[Bug 236510] Re: default apparmor setting prevents bind from running under chroot
for what it's worth, here is my /etc/apparmor.d/local/usr.sbin.named:
/var/bind9/chroot/etc/bind/** r,
/var/bind9/chroot/var/lib/bind/** rw,
/var/bind9/chroot/var/lib/bind/ rw,
/var/bind9/chroot/var/cache/bind/** rw,
/var/bind9/chroot/var/cache/bind/ rw,
/var/bind9/chroot/var/run/named/named.pid w,
/var/bind9/chroot/var/run/named/session.key w,
/var/bind9/chroot/dev/random r,
/var/bind9/chroot/dev/log w,
/var/bind9/chroot/dev/null rw,
# support for resolvconf
/{,var/,var/bind9/chroot/}run/named/named.options r,
/var/bind9/chroot/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libgost.so
rm,
No warantee at all, but it works for me (precise).
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/236510
Title:
default apparmor setting prevents bind from running under chroot
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/236510/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042711] [NEW] php: throw and catch within a destructor causes exception on-the-fly to be lost
Public bug reported:
See the attached test case. The Outer::runInner() throws a test
exception that is supposed to be catched in Outer::run(). However,
before this the destructor of Inner will run as a result of stack
unwinding while returning from Outer::runInner(). This, in turn, causes
the original exception to be lost because Inner::tearDown() throws an
exception which it later catches.
The test case is expected to output (tested official win32 builds 5.3.16
and 5.4.6):
$ php throw-test.php
Catched exception in Inner::tearDown(): test throw inside Inner::tearDown()
#0 /path/to/test.php(6): Inner-tearDown()
#1 /path/to/test.php(29): Inner-__destruct()
#2 /path/to/test.php(29): Outer-runInner()
#3 /path/to/test.php(45): Outer-run()
#4 {main}
OK: Catched exception in Outer::run(): test throw from Outer::runInner()
#0 /path/to/test.php(29): Outer-runInner()
#1 /path/to/test.php(45): Outer-run()
#2 {main}
The version distributed by ubuntu (PHP 5.3.2-1ubuntu4.17) outputs:
$ php throw-test.php
Catched exception in Inner::tearDown(): test throw inside Inner::tearDown()
#0 /home/mira/tmp/throw-test.php(6): Inner-tearDown()
#1 /home/mira/tmp/throw-test.php(29): Inner-__destruct()
#2 /home/mira/tmp/throw-test.php(29): Outer-runInner()
#3 /home/mira/tmp/throw-test.php(45): Outer-run()
#4 {main}
Notice the missing exception in Outer::run(). [Lines have been manually
wrapped for this bug report.]
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: php5-cli 5.3.2-1ubuntu4.17
ProcVersionSignature: Ubuntu 3.0.0-24.40~lucid1-generic 3.0.38
Uname: Linux 3.0.0-24-generic x86_64
Architecture: amd64
CheckboxSubmission: f0bf0101e3df07a87acfbc156f0db03d
CheckboxSystem: b5acb6c9ca4017b1d44043910f45329d
Date: Tue Aug 28 15:01:35 2012
InstallationMedia: Ubuntu 9.10 Karmic Koala - Release Candidate amd64
(20091020.3)
SourcePackage: php5
** Affects: php5 (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug lucid
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in Ubuntu.
