gmane.linux.ubuntu.server

Ubuntu Server Bug Triage Process

James Page — 2012-05-25T07:59:03

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Team

Post discussion on this ML and at UDS-Q I've written up what I think
is the bug triage process we should be following for server bugs:

  https://wiki.ubuntu.com/ServerTeam/KnowledgeBase/BugTriage

I tested this during my triage session yesterday and it covered all of
the bugs that I triaged.

This is v1.0 - please review - happy to discuss changes and make
updates if people think that it needs improvement.

Cheers

James

- -- 
James Page
Ubuntu Core Developer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=p3B9
-----END PGP SIGNATURE-----

Byobu autostart from cron

Whisperity — 2012-05-19T14:04:37

Dear fellow Ubuntu users,

I have an automatation question I'd like to ask from you. My server runs
some servers which are, unfortunately, not daemons (like Minecraft or
Source Dedicated Server). I am planning on making them automatically start
at boot with the *< at >reboot* directive in crontab, but I wish their sessions
to be usable from *byobu*.

Problem being, that byobu does not auto-start. I have written a shell
script:

#!/bin/bash
screen -dr byobu -X screen -t srcds
screen -r byobu -p srcds -X stuff "./start_gmod.sh $(printf '\r')"

And I execute it as my *nonprivileged* user in *crontab*:

< at >reboot           sourcesrv                    cd /srv/srcds/orangebox
&& ./hook-byobu.sh

However, running this script requires *byobu* to be started when it runs.
If I test the script with starting byobu by hand and then executing it from
SSH, it does order byobu to make a new window and then starts the server.

My question being: can I, somehow, automatize the start of byobu into the *
hook-byobu.sh* file? I tried adding *byobu* (the command itself) after the
shebang-line, but then it hangs until I, by hand, F6 (detach) from byobu.

Turning byobu's *Start automatically after log in* on does not work,
because there is no login to happen, as the script is started from cron.

precise LIO target with iscsi support

Aleksi Handelofski — 2012-05-18T17:48:42

Hi All!

I saw that the kernel in precise brought support for the LIO target including the iscsi module.
So i wanted to know if the LIO iscsi support ist considered production ready or should we still use
the old and tested TGT?

Thanks for your opinions!

Alex

MAAS Install issue

Evan Jones — 2012-05-15T19:17:33

I have downloaded the newest Ubuntu server iso image and have problems with
setting up the cloud. Here is what has happened so far.

 

Using a VMWare 4.0 server as the install platform.

 

Attempt #1

.         created controller on VMWare server. Install went smooth with no
problems. IP address for MAAS controller was 192.168.1.9 (from network DHCP
server -Endian firewall).

.         Created maas superuser as per instructions. Worked correctly.

.         Opened IE9 on Win7 desktop and went to MAAS page 192.168.1.9/MAAS
as per instructions. Page opened correctly.

.         Performed sudo maas-import-isos. Worked correctly.

.         Created 2 nodes in VMWare. Installed correctly. Nodes shut down
correctly.

.         Opened IE9 on Win7 desktop and went to MAAS page 192.168.1.9/MAAS
as per instructions. Page opened correctly.

.         Attempted to "Accept and Commission" nodes. System hung on me. I
had to shutdown controller and reboot.

.         Could not get back to MAAS Admin page at 192.168.1.9/MAAS.

.         Deleted all VMWare machines from disk and inventory on VMWare
server and started over.

 

Attempt #2 through--------

 

Did all of the same as above. When I tried to open the webpage at
192.168.1.9/MAAS or any other IP address that I tried during various install
attempts I would get an webpage error. If I entered just the controller IP
address I would get the Apache 
IT WORKS" but there is no content loaded for this webpage notice.

 

I have tried this with several different IP addresses, on a bare metal
machine, a different subnet on the network and with Firefox, Chrome and IE 8
and IE 9 on different desktop machines. Every attempt has provided the same
response: If I entered just the controller IP address I would get the Apache
IT WORKS" but there is no content loaded for this webpage notice. If I enter
the ip/MAAS address I get a webpage error.

