[00:00] <oly562> lol
[00:00] <oly562> none is better than the other
[00:00] <owh> oly562: No, the problem is that you continued after an error happened.
[00:01] <owh> oly562: You noticed that there was more than one work-around?
[00:01] <oly562> not really owh
[00:02] <oly562> no. i havent
[00:02] <hads> dpkg works
[00:03] <oly562> i noticed there are errors also with cpan and perl
[00:03] <oly562> cant even launch cpan now
[00:04] <oly562> wierd, when trying to load alien it synap pointed to cdrom when usually it goes to universe or main
[00:04] <oly562> still getting used to sources with ubuntu and synap
[00:05] <oly562> by the way, xaos runs fine. its just that now i cant load new progs w/o errors, let along kernel upgrades
[00:05] <oly562> when its time to that is
[00:05] <oly562> owh:  what did you see as other workround?
[00:05] <oly562> thanks
[00:06] <hads> Mixing packages, rpms, cpan etc. is a good way to break things
[00:06] <oly562> you referring to Errno.pm?
[00:06] <oly562> yah agrees
[00:07] <oly562> i was going to take rpm with alien and convert adobereader.rpm to .deb, since thier site consistantly doesnt let us download the .deb
[00:07] <oly562> i knew i should have used a zigzag
[00:07] <oly562> shrugs
[00:08] <oly562> so people, if this was your box, with the pastebins i gave out, what you would do first? thanks "_
[00:08] <oly562> :)
[00:11] <oly562> if you dont know, thats ok, ill figure it out eventually, just thought i would give you guys a shot
[00:12] <owh> oly562: I'd fix the thing that broke first.
[00:14] <hads> Remove the stuff you installed that isn't from official repositories.
[00:37] <MatBoy> wow, I have a ubuntu iscsi target on a celeron D laptop with a 250GB sata drive attached using a conceptronic sata=> usb controller :P
[00:37] <MatBoy> how fun
[00:54] <usta> Jan 16 02:52:05 mail postfix/postdrop[6399]: warning: mail_queue_enter: create file maildrop/765735.6399: Permission denied
[00:54] <usta> can anyone help me how can i solve ?
[00:59] <MianoSM> usta: change the permissions
[01:00] <oly562> im back
[01:00] <oly562> hads: what do you mean, offical
[01:01] <oly562> how will i be able to tell the difference betw universe and 3rd party
[01:01] <oly562> whats the path , ill have a look
[01:02] <oly562>  /var/lib/dpkg/info?
[01:02] <xp_prg> anyone good at httpd.conf config on apache2 here?
[01:02] <oly562> yep xp_prg but i have my own issue at present
[01:02] <hads> I mean; Mixing offcial packages, randomly converting rpms, using cpan etc. is a good way to break things
[01:02] <hads> Stick to the official repositories if you don't want to break things.
[01:03] <oly562> i never mixed packages
[01:03] <oly562> i did nothing randomly
[01:03] <oly562> cpan was required by other programs
[01:03] <oly562> but i do agree, it will break things
[01:03] <oly562> also, offical packages didnt support my vid card
[01:03] <oly562> nor my wireless card
[01:03] <oly562> nor my sound devices
[01:04] <hads> I thought this was a server?
[01:04] <oly562> no linux has it all "offically"
[01:04] <oly562> dont be a dork hads. im not new to nix k. there is no difference between a server and desktop in linux
[01:04] <oly562> maybe to you, but not to me
[01:04] <hads> *shrug*
[01:04] <oly562> linux is linux period
[01:05] <oly562> its 3% of any distro
[01:05] <oly562> where everything is put and packages is all gnu to me
[01:05] <oly562> like i said, yum, rpm, dpkg, whatever, it all breaks at some point
[01:06] <oly562> i didnt break things, the package managers do
[01:06] <oly562> cpan doesnt break things, the programs that call on them do
[01:06] <oly562> good grief
[01:07] <oly562> server/desktop doesnt matter, you should know that
[01:07] <owh> oly562: We try very hard not to make apt break *ever*. If you can break it, only using apt, then you have found a bug.
[01:07] <oly562> thats that happened then, and typically that is always the case for me
[01:08] <oly562> like i said, im new to ubuntu and how it reports things, so forth
[01:08] <oly562> i been using apt-get the whole time, and still this happend. i know to use the "preferred" method per distro and flavor
[01:08] <oly562> still happend. so im here to try and figure it out
[01:08] <oly562> get some clues
[01:10] <oly562> i guess synap doesnt report enough information to figure out whats going on, right off the bat, rather, as usual, ill have to dig and dig, deep into the scripts and see whats going on, deal with the set -e stuff, see where ubuntu puts everything. i like it so far, but these problem is pissing me off.
[01:11] <oly562> yet again, i see no real reason to switch from distro to distro for just a few things, rather i should stick with what i know, and as for apt, its not that special. i actually prefer yum to it. maybe i was just used to it, but there really isnt much difference
[01:11] <oly562> yet another package manager lol
[01:12] <oly562> where are things stored on here
[01:12] <oly562> like info
[01:12] <oly562>  /var/lib...../info
[01:12] <oly562> thats a good directory to look in
[01:12] <oly562> postinst, and .prerm
[01:13] <oly562> so forth
[01:13] <oly562> these are what i mean by clues, this is what i mean, where you all look at first....
[01:13] <oly562> where does ldconfig fit in here
[01:15] <oly562> what the heck does this mean in var/log/message
[01:15] <oly562> Jan 15 15:51:14 pluto -- MARK --
[01:15] <oly562> Jan 15 16:11:14 pluto -- MARK --
[01:15] <oly562> Jan 15 16:31:14 pluto -- MARK --
[01:15] <oly562> Jan 15 16:51:14 pluto -- MARK --
[01:15] <oly562> Jan 15 17:11:14 pluto -- MARK --
[01:16] <oly562> i just found /var/log/crash, looks interesting
[01:16] <jmarsden|work> oly562: man syslog and see the -m option
[01:16] <jmarsden|work> s/syslog/syslogd/
[01:16] <oly562> k
[01:16] <oly562> no man syslog
[01:17] <jmarsden|work> s/syslog/syslogd/
[01:17] <oly562> sudo man?
[01:17] <oly562> nope
[01:17] <jmarsden|work> man syslogd
[01:17] <oly562> aw... thats what i though
[01:17] <oly562> thanks
[01:17] <oly562> ic. thanks
[01:17] <jmarsden|work> np
[01:17] <oly562> i never seen something like that b4 in messages
[01:18] <oly562> i like these little .crash files. nifty
[01:18] <oly562> has all the progs i was referring to
[01:18] <oly562> that errored out
[01:19] <oly562> is Package: xaos 3.2-7ubuntu1 an "offical" package?
[01:19] <oly562> yesh.... Log started: 2009-01-05  10:54:50 long time ago
[01:20] <oly562> bunch of previous "deselected" libs
[01:21] <oly562> i had thoughts about loading this file when it asked for them... dammm   gstreamer0.10-plugins-bad
[01:21] <oly562> interesting...... check this line out
[01:21] <oly562>  Errno architecture (i486-linux-gnu-thread-multi-<IP_ADDRESS>) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.24-14-server) at /usr/local/share/perl/5.8.8/Errno.pm line 11.
[01:21] <oly562>  Compilation failed in require at /usr/sbin/install-info line 304
[01:21] <oly562> i saw that each time
[01:21] <oly562> in synaptic
[01:23] <oly562> hmm... interesting, points to a lock file
[01:23] <oly562>  300 if (!$nowrite && !link($dirfile, "$dirfile.lock")) {
[01:23] <oly562>     301     printf( STDERR _g("%s: failed to lock dir for editing! %s")."\n",
[01:23] <oly562>     302             $name, $! );
[01:23] <oly562>     303     printf( STDERR _g("try deleting %s?")."\n", "$dirfile.lock")
[01:23] <oly562>     304         if $!{EEXIST};
[01:23] <oly562>     305     exit 1;
[01:23] <oly562> unless im reading that wrong
[01:24] <Deeps> someone posted bug 316013 earlier, did you see that?
[01:24] <uvirtbot`> Launchpad bug 316013 in util-linux "apt-get dist-upgrade failed - architecture (i486-linux-gnu-thread-multi-<IP_ADDRESS>) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.24-14-server)" [Undecided,New] https://launchpad.net/bugs/316013
[01:24] <oly562> i been doing everything as sudo
[01:24] <oly562> i looked at that bug, i dont see it.. any clues?
[01:25] <jmarsden|work> oly562: rmadison -s hardy xaos # suggests that xaos 3.2-7ubuntu1 is indeed official.
[01:25] <oly562> k
[01:26] <Deeps> did you read the comments? there are several workarounds listed that may work
[01:26] <oly562> Deeps: i saw it
[01:26] <Deeps> well, where 'several' is 2
[01:26] <oly562> and why dont you say what i should do, as im not good at reading about bugs
[01:26] <oly562> i dont see the link there
[01:26] <oly562> im using Generic kernel
[01:27] <oly562> if you just popped in a search for Errno.pm yadda, it points to a lock file, and i commented earlier if i should do that. i dont see how that will have any effect
[01:27] <oly562> or error status 9
[01:27] <owh> oly562: What if you actually do what the work-around suggests?
[01:28] <oly562> which is.... modify the errno.pm
[01:28] <oly562> ?
[01:29] <jmarsden|work> No, it is to get the Errno.pm from under /usr/local/share out the way so Perl uses the real one.
[01:29] <oly562> ic
[01:29] <Deeps> with a link that explains to an article that explains why you should do the move, and what you did to cause the problem in the first place
[01:29] <oly562> i dont see what i did in the first place... sighs
[01:30] <oly562> you think i did a an upgrade attempt?
[01:30] <jmarsden|work> Read the bug report, and then read http://www.debian-administration.org/users/simonw/weblog/201 which it links to...
[01:30] <Deeps> http://www.debian-administration.org/users/simonw/weblog/201 is linked from the bug report, incase you missed it
[01:30] <hads> That article has some familiar advice.
[01:30] <oly562> Deeps: thanks
[01:30] <oly562> yah, i havent worked with bugs that much, prolly time i dove into those things
[01:31] <Deeps> oly562: i guess you haven't used forums much either then
[01:31] <Deeps> oly562: or mailing lists i guess
[01:31] <oly562> nope
[01:31] <oly562> not at all
[01:31] <hads> Or reading.
[01:31] <Deeps> oly562: have you used the internet before now?
[01:31] <oly562> i learned it all by myself
[01:31] <oly562> Deeps: go play with some one who is clueless, at least i admited something. cant say that for most people
[01:31] <owh> oly562: We generally cannot (or will not) fix problems you are having. We can guide you to fixing your own problems. If you come across a specific actual bug, then you can lodge the bug-report and if we can reproduce it, we can attempt to fix them. #ubuntu-server isn't your personal helpdesk - most here are volunteers.
[01:32] <Deeps> oly562: i'm doing precisely that, and realised i shouldn't. gl, nn.
[01:32] <oly562> owh: right
[01:32] <oly562> like i need to hear all that
[01:32] <oly562> i bet you think its your personal helpdesk
[01:33] <oly562> please, dont anyone be all double standard with me, i can easily prove this
[01:33] <oly562> save that shyt for the noobs
[01:35] <oly562> ill be reading the links. thanks, but no thanks for the rest of the crap you just said
[01:35] <owh> oly562: This is a PG channel and you are waaaay out of line IMHO.
