anddam 2017-03-02 07:45:09
now I purged nfs-kernel-server but 'apt autoremove' isn't listing those as not needed anymore
anddam 2017-03-02 07:45:26
how do I find non required package installed as dependencies?
ducasse 2017-03-02 07:48:32
anddam: try looking at the reverse depends for nfs-common, as that probably drags in the rest
aotaointbin 2017-03-02 07:48:39
so, regarding sudoers, how do i make NOPASSWD: CMD_ALIAS_1 + CMD_ALIAS_2
platz 2017-03-02 07:49:58
odd behavior from a usb3 expresscard for my laptop: if I plug in a usb 2 device, it works, but if I plug in a usb 3 device, the whole system gets a cascading lag effect until i unplug the expresscard - but no messages in dmesg otherwise.
platz 2017-03-02 07:50:15
strangely the same behavior happens when booting in windows.. so maybe a hardware issue?
scottjl 2017-03-02 07:50:24
atomekk: user ALL=(root) NOPASSWD /some/command, /some/other
aotaointbin 2017-03-02 07:50:26
so i'm looking at https://help.ubuntu.com/community/Sudoers and it doesn't address this specific case
platz 2017-03-02 07:50:27
on a t420 lenovo
aotaointbin 2017-03-02 07:50:32
ah, comma?
scottjl 2017-03-02 07:50:40
yes
scottjl 2017-03-02 07:50:44
sorry. tab completed wrong
scottjl 2017-03-02 07:50:53
oops. forgot my : too
scottjl 2017-03-02 07:51:02
user ALL=(root) NOPASSWD: /some/command, /some/other
ducasse 2017-03-02 07:51:23
platz: try ##hardware?
aotaointbin 2017-03-02 07:51:31
so, that's for commands, but not necessarily for Cmnd_Alias i think
scottjl 2017-03-02 07:51:35
man sudoers has lots of info
aotaointbin 2017-03-02 07:51:37
i mean, the syntax checks out, but it doesn't work :P
platz 2017-03-02 07:51:39
is there some other place i can look for log messages that would explain hard lags that wouldn't show up in dmesg?
aotaointbin 2017-03-02 07:51:49
yea, man sudoers is a bit... complicated :P
aotaointbin 2017-03-02 07:52:03
and i'm familiar with EBNF grammars, though very very rusty.
Welastevil 2017-03-02 07:52:19
it says that some drivers are missing
rymax99 2017-03-02 07:52:47
My general rule is I don't give anyone access to sudo unless I fully trust them to have root-level access on the boxc
scottjl 2017-03-02 07:53:02
ohh misunderstood. two alises on the same line. hmm. if , doesn't work. then just do two separate lines.
BluesKaj 2017-03-02 07:53:33
command aliases belong in bash_aliases
rymax99 2017-03-02 07:53:44
^
BluesKaj 2017-03-02 07:53:44
er .bash_aliases
aotaointbin 2017-03-02 07:53:44
oh. two lines won't just have one overwrite the previous?
scottjl 2017-03-02 07:53:44
no
scottjl 2017-03-02 07:53:44
sudoer's takes the first line that matches and stops. if it falls thru line 1 it will go to 2
akik 2017-03-02 07:53:54
aotaointbin: there's a complex example at the end of "man sudoers"
aotaointbin 2017-03-02 07:54:13
oh yay.
aotaointbin 2017-03-02 07:54:16
i think that works.
aotaointbin 2017-03-02 07:54:23
i can sudo sudo -u now, at least :P
aotaointbin 2017-03-02 07:54:30
but wait...
scottjl 2017-03-02 07:54:35
yeah. just something to keep in mind. the first line that matches wins. so if what you think isn't working, look above!
qwr 2017-03-02 07:54:50
join #bountysource
aotaointbin 2017-03-02 07:55:25
yea that didn't help, actually. nevermind. i'm being stupid, i think.
aotaointbin 2017-03-02 07:55:59
so, i think i was asking the wrong question.
jason_- 2017-03-02 07:56:40
hello I'm stuck in a login loop. I'm pretty sure it's related to graphics drivers/opengl/etc. Please halp. I've tried purging all drivers, reinstalling xorg everything, glx, etc.
anddam 2017-03-02 07:56:49
ducasse: that's what I did, in fact but why didn't the removal of nfs-kernel-server triggered the autoremove of nfs-common?
