03:22 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Remote host closed the connection) | |
03:23 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
03:26 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 240 seconds) | |
03:57 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
04:08 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 240 seconds) | |
05:23 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
05:55 | cshubhamrao has joined IRC (cshubhamrao!75c666a3@gateway/web/freenode/ip.117.198.102.163) | |
05:57 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 264 seconds) | |
06:09 | vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving) | |
06:21 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
06:29 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 260 seconds) | |
06:37 | cshubhamrao has left IRC (cshubhamrao!75c666a3@gateway/web/freenode/ip.117.198.102.163, Quit: Page closed) | |
06:56 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
07:19 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
07:23 | Statler|Home has joined IRC (Statler|Home!~Georg@p5B30EB91.dip0.t-ipconnect.de) | |
07:51 | <alkisg> !sudo
| |
07:51 | <ltsp> I do not know about 'sudo', but I do know about these similar topics: 'sudoers', 'fat-sudo'
| |
07:51 | <alkisg> !sudoers
| |
07:51 | <ltsp> sudoers: Not recommented for security reasons: RCFILE_01="echo USER ALL=NOPASSWD: /path/to/program >> /etc/sudoers". USER and /path/to/program can also be ALL.
| |
07:51 | <alkisg> !fat-sudo
| |
07:51 | <ltsp> fat-sudo: to allow members of the sudo group to execute "sudo" in fat clients without a password prompt, put this in lts.conf: RCFILE_01="echo '%sudo ALL=NOPASSWD: ALL' >> /etc/sudoers"
| |
07:51 | <alkisg> !LDM_PASSWORD_HASH
| |
07:51 | <ltsp> LDM_PASSWORD_HASH: LDM_PASSWORD_HASH=True in lts.conf saves the password hash to /etc/shadow on login, so that the users can unlock the screensaver etc. If they happen to change their password though, that only takes effect until logout.
| |
07:52 | <alkisg> fiesh: so... you would start by setting this in lts.conf: LDM_PASSWORD_HASH=True
| |
07:52 | <fiesh> ah!
| |
07:52 | <alkisg> That would allow you to re-authenticate on the client, otherwise there's no password on the client and you can't reuse su or sudo or login
| |
07:52 | <fiesh> I see, ok that should probably do it
| |
07:52 | <alkisg> Then, if the user is in the wheel group, all should be fine
| |
07:53 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 240 seconds) | |
07:53 | <alkisg> If you want temporary sudo access only on the clients, there are the other 2 options that I pasted first, sudoers and fat-sudo
| |
07:53 | <fiesh> I'll go for perma sudo :)
| |
07:53 | <alkisg> :)
| |
07:54 | Ping if you need vnc/help
| |
07:54 | <fiesh> yes, thank you!
| |
07:55 | hmm still can't sudo
| |
07:55 | which means I can't figure out if /etc/shadow is correctly populated
| |
07:56 | so I'll go for the other option to see what gives..
| |
07:58 | ok that doesn't work either, wtf...
| |
07:58 | <alkisg> !vnc-edide
| |
07:58 | <ltsp> vnc-edide: To share your screen with me, open Epoptes → Help menu → Remote support → Host: srv1-dide.ioa.sch.gr, and click the Connect button
| |
07:58 | <alkisg> !vnc-dide
| |
07:58 | <ltsp> vnc-dide: To share your screen with me, run this: sudo apt-get --yes install x11vnc; x11vnc -connect srv1-dide.ioa.sch.gr - this is a reverse connection, it doesn't need port forwarding etc.
| |
07:58 | <alkisg> fiesh: give me root access to the client somehow
| |
07:58 | <fiesh> hmm ok, I'll have to go for ssh then I guess
| |
07:58 | hold on with the vnc then, I need to reboot it
| |
07:59 | ah no, virutalbox works, so I can do it there
| |
07:59 | but first need to enable ssh access I guess, have no root currnetly
| |
07:59 | <alkisg> fiesh: if you have vbox, SCREEN_02=shell; SCREEN_07=ldm will do
| |
07:59 | fiesh: eeh or we can just login as root in vt1 :D
| |
08:00 | <fiesh> ah
| |
08:00 | hah
| |
08:00 | <alkisg> Let's do that. Login as the user graphically, then switch to vt1 and login as root
| |
08:00 | <fiesh> hmmm
| |
08:00 | how do I switch to vt1 in vbox?
