[00:59] <tefal> hi, there !
[01:00] <tefal> does someone know how to have the ubuntuone applet in ubuntu 10.04 ?
[01:02] <duanedesign> tefal: hello
[01:02] <duanedesign> tefal: theapplet was replaced by the Ubuntu One Preferences Panel accessed by going to Me menu --> Ubuntu One
[01:03] <tefal> duanedesign: ok, so is there a way to have notifications, like the applet used to do ?
[01:17] <duanedesign> tefal: Ubuntu One does not use the Notify USD Notifications anymore
[01:18] <tefal> duanedesign: ok, don't know if it's a good thing, yet... :)
[01:18] <tefal> duanedesign: thanks !
[01:19] <duanedesign> tefal: no probem, anytime :)
[01:19] <duanedesign> problem*
[02:25] <Chipaca> mwhudson: ping
[02:25] <mwhudson> Chipaca: hi
[02:25] <Chipaca> mwhudson: lucid?
[02:25] <mwhudson> Chipaca: yes
[02:25] <mwhudson> i just read that this might be much better in maverick...
[02:26] <Chipaca> more or less (a.k.a. "oh **** yes"
[02:26] <Chipaca> )
[02:26] <Chipaca> mwhudson: lots of small files was the worst case we had. It still won't be brilliant, but the difference on reconnect makes it usable
[02:27] <mwhudson> Chipaca: is there a ppa i can try?
[02:27] <Chipaca> mwhudson: I don't know if it'll work, but you can try
[02:28] <Chipaca> mwhudson: some other bits have changed, and I'm not sure if they'll all work in lucid *today*
[02:29] <mwhudson> well
[02:29] <mwhudson> willing to try
[02:29] <Chipaca> mwhudson: also, it's a one way road
[02:29] <Chipaca> I mean, it upgrades the metadata
[02:29] <Chipaca> so the old client won't read it afterwards, you'd have to nuke it and start over
[02:29] <mwhudson> and indeed, it seems to be the rescan on reconnect that means this hasn't got anywhere yet
[02:30] <mwhudson> Chipaca: will an old client on another box be able to read it?
[02:30] <Chipaca> if you're experimenting, you should be ok
[02:30] <Chipaca> yep
[02:30] <mwhudson> then fine
[02:31] <Chipaca> ok. Let's see what's the least cutting edge ppa I can get you on :)
[02:32] <Chipaca> apparently, the nightlies :(
[02:32]  * ajmitch guesses that crack-of-the-day should work fine
[02:32] <Chipaca> mwhudson: ppa:ubuntuone/nightlies
[02:33] <mwhudson> Chipaca: should i u1sdtool -q before upgrading?
[02:33] <Chipaca> mwhudson: can't hurt
[02:34] <mwhudson> The following packages have been kept back:
[02:34] <mwhudson>   python-ubuntuone-client ubuntuone-client ubuntuone-client-gnome
[02:34] <ajmitch> mwhudson: you're trying apt-get upgrade, aren't you?
[02:34] <Chipaca> ugh
[02:34] <mwhudson> ajmitch: yes
[02:34] <Chipaca> ah, try dist-upgrade
[02:34] <ajmitch> that won't work if there are new packages
[02:34] <ajmitch> dist-upgrade ought to :)
[02:35] <mwhudson> ah ok
[02:35]  * mwhudson installs other updates first
[02:35] <Chipaca> if it says "I'll remove X", be suspicious
[02:35] <ajmitch> either ubuntuone gets no bugs, or subscribing to bugmail  just isn't working for me
[02:41] <Chipaca> sorry, got disconnected. Did I miss anything?
[02:42] <ajmitch> just me complaining about not getting bug mail
[02:42] <Chipaca>  ajmitch: what're you subscribing to?
[02:42] <Chipaca> (copied from my history :) )
[02:43] <ajmitch> ubuntuone, ubuntuone-client, ubuntu-sso-client
[02:43] <ajmitch> I seem to be getting bugmail for only the latter
[02:44] <ajmitch> it's probably something I need to take up with a LP person (hi mwhudson!)
[02:44]  * mwhudson puts his linaro hat on, sharpish
[02:45] <ajmitch> hah
[02:45]  * mwhudson escalates his efforts to get ubuntuone-syncd to exit
[02:45] <ajmitch> kill -9 tends to work in most situations
[02:46] <mwhudson> yeah, it might come to that
[02:46] <ajmitch> I'd hate to think what it may do to files on disk
[02:49] <Chipaca> just kill should work
[02:49] <Chipaca> especially if it's stuck in local rescan or something :)
[02:49] <Chipaca> killall ubuntuone-syncdaemon
[02:49] <Chipaca> tadaa :)
[03:03] <Chipaca> mwhudson: how's it going?
[03:04] <mwhudson> Chipaca: ah, i hadn't restarted the daemon :)
[03:11] <mwhudson> hm
[03:11] <mwhudson> the log now just says
[03:11] <mwhudson> 2010-08-19 14:04:13,970 - ubuntuone.SyncDaemon.fsm - INFO - loading metadata from old version '4'
[03:11] <mwhudson> i guess this will take a while?
[03:11] <mwhudson> lots of io is happening
[03:13] <Chipaca> yep
[03:13] <Chipaca> non-solid state drive?
[03:13] <mwhudson> yes
[03:13] <Chipaca> how many files?
[03:13] <mwhudson> ~70k
[03:13] <mwhudson> i like to make life hard for people :)
[03:14] <Chipaca> yep, that'll take a while, because we don't persist the metadata index
[03:14] <Chipaca> that'll happen during N
[03:14] <mwhudson> 'while' == 'an hour' ?
[03:15] <Chipaca> not sure
[03:15]  * Chipaca checks
[03:15] <Chipaca> mwhudson: i have ~30k files and it takes a minute on my ssd
[03:16] <Chipaca> so, x10 for ssd->non-ssd, and x2.5 for num of files
[03:16] <mwhudson> it's taken 10 so far
[03:16] <Chipaca> roughly, 15 minutes
[03:16] <Chipaca> :(
[03:16] <Chipaca> that must be so much *fun*!
[03:16] <mwhudson> so nothing unexpected yet i guess
[03:16] <Chipaca> you *like* suffering, dontcha
[03:17] <ajmitch> given what he works on..
[03:17] <Chipaca> mwhudson: I know who we'll go to to test perf improvements
[03:17] <lifeless> mwhudson: so; bzr ? :)
[03:17] <Chipaca> mwhudson: there is an implementation of FileShelf that used sqlite, but we scrapped it. That was a long time ago, before people storing 10k files was reasonable. We might have to revisit that.
[03:17] <mwhudson> lifeless: i'm helping make u1 better!
[03:17] <lifeless> flamingspork was putting his notmuch stuff into rev control
[03:18] <lifeless> mwhudson: you could put your repo in u1
[03:18]  * ajmitch is glad that he's not sticking all his mail in u1
[03:18] <lifeless> Chipaca: what does fileshelf do ?
[03:18] <Chipaca> one of our tests was checking out bzr inside Ubuntu One, and seeing how long it took to work on the other side
[03:19] <lifeless> Chipaca: generations?
[03:19] <lifeless> Chipaca: I meant to say
[03:19] <Chipaca> lifeless: persists a big-ass dictionary to disk
[03:19] <lifeless> Chipaca: you should add a busy commit-edit-commit-edit loop to that
[03:19] <lifeless> because what you
[03:19] <lifeless> what I saw your test do was unlikely to trigger bugs unless your code was -really-broken- :)
[03:19] <Chipaca> lifeless: I've lost track of the syncdaemon development in detail, as I now manage desktop+
[03:21] <mwhudson> ah hah
[03:21] <lifeless> congratsa
[03:21] <mwhudson> different stuff in the log now
[03:21] <Chipaca> mwhudson: "OM_NOM_NOM_FILES"?
[03:21] <mwhudson> so 15 minutes was a pretty good guess :)
[03:22] <Chipaca> I levelled guessing after three years of physics :)
[03:23] <Chipaca> mwhudson: u1sdtool -s should now say "READY"
[03:23] <mwhudson> last log entry is
[03:23] <mwhudson> 2010-08-19 14:20:17,881 - ubuntuone.SyncDaemon.local_rescan - DEBUG - comparing directory '/home/mwh/Ubuntu One/Maildirs/INBOX/cur'
[03:24] <Chipaca> so, first it reads in the metadata, then it does local rescan, then "ready" state (i.e. "let me connect already")
[03:24] <Chipaca> you can say u1sdtool -c to ask it to connect when ready
[03:24] <mwhudson> u1sdtool says "Failure: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken."
[03:25] <mwhudson> this is the big directory it's on i guess
[03:25] <Chipaca> not sure why, but local rescan seems to block a lot
[03:25] <Chipaca> I'd call it a bug, this being twisted
[03:25] <mwhudson> is guess even stuff like os.listdir maybe takes a while
[03:25] <Chipaca> what's your memory looking like? (32bits, or 64?)