[01:35] <hads> Seconded
[01:36] <hads> http://www.ubuntu.com/community/conduct
[01:41] <oly562> both of your opinions are meaningless to me, as you are attacking me. put yourself in my shoes. you wouldnt just sit idle. again, double standard
[01:42] <oly562> matter of fact, dont comment to me again, you points have been noted
[01:42] <oly562> i dont need "your kinda of help"
[01:43] <owh> Is there an "elegant" way to put PHP libraries into a central location, or am I just going to have to chuck them all in /usr/share/php/*
[01:44] <oly562> does anyone ELSE know how to remove cpan that was installed by perl?
[01:44]  * owh points out that the libraries are *not* packaged - yuk - but you get that :)
[01:49] <oly562> welp, i fixed my issue. good grief. that was easy. all my packages that had issues works now. welp, im out, Njoy
[01:52] <hads> You're welcome
[01:55] <owh> hads: Huh? - Oh you're replying to someone I put on /ignore :)
[01:57] <hads> owh: heh good idea, he's gone now.
[01:57] <owh> More bile?
[01:58] <peepsalot> my server is really screwed up and I don't know why.  i get a segfault when i run sudo
[01:59] <peepsalot> i was editing cups config using the web admin pages, and then it stopped serving up the pages.  i tried to restart cups, and segfault, i tried to update repo and segfault... i don't know what is going on
[02:01] <peepsalot> i guess i shoulda used LTS
[02:05] <peepsalot> anyone alive in here?
[02:06] <peepsalot> would you guys recommend LTS server instead of 8.10?
[02:06] <hads> I would, you shouldn't get segfaults on either though.
[02:07] <peepsalot> i found this issue: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/278617
[02:07] <uvirtbot`> Launchpad bug 278617 in samba "login crashed with SIGSEGV in dump_core() (dup-of: 260687)" [Undecided,New]
[02:07] <uvirtbot`> Launchpad bug 260687 in samba "Purging samba breaks login (pam_smbpass.so segfaults)" [High,Fix released]
[02:07] <peepsalot> i think it's related
[02:08] <hads> Sounds like it.
[02:09] <hads> Do you have libpam-smbpass installed?
[02:09] <peepsalot> yes
[02:10] <hads> Are you at the console or remote? Sounds like you need to fix from single user mode.
[02:10] <peepsalot> well the server is in the same room as me, but it's currently headless, and I'm logging in remotely.  i guess I gotta attach a monitor again
[02:11] <hads> Follow the advice in that bug report (bug 260687) and you should be right
[02:11] <uvirtbot`> Launchpad bug 260687 in samba "Purging samba breaks login (pam_smbpass.so segfaults)" [High,Fix released] https://launchpad.net/bugs/260687
[02:12] <peepsalot> i hope this sort of thing is not going to be a common occurance, this server has not even been up a week, and this is the second day I've had a chance to touch it.
[02:12] <peepsalot> and it's totally unusable
[02:12] <hads> Shouldn't be.
[02:36] <peepsalot> goddamnit it was working, and I go to admin cups and it's broken again
[02:37] <peepsalot> this is the most ridiculous crap i've ever seen
[02:37] <peepsalot> as soon as I add a printer everything breaks
[02:38] <peepsalot> actually, as soon as I do anything that involves entering my password through the cups web interface.
[02:47] <peeps[ur]> t
[02:48] <peepsalot> hads, do you know if this bug affects only 810?
[02:48] <peepsalot> 8.10
[02:49] <peepsalot> or am I going to have the same nightmare after i spend another couple hours downgrading OS versions
[02:59] <peeps[ur]> agh i keep losing connection
[03:00] <peepsalot> i don't know what I should do, my server is unusable
[03:26] <uvirtbot`> New bug: #317740 in mysql-dfsg-5.1 (universe) "package mysql-server-5.1 5.1.30-2ubuntu3 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/317740
[03:27] <owh> peepsalot: Did you read the comments and the work-around in the bug that hads showed you>
[03:27] <peepsalot> owh, yes I did the workaround at the end of that bug, and then as soon as I used cups webadmin again, the bug came back
[03:28] <peepsalot> i guess i don't need that package though, so I left it uninstalled this time, and I guess it's ok for now
[03:29] <peepsalot> i'm not entirely clear what that package is for
[03:29] <owh> peepsalot: Uhm, cups web-admin doesn't install new authentication stuff after it has been installed that I know of. Are you talking about having done this: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/278617/comments/2
[03:29] <uvirtbot`> Launchpad bug 278617 in samba "login crashed with SIGSEGV in dump_core() (dup-of: 260687)" [Undecided,New]
[03:29] <uvirtbot`> Launchpad bug 260687 in samba "Purging samba breaks login (pam_smbpass.so segfaults)" [High,Fix released]
[03:29] <owh> peepsalot: The action in comment # 2.
[03:30] <peepsalot> no i did this: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/260687/comments/21
[03:33] <owh> So, did that fix it?
[03:34]  * owh has to leave. Later all.
[04:07] <peepsalot> does ubuntu server automount usb drives?
[04:13] <_Cid> peepsalot:  didnt for me
[04:14] <_Cid> peepsalot:  well..define auto mount I guess ....I had to configure it once, now it looks for it
[04:14] <peepsalot> on ubuntu desktop it automatically puts a directory in /media and mounts to it.  does not appear to happen in ubuntu server
[04:19] <MianoSM1> .
[05:09] <kirkland> nijaba: do you think you could add another entry to screen-profiles-helper, that would add/remove a line to the user's ~/.screenrc, that would set the escape sequence?
[05:09] <kirkland> nijaba: let them enter one character, and do it for them?
[07:20] <uvirtbot`> New bug: #301954 in amavisd-new (universe) "/var/log/mail.log spammed with amavis error messages" [Undecided,New] https://launchpad.net/bugs/301954
[07:28] <zsolty_>  Hello, I have a problem with Remote Desktop. From Windows I can't connect to my Ubuntu box. In windows I am using realvnc. Can somebody guide me in the right direction? :)
[08:52] <kraut> moin
[09:18] <PC_Nerd> Hi,  Im about to purchase a server to run 8.10 on, and wanted an opinion if its better to have 1x2GB ram or 4x512 which is more expensive?
[09:18] <ikonia> PC_Nerd: that sounds like home PC
[09:18] <ikonia> PC_Nerd: that's also a hardware question which I suggest you take to #hardware as it will depend on your motherboard
[09:19] <PC_Nerd> ah ok. thanks ( itll be from dell, and they dont have the greatest explanations on hardware for servers)  Ill ask in #hardware
[09:19] <ikonia> PC_Nerd: why not pickup the phone and talk to dell
[09:20] <ikonia> PC_Nerd: they support their own hardware quite well, especially on the server platform
[09:21] <PC_Nerd> Yup ill do that - wanted an "ubuntu" related opinion first, since the person I was talking to was "distribution? we do offer linux (foudn out it was RH enterprise)
[09:24] <temudjin_> ...hi guys
[09:38] <ikonia> PC_Nerd: ubuntu opinion doesn't matter as it's hardware specific
[09:41] <PC_Nerd> Ok, understood.  I'm not exactly a hardware person, so I thought that maybe in terms of ubuntu server being built for server use, that an optimised hardware might make a lot of difference.... but aparently not ;)
[09:42] <PC_Nerd> The other thing, is if I boot from a USB, cna I format that USB drive back for normal disc usage ( moving files etc?)
[13:40] <frippz> I'm going to create a VM with JeOS 8.10 that will only run a proftpd server. would 256MB RAM suffice?
[13:42] <sommer> frippz: I'd think so
[13:42] <frippz> sommer: great thanks
[13:42] <Deeps> depends on the type of operations happening on your ftp server
[13:42] <frippz> very few users
[13:43] <Scix> how can i get DHPC3-SERVER to randomly assing a hostname?
[13:43] <frippz> in the time we've had a dedicated machine, there's only been two concurrent users logged on :D
[13:43] <Deeps> can probably get away with even less then
[13:44] <frippz> hmm, now that I think about it. it will be running samba as well
[13:44] <Deeps> it's useful to have lots of ram if you have say 30 users all downloading the same batch of files simultaneously - keeps the files in memory instead of reading from the disk
[13:44] <frippz> ah
[13:45] <frippz> I might be running webmin off it as well to allow other users in the office add customer accounts
[13:45] <frippz> but it will still be very rarely used
[14:04] <uvirtbot`> New bug: #317734 in mysql-dfsg-5.0 "mysql initscript fails" [Undecided,New] https://launchpad.net/bugs/317734
[14:14] <heath|work> how can I list mounted devices by their UUID?
[14:14] <Scix> is there a way get DHCP3-SERVER to automaticly apply a hostname for a computer if nostname is not set
[14:14] <Scix> using preseeding over ethernet, and has to get the system to work totaly of-hands
[14:15] <Scix> thinking of a automaticaly randomly generatet hostname
[14:15] <Scix> this whay i dont have to make 200 hostgroups in dhcpd.conf
[14:47] <apachelogger> zul: pling... do you mind if I change mysql-5.1's rules to use cmake instead of autotools? if not:: does it have any known disadvantages?
[14:47] <zul> why do you want to change it?
[14:49] <apachelogger> zul: because cmake got better structure, is faster and is just fun to work with
[14:49] <apachelogger> + it got progress indication ;-)
[14:50] <zul> I do mind actually since either mathiaz or I would be doing the merge but if you want you can submit a patch to debian and see what they have to say about it
[14:51] <apachelogger> sensible
[15:40] <Scix> how can i generate a incremental string
[15:42] <Scix> I must have something who can genrate a unique string for option host-name in dhcpd.conf
[15:42] <Scix> and binary2ascii fails
[15:53] <frippz> damn it! a kvm xml-file got "accidentally" overwritten. is there anyway to generate a new one based on the machine runnning?
[15:54] <sommer> frippz: not sure, but you might look into virsh define
[15:54] <Nafallo> dumpxml even
[15:54] <sommer> frippz: on second thought, that's probably not going to work
[15:55] <Nafallo> frippz: virsh dumpxml <hostname>
[15:55] <sommer> frippz: if the vm is still running you could probably copy the xml file from another vm and update the mac address from the running one
[15:55] <sommer> frippz: and any paths to the image file, etc
[15:56] <sommer> or dumpxml :-)
[15:56] <frippz> Nafallo: you're a damn genius! :D
[15:56] <frippz> I was looking in that list, but never saw dumpxml
[15:56] <frippz> thanks a million
[15:57] <Nafallo> nw, but I really wasn't the one implementing dumpxml. credits not due in my direction :-)
[15:57] <frippz> well, you're a damn genius for pointing me in the right direction when my brain farted out :D
[15:57] <Nafallo> hehe. fair enough :-)
[15:59] <frippz> and now to find out why the damn xml-file got written over in the first place. I need an after work beer :)
[16:00] <frippz> yup, forgot to change hostname in the cfg... god, I need to leave the office
[16:10] <MatBoy> how is gfs supported on ubuntu ?
[17:59] <MadChopr> i have a mobo with two ethernet ports, one should connect to the outside world (like it's doing currently) and the other should never talk t the outside world at all nor should the outside world talk to it.  is this possible?
[18:00] <Deeps> yep
[18:00] <MadChopr> and how would i set thiis up; currently one ethernet port is set to dhcp, and i'd like the other one to be static (<IP_ADDRESS> or something)
[18:00] <MadChopr> Deeps: can you give me a quick run down on how i'd do this?
[18:00] <Deeps> lets start with the interfaces file
[18:00] <MadChopr> /etc/if ?or somehing
[18:01] <Deeps> open /etc/network/interfaces in your favourite text editor (nano, pico, vim, gvim, emacs, whatever)
[18:01] <MadChopr> ah okay
[18:01] <MadChopr> open
[18:01] <Deeps> pastebin what you see
[18:01] <Deeps> paste.ubuntu.com
[18:01] <MadChopr> rad, 2secs
[18:02] <MadChopr> http://paste.ubuntu.com/105644/
[18:02] <MadChopr> the bridge is for my virtual machines
[18:02] <Deeps> ah ok
[18:02] <MadChopr> i want some virtual machines on the internal ethernet and some on the extgernal
[18:03] <MadChopr> but i'll deal with those later
[18:03] <Deeps> currently they're on internal or external?