aotaointbin 2017-03-02 07:56:55
i have passwordless sudo for all commands, but when i sudo -u something, i get prompted.
aotaointbin 2017-03-02 07:57:13
how can i make sudo -u not prompt? :P
scottjl 2017-03-02 07:57:34
aotaointbin: user ALL=(ALL) NOPASSWD: ALL
scottjl 2017-03-02 07:57:58
but make sure that line is before some other match for "user" in the file.
aotaointbin 2017-03-02 07:58:32
it is, and it still prompts :\
ducasse 2017-03-02 07:58:32
anddam: i told you, look at the reverse depends. something that was already installed wants it.
scottjl 2017-03-02 07:59:02
aotaointbin: log out and back in
aotaointbin 2017-03-02 07:59:27
i just did, still prompting.
scottjl 2017-03-02 07:59:53
check your file for any other reference to user. comment it out
BluesKaj 2017-03-02 07:59:55
ao reboot
BluesKaj 2017-03-02 07:59:59
aotaointbin,^
scottjl 2017-03-02 08:00:25
aotaointbin: is this the box that you "security guy" borked up on you? hah. forget it.
aotaointbin 2017-03-02 08:00:31
no other references by user (there's still a group reference further down, but it's also ALL=(ALL) ALL
BluesKaj 2017-03-02 08:00:44
aotaointbin, reboot , logout/in doesn't cut it for sudo afaik
aotaointbin 2017-03-02 08:00:44
scottjl: yea. he's insisting on keeping www-data deleted :P
aotaointbin 2017-03-02 08:00:53
BluesKaj: will try that now.
scottjl 2017-03-02 08:00:55
wtf? why?
aotaointbin 2017-03-02 08:01:21
though, admittedly, reboot in the middle of an ansible task will be :(
scottjl 2017-03-02 08:01:23
i won't expect anything on that box to work like it should.
akik 2017-03-02 08:01:36
aotaointbin: this is from man sudoers: When multiple entries match for a user, they are applied in order. Where there are multiple matches, the last
aotaointbin 2017-03-02 08:01:39
rebooting didn't help.
akik 2017-03-02 08:01:39
match is used (which is not necessarily the most specific match)
aotaointbin 2017-03-02 08:01:50
akik: ah...
aotaointbin 2017-03-02 08:02:05
let me check /etc/sudoers.d then.
aotaointbin 2017-03-02 08:02:21
nothing there..
aotaointbin 2017-03-02 08:03:21
so, the last match _should_ be %sudo ALL=NOPASSWD: ALL
aotaointbin 2017-03-02 08:03:37
unless that doesn't match sudo -u usage
aotaointbin 2017-03-02 08:03:48
in which case it'd be %sudo ALL=(ALL:ALL) ALL
scottjl 2017-03-02 08:03:50
%sudo would refer to a group named sudo
aotaointbin 2017-03-02 08:03:58
right, and user is in group sudo
scottjl 2017-03-02 08:04:08
ok
BluesKaj 2017-03-02 08:04:36
aotaointbin,, did you do, sudo visudo for, user ALL=NOPASSWD: ALL
aotaointbin 2017-03-02 08:05:18
okay, yea, that's it. it's the sudo group.
BluesKaj 2017-03-02 08:05:19
don't use the sudoers file directly
aotaointbin 2017-03-02 08:05:37
i put 'user ALL=(ALL) NOPASSWD: ALL' at the end (after the sudo group lines) and that did it.
BluesKaj 2017-03-02 08:06:16
usually it should be a the 2nd last line
aotaointbin 2017-03-02 08:09:13
i think i found a workaround to mucking with sudoers.
aotaointbin 2017-03-02 08:09:21
i'll just sudo sudo -u instead of just sudo -u
aotaointbin 2017-03-02 08:09:46
root isn't in group sudo :P
scottjl 2017-03-02 08:09:49
i don't envy you having to use this guy's systems. lol
aotaointbin 2017-03-02 08:10:16
at least he provided me with his provisioning scripts so that i know what's broken.
scottjl 2017-03-02 08:10:36
fix the script and give it back to him
aotaointbin 2017-03-02 08:10:56
one man's fix is another man's security hole.
scottjl 2017-03-02 08:11:12
removing www-data isn't fixing a hole. lol.
