IRC chat logs for #ltsp on irc.libera.chat (webchat)


Channel log from 14 February 2012   (all times are UTC)

00:14andy__ has left IRC (andy__!~andy@h247.95.31.71.dynamic.ip.windstream.net, Ping timeout: 240 seconds)
00:21
<vagrantc>
hmmm... so should the hostname setting plugin source the net-*.conf files directly, or should we append those to /var/cache/ltsp/ltsp_config ?
00:24knipwim has left IRC (knipwim!~wim@ip4da83870.direct-adsl.nl, Ping timeout: 260 seconds)
00:25knipwim has joined IRC (knipwim!~wim@ip4da83870.direct-adsl.nl)
00:26
<vagrantc>
catting it to /var/cache/ltsp/ltsp_config worked, although it got overwritten latter somehow ... but the hostname got set correctly.
00:28andy__ has joined IRC (andy__!~andy@h0.213.22.98.dynamic.ip.windstream.net)
00:38hydester has joined IRC (hydester!ad45a64b@gateway/web/freenode/ip.173.69.166.75)
00:38alexqwesa__ has left IRC (alexqwesa__!~alex@109.172.15.11, Quit: Хана X'ам !!!)
00:39bakytn has left IRC (bakytn!~ba@airport.kg)
00:39
<hydester>
hi, i'm new to LTSP and have tested a thin client and server in a VM without any major issues. is there a way to make an ISO for the client so i can try to run it via a wifi client?
00:40
<vagrantc>
wifi will have very limited performance
00:40
as a thin client
00:40
especially if you have more than one
00:40
<hydester>
so better to just use rdesktop or something?
00:40
<vagrantc>
rdesktop, vnc, nx, spice, etc...
00:41
depends on what your goal really is, though
00:41
if the clients are powerful enough, you might want to try a livecd or something
00:45
<hydester>
just want to use an old laptop P4/2GB RAM using the resources on my ubuntu server
00:46
i traditionally would ssh -X and just do that. wanted something a bit more elegant
00:48
btw, during my testing i did a "sudo reboot" on the client and it reboot the server
00:48
using LTSP 5
00:51
<vagrantc>
hydester: yes, that's because with a thin client, you're logged into the server.
00:52
<hydester>
ah. i thought it was like being in a chroot
00:52
<vagrantc>
hydester: most of the GUI ways you can reboot a server have been disabled, but we can only protect against so much
00:52
<hydester>
i was expecting it to be like a container
00:52
<vagrantc>
it's more like another moniter/mouse/keyboard attached to the server.
00:53
<hydester>
my user account wasn't available to log in until i did a chroot useadd. i guess that made me think it wasn't tied to the same account on the host
00:53
useradd
00:53
<vagrantc>
that's implausible.
00:54
well, unless you're talking about console logins
00:54
i.e. switching to tty1 and trying to log in that way...
00:54
but the graphical login for LTSP thin clients will log into the server, unless you've intentionally configured it otherwise.
00:55
it's essentially a GUI frontend for "ssh -X /etc/X11/Xsession"
00:55
<hydester>
it was the GUI login. i rebooted multiple times. then i added the use and then remade the image and rebooted and it was fine. but it is possible i missed something. i'll try it again tomorrow
00:56_UsUrPeR_ has joined IRC (_UsUrPeR_!~jsass@c-76-112-192-21.hsd1.mi.comcast.net)
00:57
<vagrantc>
remaking the image likely triggered something else.
00:57
most likely your ip address had changed and it failed to very the ssh host keys until you remade tthe image
00:57
meh. my typing is off tonight...
00:57
verify the ssh host keys
00:58
hydester: i bet if you removed the user from the chroot and remade the image it would work.
00:59
<hydester>
ok, will try that tomorrow. i'd like to do more with LTSP
00:59
<vagrantc>
it's not for all uses, but it's hopefully useful to many :)
01:00
<hydester>
i found it while looking for a citrix thinclient. wanted to PXE boot to a a preconfigured citrix client
01:00
<vagrantc>
should be possible, although citrix support isn't shipped by default, since it's not free software
01:10andy__ has left IRC (andy__!~andy@h0.213.22.98.dynamic.ip.windstream.net, Ping timeout: 240 seconds)
01:13hughessd has left IRC (hughessd!~hughessd@173-164-117-109-Oregon.hfc.comcastbusiness.net, Quit: gone for some reason)
01:17
<vagrantc>
hah.
01:17
ldm's check for new NBD images is messing with me.
01:23
<stgraber>
:)
01:25
<vagrantc>
i just went ahead and rm'ed it.
01:25
so, tested NBD on debian for the first time in ages.
01:25
seems to work fine with the new stuff, too.
01:26
although i'll grumble a bit about how ltsp-update-image misbehaves ... suppose i should just ship a default configuration file on debian that has "exit 0" at the top and issues a warning or something.
01:46adrianorg has left IRC (adrianorg!~adrianorg@187.115.110.202, Ping timeout: 245 seconds)
01:55
<vagrantc>
ltsp-update-image resets the update-kernels.conf
02:02
and manually re-implements update-kernels?
02:49alexqwesa has joined IRC (alexqwesa!~alex@alexo-veto.broker.freenet6.net)
02:58highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Read error: Operation timed out)
02:59highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
03:18loather-work has joined IRC (loather-work!~khudson@wsip-98-175-250-115.sd.sd.cox.net)
03:38killermike has joined IRC (killermike!~killermik@2.26.89.103)
03:44hydester has left IRC (hydester!ad45a64b@gateway/web/freenode/ip.173.69.166.75, Quit: Page closed)
03:55Parker955 is now known as Parker955_Away
04:00alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg)
04:01_UsUrPeR_ has left IRC (_UsUrPeR_!~jsass@c-76-112-192-21.hsd1.mi.comcast.net, Quit: Leaving)
04:07
<alkisg>
Good morning
04:08
vagrantc: there can only be one net-*.conf, right?
04:08
And it should probably be sourced before lts.conf, to allow lts.conf to override it
04:13
vagrantc: could you check which of the scripts I put to init-ltsp.d/Ubuntu are suitable for Debian too?
04:21alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.)
04:22alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg)
04:27alkisg1 has joined IRC (alkisg1!~alkisg@ppp089210000070.dsl.hol.gr)
04:27alkisg1 has left IRC (alkisg1!~alkisg@ppp089210000070.dsl.hol.gr, Changing host)
04:27alkisg1 has joined IRC (alkisg1!~alkisg@ubuntu/member/alkisg)
04:29alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Ping timeout: 276 seconds)
04:30alkisg1 is now known as alkisg
04:31
<alkisg>
vagrantc: can I completely remove nfs-bottom/ltsp too? Do you still need it for some reason?
05:13
Ouch, ltsp-init-common.configure_resolver() duplicates and overwrites 09-hostname and 10-resolv-conf.
05:14
At some point, the sooner the better, we need to move all the ltsp-init-common functions to init-ltsp.d scripts
05:31ltsp has joined IRC (ltsp!ltspbot@middelkoop.cc)
05:31
<cyberorg>
ok, will let you know when we switch, will work on it for next release
05:32highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
05:47loather-work has left IRC (loather-work!~khudson@wsip-98-175-250-115.sd.sd.cox.net, Quit: This computer has gone to sleep)
05:47ry has joined IRC (ry!~ry@static-71-183-64-28.nycmny.fios.verizon.net)
05:57highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Ping timeout: 252 seconds)
05:57highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
06:08shogunx has left IRC (shogunx!~shogunx@rrcs-67-79-182-232.se.biz.rr.com, Ping timeout: 265 seconds)
06:20
<alkisg>
Is any distro still using usplash?
06:23
vagrantc, stgraber: now that we use init-ltsp.d, we should remove ltsp-setup completely, right?
06:25loather-work has joined IRC (loather-work!~khudson@wsip-98-175-250-115.sd.sd.cox.net)
06:45* alkisg removed ltsp-setup from his branch, will commit when he hears feedback about it...
06:53NeonLicht has left IRC (NeonLicht!~NeonLicht@darwin.ugr.es, Ping timeout: 260 seconds)
06:54
<alkisg>
The "set_lts_var" vs "ltsp_config_env" file handling is buggy
06:54
So I've lost SCREEN_07=ldm as the default var
06:55
s/var/screen
06:59NeonLicht has joined IRC (NeonLicht!~NeonLicht@darwin.ugr.es)
07:15loather-work has left IRC (loather-work!~khudson@wsip-98-175-250-115.sd.sd.cox.net, Quit: This computer has gone to sleep)
07:16Hyperbyte has joined IRC (Hyperbyte!jan@middelkoop.cc)
07:55
<vagrantc>
alkisg: dunno
07:55
<alkisg>
vagrantc: about which one?
