREAD_LIBS_INIT}", not sure how that expands, or what exactly it does.
[13:31] <dobey> oh
[13:31] <infinity> dobey: But the tests do seem to be built with -lpthread, while the failing bit isn't.
[13:31] <infinity> dobey: So, that might be the "right" CMakey way to do it.  I dunno.
[13:33] <dobey> changed it to that
[13:34] <jtaylor> I guess we could change matplotlib to wx 3.0
[13:35] <jtaylor> though I would prefer todo that for all packages at once to avoid tcl/tk like issues
[13:36] <infinity> dobey: I'd still nitpick the whitespace change, but otherwise looks alright.  Going to test build to make sure.
[13:37] <doko> jtaylor, it even fails when pyhton-wxgtk3.0 is installed
[13:38] <jtaylor> oh I didn't try that
[13:39] <dobey> infinity: well, i was tempted to fix all the other weird whitespace in that file too, but only did this since i was changing the target_link_libraries call :)
[13:40] <jtaylor> doko: hm in unstable the import works
[13:41] <infinity> dobey: Sure, I'm just from the anal-retentive world where whitespace fixes and bugfixes shouldn't be the same commit.
[13:41] <jtaylor> maybe one has to do a --reinstall python-wxversion you had to do these things when having 2.6 and 2.8 installed
[13:41] <infinity> (So, ie: it's obvious that the 1-liner that fixed the bug is just one line)
[13:42] <dobey> infinity: so am i, but more lenient for very small changes.
[13:42] <pete-woods> jdstrand: hi. are you able to get the easyprof release you made yesterday into RTM?
[13:46] <jodh> infinity: As the bug shhows, we can't actually have telinit block - would have to poll indefinitely attempting to reconnect (ugh).
[13:47] <jodh> infinity: I don't understand why you are seeing stateful re-exec take so long - even on a system with hundreds of running jobs it should be almost instantaneous.
[13:47] <infinity> jodh: arm64, though I can't see why that should make a difference.
[13:47] <infinity> jodh: Nothing running except a few idle daemons.
[13:47] <jodh> infinity: if you can recreate (I can't - tried a few times), can you add some further details to the bug?
[13:48] <infinity> jodh: I can reproduce on a whim, yeah.  What details are you looking for?
[13:48] <infinity> jodh: and what do you mean we can't have telinit block?  That's the only sensible thing for it to do.
[13:49] <jodh> infinity: can you try running http://people.canonical.com/~jhunt/upstart/scripts/get_state.sh and seeing how long that takes to run?
[13:50] <jodh> infinity: telinit connects to upstart via dbus and asks it to re-exec. On re-exec, upstart severs all dbus clients connections (of which telinit is one :-)
[13:50] <jodh> infinity: it's all on the bug dude
[13:51] <jodh> infinity: I wonder if for some reason the performance of libjson on arm64 is poor?
[13:51] <infinity> jodh: The bug implies what I'm asking for, though.
[13:51] <infinity> "a better solution to modifying initctl would probably be to modify telinit such that it runs fully synchronous when a restart is requested"
[13:51] <doko> jtaylor, I don't understand that alternatives business, because: $ cat /usr/lib/python2.7/dist-packages/wx.pth
[13:51] <doko> wx-3.0-gtk2
[13:52] <doko> this is hard coded in python-wxversion
[13:52] <jtaylor> I never understood it either, I was very happy when 2.6 disappeared and the problem was gone
[13:52] <jtaylor> now its back :(
[13:52] <jodh> infinity: yes, well the telinit command would certainly block whilst we poll, waiting for the re-exec to finish.
[13:53] <infinity> jodh: Right, which is what we want.
[13:53] <jodh> infinity: Yes, it's not ideal, but until dbus allows a connection to be serialised I think it's the best we can do (tm)
[13:54] <jodh> infinity: I'm tempted to throw in a magic variable that if set disables the blocking op as a 'get out of jail card'
[13:54] <infinity> Oh, FFS, now 'telinit u' works instantly.
[13:54] <infinity> I bet it's because I rebooted all these machines after the upgrades. :(
[13:54] <jodh> infinity: I've tried 4 upgrades and all worked flawlessly. sorry :)
[13:54] <jodh> infinity: upstart just hates you
[13:55] <infinity> Ah-ha, I left one of them not rebooted.
[13:55] <infinity> It still has the slow re-exec.
[13:55] <infinity> We win.
