[05:43] <Kilos> hi superfly and aothers
[05:44] <Kilos> yo theblazehen
[08:56] <Kilos> hi griffin_  simeon
[08:57] <griffin_> Hey Kilos
[08:58] <Kilos> yo Cantide
[08:58] <Cantide> :)
[08:58] <Cantide> hi Kilos, griffin_ :)
[08:59] <griffin_> Hi Cantide
[09:09] <magespawn> morning all
[09:13] <Kilos> hi magespawn
[09:13] <magespawn> hey kilos
[09:13] <magespawn> Kilos:
[09:14] <magespawn> are you bloeping ye?
[09:14] <magespawn> yet
[09:15] <Kilos> lol i am running lubuntu here but it wasnt too lekker so installed mate on it and now its kiff
[09:15] <Kilos> but it goes ploeng not bloep here on xchat
[09:16] <Kilos> so much faster than kde and unity
[09:16] <magespawn> mate is one of those that i have never tried
[09:16] <Kilos> only kde install packages is quicker
[09:17] <Kilos> makes your pc work like maverick
[09:17] <Kilos> gnome2
[09:18] <Kilos> only prob so far is when i go places >home it tries to open with vlc
[09:18] <Kilos> maverick also did that long ago and i dunno how i fixed it
[09:22] <Kilos> apart from removing vlc that is
[09:23] <magespawn> i think that would be in the file or folder associations, right click then select the program you want to use to open that folder/file
[09:24] <Cantide> Kilos, i bet Unity will be much lighter and faster in the future
[09:24] <Cantide> because of the move away from Unity 3D
[09:24] <Cantide> and the implementation of qt/qml + mir
[09:24] <Cantide> but that's at least a year away i think :<
[09:25] <magespawn> will be interesting to see
[09:25] <Kilos> i hope so. because i can run 12.10 here now but dont fancy all the fading/shading of things, makes everything take so much longer to happen
[09:25] <Cantide> yeah
[09:25] <Cantide> i'm all for lightweight above appearance
[09:25] <Cantide> but looking good is sadly what draws people in
[09:25] <Kilos> yeah snappy performance
[09:26] <magespawn> here is another phone for the debate from last night http://www.gsmarena.com/nokia_808_pureview-4577.php
[09:26] <Kilos> eye candy is for peeps with good eyes and lotsa time
[09:26] <magespawn> indeed Kilos
[09:27] <Kilos> i prefer candy inna mouth
[09:29] <Kilos> lubuntu was very nippy but i couldnt find my home folder with gui so thats why i installed mate
[09:29] <magespawn> i used lubuntu once for a little
[09:34] <Kilos> if it wasnt for nm i would used 12.04 kde and unity. i like both
[09:34] <Kilos> might still install ubuntu-desktop here when new data goes in
[09:35] <Kilos> been a bad 2 weeks data wise
[09:35] <Kilos> and all because if the quantal packages in precise that my graphics card couldnt use
[09:36] <Kilos> grrr
[09:36] <Kilos> s/if/of
[09:36] <nlsthzn> wwwwwwwwwweeeeeeeeeeeeeeeeeee!@@@@@@@@@@@@@@!!!!!!!!!!!!
[09:37] <Kilos> sjoe wassup nlsthzn
[09:37] <Kilos> you had triplets?
[09:37] <nlsthzn> ah not much uncle Kilos ... just saw I have irc open and well... yes....
[09:38] <Kilos> haha
[09:38] <Kilos> you battling with irc? whew
[09:41] <nlsthzn> no... not really... just being random
[09:42] <Kilos> ah magespawn mate doesnt have bell.ogg in /usr/share/sounds/
[09:43] <Kilos> it uses bell.oga
[09:43] <Kilos> thats why no bloep
[10:03] <Kilos> guys i did sudo chown miles:miles /usr/share/sounds/mate/default/alerts
[10:03] <Kilos>  to get bell.ogg to there now to give it back to root do i just substitute root:root in place of miles:miles?
[10:03] <magespawn> now that i am not sure
[10:05] <Kilos> maybe one has to sudo -i first then chown from there to root, but im scared to play too much with chown
[10:06] <Kilos> caused bad maracas once before
[10:06] <Kilos> /usr/share/sounds/ belongs to root to start with methinks
[10:25] <Kilos> wbb
[10:43] <Kilos> hey magespawn you arent running kde anywhere are you
[11:33] <magespawn> i was, not anymore
[11:38] <magespawn> Kilos:
[11:38] <Kilos> ah
[11:38] <Kilos> you shoulda tried konversation
[11:38] <Kilos> methinks if anything is better than xchat , its konversation
[11:39] <magespawn> kinda hooked on quassel
[11:39] <Kilos> haha thats because you dont worry about bloep
[11:40] <magespawn> and thats why you get a reply an hour later sometimes
[11:40] <Kilos> and you use quassel from the hand toy too
[11:40] <Kilos> hahaha
[11:41] <magespawn> ahh that is true, on the tablet i get noises, but i am using one of the cafe machines at the moment
[11:45] <magespawn> off home, chat later
[13:01] <nuvolari> o/
[13:01] <nuvolari> hi oom Kilos, magespawn
[13:01] <nuvolari> and charl_ and kodez
[13:01] <charl_> hi nuvolari
[13:01] <charl_> how goes it
[13:02] <nuvolari> It goes well thanks! You?
[13:02] <charl_> it's going very well
[13:02] <charl_> just relaxing, had a busy week
[13:04] <nuvolari> yeah, this week was weird, it had a long run up, and then all of a sudden friday passed
[13:05] <kodez> gretings to you too nuvolari
[13:06] <kodez> greetings everyone
[13:06] <charl_> hi kodez
[13:19] <charl_> i bought a massive bag of so-called "espresso beans" for 4 euro and am drinking it now
[13:19] <charl_> it's surprisingly good just using it as filter coffee
[13:26] <Kilos> hi nuvolari
[13:26] <charl_> hi Kilos
[13:27] <Kilos> hi charl_
[13:27] <charl_> how goes it
[13:27] <Kilos> and kodeztoo hiya
[13:29] <charl_> have any of you people ever tried to use rdesktop to windows server 2012?
[13:30] <charl_> i discovered an interesting problem... by default there is a security option that's set and then you get a "connection reset by peer" error with rdesktop
[13:30] <charl_> when you disable the security option it works perfectly without a flaw
[13:32] <charl_> the weird thing is, the option is called "allow connections only from computers running remote desktop with network level auhtentication"
[13:32] <charl_> network level authentication? and that causes a connection reset by peer? "interesting" stuff microsoft is up to
[13:34] <charl_> it (obviously) works perfectly with the official remote desktop client in windows 7 though, even though the server is on a completely different network on the other side of the country
[13:34] <charl_> :)
[13:43] <nuvolari> ti oow ki=o-
[13:43] <nuvolari> uhm...
[13:43] <nuvolari> lol
[13:43] <charl_> he?
[13:43] <nuvolari> hi oom Kilos
[13:43] <charl_> lol
[13:43] <nuvolari> right-hand-offset was wrong :P
[13:43] <nuvolari> 1 position to the right
[13:43] <charl_> your fingers were not correctly calibrated with the keyboard :)
[13:44] <nuvolari> yeah
[13:44] <Kilos> lol
[13:44] <charl_> just call it a calibration error :P
[13:44] <nuvolari> lol
[13:44] <nuvolari> I need a keyboard with more prominent home postion indicators
[13:44] <Kilos> what was it supposed to be
[13:45] <nuvolari> it was supposed to be 'hi oom kilos'
[13:45] <Kilos> hahaha
[13:48] <charl_> interesting, there are three linux distros that are officially supported on microsoft's azure platform
[13:48] <charl_> http://www.windowsazure.com/en-us/manage/linux/other-resources/endorsed-distributions/
[13:48] <charl_> ubuntu, suse and centos
[13:49] <inetpro> nuvolari: that should have been "jo pp, lo;pd"
[13:49] <charl_> ironic to think this is after all the FUD they spread about linux 10 years ago
[13:49] <inetpro> good afternoon
[13:49] <charl_> hi inetpro
[13:50] <inetpro> that ^^ is one key position to the right
[13:51] <inetpro> magespawn: that is no "smart" phone
[13:52] <inetpro> in fact very yuck if you ask me
[13:52] <inetpro> Nokia 808 PureView pictures http://www.gsmarena.com/nokia_808_pureview-pictures-4577.php
[13:54] <Kilos> lo inetpro
[13:54] <inetpro> aiho Kilos
[13:57] <inetpro> Kilos: why did you even try to play with the permissions of /usr/share/sounds/mate/default/alerts ?
[13:57] <Kilos> to put bloep there
[13:58] <Kilos> bell.ogg noy bell.oga
[13:58] <Kilos> s/noy/not
[13:58] <inetpro> and did it work?
[13:58] <Kilos> i wish peeps would standardise
[13:59] <Kilos> i dunno. im on kde now
[13:59] <inetpro> I mean the bloep sound, did it work after you did that?
[13:59] <Kilos> it didnt change from what it was even though i added bell.ogg
[13:59] <inetpro> ai!
[13:59] <inetpro> obviously!
[13:59] <Kilos> but all sound files in there except bell.ogg are now locked
[14:00] <inetpro> locked?
[14:00] <Kilos> thats why i wanted to know must i chown it to root
[14:00] <Kilos> ja man show locks there
[14:00] <inetpro> you should have just left it as root
[14:00] <Kilos> but at least bell.ogg is there
[14:01] <inetpro> what's the point?
[14:01] <Kilos> it wouldnt let me copy bell.ogg there man
[14:01] <Kilos> ai!
[14:01] <inetpro> it's in the mate folder
[14:01] <Kilos> ek sukkel met jou partykeer
[14:01] <inetpro> how do you expect xchat to magically know that it's there?
[14:02] <Kilos> i tried to use the other sound option but didnt work
[14:02] <Kilos> and i gave it the whole path
[14:02] <inetpro> ahh
[14:02] <inetpro> but then why copy it into that folder?
[14:02] <inetpro> it could be anywhere
[14:03] <Kilos> lol i tried telling it that too
[14:03] <inetpro> like /home/miles/mybloepsound/bloep.ogg
[14:03] <Kilos> tried while file was on desktop
[14:04] <Kilos> but now im resting on kde again
[14:04] <inetpro> ai!
[14:04] <Kilos> anyway you kde peep for some reason my kde isnt installing with single click anymore
[14:04] <Kilos> what did i do wrong
[14:05] <Kilos> i spent many hours looking in settings but i cant find where
[14:05] <Kilos> i might even trry konversation on mate and see later or morrow
[14:07] <charl_> why would it make a difference which desktop you are running?
[14:07] <Kilos> well quassel had no sound on unity remember so who knows
[14:07] <charl_> ah i see
[14:08] <charl_> yeah kde does a lot of "fancy" things but if it doesn't work on unity it probably won't work on any other gnome-based desktop
[14:08] <Kilos> what you clever peeps can work out for me is
[14:08] <inetpro> kde isnt installing with single click anymore?
[14:09] <inetpro> what does that mean?
[14:09] <Kilos> when you have a flashdisk in , you used to be able to right click format it and then name it lekker which the diskutility dont do
[14:09] <Kilos> what inetpro?
[14:10] <Kilos> ai! ek sukkel
[14:10] <inetpro> I have never installed kde with a single click
[14:10] <Kilos> no man dodo
[14:10] <Kilos> listen
[14:10] <Kilos> if you have archives somewhere
[14:11] <Kilos> you open it and it used to install with one click on the package
[14:11] <Kilos> or actually open the installer with one click
[14:11] <charl_> oh the graphical package management tool
[14:11] <Kilos> yay at last
[14:12] <inetpro> hmm...
[14:12] <charl_> and one click is kde's default open with the mouse/touchpad
[14:12] <charl_> just need to decipher the code :)
[14:12] <Kilos> ya and i like it that way
[14:12] <Kilos> dunno how it disappeared
[14:12] <inetpro> Kilos: you like living on the edge
[14:12] <charl_> mouse/touchpad options?
[14:12] <Kilos> yeah
[14:12] <Kilos> oh ty
[14:14] <Kilos> it shows that
[14:14] <Kilos> hmm...
[14:14] <inetpro> Kilos: what file manager?
[14:14] <Kilos> oh ya
[14:14] <Kilos> i think i installed thunar thats why
[14:14] <inetpro> ai!
[14:14] <Kilos> forget why now
[14:14] <Kilos> blame the young chick
[14:15] <inetpro> what's wrong with dolphin?
[14:15] <Kilos> something didnt work so she said install thunar
[14:15] <Kilos> i forget what it was that didnt work now
[14:15] <inetpro> dolphin is the default kde file manager
[14:16] <inetpro> it's nicely integrated with kde
[14:16] <Kilos> yes but something didnt work with it
[14:16] <inetpro> what is something?
[14:16] <inetpro> how long is a peace of string?
[14:16] <Kilos> ai!
[14:16] <nlsthzn> cat had a wiz all over one of my laptop bags while a netbook was still in it :/ so now I am going to open it up and see if the damage is just superficical or deeper :/
[14:16] <Kilos> scroll back a week or so
[14:17] <Kilos> ai!
