04:17 | * alkisg doesn't know when section_list appears... broken ltsp.conf? | |
04:27 | kjackal has joined IRC (kjackal!~quassel@athedsl-4546118.home.otenet.gr) | |
04:28 | <alkisg> meo: if you have that "section_list: not found" please ping me, I'd like to get to the bottom of this
| |
04:30 | Ah got it, when ltsp.conf doesn't exist... fixing...
| |
05:01 | statler has joined IRC (statler!~Georg@p54897245.dip0.t-ipconnect.de) | |
06:16 | <alkisg> !nbd
| |
06:16 | <ltsp> I do not know about 'nbd', but I do know about these similar topics: 'disable-nbd-proxy', 'nbd-proxy', 'nbd-compression', 'quick-nbd-tests', 'nbd-client', 'nbd-server-bug', 'nbd-trusty-bug', 'nbd-client-breaks-nm', 'nbd-bug', 'nbd-checkupdate'
| |
06:17 | <alkisg> !nbd-checkupdate
| |
06:17 | <ltsp> nbd-checkupdate: To avoid bug https://github.com/NetworkBlockDevice/nbd/issues/59, put this in lts.conf: INIT_COMMAND_RM_NBD_CHECKUPDATE="rm -rf /usr/share/ldm/rc.d/I01-nbd-checkupdate"
| |
07:01 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
07:21 | kjackal has left IRC (kjackal!~quassel@athedsl-4546118.home.otenet.gr, Remote host closed the connection) | |
07:24 | <meo> alkisg: do you know of any successful production use cases?
| |
07:24 | matusiak has joined IRC (matusiak!~matusiak@nat00.zb.lnet.pl) | |
07:29 | woernie has joined IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de) | |
07:53 | <alkisg> meo: for ltsp, see http://www.ltsp.org/stories/; e.g. we have 1000+ schools using it in greece;
| |
07:53 | woernie has left IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de, Remote host closed the connection) | |
07:53 | <alkisg> for ltsp19, I only put it to 6 schools so far; the rest will get the new ltsp next september with ubuntu 20.04
| |
07:54 | <meo> 6 is not a joke number
| |
07:54 | <alkisg> (eh, actually around 50 more will get it till xmas)
| |
07:54 | <meo> i'm going to test it in the call centers
| |
07:54 | I assume you get paid for this?
| |
07:56 | <alkisg> Mhmm, something like that; my primary job is to take care of ~50 schools in my prefecture; my secondary to take care of those 1000+ greek schools that have linux
| |
07:56 | So, I take better care of them if they only have 1 installation to maintain per school :)
| |
08:03 | kjackal has joined IRC (kjackal!~quassel@athedsl-4546118.home.otenet.gr) | |
08:03 | <meo> makes great sense :D
| |
08:04 | I should probably write an ansible provisioner for ltsp
| |
08:05 | <alkisg> Where would that help? The main idea of ltsp is to automate everything with `ltsp command` or ltsp.conf...
| |
08:06 | <meo> well the real benefit is replayable setup and integration with stuff I already do with ansible
| |
08:07 | say tomorrow the business wants to bring up a new call center
| |
08:07 | <alkisg> I don't know ansible, if you could give me a specific example it'd help me understand
| |
08:08 | <meo> so what I'd do (in an idealized case) is write a bit of ansible configuration for a new LTSP server
| |
08:08 | when I run the provisioner, ansible will create the VM, install an OS image on it, deploy my keys and baseline OS settings, then install and configure ltsp on it
| |
08:09 | backups profile will be configured on it and the bareos server i have
| |
08:09 | <alkisg> Ansible can create a VM and install an OS? Without the sysadmin having to take care of all debconf preseeding?
| |
08:09 | <meo> yeah, I usually dont bother with create vm/install OS part because it happens so infrequently i just clone a proxmox template or a hyperv prototype vm
| |
08:10 | ansible is basically a bunch of python scripts that read config files that say "on this machine do x and y"
| |
08:11 | <alkisg> Yeah I get that part but I've never managed to find a real use for it, where a simple (or ltsp) script wouldn't fit me better...