[13:56] <infinity> jodh: So, this could point to a leak or something, if a fresh boot is happy, but an older system isn't.
[13:56] <jodh> infinity: ah - a thought occurs. Do any of the jobs use the 'debug' stanza?
[13:57] <infinity> jodh: Not that I see.
[13:58] <infinity> dobey: That still fails the same way, FWIW.  So, maybe that Cmake thing doesn't do what we thought, and the explicit link would work better?
[13:58] <doko> great packaging ...
[13:58] <doko> cd thirdparty; tar xzf desktop-0.4.2.tar.gz --strip-components=1 -C ../taskcoachlib/thirdparty desktop-0.4.2/desktop
[13:58] <doko> cp /usr/share/pyshared/lockfile.py taskcoachlib/thirdparty
[13:58] <doko> cp: cannot stat '/usr/share/pyshared/lockfile.py': No such file or directory
[13:58] <doko> Makefile:181: recipe for target 'thirdpartymodules' failed
[13:58] <doko> make[3]: *** [thirdpartymodules] Error 1
[13:58] <dobey> infinity: weird
[13:59] <dobey> infinity: so the tests aren't getting -pthread/-lpthread either?
[13:59] <infinity> jodh: Oh dear, get_state is a lot of vomit. :P
[13:59] <infinity> dobey: No, the tests do...
[13:59] <infinity> dobey: As the build logs show.
[13:59] <jodh> infinity: get_state.sh | json_pp > /tmp/upstart.state
[14:00] <jodh> infinity: if you can send me that file along with a get_state.sh run for an amd64 system unaffected that would be useful.
[14:00] <infinity> jodh: Adding json_pp to that pipe makes it take a lot longer, could definitely back up your arm64 json performance assertion.
[14:01] <dobey> wtf
[14:03] <dobey> infinity: ah, needs the find_package() in there too
[14:04] <jodh> infinity: I'll send you a json test prog to check performance...
[14:04] <infinity> jodh: Getting you your outputs.
[14:04] <jodh> infinity: ta
[14:05] <infinity> The filesize differences are shocking. :P
[14:06] <dobey> infinity: so i just pushed the addition of the find_package(), so it should work now
[14:06] <infinity> jodh: http://lucifer.0c3.net/~adconrad/upstart/
[14:06] <infinity> jodh: good returns in under a second, bad takes well over a minute.
[14:06] <jodh> infinity: wow. thanks.
[14:07] <tedg> jodh, I'm kinda curious if bug 1357252 is the same cgroup error Chipaca was talking about yesterday.
[14:07] <infinity> jodh: Both hosts run exactly the same things, the only difference is that one was just rebooted, the other's been up 53 days and lived through some re-execs.
[14:07] <tedg> jodh, When do you expect the better error reporting there to land?
[14:07] <hallyn> hm, what does
[14:07] <hallyn> W: qemu source: virtual-package-depends-without-real-package-depends build-depends: gnutls-dev
[14:08] <hallyn> mean.   apt-cache seems to disaree
[14:08] <infinity> dobey: Testing that.
[14:08] <jodh> infinity: hmm - I don't think it's the performance of the json parser per se - look at the file size difference!
[14:08] <infinity> jodh: Right, it's huge.
[14:08] <infinity> jodh: And all 5 of these hosts were in, I presume, the same state, until 4 were rebooted.
[14:09] <infinity> (The fifth is 14h into a webkit build, hence why I didn't reboot yet)
[14:09] <jodh> infinity: running json_pp on upstart_vomit.bad is taking almost an entire cpu on my system (been running for 20 odd seconds so far)...
[14:12] <hallyn> 'sudo apt-get install gnutls-dev' does do th right thing...  so i guess i can ignore that
[14:12] <infinity> jodh: Anyhow, clearly two very unrelated bugs here, but this highlights why telinit blocking needs to happen.
[14:13] <infinity> jodh: But it would also be smashing to sort out why my state grew so large and make that not happen again. :P
[14:13] <infinity> jodh: Being buildds (constantly tearing down and setting up chroots) might relate, though I'd have assumed my last-minute --disable-sessions default swap would have made that a non-issue.
[14:15] <jodh> infinity: ack. looking at the bad file, you seem to have 591,355 lines of job definition whereas my system has ~1000 lines :)
[14:15]  * jodh goes to get a strong cup of tea...
