Re: [CentOS] Dual WAN on EL8 desktop.

2021-03-12 Thread Lorenzo Quatrini
I think you need policy routing:

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/configuring-policy-based-routing-to-define-alternative-routes_configuring-and-managing-networking

https://doc.lagout.org/network/inetdoc/Policy_Routing_in_Linux_ENG.pdf

Although it may be tempting to use some sort of round-robin, it would be
safer to have specific rules based on the destination, so for example you
send all web traffic to one ISP and add exceptions to route specific
traffic to the second ISP (e.g. streaming platforms), with each rule having
a "backup route" to the other ISP.

Cheers,
Lorenzo

Il giorno ven 12 mar 2021 alle ore 08:31 Thomas Stephen Lee <
lee.i...@gmail.com> ha scritto:

> On Wed, Feb 17, 2021 at 2:04 AM Kenneth Porter 
> wrote:
> >
> > --On Tuesday, February 16, 2021 12:00 PM +0530 Thomas Stephen Lee
> >  wrote:
> >
> > > The solution should be a software one without acquiring new hardware.
> > > What is ideal is the bandwidth of two connections and half bandwidth
> > > when one link is down.
> >
> > The search term you're looking for is "NIC bonding". Here's the first
> hit I
> > get from Google:
> >
> > <
> https://www.enterprisenetworkingplanet.com/linux_unix/article.php/3850636/Understanding-NIC-Bonding-with-Linux.htm
> >
> >
>
> Hi,
>
> I tried
>
>
> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/configuring-network-bonding_configuring-and-managing-networking#configuring-a-network-bond-using-nm-connection-editor_configuring-network-bonding
>
> without success
>
> I have a feeling that bonding is for interfaces on the same network,
> not two internet routers.
> Please correct me if I'm wrong.
>
> ---
> Lee
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] problem configuring grub for a dual-boot

2013-08-05 Thread Lorenzo Quatrini
Try telling grub to swap the disks:

  title Windows 7
map (hd1) (hd0)
map (hd0) (hd1)
  rootnoverify (hd1,0)
  chainloader +1

Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ERROR MESSAGE: dracut warning: no root device block:/dev/mapper/vg_ws194-lv_root found

2013-03-11 Thread Lorenzo Quatrini
 mv /boot/initramfs-2.6.32-358.0.1.el6.i386.img 
 /boot/initramfs-2.6.32-358.0.1.el6.i386-nouveau.img
 dracut /boot/initramfs-2.6.32-358.0.1.el6.i386.img 2.6.32-358.0.1.el6.i386
 
 Interestingly enough, the new initramfs that I got from this command is 
 slightly
 smaller than the one that I already had in /boot.
 
 Sadly, this made no difference.   When I booted the machine, I still got the
 same dracut warning and kernel panic.
 

To me looks like the initramfs does not contain all the needed pieces to boot
the machine.

Try investigating the dracut options to include more modules or filesystem etc.
starting with --lvmconf and --mdadmconf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache attacks - you can't stop them, or can you?

2013-03-06 Thread Lorenzo Quatrini
Il 06/03/2013 14:17, Robert Moskowitz ha scritto:
 So I have this nice, simple web server up running.  Its purpose is to 
 allow me external testing with HIP, and to provide some files for 
 external distribution.  Of course, there it is sitting on port 80 and 
 the attacks are coming in per logwatch report.  Examples from the report 
 include:
 
   Requests with error response codes
  404 Not Found
 //phpMyAdmin-2.5.1/scripts/setup.php: 1 Time(s)
 //phpMyAdmin-2.5.4/scripts/setup.php: 1 Time(s)
 //phpMyAdmin-2.5.5-pl1/scripts/setup.php: 1 Time(s)
 //phpMyAdmin-2.5.5-rc1/scripts/setup.php: 1 Time(s)
 //phpMyAdmin-2.5.5-rc2/scripts/setup.php: 1 Time(s)
 /muieblackcat: 1 Time(s)
 /myadmin/scripts/setup.php: 2 Time(s)
 /mysql-admin/scripts/setup.php: 1 Time(s)
 /mysql/scripts/setup.php: 1 Time(s)
 /mysqladmin/scripts/setup.php: 2 Time(s)
 /mysqlmanager/scripts/setup.php: 1 Time(s)
 
 Now these are only a few, though I am probably not being hit as hard as 
 others out there.
 
 My question is:
 
 Is there a way to shut this nonsense down?  Or because I am sending the 
 404, I am doing all that is reasonable to do?
 
You could use fail2ban to reduce the load on the server; here is my config:

 cat /etc/fail2ban/filter.d/apache-errorcode.conf

# Fail2Ban configuration file
#
# Author: Lorenzo Quatrini
#
# $Revision: 1 $
#

[Definition]

errorcode = 400|403|404

# Option:  failregex
# Notes.:  Regexp to catch bad request
# Values:  TEXT
#
failregex = ^HOST -.*(GET|POST).*HTTP.* (?:%(errorcode)s)

# Option:  ignoreregex
# Notes.:  regex to ignore. If this regex matches, the line is ignored.
# Values:  TEXT
#
ignoreregex =


 I am wondering that if this list starts getting long, that is a lot of 
 logging and I probably don't need to log 404s?
 
The downside of using fail2ban is that you will start receiving email about
banned hosts; but that is configurable, as is the number of failed attempts
before being banned.
Also you can have trusted hosts that never get banned... but the manual
explains this better that I can do.

Regards
Lorenzo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS-virt] OpenNebula on CentOS-6

2012-12-06 Thread Lorenzo Quatrini
Il 03/12/2012 20:05, Karanbir Singh ha scritto:
 hi,
 
 Some of you might have seen the email on the centos-devel list, for the
 rest I just wanted to point out that we've been working on getting
 opennebula ( http://www.opennebula.org/ ) rpms and contextualised images
 for opennebula available with a very low barrier to entry for CentOS.
 
 The 'win' with OpenNebula is that its easy to install, easy to get
 going, scales well and mostly stays our of your way to let you pick the
 technologies you want to run your cloud instance.
 
 And the CentOS buildsystem runs on it ( has done for a while now.. )
 
 http://lists.opennebula.org/pipermail/users-opennebula.org/2012-December/021196.html
 is a link to the announcement upstream, but feel free to either followup
 here, on the centos-devel list or on the opennebula-users list.
 
 - KB
 
Hi Karanbir,
the link at opennebula site on the http://www.opennebula.org/software:software
page is wrong: http://dev.centos.org/centos/6/testing/ (I guess should be
http://dev.centos.org/centos/6/opennebula/)

HTH
Regards
Lorenzo
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS] vsftpd log issues

2012-01-04 Thread Lorenzo Quatrini
Il 03/01/2012 04:14, Nataraj ha scritto:

 Ok, the above works now. But while the setting was (by default) commented
 out, the default wasn't  /var/log/vsftpd.log  but  /var/log/xferlog  which
 was growing without limits (it was over 6 GB when I first time noticed the
 problem) since logrotate tried to rotate vsftpd.log

 -rw---  1 root root 0 Dec 31 03:07 vsftpd.log
 -rw---  1 root root  39134459 Dec 31 12:19 vsftpd.log.1
 -rw---  1 root root 433305200 Dec 30 22:03 xferlog


Nataraj replied to this

 Now, after uncommenting the log file setting line in the conf the next issue
 is, that logrotate does rotate the log files (the old one gets .1 postfix 
 added to its name and a new file is created), but it still keeps writing to 
 the original file (which is renamed now)


As noted in /etc/logrotate.d/vsftpd.log ftpd does'nt handle SIGHUP properly, so
the daemon keeps writing on the original file

 In the ls -l listing above:
 - vsftpd started to write log vsftpd.log around 10pm last night (when I
 uncommented the log setting from the conf and restarted the daemon, until
 that it was logging to xferlog)
 - during the night logrotate has changed the name of the existing log file
 to ...log.1 but now, several hours later, this renamed old file is still
 used for logging, and the new ...log file remains empty!