https://bugs.launchpad.net/bugs/1042711
Title:
php: throw and catch within a destructor causes exception on-the-fly
to be lost
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1042711/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042711] Re: php: throw and catch within a destructor causes exception on-the-fly to be lost
** Attachment added: minimal test case https://bugs.launchpad.net/bugs/1042711/+attachment/3280442/+files/throw-test.php -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1042711 Title: php: throw and catch within a destructor causes exception on-the-fly to be lost To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1042711/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042275] Re: dnsmasq updating resolvconf when it's not configured to do DNS
The bug (in the network-manager package) is that /etc/dnsmasq.d/network- manager contains except-interface=lo despite the fact that network-manager was changed not to listen on lo's IP address (127.0.0.1) any more. Here's the changelog entry announcing this change. network-manager (0.9.6.0-0ubuntu4) quantal; urgency=low * debian/patches/dns-dnsmasq-interface-and-dbus-path.patch: set the address dnsmasq (and bind) plugins should listen on for DNS resolution to 127.0.1.1, as opposed to 127.0.0.1 to avoid conflicts with other instances that might need to run on the system with that address. [...] -- Mathieu Trudel-Lapierre mathieu...@ubuntu.com Tue, 21 Aug 2012 11:45:46 -0400 If the aforementioned line is commented out #except-interface=lo then name service works, with the standalone dnsmasq listening on 127.0.0.1 and forwarding to 127.0.1.1. @Submitter: please use this workaround for now. Assuming you want to use standalone dnsmasq, remember to set /etc/default/dnsmasq ENABLED back to 1. Earlier discussion of the issues at hand here: bug #959037. ** Package changed: dnsmasq (Ubuntu) = network-manager (Ubuntu) ** Summary changed: - dnsmasq updating resolvconf when it's not configured to do DNS + network-manager dnsmasq configuration snippet causes standalone dnsmasq not to listen on 127.0.0.1, breaking name service when dnsmasq is installed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/1042275 Title: network-manager dnsmasq configuration snippet causes standalone dnsmasq not to listen on 127.0.0.1, breaking name service when dnsmasq is installed To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1042275/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042711] Re: php: throw and catch within a destructor causes exception on-the-fly to be lost
It just occurred to me that the test case written a bit differently could be program logic guarding authenticated session. As a result, I'm marking this bug as security but keeping it still public because I'm not aware of real world PHP program suffering from a security issue because of this issue. ** This bug has been flagged as a security vulnerability ** Attachment added: Possible security problem caused by the bug https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1042711/+attachment/3280518/+files/throw-test.php -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1042711 Title: php: throw and catch within a destructor causes exception on-the-fly to be lost To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1042711/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-q-tomcat7] Promote Apache Tomcat 7 to main
Blueprint changed by James Page: Work items changed: Work items for quantal-alpha-3: [james-page] Update tomcat-server seed to use tomcat7: DONE [james-page] Review and update tomcat server test case: DONE [james-page] Raise MIR for tomcat7: DONE [james-page] Transition servlet2.5 dependencies in main to 3.0: DONE Work items for ubuntu-12.10-beta-1: - [james-page] Update packaging to use upstart: TODO + [james-page] Update packaging to use upstart: POSTPONED [james-page] Review upgrade path from tomcat6-tomcat7: POSTPONED [james-page] Request removal of tomcat6 from archive: POSTPONED Work items for ubuntu-12.10: [negronjl] Update tomcat(7) charm to accomodate changes during quantal dev cycle: DONE -- Promote Apache Tomcat 7 to main https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-tomcat7 -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-q-server-iso-tests-review] Improve Server Install and Upgrade Testing