[03:26] <mwhudson> 260 meg RSS, 64 bit
[03:26] <mwhudson> growing slowly
[03:26] <Chipaca> ok, not too bad
[03:26] <Chipaca> you're probably the biggest controlled-but-in-the-wild case of lots-of-small-files I've seen so far :)
[03:27] <Chipaca> os.listdir is pretty bad, by the way
[03:28] <Chipaca> (I guess you know that already)
[03:28] <Chipaca> the bad thing is that os.walk uses os.listdir, so memory use is stupid big
[03:28] <lifeless> not -that- bad, bit its slow enough
[03:29] <lifeless> so bzr has an optimised one
[03:29] <lifeless> (which you should be using :P)
[03:29] <Chipaca> lifeless: how is it memory-wise? we're not too worried about speed, but memory can kill us
[03:29]  * mwhudson wonders what fraction of the io is writing 500 lines to the log file every second
[03:29] <lifeless> Chipaca: tight
[03:30] <lifeless> Chipaca: bzr worries about memory too
[03:30] <Chipaca> lifeless: and have you done an optimized walk too?
[03:30] <lifeless> Chipaca: yeah
[03:30] <lifeless> different interface, stats optimially, that sort of thing
[03:32] <Chipaca> lifeless: where?
[03:33] <Chipaca> mwhudson: if you're going to run it with debug on, maybe make ~/.cache/ubuntuone/log a symlink to /dev/shm/u1log ?
[03:34] <Chipaca> (or just mount a tmpfs there)
[03:35] <mwhudson> actually i don't think it's so bad
[04:21] <Chipaca> mwhudson: still local rescan?
[04:22] <mwhudson> Chipaca: how do i tell?
[04:22] <mwhudson> u1sdtool is still hanging
[04:23] <Chipaca> mwhudson: that's a "yes", then :(
[04:24] <Chipaca> mwhudson: also, every MARK_INTERVAL, it prints the current state to the log
[04:25] <Chipaca> mwhudson: grep NOTE.*MARK | tail should work
[04:25] <Chipaca> (on the log)
[04:25] <mwhudson> ok
[04:33] <mwhudson> what's MARK_INTERVAL usually?
[04:33] <mwhudson> i haven't seen one in the last 6-7 minutes or so
[04:34]  * Chipaca looks in /etc/xdg/ubuntuone
[04:34] <Chipaca> 120
[04:34] <Chipaca> 2 minutes
[04:54] <duanedesign> Chipaca, I am liking the Nautilus improvements
[08:39] <mandel> morning!
[11:13] <leeb9972> anyone know how i can add machine on ubuntuone, i do not get the option?
[11:18] <rye> leeb9972, hi, what distribution are you running?
[11:19] <leeb9972> 10.4
[11:21] <rye> leeb9972, ok, have you had your computer authorized in the past or this is the first time?
[11:21] <leeb9972> i had it authorised in past, but i delted the machine
[11:22] <rye> leeb9972, ok, just a moment
[11:23] <leeb9972> nps
[11:23] <rye> leeb9972, # open seahorse utility (Karmic, Lucid: Applications/Accessories/Passwords and Encryption Keys; Maverick: System/Preferences/Passwords and Encryption Keys)
[11:23] <rye> #
[11:23] <rye> remove the entry called "Ubuntuone token for https://ubuntuone.com".
[11:23] <rye> #
[11:23] <rye> run ubuntuone-preferences from MeMenu again and it should prompt you to re-add the machine
[11:50] <mandel> vds, ping
[11:53] <vds> mandel pong
[11:53] <mandel> vds, did you get my last msg?
[11:54] <vds> mandel: yes but I see strange thing in xchat :)
[11:54] <mandel> vds, such as?
[11:54] <vds> mandel: that's the same error I get running the script from nant
[11:55] <vds> mandel: have you tried to run the script from cmd?
[11:55] <vds> it works
[11:55] <vds> mandel: btw did you get my msgs?
[11:55] <mandel> vds, so, it looks like nant makes the script to behave strange when dealing with sockets
[11:55] <vds> about multiple items, s3 and static file system?
[11:55] <vds> yes
[11:55] <vds> mandel: pretty strange
[11:55] <mandel> vds, bulloks, I'll try to get the debugger and see what is going on
[11:56] <vds> I have no idea of how fork works on win
[11:56] <vds> mandel: before you do that
[11:56] <vds> can we talk a bit about the idea of updating the rss instead of generating a new one>
[11:56] <vds> ?
[11:57] <mandel> sure, give me a sec
[11:57] <vds> as I said the name of the installer is the same so we need different url
[11:57] <vds> URLs
[11:57] <vds> I can easily do it with s3 now
[11:58] <vds> but we've been told we'll store the installers on a static folder
[11:58] <vds> well static folders
[11:58] <vds> so we'll have to change the script
[11:58] <vds> ok
[11:59] <vds> mandel: I do it with multiple items, later we'll figure it out
[11:59] <mandel> ok
[11:59] <vds> mandel: byw I need some help with the uids
[11:59] <mandel> vds, I'll be back in 2 min, something is going on with the network
[11:59] <vds> ah ok
[12:05] <mandel> vds, ok, I'm back I should be able tow ork now
[12:05] <mandel> vds, you were saying??/
[12:05] <vds> mandel: I was saying
[12:06] <vds> that we can list multiple items in the rss
[12:06] <vds> that means having more than one installer available at the time
[12:06] <vds> that means store the installers in different folders
[12:06] <mandel> vds, yes, that is the idea of the rss feed
[12:07] <mandel> vds, ok, is that a problem in s3?
[12:07] <vds> not at all
[12:07] <vds> but s3 is temporary
[12:07] <vds> so we'll have to change when we go in production
[12:07] <vds> not a big issue
[12:07] <vds> I'm working on it
[12:08] <mandel> vds, ok, so the plan is, you work on that and I debug the stupid nant issue?
[12:11] <vds> mandel: yep
[12:12] <mandel> vds, cool, I'll let you know how it goes
[12:33] <mandel> vds, ok, found the issue, when executing with nant we ran out of retries to make the connection, I'm looking at the exact reason right now
[12:33] <vds> wow...
[12:33] <vds> mandel: that's interesting
[12:35] <mandel> vds, we get several times the existing connection was forcibly closed by the remote host, this is comming from the TCP stack from windows
[12:35] <mandel> vds, I'll pocking the boto code to take a look
[12:52] <mandel> vds, looks like the issue is when we try to upload the package, I wonder if the S3ReposneError leaves the connection unusable and we have issues with that
[13:12] <mkarnicki> good afternoon!
[13:15] <mandel> vds, fixed the bug, you script does not like relative paths, why, no fucking clue but the boto connection does not like it, I fixed it by making the build copy the msi to the utils dir, upload and clean
[14:25] <dnielsen> there appears to be a problem with the last version of libubuntuone in maverick with regards to the CIL bindings
[14:25] <dnielsen> https://bugzilla.gnome.org/show_bug.cgi?id=626962
[14:25] <ubot4> Gnome bug 626962 in Community Extensions "Ubuntu One Music Store extension fails to build" [Normal,Resolved: notgnome]
[14:26]  * ajmitch takes a quick look
[14:27] <rye> dnielsen, bug #618945
[14:27] <ubot4> Launchpad bug 618945 in rhythmbox-ubuntuone-music-store (Ubuntu Maverick) (and 1 other project) "Maverick: with the ubuntuone store plugin enabled Rhythmbox can not import files or folders (affects: 2) (dups: 1) (heat: 1745)" [High,Confirmed] https://launchpad.net/bugs/618945
[14:29] <rye> o_O
[14:29] <rye> dnielsen, please ignore my reply
[14:30] <ajmitch> looks to be a slightly different issue
[14:34] <ajmitch> I see the bindings did change a bit in 0.3.2
[14:42] <dnielsen> ajmitch, okay so they aren't as feared borked?
[14:42] <ajmitch> I'm not sure, I'm rebuilding it now to check them :)
[14:42] <dnielsen> excellent
[14:42] <ajmitch> or trying to
[16:35] <rye> duanedesign, you might be interested in http://people.canonical.com/~roman.yepishev/ubuntuone-publish-service.py - automatic publishing of the files based on their path and nice pynotify notification about file publishing state (for all files)
[16:35] <rye> duanedesign, lives in bzr:~rye/+junk/ubuntuone-scripts
[16:36] <mkarnicki> rye: you mean, lp:~rye/+junk/ubuntuone-scripts ?
[16:37] <rye> mkarnicki, ah, yes, you are right
[16:37] <mkarnicki> np
[16:38] <mkarnicki> rye: I'll gladly branch it to learn some python on that :)
[16:38] <rye> because i find the need to publish files pretty often, and this script can be put to startup applications...
