[07:16] <dholbach> good morning
[08:30] <longsleep> moin folks, first question of the wekk, can i somehow make a /var/log location available for a service in a snap?
[08:34] <ogra_> not under confinement i think
[08:35] <ogra_> stdout is logged to syslog though
[08:35] <ogra_> (or to joornald if you prefer that)
[08:35] <ogra_> *journald
[08:44] <longsleep> ogra_: well i have a daemon which opens /var/log/blah.log and logs there until it reads its config to change the location .. kind of sucks and i was wondering if i can get around to recompile it
[08:48] <ogra_> well, i assume somethin similar to /tmp might be possible here
[08:50] <longsleep> ogra_: yeah - thats what i was thinking
[09:39] <ogra_> kickinz1, whats up woth owncloud ? seems it doesnt work at all anymore since the docker update
[09:40] <kickinz1> ogra_, I started looking at it seems like it doesn't get SNAP_APP_DATA_PATH env. I need to recontruct it.
[09:41] <ogra_> well, as long as it is known :)
[09:43] <kickinz1> ogra_, I plan to upload it soon to the store (ran out of time last week to work on it)
[09:43] <ogra_> yeah, i didnt mean to be pushy or anything ... just noticed it on the weekend
[10:12] <longsleep> ogra_: just checked the code for ubuntu-core-launcher, there is no way to setup additional bind mounts for snaps. So seems like i have to recompile the service :/
[10:15] <ogra_> longsleep, well, there is code that handles /tmp somewhere ... the same code could be used for log handling
[10:15] <ogra_> (not by you ... )
[10:15] <ogra_> (transparently provided to you rather ... like /tmp is)
[10:17] <longsleep> ogra_: yes but this would need a change in ubuntu-core-launcher - too complicated i guess
[10:17] <longsleep> ogra_: code for tmp is here http://bazaar.launchpad.net/~snappy-dev/ubuntu-core-launcher/trunk/view/head:/src/main.c
[10:17] <ogra_> Chipaca, ^^^ ?
[10:40] <Chipaca> longsleep: "additional bind mounts for snaps"?
[10:40] <Chipaca> i'm probably missing context here
[10:45] <Chipaca> also i probably caught you in your lunch break :)
[10:45] <Chipaca> ah
[10:46] <Chipaca> longsleep: yeah, no, no way. either recompile, or wrap it with a preloader that changes open of things in /var/log to somewhere else
[10:46] <Chipaca> there's no way to tell it to use something else?
[10:48] <ogra_> Chipaca, well, on the phone we have per-app upstart los from ubuntu-app-launch ... i'm wondering if the same wouoldnt make sense on snappy
[10:48] <ogra_> *logs
[10:48] <Chipaca> ogra_: the per-app upstart logs are just logging stdout/err to a predetermined file, amirite?
[10:48] <Chipaca> ogra_: it's not that it allows you to write to /var/log/blah.log
[10:48] <ogra_> yeah
[10:50] <Chipaca> i think we might be able to tell journald to write the per-app journal to a file
[10:50] <Chipaca> but i'm not sure we want to
[10:50] <Chipaca> of anything, we might want to expose that to app devs
[10:50] <Chipaca> ie not make it the default
[10:51] <ogra_> hmm, yeah
[10:51] <Chipaca> s/of/if/ fwiw
[11:35] <Chipaca> still no new snappy :'(
[11:45] <lool> longsleep: I tried to pass the things you mentioned around RPi2 and other issues to Paolo, but it's not great on IRC; would you mind opening a bug describing the rpi2 smc issue? it seemed like something we could address in the kernel once and for all
[11:45] <lool> longsleep: the other things... these seemed like workload specific and we just need a facility to set them
[12:17] <ogra_> lool, not sure what makes you think longsleep had the smsc issue :) we dont have a pckage for the RPi kernel or any way to track the bugs for it ... but paolo is aware of the issue and will work on it
[12:18] <lool> ogra_: I know the smc affects everyone, it's just that longsleep brought it up; I wasn't aware of it before that and wanted to pass it cleanly to paolo
[12:18] <ogra_> the smsc issue only affects people that have it
[12:19] <ogra_> and it was me who brought it up
[12:19] <lool> ogra_: how do you mean only affects people that have it?
[12:19] <lool> ogra_: so it's for an additional ethernet adapter, not the main one?
[12:19] <ogra_> and as i told you on friday there is no "suits all" solution
[12:20] <ogra_> smsc is a USB NIC
[12:20] <ogra_> only devices that use it will be affected by the turobo mode bug
[12:20] <lool> ogra_: I see
[12:20] <lool> ogra_: so what's the compromise here?
[12:21] <ogra_> and you have two ways to work around it ... either by switching off turbo mode or by bumping the vm_min size up
[12:21] <ogra_> for the RPi kernel we can easily do the latter so people dont see decreased performance ...
[12:21] <ogra_> if you would want to do this in -generic i wouldnt just bump the min addr
[12:22] <ogra_> since it might have other effects and the NIC is only used in sepcific boards
[12:22] <ogra_> (not in the BBB for example, which has a real NIC, nothing USB attached)
[12:24] <longsleep> lool: yeah rpi2 is more for ogra_
[12:25] <longsleep> lool: my issue was more a general one to inject kernel parameters (sysctl, proc stuff, ...) as early as possible without having to change initrd or other hacks
[12:25] <lool> longsleep: ack
[12:26] <longsleep> lool: if you want me to add a whishlist issue for that i can certainly do that
[12:26] <lool> longsleep: yeah, I don't think we have anything tracking this ATM
[12:26] <lool> it's all on our minds, but amongst a gazillion other issues
[12:27] <lool> ogra_: I don't feel I understand why it can't be fixed properly upstream; if it can't I guess we want to document how folks would do this on top of snappy and move on
[12:27] <lool> ogra_: is there an upstream pointer somewhere about this? you might have provided this on friday, but I can't find it right now
[12:29] <ogra_> GRMBL ...
[12:30] <longsleep> Chipaca: just saw you replies - yeah its compiled with a static path to /var/log and stuff is logged there until the config file is loaded - i guess i could hack some preloader
[12:30] <longsleep> Chipaca: but a general approach to add more bind mounts within snaps would be nice to have
[12:34] <lool> ogra_: https://www.raspberrypi.org/forums/viewtopic.php?f=28&t=5898&hilit=ethernet%2bhot&start=50 seems to have the most complete report of the smsc issue
[12:34] <ogra_> lool, we have like 6 bugs open for that in LP since 2009 :)
[12:34] <lool> ogra_: with this linaro bug describing a workaround in linaro ubuntu images https://bugs.launchpad.net/linux-linaro/+bug/664477
[12:34] <lool> from 2011
[12:34] <ogra_> yeah, there are older ones too :)
[12:35]  * ogra_ researched all that last week before bringing it up here
[12:35] <ogra_> (and discussiong it with ppisati)
[12:35] <ogra_> for the Pi kernel we will just bump the value
[12:35] <ogra_> but there is no generic way of fixing it
[12:36] <longsleep> ogra_: the fix is to disable turbo mode?
[12:36] <lool> you can bump the vm.min_size too
[12:36] <ogra_> longsleep, well, that costs yoiu performance
[12:37] <longsleep> ogra_: yeah thats why i asked
[12:37] <longsleep> ogra_: what parameters are you actually adding now?
[12:37] <ogra_> right, we will bump the default of vm.min_size of the RPi kernel
[12:37] <lool> if I understand correctly, the speed at which frames come in overflows the memory the kernel can allocate from driver context
[12:37] <ogra_> which is 8192 or some such currently
[12:37] <longsleep> ah
[12:38] <lool> it would seem to me the kernel config at least, or the runtime should detect this combination of options and bump the vm.min_size
[12:38] <lool> but in any case, we should tune our config system to set it everywhere
[12:38] <ogra_> well, on devices where we have that HW and have a dedicated kernel it is easy to just change the kernel default
[12:38] <lool> ogra_: it's USB though, so you could plug it into anything
[12:39] <ogra_> yeah
[12:39] <ogra_> i wonder if it makes sense toi generally set the vm.min_size to 16k or 32 ...
[12:39] <ogra_> i'm not sure what impact that has
[12:40] <ogra_> (on devices that wouldnt necessarily need it)
[12:40] <lool> ogra_: I believe Kconfig can set a value as a recommended default; we could probably upstream a patch to do this
[12:40] <ogra_> i know in the past we fixed it in userspace by shipping a sysctl.d snippet by default for all arm builds
[12:40] <lool> yup
[12:40] <ogra_> grrr ... why dont we have parted on snappy :P
[12:41] <lool> ogra_: cause you haven't snap-ed it  :-)
[12:41]  * ogra_ wrangles with partition resizing for /writable ...
[12:41] <ogra_> would be helpful if i could test on the actual install :)
[12:42] <ogra_> lool, i havent snap'ed it because nobody did rebuild the archive for static.archive.ubuntu.com yet :P
[12:42] <ogra_> (would be awesome if we could just do that :) )
[12:42] <lool> it's not clear whether we want static binaries of everything
[12:42] <lool> consider the case where you have like 50 binaries in your snap using the same libs
[12:43] <ogra_> no, indeed, but it makes "quickly snappin somethin" so much easier :)
[12:43] <lool> ogra_: you tried snapcraft?
[12:43] <lool> it's pretty good at this too
[12:43] <ogra_> (and my kbd still needs a new g key ...)
[12:43] <lool> snappin'
[12:43] <ogra_> yeah :)
[12:43] <lool> somethin'
[12:44] <ogra_> i should add some autocorrection to xchat to replace g with '
[12:44] <ogra_> it works if i hit it very hard ... just not while typing it in a normal way
[12:45]  * ogra_ knew it was a mistake to buy a logitech kbd when he bought it
[12:45] <ogra_> shiny technology ... krappy mechanics
[13:02] <kyrofa_> ogra_, it was made for angry people
[13:02] <ogra_> haha
[13:02] <kyrofa_> ogra_, you're just too laid back
[13:57] <longsleep> one of my services seems to get killed by systemd - main process exited, code=killed, status=31/SYS - any ideas?
[13:58] <ogra_> well, there is surely more :)
[13:58] <ogra_> (in some log)
[13:58] <longsleep> no
[13:58] <longsleep> i cannot find any more information
[13:59] <longsleep> the service does log on stderr
[13:59] <longsleep> it has networking and netowrk-service caps
[14:00] <longsleep> Main PID: 1329 (code=killed, signal=SYS)
[14:00] <longsleep> mhm
[14:26] <longsleep> mhm
[14:26] <longsleep> mkdir("/tmp/body", 0700)                = 0
[14:26] <longsleep> stat64("/tmp/body", {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[14:26] <longsleep> +++ killed by SIGSYS +++
[14:26] <longsleep> Chipaca: ^^^ any idea?
[14:26] <ogra_> where is that mkdir ?
[14:27] <ogra_> inside your daemon ?
[14:27] <longsleep> in my confined service
[14:27] <longsleep> yes
[14:29] <Chipaca> longsleep: um, ouch?
[14:29] <Chipaca> longsleep: anything in syslog?
[14:30] <longsleep> Chipaca: nope :/
[14:30] <longsleep> rate limiting is off
[14:30]  * longsleep is trying to confine nginx
[14:31] <longsleep> well, it fails for /tmp too
[14:31] <longsleep> mkdir("/tmp", 0700)                     = -1 EEXIST (File exists)
[14:31] <longsleep> stat64("/tmp", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=40, ...}) = 0
[14:31] <longsleep> +++ killed by SIGSYS +++
[14:31] <longsleep> so i think it is the stat64?
[14:31] <Chipaca> longsleep: what does it do after the stat64?
[14:31] <Chipaca> jdstrand: tyhicks: you around?
[14:32] <longsleep> i did not look into the code - hold on
[14:35] <ogra_> hmpf ... i thinnk i shouldnt pull parted into the initrd ...