[14:17] <Kilos> i hate cats
[14:17] <nlsthzn> +1
[14:17] <Kilos> very allergic to them and their flees
[14:17] <Kilos> only animal that kills for pleasure
[14:18] <inetpro> Kilos: you would have to go back to dolphin and tell us the problem from there
[14:18] <Kilos> ok lemme remove thunar
[14:18] <inetpro> Kilos: why?
[14:18] <Kilos> oh inetpro
[14:18] <inetpro> no need to remove anything
[14:18] <inetpro> did you remove dolphin?
[14:19] <Kilos> nope
[14:19] <inetpro> press Alt+F2 and type dolphin
[14:19] <inetpro> and press enter
[14:19] <Kilos> before i forget again how can i open a konsole with keyboard
[14:19] <inetpro> Alt+F2 konsole
[14:20] <Kilos> ty it opened the thing here
[14:21] <charl_> i normally use alt+f1 instead of alt+f2 because then you can use the up and down buttons to select the application in kde
[14:21] <Kilos> but tell me the shortcut keys to open konsole
[14:21] <charl_> i wonder why it doesn't work anymore, i thought it used to work with the alt+f2 launcher too
[14:21] <charl_> but why do we even need two launchers in the first placew
[14:21] <charl_> *place
[14:21] <inetpro> charl_: up and down also works on Alt+F2
[14:21] <charl_> weird, i tried it on kubuntu 12.10 and it didn't want to work for me
[14:21] <Kilos> because dolphin didnt work with something cha
[14:21] <charl_> i also used to think it worked fine though
[14:22] <Kilos> oh
[14:22] <Kilos> didnt show hidden files i think
[14:22] <Kilos> then the fly told me how
[14:22] <inetpro> ai!
[14:22] <Kilos> ctrl+.
[14:22] <inetpro> Kilos: just look through the menu options
[14:23] <Kilos> for what?
[14:23] <Kilos> i dont wanna go menu everytime i want to open a konsole
[14:24] <inetpro> Kilos: for most things you would normally find stuff in there
[14:24] <Kilos> lol
[14:24] <inetpro> it tells you the shortcuts
[14:24] <Kilos> you so cheeky
[14:24] <Kilos> oh
[14:24] <Kilos> where you see that
[14:25] <inetpro> click on the little spanner on the right
[14:25] <Kilos> show konsole in favourites but shortcuts
[14:25] <inetpro> and if you don't find your shortcut you can see many more in configure shortcuts
[14:25] <Kilos> where you see a spanner
[14:25] <charl_> ah here is what i need to do: http://www.hanckmann.net/?q=kde4_and_the_windows_key
[14:25] <inetpro> Kilos: in dolphin
[14:26] <charl_> i love using the so-called "meta" key instead of alt+f1
[14:26] <Kilos> oh not menu?
[14:27] <inetpro> Kilos: they chose to put the menu inside a icon
[14:27] <inetpro> to free up more screen space
[14:28] <inetpro> that happened in the days when the netbooks came out
[14:28] <inetpro> with small screens
[14:30] <Kilos> you mean i gotta remap the konsole to a key?
[14:30] <Kilos> sjoe
[14:30] <inetpro> hmm... you talking to me?
[14:31] <inetpro> I'm still talking about dolphin and it's shortcuts
[14:31] <Kilos> ai!
[14:32] <charl_> i am surprised to see suse still existing as a company, but it seems like they are doing nothing outside of jumping on the "cloud" hype
[14:33] <inetpro> Kilos: if you're inside dolphin you can press shift+f4 to launch konsole, but that is not a system wide shortcut
[14:33] <Kilos> aha
[14:34] <inetpro> Kilos: what key did you use in unity to open the terminal?
[14:34] <Kilos> ctrl+alt+t
[14:35] <inetpro> hmm... Ctrl+Alt+T is already mapped to something else
[14:36] <Kilos> what? something one uses?
[14:40] <inetpro> in system settings you can create a new global shortcut
[14:40] <inetpro> just have to find a key that is not used yet
[14:40] <inetpro> a key combination
[14:41] <nlsthzn> charl_, dunno about that about suse... all signals I am getting from peeps in openSUSE points to only good things...
[14:42] <Kilos> where you see global shortcuts?
[14:42] <inetpro> Kilos: System Settings | Shortcuts and Gestures | Custom Shortcuts | Edit | New | Global Shortcut | Command / URL
[14:43] <inetpro> The shortcut 'Ctrl+Alt+T' conflicts with the following key combination:
[14:43] <inetpro> Shortcut 'Ctrl+Alt+T' in Application synaptiks for action Touchpad on
[14:44] <inetpro> set the key in the Trigger tab and set the command to konsole in the Action tab
[14:45] <inetpro> and since you do not have a Touchpad you should not have the same problem as me
[14:47]  * inetpro bbl
[14:47] <Kilos> sjoe
[15:04] <Kilos> yo Vince-0
[15:05] <Vince-0> Hi Kilos
[15:05] <charl_> hi Vince-0
[15:06] <Vince-0> manual updating Razr maxx to Android Jellybean
[15:09] <Symmetria> heh, Im busy configuring painful traffic classification crap, what a mission
[15:10] <charl_> traffic classification? for shaping or monitoring?
[15:10] <Symmetria> monitoring
[15:10] <Kilos> nlsthzn: you watching the stormers?
[15:10] <charl_> ah, trying to stop people from pirating? :)
[15:10] <nlsthzn> no uncle Kilos ... forgot they are playing :p
[15:11] <Symmetria> nah, just to be able to se where stuff is coming from properly
[15:11] <Kilos> just started nlsthzn
[15:11] <charl_> brb, off to the shops...
[15:11] <nlsthzn> thanks uncle Kilos ... pity bulls playing tomorrow morning 7 local time, just when I arrive at work :/
[15:11] <Kilos> aw
[15:11] <Kilos> do ahabs follow rugby?
[15:11] <Kilos> hehe
[15:12] <Kilos> or they do camel polo
[15:14] <nlsthzn> football crazy
[15:15] <nlsthzn> see the stormers starting well... or at least hearing it as the site I am using to watch is more like a slide show
[15:17] <Symmetria> ARGH I hate regex
[15:22] <Symmetria> set as-path INTERNATIONAL-ACADEMIC "^2018 36944 20965 .*" ; set as-path INTERNATIONAL-UBUNTUNET "^2018 36944$" ; set as-path NATIONAL-IS "^2018 3741 .*" ; set as-path NATIONAL-SAIX "^2018 5713 .*" ; set as-path TENET-ONLY "^2018$"
[15:22] <Symmetria> ooops
[15:22] <Symmetria> stupid cut and paste
[15:22] <nlsthzn> lol
[15:49] <magespawn> evening all
[15:55] <Kilos> himage
[15:55] <Kilos> ai!
[15:55] <Kilos> magespawn: too
[15:55] <Kilos> good game hey nlsthzn
[15:56] <nlsthzn> seems so, I am reading it online so not that epic for me uncle Kilos :p
[15:56] <Kilos> aw shame. 28 mins to first scrum
[15:57] <nlsthzn> wow
[15:57] <nlsthzn> guess the stormers still scarred cause the bulls out scrummed them in their last clash :p
[15:58] <Kilos> lol
[16:00] <Symmetria> heh neat, I now have communities in place so I can identify traffic from a whole number of sources via netflow
[16:02] <magespawn> can you show us?
[16:02] <magespawn> hey Kilos
[16:02] <Symmetria> heh magespawn can show you what I did sure
[16:03] <magespawn> can you show us the traffic?
[16:04] <Symmetria> heh once Ive applied the rules to the arbor that might be possible :)
[16:04] <Symmetria> http://www.inetpro.org/pastebin/ad7bc84a6980467a98fa1d58759ecb19
[16:04] <Symmetria> heh, thats the actual classification config
[16:05] <Symmetria> what amazes me is that I apply that against half a million routes and it applies and tags in under a second
[16:07] <Symmetria> and even analyzing the traffic ad sending the netflow records at hundreds of megs a second is still only running at 8% cpu
[16:08] <magespawn> you don't actually get all the traffic, you just sniff it?
[16:10] <Kilos> inetpro: ty very much that shortcut for console works kiff
[16:11] <Kilos> that will save me a second every time i need one
[16:12] <Symmetria> magespawn don't even sniff it, the router sends netflow recods
[16:12] <Symmetria> to the netflow collector
[16:13] <Symmetria> so basically, as the traffic passes through the router, it tells the netflow collector "I just had a packet coming in from this interface, destined to this interface, with a source address of X and a destination address of Y and here are all the other relevant details about that flow"
[16:13] <magespawn> ahh right i understand
[16:13] <Symmetria> then the collector correlates it all against the bgp and gives you stats
[16:13] <magespawn> can you see what is in the traffic exactly?
[16:14] <Symmetria> no, we're only looking at routing, ip, tcp/udp/icmp headers, payload is never looked at
[16:14] <Symmetria> but obviously if we were to see something funny in the netflow, the facility to look at the payload via other means is there
[16:14] <Symmetria> (well, on future packets)
[16:15] <Symmetria> because on a juniper router you can effectively tcpdump if you choose to
[16:19] <magespawn> so anyone who can access the router could do that?
[16:19] <charl_> i absolutely hate answering machines
[16:19] <charl_> either pick up the phone or give me an email address
[16:20] <magespawn> ringing phones are a personal bugbear
[16:21] <charl_> yeah i hate bears that bug me
[16:21] <charl_> i also hate ringing phones that bug me
[16:22] <Symmetria> magespawn anyone who has access to the router with the relevant permissions could dump the traffic yes
[16:22] <Symmetria> which is why we're so careful with who has access and what permissions they have on the routers
[16:23] <charl_> the thing that bugs me the most though is when bugs bug me... but i am a programmer so that is a problem i have to deal with
[16:23] <Symmetria> heh, the routers log every command issued to them against whoever typed it, and we can restrict right down to command level who has access to execute what commands
[16:23] <magespawn> can you clear the logs?
[16:24] <nuvolari> \o/
[16:24]  * nuvolari declares a silent victory
[16:24] <Symmetria> magespawn no one can clear those logs unless they have access to the db server, and the backup db server, and if they did, it would be visible, I modified the tacacs code to sequence every command executed
[16:24] <Symmetria> so delete a log line outta the db and you're gonna know someone fucked with the logs
[16:25] <nuvolari> or messed around
[16:25] <magespawn> right so if someone makes a mess of things either on purpose or by mistake you can track it
[16:26] <Symmetria> yeah
[16:26] <charl_> sounds like audit logging on a database
[16:26] <charl_> i like it
[16:26] <charl_> log all the mutations
[16:26] <Symmetria> the idea is that NO ONE issues a command to a router or switch that we can't see and react to
[16:26] <Symmetria> charl_ basically yes
[16:26] <Symmetria> it allows us to see if anyone violates change control etc
[16:27] <charl_> the biggest question is though... are the logs properly monitored
[16:27] <charl_> cause it's one thing to have logs and it's another thing to actually do stuff with them
[16:27] <magespawn> how would you monitor them?
[16:27] <Symmetria> and if it loses communication to the authentication server, it won't let ANYONE execute commands unless you have the password to the local account, and no one has that, its long, randomly generated and escrowed
[16:28] <inetpro> Kilos: it's a pleasure
[16:28] <Symmetria> charl, heh, they are monitored, it emails them to a select group of people every 6 hours (any commands issued in the last 6 hours)
[16:28] <charl_> ah ok that's pretty good :)
[16:28] <Kilos> so lekker when things are standardised. then you dont have to think so much when on another os
[16:28] <charl_> inetpro: is that your site? inetpro.org?
[16:29] <magespawn> bbl later dinner time
[16:29] <inetpro> charl_: yes
[16:29] <charl_> inetpro: very nice
[16:29] <inetpro> oh then again, no
[16:29] <inetpro> charl_: no
[16:29] <inetpro> :-)
[16:29] <charl_> ?? :)
[16:29] <inetpro> they stole my name
[16:29] <charl_> oh lol
[16:29] <Symmetria> heh, charl, I saw the most freakish hack the other day that was positively scary
[16:29] <Symmetria> I watched a guy man in the middle all the https on a network and strip out the https
[16:30] <Symmetria> and capture a ton of usernames and passwords etc in a test
[16:30] <inetpro> charl_: I had nothing to do with it
[16:31] <Symmetria> heh, the guy arp spoofed a gateway, so traffic came to his machine instead of via the router, then forwarded all the traffic through his machine, if he saw web traffic on port 80, he watched for https redirects, then stripped them out and forced https requests to become http requests
[16:31] <Symmetria> and since most sites listen on both and hten just redirect to https to force https
[16:31] <Symmetria> it meant that if you access *directly* via the http, the https disappears and you get it in clear text
[16:31] <Symmetria> scarily enough, it worked against all the south african banks
[16:31] <Symmetria> works against yahoo as well
[16:32] <charl_> although i've heard of these attacks many times before, i've never actually witnessed it myself
[16:32] <charl_> that is extremely dangerous because most users don't watch out for it in their browsers
[16:33] <charl_> it would essentially work against all sites and the only way to defend against it is to double check that you are in fact using https
[16:33] <charl_> i try to remember to always do it myself but i'm sure i forget sometimes
[16:34] <Symmetria> heh, we're turning off port 80 on a lot of sensitive machines now
[16:34] <charl_> maybe i do it subconciously though, check for the green thing in the address bar
[16:34] <Kilos> what is the diffs guys
[16:34] <Symmetria> put a redirect machine that redirects to https on the https server but the actual content is simply not available via port 80
[16:34] <Kilos> whats the https?