 Is there some simple option in logrotate's conf that could change this
 behaviour? Or how to fix this. There must be many others who already have
 run into this issue.

Try skeduling a service stop/start instead the SIGHUP the logrotate daemon does.

 Regards,
 Timo


 Check out the man page for vsftpd.conf.  vsftpd supports 2 log file
 formats.  The xferlog_file parameter is for the wu-ftpd style log and
 the vsftpd_log_file is the native format log file.  The description of
 xferlog_file is:
 
 xferlog_file
   This option is the name of the file to which we  write 
 the  wu-
   ftpd style transfer log. The transfer log is only written
 if the
   option xferlog_enable is  set,  along  with 
 xferlog_std_format.
   Alternatively,  it  is  written  if  you  have  set  the 
 option
   dual_log_enable.
 
 
 So if you enable the wu-ftpd style logging then it goes to to xferlog_file.
 
 Nataraj
 

Regards
Lorenzo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to move forward/undo/revert/fix re: a failed CentOS 5.5 to SL 5.5 migration ... [SOLVED?]

2011-02-02 Thread Lorenzo Quatrini
Larry Vaden ha scritto:
 
 AFAIK, that's the status of the clones at this time.  Still unexplained is why
 
 'host www.yahoo.com 208.67.220.220' and 'host www.yahoo.com 8.8.8.8'
 got completely different answers.
 
For what I know OpenDNS (208.67.222.222, 208.67.220.220) does some more
caching and  puts on play some more distribution algorithms on it's own,
that's why it doesn't give the same answers that other dns do.
I remember there where issues also about www.google.com not giving the
official google server but their own cache.

Regards
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS-virt] Resizing EXT3 partition in guest instance CentOS5

2011-01-26 Thread Lorenzo Quatrini
Poh Yong Hwang ha scritto:
 Hi,
 
 I have two guest vm instance running CentOS 5 with ext3 partition. I
 will like to reduce 1 VM harddisk space and using the 'release' harddisk
 space to add onto my second VM. Basically I need to know how can I
 reduce and increase an ext3 partition in CentOS KVM. I did a search and
 basically i can do it by booting the VM using Knoppix and use Gparted to
 reduce and increase the diskspace. I am thinking of the following
 
 1) Boot first VM using Knoppix
 2) Reduce the ext3 partition disk size using Gparted
 3) Shutdown the VM and resize the diskspace using Virtual Manager
 4) Increae the diskspace of the second VM using Virtual Manager
 5) Boot up second VM using Knoppix
 6) Increase the ext3 partition disk size using Gparted
 7) Reboot the second VM
 
 As this is the first time i am doing it, will these work? Anyone has
 experience resiziing their EXT3 partition in KVM environment before?
 
 Thanks!
 
 Regards
 yongsan
 
I guess it would work, but just in case remember: do backup beforehand :D

Regards
Lorenzo
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-26 Thread Lorenzo Quatrini
Rudi Ahlers ha scritto:
 On Wed, Jan 26, 2011 at 10:32 AM, Edo ml2ed...@gmail.com wrote:
 
 How does one mount an NFS share, to avoid system timeouts when the
 remove NFS server is offline?
 
I would use a different approach: use autofs, then the share is mounted on the
fly only when needed, and unmounted after a while of not using it anymore.
Is this fine with your environment?

Regards
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Router for SOHO network - hardware considerations

2010-11-24 Thread Lorenzo Quatrini
Niki Kovacs ha scritto:
 Hi,
 
 Last week I finished installing a small network in a private school : 
 one server (an old IBM X225), seventeen desktops (Fujitsu Siemens PIV 
 2.4 GHZ, 512 MB RAM, 40 GB HD), all running CentOS 5.5.
 
 One extra machine is acting as a router, in that it is installed between 
 the DSL modem and the network, with two Ethernet cards, and it's taking 
 care of DHCP, DNS, NTP and also acts like a proxy (with Squid). It seems 
 quite big and noisy and electricity-consuming to me, so I wonder if 
 there is any small device that could possibly do the job as good, but 
 which would me more adapted : small, solid and cheap (if possible). I 
 imagine some tiny box just with a CPU and a small harddisk, a little RAM 
 and two network interfaces (one out, one in), where I could install a 
 very stripped-down CentOS, and then just forget about it.
 
 So far, I've googled a bit, and I've found two things: 1) Pyramid 
 Soekris boards, where I can put something like Pyramid Linux on it. And 
 2) The Linksys WRT54GL, for which there are Linux firmwares like OpenWRT 
 and DD-WRT.
 
 Is there anything you could especially recommend for this job? (I'm not 
 afraid of getting my hands dirty, BTW :oD)
 
 Cheers,
 
 Niki
 ___

Hi Niki,
I would like to suggest the Tp-Link TL-WR1043ND; it could be a little more
expensive than the Linksys, but it has a more powerful cpu, more ram and an usb
port (and more or less same power consumption) for around 50 Euros.

I'm using it with the original firmware, and I tested OpenWRT on it; next I
will try endian, but I have to say that I'm very satisfied with it and I would
recomend it: the system is fast and responsive, and the usb port adds really a
lot of flexibility (eg. file sharing, usb dongle backup, squid with cache and
so on...).

HTH
Regards
Lorenzo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.5: bind config is missing the slave zone definitions

2010-10-29 Thread Lorenzo Quatrini
Boris Epstein ha scritto:
 Hi all,
 
 I have two near identical CentOS 5.5 machines; both are running named
 server (DNS). On one using system-config-bind I can easily define a
 slave zone; on the other, it is a no go: it says the definition is
 there, etc. but there is no corresponding file in
 /var/named/chroot/var/named/slaves . Any idea why that would be? What
 gives?
 
 I use the simplest possible zone definitions - forward IN slave, one 
 forwarder.
 
 Thanks.
 
 Boris.

Maybe you miss the bind-chroot package on the second server?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apparent BIND problem doing RBL lookups for Postfix

2010-04-16 Thread Lorenzo Quatrini
listserv.traf...@sloop.net ha scritto:

 Problem:
 Postfix is doing RBL lookups on zen.spamhaus.org.
 Everything goes along groovy - but then lookups start failing.

Just some toughs: you could try to install rbldnsd.i386 from rpmforge repo for
caching rbl lookups

 I certainly suspect a problem with BIND, but I can't find it, and have no 
 idea where to go from here.

Or try to use dnsmasq (from base) to see if the problem really is with BIND

Ciao
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Disable specific LUN on a SCSI bus

2010-03-31 Thread Lorenzo Quatrini
JohnS ha scritto:
 ---
 scsi_dev_flags SCSI black/white list.
 scsi_dev_flags=vendor:model:flags
 This option lets the user add entries to the SCSI black/white list for
 a specific vendor and model of device.
 
 Dug it up from my notes. This goes on the kernel boot line.
 