[14:36] <ogra_> not sure we want libreadline in there
[14:37] <ogra_> (and ncurses through that )
[14:38] <longsleep> ogra_: sfdisk should be good enougth?
[14:38] <ogra_> well, we used to use that in the past for the same purpose ... i'd prefer parted since thats what we use everywhere else though
[14:38] <ogra_> (installer etc)
[14:40] <ogra_> but yeah, iirc that was actually the reason why we picked sfdisk back then too
[14:43] <jdstrand> Chipaca: I am, Tyler is not
[14:44] <Chipaca> longsleep: is the SIGSYS in a service, or in commandline?
[14:44] <longsleep> Chipaca: no idea what comes next :/ body folder is created fine and then bam
[14:44] <longsleep> Chipaca: service
[14:44] <Chipaca> jdstrand: these lackeys always slacking off, huh
[14:44] <jdstrand> heh
[14:44] <jdstrand> he is on holiday today, back tomorrow :)
[14:46] <Chipaca> jdstrand: would a SIGSYS be seccomp doing something?
[14:46] <Chipaca> or is it unrelated to that?
[14:46] <jdstrand> seccomp should send SIGKILL
[14:47] <jdstrand> and you would see a log entry
[14:47] <Chipaca> yah
[14:47] <Chipaca> longsleep: SIGSYS usually means "bad system call"
[14:47] <ogra_> longsleep, are you sure its not an amd64 binary ?
[14:47] <ogra_> :)
[14:48] <longsleep> ogra_: yes it runs fine when unconfined or run directly
[14:48] <Chipaca> ooh
[14:48] <Chipaca> longsleep: strace that :)
[14:48] <longsleep> Chipaca: output is from strace :)
[14:48] <Chipaca> longsleep: strace -f -s 999 -o /tmp/trace yoursvchere
[14:48] <Chipaca> longsleep: i mean unconfined
[14:48] <longsleep> ah
[14:48] <longsleep> ok
[14:48] <longsleep> good idea
[14:48] <Chipaca> longsleep: then we see what comes next \o/
[14:51] <longsleep> is there a quick way to unconfine a installed snap?
[14:52] <Chipaca> longsleep: edit the call to ubuntu-core-launcher and plug unconfined instead of the second parameter? never tried it though :)
[14:52] <Chipaca> longsleep: that'd mean editing /etc/systemd/system/something.service
[14:53] <Chipaca> longsleep: or you could just remove the call to the launcher entirely :)
[14:53] <longsleep> ok next comes chown32("/tmp/body", 65534, -1)   = 0
[14:53] <longsleep> guess that is the problem
[14:54] <longsleep> so .. no change owner?
[14:54] <longsleep> at least not to nobody i guess
[14:55] <Chipaca> longsleep: that's interesting
[14:55] <Chipaca> jdstrand: would you expect that?
[14:55] <Chipaca> jdstrand: it's clearly something in our confining apparatus doing it, but i don't understand what/how
[14:56] <jdstrand> we don't allow chown because there is no reliable uid to chown to
[14:56] <jdstrand> but, this is unconfied, no? nothing should be blocking it
[14:56] <longsleep> i want to run it confined
[14:56] <longsleep> (this is a web server, so it really should be)
[14:56] <Chipaca> jdstrand: we found out it was chown running it unconfined
[14:56] <jdstrand> also, we are using SCMP_ACT_KILL in the launcher so a sigsys won't be sent
[14:56] <Chipaca> jdstrand: running it confined we get sigsys, and nothing in the logs
[14:57] <Chipaca> hence a puzzled chipaca
[14:57] <Chipaca> i say we, but it's all longsleep all the time :)
[14:57] <longsleep> yeah but what you say is how it is
[14:57] <jdstrand> seccomp can send sigsys, but only if seccomp_init is given SCMP_ACT_TRAP
[14:57] <Chipaca> which makes me think maybe i should do a test case and see if i can reproduce it
[14:58] <longsleep> Chipaca: well, this is nginx startup
[14:58] <jdstrand> systemd can also send sigsys if a syscall filter is setup through systemd
[14:58] <Chipaca> ooooh
[14:59] <Chipaca> jdstrand: that might be it then?
[14:59] <jdstrand> are we setting that up now? it has to be something specific in the service file
[14:59] <Chipaca> jdstrand: not unless we're doing it unawares
[14:59] <Chipaca> or it's the default or something
[15:00] <jdstrand> it should not be the default
[15:00] <jdstrand> everything would break
[15:00] <jdstrand> http://www.freedesktop.org/software/systemd/man/systemd.exec.html
[15:00] <jdstrand> SystemCallFilter=
[15:01] <longsleep> i do not see anything in the service file
[15:01] <longsleep> http://paste.ubuntu.com/12108429/
[15:01] <jdstrand> plus it would be redundant with the launcher syscll filtering
[15:02] <Chipaca> ok, meeting now
[15:02] <Chipaca> after meeting will reproduce with small case
[15:02] <Chipaca> then pester you again jdstrand ;)
[15:02] <longsleep> well what i see is that chown seems to trigger sigsys
[15:02] <longsleep> all right - thanks guys!
[15:02] <jdstrand> chown should trigger sigkill
[15:03] <jdstrand> and there should be a log entry
[15:03] <jdstrand> but I didn't think you got all the way to chown before
[15:03] <jdstrand> I thought the sigsys came before that and you only saw chown when you went unconfined
[15:03] <longsleep> jdstrand: well strace says +++ killed by SIGSYS +++
[15:03] <longsleep> yes
[15:05] <longsleep> jdstrand: here are the two strace parts http://paste.ubuntu.com/12108465/
[15:06] <longsleep> so i concluded the chown is the reason for the kill
[15:07] <jdstrand> longsleep: according to man 7 signal, SIGSYS is sent when a bad argument is used. are you specifying a uid to chown that doesn't exist?
[15:07] <longsleep> jdstrand: that could be it
[15:07] <longsleep> jdstrand: what uid should i actually use?
[15:08] <jdstrand> well, as mentioned, you shouldn't use chown at all
[15:08] <longsleep> jdstrand: but the uid 65534 is nobody and it does exist
[15:08] <jdstrand> if you picked one that existed, then seccomp would kill you
[15:08] <longsleep> jdstrand: well it is done by Nginx - i do not have much a say in the matter
[15:09] <longsleep> jdstrand: so you say when i chown to an existing uid then seccomp will kill the process?
[15:09] <jdstrand> yes
[15:09] <longsleep> thats it then
[15:09] <jdstrand> except I don't think it is
[15:09] <jdstrand> because you are seeing the wrong signal
[15:10] <jdstrand> but really, it doesn't matter, cause if you fixed whatever this problem is, seccomp would block you
[15:10] <longsleep> ok - but it is calling chown with a uid which does exist
[15:11] <jdstrand> the reason why we don't allow it at the moment is because the launcher doesn't support syscall argument filtering and because there is no reliable uid to chown to (in general)
[15:11] <jdstrand> so, patch out the chown or otherwise tell nginx to run as root
[15:12] <longsleep> jdstrand: nginx will not run as root, if you run it as root it will setuid to nobody
[15:12] <longsleep> and i was trying to avoid patches :/
[15:12] <jdstrand> it sounds like that behavior needs to be modified
[15:13] <jdstrand> fyi, syscall arg filtering is being tracked in bug #1446748
[15:13] <nothal> Bug #1446748: implement seccomp filtering by argument <ubuntu-core-launcher (Ubuntu):Triaged> <ubuntu-core-security (Ubuntu):Triaged> <http://launchpad.net/bugs/1446748>
[15:13] <jdstrand> but that wouldn't be enough for your case-- you also need a non-root uid to start as
[15:13] <jdstrand> which is another unimplemented feature in snappy
[15:14] <jdstrand> from the seccomp security policy:
[15:14] <jdstrand> # snappy doesn't currently support per-app UID/GIDs so don't allow chown. To
[15:14] <jdstrand> # properly support chown, we need to have syscall arg filtering (LP: #1446748)
[15:14] <jdstrand> # and per-app UID/GIDs.
[15:15] <longsleep> jdstrand: all right, so if understand this correctly, i would need both to run nginx unconfined
[15:15] <longsleep> err confined
[15:16] <longsleep> because nginx does fail with chown, and then will try to change the uid as it is run as root
[15:17] <longsleep> jdstrand: so the much bigger problem is that there is no way to start a snap service with a uid other than root right?
[15:18] <jdstrand> it is a missing feature
[15:20] <longsleep> jdstrand: ah the trick was simple after i understood this: user root root;
[15:20] <longsleep> then it will not chown and not setuid/gid
[15:20] <longsleep> jdstrand: thans for explaining!
[15:20] <longsleep> +k
[15:21] <jdstrand> ok, glad that worked. still puzzled why you were sent a sigsys
[15:23] <longsleep> jdstrand: well yeah - no i get the next sigsys .. seems like the worker processes get killed of
[15:23] <longsleep> f
[15:37] <Chipaca> jdstrand: confirmed that i get SIGSYS not SIGKILL when running something that does chown
[15:38] <Chipaca> jdstrand: but, i do get something in the log
[15:38] <Chipaca> [Mon Aug 17 15:36:52 2015] audit: type=1326 audit(1439825813.354:13): auid=1000 uid=1000 gid=1000 ses=1 pid=994 comm="q" exe="/apps/hello-world.canonical/1.0.18/bin/q" sig=31 arch=c000003e syscall=92 compat=0 ip=0x7f65d470c4d7 code=0x0
[15:39] <longsleep> Chipaca: can the audit log crash, the last audit stuff i see is from ths morning :/
[15:39] <Chipaca> longsleep: what do you get if you say "sudo sc-logresolve"?
[15:39] <longsleep> Chipaca: nothing - no output
[15:39] <Chipaca> ah well
[15:40] <Chipaca> longsleep: i haven't known it to, but i tend to fire a kvm up, test stuff, and shut it down again
[15:40] <Chipaca> my bbb hasn't ever crashed in that way that i know of though
[15:40] <Chipaca> also i don't think it's "a thing" that can crash
[15:41] <longsleep> Chipaca: let me try to reboot, i have the next sigsys kill - means i can only run nginx without a master process which is not suitable for production
[15:41] <Chipaca> you'd lose all logs, not just the audit ones
[15:41] <longsleep> right
[15:41] <longsleep> rebooting now
[15:43] <longsleep> Chipaca: no audit logs for me but plenty of worker process 6715 exited on signal 31
[15:43] <longsleep> :(
[15:44] <Chipaca> it might because i'm not doing this as a service
[15:44] <Chipaca> that's next
[15:45] <Chipaca> man, i need tab completion on 'snappy install'
[15:46] <davmor2> Chipaca: alias si
[15:55] <Chipaca> longsleep: so, as a service, SIGSYS, with log entry
[15:55] <Chipaca> e.g. Aug 17 15:51:10 localhost kernel: [  945.918847] audit: type=1326 audit(1439826670.799:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1120 comm="q" exe="/apps/xkcd-webserver.canonical/0.5/bin/q" sig=31 arch=c000003e syscall=92(chown) compat=0 ip=0x7f8da417a4d7 code=0x0
[15:55] <Chipaca> (as output from sc-logresolve)
[15:59] <longsleep> Chipaca: mhm ok then - so any ideas why it could not log that for me?
[15:59] <Chipaca> longsleep: well, two ideas
[15:59] <Chipaca> longsleep: my environ is not your environ -- i'm trying on a kvm with wily rolling and you're on 15.04
[15:59] <longsleep> Chipaca: yes and on armhf
[15:59] <Chipaca> longsleep: and, your thing is doing a whole lot more than mine is
[16:00] <Chipaca> longsleep: want to try running my thing on your thing?
[16:00] <Chipaca> longsleep: otherwise i could try running my thing in your thing :)
[16:00] <longsleep> Chipaca: sure - do you have an armhf snap?