Nobabs27 2017-03-02 08:11:13
PCG-41218L (Sony Vaio) driver support? IE switching in between GPUs
aotaointbin 2017-03-02 08:11:44
i can basically imagine that conversation, though. "there shouldn't be any user accounts that aren't necessary. period."
scottjl 2017-03-02 08:12:32
but you're adding it back because you need it, right?
aotaointbin 2017-03-02 08:12:53
yup. and he'll say "good. if you install apache, you should create www-data, but not a minute before."
aotaointbin 2017-03-02 08:13:13
oh yay. so i got this part working. now i have to figure out what kind of firewall lockdown he implemented.
Nobabs27 2017-03-02 08:13:13
I guess im asking would that work or is basically not a thing a in Linux rn because Sony?
scottjl 2017-03-02 08:13:24
iptables --list
scottjl 2017-03-02 08:13:45
i'd say he's old school, but he sounds more like assh...
aotaointbin 2017-03-02 08:13:59
$ sudo iptables --list | wc -l
aotaointbin 2017-03-02 08:14:00
173
scottjl 2017-03-02 08:14:04
gak
scottjl 2017-03-02 08:14:47
iptables --flush
scottjl 2017-03-02 08:14:54
if he doesn't have any users, and he uninstalled all services, what does he need 173 rules for???
scottjl 2017-03-02 08:15:21
to block logins for non-existing users to non-existing services?
arooni 2017-03-02 08:17:22
how do i set up xbindkeysrc ; so that it works with a key combination; not just a single key?
meec 2017-03-02 08:18:32
arooni, did you check autokey? it might help you
anddam 2017-03-02 08:18:58
ducasse: ok, but then why wasn't nfs-common installed in first place? it got installed as dependency when I installed nfs-kernel-server
anddam 2017-03-02 08:19:24
ducasse: that's also a cryptic way to say I don't know how to look for dependencies/reverse dependencies
p0llock 2017-03-02 08:19:41
hello, can anyone help me with a bad sd card? fdisk does not find it
nacc 2017-03-02 08:19:42
anddam: reverse-depends or apt-cache rdepends
Apachez 2017-03-02 08:20:19
when did "Trashcan" change name to "Rubbish bin" in ubuntu ?
Nobabs27 2017-03-02 08:20:46
You switched to British English?
Nobabs27 2017-03-02 08:20:48
xD
ducasse 2017-03-02 08:21:00
anddam: because it might for instance be a suggestion instead of a hard depend. a regular install of that package wouldn't drag in nfs-common, but it won't be automatically removed if installed later as it fills the suggestion.
anddam 2017-03-02 08:22:04
anyway, I see systemd status for nfs-kernel-server is Active: active (exited) since gio 2017-03-02 20:17:42 CET; 1s ago
anddam 2017-03-02 08:22:55
is it normal for it to be (exited)? I ask as this is a kernel server so maybe the unit is only used as controller or so and the process is supposed to not stay around
anddam 2017-03-02 08:23:29
ducasse: that's a good explanation, thanks
ducasse 2017-03-02 08:24:29
arooni: 'xbindkeys -d' will print a default rc file with examples
ducasse 2017-03-02 08:27:07
anddam: does it say 'status=0/SUCCESS' after main pid?
anddam 2017-03-02 08:31:07
ducasse: all 0, I assume the lowest PID is the main one
anddam 2017-03-02 08:31:21
no my bad, it's written right there
anddam 2017-03-02 08:31:29
still 0 but it's clearly shown which one is the main
ducasse 2017-03-02 08:32:02
anddam: ok, then you're good
anddam 2017-03-02 08:33:11
what would be a proper point to mount a NFS share at?
anddam 2017-03-02 08:33:13
I mean in hier
nicman23 2017-03-02 08:33:44
hello, i uploaded a new source package in launchpad (2 second today - the first is built) and i got no mail since 4 hours ago.... what gives?
nacc 2017-03-02 08:34:18
nicman23: probably better in #ubuntu-devel; but what package?
nicman23 2017-03-02 08:34:29
sway the tilling wm for wayland
nicman23 2017-03-02 08:34:45
the libs were built (wlc - the other package)
aotaointbin 2017-03-02 08:34:58
anddam: probably under /srv ?
nicman23 2017-03-02 08:35:06
anyways heading to the dev channel
aotaointbin 2017-03-02 08:35:15
depends what it's used for, really.