| |
08:11 | <meo> well, the real reason people use it is time saving and repeatability
| |
08:11 | for example i have dozens of webhosting machines in external data centers
| |
08:12 | i'm not going to manually write hundreds of apache vhost configurations
| |
08:12 | <alkisg> Maybe it's because I'm using scripts and deb packages and repositories to update everything... dunno
| |
08:12 | E.g. in that case I just run a postinst script and send a .deb update
| |
08:12 | <meo> with ltsp you'd have less advantage but I already have an ansible infrastructure in place
| |
08:13 | <alkisg> So it happens automatically when teachers update their systems, they don't have to run anything manually...
| |
08:13 | statler has left IRC (statler!~Georg@p54897245.dip0.t-ipconnect.de, Remote host closed the connection) | |
08:13 | <alkisg> Maybe I could use the ansible libraries for text file editing, they'd probably be a lot better than sed... but I don't think I want to learn ansible just for that little part
| |
08:13 | Anyway, thanks for the info :)
| |
08:14 | <meo> in fact ansible + debian packages will work great
| |
08:14 | you have your own repos and a blank machine
| |
08:14 | ansible will configure the repos on the machine, install your packages, add your keys, set whatever security policies etc
| |
08:15 | <alkisg> E.g. the instructions to install a school are: "install ubuntu; then run this wget command, which adds our repository and installs our master sch-scripts package, which takes care of everything"; i.e. just one wget command...
| |
08:15 | <meo> oh so you're not the SA for these boxes
| |
08:15 | in my case I am
| |
08:15 | <alkisg> What is "SA"?
| |
08:15 | <meo> system administrator
| |
08:16 | <alkisg> Each school has an IT teacher with no Linux knowledge
| |
08:16 | And I'm the "overseer sysadmin" or something
| |
08:16 | So I have to make sure that the instructions are so simple that any teacher can follow them
| |
08:16 | <meo> yeah makes sense
| |
08:22 | can you tell me a bit about the bash structure you came up with? is this something that's been done before?
| |
08:23 | <alkisg> There were many design decisions. Some I've seen before, some not
| |
08:23 | E.g. git, busybox etc all have a main program, and subcommands/applets
| |
08:24 | So I though the new ltsp would be better to follow that, instead of polluting the /bin namespace
| |
08:24 | I.e. ltsp image instead of ltsp-update-image
| |
08:24 | So I had to write a master script that sources the applets, not many scripts that source a library
| |
08:24 | I haven't seen that in other shell tools, but I've seen in in .c programs
| |
08:25 | The other part, about halting execution in any command that fails, and reporting the command... I haven't seen it in shell either; only in python exceptions etc
| |
08:26 | But after 10 years of shell programming in the old ltsp, I really needed something more efficient, and that new architecture does fit the bill
| |
08:26 | <meo> oh makes perfect sense, shell scripts arent easy to navigate
| |
08:27 | some parts of your code are essentially a framework
| |
08:27 | shored has left IRC (shored!~shored@87-92-122-167.bb.dnainternet.fi, Read error: Connection reset by peer) | |
08:27 | shored has joined IRC (shored!~shored@87-92-122-167.bb.dnainternet.fi) | |
08:27 | <alkisg> I'd really love it if posix could define some shell extensions, to be slowly followed by all shells...
| |
08:28 | E.g. `set -e` isn't well defined; they could define a new flag that does just that, halts execution and reports the command that failed
| |
08:28 | It would make debugging everything so much easier
| |
08:28 | <meo> this only tells me I need to brush up on my shell skills
| |
08:28 | <uumas> I'm using ansible to automatically create the vm, install os using debootstrap configure stuff like ldap, backups, nfs home, admin tools, user packages, ltsp ppa, install ltsp, epoptes, run ltsp scripts...
| |
08:29 | <alkisg> uumas, how much easier was it than just writing a shell script?
| |
08:29 | How much do the ansible libraries actually help in all these?
| |
08:30 | And how frequently do those libraries fail? E.g. is there a library for "add something to pam", and would it easily fail if my pam config was non-standard?