[18:03] <Deeps> external i guess based on what you've said earlier?
[18:03] <MadChopr> the second ethernet port isn't configured at all from what i can tell.. and the primary one is currently on the internet (which is fine)
[18:04] <Deeps> ok
[18:05] <Deeps> presumably your second interface is eth1, you can confirm this with ifconfig -a | grep Ethernet
[18:05] <MadChopr> 2secs
[18:06] <MadChopr> looks like it, i can paste what the output is if you like.
[18:07] <MadChopr> er,, i mean it looks like eth1 is the second interface
[18:08] <Deeps> http://paste.ubuntu.com/105645/
[18:09] <_ruben> ok .. this is weird .. my usenet downlaoads slowed to a crawl and when looking with tcpdump i see all packets are ~100 bytes and a tcp win of  50-150
[18:09] <MadChopr> no gateway needed, small network.. 8 computers..
[18:10] <MadChopr> Deeps: pasted that all into my /etc/network/interfaces file
[18:11] <MadChopr> how do i restart network?  like... xinetd ihup or osmething?
[18:11] <Deeps> you can simply ifup eth1
[18:11] <MadChopr> rockin'
[18:12] <MadChopr> how do i get it so that there is not possible for one to talk to the other.. i don't want any pesky hasks0rs on my computers
[18:12] <Deeps> iptables
[18:12] <Deeps> or ufw
[18:12] <Deeps> ufw may be better
[18:12] <Deeps> !ufw | MadChopr
[18:12] <MadChopr> yea, i been using this ufw thing
[18:13] <Deeps> block input from your lan ip range on eth0, block input from anything but your lan ip range on eth1
[18:13] <MadChopr> awesome that makes sense, i don't know why my brain couldn't conceive of that on it's own.
[18:14] <MadChopr> so if i got peoples socials and credit cards n the other side.... i should be alright as long as i keep the system updated, correct?
[18:15] <Deeps> well you shouldn't keep any of that in plain text
[18:15] <Deeps> as there's always the risk that your internet facing machine can get compromised
[18:15] <Deeps> then leading the way into your lan
[18:16] <MadChopr> gotcha
[18:16] <Deeps> never store sensitive data in plain text
[18:17] <Deeps> the iptables stuff simply reduces the risk of ip spoofing based attacks
[18:17] <Deeps> i.e. someone on the internet attempting to spoof their ip to appear in your lan ip range to bypass any potential firewalling
[18:18] <Deeps> ideally, you'd store this data on a machine that has no direct route to the internet
[18:18] <genii> ssh hopscotch in or so
[18:18] <Deeps> better would be offline entirely, but thats a bit impractical
[18:18] <Deeps> indeed
[18:19] <MadChopr> Deeps: i see i see... interesting
[18:19] <MadChopr> ssh hopscotch... like reverse forwarding or somesuch?
[18:19] <Deeps> as in, if you need to access the system from remote
[18:20] <Deeps> ssh into another machine that is internet facing
[18:20] <Deeps> and then from there access the target system with your socials and cc's
[18:20] <Deeps> via ssh or however
[18:20] <MadChopr> Deeps: the machines are all offline right now -- i don't want them to have access online, or have online to access them.... i was hoping the ufw would handle my worries.  i'm not sure the data is in plaintext, nor am i sure if it's encrypted at all... we run peachtree accounting
[18:20] <Deeps> the harder it is for you to access the machine, the harder it is for someone else to find their way in
[18:21] <MadChopr> okay, i think you what you said makes sense.
[18:21] <Deeps> by 'offline' i mean completely detached from any network
[18:21] <Deeps> by 'no direct route to the internet', i mean you cant access the internet at all from it, nor can anyone on the internet connect to the machine
[18:22] <MadChopr> yea, that's how they are now.... (well they are networked together, but not connected to the internet physically... i wuold like change that to make back-ups easier.
[18:22] <jdstrand> doing 'ufw enable' will deny incoming connections. it does not do egress filtering atm (but it's easily added to /etc/ufw/*.rules (see the NOTES section in the ufw man page)
[18:22] <Deeps> instead having an intermediary machine that is connected to both the sensitive machines and the internet, and doing the work from there
[18:23] <Deeps> ofc if that's all fully scripted and automated, then you're still at risk if the intermediary gets compromised
[18:23] <MadChopr> Deeps: .. understand... maybe something like that demilitarized zone i've read about?
[18:23] <Deeps> alternatively, have a proxy server running on the intermediary that the lan machines can connect through for internet access
[18:23] <Deeps> no, DMZ means all inbound ports allowed to that ip
[18:24] <MadChopr> ah okay
[18:24] <MadChopr> Deeps: i need to take a minute and go help someone out; bbiab
[18:24] <Deeps> a proxy server on your intermediary is probably the 'best' solution, balancing security with usability
[18:25] <Deeps> lan clients are fully shielded from the internet, and can only access what you allow in your proxy configuration
[18:25] <Deeps> (IMO)
[18:36] <MadChopr> Deeps: rad, thank you for the insight.
[18:37] <MadChopr> i do have a spare  box i can turn into an intermediatary
[18:58] <slicslak> anyone here with any fiber optics experience (or knowledge)?  I have a stupid question.  is there any speed difference between 10-gigabit copper ethernet and 10-gigabit fiber optic ethernet?
[19:01] <slicslak> related to that, for those of you using nfs storage arrays, generally speaking, have you found gigabit ethernet to be fast enough?  or have you found a situation where you wanted/needed to go 10-gigabit
[19:01] <slicslak> ?
[19:01] <Nafallo> fiber optics yes, cx4 no :-)
[19:06] <slicslak> heh, any reasons why?
[19:10] <simplexio> depends how big raid array you have behind ethernet
[19:11] <Nafallo> slicslak: any reasons why what? :-)
[19:12] <slicslak> this is for a web cluster.  10GB of data is being stored on a sun ZFS storrage array for some 150 websites.
[19:13] <slicslak> I'm thinking about also storing the database files on the storage array as well.  so it would be both web and db servers access the array.  so i'm wondering if gigabit ethernet is enough, and if not, do i go copper or fiber with the 10GbE?
[19:14] <slicslak> Nafallo, reasons why you prefer the fiber over cx4?  is it because of copper vs fiber, or is it just the cx4 standard you don't like?
[19:15] <Nafallo> slicslak: cx4 is quite new and the lengths you can use it isn't that good.
[19:16]  * slicslak nods
[19:16] <slicslak> i'm not going to need anything over 10m
[19:16] <genii> copper transmission quality degrades substantially the further it has to go. Also it's prone to emf interference
[19:17] <Nafallo> are you sure you'll need 10Gbps for what you're doing?
[19:17] <chmac> What's the best way to set the noop scheduler as the default? /etc/sysfs.conf? Add elevator=noop to grub?
[19:21] <slicslak> Nafallo, no, I'm not sure at all.  In fact I suspect that gigabit will be enough.  But I have been asked about faster options, and so am researching.  Unfortunately there is not published on the topic, especially for real world situations.
[19:21] <slicslak> so if anyone has expereince with heavy traffic NFS solutions I'm interested!
[19:23] <Nafallo> slicslak: not that I know how your network is cobbled together, but might bonding be an option?
[19:24] <slicslak> Nafallo, this is a new expansion, so we can go in any direction
[19:24] <Nafallo> slicslak: right. so you're not having a set list of hardware at all then?
[19:25] <Nafallo> cause of course... that /would/ play a part in the whole.
[19:25] <Nafallo> :-)
[19:26] <slicslak> :)  ya.  http://www.sun.com/storage/disk_systems/unified_storage/7110/  is the only confirmed purchase so far
[19:26] <slicslak> it's their new zfs based storage array.
[19:27] <slicslak> good point about bonding.  we should do that anyway.  all the servers will at least have two gigabit NICs on them.
[19:27] <Nafallo> hmm. 2TB and you're going to use 10GB? :-)
[19:28] <slicslak> room for expansion.  and iterative backups.  :)
[19:28] <slicslak> incremental that is
[19:28] <Nafallo> could say that... :-P
[19:28] <Nafallo> 1.990TB for backups ;-)
[19:29] <Nafallo> hmm
[19:29] <Nafallo> how many servers?
[19:30] <Nafallo> cause if that one have 4x1Gbps... would it be worth trying cross connections from each server? :-)
[19:30] <slicslak> not sure yet.  the more we have the more requests will be split up among them so the less each has to serve.  until one of the sites get's slashdotted (or similar).
[19:31] <Nafallo> :-)
[19:32] <slicslak> i think we'll build this cluster with the default gigabit ethernet and then profile it and make further decisions from there.  can always add cards later.
[19:32] <slicslak> thanks for the help!
[19:33] <Nafallo> yea. that sounds like a good plan :-)
[19:33] <Nafallo> no worries. was just about to say that I've ran out of ideas based on the information anyway ;-)
[19:33] <Nafallo> websites are usually not very heavy though :-)
[19:33] <Nafallo> unless they are "spetial" ;-)
[19:36] <chmac> I'm trying `cryptsetup luksClose blah` and getting device busy. lsof /dev/mapper/blah reveals nothing. Any other things I can try?
[19:36] <simplexio> all 4 ether port bonded to on 48 port gigbit ether switch + few webserver to handle all 150 websites
[19:36] <chmac> I've deactivated all the lvm volumes within the luks partition
[19:37] <chmac> Darn, I was trying to unmount my running system's encrypted wrapper! Working now that I use the correct device. :)
[19:38] <simplexio> chmac: you using encrypted stuff, any experince from software raid5 plus dm_crypt ?
[19:38] <chmac> simplexio: Alas not. I use dm_crypt on my laptop. It's supported in the installer, so I know virtually nothing about it :)
[19:39] <simplexio> ok.. i have allready decited to buy 4x1.5T seagate hdd, im just pondering which is "optimal" configuration
[19:40] <simplexio> is it 3 hdd in raid5 or 4 in raid5
[19:40] <Nafallo> simplexio: how much storage do you need and for what purpose?
[19:41] <simplexio> Nafallo: backup and "Family videos"
[19:42] <simplexio> i was thinking at one point that i would use those disk as shared /home/ on all linux computers what i have in lan
[19:43] <Nafallo> simplexio: so maximum storage. that would be RAID5 indeed. now the next question would be, what would you do if one breaks? :-)
[19:43] <Nafallo> simplexio: having a cold spare sitting, or using one of them as a hot spare, which means loosing 1.5TB on the volume :-)
[19:43] <simplexio> Nafallo: i hope that i dont loose more disks
[19:44] <simplexio> that is my problem, i mean with 4 disk its allmous same to go raid10 if i left one spare
[19:45] <_ruben> having one box for both storage and backups .. sounds, well, odd .. yet "common" :)
[19:45] <simplexio> if i dont , there is change that i lost all data on raid is little bit bigger
[19:45] <_ruben> raid10 has far better write performance compared to raid5
[19:46] <genii> I may be nostalgic but still like raid5
[19:46]  * Nafallo would probably have made a 4 disk RAID5 to get extra space :-)
[19:46] <_ruben> i have 2 6 disk raid4's here at home :)
[19:46] <Nafallo> and then a cold spare :-)
[19:46] <_ruben> raid5's
[19:46] <_ruben> 6x200G pata .. 6x250G sata
[19:47] <_ruben> neoughta consolidate those into some 1 or 1.5TB disks based array :p
[19:47] <genii> _ruben: My desktop has two raid1 and a 4 disk raid5   (all crappy WD 1Tb)
[19:48] <simplexio> i have 6 hdd in my desktop, none in raid
[19:48] <slicslak> Nafallo, simplexio, cool, thansk.