07:55
<vagrantc>
alkisg: i guess we could merge all of ltsp-client-setup into init-ltsp.d
07:56
<alkisg>
We only have 2 lines not merged yet
07:56
The rc files and another one, don't remember
07:56
The rcfiles can go to init-client-core
07:56
But we can't call all the others, like configure_resolv etc twice
07:57
Those are the ones we don't have in init-ltsp.d yet:
07:57
run_rcfiles || true
07:57
configure_serial_mouse || true
07:57
All the other ones are duplicates now, they should be removed
07:57
So I think it's best to remove ltsp-setup completely
07:57
<vagrantc>
alkisg: re: nfs-bottom/ltsp the only reason to keep it is if i wanted to maintain the LTSP_RW_* which seems unmanageable
07:57
<alkisg>
That's how I'm testing now, and it works fine
07:58
<vagrantc>
alkisg: i also tested NBD on debian for the first time in a long while, worked pretty well!
07:58
<alkisg>
vagrantc: ok, but at least all the other stuff should go away from there, e.g. dns and hostname handling
07:58
Cool!
07:58
<vagrantc>
other than my long-standing grumbles with ltsp-update-image ... though i fixed at least one of those.
07:59
<alkisg>
Yeah we need to rework the configuration there too
07:59
<vagrantc>
alkisg: the new system pretty much assumes a writeable /
07:59
it just blindly overwrites configuration files...
07:59
<alkisg>
For ltsp-update-image, ltsp-update-kernels, ltsp_config.d and all, it's too messy now
07:59
vagrantc: what files that we didn't write before?
08:00
<vagrantc>
i.e. /opt/ltsp/i386/etc/ltsp/update-kernels.conf just gets overwritten.
08:00
so when ltsp-update-image had the wrong values for BOOTPROMPT_OPTIONS, meh.
08:00
<alkisg>
Ah, you mean the ltsp-update-image system, I thought you were talking about the new init-ltsp.d system
08:00
<vagrantc>
no, no, ltsp-update-image
08:00
<alkisg>
I haven't looked into that yet... it's too messy to tackle quickly
08:01
It needs a bit of thought + redesign
08:01
So anyway, do you think any other distros are using ltsp-setup?
08:01
Opensuse uses a "kiwi-ltsp-setup", and I haven't found any other mentions of "ltsp-setup" in the sources...
08:01
<vagrantc>
alkisg: with init-ltsp, there are several things that won't easily work with LTSP_RW*
08:02
alkisg: not any distros that communicate much, anyways.
08:02
<alkisg>
vagrantc: I do think it'll be much easier if we assume a writeable root there, so forget bind-mounts completely..
08:02
<vagrantc>
alkisg: i'm willing to go there ... although i haven't tested backportability with that yet.
08:03
<alkisg>
The bad thing is that we don't have much time to clean all this up, because of precise feature freeze :(
08:03
<vagrantc>
alkisg: oh, the other problem with that was /var/cache/apt/*.bin was eating 30MB+
08:03
<alkisg>
?
08:03
On boot?
08:03
<vagrantc>
yes
08:03
<alkisg>
Why did that get there?
08:04
Ah, check some of the init-ltsp.d/Ubuntu scripts
08:04
<vagrantc>
haven't figured it out yet. perhaps some cron thing.
08:04
<alkisg>
Like the ones that disable services on boot
08:04
E.g. unattended-upgrades etc
08:04
Let me see my /cow size on boot...
08:05
(So, would you agree if I removed ltsp-setup?)
08:05
<vagrantc>
yeah, i've just been using common
08:05
ltsp-setup ... hmmm...
08:05
<alkisg>
Currently we do duplicate calls
08:05
So something does need to be done
08:05
<vagrantc>
the RC_FILE_NN support would be nice to port, or could maybe be moved to ltsp-core
08:05
<alkisg>
We can also just rename it to INIT_FILES :)
08:06
And run it in init-ltsp.d :D
08:06
<vagrantc>
well, it's the sort of thing that should probably run later that init-ltsp
08:06
<alkisg>
But yeah in ltsp-client-core it would be more backwards compatible
08:07
<vagrantc>
it might start a daemon or something, for exxample
08:08killermike has left IRC (killermike!~killermik@2.26.89.103, Remote host closed the connection)
08:08
<alkisg>
vagrantc: df -h ==>
08:08
tmpfs 572k /cow
08:08
And 788K for /run
08:09
<vagrantc>
yeah, that's about what i had, minus the /var/cache/apt stuff
08:09
less in /run, actually
08:09
anyways, unconsciousness calls :)
08:09
<alkisg>
I have a fat client setup
08:09
vagrantc: so I'm continuing tests without ltsp-setup
08:09
Good night :)
08:10
<vagrantc>
alkisg: i'm fairly sure what i did to ltsp-update-image won't break it, but if you could test, that would be good :)
08:10
<alkisg>
Sure, I'll go there after I have a client that boots to ldm :)
08:10
So after you wake up :)
08:14
<vagrantc>
alkisg: you'll need to add sensigs protection to nbd-proxy
08:14
and it didn't hurt to have protections for both, really.
08:15
<alkisg>
Ah, ok, I'll check that
08:16
<vagrantc>
and [ -z "$HOSTNAME" ] doesn't handle when HOSTNAME='(none)' very well.
08:17
<alkisg>
vagrantc: hostname gets set from net-*.conf
08:17
So it's either HOSTNAME=soemthing, or HOSTNAME=
08:17
We don't read it from the kernel anymore
08:17
<vagrantc>
hm.
08:18
ok, i guess.
08:19* vagrantc -> sleep
08:19alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.)
08:22vagrantc has left IRC (vagrantc!~vagrant@c-76-115-60-19.hsd1.or.comcast.net, Quit: leaving)
08:30khildin has joined IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be)
09:33freedomrun has joined IRC (freedomrun!~quassel@BSN-142-163-128.dial-up.dsl.siol.net)
09:52itomas has joined IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net)
09:52
<itomas>
hi
09:52
can anyone help with a problem in an LTSP setup with nbd_server
09:53
when booting the thin client it always appears the error message, Could not open exported file .... Permission denied
09:57adrianorg has joined IRC (adrianorg!~adrianorg@187.115.108.209)
10:00dobber has joined IRC (dobber!~dobber@213.169.45.222)
10:28Steve_The_Pirate has joined IRC (Steve_The_Pirate!~Gary@ip-80-238-8-128.bskyb.com)
10:30ogra_ has left IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de, Excess Flood)
10:32ogra_ has joined IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de)
10:40killermike has joined IRC (killermike!~killermik@2.26.89.91)
10:44kernevil has joined IRC (kernevil!~samuel@37.134.222.87.dynamic.jazztel.es)
10:46spectra has left IRC (spectra!~spectra@debian/developer/spectra, Ping timeout: 240 seconds)
10:49spectra has joined IRC (spectra!~spectra@debian/developer/spectra)
10:50itomas has left IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net, Ping timeout: 244 seconds)
11:12killermike has left IRC (killermike!~killermik@2.26.89.91, Remote host closed the connection)
11:20killermike has joined IRC (killermike!~killermik@2.26.100.181)
11:32sndwrx has left IRC (sndwrx!~sndwrx@unaffiliated/sndwrx, *.net *.split)
11:32veloutin has left IRC (veloutin!~veloutin@modemcable121.135-59-74.mc.videotron.ca, *.net *.split)
11:32shamino_ has left IRC (shamino_!shamino@hilla.kapsi.fi, *.net *.split)
11:32khildin has left IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be, *.net *.split)
11:32mmetzger has left IRC (mmetzger!~mmetzger@99-71-214-196.lightspeed.mdldtx.sbcglobal.net, *.net *.split)
11:32Flaw has left IRC (Flaw!flaw@nikita.tnnet.fi, *.net *.split)
11:32shawnp0wers has left IRC (shawnp0wers!~spowers@linuxjournal/staff/shawnp0wers, *.net *.split)
11:32darkpixel_ has left IRC (darkpixel_!~darkpixel@curetheitch/staff/darkpixel, *.net *.split)
11:32SmallR2002 has left IRC (SmallR2002!~quassel@c-98-253-173-240.hsd1.il.comcast.net, *.net *.split)
11:32andygraybeal has left IRC (andygraybeal!~andy.gray@obsidian.casanueva.com, *.net *.split)
11:32||cw has left IRC (||cw!~chris@phpgroupware/cw, *.net *.split)
11:32Patina has left IRC (Patina!~tomas@1385158770.dhcp.dbnet.dk, *.net *.split)
11:32Parker955_Away has left IRC (Parker955_Away!~parker@74.112.203.151, *.net *.split)
11:32rthomson has left IRC (rthomson!~rthomson@mars.pet.ubc.ca, *.net *.split)
11:32knipwim-work has left IRC (knipwim-work!~user@192.87.93.46, *.net *.split)
11:32TatankaT_ has left IRC (TatankaT_!~tim@peno.cwlab.kotnet.org, *.net *.split)
11:32elias_a has joined IRC (elias_a!elias@hilla.kapsi.fi)
11:32khildin has joined IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be)
11:32rthomson has joined IRC (rthomson!~rthomson@mars.pet.ubc.ca)
11:32veloutin has joined IRC (veloutin!~veloutin@modemcable121.135-59-74.mc.videotron.ca)
11:32sndwrx has joined IRC (sndwrx!~sndwrx@unaffiliated/sndwrx)
11:32andygraybeal has joined IRC (andygraybeal!~andy.gray@obsidian.casanueva.com)
11:32||cw has joined IRC (||cw!~chris@phpgroupware/cw)
11:32mmetzger has joined IRC (mmetzger!~mmetzger@99-71-214-196.lightspeed.mdldtx.sbcglobal.net)
11:32Flaw has joined IRC (Flaw!flaw@nikita.tnnet.fi)
11:32shawnp0wers has joined IRC (shawnp0wers!~spowers@linuxjournal/staff/shawnp0wers)
11:32darkpixel_ has joined IRC (darkpixel_!~darkpixel@curetheitch/staff/darkpixel)
11:32knipwim-work has joined IRC (knipwim-work!~user@192.87.93.46)
11:32TatankaT_ has joined IRC (TatankaT_!~tim@peno.cwlab.kotnet.org)
11:32shamino_ has joined IRC (shamino_!shamino@hilla.kapsi.fi)
11:32SmallR2002 has joined IRC (SmallR2002!~quassel@c-98-253-173-240.hsd1.il.comcast.net)
11:32Patina has joined IRC (Patina!~tomas@1385158770.dhcp.dbnet.dk)
11:32Parker955_Away has joined IRC (Parker955_Away!~parker@74.112.203.151)
11:35xsl has joined IRC (xsl!~silence@unaffiliated/xsl)
11:36
<xsl>
hello all.