Blueprint changed by James Page: Work items changed: Work items for quantal-alpha-1: [smoser] Call for testing of ISO images - Alpha 1: DONE Work items for quantal-alpha-2: [james-page] Call for testing of ISO images - Alpha 2: DONE Work items for quantal-alpha-3: Call for testing of ISO images - Alpha 3: DONE Work items for ubuntu-12.10-beta-1: + Call for testing of ISO images - Beta 1: TODO + + Work items for ubuntu-12.10-beta-2: [jibel] Add a profile to auto upgrade testing to support VM upgrade testing (nested VMs): TODO [serge-hallyn] Provide a test to check the status of the VM after upgrade (nested VM's): TODO [ivoks] Expand existing test cases to support different configuration options for mail-server: TODO [zulcss] Upgrade testing for openstack - work with jibel to setup new upgrade testing: TODO [james-page] Work out better more focussed upgrade testing for server tasks: TODO [james-page] Call for improvement of test cases and coordination with migration to new harness: TODO - Call for testing of ISO images - Beta 1: TODO - - Work items for ubuntu-12.10-beta-2: + [james-page] Review server seeds for gaps in testing of packages in main: TODO Call for testing of ISO images - Beta 2: TODO Work items for ubuntu-12.10: Improve MAAS test cases: TODO [james-page] Plug the iSCSI tests into UTAH: TODO Ensure UATH can support USB installation as well: TODO Ensure multi-nic testing can be supported: TODO Call for testing of ISO images - 12.10 RC: TODO -- Improve Server Install and Upgrade Testing https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-server-iso-tests-review -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042431] Re: lxc-start-ephemeral needs tweak to handle centos and fedora hostname setting
Thanks, Dan, for the bug report and the patch. ** Changed in: lxc (Ubuntu) Status: New = Triaged ** Changed in: lxc (Ubuntu) Importance: Undecided = Medium -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1042431 Title: lxc-start-ephemeral needs tweak to handle centos and fedora hostname setting To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1042431/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1040475] Re: maas depends on a broken version of python-tx-tftp
** Changed in: maas (Ubuntu) Status: New = Fix Released ** Changed in: maas (Ubuntu) Status: Fix Released = Invalid ** Also affects: python-tx-tftp (Ubuntu) Importance: Undecided Status: New ** Changed in: python-tx-tftp (Ubuntu) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to maas in Ubuntu. https://bugs.launchpad.net/bugs/1040475 Title: maas depends on a broken version of python-tx-tftp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1040475/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 997978] Re: KVM images lose connectivity with bridged network
@Metin, still no incidents? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bridge-utils in Ubuntu. https://bugs.launchpad.net/bugs/997978 Title: KVM images lose connectivity with bridged network To manage notifications about this bug go to: https://bugs.launchpad.net/nova/+bug/997978/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-q-juju-charm-unit-tests] Juju Charm Unit Tests
Blueprint changed by Mark Mims: Work items changed: Work items: documentation for unit tests: INPROGRESS - write examples of unit tests on flag-bearing charms: TODO + write examples of unit tests on flag-bearing charms: INPROGRESS [jimbaker] make 'jitsu run-tests' aware of error codes (Jitsu watch): INPROGRESS [jimbaker] improve charmtester logging information: DONE [hazmat] charm proof testing: TODO keep everything green: INPROGRESS [mark-mims] make charmtester easier to use one-off by anyone: INPROGRESS - [mark-mims] make charmtester whitelist: INPROGRESS - extend charm tools to help generate tests: TODO + [mark-mims] make charmtester whitelist: DONE + extend charm tools to help generate tests: POSTPONED run charmtester against maas environment: TODO -- Juju Charm Unit Tests https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-juju-charm-unit-tests -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-q-juju-integration] Juju Integration
Blueprint changed by Mark Mims: Work items changed: Work items: - [mark-mims] charm to deploy chef-server (maybe w sub like clint's puppet sub) : TODO - [mark-mims] charms that call chef solo recipes : TODO + [mark-mims] charm to deploy chef-server (maybe w sub like clint's puppet sub) : POSTPONED + [mark-mims] charms that call chef solo recipes : POSTPONED [negronjl] jujustrano ( Juju Capistrano integration ) : DONE - [negronjl] go to town on clint's puppet sub ( puppetforge? ) ( add charm create option for puppet recipes ) : TODO + [negronjl] go to town on clint's puppet sub ( puppetforge? ) ( add charm create option for puppet recipes ) : POSTPONED [negronjl] define ways that juju would need to call Capistrano : DONE [negronjl] jrapi as juju-jitsu subcommand... 'jitsu api' : POSTPONED [negronjl] integrate Juju with facter : DONE - [hazmat] export/import environment into juju-jitsu : TODO + [hazmat] export/import environment into juju-jitsu : DONE [negronjl] how to make charms out of puppetforge modules / github cookbooks : POSTPONED [negronjl] plugin for chef-search to interface with juju (possibly just chef sub) : POSTPONED [mike-mcclurg] cloudstack integration : TODO [imbrandon] investigate enstratus integration : TODO -- Juju Integration https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-juju-integration -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-q-juju-charm-unit-tests] Juju Charm Unit Tests