[16:34] <charl_> Kilos: http is plain text and https is http over ssl
[16:34] <charl_> Kilos: in other words, it's encrypted end-to-end
[16:34] <Kilos> more secure?
[16:35] <Kilos> ty
[16:35] <charl_> yes very much more secure :)
[16:35] <Symmetria> kilos can't be sniffed for passwords etc
[16:35] <charl_> if it's used properly
[16:35] <Kilos> ah
[16:35] <charl_> that's what it mostly comes down to indeed
[16:35] <Symmetria> charl lol, the more scary hack is a bgp hack I saw where its possible to redirect traffic for any subnet on the internet via your own router
[16:35] <charl_> although it keeps anything secure you want to be secure
[16:35] <Symmetria> and do it invisibly
[16:35] <nuvolari> anyone with google app engine experience around?
[16:36] <charl_> yes i've heard of that also, where a lot of traffic was being redirected through china for a short while
[16:36] <charl_> there were a lot of questions surrounding it
[16:36] <charl_> was it done by accident or was it on purpose?
[16:36] <Symmetria> heh, by inserting hijack bgp routes and then inserting as paths to stop those routes ending up where you don't want them (to keep traffic flowing), and then screwing with packet ttl's to stop traceroutes showing things
[16:36] <charl_> wow, even going as far as manipulating the ttls, that's impressive
[16:36] <charl_> that's crazy scary actually, i never thought of that
[16:37] <charl_> inserting bgp routes... that's one thing
[16:37] <charl_> but manipulating the traceroutes... that's plain evil
[16:37] <Symmetria> lol hop hiding in traceroutes is pretty common practice in mpls networks
[16:38] <Symmetria> but doing it as a hack, yes thats evil
[16:38] <charl_> ah, never thought of that, but i have seen some traceroutes that don't look correct
[16:38] <Symmetria> charl heh, ciscos and junipers and most other mpls capable routers
[16:38] <Symmetria> have a command that says "do not decrement the ttl on packets being mpls switched through this router"
[16:38] <charl_> interesting, very interesting
[16:39] <Symmetria> an the moment you don't decrement the ttl, the router disappears outta the traceroute
[16:39] <charl_> oh yes, i remember it now
[16:39] <charl_> of course
[16:39] <Symmetria> when I was at TENET most of their routers ran in that config
[16:39] <charl_> i thought there was a way to do it on linux routers too
[16:39] <Symmetria> doesnt look like they are doing it anymore
[16:39] <charl_> that can confuse stuff though, if you don't know and can't determine how traffic is flowing
[16:39] <Symmetria> charl there probably is, you can manually manipulate ttl with firewall rules
[16:39] <charl_> makes it hard to debug problems right?
[16:40] <Symmetria> charl you can define certain subnets that it will do the decrement for
[16:40] <Symmetria> so, if you're on the router itself or on the network, you see the traceroutes
[16:40] <charl_> i guess it has some security benefits
[16:40] <Symmetria> but if you're external you don't
[16:40] <charl_> if you don't know the ip addresses of routers it makes it harder to target them
[16:41] <charl_> security by obscurity
[16:41] <Symmetria> its not just about targetting them, it stops people mapping all your network paths
[16:41] <charl_> but why would that be a bad thing?
[16:42] <Symmetria> heh, because if someone has a complete map of your network paths, planning evil ddos attacks is a lot easier
[16:42] <charl_> ah i see now
[16:42] <charl_> there is also another problem this creates... it means traffic can travel in circles if the routers have bad routing tables ?
[16:43] <charl_> if the ttls don't get decremented the packets don't time out
[16:43] <Symmetria> well, most routers have serious protections against that
[16:43] <Symmetria> route loops like that in mpls can be identified through the mpls labels
[16:44] <charl_> ah, i guess if it's inside a certain network segment there are enough ways to counter that
[16:44] <Symmetria> we actually forced that to happen on certain links in the past to attempt to test traffic capacity on circuits
[16:45] <charl_> hahaha, good idea
[16:45] <Symmetria> easiest way to test traffic capacity on an interface or a circuit, force a layer 3 loop
[16:45] <Symmetria> ;p
[16:45] <charl_> brilliant
[16:45] <charl_> no need to generate tons of bogus traffic
[16:46] <charl_> just keep circling the same bogus traffic over and over ;)
[16:46] <Symmetria> lol, generate 10meg, force the loop *with* ttl decrement, set the ttl to 255, and you're suddenly generating 2.5 gig of traffic
[16:46] <charl_> hahahaha!
[16:46] <charl_> crude but effective :)
[16:46] <Symmetria> charl, its not that much different to how the original ddos attacks in the 90s worked
[16:46] <Symmetria> before they got rid of ip directed broadcast
[16:47] <Symmetria> way back when, you could ping a network broadcast address over the internet
[16:47] <Symmetria> and it would broadcast the packet to everything behind the subnet
[16:47] <charl_> oh yes i remember that
[16:47] <Symmetria> so the easiest way to ddos someone, was to spoof ping packets from that person to all the broadcast addresses
[16:47] <charl_> almost forgot about it
[16:47] <Symmetria> and it resulted in massive amplification and goodbye target
[16:48] <Symmetria> scary thing is, there are STILL people that have amplifiers open like that
[16:48] <Symmetria> heh charl: ping <IP_ADDRESS>
[16:48] <Symmetria> you'll see what I mean
[16:49] <charl_> hmmm
[16:50] <charl_> ancient networks
[16:50] <charl_> weird
[16:51] <Symmetria> heh I once wrote a tool
[16:51] <Symmetria> that scanned for those things
[16:51] <Symmetria> using the bgp tables as a scan database
[16:52] <charl_> ah yeah why not
[16:52] <charl_> convenient
[16:52] <charl_> then you can limit the scan based on your own criteria
[16:55] <Symmetria> brb, supper
[16:55] <charl_> same here, bbl
[17:00] <magespawn> some interesting chat there
[17:06] <charl_> k back
[17:06] <charl_> magespawn: very much so!
[17:06] <charl_> i am busy playing with ubuntu on an azure cloud in amsterdam
[17:06] <magespawn> i tried pinging that address, got nothing back
[17:06] <charl_> me neither, i also got no response
[17:07] <magespawn> who does azure?
[17:07] <charl_> it actually uses http://azure.archive.ubuntu.com as the mirror
[17:07] <charl_> no idea right :)
[17:09] <charl_> oh you mean microsoft? or that nobody actually uses it? :)
[17:09] <charl_> look at this crazy traceroute http://paste.ubuntu.com/5599458/
[17:11] <magespawn> i thougt is was microsoft
[17:11] <magespawn> charl_:  why is that crazy?
[17:13] <charl_> there are a bunch of 10.x addresses that show up in the traceroute
[17:14] <charl_> i guess it's possible but i haven't seen that in a long time
[17:14] <magespawn> shall we do a compare from here?
[17:14] <charl_> yeah sure why not
[17:14] <charl_> all on microsoft's end
[17:14] <magespawn> brb
[17:15] <charl_> sounds to me like an anycast story
[17:15] <charl_> or multi-homed
[17:18] <Symmetria> heh
[17:18] <Symmetria> not necessarily at all
[17:19] <Symmetria> entirely possibl that people are using rfc1918 space on their routers
[17:19] <Symmetria> to prevent attacks on them etc
[17:19] <Symmetria> I don't like it, but I know a number of people who do it
[17:19] <charl_> ah ok
[17:21] <magespawn> http://slexy.org/view/s21ixwrZ1M
[17:22] <magespawn> that is traceroute to the name
[17:22] <charl_> from my cable connection: http://paste.ubuntu.com/5599501/
[17:23] <charl_> interesting, you seem to end up in london
[17:23] <Symmetria> wow thats some horrible latency magespawn
[17:23] <charl_> ooh! yes
[17:23] <magespawn> and the second is to the ip address http://slexy.org/view/s253unYSe4
[17:24] <Symmetria> *HRM* you're behind as9143?
[17:24] <Symmetria> interesting
[17:24] <magespawn> wireless to the tablet and vodacom 3g from there
[17:24] <Symmetria> heh, ubuntunet should peer ziggo
[17:25] <Symmetria> I see traffic even to/from ufs to ziggo
[17:25] <charl_> ziggo is a major cable provider in NL
[17:25] <charl_> nothing too unusual about it i think
[17:26] <magespawn> it seems as though <IP_ADDRESS> is in morocco
[17:26] <Symmetria> charl heh, whats unusual is that ziggo is on amsix
[17:26] <charl_> but yes, as9143.net is ziggo's network
[17:26] <Symmetria> and we're not seeing them via amsix
[17:27] <Symmetria> but via init7
[17:27] <charl_> ah, i see
[17:27] <Symmetria> which means either they are closing their peering policy or no one bothered to ask them for peering
[17:27] <Symmetria> ;p
[17:27] <charl_> weird
[17:28] <Symmetria> aahh
[17:28] <Symmetria> their peering policy is stated as selective
[17:28] <charl_> that sucks
[17:28] <Kilos> please explain what is peering
[17:28] <charl_> i am a supporter of open peering
[17:28] <Symmetria> heavy eyeball
[17:28] <charl_> Kilos: different isp's talking to each other basically
[17:28] <charl_> the networks i mean
[17:28] <Symmetria> heh kilos peering = direct connections between isps either on a settlement free or a settlement basis
[17:29] <Symmetria> umm wait I got a presentation I did on peering a while back
[17:29] <Kilos> ah ty i asked maaz  but he gave other stuff
[17:29] <Symmetria> http://www.alstonnetworks.net/presentations/peering-dar-es-salaam-2012.ppt
[17:29] <Kilos> mail it please Symmetria
[17:29] <Symmetria> there ya go :)
[17:29] <Kilos> ai
[17:29] <charl_> ppt? :(
[17:30] <Kilos> ty
[17:30] <Symmetria> charl, heh, you distribute via the format that the majority of your audience can easily access
[17:30] <charl_> :)
[17:30] <charl_> no problem, i got libreoffice to take care of it :)
[17:31] <Symmetria> ;p and as for slide creation, powerpoint still does a damn good job
[17:31] <Kilos> ah ty Symmetria thats a good way of getting info
[17:31] <charl_> it's true, powerpoint isn't bad
[17:32] <charl_> i used to hate openoffice for presentations
[17:32] <charl_> i used to use kpresent
[17:32] <charl_> but i haven't given a talk in yers
[17:32] <charl_> *years
[17:32] <Symmetria> heh charl, there are still a few areas where the fact is, windows/osx software has anything opensource beaten dead to rights
[17:32] <charl_> kpresenter, excuse me, been so long i can't even remember the name anymore
[17:32] <Symmetria> I mean, there is *NO* realistic competition for video editing in the linux world
[17:33] <charl_> can't say i have any experience with that myself
[17:33] <Symmetria> premier pro/after effects are years and years ahead of anything opensource
[17:33] <charl_> video editing i mean
[17:33] <Symmetria> and I hate to say it, photoshop cs6 is years ahead of anything linux has as well :)
[17:34] <charl_> i always use the gimp but the type of image/photo editing i do is extremely basic
[17:34] <Symmetria> yeah gimp is good for basic editing
[17:34] <charl_> the gimp gives me everything i need, i just find it really user unfriendly
[17:34] <Symmetria> but if you're gonna get heavily advanced
[17:34] <Symmetria> photoshop will kick its ass
[17:34] <charl_> i always end up having to google to find out how to do simple things
[17:34] <charl_> but once you get used to it, you can do all the basics fairly quickly and smoothly
[17:34] <Symmetria> heh, I do a lot of video editing, and if you think gimp is hard to use, wait till you try and learn how to use ANY non-linear video editor
[17:35] <Symmetria> those things are *complicated*
[17:35] <Symmetria> but you can do some pretty amazing things
[17:35] <charl_> i guess it's something that i won't be doing anytime soon :)
[17:35] <charl_> it's funny because i do a lot of stuff on computers that most people would consider to be fairly advanced
[17:35] <charl_> and yet, i can't even properly use microsoft word
[17:35] <Symmetria> http://www.alstonnetworks.net/motion-test-3.mp4
[17:35] <Symmetria> lol
[17:35] <charl_> end up having to ask my colleagues for help
[17:36] <Symmetria> that was edited with after effects
[17:36] <Symmetria> stabilized and edited
[17:37] <Kilos> ty Symmetria  now i savvy peering a bit better too
[17:37] <Symmetria> lol its actually amazing how well that stabilizer worked considering that was shot on a dash mounted handcam
[17:37] <charl_> Symmetria i swear you drive so fast i thought you were in germany :)
[17:37] <charl_> just kidding
[17:37] <Symmetria> charl hahaha NO ONE drives as fast as in motion-test-3
[17:38] <charl_> :D
[17:38] <Symmetria> thats been edited ;p its an effective speed in that video of 900kph
[17:38] <charl_> your car would just take off from the road and start flying through the air !