[16:00] <Chipaca> longsleep: no, i just compiled it and copied it over
[16:01] <Chipaca> longsleep: but i'll make one for you
[16:01] <Chipaca> give me a bit though :)
[16:01] <longsleep> Chipaca: you can try my snap if you have an armhf environment
[16:02] <Chipaca> longsleep: i've got a bbb, but i'd have to reflash it to know where it stands (i usually break them! because, um, i just compile stuff and copy them over ;) )
[16:03] <longsleep> Chipaca: btw, i see the audit logs when i install or remove snaps
[16:04] <longsleep> Chipaca: i meanm the profile status lines
[16:07] <Chipaca> longsleep: curiouser and curiouser
[16:11] <longsleep> Chipaca: just sent you the URL as pm, that triggers signal 31 kills constantly
[16:11] <Chipaca> longsleep: http://people.canonical.com/~john/min_0_armhf.snap
[16:11] <longsleep> Chipaca: (as the worker process is killed)
[16:11] <jdstrand> so, after looking at the kernel documentation (as opposed to the man page), it does look like the exit status of the task will be SIGSYS in we are setup for kill
[16:12] <Chipaca> jdstrand: \o/
[16:12] <Chipaca> jdstrand: so the only question remaining is why longsleep isn't seeing it in the logs
[16:12] <Chipaca> longsleep: that snap is untested ;) but it should give you a binary and a service
[16:12] <jdstrand> perhaps kernel rate limiting is in effect?
[16:12] <Chipaca> longsleep: that run the same thing
[16:12] <Chipaca> jdstrand: longsleep mentioned he'd disabled it i think
[16:14] <longsleep> jdstrand: sysctl -w kernel.printk_ratelimit=0
[16:14] <longsleep> i have that in effect
[16:14] <jdstrand> this is on armhf? I have a sneaking suspicion that there is something wrong with logging on armhf cause I have felt that sometimes messages were getting dropped when they should've been logged, but I've never been able to reproduce when I want to
[16:14] <longsleep> yes
[16:14] <longsleep> armhf yes
[16:15] <jdstrand> but it is just a feeling
[16:15] <jdstrand> perhaps if you reboot you'll see it
[16:15] <longsleep> i rebooted and no change
[16:15] <longsleep> but i see this: audit_printk_skb: 12 callbacks suppressed
[16:15] <jdstrand> hmm, yeah, I don't know then
[16:15] <longsleep> should that happen when i have the ratelimit disabled?
[16:15] <jdstrand> right so the sysctl value will of course be dropped on reboot
[16:16] <longsleep> i applied it again
[16:16] <longsleep> Chipaca: your service failed to start but no audit except http://paste.ubuntu.com/12109082/
[16:17] <longsleep> Chipaca: and no audit when running min.q
[16:17] <Chipaca> longsleep: :(
[16:18] <longsleep> so either its my system, my kernel or a general issue on armhf
[16:18] <jdstrand> maybe you should apply kernel.printk_ratelimit=0 to something in /etc/sysctl.d
[16:18] <longsleep> let me try
[16:18] <jdstrand> eg, /etc/sysctl.d/99-debug-ratelimit.conf or something
[16:18] <jdstrand> then reboot
[16:19]  * longsleep reboots
[16:21] <longsleep> jdstrand: well i might have an idea
[16:21] <longsleep> systemd-journald[360]: Failed to join audit multicast group. The kernel is probably too old or multicast reading is not supported. Ignoring: Operation not permitted
[16:21] <jdstrand> interesting
[16:21] <longsleep> i am on kernel 3.10
[16:22] <longsleep> otherwise no difference after reboot
[16:22] <jdstrand> is anything in dmesg?
[16:22] <longsleep> well
[16:22] <longsleep> sysctl -a|grep printk
[16:22] <longsleep> kernel.printk = 4	4	1	7
[16:22] <longsleep> kernel.printk_delay = 0
[16:22] <longsleep> kernel.printk_ratelimit = 5
[16:22] <longsleep> kernel.printk_ratelimit_burst = 10
[16:22] <longsleep> it did not apply what i set
[16:23] <longsleep> but i added the file
[16:23] <longsleep> mhm
[16:26] <longsleep> well the procps service does not seem to apply settings from /etc/sysctl.d
[16:26] <jdstrand> according to http://www.freedesktop.org/software/systemd/man/sysctl.d.html, systemd is supposed to do that
[16:27] <jdstrand> systemd-sysctl.service
[16:27] <jdstrand> I don't know if snappy let alone Ubuntu uses that
[16:27] <longsleep> yes if i do systemctl restart systemd-sysctl.service it gets applied
[16:27] <longsleep> not on boot though
[16:28] <jdstrand> interesting
[16:28] <jdstrand> /etc/init/procps.conf is the upstart job
[16:28] <jdstrand> so that won't be run
[16:28] <longsleep> right, still my old habits
[16:29] <longsleep> let me boot again
[16:29] <jdstrand> maybe pitti or ogra_ has insight as to how /etc/sysctl.d should be applied on boot and why systemd-sysctl.service is seemingly not being run
[16:29] <jdstrand> "systemd-sysctl.service is an early-boot service that configures sysctl(8) kernel parameters"
[16:30] <jdstrand> not sure why if you created /etc/sysctl.d/99-your-thing.conf why it wouldn't by applied
[16:30] <longsleep> (ODROIDC)root@odroid:~# sysctl -a|grep "kernel.printk_ratelimit "
[16:30] <longsleep> kernel.printk_ratelimit = 5
[16:30] <jdstrand> unless there is a bug
[16:30] <longsleep> that is after boot
[16:30] <jdstrand> and what is the name of the file you created?
[16:30] <longsleep> systemctl restart systemd-sysctl.service
[16:30] <longsleep> (ODROIDC)root@odroid:~# sysctl -a|grep "kernel.printk_ratelimit "
[16:30] <longsleep> kernel.printk_ratelimit = 0
[16:31] <longsleep> how you suggested
[16:31] <longsleep> cat /etc/sysctl.d/99-debug-ratelimit.conf
[16:31] <longsleep> kernel.printk_ratelimit = 0
[16:31] <jdstrand> seems there is a bug that those aren't being applied
[16:32] <longsleep> let me try to add it to an existing file then
[16:32] <jdstrand> I would be surprised if that work-- I imagine the service itself isn't being started
[16:32] <longsleep> ah i think that is a mount order issue
[16:32] <longsleep> i cannot change the other files - those are readonly
[16:33] <longsleep> ah not all of them
[16:33] <longsleep> now added it to 10-zeropage.conf
[16:33] <jdstrand> that would make sense
[16:34] <longsleep> did not work either
[16:34] <longsleep> so there is a bug for sure
[16:35] <jdstrand> can you file it against https://bugs.launchpad.net/snappy/+filebug?
[16:35] <longsleep> my most likely guess is that /dev/mmcblk0p4 on /etc/sysctl.d type ext4 (rw,relatime,data=ordered) is not mounted when the systemd service is run
[16:35] <longsleep> jdstrand: sure
[16:36] <jdstrand> yeah, when you suspected mount ordering, I was thinking you were probably onto something
[16:37] <ogra_> jdstrand, uh, i didnt even know it isnt run
[16:37] <ogra_> thats clearly a bu
[16:37] <ogra_> g
[16:40] <longsleep> jdstrand: bug #1485683
[16:40] <nothal> Bug #1485683: /etc/sysctl.d is not applied on boot <Snappy:New> <http://launchpad.net/bugs/1485683>
[16:42] <jdstrand> cool, thanks
[16:45] <longsleep> Chipaca: so i can now run Nginx confined but as a single process, whatever happens when the child is started, it fails with sigsys and i have no log :(
[16:48] <ogra_> Chipaca, mvo, seems the last snappy build now fails in manpage generation
[16:48] <Chipaca> huzzah!
[16:48] <mvo> we are moving forward
[16:48] <ogra_> no idea why we run it :)
[16:48] <Chipaca> that one is probably my fault :)
[16:48] <ogra_> (is there actually a manpage ?)
[16:48] <Chipaca> ogra_: sergiusens asked for it
[16:48] <mvo> yes!
[16:48] <mvo> we don't have man but …
[16:49]  * Chipaca symlinks man to less and makes everybody have a fit
[16:49] <ogra_> dont make cjwatson cry !
[22:04] <seshu> Hello, I'd like to install mir and my application. How do I make snappy autologin?


[14:03] <cmaloney> Morning
[14:24] <_stink_> yo
[14:27] <rick_h_> morn
[17:38] <shakes808> Afternoon everyone.  Anyone know Batch scripting?  I have been trying to create a batch script and can't seem to get it right.  Right now I am just trying to iterate through a list.  :(
[17:39] <jrwren> batch scripting is a general term.
[17:39] <jrwren> do you mean dos/windows .bat files?
[17:39] <shakes808> .bat files, correct
[17:39] <shakes808> I am trying to do a simple for loop at the moment, but failing
[17:39] <shakes808> :(
[17:39] <jrwren> ugh, i recall their for syntax being totally weird.
[17:41] <shakes808> The list I am trying to iterate through is a list of strings.  I have tried the following:  set list = (string1 string2)   set list = ("string1" "
[17:41] <shakes808> set list = ("string1" "string2)
[17:41] <shakes808> ..."string2"
[17:41] <shakes808> set list = ("string1 string2")
[17:42] <shakes808> and when I look at the console window, it just says that incorrect syntax.
[17:42] <shakes808> for %%i in (%list%)
[17:43] <jrwren> try #windows or #c#, even though it isn't C# :)
[17:44] <shakes808> alright, I will try there
[23:12] <cmaloney> Rainy outside
[23:18] <rick_h_> doh


[05:37] <soaringsky> This team seems kind of dead
[05:37] <soaringsky> http://ubuntuforums.org/showthread.php?t=1760493


[10:49] <_ke> what should i do, if i want to update a notify-osd bubble, but remove the icon? i tried to set notify.Icon = null; but this crashes
[11:35] <_ke> jcastro, heya!
[12:21] <_ke> mat_t, hey
[22:00] <_ke> what should i do, if i want to update a notify-osd bubble, but remove the icon? i tried to set notify.Icon = null; but this crashes


[10:42] <SiDi> hi people
[10:43] <SiDi> MacSlow: just wanted to tell you, i got xfconf support and theming support working on a local branch. Didnt have the internet lately so i couldnt push it anywhere, and im quite busy today too, but i just wanted to let you know before you work on the gconf keys for text size / color ;)
[10:44] <MacSlow> SiDi, how do you define "theming" in that scope again?
[10:44] <SiDi> you can set colors for bubble shadow / bg / text title / text body / text shadow
[10:44] <SiDi> i might add gconf keys for sliders, they look bad with bright backgrounds
[10:45] <SiDi> i also added gconf keys for text title / body size, they work with gconf & xfconf afaik
[10:45] <MacSlow> SiDi, priority order for working on features/fixes for notify-osd has been shifted around during this week so I'll not be addressing gconf/xconf the coming week
[10:45] <SiDi> okies
[10:45] <MacSlow> SiDi, don't over commit there :)
[10:45] <MacSlow> SiDi, I only want to introduce gconf-keys for...
[10:45] <SiDi> i just read "gconf" in a notify-osd bug report so i wanted to make sure you dont do it since its done :P
[10:46] <MacSlow> bubble-bg-color, bubble-bg-opacity, bubble-shadow, title-font, body-font, text-shadow-color
[10:46] <SiDi> MacSlow: anyway it doesnt cost anything to have these keys :) i'll try to write a little app to turn notify-osd to black on white for people who have problems to read white on black
[10:46] <SiDi> oh, for opacity too ?