Blueprint changed by Mark Mims: Work items changed: Work items: documentation for unit tests: INPROGRESS write examples of unit tests on flag-bearing charms: INPROGRESS [jimbaker] make 'jitsu run-tests' aware of error codes (Jitsu watch): INPROGRESS [jimbaker] improve charmtester logging information: DONE - [hazmat] charm proof testing: TODO + [hazmat] charm proof testing: DONE keep everything green: INPROGRESS [mark-mims] make charmtester easier to use one-off by anyone: INPROGRESS [mark-mims] make charmtester whitelist: DONE extend charm tools to help generate tests: POSTPONED run charmtester against maas environment: TODO -- Juju Charm Unit Tests https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-juju-charm-unit-tests -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-q-maas-next-steps] MAAS Next Steps
Blueprint changed by Andres Rodriguez: Work items changed: Work items: [andreserl] MIR celery: DONE [andreserl] MIR libjs-yui3: DONE [andreserl] MIR libjs-raphael: DONE [andreserl] package python-tx-tftp: DONE Enable test-suite in packaging: TODO maas-enlist - do not die if MAAS is invalid (LP: #973414): TODO complete documentation and manpages (LP: #975454): TODO [andreserl] update libjs-yui to latest and drop them from trunk: DONE [andreserl] update libjs-raphael to latest and drop them from trunk: DONE [andreserl] IPMI support: DONE Support for other power management devices: TODO ARM support: TODO Use squashfs image for PXE installations (and ubuntu server CD install): TODO - Dropping/replacing cobbler (maas-provision): TODO + Dropping/replacing cobbler (maas-provision): DONE [smoser] package read-only root fs (ephemeral disk) initramfs tools (overlayroot): DONE -- MAAS Next Steps https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-maas-next-steps -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1017978] Re: [MIR] libfcgi, ceph (radosgw)
The other fly in the ointment for radosgw is that to actually use it you need to use apache2 with libapache2-mod-fastcgi (which is in multiverse). This configuration is not currently automated in the packaging (I picked this from the upstream docs) so the packages don't express this in their dependencies. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libfcgi in Ubuntu. https://bugs.launchpad.net/bugs/1017978 Title: [MIR] libfcgi, ceph (radosgw) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/1017978/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042431] Re: lxc-start-ephemeral needs tweak to handle centos and fedora hostname setting
For completeness, here's a cleaner copy of the patch, along with the centos script I'm using, from that same thread. I haven't actually deployed yet, but it passes my little unit test. ** Patch added: 0001-Add-Centos-support-to-lxc-create.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1042431/+attachment/3280828/+files/0001-Add-Centos-support-to-lxc-create.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1042431 Title: lxc-start-ephemeral needs tweak to handle centos and fedora hostname setting To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1042431/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042856] [NEW] libapache2-mod-auth-kerb using krb5passwd and keepalive and credential delegation loses delegation after first request on connection
Public bug reported:
This is a bug that was reported in
https://bugzilla.redhat.com/show_bug.cgi?id=687975; does it also affect
ubuntu? Reason I ask is that I seem to be able to reproduce it in 12.04.
Steps:
1. Need php5-ldap libapache2-mod-auth-kerb libsasl2-modules-ldap
2. Configure apache host to do kerberos, including having a keytab for apache.
3. Setup the apache virtual host site to use mod_auth_kerb:
Location /
Options FollowSymLinks
AuthType Kerberos
KrbAuthRealms DOMAIN.COM
KrbServiceName HTTP
Krb5Keytab /etc/apache2/krb5.keytab
KrbMethodNegotiate on
KrbMethodK5Passwd on
# The saveCredentials entry is important for php to get KRB5CCNAME
KrbSaveCredentials on
Require valid-user
/Location
4. create test.php (yes I am using php) file:
html
head
titlePHP Test/title
/head
body
h1PHP Kerberos Test/h1
?php
// LDAP parameters
echo user = {$_SERVER['PHP_AUTH_USER']}br/;
echo REMOTE_USER={$_SERVER['REMOTE_USER']}br/;
echo KRB5CCNAME={$_SERVER['KRB5CCNAME']}br/;
exit();
?