 

I have even re-downloaded the Ubuntu 12.04 iso image and tried all over
again. Same problem.

 

What am I missing?

Thanks.

 

Evan

resolv.conf

Diác. C.J.Moretti — 2012-05-16T19:02:52

Hello!

I would put the DNS IP
resolv.conf file
But the reniciar the machine it loses this
setting ...
In which file and place this increase should I do?

Moretti
                                     \///
                                    (o o)
__________ oo0 - () - 0oo __________
Tarde te amei,
Beleza antiga e tão nova,
tarde te amei.

Estavas dentro de mim
e eu estava fora...
Estavas comigo
e eu não estava contigo...
______________________________
 (Sto. Agostinho)

Ubuntu 12.04 / kvm / libvirt / problem with network bridge br0

Thorsten Göllner — 2012-05-16T15:07:41

Ubuntu server 12.04 locate problems

Diác. C.J.Moretti — 2012-05-16T13:38:54

HI!

After installing ubuntu 4.12, I noticed that when using the command
man, I always get the following message, even showing me the correct 
syntax of the command you want:
man: can not set the locale, make sure $ LC_ * and $ LANG are correct

When enter the line:
export LANG = pt_BR

the problem does not happen ...

How can I fix this detail without having to enter every time the line up?

TKS
Moretti

Server-Installation 12.04 / automatic seciruty updates

Thorsten Göllner — 2012-05-16T13:29:06

Hi,

when installing ubuntu server 12.04 I was asked, of I want to active the 
automatic security update (service). I said "no". How can I install it 
now? Is it a specific apt-package?

Thanks for any hint
-Thorsten-

Use of Blueprints + Blueprint Template

James Page — 2012-05-16T08:34:29

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Team

I've spent some time with various members of the Ubuntu Server Team
over the last few weeks reviewing how we use blueprints to track
progress during the development cycle.

This was really with the objective of trying to resolve a few
challenges that we have with current usage:

1) It's often hard to evaluate exactly when a blueprint has been
completed.

2) We sometimes have challenges with understanding the use cases for
work.

3) What the overall goal is for a blueprint is not always clear.

4) Endeavouring to bake QA into all work we do.

When I first started contributing to Ubuntu we did try to write
specifications associated with each blueprint (see [0] for the
template).

I think that this approach did not work that well - often the spec did
not get updated throughout the cycle as the primary focus is normally
on work item tracking in the blueprint - so they age and become pretty
useless very quickly.

That said there are a few concepts in the specification template that
I think would still benefit our use of blueprints.  So I'd like to
propose bringing in some of the concepts we had in specs to the
blueprint summary and whiteboard.

1) Blueprint Summary

Rationale:

One or two paragraph statement about why we are doing this blueprint.

Goal:

Overall goal for the blueprint.

2) Blueprint Whiteboard

User Stories:

User stories really help thrash our what the requirements are and why
we are actually doing the work.  They should try and encompass how you
think the output of the blueprint will be used by real people.

There may of course be multiple stories for more complicated work.

Assumptions:

What assumptions are being made about the delivery of the blueprint.

Test Plans:

This is really about validating user stories; I find its helpful to
think about these as high level processes - then they can either be
hand cranked by people who want to try stuff out or do manual QA OR
they can be automated.

..or they might even be covered by existing automated test cases.

Release Note:

One or more suitable statements that could be included in the release
note for the release associated with the blueprint.

I've worked this into one of the blueprints that I will be driving
this release which is a) simple and b) already well defined - see [1].

So a few comments about the above:

1) Its not going to fit every blueprint we write - but I think it
should cover most of them!

2) I think that having everything in the blueprint will help with
keeping it up-to-date as its the place we all go to see what needs to
be done.