For what I understand it help on enabling/disabling a whole device; I only need
to disable some LUNS attached to a device... am I wrong? Can this be used to
disable specific LUN?

Ciao
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Disable specific LUN on a SCSI bus

2010-03-30 Thread Lorenzo Quatrini
Hi all,
do you know if there is a way at boot time do disable specific LUN's on a SCSI
bus of a particular controller?
I'm trying to write an udev rule, but it seems that the system ignores the
vendor model/name of the controller...

For example: I want to disable /dev/sdb; so I gather some information with
udevinfo -a -p /sys/block/sdb and I try to use them to write

/etc/udev/rules.d/10-custom.rules

ID==?:0:1:0, BUS==scsi, DRIVER==sd, SYSFS{model}==DDYS-T36950N,
SYSFS{vendor}==IBM , OPTIONS=ignore_device, OPTIONS+=last_rule


I put the ? on the ID field because I know that the order of the controller
can change (a kernel update could trigger the switch); also I tried with and
without the spaces at the end of vendor and model: no change

Where am I wrong? It is a different way of doing this?

TIA
Ciao
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Disable specific LUN on a SCSI bus

2010-03-30 Thread Lorenzo Quatrini
2010/3/30 nate cen...@linuxpowered.net:
 Lorenzo Quatrini wrote:
 Hi all,
 do you know if there is a way at boot time do disable specific LUN's on a
 SCSI
 bus of a particular controller?

 What do you need to do this for?

 How about just echoing the command to /proc/scsi/scsi

 echo scsi remove-single-device X X X X /proc/scsi/scsi

 get the values for the various X's from /proc/scsi/scsi e.g.
 Host: scsi0 Channel: 01 Id: 00 Lun: 00
  Vendor: MegaRAID Model: LD 0 RAID1   69G Rev: 521S
  Type:   Direct-Access                    ANSI SCSI revision: 02

 would be 0 1 0 0

 nate

This is what I'm doing right now; but I was searching for a way of
doing it earlier on startup.
I'm playing with a non partitionable DS4300 FC, and I would like to
avoid LUN contention.

Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Disable specific LUN on a SCSI bus

2010-03-30 Thread Lorenzo Quatrini
2010/3/30 nate cen...@linuxpowered.net:
 Lorenzo Quatrini wrote:
 This is what I'm doing right now; but I was searching for a way of
 doing it earlier on startup.
 I'm playing with a non partitionable DS4300 FC, and I would like to
 avoid LUN contention.

 Since it appears to be a SAN of sorts, another option may be to
 use the blacklist setting for dm-multipath, or if it's a fiber
 attached system you may be able to mask it at the controller
 itself using the vendor tools for the controller.


I wish I could understand better IBM's tools... but as far I know I
miss a (costly) option to be able to configure the whole thing from
the controller.
This is what I'm doing right now: using /proc/scsi/scsi to disable
some luns and multipath to control which host sees what partition, but
I was looking for a way to disable earlier during the boot the luns.
Thank you again for your help
Ciao
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS as an internet kiosk : how to create a fresh user upon leaving GNOME ?

2010-02-02 Thread Lorenzo Quatrini
Brian Mathis ha scritto:
 On Mon, Feb 1, 2010 at 10:24 AM, Niki Kovacs cont...@kikinovak.net wrote:
 
 You don't need to delete and re-add the user every time.  That would
 be silly and as you see requires root privs.
 
 Since you already have the login script ability, change that script to
 delete the sensitive data you are talking about (just don't delete the
 login script).  The last part of the script could be to un-tar a file
 with the clean profile information already in it.

Also, if you use gdm, you can put your script on /etc/gdm/PreSession.

I have a script on /etc/gdm/PostSession/:0 to make a backup on exit, but if
it's a kiosk you can't be sure that the session will be properly closed
(hitting ctrl-alt-backspace will bypass the PostSession script), so I guess
PreSession would be better.

HTH
Regards, Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Virtualization - what do You recommend?

2010-02-02 Thread Lorenzo Quatrini
Rafał Radecki ha scritto:
 Hi All.
 
 I plan to use virtualization in my production environment. I plan to use
 one of the following options:
 - KVM;
 - VMWare Esxi;
 - VMWare Workstation.
 
 I plan to install Windows 2008 as a guest. I want to use something like
 LVM snapshots for backups. Stability is also very important, the guest
 will be used as a production server.
 Which option could You recommend and why?
 
 Thank You very much in advance :)
 
 With regards,
 R.
 
 
I know it is off topic on this list (and I really wish it was based on CentOS),
but I feel to recommend http://pve.proxmox.com/, because:
It's really easy and fast to setup
Supports KVM and OpenVz
Can be clustered (central management and expandability)
Supports LVM snapshots to backup KVM guest

I'm using on production, and for now I didn't had any trouble.
The main missing feature is software raid, which isn't recommended nor
supported for production, but can be achieved on test machines. But beware that
with KVM you will almost certainly need a good HW raid with bbu cache.
Also the development is very active and more functionalities are coming on each
version (shared storage via drbd, and many other, I think that the wiki can
cover this better)

HTH
Regards, Lorenzo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS-docs] Install On Partitionable RAID1

2010-01-21 Thread Lorenzo Quatrini
Phil Schaffner ha scritto:
 2. The command to create /etc/mdadm.conf will result in an extra line 
 spares=1 while the array is still syncing.  Adding  | head -1  to 
 the command to create it fixes the problem.
May I suggest to add  | grep -v spares  or  | grep ARRAY  instead? If the
command is issued after the sync the resulting mdadm.conf would be incorrect.

Regards
Lorenzo
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS] Running SSH on a different port

2009-10-26 Thread Lorenzo Quatrini
2009/10/25 Les Mikesell lesmikes...@gmail.com:
 Gilbert Sebenste wrote:
 On Sat, 24 Oct 2009, Philip Gwyn wrote:

 On 24-Oct-2009 Oliver Ransom wrote:
 I don't think there are any ramifications/disadvantages of running the
 SSH daemon on a non standard port.

 Unless I want to sftp. It always looks for port 22; if I do:

 sftp SERVER

 It will deny me if SERVER is anything but port 22. Doing a man sftp yields
 no help on how to solve that. Any ideas?

 I usually prefer rsync over ssh for file transfers where possible.  There it
 would be rsync -e 'ssh -p nnn' 

Also, you coud set up the port on /etc/ssh/ssh_config for the name/ip
of the target machine, so you don't need to type -o Port xxx or -p
xxx every time.
The downside is that you forget the port over time, not using it.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Upgrading CentOS 5.3 from local mirror

2009-10-26 Thread Lorenzo Quatrini
2009/10/25 Gordon Messmer yiny...@eburg.com:
 On 10/23/2009 06:10 PM, Jonathan Moore wrote:

 What I was really looking for was a little more detail on exactly what
 I *must* have from the mirror to successfully upgrade.


 If you want to download the minimum number of packages, the easiest
 answer is: use a proxy server.

 export http_proxy=http://proxy.foo.com:
 yum upgrade

I'm on the same situation and I use IntelligentMirror and squid to
cache all the rpm packages regardless of the mirror.
Also I set up the mirror line on the /etc/yum.conf
One word of warning if you want to go to the same route: you have to
setup 2 different mirrors for x86_64 and i386 arch., because there are
i386 packages built for the x86_64 platform that have the same name
but different checksum/content than the one for i386.

HTH
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-18 Thread Lorenzo Quatrini
James Matthews ha scritto:
 There is a very large issue with all people running VPS machines that
 are waiting for upgrades.
 
