@Chopper3 Evan Caroll

@TheCleaner CAC cards worked pretty well for the DoD. I liked them but the biggest headache was cards locking if you fat fingered your PIN more than 3 times. Then you had to travel to get the certificates reset so you could login

The troll that pops into chat and most people have on "ignore" now

@MDMarra ? what? really?

@Chopper3 may have some feedback here, too... See this question.

@TheCleaner The other issue is of course...what if you don't have your CAC card or it gets stolen....

@ewwhite no, most of them not even at end of service, but the ones that do fail, fail well within 3 years.

@ewwhite reading...

@Chopper3 Did you see the current moderator election? One of those eight candidates is not like the others... Hopefully it's obvious which one.

where can you click to see the election?

@MichaelHampton I did, but I'm not aware of any issues with EC, maybe I've forgotten or wasn't aware but I thought he was a decent guy?

@Travis serverfault.com/election?cb=1

@Chopper3 Might be he did most of his trolling during a time when you weren't here?

@Chopper3 Thanks

@MichaelHampton possibly - wonder why? stress? hacked account?

@Chopper3 Supposedly he's really that awesome.

ah - I'm an idiot, thought it said Evan Anderson! Evan Carroll's a massive prick

@Tanner 5

@Chopper3 holy crap I've been so busy I almost missed the election

@ewwhite had a quick look, think we've discussed this before maybe, I think there's a problem with either the batteries but more likely either the recharging cycle on those cards or an incorrect error detection test - have you compared a good battery to a bad one out of the case in any way?

@Chopper3 I don't touch the hardware really... I just see the after effect. This is on lots of systems to the point where we have failures weekly. It's really intrusive as the batteries can't be hot-swapped.

so clients have a lot of RAID battery-related downtime.

wocka wocka wocka wocka

@ewwhite like I say I think you need to test a 'failed' battery against a good new one away from the servers - I have a feeling the cards are being over-sensitive, we had a problem with HP EVAs thinking that some of the FATA disks were failed when they really weren't, was just a wrong threshold thing

@Chopper3 Well, this is LSI stuff... so I'll check settings and options. I just wanted to make sure that there wasn't a best-practice regarding this.

@ewwhite not really but there are people who can test batteries and give you an external view of whether they're really dead or not - if they are then they're being over-cycled, badly made or over-charged for them to die that quickly and if they're not dead then it's a threshold thing

@DennisKaarsemaker nomnomnom

@Chopper3 and heat?!?!

@ewwhite could be yes

@DennisKaarsemaker I just walked by our 19 year old student worker muttering "wocka wocka".

I'm not sure if she laughed because I was weird or because she really digs PacMan.

@ScottPack Why not both?

@JoelESalas I'll allow it.

@MichaelHampton sysadminasaservice.ca

@MikeyB Great, now open port 80 in your firewall.

$ telnet www.sysadminasaservice.ca http
Trying 2001:470:b0e2:0:feed:face:dead:beef...
telnet: connect to address 2001:470:b0e2:0:feed:face:dead:beef: Permission denied

With vanity addresses like that, we'll run out of ipv6 space soon

@MichaelHampton it is… I literally did the plumbing for the whole thing 5 minutes ago… now try telnet6 instead of telnet

@MikeyB You sure about that?

I think you'd better go take another look at your firewall... :)

This time look at the IPv6 firewall.

@MichaelHampton I am :) weeeiiiird the IPv6 http packets aren't getting to me from he.net… !?

Well... now I don't get any A or AAAA records! WTF.

or any other records...

$ traceroute6 www.sysadminasaservice.ca
traceroute to www.sysadminasaservice.ca (2001:470:b0e2:0:feed:face:dead:beef), 30 hops max, 80 byte packets
 1  2001:4830:1600:80bf::1 (2001:4830:1600:80bf::1)  0.902 ms  1.297 ms  1.756 ms
 2  gw-192.qas-01.us.sixxs.net (2001:4830:1600:bf::1)  61.405 ms  61.989 ms  66.821 ms
 3  sixxs-asbnva-gw.customer.occaid.net (2001:4830:e6:7::2)  67.391 ms  67.942 ms  69.638 ms
 4  sixxs-gw.hotnic.us.occaid.net (2001:4830:e6:7::1)  70.370 ms  70.942 ms  71.492 ms
 5  10gigabitethernet2-2.core1.ash1.he.net (2001:504:0:2::6939:1)  73.888 ms  78.015 ms  78.570 ms

Wow, just wow:

thisispersonal.org/…

@MikeyB OK, so I'm thinking look at your router's firewall.