[19:49] <simplexio> i have notices that it much nicer to have dev databse in two hardisk, one home disk etc than one big raid0
[19:50] <_ruben> raid0 isnt raid
[19:50] <henkjan> the 0 in raid0 stays for the number of files you get back if one of your disks failes
[19:51] <simplexio> yeah.. it dosnt give any redundancy
[19:51] <_ruben> hehe, yeah
[19:51] <_ruben> and the r in raid is well .. redundant :p
[19:51] <simplexio> henkjan: thats what i use when i think which one was stripping and which one was mirrored
[19:51] <Nafallo> it is raid.
[19:52] <_ruben> Nafallo: how?
[19:52] <simplexio> which remind me to test 4disk raid0 when i get disks
[19:52] <Nafallo> not redundant, but raid :-)
[19:52] <_ruben> rttt
[19:52] <_ruben> err even
[19:52] <Nafallo> well. redundant amount of disks :-)
[19:53] <_ruben> still doesnt compute very well here :)
[19:53]  * Nafallo wonders how he actually got that one together and decides he didn't.
[19:53] <_ruben> hehe
[19:53]  * Nafallo shrugs
[19:54] <Nafallo> it's still called raid0 ;-)
[19:55] <simplexio> its was fun to have 2x120G raid0 in windows. it was fast but i lost 3 times files when another hd started to loose data
[19:56]  * _ruben loves his 4G scsi disk in his P-233MHz .. that thing was blazing fast
[19:56] <ivoks> zul: sorry about that bacula md5 mismatch
[19:56] <zul> ivoks: no big deal
[19:57] <ivoks> zul: i uploaded new version
[19:57] <zul> ivoks: getting it now
[20:02] <zul> ivoks: uploaded
[20:15] <uvirtbot`> New bug: #308903 in bacula (universe) "The bacula-dir.conf file is not present when installing Bacula (dup-of: 269251)" [Undecided,Fix released] https://launchpad.net/bugs/308903
[20:15] <uvirtbot`> New bug: #314746 in bacula (universe) "package bacula-console-qt does not install desktop entry" [Medium,Fix released] https://launchpad.net/bugs/314746
[20:17] <ivoks> zul: our diff against debian is getting really big for bacula
[20:17] <ivoks> i'll try pushing some changes to debian
[20:17] <zul> thanks
[20:26] <luckyone> is there a way to upgrade from feisty to intrepid from the cmd line?
[20:27] <ivoks> yes
[20:28] <ScottK> But not all at once (not a supported way anyway)
[20:28] <ivoks> upgrade to gutsy, then to hardy and then to intrepid
[20:28] <ivoks> :)
[20:28] <luckyone> say I went into /etc/apt/sources.list and :%s/feisty/intrepid and then ran an apt-get update && apt-get dist-upgrade
[20:28] <luckyone> kk
[20:28] <ivoks> but, use do-release-upgrade
[20:28] <ScottK> luckyone: If you were lucky you'd end up with a running system.  You might not.
[20:28] <ScottK> as ivoks says.
[20:29] <luckyone> kk
[20:29] <luckyone> cannot ssh to box yet...
[20:29] <ivoks> you did dist-upgrade to intrepid?
[20:30] <luckyone> still can't ssh to box... fuck
[20:30] <ivoks> you dist upgraded from feisty to intrepid?
[20:30] <luckyone> that was dumb
[20:30] <ivoks> yes :)
[20:31] <luckyone> sorry for swearing in this channel
[20:31] <luckyone> I thought I was in another one!
[20:31] <luckyone> and we have connected, wheew
[20:32] <hads> Your nick suits you today
[20:32] <luckyone> it does everyday - you should see my wife!!!!
[20:32] <hads> :)
[20:32] <simplexio> :D
[20:32] <ivoks> :D
[20:33] <luckyone> to gutsy we go!
[20:35] <luckyone> thank you fellow server admins!
[20:36] <luckyone> again, I apologize for swearing in the channel, I thought I was in another one - honestly
[20:36] <luckyone> I was like, ivoks what are you doing in #freehat?
[20:37] <luckyone> Southron: it is a realy channel that I am in
[20:37] <luckyone> real*
[21:55] <Nafallo> simplexio: http://seagate.custkb.com/seagate/crm/selfservice/search.jsp?DocId=207931 <-- you might want to check up on your 1.5TB drives mate...
[21:56] <alexb2283> i just asked in the main channel, but maybe someone here knows:
[21:56] <alexb2283>  is there any reason for me to keep consolekit & dbus on my console only jaunty server install? consolekit keeps segfaulting (there's tons of bugreports for this, but no fix yet)
[21:57] <alexb2283> i'm merely asking if i would break anything important by purging them
[22:00] <simplexio> Nafallo: yeah. googled it. friend friend has same 4x setup and no problems
[22:00] <Nafallo> simplexio: still worth checking up on it IMHO :-)
[22:03] <simplexio> hmm google 'ST31500341AS firmware' gives many .torrents files
[22:04] <simplexio> have to check current status again
[22:15] <stormblue> Good Afternoon all!
[22:28] <Jeeves_> Evening :)
[22:29] <stormblue> Yeah, it now is evening!
[22:29] <Jeeves_> Well, it was before :)
[22:33] <stormblue> We must be in a different time zones :)
[22:33] <Jeeves_> I guess so
[22:47] <luckyone> hello all
[22:47] <luckyone> I have just gone through several upgrades, one release at a time
[22:48] <luckyone> in the final one, from hardy to intrepid, I am having some problems getting ubuntu-standard processed
[22:49] <luckyone> it seems that atd isn't starting or staying up when I manually start it, so that is preventing the upgrade from totally completing
[22:49] <stormblue> luckyone: what seems to be the issue?
[22:51] <stormblue> What's atd?
[22:52] <alexb2283> i'd say that's an awkward moment
[22:53] <stormblue> Anyone know why I'd get ssh: connect to host <IP_ADDRESS> port 22: Connection refused sometimes when I try to connect.  It seems like when I restart the client meachine it goes away for a while.
[22:53] <alexb2283> luckyone: have you tried a) checking your logs and b) stracing atd ?
[22:56] <luckyone> stracing?
[22:57] <luckyone> where does atd log?
[22:57]  * hads assumes syslog
[22:57] <alexb2283> luckyone: syslog
[22:57] <alexb2283> luckyone: apt-get install strace && man strace
[22:58] <luckyone> alexb2283: I can't install anything until apt finishes processing my upgrade
[22:58] <luckyone> luckily it is installed
[22:59] <alexb2283> i forgot, sorry
[22:59] <luckyone> I have it, I have run it on atd
[22:59] <alexb2283> it might also help if you pastebinned the output you get when you try dist-upgrading
[23:00] <luckyone> alexb2283: I was hoping someone would offer to look at that :)
[23:00] <alexb2283> there's no promise i can help, but i can try
[23:00] <alexb2283> :P
[23:01] <stormblue> Have you tried ubuntuform.org or google.com for the text output of dist-upgrading?
[23:01] <luckyone> hehe, 2 sets of eyes are better than one
[23:01] <luckyone> http://pastebin.com/d2d1909ed
[23:01] <stormblue> Can someone take a peek at http://pastebin.com/m8754c1c it's my sshd output.  Wondering if anyone has any ideas?
[23:03] <alexb2283> luckyone: have you tried purging at just to get a fresh start ?
[23:03] <stormblue><EMAIL_ADDRESS>is this related?
[23:04] <luckyone> alexb2283: what do you think I should purge?
[23:04] <alexb2283> try: dpkg --purge --force-depends at
[23:05] <luckyone> done, then apt-get install it?
[23:05] <alexb2283> stormblue: aside from some possibly low level network network issues, your log looks good
[23:06] <alexb2283> stormblue: how are the two involved machines connected ?
[23:06] <luckyone> alexb2283: wow, that worked, I reinstalled it and now life seems to be good
[23:07] <luckyone> Calculating upgrade... Done
[23:07] <luckyone> 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
[23:07] <stormblue> Client -[wifi] - Router -[ethernet] - switch - [ethernet] - server
[23:07] <alexb2283> luckyone: if you try to dist upgrade it should automatically reinstall and also finish your distupgrade
[23:07] <luckyone> I feel all current and what not!
[23:07] <alexb2283> luckyone: good :D
[23:07] <alexb2283> another happy customer i guess ;)
[23:07] <luckyone> yeah, thanks for the tips!
[23:07] <luckyone> I was happy when it was broken
[23:08] <luckyone> ubuntu and ubuntu-ers rock!
[23:08] <alexb2283> agreed
[23:08] <luckyone> probably my favorite people on the planet
[23:08]  * luckyone bought his hot wife the ubuntu thong off of cafe press =)
[23:08] <stormblue> luckyone: Prove it!
[23:09] <alexb2283> stormblue: maybe some sort of powersaving kicking in or wifi issues ? i'd make sure it's not a hardware fault in between the machines by using a crossover cable just for testing (if possible at all)
[23:09] <alexb2283> stormblue / luckyone : that was unexpected... but good. i'd like proof as well :P
[23:09] <alexb2283> powersaving on the wifi that is
[23:09] <alexb2283> but it's just a random guess
[23:10] <stormblue> Yeah, I don't think it's power saving.  I'm plugged it and It messes up over etherent too.  It's weird...It works sometimes, but other times not.
[23:10] <alexb2283> stormblue: also, if i can't help you, the #ubuntu channel might be of more help to you, this isn't necessarily -server related
[23:10] <luckyone> stormblue: I will foward you the reciept
[23:11] <Deeps> proof that it's for your wife
[23:11] <Deeps> and not for you
[23:11] <Deeps> is what he meant to say
[23:11] <alexb2283> over ethernet... is that with all the hardware in between as well ? (router/switch)
[23:11] <luckyone> haha
[23:11] <luckyone> it wouldn't fit me...
[23:11] <stormblue> What does this line: Read error from remote host <IP_ADDRESS>: Connection reset by peer specificaly mean?  That means it's a client issue right?
[23:11] <Deeps> proof
[23:11] <stormblue> lucky, actually, I meant to focus on the hot part.
[23:12] <stormblue> Yeah, alexb2283, router and switch still between.
[23:12] <Deeps> unfortunately when it comes to wives, hot is very subjective
[23:12] <luckyone> ahhh, http://www.jenniandjordan.com/v/wedding/ceremony/DSC_0243.JPG.html
[23:12] <luckyone> that's us
[23:13] <Deeps> this is a PG channel
[23:13] <alexb2283> stormblue: that error could be anything on osi layer 3 and down. i would try to establish a connection as direct as possible
[23:13] <alexb2283> x-over
[23:13] <Deeps> unfortunately that prevents me from reacting
[23:13] <Deeps> lets just say 'bravo'
[23:13] <luckyone> (and the server dishing that out is *very* recently upgraded to intrepid!!!)
[23:13] <stormblue> alexb2283: 10-4.
[23:13] <luckyone> yeah, in the US we call that 'out punting your coverage'
[23:13] <alexb2283> stormblue: 1-3
[23:14] <alexb2283> luckyone: beautiful, in a G-sort of way :)
[23:14] <luckyone> yeah, wedding days are that way
[23:14] <alexb2283> luckyone: that kind of g: http://en.wikipedia.org/wiki/Motion_Picture_Association_of_America_film_rating_system#Ratings
[23:17] <stormblue> luckyone: are you  rocking the lamp stack?
