[00:12] 10 [00:12] dammit tmux [02:51] *** dwarren has quit IRC (Read error: Connection reset by peer) [02:52] *** dwarren has joined #arpnetworks [10:43] *** rVn has joined #arpnetworks [11:34] anyone know what happened overnight? [11:34] my db server was rebooted [11:34] pjs: vps? [11:35] Yea [11:35] sorry [11:36] pjs: did your vm crash or anything? didn't see anyone mention any issues in irc [11:37] might help if you happen to know which kvr you're on, in case someone here is on that same server and experienced any trouble last night [11:38] yea, one sec (sorry, just got back from vacation yesterday and am in a pile of shit this morning) [11:39] kbr16 [11:39] kvr* [11:40] Been looking all morning. No signs of issues [11:40] (in the logs) [11:42] Was it a graceful shutdown, or a hard/improper reset? [11:42] How long between the the shutdown/last log entry and the next boot? [11:43] And I can confirm no issues reported on IRC. [11:43] I have VPS on kvr18 and kvr21, no troubles. [11:48] Yea, nothing. Not an entry in /var/log/messages for days, then: Aug 14 11:47:50 db syslogd: kernel boot file is /boot/kernel/kernel [11:49] What about your cron log? [11:49] Presumably, you have periodic cron jobs at least [11:49] Certainly doesn't sound graceful thoguh [12:27] Aug 14 04:22:00 db /usr/sbin/cron[54891]: (operator) CMD (/usr/libexec/save-entropy) [12:27] Aug 14 11:50:00 db /usr/sbin/cron[945]: (root) CMD (/usr/libexec/atrun) [12:27] LOL [12:27] Slept through my alerts haha [15:08] pjs: there was an issue with kvr16 in particular last night. [15:12] mercutio: You on kvr16 too? Or is this from behind the scenes? [15:12] nah i'm on kvr15 [15:13] but yeah there was an alert last night. [15:13] What sort of alert? [15:13] And also, thanks for chiming in :) [15:13] well your morning [15:13] load average being really high [15:14] Huh, how odd. [15:14] I can't think of a reason that would cause a VM to reboot though. [15:14] (I don't question that it did/caused it, just that I can't think of why) [15:15] eg: if it had been load/swap and oom-killer fired, the VM would be dead, would not have rebooted [15:15] i haven't had my morning coffee yet :) [15:15] (: Didn't mean to badger, sorry [15:16] Just trying to think of what the reboot's cause may have been [15:16] heh [15:16] Actually one option comes to mind - if the whole host had rebooted [15:16] i know the feeling of wanting to know why things are i get it too :) [15:16] but the world makes so much less sense pre-coffee :) [15:24] the host did reboot [15:24] at like 3:30 am pst. [15:25] but why it did i'm not sure. [15:25] hooray, I was somewhat right at least [15:25] * brycec feels vindicated [15:26] it is what i see initially wasn't it? [15:26] oh i just said there was an issue [15:27] Yeah, of high load. I was trying to figure out how we got from high load --> guests rebooting [15:27] (and the only explanation was host reboot) [15:29] yeah why the host rebooted is still a mystery though [15:44] did it reboot? [15:44] or are we just assuming it did? [15:45] mercutio says it rebooted. I trust him. [15:45] * m0unds is having issues with weechat [15:45] oh, ok [15:45] i'm updating bootcamp so i can use pgup/dn [15:45] Afterall, mercutio's name is on http://support.arpnetworks.com/ [15:45] ohhhhh, gotcha [15:45] damnit, i been found [15:45] had no idea [15:46] mercutio: if you were hiding, you were doing a very poor job of it [15:46] haha [15:46] guess that says a lot about arp, since i can't remember the last time i went to support.arpnetworks.com [15:46] hahaha [15:47] m0unds: you can just e-mail anyway. [15:47] support@ [15:47] yes, i know [15:47] I do ^^ [15:47] haha [15:49] yeah reboots on arp aren't very common [15:49] on vultr they seem to happen all the time [15:50] brycec: did you try this freebsd 10.2 yet? [15:51] On my RPI, but haven't upgraded my main box yet [15:51] (job and all that gettin' in the way6) [15:51] brycec: did you just do a fresh install or upgrade? [15:52] m0unds: on the RPI? All you can do is a fresh dd [15:52] ah, ok [15:52] hadn't run it on an rpi [15:52] home server has the upgraded downloaded and ready to apply [15:52] m0unds: there are no official pkg or freebsd-update mirrors for arm* [15:52] makes me sad [15:52] oh yeh it's friday there [15:53] brycec: are you using freebsd desktop? [15:53] btw, i noticed openbsd is being released early this year [15:53] oh, lame [15:53] like two weeks early but still [15:53] mercutio: freebsd *as* a desktop? No. [15:53] they seem very good at not being late [15:53] but early makes me suspect there's some hackathon or something that they want to preempt [15:54] i suppose i might just go ahead and do this box, since it has nothing critical or important on it and only a couple