[17:38] <Symmetria> http://www.alstonnetworks.net/motion-test-2.mp4 <[17:38] <Symmetria> heh, still reasonably fast, but no where like the -3 ;p
[17:39] <charl_> ah much better
[17:39] <charl_> that looks more normal
[17:39] <Symmetria> haha, charl yeah, but it doesnt LOOK like 170kph
[17:39] <Symmetria> and its more fun if it actually looks like you're moving
[17:39] <Symmetria> ;p
[17:39] <charl_> that's true, 170 is still fairly fast
[17:40] <Symmetria> lol, I should do a real one at top speed
[17:40] <magespawn> Symmetria: have tried a gopro?
[17:40] <Symmetria> to see what it looks like
[17:40] <charl_> i saw a video recently of someone in germany driving at 180 but it looked fairly peaceful
[17:40] <charl_> (that's legal in germany btw)
[17:40] <charl_> i don't think that's legal in NL :)
[17:40] <Symmetria> magespawn nah, that was a panasonic h700
[17:40] <charl_> or most of the rest of the world for that matter
[17:41] <Symmetria> haha charl if I did a video at top speed and got busted making it
[17:41] <Symmetria> I'd be spending a long time in jail ;p
[17:41] <charl_> don't do it!
[17:41] <charl_> :)
[17:41] <Symmetria> haha, I've taken my car to its top speed only once
[17:41] <Symmetria> and only for about 30 seconds before I got freaked out and slowed the hell down
[17:41] <magespawn> gopro are awesome little cameras
[17:41] <Symmetria> top gps speed I ever hit = 304kph
[17:41] <magespawn> you could mount them on the outside of the car
[17:42] <charl_> wow f*** !
[17:42] <charl_> i can't imagine driving like that
[17:42] <charl_> i think the fastest i have ever done was like 180
[17:42] <Symmetria> ahah charl I have the car for it
[17:42] <charl_> that's true, a good car makes a difference
[17:42] <Symmetria> I've done bloemfontein in 4 hours and 3 minutes from east london
[17:42] <Symmetria> thats an *AVERAGE* of 143 or something
[17:42] <charl_> oh that's not so bad
[17:42] <Symmetria> and holding that kinda average over that distance, you're flying
[17:42] <charl_> i mean not so fast, i could do that too
[17:43] <Symmetria> charl, you gotta be kidding me, to average 143
[17:43] <Symmetria> you gotta be crusing 240+
[17:43] <charl_> oh wait to average, i see what you mean now
[17:43] <charl_> ouch :)
[17:43] <Symmetria> 550 kilometers in 4 hours is... fast
[17:43] <magespawn> work out what the top end is if the ave is 143
[17:43] <charl_> no kidding
[17:43] <Symmetria> lol, I was in a hurry
[17:43] <Symmetria> ;p
[17:44] <charl_> no bulls*** :)
[17:44] <magespawn> next time do gps logging to see the speed at different points
[17:44] <Symmetria> lol when my new car arrives we'll see if I can do sub 4 hours
[17:44] <Symmetria> ;p
[17:44] <charl_> phew, ok, just keep safe !
[17:44] <charl_> i need to go watch a movie, bbl
[17:44] <Symmetria> live fast, die young, make a good looking corpse
[17:44] <Symmetria> and in my case, the latter is not possible
[17:44] <charl_> :D
[17:45] <Symmetria> so I'll just go with 2 outta 3 aint bad ;p
[17:45] <charl_> lol!!!
[17:45] <magespawn> the problem is not the car, it is the roads and the other cars
[17:45] <Symmetria> magespawn yeah but that particular road is *awesome*
[17:45] <Symmetria> and there are virtually no other cars on it at the time I drive ;p
[17:45] <Symmetria> *lol* the other day I drove up to bloemfontein, and the entire way from east london to reddersburg (400 kilometers)
[17:45] <Symmetria> I passed a total of 3 cars
[17:46] <Symmetria> absolutely NOTHING out there after midnight, no trucks, no cars, no bugger all
[17:46] <Symmetria> lol the road between mariantal and the .za border had more traffic on it than that ;p
[17:47] <magespawn> up in the northern cape they have that road they do the test drives on
[17:47] <Symmetria> kilos lemme know if you got any questions about that preso btw
[17:47] <Symmetria> magespawn heh, I took my car round kyalami
[17:47] <Symmetria> that was fun
[17:48] <Kilos> well explained metrhinks
[17:48] <Symmetria> but lol, when you wanna take the car on the track, you first gotta phone the insurance company and tell em you doing it
[17:48] <Symmetria> and they charge you a day racing rate
[17:48] <Symmetria> and that rate is... horrific ;p
[17:48] <magespawn> track days are fun, did a couple sponsered by bmw, audi etc
[17:48] <Symmetria> lol, not to mention that I ate through an entire set of tires in a day on the track and haha, can't do that often, because that = insanely expensive
[17:49] <Symmetria> magespawn lol, its a lot of fun, but the bill for a few set of tyres at 23 grand after the day is done isn't
[17:49] <Kilos> eeek
[17:49] <Symmetria> few/new
[17:49] <magespawn> i did not drive my own car, so that was good
[17:50] <Symmetria> lol, did they teach you how to powerslide etc?
[17:50] <Symmetria> thats where you really chew tyres
[17:50] <Symmetria> and where you are most likely to screw up and write off a car if you get it wrong ;p
[17:51] <Symmetria> I've come pretty damn close to rolling a coupla cars sliding through corners on tracks
[17:51] <Symmetria> but so far, I've only ever written off one car, and haha, that was because I was told it wasn't gonna happen when they were testing the car out at bmw roslyn
[17:52] <Symmetria> (rolled a bmw 650 on the skid pan at rosslyn)
[17:52] <Symmetria> lol, it was not an easy thing to accomplish
[17:53] <Kilos> inetpro: i love ctrl+r
[17:53] <Kilos> will need to work that into xchat sometime
[17:54] <Kilos> or gnome
[17:54] <magespawn> no they taught racing around the track
[17:55] <Symmetria> lol yeah but if you aint sliding at certain points your time is gonna suffer
[17:57] <magespawn> true but it was very controlled stuff
[18:29] <inetpro> Kilos: eventually
[18:29] <inetpro> Kilos: now please stop formatting and re-installing
[18:29] <Kilos> lol man its not by choice
[18:29] <inetpro> ai!
[18:30] <Kilos> i didnt put quantal packages into precise
[18:31] <Kilos> and who would suspect hardware on a working pc to crash with an update
[18:33] <Kilos> i must say ai! not you
[18:33] <Kilos> twit
[18:39] <magespawn> superfly how did you get your contacts off the n900?
[18:39] <superfly> magespawn: exported to a file, then imported on S3
[18:39] <superfly> IIRC
[18:40] <magespawn> ahh right was hoping i could do it enmasse via bllue tooth or something
[18:43] <superfly> magespawn: no, mine exported to a bunch of files, and then I was able to import all the files in one shot
[18:46] <magespawn> yup at least it is better that transfering one by one
[19:10] <magespawn> later all
[19:11] <charl_> nn magespawn
[19:11] <charl_> nn all
[19:14] <superfly> tumbleweed: ping
[19:28] <nuvolari> bloep
[19:28] <nuvolari> oom Kilos
[19:28] <nuvolari> slaap oom al?
[19:29] <Kilos> nee
[19:29] <Kilos> lol
[19:29] <nuvolari> oh
[19:29] <nuvolari> nou hoekom nie?
[19:29] <nuvolari> :P
[19:29] <Kilos> hmm...
[19:30] <Kilos> te moeg om te dink hoekom
[19:30] <nuvolari> lol nee vra maar net oom
[19:30] <nuvolari> ek sien waar staan die tyd
[19:33] <Kilos> ek probeer sien of ek 11 uur kan maak om updates vir lubuntu+mate te kry
[19:34] <Kilos> nuvolari: wat gebruik jy nou?
[19:38] <Symmetria> haha man my dog is camera shy I swear it, you point a camera or a cellphone at her to take video and she refuses to look at it and will start barking at you
[19:38] <Symmetria> its very funny
[19:38] <Kilos> hehe you let that dog rule you
[19:39] <inetpro> Kilos: dis nog lank voor 23:00
[19:39] <Kilos> im sure if you ask her who is the boss she will bark "well me of course
[19:40] <Kilos> 1huur 15 minute inetpro
[19:40] <Kilos> moet maar wag en nag brande plank ryer data gebruik
[19:40] <Kilos> brander
[19:41] <Symmetria> hahaha kilos
[19:41] <Symmetria> she knows full well she's the boss
[19:41] <Symmetria> she's like any other female on the planet
[19:41] <Kilos> haha i thought so
[19:41] <Symmetria> "pay attention to me or Im gonna make your life miserable"
[19:41] <Symmetria> ;p
[19:42] <Symmetria> haha she's like a rebellious female teenager crossed with a very willful 3 year old ;p
[19:42] <Symmetria> trying to get her to go to bed at night is a nightmare haha
[19:42] <Kilos> hehe
[19:42] <Symmetria> but I adore her so its ok :)
[19:43] <Symmetria> hahha she's trying to climb on my lap now and dammit she weights 32 kgs
[19:50] <Kilos> hi theblazehen Guest69076
[19:50] <Guest69076> Hey :)
[19:50] <theblazehen> hi Kilos Guest69076 is a new dude :)
[19:50] <theblazehen> helped him install arch
[19:50] <Guest69076> Yep :D
[19:50] <Kilos> can arch do xchat
[19:50] <theblazehen> yep. pacman -S xchat
[19:50] <Kilos> welcome to ubuntu-za guest
[19:51] <theblazehen> Kilos, he dual boots ubuntu too
[19:51] <Kilos> now get xchat and sort a nick out
[19:51] <Guest69076> thanks :P Still so new to this :P
[19:51] <Kilos> good
[19:51] <Kilos> unity?
[19:51] <theblazehen> yep
[19:51] <Kilos> well keep helping him theblazehen
[19:52] <Kilos> arch and ubuntu is good
[19:52] <theblazehen> sure :) walked him through whole install
[19:52] <Kilos> good lass
[19:52] <theblazehen> complete linux noob on friday
[19:52] <theblazehen> guy*
[19:52] <Kilos> well done
[19:52] <inetpro> theblazehen: why arch?
[19:52] <Kilos> guy?
[19:53] <theblazehen> yep
[19:53] <Kilos> hens lay eggs
[19:53] <Kilos> female
[19:53] <theblazehen> inetpro, so he can learn more about linux
[19:53] <Kilos> sorry laddy
[19:53] <theblazehen> lol
[19:53] <tumbleweed> superfly: 'sup
[19:53] <inetpro> theblazehen: you mean if he uses ubuntu he won't learn about linux?
[19:54] <theblazehen> inetpro, arch forces you to learn
[19:54] <Kilos> should be theblazerooster then
[19:54] <theblazehen> inetpro, he has ubuntu on the desktop i think
[19:54] <Symmetria> :) if you wanna force someone to use, inflict gentoo on them
[19:54] <Symmetria> someone to learn I mean
[19:55] <Guest69076> yep, ur right theblazehen
[19:55] <inetpro> Symmetria: I also thought so :-)
[19:55] <Symmetria> of course that may chase them away from linux forever more
[19:55] <Symmetria> because there is nothing more godaweful or stupid than gentoo ;p
[19:55] <theblazehen> Symmetria, im only tell people to use stuff i can use :p

[19:55] <theblazehen> Symmetria, im also not that evil
[19:56] <theblazehen> (he has slow laptop)
[19:56] <Symmetria> lol theblazehen I'd rather use dos + windows 3 + mosaic than gentoo ;p
[19:56] <inetpro> Kilos: so maybe you should try arch
[19:56] <Kilos> nope
[19:56] <inetpro> Kilos: it forces you to learn :-)
[19:56] <Kilos> theblazehen: lubuntu with mate installed works lekker onna slower pc
[19:56] <Symmetria> (though I admit, I was masochistic enough to use gentoo for a while)
[19:56] <Kilos> hahaha
[19:56] <superfly> tumbleweed: trying to figure out the best way to create OpenLP nightly packages in our PPA using an updated version of the debian source package
[19:56] <theblazehen> Symmetria, that combination is not too bad. tried it once
[19:57] <theblazehen> Kilos, fast enough to use, slow enough not too compile stuff
[19:57] <Kilos> i have no problem learning. my prob is remembering what i learned
[19:57] <tumbleweed> superfly: LP recipes
[19:58] <theblazehen> bye guys, have to sleep now
[19:58] <superfly> tumbleweed: we're currently using a recipe, but we've changed stuff between 2.0 and trunk
[19:58] <Symmetria> theblazehen *LOL* over the years I think I've used it all, dos 3, dos 5, dos 6, dr dos, os2, windows 3.0, windows 3.1, windows nt 3.5, windows nt 4, windows me, windows xp, windows 7, windows vista, osx, solaris, linux, freebsd, qnx, openbsd, netbsd, beos, vax
[19:58] <Symmetria> oh and irix and aix
[19:58] <theblazehen> Symmetria, thats a lot...