[14:17] <infinity> jodh: Would it be helpful if I keep the sad system in its sad state, in case you need more info, or can I reboot it at my leisure?
[14:18] <infinity> dobey: That fixes it.
[14:18] <infinity> dobey: Commented on the MP.
[14:19] <dobey> thanks
[14:19] <rbasak> slangasek: please could you review bug 1357003 wearing your ~ubuntu-sru hat? This would be a violation of the micro-release exception, so upstream have asked in advance and I've filed at as a regular SRU-type bug. Upstream would like to know Ubuntu's position to help make a decision.
[14:19] <dobey> now to get it landed
[14:25] <jdstrand> pete-woods: I'll see what I can do (/me needs to review the procedures still)
[14:25] <pete-woods> jdstrand: thanks :)
[14:30] <jodh> infinity: would be useful if you could keep it for a while if not too inconvenient.
[14:30] <jodh> infinity: how many chroots have you got on the bad system?
[14:31] <rbasak> I'm ready to land mysql-5.6 in Utopic, to replace mysql-5.5 completely. This involves switching some binary packages over from being built from 5.5 to being built from the 5.6 source package.
[14:31] <rbasak> The upgrade path works easiest when the mysql-5.5 packages all disappear at the same time as 5.6 appears. Otherwise apt-get seems to want to remove the mysql-server metapackage.
[14:31] <rbasak> (rather than remove mysql-server-5.5).
[14:32] <rbasak> So, please could I have a hand from an archive admin so that we can maybe remove mysql-5.5 binaries in the same publisher run that 5.6 appears?
[14:32] <rbasak> Or should I handle this in some other way?
[14:50] <dobey> infinity: it's building in a silo now
[14:57] <tedg> jodh, any ideas on bug 1357252
[14:58] <jodh> tedg: just updated the bug - we need more debug :)
[15:00] <rbasak> stgraber: around? I'm still waiting on https://lists.ubuntu.com/archives/devel-permissions/2014-August/000711.html. Seems like an unnecessary addition to the sponsorship queue.
[15:00] <tedg> jodh, Were you able to try locally? It might be easier to reproduce there.
[15:02] <slangasek> rbasak: replied on the bug (+1 from me)
[15:03] <rbasak> slangasek: thank you!
[15:03] <jodh> tedg: can you give me an example cmdline to trigger the prob?
[15:04] <tedg> jodh, Let me find it, I'm pretty sure there's a wiki page with info.
[15:05] <tedg> jodh, https://wiki.ubuntu.com/Touch/Testing/ phablet-test-run -p ubuntu-ui-toolkit-autopilot ubuntuuitoolkit
[15:06] <jodh> tedg: thanks
[15:08] <stgraber> rbasak: this is an auto-generated packageset, we don't do manual additions to it.
[15:08] <stgraber> Laney: can you run the script see if that adds what rbasak needs? ^
[15:08] <rbasak> stgraber: yes you do. There have been many instances in the past.
[15:08] <Laney> rbasak: I just ran the script right now
[15:09] <stgraber> rbasak: we did in the past because the script was broken for like a year :)
[15:09] <Laney> you need to add an exception for this if you want to
[15:09] <stgraber> rbasak: now any manual change I do will get reverted when we run the script. We have a list of exceptions in the script itself, though that shouldn't be needed for seeded packages since that's precisely what the script is meant to base the packageset on :)
[15:10] <Laney> or seed it somewhere
[15:10] <Laney> like platform/supported-server
[15:10] <rbasak> Hmm, OK. I still can't upload, but I'll see if I can in a few minutes.
[15:11] <Laney> It didn't get added
[15:11] <rbasak> It's seeded in http://people.canonical.com/~ubuntu-archive/seeds/ubuntu.utopic/supported under "Extra server bits"
[15:12] <stgraber> ok, that's not a server seed so that explains why it's not pulled into your set
[15:12] <stgraber> Laney: can you add an exception for nginx?
[15:12] <Laney> why not platform/supported-misc-servers?
[15:13] <Laney> then it should get into https://bazaar.launchpad.net/~developer-membership-board/+junk/packageset/view/head:/packageset-report#L59
[15:13] <stgraber> that'd actually sort of make sense
[15:13] <rbasak> Laney: I'm not sure I understand the distinction
[15:13] <rbasak> (between "Extra server bits" and supported-misc-servers)
[15:13] <rbasak> Apart from reporting and this script, of course.