/body
/html
5. Connect to page. First time you log in you should see something like:
PHP Kerberos Test
user=raubvogel
REMOTE_USER=raubvo...@domain.com
KRB5CCNAME=FILE:/tmp/krb5cc_apache_0156Pt
6. Immediately reload page. You will now see
PHP Kerberos Test
user=raubvogel
REMOTE_USER=raubvo...@domain.com
KRB5CCNAME=
7. Wait 15 seconds and try again:
PHP Kerberos Test
user=raubvogel
REMOTE_USER=raubvo...@domain.com
KRB5CCNAME=FILE:/tmp/krb5cc_apache_Q3sMmK
Did I missconfigure anything?
** Affects: libapache-mod-auth-kerb (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libapache-mod-auth-kerb in Ubuntu.
https://bugs.launchpad.net/bugs/1042856
Title:
libapache2-mod-auth-kerb using krb5passwd and keepalive and credential
delegation loses delegation after first request on connection
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libapache-mod-auth-kerb/+bug/1042856/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1026402] Re: mon cluster (no cephx) fails to start unless empty keyring files are created
Fixed in 0.48.1 (uploaded yesterday to quantal) ** Changed in: ceph (Ubuntu Quantal) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ceph in Ubuntu. https://bugs.launchpad.net/bugs/1026402 Title: mon cluster (no cephx) fails to start unless empty keyring files are created To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/1026402/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-q-lxc] Lxc work for Q
Blueprint changed by Serge Hallyn: Work items changed: Work items: [stgraber] Review list of extra packages in lxc-ubuntu and have it contain the right list for each release: DONE [cooloney] check that all new cgroups are enabled in quantal kernel: DONE [serge-hallyn] pre-mount cgroups during container startup (using optional mount hook): DONE [serge-hallyn] send attach patch sets to kernel-team ASAP: DONE [serge-hallyn] convert lxc-apparmor patchset to generic lsm set: DONE [serge-hallyn] add smack support to lsm set: POSTPONED [serge-hallyn] add selinux support to lsm set: POSTPONED [kees] package libscecomp to aid bpf creation http://sourceforge.net/projects/libseccomp/: DONE [serge-hallyn] exploit libseccomp in lxc-start: DONE [serge-hallyn] come up with default seccomp containers profile (all syscalls - for x86-64, 0-300 and 1024-1079): DONE [apw] expect SECCOMP to drop in v3.5 replacing our patches (confirmed): DONE [ebiederm] fix lxc-attach upstream to use the new setns syntax: DONE [serge-hallyn] write a patch for lxc to use user namespaces: BLOCKED [ebiederm] patch adduser: TODO [ebiederm] get rest of v40 of userns patchset upstream: INPROGRESS [ebiederm] push userns patches to allow containers to mount, pivot_root, and rename nics: TODO [ebiederm] push remaining userns patches needed for simple containers: TODO [ebiederm] get setns(mnt) upstream: DONE [ebiederm] get setns(pid) upstream: TODO [serge-hallyn] extend lxc-attach to support attaching only to specific namespaces (done by community): DONE [stgraber] add the lxc-nesting apparmor profile to the package in quantal: DONE [serge-hallyn] send usernamespace patchset ASAP to kernel team (link to git repo for review): DONE [stgraber] write the hookpoints and send to the lxc-devel list for review: DONE [serge-hallyn] Post POC patchset implementing hookpoints to lxc-devel: DONE - [serge-hallyn] implement configuration file #includes (stretch goal): TODO - [serge-hallyn] example for encrypted root in the example guide (blocked awaiting hooks): TODO + [serge-hallyn] implement configuration file #includes (stretch goal): DONE + [serge-hallyn] example for encrypted root in the example guide: INPROGRESS [serge-hallyn] investigate post commit hook to email out changes: DONE [serge-hallyn] document mounts sharing through /shared using hooks: TODO [serge-hallyn] apport hook for lxc bugs: DONE [stgraber] where do crashes in the container go: TODO [james-page] hook testing up to jenkins: TODO [serge-hallyn] convert the test suite to jenkins: TODO [serge-hallyn] fedora 16 and 17 and open-suse templates need to be made to work (stretch goal): TODO [stgraber] make an liblxc API definition and publicise (+ serge-hallyn): DONE [stgraber] Create python module using the API: DONE [serge-hallyn] server guide 12.10 update for API: TODO [serge-hallyn] server guide 12.10 update for hooks: TODO [serge-hallyn] server guide 12.10 update using user namespaces: TODO [serge-hallyn] server guide 12.10 update apparmor changes: TODO [serge-hallyn] server guide 12.10 update for using seccomp: TODO -- Lxc work for Q https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-lxc -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-q-jenkins-cloud-builder] Jenkins Cloud Builder