[16:39] <rye> mkarnicki, please note that i am learning python at this time as well, so the code can be baaaaad
[16:39] <mkarnicki> rye: no probs, I'm sure I'll only gain from it :)
[16:40] <mkarnicki> rye: btw I haven't started learning yet, so that branch is for pleasure reading :)
[17:17] <duanedesign> rye: that is neat! thank you
[17:27] <rye> http://blog.rtg.in.ua/2010/08/ubuntu-one-automatic-publishing.html
[17:37] <duffydack> nice idea
[17:38] <duffydack> how do I get the notification back like you have ?
[17:39] <rye> duffydack, that's not Ubuntu One notifications, thats generated by the script
[17:39] <duffydack> I know they are for the script, but  Ijus want it back for general
[17:49] <rye> duffydack, me too
[17:59] <lahwran> is it just me, or is updown going really slow?
[17:59] <dnielsen> updown?
[18:00] <Chipaca> lahwran: it seems to be tripping up more than usual, yes
[18:00] <Chipaca> not sure what's up with that
[18:00] <mbarnett> hmm, it does look like updown is having a bit of a hard time.  Beating it with a stick now.
[18:00] <lahwran> :/
[18:00] <Chipaca> dnielsen: updown servers are the ones that put things in and out of ubuntu one through the web
[18:01] <dnielsen> ah
[18:01] <Chipaca> dnielsen: for the file sync part, that is
[18:01] <lahwran> might it have anything to do with my file not having synced in a day or two?
[18:01] <lahwran> I thought updown was the web only
[18:01] <Chipaca> lahwran: nope, updown is only through the web
[18:01] <dnielsen> that will teach me to irc with a fever
[18:01] <Chipaca> dnielsen: yeah, only irc with people. ircing with fevers is always trouble.
[18:02] <lahwran> XD
[18:02]  * lahwran downloads file that didn't sync with this computer and adds it manually
[18:04]  * lahwran is a little annoyed at ubuone now ... looks like it doesn't have the latest version of this file
[18:04] <lahwran> it's not on my cloud part
[18:06] <Chipaca> lahwran: is your syncdaemon connected?
[18:07] <lahwran> not sure
[18:07] <Chipaca> lahwran: u1sdtool -s ?
[18:07] <lahwran> is on this machine at the moment
[18:07] <lahwran> I think it only just connected a minute or two ago
[18:07] <Chipaca> lahwran: what odes u1sdtool -s output?
[18:07] <Chipaca> *does
[18:08] <lahwran> connected
[18:08] <lahwran> and idle
[18:08] <Chipaca> and which is the file that didn't sync?
[18:19] <lahwran> it's a script i'm writing
[18:45] <rye> rodrigo_, ping, how do I use libsyncdaemon from python?
[19:33] <rye> anybody here tried using libsyncdaemon with python?
[20:42] <popey> hullo!
[20:42] <dobey> alo govna
[20:44] <popey> having fun playing with new music store features :)
[20:54] <dobey> :)
[22:28] <dnielsen> ajmitch, any update on the bindings issue?
[22:31]  * ajmitch didn't have much of a chance to look at it - it was nearly 2AM & things weren't cooperating :)
[22:33] <dnielsen> ah
[22:34] <ajmitch> now I recall, I was trying to build stuff & one of the NZ mirrors was dead
[23:01] <rodrigo_> rye, you need pygi, the new python bindings that use the introspection stuff
[23:01] <rodrigo_> rye, not sure how it's used, look for info on live.gnome.org
[23:01] <rye> rodrigo_, here's the problem
[23:02] <rye> rodrigo_, syncdaemon has connect() method and it overrides connect() method of GObject
[23:02] <rodrigo_> hmm, oh
[23:02] <rye> rodrigo_, so it is impossible to get any signal assigned
[23:02] <rodrigo_> rye, so, gobject's connect is g_signal_connect binding?
[23:03] <rye> rodrigo_, and if i rename connect to e.g. do_connect / do_disconnect it does the following: http://paste.ubuntu.com/480629/
[23:04] <rye> rodrigo_, so first bug report will be about inability to tie the signals and the second one is to convert gpointers to gslist or something python-list-compatible
[23:06] <rodrigo_> rye, well, we need probably to make the Python bindings do all that, or do you mean renaming the methods in libsyncdaemon?
[23:08] <rye> rodrigo_, regarding connect/disconnect - there is not much we can do w/o renaming connect/disconnect methods within syncdaemon, unfortunately
[23:08] <rodrigo_> hmm, ok
[23:12] <rodrigo_> rye, so, what do they do in the GLib python bindings to have GObject.connect match g_signal_connect
[23:12] <rodrigo_> that doesn't seem to be automatic at all
[23:13] <rodrigo_> it looks to me there's custom code to do that mapping, so can't we do that?
[23:13] <rodrigo_> mainly, because a API change now, not sure how it would get seen for Maverick
[23:13] <rodrigo_> but I'm ok with renaming the methods and provide #define's to provide the old API
[23:22] <rye> rodrigo_, bug #620735
[23:22] <ubot4> Launchpad bug 620735 in ubuntuone-client "libsyncdaemon gobject introspection cannot be used from python (affects: 1) (heat: 6)" [High,Confirmed] https://launchpad.net/bugs/620735
[23:26] <mwhudson> 2010-08-20 10:25:53,082 - ubuntuone.SyncDaemon.Main - NOTE - ---- MARK (state: <State: 'QUEUE_MANAGER'  (queues WORKING_ON_BOTH  connection 'With User With Network')>; queues: metadata: 64712; content: 75226; hash: 0, fsm-cache: hit=5109776 miss=504593) ----
[23:26] <mwhudson> this is going to take a while?
[23:26] <mwhudson> the queues don't seem to be going down very fast...


[00:12] <jmarsden|work> c0rleone: You are apparently trying to update a customized Apache installation, which includes a module named mod-vhost-alias-apache2.2-webfusion -- and that module may have issues?  Where did you get that module from?  You might want to try removing all apache-related modules, and then installing the "normal" Ubuntu apache2 metapackage.  But figuring out how you got that module installed in the first place wou
[00:12] <jmarsden|work> ld be wise, before you go any further.
[01:04] <DelphiWorld> how i can add a new repository to apt-get?
[01:06] <jmedina> vi /etc/apt/sources.list
[01:31] <orudie> !latest
[01:36] <hikenboot> .config that works with ubuntu /debian preferably with ext4 lvm and software RAID1?  I can seem to get mine to boot with these things included so looking to try another config oh for a .29 kernel???
[01:40] <LiraNuna> uh
[01:41] <LiraNuna> I just found a security vulnerability in ubuntu's apache2
[01:41] <LiraNuna> denial of service...
[03:08] <a1fa_> yp
[03:09] <a1fa_> i am having a problem with netinstall
[03:11] <Anirban1987>  Can I install and run Firestarter for configuring iptables without having X-window env. installed in Ubuntu 9.04 server ?
[03:13] <pmatulis> Anirban1987: no
 sent 1 blk, 0 bytes in 1 s. 0 blk resent [26/06 21:13:56.078]
[03:14] <a1fa_> 30472 Request 2 not processed [26/06 21:13:56.141]
[03:14] <a1fa_> fucker is not downloading pxelinux
[03:15] <Anirban1987> pmatulis : Then how can I run firestarter ?
[03:15] <pmatulis> Anirban1987: install X
[03:16] <Anirban1987> pmatulis : What are the shell command to do that ?
[03:17] <pmatulis> Anirban1987: '$ sudo aptitude install ubuntu-desktop', but have you considered 'ufw'?
[03:18] <hikenboot> anyone know how one continues booting after manually lvm lvchange -a y into volume? this is at the initramfs prompt!
[03:18] <Anirban1987> pmatulis : Ya, currently I use it.
[03:18] <pmatulis> Anirban1987: obviously you're not satisfied
[03:19] <Anirban1987> pmatulis : ya, but installing ubuntu-desktop only to hav Firestarter is too much !
[03:19] <pmatulis> Anirban1987: correct
[03:20] <pmatulis> Anirban1987: guess you're going to be learning iptables...
[03:21] <Anirban1987> pmatulis : Unfortunately in the absense of Firestarter , I have to learn it now to properly run a server :(
[03:21] <pmatulis> Anirban1987: good luck, it's the dog's breakfast
[03:24] <pmatulis> Anirban1987: if your rules will be static, you can always set up firestarter on a separate X-based machine, configure the rules, steal the iptables rules, and then stuff them in your server
[03:25] <pmatulis> at least it may be a way to learn iptables
[03:35] <Anirban1987> pmatulis : Good Idea , another prob I am having : This msg is being displayed by phpmyadmin : Your PHP MySQL library version 5.0.75 differs from your MySQL server version 5.1.31. This may cause unpredictable behavior.
