00:10 | Ryan52 has joined #ltsp | |
00:19 | nubae has quit IRC | |
00:20 | nubae has joined #ltsp | |
00:20 | asmok has joined #ltsp | |
00:23 | <asmok> stgraber: This is for you! I hope you like it ;-P Translated from blog.ubuntu-fi.org (http://blog.ubuntu-fi.org/2010/tahan-ei-elain-pysty/) by friend of mine Anu Salminen - Comédie en trois actes: http://www.arkki.info/?p=151
| |
00:25 | alkisg: Sorry, not in greek this time ;-P or in english...
| |
00:36 | asmok has left #ltsp | |
00:40 | vmlintu has quit IRC | |
01:01 | asmok has joined #ltsp | |
01:01 | asmok has left #ltsp | |
01:50 | gnunux has joined #ltsp | |
01:50 | <gnunux> hi
| |
02:01 | alkisg has joined #ltsp | |
02:04 | vbundi has quit IRC | |
02:08 | vbundi has joined #ltsp | |
02:11 | vagrantc has quit IRC | |
02:13 | alkisg has quit IRC | |
02:46 | vbundi has quit IRC | |
02:59 | vbundi has joined #ltsp | |
03:04 | ogra has quit IRC | |
03:22 | highvoltage has joined #ltsp | |
03:30 | bobby_C has joined #ltsp | |
04:21 | ogra has joined #ltsp | |
04:26 | Selveste1 has quit IRC | |
04:36 | mikkel has joined #ltsp | |
04:39 | Faithful has quit IRC | |
04:46 | pmatulis has joined #ltsp | |
04:50 | pmatulis has quit IRC | |
05:12 | nubae_ has joined #ltsp | |
05:13 | nubae has quit IRC | |
05:29 | F-GT has quit IRC | |
05:30 | F-GT has joined #ltsp | |
06:01 | hersonls has joined #ltsp | |
06:06 | johnny has left #ltsp | |
06:12 | johnny has joined #ltsp | |
06:22 | Egyptian[Home] has quit IRC | |
06:32 | Selveste1 has joined #ltsp | |
06:38 | pmatulis has joined #ltsp | |
06:52 | scottmaccal has joined #ltsp | |
06:59 | bobby_C has quit IRC | |
07:05 | shamino has quit IRC | |
07:34 | feltrin has joined #ltsp | |
07:42 | slidesinger has joined #ltsp | |
07:42 | ogra has quit IRC | |
07:43 | ogra has joined #ltsp | |
08:05 | Gadi has joined #ltsp | |
08:12 | Egyptian[Home] has joined #ltsp | |
08:18 | ltspbot` has joined #ltsp | |
08:18 | sbalneav has quit IRC | |
08:18 | ltspbot has quit IRC | |
08:25 | alkisg has joined #ltsp | |
08:28 | highvolt1ge has joined #ltsp | |
08:31 | alkisg has quit IRC | |
08:31 | alkisg has joined #ltsp | |
08:31 | feltrin_ has joined #ltsp | |
08:32 | F-GT has quit IRC | |
08:32 | F-GT has joined #ltsp | |
08:32 | feltrin has quit IRC | |
08:32 | highvoltage has quit IRC | |
08:32 | rjune has quit IRC | |
08:32 | _UsUrPeR_ has quit IRC | |
08:32 | feltrin_ is now known as feltrin | |
08:38 | hersonls has quit IRC | |
08:39 | rjune has joined #ltsp | |
08:40 | _UsUrPeR_ has joined #ltsp | |
08:46 | Selveste1_ has joined #ltsp | |
08:47 | Selveste1 has quit IRC | |
09:01 | jcastro has joined #ltsp | |
09:03 | jcastro has quit IRC | |
09:03 | jcastro has joined #ltsp | |
09:05 | johnny has left #ltsp | |
09:06 | vmlintu has joined #ltsp | |
09:06 | johnny has joined #ltsp | |
09:09 | Selveste1_ has quit IRC | |
09:12 | epaphus has joined #ltsp | |
09:13 | F-GT has quit IRC | |
09:21 | <vbundi> after rebuilding my chroot, my terminals are no longer receiving any lts.conf settings
| |
09:24 | F-GT has joined #ltsp | |
09:26 | brettbjorgaardu has joined #ltsp | |
09:26 | cliebow has joined #ltsp | |
09:29 | alkisg has quit IRC | |
09:30 | bobby_C has joined #ltsp | |
10:14 | staffencasa has joined #ltsp | |
10:18 | <cliebow> somene drop a pin?
| |
10:24 | thunsucker has joined #ltsp | |
10:27 | <Gadi> hmm... seems we dropped "auto" as a special value for XSERVER
| |
10:28 | must have been when we rewrote the xconfiguration stuff....