[15:14] <rbasak> Why does "Extra server bits" exist in the first place?
[15:14] <stgraber> rbasak: one is a server seed, the other one isn't
[15:14] <stgraber> no idea, possibly someone who didn't know to look into the platform.* seeds too :)
[15:14] <stgraber> and then people just keeping adding stuff there :)
[15:15] <rbasak> I have never understood the difference between platform.* and ubuntu.*. Is this documented anywhere?
[15:15] <stgraber> supported seeds are pretty much used for 3 things, get suff in main, include things in the support declaration, package sets
[15:16] <stgraber> so the main distinction I can think of in the past for ubuntu.*/supported vs platform.*/server-supported was that the former was supported for 3 years during LTS and the latter for 5 years during LTS, but none of that matters now since we don't do the different support length stuff anymore
[15:17] <rbasak> infinity: ^^ you seeded nginx, I think, in bug 1262710? Do we want this in ubuntu.utopic/supported or in platform.utopic/supported-misc-servers?
[15:17] <rbasak> Or shall we just move everything in that section across to platform.utopic/supported-misc-servers now that we have an actual reason to want it there?
[15:18] <rbasak> stgraber: ah, that makes sense, thanks
[15:18] <rbasak> So are we moving the seed or putting an exception in the script?
[15:19] <dobey> infinity: so unity-scope-click is built in the silo now, and marked as tests passing, so will hopefully be published very soon.
[15:19] <dobey> and i'm off to lunch
[15:19] <stgraber> I'd prefer we move that chunk to the right seed
[15:19] <rbasak> stgraber: would you mind committing that change, please? I can't.
[15:19] <stgraber> that way further additions will likely be done at the right place too and we won't have to add even more exceptions to the script :)
[15:19] <rbasak> Sounds good to me :)
[15:22] <stgraber> done
[15:22] <rbasak> Thank you!
[15:23] <rbasak> Does that need the script re-running now?
[15:23] <stgraber> yeah
[15:23] <stgraber> Laney: can you re-run the script?
[15:26] <Laney> Maybe, if --bzr works
[15:26] <Laney> Otherwise it needs to wait for LP
[15:26] <stgraber> Laney: oh, we're only using the tasks for that?
[15:27] <Laney> germinate looks at people.c.c
[15:27] <stgraber> ah, I can refresh people.c.c
[15:27] <Laney> oh wait, already did
[15:27] <Laney> nice
[15:30] <stgraber> Laney: gah, "more than 25 entries", I need to get queuebot to pastebin the output in those cases :)
[15:30] <stgraber> rbasak: can you try again now?
[15:31] <rbasak> stgraber: "ubuntu-upload-permission" still says no.
[15:32] <Laney> that was a previous run
[15:32] <Laney> call it an amusing coincidence
[15:32] <stgraber> yeah, interesting timing :)
[15:36] <infinity> jodh: Only ever one chroot at a time, but they're constantly unpacked, set up, torn down, and deleted.  For every build.
[15:36] <Laney>  actually I was trying to address that request
[15:36] <Laney> you beat me to it by minutes :)
[15:37] <jodh> infinity: could you do another get_state.sh run after a chroot has been spun up and down again? Also, does 'ls -al /proc/1/fd' look sane?
[15:38] <infinity> jodh: It's 16h into a build, there won't be any new chroots until that's done.
[15:39] <jodh> infinity: ok.
[15:39] <infinity> jodh: Your ls shows the usual stdin/stdout/etc, and about 100ish inotify.
[15:39] <infinity> jodh: I'm not sure what qualifies as sane. :)
[15:40] <jodh> infinity: can you pb it?
[15:40] <infinity> jodh: http://paste.ubuntu.com/8054640/
[15:43] <jodh> infinity: confirmed - that's most definitely not sane :)
[15:43] <jodh> infinity: my theory is that you'll get 2 more anon_inode:inotify post chroot tear-down.
[15:44] <infinity> jodh: That machine's done far more than 50 builds since the last reboot.
[15:45] <jodh> infinity: ok. can you 'telinit u' at your leisure and see if that bumps the anon_inode:inotify count by 2?
[15:45] <infinity> jodh: Sure.
[15:46]  * infinity waits a few minutes for that to take.
[15:55] <Laney> rbasak: there
[15:57] <infinity> jodh: Stayed at 125 before and after a telinit u
[15:58] <rbasak> Laney: ubuntu-upload-permission agrees. Thank you, and to stgraber.