[03:37] <pmatulis> Anirban1987: sorry, can't help there
[03:38] <LiraNuna> Ubuntu server (as well as debian) is vulnerable to a recent DoS attack found in apache - here's a fix http://www.liranuna.com/securing-your-debian-server-against-slowloris/
[03:39] <LiraNuna> please oh please don't boot me thinking this is any kind of advertisement, this is real
[03:39] <LiraNuna> I even filed a security bug
[03:40] <MagicFab> LiraNuna, do you have the Launchpad bug URL ?
[03:41] <LiraNuna> it's private
[03:41] <LiraNuna> https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/392759
[03:42] <LiraNuna> I believe all security bugs are marked as private
[03:42] <LiraNuna> MagicFab, read my post and see for yourself, my server was vulnerable
[03:43]  * pmatulis pmatulis waves to MagicFab
[03:43] <pmatulis> blah
[03:47] <a1fa_> damn
[03:47] <a1fa_> anyone have Rackable Systems servers?
[03:59] <MagicFab> LiraNuna, your post didn't have any Ubuntu info, that's why I asked.
[04:00] <LiraNuna> MagicFab, I run ubuntu server, but it's compatible with debian, so I posted it as such
[04:01] <a1fa_> anyway to update generic intel bios though ubuntu?
[04:02] <MagicFab> LiraNuna, it's not exactly the same and as you may know - tx for pointing out the bug, because it's filed as security I am confident it will be looked into soonish.
[04:02] <LiraNuna> MagicFab, I hope so too, it took down my server in seconds
[04:02] <LiraNuna> worse thing is apache still runs so you don't even know
[04:02] <LiraNuna> you just think it's a really busy hour
[05:10] <methods> can i get /dev/tcp socket support in bash ?
[05:14] <genii> methods: get the ubuntu source of bash then compile with build options described here: https://bugs.launchpad.net/ubuntu/+source/bash/+bug/215034
[05:36] <wizardslovak> hello is anyone here?
[05:37] <wizardslovak> when i type sudo apt-get update it shows "failed to fetch httpd://.."
[05:43] <wizardslovak> noone here to help
[06:17] <peerless> Hi ppl .. i have a query
[06:17] <peerless> how to change the terminal name which appears in the shell ..
[06:18] <peerless> hope we have a environment variable for it..anyone could help me telling its name?>
[06:50] <jmarsden> peerless: The "terminal name"?  Can you give an example?  The hostname, maybe?
[06:50] <jmarsden> The bash environment variable PS1 can change your shell prompt in *many* ways...
[06:50] <jmarsden> But what do you mean by "terminal name"?
[06:51] <peerless> thats it thanks @jmarsden
[06:51] <jmarsden> So you can do PS1='\u@\h:\w\$ '  # for a fairly standard user@hostname:directory$
[07:04] <rags2> Smokeping was working fine for a few days until I added new targets to it and it started giving me permission errors..for /var/lib/smokeping..anyone face this problem?
[08:30] <kees> LiraNuna: you can unmark it private since it's a public issue
[08:30] <LiraNuna> kees, are you the module creator?
[08:31] <kees> what?
[08:31] <kees> i meant the slowloris bug
[08:32] <LiraNuna> yes, but someone told me that someone nicknamed Kees have made mod_antiloris
[08:32] <kees> security bugs start their life private, but you're prompted with the option to make them public
[08:32] <kees> not me
[08:32] <LiraNuna> ps. made public
[08:32] <LiraNuna> https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/392759
[08:32] <kees> excellent
[08:33] <LiraNuna> I advise people to install that
[08:33] <LiraNuna> there's gonna be a lot of script kiddies running this
[08:33] <LiraNuna> more here: http://www.liranuna.com/securing-your-debian-server-against-slowloris/
[08:38] <zavy> scappo ciao raga!
[09:24] <dalfz> what's the best way to give postfix access to /etc/sasldb2 from its /var/spool/postfix/etc chroot environment? i rather don't want to copy the file manually
[11:37] <AnAnt> Hello , is it true that ppl in Debian didn't yet agree on changing default dependancy on exim4 to default-mta ?
[11:38] <AnAnt> ie, that it is still a discussion ?
[11:52] <incorrect> AnAnt, ask debian people
[11:52] <AnAnt> ok
[13:30] <Bboy> Hi
[13:30] <Bboy> I can't install acpid pkg every time i try i get this err msg http://paste.ubuntu.com/204879/,, does anyone knows how 2 fix this? please
[13:31] <ivoks> starting acpid fails for some reason
[13:31] <Bboy> yes
[13:31] <Bboy> im on ubuntu-server 9.04
[13:31] <ivoks> try starting it manually; maybe you'll see where is the problem
[13:32] <Bboy> im trying 2 install ubuntu-desktop throu ssh by using aptitude
[13:33] <Bboy> but it seems that *-desktop is depndant on acpid
[13:33] <ivoks> well, try starting acpid manually
[13:33] <ivoks>  /etc/init.d/acpid start
[13:33] <ivoks> i see what you are tryinh
[13:33] <ivoks> and i don't know why are you on this channed
[13:33] <ivoks> channel
[13:34] <Bboy> i tried ubuntu channel
[13:34] <Bboy> some one talled me 2 try this channel
[13:34] <ivoks> -server means 'talking about development|using ubuntu-server'
[13:35] <Bboy> mmmmm sorry about that
[13:35] <ivoks> ahyway, try starting it manually
[13:35] <ivoks> grrr lots of typos today
[13:36] <ivoks> don't send private messages
[13:37] <Bboy> ok
[13:37] <Bboy> ~# /etc/init.d/acpid start
[13:37] <Bboy>  * Starting ACPI services...                                                                                acpid: can't open /proc/acpi/event: No such file or directory
[13:37] <ivoks> uname -a
[13:38] <Bboy> what do u mean by uname -a?
[13:38] <ivoks> give me the output of that command
[13:39] <ivoks> well?
[13:39] <ivoks> that command provides some info that's needed to help you
[13:40] <ivoks> like kernel version and arch
[13:42] <Bboy> acpid: can't open /proc/acpi/event: No such file or directory
[13:42] <Bboy> is this what u mean?
[13:42] <ivoks> no
[13:42] <ivoks> type 'uname -a' and hit enter
[13:43] <Bboy> <IP_ADDRESS>-grsec-xxxx-grs-ipv4-32 #5 SMP Wed Apr 1 13:09:49 UTC 2009 i686 GNU/Linux
[13:43] <ivoks> so, this is not ubuntu
[13:44] <ivoks> ubuntu doesn't have kernel named <IP_ADDRESS>-grsec-xxxx-grs-ipv4-32
[13:44] <ivoks> if you are using custom kernel, you are on your own
[13:44] <ivoks> i could just give you a hint
[13:44] <ivoks> you are missing acpi support in your kernel or you didn't load acpi modules
[13:45] <Nafallo> it might well be Ubuntu, but with a custom kernel :-)
[13:45] <Nafallo> just saying
[13:45] <ivoks> Nafallo: that makes it linux, not ubuntu :D
[13:45] <Bboy> when i login throu ssh using root it tells me it is ubuntu server 9.04 but it must that my service provider is missing up with the kernal
[13:45] <ivoks> 9.04 uses linux 2.6.28
[13:45] <Nafallo> ivoks: I disagree, but okay.
[13:46] <ivoks> Nafallo: well, it really isn't that important ;)
[13:46] <Nafallo> ivoks: agreed :-)
[13:46]  * ivoks just got corrupted ext3 on 10TB partition
[13:47] <Bboy> this is a rented server thro ovh data center in france
[13:47] <ivoks> should i shoot my self now or wait for natural death once fsck finishes?
[13:47] <Nafallo> ivoks: you should have used ext4. clearly.
[13:47] <ivoks> Nafallo: you mean, xfs
[13:48] <n0gear> ivoks: maybe spinrite might help?
[13:48] <Nafallo> ivoks: I actually meant ext4 :-)
[13:48] <ivoks> i don't trust ext4 that much yet
[13:48] <ivoks> i use in on my laptop, but not on servers... yet
[13:48] <Nafallo> ivoks: well... that's why I used ext4 as a troll, yes :-P
[13:48] <ivoks> anyway, that's 8.04, so ext4 wasn't an option
[13:49] <ivoks> n0gear: ?
[13:49] <ivoks> ah...
[13:49] <ivoks> spinrite
[13:49] <n0gear> Spinrite ... supposed to fix HDs pretty well
[13:49] <ivoks> no, i'll recover filesystem first
[13:49] <ivoks> spinrite is, afaik, raw reading data
[13:50] <ivoks> Bboy left
[13:51] <ivoks> well, it's not like i could help him; kernel doesn't support acpi
[14:17] <VSpike> Does anyone know of a webmail package that uses lighttpd, or if there's a way to use roundcube or squirrelmail with lighttpd?
[14:21] <ivoks> is there a reason why those tools don't work with other web servers?
[14:21] <ivoks> i mean... those are web apps; they should work with any web server
[14:26] <VSpike> ivoks: i think they would ... but they seem to be packaged to work with apache
[14:26] <ivoks> ?