| |
10:32 | johnny has left #ltsp | |
10:39 | johnny has joined #ltsp | |
10:41 | alkisg has joined #ltsp | |
10:41 | gnunux has quit IRC | |
10:45 | alkisg has quit IRC | |
10:47 | alkisg has joined #ltsp | |
10:49 | alkisg has quit IRC | |
10:59 | mischko has joined #ltsp | |
11:02 | johnny has left #ltsp | |
11:03 | johnny has joined #ltsp | |
11:11 | komunista has joined #ltsp | |
11:17 | atkuepker has joined #ltsp | |
11:18 | alkisg has joined #ltsp | |
11:18 | alkisg has joined #ltsp | |
11:19 | leio has quit IRC | |
11:19 | johnny has left #ltsp | |
11:21 | johnny has joined #ltsp | |
11:33 | alkisg has quit IRC | |
11:35 | mikeshultz has joined #ltsp | |
11:42 | gmir has joined #ltsp | |
11:45 | gmir has quit IRC | |
11:47 | johnny has left #ltsp | |
11:48 | johnny has joined #ltsp | |
11:58 | gmir has joined #ltsp | |
12:02 | Barbosa has joined #ltsp | |
12:02 | scottmaccal has quit IRC | |
12:03 | <vbundi> in.tftpd[2032]: RRQ from 192.168.1.20 filename /ltsp/amd64//lts.conf
| |
12:03 | something is screwed up somewhere.. I'm getting an extra / added to the path of my lts.conf... so I can't get any lts.conf settings
| |
12:05 | <Gadi> vbundi: I think alkisg fixed something to that effect upstream the other day
| |
12:06 | look in /opt/ltsp/amd64/usr/share/initramfs-tools/scripts/ltsp_nbd
| |
12:06 | find the "tftp" lines in there
| |
12:07 | <vbundi> echo "get ${tftppath:-/ltsp/i386}/lts.conf"
| |
12:08 | this line above ittftppath="$(echo "$filename" | sed -n 's,\"*\(.*/\)[^/]*,\1,p')"
| |
12:12 | <Gadi> well, the above line says it is stripping out /path/to/file/
| |
12:12 | er
| |
12:12 | I mean it is stripping out everything after /path/to/file/
| |
12:12 | <vbundi> that's what the 'sed' does
| |
12:13 | ?
| |
12:13 | <Gadi> yeah
| |
12:14 | sed is finding all characters from the beginning of the line up to the last "/" and keeping those
| |
12:14 | the rest it throws away
| |
12:14 | <vbundi> ah
| |
12:14 | <Gadi> so, you wind up with /path/to/file/ + /lts.conf
| |
12:14 | which is no good
| |
12:15 | nubae_ has quit IRC | |
12:15 | <Gadi> let me see if I can find alkisg's fix
| |
12:16 | <vbundi> yeah I messed with it, but nothing changed
| |
12:16 | <Gadi> well, you would need to update the initramfs
| |
12:16 | and then update kernels
| |
12:16 | <vbundi> how do you update initramfs?
| |
12:17 | <Gadi> echo "get ${tftppath:-/ltsp/i386/}lts.conf" | /bin/tftp ${NBD_ROOT_SERVER} >
| |
12:17 | /dev/null 2>&1
| |
12:17 | <vbundi> I see there's a program called update-initramfs but
| |
12:17 | <Gadi> that's the current one
| |
12:17 | ie: take off the "/" in front of lts.conf
| |
12:17 | to update the initramfs, do:
| |
12:18 | sudo chroot /opt/ltsp/amd64 update-initramfs -u
| |
12:18 | then:
| |
12:18 | sudo ltsp-update-kernels
| |
12:18 | <vbundi> k
| |
12:18 | ltsp/i386}/lts.conf ahhh the slash is outside of the {}
| |
12:20 | theprof has joined #ltsp | |
12:21 | <theprof> Hello. I hope everyone is doing well. This question isn't directly an LTSP question, but a Linux one. I have been pulling out my hair for an hour for something that i am SURE if simple but I can't do it! I'm setting up rsync to backup the server, and I can't get the permissions correct.
| |
12:22 | I'm trying to back up /home for example. There is a user "backupuser" in the group "backupgroup"
| |
12:22 | I know that I need to make the directory /home executable for the group in order for him to CD into it
| |
12:22 | but everytime I do chmod g+rwx it also makes the files executable
| |
12:23 | Is there a way to just make the directories executable but not modify all the files?
| |
12:23 | My apologies if this is a very dumb question but I know people here are great.
| |
12:24 | <thunsucker> theprof: whats wrong with just making them 777?
| |
12:24 | lol
| |
12:24 | j/k
| |
12:25 | <theprof> thunsucker, IF ONLY :)
| |
12:26 | <thunsucker> just a second i'll help
| |
12:26 | working on an audio issue at the moment
| |
12:26 | <vbundi> I just made a directory, made a file inside it that was not executable... and chmod +x on the parent directory and the permissions stayed the same on the file
| |
12:27 | <thunsucker> theprof: whats the exact command you're using to change the permissions?
| |
12:28 | <theprof> chmod -c -R g+rwx /home
| |
12:29 | because in /home there are other subdirectories
| |
12:29 | so I need to be able to Cd into those directories but not change the files within them in order to read to back them up
| |
12:33 | <Gadi> theprof: find /home -type d | xargs chmod g+rwx
| |
12:33 | that oughtta do it
| |
12:34 | <theprof> Gadi, I'll try that right now
| |
12:34 | <thunsucker> theprof: -R does it for everything below all files and folders if I remember correctly
| |
12:34 | gmir has quit IRC | |
12:34 | <Gadi> dont use -R in the line I gave you
| |
12:35 | <thunsucker> theprof: from the man page, "change files and directories recursively"
| |
12:35 | <Gadi> find will find all directories under /home
| |
12:35 | recursively
| |
12:35 | <theprof> Gadi, right, you're using find to go recursively
| |
12:35 | <vbundi> Gadi: RRQ from 192.168.1.21 filename /ltsp/amd64/lts.conf ok that looks good... but I'm still not getting any lts.conf... wth
| |
12:35 | <theprof> ah - you just typed that :)
| |
12:35 | thunsucker, I thought it was somehow magically going to only do directories :)
| |
12:35 | <thunsucker> theprof: lol
| |
12:37 | <Gadi> theprof: btw, if it is backup, then the group really only needs read perms not write perms
| |
12:38 | you can remove the write perms with: find /home -type d | xargs chmod g-w
| |
12:38 | <theprof> Gadi, makes sense I will do so now
| |
12:38 | nubae has joined #ltsp | |
12:42 | <theprof> Hmm..it almost worked perfectly. rsync spit out an error when trying to change into a directory readlink "/john failed:permission denied
| |
12:43 | ls -al shows drwxr-x--- john
| |
12:44 | sorry, ls -al shows drwxr-x--- john backupgroup 4096 2010-04-01 16:35 john
| |
12:53 | <Gadi> theprof: perhaps your rsync syntax is off?