[19:59] <Symmetria> these days I stick to a combination of ubuntu for servers and windows 7 / osx for desktops
[19:59] <inetpro> Kilos: just Lather, rinse and repeat often until your fingers do the walking
[19:59] <theblazehen> Symmetria, ok
[19:59] <Kilos> lol
[19:59] <Symmetria> and technically freebsd for routers since junipers run a modified version of bsd
[19:59] <Symmetria> :)
[19:59] <theblazehen> inetpro, true, until your fingers always walk over the s-u-d-o keys
[19:59] <Kilos> aw guest gone already
[20:00] <Symmetria> its a real pitty they never kept developing irix and the machines it ran on
[20:00] <Symmetria> irix was... mindblowing for its day
[20:00] <theblazehen> Kilos, will be back tomorrow
[20:00] <Symmetria> 3d desktops ftw ;p
[20:00] <tumbleweed> superfly: a separate packaging branch for the recipes?
[20:00] <theblazehen> Symmetria, awesome
[20:00] <Kilos> and inetproyou know im a buntu faithful
[20:00] <superfly> tumbleweed: ja, was thinking that
[20:00] <Kilos> only tried tinycore as well
[20:00] <theblazehen> Kilos, he has to share his internet
[20:00] <Symmetria> heh and aix already had live adjustable file systems in 1996
[20:00] <Kilos> shame
[20:01] <theblazehen> Kilos, try arch in a VM some time perhaps
[20:01] <Symmetria> heh aix's filesystem in 96 was more advanced than anything anyone else had for *years*
[20:01] <theblazehen> Symmetria, like lvm or what?
[20:01] <Symmetria> theblazehen like, lvm on steroids
[20:01] <inetpro> Kilos: I know, was just joking
[20:01] <Kilos> will be a while till theres data to waste on other stuff
[20:01] <theblazehen> Symmetria, awesome...
[20:01] <Symmetria> stick a new drive into aix and just assign space from it to whatever and whereever you wanted
[20:01] <Kilos> jaja inetpro as usual
[20:01] <theblazehen> Kilos, thats a shame :(
[20:01] <theblazehen> Symmetria, thats really cool
[20:02] <Symmetria> it was basically like, lvm and zfs and everything good about every other filesystem Ive ever used rolled into one
[20:02] <Kilos> last 2 weeks have used my 2 months quota almost
[20:02] <Symmetria> ;p
[20:02] <Kilos> and all because of graphics card
[20:02] <Symmetria> solaris had some nice features as well
[20:02] <inetpro> Kilos: when it's done just get another one
[20:02] <theblazehen> Symmetria, i should perhps try it in a VM
[20:02] <Symmetria> theblazehen you cant sadly
[20:02] <inetpro> Kilos: you'll have lot's of night owl data
[20:02] <theblazehen> Symmetria, why not?
[20:02] <Symmetria> aix doesnt run on normal pc hardware
[20:02] <Symmetria> its risc based
[20:02] <Kilos> nope used it for lubuntu
[20:03] <theblazehen> Symmetria, cant bochs do risc processors?
[20:03] <Kilos> got 75 meg there and 73 updates on lubuntu
[20:03] <Symmetria> theblazehen I very much doubt you could emulate enough to run aix, might be worth a try but I doubt it
[20:03] <Kilos> 73m updates
[20:03] <theblazehen> Symmetria, awesome - ill try it sometime
[20:04] <Kilos> oh you mean with another one added
[20:04] <Kilos> hehe
[20:04] <theblazehen> bye guys
[20:04] <Kilos> chow now the
[20:04] <Kilos> sjoe
[20:05] <Kilos> looks like MxG also uses kde
[20:06] <Symmetria> lol, last irix release was in 2006
[20:06] <Symmetria> August 16th 2006 saw the end of irix :(
[20:09] <Kilos> so now nuvolari has fallen asleep
[20:10] <Symmetria> heh http://www.trygve.com/onyx3200outside.jpg
[20:10] <Symmetria> that was an awesome machine in its day
[20:11] <Symmetria> http://www.futuretech.blinkenlights.nl/apps/onyxgs02.jpg
[20:12] <Symmetria> heh, those things were just sick in their time, and were pretty much the defacto standard for machines used to render animated films
[20:12] <Symmetria> iirc toy story was rendered on sgi onyx's
[20:12] <inetpro> Kilos: hmm... when did MxG join us here?
[20:14] <Kilos> about a month ago when they were talking about complaining about pcs coming with ms on and no choice
[20:14] <Symmetria> lol, Origin 3800, 512 cpus, a terabyte of ram, and 16 racks big
[20:14] <Symmetria> discounted in 2004
[20:14] <Kilos> that whole story just faded away
[20:15] <Symmetria> discontinued I mean
[20:15] <Symmetria> lol, 512 600mhz risc cpus, Im betting that that thing would probably outrun my modern desktop even today
[20:16] <Squirm> evening
[20:16] <Symmetria> holy crap, it had a 48bit video card with 128meg of video ram on it in *2004*
[20:17] <Symmetria> god I dont wanna know what that musta cost
[20:17] <Kilos> hi Squirm
[20:17] <Kilos> mate on lubuntu 12.04 works kiff
[20:18] <Squirm> had such a weekend
[20:18] <Squirm> after this water it's sleep
[20:18] <Kilos> ok night. sleep tight
[20:18] <Kilos> old man
[20:19] <Squirm> Kilos: you have no idea :/
[20:19] <Kilos> bad week lad?
[20:19] <inetpro> Kilos: with that nickname he must be from the mail & guardian ?
[20:20] <Kilos> no man ill tell you who it is when im on xchat
[20:20] <Squirm> Kilos: just the past 24hours :P
[20:20] <Kilos> konversation doesnt show
[20:20] <Kilos> what happened Squirm?
[20:20] <Squirm> I'm so glad I still have Sunday tomorrow
[20:21] <Kilos> lol someone will wake you early
[20:21] <Squirm> It feels like I have to wake up and work :/
[20:21] <Squirm> Kilos: mebbe another time
[20:21] <Squirm> heh
[20:21] <Kilos> ok
[20:21] <Squirm> they will be shot :P
[20:21] <Kilos> haha
[20:22] <Symmetria> hahaha holy crap, sgi still exists and makes a new cluster system, 256 x 8 core Intel Xeon cpus with 64 terabytes of ram
[20:22] <Symmetria> except... it runs deadrat :(
[20:22] <Symmetria> lol 2048 xeon cores... my god you could render video pretty fast on that thing ;p
[20:22]  * Squirm watches Symmetria talking to himself
[20:22] <Squirm> he must be feeling like I am
[20:23] <Symmetria> Squirm hahah Im rambling but that is truely an awesome machine
[20:23] <Symmetria> http://www.sgi.com/products/servers/uv/configs.html
[20:23] <Squirm> Symmetria: you're still talking to yourself though :P
[20:23] <Symmetria> ;p squirm I been talking to myself for years
[20:24] <Kilos> no wonder the dog is the boss
[20:24] <Symmetria> generally when I wanna talk to the smartest person in the room I tend to ramble to myself *snicker*
[20:24]  * Symmetria hides
[20:24] <Squirm> Symmetria: I know
[20:24] <Squirm> lol
[20:24] <Kilos> lol
[20:24] <Squirm> that was actually clever
[20:24] <Kilos> Symmetria: you are the only one here that knows a bit
[20:25] <Squirm> Symmetria: I'll read that link tomorrow
[20:25] <Squirm> it's open but I can't exatly focus :/
[20:25] <Squirm> eyes are burning
[20:25] <Symmetria> Squirm haha my boss got real upset at me once when I worked at UCT and I told him once I was constantly late because the voices in my head kept me awake all night and I had to get some sleep
[20:25] <Kilos> everyone else knows lots
[20:25] <Symmetria> ;p
[20:25] <Kilos> nut
[20:25] <Squirm> lol Symmetria
[20:26] <Symmetria> kilos *laugh* most if not every person in this room could out program me in a heart beat, its different areas of knowledge is all
[20:26] <Squirm> .:Kilos:. Symmetria: you are the only one here that knows a bit
[20:26] <Squirm> .:Kilos:. everyone else knows lots
[20:26]  * Squirm laughs
[20:26] <Kilos> im joking man
[20:26] <Symmetria> I know enough programming to be dangerous and write evil network exploits though ;p
[20:26] <Squirm> kudos Kilos
[20:28] <Symmetria> btw
[20:28] <Symmetria> http://www.youtube.com/watch?v=S0BM6aB90n8
[20:28] <Symmetria> heh for anyone who is interested in what a *TRUE* network hack can do
[20:29] <Symmetria> heh thats a friend of mine presenting at defcon a few years ago
[20:29] <Symmetria> scary thing is, whats detailed there, still works today just fine
[20:29] <Symmetria> heh true genius in that one though
[20:30] <Kilos> inetpro: 30 mins
[20:34] <Kilos-> ai!
[20:34] <Kilos-> network hackers got me
[20:50] <Kilos> inetpro, go sleep
[20:50]  * inetpro is sleeping
[20:51] <Kilos> hahaha
[20:51] <Kilos> 9 mins
[20:51] <Kilos> you arent supposed to sleep in church on sundays
[20:59] <Kilos> night all. sleep tight


[00:25] <leftyfb> aloini: ntpd or chrony
[00:26] <leftyfb> aloini: also, something is seriously wrong with whatever is writing to that media.log. It's 2 weeks ahead of time
[00:27] <twb> Whatever is writing "media.log" is broken and not using RFC 3339 timestamp format.
[00:28] <twb> The fact that timedatectl indicates "NTPSynchronized=yes" is usually sufficient.  As long as the system is running for at least 6 minutes without a reboot, that will automatically get commited to the hardware clock.
[00:30] <twb> That looks to me like you're running timesyncd's built in SNTP client, which is accurate to about 1 second.  If you need better accuracy, or you expect targeted attacks, you can use ntpsec (full NTP), preferably with an NTS-capable NTP server.
[00:31] <twb> What you've pasted so far looks like someone ran datefudge on whatever wrote media.log
[00:34] <twb> Bleh, looks like if you want NTS right now you have to trust either Sweden or USA
[07:30] <Chr15P_1968> Hi, I need to configure grub2 to ask for a login when you want to edit any of the menu entries, The only guides I could find requires you to use a username and password when the system boots. We are moving from Centos to Ubuntu so I'm a bit new to the Ubuntu way of things, was a simple excersize on grub that ships with Centos to achieve what I
[07:30] <Chr15P_1968> needed. Is there a way in grub2 that ships with Ubuntu 20.04?
[09:42] <Hamidreza> Hi guys, what is LimitMEMLOCK and the eefect of adjusting it in systemd on service?
[11:19] <twb> Chr15P_1968: if you have a RHEL system around, look at /boot/grub/grub.cfg there
[11:21] <twb> Hamidreza: "man systemd.directives" is the index; it will tell you which manpage covers LimitMEMLOCK.  That happens to be a ulimit, so also see /etc/security/limits.conf
[11:21] <twb> Hamidreza: in general LimitX= are not useful except to increase LimitNoFile= in rare cases.
[11:21] <twb> Hamidreza: for actual security hardening, run "systemd-analyze security" and "systemd-analyze security my-cool-unit.service"
[11:48] <Chr15P_1968> @twb, we are currently running centos VMs and protecting grub2 menu entries. https://paste.ubuntu.com/p/K3yzDyM8DM/ shows the steps I used.
[11:49] <twb> if they're VMs don't bother with grub at all
[11:49] <twb> just tell libvirtd the kernel and ramdisk to boot directly
[11:50] <Chr15P_1968> I will look into it, how will you boot into rescue mode for example
[11:51] <twb> http://ix.io/2PJ1
[11:51] <twb> Chr15P_1968: if you need rescue mode then you need access to edit the VM's boot options
[11:51] <twb> Which if they have they can always just bypass grub anyway by adding an ISO
[11:53] <twb> Chr15P_1968: anyway, the steps you pasted sound reasonable for ubuntu also
[11:53] <Chr15P_1968> True
[11:53] <twb> interesting that you are using EFI in VMs since currently that prevents snapshots in libvirtd
[11:58] <Chr15P_1968> update_grub doesn't read 01_users file, I created the file. also grub2-setpassword isn't installed. Trying to see if I need to install a package that provided the tool
[12:02] <twb> use apt-file to see if it has another package or name
[12:03] <twb> re 01_users the path might be slightly different, I don't know offhand
[12:03] <twb> I don't use grub myself so I don't know without digging and ICBF
[12:11] <Hamidreza> twb, I know what is limitx but I don't know what is Memory lock (MEMLOCK)
[12:12] <twb> Hamidreza: did you read the references I cited?
[12:13] <Hamidreza> twb, Yes but it wasn't MEMLOCK in it
[12:18] <Hamidreza> I can't understand what it will do?
[13:12] <kierank> Has the "alternate" installer for ubuntu server been deprecated?