| |
08:30 | <uumas> It's more being able to just run the ansible playbook from any host in the network rather than having to use a shell script on the vm host, then run another one on the vm itself
| |
08:31 | Mostly just having all ansible stuff in a git repo which makes tracking changes easy
| |
08:31 | <alkisg> ...like just `chroot rootfs script`, only both via chroot and ssh?
| |
08:31 | Eh, my scripts are already in git repos ;)
| |
08:32 | * alkisg needs to browse through some ansible tutorials at some point though... | |
08:34 | <uumas> I can share the ansible roles I'm using if you'd like. They're definitely not the best though as I'm still learning ansible myself.
| |
08:35 | <alkisg> Sure, send me a small example if you wish, ty
| |
08:35 | Something about the ltsp-related things you mentioned
| |
08:36 | <uumas> Sure, might take a few hours to get to a pc
| |
08:37 | <alkisg> Np, ty
| |
08:42 | <meo> there are in fact public ansible roles for ltsp5
| |
09:02 | * alkisg tried to read the first google result for this, https://github.com/the-maldridge/ubuntu_ltsp, but ... it's just a different way to run apt install and ltsp-build-client :) | |
09:03 | <alkisg> Instead of just writing a small script, he wrote 4 files with declarative syntax...
| |
09:20 | statler has joined IRC (statler!~Georg@gwrz3.lohn24.de) | |
10:35 | <meo> alkisg: which really helps if you want to deploy 30 machines at the same time
| |
10:40 | <uumas> alkisg: Especially in your situation I'd think it's helpful to just be able to run a single command to for example update all the schools instantly
| |
10:43 | <alkisg> right click from epoptes => run command
| |
10:44 | No need to port forward so many schools for ssh
| |
10:44 | (school servers are epoptes clients)
| |
10:55 | shored has left IRC (shored!~shored@87-92-122-167.bb.dnainternet.fi, Read error: Connection reset by peer) | |
10:55 | shored has joined IRC (shored!~shored@87-92-122-167.bb.dnainternet.fi) | |
11:47 | Faith has joined IRC (Faith!~Paty_@2001:12d0:2080::231:49) | |
11:47 | Faith has joined IRC (Faith!~Paty_@unaffiliated/faith) | |
12:21 | section1 has joined IRC (section1!~section1@178.33.109.106) | |
13:38 | gp has joined IRC (gp!~gp@96.71.93.13) | |
13:40 | kjackal has left IRC (kjackal!~quassel@athedsl-4546118.home.otenet.gr, Remote host closed the connection) | |
13:43 | kjackal has joined IRC (kjackal!~quassel@2a02:587:3107:2e00:e987:af3f:69ef:3a49) | |
13:44 | <gp> So trying to figure out what went wrong yesterday to break my ltsp ipxe command. Here is my installation procedure. Anybody mind looking and seeing if anything jumps out to you as wrong? https://pastebin.com/drcCz8jS
| |
13:46 | <mwalters> gp: didn't fully catch up on what you had already covered, but... IIRC, you had issues w/ wget... does the machine have internet access?
| |
13:47 | <gp> mwalters: It does. The files were downloaded successfully (only judging by filesize), but after each file the command would exit with an error
| |
13:47 | But it wasn't clear to me what the problem was
| |
13:48 | The last time, the command said all files downloaded and gave a success response. But when I try to boot using this ltsp server I don't get past trying to download the pxe bootloader file on the client
| |
13:49 | <mwalters> You were getting that "section_list" error?
| |
13:49 | <gp> Yes
| |
13:49 | <mwalters> no
| |
13:49 | yes
| |
13:50 | lol, scrolled up in buffer
| |
13:50 | <gp> I will find the pastes if it would help?