3) Interested people only have to subscribe in one place and they can
then see when stuff is updated.  Has anyone ever subscribed to a spec
in the wiki?

4) The original Specification template also included a section for
'Design' - I personally think that Design should really live past the
 lifetime of a single blueprint and should be delivered as
documentation  - probably in the wiki - and referenced from the blueprint.

I will be doing this for my blueprints this cycle - it would be great
if other people could try this out as well as they write up their
blueprints from sessions at UDS.

One feature that is currently lacking in the whiteboard is the ability
to track changes over time (although you could do this through
diligent monitoring of blueprint email spam).  Its possible that we
might start managing the whiteboard content in a bzr branch and
updating the blueprint periodically - but that's still work in progress.

Cheers

James

[0] https://wiki.ubuntu.com/SpecSpec
[1] https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-tomcat7
- -- 
James Page
Ubuntu Core Developer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=I+IH
-----END PGP SIGNATURE-----

fsck of LVM snapshot - different behaviour in 12.04

Ryan Tandy — 2012-05-15T17:43:42

Hi list,

[I sent this a few days ago but it doesn't seem to have come through; 
apologies if you're reading it for a second time.]

I'd like to (ab)use LVM snapshots for a periodic online fsck in the 
background.  The essence of the script is something like this:

lvcreate -s -L $snapsize vg0/srv
e2fsck -p /dev/vg0/lvol0 # discard orphaned inodes
e2fsck -fy /dev/vg0/lvol0
lvremove -f vg0/lvol0

On Lucid, this seems to work well.  On Precise, I get some false 
positives almost every time I run it: wrong free blocks/inodes count, 
and/or bitmap differences.  The filesystem is actually OK; none of these 
minor inconsistencies show up during a boot-time fsck.

My understanding is that ext4 is wired up with LVM to do a sync and 
clean up these inconsistencies at the time a snapshot is made, and 
certainly on Lucid it seems OK.  Can anyone tell me if the behaviour has 
changed, or if I'm doing something wrong?

So far I've reproduced this on my workstation and laptop (one SATA drive 
each) and on one scratch server (Dell CERC RAID, five SATA drives).  All 
of this is on bare metal and local storage.

I searched around a bit but the only thread I found is [1] which doesn't 
seem relevant -- I can't reproduce his error.

[1] https://lkml.org/lkml/2012/1/5/76

KVM network configuration issue

2012-05-10T14:35:34

Hi all.
I have a KVM guest webserver VWEB which I want to give an external IP.  My 
host has 4 NICs, of which I use only one presently. 

Host:
auto eth0
iface eth0 inet manual
auto br0
iface br0 inet static
address 172.16.5.11
netmask 255.255.0.0
gateway 172.16.1.1
dns-nameservers 172.16.1.2
bridge-ports eth0

I would like to connect a cable between my host's eth3 and my company FW. 
(That specific port of the FW is now in use by my old physical web server 
and all is working fine for this old server).
VWEB should use eth3 on the host.  And inside VWEB, i want to assign the 
fixed external IP.

I cannot find the doc for this setup.  I tried the following:
Host: i added the following:
auto br1
iface br1 inet manual
bridge-ports eth3

-> i didn't want my host to have this external ip available, only VWEB 
running as guest, so on the host I didn't configure the external IP.  I 
expected the packets form VWEB to be just passed to the interface.  It 
didn't work.  I have some ideas about why it may not work, but I can't 
solve it.  Anyone knows how to do this?

Kind regards, 

Jürgen

cobbler how to set static ip address for ubuntu

Shake Chen — 2012-05-09T12:47:11

Hi

I have set up orchestra in ubuntu 12.04. use cobbler deploy OS

the Centos and ubuntu working well .

Now I need set the static IP address for the node.

In centos , I have success,

but for Ubuntu, it no working.

I read http://terrarum.net/administration/deploying-ubuntu-with-cobbler.html

can not working.