[10:47] <SiDi> (i used #rrggbbaa as strings for color, so actually it can handle bubble opacity)
[10:47] <MacSlow> SiDi, I looked at your first patch and decided I'll need/want to split out gconf and xconf related calls do separte files each
[10:47] <MacSlow> SiDi, hm... I don't think GdkColor takes rrggbbaa only rrggbb
[10:48] <SiDi> oh
[10:48] <MacSlow> SiDi, there's a gdk-function that can parse "#rrggbb" strings
[10:48] <SiDi> ah great
[10:48] <SiDi> i didnt have the internet so i wrote my own function :D
[10:48] <MacSlow> opacity I'll plan to cover using a float-value (0.0f - 1.0f)
[10:49] <SiDi> okey
[10:49] <MacSlow> SiDi, I'll replace that with the corresponding Gdk-call
[10:50] <SiDi> MacSlow: okey. Could you just write me a little guide with what i should do on the notify-osd + xfce bug report ? i'll write this properly this week-end
[10:50] <MacSlow> SiDi, FYI gboolean gdk_color_parse (const gchar* spec, GdkColor* color);
[10:51] <MacSlow> SiDi, you mean regarding splitting out the code or the color-parsing?
[10:51] <SiDi> well, splitting out the code
[10:52] <SiDi> its true its not easy to read at all right now, but it took me more time to make autotools work than to code it ;)
[10:52] <MacSlow> SiDi, oh... well I'm not 100% sure what/how I'll approach that
[10:52] <SiDi> me neither
[10:53] <SiDi> We could use defaults.c that would include defaults-gconf and defaults-xfconf ?
[10:53] <MacSlow> SiDi, just adapt your patch to use gdk_color_parse() for "#rrggbb" and use a float xconf-key for any opacity
[10:53] <SiDi> okey, i'll do that for theming
[10:53] <SiDi> i'll setup a branch as soon as i have the internet :p
[10:54] <MacSlow> SiDi, yeah something like that
[10:55] <MacSlow> SiDi, please avoid using the term "theming" it'll give the wrong impression on users
[10:56] <MacSlow> SiDi, it's just providing some "hook" to allow distro/desktop-environment integrators to tweak notify-osd at runtime a bit
[10:56] <SiDi> MacSlow: i wont pronounce it on bug reports :]
[10:56] <MacSlow> good :)
[10:56] <SiDi> MacSlow: i do want to have an utility to change the colors though, but i'll probably name it notify-osd-utils. Some users can really not read white on black
[10:57] <MacSlow> SiDi, don't be surprised if I'll shuffle around your patch (formatting & Co)
[10:57] <SiDi> no problem
[10:57] <SiDi> i had a hard time writing it, i have a different writing style, and im back from 3 weeks of python :/
[10:57] <MacSlow> SiDi, since I didn't yet find the time to write a hacking/coding-styleguide yet just do as you please (trying to follow notify-osd lead as good as you can :)
[10:58] <MacSlow> SiDi, well... cleaning up such stuff is certainly more my responsiblity than yours so don't stress too much
[10:58] <SiDi> okey, no problem
[10:58] <SiDi> i noticed there were spaces only in half of the code for indentation anyway ;D
[10:59] <MacSlow> SiDi, I'll also try to incorporate your battery/power info tweak suggestions into the g.p.m patch ... I'm trying to work on that today
[10:59] <SiDi> okey
[11:00] <SiDi> i wont have time to give feedback on this before next week, though :P
[11:00] <MacSlow> SiDi, I think most of this is covered in your bug-report... there's quite a lot of comments
[11:00] <SiDi> Yup
[11:00] <MacSlow> I'll see if there are any gaps of info
[11:00] <mac_v> tedg: hi...the always present icon should be a seperate bug ?
[11:00] <SiDi> And ironically xubuntu will likely give g-p-m up so i have to patch xf-p-m :D
[11:00] <mac_v> indicator applet
[11:01] <SiDi> (hello mac_v howdy ?)
[11:01] <MacSlow> SiDi, well... that's you problem not mine ;)
[11:01]  * mac_v waves at SiDi
[11:02] <SiDi> btw MacSlow i noticed the errors and strings you get from gconf are never freed, but i dont know gconf at all so i dont know if they should be or not
[11:02] <MacSlow> SiDi, no that should be fixed in trunk by now
[11:03] <SiDi> ok
[11:04] <MacSlow> SiDi, ah... no wait... that'll come in with the pending gconf-key work
[11:04] <MacSlow> SiDi, I was mixing it up with another class
[11:04] <SiDi> ok
[11:05] <SiDi> i hope my patches will still merge without conflict, MacSlow :D
[11:05] <MacSlow> SiDi, we'll see
[11:06] <tedg> mac_v: It's no a bug, it's a feature :)
[11:06] <tedg> mac_v: But the "No Indicators" was definitely a bug and needed to be fixed.  Upload issues.
[11:06] <mac_v> tedg: why! its kinda waste of space , when i dont use the apps
[11:07] <tedg> mac_v: We're going to support having the applications in there even when they're not being used.
[11:08] <tedg> mac_v: One of the things we found in usability testing is that folks would go there for their mail even when it wasn't running.  The idea that "this is the place that evolution lives" kind of thing.
[11:08] <tedg> mac_v: I don't know if it's going to suck or be great, but I think it's worth trying for a release :)
[11:09] <mac_v> tedg: "" One of the things we found in usability testing is that folks would go there for their mail even when it wasn't running."" this was with the icon displayed or without the icon?
[11:09] <tedg> mac_v: When the icon was displayed, but with another application running.  So it was there, but didn't have mail for instance.
[11:10] <tedg> mac_v: Also, I believe there has been a few bugs about the icon itself being transient.
[11:11] <mac_v> tedg: that is becuase the indicator applet is using a wrong icon! that is why they are checking for mail!
[11:11] <mac_v> mpt: ^
[11:11] <tedg> One of the biggest that people can't remove it without starting an application that they don't use :)
[11:11] <tedg> mac_v: Perhaps, but no one has proposed a better icon :)
[11:11] <mac_v> tedg: i saw that bug too , but it can be removed from startup applications
[11:12] <mac_v> tedg: why not use the "i"
[11:12] <mac_v> as icon?
[11:13] <tedg> mac_v: I don't know, that doesn't really say anything to me other than "generic".
[11:14] <mac_v> this icon problem was mentioned in the mailing list , let me get the link
[11:24] <mac_v> tedg: instead of using the general envelope icon for all > im icon can be used if pidgin is working > indicator applet shows the icon of pidgin  , and email icon is shown only when email client is open , and if both are present retain the mail icon
[11:25] <mac_v> tedg: i'll file a wishlist bug for this ,always present icon , maybe it can be considered for later Karmic+1
[11:33] <tedg> mac_v: Well, you might wait for the feature to be completed and decide if you like it first :)
[11:33] <mac_v> tedg: oops! i already did actually ! :( sorry
[11:35] <mac_v> tedg: the biggest problem for me is none of my apps[thunderbird/xchat] use indicator applet , and i rarely use evolution for calender ! so for me its a waste of space though i like to have it shown when evolution is used :(
[11:37] <tedg> mac_v: Heh, the problem there is that xchat and thunderbird don't use the messaging menu ;)
[11:38] <mac_v> tedg: yeah , thats why ;p ... anyways Bug #410220 , i filed it before you could reply...!
[11:38] <ubot4> Launchpad bug 410220 in indicator-applet "Indicator applet Always shows icon" [Undecided,New] https://launchpad.net/bugs/410220
[11:43] <tedg> mac_v: No problem, I'll comment.
[11:43] <mac_v> :)
[16:00] <DBO> ping njpatel
[16:33] <MacSlow> DBO, he's currently traveling (going back to London)
[16:36] <DBO> thanks MacSlow =)


[00:56] <jmarsden> billybigrigger: check the MX records for mydomain.com really do point to your mailserver...  dig mydomain.com mx
[00:57] <billybigrigger> yeah it all works
[00:57] <billybigrigger> it all worked before, im transfering over servers
[00:57] <billybigrigger> trying to setup <IP_ADDRESS> and 192
[00:58] <billybigrigger> trying to setup <IP_ADDRESS> and <IP_ADDRESS> and then just switch the ip's around on them...but when i switch ips, apache works, and the mailserver won't accept incoming mail
[00:58] <fbc-mx> How do I get my nfs shares to show up in the Network browser?? I have them setup already and I can manually mount them with no problems, but other users aren't very savvy. I would like to make them idiot proof.
[00:58] <jmarsden> You will need a public IP if you want to get email from hotmail... 192.168.*.* is a private IP range ?
[00:58] <fbc-mx> avahi deamon? or something like that?
[01:00] <fbc-mx> billybigrigger, or you can load ddclient get a DDNS and put your computer in your routers DMZ.
[01:01] <fbc-mx> billybigrigger, it's not the optimal solution.. you'll bounce mail for about an hour once a week when your provider changes your IP, but after it propagates again through DNS you should be good for another week.
[01:03] <billybigrigger> i haven't had an ip change for years
[01:04] <jmarsden> billybigrigger: So when you swap IPs for the servers, you are also changing the router's NAT settings appropriately?
[01:07] <FFForever> can i make openssh check ~/.ssh/authorized_keys and /root/.ssh/authorized_keys for each login?
[01:09] <fbc-mx> FFForever, not abosulutely sure, but I think it would be a qustion of adding another pam_module pointing to the other keys file.
[01:09] <fbc-mx> How do I get my nfs shares to show up in the Network browser?
[01:21] <giovani> FFForever: why would you check root's home dir for keys for other users?
[01:21] <fbc-mx> anyone? Beuller? Beuller?
[01:21] <giovani> network browser?
[01:21] <giovani> you mean some gui thing? that's not an ubuntu-server issue
[01:21] <fbc-mx> giovani, yeah but they don't show
[01:22] <giovani> ^
[01:22] <fbc-mx> I open up my network browser and do not see nfs shares even though I can mount them manually.
[01:22] <giovani> this is #ubuntu-server
[01:23] <giovani> you're talking about a desktop app -- ask in #ubuntu
[01:23] <fbc-mx> giovani, I know,,, I'm runing it on ubuntu-server
[01:23] <giovani> GUIs are not supported here
[01:23] <giovani> please go to #ubuntu for that
[01:23] <fbc-mx> giovani, so your saying the server does not have to announce the server? It's the desktops responsibility to detect them?
[01:23] <giovani> "announce"?
[01:24] <fbc-mx> giovani, sorry I menat annouce the service?
[01:24] <fbc-mx> giovani, Yeah, Like some kind of broadcast teling everyong one what it is sharing.
[01:24] <giovani> nope
[01:24] <giovani> that's a windows thing
[01:24] <fbc-mx> giovani, aha... ok, so then it's really not a server issue...
[01:25] <giovani> ask #ubuntu what you're supposed to do with that tool
[01:25] <giovani> it's not a server tool, so it's not supported here
[01:43] <bogeyd6> Anyone know how to unzip several files in a directory?
[01:45] <Alex_21> sudo unzip *.zip maybe
[01:45] <Alex_21> I have no idea
[01:46] <dthacker> bogeyd6: unzip *.zip?
[01:57] <Nikilos> Hi everyone, I just installed Ubuntu Server on a really old computer of mine, and when it boots up, it gets to the command line just fine, but the text is extremely huge and I can't see what I'm typing. Is there an easy fix to this?
[01:58] <Alex_21> Re installl or fix the resolution on your Monitr\
[01:58] <Alex_21> Monitor
[01:59] <Nikilos> I tried reinstalling and it didn't do anything. How do I fix my resolution?
[02:01] <PhotoJim> just a shell login I assume.  no GUI running.
[02:01] <PhotoJim> if so, weird problem.  not seen that.
[02:01] <Nikilos> Right, no GUI
[02:01] <PhotoJim> my machines that are servers just boot into text mode, like DOS does.  they would work on a CGA system.
[02:03] <PhotoJim> there are some paramters you can use in grub to force the kernel to boot up in different video modes.  I wonder if that's your solution.
[02:03] <PhotoJim> I don't know t he details, but googling might help.
[02:04] <Nikilos> Alright, I'll try looking around. Thanks. I'll report back with results
[02:04] <PhotoJim> please do.