packages to rebuild [15:54] so usally it's 1st of may, 1st of november [15:54] but this year it's oct 18 [15:55] i had to use a newer key with openbsd snapshots though. it doesn'tlike my old one :( [15:56] seems they're deprecating dsa keys [15:56] so i generated ecdsa, which of course doesn't work with old ssh implementations... [15:56] ...and you were still using a DSA key? Sheesh. [15:56] but at least ssh-agent can accomodate both [15:56] RSA is a good middle-ground for support [15:56] brycec: it wasn't one of the debian insecure ones. [15:56] is dsa bad? [15:57] i thought rsa was bad [15:57] But in this day and age, DSA are practically ancient. [15:57] anything less than ecdsa/ed25519 is "bad"... [15:57] That's what she said!! [15:57] isn't rsa even more ancident? [15:57] ancient? [15:57] yeh well i'm using ecdsa now [15:58] i'd used ecdsa in the past for host to host ssh [15:58] when it's known to work between the two [15:58] but like i doubt my old hp server will take ecdsa key [15:59] actually my old hp server doesn't even like openssh [15:59] no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [15:59] RSA keys have always been more cryptographically sound than DSA. The only reason DSA was "preferred" for a time was due to a patent covering RSA [15:59] ahh good to know [15:59] a bit late :) [16:00] the patent opened up about 10 years ago though. People are just slow... [16:00] yeah it was like around 2000 all the crazy was aruond [16:00] downloading from canada as US couldn't export crypto etc [16:01] hmm, what's this chacha20-poly1305 like? [16:01] The difference, cryptographically, and why DSA was vulnerable to weak RNG's in the first place (and remains weak), is that DSA is "based on the discrete logarithm problem" whereas RSA "... is based on the fact that factorization of large integers is known to be "difficult"" [16:01] apparently it's becoming the default cypher [16:02] *** m0unds_ has joined #arpnetworks [16:02] Yes, from what I understand, it's super-secure. [16:02] (but I don't know much more than that) [16:02] (and its funny name) [16:02] is it fast? [16:02] *** m0unds has quit IRC (Quit: derp derp derp) [16:02] I gather it is [16:02] yes the name is rather strange [16:02] I haven't noticed a difference or anything, so it's not obviously slower... [16:02] rebooting are we, m0unds_ ? [16:03] i found a way to test before using pv [16:03] although that was on /dev/zero i was using, which is probably bad [16:03] Oh also, if you're just going by key length, DSA by spec can only be 1024, RSA can be longer. [16:05] In fact http://security.stackexchange.com/revisions/46781/6 is relatively sound describing all 4 major keys [16:05] % time ssh localhost cat /srv/http/200m | pv > /dev/null [16:06] where 200m is 200mb of random data [16:06] shows that i get 71.2MiB/s with normal ssh [16:07] and 244MiB/sec with that poly chacha or whatever [16:08] are you accounting for in-ram caching? (retesting) [16:08] yeh, but it's on raid 10 ssd [16:09] so it doesn't really make a diff [16:09] but i tested multiple times over anyway [16:09] That's crazy [16:09] yeah it's only 63gb for / though [16:10] Timing buffered disk reads: 4012 MB in 3.00 seconds = 1336.87 MB/sec [16:10] and it's got an 840 evo in there stlil [16:10] i need to swap it out [16:10] i also have more ram for it too, ... neither of which i seem in a huge rush to do, ... cos ... rebooting! [16:10] DAMMIT STARTSSL - email me a notice of a cert expiring soon, so I go to renew it "Weekend Maintenance". YOU LITERALLY EMAILED ME 15 MINUTES AGO. [16:12] hahaha [16:12] i had one of those temp free certificates and it expired [16:12] so i just added it to bypass [16:12] i was only using it to test spdy anyway [16:13] what's with nginx not doing http2 yet anyway [16:13] I use StartSSL for all my cert needs :) [16:13] actually i might see if i can make h2o work [16:13] yeh most of them are on that [16:13] i thought i'd try a normal one. [16:14] brycec: what trolls [16:14] m0unds_: srsly [16:14] srsly [16:14] i just renewed mine monday i think [16:14] has that free ssl cert thing came out yet? [16:14] wasn't it meant to be mid year [16:15] I have no idea [16:15] Timing buffered disk reads: 4012 MB in 3.00 seconds = 1336.87 MB/sec [16:15] oops [16:15] synergy cut and paste issue again [16:15] Q4 https://letsencrypt.org/ [16:15] https://letsencrypt.org [16:15] yeh i was going to say that :) [16:16] cool [16:16] * m0unds_ bookmarks [16:17] btw, everything in the Pacific Northwest US is on fire :( Even a goddamn rainforest is on fire, and has been burning for at least 3 months already. [16:17] And while there's no fire immediately nearby, I'm getting plenty of smoke http://imgur.com/5cD5L3Q [16:17] What you can't see in the distance: MOUNTAINS [16:18] There are mountains just at the edge of where the smoke takes over [16:18] ou can't tell from that photo really [16:18] it just looks like it's overcast [16:18] but that'd be disconcerting. [16:18] oh great [16:18] i hate wildfires [16:19] craziest wildfire related shit i've ever seen was when we got smoke from the wallow fire in eastern az a few years ago [16:19] http://www.washingtonpost.com/news/morning-mix/wp/2015/07/13/the-west-is-so-dry-even-a-rainforest-is-on-fire/ [16:19] mercutio: I'm digging up a historical pic right now... well, trying to [16:19] https://www.flickr.com/photos/m0unds/albums/72157626778903963https://www.flickr.com/photos/m0unds/albums/72157626778903963 [16:19] err, doubled for some reason. stupid putty. [16:20] https://www.flickr.com/photos/m0unds/albums/72157626778903963 [16:20] there we go [16:20] the oranger ones were later on the same week, just kind of dumped them on flickr [16:20] mercutio: from about the same time, yesterday http://imgur.com/Gmt8AF0 [16:21] Nice pics [16:21] the pink sun was freaky [16:21] m0unds_: hair, or lightning? https://www.flickr.com/photos/m0unds/5812998965/in/album-72157626778903963/ [16:22] heh I know what you mean. I've lived with that level of smoke too [16:22] hair, that was from the test roll i shot with an old olympus xa film camera i bought to refurb [16:22] ok m0unds one is disturbing [16:22] cleaned it out, new light seals and stuff, good little shooter [16:22] a film camera? how novel! how quaint! [16:23] was a way for me to say "see, you don't need a dslr" [16:23] "it's a new camera, but not a new camera but it's still a new camera so you don't need a dslr" [16:23] hahahaha [16:24] but yeah, fires suck and i hate smoke [16:25] that's such a bummer (paradise fire) [16:25] so pretty up there [16:26] That's forest that has been essentially unchanged for centuries and millenia [16:26] That's what she said!! [16:26] BryceBot: no [16:26] Oh, okay... I'm sorry. 'That's forest that has been essentially unchanged for centuries and millenia' [16:26] Never seen a huge fire like this in our recorded history [16:28] crazy that it burned for a month before it was reported [16:29] what also sucks is if it clears away too much stuff, water flow during rain will trigger mudslides [16:29] in the burn scar [16:30] brycec: so do you think there's much chance you may have to take a drive away from fire? [16:32] mercutio: 50/50 [16:32] There's nothing near me right now, but there could be [16:33] ahh [16:33] so you're kidn of prepared [16:33] We've been under a "everything might catch fire and burn everything down" warning for weeks [16:33] i see [16:33] mercutio: inasmuch as I know what I would grab... [16:33] stamp collection? [16:33] Having a tiny Intel NUC has its benefits [16:34] did you guys see about the ceo of soylent [16:34] But I really should consider some offsite cold storage [16:34] What about him? [16:34] living off solar power [16:34] maybe you linked it :/ [16:34] with a small nuc and low power monitors etc. [16:35] of course he's in california so gets lots of sun. [16:35] haha, i searched for "soylent ceo" and the second result had the title "soylent ceo is lifehacking water by pissing in the sink" [16:35] haha m0unds_ [16:35] he doesn't wash his clothes because it uses too much water [16:35] so he just buys new ones [16:35] that doesn't seem wasteful at all [16:37] To be fair, considering California's drought... [16:37] california's draught isn't even residential [16:37] they should stop wasteful farming [16:37] *drought [16:38] ki mean seriously. [16:38] unless we're talking beer [16:38] err yes s/draught/drought/ [16:38] yeh let's talk beer.. :) [16:38] yeh i was acting dyslexic or something [16:38] (What's dumb - I made the same typo. but my spellcheck caught it) [16:38] i swear when i was younger i never made those kinds of mistakes. [16:39] ha, thought i hosed my vm w/the kernel update for 10.2 [16:39] I blame the Internet. [16:39] realized wlan dropped and disconnected my session [16:40] more ssh vulnerabilities.. [16:40] this morning [16:41] That was result #1 for me :( 16:33:00 m0unds_ | haha, i searched for "soylent ceo" and the second result had the title... [16:41] it was first for me when i tried it too [16:58] haha [17:00] upgrade finished, woo [17:04] *** m0unds has joined #arpnetworks [17:34] congrats :D [17:51] painless upgrade, just the way i like 'em [17:53] yeah [17:53] damnit i am struggling with fastcgi and h2o [17:53] it's not painless :/ [18:09] woot got it going [18:09] it's /way/ faster [18:15] although it's actually faster with http than http2 [18:38] *** dj_goku has quit IRC (Remote host closed the connection) [20:38] *** dj_goku has joined #arpnetworks [22:49] 2 [22:49] whoops :P