| |
08:00 | <alkisg> Right Ctrl + F1
| |
08:00 | <fiesh> without switching to vt1 for real
| |
08:01 | ah
| |
08:01 | <alkisg> OK RCFILE doesn't work there
| |
08:02 | Let's switch it to INIT_COMMAND_xxx instead
| |
08:02 | Go to your lts.conf
| |
08:02 | INIT_COMMAND_SUDOERS="echo '%sudo ALL=NOPASSWD: ALL' >> /etc/sudoers"
| |
08:02 | And do it like that ^
| |
08:02 | Waaait
| |
08:03 | lts.conf is in tftp
| |
08:03 | not in the chroot
| |
08:03 | <fiesh> yeah just realized ;)
| |
08:03 | <alkisg> Seems fine, reboot client
| |
08:03 | <fiesh> ok
| |
08:04 | <alkisg> RCFILE is getting deprecated anyway with systemd, so we'll probably remove it from ltsp completely anyway
| |
08:05 | <fiesh> hmm the line is present now, but it's not working, surprisingly
| |
08:07 | ok omg, hehe
| |
08:07 | <alkisg> fiesh: you have wheel in gentoo :)
| |
08:07 | We have "sudo" in Ubuntu :D
| |
08:07 | <fiesh> BSD style
| |
08:07 | <alkisg> Change lts.conf to match that
| |
08:07 | <fiesh> strangely though, why is shadow not popultaed?
| |
08:08 | but actually, it's fine
| |
08:08 | I mean root on the thin client isn't that powerful anyway
| |
08:09 | and then only wheel members, that's perfectly fine
| |
08:09 | maybe even better than mirroring shadow, who knows
| |
08:09 | so let's leave it at that!
| |
08:13 | alkisg: thank you!
| |
08:13 | <alkisg> fiesh: sorry, was on phone
| |
08:13 | <fiesh> no worries :)
| |
08:13 | all good
| |
08:13 | <alkisg> So the problem probably is that you don't have the newer ldm
| |
08:14 | which supports LDM_PASSWORD_HASH
| |
08:14 | <fiesh> ah I see
| |
08:14 | <alkisg> If you'll need it, ping me
| |
08:14 | <fiesh> it's fine like this, thank you!
| |
08:14 | <alkisg> It needs compilation, it's not a script, it's .c
| |
08:14 | Cool
| |
08:14 | OK!
| |
08:17 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
08:26 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 265 seconds) | |
08:43 | <fiesh> alkisg: ping again
| |
08:43 | alkisg: I have a question, I run ltsp-update-image, the current situation is:
| |
08:44 | <alkisg> Yup?
| |
08:44 | <fiesh> there are amd64.img and an identical amd64.img.old
| |
08:44 | it creates a different amd64.img.tmp
| |
08:44 | then says
| |
08:44 | mv: '/opt/ltsp/images/amd64.img' and '/opt/ltsp/images/amd64.img.old' are the same file
| |
08:44 | and doesn't update amd64.img but rather leaves it as is, and I end up with a new .tmp file
| |
08:44 | is this intended/
| |
08:44 | ?
| |
08:44 | am I doing something wrong?
| |
08:44 | wim1 has joined IRC (wim1!~Thunderbi@WEGC203033.UNI-GRAZ.AT) | |
08:45 | <fiesh> ahhhh... maybe it comes from your hard link is the fastest cp?
| |
08:45 | and the script does an mv ... && cmd-that-now-fails
| |
08:45 | heh I think that's the problem
| |
08:45 | hard link is not a good cp :)
| |
08:47 | <alkisg> Ouch :D
| |
08:47 | Let me test locally...