11:39[GuS] has joined IRC ([GuS]!~MysT@213-117-16-190.fibertel.com.ar)
11:39[GuS] has joined IRC ([GuS]!~MysT@unaffiliated/gus/x-663402)
11:40artista_frustrad has joined IRC (artista_frustrad!~fernando@200.247.43.2)
11:42itomas has joined IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net)
11:43
<itomas>
anyone help on error message "Could not boot from filename pxelinux.0" "Permission denied"
11:43
?
11:48
<xsl>
itomas: is that from the regular i386 image?
11:49
<itomas>
yes
11:49
<xsl>
if so, do a ls -l /var/lib/tftpboot/ltsp/i386/pxelinux.0
11:49
<itomas>
i just followed the steps in LtspQuickInstall
11:49
currently is 777 as i tried modifying the permissions for
11:50
<xsl>
if should be 644
11:50
<itomas>
i'll try
11:51
tell u in a second
11:51
<xsl>
and check also the /var/lib/tftpboot/ltsp/i386/pxelinux.cfg/default
11:51
<itomas>
what should the permissions be for that file, currently is also 777
11:52
should it be 644 too?
11:52
<xsl>
644
11:52
<itomas>
thx
11:52
<xsl>
i have the feeling you been playing with permissions :P
11:52
<itomas>
yes, :P as it always gave me that error i thought it could be a matter of permissions
11:52
but doesn't seem
11:52
i'll try changing them and inform about
11:53itomas has left IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net, Remote host closed the connection)
11:53Steve_The_Pirate has left IRC (Steve_The_Pirate!~Gary@ip-80-238-8-128.bskyb.com, Quit: Leaving)
11:55itomas has joined IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net)
11:55
<itomas>
didn't work, changing pxelinux.0 and pxelinux.cfg/default permissions just threw the same message
11:58
<xsl>
show me the permissions of your /var/lib/tftpboot/ltsp/i386/
11:58
maybe the kernel file needs permissions
11:59
use pastebin plz
12:14ltsp has joined IRC (ltsp!ltspbot@middelkoop.cc)
12:14
<itomas>
permission denied
12:15highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
12:17
<alkisg>
itomas: paste your /etc/default/tftpd-hpa
12:17
!tftp
12:17
<ltsp>
alkisg: tftp: Here's a page to help you troubleshoot TFTP problems in Ubuntu: https://help.ubuntu.com/community/UbuntuLTSP/Troubleshooting/TFTP
12:18
<alkisg>
E.g. you may be missing the "--secure" option
12:20monteslu_ has joined IRC (monteslu_!~monteslu@ip68-109-174-213.ph.ph.cox.net)
12:20
<itomas>
yeah, that was it i was missing the --secure option, thx a lot, i messed up the tftp configuration, sorry :P
12:21
<xsl>
sorry i could not be more of an assistance :D (still a bit new to ltsp)
12:23bobby_C has joined IRC (bobby_C!~bobby@85-124-22-227.teleworker.xdsl-line.inode.at)
12:23monteslu has left IRC (monteslu!~monteslu@ip68-109-174-213.ph.ph.cox.net, Ping timeout: 260 seconds)
12:24
<itomas>
xsl:don't worry thx again for your cooperation
12:26itomas has left IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net, Remote host closed the connection)
12:31khildin has left IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be, Quit: I'm gone, bye bye)
12:34
<xsl>
bbl guys
12:34xsl has left IRC (xsl!~silence@unaffiliated/xsl, Quit: Connection reset by fear)
12:38Parker955_Away is now known as Parker955
12:42itomas has joined IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net)
12:42
<alkisg>
mgariepy: hi, do you mind if the new way to activate nbd-proxy is to pass NBDCLIENT=nbd-proxy-wrapper in the kernel command line, instead of the old nbd_proxy=true ?
12:42
That will make the nbd initramfs script call /sbin/nbd-proxy-wrapper, which will be a shell script which will call nbd-proxy and nbd-client.
12:43andygraybeal_ has joined IRC (andygraybeal_!~andy.gray@obsidian.casanueva.com)
12:43
<alkisg>
(also if you can think of a better name than nbd-proxy-wrapper... e.g. nbdproxy or nbd-proxy.sh?)
12:44
Finally, if that's all you ever use nbd-proxy for, we may as well skip the wrapper, and process the command line + call nbd-client from within the C source code. But I guess that cannot be done soon enough for the feature freeze.
12:45shogunx has joined IRC (shogunx!~shogunx@rrcs-67-79-182-232.se.biz.rr.com)
12:46Trixboxer has joined IRC (Trixboxer!~Trixboxer@115.124.115.71)
12:47Parker955 is now known as Parker955_Away
12:48kernevil has left IRC (kernevil!~samuel@37.134.222.87.dynamic.jazztel.es, Remote host closed the connection)
12:50Hyperbyte has joined IRC (Hyperbyte!jan@middelkoop.cc)
13:03bengoa has joined IRC (bengoa!~bengoa@2001:1291:229:2:216:cbff:feab:6cc9)
13:18
<mgariepy>
good morning everyone
13:22
<alkisg>
Good morning mgariepy, when you have some time please look above for some nbd-proxy questions
13:23
<mgariepy>
for the wrapper i don't mind as long as it can be enabled with the cmdline ;)
13:23Steve_The_Pirate has joined IRC (Steve_The_Pirate!~Gary@ip-80-238-8-128.bskyb.com)
13:28
<alkisg>
Cool, will do that today
13:30
<mgariepy>
great thanks
13:38brunolambert has joined IRC (brunolambert!bruno@nat/revolutionlinux/x-arginurvsbbnuzny)
14:00Gremble has joined IRC (Gremble!~Ben@cpc10-aztw24-2-0-cust114.aztw.cable.virginmedia.com)
14:04
<Hyperbyte>
alkisg?
14:05
<alkisg>
Hyperbyte: hey
14:05
<Hyperbyte>
http://twitgoo.com/5ewun9
14:05
Can you tell me what could cause a thin client to hang at that point?
14:05
It's just one client, out of several
14:06
After these messages in the picture, the screen turns black and then nothing
14:06
Pressing ctrl+alt+f1 brings the messages back
14:06
<alkisg>
!quiet-splash
14:06
<ltsp>
alkisg: quiet-splash: to disable the splash screen in Ubuntu, in order to see any boot error messages, run `sudo gedit /var/lib/tftpboot/ltsp/i386/pxelinux.cfg/default` and remove quiet splash .
14:06
<alkisg>
That also shows the kernel messages
14:07
<Hyperbyte>
Good idea. One moment.
14:07Gremble has left IRC (Gremble!~Ben@cpc10-aztw24-2-0-cust114.aztw.cable.virginmedia.com, Quit: I Leave)
14:11
<Hyperbyte>
New errors
14:11
Although
14:11
No errors
14:11
Just new information on where it hangs exactly
14:11
http://twitgoo.com/5ewutt
14:12
<stgraber>
alkisg: nobody uses usplash anymore
14:13
<alkisg>
I'll put it in the TODOs to remove it
14:13LuizAngioletti has joined IRC (LuizAngioletti!c8ef4083@gateway/web/freenode/ip.200.239.64.131)
14:13
<alkisg>
stgraber: also, we're affected by this: https://bugs.launchpad.net/ubuntu/+source/nbd/+bug/696435
14:14
We can work around that too, with rootdelay=1, but it'd be nice if we could solve it properl
14:14
y
14:14
<LuizAngioletti>
Hey folks! I'm trying to convince my coworkers that LTSP is the good idea I think it is. But I'd like to do that with some papers and research results. Can anyone point me to something? I've search and found some four papers...