[23:17] <stormblue> Wedding pictures are lies anyway.  You know she doesn't look like that when she wakes up first thing!
[23:17] <luckyone> stormblue: haha - yeah, LAMP
[23:17] <stormblue> Nice.  I used to run a LAMP server, but then I didn't have the time to maintain it.


[06:57] <quik_> hey folks
[07:01] <Peng> What folks?
[07:02] <thumper> Peng: not us
[07:05]  * Peng goes to watch Walker, Texas Ranger.
[13:27] <Zindar> morning
[13:30] <Peng> Good morning.
[13:30] <Peng> Netsplitty morning.
[13:32] <Zindar> oh...
[13:32] <Zindar> szilveszter here?
[13:33] <dato> Zindar: doesn't seem so. (he's Phanatic on irc.)
[13:33] <Zindar> ok.. well... he's awake at least :)
[16:26] <Peng> Hey, cool. Ubuntu ShipIt thinks I've contributed to the Ubuntu community, so it gives me "expanded options".
[16:31] <Peng> s/community/project/
[18:38] <phanatic> hello, why is pycurl needed (or at least recommended) by bazaar? does it provide better performance?
[18:39] <dato> phanatic: I asked the same the other day, to see if I could lower the dependency level on the debian packages, and vila told me the only reason a user would want pycurl (that is, the only thing pycurl can do that the default implementation can't) is verification of SSL certificates
[18:40] <Peng> What the hell? That stuck 'bzr push' has been running at 100% of a CPU core for hours.
[18:40] <Peng> What's the key combo to drop into a debugger or do something useful?
[18:41] <phanatic> dato: that means it could be ignored by a packager? (i have a small issue on osx, since pycurl needs libcurl 7.16.4, but leopard ships only 7.16.3)
[18:41] <dato> Ctrl+\, I think
[18:41] <dato> phanatic: I'd say so, yes.
[18:41] <phanatic> dato: that's good news, thanks :)
[18:50] <Peng> (and verification of SSL certs will be added in Python 2.6)
[19:15] <Peng> Traceback after Ctrl+Cing it, FWIW: http://paste.pocoo.org/show/14721/
[19:18] <Peng> .bzr.log: http://paste.pocoo.org/show/14722/
[20:59] <sistpoty> hi folks
[20:59] <sistpoty> stupid question: is there s.th. like cvs's $Id$ for bzr?
[21:02] <zerok> hi :)
[21:02] <thumper> sistpoty: not that I know of
[21:02] <thumper> sistpoty: why do you want it?
[21:03] <thumper> sistpoty: the general concensus of developers I've talked with is that you shouldn't use expansion like that
[21:03] <thumper> hi zerok
[21:03] <Peng> However, there is a blueprint on it.
[21:04] <sistpoty> thumper: basically to know that vim is in sync with a file... and maybe because I'm used to it *g*
[21:05] <thumper> sistpoty: hmm... emacs will tell me if it is out of sync and ask if I want to reload
[21:05] <thumper> sistpoty: does vim not have that?
[21:06] <Peng> Oh no.
[21:06] <sistpoty> it does... but I'm rather thinking of not having saved the last bit of experimental code when reviewing/committing with bzr diff... I usually want only what's in the diff (and tested) and not what's in the editor then ;)
[21:06] <sistpoty> but I can live w.o. that... I guess the main argument is really that I'm used to it, which is a pretty poor argument *g*
[21:07] <thumper> sistpoty: I'm trying to work out your workflow
[21:07] <thumper> sistpoty: I guess I just save lots
[21:09] <sistpoty> thumper: so do I, but stuff happens sometimes... but it's really a corner case (and didn't bite me yet :)
[21:09] <thumper> sistpoty: yes, stuff definitly happens
[21:10] <sistpoty> ok, gotta go, cya and thanks for the info
[21:10] <thumper> sistpoty: ok, by
[21:10] <thumper> e
[21:13] <zerok> uhmm.... version_info = (0, 1, 0, 'candidate', 2) O_o
[21:13] <zerok> shouldn't it be more something like (1,0,0, ...)?
[21:14] <thumper> zerok: :)
[21:14] <thumper> zerok: I'll make sure the right person gets notified
[21:15] <zerok> thumper, just skimming through the bug reports :) tnx :)
[21:17] <weasel> how do I tell bzr to use a different ca-certificates file (for https), or tell it to accept cert with fingerprint $fpr for a host?
[21:21] <zerok> thumper, should i file a bug report for the 1.0rc2 package?
[21:21] <thumper> zerok: I'm just confirming
[21:21] <zerok> thumper, the version number in the bzr script is set to 0,93,0 whilte the bzrlib is set to 0,10,0,rc2
[21:24] <thumper> zerok: yes you could
[21:25] <thumper> I've just checked the tar ball
[21:25] <zerok> thumper, posted some more readable stuff than my version of the english language here: https://bugs.launchpad.net/bzr/+bug/175171
[21:25] <ubotu> Launchpad bug 175171 in bzr "Version difference in 1.0rc2 test package" [Undecided,New]
[21:26] <thumper> zerok: ta
[21:35] <ubotu> New bug: #175171 in bzr "Version difference in 1.0rc2 test package" [Undecided,New] https://launchpad.net/bugs/175171
[21:38] <Peng> Send a patch to the mailing list. And use 'bzr send' so you get credit! :)
[21:39] <zerok> creditttt!!! <3
[21:39] <zerok> omg
[21:40] <zerok> first i have to find out how i just managed to fubar my python install ...
[21:47] <zerok> pyrex :-(
[22:04] <zerok> Peng, never worked with bzr send before :-) let's see how simple it is to make new enemies ;)
[22:20] <zerok> since i'm probably too stupid to use bzr send with a release-package, i think i will just have to survive without the credit for 2 patched lines ;)
[22:57] <igc> morning all
[23:03] <thumper> morning igc
[23:07] <igc> morning thumper
[23:10] <Peng> Hmm.
[23:10] <Peng> Actually, I'm not sure if the release is in any branch.
[23:10] <zerok> Peng, haven't found a related branch yet. trunk uses 0.93
[23:11] <zerok> anyway, time for some sleep. good night everyone :)
[23:11] <Peng> Yeah, bzr.1.0 hasn't been updated.
[23:19] <poolie> Peng, i just made it offline
[23:20] <poolie> i'll merge to bzr.1.0 now
[23:24] <Peng> poolie: Is fixing the version worth an instant 1.0rc3 or 1.0rc2.1 or something?


[00:20] <pmatulis> is there some trickery in specifying a public SSH key with 'juju authorised-keys add <key>' ?
[00:20] <pmatulis> i'm seeing this: http://paste.ubuntu.com/12242048/
[00:21] <beisner> fyi thedac, merge collision alert on rmq.  something landed, you'll need to rebase and resolve conflicts in your cluster wip.
[00:36] <lazyPower> pmatulis: should be juju authorized-keys add `cat ~/.ssh/somekey.pub`
[00:37] <lazyPower> the import should have worked w/ LP data as well considering its using ssh-import-id
[00:37] <lazyPower> that broke for you? :-\
[00:37] <lazyPower> pmatulis: do you see the key you attempted to add with juju authorized-keys list?
[00:38] <pmatulis> lazyPower: yeah, lol, you have to paste the key at the terminal. just figured that out
[00:38] <pmatulis> lazyPower: should really allow to point at a key file
[00:40] <lazyPower> pmatulis: sounds like an excellent bit-sized bug
[00:40] <beisner> thedac, commented @ bug 1486177.  just clarifying that today's rmq merge doesn't resolve the cluster race bug.   while it may resolve issues in some scenarios, not in ours.
[00:40] <mup> Bug #1486177: 3-node native rabbitmq cluster race <amulet> <backport-potential> <openstack> <uosci> <rabbitmq-server (Juju Charms Collection):Confirmed for thedac> <https://launchpad.net/bugs/1486177>
[00:40] <beisner> wolsen, niedbalski fyi ^
[00:46] <wolsen> beisner, is this the one I did a review on earlier?
[00:46]  * wolsen checks
[00:48] <wolsen> beisner, yargh, I caused that merge conflict merging another change
[00:49] <wolsen> beisner, the merge conflict isn't bad - I can take care of it in the merge
[00:52] <wolsen> beisner, yep easy-peasy
[00:58] <beisner> wolsen, actually i'd like to get thedac 's other cluster fixes rebased, as i'm syncing that into my amulet-test-refactor branch to confirm resolution before merge.  but yeah, the conflict doesn't look to bad.  but i'm a bit blocked until we do that <
[00:58] <wolsen> beisner, heh
[00:58] <wolsen> beisner, just pushed
[00:58] <wolsen> :)
[00:58] <beisner> or that!  :-D
[00:58]  * beisner rebases
[00:58] <wolsen> thedac ^^
[01:23] <pmatulis> lazyPower: your request is my command: https://bugs.launchpad.net/juju-core/+bug/1490789
[01:23] <mup> Bug #1490789: [juju authorised-keys add] cannot specify a key file <juju-core:New> <https://launchpad.net/bugs/1490789>
[01:24] <lazyPower> pmatulis: <3
[01:38] <beisner> ping wolsen
[01:42] <beisner> wolsen, niedbalski, thedac - i'd recommend reverting rmq/next 107 and 108:  http://paste.ubuntu.com/12242485
[01:45] <beisner> ie. rmq/next is completely bust atm
[01:46] <beisner> whereas at r106, it was only ~50% bust, and only when clustering
[01:47] <beisner> then i'd like to get thedac 's fixes landed, then rebase my amulet-test-refactor branch, get those landed so we can reliably test proposals, and go from there.
[01:48] <beisner> ie. please revert and freeeeeeeze rmq/next, pending resolution of CRIT bug 1486177
[01:48] <mup> Bug #1486177: 3-node native rabbitmq cluster race <amulet> <backport-potential> <openstack> <uosci> <rabbitmq-server (Juju Charms Collection):Confirmed for thedac> <https://launchpad.net/bugs/1486177>
[05:05] <wolsen> beisner, done
[09:35] <jamespage> gnuoy, landed the hugepages branch for nova-compute
[09:35] <gnuoy> jamespage, fantastic, thanks
[09:36] <gnuoy> cd -
[11:23] <g3naro> To get the ID of an AMI that's configured to run as a NAT instance, use a command to describe images, and use filters to return results only for AMIs that are owned by Amazon, and that have the amzn-ami-vpc-nat string in their names. The following example uses the AWS CLI:
[13:07] <beisner> wolsen, thx
[13:41] <jcastro> marcoceppi: ok so do you want to run that session?
[13:52] <marcoceppi> jcastro: sure
[14:25] <beisner> dosaboy, fyi i flipped bug 1486177 back out of Fix Committed, see comment.
[14:25] <mup> Bug #1486177: 3-node native rabbitmq cluster race <amulet> <backport-potential> <openstack> <sts> <uosci> <rabbitmq-server (Juju Charms Collection):Confirmed for thedac> <https://launchpad.net/bugs/1486177>
[14:55] <dosaboy> beisner: ack, lets slip that log addition in
[14:57] <beisner> dosaboy, the plan is to defer that name resolution fix until after the total-cluster-fail fix and associated tests have landed, so that reviewers have reliable tests to confer upon.   we need to unblock basic functionality first.
[14:57] <thedac> beisner: my branch is updated  lp:~thedac/charms/trusty/rabbitmq-server/native-cluster-race-fixes including a hopeful (but untested fix for http://paste.ubuntu.com/12242485/) Before I create an MP we should run some tests
[14:57] <beisner> thedac, thanks.  i'll merge that into my amulet-test-refactor branch.
