01:11 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:21:21:0:100e, Quit: leaving) | |
03:04 | vagrantc has joined IRC (vagrantc!~vagrant@2600:3c01:e000:21:21:21:0:100e) | |
03:30 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:21:21:0:100e, Remote host closed the connection) | |
05:54 | MUHWALT has left IRC (MUHWALT!~ubox@user/muhwalt, *.net *.split) | |
05:55 | MUHWALT has joined IRC (MUHWALT!~ubox@204.111.162.43) | |
06:20 | <vsuojanen> alkisg: good morning, do you want to check the dnsmasq setup?
| |
06:21 | <alkisg> vsuojanen: good morning, sure, it's a nice time now. Remind me what the exact issue was..
| |
06:23 | <vsuojanen> did I understood your reply in https://github.com/ltsp/ltsp/discussions/609
| |
06:24 | <alkisg> OK so you want a better way to test images before putting them to production, right?
| |
06:24 | <vsuojanen> i configured dhcp-host and dhcp-ignore settings to both primary and secondary server
| |
06:24 | <alkisg> OK, vnc to me:
| |
06:24 | !vnc-edide
| |
06:24 | <ltspbot> vnc-edide: To share your screen with me, open Epoptes → Help menu → Remote support → Host: srv1-dide.ioa.sch.gr, and click the Connect button
| |
06:26 | <vsuojanen> can't connect sorry, I think I need to switch network and setup a client network
| |
06:28 | are you ok with delay 10 minutes?
| |
06:33 | <alkisg> I'll be here for 4 more hours. When I'm contacted by schools etc, I need to stop what I'm doing and take care of them first. So sure, I don't mind if it's 10 minutes or even later
| |
06:52 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
07:14 | <vsuojanen> alkisg: i have some dns problems currently. sorry
| |
07:58 | ok.
| |
07:58 | bad network
| |
08:01 | <alkisg> vsuojanen: OK, so, let's do a summary
| |
08:01 | Do you have multiple ltsp servers, or just one, and you want to have multiple images in this one?
| |
08:02 | <vsuojanen> yes. I'm currently starting the secondary
| |
08:03 | <alkisg> The second server is going to be attached in the 192.168.67.x network, or in the 10.x one?
| |
08:04 | <vsuojanen> oh I forgot. I need to use dhcproxy on the second one. I think
| |
08:05 | <alkisg> vsuojanen: so what is the answer to my question? In 192.x or in 10.x or even elsewhere?
| |
08:06 | <vsuojanen> I need to use the ltsp NAT setup in 192.168.67.1 for primary server
| |
08:07 | <alkisg> vsuojanen: please answer the question
| |
08:07 | <vsuojanen> and somehow setup the secondary server in same 192.x network
| |
08:07 | <alkisg> You think ahead, you answer different questions, and make things worse
| |
08:07 | OK
| |
08:07 | So, let's set it up in 192.168.67.2 then
| |
08:08 | <vsuojanen> will 'ltsp dnsmasq' ignore the 192.168.67.2 and setup dhcpproxy?
| |
08:08 | <alkisg> You don't want proxydhcp in this setup
| |
08:09 | Because you have a real dhcp server under your control, in 192.168.67.1
| |
08:09 | One way to set this up is:
| |
08:10 | You configure ltsp-server1=192.168.67.1, dhcp1=.20-.250, and tell it to ignore client1 mac
| |
08:10 | You configure ltsp-server2=192.168.67.2, dhcp2=.10-.15, and tell it to only answer to client1 mac
| |
08:11 | And, to set the gateway for client1 to 192.168.67.1
| |
08:11 | Finally, in ltsp.conf2 you set SSH_SERVER=192.168.67.1, so that the users log in in ltsp1, where your home is
| |
08:12 | <vsuojanen> thanks. how do I start the dnsmasq (ltsp dnsmasq) on the 192.168.67.2?