[15:59] <infinity> jodh: How many should there generally be?  My laptop has two, one of these recently-rebooted machines has 4.
[15:59] <Laney> yw - enjoy
[16:31] <jodh> infinity: you should only ever have 2.
[16:39] <jodh> infinity: having paused for thought, I've realised that what you're seeing is bug 1338637. This is fixed in 1.13, so I'm afraid you'll have to suffer the slow re-exec's to get to that version :)
[16:48] <infinity> jodh: And when will it get fixed in trusty?
[16:48] <infinity> jodh: We're not upgrading production machines to utopic. :P
[16:49] <infinity> jodh: I think both the telinit-should-block bug and this one should be fixed in trusty before too many more people suffer my pain.
[17:10] <dobey> doko, infinity: ok, fixed unity-scope-click is in archive now
[17:15] <doko> slangasek, ping
[17:19] <infinity> dobey: Thanks.
[17:53] <jodh> infinity: It's a cherry-pick. I'll take a look at this early next week unless another upstart dev wants to jump in.
[18:02] <hallyn> hm, has it always been the case that launchpad told me "newer version available" for a package when newer version was only available in -proposed?
[18:02] <infinity> hallyn: If it didn't, it was a bug, the current behavious is correct.
[18:02] <infinity> hallyn: I assume you mean when a PPA lists a newer version in the distro, yes?
[18:03] <hallyn> right
[18:04] <hallyn> ok, thanks.  just checking.
[20:15] <xnox> rbasak: =( ok.
[20:16] <roadmr> hello folks! I found a couple of problems with the 12.04.5 images, what's a good place to report them/file bugs? (place as in, launchpad project or package)
[20:16] <xnox> roadmr: depends what type of problems.
[20:17] <roadmr> first, if booted on a VM (tested on kvm and virtualbox), I don't get a console
[20:17] <xnox> roadmr: can you describe in short them?
[20:17] <roadmr> no way to access any of the vttys with ctrl+Fx, I have to reset the VM and use recovery mode to get a root prompt
[20:17] <xnox> roadmr: boot what specifically? desktop iso / live cd; server iso / d-i installer; installed system?
[20:18] <roadmr> xnox: right :) sorry, this is 12.04.5 server amd64 image. The install completes correctly, but when trying to use the installed system I get that issue and another one...
[20:18] <xnox> roadmr: I'd say $ ubuntu-bug console-setup - from installed system itself, if you can.
[20:18] <roadmr> xnox: the second issue is that the apt lists seem somehow corrupted: if on this freshly installed system I try apt-get update, I get a lot of checksum mismatch errors and apt-get exits with errors
[20:19] <roadmr> xnox: sure, I can do that (console-setup). I don't mean to give detailed descriptions here, I can provide good steps to reproduce but wanted to know where to file them
[20:19] <xnox> roadmr: that can happen naturally, if e.g. network connection / dns setup is wrong. Can you confirm by changing all sources to use just "archive.ubuntu.com" (no coutry prefix) and see if errors persist?
[20:20] <roadmr> xnox: also, the install/no-console problem was verified by someone else on qemu/kvm, and the apt-get problem verified by the same person on a bare metal installation
[20:20] <xnox> roadmr: if mirror bug -> file against ubuntu-mirrors project. If other checksum error -> file against $ ubuntu-bug apt; and it would be inspected / reassigned from there.
[20:20] <roadmr> xnox: they have no country prefix now :D just archive.ubuntu.com (I told it I was in the US)
[20:21] <roadmr> xnox: ok, I'll start with apt. FWIW, I've reproduced this from Canada, the UK and US west coast, and at different times (yesterday + today) so it doesn't seem like a network issue
[20:21] <roadmr> xnox: thanks for your help (as usual, much appreciated), I'll file them now
[20:35] <arayaq> Hi! I'm getting an error trying to compile the template project for a QML Extension library with a tabbed UI (CMake) on 14.04
[20:37] <arayaq> Nvm, the problem is that you can't have a dash in your project name
[20:37] <arayaq> No idea if it is a bug
[20:45] <dobey> anyone know why the symbols checker would complain about 2 symbols not being in the .symbols file, even though i added them?
[20:46] <infinity> dobey: build log?
[20:46] <infinity> dobey: And symbols file.
[20:46] <infinity> dobey: My guess is the answer is "it wouldn't", but...