| |
12:54 | <theprof> Gadi, could be. I'm using this as a guide (from a howto online) rsync -avz -e ssh someuser@server1.example.com:/var/www/ /var/www/
| |
12:55 | <Gadi> someuser = backupuser?
| |
12:55 | mischko has quit IRC | |
12:56 | <Gadi> and backupuser is a member of backupgroup?
| |
12:56 | <theprof> yes sorry I pasted it from the website.
| |
12:56 | yes to both users
| |
12:56 | cat /etc/group shows the user as part of the group
| |
12:56 | <Gadi> can you paste the exact rsync line?
| |
12:57 | (you can obscure the ip/hostname if you like)
| |
12:59 | vagrantc has joined #ltsp | |
13:00 | <theprof> OK
| |
13:01 | rsync -avz -e ssh backupuser@192.168.33.247:/var/vmail/ /home/theprof/rsync_test/
| |
13:01 | internal ip so not a problem :)
| |
13:01 | I am running it as root on 192.168.33.248 and it connects no problem and copies over the files within /vmail
| |
13:01 | but not within the subdirectories
| |
13:03 | <Gadi> that doesnt look like /home ')
| |
13:03 | ;)
| |
13:04 | <vbundi> theprof: you may have luck if you add -r to your rsync command :)
| |
13:04 | <Gadi> ah, and you are using "-a" for rsync, which means that on the local side, the user that you are running rsync as has to have permissions to change ownership locally
| |
13:04 | <vbundi> ie, rsync -ravs
| |
13:04 | <vagrantc> "-a" includes "-r", no?
| |
13:04 | or is it "-R" ?
| |
13:05 | <vbundi> oh I think you're right
| |
13:05 | -a is archive
| |
13:05 | ?
| |
13:05 | <vagrantc> -a, --archive archive mode; equals -rlptgoD (no -H,-A,-X)
| |
13:05 | <Gadi> I think your problem would be resolved with: sudo rsync -avz -e ssh backupuser@192.168.33.247:/var/vmail/ /home/theprof/rsync_test/
| |
13:05 | <vbundi> ah
| |
13:06 | <theprof> Gadi, I was basing the command on the http://www.howtoforge.com/mirroring_with_rsync tutorial.
| |
13:06 | I will try your command now
| |
13:08 | Just tried it. Same exact error as before.
| |
13:08 | If I was to change the /var/vmail permissions to 777 to test it would that tell us information that may be helpful?
| |
13:09 | mikkel has quit IRC | |
13:09 | Selveste1_ has joined #ltsp | |
13:10 | <theprof> IE is it the rsync command or the permissions on the source machine?
| |
13:13 | <Gadi> can you paste the error again?
| |
13:17 | <theprof> sure
| |
13:18 | ltspbot`, pastebin?
| |
13:18 | <ltspbot`> theprof: Error: "pastebin?" is not a valid command.
| |
13:18 | <theprof> ltspbot`, pastebin
| |
13:18 | <ltspbot`> theprof: "pastebin" :: try !pastebot
| |
13:18 | <theprof> Yeah I have no idea how to use this bot :)
| |
13:19 | <Gadi> !pastebot
| |
13:19 | <ltspbot`> Gadi: "pastebot" :: The LTSP pastebot is at http://ltsp.pastebin.com. Please paste all text longer than a line or two to the pastebot, as it helps to reduce traffic in the channel. Don't forget to paste the URL of the text here.
| |
13:19 | <theprof> hey look at that :)
| |
13:20 | http://ltsp.pastebin.com/LEJaRqYz
| |
13:23 | <Gadi> theprof: ah, those are all files
| |
13:23 | <thunsucker> i've had a setup where the clients loose sound after 10min or so
| |
13:23 | <Gadi> on the remote side
| |
13:23 | <thunsucker> ub 9.10, but has been out of date for a long long time
| |
13:24 | so I updated the server and chroot today, and now it's more like 1 out of 25 loose sound
| |
13:24 | <Gadi> theprof: your user does not have perms to read those files
| |
13:24 | <thunsucker> it doesn't get choppy or anything like that, it just completely stops
| |
13:26 | <theprof> Gadi, ok let me check the source side permissions
| |
13:26 | <Gadi> thunsucker: on the machines where it dies, run: ltsp-localapps xterm , and from the xterm, run ps aux|grep pulse to see if pulseaudio is still running
| |
13:26 | theprof: for homedirs, you will want to backup using root (or a user who can sudo)
| |
13:27 | theprof: you don't want to be mucking with everyone's file perms
| |
13:28 | the howto you used is good for web servers, where the files can have uniform perms
| |
13:28 | <theprof> Gadi, I see. So the idea in the howto of creating a backup user and then adding that user to the group that has permission to those directories won't work?
| |
13:28 | <thunsucker> Gadi: just to be proactive, if it has whats my next step?
| |
13:28 | <theprof> Gadi, you just answered it :)
| |
13:35 | <thunsucker> gadi: the problem i have now is that it's completely random and i've been unable to duplicate it in my test lab
| |
13:42 | Gadi: woo one just died omw to test
| |
13:50 | gadi: no pulse
| |
13:50 | <Gadi> so, pulse is dying on you
| |
13:51 | <thunsucker> good chance
| |
13:51 | i'm using the rdesktop script
| |
13:51 | so i jumped to the shell screen
| |
13:51 | i tried the ltsp-localapps xterm but that failed
| |
13:51 | <Gadi> rdesktop screen script?