Ubuntu 12.04 / kvm / convirt can not be installed properly

Thorsten Göllner — 2012-05-08T07:53:06

lxc ubuntu-cloud template issue

Aljoša Mohorović — 2012-05-08T01:27:02

i'm getting:

No config file specified, using the default config
/usr/lib/lxc/templates/lxc-ubuntu-cloud: line 240: type:
ubuntu-cloudimg-query: not found
failed to execute template 'ubuntu-cloud'
aborted

when i use "-t ubuntu-cloud" but every doc i've read uses ubuntu-cloud
and doesn't mention my issue.
any ideas?

Aljosa Mohorovic

MaaS/Juju questions

Anders Bruun Olsen — 2012-05-07T13:14:07

Hi,

I am trying out MaaS and Juju for the first time and have run into a couple
of questions that I haven't been able to find answers to in the
documentation or by searching.

My setup is as follows: One server installed from scratch with the "create
maas server" option on the 12.04 server cdrom and two nodes that PXE boot
from the MaaS server.

1. I have the two nodes able to be started from the MaaS webinterface with
WoL. However, once they are booted I have been unable to find a way of
shutting them down or rebooting them except by physically walking up to
them and pressing the power button or ctrl-alt-delete. Is there no remote
way of doing this?

2. In continuance of Q1, I have added my SSH public key in the MaaS
webinterface, but I have been unable to login to any of the nodes over SSH.
Are there no accounts enabled on MaaS nodes? (this would enable remote
shutdown/reboot)

3. I have setup ~/.juju/environments.yaml according to the MaaS guide with
the OAuth key for my MaaS user. When I run 'juju bootstrap' it seems to
work, but 'juju status' only shows one machine. In the MaaS webinterface it
says that one of the nodes is allocated to my user, the other still says
'Ready'. How do I get both machines to be available for deployment of juju
charms?

4. If I later want to add more nodes, will I need to do a new bootstrap to
have them available to juju or is there a way to add them?

Ubuntu 12.04, KVM: STP and VLAN filtering from libvirt?

Andreas Ntaflos — 2012-05-04T00:33:16

Hi,

Reading the release notes for the server edition of 12.04, it says "STP
and VLAN filtering from libvirt" for the KVM/Libvirt changes.

What does this mean and where can I read more about it?

Thanks,

Andreas

UDS-Q Topic: Server Bug Triage Process

James Page — 2012-05-03T15:23:41

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi All

At UDS-Q we will be discussing the relatives merits and deficiencies
of the bug triage process that we have been using in the server team
for the last 12 months or so (see [0]) as well as decided on how to
approach the current backlog of bugs.

FYI people on the weekly triage rota normally use the triage report
[1] to identify bugs to work on for their allocated slots.

I'd be interested in hearing peoples opinions on the current process
in advance of UDS - specifically what you think works and what does
not and how you think things might be improved.

Regards

James


[0] https://wiki.ubuntu.com/ServerTeam/KnowledgeBase#triager
[1] http://status.qa.ubuntu.com/reports/ubuntu-server/triage-report.html
- -- 
James Page
Ubuntu Core Developer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=F+3T
-----END PGP SIGNATURE-----

upgraded to precise, doesn't seem to shutdown

Craig White — 2012-04-30T21:33:39

Upgraded one our lightly used test server from Lucid to Precise and it seems that I can't get it to restart without pulling the power.

via a remote ssh shell, I instructed it to restart ( shutdown now -r) and syslog shows...