[13:14] <ogra> kierank, https://discourse.ubuntu.com/t/server-installer-plans-for-20-04-lts/13631
[13:15] <ogra> (effectively it was deprecared since 16.04 or so, 20.04 just finished that step)
[13:15] <kierank> hmm ok. It's very annoying as it turns on autoupdates by default
[13:16] <ogra> that has nothing to do with the installer
[13:16] <kierank> sure, but the alternate one didn't
[13:17] <rbasak> I'm pretty sure it did
[13:17] <kierank> no, you get a choice
[13:18] <ogra> installing security updates automatically has been a default of apt and unattended-upgrades for a while already
[13:18] <ogra> and thats really not an installer option
[13:19] <kierank> In the alternate installer you get the choice of whether you want this or not
[13:19] <rbasak> In any case, does it matter if it's an installer option or not? Server users will be customising their servers immediately after install anyway; otherwise what's the point of installing server? So just customise as you wish in the process you're already using after installation.
[13:20] <ogra> thats definitely a bug ... but since that installer isnt supported anyway, thats a moot point
[13:20] <kierank> We see sometimes kernels randomly updating in the field and dkms modules breaking
[13:20] <ogra> (if it would be supported i'm sure that option would have been removed)
[13:21] <kierank> and it's the fault of people using the new installer and having autoupdates on by default
[13:21] <kierank> and assuming the behaviour was like the old one
[13:21] <ogra> not really
[13:21] <ogra> its the fault of the dkms stuff breaking ... but surely not the fault of apt updating things
[13:21] <rbasak> Regressions are bad and they shouldn't happen, so sorry about those. But I think you've got the wrong root cause here. It's *far worse* if users aren't installing security updates without realising that they're not.
[13:22] <ogra> file bugs about these issues and get them fixed ...
[13:22] <kierank> I'm reporting what is happening in the real world, if you don't like it that's not my fault. But you can't blame users for change in behaviour
[13:22] <kierank> (cf: linus rants about this)
[13:22] <rbasak> Where did we blame users?
[13:23] <kierank> 14:19:43 <rbasak> In any case, does it matter if it's an installer option or not? Server users will be customising their servers immediately after install anyway; otherwise what's the point of installing server? So just customise as you wish in the process you're already using after installation.
[13:23] <ogra> you are nmot reporting anything ... you are complaining about the installer ...
[13:23] <rbasak> How is that blaming users?
[13:23] <ogra> reporting bugs happens on launchpad 🙂
[13:23] <rbasak> I'm just saying that if you want to customise your installation, you have an opportunity to do so.
[13:23] <kierank> Because you assume the users now have to check quite complex config files for something that they had a choice of before
[13:23] <rbasak> That's still not blaming users.
[13:23] <kierank> It is
[13:24] <kierank> The config files are quite complex and require multiple changes
[13:24] <rbasak> Ubuntu makes decisions about defaults. That's part of what Ubuntu is. Part of the origin of Ubuntu is *not* asking users a bunch of questions.
[13:24] <kierank> Whereas in alternate, you had one option
[13:24] <rbasak> It's entirely up to the Ubuntu project what the defaults should be, and what's appropriate to prompt during installation and what isn't.
[13:24] <kierank> It was clear-cut before, now you have to edit config files based on guesses from stackoverflow
[13:24] <rbasak> It's fine that you have a difference of opinion on that, and debates about what the defaults should be are welcome.
[13:24] <kierank> great user epxerience
[13:25] <rbasak> Not asking users a gazillion questions does make for a better user experience, yes. It's part of what gave Ubuntu early success over Debian.
[13:25] <rbasak> If users disagree with defaults, there's usually a customisation option available.
[13:25] <kierank> changing behaviour without telling them is not helpful
[13:26] <kierank> Is there actually an official way to disable autoupdates on server
[13:26] <kierank> that doesn't involve stackoverflow guessing and incantations
[13:26] <rbasak> Automatic security updates have been default in Ubuntu for many releases.
[13:26] <rbasak> There has been no change in behaviour.
[13:26] <rbasak> In the sense of what is default, anyway.
[13:27] <kierank> I don't know how to break this down to you: Before: clear option to turn them off in installer. After: ???
[13:27] <rbasak> Changing what set of questions get asked in the installer can be expected to happen from release to release anyway.
[13:27] <kierank> Go to stackoverflow and guess
[13:27] <kierank> until it breaks in production
[13:27] <kierank> because there is an edge case in another random config file
[13:27] <kierank> https://askubuntu.com/questions/1167314/disable-automatic-updates-ubuntu-18-04
[13:27] <kierank> people are literally guessing
[13:27] <kierank> https://help.ubuntu.com/lts/serverguide/automatic-updates.html
[13:27] <kierank> goes nowhere
[13:27] <rbasak> So we need a better answer there.
[13:28] <kierank> Blaming the users here is not helpful at all
[13:28] <ogra> who is blamingh users
[13:28] <rbasak> In any case, turning off automatic updates without putting an alternative management solution in place is *a really bad thing to recommend that users do*.
[13:28] <kierank> 14:19:43 <rbasak> In any case, does it matter if it's an installer option or not? Server users will be customising their servers immediately after install anyway; otherwise what's the point of installing server? So just customise as you wish in the process you're already using after installation.
[13:29] <kierank> Assumes users can somehow understand how to disable autoupdates via telepathy
[13:29] <rbasak> I don't think this conversation is being productive any more.
[13:29] <rbasak> I think I've made my position clear.
[13:29] <rbasak> No point in continuing.
[13:29] <kierank> Yes your point is "Blame the users" we get that
[13:29] <rbasak> It is not.
[13:29] <kierank> They must somehow guess how to go back to the old behaviour
[13:29] <kierank> Please let me know the official way to disable autoupdates
[13:29] <kierank> That used to work in alternate?
[13:31] <rbasak> You might be able to use "dpkg-reconfigure -plow unattended-upgrades" or something like that to see the old prompt and get the old behaviour. I would test that though.
[13:31] <kierank> QED
[13:31] <ogra> https://help.ubuntu.com/community/AutomaticSecurityUpdates
[13:32] <kierank> ogra: that's to turn them on
[13:32]  * ogra sighs and goes to do something useful instead
[13:32] <kierank> It was one option field in alternate, it's now a huge complex config file
[13:32] <kierank> with lots of edge cases
[13:33] <kierank> as I understand it, I've followed most of the online guides
[13:33] <kierank> but random packages were still being updated
[13:34] <isostatic> rm -R /etc/apt
[13:35] <kierank> I think the way to do it is "systemctl disable --now apt-daily{,-upgrade}.{timer,service}"
[13:35] <kierank> But who knows, I'll only find out at 2am when things are broken
[13:35] <rbasak> I wouldn't recommend that, as I think it'll also disable the motd message that informs you when security updates are available.
[13:36] <kierank> So please let me know the official way to do it as it used to work in alternate?
[13:36] <ogra> or just follow the guide i gave you above and call "sudo dpkg-reconfigure --priority=low unattended-upgrades" ... which gives you EXACTLY !!!!! what debian-installer could give you ...
[13:36] <kierank> I can file a ticket on launchpad but we'll rehash the same arguments
[13:36] <rbasak> I already made a suggestion.
[13:38] <ogra> in either case, you should file a bug about the exact breakage you see with dkms pieces, so it can be fixed ... making ubuntu more insecure is *NOT* the solution
[13:38] <kierank> I have no idea how to reproduce said bug. Just wait for the next kernel update
[13:38] <kierank> If you install the kernel manually dkms works fine
[13:38] <rbasak> Some DKMS breakages were a result of bug 1915051, which I'm just reviewing the fix for as it happens.
[13:38] <ubot3> Bug 1915051 in dkms (Ubuntu Hirsute) "dkms-autopkgtest: Also select binary packages that depends on dkms for testing" [High, In Progress] https://launchpad.net/bugs/1915051
[13:39] <kierank> So in a practical world the only way to fix this is to turn off autoupdates
[13:39] <rbasak> It's how some DKMS packages skipped QA by accident.
[13:39] <kierank> I have this issue on 18.04 btw
[13:41] <rbasak> Help to better document things that the community often want to do are welcome. Though IMHO any documentation on turning automatic updates off should come with a dire warning about getting an alternative solution in place to get security updates, as not doing so is completely irresponsible.
[13:41] <rbasak> Help to fix regressions is also welcome.
[13:43] <rbasak> I don't see us adding a prompt to the installer though. The best place to debate that is probably https://discourse.ubuntu.com/c/server/17, but ultimately it's a trade-off, a decision needs to be made, and so people on one side are going to be disappointed. That's no reason not to help with the above two points though.
[13:46] <kierank> I don't think I'm getting the same issue here
[14:03] <kierank> How do I simulate a kernel update that the auto updater would do as opposed to one that is done by the user?
[14:06] <rbasak> I think you can just run "unattended-upgrades"
[14:06] <rbasak> Perhaps with --dry-run if you want
[14:06] <kierank> I suppose if I install without internet connection I won't get updates the first time
[14:07] <kierank> then I could try doing an unattended upgrade as soon as I enable the connection
[14:08] <sigv> I think you want the following apt configs: APT::Periodic::Update-Package-Lists "0"; APT::Periodic::Unattended-Upgrade "0";
[14:08] <kierank> I did that, it wasn't enough
[14:09] <sigv> Unattended-Upgrade::Allowed-Origins {}; ?
[14:09] <kierank> don't know
[14:09] <sigv> would be helpful for us to know what you tried to configure so far.
[14:09] <kierank> those two as stackoverflow says
[14:09] <kierank> and then I got an unexpected update
[14:09] <kierank> So I did "systemctl disable --now apt-daily{,-upgrade}.{timer,service}"
[14:10] <kierank> and that seems to stop things
[14:10] <kierank> But I would rather understand why dkms fails on auto update
[14:10] <kierank> but not on normal user prompted upgrade
[14:10] <sigv> As mentioned above, I do not think you should be disabling apt-daily.service / apt-daily.timer "Daily apt download activities"
[14:11] <kierank> Sure, I'm just trying to fix the problem now
[14:11] <kierank> To not be woken up in the early hours
[14:11] <sigv> The apt-daily-upgrade.service / apt-daily-upgrade.timer disablement might make sense, but I do not think you should be just out-right disabling them tbh.
[14:11] <sigv> Could just set up a Unattended-Upgrade::Package-Blacklist {};
[14:12] <sigv> for your kernel and dkms concerns and then have a separate workflow for those.
[14:13] <sigv> For the previous point, if you are managing a fleet = just put appropriate configurations in your orchestration, and installer defaults do not matter. If you are managing just a few servers and do not have orchestration in place, then just reconfigure unattended-upgrades.
[14:13] <sigv> Actually wonder if you could just uninstall `unattended-upgrades` package, but hey.
[14:14] <sigv> No, seems like a bad idea. Anyhow.
[14:23] <dwigton> I set up a trunk port to my machine that only allows vlans 1 and 20. the Native vlan is set to 100 and isn't actually a thing. Since untagged traffic won't get passed how do I tell ubuntu to use enp0s25.1 instead of enp0s25?
[14:25] <dwigton> I can get in fine since ssh uses vlan 1 but if I try to run updates ubuntu tries to make requests over enp0s25 which is untagged and of course nothing happens.
[14:28] <twb> dwigton: in netplan or in networkd?
[14:29] <dwigton> twb: netplan
[14:29] <twb> No idea about netplan, sorry
[14:30] <dwigton> How do you do it in networkd? maybe the ideas will give me a clue?
[14:31] <twb> Edit /etc/systemd/network/00-upstream.network and fiddle with VLANId=  I think
[14:32] <twb> Oh it's just VLAN=
[14:32] <dwigton> I am tempted to try to give enp0s25 an id and see what happens. the worst is that I have to drag a monitor and keyboard to the "server" *cough* NUC to recover.
[14:32] <twb> EgressUntagged=20 looks like the specific option you would want in systemd
[14:33] <twb> dwigton: yeah I 100% hate devices that still don't have HTML5 BMCs
[14:39] <dwigton> hmm. the netplan documentation is either horrible or I am dumb.
[14:40] <twb> could be both! :-)
[14:41] <twb> I was considering Ubuntu for its better secure boot <-> zfs integration, but took one look at netplan and just went "noooooope"
[14:41] <twb> Too close to network-manager bricking wired interfaces  back in 2010
[20:06] <Ussat> Is anyone here familiar with MAAS ?
[20:08] <rbasak> Try #maas
[20:10] <Ussat> thank you
[20:10] <Ussat> was unaware
[20:13] <Ussat> Heh, seems to not be hight traffic, but thats ok I am patient
[20:15] <rbasak> Yeah it might take a while
[20:15] <twb> Ussat: it is always useful to "/msg alis help" on Freenode, and "/list help" on OFTC.
[20:15] <Ussat> ya ya
[20:31]  * enyc meows
[20:31] <enyc> curious -- will ubuntu-server releases tend to include/defaust to kernel 5.4 LTS always ?
[20:32] <enyc> rather than HWE as per 20.04.2 desktop etc
[20:32] <RoyK> ubuntu 30.04 will probably not default to that kernel ;)
[20:33] <sarnold> enyc: I believe the server installers do default to the "ga" kernel and offer the hwe kernel as an option during install
[20:37] <enyc> RoyK: aah yes true
[20:55] <rbasak> Ubuntu Server 20.04.2 was released with HWE as an option.
[20:55] <rbasak> https://wiki.ubuntu.com/FocalFossa/ReleaseNotes#Installer
[20:56] <rbasak> "Starting from Ubuntu Server 20.04.2 the ISO images can optionally boot the installer using the HWE kernel. In this case the installed system will automatically make use of the HWE stack."