[20:48] <dobey> infinity: http://pastebin.ubuntu.com/8057237/
[20:49] <dobey> ironically, in the diff from gensymbols you can see 2 lines above the + that the ::updated() is already there...
[21:24] <xnox> wgrant_: ./copy-package -s utopic --from ubuntu --to ~xnox/ubuntu/scratch hello is very nice.
[21:24] <xnox> wgrant_: apart from having to quote "~xnox/ubuntu/scratch" as otherwise it ends up with error message - AssertionError: No such archive: /home/xnox/ubuntu/scratch
[22:03] <geofft> is anyone working on updating gnome-settings-daemon to a newer upstream version in Utopic?
[22:04] <geofft> slash, is that wanted or is there something that requires it being held at 3.8.x?
[23:23] <Bluefoxicy> bah
[23:23] <Bluefoxicy> lightdm and gdm should have a setting to add priority to the DE
[23:25] <Bluefoxicy> that way X11 can run at -2, lightdm at 0, Gnome-Shell or Unity or XFCE at 1.  Then the DE should have a configuration to spawn all user applications at additional priority i.e. +2 or +5.
[23:25] <Bluefoxicy> then maybe stuff will work when chrome misbehaves
[23:26] <Bluefoxicy> and if not, I can just ^+F1 and log in on a priority-0 terminal, running at higher priority than Chromium at 3.


[16:09] <webchat24> Hello all, i installed ubuntu server 20.04 LTS and  imported a SSH keys from Launchpad. i am a little bit lost, there is a lot of tuturial showing how to generate a key but i dont know what can i do now with the key from Launchpad. How can i log with different account without password and only this key? thanks and have a great day
[16:11] <webchat24> is it better to delete this imported pub key and generate the pair private/pub direclty on the server?
[16:25] <mybalzitch> webchat24: the imported pub key lets you log in as that user to that machine from the identity you generated the pubkey with
[16:25] <mybalzitch> webchat24: you can create additional users after logging in, and import pub keys for those other accounts if you want
[16:26] <webchat24> is it better to have 1 key for each account? Or can i use 1 key for 2-3 account?
[16:28] <mybalzitch> depends on the level of security for the machines that hold the private keys
[16:29] <mybalzitch> just know that if you are using a pubkey for 2-3 accounts ,and that privkey gets compromised, then you have 2-3 accounts that someone can log in to, assuming they know where to attack
[16:31] <mybalzitch> until you revoke that pubkey on the server
[16:34] <webchat24> OK thank you a lot mybalzitch! Have a great day
[16:34] <mybalzitch> you too
[20:50] <znf> even if I set:
[20:51] <znf> dhcp6-overrides: use-dns: false in netplan apply
[20:51] <znf> netplan*
[20:51] <znf> and set a nameserver manually, netplan still fetches the ipv6 dns server
[20:51] <znf> what gives?


[09:39] <zequence> OvenWerks: The PA bridge, as I've understood it, is quite rudimentary, and is more of an example that could be developed.
[09:39] <zequence> I'm only aware of it getting the new feature of allowing it to connect to a specified amount of channels
[09:40] <zequence> But, perhaps someone has done something more with it, I don't know.
[09:40] <zequence> One could easily check from the code
[13:27] <cub> Hi people! Not sure if this already been mentioned but I was a bit peaked that Bryan Lunduke installed Ubuntu Studio on a Chromebook: http://www.networkworld.com/article/2867025/opensource-subnet/3-ways-to-run-normal-linux-on-a-chromebook.html
[13:28] <cub> "Ubuntu Studio required the least post-install tweaking to get a well-behaving system." :)


[06:33] <cpaelzer> good morning
[06:47] <lordievader> Good morning
[07:08] <cpaelzer> hi lordievader, welcome to a new week
[07:40] <lordievader> Hey cpaelzer , how are you doing.
[07:40] <lordievader> ?
[07:41] <cpaelzer> trying to deflect cybper-whatever ad-mails this week :-)
[08:03] <lordievader> Good luck 😉
[11:32] <jamespage> coreycb: I pushed a patch to stestr for the os-testr autpkgtest failure
[11:32] <jamespage> coreycb: also raised PR upstream
[12:09] <rbasak> cpaelzer: thank you for the review!
[12:10] <cpaelzer> rbasak: yw++
[12:10] <cpaelzer> rbasak: the tests were really good
[12:10] <cpaelzer> no additional issue found (on these tests :-) )
[12:11] <rbasak> Thanks!