[02:05] <PhotoJim> parameters, even
[02:05] <PhotoJim> darn netbook keyboard :)
[02:05] <Nikilos> Netbooks rock
[02:07] <PhotoJim> I love mine, but the keyboard occasionally annoys :)
[02:07] <PhotoJim> it's not bad though
[02:07] <PhotoJim> everything else about it is great
[02:07] <Nikilos> What kind is it?
[02:08] <PhotoJim> AA1, 1.5 GB RAM, 160 GB SATA HD
[02:08] <PhotoJim> in pretty sapphire blue :)
[02:09] <Nikilos> Oooh, that's great
[02:09] <PhotoJim> yep
[02:09] <PhotoJim> dual boot, XP and Jaunty
[02:09] <PhotoJim> I use Jaunty most of the time
[02:09] <Alex_21> Does anyone know why eSpeak is broken in Jaunty?
[02:09] <Alex_21> I run an eSpeak server
[02:10] <Nikilos> Be riiiight back
[02:11] <PhotoJim> I don't, sorry
[02:14] <Nikilos> No idea if that worked...test test
[02:24] <Alex_21> Can you test it in Jaunty?
[02:24] <Alex_21> eSpeak I mean
[02:30] <PhotoJim> Nikilos: so did it work?
[02:30] <Nikilos> PhotoJim: I'm still in the process of trying to fix it :P
[02:36] <Nikilos> Well, I was able to edit my menu.lst file without problems...I think. I can't really tell since I can't see what I'm typing, but hopefully it worked
[02:40] <Nikilos> Great, I completely murdered my display settings
[02:44] <Nikilos> Would using Xubuntu as a server be practical?
[02:56] <PhotoJim> practical but not optimal
[02:57] <PhotoJim> why not ssh into it from another system on your network?  I think sshd is configured to run by default on ubuntu server
[03:01] <Nikilos> Sorry for asking such a dumb question, but how do I do that?
[03:03] <PhotoJim> do you have shell access to another machine on your local area network?
[03:05] <Nikilos> I'm not sure. How do I check to see if I do?
[03:06] <PhotoJim> if they're your machines, you surely have access :)
[03:06] <PhotoJim> either that, or you can use a Windows machine and get the ssh client PuTTy
[03:06] <PhotoJim> if you have a Linux machine with a GUI like Gnome or KDE though you can just log in and open a terminal
[03:06] <PhotoJim> ssh is built-in
[03:06] <PhotoJim> (essentially)
[03:06] <Nikilos> OH, wow, I feel really dumb now. Yes, I do :)
[03:06] <PhotoJim> :)
[03:07] <PhotoJim> do you know what IP addresses your machines have?  (in particular, your server)
[03:08] <Nikilos> I know what this machine's IP address is, not the server's
[03:09] <PhotoJim> you need to know the server's
[03:10] <PhotoJim> how is it getting an IP, by DHCP?
[03:11] <Nikilos> I have no idea, sorry. :(I have the server connected to a wireless router via an ethernet cable and I'm on my notebook right now, which it connected wirelessly
[03:12] <PhotoJim> what is your notebook's IP?
[03:13] <PhotoJim> how do you use your server if you don't know its IP, by the way? :)
[03:13] <Nikilos> <IP_ADDRESS> is my notebook's IP
[03:13] <PhotoJim> my guess is that your server is <IP_ADDRESS> or <IP_ADDRESS>... your gateway is probably .1.1 so try .1.3
[03:14] <PhotoJim> you're running Linux on your notebook?
[03:14] <Nikilos> I'm actually running OS X, but its Terminal will still work, right?
[03:15] <PhotoJim> it will.
[03:15] <Nikilos> Oh, I successfully connected
[03:15] <Nikilos> It was <IP_ADDRESS>
[03:16] <PhotoJim> how did you connect?  did you do an ssh login?
[03:16] <Nikilos> I used Coda's terminal and used its "Connect via SSH" option and entered in the information
[03:17] <PhotoJim> so you're in?
[03:18] <Nikilos> Yup, I was able to undo the change I made to /boot/grub/menu.lst
[03:19] <PhotoJim> oh, cool.
[03:19] <PhotoJim> ssh is a very useful tool.
[03:19] <Nikilos> Thanks for stepping me through this, Jim, you're a lifesaver
[03:21] <PhotoJim> not exactly :) but you're welcome.
[03:21] <PhotoJim> not dumb questions, by the way.
[03:21] <PhotoJim> we were all newbies once.
[03:21] <Nikilos> :)
[03:22] <PhotoJim> my server is in my basement.  I almost never do a real console login.  always ssh from upstairs, or even away from home.  like yesterday, I sshed from 4000 km away :)
[03:22] <PhotoJim> today ssh is just a few feet :)
[03:23] <Nikilos> So how would I SSH to my server if I was not connected to my home network?
[03:24] <Alex_21> ssh<EMAIL_ADDRESS>[03:24] <PhotoJim> you'll need to port forward a port from your router to your server, and have a static IP address you can use elsewhere
[03:24] <Alex_21> Replace the last two with the proper values
[03:24] <PhotoJim> Alex_21: that won't work outside his LAN :)
[03:24] <Alex_21> If you don't have a static IP use DYNDNS.net
[03:24] <Alex_21> Ok
[03:24] <PhotoJim> yup, that'll work too, not quite as well but reasonably well
[03:25] <Alex_21> And do: ssh<EMAIL_ADDRESS>[03:25] <PhotoJim> my ISP gives me 2 static IPs, so my router (which is a custom Alix Linux box) has one and my server has the other
[03:25] <PhotoJim> dual NICs on both, so they have separate connections to the LAN
[03:25] <PhotoJim> my WiFi router just does WiFi, no routing
[03:26] <Nikilos> Two routers would definitely complicate the situation, I assume...
[03:27] <Alex_21> Depends on the sicuation in the first place :)
[03:27] <Alex_21> It is up to you
[03:27] <PhotoJim> not really.  my access point is set to route all traffic through <IP_ADDRESS>, which is my router's IP
[03:28] <PhotoJim> works perfectly :)
[03:28] <PhotoJim> and it doesn't give out IP addresses by DHCP, that's disabled.
[03:28] <Alex_21> I have to run
[03:28] <Alex_21> I hope I could help
[03:28] <Alex_21> Thanks for your help
[03:28] <PhotoJim> ciao Alex
[03:28] <Alex_21> Good night
[03:42] <Nikilos> Well, I think I can figure out the rest from here. Thanks for all the help!
[03:43] <Nikilos> I'll most likely return sometime in the near future, though :)
[03:48] <PhotoJim> you're most welcome
[03:50] <chelehandsome> how can I mount a RAID 5 in my server?
[04:18] <jaypur_mb> hi, i installed apache and my internet provider blocks the access of port 80, so what port should i use at the ports.conf file and at my router?
[04:57] <jmarsden> jaypur_mb: Any port you like... but usually if the ISP blocks port 80 it is because their Terms of Service forbid servers, so make sure they actually permit (not just technically but contractually/legally) use of a server on whatever port you choose.
[04:57] <jmarsden> Ports 81 or 8000 or 8080 would be common choices for alternative web server ports.
[06:22] <Alex_21> I have ap roblem. On boot I get
[06:23] <Alex_21> Code: "[        25.251737] Freeing initrd memory: 8263k freed"
[06:24] <Alex_21> Any ideas
[06:24] <Alex_21> Please
[06:33] <ssm> that's a normal boot line, Alex_21
[06:34] <Alex_21> But it is hanging for half an hour on the same line
[06:34] <ssm> Alex_21: does it continue to boot after the half hour pause?
[06:35] <Alex_21> It hasn't booted yet. It is a vannila install
[06:39] <ssm> Are you booting from an install cd? Is this a normal boot from disk, and a problem that's just appeared, have you done any upgrades lately, does your disk make funny noices, black smoke, anything else?
[06:45] <Alex_21> Nothing. It is a vanilla install and I am booting from the HD. It has software raid on it
[06:47] <jmarsden> Alex_21: It might be good to try doing a fresh install onto just one of the HDs, just to check that the basic hardware is OK?  Then if that works, the issue is probably RAID related in some way, and you can go back and troubleshoot that?  A 30+ minute delay means it's probably not going to finish that install, in my opinion.
[06:48] <Alex_21> It finished the install
[06:48] <Alex_21> This is the first power up
[06:48] <twb> If the delay is reproducible, I would blame nss.
[06:48] <twb> For example, if you have network manager installed and are running a NIS client, you will get that behaviour.
[06:49] <twb> Because NM retardedly tries to look in /home or something, before the network is even up.
[06:49] <Alex_21> I just realized something
[06:49] <Alex_21> The domain is assigned to this machine is not correct
[06:52] <ssm> twb: Network Manager has surprised me lately....  Could this be my problem. That is not resolving correctly
[06:56] <twb> Alex_21: boot without "quiet" (or "splash") in your kernel command line, and take a note of the text immediately before the freeze occurs.
[06:56] <ssm> Alex_21: not sure, that should not pause the boot process
[06:56] <Alex_21> Because I did have Ubuntu installed before and it worked fine. But I need Raid 1
[06:56] <twb> Alex_21: then boot with "single" or into a live CD, and add tracing on those files in /etc/rcS.d
[06:57] <Alex_21> What will that do?
[06:58] <ssm> I think the last line Alex_21 quoted was from the kernel freeing initrd memory, that's way before any init scripts.
[06:58] <twb> ssm: it can't be.
[06:58] <twb> ssm: if it's freeing the ramdisk memory, it has to be past the ramdisk
[06:58] <ssm> point
[06:59]  * ssm needs more coffee....
[07:00] <ssm> first kernel, then initrd stuff, then pivot-root and then there's a pause....
[07:00] <Alex_21> [ 25.244020] checking if image is initramfs ... it isn't (bad gzip magic numbers ); looks like an initrd
[07:00] <ssm> the next line after that in my dmesg is audit, but that's after 0.9 seconds, and the initrd message from Alex_21 was after 25 sec
[07:01] <Alex_21> Is what it says before the freeze
[07:02] <Alex_21> Code: "https://help.ubuntu.com/community/Installation/SoftwareRAID"
[07:02] <Alex_21> Code: "[ 25.244020] checking if image is initramfs ... it isn't (bad gzip magic numbers ); looks like an initrd" Sorry about before
[07:04] <Alex_21> What does this mean?
[07:07] <ssm> Alex_21: you could try booting from the cdrom again, in rescue mode, then do "update-initramfs -u -k all".  The image should be initramfs, at least it is here, on my jaunty desktop install.
[07:07] <ssm> your dmesg says that the image is not a vaild initramfs image, and it therefore assumes that the format is "initrd" instead.
[07:09] <ssm> Alex_21: http://ubuntuforums.org/showthread.php?t=1163519 also looks related
[07:10] <ssm> you could try adding rootdelay=200, since your boot obviously takes a while.  That's bitten me on some servers earlier
[07:11] <Alex_21> So I boot the disk. Then what?
[07:11] <Alex_21> There is no DHCP Server on the network BTW
[07:11] <Alex_21> I am at the Ubuntu Splash
[07:11] <ssm> when grub comes up, hit "e" for edit, navigate to the line that starts with "kernel", hit "e" for edit again, add "rootdelay=200" to the boot parameter list, then enter, and "b" for boot
[07:12] <ssm> also, remove the "splash" and "quiet' words on the grub kernel boot line
[07:12] <Alex_21> I mean on the CD
[07:13] <Alex_21> Do I go to Reque mode?
[07:15] <ssm> Alex_21: CD rescue mode for the "update-initramfs" trick, to see if that works, or grub menu on the hard disk for the "rootdelay" thingie
[07:16] <Alex_21> I have Lelo
[07:17] <Alex_21> Not Grub
[07:17] <ssm> Alex_21: if you boot from "lilo", then just add "rootdelay=200" after the default, which probably is "Linux"
[07:18] <ssm> Alex_21: the ubuntu install gives you lilo if you have everything in LVM, and grub if you make a /boot partition outside LVM when you install.