| |
13:51 | <thunsucker> so i just did ps aux|grep pulse
| |
13:51 | yes the screen script
| |
13:51 | <Gadi> ah, thats ok then
| |
13:51 | better even
| |
13:51 | :)
| |
13:51 | <thunsucker> :)
| |
13:51 | thats good then
| |
13:52 | <Gadi> rdesktop prefers not going through pulse more often than not
| |
13:52 | are you near that machine?
| |
13:52 | <thunsucker> Gadi: no and that room just got locked, that teacher is going home for the day
| |
13:53 | <Gadi> ah
| |
13:53 | <thunsucker> but i have a station here to try stuff
| |
13:53 | i could "kill pulse" lol
| |
13:53 | <Gadi> so, it is windows sound that is dying?
| |
13:53 | <thunsucker> Gadi: yes
| |
13:53 | <Gadi> and you are using: -r sound:local
| |
13:54 | <thunsucker> Gadi: yes i believe -r sound:local:oss to be exact
| |
13:54 | let me double check
| |
13:54 | <Gadi> ah, oss?
| |
13:54 | <thunsucker> originally it was alsa
| |
13:54 | but it was doing the same thing
| |
13:54 | so we switched to oss
| |
13:54 | to try it out
| |
13:54 | <Gadi> do you run rdesktop through padsp?
| |
13:54 | or is this the normal undoctored script?
| |
13:54 | <thunsucker> it's doctored
| |
13:55 | <Gadi> ah
| |
13:55 | <thunsucker> well meaning that i customized it
| |
13:55 | <Gadi> can you paste your rdesktop script?
| |
13:55 | <thunsucker> it randomly selects a server
| |
13:55 | sure
| |
13:55 | !pastebot
| |
13:55 | <ltspbot`> thunsucker: "pastebot" :: The LTSP pastebot is at http://ltsp.pastebin.com. Please paste all text longer than a line or two to the pastebot, as it helps to reduce traffic in the channel. Don't forget to paste the URL of the text here.
| |
13:56 | <thunsucker> http://ltsp.pastebin.com/Tthr1w2y
| |
13:58 | <Gadi> cute
| |
13:58 | <thunsucker> l,ol
| |
13:58 | <Gadi> well, using alsa is better than oss
| |
13:58 | <thunsucker> ok i can swithc it back
| |
13:58 | maybe that will be enough
| |
13:58 | <Gadi> (unless you need to run through padsp)
| |
13:58 | <thunsucker> i have no idea what that is
| |
13:58 | upgrading it helped a ton
| |
13:58 | <Gadi> ah, so let me 'splain
| |
13:58 | :)
| |
13:58 | <thunsucker> so maybe oss is the last broken part
| |
13:59 | Ryan52 has quit IRC | |
13:59 | <Gadi> oss = the old sound architecture that *nix systems used
| |
13:59 | it is mainly kernel level drivers
| |
14:00 | when the Linux kernel moved to 2.6, it adopted ALSA as a replacement
| |
14:00 | alsa worked a lot better in many ways, but was Linux specific
| |
14:00 | <thunsucker> gotcha
| |
14:00 | definitely want to use alsa then
| |
14:00 | <Gadi> alsa maintained backwards compatibility through an oss emulation driver
| |
14:01 | Ryan52 has joined #ltsp | |
14:01 | <Gadi> so that oss still works (when that driver is loaded)
| |
14:02 | <thunsucker> Gadi: again ty for the info
| |
14:02 | i've swapped it to ala
| |
14:02 | *alsa
| |
14:02 | <Gadi> the only time you would use it in the context of rdesktop is to run: padsp rdesktop -r sound:local:oss ...
| |
14:02 | <thunsucker> maybe that will squasah it
| |
14:02 | ahh ok
| |
14:02 | <Gadi> where padsp is a pulseaudio application that emulates an oss driver to the application and feed s the sound to pulseaudio
| |
14:04 | <thunsucker> i can't wait until lucid is officially resleased
| |
14:05 | I'm going to be running thick clients this summer
| |
14:05 | most of my clients have 512mb of ram and fast cpu's
| |
14:07 | Gadi: is there a way I can ssh and vnc into each ltsp client?
| |
14:08 | <Gadi> thunsucker: as in italc?
| |
14:08 | <thunsucker> Gadi: maybe thats it, i'll read up on it
| |
14:09 | <vbundi> Gadi: any suggestions on what to do next... I can see in my daemon.log that TFTP is pointing to the right file now in.tftpd[12843]: RRQ from 192.168.1.23 filename /ltsp/amd64/lts.conf
| |
14:10 | <Gadi> vbundi: it isnt getting the file?
| |
14:11 | did you try dropping into initramfs and tftp'ing manually?
| |
14:11 | <vagrantc> wow. 64-bit clients.
| |
14:12 | more-powerful-than-the-server clients
| |
14:12 | <vbundi> Gada: a-la break=init ?
| |
14:12 | gmir has joined #ltsp | |
14:12 | <Gadi> vbundi: try break=bottom
| |
14:13 | <vbundi> vagrantc: I will most likely switch to x86 when it goes live... just testing stuff
| |
14:13 | <Gadi> (that way ur all mounted and junk) ;)
| |
14:14 | <vbundi> vagrantc: also... my previous terminals which were 800mhz VIA w/256MB ram were no good for LTSP5 so I figured I'd get good enoough clients so I'll be good for when 6 comes out ;)
| |
14:15 | Lns has joined #ltsp | |
14:15 | <vbundi> Gadi: ok so @ the initramfs prompt I can see that lts.conf is in /
| |
14:16 | dunno if that's right, I thought it would be in /etc
| |
14:16 | <vagrantc> vbundi: heh. a shame to hear that 800MHz 256MB ram isn't enough...