Apr 30 14:02:16 nxpc kernel: [269718.509842] init: tty4 main process (1104) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.510137] init: tty5 main process (1116) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.510429] init: tty2 main process (1142) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.510709] init: tty3 main process (1144) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.510998] init: tty6 main process (1146) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.511804] init: cron main process (1155) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.515293] init: irqbalance main process (1183) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.516907] init: tty1 main process (1824) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.517229] init: idmapd main process (30166) killed by TERM signal
Apr 30 14:02:16 nxpc kernel: [269718.519946] init: plymouth-upstart-bridge main process (7277) terminated with status 1
Apr 30 14:02:16 nxpc kernel: [269718.630269] init: mongodb main process (1154) terminated with status 12
Apr 30 14:02:16 nxpc kernel: Kernel logging (proc) stopped.
Apr 30 14:02:16 nxpc rsyslogd: [origin software="rsyslogd" swVersion="5.8.6" x-pid="737" x-info="http://www.rsyslog.com"] exiting on signal 15.
Apr 30 14:15:29 nxpc kernel: imklog 5.8.6, log source = /proc/kmsg started.

Obviously the last entry is the restart after I pulled the plug and restarted.

Screen was blank before I pulled the plug. Seemed that most processed were stopped. Couldn't ping.

What can I do to troubleshoot the reboot problem?

OpenMPI for Q

Robie Basak — 2012-04-30T11:39:53

Dear List,

I have been asked whether we need to do anything for OpenMPI for Q. I
had a blueprint for P on this, for which I ended up delivering a 1.5
package in the archive.

Current status to the best of my knowledge is:

  * Upstream use an old Linux-style odd/even beta/stable version
    numbering scheme.

  * 1.4 is the current stable/production upstream release, is in Debian
    and Ubuntu and is the default.

  * 1.5 is the current upstream beta/testing release. Debian have it in
    experimental as replacing 1.4, but don't intend to upload it to sid
    until upstream declare it stable/production at which point it will be
    labelled 1.6. Ubuntu now has it as a separate package that can be
    used in parallel with 1.4 and built against by hand. But all
    packages in the Ubuntu archive that use OpenMPI are built against
    1.4 (and depend on the 1.4 package).

  * Both 1.4 and 1.5 have some level of ARM support. 1.4's ARM support
    is based on Jani's patches which we (Ubuntu) are carrying. 1.5's ARM
    support is based on Leif's patches which upstream are carrying.

  * I have had no feedback from stakeholders on the work done in P so
    far. All I know is that a basic "Hello, world!" works on amd64 and
    on armhf. If there are any bugs, please find them and file them!

I have also not had any feedback that suggests that we need to do
anything further on this. I expect that Debian will transition to 1.6
when it is released and Ubuntu will sync when this happens. I don't know
whether 1.6 will happen in time for Q or not - that depends on upstream.

If any OpenMPI stakeholder needs or would like anything different for
OpenMPI on Ubuntu, please let me know. We can hold a session at UDS on
this if required, but we won't create a blueprint if there is nothing to
discuss.

Thanks,

Robie

Mysql service does not restart after unattended upgrade on Hardy

Lorenzo Salvadorini — 2012-04-27T10:45:14

Hi all,
we are experiencing this issue on many of our hardy hosts with
unattended upgrades enabled.
After upgrade from 5.0.51 to version 5.0.95 or from 5.0.95 to 5.0.96
the upgrade fails and the mysql service does not restarts correctly.
With a manual restart the mysql service come up without any apparent
problem but the version is still the old one. The day after, we have
done the upgrade manually without any problem. We experienced this
problem on different platform and setup:
- on EC2 hosts and on physical hosts on common HP DL360 G6/G7 hardware.
- on mysql clustered with DRBD and standalone hosts

I'm trying to understand what could be causing this behaviour reading
changelog or unattended upgrade logs/mail but I've not found anything
until now, is this happened to someone else?