Blueprint changed by Antonio Rosales: Whiteboard changed: Motivation: The current build system works beautifully for producing images for Amazon. However, as Amazon adds more regions and as we add more build targets, the process of building the images has morphed into more of workflow. By migrating the build system to Jenkins, we'll have the ability to track the different builds, integrate testing, and allow for official derivative images to built from a single source. https://wiki.ubuntu.com/BlueprintSpec needs integrated into whiteboard [a.rosales]. + + Release Notes: + need to add release note documentation -- Jenkins Cloud Builder https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-jenkins-cloud-builder -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 948156] Re: Please merge PHP 5.4 from Debian
Are there any updates on this request? What is the current status? Debian is shipping 5.4 for a while now without any problems. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/948156 Title: Please merge PHP 5.4 from Debian To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/948156/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042431] Re: lxc-start-ephemeral needs tweak to handle centos and fedora hostname setting
The attachment 0001-Add-Centos-support-to-lxc-create.patch of this bug report has been identified as being a patch. The ubuntu-reviewers team has been subscribed to the bug report so that they can review the patch. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-reviewers team please also unsubscribe the team from this bug report. [This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.] ** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1042431 Title: lxc-start-ephemeral needs tweak to handle centos and fedora hostname setting To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1042431/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042968] [NEW] Russian core sounds must be packaged
Public bug reported: Hi! Russian core sounds are now part of the official Asterisk. It should be in repo. http://downloads.asterisk.org/pub/telephony/sounds/ There is my ppa for asterisk-core-sounds-ru if it can help https://launchpad.net/~mystic-mirage/+archive/asterisk-core-sounds-ru ** Affects: asterisk (Ubuntu) Importance: Undecided Status: New ** Tags: asterisk core russian sounds -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to asterisk in Ubuntu. https://bugs.launchpad.net/bugs/1042968 Title: Russian core sounds must be packaged To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/asterisk/+bug/1042968/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1034701] Re: ImportError: Could not import settings 'openstack_dashboard.settings': missing dependency on python-glanceclient
Looks like python-glanceclient was added as a Dependency with the horizon (2012.2~f3-0ubuntu1) upload, along with the other required clients (swiftclient, quantumclient, etc). Marking as Fixed Released since its missing the bug ref. If this is still an issue please reopen. ** Changed in: horizon (Ubuntu Quantal) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to horizon in Ubuntu. https://bugs.launchpad.net/bugs/1034701 Title: ImportError: Could not import settings 'openstack_dashboard.settings': missing dependency on python-glanceclient To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1034701/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1017978] Re: [MIR] libfcgi, ceph (radosgw)
Note that while libapache2-mod-fastcgi is currently the better way to go, there's also libapache2-mod-fcgid, or nginx/lighttpd with fastcgi. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libfcgi in Ubuntu. https://bugs.launchpad.net/bugs/1017978 Title: [MIR] libfcgi, ceph (radosgw) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/1017978/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1043004] [NEW] --bindhome option should be on lxc-create, not on lxc-ubuntu
Public bug reported: The ubuntu template has a handy --bindhome option, but that's not very useful if you need to support multiple guest OS's. That option should be hoisted out of the template and into lxc-create itself. ** Affects: lxc (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1043004 Title: --bindhome option should be on lxc-create, not on lxc-ubuntu To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1043004/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1043010] [NEW] Update to 3.6.7