 
Looks like, at least for openvz, virtualized machines are safe

http://openvz.org/pipermail/users/2009-August/002961.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum update

2009-08-13 Thread Lorenzo Quatrini
madunix ha scritto:
 Can any one clarify this, is auto updating at all production servers
 recommended or not?
 need to know your opinion, how do you manage the update?
 
 -mu

I'm a very lazy sysadmin, and, although I know that is better to have full
control over updates... I let yum-cron do the updates for me.

I administer very few server, I always have a good backup handy, and wen I'm on
vacation I disable the auto-updates...

For now (about 3 years of doing this) I never had real issues. The worse thing
that happened was the updates not working for some dependency issue, which
needed to be sorted manually.

Again, I guess it really depends on what you are administering and if/how you
can handle a server outage, so you have to carefully make your own decision
based on your environment.

-- 
Regards
Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Autorun ability on cd?

2009-08-05 Thread Lorenzo Quatrini
James B. Byrne ha scritto:
 I have a little niggling situation that I would like to resolve
 programmatically.  I use Git as my SCM and I have release branches
 which are sometimes patched.  I find myself sometimes entering the
 working directory tree forgetting that I was last on a release
 branch and not on the master.
 
 What I would like to do is to have a script run every time that I
 enter a directory, check for .git, and if it finds it then simply do
 a git-branch for me so that which I am on is forcefully pointed out
 to me before I proceed to do something foolish.
 
 All I can come up with from searching wrt cd is details on why one
 cannot change the working directory of a running script and various
 kluges around this.  I do not wish to change the pwd of the shell, I
 just want some way of testing for a certain file and running a
 specific command if it is found when I enter a working tree. If this
 requires testing every directory that I cd to then I can live with
 that.  If instead one can put a script that runs only when one
 enters certain directories then I can live with that as well.
 
 Is there any way to do this?
 

I did a simple test:
cd /tmp
touch .git
export PROMPT_COMMAND='echo -ne
\033]0;${us...@${hostname%%.*}:${PWD/#$HOME/~}; echo -ne \007; if [ -f .git
] ; then echo WARNING: .git DIRECTORY ; fi '

and now every time I cd on that directory and every time I issue a command (on
that directory) I get the warning.
Of course you can do something more elegant (for example change the color of
the whole prompt...)
Don't know the impact on performance...

hope this helps.

--
Regards
Lorenzo




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SNMP

2009-07-30 Thread Lorenzo Quatrini
David Leon ha scritto:
 Hi guys
  
 I'm trying to set up the SNMP service. I need it to use MRTG to graph
 some variables of my Centos 5.3 box. Any of you have a working SNMP
 configuration can send me to tweak mine?
  
 Thanks
  
 David
 
I did this:
used the default /etc/snmp/snmpd.conf and commented everything before
 ###
 # Sample configuration to make net-snmpd RFC 1213.
uncommented the relevant lines on than section until the next row of #
adjusted the community

saved the file and did a service snmpd restart (and chkconfig snmpd on)

and voilà: snmpd was up and running :)

hope this helps

-- 
Regards
Lorenzo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Upgrading CentOS 5.2 to use gcc 4.x

2009-07-23 Thread Lorenzo Quatrini
Patrick May ha scritto:
 I have a CentOS 5.2 installation with gcc 3.4.6 as the default.  I'd
 like to upgrade the entire gcc tool chain, including libraries, to 4.x in
 order to build some software that requires 4.1.0 or better.  Can I do this
 easily through yum?  If I upgrade to 5.3 will I get gcc 4.x by default?
 
 Thanks,
 
 Patrick
 
Yes, I guess: on my pc I get

rpm -q centos-release
centos-release-5-3.el5.centos.1.i386

rpm -q gcc
gcc-4.1.2-44.el5.i386

-- 
Regards
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-03 Thread Lorenzo Quatrini
2009/7/2 John R Pierce pie...@hogranch.com:

 now, these commands are NOT persistent, and, AFAIK, RHEL has no
 provision for `ip route` or rule commands, so I end up sticking this
 stuff in /etc/rc.d/rc.local or something.


More detail on this:
digging a bit on the network-scripts I found that there are few checks
and calls to /sbin/ifup-pre-local, /sbin/ifup-local,
/sbin/ifdown-pre-local, /sbin/ifdown-local, so I guess that this is
the right place to put ip routes and rules commands.

Regards
Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-03 Thread Lorenzo Quatrini
John R Pierce ha scritto:
 
 i dunno, i would sort of assume the -local functions are for the 
 localhost interface (/dev/lo), and the idea of having system specific 
 config files in /sbin/ is somewhat abhorrant.

I agree!
 
 in fact, upon some digging, it looks like you put RULES in 
 /etc/sysconfig/network-scripts/rule-ethX and ROUTES in 
 /etc/sysconfig/network-scripts/route-ethX
 
 the lines in the rule-* file are run prefixed by `ip rule add` while the 
 lines in the route-* file are prefixed by `ip route add` on an interface 
 'up' event, and on the corresponding 'down' event, they are prefixed by 
 ip {route|rule} del 

So does anyone have a clue on which is the syntax for creating complex routes
and rules using route-* and rule-*?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-02 Thread Lorenzo Quatrini
John R Pierce ha scritto:

 
 now, these commands are NOT persistent, and, AFAIK, RHEL has no 
 provision for `ip route` or rule commands, so I end up sticking this 
 stuff in /etc/rc.d/rc.local or something.
 

I was facing the same problem some time ago... what is the right place to put
ip route commands and configuration files?
Does someone have a better place other than rc.local?
If I put them in rc.local, is there a way to issue a command like service
network restart?

TIA

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-02 Thread Lorenzo Quatrini
Doug Coats ha scritto:
 I am ecstatically confused.
  
 After I entered the last two commands my routing is working the way that
 I need it to.
  
 ip rule add from 173.11.51.46 table Cable
 ip rule add from 67.152.166.2 table T1
  
 The problem is I don't know which actual commands worked.  I had just
 rebooted.  The other ip commands were all in the rc.local file so they
 all ran.
  
 Why did the above commands make the Cable and T1 rules show up in the
 rules list but the following two did not?
  
 ip route add 173.11.51.44/30 http://173.11.51.44/30 dev eth2 src
 173.11.51.45 table Cable
 ip route add 67.152.166.0/27 http://67.152.166.0/27 dev eth3 src
 67.152.166.2 table T1
 Do I need all of the commands?  So that what is in rc.local looks like this?
  
 ip rule add from 173.11.51.46 table Cable
 ip route add 173.11.51.44/30 http://173.11.51.44/30 dev eth2 src
 173.11.51.45 table Cable
 ip route add default via 173.11.51.45 table Cable
 ip route add 173.11.51.44/30 http://173.11.51.44/30 dev eth2 src
 173.11.51.45
 ip route add default via 173.11.51.46
 ip rule add from 173.11.51.45 to default lookup Cable
 ip rule add from 67.152.166.2 table T1
 ip route add 67.152.166.0/27 http://67.152.166.0/27 dev eth3 src
 67.152.166.2 table T1
 ip route add default via 67.152.166.2 table T1
 ip route add 67.152.166.0/27 http://67.152.166.0/27 dev eth3 src
 67.152.166.2
 ip rule add from 67.152.166.2 to default lookup T1
 ip route flush cache
 
 

Don't know if can be applied here, but when I did some test I discovered that
if you want to have 2 gateways you have to use scope so... could you try
doing this:

ip route delete default
ip route add default scope global nexthop via 173.11.51.46 weight 10 nexthop
via 67.152.166.2 weight 20

for what I can recall that was all that I need to tell the system about the
dual route. Of course if you want to load-balance adjust the weight to your 
needs.