More info about our typical setup affected by the issue:

~# lsb_release -r
Release:        8.04

~# uname -a
Linux foo02 2.6.24-28-server #1 SMP Sat Oct 16 18:09:42 UTC 2010
x86_64 GNU/Linux

Aptitude log:
/var/log/aptitude.2.gz:[UPGRADE] mysql-server-5.0 5.0.51a-3ubuntu5.8
-> 5.0.95-0ubuntu1

unattended-upgrades version 0.30ubuntu1

Mail example from unattended-upgrade on a server that failed the upgrade:
----------------------------------------------------------------------
Unattended upgrade returned: True

Preconfiguring packages ...
(Reading database ... 33848 files and directories currently installed.)
Preparing to replace libssl-dev 0.9.8g-4ubuntu3.17 (using
.../libssl-dev_0.9.8g-4ubuntu3.18_amd64.deb) ...
Unpacking replacement libssl-dev ...
Preparing to replace libssl0.9.8 0.9.8g-4ubuntu3.17 (using
.../libssl0.9.8_0.9.8g-4ubuntu3.18_amd64.deb) ...
Unpacking replacement libssl0.9.8 ...
Preparing to replace mysql-client 5.0.95-0ubuntu1 (using
.../mysql-client_5.0.96-0ubuntu1_all.deb) ...
Unpacking replacement mysql-client ...
Preparing to replace mysql-server 5.0.95-0ubuntu1 (using
.../mysql-server_5.0.96-0ubuntu1_all.deb) ...
 * Stopping MySQL database server mysqld
  ...done.
Unpacking replacement mysql-server ...
Preparing to replace openssl 0.9.8g-4ubuntu3.17 (using
.../openssl_0.9.8g-4ubuntu3.18_amd64.deb) ...
Unpacking replacement openssl ...
Setting up libssl0.9.8 (0.9.8g-4ubuntu3.18) ...

Setting up libssl-dev (0.9.8g-4ubuntu3.18) ...
Setting up mysql-client (5.0.96-0ubuntu1) ...
Setting up mysql-server (5.0.96-0ubuntu1) ...
Setting up openssl (0.9.8g-4ubuntu3.18) ...

Processing triggers for libc6 ...
ldconfig deferred processing now taking place

----------------------------------------------------------------------

Thanks for any help,
Lorenzo Salvadorini.

Setgid not preserved in GFS2 with ACL

Nicolas Ecarnot — 2012-04-25T12:35:49

[Sorry for cross-posting, but I sincerely don't know who's best to answer]

Hi,

Using many production Samba file servers on RHEL 5.6 for a while, we are 
now finishing to setup a samba cluster on Ubuntu-server (oneiric) with 
cman+clvm+GFS2+ctdb.

Like on our other samba setups, we are using ACLs and we set up the 
setgid bit on our folders (chmod g+s folder), as well as default ACL.
The access rights are managed via the basic windows explorer security 
tab and is working nicely.

But on this new GFS2, I observe that this is not working the same.

To make it short, the setgid bit gets lost when a user creates a subdir.

To be precise, here is what I'm observing :

My folder looks like this :

root< at >server:/foo/bar# getfacl .
# file: .
# owner: root
# group: adminsGroup
# flags: ss-
user::rwx
group::rwx
group:domainUsers:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:domainUsers:rwx
default:mask::rwx
default:other::---

* When the user root runs 'mkdir rootDir', this directory correctly gets 
the adequate rights, and it gets the setgid bit (allowing deeper 
inheritance to keep working).

* When a non-root user belonging to the adminsGroup group runs 'mkdir 
privDir', the directory also gain the same feature as above.

* When a basic non-root user belonging to the domainUsers group runs 
'mkdir basicDir', it gets created (the ACL allows it) but the setgid bit 
is *NOT* preserved.



My tests are showing that with ext3 and ext4, on the same server (and/or 
on other systems), this behavior is different, and that the sgid bit is 
preserved.

I have added the suiddir flag when mounting the GFS2 partition, but this 
does not improve anything.


May someone tell me :
- if this new behavior is faulty or expected?
- if these mailing-lists are the best place to ask such questions? 
(ubuntu-server< at >lists.ubuntu.com + cluster-devel< at >redhat.com), and if 
needed advice me a better place
- if this is unexpected, if I should file a bug? (and where)

Thank you.