anddam 2017-03-02 08:35:48
aotaointbin: but I'm not going to serve anything from it
nicman23 2017-03-02 08:35:55
@aotaointbin mostly ftp / http / whatever other server files
ducasse 2017-03-02 08:36:10
anddam: tbh i couldn't care less, i use descriptive mountpoints like /backups, /storage etc as that is easy to remember
aotaointbin 2017-03-02 08:36:10
anddam: /srv is not for data that's being served. please see fhs for more information.
aotaointbin 2017-03-02 08:36:31
nicman23: sorry, was responding to anddam
anddam 2017-03-02 08:36:36
in fact I'm mounting a backup share
ducasse 2017-03-02 08:36:44
anddam: /exports used to be used often
aotaointbin 2017-03-02 08:36:51
/srv/backup seems reasonable.
aotaointbin 2017-03-02 08:37:02
but /exports isn't in fhs.
ducasse 2017-03-02 08:37:35
who cares?
nacc 2017-03-02 08:37:40
ducasse: :)
anddam 2017-03-02 08:37:58
aotaointbin: description for /src on wikipedia says exactly "Site-specific data served by this system"
anddam 2017-03-02 08:38:08
ducasse: I understand the hier-police won't come after me
aotaointbin 2017-03-02 08:38:10
indeed, and that's the verbiage from fhs also.
nacc 2017-03-02 08:38:17
yes, this whole exercise for aotaointbin has seemed rather pedantic -- from not wanting a www-user (even if someone else's requirement) to strictly following fhs
anddam 2017-03-02 08:38:26
ducasse: that was just out of curiosity, since I'm at it
aotaointbin 2017-03-02 08:38:30
that being said, /srv is typically where fhs-minded admins put their nfs shares.
anddam 2017-03-02 08:38:33
btw mounting nfs is a breeze
genii 2017-03-02 08:38:34
anddam: According to FHS, shareable variable data should be under /var. So something like /var/nfsmountname
anddam 2017-03-02 08:38:53
waaay better then setting up samba
ducasse 2017-03-02 08:39:01
anddam: they've probably got better wars to fight :)
aotaointbin 2017-03-02 08:39:17
and /var is fine too. fhs doesn't really define where nfs mounts should go explicitly.
anddam 2017-03-02 08:39:18
I was advised the other day to use NFS over samba since I was going to use linux/macos clients only
anddam 2017-03-02 08:39:32
in fact /var was what came to my mind
anddam 2017-03-02 08:39:37
will do /var/backups
anddam 2017-03-02 08:39:59
actually I setup duplicty with deja-dup to use ssh so the ubuntu client won't even mount that
gogeta 2017-03-02 08:41:11
anddam, samba is acully quit good in nix machines its on windows it drages to a crawl
gogeta 2017-03-02 08:41:22
quite
anddam 2017-03-02 08:41:36
gogeta: but the config file is a PITA
aotaointbin 2017-03-02 08:41:40
i use /mnt for my nfs shares personally :P
aotaointbin 2017-03-02 08:41:57
networking is unreliable, so nfs shares are inherently temporary imho :P
scottjl 2017-03-02 08:42:42
if your network is unreliable you have bigger problems to solve
gogeta 2017-03-02 08:43:04
anddam, if your running ubuntu/mac clients samba should not need any configs
aotaointbin 2017-03-02 08:43:15
my pci bus doesn't have backhoes cut through it nearly as often as networks do :P
arooni 2017-03-02 08:43:23
xmeetrying to set up .xbindkeyrc ; but doesn't seem to be working :|..
gogeta 2017-03-02 08:43:30
anddam, they should just see one another asuuming you have a share set
BluesKaj 2017-03-02 08:43:30
nice not to need nfs at all :-)
anddam 2017-03-02 08:43:43
gogeta: what's a share set?
gogeta 2017-03-02 08:44:09
anddam, just setting a foldar shared to the network
Cyber_Akuma 2017-03-02 08:44:12
I booted into a ubuntu livecd to format a USB drive just in case it had Windows malware on it. When I clicked format the dialog box went away, and I can see the light on my usb drive blinking, but there doesn't seem to be any kind of progress window anywhere. How can I check on it's progress?
anddam 2017-03-02 08:44:20
gogeta: no, I read it wrong