| |
14:17 | <Lns> wha..?
| |
14:17 | <Gadi> vbundi: you should see it in /root/etc/lts.conf
| |
14:17 | cliebow has quit IRC | |
14:17 | <Gadi> (as well)
| |
14:17 | <vbundi> vagrantc: yeah they were not a mainstream chip (ie intel), I think we settled on the fact that it was a kernel issue more than an LTSP issue
| |
14:17 | <Gadi> vbundi: so, it appears it tftp'd fine
| |
14:18 | you could even: diff lts.conf /root/etc/lts.conf
| |
14:18 | and see if they are the same
| |
14:18 | <vagrantc> at freegeek we've got a few 400MHz with 256MB-370ish, a few 800-1GHz with 256-512MB ... though i think people feel that they are too slow. though it's just as likely the server is underpowered as the thin-clients
| |
14:19 | gmir has quit IRC | |
14:20 | <vagrantc> for the most part, people are using icewm or lxde... but there are a few gnome or kde users, too.
| |
14:21 | <atkuepker> we're upgrading to Dell GX260 terminals with 512MB on Ubuntu 9.10 w/ Gnome. The Dell GX1 systems were too laggy according to the users.
| |
14:22 | ATI AGP video cards on those, though. The onboard Intel ones have been quite crashy regardless of what settings we use.
| |
14:24 | <thunsucker> gadi: italc can't find any clients
| |
14:25 | who's the italc master?
| |
14:25 | sbalneav?
| |
14:25 | <Lns> thunsucker: i believe stgraber does some maintenance on italc
| |
14:26 | <thunsucker> ahh cool
| |
14:26 | lns: ty
| |
14:26 | stgraber: ping
| |
14:30 | does anyone know if italc works with the rdesktop screen script?
| |
14:31 | <Lns> thunsucker: i would assume *some* functionality would work, at least starting/shutting down, etc.
| |
14:31 | not sure about anything else, dont' really use it much myself
| |
14:32 | <thunsucker> lns: thats what I was thinking
| |
14:38 | shamino has joined #ltsp | |
14:39 | Lns has quit IRC | |
14:41 | <thunsucker> gadi: i just rebooted the client next to me
| |
14:42 | did the ps aux|grep pulse
| |
14:42 | it's not running and the sound is working
| |
14:43 | my lts.conf has SOUND=False for default
| |
14:45 | <atkuepker> is lts.conf readable? Happens to me sometimes when I edit as root and leave it set to 0400
| |
14:46 | <thunsucker> atkuepker: yes -rw-r--r--
| |
14:46 | <Gadi> thunsucker: excellent
| |
14:47 | <thunsucker> Gadi: but the problem is still popping up
| |
14:47 | <Gadi> I thought you said sound is working?
| |
14:47 | <theprof> Gadi, I solved it :) The issue was the find command that changed the directory's permissions wasn't drilling down into the sub directories.
| |
14:47 | when I typed that same command at each level of the tree, it then worked
| |
14:47 | <thunsucker> Gadi: sound is working but i'm still getting reports of it randomly dying
| |
14:48 | <Gadi> thunsucker: between when they locked the doors to the classroom and now?
| |
14:48 | * Gadi is confused | |
14:49 | <thunsucker> gadi: ok since i changed it back to alsa
| |
14:49 | and had everyone restart their clients
| |
14:49 | i had a teacher call and report that a client lost audio again
| |
14:49 | <Gadi> meaning it has been ok since you changed back to alsa (and rebooted the clients)
| |
14:50 | <thunsucker> Gadi: yes so far after cahnging to alsa no one reported until about 3 minutes ago
| |
14:50 | and it's just 1
| |
14:50 | <Gadi> ah
| |
14:50 | ok
| |
14:50 | <thunsucker> but school is about to be out here too
| |
14:50 | so not 100% sure how many are being used
| |
14:50 | <Gadi> and you are sure that person rebooted?
| |
14:50 | gentgeen__ has quit IRC | |
14:50 | <thunsucker> Gadi: yes, she's good looking I rebooted hers myself :)
| |
14:51 | <Gadi> ah
| |
14:51 | nubae has joined #ltsp | |
14:51 | <Gadi> touche (not to be dirty)
| |
14:51 | <thunsucker> gadi: lol
| |
14:51 | <Gadi> but it works for a while and then cuts out?
| |
14:52 | <thunsucker> Gadi: yes
| |
14:52 | <Gadi> are all these clients the same hardware?
| |
14:52 | feltrin has quit IRC | |
14:52 | <thunsucker> Gadi: no, they are mostly however dell optiplex sx280's, and gateway profile 5's
| |
14:53 | <Gadi> are all the ones with sound problems the same hardware?
| |
14:53 | <thunsucker> Gadi: in the last week have had 4 different models loose sound
| |
14:53 | today afer updating my chroot/server, 2 different models (only 4 reports)
| |
14:53 | and of course now only 1 report since alsa
| |
14:53 | <vbundi> Gadi: you mentioned doing a diff on lts.conf and /root/etc/lts.conf, how would I do that.. I have no diff in this initramfs
| |
14:54 | <Gadi> vbundi: ah, sorry - I thought there was diff
| |
14:54 | vbundi: you may have to simply cat the file and inspect it manually
| |
14:54 | or compare the line count
| |
14:55 | cat /root/etc/lts.conf|wc -l
| |
14:55 | cat lts.conf|wc -l
| |
14:55 | <vbundi> ok yeah I tried that... the /root/etc/lts.conf is the one that says ' THIS FILE SHOULD NO LONGER BE USED FROM HERE '
| |
14:55 | <Gadi> thunsucker: very strange - I have not heard of such an issue before - especially with rdesktop
| |
14:55 | <vbundi> and /lts.conf is empty
| |
14:56 | <Gadi> aha!