| |
13:50 | <mwalters> alkisg: said "fixing..." some point last evening (EDT)
| |
13:50 | I have them, I'm just parsing through my irc buffer ;)
| |
13:50 | <gp> Oh I didn't get that
| |
13:50 | <mwalters> yeah, it was shortly after you left
| |
13:50 | ...a long time after you left... ;)
| |
13:51 | not sure what changed or what you need to do to get the fix. I'm sure someone will chime in if you stick around long enough
| |
13:51 | I'm still rocking ltsp5 for the forseeable future
| |
13:51 | <gp> mwalters: Sure thing. Thanks
| |
13:51 | <alkisg> gp, paste the errors, not your methodology
| |
13:52 | <gp> alkisg: ok
| |
13:57 | <alkisg> gp, run `sudo ltsp -o ipxe` and paste the output
| |
13:58 | Btw, pastebin.com is a really lame service, for pastes, use *any* other one :)
| |
13:58 | E.g. paste.debian.net is ok
| |
13:59 | The section_list warning wasn't harmful; I removed it today, but it doesn't matter
| |
13:59 | It just meant that you had no ltsp.conf at that time
| |
14:01 | gp: are you here? Should I wait for feedback? Planning to go afk in a bit..
| |
14:03 | <gp> alkisg: sorry
| |
14:04 | alkisg: the section_list warning was my problem. I do not have any better information yet. Going to do a rebuild soon and try again
| |
14:05 | <alkisg> gp: the section_list warning did not have any side effects ever
| |
14:05 | It couldn't cause any issues at all
| |
14:05 | <gp> alkisg: Hrm. ok. for some reason the script was fatally exiting. I had to run it many times to download the files
| |
14:05 | <alkisg> From what I saw from yesterday's pastes, your wget had issues and couldn't download
| |
14:06 | Which means internet connectivity issues
| |
14:06 | <gp> alkisg: that is what it said, but the files were existing on disk. the ls from the paste confirmed it
| |
14:06 | alkisg: my paste showed ping connectivity to 8.8.8.8 as well
| |
14:06 | <alkisg> When the files exist on disk, `ltsp ipxe` doesn't retry to download them
| |
14:06 | You might have had dns issues; I don't know what they were
| |
14:06 | But it was just wget failing
| |
14:07 | <gp> alkisg: i will try to reproduce from clean slate
| |
14:07 | <alkisg> ok
| |
14:08 | <gp> alkisg: should ic reate the lts.conf in advance to prevent the section_list warning?
| |
14:16 | <alkisg> gp: no, I fixed it, it won't display anymore
| |
14:16 | This warning is not important at all, ignore it completely
| |
14:43 | matusiak has left IRC (matusiak!~matusiak@nat00.zb.lnet.pl, Quit: Leaving) | |
14:57 | ltsp_user86 has joined IRC (ltsp_user86!b114982f@177.20.152.47) | |
15:05 | lucascastro has joined IRC (lucascastro!~lucascast@189.90.42.42.jupiter.com.br) | |
15:44 | <uumas> alkisg: Heh, what's wrong with pastebin
| |
15:45 | <mwalters> I suspect a lot of employers may block it... it's often used for data leaks and other "less than work friendly" things
| |
15:47 | <uumas> mwalters: I'd assume that wouldn't make it "lame" :D
| |
15:47 | <mwalters> lol!
| |
15:48 | it's where all the cool kids hangout... we're not cool enough to hang out with them
| |
15:48 | * mwalters pushes up glasses | |
16:00 | ltsp_user86 has left IRC (ltsp_user86!b114982f@177.20.152.47, Remote host closed the connection) | |
16:29 | gp has left IRC (gp!~gp@96.71.93.13, Ping timeout: 245 seconds) | |
16:30 | lucascastro has left IRC (lucascastro!~lucascast@189.90.42.42.jupiter.com.br, Ping timeout: 268 seconds) | |
17:09 | <alkisg> Heeey I'm Greek don't expect me to know what all these English words mean :P
| |
17:09 | kjackal has left IRC (kjackal!~quassel@2a02:587:3107:2e00:e987:af3f:69ef:3a49, Ping timeout: 252 seconds) | |
17:16 | <uumas> alkisg: So what is wrong with pastebin?
| |
17:17 | <mwalters> "It's all Greek to me"
| |
17:17 | Common us-en colloquialism
| |
18:00 | <alkisg> Too many ads, javascript, popups etc
| |
18:04 | <uumas> Ah, should probably use ad blockers less to notice that, heh
| |
18:05 | mze has joined IRC (mze!~mze@2001:16b8:5527:f900:907e:15a4:15f8:c429) | |
18:12 | mze has left IRC (mze!~mze@2001:16b8:5527:f900:907e:15a4:15f8:c429, Quit: Leaving) | |
18:20 | humbolt has joined IRC (humbolt!5b72b2ea@91-114-178-234.adsl.highway.telekom.at) | |
18:25 | statler has left IRC (statler!~Georg@gwrz3.lohn24.de, Remote host closed the connection) | |
18:36 | section1 has left IRC (section1!~section1@178.33.109.106, Quit: Leaving) | |
18:37 | <humbolt> Anybody online currently?