[15:00] <beisner> thedac, the errors in that paste should have disappeared as rmq/next was reverted.  are you still seeing those?
[15:01] <thedac> no, but it looked like my change that originally caused it
[15:03] <beisner> thedac, nope i believe it was r107, as that removed this:  if config('prefer-ipv6') and rdata.get('hostname'):
[15:03] <thedac> oh?!!! ok
[15:03] <beisner> and just ran ahead without the conditional
[15:03] <thedac> agreeed
[15:05] <beisner> thedac, but i'd say that your change to  rdata.get('private-address')   is safer anyway  ;-)
[15:06] <thedac> yeah, it will do no harm
[15:38] <thedac> dosaboy: gnuoy tells me you might be working on another rabbitmq issue. Is there a bug report for that?
[15:44] <kwmonroe> hey folks, if i have a subordinate relationship between my tomcat war and tomcat (via the implicit juju-info interface), will there be a "juju-info-relation-departed" hook that fires if i destroy my subordinate service?
[15:45] <rick_h_> lazyPower: marcoceppi can a subordinate get juju config data from the charm it's related to/on top of?
[15:46] <lazyPower> rick_h_: only if its sent over the wire via relation-set
[15:46] <rick_h_> lazyPower: ok, and if that config changes?
[15:46] <rick_h_> lazyPower: they'd need to know to trigger something on the subordinate?
[15:46] <lazyPower> it should be relation-set -r #relid foo=bar
[15:46] <marcoceppi> rick_h_: nope
[15:46] <rick_h_> ugh
[15:46] <lazyPower> which will cause the relationship-changed sequence to cycle
[15:47]  * marcoceppi ninja'd by lazyPower
[15:47] <marcoceppi> rick_h_: well
[15:47] <lazyPower> rick_h_: i have an example of this in docker / flannel-docker charms, where we send information out of context (or out of band)
[15:47] <rick_h_> lazyPower: marcoceppi the idea being the subordinate wants to konw if the main charm is configured to pull from deb, source, etc
[15:47] <marcoceppi> actually, envermind, juju-run doesn't work in a hook context
[15:47] <rick_h_> lazyPower: marcoceppi and if that changes, the subordinate also needs to do some updating to keep in sync
[15:47] <marcoceppi> rick_h_: gotta use the relationship wire
[15:47] <lazyPower> rick_h_: thats possible to do
[15:47] <lazyPower> you just have to proxy that information through the relationships
[15:48] <rick_h_> lazyPower: ok cool ty
[15:50] <lazyPower> rick_h_: lmk if you want examples, i have at least one that i'm aware of
[15:50] <rick_h_> lazyPower: cool, jcsackett and bac will be interested
[16:00] <bac> lazyPower: i may have missed it but if you have examples of the technique you explained to rick_h_, please let me know.
[16:01] <lazyPower> bac: https://github.com/chuckbutler/flannel-docker-charm/blob/master/playbooks/network-relation-changed.yaml#L21
[16:01] <bac> lazyPower: ty!
[16:02] <lazyPower> bac: context being, the network relation is responsible for sending networking config data from flannel to the Docker daemon to configure SDN. flannel-docker should not modify the DOCKEROPTS file, hense we send it (potentially out of band) to docker to manage that files configuration
[16:03] <lazyPower> bac: the receiving end is a little convoluted with ansible handlers, so if you need a full stack breakdown of how thats getting used feel free to ping and i'll try to explain it as best i can :)
[16:29] <ntpttr> Hey everyone, I'm trying to configure my Juju and Maas to work behind a corporate proxy, and for some reason I'm getting "could not access file 'provider-state': get http://<IP_ADDRESS>/MAAS/api/1.0/file/provider-state/: http: error connecting to proxy http://http://myproxy:port: dial tcp: lookup http: no such host". The problem seems to be that http:// is showing up twice in the proxy URL, but in .juju/environments.yaml I configured http-proxy, https-proxy, ftp
[17:05] <ntpttr> I rebooted my machine and my problem is different now, running 'juju --debug --show-log status' gives me "unable to connect to environment "maas"", and says it got service unavailable back from the server with the operation timing out
[17:06] <ntpttr> I do have the IP of the MAAS server listed in my 'no-proxy' section of the environments.yaml file
[17:07] <lazyPower> ntpttr: can you reach the state server normally?
[17:07] <lazyPower> i mean via ping/ssh et-al
[17:07] <ntpttr> yes I can ping it
[17:08] <ntpttr> lazyPower: And it was working without any proxy when I was testing it at home
[17:08] <lazyPower> Can you ssh to the node, and check if the jujud process is running, no UFW
[17:09] <ntpttr> Right now there's no node to ssh to, I'm trying to bootstrap an environment to a node
[17:09] <ntpttr> lazyPower: I'm using an Ubuntu Orange Box and am logged in to the controller node
[17:10] <lazyPower> hmm, i haven't had much hands on with the orange box but i know it takes some special considerations
[17:10] <lazyPower> so you're trying to check status on an environment that hasn't successfully bootstrapped?
[17:12] <ntpttr> lazyPower: Yes, well in the default examples that come with the orangebox it has a bootstrap script that first checks if there's an existing deployment by calling status, and then runs bootstrap on a VM
[17:12] <lazyPower> ntpttr: this leads me to believe there's  a stale .jenv in your control node that thinks the environment is bootstrapped, but th eenvironment is inconsistent with that.
[17:13] <ntpttr> lazyPower: if there is, it isnt in ~/.juju/environments, is there another place it could be?
[17:13] <lazyPower> is th eorange box using encrypted home?
[17:14] <lazyPower> if so i think it maps to /var/juju or something similar.
[17:14] <ntpttr> lazyPower: I don't think so, that directory isn't there
[17:16] <lazyPower> ntpttr: this is the error you'll see when there's no .jenv and you attempt to run status on an environment
[17:16] <lazyPower> http://paste.ubuntu.com/12246973/
[17:17] <lazyPower> if you're seein gsomething else, there's a stale environment configuration somewhere on disk, and i'm sorry i'm not as familiar with the orangebox setup as I should be to help here.
[17:17] <ntpttr> lazyPower: All right, running that command now - have to wait a bit for it to time out
[17:17] <lazyPower> kwmonroe: do you have a second to lend your orange box experience here?
[17:18] <lazyPower> kwmonroe: specifically, do you know what ntpttr is referring to about the setup scripts/examples on the OB?
[17:20] <ntpttr> lazyPower: So I did get the first part of that error, saying it's unable to connect and that I should check credentials or use juju bootstrap, but in the erro rdetails I still get 'could not access file provider-state: gomaasapi: got error back from server: 503 Service Unavailable', and then a lot of HTML that says a communication error occurred: operation timed out
[17:20] <lazyPower> can you pastebin that error output?
[17:20] <ntpttr> looking at the code from the orangebox setup script, all it's doing is running juju status and then juju bootstrap
[17:20] <lazyPower> it sounds like it attepted to contact maas and maas 503'd on you.
[17:20] <ntpttr> sure one sec
[17:21] <ntpttr> pastebin.com/pYzBvHwS
[17:21] <ntpttr> http://pastebin.com/pYzBvHwS
[17:24] <ntpttr> here's my environments.yaml http://pastebin.com/Xb0ejV4Y
[17:26] <lazyPower> ntpttr: can you pull up the MAAS web ui?
[17:27] <ntpttr> Yes, I've set the proxy and upstream DNS from there
[17:28] <kwmonroe> lazyPower: i believe ntpttr is talking about this bootsrap script
[17:28] <kwmonroe> http://bazaar.launchpad.net/~orange-box-examples/orange-box-examples/trunk/view/head:/bin/orange-box-bootstrap-juju
[17:29] <kwmonroe> ntpttr: can you verify that node0vm0 is running (it's easy to see if you launch Virtual Manage Manager)
[17:29] <lazyPower> ntpttr: i'm not sure why its giving you a 503 then. I'm out of my depth aside from checking basics like ensuring your api key hasn't changed (which should be a 401 response) and running destroy-environment --force -y before attempting a re-bootstrap
[17:29] <kwmonroe> we've seen a problem where maas isn't correctly booting KVM instances (like node0vm0)
[17:29] <lazyPower> kwmonroe: thanks for lending a hand :)
[17:29] <kwmonroe> so you may just have to manually power that sucker on (if it's off)
[17:31] <kwmonroe> alternatively ntpttr, you can alter line 31 of that o-b-bootstrap-juju script to "juju bootstrap --to nodeX.maas".  that'll try and bootstrap a physical machine instead of a VM.
[17:32] <kwmonroe> (replace X with whatever number you want to be your bootstrap node)
[17:32] <ntpttr> kwmonrow: node0mv0 is currently "ready", should I power it on before trying to bootstrap?
[17:32] <kwmonroe> yeah ntpttr, give that a try
[17:34] <kwmonroe> maas may report that it's sent the "power on" command, but you should fire up Virt Machine Manager and make sure it actually starts.
[17:34] <ntpttr> kwmonroe: okay, thanks for the help! I'll let you know if that works and try bootstrapping to a physical node if not
[17:34] <kwmonroe> np ntpttr, i'll keep fingers crossed for ya :)
[17:35] <ntpttr> kwmonroe: Should I also comment out the 'juju status' check in orange-box-bootstrap-juju? It's timing out running that command and exiting
[17:40] <ntpttr> kwmonroe: hmm it looks like it's still timing out on bootstrapping both to the powered on vm and a physical machine
[17:40] <kwmonroe> ntpttr: you could.. or you could run "juju destroy-environment maas --force" (that'll just remove any maas.jenv file that may or may not exist -- dont' worry, it won't change your maas definition in environment.yaml)
[17:41] <kwmonroe> hmm.. that's no good ntpttr.
[17:41] <ntpttr> kwmonroe: do you think it could be my network settings in maas somehow? Maybe my upstream DNS?
[17:42] <ntpttr> kwmonroe: It's even timing out on the juju destroy-environment command
[17:46] <kwmonroe> ntpttr: i'm scratching my head now.. your proxy settings in the env.yaml look fine to me.  and i'm not sure what "destroy-environment --force" would be trying to do over the network at that point.
[17:47] <sparkiegeek> drop the http:// from the value of the http_proxy
[17:49] <kwmonroe> yeah sparkiegeek?  the docs show the prefix (https://jujucharms.com/docs/stable/howto-proxies), but i guess removing that is worth a shot.
[17:50] <kwmonroe> ntpttr: will you pastebin the output of 'sudo virsh list --all'
[17:50] <ntpttr> sparkiegeek kwmonroe: Yeah I have tried that, since the error I was getting before rebooting my machine was that it was trying to connect to http://http://myproxy:port, but after rebooting for some reason it's all changed and it's timing out instead. I just tried it again with the same result
[17:51] <ntpttr> kwmonroe: Sure one second
[17:53] <ntpttr> http://pastebin.com/mVWePqwM
[17:54] <ntpttr> kwmonroe: Hold up I just restarted my computer again and it connected to maas when I ran bootstrap
[17:54] <ntpttr> kwmonroe: I rebooted after removing my proxy settings from /etc/environment and ~/.bashrc, it seems like maybe that was causing an issue
[17:55] <ntpttr> kwmonroe: I'll let you know if the bootstrap completes without any errors
[17:55] <kwmonroe> interesting ntpttr -- so environments.yaml is now the only place the proxy info is being set?