[07:19] <Alex_21> I have no idea where to edit this file for Lello
[07:19] <Alex_21> It was all done in LVM on top of Raid1
[07:37] <Alex_21> Thanks for your help
[07:37] <Alex_21> Good night
[07:56] <twb> If you boot into lilo, give up and reinstall
[07:56] <twb> lilo is totally NOT the right thing for LVM, though it will appear to work at first
[07:57] <twb> It works by remembering the block offset, so if you actually try to, you know, resize or move extents, lilo will just break.
[08:40] <soren> twb: ...and grub doesn't know about lvm at all. So what would you use?
[09:25] <twb> soren: you put /boot on a separate RAID1 array OUTSIDE LVM.
[09:25] <twb> (Note that current versions of Grub *do* understand LVM -- but Ubuntu, and everyone else, still run Grub Legacy.)
[09:26] <twb> Although personally I would prefer to use extlinux over grub, if it was as well-supported by d-i.
[09:27] <twb> And, you know, kernel-img.conf and such.  Though I think that's mostly programmable; you'd mainly need to write an update-extlinux(8) script.
[09:57] <a_ok> say i make an initscript what is the best way to set it up in the runlevels?
[10:04] <soren> twb: Yes, so that renders your lilo argument moot, doesn't it?
[10:07] <soren> twb: You're saying not to use lilo if your kernel is on lvm, because it'll break when stuff moves around, but what you clearly actually mean is to not put your kernel on lvm.
[10:08] <soren> ...which is completely different.
[10:30] <twb> soren: sorry, yes, that was implied
[10:31] <twb> But even without LVM, lilo would be vulnerable against e.g. replacing your ext2 filesystem with another one that contains that same files.
[10:31] <twb> (another ext2 filesystem, that is.)
[10:31] <twb> That's why grub-install tends to only get run once, whereas lilo needs to be reinstalled into the MBR practically every time you upgrade your kernel.
[11:04] <soren> twb: s/practically //
[11:49] <ghostlines> hi all
[11:50] <ghostlines> does anyone have experience with recovering shredded files?
[12:01] <soren> ghostlines: shredded?
[12:02] <soren> ghostlines: As in shred(1)ded?
[12:04] <ghostlines> yeah
[12:05] <soren> I'd forget about it.
[12:48] <ghostlines> soren, it's possible to recover shredded files
[12:48] <ghostlines> http://ubuntuforums.org/showthread.php?t=707373
[12:48] <ghostlines> check out that thread
[13:11] <henriquelm> Hello there
[13:12] <henriquelm> My Ubuntu server is giving me a "Segmentation fault" error msg during OS boot, what should I do?
[14:27] <skarufue> hello
[14:27] <skarufue> i have a mysql on ubuntu question
[14:28] <skarufue> i managed to make my old server unbootable (dont ask)
[14:28] <skarufue> so i set up a new one
[14:28] <skarufue> and everything is fine now
[14:28] <skarufue> except for the innoDB tables
[14:29] <skarufue> they arent there anymore... and i remember there was some way to fix this... but i cannot remeber how
[14:29] <skarufue> anyone?
[14:33] <Sam-I-Am> did you copy all the files over?
[14:34] <skarufue> yes
[14:34] <skarufue> but /etc/mysql restart failed
[14:34] <Sam-I-Am> whats the error?
[14:34] <skarufue> so i took out anything but the dbs
[14:37] <skarufue> so ibdata1 was recreated
[14:37] <skarufue> ill recreate the error with the original ibdata1 just a moment
[14:38] <kwork> should raidutils be able to manage adaptec cards ?
[14:45] <skarufue> well i dont see anything in the /var/log/mysql* logs
[14:46] <tdn> I am trying to make use of my geode aes engine by using LUKS/dmcrypt for encrypted partitions. But for some reason it does not work with the geode_aes module loaded.
[14:46] <skarufue> syslog gives me a series of those:
[14:46] <skarufue>  hosting /etc/mysql/debian-start[29594]: Error    : Table 'roundcubemail.cache' doesn't exist
[14:46] <skarufue> Jun  8 15:43:14 hosting /etc/mysql/debian-start[29594]: error    : Corrupt
[14:46] <skarufue> Jun  8 15:43:14 hosting /etc/mysql/debian-start[29594]: roundcubemail.contacts
[14:46] <skarufue> Jun  8 15:43:14 hosting /etc/mysql/debian-start[29594]: Error    : Table 'roundcubemail.contacts' doesn't exist
[14:46] <skarufue> Jun  8 15:43:14 hosting /etc/mysql/debian-start[29594]: error    : Corrupt
[14:48] <Sam-I-Am> did your files copy correctly?
[14:48] <tdn> Here is terminal log of what I have tried: http://thomasdamgaard.dk/p/P1310.html
[14:48] <Sam-I-Am> and does mysql know about the database?
[14:48] <skarufue> yes
[14:48] <skarufue> yes
[14:49] <Sam-I-Am> are the indices there?
[14:49] <skarufue> as i recall this is something common with innodb tables when the databases are simply copied (e.g. not using mysqldump)
[14:50] <skarufue> indices?
[14:50] <Sam-I-Am> index?
[14:51] <skarufue> yes it say for example gallery2 db has 63 tables but i can only view 3 of them (all who are not innodb)
[14:51] <skarufue> (to be honest i dont get the indeces question)
[14:52] <Sam-I-Am> not sure if you have to regenerate any indices if the database is physically moved
[14:52] <Sam-I-Am> or some command that make it work on a different instance of mysql
[14:52] <skarufue> well the last time i think i had to read them from binary backup with some sort of offline method
[14:53] <skarufue> but cant remember what exactly
[14:53] <Sam-I-Am> maybe you need to use the same procedure?
[14:53] <Sam-I-Am> google might be useful :)
[14:54] <skarufue> yeah well i tried that a lot but its a hard search term since the internets seems to be full of people who try to restore some sort of mysql database
[14:54] <Sam-I-Am> can you get mysql to return a more specific error, or an error number?
[14:58] <skarufue> Jun  8 15:51:56 hosting mysqld[29526]: of InnoDB though the .frm file for the table exists. Maybe you
[14:58] <skarufue> Jun  8 15:51:56 hosting mysqld[29526]: have deleted and recreated InnoDB data files but have forgotten
[14:58] <skarufue> Jun  8 15:51:56 hosting mysqld[29526]: to delete the corresponding .frm files of InnoDB tables, or you
[14:58] <skarufue> Jun  8 15:51:56 hosting mysqld[29526]: have moved .frm files to another database?
[14:58] <skarufue> Jun  8 15:51:56 hosting mysqld[29526]: See http://dev.mysql.com/doc/refman/5.0/en/innodb-troubleshooting.html
[14:58] <skarufue> Jun  8 15:51:56 hosting mysqld[29526]: how you can resolve the problem.
[14:58] <skarufue> Jun  8 15:51:56 hosting mysqld[29526]:
[14:58] <skarufue> Jun  8 15:51:56 hosting mysqld[29526]: 090608 15:51:56090608 15:51:56 [ERROR] Cannot find table gallery/g2_User from the internal data dictionary
[14:59] <Sam-I-Am> have you looked at what it tells you to look at?
[15:01] <skarufue> yes it isnt very helpfull
[15:02] <skarufue> it suggest to use CHECK TABLE which ist really an option whe mysql doesnt start
[15:02] <Sam-I-Am> got me...
[15:03] <skarufue> the thing is if i move ibdata1 out of /var/lib/mysql then the server starts (and a new ibdata is created) then i see the databases but the innodb tables are empty
[15:06] <Sam-I-Am> http://dev.mysql.com/doc/refman/5.0/en/innodb-backup.html
[15:06] <Sam-I-Am> same versions, same platforms?
[15:08] <skarufue> yeah have binary logging turned on.. but i just realised that maybe it isnt enough to just swap out ibdata...
[15:08] <skarufue> ill try that
[15:12] <skarufue> ok
[15:12] <skarufue> as usually it was a file permissions fuckup
[15:13] <skarufue> thanks for bearing with my stupidity
[15:13] <skarufue> :)
[15:48] <jaypur_mb> hi i'd like to know a free temperature monitor to my server... does someone know?
[16:17] <phoenixz> I have opted for home directory encryption in my ubuntu server installation which causes SSH not to be able to use ssh keys anymore.. anbody who could help me to fix this problem?
[16:17] <soren> kirkland: ^ :)
[16:19] <phoenixz> rob_p: well, in my case, I opted for home directory encryption during the ubuntu server installation. Result seems to be that SSH is not functioning correctly with keys anymore.. How can I fix this?
[16:21] <kirkland> phoenixz: encrypted home and ssh public key authentication are (mostly) incompatible technologies
[16:22] <phoenixz> kirkland: in other words.. once using encrypted home directories... you can no longer use ssh with public key authentication.. ?
[16:22] <kirkland> phoenixz: i say "mostly" ...
[16:22] <phoenixz> okay... but how could I then get them to work?
[16:22] <kirkland> phoenixz: there are two non-ideal work arounds
[16:22] <phoenixz> kirkland: oh oh...
[16:23] <kirkland> phoenixz: basically, encrypted-home means that you *must* enter a password to mount your home directory -- that's the design/definition of the feature
[16:23] <kirkland> phoenixz: you can ssh in with a password the *first* time
[16:23] <kirkland> phoenixz: and then subsequent ssh's via pubkey should work
[16:24] <kirkland> phoenixz: as long as your home dir stays mounted
[16:24] <kirkland> phoenixz: if you rm ~/.ecryptfs/auto-umount, it won't be unmounted on logout
[16:24] <kirkland> phoenixz: which is perhaps a slight security risk to your data, but will key your pubkey auth working
[16:24] <kirkland> phoenixz: that's option #1
[16:24] <kirkland> phoenixz: option #2 ...
[16:24] <phoenixz> kirkland: gottit..
[16:25] <kirkland> phoenixz: you can move your ~/.ssh/authorized_keys file out of your encrypted home directory
[16:25] <kirkland> phoenixz: put it in your unmounted, read-only home
[16:25] <kirkland> phoenixz: this will get your ssh public key auth working
[16:25] <kirkland> phoenixz: but your home dir will not be auto mounted on login
[16:25] <kirkland> phoenixz: you will need to run ecryptfs-mount-private
[16:25] <phoenixz> because there is data there...
[16:25] <phoenixz> gottit...
[16:25] <kirkland> phoenixz: and enter a password, and then home is mounted
[16:25] <kirkland> phoenixz: this is documented in various scattered places
[16:26] <kirkland> phoenixz: i'm going write a blog post that documents it now :-)
[16:26] <kirkland> soren: thanks for the pointer
[16:26] <phoenixz> kirkland: This is a detail that might be documented a bit clearer yeah :) maybe during installation or something :)
[16:26] <phoenixz> kirkland: thanks a lot!
[16:26] <soren> How about changing the location of the authorized_keys ?
[16:27] <soren> I once taught ssh to look at a fuse mountpoint that would fetch ssh keys from launchpad on the fly.
[16:27] <soren> I feel much better now, though.
[16:27] <kirkland> soren: that was option #2
[16:28] <soren> kirkland: Oh, I misunderstood. Sorry.
[16:28] <soren> huats: Hey. The changelog in your merge says that Intrepid and Karmic were merged upstream. If it's cool with you, I'll change "Karmic" to "Jaunty" and go ahead an upload?
[16:29] <huats> soren hey
[16:30] <huats> 2 minutes I am on the phone
[16:30] <soren> huats: Sure.
[16:30] <soren> kirkland: I'm reading your option #2 again, and I'm not sure we're speaking about the same thing.
[16:31] <kirkland> soren: okay, i simply meant option #2 to convey moving ~/.ssh/authorized_keys out of $HOME
[16:31] <kirkland> soren: out of encrypted home, anyway
[16:31] <kirkland> soren: somewhere that the system can find it, unencrypted
[16:32] <kirkland> soren: what are you meaning?