[14:26] <VSpike> It would seem more sensible to try to package them against a virtual package "web server"
[14:27] <ivoks> Depends: dbconfig-common, debconf (>= 0.5) | debconf-2.0, apache2 | lighttpd | httpd
[14:27] <VSpike> ivoks: what was that from?
[14:27] <ivoks> apt-cache show roundcube-core
[14:28] <VSpike> Yeah, I see what you mean
[14:28] <ivoks> so, install lighttpd
[14:28] <ivoks> and it won't install other web servers
[14:30] <VSpike> ivoks: what do you make of this then? http://pastebin.com/m3af1bc6b
[14:31] <ivoks> probably php pulls apache in
[14:31] <ivoks> right
[14:31] <ivoks> Depends: libapache2-mod-php5 (>= 5.2.6.dfsg.1-3ubuntu4) | libapache2-mod-php5filter (>= 5.2.6.dfsg.1-3ubuntu4) | php5-cgi (>= 5.2.6.dfsg.1-3ubuntu4), php5-common (>= 5.2.6.dfsg.1-3ubuntu4)
[14:31] <ivoks> so, install php5-cgi first
[14:33] <VSpike> ivoks: you're a star.. thanks!
[16:57] <ivoks> in days of disks with more than 1TB, how sane is to provide support for ext2 and ext3? :((
[16:57] <ivoks> i will not use ext3 any more
[17:02] <maswan> If you partition, like is sensible for servers, ext3 is fine for OS but not data.
[17:03] <ivoks> i'm fscking 10TB ext3
[17:05] <RoAkSoAx> ivoks, how many days is gonna take you :)
[17:05] <ivoks> i hope less than 2
[17:05] <ivoks> cause on monday, that data should be available to the users
[17:05] <RoAkSoAx> that's a lot
[17:10] <ivoks> oh, yeah...
[17:10] <ivoks> and the next noebel prize should go to the author of testdisk
[17:10] <RoAkSoAx> hahah
[17:11] <ivoks> for humanity
[17:11] <ivoks> that guy saves lives
[17:14] <RoAkSoAx> haha
[17:52] <ropetin> Afternoon all, anyone an iptables expert? :)
[17:54] <ivoks> not an expert, but could try helping
[17:55] <ropetin> Thanks ivoks!  I'm looking for a way to duplicate traffic from one nic to another.  I.e. traffic comes in on eth0 and does whatever it normally does) but also duplicates it out to eth1, for processing by another system.  I've found an iptables patch that seems to offer a similar function, but nothing default
[17:56] <ivoks> uh
[17:56] <ropetin> Kind of like bridging it, but not bridging it as well :)
[17:57] <ivoks> i'm not sure you could... clone a package
[17:57] <ivoks> you could redirect it...
[17:58] <RoAkSoAx> ivoks, condor contains a debian directory in src/packaging/debian. Should I base my work on that or I should pay attention to it?
[17:58] <ropetin> Redirect?  Sounds like it could work
[17:58] <ivoks> have you looked at ifenslave?
[17:58] <ropetin> I haven't, but  Iwill now you've suggested it, thanks!
[17:58] <ivoks> redirect means that it won't be available on the first interface
[17:58] <ropetin> Could I redirect it to multiple ports do you think?
[17:58] <ivoks> RoAkSoAx: oh, that's nice... i haven't looked at it :/
[17:59] <ivoks> ropetin: sure; but you just want to forward all traffice from eth0 to eth1?
[17:59] <ivoks> that's not duplicating
[17:59] <ivoks> that's moving
[18:00] <RoAkSoAx> ivoks, what should I do then?
[18:00] <ivoks> RoAkSoAx: use that
[18:00] <ropetin> Hmmmm, lemme think on this more, I'll get back to you when I know what I really want to do
[18:00] <ivoks> RoAkSoAx: check if there's ITP in debian for condor
[18:00] <ropetin> Thanks!
[18:01] <RoAkSoAx> ivoks, ITP ?
[18:01] <ivoks> intention to package
[18:01] <ivoks> people that would like to package something for debian, report ITP 'bugs'
[18:02] <RoAkSoAx> ivoks, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=233482
[18:03] <RoAkSoAx> ivoks, though it is a bit old
[18:04] <ivoks> RoAkSoAx: look at last email
[18:04] <ivoks> there are some incompatibilities with debian
[18:04] <ivoks> RoAkSoAx: leave it; work on something else :)
[18:05] <RoAkSoAx> ivoks, Ok, I guess I'll work on cobbler
[18:05] <RoAkSoAx> soren, ping!
[18:05] <ivoks> yep
[18:08] <iamslango> hey everyone
[18:09] <iamslango> so here is the deal. I like to keep everything (configurations, data, docroot) in a folder heirarchy under /web/
[18:10] <iamslango> how do i tell Apache to look for it's configuration there? does that require a re-compile?
[18:12] <iamslango> one thought I had was to simply move the apache2 configurations to that directory, and include apache2.conf or httpd.conf or whatever the default is from the default config file. (the default config file would have nothing in it other than the include)
[18:12] <ivoks> configuration for apache? why?
[18:12] <iamslango> ivoks, why what?
[18:13] <ivoks> you could add a file in /etc/apache2/conf.d/
[18:13] <ivoks> with this line:
[18:13] <iamslango> ivoks, I don't just want custom configuration... that's part of it
[18:13] <ivoks> Include /web/configuration/*.conf
[18:13] <iamslango> but what I want is a completely working set of apache configs in /web/conf/apache/
[18:14] <iamslango> I have multiple machines, and having all of my configs, data etc in one place is convenient for getting a uniform environment running across all machines
[18:14] <ivoks> mount bind?
[18:14] <ivoks> so, /web is NFS?
[18:14] <ivoks> or some sort of shared filesystem
[18:14] <iamslango> ivoks, no
[18:15] <iamslango> just a regular directory
[18:15] <iamslango> but being able to tar up /web/ in one shot, and drop it onto my other machines is convenient
[18:15] <ivoks> well, create /web/conf
[18:15] <ivoks> copy all from /etc/apache2/* to /web/conf
[18:16] <ivoks> bind mount /etc/apache2/ to /web/conf
[18:16] <ivoks> and that's it
[18:16] <iamslango> hmm, I guess that's a pretty reasonable plan
[18:17] <iamslango> though won't I have to worry about apt-get changing or creating files there?
[18:17] <ivoks> create a script that would umount /etc/apache2/, do an upgrade and then mount again
[18:18] <iamslango> reasonable
[18:19] <ivoks> i've never tested this, so it might not work
[18:19] <ivoks> but atm, i don't see why it wouldn't
[18:20] <ivoks> but...
[18:21] <ivoks> i also have need for my configuration
[18:21] <ivoks> and i just drop mu conf file in /etc/apache2/conf.d
[18:21] <ivoks> everything you configure there will override what's defined in apache2.conf
[18:22] <ivoks> or add a file that will include stuf from /web/conf/*
[18:23] <ivoks> if you go with a script that will umount and mount, be sure to stop apache before umounting
[18:25] <BigJB> if you were going to write a script for that why not just write a script that checks the conf file in etc/apache2 against the one in your shared directory and update if necessary?
[19:02] <giovani> iamslango: you need a configuration/change management system
[19:02] <giovani> if you need to manage configs across a lot of boxes
[19:02] <giovani> not ugly hacks :)
[19:02] <iamslango> giovani, it's not really a lot
[19:02] <iamslango> 3 or 4
[19:03] <giovani> but they all have identical configs?
[19:03] <iamslango> ideally
[19:03] <iamslango> they aren't the same machine
[19:03] <giovani> is this a load-balanced setup?
[19:03] <iamslango> not even similar distros
[19:03] <iamslango> giovani, nope
[19:03] <giovani> then how are the configs identical?
[19:04] <iamslango> just 2 development workstations, a testing server and a production server
[19:04] <iamslango> giovani, apache configs
[19:04] <iamslango> not system configs
[19:04] <ivoks> omg
[19:04] <giovani> right, I understand that -- but, dev stuff shouldn't be identical to production and testing stuff
[19:04] <ivoks> configs for apaches are different accros distributions
[19:04] <ivoks> you probably have different apache versions
[19:04] <giovani> that too
[19:05] <iamslango> ivoks, no, I take great pains to keep versions in sync
[19:05] <giovani> in sync?
[19:05] <giovani> heh
[19:05] <ivoks> still, they aren't compiled the same
[19:05] <giovani> why would dev and testing machines be on different distros than the production?
[19:05] <iamslango> ivoks, how do you know?
[19:05] <giovani> that's so bizarre
[19:05] <giovani> iamslango: because every distro does so by hand, with their own patches, and modifications
[19:06] <ivoks> iamslango: for start, fedora/redhat calls it httpd, debian/ubuntu apache
[19:06] <iamslango> giovani, the workstations are different
[19:06] <iamslango> ivoks, that's a trivial difference
[19:06] <giovani> iamslango: if they're "dev workstations" -- then they should be the same
[19:06] <ivoks> iamslango: not
[19:06] <giovani> clearly they're running the webserver ... why?