[00:12] <sandstrom> I'm about to setup the firewall for my server. Do you recommend ufw or iptables?
[00:15] <tonyyarusso> Isn't ufw essentially just another frontend to iptables?
[00:15] <tonyyarusso> Looks like it, yeah.  So as far as security, it doesn't matter.
[00:23] <uvirtbot`> New bug: #286678 in samba (main) "Samba transfer of multiple files very slow" [Undecided,New] https://launchpad.net/bugs/286678
[00:23] <osmosis> does linux support AHCI RAID?
[02:07] <zul> nijaba: yeah something like that but it has to be a built smarter because afaik xen is not configured in the -generic kernels
[07:43] <kraut> moin
[07:53] <BlueT_> moin
[08:12] <scuser> hi all, does any one know how to force a linux box not to use simple bind when trying to login ?
[08:12] <uvirtbot`> New bug: #286828 in samba (main) "CIFS share broken after upgrade from 8.04 -> 8.10" [Undecided,New] https://launchpad.net/bugs/286828
[08:29] <scuser> hi all, does any one know how to force a linux box not to use simple bind when trying to login ?
[08:37] <RockHound> scuser: you are still at it?
[08:37] <scuser> RockHound: yes :'(
[08:37] <RockHound> have you asked in other chats? openldap, kerberos etc?
[08:38] <scuser> RockHound: I'm trying at ubuntu and openldap but in vain
[08:44] <RockHound> scuser: maybe you should rethink how you phrase the question
[08:46] <scuser> RockHound: simply now I found that I need to let the client know somehow how to bind, I think the user to bind and the method but I don't know how or where to configure this
[08:48] <scuser> RockHound: the client now try to use simple bind and the server deny this and I want the client to use another method other than simple bind. This is the question now
[08:48] <RockHound> again: which tools / services are you asking your question for? No one here can read your mind of what your setup looks like.
[08:50] <scuser> RockHound: I'm using ubuntu 8.04 I have installed kerberos 5, slapd and ldap-utils as my client those are the tools I've installed
[08:51] <scuser> RockHound: In the startup of the system I want the system to contact ldap server to get the user info so I get it a ticket and I want the system to use it when It's trying to connect to ldap not to use simple bind as this is risky and insecure
[08:58] <soren> scuser: I think you'll have more luck if you ask how to get it to "do X" rather than ask how to get it to "not do Y".
[08:59] <soren> scuser: The answer to the latter is always simple: Turn the machine off. :)
[09:02] <RockHound> soren: ;)
[09:03] <RockHound> scuser: to get a helpful answer, rephrasing the question to get a precise and accurate short description of what you want to do. I am sure that the openldap chat can help you then.
[09:04] <scuser> ok thanks a lot :)
[09:04] <RockHound> and googling for kerberos, sasl, ldap, pam should really show you something
[09:12] <uvirtbot`> New bug: #286851 in php5 (main) "CVE-2008-3658,2008-3659,2008-3660" [Undecided,New] https://launchpad.net/bugs/286851
[10:06] <scuser> hi all, does anyone know how to make a script that runs automatically and renews a kerberos ticket in certain time every day?
[10:12] <nijaba> scuser: cron would allow you to run such a script on a regular basis.  now I have no clue what the kerberos ticket renewal would look like
[10:13] <scuser> nijaba: It's just using kinit command to get a new ticket after the old one expires
[10:13] <nijaba> scuser: then you should be set to add it to your user's cron
[10:15] <scuser> nijaba: so what packages I have to install to have a cron and add my script to it?
[10:15] <nijaba> scuser: nothing, should be installed by default.  see http://manpages.ubuntu.com/manpages/hardy/en/man1/crontab.html
[10:15] <phaidros> hi, where is the correct place to report a failing ubuntu mirror? (debian.charite.de doesn't have /ubuntu anymore)
[10:17] <henkjan> phaidros: #ubuntu-mirrors
[10:17] <phaidros> henkjan: thx
[10:17] <nijaba> phaidros: see also http://www.ubuntu.com/getubuntu/mirror/4
[10:39] <scuser> nijaba: I can't find cron.allow or cron.deny and I can't find any crontab for any user on my system how can I add a crontab for a user and add scripts to it?
[10:39] <nijaba> scuser: crontab -e should add it for you, IIRC
[10:40] <scuser> nijaba: and what to write in that file?
[10:40] <hads> man crontab will show you
[12:02] <wo0f> yo
[12:02] <wo0f> how easy is it to set up Ubuntu Terminal Services?
[12:02] <wo0f> is there just a meta package and gui interface?
[12:20] <RockHound> wo0f: take a look at ltsp
[12:59] <gabryfan82> I am A server for only apache and php, i use gmail (google apps), i should used the php mail function, what MTA I use, what configure this?
[12:59] <gabryfan82> thank's
[13:01] <gabryfan82> thank's
[13:01] <gabryfan82> I am A server for only apache and php, i use gmail (google apps), i should used the php mail function, what MTA I use, what configure this?
[13:03] <gabryfan82> I am A server for only apache and php, i use gmail (google apps), i should used the php mail function, what MTA I use, what configure this?
[13:03] <henkjan> gabryfan82: try postfix
[13:03] <gabryfan82> ok i try this
[13:03] <gabryfan82> now
[13:04] <gabryfan82> apt-get install postfix
[13:04] <gabryfan82> I HOW CONFIGURE THIs?
[13:05] <gabryfan82> only local?
[13:05] <henkjan> please, don't use CAPS
[13:05] <gabryfan82> yes sorry
[13:05] <gabryfan82> only local?
[13:05] <gabryfan82> i how configure this?
[13:05] <gabryfan82> only local?ù
[13:05] <henkjan> i suppose you wan't to send mail from the server
[13:06] <henkjan> do you want to use a smarthost (smtp server from your provider)
[13:06] <henkjan> else choose internet
[13:06] <gabryfan82> only server -> user don't user -> server
[13:06] <gabryfan82> site internet?
[13:06] <gabryfan82> msarthost use ssl?
[13:07] <gabryfan82> for gmail?
[13:07] <henkjan> don't use smarthost
[13:08] <henkjan> use internet site
[13:08] <gabryfan82> ok
[13:08] <gabryfan82> i try this
[13:09] <gabryfan82> function on NAT also?
[13:12] <henkjan> that should also work behind nat
[13:13] <gabryfan82> dont work
[13:13] <gabryfan82> how configure php?
[13:13] <henkjan> wiki.ubuntu.com
[13:13] <henkjan> and search
[13:13] <gabryfan82> ok thank's
[13:14] <ScottK> Any documentation on which Sun boxen are supported by the sparc port?
[13:15] <zul> modern sparc
[13:16] <ScottK> zul:  Is a 4800 modern (I've no idea about Sparc.  Just it's come up somewhere else)
[13:16] <ScottK> I don't even know if that's Sparc or x86 actually.
[13:18] <zul> no idea
[13:18] <henkjan> 4800 looks like sparc highend (max 12 cpus)
[13:26] <RockHound> http://en.wikipedia.org/wiki/Sun_Fire
[13:33] <ScottK> Thanks.
[13:46] <sandstrom> Trying to setup an SSH tunnel, using Localforward 3305 localhost:3306. but it doesn't work
[13:47] <sandstrom> I've setup sshd to allow AllowTcpForwarding yes
[13:47] <sandstrom> any suggestions?
[14:58] <_ruben> hmm .. what was that command again to map dm-X names to /dev/mapper/Y names ?
[15:49] <Helder_Geocrete> Hey
[15:49] <Helder_Geocrete> need some advice here on a new server
[15:49] <Helder_Geocrete> anyone?
[15:50] <ScottK> !ask | Helder_Geocrete
[15:52] <Helder_Geocrete> the question is simple...I need to install a new server on this new company i'm working on...and they want to use a MWSBS 2003 /2008. But i'm more inclined to use a linux distro, in this case, ubuntu... So i need to know more about the USE distro... in comparison to MSWSBS 2003/2008
[15:53] <Helder_Geocrete> thanks in advance :)
[15:53] <ScottK> What functionality are you interested in?
[15:55] <Helder_Geocrete> active directory (seems I cannot find it in USE), mail server features, file server and security...
[15:55] <Helder_Geocrete> ps: newbie in ubuntu...
[15:55] <Helder_Geocrete> :$
[15:57] <Koon> Helder_Geocrete: Full Active Directory features are not available, we can do a NT4 PDC at best, or a AD domain member afaict
[15:58] <Koon> Helder_Geocrete: for the other features see the Server Guide
[15:59] <Koon> http://doc.ubuntu.com/ubuntu/serverguide/C/
[16:00] <Koon> that should give you information on how to set up things
[16:01] <Helder_Geocrete> well, i'm mostly interested in member login /authentication, printer server and file server...so maybe it will do the trick
[16:02] <Helder_Geocrete> thanks for the info :)
[16:02] <thefish> Helder_Geocrete: thats all NT4 domain stuff anyway, samba does that but be aware that you wont have the nice windows GUIs to do it all (you also wont have to deal with SBS)
[16:03] <Helder_Geocrete> well...the gui's aren't the problem...i like some hardcoding from time to time :)
[16:03] <brewmaster> has anyone ever gotten a "413 Request Entity Too Large" error for "/!svn/vcc/default" in subversion?
[16:04] <Helder_Geocrete> thanks for the info once again...be going now
[16:04] <brewmaster> i'm using Apache/2.2.4 (Ubuntu) DAV/2 SVN/1.4.4
[17:11] <kirkland> mathiaz: intrepid amd64 server manual installation to raid1 on kvm disks succeeded
[17:12] <mathiaz> kirkland: great - let's see if raid0 and raid5 are working
[17:12] <mathiaz> kirkland: it may just be an issue with partman-auto-raid that gets stuck
[17:12] <kirkland> mathiaz: let me check booting degraded right quite
[17:12] <kirkland> quick
[17:14] <kirkland> mathiaz: boot degraded continues to work, great
[17:18] <kirkland> mathiaz: in all of my tests, i have one large / filesystem, and one small swap
[17:19] <mathiaz> kirkland: right - for raid0 and raid5 you'll have to create another partition for /boot
[17:19] <kirkland> mathiaz: right
[17:19] <nijaba> nealmcb: A quote for you "It's not about who votes, but about whom is counting the votes" - attributed to Joseph Stalin
[17:36] <nealmcb> nijaba: yup - very true.  I've got something like that on a t-shirt
[17:40] <nealmcb> if there are any django, setuptools, xml, or windows gurus out there who want to help us do a world-class audit of the election this year in Boulder CO, check out http://neal.mcburnett.org/blog/2008/10/18/electionaudits-software-help-audit-election/
[17:51] <mdz> kirkland: bug 284107 has a request for your input
[17:52] <mdz> kirkland: dendrobates seems to say that it's not necessary yet
[17:52] <kirkland> mdz: i'll add a comment there, but here's the skinny...
[17:53] <kirkland> mdz: when we rsync with debian open-iscsi for jaunty, there will be some significant improvements in terms of the boot procedures, including a blip of code in the init script that says:
[17:53] <kirkland>         log_daemon_msg "Mounting network filesystems"
[17:53] <kirkland>         MOUNT_RESULT=1
[17:53] <kirkland>         if mount -a -O _netdev >/dev/null 2>&1; then
[17:53] <kirkland>                 MOUNT_RESULT=0
[17:54] <kirkland>                 break
[17:54] <kirkland>         fi
[17:54] <kirkland>         log_end_msg $MOUNT_RESULT
[17:54] <kirkland> mdz: we don't currently have that code in intrepid (and I'm not proposing we add it)
[17:54] <kirkland> mdz: however, if we do add _netdev to iscsi fstab entries, it could help us on upgrades from intrepid -> jaunty
[17:55] <kirkland> mdz: otherwise, we'll need some logic to figure out what fstab entries are iscsi and need _netdev added at upgrade time
[17:59] <kirkland> mdz: https://bugs.edge.launchpad.net/ubuntu/+source/partman-target/+bug/284107 updated accordingly
[18:01] <zul> mathiaz: are you handling that bacula bug?
[18:03] <mathiaz> zul: yes
[18:03] <zul> k
[18:03] <mathiaz> zul: I've already answered
[18:03] <mathiaz> zul: I'm able to boot a AMI
[18:03] <mathiaz> zul: but not able to log into it
[18:03] <zul> cool
[18:07] <mdz> kirkland: ok, so there's no point at all in changing it for Intrepid unless we add the new init script code as well, which we aren't going to do
[18:08] <kirkland> mdz: fair enough
[18:12] <mdz> kirkland: I was just echoing back my understanding of what you said :-)
[18:12] <kirkland> mdz: yes, that is my recommendation
[18:13] <kirkland> mdz: i will be syncing/merging open-iscsi and working on it for Jaunty when the archive opens
[18:13] <kirkland> mdz: but I don't think it's worth change it for Intrepid now
[18:15] <kirkland> mathiaz: verified lvm install works
[18:15] <kirkland> mathiaz: RAID0 isn't working so well
[18:15] <mathiaz> kirkland: does it get stuck?
[18:15] <kirkland> mathiaz: if i have a separate /boot partition, yeah gets stuck
[18:16] <mathiaz> kirkland: where?