Hope this helps

Regards
Lorenzo Quatrini

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-02 Thread Lorenzo Quatrini
luc...@lastdot.org ha scritto:
 On Thu, Jul 2, 2009 at 10:05 AM, Lorenzo
 Quatrinilorenzo.quatr...@gmail.com wrote:
 John R Pierce ha scritto:

 now, these commands are NOT persistent, and, AFAIK, RHEL has no
 provision for `ip route` or rule commands, so I end up sticking this
 stuff in /etc/rc.d/rc.local or something.

 I was facing the same problem some time ago... what is the right place to put
 ip route commands and configuration files?
 Does someone have a better place other than rc.local?
 If I put them in rc.local, is there a way to issue a command like service
 network restart?


 
 Yeah, in /etc/sysconfig/network-scripts/
 e.g.
 /etc/sysconfig/network-scripts/route-eth0
 
 I got something like: aaa.bbb.ccc.0/24 dev eth0 in there

Yes, that's the default on CentOS... but can I put iproute2 commands and
configuration files there? Where do I put the configuration to have something 
like

ip route add default scope global nexthop via aa.bb.cc.dd weight 10 nexthop via
xx.yy.zz.tt 1 weight 20



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Viewer for .docx M$ WORD files?

2009-06-10 Thread Lorenzo Quatrini
John Thomas ha scritto:
 Lanny Marcus wrote:
 Is there a Viewer for .docx   M$ WORD files? If so, where can I get
 it? This file type cannot be opened with OpenOffice.org 2.3.TIA!
 
 If you install
 http://katana.oooninja.com/w/odf-converter-integrator/download
 http://katana.oooninja.com/f/software/odf-converter-integrator-0.2.2-1.i386.rpm
 you should be good to go.
 
+1

I'm using it also on window$ and works flawlessly

Regards
Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox 3, Sun jre1.6.0_12_x86_64 and enabling a plugin

2009-05-22 Thread Lorenzo Quatrini
JohnS ha scritto:
 On Thu, 2009-05-21 at 16:40 -0400, James B. Byrne wrote:
 SOMEbody on this list must have this combination working by now.

 How does one enable the firefox jre plugin for Sun's x86_64
 distribution?  Every site that I can find refers to making a link to
 a now non-existent plugins directory under the jre installation
 directory.  The official firefox plugin pages refers to the
 existence of a Sun x86_64 jre but provides no details on how to
 enable it.  The Sun site speaks only about installing i386 versions.
  Most other web sites that I have found are for distributions other
 than CentOS.

 Help?
 ---
 http://wiki.centos.org/TipsAndTricks/PluginsFor64BitFirefox?highlight=(java)
 
I noticed that there is an open bug...

http://bugs.centos.org/view.php?id=3574

Regards
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] howto transfer all configuration between 2 remote dedicated servers?

2008-11-20 Thread Lorenzo Quatrini
Joe Barjo ha scritto:
 Hello
 
[snip]

 But my real question is: How can I get a list of files in the whole
 filesystem that were added or modified compared to all the files that
 come from rpms?
 Is there a script for doing such a thing?
 
I think that doing some scripting around rpm -Va (to find modified files from
rpms) and a 'comm' between rpm -qla and something like find / (with some
clean-up to get files not coming from rpms) will do the magic.

--
Regards
Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Migration from Evolution to Thunderbird (Thunderbird mbox files)

2008-09-05 Thread Lorenzo Quatrini
Lanny Marcus ha scritto:
 
 I now have the mbox files on my hard drive. I think that is the default
 with Evolution.  I assume google backs up their gmail servers, but
 having a local copy, my own backup, is a plus.
 
Lanny, if you are concerned about data loss, you could install a local imap
server (over wich you'll can do all the backups that you like) and keep it in
sync with google with imapsync (rpmforge repository).
Looks simple and straightforward to do:

http://nivox.blogspot.com/2008/02/gmail-imap-backup.html

Hope this helps.

--
Regards
Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Home NAS device

2008-09-05 Thread Lorenzo Quatrini
Toby Bluhm ha scritto:
 Joseph L. Casale wrote:
 I am looking for something that I can hack away like a NSLU2 but that
 thing only has one disc
 and worst of all its 100m interface. Anyone know of a device you can
 load Linux on that has
 maybe 2 discs like a NAS200 with a gig nic? I need a quiet device to
 act as a tftp-dhcp/web/dns
 system.
 
The Dlink DNS-323 looks exactly what you are asking of

 The problem I see with going the all-in-one NAS route is that down the
 road, there's always some function you'd like to add - but you can't.
 You've hit the limitations of the box.
 
The Dlink can be easly upgraded; I can't find an english page now, but I guess
you'll find all the info that you need googling a bit.
It has gig nic, 2 disk and a bittorrent client. If you want you can add other
clients (like mldonkey) on a kind of chrooted environment and with a bit of
hacking you can also install a full Debian inside (but this involves soldering
a serial interface, for what I can understand), is quiet and is quite flexible
on the configuration even on the standard configuration.
I just saw one yesterday, and looked interesting; the owner is fully satisfied.

--
Regards
Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Migration from Evolution to Thunderbird (Thunderbird mbox files)

2008-09-04 Thread Lorenzo Quatrini
Nicolas Thierry-Mieg ha scritto:
 
 
 Lanny Marcus wrote:
 snip
 However, in the imap.gmail.com folder
 INBOX.msf file properties,
 Type is shown as C source code
 and MIME type is shown as text/x-csrc
 
 This is irrelevant, whatever tool you are using to see the type of
 that file is wrong.
 
 
 If someone on the list can point me to where the mbox files for
 Thunderbird on Linux are located, that will be much appreciated. 
 
 You didn't tell us where you're looking, so I can't be sure... But I
 suspect you're looking in the right place.
 However with IMAP the mail can stay on the server, so unless you tell
 your MUA to download a copy locally you only see index files.

I can confirm that: if you select the folder for offline use you'll find on the
imap.gmak.com folder an INBOX which looks like an mbox file.

--
Regards
Lorenzo Quatrini

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Control IO related to a process

2008-09-02 Thread Lorenzo Quatrini
Joseph L. Casale ha scritto:
 Is there a way to nice the IO on a process such as dd?
 If not, what could be a way to control the IO level of
 such a process from bogging down a server to severely.
 

As I was told few days ago you cold nice the whole process, eg.

nice 19 if=/xxx of=/xxx bs=nnn

This should give all the other process priority over dd

Hope this helps

--
Regards
Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Control IO related to a process

2008-09-02 Thread Lorenzo Quatrini
Lorenzo Quatrini ha scritto:
 Joseph L. Casale ha scritto:
 Is there a way to nice the IO on a process such as dd?
 If not, what could be a way to control the IO level of
 such a process from bogging down a server to severely.