14:14
I'd like some more.
14:15
<Hyperbyte>
LuizAngioletti, LTSP is free. Get some PC or laptop which is moderately powerful, and make a demo for your co-workers. :)
14:16
<stgraber>
alkisg: and that's only with the new nbd I guess? I don't remember ever seeing the boot get stuck for 30s in initramfs
14:16
<alkisg>
stgraber: yup :(
14:17
<stgraber>
alkisg: ok, I won't have time to look into it by Feature Freeze, so use the workaround for now
14:17
<alkisg>
ok
14:17
By tonight I think it'll be mostly working :)
14:18
<Hyperbyte>
LuizAngioletti, I introduced LTSP here by switching one person over to a test LTSP environment. :)
14:18
<LuizAngioletti>
Hyperbyte: I realize that. They already have some labs set up, but complaint about server delay and all. I'd like to see some more recent specs for server and lab size... The LTSP docs aren't that up to date on that matter.
14:19
<Hyperbyte>
LuizAngioletti, server delay how? LTSP shouldn't have any noticable delay, unless you have insanely crappy hardware.
14:19
<LuizAngioletti>
As I'm at a University, the thing I think the most are papers, white papers, descriptive success cases...
14:19andygraybeal_ has left IRC (andygraybeal_!~andy.gray@obsidian.casanueva.com, Quit: Ex-Chat)
14:19
<alkisg>
!adding-modules
14:19
<ltsp>
alkisg: adding-modules: If your clients won't boot with messages like 'eth0: link not ready', maybe you're missing an initramfs-module: https://help.ubuntu.com/community/UbuntuLTSP/AddingModules
14:19
<alkisg>
Hyperbyte: ^
14:19
<Hyperbyte>
alkisg, I have ten identical clients
14:19brunolambert has left IRC (brunolambert!bruno@nat/revolutionlinux/x-arginurvsbbnuzny, Quit: brunolambert)
14:19
<alkisg>
Hyperbyte: errr which ubuntu version?
14:19
<Hyperbyte>
And this one worked fine until a few hours ago...
14:19
11.04
14:19brunolambert has joined IRC (brunolambert!bruno@nat/revolutionlinux/x-fxxwlrioudvckwad)
14:19
<alkisg>
Ah yeah that one does have the r8169 module there
14:20
<LuizAngioletti>
Hyperbyte: And what is the minimum required hardware, and what's the lab size you have there?
14:20
<alkisg>
Hyperbyte: poweroff the client, unplug the power, press the power button so that static electricitly goes away, press the network cable a bit, and restart the client
14:20
<LuizAngioletti>
Hyperbyte: And what is the kind of applicantion you use?
14:21
<Hyperbyte>
LuizAngioletti, we're a commercial company... so different budget, you can't compare my hardware situation to school labs.
14:21
<alkisg>
LuizAngioletti: what are your client specs? RAM?
14:23* alkisg testifies that he can't compare his school labs with Hyperbyte's servers. #@($*&#@( :)
14:23
<alkisg>
Hyperbyte's servers could easily serve 10 school labs here...
14:31ltsp has joined IRC (ltsp!ltspbot@middelkoop.cc)
14:31
<LuizAngioletti>
alkisg: can you tell if there is any university behind the project?
14:32stgraber has joined IRC (stgraber!~stgraber@ubuntu/member/stgraber)
14:32
<alkisg>
You mean sponsoring the ltsp development? Not that I know of...
14:32highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
14:32
<mmetzger>
Someone just switched from sunrays to LTSP I think...
14:33Hyperbyte has joined IRC (Hyperbyte!jan@middelkoop.cc)
14:33
<Hyperbyte>
Yay
14:35
<LuizAngioletti>
alkisg: I'll be back with some more specifics about my problem. =)
14:36
<alkisg>
LuizAngioletti: np, the channel will always be here :)
14:36
Hyperbyte: welcome!! :D
14:38Steve_The_Pirate has left IRC (Steve_The_Pirate!~Gary@ip-80-238-8-128.bskyb.com, Quit: Leaving)
14:42
<LuizAngioletti>
alkisg: I forgot to ask... what are the server specs?
14:42
<alkisg>
For 12 pcs any recent pc will do. Dual core, 3 gb ram, gigabit nic.
14:43
Double the specs for your case
14:47
<LuizAngioletti>
alkisg: So... If I already have that... and the client's specs I told you I have (256MB-512MB RAM, and some pentiums)... and I still experience delays... the problem is left to be on network hardware...
14:47
<alkisg>
LuizAngioletti: or your lts.conf settings, you didn't yet answer my question about LDM_DIRECTX
14:47
<LuizAngioletti>
alkisg: I didn't realize it was for me. =)
14:49
alkisg: just a sec.. =)
14:50
<Hyperbyte>
Your demo environment will only have to be for one or two PC's of course, so you don't need such beefy hardware. :) And it'll help you learn more about LTSP, such as why LDM_DIRECTX=True increases responsiveness. ;-)
14:50
alkisg, thin client works again. I guess the longer poweroff helped... either that, or me repatching all the network cables it runs through.
14:55
Now I just need _UsUrPeR_
15:00
<LuizAngioletti>
alkisg: Although I haven't seen the production machines, I think I can safely assume that the parameter is not set. Why is it that relevant?
15:00
<Hyperbyte>
LuizAngioletti, by default LTSP encrypts all it's network traffic
15:00
It is very safe & secure. But, that encryption eats a lot of computing power plus causes network latency.
15:00
<LuizAngioletti>
Hyperbyte: which means huge traffic overload... =/
15:00
<alkisg>
!directx
15:00
<ltsp>
alkisg: directx: If you want to turn off encryption to the workstation, which will speed up performance at the cost of security, you need to specify LDM_DIRECTX=True in your lts.conf file. Type !docs in IRC to get a link to the current documentation
15:01
<Hyperbyte>
If your network is secure enough, and you trust your users enough that they don't sniff out network traffic, you can turn the encryption off.
15:01
<LuizAngioletti>
Hyperbyte: And if I don't... I'd have to improve server and network hardware. =/
15:01
<Hyperbyte>
alkisg, why is LDM_DIRECTX not enabled by default? It's not like it'll be an issue for most people.
15:02
<alkisg>
Hyperbyte: I think because those linux developers are usually security freaks :P
15:02
<LuizAngioletti>
alkisg: Are you the LTSP Oracle? =)
15:02
<alkisg>
Nah, I'm just a poor lonesome teacher
15:02
<Hyperbyte>
In fact, I can't imagine any user case where someone a) uses hubs instead of switches so network sniffing is an issue, and b) has users advanced enough to make sense of remote X traffic
15:02
!alkisg
15:02
<ltsp>
Hyperbyte: alkisg: The LTSP oracle. Our beacon of hope in the world of LTSP. With the guidance of this divine emperor, we shall prevail.
15:02
<Hyperbyte>
He's the oracle.
15:03
<LuizAngioletti>
alkisg: Some say otherwise... =)
15:03
Thx a lot, anyway.
15:03
<mmetzger>
Switches aren't the end all for stopping sniffing :)
15:04
<Hyperbyte>
mmetzger, with thin clients that send huge amounts of network traffic? Sure they are.
15:05
Either way - let's start a poll. Who here hasn't got LDM_DIRECTX=True in their lts.conf?
15:05
Except for LuizAngioletti. =)
15:05* mmetzger raises hand
15:05
<Hyperbyte>
mmetzger, why?
15:05
<LuizAngioletti>
Hyperbyte, alkisg, I need a tip. =) How would I measure the performance before and after setting that parameterß
15:05
?
15:05
<mmetzger>
Specifically due to security, and I have fairly powerful clients on a ridiculously over speced server
15:06
But the people using mine *are* security guys...
15:06
Under normal circumstances I do agree
15:06
<LuizAngioletti>
mmetzger: so your problem is quite the opposite of mine... I have ridiculously old clients and low spec'ed servers... =P
15:07
<Hyperbyte>
mmetzger, so, since everybody who comes in here gets told to enable LDM_DIRECTX, it'd make more sense to disable it by default, and give people like you, where I agree it might be useful, the option to enable it
15:07* Hyperbyte coughs
15:07
<Hyperbyte>
I have spoken.
15:08
<alkisg>
Hyperbyte: if you can convince vagrantc, I think that change can go upstream :D
15:08
<mmetzger>
Hyperbyte: Sounds good to me :)
15:09
<LuizAngioletti>
alkisg: Do you know of any inciative happening with LTSP in Brazil?
15:09
<Hyperbyte>
And let's call it LDM_ENCRYPTION or something. :)
15:10
<LuizAngioletti>
Hyperbyte: Now I'm confused. =/ Am I suposed to have the parameter set or not --- for low traffic?