| |
14:56 | <vbundi> ho ho?
| |
14:56 | <Gadi> so, it is not tftp'd after all
| |
14:56 | <vbundi> aha!
| |
14:56 | <Gadi> it's been a ruse
| |
14:56 | ok
| |
14:56 | so, try tftp'ing manually from the initramfs
| |
14:56 | <vbundi> ahh so the curtain of deceit has been lifted.... *stares down his server*
| |
14:57 | <Gadi> btw
| |
14:57 | <vbundi> yeah, I have no Idea how to do that
| |
14:57 | <Gadi> just out of curiosity
| |
14:57 | pmatulis has quit IRC | |
14:57 | <Gadi> you are putting the lts.conf in the amd64 directory, right?
| |
14:57 | (on the server)
| |
14:57 | <vbundi> /var/lib/tftpboot/ltsp/amd64/lts.conf
| |
14:57 | <Gadi> ah, ok good
| |
14:58 | so, in initramfs, try:
| |
14:58 | <thunsucker> gadi: ty for the help it's friday, i'm going to go home and drink
| |
14:58 | lol
| |
14:58 | <Gadi> thunsucker: drink one for me!
| |
14:58 | <vbundi> I intend on making it a case
| |
14:58 | <Gadi> vbundi: echo "get /ltsp/amd64/lts.conf"|tftp ${NBD_ROOT_SERVER}
| |
14:58 | that's ur chroot command
| |
14:58 | I mean
| |
14:59 | ur initramfs command
| |
14:59 | <thunsucker> Gadi: will do
| |
14:59 | thunsucker has left #ltsp | |
14:59 | <vbundi> (to) Error: Name or service not known
| |
14:59 | get: unknown host
| |
15:00 | <Gadi> ok, replace the variable with the ip of the ltsp server
| |
15:00 | <vbundi> file not found
| |
15:00 | leio has joined #ltsp | |
15:01 | <Gadi> vbundi: evidently it isn't where you think it is
| |
15:01 | :)
| |
15:01 | <vbundi> Gadi: I'm using a symbolic link for my amd64/lts/conf that points to i386/lts.conf
| |
15:01 | <Gadi> ah, maybe that's it
| |
15:01 | <vbundi> and it worked fine up until the other day so I don't think it's that
| |
15:01 | <Gadi> ah, ok
| |
15:01 | <vbundi> unless they changed something that makes symlinks not work
| |
15:02 | <Gadi> "they" tend to be sinister that way
| |
15:02 | are you using tftpd-hpa?
| |
15:02 | <vbundi> the default
| |
15:02 | <Gadi> let's check just to see if "they" didn't replace it on you
| |
15:02 | "they" can do things like that
| |
15:03 | * Gadi shakes a fist at the they | |
15:03 | leio has quit IRC | |
15:03 | leio has joined #ltsp | |
15:03 | <vbundi> haha
| |
15:03 | <Gadi> dpkg -l|grep tftp
| |
15:03 | (on the server, mind you)
| |
15:03 | <vbundi> dpkg -l|grep tftp
| |
15:03 | lol wrong window
| |
15:03 | yeah tftpd-hpa
| |
15:03 | <Gadi> well, that's good
| |
15:03 | ok, back to initramfs
| |
15:04 | try the same command, but use "i386" instead of "amd64"
| |
15:04 | <vbundi> no error
| |
15:04 | <Gadi> aha!
| |
15:04 | <vbundi> and /lts.conf has data now
| |
15:04 | <Gadi> symlinks do matter to some
| |
15:04 | <vbundi> 'THEY'!
| |
15:04 | * Gadi shakes fist again! | |
15:04 | <Gadi> oh
| |
15:05 | how did you make the symlink?
| |
15:05 | <vbundi> I'm sure it was the same person that put that extra / in there ;)
| |
15:05 | ln -s
| |
15:05 | <Gadi> I hope you did: ln -s ../i386/lts.conf lts.conf
| |
15:05 | ie a *relative* symlink
| |
15:06 | because if you did: ln -s /var/lib/tftpboot/ltsp/i386/lts.conf lts.conf
| |
15:06 | <vbundi> no I did modprobe hopesndreams
| |
15:06 | then just ln -s ;P
| |
15:06 | root root 36 2010-04-08 09:31 lts.conf -> /var/lib/tftpboot/ltsp/i386/lts.conf
| |
15:06 | <Gadi> tie an *absolute* symlink, then its no wonder it cannot find it
| |
15:06 | evilx has quit IRC | |
15:06 | <Gadi> gack!
| |
15:06 | you cant do that, man
| |
15:07 | tftp's root is /var/lib/tftpboot
| |
15:07 | so, it sees it as: /ltsp/i385/lts.conf
| |
15:07 | er, i386
| |
15:07 | <vbundi> the file /var/lib/tftpboot
| |
15:07 | err
| |
15:08 | the file /var/lib/tftpboot/ltsp/amd64/lts.conf points to /var/lib/tftpboot/ltsp/i386/lts.conf
| |
15:08 | <Gadi> yeah, that's bad
| |
15:08 | <vbundi> oh well I guess I know whos side you're on then.
| |
15:08 | <Gadi> because all tftp wants to grab /ltsp/i386/lts.conf
| |
15:08 | it cannot see /var/lib/tftp....