 
 As I was told few days ago you cold nice the whole process, eg.
 
 nice 19 if=/xxx of=/xxx bs=nnn


Obviously there is a typo...

nice 19 dd if=/xxx of=/xxx bs=nnn
^^

 This should give all the other process priority over dd
 
 Hope this helps
 
 --
 Regards
 Lorenzo Quatrini
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to enable bind to listen querys from all my network

2008-08-28 Thread Lorenzo Quatrini
Miguel A. Velasco ha scritto:

 I have bind-chroot installed with the following options in /etc/named.conf:
 
 options {
 listen-on port 53 { 127.0.0.1; 10.10.80.0; };
 listen-on-v6 port 53 { ::1; };
 directory   /var/named;
 dump-file   /var/named/data/cache_dump.db;
 statistics-file /var/named/data/named_stats.txt;
 memstatistics-file /var/named/data/named_mem_stats.txt;
 
 // Those options should be used carefully because they disable port
 // randomization
 // query-sourceport 53;
 // query-source-v6 port 53;
 
 allow-query { localhost; };
Hi Miguel,
you have to edit the allow-query line to allow queries from other host (I have
any there, not localhost) I'm not sure about the syntax but I guess you could
try to put 10.10.80.* or 10.10.80.0/24 there to allow queries from you network

Also remove 10.10.80.0; from listen-on port as it isn't needed (here you can
specify addresses if your server is multi-homed and you want it to listen only
on some interfaces)

--
Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT - Offline uncorrectable sectors

2008-08-26 Thread Lorenzo Quatrini
Nifty Cluster Mitch ha scritto:
 
 Bottom line... use vendor tools
 Vendors like error reports from their tools for RMA processing and warranty...
 
 BTW: smartd is a good thing.  For me any disk that smartd had made noise 
 about has failed...  often with weeks or months of warning... 
 

So... ok, I see the point: I should monitor for SMART errors and then use
vendor tools to fix things...

(BTW, the pc which triggered the tread reallocated the sector by himself: I
guess that finally the OS tried to write to the bad sector and the disk did all
the magic relocation thing)

Also I finally noticed that badblocs has a non-distructive read-write mode (the
man page is outdated and doesn't mention that) which can be used routinely (say
once at month) to force a check of the whole disk.

Thanks to all for the explanation

Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT - Offline uncorrectable sectors

2008-08-26 Thread Lorenzo Quatrini
William L. Maltby ha scritto:
From man badblocks:
 
 -n Use non-destructive read-write mode.  By  default  only  a  non-
destructive  read-only  test  is  done.  This option must not be
combined with the -w option, as they are mutually exclusive.
 
 Note the phrase beginning with By default only I'll admit it could
 be more clearly stated.
 
The Italian translation of the man page is outdated... I guess I sould stick
with the original version of man pages, or at least remember to check them.

Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT - Offline uncorrectable sectors

2008-08-25 Thread Lorenzo Quatrini
William L. Maltby ha scritto:
 
 Yep. Only a few copies of the superblock and the i-node tables are
 written by the file system make process. That's why it's important for
 files systems in critical applications to be created with the check
 forced. Folks should also keep in mind that the default check, read
 only, is really not sufficient for critical situations. The full
 write/read check should be forced on *new* partitions/disks.
 

So again my question is:
can I use dd to test the disk? what about

dd if=/dev/sda of=/dev/sda bs=512

Is this safe on a full running system? Has to be done at runlevel 1 or with a
live cd?
I think this is better than the manufactureur way, as dd is always present
and works with any brand.

Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] OT - Offline uncorrectable sectors

2008-08-22 Thread Lorenzo Quatrini
I have few disk that have offline uncorrectables sectors;

I found on this page how to identify the sectors and force a write on them to
trigger the relocation of bad sectors on the disk:

http://smartmontools.sourceforge.net/BadBlockHowTo.txt

My question is:

since I'm too lazy to follow all the procedure, do you think that a force
rewrite of the full disk would work?

Eg. dd if=/dev/sda pf=/dev/sda bs=512

Shoudl this be done at runlevel 1 or offline or I can do it without too many
worries, since I'm reading and rewriting the same data on the disk?

TIA and sorry for the OT

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT - Offline uncorrectable sectors

2008-08-22 Thread Lorenzo Quatrini
nate ha scritto:
 Lorenzo Quatrini wrote:
 I have few disk that have offline uncorrectables sectors;
 
 Ideally it should be done using the manufacturer's tools,
 and really any disk that has even one bad sector that the OS
 can see should not be relied upon, it should be considered a
 failed disk. Disks automatically keep spare sectors that the
 operating system cannot see and re-maps bad sectors to them,
 if your seeing bad sectors that means that collection of
 spares has been exhausted. I've never seen a disk manufacturer
 not accept a disk that had bad sectors on it (that was still
 under warranty) in as long as I can remember..
 
 nate
 
For what I understand Offline uncorrectable means that the sector would be
relocated the next time it is accessed for writing... so it is on a wait for
relocation status.
I don't know of any other way to force this relocation other tha actually
writing over the sector (a simple read doesn't trigger the relocation)...

And yes, I know that a disk with bad blocks isn't reliable, but you remember?
I'm too lazy to send my home disks back to the manufacturer ;)

Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Login Feature

2008-08-01 Thread Lorenzo Quatrini

Tom Browder ha scritto:

I asked one of my team mates to evaluate centos 5.2 as a more stable
distro for our business use than Fedora which we have used for years.

His main objection so far has been the lack of a neat feature of
recent Fedoras (at least since 7) that allows a user to login as
himself if the screen is locked by another user (a switch user
feature).

Is that feature available or is it planned?

Thanks.

-Tom


Hi,
I just noticed that the function is already in CentOS 5, but is disabled.
To enable for the current user open a terminal and type (on one line if it 
wraps):

gconftool-2 --type bool --set /apps/gnome-screensaver/user_switch_enabled TRUE

then activate the screensaver (for testing):

gnome-screensaver-command -a

for system-wide use, as root (always one line):

gconftool-2 --direct --config-source
xml:readwrite:/etc/gconf/gconf.xml.defaults/ --type bool --set
/apps/gnome-screensaver/user_switch_enabled TRUE

(source: http://live.gnome.org/GnomeScreensaver/FrequentlyAskedQuestions)

regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] gnome-session missing --silent switch

2008-08-01 Thread Lorenzo Quatrini

Hi,
following this documentation (http://tinyurl.com/66z6ly) I found that on the 
version currently shipped whith CentOS 5 (2.16.0) is missing the --silent 
switch for use with gnome-session-save


Do you know a workaround to accomplish the same result of gnome-session-save 
--kill --silent wich save and close the current session without user intervention?


Or can you point me on the right direction to rebuild the SRPM with the patch 
for this bug (http://bugzilla.gnome.org/show_bug.cgi?id=149447)?


thanks,

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Yum strangeness

2008-07-18 Thread Lorenzo Quatrini

William L. Maltby ha scritto:


And look at using the yum priorities plugin so you can safely mix repos.



I have one question about this:

Which is the safest setup for priorities?

base, update and extras: priority=1
ATrpms (which should not replace _any_ base package): priority=10
rpmforge (which could have some base package updated): priority=20
EPEL: priority=30

and so on with other repos...

Does this look reasonable?

TIA

Lorenzo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] New convert

2008-06-20 Thread Lorenzo Quatrini

Matt Harwood ha scritto:

All,

Apologies for cluttering the list, but I just wanted to say hello and 
prepare all for a barage of silly discussions from a tech-hypochondriac! 
We have recently purchased two servers running CentOS, and as I'm from 
more of a Debian based background, it would be good if someone could 
point out the two or three main differences please? I'm reading up on 
the package management as I type, but any quick tips and tricks for 
(web) server admin with CentOS would be magic.