[16:32] <soren> kirkland: Right. Like /var/lib/ecryptfs-workarounds/<username>/authorized_keys or something.
[16:32] <kirkland> soren: sure
[16:32] <soren> And adjust AuthorizedKeysFile in sshd_config accordingly.
[16:32] <kirkland> soren: i suggested unmounted $HOME, but it could be mostly anyway
[16:32] <kirkland> anywhere
[16:32] <kirkland> soren: ah, and you mean modifying the sshd_config too
[16:33] <soren> Right.
[16:33] <huats> soren: I am back
[16:33] <huats> hey :)
[16:33] <soren> o/
[16:34] <huats> oups
[16:34] <huats> indeed
[16:34] <huats> intrepid and jaunty were merged :)
[16:34] <huats> go ahead
[16:34] <huats> you can change that :
[16:34] <huats> :)
[16:34] <huats> (sorry for the mistake)
[16:34] <soren> Cool :)
[16:34] <soren> huats: I didn't expect you to object, but it felt wrong changing stuff that is signed by you without your consent. :)
[16:34]  * soren breaks
[16:35] <huats> btw I will send the patch I have added (that adds karmic) to upstream and debian too...
[16:35] <huats> sure I understand
[16:35] <huats> btw I have done locally the virt-manager update, are you interested ? :)
[16:35] <huats> I mean the merge
[16:46] <soren> huats: Sure, bring it on :)
[16:47] <huats> hehe
[16:47] <huats> I will
[16:47] <huats> I have just to deal with a last patch
[16:47] <huats> (I might need your opinion on it btw)
[16:48] <soren> Sure.
[16:55] <kirkland> soren: i'll document your suggested method too :-)
[16:55] <soren> ;)
[17:11] <huats> soren: In fact the patch that bothers me a bit is : http://paste.ubuntu.com/190975/
[17:11] <huats> in fact the new interface has changed quite a bit
[17:12] <huats> and there is not anymore the distinction para virt/full virt (from my understanding and that has been confirmed when I have launched the application)
[17:12] <huats> so I am not sure this is needed...
[17:13] <huats> (by instance I am running it without being the kvm group)
[17:30] <huats> soren:  I need to run
[17:30] <huats> I might be connected later tonight or tomorrow :)
[17:40] <Damir> hey guy's
[17:40] <Damir> anyone experiance with apache
[17:40] <Damir> and the mod_proxy loadbalancaing
[17:41] <Damir> im getting this config error: BalancerMember can not have a balancer name when defined in a location
[17:42] <Damir> and i'm using this config : ##custom configuration loadbalancing
[17:42] <Damir> <Proxy balancer://servertje>
[17:42] <Damir> BalancerMember http://<IP_ADDRESS>:8080/ loadfactor=100 # Balancer member 1
[17:42] <Damir> BalancerMember http://localhost:9090/ loadfactor=80 # Balancer member 2

[17:42] <Damir> ProxyPass /test/ balancer://servertje/
[17:42] <Damir> any idea what it could be ?
[19:08] <rsr> hello all
[19:09] <rsr> I have a question... I wpuld like to know what this is: dd bs 1 if /proc/kmsg of /var/run/klogd/kmsg : I found this despite not knowing what it is referring to... Can anyone enlighten me?
[19:14] <_ruben> copy .. with block size 1 .. from /proc/kmsg .. to /var/log/klogd/kmsg
[19:15] <_ruben> looks like a "bridge" between a file within /proc and socket for klogd
[19:23] <rsr> yes
[19:23] <rsr> no problem
[19:24] <rsr> should I use the latest version or the LTS version for my server?
[19:24] <jpds> Whichever you want.
[19:25] <rsr> but which one is recommended for a mission criticall service? there must be a reason for LTS
[19:29] <rsr> another question
[19:30] <rsr> should I upgrade distro on a server
[19:30] <rsr> ?
[19:36] <Oasisbhrnw> Hello.  I just installed Ubuntu Server 9.04.  During the install there was an option to turn auto-updates on, which I did.  My question is, is there anyway to check when auto-updates last ran and/or is there a way to make it run manually?
[19:38] <jmedina> Oasisbhrnw: AFAIK, auto update wont update your system quitely, insted will download list like apt-get update
[19:39] <Oasisbhrnw> I just don't know how to verify it's working.  I'm paranoid it's acutally not running.
[19:41] <sommer> Oasisbhrnw: there will be new entries in /var/log/apt/term.log
[19:42] <sommer> Oasisbhrnw: you can also adjust the settings in /etc/apt/apt.conf.d/50unattended-upgrades
[19:43] <Oasisbhrnw> K, thanks.
[19:52] <orudie> hi, i'm struggling with this http://www.debian-administration.org/articles/590
[19:54] <orudie> trying to lock user in home dir.
[19:55] <orudie> can someone help me with this ?
[19:55] <orudie> please
[19:59] <ghostlines> what's the prob?
[20:00] <orudie> well first off cant even test it with sftp user@host because i'm using ssh private key
[20:01] <orudie> how can i specify port with sftp user@host ?
[20:02] <jmedina> man scp?
[20:02] <orudie> jmedina-> sftp
[20:02] <orudie> its -o something
[20:03] <orudie> forgot what
[20:03] <jmedina> orudie: then man sftp
[20:03] <orudie> looking cant see
[20:03] <jmedina>  just type: /port and there you go
[20:03] <jmedina> :D
[20:04] <jmedina> the fist match
[20:04] <jmedina> For example, to specify an alternate port use: sftp -oPort=24.
[20:04] <orudie> yup see it thanx
[20:04] <orudie> i didnt know how to search inside man pages lol
[20:04] <orudie> now i know
[20:04] <jmedina> ¬¬
[20:04] <jmedina> orudie: the first thing is learn how to use man pages
[20:04] <jmedina> man man
[20:05] <orudie> :)
[20:05] <jmedina> use man before googling or ask in forums/chats...
[20:05] <orudie> good stuff
[20:05] <jmedina> it is easier, and most of time will save some time to you and to others
[20:06] <jmedina> and you look Pro :D
[20:06] <jmedina> orudie: then you dont know how to search in more/less?
[20:07] <orudie> do not know what you are asking
[20:08] <jmedina> Im taking about pager programs like more or less
[20:08] <jmedina> man uses a pager, I think by default is more unless you install  less (1)
[20:08] <orudie> never used those
[20:08] <jmedina> :O
[20:10] <orudie> so yeah cant test within the host
[20:10] <jmedina> virtualize!!!!!
[20:10] <orudie> Failed to add the host to the list of known hosts (/home/paul/.ssh/known_hosts).
[20:10] <orudie> Permission denied (publickey).
[20:11] <orudie> but its obviously doesnt work because i can actually browse to other directories if i do su user
[20:16] <orudie> anything ?
[20:20] <orudie> anyhing anyone ?
[20:34] <ghostlines> what vpn solution do you guys recommend?
[20:36] <mathiaz> ghostlines: openvpn is a good solution and may fit your needs
[20:36] <ghostlines> I have experience with open-vpn, wondering if they're are any better ones
[21:41] <jason^> has anybody installed ubuntu server on a dell r710 server?  i'm getting errors like "cannot find a valid memory map"
[21:46] <ta3one> Greetings fellow Ubuntu affectionados! I have a question about getting mod_proxy to work - I keep getting forbidden error
[21:48] <ta3one> can anyone please help?
[21:53] <matthewmpp> Hi, I am new to server-editions.  I created a user on my server with: useradd -m matthewmpp, but it never asked me for a password for matthewmpp. How do I create or change the password for this new user?
[21:54] <matthewmpp> ping
[21:56] <ta3one> hey matthew
[21:56] <matthewmpp> hi
[21:56] <ta3one> use passwd username
[21:56] <matthewmpp> okay
[21:56] <ta3one> sudo passwd username
[21:56] <ta3one> you can reset any password like that from the cli
[21:57] <matthewmpp> by using passwd username?
[21:57] <ta3one> yeah
[21:58] <ta3one> by the way, you should be using adduser
[21:58] <ta3one> not useradd
[21:58] <orudie> after following this guide http://www.debian-administration.org/articles/590 i can not figure out where they authorized_keys file with ssh key should go
[21:58] <orudie> had been stuck on this for many hours already
[21:58] <ta3one> useradd is low level utility
[21:59] <giovani|work> orudie: that guide has nothing to do with ssh keys
[21:59] <giovani|work> so, clearly that's not a good place to find the answer
[21:59] <ta3one> orudie, what are you trying to do?
[21:59] <ta3one> you mean like automatic logon?
[21:59] <orudie> giovani|work-> yes, but i cant connect
[21:59] <orudie> ta3one-> lock user in directory with help of chroot
[22:00] <ta3one> ohh sorry, I've never done that ...
[22:00] <orudie> giovani|work-> its like ssh doesnt know where to look for authorized_keys file after i followed the guide
[22:01] <orudie> giovani|work-> for that particular user
[23:12] <orudie> where does the authorized_keys file go when using chroot in sshd_config ?
[23:15] <FFForever> is anyone around that has setup proftpd before?
[23:15] <FFForever> i keep getting ProFTPd warning: cannot start neither in standalone nor in inetd/xinetd mode. Check your configuration., and i only installed it i have not modded the default configuration
[23:16] <orudie> FFForever, why not use sftp ?
[23:16] <FFForever> orudie, because this is for a client and not me personally
[23:22] <FFForever> any ideas?
[23:25] <FFForever> bah =( Fatal: unable to load module 'mod_lang.c': Operation not permitted
[23:44] <FFForever> anyone around?
[23:44] <billybigrigger> reconfigure it?
[23:45] <billybigrigger> dpkg-reconfigure proftpd
[23:45] <billybigrigger> unless it was compiled
[23:45] <FFForever> it was installed via apt
[23:46] <FFForever> i get this http://pastebin.ca/1452500
[23:48] <FFForever> billybigrigger, any other ideas?
[23:51] <billybigrigger> sudo dpkg-reconfigure proftpd
[23:51] <billybigrigger> ?
[23:51] <billybigrigger> hmm
[23:51] <billybigrigger> nm
[23:51] <FFForever> i am root
[23:51] <billybigrigger> didn't see root@
[23:51] <FFForever> ahh
[23:52] <billybigrigger> is it a functioning fp server?
[23:52] <billybigrigger> ftp?
[23:52] <billybigrigger> purge it and reinstall
[23:53] <FFForever> billybigrigger, i did that
[23:53] <FFForever> no luck
[23:53] <FFForever> i have made no modifications
[23:55] <jmedina> billybigrigger: why dont you set your locales?
[23:55] <billybigrigger> FFForever
[23:55] <billybigrigger> not i
[23:55] <billybigrigger> :P
[23:55] <jmedina> sorry :S
[23:55] <jmedina> FFForever: why dont you set your locales?
[23:56] <FFForever> cause i do not know how?
[23:56] <jmedina> for easy: apg-get install language-pack-en
[23:57] <jmedina> is that a virtual machine?
[23:57] <FFForever> yeah
[23:57] <jmedina> :D
[23:57] <FFForever> that worked...
[23:57] <jmedina> now try to restart proftp
[23:58] <FFForever> perfect
[23:58] <jmedina> ok
[23:58] <jmedina> probably a bug with proftpd init script, it is catchig local exict code not proftp daemon
[23:59] <jmedina> you can help sending a bug report
[23:59] <jmedina> probably someone else can confirm this
[23:59] <FFForever> i am on dialup at the moment ill so ill have to do this tomorrow
[23:59] <FFForever> dialup + bnc == fun


[21:40] <gustavold> will gnome-shell be incompatible with unity in ubuntu 11.10 ?
[21:41] <gustavold>  by incompatible I mean I will not be able to install both and choose which one I want to use during session login
[21:42] <BigWhale> What happened with the gnome-power-manager on desktops? I see only two things that I can set
[21:43] <dobey> BigWhale: gnome3 happened
[21:44] <dobey> gustavold: no. they can both be installed and you can pick one or the other in the login screen
[21:44] <BigWhale> dobey, oh ok... I wanted to check what's going on, because my desktop went to S3 sleep while I was away.