| |
08:48 | <fiesh> yeah cp --reflink is jsut better ;)
| |
08:48 | if only it worked with zfs
| |
08:49 | <alkisg> I would claim that this is a bug in mv
| |
08:49 | mv a b, where a is a hardlink of b, should just delete a...
| |
08:50 | I don't usually use hardlinks though, so no need to worry about it wrt ltsp code...
| |
08:50 | <fiesh> sounds reasonable, but that behavior is never going to be changed, hehe
| |
08:58 | Statler|Home has left IRC (Statler|Home!~Georg@p5B30EB91.dip0.t-ipconnect.de, Remote host closed the connection) | |
09:03 | coseus has joined IRC (coseus!567fae54@gateway/web/freenode/ip.86.127.174.84) | |
09:06 | <fiesh> alkisg: ok, so I do need /dev to be bind-mounted in order for gentoo's eselect to work correctly
| |
09:06 | alkisg: how can I add that so that it's automatically mounted when I do an ltsp-chroot?
| |
09:06 | alkisg: should probably go upstream, for gentoo support that is
| |
09:08 | (and I kind of suspect I added /sys for a similar reason back then)
| |
09:20 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
09:37 | Statler_Office has joined IRC (Statler_Office!~Georg@gwrz3.lohn24.de) | |
09:45 | <fiesh> !hosts
| |
09:45 | <ltsp> I do not know about 'hosts', but I do know about these similar topics: 'dhcp-hosts'
| |
09:45 | <fiesh> hmm
| |
09:45 | !/etc/hosts
| |
09:45 | <ltsp> Error: "/etc/hosts" is not a valid command.
| |
09:45 | <fiesh> nope
| |
09:46 | alkisg: how do I add entries to the client's /etc/hosts?
| |
09:49 | <alkisg> fiesh: ltsp-chroot -m does bind-mount /dev
| |
09:49 | It doesn't bind-mount /sys though; if you need it we should add it upstream
| |
09:49 | To add entries to the clients, use:
| |
09:50 | HOSTS_BLABLA="entry" in lts.conf
| |
09:53 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 276 seconds) | |
10:02 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
10:10 | Statler|Home has joined IRC (Statler|Home!~Georg@p5B30EB91.dip0.t-ipconnect.de) | |
10:11 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 264 seconds) | |
10:13 | zamba has joined IRC (zamba!marius@flage.org) | |
10:17 | <fiesh> alkisg: hmm, eselect just complainedf about not having /dev/pts/62 or so
| |
10:21 | Statler|Home has left IRC (Statler|Home!~Georg@p5B30EB91.dip0.t-ipconnect.de, Remote host closed the connection) | |
10:21 | <alkisg> fiesh: that is with ltsp-chroot -m, right? Can you see <chroot>/dev/pts bind-mounted if you run `cat /proc/mounts` on the server?
| |
10:26 | <fiesh> alkisg: you're right, sorry, I must mixed something up not seeing the mount
| |
10:40 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
10:59 | <fiesh> alkisg: ok, now I have the phenomenon again that it picks the wrong directory to create the image, like we had once, the thin client directory
| |
11:00 | alkisg: I'll get lunch really quickly, maybe we can look at it then
| |
11:23 | <alkisg> fiesh: you can use this to avoid it once and for all: ltsp-update-image amd64
| |
11:24 | fiesh: I'll also have a look at the code to see why it would be random... possibly find needs to be sorted or something first...
| |
11:25 | Hmm actually in the newest version of ltsp-update-image, if you don't pass a parameter, it updates all chroots
| |
11:26 | I'd need to look if you have the older version of it
| |
11:26 | We only updated the client ltsp, not the server part...
| |
11:38 | WhoIAm has joined IRC (WhoIAm!d557852d@gateway/web/freenode/ip.213.87.133.45) | |
11:41 | <WhoIAm> Hi everyone. Now i m stucked . My ltsp client connect with trunk port and i need to setup vlan from on trunk on client side . Now client can t boot due eth0 cannot obtain any address
| |
11:42 | I mean i need bring int vlan on client side while client boots
| |
11:42 | <alkisg> WhoIAm: I'm not sure what you're saying... are you saying that DHCP doesn't work with your VLAN?