Sorry for being cheeky! Hope everyone is well, too.


Well, Welcome :)

My 2 cents:

1) yum list all  yla  yum info all  yia for offline searching and info 
reading of packages


2) grep system-config yla and you'll find the main tools for configuring the 
system


3) Setup the priorities 
http://wiki.centos.org/PackageManagement/Yum/Priorities; and add new 
repository 
http://wiki.centos.org/AdditionalResources/Repositories?action=showredirect=Repositories;


4) http://wiki.centos.org

5) google

99) when anything else fails: ask this list ;)

Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Problem accessing to Windows Terminal Server in load balancing.

2008-05-28 Thread Lorenzo Quatrini

ArcosCom Linux User ha scritto:

2 questions:
   a) Must I put the same IP with 3 virtual macs under the same interface?
   b) Must the ARP entry be changed in the bridges? In the computers?



Well, I don't remember for sure if I did something on the Cluster side (maybe I 
choose Multicast on cluster properties) but I only have one (virtual) mac 
address for the (virtual) ip address.


The static ARP entry is only on my router (which is routing and not bridging); 
maybe if you use bridging you have to distribute the static mapping on all the host


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] put command is not working in tftp server

2008-02-27 Thread Lorenzo Quatrini

nate ha scritto:

ankush grover wrote:


Please let me know if you need any further inputs.


I'm not sure if it applies to all tftp servers but for
the most part the file your uploading must already exist
and be world writable.

touch /tftpboot/filename
chmod 666 /tftpboot/filename

then upload filename

(assuming /tftpboot/ is where your root is at)

nate



Yes, this is done for security reasons.
If you want you can override this adding the -c flag to the server_args line 
(server_args = -c -s /tftpboot)
but since there is no authentication anyone which can reach the server can 
write (or overwrite) anything on \tftpboot directory


Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: Centos Livecd

2008-02-22 Thread Lorenzo Quatrini




If only the first cd had an install option like linux minimal instead 
of going into anaconda and de-selecting everything one by one. Or even a 
button to un-select all.




If I recall correctly when you select all then the same button becames an 
un-select all... so just push it twice and you're done :D


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum-proxy?

2008-02-19 Thread Lorenzo Quatrini

Niki Kovacs ha scritto:

Hi,

I've been using Debian for a few years, and there was one nifty little 
app that made installing and updating so much easier: apt-proxy.


Most of the time, I'm taking care of small LANs with an average of five 
client PCs. But this is a very remote place in South France, so most 
villages only have 512 kbps DSL. One major update for openoffice.org-*, 
and I have to wait the whole day for updating each machine (unless I scp 
-r /var/cache/yum from machine to machine, but that's another story).


I'm currently testing an intermediate solution: creating a local Yum 
repository. I have [base], which consists of all the 5.1 RPMS copied 
over from the DVD. Then [updates], which I'm currently rsyncing from a 
remote mirror. And I think I'll do something similar with [extra], which 
only leaves [rpmforge] (but I won't cache that :oD). Not a very 
satisfying solution, since for example I'm currently installing XFCE as 
only desktop environment, and I have nevertheless to download every 
GNOME- and KDE-related update.


A message to the developers: yum-proxy would be a much-needed addition 
to Yum, in my humble opinion. I don't have the technical skills to 
develop such a thing, but maybe one of you has (Daniel, do you read 
this? :oD)


I'm curious about your comments on this.

Cheers,

Niki


I also need such a thing... I'm on the process to have a friend of mine write a 
patch to http-replicator so that it can work as a proxy for rpm files.


Stay tuned, shortly, I hope, I'll have some news.

Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] package 'synchronization' for multiple systems

2008-02-07 Thread Lorenzo Quatrini

Michael Semcheski ha scritto:

On Feb 7, 2008 1:14 PM, Tim Alberts [EMAIL PROTECTED] wrote:

I'm setting up multiple systems and ideally I want the same package
configuration on all of them.  So I'm going through yum and rpm queries
manually to try and get this done.  There must be a better way.  Is
there a way to use yum or rpm to configure multiple systems with the
same packages?


What I've done (and I'm on the lookout for a better way) is to right a
script that uses ssh to run yum on each machine.

If there is a way to query yum for the list of installed packages,
that might suffice.  Query each computer for the list of installed
packages, get the union of those lists, and install that on each
machine.

Unfortunately, I'm not familiar enough with yum to know if this is possible.

Mike


I guess the best way of doing that is via kickstart

I was thinking about yum... you could do

yum list installed | tail -n +4 | awk '{ print $1 }'

but still there is some work to do.
Maybe rpm -qa is a better way to have the list, but still, if you have to 
install multiple systems at once, I guess that kickstarting is the best way.


Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trouble Ticket System

2008-02-07 Thread Lorenzo Quatrini

Johnny Hughes ha scritto:


I would like to recommend a piece of software known as GLPI ... when 
used in conjunction with OCSng, it will track all hardware and software 
installed on each machine, which users use which machines, etc.


It also can use ADS or LDAP for authentication, and there is the ability 
to create FAQs that users can search.


So, the combination can be used as a software/hardware inventory program 
and trouble ticket system.


http://glpi-project.org/?lang=en

http://www.ocsinventory-ng.org/

Thanks,
Johnny Hughes


Does someone has an rpm version?
I did some tests on OCS-ng, but everything broke on the upgrade of the test 
pc...

TIA

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Locating the broken links

2008-01-31 Thread Lorenzo Quatrini

Ioannis Vranos ha scritto:

Garrick Staples wrote:


I am trying cleanlinks and is cleaning lot of stuff, erasing links 
and empty directories, I hope it will not mess my installation, 
especially by doing the last.


On your entire OS?  Sounds like a pretty good way to break things.



Yes it damaged it. I had to reinstall from scratch... Any pretty way to 
find broken links on the entire filesystem would be welcome however.


try fslint (rpmforge repository)

Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum update download only?

2008-01-08 Thread Lorenzo Quatrini

Johnny Hughes ha scritto:

Lorenzo Quatrini wrote:

Johnny Hughes ha scritto:

Kenneth Porter wrote:

Googling for this feature, I saw reports from the yum developer that it
wasn't yet implemented. This was in mailing list posts from a year or
more ago. Did it ever make it into the yum code?

I want to start downloading the updates for a server going from 5.0 to
5.1 and then do the actual installation once I'm on site. I don't want
to have to wait around while there for the download to proceed. I'd
rather have all the packages ready in the yum cache when I get there.

There is a yum plugin to do this ... it is called yum-downloadonly, so

yum install yum-downloadonly

Afterwards do this to see how to use the pluging:

yum --help

Basically ...

yum --downloadonly upgrade

This will put all the updates into the /var/cache/yum/

(This will be all the updates for the packagelist on the current machine
... so if you want to get them all, make sure to duplicate the machine
packagelist you want to get the downloads for)

you can then copy these files to the new machine(s) /var/cache/yum/

Thanks,
Johnny Hughes


What about centos 4? Does exists something similar?


Yes, but it is part of the yum-utils package for CentOS-4:

rpm -q yum-utils

If you do not have yum-utils installed:

yum install yum-utils

Then:

man yumdownloader

Thanks, Johnny, but I'm too lazy (I tend to be really slow on scripting) to 
make a script that get the list of updated packages and puts them in the right 
place under /var/cache/yum/ ... I was hoping on a canned solution :D
I only have a couple of server running CentOS4, so I prefer to get them updated 
on CentOS5 asap :)


Thanks again

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum update download only?