[19:07] <ivoks> iamslango: one has LockFile /var/lock/apache2/accept.lock and the other LockFile /var/lock/httpd/accept.lock
[19:07] <ivoks> and let's not get into /var/log
[19:07] <ivoks> or /usr/share
[19:07] <giovani> this is what config management is for
[19:07] <ivoks> so, it's not that trivial
[19:07] <giovani> and this is why blatant copying of configs is improper
[19:08] <ivoks> listen to giovani
[19:08] <ivoks> or... compile apache on your own
[19:08] <giovani> I realize the temptation to simply copy files around
[19:08] <giovani> it's simple when you've only got a few boxes
[19:08] <iamslango> ivoks, I do compile my own apache on my archlinux machines
[19:08] <iamslango> and my own PHP
[19:08] <iamslango> in fact, everything is archlinux
[19:08] <giovani> but, it's really not scalable, and it's not going to work well in your situation either -- nor do I think you even want highly similar configs across your dev and production boxes
[19:08] <iamslango> except this ubuntu box
[19:09] <iamslango> and I don't really care enough about this machine to do anything complex
[19:09] <ivoks> then put archlinux instead of ubuntu
[19:09] <ivoks> and then share config files
[19:10] <iamslango> anyway, how I set up my personal blog isn't really worth this much debate
[19:11] <giovani> your personal blog has a production, testing, and 2 dev boxes?
[19:12] <ivoks> and cause of one web site you want to share configs
[19:12] <ivoks> and you compile apaches?
[19:12] <ivoks> where one web site = blog
[19:13] <ivoks> it's great if you are going to learn something, but don't get carried away...
[19:16] <iamslango> ivoks, the dev boxes aren't servers... perhaps I should have been clear
[19:16] <iamslango> they are workstations for development
[19:16] <iamslango> not servers
[19:16] <iamslango> the testing server is just on my local network
[19:16] <iamslango> I may or may not actually use it
[19:16] <ivoks> so, workstations don't have apache running?
[19:18] <giovani> if they run apache, they're "servers" for the intents and purposes here
[19:19] <giovani> brb
[19:22] <iamslango> well, right, they are servers in the sense that they run an apache instance
[19:23] <iamslango> but they aren't solely webservers
[19:23] <iamslango> they are workstations which happen to run a server
[19:24] <ivoks> so, in the light of our discussion, they are servers
[19:25] <ivoks> and you want to share configuration for apache across couple of servers with two distributions
[19:26] <ivoks> in this discussion, we don't care if you are running postfix or firefox side by side with apache
[19:29] <iamslango> ivoks, right
[19:29] <iamslango> but these aren't mission-critical things here
[19:29] <iamslango> if there are some rough edges, so be it
[19:29] <iamslango> sure, I'll probably have to make adjustments from one machine to the next
[19:30] <iamslango> the benefit is in having everything in a uniform location on all machines
[19:30] <iamslango> I know exactly where to look for my server configs, my docroots, my mysql database tables and so on
[19:31] <ivoks> and otherwise, you don't?
[19:31] <ivoks> i, to some extent, understand what you are trying to achive
[19:31] <iamslango> ivoks, keeping everything I need to worry about under one directory structure helps me stay organized and simplifies things
[19:32] <iamslango> keeping a similar set of configuration files (ie. picking a standard way of organizing my apache configuration) also makes my life easier
[19:32] <ivoks> i haven't used non-debian distributions for a bit over decade
[19:33] <giovani> heh
[19:33] <giovani> I wish I could say the same
[19:33] <iamslango> even if there are changes, having a standard of all vhosts in one file, or 1 vhost per file makes things simple
[19:33] <ivoks> so i don't know exactly how others (except for redhat, solaris and freebsd) handle that
[19:33] <ivoks> but debian has very nice fature, called sites-available|enabled and conf.d
[19:33] <iamslango> it's not so much about copying identical configurations
[19:33] <ivoks> and everything you are talking about know, fits into conf.d
[19:33] <iamslango> just having a standard organization to my configurations and data
[19:34] <iamslango> ivoks, that can be done on every distribution
[19:34] <ivoks> so, you are reinventing sites-available :D
[19:34] <ivoks> sure it can
[19:34] <iamslango> you just include sites-available/*
[19:34] <ivoks> do it on archlinux and just copy configuration to sites-available
[19:34] <ivoks> and enable it, or whatelse
[19:34] <iamslango> ivoks, that's what I'm doing
[19:35] <iamslango> something similar
[19:35] <iamslango> but I still like the idea of keeping it all separate from the rest of the system
[19:35] <iamslango> outside of /etc/
[19:35] <iamslango> in its own heirarchy
[19:36] <giovani> heh
[19:36] <iamslango> that way i don't have to remember if my apache configuration is in /etc/apache2 on ubuntu, but in /etc/httpd/ on archlinux and in /opt/local/apache2/ on OS X
[19:37] <giovani> right ... you only have to remember that exact same stuff for the 100 other apps on your box
[19:37] <giovani> this is so pointless
[19:37] <giovani> this is what config management is FOR
[19:37] <giovani> to take all of this away from memory
[19:37] <giovani> and automate it
[19:37] <giovani> for 20 different platforms
[19:37] <giovani> automatically
[19:38] <ivoks> look at puppet and that other thing
[19:38] <giovani> cfengine, puppet, the list goes on
[19:38] <ivoks> or, compile your own apache
[19:39] <iamslango> I'll look into puppet
[19:39] <iamslango> anyway, it's time for me to shwoer
[19:39] <giovani> well look into all of them
[19:39] <giovani> not just one
[19:40] <iamslango> will do
[19:40] <iamslango> thanks for the recommendation
[19:40] <giovani> I made this recommendation about 30 minutes ag
[19:40] <giovani> ago*
[19:41] <giovani> we could've all saved time if you took it then
[19:41] <ivoks> hehe
[19:41] <ivoks> you haven't said the name of the tool
[19:41] <ivoks> nothing too google for :)
[19:41] <ivoks> bah, to
[19:41] <giovani> I said "config management"
[19:41] <giovani> I don't encourage single tools
[19:41] <iamslango> giovani, you're more than a little bit condescending about things
[19:42] <iamslango> that's why I ignored you from the beginning.
[19:42] <iamslango> anyway, I have a baseball game to get to
[19:42] <ivoks> giovani: hahahahaha
[19:43] <ivoks> giovani: that's what you get when you try to help someone
[19:43] <giovani> indeed -- he thought he knew best, couldn't do much to convince him otherwise
[19:44] <ivoks> i felt that too
[19:44] <ivoks> it was like 'nah, i have to work this ubuntu too, so i'll ask those newbies at ubuntu-server''
[19:44] <giovani> heh
[19:45] <giovani> I just don't understand the point of asking for help when you don't want it
[19:45] <giovani> if you feel like you know best ... then go do it that way, and don't complain
[19:46] <ivoks> people don't know how to do it
[19:47] <ivoks> so, they want to found out how to do something by (missing english word) the product you use
[19:47] <ivoks> :D
[20:54] <PhyloGenesis> I've been trying to get subversion installed on my newly set up server, but I think I screwed up the configuration somewhere along the line.  I followed tutorials on setting up the server with Apache 2.0, dav_svn or something like that.  I would like to remove SVN completely and set it up fresh, will someone help me do that?
[21:00] <giovani> PhyloGenesis: undo the steps you did
[21:00] <PhyloGenesis> One specific question I have is that the file etc/apache2/mods-available/dav_svn.conf says, "Note, a literal /svn should NOT exist in your document root." but it doesn't say anything about where it SHOULD go.
[21:00] <giovani> i.e. uninstall things you installed, remove files you added, and rollback modifications to files you made
[21:01] <giovani> PhyloGenesis: it's probably defined in that .conf
[21:01] <PhyloGenesis> The next line is:  <Location /svn> (which isn't a comment line)
[21:02] <PhyloGenesis> Nevermind that, I'll ask when I better know what I'm talking about.
[21:03] <_ruben> hmm .. seems the only way to config multiple ipv6 addresses on a nic is using "up ip -6 addr add ...." .. kinda nasty
[21:06] <giovani> PhyloGenesis: so I'm unclear on what you're asking ... it's clearly doing what I said -- defining /svn in that file
[21:07] <giovani> _ruben: how is that more nasty than aliases?
[21:07] <giovani> I find it much less-so
[21:08] <PhyloGenesis> giovani:  Why is it doing that if it explicitly says that I SHOULDN'T have one in my document root?
[21:08] <giovani> because your documentroot is a totally different setting, which does different things?
[21:09] <PhyloGenesis> so it isn't putting it there?