| |
11:44 | ZAJDAN has joined IRC (ZAJDAN!4d30954b@gateway/web/freenode/ip.77.48.149.75) | |
11:46 | <WhoIAm> alkisg, here is my topology ltsp server with trunk port connected. On ltsp server i bring up inerface vlan 230 on this interface working dhcp server. My thin client (in my case it is old servers) connected to network via trunk too. I can t use access ports only trunk. In client bios i setup vlan tag and client boots up fine until eth0 should up at this point clien stops due it cant access to server
| |
11:48 | <alkisg> WhoIAm: do you get a busybox prompt, e.g. initramfs> ?
| |
11:48 | <ZAJDAN> Hi... needs LTSP for clients some opened ports? or I can close all in firewall?
| |
11:49 | <alkisg> If not, boot the client with some live usb stick, and run this, and paste the output: /usr/lib/klibc/bin/ipconfig -n enp0s3
| |
11:49 | ...where enp0s3 is your network card, you can see it with `ip a`.
| |
11:50 | <WhoIAm> alkisg, yes busy box appears after eth0 can t get ip address
| |
11:52 | <ZAJDAN> probably I found it: https://help.ubuntu.com/community/UbuntuLTSP/LTSPFirewall
| |
12:10 | WhoIAm has left IRC (WhoIAm!d557852d@gateway/web/freenode/ip.213.87.133.45, Quit: Page closed) | |
12:11 | <ZAJDAN> will be good put more details information also here which ports exactly are needs to be open: http://wiki.ltsp.org/wiki/Concepts#Firewall_.26_Port_Blocker
| |
12:21 | Statler_Office has left IRC (Statler_Office!~Georg@gwrz3.lohn24.de, Remote host closed the connection) | |
12:33 | Faith has joined IRC (Faith!~Paty_@unaffiliated/faith) | |
12:45 | lroca has joined IRC (lroca!~lroca@ool-18bfd59d.dyn.optonline.net) | |
12:51 | lroca has left IRC (lroca!~lroca@ool-18bfd59d.dyn.optonline.net, Quit: lroca) | |
13:00 | <fiesh> alkisg: I'm back in case you're here
| |
13:03 | lroca has joined IRC (lroca!~lroca@ool-18bfd59d.dyn.optonline.net) | |
13:07 | lroca is now known as roca | |
13:11 | <alkisg> fiesh: here, you?
| |
13:18 | <fiesh> yes, again
| |
13:18 | sorry, busy day ;)
| |
13:18 | can you ssh to here?
| |
13:18 | alkisg: "tmux -S /tmp/shared attach" again
| |
13:19 | alkisg: in case it works out
| |
13:27 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Remote host closed the connection) | |
13:27 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
13:32 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Ping timeout: 260 seconds) | |
13:33 | ben_roose has joined IRC (ben_roose!~roose@roose.cs.wichita.edu) | |
13:58 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
14:11 | <alkisg> fiesh: so, I think it's generating the image for both amd64 and amd64.head; but, it strips .* so both end up with the same name, amd64
| |
14:12 | And, depending on the inode or something other internal to "find" order, the last one is either the fat or the thin
| |
14:12 | fiesh: quick workaround: rename amd64.head to amd64-head
| |
14:15 | (along with the tftp dir and the pxelinux.cfg and nfs of course)
| |
14:24 | <ZAJDAN> alkisg: how it is with the ports please? is enough enable (67,69) ?
| |
14:41 | <fiesh> alkisg: ah, I'll give that a shot, thanks!