[12:17] <cpaelzer> rbasak: if you could have a quick look (just to confirm if it hit sonly me) on bug 1734657 mabye?
[12:37] <rbasak> Looking
[12:38] <rbasak> cpaelzer: based on the code I think that's a valid bug
[12:39] <rbasak> It needs an rmtree in debian/ if it already exists first
[12:39] <rbasak> I can't remember why we aren't using dpkg-source -x already but IIRC there's a good reason
[12:51] <cpaelzer> rbasak: for now knowing it is valid is good enough
[12:51] <cpaelzer> rbasak: I can get around in that case with dpkg-buildpkg for now
[13:48] <cpaelzer> rbasak: FYI the old thing I remembered in regard to that mysql could you keep my chown/chmod was dpkg-statoverride
[16:57] <ahasenack> rbasak: ubuntu/devel in the bind9 tree is still pointing at xenial. If you run the importer on bind9 again, will that be fixed?
[16:57] <ahasenack> or does it need an actual new upload?
[16:58] <rbasak> ahasenack: I need to rerun the importer against it.
[16:58] <ahasenack> can you do that, or have you transitioned fully to mysql already? :)
[18:04] <danrik> `/dev/vdb1<PHONE_NUMBER>60       0  100% /var` I cant create any directories because my inode usage is apparently above 655k.... why?
[18:05] <danrik> why cant I just have a lot of files on FS? I dont remember running into this inodes issue before
[18:10] <sdeziel> danrik: the amount of inodes is usually determined at the time of the mkfs and is based on the size of the FS. If you need more, I think you'll need to create a fresh FS and tell mkfs to allocate more inodes
[18:11] <danrik> sdeziel: is inodes some new thing? I dont remember ever having to worry about number of files ahead of time  - just the space available...
[18:12] <sdeziel> danrik: not new, no. Since it usually depends on the size of the FS, maybe you used bigger ones before?
[18:16] <danrik> well - learn something every day. thx. Ill makes ure to max out inode numbers next time
[18:16] <Nafallo> or less files ;-)
[18:18] <danrik> it's our deployment system. we deploy entire project, which is only ~7mb comporessed, but has a lot of files. When we deploy we just copy & symlink to new version. So many files accamulated in dev - never thought this would be an issue :)
[18:54] <ikla> how do I list/remove startup scripts in 16.04?
[18:55] <ikla> it looks like 1/2 is systemd and others are upstart
[19:25] <mike-zal2> I have a problem with network configuration during installation. automatic one fails and I want to configure it manually but installer asks for host name and jumps to the next steps, always. even when I go back, I can't set network manually.
[21:41] <mike-zal2> during install I was asked about user and its password, this will become sudo user. but what about root? how can I log in directly as root?
[21:42] <sarnold> mike-zal2: I believe it's enough to use sudo passwd root to set a password and unlock the account
[21:43] <mike-zal2> ok, thanks sarnold. I am used to have option to root password on other systems.
[21:57] <mike-zal2> sarnold: I chaned root password and it seems to be ok, but I can't log in with it via ssh. it says that password is incorrect, but I paste the same so it cannot be wrong
[21:58] <Sling> mike-zal2: you shouldn't log in directly as root
[21:58] <Sling> bad security practice
[21:58] <sarnold> mike-zal2: my /etc/ssh/sshd_config has PermitRootLogin prohibit-password
[21:58] <sarnold> mike-zal2: probably yours is similar
[21:58] <mike-zal2> Sling: I know. it's not the point. I want to firt HAVE a root passowrd and then I will block it and estabilish a key
[21:59] <Sling> just 'sudo passwd' then
[21:59] <sarnold> mike-zal2: there may be additional mechanisms prevening root login over ssh, either via password or key, possibly also in PAM configurations. root password bruteforcing is a popular hobby of botnets, so it's probably not easy to enable.
[21:59] <mike-zal2> sarnold: that's weird, because usually when root is blocked it gives different output
[21:59] <Sling> also you can add a pubkey without actually logging in as root, if you have sudo
[21:59] <mike-zal2> I know how to secure server, I just need to do few things first
[22:00] <sarnold> mike-zal2: well, I'd expect the error given to the ssh _client_ to be very useless, but the error message in the _logs_ to be very much more helpful
[22:00] <Sling> just put it in /root/.ssh/authorized_keys
[22:00] <mike-zal2> Permission denied, please try again.