@MikeyB and your DNS is fucked too

the he.net nameservers don't have your domain

ip.seveas.net/dnsgraph/png/www.sysadminasaservice.ca/… (A)

ip.seveas.net/dnsgraph/png/www.sysadminasaservice.ca/… (AAAA)

$ host -v www.sysadminasaservice.ca
Trying "www.sysadminasaservice.ca"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51728
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.sysadminasaservice.ca.     IN      A

Received 43 bytes from 8.8.8.8#53 in 66 ms
Trying "www.sysadminasaservice.ca"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35100
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.sysadminasaservice.ca.     IN      AAAA

@Cole Meh - it's a small group of small minded people...

@DennisKaarsemaker I totally know, I seriously set this up 5 minutes ago.

Some google DNS servers has NXDOMAIN cached

no, your authoritative nameservers don't carry the domain

see the links I posted above

:9638033 [michael@challenger:~]$ host www.sysadminasaservice.ca 8.8.8.8
Using domain server:
Name: 8.8.8.8
Address: 8.8.8.8#53
Aliases:

www.sysadminasaservice.ca is an alias for www.supermathie.net.
www.supermathie.net has address 216.16.235.100
www.supermathie.net has IPv6 address 2001:470:b0e2:0:feed:face:dead:beef

the he.net nameservers return NODATA and ns1.supermathie.net times oit

only one of 6 of your authoritative nameservers is correct

Hm, now I get something totally different

$ host www.sysadminasaservice.ca
www.sysadminasaservice.ca is an alias for www.supermathie.net.
www.supermathie.net is an alias for baron.supermathie.net.
baron.supermathie.net has address 216.16.235.100
baron.supermathie.net has IPv6 address 2001:470:1d:165::1

he probably changed things :)

$ host www.sysadminasaservice.ca
www.sysadminasaservice.ca is an alias for www.supermathie.net.
www.supermathie.net has address 216.16.235.100
www.supermathie.net has IPv6 address 2001:470:b0e2:0:feed:face:dead:beef

@DennisKaarsemaker Well yeah, after you guys bitch about a partially-plumbed domain :p

Well, you are a professional, we expect you to know about things like DNS caching and TTL.

:)

Sometimes I wonder if my girlfriend saying she's tired/exhausted all day every day is making me feel tired/exhausted

@MikeyB you're in the comms room. Bitching is the standard if you're stupid :)

(and yes, inconsistent nameservers and expecting things to work qualifies as stupid)

@DennisKaarsemaker This here is the standard shoemaker's children problem :p

You're still firewalled though...

$ telnet www.sysadminasaservice.ca http
Trying 2001:470:b0e2:0:feed:face:dead:beef...
telnet: connect to address 2001:470:b0e2:0:feed:face:dead:beef: Permission denied
Trying 216.16.235.100...
Connected to www.sysadminasaservice.ca.
Escape character is '^]'.
^]
telnet> quit
Connection closed.

but that's 2001:470:1d:165::1

@MichaelHampton No, oh shit... I put in the wrong ipv6 prefix

See, I told you so!

SQL 2005 should auto shrink the log file, if the transaction log is being backed up, right?

@Patrick Yes

@Patrick dba.stackexchange.com/questions/ask

@JoelESalas thanks, maybe it's just taking a while to shrink this file.

@Patrick If your server is slow/old it will take a VERY long time

@MichaelHampton No, not a firewall problem :) 2001:470:1d:165:feed:face:dead:beef is the correct address. Damn, that's been broken for ages. Not like I use the site for anything serious.

@MikeyB Ummmm.... oops!

@MichaelHampton yeah no kidding.

@MichaelHampton Hey, it's less broken than NetApp's site. Which 500s for me when I hit it over IPv6.

This room is now about spiders.