| |
14:46 | <alkisg> ZAJDAN: there are many ports involved, can't list them all here
| |
14:46 | Run netstat to see the server open ports etc
| |
14:47 | <ZAJDAN> alkisg: I thought that exist some official list of required ports for LTSP
| |
14:48 | <alkisg> ZAJDAN: you can edit the wiki if you want and write it
| |
14:48 | I don't think anyone bothers with documentation anymore :)
| |
14:50 | <ZAJDAN> on my machine: http://termbin.com/j44u
| |
15:05 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, Remote host closed the connection) | |
15:09 | VibesYuth has joined IRC (VibesYuth!~lfesdaill@static-108-41-107-210.nycmny.fios.verizon.net) | |
15:13 | wim1 has left IRC (wim1!~Thunderbi@WEGC203033.UNI-GRAZ.AT, Quit: wim1) | |
15:23 | wim1 has joined IRC (wim1!~Thunderbi@WEGC33.UNI-GRAZ.AT) | |
15:36 | lucascastro has joined IRC (lucascastro!~lucas@201.182.221.14) | |
15:37 | lucas_ has left IRC (lucas_!~lucas@201.182.221.14, Ping timeout: 248 seconds) | |
15:42 | gbaman has joined IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com) | |
16:31 | wim1 has left IRC (wim1!~Thunderbi@WEGC33.UNI-GRAZ.AT, Read error: Connection reset by peer) | |
16:36 | wim1 has joined IRC (wim1!~Thunderbi@WEGC33.UNI-GRAZ.AT) | |
16:41 | ZAJDAN has left IRC (ZAJDAN!4d30954b@gateway/web/freenode/ip.77.48.149.75, Quit: Page closed) | |
16:49 | wim1 has left IRC (wim1!~Thunderbi@WEGC33.UNI-GRAZ.AT, Quit: wim1) | |
17:01 | gbaman has left IRC (gbaman!~gbaman@host81-142-46-233.in-addr.btopenworld.com, ) | |
17:46 | kidar has joined IRC (kidar!~kidar@105.225.41.92) | |
17:53 | Statler_Office has joined IRC (Statler_Office!~Georg@gwrz3.lohn24.de) | |
18:18 | vagrantc has joined IRC (vagrantc!~vagrant@unaffiliated/vagrantc) | |
18:23 | lucascastro has left IRC (lucascastro!~lucas@201.182.221.14, Remote host closed the connection) | |
18:27 | adrianor1 has joined IRC (adrianor1!~adrianorg@177.18.174.183) | |
18:30 | adrianorg has left IRC (adrianorg!~adrianorg@177.134.56.14, Ping timeout: 260 seconds) | |
18:33 | adrianor1 is now known as adrianorg | |
18:41 | lucascastro has joined IRC (lucascastro!~lucas@200.141.207.18) | |
18:49 | vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Ping timeout: 276 seconds) | |
18:50 | roca has left IRC (roca!~lroca@ool-18bfd59d.dyn.optonline.net, Quit: roca) | |
19:24 | lucascastro has left IRC (lucascastro!~lucas@200.141.207.18, Remote host closed the connection) | |
20:10 | Statler_Office has left IRC (Statler_Office!~Georg@gwrz3.lohn24.de, Remote host closed the connection) | |
20:33 | Faith has left IRC (Faith!~Paty_@unaffiliated/faith, Quit: Leaving) | |
21:13 | JerryT has joined IRC (JerryT!~jerry@wsip-70-165-106-163.om.om.cox.net) | |
21:43 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
21:50 | lee has left IRC (lee!~lee@loathe.ms, Ping timeout: 260 seconds) | |
21:51 | lee has joined IRC (lee!~lee@loathe.ms) | |
22:03 | lucascastro has joined IRC (lucascastro!~lucas@201.182.221.14) | |
22:13 | ben_roose has left IRC (ben_roose!~roose@roose.cs.wichita.edu, Remote host closed the connection) | |
23:05 | lucascastro has left IRC (lucascastro!~lucas@201.182.221.14, Remote host closed the connection) | |
23:43 | mondeydiver has joined IRC (mondeydiver!~lfesdaill@static-108-41-107-210.nycmny.fios.verizon.net) | |
23:43 | VibesYuth has left IRC (VibesYuth!~lfesdaill@static-108-41-107-210.nycmny.fios.verizon.net, Ping timeout: 245 seconds) | |
23:45 | roca has joined IRC (roca!~roca@ool-18bfd59d.dyn.optonline.net) | |