[22:00] <mike-zal2> maybe you're right, will check if root login is permitted
[22:00] <mike-zal2> usually it was permitted by default, at least on my previous instals
[22:04] <mike-zal2> I don't see root login prohibition in ssh_config
[22:06] <mike-zal2> but new root passowed seems to work when I swicth from user to root. but not when newly connecting
[22:07] <mike-zal2> screw it then ;). installing virtualmin. I can set everything from there.
[22:07] <sdeziel> PermitRootLogin is probably what's preventing you from using a password
[22:08] <sarnold> is virtualmin one of those terrifying web-based management consoles?
[22:08] <sarnold> if so, pleae firewall the living hell out of it. those are normally disasters.
[22:08] <sarnold> way worse than just using root password=password123 or something.
[22:09] <Sling> yeah virtualmin is like turning your smooth fortress walls into a climbing wall with hooks and nooks for anybody to climb into your server
[22:09] <Sling> so much attack surface :)
[23:01] <drab> is there a vpn that's easier to get going and manage than openvpn?
[23:01] <drab> I mean, if it worked on a phone, I'd totally just use ssh creating a SOCKS5, that does everything that's needed, tunnelling both dns and traffic over ssh
[23:02] <drab> but you can't do it on a phone (at least a non rooted one, android rooted actually can setup ssh tunnel + proxy everything)
[23:05] <sdeziel> drab: strongswan is pretty nice and let you use the phone/client's OS builtin client. It's not exactly easy to get going though
[23:05] <drab> sdeziel: thanks. also iirc some of those vpns solutions weren't playing well with NAT
[23:06] <sdeziel> drab: with strongswan, you should not have problems with NAT, IPsec can deal with NAT relatively well
[23:06] <drab> ok
[23:07] <drab> I'll take a look
[23:07] <drab> I don't quite understand why the vpn biz can't be as simple as ssh... probably not understanding the complexity behind it
[23:08] <drab> ssh with key based auth seems pretty good, can get in only if you have the pvt part and know the pwd to unlock the key... and if you the fingerprint to identify the server
[23:12] <drab> s/if you/you have/
[23:36] <sarnold> Sling: haha, 'climbing wall' :)
[23:36] <drab> sdeziel: actually it seems to end up the way if you wanna setup mobile clients, ie generating a whole bunch of certs
[23:37] <drab> altho maybe there's no generating the .ovpn file for the clients
[23:37] <sarnold> drab: strongswan looks good, wireguard looks good but has had WAY less scrutiny. There's also a hell of a lot less code to wireguard.
[23:37] <drab> sarnold: what pains me is the management of the thing, which I guess is why ppl pay for openvpn server connect
[23:38] <drab> configuring the whole shebang and managing all the clients is sort of annoying, you're basically maintaing a whole CA
[23:38] <sarnold> drab: yeah. Probably no real way around that though. it's either shared keys (eww) or certs and the like (eww)
[23:38] <sdeziel> drab: with openvpn or strongswan, you can have client authenticated with username/password
[23:39] <drab> like I said above, ssh seems plenty good as long as you have the fingerprint printed with you to verify it
[23:39] <drab> sdeziel: oh, the pre shared key seemed to be only for static ips, but maybe it was just the couple tutorials I saw
[23:39] <sdeziel> strongswan supports a similar authentication scheme where you don't need X.509 certs but can use bare pub/private keys
[23:40] <drab> most seemed to go back to x509 aith
[23:40] <drab> ah
[23:40] <drab> I missed that
[23:40] <drab> I'll google again
[23:40] <drab> thanks
[23:40] <sdeziel> drab: you usually want to use a X.509 cert on the server as most client require that. Then with IKEv2, you can use username/password for the client auth
[23:41] <sdeziel> drab: the oldest client that doesn't support IKEv2 is the Android builtin client (but you can install the Strongswan app). This builtin client does support IKEv1 with XAUTH mode which is essentially provides what you'd get from IKEv2 in roadwarrior setups
[23:42] <sdeziel> drab: don't trust random guides, they will burn you ;) https://wiki.strongswan.org/projects/strongswan/wiki/Windows7 is a very good starting point
[23:43] <drab> yeah, that's why I ask here :P
[23:43] <drab> #ubuntu-server is my non-random guide ;)
[23:44] <sdeziel> alright, good night then