| |
08:12 | <alkisg> VNC to me from ltsp-server2
| |
08:13 | woernie has joined IRC (woernie!~werner@p5dded819.dip0.t-ipconnect.de) | |
08:27 | <alkisg> vsuojanen: what is the mac address of the test client?
| |
08:28 | <vsuojanen> ok.
| |
08:28 | <alkisg> Modify that line there, put the correct mac for a client
| |
08:29 | <vsuojanen> can you close the file? i have other window where I can copy
| |
08:29 | <alkisg> Sure, do what you want
| |
08:31 | <Hyperbyte> Hey alkisg, clients still use sshfs to mount their home dirs right? And I can still use sshfs_extramounts (or something of that nature), right?
| |
08:31 | Good morning by the way :-D
| |
08:34 | <alkisg> Hyperbyte: yes to home dirs, no to extramounts, good morning too
| |
08:35 | vsuojanen: try to boot a test client
| |
08:35 | vsuojanen: the second server can't access the internet; we'll need some additional stuff there to see the clients etc
| |
08:36 | <vsuojanen> no need to if we can see the dnsmasq works.
| |
08:37 | <alkisg> dnsmasq works, yeah; the next steps would be to send the proper gateway and SSH_SERVER to the clients
| |
08:39 | <vsuojanen> I can't see the other server1 ignore worked. it should log dhcp-ignored
| |
08:39 | <alkisg> Can you ping 192.168.67.1 from test-client1?
| |
08:40 | Or are they in completely different networks?
| |
08:40 | I didn't see the dhcp request at all. It should first receive the request, to reply with "ignored"
| |
08:40 | I think that you didn't describe your setup properly
| |
08:41 | I think you're using a second internal network, you're not using the same one
| |
08:43 | <vsuojanen> I described originally I have one local network with one primary ltsp server. There I added secondary ltsp server as per your answer in discussions
| |
08:43 | <alkisg> Your ltsp-server1 is connected to main-switch and to internal-switch1
| |
08:44 | Your ltsp-server2 is connected to internal-switch2, NOT to internal-switch1.
| |
08:44 | Did I understand correctly?
| |
08:44 | <vsuojanen> this setup has now 192.168.67.x
| |
08:46 | <alkisg> vsuojanen: please answer the question...
| |
08:46 | <vsuojanen> they should be in same switch
| |
08:46 | <alkisg> OK, and the previous question? "Can you ping 192.168.67.1 from test-client1?"
| |
08:47 | <vsuojanen> no it doesn't reach
| |
08:47 | <alkisg> Right, so they're not on the same switch
| |
08:47 | Sorry man it's too difficult to work with you, the information is too hard to retrieve. I'll have to pass... :)
| |
08:47 | Closing vnc...
| |
08:49 | <vsuojanen> ok. But did you mean that the dhcp-host and dhcp-ignore settings go on both dnsmasq servers?
| |
08:49 | <alkisg> The dhcp-hosts and dhcp-ignore go on both servers, and I've already configured them properly, you do not need to change them
| |
08:51 | <vsuojanen> that works then. thanks. I'm already using it in the actual network where I need it
| |
08:51 | <alkisg> You're welcome
| |
08:53 | <vsuojanen> I just wasn't sure about your answer and offered you a feedback. sorry about the network issues
| |
08:54 | <alkisg> You are probably using two different internal switches. In this case, both servers should have 192.168.67.1. We shouldn't have used 192.168.67.2 on the second server
| |
08:54 | But it's too chaotic to try to make sense :)
| |
08:55 | <vsuojanen> it's ok. I had setup the network for this vnc remote support on my laptop
| |
08:57 | i have different internal network where the vnc connection did not work
| |
08:58 | thing would have been simple in proper network
| |
09:00 | zelt1954[m] has left IRC (zelt1954[m]!~zelt1954m@2001:470:69fc:105::1:c34, Quit: You have been kicked for being idle) | |
09:16 | <vsuojanen> if it matters I failed to user Hyper-V internal network switch with the virtual lxc servers. that switch doesn't allow traffic from unknown mac (virtual to pass trough the switch).