[21:09] <giovani> ... no
[21:09] <PhyloGenesis> ok
[21:09] <giovani> I suggest you read some of the apache documentation before you're responsible for running a webserver
[21:10] <PhyloGenesis> Nobody else is relying on it, so no worries.
[21:10] <giovani> ok, well best to read it before you go configuring things that require apache
[21:11] <ivoks> so, what's the issue?
[21:11] <ivoks> /etc/apache2/conf.d/webdav
[21:11] <ivoks> <Location /webdav>
[21:11] <ivoks> DAV On

[21:12] <giovani> there isn't a problem ...
[21:12] <ivoks> DAVLockDB /var/lock/apache2/dav_lock
[21:12] <PhyloGenesis> I don't have that first file
[21:12] <ivoks> Alias /webdav /path/to/the/whatever
[21:12] <ivoks> of course you don't
[21:12] <giovani> PhyloGenesis: you don't have what file?
[21:12] <ivoks> create it
[21:13] <PhyloGenesis> I think first I should remove and undo things I did when setting it up
[21:14] <PhyloGenesis> but what exactly to undo I don't know
[21:14] <PhyloGenesis> I uninstalled subversion
[21:14] <PhyloGenesis> removed /var/svn
[21:14] <giovani3> well you're the only one who knows what you did
[21:14] <giovani3> we certainly don't
[21:14] <ivoks> oh, svn
[21:14] <ivoks> not webdav :)
[21:14] <giovani3> ivoks: I was wondering why you were pasting other stuff
[21:14] <ivoks> probably the same, though... :)
[21:14] <ivoks> i wasn't... i was writting :D
[21:15] <giovani3> not even close :)
[21:15] <PhyloGenesis> That's why I was wondering how I can just restart all the stuff. (except the actual server installation)
[21:15] <giovani3> PhyloGenesis: you can't
[21:15] <giovani3> you need to know what you did
[21:15] <giovani3> to undo it
[21:15] <giovani3> for obvious reasons
[21:16] <ivoks> well, for svn you need webdav
[21:16] <PhyloGenesis> I can't just remove Apache2, SVN, and dav_svn?
[21:16] <hikenboot> per someones suggestion i checked for ext4 support in my custom kernel it was not supported am I best supporting it by using it as a kernel module or building it into the kernel for use as xen dom0?
[21:16] <giovani3> PhyloGenesis: of course you can -- you can undo anything you've done
[21:16] <PhyloGenesis> It was more the setting up I was looking for help with
[21:16] <giovani3> but I don't know that that's the extent of what you did ...
[21:16] <ivoks> i'm just tired
[21:16] <ivoks> good night
[21:22] <PhyloGenesis> giovani3:  Okay, please allow me to start again here.  (I removed apache2 and subversion.)  Can you point me to a good tutorial to installing Apache2 and subversion for Ubuntu Server 9.04?
[21:22] <giovani3> no, I can't
[21:39] <_ruben> giovani3: aliases sure aint ideal either .. a nice solution would be to support multiple "address" lines per interface
[21:39] <giovani3> _ruben: "lines"? I don't follow what the issue is
[21:39] <giovani3> you are adding multiple addresses now
[21:41] <_ruben> giovani3: its mainly a cosmetic issue i guess .. being able to use the 'address' directive more than once per interface looks "cleaner" and adding additional ips using up ip ad add...
[21:42] <giovani3> I'd prefer developers spend less time on cosmetics when it comes to servers
[21:42] <giovani3> and more time on security, stability, and features
[21:42] <_ruben> true
[21:43] <giovani3> I'm not sure how this can even be called an issue -- it's straightforward operationally to me
[21:50] <Fobia> Hello. I'm running Ubuntu under VMware and I have a problem. I'm using a router and my local IP from Windows XP is <IP_ADDRESS> and I want this one to be on Ubuntu too. How can I do that, please?


[05:22] <pleia2> nhandler: that's wonderful! Congrats :)
[12:38] <jbermudes> If anyone's still wondering, I know people that commute from Burbank to Pasadena via the 134. It connects to the 210
[20:20] <philipballew> pleia2, pm?
[20:27] <pleia2> philipballew: sure


[06:05] <infinity> Querying Debian BTS for reports on libprelude (source)...
[06:05] <infinity> Unable to connect to Debian BTS (error: "TypeError("fixer() missing 1 required positional argument: 'check_hostname'",)"); continue [y|N|?]?
[06:05] <infinity> doko, mwhudson: ^-- Does reportbug need a merge/fix for newer python bits?
[06:31] <doko> infinity: where do you see that?
[07:25] <mwhudson> infinity: well isn't that great
[08:34] <doko> coreycb: please could you have a look at the murano sync/merge and look at the autopkg test failures?
[08:37] <doko> coreycb: same for ironic, libcloud
[08:37] <doko> jamespage: ^^^
[10:08] <handsome_feng> Hi, Does anyone know how to unpack and repack the initrd? cpio -idv < ../initrd.img only got a AuthenticAMD.bin; and 'dd if=initrd bs=xxxx | lz4 | cpio -tdv | head' didn't work too.
[10:15] <TJ-> handsome_feng: "unmkinitramfs"
[10:15] <seb128> handsome_feng, unsure if that's still current/valid, but https://wiki.ubuntu.com/CustomizeLiveInitrd
[10:15] <TJ-> handsome_feng: you're dealing with an image that has an early-prefix for microcode on it
[10:19] <handsome_feng> TJ-, seb128 : Thanks! unmkinitramfs works and BTW the wiki page is out of date :)
[10:20] <seb128> handsome_feng, would be nice to update it if you have some free cycle for that :)
[10:21] <TJ-> seb128: I've been waiting to do some Wiki editing but it seems to take an age to get approved to the wiki editors team
[10:21] <TJ-> by the time it gets approved I'll have forgotten what it was I intended to edit :)
[10:21] <seb128> that seems suboptimal :/
[10:22] <seb128> unsure who can approve wiki editor nowadays
[10:22] <TJ-> oh yeah - malware at the target of some links
[10:22] <seb128> ?
[10:23] <TJ-> domains expire/rot, get taken over by operators hosting malware payloads
[10:23] <seb128> popey, ^ you might know who is approving wiki-editor membership?
[10:23] <seb128> TJ-, right, I think I lack some context, why are you talking about that now?
[10:24] <TJ-> seb128: that's reminding me what I wanted to edit to fix; a user reported it in #ubuntu a couple weeks ago
[10:24] <seb128> TJ-, I was just saying that I'm unsure who is reviewing the member-ship requests to approve them, so who to ping to help you getting edit rights
[10:24] <seb128> let's see if popey can help
[10:26] <popey> seb128: i can do that
[10:26] <seb128> popey, hey, ah nice :)
[10:26] <popey> done
[10:26] <seb128> thx!
[10:26] <seb128> TJ-, ^
[10:27]  * TJ- does a happy dance :)
[10:27] <handsome_feng> seb128: Sure, I will do it when I have time. :)
[12:35] <rbasak> vorlon: the git-ubuntu importer service won't restart because it is running on Xenial and using the ubuntu-keyring package, and the archive now has a signature for which it doesn't have a public key. I guess there are currently no plans to SRU updates to this package?
[12:36] <rbasak> I'm not sure how to handle this general case.
[12:36] <rbasak> ISTR there was some reason git-ubuntu needed every key used in Debian and Ubuntu ever.
[12:37] <rbasak> But I don't want to have to release upgrade the git-ubuntu importer service host every time there's a key rotation.
[12:55] <coreycb> doko: jamespage: i'll take a look at those.
[12:57] <coreycb> vorlon: thanks and no problem on the delay. there is charm support going on for octavia that ramped up recently and shined light on octavia-dashboard.
[13:07] <rbasak> "ISTR there was some reason git-ubuntu needed every key used in Debian and Ubuntu ever." -> Now I think about it, it might just be for all supported releases.
[13:36] <rbasak> ahasenack, cpaelzer: may I have your opinion please on my proposed approach in bug 1801725? This is for an upcoming fix to git-ubuntu, without which the importer service is down.
[13:43] <ahasenack> rbasak: wasn't something similar done already in e1b4cd8c9c488a0403f6efecd2cdf3748aa85963 for when bionic was released?
[13:43] <ahasenack> it links to https://bugs.launchpad.net/bugs/1752656
[13:43] <rbasak> ahasenack: aha. Perfect. Thanks!
[13:43] <rbasak> I guess I'm bumping those up then.
[13:44] <ahasenack> +1
[13:54] <xnox> rbasak, ahasenack - please do not duplicate work w.r.t. 2018 key update only. irrespective of the acient bug asking for effectivly `sru everything all the time`
[13:55] <xnox> rbasak, also your guess is wrong =)
[13:55] <xnox> however, i was not planning to go further than bionic. because debootstrap in xenial is not good enough to bootstrap disco.
[13:56] <xnox> commented on https://bugs.launchpad.net/usd-importer/+bug/1801725
[13:56] <xnox> rbasak, ahasenack - also it should be normal for only one signature out of the two valid.... that's why we have dual signing.