15:10
<alkisg>
X_ENCRYPTION
15:10
<Hyperbyte>
LuizAngioletti, type the words 'LTSP' and 'Brazil' in Google. :)
15:10
<alkisg>
LuizAngioletti: I think Brazil does use a lot of ltsp and thin clients, but again no links
15:10
<mmetzger>
LuizAngioletti: Yes, you should have LDM_DIRECTX=True in your lts.conf
15:10
<alkisg>
Yeah, what Hyperbyte said
15:11
<LuizAngioletti>
Hyperbyte: The only reliable link was 404. =P
15:11
<Hyperbyte>
I saw two success stories when I googled for that.
15:11
LuizAngioletti, really?
15:11
<LuizAngioletti>
Hyperbyte: Yeah, it would be something like ltsp-br.org...
15:11
<Hyperbyte>
I just checked - the first two results are success stories.
15:11
Make sure you use www.google.com
15:11
Or better
15:11
http://archive09.linux.com/feature/120292.html
15:12
http://sourceforge.net/apps/mediawiki/ltsp/index.php?title=Ltsp_SuccessStories#Far.C3.B3is_do_Saber_em_Curitiba_com_LTSP.2C_Brasil
15:12
There
15:12
First two results.
15:12
There's much more, if you use www.google.com (com!)
15:12
<LuizAngioletti>
You're right. I was looking for the brazilian country name, with an S: Brasil.
15:12
<Hyperbyte>
Ah. :)
15:12
<LuizAngioletti>
And than it points to some ltsp-br.org, wich is 404.
15:13
http://www.ltsp-br.org/
15:13
check. =P
15:15* mmetzger bangs head on table for a minute and fixes his iptables setup
15:16
<Hyperbyte>
mmetzger, careful!
15:16
That's not good for the table.
15:16
<mmetzger>
It's a cheap ikea table - I'm not that worried
15:17
<Hyperbyte>
First you bang on the table, now you're calling it cheap... you should be nicer to it!
15:18
<mmetzger>
Probably so - otherwise one of these days it will break and dump my monitor & such on the floor
15:19
<LuizAngioletti>
And those are not cheap.
15:20
Hyperbyte: I'm sorry for my dumbness... but.. If I don't have the LDM_DIRECTX=True set, then I don't have encription working, right?
15:20
<Hyperbyte>
LuizAngioletti, wrong!
15:20
See
15:20
!lts.conf
15:20
<ltsp>
Hyperbyte: lts.conf: http://manpages.ubuntu.com/lts.conf
15:20
<LuizAngioletti>
Hyperbyte: Thx. +D
15:20
<Hyperbyte>
Check "LDM_DIRECTX"
15:20
Default value is "False"
15:21
So if you don't explicitly set it to something other than the default, it'll be the default.
15:21
The name is a bit confusing
15:21
By default, LDM traffic is going via encryption, to X
15:21
<mmetzger>
LuizAngioletti: Think of the LDM_DIRECTX as being the equivalent of "ssh -X" on a normal client - you tunnel the X connectivity over SSH instead of direct to the listening port.
15:21
<Hyperbyte>
If you want to send LDM traffic directly to X, you set LDM_DIRECTX=True
15:22andygraybeal has left IRC (andygraybeal!~andy.gray@obsidian.casanueva.com, Read error: Connection reset by peer)
15:22
<Hyperbyte>
So setting LDM_DIRECTX=True bypasses the encryption part.
15:22
<LuizAngioletti>
mmetzger, Hyperbyte : got it. =D
15:23
<mmetzger>
note to self - when using the REDIRECT iptables target on an LTSP box, make sure the SSH port isn't redirected...
15:23* Hyperbyte smacks mmetzger!
15:24
<mmetzger>
Hey, it made for interesting troubleshooting... and the reason for the table being injured.
15:25
<Hyperbyte>
No, the reason for the table being injured is your absense of anger management. :P
15:25
<LuizAngioletti>
May I ask where are you from?
15:25
<Hyperbyte>
<- Netherlands
15:25
<LuizAngioletti>
<- Brazil =P
15:26
<mmetzger>
<- Land of broken tables
15:31
<LuizAngioletti>
mmetzger: does it have a gps location?
15:31
=P
15:31
<mmetzger>
Heh - sorry, was troubleshooting something - Texas
15:36
<LuizAngioletti>
hum...
15:38
Folks, I'll probably be around frequently now. =/ I'm thinking about a project with LTSP.... so I'll surely need your wisdom. But now, I have to go. Have a nice day/night =)
15:40
<mmetzger>
Bye LuizAngioletti
15:40toscalix has joined IRC (toscalix!~toscalix@85.137.146.26.dyn.user.ono.com)
15:43veloutin has left IRC (veloutin!~veloutin@modemcable121.135-59-74.mc.videotron.ca, Ping timeout: 248 seconds)
15:44monteslu_ has left IRC (monteslu_!~monteslu@ip68-109-174-213.ph.ph.cox.net, Ping timeout: 248 seconds)
15:44toscalix has left IRC (toscalix!~toscalix@85.137.146.26.dyn.user.ono.com, Remote host closed the connection)
15:45LuizAngioletti has left IRC (LuizAngioletti!c8ef4083@gateway/web/freenode/ip.200.239.64.131, )
15:45toscalix has joined IRC (toscalix!~toscalix@85.137.146.26.dyn.user.ono.com)
15:45veloutin has joined IRC (veloutin!~veloutin@modemcable121.135-59-74.mc.videotron.ca)
15:45monteslu_ has joined IRC (monteslu_!~monteslu@ip68-109-174-213.ph.ph.cox.net)
15:51loather has joined IRC (loather!~khudson@wsip-98-175-250-115.sd.sd.cox.net)
15:58andygraybeal has joined IRC (andygraybeal!~andy.gray@obsidian.casanueva.com)
16:04Steve_The_Pirate has joined IRC (Steve_The_Pirate!~Gary@ip-80-238-8-128.bskyb.com)
16:08mistik1 has joined IRC (mistik1!~mistik1@unaffiliated/mistik1)
16:09mistik1_ has joined IRC (mistik1_!~mistik1@unaffiliated/mistik1)
16:11veloutin has left IRC (veloutin!~veloutin@modemcable121.135-59-74.mc.videotron.ca, Quit: Lost terminal)
16:11veloutin has joined IRC (veloutin!~veloutin@modemcable121.135-59-74.mc.videotron.ca)
16:12dobber has left IRC (dobber!~dobber@213.169.45.222, Remote host closed the connection)
16:14staffencasa has joined IRC (staffencasa!~staffenca@128-193-149-96.oregonstate.edu)
16:18itomas has left IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net, Ping timeout: 252 seconds)
16:18dobber has joined IRC (dobber!~dobber@213.169.45.222)
16:20Steve_The_Pirate has left IRC (Steve_The_Pirate!~Gary@ip-80-238-8-128.bskyb.com, Quit: Leaving)
16:22bobby_C has left IRC (bobby_C!~bobby@85-124-22-227.teleworker.xdsl-line.inode.at, Ping timeout: 240 seconds)
16:32xet7 has joined IRC (xet7!~xet7@a91-156-244-142.elisa-laajakaista.fi)
16:33komunista has joined IRC (komunista!~slavko@adsl-195-098-005-032.dynamic.nextra.sk)
16:52itomas has joined IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net)
16:52itomas has left IRC (itomas!~iago@36.red-80-28-121.adsl.static.ccgg.telefonica.net)
17:01cliebow has joined IRC (cliebow!~cliebow@WatchGuard.ellsworth-hs.ellsworth.k12.me.us)
17:01dobber has left IRC (dobber!~dobber@213.169.45.222, Remote host closed the connection)
17:06khildin has joined IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be)
17:07loather has left IRC (loather!~khudson@wsip-98-175-250-115.sd.sd.cox.net, Quit: This computer has gone to sleep)
17:20
<stgraber>
alkisg: gah, forgot to update the build score on the new snapshot ... done now, should be built in a few minutes
17:20
<alkisg>
OK, no hurries, I just wanted this in the ppa because it boots, in case some other person watching the mailing list wanted to test
17:22mikkel has joined IRC (mikkel!~mikkel@80-71-132-15.u.parknet.dk)
17:24
<alkisg>
stgraber: I want to create an nbd-proxy-wrapper script, to be placed in the initramfs /sbin. To enable nbd proxy, one would use "NBD_CLIENT=nbd-client-wrapper" in the kernel command line. Question: should I put that to ltsp-trunk/nbd-proxy/nbd-proxy-wrapper, or in ltsp-trunk/client/nbd-proxy-wrapper?