[17:56] <ntpttr> kwmonroe: There and in the network configuration portion of the Maas settings page. It's looking like the bootstrap is timing out connecting to streams.canonical.com now though
[17:57] <kwmonroe> grrr
[17:59] <ntpttr> Oh it's back to saying error connecting to 'http://http://myproxy:port', although I did remove http:// from my environments.yaml
[18:00] <ntpttr> kwmonroe: The funny thing is it gives that error even if I comment the proxy settings out entirely
[18:03] <kwmonroe> ntpttr: i think that means there's a .jenv that's overriding your environments.yaml.. see what you get with this: "grep -r proxy ~/.juju/environments*"
[18:04] <ntpttr> kwmonroe: That command comes up blank, that folder is empty
[18:06] <kwmonroe> hm.. lazyPower, is there some way to tell where juju would keep .jenvs if not in ~/.juju/environments?  i feel like ntpttr has a mysterious .jenv with proxy settings that are messing with us.
[18:06] <lazyPower> kwmonroe: aside from mlocate's updatedb && locate maas.jenv
[18:06] <lazyPower> i know encrypted home moves it somewhere, like /var/juju/$user
[18:07] <lazyPower> but thats the only instance i can think of where it would do that
[18:08] <kwmonroe> ntpttr: can you give that try (sudo updatedb && sudo locate maas.jenv)?
[18:08] <ntpttr> kwmonroe: Sure
[18:09] <ntpttr> kwmonroe: it came back blank
[18:09] <lazyPower> kwmonroe: there are ENV vars it can read too right?
[18:10] <lazyPower> kwmonroe: juju set-env (which i' mpretty sure requires a bootstrapped env), but i think there are also some environment vars juju reads that it may be colliding with
[18:14] <kwmonroe> ntpttr: i know you removed the proxy bits from /etc/environment and .bashrc, but let's see if they're still around:  env | grep -i proxy
[18:15] <ntpttr> kwmonroe: heey it looks like they are still around somewhere
[18:15] <lazyPower> ntpttr: try unsetting the vars and re-bootstrapping
[18:15] <lazyPower> then give it a go
[18:16] <kwmonroe> ntpttr: unset http_proxy https_proxy no_proxy
[18:17] <ntpttr> kwmonroe: Okay bootstrapping has started fingers crossed
[18:20] <kwmonroe> alternatively ntpttr, you may be able to re-set them to the right value (http://myproxy:port vs http://http://myproxy:port) in /etc/environment or ~/.bashrc.. though i'm not sure where they're coming from at the moment..
[18:21] <ntpttr> kwmonroe: I think they were still there because I had edited and env_keep line to /etc/sudoers
[18:22] <ntpttr> kwmonroe: hmm it looks like bootstrapping is still timing out on connecting to streams.canonical.com :/
[18:22] <ntpttr> kwmonroe: It seems like the env variables need to be set to connect there but they cant be set because it'll cause the double http:// problem
[18:23] <kwmonroe> ntpttr: when you saw them set in the environment with "env | grep -i proxy", where they set to http://http://?
[18:25] <ntpttr> kwmonroe: Oh wow it looks like they are... I have no idea how that happened I feel dumb right now hah
[18:25] <kwmonroe> :)
[18:26] <kwmonroe> so rather than unsetting them ntpttr, let's try setting them to the right values (single http prefix), then re-bootstrapping
[18:26] <ntpttr> kwmonroe: Do you know if it's okay for them to have cidr prefixes in the env variables?
[18:27] <ntpttr> kwmonroe: for no_proxy specifically
[18:27] <kwmonroe> not sure ntpttr, everything i know about proxies is being learned by feverishly typing into google at this very moment.
[18:27] <ntpttr> kwmonroe: uh oh now with the proxies set back the correct way I'm getting the timeout problem connecting to maas again
[18:28] <ntpttr> kwmonroe: that's why I asked about CIDR, it seems like the no_proxy setting for the MAAS host isn't working maybe
[18:29] <kwmonroe> ntpttr: looks like no cidr for no_proxy: http://unix.stackexchange.com/questions/23452/set-a-network-range-in-the-no-proxy-environment-variable
[18:34] <kwmonroe> ntpttr: let's try something crazy.  on the orange box, there's a squid3 proxy (indepent of your external proxy) that serves content to the maas nodes.  let's see if that has crashed:  ps -ef | grep squid
[18:35] <ntpttr> kwmonroe: I've been trying to add to the no proxy list the way it said in your link, and now running that command says that the argument list is too long, I think because there's so many values in no_proxy
[18:36] <ntpttr> kwmonroe: i unset it, and running that command shows squid running
[18:37] <kwmonroe> ntpttr: let's kick it anyway:  sudo service squid-deb-proxy stop; sudo service squid3 restart
[18:39] <ntpttr> squid-deb-proxy is an unrecognized service, but squid3 restarted
[18:40] <kwmonroe> hm, ok ntpttr.  retry the bootstrap
[18:43] <ntpttr> kwmonroe: it got to the deploying stage, so that's good!
[18:44] <kwmonroe> has it gotten that far before ntpttr?
[18:44] <ntpttr> kwmonroe: No, it timed out on connecting to external hosts before
[18:45] <kwmonroe> cool ntpttr!
[18:49] <ntpttr> kwmonroe: Thank you a bunch for your time, you've been really helpful. You too lazyPower.
[18:52] <lazyPower> np ntpttr
[18:53] <lazyPower> sorry I didn't have better info for you :) but happy to help. If you run into any further problems, I suggest mailing the list -<EMAIL_ADDRESS>with the problem scenario and someone in the EU timezones with more experience should be able to lend a hand.
[18:54] <ntpttr> lazyPower: All right, thank you for the advice!
[18:55] <kwmonroe> so ntpttr, while you're bootstrapping, here's what i think may have gone wrong.. the squid3 service that serves the maas nodes came up and read the invalid environment proxy vars (http://http://), and even though you unset/reset them later, that process was already using the bad values and couldn't serve the content needed to bootstrap to node0vm0.  restarting squid3 after the envars were corrected meant the maas proxy
[18:55] <kwmonroe> could then correctly talk to your proxy.
[18:55] <kwmonroe> and least that's what i'm hoping.  i'll feel better when your bootstrap succeeds!
[18:58] <ntpttr> kwmonroe: okay, thank you! The bootstrap did succeed. Now going to node0vm0.maas is saying that DNS can't resolve the hostname, but it does say that juju gui is running there
[18:59] <kwmonroe> ntpttr: do a "juju status juju-gui | grep address" and try to go to the IP directly
[19:01] <kwmonroe> you might need a ",.mass" to your no_proxy var
[19:01] <kwmonroe> sorry, ".maas", not ".mass"
[19:02] <kwmonroe> ntpttr: the orange box knows how to resolve the .maas domain, so we probably just need to make sure requests for those URLs doesn't go through your proxy.
[19:03] <ntpttr> kwmonroe: Okay, I added .maas to no_proxy but juju status now is giving me "error dialing wss://node0vm0.maas:17070: no route to host"
[19:05] <ntpttr> kwmonroe: oh, it looks like after rebooting my machine again node0vm0 is saying no bootable device when it's trying to start up
[19:12] <kwmonroe> eeegads ntpttr, we can't catch a break :/
[19:14] <kwmonroe> unfortuantely ntpttr, i'm not sure how you'd get a "no bootable device" post bootstrap.. we can either try and debug that, or "juju destroy-environment maas" and try to re-bootstrap on a non-VM node (like nodeX.maas instead of node0vm0.maas)
[19:16] <ntpttr> kwmonroe: hmm yeah this is a little frustrating haha. I re bootstrapped to the vm again (at home I was able to access the gui at node0vm0.maas), and it is saying that the public-address should be node0vm0.maas
[19:19] <kwmonroe> ntpttr: i don't follow your last comment there -- what is saying the public-address should be node0vm0.maas?
[19:21] <ntpttr> kwmonroe: That's the result when I run juju status juju-gui | grep address: 'public-address: node0vm0.maas', but it's not resolved by dns
[19:22] <kwmonroe> ntpttr: can you 'juju ssh 0'?
[19:22] <ntpttr> yep, that brings me into node0vm0
[19:22] <kwmonroe> that might get you into the juju unit.. then 'sudo ifconfig' to find the ip
[19:23] <ntpttr> kwmonroe: well the eth0 interface doesn't have an IP, and juju-bro is at <IP_ADDRESS>
[19:23] <kwmonroe> can you get to http://<IP_ADDRESS>?
[19:24] <ntpttr> kwmonroe: no it times out
[19:26] <kwmonroe> ntpttr: try 'export no_proxy=$no_proxy,<IP_ADDRESS>' and then hit the url again
[19:27] <ntpttr> kwmonroe: I'm afraid I already had that in my no_proxy list
[19:27] <kwmonroe> rats
[19:27] <ntpttr> kwmonroe: It's odd, without the proxy stuff at home going to node0vm0.maas worked
[19:29] <ntpttr> in juju status, under machines "0", it lists dns-name: node0vm0.maas, is that right?
[19:33] <kwmonroe> yeah ntpttr, that looks right.  the OB should know how to get to .maas hosts.
[19:38] <jose> marcoceppi: ping
[19:39] <ntpttr> kwmonroe: So I'm not sure, but I think this could be the issue. In order to get the vm to resolve my proxy host and download packages, I configure the Maas upstream DNS to be a server in the same network as the proxy host is, and disable DNSSEC. That way the VM can boot up. But then my controller node in the orange box doesn't resolve node0vm0 because it has a different dns nameserver, <IP_ADDRESS>, which is the gateway to the Orange Box's wireless. Is that poss
[19:51] <kwmonroe> ntpttr:  i don't think that would cause a problem.. even if node0vm0 is using a different dns server, <IP_ADDRESS> should know how to resolve node0vm0.maas.
[19:52] <kwmonroe> and <IP_ADDRESS> is the right dns server for the main orange box node -- it's the only one that knows what a .maas host is supposed to resolve to.
[19:52] <ntpttr> kwmonroe: Hmm well for whatever reason I'm able to curl node0vm0.maas from inside the VM but not from the controller node
[19:52] <kwmonroe> ntpttr: can you ping <IP_ADDRESS>?
[19:52] <kwmonroe> (from the controller node)
[19:52] <ntpttr> kwmonroe: Yes I can
[19:53] <kwmonroe> hmph
[19:53] <kwmonroe> but you can't ping node0vm0, right?
[19:53] <ntpttr> I can ping node0vm0.maas from the controller, yeah
[19:53] <ntpttr> just can't curl or visit it with a browser
[19:55] <kwmonroe> ntpttr: let's see what ports are listening on your bootstrap node: juju run --machine=0 'sudo netstat -ntlp'
[19:55] <kwmonroe> ntpttr: are 80 and/or 443 listed?
[19:56] <ntpttr> Yes, both are listed
[19:58] <ntpttr> Should I add 'search maas' to /etc/resolv.conf?
[19:58] <ntpttr> kwmonroe: right now it just lists my company's domain next to search
[19:59] <kwmonroe> not sure about that ntpttr
[19:59] <kwmonroe> can you 'curl --noproxy * http://<IP_ADDRESS>'?
[20:01] <ntpttr> kwmonroe: no It says there's an error contacting the dns server
[20:04] <ntpttr> kwmonroe: to me it looks like the big difference between the controller where it doesn't work and the VM were it does is the 'search maas' line in /etc/resolv.conf, but I'm not sure the correct way to put it there
[20:04] <jose> tvansteenburgh: ping
[20:04] <tvansteenburgh> jose: hey
[20:05] <jose> tvansteenburgh: o/, I'm seeing a stuck test over here, mind taking a look?