| |
15:08 | <vbundi> ok
| |
15:09 | oh
| |
15:09 | <Gadi> doesn't know where that is
| |
15:09 | <vbundi> I gotcha
| |
15:09 | <Gadi> tftp is in jail
| |
15:09 | no windowsw
| |
15:09 | no clue about the outside world
| |
15:09 | <vbundi> I see, so whats the proper way to do it?
| |
15:09 | <Gadi> climbs the walls looking for a crack
| |
15:09 | <vbundi> so that I only have to edit one file that is
| |
15:10 | <Gadi> so on the server, do: cd /var/lib/tftpboot/ltsp/amd64
| |
15:10 | rm lts.conf
| |
15:10 | ln -s ../i386/lts.conf lts.conf
| |
15:10 | now, ls -l should show a relative symlink
| |
15:10 | which works both in your server's view of the world AND in tftp jail
| |
15:11 | <vbundi> ohh
| |
15:11 | <Gadi> (you can check in the initramfs)
| |
15:11 | <vbundi> sweet I get it
| |
15:11 | <Gadi> jail aint pretty
| |
15:11 | but sometimes, you gotta look at things from the inmate's pov
| |
15:12 | <vbundi> wait so if tftpd is in jail would xinetd be Bubba?
| |
15:12 | or the warden
| |
15:13 | <Gadi> heh - I think its the state of California
| |
15:13 | :P
| |
15:14 | <vbundi> so I wonder why it was working before
| |
15:15 | <Gadi> conjugal visits?
| |
15:16 | <vbundi> heh, my terminal hostname is judy
| |
15:16 | * Gadi won't ask what the wallpaper is | |
15:27 | <atkuepker> anybody have links to good articles/whitepapers on setting up iptables for LTSP5?
| |
15:35 | ogra_cmpc has quit IRC | |
15:47 | ogra_cmpc has joined #ltsp | |
15:49 | <Appiah> hmm
| |
15:49 | I dont see why that's needed?
| |
15:50 | what do you need atkuepker ?
| |
15:51 | <atkuepker> stock UFW on Ubuntu breaks LTSP5.
| |
15:52 | UFW-specific documentation is probably asking a bit much, but iptables would allow me to extrapolate when I need.
| |
15:52 | <abeehc> stock ufw is dsablede,no?
| |
15:52 | <Appiah> UFW is not enabled by default ...
| |
15:52 | <abeehc> agreed
| |
15:52 | <atkuepker> correct, but we're not terribly happy with that either.
| |
15:53 | <Appiah> is your LTSP server magning the whole network or what?
| |
15:54 | <atkuepker> correct. some of our Ubuntu LTSP5 boxes are the sole servers at our smaller remote sites.
| |
15:54 | Gadi has left #ltsp | |
15:55 | <Appiah> not even a hardware firewall or something?
| |
15:55 | well ltsp does not use anything special ,its just tftp,dhcp,ssh
| |
15:55 | <atkuepker> of course, but that won't prevent unauthorized outbound connections
| |
15:56 | hardware firewalls are just lobotomized linux boxen
| |
15:56 | NDB?
| |
15:56 | <Appiah> not unless you enable it...
| |
15:56 | <abeehc> i can't see why you'd put iptables rules in between the server and clients
| |
15:56 | from that point it's just lockdown whatever you want as normal with iptables, no?
| |
15:57 | <atkuepker> Yes, but most of those services on Ubuntu listen on all interfaces unless they're locked down.
| |
15:57 | thus I'm digging into what services are required to be allowed, and closing the rest.
| |
15:57 | <Appiah> well to answer your questions : no
| |
15:57 | maybe search the mailinglist
| |
15:58 | <abeehc> maybe somethin here https://help.ubuntu.com/community/UbuntuLTSP/LTSPFirewall
| |
15:58 | to be extrapolated
| |
15:58 | <Appiah> feels so general
| |
15:58 | not really "LTSP"
| |
15:59 | some dont even use the DHCP on the ltsp server
| |
15:59 | and so on
| |
15:59 | <abeehc> the 2 nic config might be the ticket
| |
15:59 | <atkuepker> at our main sites we don't either. but having 2-3 servers at remote sites with 8-10 terminals is a waste of resources.
| |
16:00 | abeehc: no, we're not running 1-legged network interfaces. external and internal are separated properly.
| |
16:01 | we had all this set up quite well with good security policies under Fedora and CentOS with LTSP4.x, but LTSP5 has some different requirements since our standard configuration doesn't work.
| |
16:02 | <abeehc> maybe focus on what doesn't work
| |
16:02 | cause your questions have mostly lost me
| |
16:03 | mine's happily insecure
| |
16:03 | <Appiah> what's not working for you now?
| |
16:03 | <atkuepker> we're not too happy about that. Especially since we handle healthcare information.
| |
16:03 | <abeehc> happy about what
| |
16:03 | there's no question there
| |
16:03 | so that's cool but hard to adress
| |
16:04 | <atkuepker> and that's why I was asking about docs/whitepapers for iptables.
| |
16:04 | <Appiah> well the best thing you can find is the ubuntu wiki posted earlier
| |
16:05 | other then that I never seen people discuss firewalls and ltsp
| |
16:05 | <abeehc> there's an article re: nat up there too
| |
16:05 | <atkuepker> yeah, we're already doing the NAT thing for the handful of XP machines.
| |
16:05 | <vagrantc> as good a reason to add a firewall as any.
| |
16:07 | <atkuepker> especially since Ubuntu doesn't seem to be as "Secure by Default" as it used to be.
| |
16:09 | <johnny> i doubt that has changed..
| |
16:09 | ubuntu has never been less secure by default than it is now
| |
16:09 | <abeehc> i agree
| |
16:10 | <johnny> there didn't used to be apparmor..