17:25
(erm typo in the cmdline, it's NBDCLIENT=nbd-proxy-wrapper)
17:26
<stgraber>
alkisg: considering the old nbd-proxy activation code was in our initramfs scripts, I guess ltsp-trunk/client/nbd-proxy-wrapper makes sense
17:26
alkisg: the idea is hat the nbd-proxy directory might be moved to a separate package at some point as it's also useful outside of LTSP
17:26
*that
17:27
<alkisg>
stgraber: a good idea, better put it to nbd-proxy/ then, as it's only used by that package
17:27
And if sometime later nbd-proxy can handle being an NBDCLIENT wrapper by itself, the wrapper script can be deleted
17:28
(it's just a matter of command line parsing)
17:28
<stgraber>
hmm, indeed, thinking of it nbd-proxy/ makes sense then as someone can use the wrapper without LTSP to boot a machine using nbd
17:28andygraybeal has left IRC (andygraybeal!~andy.gray@obsidian.casanueva.com, Quit: Ex-Chat)
17:28
<stgraber>
yep, put it in nbd-proxy then
17:30
<alkisg>
OK, I'll put it in src/
17:35killermike has left IRC (killermike!~killermik@2.26.100.181, Remote host closed the connection)
17:37mistik1_ has left IRC (mistik1_!~mistik1@unaffiliated/mistik1)
17:38freedomrun_ has joined IRC (freedomrun_!~quassel@BSN-142-161-203.dial-up.dsl.siol.net)
17:38freedomrun has left IRC (freedomrun!~quassel@BSN-142-163-128.dial-up.dsl.siol.net, Ping timeout: 260 seconds)
17:43dead_inside has left IRC (dead_inside!~dead_insi@76.75.3.174, Ping timeout: 244 seconds)
17:43sndwrx has left IRC (sndwrx!~sndwrx@unaffiliated/sndwrx, Ping timeout: 240 seconds)
17:44
<alkisg>
mgariepy: does nbd-proxy support name-based exports? What parameters should be passed to it if the user uses a name-based export without specifying a port, i.e. using the default 10809?
17:45
(or, stgraber ^)
17:49
<stgraber>
alkisg: it's supposed to, I don't know the parameters though
17:50
<alkisg>
OK, I'll make a sample script and leave the testing up to mgariepy
17:50
I'll assume that it only uses the port and doesn't care about the parameters
17:50
I.e. it only does translation
17:52freedomrun_ has left IRC (freedomrun_!~quassel@BSN-142-161-203.dial-up.dsl.siol.net, Read error: Connection reset by peer)
17:53ByPasS has left IRC (ByPasS!pbernier@nat/revolutionlinux/x-djfshhamszrvsmtj, Ping timeout: 245 seconds)
17:55||cw has left IRC (||cw!~chris@phpgroupware/cw, *.net *.split)
17:55Patina has left IRC (Patina!~tomas@1385158770.dhcp.dbnet.dk, *.net *.split)
17:55Parker955_Away has left IRC (Parker955_Away!~parker@74.112.203.151, *.net *.split)
17:55staffencasa has left IRC (staffencasa!~staffenca@128-193-149-96.oregonstate.edu, *.net *.split)
17:55veloutin has left IRC (veloutin!~veloutin@modemcable121.135-59-74.mc.videotron.ca, *.net *.split)
17:55shamino_ has left IRC (shamino_!shamino@hilla.kapsi.fi, *.net *.split)
17:55mmetzger has left IRC (mmetzger!~mmetzger@99-71-214-196.lightspeed.mdldtx.sbcglobal.net, *.net *.split)
17:55Flaw has left IRC (Flaw!flaw@nikita.tnnet.fi, *.net *.split)
17:55shawnp0wers has left IRC (shawnp0wers!~spowers@linuxjournal/staff/shawnp0wers, *.net *.split)
17:55darkpixel_ has left IRC (darkpixel_!~darkpixel@curetheitch/staff/darkpixel, *.net *.split)
17:55SmallR2002 has left IRC (SmallR2002!~quassel@c-98-253-173-240.hsd1.il.comcast.net, *.net *.split)
17:55elias_a has left IRC (elias_a!elias@hilla.kapsi.fi, *.net *.split)
17:55rthomson has left IRC (rthomson!~rthomson@mars.pet.ubc.ca, *.net *.split)
17:55knipwim-work has left IRC (knipwim-work!~user@192.87.93.46, *.net *.split)
17:55TatankaT_ has left IRC (TatankaT_!~tim@peno.cwlab.kotnet.org, *.net *.split)
17:56sndwrx has joined IRC (sndwrx!~sndwrx@unaffiliated/sndwrx)
17:56elias_a has joined IRC (elias_a!elias@hilla.kapsi.fi)
17:56rthomson has joined IRC (rthomson!~rthomson@mars.pet.ubc.ca)
17:56mmetzger has joined IRC (mmetzger!~mmetzger@99-71-214-196.lightspeed.mdldtx.sbcglobal.net)
17:56Flaw has joined IRC (Flaw!flaw@nikita.tnnet.fi)
17:56shawnp0wers has joined IRC (shawnp0wers!~spowers@linuxjournal/staff/shawnp0wers)
17:56darkpixel_ has joined IRC (darkpixel_!~darkpixel@curetheitch/staff/darkpixel)
17:56knipwim-work has joined IRC (knipwim-work!~user@192.87.93.46)
17:56TatankaT_ has joined IRC (TatankaT_!~tim@peno.cwlab.kotnet.org)
17:56shamino_ has joined IRC (shamino_!shamino@hilla.kapsi.fi)
17:56SmallR2002 has joined IRC (SmallR2002!~quassel@c-98-253-173-240.hsd1.il.comcast.net)
17:58hughessd has joined IRC (hughessd!~hughessd@173-164-117-109-Oregon.hfc.comcastbusiness.net)
17:58veloutin has joined IRC (veloutin!~veloutin@modemcable121.135-59-74.mc.videotron.ca)
17:58
<hughessd>
hey all, is there any way to disable the keyring popup for each user?
17:59
en masse, not one by one....
18:01staffencasa has joined IRC (staffencasa!~staffenca@128-193-149-96.oregonstate.edu)
18:02
<hughessd>
there's some mention of keyrings here: http://irclogs.ltsp.org/?d=2011-03-30
18:02
but no one mentions what worked...
18:03Patina has joined IRC (Patina!~tomas@1385158770.dhcp.dbnet.dk)
18:03
<alkisg>
stgraber: I pushed the nbd-client-proxy script, but a packaging change is needed:
18:03
ltsp-client-core.install:nbd-proxy/src/nbd-client-proxy usr/sbin
18:03
mgariepy: whenever you want to test, either copy that file manually, or ask stgraber to generate another package. But do have a look at the script, I wasn't sure if the parameters were correct or not...
18:03||cw has joined IRC (||cw!~chris@gateway.wilsonmfg.com)
18:03||cw has joined IRC (||cw!~chris@phpgroupware/cw)
18:06xsl has joined IRC (xsl!~silence@unaffiliated/xsl)
18:08Parker955_Away has joined IRC (Parker955_Away!~parker@74.112.203.151)
18:15||cw has left IRC (||cw!~chris@phpgroupware/cw, *.net *.split)
18:15cliebow has left IRC (cliebow!~cliebow@WatchGuard.ellsworth-hs.ellsworth.k12.me.us, *.net *.split)
18:15alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, *.net *.split)
18:15ogra_ has left IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de, *.net *.split)
18:15Mava has left IRC (Mava!~Mava@ip-45-224.dhcp.opintanner.fi, *.net *.split)
18:20map7work has joined IRC (map7work!~map7@teksup41.lnk.telstra.net)
18:21NeonLich1 has joined IRC (NeonLich1!~NeonLicht@darwin.ugr.es)
18:21||cw has joined IRC (||cw!~chris@phpgroupware/cw)
18:21cliebow has joined IRC (cliebow!~cliebow@WatchGuard.ellsworth-hs.ellsworth.k12.me.us)
18:21alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg)
18:21ogra_ has joined IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de)
18:21Mava has joined IRC (Mava!~Mava@ip-45-224.dhcp.opintanner.fi)
18:23knipwim_ has joined IRC (knipwim_!~wim@ip4da83870.direct-adsl.nl)
18:23dberkholz_ has joined IRC (dberkholz_!user25086@gentoo/developer/dberkholz)
18:23dberkholz has left IRC (dberkholz!user47699@gentoo/developer/dberkholz, Disconnected by services)
18:24dberkholz_ is now known as dberkholz
18:24vagrantc has joined IRC (vagrantc!~vagrant@75-150-46-245-Oregon.hfc.comcastbusiness.net)
18:26khildin has left IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be, Quit: I'm gone, bye bye)
18:27NeonLicht has left IRC (NeonLicht!~NeonLicht@darwin.ugr.es, *.net *.split)
18:27knipwim has left IRC (knipwim!~wim@ip4da83870.direct-adsl.nl, *.net *.split)
18:27map7 has left IRC (map7!~map7@teksup41.lnk.telstra.net, *.net *.split)
18:28knipwim_ is now known as knipwim
18:37xsl has left IRC (xsl!~silence@unaffiliated/xsl, Ping timeout: 244 seconds)
18:40xsl has joined IRC (xsl!~silence@unaffiliated/xsl)
18:42xsl has left IRC (xsl!~silence@unaffiliated/xsl, Client Quit)
18:42
<[GuS]>
knipwim: Hi!