[20:05] <jose> http://juju-ci.vapour.ws/view/Juju%20Ecosystem/job/charm-bundle-test-lxc/482/
[20:06] <tvansteenburgh> jose: i can kill it if you want
[20:06] <jose> welp, just saying, it's completely stuck
[20:07] <kwmonroe> ntpttr: you can try adding maas to the resolv.conf search line (add it before your company domain with a space separating the two)
[20:09] <tvansteenburgh> jose: killed
[20:09] <kwmonroe> ntpttr: but i think 'search' only comes into play when resolving short names (so 'ping node0vm0' would find 'node0vm0.maas').  i don't think that'll help us since we can't even curl the ip address, which should totally not care about dns.
[20:09] <jose> tvansteenburgh: cool, thanks!
[20:09] <ntpttr> kwmonroe: You're right, it didn't help
[20:10] <kwmonroe> ntpttr: you can probably 'ping node0vm0' now from the controller, right?
[20:11] <ntpttr> kwmonroe: yep
[20:13] <kwmonroe> ntpttr: this is indeed frustrating.. let's make sure the juju-gui service is exposed (even though you shouldn't need to do this on an OB): juju expose juju-gui
[20:13] <kwmonroe> and then try to curl with the shortname since we know you can ping it:  curl --noproxy * http://node0vm0
[20:14] <kwmonroe> and if that doesn't work, try 'curl http://node0vm0' without the --noproxy option
[20:14] <ntpttr> Yes it is exposed, here is my full juju status output http://pastebin.com/XK5NW4V9
[20:15] <ntpttr> kwmonroe: still no luck with curl, it was exposed before as well as the last step of the orange box bootstrap
[20:17] <marcoceppi> rick_h_: hey
[20:17] <ntpttr> kwmonroe: Could it be that DNSSEC is disabled?
[20:18] <rick_h_> marcoceppi: party?
[20:19] <kwmonroe> i dunno ntpttr, but i feel like DNSSEC being disable should make our lives easier, not harder
[20:19] <ntpttr> kwmonroe: Yeah, without it disabled the machine couldnt even get through the bootstrap
[20:21] <ntpttr> kwmonroe: I just thought it might be related to the problem because it wasn't disabled when I did the same steps at home and it worked
[20:21] <kwmonroe> ntpttr: it's worth a shot, but i'm not crossing my fingers for that one ;)
[20:21] <kwmonroe> ntpttr: let's also try resetting the maas proxy: sudo orange-box-resetproxy
[20:22] <kwmonroe> and then 'curl --noproxy * http://node0vm0 || curl http://node0vm0'
[20:22] <marcoceppi> rick_h_: IM ALWAYS PARTYING!
[20:22] <marcoceppi> rick_h_: I want to package python-jujubundlelib into the juju stable ppa, is that cool with you? (I'
[20:22] <marcoceppi> (I'll do it in a way that won't conflict with future pacakges of the same version in archive if that every happens)
[20:23] <rick_h_> marcoceppi: sure thing
[20:23] <rick_h_> marcoceppi: Makyo and company can help test or anything you want there.
[20:23] <marcoceppi> rick_h_: yes, thank you - we're using it for bundle proofing in charmtools
[20:23] <ntpttr> kwmonroe: weird it will autocomplete orange-box-resetproxy but it says command not found
[20:23] <marcoceppi> rick_h_: I'll make sure to reach out if I have any issues, but I don't forsee a problem
[20:24] <ntpttr> kwmonroe: I had to become root with sudo -s and then run it for it to work but it did now
[20:24] <rick_h_> marcoceppi: sounds good
[20:24] <ntpttr> kwmonroe: unfortunately didn't fix the DNS problem though
[20:28] <ntpttr> kwmonroe: Maybe the files in /etc/bind/maas? When I had it working before I was using maas 1.7.6 and now I'm on maas 1.8.0, which changed some of the files in that firectory
[20:34] <kwmonroe> ntpttr: those files define how to resolve the .maas domain, which sounds like it's working -- you being able to ping node0vm0.maas and have it return <IP_ADDRESS> means the local dns server did it's job.
[20:35] <ntpttr> kwmonroe: Then I'm sort of stumped here, I'm not sure which DNS it is that can't resolve node0vm0.maas
[20:36] <kwmonroe> ntpttr: what happens when you just try to 'ssh ubuntu@node0vm0'?
[20:37] <ntpttr> kwmonroe: It works
[20:37] <kwmonroe> ok, so DNS is working.. it's just the http/https traffic that isn't coming over.
[20:37] <kwmonroe> which has to mean one of our proxies isn't working
[20:37] <kwmonroe> (i think)
[20:38] <kwmonroe> or rather, the proxy is working too well.. it's like the request is being sent off to your myproxy:port even though we've told it no_proxy on <IP_ADDRESS>
[20:38] <ntpttr> kwmonroe: Hmm interesting, the proxies were resolved and were working during bootstrapping - update was able to resolve the ubuntu archives
[20:39] <ntpttr> kwmonroe: Yeah the no_proxy might be it somehow
[20:40] <ntpttr> kwmonroe: And there's still the thing where if I reboot the machine the VM cant boot back up because there's "no bootable device" >.<
[20:40] <kwmonroe> right ntpttr, the proxies did their job to get external bits onto the node, but now it seems like the request to http://node0vm0 is being sent to the proxy (which of course can't resolve it because the internet doesn't know about node0vm0)
[20:42] <kwmonroe> try this ntpttr, 'unset http_proxy https_proxy; curl http://node0vm0'
[20:42] <ntpttr> kwmonroe: Okay one second while I bootstrap again because I restarted my computer
[20:42] <kwmonroe> lol
[20:43] <kwmonroe> i was hoping the "no bootable device" thing just kinda fixed itself ;)
[20:43] <kwmonroe> i'm really not sure about that one
[20:43] <kwmonroe> other than trying to bootstrap to nodeX.maas vs node0vm0.maas to see if it's a KVM thing or a bootstrap thing.
[20:44] <kwmonroe> so the current plan ntpttr is to bootsrap with the proxies in place, then unset them and try to curl.  that'll tell us if the proxy is gobbling up the http request.
[20:45] <ntpttr> kwmonroe: sounds good
[20:50] <ntpttr> kwmonroe: So a possible lead on the 'no bootable device', it seems like if the VM is powered on the no bootable device thing happens, when I tried to bootstrap again while it was on just now I got the error, but then I released the node with Mass which shut it down, and now bootstrapping is working again
[20:52] <kwmonroe> hey kirkland, have you seen an error on the OB where node0vm0 errors with 'no bootable device'? ^^
[20:55] <ntpttr> kwmonroe: In the maas images tab it shows the image that I previously had added to it when setting up the orange box without a proxy, but it also says "Error: No boot sources provide Ubuntu images" above that
[21:00] <kwmonroe> ntpttr: you're out of my maas knowledge with that one ^^ i'd recommend asking that in #maas
[21:00] <ntpttr> kwmonroe: Well unsetting the proxy did in fact make curl work
[21:01] <kwmonroe> awesome.. cya later!
[21:01] <kwmonroe> (kidding, of course)
[21:01] <ntpttr> kwmonroe: haha the juju gui still seems to be hanging connecting to the juju environment though >.<
[21:02] <ntpttr> kwmonroe: wait there it goes it just took a good two minutes
[21:03] <kwmonroe> that's a pretty long wait, but i'll take it if it finally worked :)
[21:03] <ntpttr> kwmonroe: whew me too, hey it's a start
[21:03] <ntpttr> kwmonroe: thanks again
[21:03] <kwmonroe> so ntpttr, i think this points to no_proxy as the key here.
[21:04] <kwmonroe> we've gotta make sure http and https traffic to 10.14.100.x doesn't get sent off to the proxy
[21:05] <kwmonroe> ntpttr: i would have thought simply adding <IP_ADDRESS> to no_proxy would have been enough, so i'm stumped as to why unsetting both http_proxy and https_proxy was required.
[21:06] <ntpttr> kwmonroe: Yeah it is odd...
[21:09] <ntpttr> kwmonroe: well I have to get going for now, thank you for spending so much time with me on this I appreciate it
[21:09] <kwmonroe> sure thing ntpttr - just ping here (or on<EMAIL_ADDRESS>if you want to poke on this proxy stuff some more
[21:12] <ntpttr> kwmonroe: Sounds good, I will :)
[21:13] <marcoceppi> rick_h_ Makyo python-jujubundlelib and python3-jujubundlelib are now in the stable ppa, I'll throw the packaging branch up somewhere in a few mins. Happy to roll releases as they come out, we just added it to charm-tools for bundle v4 support/proofing
[21:14] <marcoceppi> oy, nvm
[21:15] <marcoceppi> I should talk with frankban tomorrow, his package may need some updates
[21:21] <rick_h_> marcoceppi: which package?
[21:21] <rick_h_> marcoceppi: these are new right? Or you mean the python package?
[21:21] <marcoceppi> rick_h_: I just now noticed there's a jujubundlelib package in stable that frankban uploaded to the stable ppa
[21:21] <marcoceppi> but it only provides jujubundlelib and not python-jujubundlelib python3-jujubundlelib as I expected it to
[21:22] <rick_h_> marcoceppi: oh, ok
[21:23] <marcoceppi> I have a new packaging branch that would fix that, but it conflicted when I went to upload it, so I'll have to chat wtih frankban tomorrow on it (unless he's on vacation?)
[21:23] <rick_h_> marcoceppi: well he's here in the room so he'll join irc
[21:23] <rick_h_> marcoceppi: and you guys can hash it out
[21:23] <marcoceppi> oh, you guys sprinting?
[21:23] <rick_h_> marcoceppi: I think the package is compatible with both
[21:23] <rick_h_> marcoceppi: yea, in chicago this week
[21:23] <marcoceppi> rick_h_: it's not, it doesn't install the python3 path properly
[21:23] <rick_h_> marcoceppi: oh, I'm surprised.
[21:23] <marcoceppi> not a big deal since charm-tools is only py2, but amulet is py2 + py3 and we'll see an update to that soon
[21:24] <rick_h_> marcoceppi: ok, well asked frankban to join in and catch up
[21:24] <marcoceppi> rick_h_: not frankban's fault, it's a problem with py2dsc which doesn't support py3 ootb
[21:26] <rick_h_> marcoceppi: ah, ok we're all caught up now
[21:26] <rick_h_> marcoceppi: so go ahead and we'll update quickstart to use the python2 package you've got
[21:26] <rick_h_> marcoceppi: and deprecate/clean up the older bundlelib package that's not python ver. specific
[21:26] <rick_h_> (well, not named specific)
[21:27] <marcoceppi> rick_h_: okay, I'm happy to create a jujubundlib package target taht just aliases python-jujubundlelib so that it transitions cleanly
[21:27] <rick_h_> marcoceppi: ok, will let you all coordinate it so that we make sure quickstart and the gui are kept happy
[22:35] <firl> anyone able to help me understand how to use juju-deployer config constraint for a maas tag?
[22:35] <firl> trying constraints: "tag=25net"
[22:50] <wolsen> firl, try tags instead of tag
[22:52] <firl> wolsen no dice “could not find expected ‘:’”
[22:53] <wolsen> firl, are you using 'constraints: tags=25net'?
[22:53] <wolsen> or?
[22:54] <firl> http://pastebin.com/205weCSn
[22:54] <firl>       constraints: "tag=25net"
[22:57] <wolsen> firl, I think you should change the constraints from "tag=25net" to "tags=25net"
[22:57] <firl> I tried that
[22:58] <firl> http://pastebin.com/pPiNPzyR
[22:58] <firl> ( same error )
[23:01] <wolsen> firl, oh - you need a space between num_units: and 7
[23:01] <wolsen> on the next line
[23:01] <firl> le sigh
[23:01] <firl> ty
[23:01] <wolsen> np
[23:01] <firl> it’s running now, maybe I should step away from the computer haha
[23:44] <pmatulis> what is the difference between 'juju add-machine' and 'juju deploy ubuntu' ?