[13:58] <ahasenack> xnox: gpgv doesn't like it, exits status 2
[13:58] <rbasak> xnox: "Thus imho this is a bug in the importer if it requires all keys." -> it's a problem with gpgv then.
[13:58] <rbasak> (or a feature request in gpgv at least)
[13:59] <xnox> rbasak, ahasenack - do you have the full cmdline you execute? and/or where is this code at?
[13:59] <xnox> i believe we managed to fix this right; using gpgv; for e.g. ubuntu-release-upgrader
[14:00] <rbasak> xnox: https://git.launchpad.net/usd-importer/tree/gitubuntu/apt_repo.py#n85
[14:01] <xnox> rbasak, ahasenack - gpgv should be able to return signed output, which should be trustworthy, irrespective of errorcodes. Cause full untrusted stuff should return nothing in stdout. Or something along those lines.
[14:01] <xnox> thanks, let me check that out.
[14:01] <rbasak> xnox: and yeah, it's a wheel reinvention. Unfortuantely I couldn't find any library code that did this.
[14:01] <xnox> there is no library for gpg stuff, it sucks.
[14:02] <xnox> and the C embeded netgpg library i found in netbsd is very bad - leaky and not memory safe, thus one is stuck forking to gpg(v)
[14:03] <xnox> rbasak, love the comments there
[14:05] <rbasak> Thanks
[14:06] <rbasak> xnox: so the gpgv manpage (in Xenial at least) says: "The program returns 0 if everything is fine, 1 if at least one signature  was  bad,  and  other error codes for fatal errors."
[14:06] <xnox> yeah
[14:06] <rbasak> xnox: that makes me reluctant to treat non-zero as anything but "everything unverified".
[14:19] <ahasenack> rbasak: do you have gpgv complaining about trustedkeys.kbx too? https://pastebin.ubuntu.com/p/3RPK3F3MxT/
[14:19] <ahasenack> I got that on bionic
[14:20] <ahasenack> I do have the key 3B4FE6ACC0B21F32, just not 871920D1991BC93C
[14:20] <ahasenack> gpg (not gpgv) confirms that, and validates the signature made by 3B4FE6ACC0B21F32
[14:22] <rbasak> ahasenack: no - I'm using --keyring= which I think overrides the default of looking in your ~/.gnupg
[14:22] <ahasenack> anyway passing it the right file via --keyring still returns 2, even though it then verifies one signature correctly
[14:23] <ahasenack> so "no public key" is treated more seriously than "invalid signature" perhaps
[14:24] <xnox> dunno, it seems to me that gpgv is completely broken. as it outputs cleartext, irrespective of signature validity. E.g. i clearsigned something with my own key; validating against archive-keyring; fails to validate any input, yet still spits out output.
[14:24] <xnox> not having any more luck with gpg --decrypt
[14:25] <cjwatson> no library> gpgme exists
[14:25] <cjwatson> (not *necessarily* recommending it, but in some contexts it can be helpful)
[14:25] <rbasak> cjwatson: I meant a library to verify the apt repository
[14:26] <cjwatson> I was replying to
[14:26] <cjwatson> 14:01 <xnox> there is no library for gpg stuff, it sucks.
[14:26] <rbasak> Ah
[14:27] <xnox> well, i do know about gpgme, but yeah i wouldn't call it a `useful` library =) cause it also does fork to gpg. So far i found forking gpg/gpgv by yourself easier.
[14:27] <xnox> and the netpgp was done in the context of no-forking allowed (for pid1)
[14:27] <xnox> granted, thankfully, never released that code.
[14:27] <xnox> the go openpgp library is quite good, for these things.
[14:28] <xnox> but it is in golang.
[14:36] <xnox> hm apt-key verify is just as broken.
[14:38] <Faux> It so is.
[14:41] <infinity> doko, mwhudson: I got that error from reportbug when running 'submittodebian' on disco.
[15:06] <xnox> juliank, how does apt deal with multi-signed apt archives? because e.g. apt-key verify isn't doing what i need/want. Or apt code parses the status-fd stuff?
[15:10] <xnox> juliank, i wonder if i can (re)use /usr/lib/apt/methods/gpgv somehow
[15:28] <TJ-> xnox: how much trouble do you want to go to? Because I've just tested a method locally of splitting the 2 signatures off, then reconstructing with 1 at a time, so gpgv can return 0 if 1 matches (so you'd just loop over each signature).
[15:29] <xnox> TJ-, well, i like the logic that is performed by /usr/lib/apt/methods/gpgv already and it matches what apt itself does.
[15:29] <juliank> xnox: yes, it does parsing, and maybe
[15:29] <juliank> I think the logic is in the library
[15:29] <xnox> TJ-, i wish that to be exposed, in some user-friendly format, perhaps injected to be used as the backend for $ apt-key verify
[15:30] <xnox> juliank, yeap, found it. It parses the logger/status-fd and correctly counts things as we need/want.
[15:30] <xnox> TJ-, ideally i would not want to do signature splitting. As parsing openpgp packets is error prone =/
[15:31] <xnox> TJ-, also imho gpgv in these cases should be returning error code 1, not 2.
[15:31] <xnox> TJ-, i think i will file a gpg/gpgv bug; and also will file an apt bug, cause imho standard ubuntu system should have a gpgv like util out of the box for easy apt-key verification of stuff.
[15:32] <xnox> TJ-, if you pastebin your signature splitting code that should be doable too.
[15:32] <xnox> doable/nice
[15:33] <xnox> or update all the ubuntu-keyring everywhere....
[15:33] <juliank> xnox: you could try to use apt-helper Download-File gpgv:$path too
[15:33] <juliank> Sans upper case
[15:33] <juliank> And with a destination filename
[15:33] <xnox> juliank, oooooh
[15:33] <juliank> I'm not sure what happens, but it's worth trying
[15:34] <xnox> juliank, i didn't find apt-helper yet =) i think this might be what i need.
[15:34] <juliank> /usr/lib/apt
[15:34] <TJ-> xnox: yes, I agree about returning 1 not 2
[15:34] <xnox> juliank, cause by-hand Acquire-URI commands into the stdin of gpgv method were doing the right thing for me.
[15:34] <xnox> juliank, TJ- lunch first, then bugs.
[15:35] <TJ-> xnox: I've 1 last bit to fix-up, figuring out the CRC algorithm used on the signature block :) ... I used gpgsplit to break out the signatures
[17:09] <TJ-> xnox: I give up - no easy way with limited tooling to recreate the PGP signature CRC (and gpgv cannot be told --ignore-crc-error as gpg can)
[17:10] <xnox> =(
[17:10] <xnox> TJ-, parsing status-fd, and/or using the apt's gpgv method imho is the way to go.
[17:10] <xnox> this shall be the master bug to track this: https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/1801762
[17:10] <TJ-> I fed the crc32 poly and init values into jacksum to recreate, but jacksum is quite heavy (being Java)
[17:47] <juliank> xnox: did you try the helper, does it work? /me curious
[17:48] <xnox> juliank, tried. did not do what i wanted =/ it either `downloads` files without any verification, or fails.
[17:48] <xnox> juliank, maybe i'm not using the right syntax.
[17:48] <xnox> juliank, timed-out trying to work out what it is doing. was going to strace it next.
[17:49] <xnox> maybe i needed to something like gpgv+file:// ?!
[17:54] <juliank> xnox: FWIW, one of src/dest is the keys, the other the data to check (in case of clearsigned, both are the same)
[17:56] <juliank> I think the destination is the key file
[17:56] <juliank> s/key/sig
[17:59]  * juliank disappears again, enough screen time for now :(
[18:20] <TJ-> xnox: I've got a script that works - wraps gpgv. Any good to you? http://iam.tj/projects/ubuntu/gpgv-aptkeys
[18:21] <TJ-> xnox: grr, sent you the symlink version. Use this: http://iam.tj/projects/ubuntu/gpgv-multisig
[19:01] <rbasak> !dmb-ping
[19:18] <slashd> o/
[19:18] <slashd> sorry we changed hours here
[19:42] <tsimonq2> Hi
[19:50] <infinity> coreycb: That ironic update also claims to require python-scciclient>=0.8.0 ... we only have 0.6.1
[19:51] <infinity> coreycb: Similar problem in cosmic, mind you, where it wanted 0.7.2 ..
[19:53] <infinity> coreycb: Might want to fix both those issues.
[19:54] <coreycb> infinity: ok will take a look, thanks for catching that
[19:55] <infinity> coreycb: The cosmic reqs might be a lie (but worth investigating if you need to fix something there or update scciclient or whatever), but the disco one looks legit.  The do_async flag didn't exist before 8.0
[19:57] <coreycb> infinity: can you reject that? I'd like to run dep8 tests and do this via bileto.
[19:59] <infinity> coreycb: Done.
[19:59] <coreycb> infinity: thanks