| |
09:16 | <alkisg> See, I didn't even know that you were using hyper-v, so I recommended the wrong approach
| |
09:17 | Btw your latest notes on github aren't the ones I implemented for your dhcp-hosts
| |
09:17 | Check the contents of /etc/dnsmasq.d to see what I did
| |
09:19 | <vsuojanen> hmm. but I'm currently using them like that. what's wrong with them if you have and external dhcp and set two ltsp servers like that ?
| |
09:20 | <alkisg> Sorry I cannot comment because I would need to know your setup better first
| |
09:21 | Let's leave it at that. if it works now, you're fine.
| |
09:25 | <vsuojanen> you have one network 172.16.0.x, there is windows 2016 server dhcp server giving addresses to clients, and there is one ltsp-server1 172.16.0.1 providing netowrk boot. you want to replace that ltsp server and bring a second ltsp-server2 172.16.0.2
| |
09:25 | primary is ltsp-server1 and secondary is ltsp-server2
| |
09:26 | <alkisg> vsuojanen: it's OK, let's leave it at "it's working now"; I really lost my mood to understand your setup :)
| |
09:26 | <vsuojanen> then you configure the ltps-server1 to ignore tag:test-clients
| |
09:30 | I don't see a reason to understand more, there was just one local network
| |
12:45 | <Hyperbyte> mhmmm
| |
12:45 | alkisg, any alternatives to sshfs_extramounts? I'm trying to mount datadirs on clients from the server, but I'd like to avoid having to secure nfs with accounts/etc
| |
12:46 | Basically I have 3 NASes, plus local storage, plus an sshfs mount from an external source with user credentials that I don't want to pass to the clients. I was thinking I could bring these all together on the terminalserver in a central directory and then sshfs that entire folder with all mountpoints to the clients.
| |
12:46 | Maybe there's a smarter/better way?
| |
12:47 | (terminalserver = ltsp server)
| |
12:48 | <alkisg> Check the recent commits for remoteapps
| |
12:49 | You'll need a similar way for extramounts
| |
12:50 | <Hyperbyte> So this is something I have to hack myself, yes? :-)
| |
12:50 | <alkisg> Yes but it should be really easy now after remoteapps
| |
12:53 | <Hyperbyte> Oh, if I read this right you set up passwordless ssh during login?
| |
12:54 | If so, that's a real clever solution. :-)
| |
12:55 | <alkisg> Right, but not after login. It does it when you run a remoteapp for the first time
| |
12:55 | <Hyperbyte> That means the user has to enter their password once again, or?
| |
12:56 | <alkisg> No
| |
12:56 | <Hyperbyte> Hm
| |
12:56 | Okay, I'll dive into the code/documentation a bit more
| |
12:57 | Sounds like that's going to work nicely
| |
12:57 | <alkisg> Since sshfs is already mounted it can use CP instead of SSH-copy-ID
| |
12:57 | (typing from phone)
| |
12:57 | <Hyperbyte> Oh of course. Very clever!
| |
12:59 | I don't think I've said this before, but I commend you on the new LTSP version. It's worked fantastic in another location and I think it's going to work here as well. I think you've done a great job.
| |
12:59 | <alkisg> You can even run ltsp remoteapps true, so that it is installed, and then run sshfs yourmount and it will not ask for a password
| |
12:59 | 👍
| |
12:59 | Afk, back later
| |
13:58 | woernie has left IRC (woernie!~werner@p5dded819.dip0.t-ipconnect.de, Ping timeout: 260 seconds) | |
13:58 | woernie has joined IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de) | |
14:11 | danboid has joined IRC (danboid!~danboid@146.87.136.65) | |
14:11 | <danboid> FINALLY setting up the new LTSP server, 3 years later! :D
| |
14:12 | Is this the recommend way to configure a chroot
| |
14:12 | https://github.com/ltsp/ltsp/wiki/chroots
| |
14:34 | danboid has left IRC (danboid!~danboid@146.87.136.65, Quit: Client closed) | |
14:39 | danboid has joined IRC (danboid!~danboid@146.87.136.65) | |
14:45 | <danboid> Is it possible to run newer versionsof Ubuntu (or Debian) in a chroot than is running on the server?