[18:16] <kirkland> mathiaz: if i don't have a separate /boot partition, it finishes, but it's not bootable
[18:16] <mathiaz> kirkland: well - it's normal;
[18:16] <mathiaz> kirkland: grub doesn't support raid0 AFAICT
[18:17] <kirkland> mathiaz: okay, but the hang isn't normal
[18:17] <mathiaz> kirkland: could you run a ps -ef in the vm during install?
[18:17] <mathiaz> kirkland: agreed. I've seen the same thing.
[18:17] <mathiaz> kirkland: are you testing on an intrepid host?
[18:17] <mathiaz> kirkland: and are you doing a manual partition of raid0?
[18:17] <kirkland> mathiaz: intrepid host, yest
[18:18] <mathiaz> kirkland: ok - I was thinking it may be an issue with the virtualization stack
[18:18] <kirkland> mathiaz: manually partitioned, sda1 = 2G, sda2 = 128M, sdb1 = 2G, sdb2 = 128M
[18:18] <mathiaz> kirkland: as we're using more then one block device to do that experiment
[18:18] <kirkland> mathiaz: sda1+sdb1 = raid0 of 4G, with /
[18:18] <kirkland> mathiaz: sda2 = /boot
[18:18] <kirkland> MatBoy: sdb2 = swap
[18:19] <mathiaz> kirkland: ok - so if you don't put /boot on a separate partition the installer proceed correctly?
[18:19] <kirkland> mathiaz: it completes
[18:20] <mathiaz> kirkland: ok
[18:20] <mathiaz> kirkland: http://people.ubuntu.com/~mathiaz/intrepid-i386-raid5-ps-ef.png
[18:20] <mathiaz> kirkland: this is the output of ps -ef when the installer is stuck
[18:20] <kirkland> mathiaz: hmm, 07root_on_raid is mine....
[18:20] <kirkland> mathiaz: i've tested the crap out of that on raid1
[18:21] <kirkland> mathiaz: let me look at that code again
[18:21] <mathiaz> kirkland: the fact that the install completes when you have /boot on the same partition may point to an issue with boot
[18:21] <mathiaz> kirkland: you don't have a process fstab.d/hostboot?
[18:22] <mathiaz> kirkland: I think that's where the problem may be
[18:22] <mathiaz> kirkland: both raid{0,5} install are stuck with the same processes running
[18:22] <mathiaz> kirkland: both installs have /boot on a raid1 array in order to be able to boot
[18:31] <mathiaz> kirkland: I'm gonna head out. Could you investigate this raid install problem?
[18:31] <kirkland> mathiaz: yeah
[18:31] <erichammond1> mathiaz: just saw your question of long time ago: I am able to boot vmbuilder EC2 image but not connect to it.
[18:31] <mathiaz> kirkland: great - I may check back later
[18:32] <mathiaz> erichammond1: right - it seems that we need to get the kernel modules somehow.
[18:32] <mathiaz> erichammond1: zul knows more about it
[18:33] <erichammond1> mathiaz: Been working with him over email, but our communication loop is pretty slow.  We might have different work hours.
[18:33] <zul> erichammond: hey
[18:33] <erichammond1> zul: 'lo!
[18:34] <mathiaz> erichammond1: I think there is a small pond between both of you
[18:34] <zul> erichammond1: im working on it now and already have a solution and just trying to clear some stuff up
[18:34] <zul> mathiaz: nah just a border
[18:34] <erichammond1> zul: nice, look forward to it.
[18:34] <erichammond1> I'm on the US West coast, but basically keep Hawaii hours :)
[18:35] <zul> and different timezones
[18:35] <mathiaz> hm - right - anyway I'm off for now. see ya later
[18:36] <zul> erichammond1: check your /msgs
[19:08] <ivoks> hi all
[19:08] <ivoks> sorry, i didn't make it for the meeting :/
[19:45] <jcastro> looking for -server sessions: https://wiki.ubuntu.com/UbuntuOpenWeek/Prep
[20:29] <cyris|> i need to install some ldap tools that will allow me to do some queries against an ldap server. isn't their a package called openldap-tools or something that will give me ldapsearch?
[20:31] <henkjan> cyris|: there is a package ldap-utils
[21:04] <sommer> kirkland: I keep getting a grub error 17 when trying to install raid5 using the latest iso... just fyi
[21:04] <kirkland> sommer: hey, i'm working an issue related in #ubuntu-installer, at the moment
[21:05] <kirkland> sommer: also, see bug 287112
[21:05] <kirkland> that's just been sponsored, not on the iso yet
[21:05] <kirkland> glad to hear someone else is testing this ;-)
[21:05] <sommer> kirkland: ah cool, just wanted to make sure
[21:06] <kirkland> sommer: what does your partitioning look like?
[21:06] <sommer> kirkland: 3 6.5G ide drives, with one 12.5G partition on the raid array
[21:06] <kirkland> sommer: raid5 on / ?
[21:07] <sommer> kirkland: yep
[21:07] <kirkland> sommer: and where's /boot?
[21:07] <sommer> kirkland: on the same partition, it wouldn't let me create multiple on the raid array... or did I miss configure something?
[21:07] <kirkland> sommer: oh, that's a problem....
[21:07] <kirkland> sommer: we may need to add something to the documentation
[21:08] <kirkland> sommer: /boot can't be on a RAID0 or a RAID5 device
[21:08] <kirkland> sommer: must be on it's own partition, or a RAID1
[21:08] <sommer> kirkland: ooohhh... I figured it may be something like that
[21:08] <kirkland> sommer: when I use a RAID5, I usually create /boot on my RAID1 devices
[21:08] <kirkland> sommer: but that's what's broken, at the moment
[21:09] <sommer> kirkland: the serverguide is frozen, I asked the other day to correct a typo and was denied
[21:09] <kirkland> sommer: bummer
[21:09] <kirkland> sommer: sorry, i should have thought about that
[21:09] <sommer> kirkland: ya, could we add something to the release notes?
[21:09] <kirkland> sommer: let's put an agenda item for the server guide to discuss raid5/raid1 best practices
[21:09] <kirkland> sommer: yeah, it'll need to go there
[21:10] <sommer> kirkland: sounds good
[21:10] <kirkland> sommer: i wouldn't say it's "common knowledge", but a lot of system admins understand the raid5 limitation of grub/bootloaders
[21:10] <sommer> kirkland: heh, most of my experience is with hardware raid5 :)
[21:11] <sommer> kirkland: the whole disk formating filesystem thing can get complicated pretty quick :)
[21:12]  * sommer is just going to use fat32 from now on
[22:51] <kandjar> hi
[22:53] <kandjar> I'm having an issue with my ubuntu server, I can't seem to forward X11 app
[22:53] <kandjar> through ssh
[22:55] <kandjar> anyone?
[22:56] <sommer> kandjar: do you have a gui installed?
[22:58] <kandjar> no
[22:59] <kandjar> not on the server
[22:59] <kandjar> do I need to have a X server on the server box?
[22:59] <kandjar> I m only logging through ssh to it
[22:59] <sommer> isn't that what you're trying to do?
[23:00] <kandjar> I m trying to ssh to the server
[23:00] <kandjar> using ssh -X or -Y
[23:00] <kandjar> and having the display redirected to my remote client
[23:00] <sommer> the server's display?
[23:01] <kandjar> basically, I m log on a client machine
[23:01] <kandjar> and I'm trying to get: 'ssh -X server xlogo' working
[23:02] <trashguy> whats wrong with plain old SSH
[23:02] <kandjar> ?
[23:02] <kandjar> I have some xapp I wanna run :)
[23:02] <sommer> I'm not sure what that is, but without a gui on the server the only thing to display is  console
[23:02] <kandjar> I m remotely logged on the server
[23:06] <soundray> sommer, trashguy: haven't you heard of X11 forwarding?
[23:07] <sommer> yes, but the machine you're forwarding needs a gui... at least when I've done it
[23:08] <sommer> since by default ubuntu-server has no gui...
[23:08] <sommer> by default anyway
[23:09] <soundray> sommer: that's what I'm wondering. I regularly forward a machine that doesn't have a full GUI installation -- but it must have some base X packages that kandjar is missing.
[23:16] <nikkolay> hi guys. I need to move some instalation, but i need to backup a few mysql db... can i copy the /var/lib/mysql to the new server?
[23:17] <nikkolay> or that doesn't work?
[23:18] <sommer> nikkolay: I'd use mysqldump
[23:22] <nikkolay> ok
[23:22] <trashguy> soundray, X11 on a server?
[23:22] <nikkolay> maybe something like: mysqldump --all-databases > /home/nikko/bakcups/mysql.sql
[23:22] <nikkolay> ?
[23:22] <trashguy> what kind of insanity is this
[23:26] <soundray> trashguy: not everything that you cannot immediately relate to is insanity
[23:26] <soundray> trashguy: I'll give you an example, if you're interested
[23:26] <trashguy> I can see
[23:26] <trashguy> no reasoning of waisting server resources on x
[23:27] <soundray> That's the point, there is no wasting of resources
[23:27] <trashguy> unless you are doing some sort of thin client thing and the soul purpose is centralized desktop etc
[23:28] <soundray> I'm running CPU intensive processes on a remote cluster. It outputs images to a filesystem local to the cluster.
[23:28] <trashguy> okay
[23:28] <soundray> To view those images, I log into the login server of the cluster with X forwarding enabled and launch a viewer that displays selected sections from 3D or 4D image volumes.
[23:29] <soundray> The graphical output is forwarded through an encrypted tunnel to be displayed locally on my (full) X server.
[23:30] <soundray> The remote machine needs only basic X functionality installed, e.g. xauth
[23:30] <trashguy> i did something similar with a render cluster
[23:30] <trashguy> i just set up webdav to remotely open the images
[23:30] <soundray> which, btw, was what was missing on kandjar's server. Now it's installed -- problem fixed
[23:33] <soundray> trashguy: doesn't that mean that you have to transfer the entire file before it can be displayed?
[23:34] <trashguy> yes
[23:34] <trashguy> i can see
[23:34] <soundray> That would be a clear disadvantage for my scenario
[23:34] <trashguy> yes
[23:34] <trashguy> i agree
[23:34] <trashguy> majority of the people i see running x is to avoid command line though
[23:36] <soundray> Burn them at the stake!
[23:36] <soundray> :)
[23:36] <trashguy> i been using freebsd to long im a cli nazi
[23:36] <trashguy> ^^
[23:37] <trashguy> Zimbra doesn't play nice
[23:37] <trashguy> with FreeBSD
[23:37] <trashguy> so here I am ;)
[23:38] <soundray> Content management?
[23:38] <trashguy> Exchange alternative
[23:38] <soundray> Oh, groupware
[23:40] <soundray> trashguy: do you have a suggestion for calendar and todo lists that works well on the command line?
[23:41] <soundray> A PIM application?
[23:54] <trashguy> soundray, not somuch on CLI
[23:54] <trashguy> i been inundated by the bras on how much they loved outlook at their old jobs
[23:54] <trashguy> s/bras/brass/
[23:56] <soundray> trashguy: I'll try 'when'
[23:57] <trashguy> we are currently using oracle calendar
[23:58] <trashguy> it iwll be nice when that is gone and I have one less solaris machine to deal with ^^


 Has anyone upgraded to 17.04? I'm thinking of trying an in place upgrade from 16.10. I usually do clean installs.
[12:49] <maxolasersquad> I have it installed on my laptop, but it's been on the 17.04 channel since about a month after 16.10 came out.
[13:02] <maxolasersquad> I ran all the updates last night to get the final version.
 I just started the in place upgrade
 I've never done in place upgrades in the past. Always clean installs
[14:15] <clvx> I just did upgrade my laptop, Zetsy's theme is pretty good. No issues so far.
[14:23] <maxolasersquad> I've found the ugprade process to be pretty good over the last few years.
[14:25] <clvx> wait.. I just found systemd-resolve is using 91% CPU =/
[14:26] <maxolasersquad> I did run into an issue upgrading my work laptop for 16.04 with the latex packages.
[14:27] <maxolasersquad> I've gotten good enough at apt that I can recover from such issues rather painlessly.
 My upgrade went smooth
[14:44] <clvx> hmm.. systemd-resolve goes over 90% everytime I'm connected to a wifi network
[14:45] <clvx> I found a bug in launchpad about it.. confirmed, but not assigned yet..
[14:46] <clvx>  https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1670959
[14:58] <clvx> ok, if you have an xps13 9350 DE, I don't recommend to upgrade to zetsy, systemd-resolve spins up to max even when it's connected by wire.
[14:59] <clvx> I think I'm gonna reinstall the whole system.. laptop is unusable
 https://youtu.be/yzpBS9cC83U
 http://www.businessinsider.com/why-nintendo-isnt-making-the-nes-classic-edition-anymore-2017-4?utm_content=bufferb5463&utm_medium=social&utm_source=facebook.com&utm_campaign=buffer-ti/#2-nintendo-has-a-history-of-creating-collectors-items-as-of-now-the-nes-classic-edition-is-a-collectors-item-2
[22:07] <maxolasersquad> I'm getting a 404 on that page.
 maxolasersquad http://read.bi/2ocPx5o