Public bug reported: = Release Notes for Samba 3.6.7 August 6, 2012 = This is is the latest stable release of Samba 3.6. Major enhancements in Samba 3.6.7 include: o Fix resolving our own Domain Local groups (bug #9052). o Fix migrating printers while upgrading from 3.5.x (bug #9026). Changes since 3.6.6: o Jeremy Allison j...@samba.org * BUG 8974: Fix kernel oplocks when uid(file) != uid(process). * BUG 8989: Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set. * BUG 9034: Fix typo in set_re_uid() call when USE_SETRESUID selected in configure. o David Binderman dcb...@hotmail.com * BUG 9062: rpcclient: Fix bad call to data_blob_const. o Günther Deschner g...@samba.org * BUG 9026: Fix migrating printers while upgrading from 3.5.x. o David Disseldorp dd...@samba.org * BUG 8719: Printing fails in function cups_job_submit. * BUG 9026: Fix migrating printers while upgrading from 3.5.x. o Olaf Flebbe o.fle...@science-computing.de * BUG 8552: Correct documentation of case sensitive. o Björn Jacke b...@sernet.de * BUG 8996: Fix build without ads support. o Volker Lendecke v...@samba.org * BUG 9003: Fix posix acl on gpfs. * BUG 9040: Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT. o Stefan Metzmacher me...@samba.org * BUG 9002: Don't turn negative cache entries into valid idmappings. * BUG 9022: Make vfs_gpfs less verbose in get/set_xattr functions. * BUG 9057: Fix bugs in SMB2 credit handling code. o Jiri Popelka jpope...@redhat.com * BUG 9055: Fix build against CUPS 1.6. o Jura Sasek jiri.sa...@oracle.com * BUG 9037: Fix 'net ads join' on T4 (sun4v) systems on Solaris 10. o Andreas Schneider a...@samba.org * BUG 9052: Fix resolving our own Domain Local groups. ** Affects: samba (Ubuntu) Importance: Wishlist Status: Triaged ** Tags: upgrade-software-version ** Changed in: samba (Ubuntu) Status: New = Triaged ** Changed in: samba (Ubuntu) Importance: Undecided = Wishlist -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/1043010 Title: Update to 3.6.7 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1043010/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1043018] [NEW] lxc-ls lists running containers multiple times
Public bug reported: This seems wrong: $ lxc-ls demo_centos5 demo_centos6 demofedora16 demo_ubuntu_1004 demo_ubuntu_1204 demo_ubuntu_1204-temp-NjwI1BQ ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 Lessee: lxc-ls does active=$(netstat -xa 2/dev/null | grep $lxcpath | \ sed -e 's#.*'$lxcpath/'\(.*\)/command#\1#'); which expands to ++ netstat -xa ++ grep /var/lib/lxc ++ sed -e 's#.*/var/lib/lxc/\(.*\)/command#\1#' + active='ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ubu12-bb-01-ubu12 ... netstat -xa | grep /var/lib/lxc shows $ netstat -xa | grep /var/lib/lxc unix 2 [ ACC ] STREAM LISTENING 1509155 @/var/lib/lxc/ubu12-bb-01-ubu12/command unix 2 [ ] STREAM CONNECTING0 @/var/lib/lxc/ubu12-bb-01-ubu12/command unix 2 [ ] STREAM CONNECTING0 @/var/lib/lxc/ubu12-bb-01-ubu12/command unix 3 [ ] STREAM CONNECTING0 @/var/lib/lxc/ubu12-bb-01-ubu12/command So, perhaps that should be grep LISTENING.*$lxcpath ? ** Affects: lxc (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1043018 Title: lxc-ls lists running containers multiple times To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1043018/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 966944] Re: proxy support not fully working
Hello Yoann, or anyone else affected, Accepted vm-builder into precise-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/vm- builder/0.12.4+bzr477-0ubuntu3 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please change the bug tag from verification-needed to verification-done. If it does not, change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Changed in: vm-builder (Ubuntu Precise) Status: In Progress = Fix Committed ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vm-builder in Ubuntu. https://bugs.launchpad.net/bugs/966944 Title: proxy support not fully working To manage notifications about this bug go to: https://bugs.launchpad.net/vmbuilder/+bug/966944/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1008225] Re: vmbuilder fails using tmpfs due to upstart restarting cron in the tmpfs