@NathanC google.ca/humans.txt

@JoelESalas is it a slow server, and the transaction log backup finally got fixed last night, so I will just keep an eye on it.

Man. I cut the tip of my index finger last night. This is tricksome to type with.

Ugh the whistler has begun

@Patrick it doesnt shrink it, it truncates it

@MDMarra The cold snap? Dayum.

yup

@MichaelHampton OK IT'S FIXED

@JoelESalas did you set up discourse yet?

@MikeyB Fine, I'll try it again in 2400 seconds when the TTL expires...

@Cole I have a tendency to whistle "If I Only Had A Brain" around the office.

I have a better method. I just throat punch idiots

@MikeyB ns1.supermathie.net still times out and 3/4 he.net servers have the wrong AAAA record

@MDMarra LOL

Apparently everyone has tried that, he doesn't care

@DennisKaarsemaker I DINNA CARE (ns1 doesn't exist since I'm lazy, and he.net is not my problem)

"please stop whistling" doesn't work?

and since I can't wear headphones....fml

@Cole water pistol and spray him whenever he whistles.

@MDMarra @ewwhite trolled me into looking for an RPM then I ragequit Discourse

hahahahaha

@MDMarra They've told him - he's been here for 30 years. No fucks given. He's told people to go fuck themselves for it

@Cole But evidently singing is OK? And whistling?

@MikeyB he.net IS your problem, you made them authoritative for that domain.

@JoelESalas dumbass

@Cole Throat punch. Tell HIM to go fuck himself.

@JoelESalas since @MikeyB works there, you should direct your rage at him.

I better not be getting sick. throat is on fire

@MDMarra At Discourse??

ya

Ohwow

duh

dennis@koekblik:~$ dig +short -t NS sysadminasaservice.ca
ns0.supermathie.net.
ns1.he.net.
ns1.supermathie.net.
ns3.he.net.
ns4.he.net.
ns5.he.net.
ns2.he.net.

Yeah that setup routine is the second-jankiest thing I've ever encountered

Xen benig the first

@JoelESalas CLEAR LEGIBLE INSTRUCTIONS: github.com/discourse/discourse/blob/master/docs/…

@MikeyB You lost me at Ubuntu

I'll do it on CentOS and submit a PR

Why is it that automated voice operators ask you a host of questions about your problem, then the real person ask the same exact questions...can't they translate?

@JoelESalas Please do! (I'm also writing up the FreeBSD instructions)

@MDMarra so if it truncates, then I need to do a manual shrink?

@MikeyB got a demo somewhere too?

@DennisKaarsemaker try.discourse.org is a playground

@MikeyB no, it's utter fail under latest firefox :)

@Patrick what do you hope to gain from shrinking? are you full disk or something?

@DennisKaarsemaker So, what you're saying is that the latest version of Firefox is broken?

You generally don't want to shrink database and log files, since it will cause fragmentation on disk when you actually go to expand them again

Actually, latest seems to be 21.0 which works fine for me.

@MikeyB So your clear instructions are hosted on github, only for Ubuntu, and do not include any kind of packaging? What the fuck kind of devops shit is this?

@MDMarra yeah, the transaction log wasn't being backed up for several weeks, so it grew pretty big, now i want to get back some of that space.

@Patrick Shrink and set a reasonable size for it, then. Don't just shrink it to 1MB and let it autogrow

@ScottPack DARN TOOTIN! (once it hits 1.0, we'll have packaging, but it's still changing too much and moving too fast to make packages)

@ScottPack Soon he'll release a --devops flag that lets you run it on your boss's laptop

autogrow is for the weak

@MikeyB That's what she said.

@MikeyB no, that I just get the links at the top and a big grey area

@JoelESalas Shouldn't that be a --no-devops flag that lets you run it on a server?

@DennisKaarsemaker anything in console?

@MikeyB i just get the nav bar with everything else grey as well

this is safari 6

@MikeyB reloading fills the console with errors, but now content shows up too. Not filled with confidence at all, abandoning :-)

@MDMarra That's correct.

@DennisKaarsemaker Oh wait, yeah, something's wrong… it's crazy slow in FF, fast in Chrome.

@DennisKaarsemaker Seriously, please do send errors.