18:43
I have a small doub... if i need to install a video card driver, must be in the chroot environment? (of LTSP)?
18:44ry has left IRC (ry!~ry@static-71-183-64-28.nycmny.fios.verizon.net, Ping timeout: 252 seconds)
18:46
<mmetzger>
[GuS]: For a client machine? Possibly, though you may also be able to do it via the Module options in the lts.conf file if the module is already present.
18:49
<[GuS]>
mmetzger: i know, but the driver should exist in the chroot?
18:50
Example, i have installed nouveau in the chroot and when i use XSERVER = nouveau does not work, it says that cannot find it
18:52
<mmetzger>
Is the module actually present?
18:58ry has joined IRC (ry!~ry@107.55.27.206)
19:03
<knipwim>
[GuS]: yes, the driver should be in the client chroot
19:04
<[GuS]>
knipwim: ok, i was not wrong then... i dont know why does not work
19:07
<knipwim>
[GuS]: you have it compiled in the client kernel?
19:07
<[GuS]>
knipwim: I think... is the nouveau driver.
19:07alkisg1 has joined IRC (alkisg1!~alkisg@ubuntu/member/alkisg)
19:08* [GuS] checking...
19:09alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Ping timeout: 260 seconds)
19:09alkisg1 is now known as alkisg
19:11
<stgraber>
alkisg, vagrantc: btw, I switched to freerdp-x11 instead of rdesktop as the default for 12.04's ltsp
19:11
<alkisg>
Sounds good
19:12
<stgraber>
I believe all of rdesktop's features are now in freerdp-x11
19:12
the dependency also allows for someone to replace it by rdesktop if needed
19:13
<vagrantc>
i.e. freerdp-x11 | rdesktop ?
19:14
i'll make the switch as well
19:15
<alkisg>
So, known ltsp/nbd problems for now: (1) dynamically generate upstart jobs for clean nbd disconnection on shutdown, (2) use nbd-server's conf.d, (3) check if we should delete more services, (4) optimize the ltsp-update-image/kernels configuration handling. Anything else?
19:16bengoa has left IRC (bengoa!~bengoa@2001:1291:229:2:216:cbff:feab:6cc9)
19:18
<alkisg>
I think we should completely remove the nbd port assignments, and ship an ltsp-update-kernels.conf with ltsp-client-core, which will contain the bootprompt options
19:18
<vagrantc>
oooh... and then people can edit it the way they're supposed to
19:19
and conffile updates, which not purty, are the right thing to do.
19:19
and upgrades, if they haven't changed anything, will just work.
19:19
alkisg++
19:23
alkisg: er, update-kernels.conf
19:24
ltsp-update-kernels.conf was the server-side part...
19:24xet7 has left IRC (xet7!~xet7@a91-156-244-142.elisa-laajakaista.fi, Quit: Lähdössä)
19:24
<vagrantc>
that whole infrastructure is a mess.
19:24
<alkisg>
vagrantc: yup... although it doesn't have to be called "update-kernels.conf", it can be called "kernel-options.conf"
19:24
<vagrantc>
should probably remove all the obscure architectures and rewrite it a bit.
19:24
alkisg: i just went with the convention of /etc/ltsp/NAME_OF_SCRIPT_USING_IT.conf
19:25
<alkisg>
Ah, ok, that's a good convention
19:26
It'd be nice to have an ltsp-common.conf as well, containing the ARCH... and ltsp-common-functions would source ltsp-common and $0.conf...
19:27
<vagrantc>
yes, it would be nice to move towards something with common configuration files...
19:27
<alkisg>
Btw just booted a fat client in 100mbps lan... loaded the kernel in 8 secs, finished init-ltsp.d in 16, reached ldm in 33, finished login in 1 minute.
19:27alexqwesa has left IRC (alexqwesa!~alex@alexo-veto.broker.freenet6.net, Quit: Хана X'ам !!!)
19:27
<alkisg>
The login needs the most work in precise, and I don't think we have control over that. Will try with nfs another day.
19:28
Ouch resolv conf seems still broken
19:32
Ah my bad, using ipappend 3...
19:33
If we don't have any dns server at all, is it ok if we fall back to the ltsp server?
19:35
<vagrantc>
as a nameserver?
19:37
<alkisg>
Yes, it's not very unusual to have a nameserver running in the ltsp server... i think ubuntu also uses dnsmasq as a caching dns server by default nowadays
19:38
Yes, with DNS_SERVER=xx in lts.conf it worked fine
19:46
<vagrantc>
i guess if there is no nameserver configured, it typically responds rather quickly
19:47
though it will generate needless traffic to the server in that case
19:47
not a lot, probably
19:59
<alkisg>
Hm or I could just check if the port is open before defaulting to that
20:00[GuS] has left IRC ([GuS]!~MysT@unaffiliated/gus/x-663402, Remote host closed the connection)
20:05toscalix has left IRC (toscalix!~toscalix@85.137.146.26.dyn.user.ono.com, Read error: Connection reset by peer)
20:12
<alkisg>
Heh, using NFS_HOME cut the login time in half. The sftp-server takes a lot of cpu time.
20:14* vagrantc has been experiencing problems with newer versions of sshfs only working if you have ownership of the dir
20:28Parker955_Away is now known as Parker955
20:30mikkel has left IRC (mikkel!~mikkel@80-71-132-15.u.parknet.dk, Quit: Leaving)
20:33
<alkisg>
vagrantc: would you really and absolutely object to ssh.c calculating the password hash for the current user and storing it to /etc/passwd, as a non-default lts.conf option?
20:34hughessd has left IRC (hughessd!~hughessd@173-164-117-109-Oregon.hfc.comcastbusiness.net, Quit: hughessd)
20:37ry has left IRC (ry!~ry@107.55.27.206, Ping timeout: 248 seconds)
20:37
<vagrantc>
alkisg: as a non-default option, i guess that's fine.
20:38
alkisg: it should get purged as soon as the user logs out, of course.
20:38
<alkisg>
vagrantc: yes, and, if possible, if it's been changed, the new hash to be transferred to the server :D
20:38
<vagrantc>
would certainly make fatclients/thinclients work better.
20:38
alkisg: that sounds like a dangerous game...
20:38
<alkisg>
(nah that'll need something with suid, it's not for the masses :D)
20:39
Well, a user can change his password
20:39
And we do have an ssh channel authenticated with the user account
20:39
<vagrantc>
sure... but transparently proxying that to the server, that's error prone
20:39
<alkisg>
The problem is that we don't have the new passoword, and that passwd doesn't accept a hash
20:39
<vagrantc>
exactly.
20:40
<alkisg>
So if passwd had a --accept-hash-from-stdin parameter, it would be much better than now, where fat client users have to login to the server to change their passwords
20:40
<vagrantc>
but i can see that it would improve fatclients greatly... it's one of the blockers for me to deploy fatclients is screensaver handling.
20:41
<alkisg>
I committed code to disable locking by default, but it's not a good solution
20:41
...and it's only for gnome
20:41
<vagrantc>
disabling it is not what i need, i need it to work
20:41
i mean, disabling it solves one problem
20:42
but not the functionality problem of needing a screen locker.
20:42
<alkisg>
Yeah... let's hope Scotty finishes his libpam_ssh implementation, so that we can switch to that + lightdm
20:42
<vagrantc>
at one hackfest a year...
20:42
<alkisg>
You can override the screen locker with remoteapps
20:42
/usr/local/bin/screensaver, which execs remoteapps "$@"
20:42
<vagrantc>
yeah, but then running a screen locker as a remote app is sub-optimal as well.
20:43
although as long as it's blank mode, not a big deal.
20:43
<alkisg>
so, remoteapps "blackscreensaver" , not "$@" :D
20:44
chpasswd can create a hash from stdin
20:44
I can call that from ssh.c, so that it uses the normal crypt functions for the system
20:45
<vagrantc>
but how do you catch all the ways it might get updated?
20:45
<alkisg>
Check if "STORE_HASH_TO_PASSWD=true", and save it to passwd on login
20:45
I don't care how it gets updated
20:45
<vagrantc>
sure.
20:45
<alkisg>
If I could, I would check on logout
20:45
But I can't transfer the hash without a suid program
20:46
It won't be difficult to write one, that only allows setting the password for the current user
20:46
In C, scripts can't be setuid
20:46
But all that is a quick and dirty solution to a problem that should be best be solved in another way
20:49
<Hyperbyte>
vagrantc! Hi!
20:49
I have a proposal! I made it earlier to alkisg, and he basically agrees it's a good idea, he just wants me to bug you about it.