Hello Tokuko, or anyone else affected, Accepted vm-builder into precise-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/vm- builder/0.12.4+bzr477-0ubuntu3 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please change the bug tag from verification-needed to verification-done. If it does not, change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Changed in: vm-builder (Ubuntu Precise) Status: In Progress = Fix Committed ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vm-builder in Ubuntu. https://bugs.launchpad.net/bugs/1008225 Title: vmbuilder fails using tmpfs due to upstart restarting cron in the tmpfs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/1008225/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1008225] Re: vmbuilder fails using tmpfs due to upstart restarting cron in the tmpfs
** Branch linked: lp:~ubuntu-branches/ubuntu/precise/vm-builder/precise- proposed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vm-builder in Ubuntu. https://bugs.launchpad.net/bugs/1008225 Title: vmbuilder fails using tmpfs due to upstart restarting cron in the tmpfs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/1008225/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1043052] [NEW] [FFE] add pre-mount container startup hook
Public bug reported: It is possible to use an ecryptfs backing store for a container's rootfs. Advantages include the inability of unprivileged processes to see the container's file contents, and, if the host is a cloud instance, confidence that when disk space is recycled for a new instance, container data will be scrambled. To do this right, the container rootfs should be mounted in the container's namespace (so after clone(2)) and before its rootfs is mounted. That requires a new hook, 'pre-start'. This hook is trivial to add. The patch to add it will be attached to this bug for the release team's review. ** Affects: lxc (Ubuntu) Importance: Medium Status: New ** Changed in: lxc (Ubuntu) Importance: Undecided = Medium -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1043052 Title: [FFE] add pre-mount container startup hook To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1043052/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1043052] Re: [FFE] add pre-mount container startup hook
** Patch added: lxc-add-premount-hook.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1043052/+attachment/3281426/+files/lxc-add-premount-hook.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1043052 Title: [FFE] add pre-mount container startup hook To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1043052/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042864] Re: Failure to enlist due to preseed errors
I found the problem, the enlist_userdata template is missing from /usr/share/maas/preseeds/ ** Also affects: maas (Ubuntu) Importance: Undecided Status: New ** Changed in: maas Status: Incomplete = Invalid ** Branch linked: lp:~andreserl/maas/maas_missing_preseed_setuppy ** Changed in: maas Status: Invalid = In Progress -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to maas in Ubuntu. https://bugs.launchpad.net/bugs/1042864 Title: Failure to enlist due to preseed errors To manage notifications about this bug go to: https://bugs.launchpad.net/maas/+bug/1042864/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1018094] Re: failed with nslookup for www.google.com, others domain names are fine
[Expired for bind9 (Ubuntu) because there has been no activity for 60 days.] ** Changed in: bind9 (Ubuntu) Status: Incomplete = Expired -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/1018094 Title: failed with nslookup for www.google.com, others domain names are fine To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/1018094/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 914160] Re: [MIR] openvswitch
While not a condition of this MIR, IMHO it would be good to coordinate with Ben to see if what is happening for wheezy is good for 12.10. I'm not sure what I'm being asked here, can you be more explicit? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openvswitch in Ubuntu. https://bugs.launchpad.net/bugs/914160 Title: [MIR] openvswitch To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openvswitch/+bug/914160/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1042864] Re: Failure to enlist due to preseed errors
** Changed in: maas Status: In Progress = Fix Released ** Changed in: maas (Ubuntu) Status: New = Invalid -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to maas in Ubuntu. https://bugs.launchpad.net/bugs/1042864 Title: Failure to enlist due to preseed errors To manage notifications about this bug go to: https://bugs.launchpad.net/maas/+bug/1042864/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