| |
16:10 | or ufw
| |
16:12 | <atkuepker> odd. Can't imagine it could even be called securable less alone "secure by nature" without those two and with most services configured to listen and accept connections on all NICs from all addresses.
| |
16:12 | theprof has left #ltsp | |
16:13 | <abeehc> you might be confusing ubuntu with something like openbsd
| |
16:14 | <vagrantc> atkuepker: but you were comparing ubuntu to older versions of ubuntu ... what has actually gotten worse?
| |
16:15 | <atkuepker> I remember the ubuntu 8.10 marketing going on about how it's "so secure you don't even need a firewall".
| |
16:15 | <abeehc> i can't imagine canonical saying that
| |
16:15 | maybe i'm mistaken
| |
16:15 | one of my clients just tripped and i managed to catch it~~~
| |
16:15 | http://pastebin.com/YN21imY4
| |
16:16 | now the load's pegged
| |
16:16 | :(
| |
16:21 | Lns has joined #ltsp | |
16:24 | <Lns> vagrantc: since debian uses nfs still, is it possible to symlink /etc/lts.conf files between chroots? For example, if you have an i386 *and* amd64 chroot, can you symlink them both together, either to a common file elsewhere or say, the amd64 lts.conf to the i386 one? I wonder because it seems that it's read before you actually mount the chroot.
| |
16:25 | <vagrantc> Lns: you'd have to hard-link them.
| |
16:25 | <Lns> vagrantc: cool. Thanks!
| |
16:25 | <vagrantc> though that has issues
| |
16:25 | <Lns> oh?
| |
16:26 | <vagrantc> sometimes editors will wisely edit a copy of the file, and then copy a new file into place.
| |
16:27 | which will end up breaking the hardlink
| |
16:27 | and you end up with inconsistant state
| |
16:27 | <Lns> ah
| |
16:27 | well if you do it by hand then it shouldn't be an issue right?
| |
16:27 | oh..nm
| |
16:27 | i see what you mean
| |
16:27 | <vagrantc> there is a risk of them getting out of sync.
| |
16:27 | and it's non-obvious when that happens
| |
16:28 | <Lns> wow that's a generic problem with hard links and those editors eh?
| |
16:28 | <vagrantc> sure.
| |
16:28 | <Lns> crazy. never thought of that before
| |
16:28 | <vagrantc> i may not have the exact details right, but the general idea is a fundamental problem with hard-links.
| |
16:29 | <Lns> yea...maybe better to do it another way then
| |
16:29 | just trying to figure out a way to make it a bit easier to manage multiple chroots
| |
16:29 | <vagrantc> you could keep it in revision control, such as git, and push to the other repository after committing.
| |
16:30 | and have the push be automated.
| |
16:30 | <Lns> yeah..or a simple every-minute-cron-script ;)
| |
16:30 | though that's pretty hackish
| |
16:30 | <vagrantc> that's another way
| |
16:30 | was the first idea that sprang to mind, actually ... but revision control is so much more elegant.
| |
16:31 | <Lns> i've never setup revision control before
| |
16:31 | <vagrantc> since you can have post-commit hooks that put the files into place.
| |
16:32 | <Lns> that would be nice for all sorts of stuff to sync between the chroots actually..hrm....
| |
16:32 | at least non-arch specific stuff
| |
16:33 | now that i'm back on using nfs i really prefer it...love not having to reboot after a change!
| |
16:33 | specially when testing
| |
16:34 | <vagrantc> i've stuck with it through all the NBD hype (while experimenting with NBD) not just to be curmudgeonly.
| |
16:35 | <Lns> hehe
| |
16:35 | well i'm happy for that
| |
16:50 | <atkuepker> have a good weekend folks
| |
16:51 | <Lns> you too atkuepker
| |
17:02 | nubae has quit IRC | |
17:02 | mikeshultz has quit IRC | |
17:03 | nubae has joined #ltsp | |
17:07 | jcastro has quit IRC | |
17:08 | jcastro has joined #ltsp | |
17:11 | <johnny> etckeeper
| |
17:11 | the only proble with git.. is that it doesn't really store metadata
| |
17:11 | nor empty directories
| |
17:11 | etckeeper does some hackiness around it tho
| |
17:11 | i like rdiff-backup too
| |
17:11 | jcastro has quit IRC | |
17:18 | vmlintu has quit IRC | |
17:19 | highvolt1ge is now known as highvoltage | |
17:23 | gentgeen__ has joined #ltsp | |
17:28 | <vbundi> how well does italc work with lucid?
| |
17:34 | atkuepker has quit IRC | |
17:45 | Selveste1_ has quit IRC | |
17:53 | Selveste1 has joined #ltsp | |
18:00 | bobby_C has quit IRC | |
18:05 | gentgeen__ has quit IRC | |
18:08 | gentgeen__ has joined #ltsp | |
18:24 | komunista has quit IRC | |
18:24 | johnny has left #ltsp | |
18:24 | Lns has quit IRC | |
18:25 | johnny has joined #ltsp | |
18:52 | epaphus has quit IRC | |
19:03 | staffencasa has quit IRC | |
19:11 | fhoahf38771 has joined #ltsp | |
19:11 | fhoahf38771 has left #ltsp | |
19:24 | Selveste1 has quit IRC | |
19:27 | GodFather has joined #ltsp | |
19:27 | GodFather_ has joined #ltsp | |
19:52 | F-GT has quit IRC | |
19:57 | vagrantc has quit IRC | |
20:08 | map7 has quit IRC | |
20:08 | F-GT has joined #ltsp | |
20:09 | map7 has joined #ltsp | |
20:31 | try2free has joined #ltsp | |
20:32 | try2free has left #ltsp | |
21:19 | nubae has quit IRC | |
21:22 | GodFather has quit IRC | |