20:49
<vagrantc>
hah
20:49
<alkisg>
Hahaha not with that wording though :P
20:49
<Hyperbyte>
A lot of people come in here, asking about LTSP and why it's performing slow
20:50
And we tell them to put LDM_DIRECTX=True in lts.conf
20:50
Which fixes that
20:50* vagrantc stares at toes
20:50
<Hyperbyte>
And even those who don't ask how to improve speed, we still advise to put that in lts.conf
20:50
So my proposal comes down to this
20:51
1. Rename LDM_DIRECTX to X_ENCRYPTION (which also reverses it's meaning, but does make it a lot more clear imvho)
20:51
2. Turn off encryption by default
20:51ry has joined IRC (ry!~ry@static-71-183-64-28.nycmny.fios.verizon.net)
20:52khildin has joined IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be)
20:52
<||cw>
but then you get the security whiners up in arms because it's plain text on the wire
20:53
<vagrantc>
Hyperbyte: no problem with 1, really.
20:53
Hyperbyte: i have a hard time with 2.
20:53
secure by default, disable if people think they need to.
20:53
<Hyperbyte>
||cw, well, of course we'd leave a note in lts.conf
20:54
; Enable X encryption for extra security if needed
20:54
X_ENCRYPTION=False
20:54
<vagrantc>
then we'd also have to set configuration compatibility variables...
20:54
<Hyperbyte>
Configuration compatibility variables?
20:54
<||cw>
but the whole point is that people aren't reading the lts.conf notes in the first place?
20:55
<alkisg>
We could have a package named "ltsp-server-fast-but-insecure" with all the defaults for people with hardware so old that are not even able to care about security :D
20:55
<vagrantc>
i.e. if LDM_DIRECTX=True ; then X_ENCRYPTION=False
20:55
<Hyperbyte>
||cw, well, I guess the real point is that probably 95% of the LTSP users run without encryption, and maybe 5% do it with
20:55
To me, it makes sense to choose the most common option as default.
20:56
Plus, I believe it greatly improves the "first impression" people get LTSP. My first impression was that it was painfully slow, until I found out about the encryption
20:56
*get +from+ LTSP
20:56
<alkisg>
And people that care about security usually do read the notes. The problem is that they whine a lot more than the other 95% :D
20:57
<Hyperbyte>
If you're into security, you're gonna find out about the inner-workings of LTSP, and you're gonna run into the encryption option.
20:57artista_frustrad has left IRC (artista_frustrad!~fernando@200.247.43.2, Quit: Leaving)
20:57
<alkisg>
Another idea is to have a debconf option about it, in a dialog
20:58
<||cw>
I guess if the notes/package descriptions say something "defaults assume a secure, private lan, read the docs if this is not your use case"
20:59* alkisg thinks that even if everybody here agreed, someone else would come in the future and complain about it
20:59
<Hyperbyte>
Well the point is: it's not about "someone else"
21:00
If you look at IRC logs, there's about 3 people on average each month who say LTSP is slow and get advised to turn off encryption, which makes them happy again.
21:01
<||cw>
well, you can't fix stupid.
21:01khildin has left IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be, Remote host closed the connection)
21:01
<Hyperbyte>
No, but we can adjust our default config to be the most desirable config for the average user. :)
21:02
<alkisg>
And yet another idea would be to automatically set LDM_DIRECTX=True for low-end hardware, and =False for newer hardware
21:03
...and of course if set in lts.conf, no autodetection would happen
21:03
If one has < 1 GHz cpu, I don't believe he'd ever want to run ltsp with ldm_directx=false, even if he was security-sensitive
21:04
<Hyperbyte>
I have a 4ghz six-core CPU in my server and I still feel the difference with LDM_DIRECTX=True - it 'fixed' YouTube for me. :)
21:05
<alkisg>
The detection would happen client-side
21:06
<vagrantc>
it would be nice if LDM could also select it on a per-session basis
21:07
i.e. guestlogins would probably be best without encryption, but logins on our username servers should.
21:07
dunno if others use multiple servers with guest servers and account servers...
21:07
but i do
21:07
<Hyperbyte>
:o!
21:07
<alkisg>
vagrantc: (unrelated) can't you do the bind-mounts from init-ltsp.d? I.e. even if you want to keep them, can't you still drop nfs-bottom/ltsp ?
21:08
<Hyperbyte>
Like... don't encrypt regular users, but encrypt administrators.
21:08
<vagrantc>
alkisg: probably could do them, it's just many of the init-ltsp.d assume writeability in places that are hard to do as bind mounts.
21:09
Hyperbyte: yes, dynamic selection of encryption vs. non-encryption
21:09
or even user's choice
21:09
at login time
21:09
<alkisg>
I understand, I'm just saying that nfs-bottom/ltsp isn't really needed anymore and can be removed, independed of bind-mounts
21:09
<vagrantc>
alkisg: yes, i wasn't shipping it in my recent packages.
21:10
<alkisg>
Ah ok, well I'll leave it up to you do delete it when you think it's appropriate
21:10
<vagrantc>
alkisg, stgraber: you think you're handling ubuntu uploads today or tomorrow?
21:11* alkisg just pushed his last change for today
21:11
<vagrantc>
alkisg: go ahead and kill of nfs-bottom/ltsp, i'd say. can always resurrect it if i really need.
21:11
<alkisg>
I can work on some more stuff tomorrow
21:11
I don't know when stgraber wants to upload, but if he could wait one more day it'd be in a better shape
21:12
<Hyperbyte>
So how about X_ENCRYPTION and X_ENCRYPTION_USERS ?
21:13
Where X_ENCRYPTION_USERS is optional, defaults to 'all'
21:15
<alkisg>
And yet another idea... at the "preferences" option of ldm, to have a check box about [x] Secure (but slow) connection
21:15
At least some of the users that don't read notes would notice then
21:16
<Hyperbyte>
:)
21:20khildin has joined IRC (khildin!~khildin@ip-80-236-212-203.dsl.scarlet.be)
21:21Steve_The_Pirate has joined IRC (Steve_The_Pirate!~Gary@cpc16-haye17-2-0-cust169.haye.cable.virginmedia.com)
21:21
<stgraber>
vagrantc: my deadline is Thursday 21:00 UTC, so I plan to upload as late as 20:59 UTC
21:24
<vagrantc>
hah. just had a face to face conversation with someone using LTSP at a local co-op grocery store :)
21:24
stgraber: heh.
21:46komunista has left IRC (komunista!~slavko@adsl-195-098-005-032.dynamic.nextra.sk, Quit: Leaving.)
21:50
<alkisg>
vagrantc, stgraber, should I move nbdswap from inetd to nbd-server too? With the "%s" (ip) command line option we can easily generate a swap file for each client, on the fly
21:51
...and we won't need another port either
21:51Steve_The_Pirate has left IRC (Steve_The_Pirate!~Gary@cpc16-haye17-2-0-cust169.haye.cable.virginmedia.com, Ping timeout: 272 seconds)
21:52
<vagrantc>
alkisg: does it handle cleanup on disconnect?
21:53
<alkisg>
vagrantc: postrun script
21:53
If specified, then it is assumed to be a command that will be ran when a client has disconnected. This can be useful to clean up
21:53
whatever prerun has set up, to log something, or similar.
21:53
If the literal string '%s' is present in the command, it will be replaced by the file name that has just been closed.
21:57brunolambert has left IRC (brunolambert!bruno@nat/revolutionlinux/x-fxxwlrioudvckwad, Quit: brunolambert)
21:57
<stgraber>
alkisg: sounds good
21:58
<alkisg>
Nice. I put some of the TODOs in http://pad.ubuntu.com/ltsp-server-precise, but they're getting too many to do them all tomorrow, if someone has time to help... :)
22:04
'night all
22:04alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.)
22:05freedomrun has joined IRC (freedomrun!~quassel@BSN-176-140-22.dial-up.dsl.siol.net)
22:08bengoa has joined IRC (bengoa!~bengoa@187-27-19-47.3g.claro.net.br)
22:11bengoa has left IRC (bengoa!~bengoa@187-27-19-47.3g.claro.net.br)
22:12bengoa has joined IRC (bengoa!~bengoa@187-27-19-47.3g.claro.net.br)
22:12bengoa has left IRC (bengoa!~bengoa@187-27-19-47.3g.claro.net.br)
23:05monteslu_ is now known as monteslu
23:08bengoa has joined IRC (bengoa!~bengoa@187-27-36-141.3g.claro.net.br)
23:08bengoa has joined IRC (bengoa!~bengoa@187-27-36-141.3g.claro.net.br)
23:08bengoa has left IRC (bengoa!~bengoa@187-27-36-141.3g.claro.net.br)
23:33darkpixel_ has left IRC (darkpixel_!~darkpixel@curetheitch/staff/darkpixel, Quit: Leaving.)
23:50freedomrun has left IRC (freedomrun!~quassel@BSN-176-140-22.dial-up.dsl.siol.net, Read error: Operation timed out)
23:58bengoa has joined IRC (bengoa!~bengoa@200.175.93.50.static.gvt.net.br)