| |
18:41 | <uumas> Yes
| |
18:41 | !ask
| |
18:41 | <ltsp> ask: Don't ask to ask a question, simply ask it, and if someone knows the answer, they'll respond. Please hang around for at least a full hour after asking a question, as not everybody constantly monitors the channel.
| |
18:47 | humbolt has left IRC (humbolt!5b72b2ea@91-114-178-234.adsl.highway.telekom.at, Remote host closed the connection) | |
19:15 | kjackal has joined IRC (kjackal!~quassel@2a02:587:3107:2e00:e987:af3f:69ef:3a49) | |
19:15 | vagrantc has joined IRC (vagrantc!~vagrant@unaffiliated/vagrantc) | |
19:56 | gp has joined IRC (gp!~gp@96.71.93.13) | |
20:06 | gp has joined IRC (gp!~gp@96.71.93.13) | |
20:26 | <gp> @alkisg: I had the same trouble this time but was able to get a working boot by deleting the failed files until success. http://paste.debian.net/1103008/
| |
20:27 | perhaps the ipxe script should delete the file it failed on. Unless this is just a coincidence
| |
20:32 | Oddly, I use github all day long without connection errors. I am not sure why downloading the binaries is so unreliable on this system
| |
20:38 | Faith has left IRC (Faith!~Paty_@unaffiliated/faith, Quit: Leaving) | |
20:42 | <alkisg> gp: try wget https://github.com/ltsp/binaries/releases/latest/download/memtest.0, what's the output?
| |
20:43 | True, if half-downloaded files appear to be a frequent error with some users, it's worth it to delete or resume partial downloads
| |
20:43 | <gp> sure thing. one sec
| |
20:44 | <alkisg> Btw, to redownload the binaries, it's ltsp ipxe -b
| |
20:44 | ltsp -o ipxe is to regenerate ltsp.ipxe
| |
20:44 | <gp> also! newer uefi client boots along with legacy and i get a nice shiny ubuntu mate screen! so cool
| |
20:44 | <alkisg> At some point I also had ipv6 uefi going, but it wasn't mature enough to put it in the default installation :)
| |
20:45 | <gp> haha thats awesome =)
| |
20:46 | Here is the output: http://paste.debian.net/1103012/
| |
20:47 | as suspected
| |
20:47 | <alkisg> So you have a dns issues, you can't ping github-production-release-asset-2e65be.s3.amazonaws.com
| |
20:47 | Try: ping github-production-release-asset-2e65be.s3.amazonaws.com
| |
20:49 | <gp> That is my problem. Odd
| |
20:50 | <alkisg> Now try setting your dns to 8.8.8.8
| |
20:50 | <gp> Wonder how ltsp ipxe ended up downloading the files after a few attempts. Must be an intermittent problem here
| |
20:50 | <alkisg> If it solves the issues, your dns server is misbehaving
| |
20:52 | <gp> alkisg: appreciate the help narrowing that down
| |
20:52 | <alkisg> np
| |
21:14 | gp has left IRC (gp!~gp@96.71.93.13, Ping timeout: 245 seconds) | |
21:43 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
21:57 | kjackal has left IRC (kjackal!~quassel@2a02:587:3107:2e00:e987:af3f:69ef:3a49, Ping timeout: 246 seconds) | |
21:58 | kjackal has joined IRC (kjackal!~quassel@athedsl-4546118.home.otenet.gr) | |
23:15 | <uumas> alkisg: Sent you a direct message with a link to my ansible collection
| |
23:21 | One good thing about ansible when compared to shell scipts which I don't think got mentioned before is that it doesn't do anything if nothing needs to be done, ie. I can run the playbook again and again and nothing happens unless I change something.
| |