[21:45] <dobey> BigWhale: yeah, i'm a bit afraid to upgrade my workstation to oneiric
[21:46] <gustavold> dobey: thanks. I accidentally found the gnome3-session package in my natty and tried to install it just to find out I need a PPA for that... then started to wonder if ubuntu in 11.10 it would be easier
[21:46] <BigWhale> dobey, yeah I'm trying to find out why 3.0.0-11 kernel is working and 3.0.0-12 just hangs after loading initrd
[21:47] <dobey> gustavold: gnome 3 on 11.04 is pain; it will break the world if you install it :)
[21:47] <jbicha> gustavold: yes, gnome shell works just fine in 11.10
[21:48] <dobey> BigWhale: i don't know about that, but on my laptop where i have been running oneiric for a long while now, it is really slow
[21:48] <dobey> like, it gets stuck in diskwait ALL the time
[21:48] <BigWhale> and I'm getting frustrated because I can't get any output in the console and removing splash didn't do a thing
[21:50] <gustavold> dobey: thanks for the advice... I will wait a couple of weeks until we have an oneiric release. Then I will try gnome 3
[21:50] <BigWhale> dobey, I was suspecting my RAID5 setup so I went back to single drive. It worked and I was happy. Then I ran dist-upgrade, got me 3.0.0-12 and same old story
[21:50] <gustavold> jbicha: thanks ;)
[22:03] <RAOF_> Good morning desktoppers.
[22:07] <remos> hi
[22:07] <remos> c'one
[22:07] <remos> c'on
[22:17] <dobey> man, the unthemed dialogs in lightdm with the awesome ubuntu theme, are saddening
[22:20] <RAOF> Yes, they are :/
[22:21] <dobey> uh oh
[22:22] <dobey> just did a dist-upgrade and indeed my laptop no longer fully boots :(
[22:23] <dobey> with the -12 kernel anyway
[22:24] <dobey> hrmm, even with -11 it ssmes to be rather unhappy now
[22:24] <dobey> well this sucks
[22:41] <micahg> dobey: are you going to fix ubuntuone-client-gnome?
[22:44] <dobey> micahg: define 'fix' ?
[22:44] <micahg> dobey: upload a version that doesn't FTBFS?
[22:45] <dobey> i didn't know it was ftbfs, but yeah i will fix it
[22:45] <micahg> dobey: you didn't get the e-mail?
[22:45] <dobey> no
[22:46] <dobey> well, i will propose a branch to fix it i guess. i don't have upload privs to just upload it
[22:47] <micahg> dobey: I"m sure we can find someone to sponsor
[22:53] <micahg> dobey: BTW, I thought gsettings was the new technology for settings
[22:54] <dobey> and?
[22:54] <micahg> oh, I guess the support is now upstream than rather than an override
[22:55] <RAOF> 194 packages to upgrade since Friday?  Really?
[22:56] <Laney> erm, my compose key seems to have gone away
[22:56] <Laney> Final Freeze(tm)
[22:56] <RAOF> Yeah, but Final Freeze was *Thursday* :)
[22:57] <Laney> That's what I meant ;-)
[22:57] <Laney> oh man, how do I get compose back?
[22:57] <RAOF> I don't know.
[22:57] <RAOF> It works on this machine, but not on my x200s.
[22:58] <Laney> pretty sure it worked before my last dist-upgrade
[22:58] <Laney> now it's back to caps lock again
[22:58] <Laney> and I can't find the UI
[22:58] <RAOF> Bah.  I seem to have broken PolicyKit.  I wonder what fragment of the manual install is still lying around asking for the root password?
[22:59] <RAOF> The UI *should* be in Keyboard Layout?
[22:59] <Laney> yeah, still set to Caps Lock
[23:00] <Laney> ™ — toggling worked
[23:03] <dobey> micahg: https://code.launchpad.net/~dobey/ubuntu/oneiric/ubuntuone-client-gnome/fix-ftbfs/+merge/77842
[23:04]  * dobey goes back to weekend, and get some dinner
[23:04] <micahg> thanks dobey
[23:04] <micahg> RAOF: any chance you can sponsor the above assuming it's sane? ^^
[23:09] <RAOF> micahg: I'll take a butchers.
[23:10] <micahg> RAOF: ?
[23:11] <RAOF> micahg: While the rest of .au is on a public holiday, I need to make up for the diminished .au contingent by using the broadest-possible Australian slang.
[23:11] <micahg> RAOF: ah, thought it was something I was unfamiliar with
[23:13] <RAOF> Just some random slang. ?
[23:13] <micahg> right
[23:14] <Laney> = butcher's hook = look
[23:15] <RAOF> It's the old indirect cockney rhyming slang.
[23:30]  * RAOF wonders if this "bzr merge" is actually going to complete.


[03:21] <pleia2> http://fridge.ubuntu.com/node/2003
[03:21] <pleia2> :)
[03:30]  * valorie diggs it
[03:30] <valorie> great interview!
[03:31] <valorie> http://digg.com/linux_unix/Interview_with_Amber_Graner
[03:32]  * pleia2 diggs
[03:32] <pleia2> thanks valorie
[07:02] <czajkowski> morning
[16:59] <akgraner> Anyone added stuff to the monthly team report yet?
[23:59] <akgraner> The new edition of the Ubuntu Weekly Newsletter is now available:
[23:59] <akgraner>  https://wiki.ubuntu.com/UbuntuWeeklyNewsletter/Issue186


[00:05] <cjwatson> StevenK: mkay, no problem
[07:39] <Mithrandir> cjwatson: TTBOMK, we don't.
[07:48]  * Hobbsee stomps on Mithrandir's feet in greeting
[07:55] <dholbach> good morning
[07:57] <asac> mjg59: depends. the only point for looking at 0.6 would be that 0.7 will most likely not ship in hardy.
[07:58] <mjg59> asac: And that's the plan for UME as well, right?
[07:59] <dholbach> Mithrandir, StevenK: if you look at http://people.ubuntu.com/~dholbach/sponsoring you'll see that there are a bunch of hildon-desktop patches that need sponsoring - you might just roll them all into one upload
[08:00] <asac> mjg59: most likely. we could treat mobile different if there is a use-case i guess
[08:00] <asac> mjg59: will hardy be a LTS for mobile too?
[08:00] <asac> e.g. i would instantly go for 0.7 if hardy wouldn't be LTS
[08:02] <mjg59> asac: I don't think it's counted as an LTS, but it is the first version that's likely to be pushed to vendors
[08:02] <mjg59> I think you'd need to speak to Tollef or David for a better idea what's going on there, though
[09:02] <amitk> asac: No, it won't be an LTS in the traditional sense, since development will continue later
[09:03] <asac> if development can continue later we should definitly cosider to go for NM 0.7
[09:04] <Person1873> is ubuntu mobile intended for PDA's or smartphones?
[09:04] <amitk> The plan is to continue in the PPA later
[09:04] <asac> the features are there ... my only concern for not switching in LTS is that code base will still evolve significantly till final 0.7 and then we might have issues backporting security fixes
[09:05] <amitk> Person1873: not yet. The first target is the Intel Menlow platform. https://wiki.ubuntu.com/MobileAndEmbedded/FAQ
[09:05] <asac> amitk: but we could go ppa directly if we decide to use 0.7 for mobile and 0.6.6 other archs
[09:05] <asac> ?
[09:05] <Person1873> do you know of any linux distro's that might be able to replace windows mobile?
[09:06] <amitk> asac: yes you could
[09:08] <amitk> Person1873: you will need to know the underlying hardware that needs to be supported first, openembedded, maemo, have support for pdas, etc.
[09:09] <Person1873> ok, i'm not sure about my new PDA its HP
[09:10] <Person1873> i think i might be i the wrong place
[17:46] <GrueMaster> HappyCamp:  I think I figured out the MIC issue.  There is a bug in it that reads the regular expression defines in ~/.image-creator/sources_cfg even though they are commented out.  Deleting this file and reinstalling has fixed the issue (I think - project is building now).
[18:04] <Java-Jim> hi
[18:06] <Java-Jim> Can anyone tell me, if it is possible to have 3d acceleration on on crown-beach board at the moment? I read about a proprietary driver in the mailing list archives. Is it available somewhere?
[18:27] <sodarock_home> GrueMaster: good to hear
[18:27]  * sodarock_home is also known as HappyCamp
[18:29] <GrueMaster> If I get some spare time, I'll look over your config parsing routine and see about patching it.  Of course, I don't know python yet...
[18:30] <sodarock_home> GrueMaster: well the parsing of sources_cfg is just execing it as python code.
[18:31] <Praj> GrueMaster: will investigate the MIC issue with sources_cfg - can you give me context when it fails?
[18:34] <GrueMaster> Apparently, I had an older version in ~/.image-creator (as root).  When I ran image-creator --command=create-project --platform=menlow-lpia-ubuntu-hardy-ppa --project-name=ubuntu-hardy-20080208-1 --project-path=/root/ubuntu/hardy/ubuntu-hardy-20080208-1 it would pull the gutsy sources.list only.
[21:16] <ToddBrandt> Hi all: I have an OS architecture question for you wrt moblin-applets
[21:16] <ToddBrandt> I want to get rid of the need for the user to have to log in as root in order to execute the moblin touchscreen and date&time applets
[21:17] <ToddBrandt> So my solution is to turn both of them into little daemons with the same functionality, but that are instantiated by the DBUS daemon when their one DBUS function is called
[21:18] <ToddBrandt> so moblin-touchscreen is instantiated via a connection to its system DBUS connection and a call to "calibrate_touschreen", it then kicks off the daemon, it runs the calibration as root, then exist when it's done
[21:19] <ToddBrandt> basically the same things for moblin-time, which is the time applet
[21:19] <ToddBrandt> does this sound like a good ubuntu friendly approach?
[21:32] <inuka_desk> ping amitk, awake?
[21:58] <inuka_desk> ping, bryce
[22:26] <GrueMaster> Anyone know how to get root access on the latest ubuntu-hardy images?
[22:41] <inuka_desk> GrueMaster, login as ume and do sudo su (all password are blank).... does this not work anymore?
[22:41] <GrueMaster> Nope.  Hasn't worked for several weeks now.
[22:41] <GrueMaster> Error message is that it can't resolve host ume.
[22:43] <GrueMaster> I've been working around it by booting single, then editing /etc/hosts.
[22:43] <inuka_desk> oh, I had the same issue before, I think I booted into single and changed the password I am not sure if that works
[22:43] <inuka_desk> :) yeah
[22:45] <GrueMaster> I'm not sure if the problem exists with Moblin or not.
[22:45] <GrueMaster> I have just this morning been able to build images again.
[22:46] <inuka_desk> GrueMaster, thats good I kept on installing the fsets by hand  so far
[23:13] <bryce> inuka_desk: heya
[23:14] <inuka_desk> bryce, I got a PPA related question, if I ulpad a package to the PPA to build, it will first look at the packages in my PPA when it installs the dependencies right?
[23:20] <bryce> inuka_desk: it will look in the same PPA that it's in, but not any other PPA's
[23:20] <bryce> inuka_desk: so you need to get dependencies (e.g. libdrm) uploaded there first
[23:21] <inuka_desk> bryce, I have libdrm uploaded, when I specified the exact version of the libdrm I uploaded to the ppa it failed saying dependency not found , I took the exact version string out for libdrm-dev from the control file it built but it looked like it was building against a different version of libdrm when I looked in the log
[23:22] <bryce> hmm, yeah I also ran into problems getting the libdrm to be recognized in the ppa
[23:23] <bryce> it's probably a question for Mithrandir or StevenK
[23:23] <inuka_desk> bryce, ok thanks hope one of them is awake
[23:24] <inuka_desk> ping, Mithrandir