| |
14:46 | I'm creating a focal chroot on a focal server initially but I'm just thinking ahead
| |
14:54 | It would seem that guideI linked to is officially blessed as its linked to in the main installation guide
| |
14:54 | Can I run a Debian chroot on a Ubuntu LTSP server?
| |
14:55 | or vice versa
| |
15:01 | alkisg:^^
| |
15:03 | <vsuojanen> danboid: last time i tested Debia chroot worked fine in Ubuntu server but it was few years ago
| |
15:10 | <alkisg> danboid: sure
| |
15:11 | <danboid> I don't think we will berunning any Debian chroots but it would be cool to be able to boot newer versions of Ubuntu
| |
15:17 | <alkisg> danboid: with the newer ltsp, you can even just add ubuntu-22.04.iso to /srv/ltsp/images/, while you're on a debian 16.04 server, and your clients will be booted with that in ltsp mode
| |
15:17 | I.e. not only it allows newer chroots; even isos can be used directly without uncompressing them
| |
15:24 | <danboid> I can't see me using iso boot with LTSP
| |
15:25 | <alkisg> I was just giving an example of how flexible it is :)
| |
15:25 | <danboid> I got several errors trying to install MATE in a chroot but maybe they don't matter?
| |
15:25 | https://paste.ubuntu.com/p/cRB5jNQCfs/
| |
15:26 | <alkisg> Sure, they do matter. It's why people stopped using chroots
| |
15:26 | You need to properly bind-mount dev, proc, sys, run and a lot of others to make things work
| |
15:26 | Also, you don't need gdm3 if you have mate
| |
15:26 | Let me suggest using a VM or a template installation instead...
| |
15:27 | <danboid> Ah, those extra mounts are missing from the chroots wiki guide
| |
15:28 | <alkisg> The chroot wiki specifically mentions to boot the chroot using qemu or a real client
| |
15:28 | To avoid all these issues
| |
15:28 | <danboid> Not sure what template installation is?
| |
15:29 | <alkisg> It means you install ubuntu mate in any pc, and then you copy the rootfs to the target server
| |
15:29 | So that you use the standard installation procedure, not an untested mate installation that started as a chroot
| |
15:30 | Note that ubuntu livecd builders use seeds, not debootstrap, so with a chroot you'll end up having a different file system (and packages) than anyone else using mate
| |
15:32 | <danboid> Doing a template install might be a bit easier but weshould update the chroots pagewith the full list of mount commands or recommend people do it anotherway
| |
15:34 | <alkisg> Feel free to maintain the chroots page, sure. I just put an initial version there for those that are unwilling to switch to VMs etc :)
| |
15:35 | <danboid> Updating a VM image sounds a bit messy (on a headless LTSP server) is it not?
| |
15:37 | <alkisg> No, it sounds fine
| |
15:37 | Afk, back in an hour
| |
15:56 | danboid has left IRC (danboid!~danboid@146.87.136.65, Quit: Client closed) | |
16:50 | woernie has left IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de, Ping timeout: 264 seconds) | |
16:51 | woernie has joined IRC (woernie!~werner@p5dded819.dip0.t-ipconnect.de) | |
17:34 | shored has joined IRC (shored!~shored@user/shored) | |
17:35 | shored1 has left IRC (shored1!~shored@user/shored, Ping timeout: 250 seconds) | |
18:04 | shored has left IRC (shored!~shored@user/shored, Ping timeout: 260 seconds) | |
20:20 | shored has joined IRC (shored!~shored@user/shored) | |
22:57 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
23:21 | lucascastro has joined IRC (lucascastro!~lucascast@177-185-130-132.dynamic.isotelco.net.br) | |