2008-01-07 Thread Lorenzo Quatrini

Johnny Hughes ha scritto:

Kenneth Porter wrote:

Googling for this feature, I saw reports from the yum developer that it
wasn't yet implemented. This was in mailing list posts from a year or
more ago. Did it ever make it into the yum code?

I want to start downloading the updates for a server going from 5.0 to
5.1 and then do the actual installation once I'm on site. I don't want
to have to wait around while there for the download to proceed. I'd
rather have all the packages ready in the yum cache when I get there.


There is a yum plugin to do this ... it is called yum-downloadonly, so

yum install yum-downloadonly

Afterwards do this to see how to use the pluging:

yum --help

Basically ...

yum --downloadonly upgrade

This will put all the updates into the /var/cache/yum/

(This will be all the updates for the packagelist on the current machine
... so if you want to get them all, make sure to duplicate the machine
packagelist you want to get the downloads for)

you can then copy these files to the new machine(s) /var/cache/yum/

Thanks,
Johnny Hughes



What about centos 4? Does exists something similar?

TIA

Lorenzo Quatrini

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] mrepo and groups

2007-11-07 Thread Lorenzo Quatrini

Hi all,
I have a little trouble with mrepo: yum groups doesn't seem to be setup 
correctly; if I do yum grouplist it only gives me


 Installed Groups:
Yum Utilities
 Available Groups:
FreeNX and NX
XFCE-4.4
Horde

Did I forget something on the mrepo.conf or similar?

tia

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mrepo and groups

2007-11-07 Thread Lorenzo Quatrini

Dag Wieers ha scritto:

On Wed, 7 Nov 2007, Lorenzo Quatrini wrote:


I have a little trouble with mrepo: yum groups doesn't seem to be setup
correctly; if I do yum grouplist it only gives me

 Installed Groups:
Yum Utilities
 Available Groups:
FreeNX and NX
XFCE-4.4
Horde

Did I forget something on the mrepo.conf or similar?


Welcome to the CentOS mailinglist. The mailinglist is not an mrepo support
mailinglist :)


Thanks, I know, but as far as I know the CentOS mailinglist is the best 
yum-oriented mailing list I am aware of :)



However, it is possible that the groups support does not work correctly.
It may depend on whether you work from ISOs or not. Help is welcome if you
understand python and use yum.



I was just guessing some misconfiguration on my side; I am using mrepo over 
remote repository with rsync.


I don't know much about snakes ;) (http://en.wikipedia.org/wiki/Pythonidae) nor 
I am a programmer, but if I can be of any help as an alpha or beta tester here 
I am.


Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mrepo and groups

2007-11-07 Thread Lorenzo Quatrini

Craig White ha scritto:

On Wed, 2007-11-07 at 15:37 +0100, Lorenzo Quatrini wrote:

Dag Wieers ha scritto:

On Wed, 7 Nov 2007, Lorenzo Quatrini wrote:


I have a little trouble with mrepo: yum groups doesn't seem to be setup
correctly; if I do yum grouplist it only gives me

 Installed Groups:
Yum Utilities
 Available Groups:
FreeNX and NX
XFCE-4.4
Horde

Did I forget something on the mrepo.conf or similar?

Welcome to the CentOS mailinglist. The mailinglist is not an mrepo support
mailinglist :)
Thanks, I know, but as far as I know the CentOS mailinglist is the best 
yum-oriented mailing list I am aware of :)


I think Dag was trying not to provide mrepo support on CentOS mail list
when mrepo has it's own mail list...

http://lists.rpmforge.net/mailman/listinfo/tools

Craig


I didn't know, sorry about that and about the off topic.

regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Yum Problem

2007-11-05 Thread Lorenzo Quatrini

Jun Salen ha scritto:

Jun Salen ha scritto:

Hi,

I have no problem running yum update inside the root prompt, but when

 running yum using sudo as logged-in as ordinary user and command the
 'sudo yum update', I am having below error:

Could not retrieve mirrorlist

 http://apt.sw.be/redhat/el5/en/mirrors-rpmforge error was

[Errno 4] IOError: urlopen error (110, 'Connection timed out')
Error: Cannot find a valid baseurl for repo: rpmforge 


This happened even I try to export my proxy server since where using

 them to connect internet. This is in a newly installed CentOS5 box. I
 also try to issue 'yum clean metadata' and  'yum clean all' but the
 problem still persists.  Can you please give me the clue on how to solve
 this.

Thanks,

junji
aisalen.wordpress.com
Linux Registered User #253162


Is this appening even if you put the proxy=http://host:port
 directive on 
/etc/yum.conf ?



Regards

Lorenzo Quatrini 


Do you mean http_proxy=http://host:port? Yes, it still happens even after I try 
proxy=http://host:port. Sorry for the delay answer, due to long holiday.


Thanks,



From 'man yum.conf' the syntax is 'proxy=http://host:port' (not http_proxy)
Anyway it may be too that apt.sw.be is busy; you could try to use the local 
mirror list changing the following lines on  /etc/yum.repos.d/rpmforge.repo:


#mirrorlist = http://apt.sw.be/redhat/el5/en/mirrors-rpmforge
mirrorlist = file:///etc/yum.repos.d/mirrors-rpmforge

Bye

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Yum Problem

2007-11-02 Thread Lorenzo Quatrini

Jun Salen ha scritto:

Hi,

I have no problem running yum update inside the root prompt, but when running 
yum using sudo as logged-in as ordinary user and command the 'sudo yum update', 
I am having below error:

Could not retrieve mirrorlist http://apt.sw.be/redhat/el5/en/mirrors-rpmforge 
error was
[Errno 4] IOError: urlopen error (110, 'Connection timed out')
Error: Cannot find a valid baseurl for repo: rpmforge 


This happened even I try to export my proxy server since where using them to 
connect internet. This is in a newly installed CentOS5 box. I also try to issue 
'yum clean metadata' and  'yum clean all' but the problem still persists.  Can 
you please give me the clue on how to solve this.

Thanks,

junji
aisalen.wordpress.com
Linux Registered User #253162


Is this appening even if you put the proxy=http://host:port directive on 
/etc/yum.conf ?



Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] forcing device to USB HDD

2007-10-29 Thread Lorenzo Quatrini

Israel Garcia ha scritto:

Hi, I bought an USB external hdd (500GB) to make my
backups using dump... but, sometimes my sever
recognize the hdd device /dev/sdb or /dev/sdc... my
question is: How can I assign a fixed device for
example /dev/sdc to my hdd? remember I use some
scripts to do my backup and I am getting errors
because the device changes from sdb to sdc and 


thanks in advance
Israel




Another quick and dirty way:
put a file (maybe an hiden file) on your device, and on top of your script 
search for that file on the various disks...


Cheers

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mirroring kbsingh repos

2007-10-25 Thread Lorenzo Quatrini

James A. Peltier ha scritto:

Hi All,

I'm trying to find out the best way to mirror the kbsingh repositories 
because most of my machines do not have access to the outside world.


What is the best way to do this.  I want extras and misc for both el4 
and el5 all arches.


I would say mrepo

Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mirroring kbsingh repos

2007-10-25 Thread Lorenzo Quatrini

James A. Peltier ha scritto:

Lorenzo Quatrini wrote:

James A. Peltier ha scritto:

Hi All,

I'm trying to find out the best way to mirror the kbsingh 
repositories because most of my machines do not have access to the 
outside world.


What is the best way to do this.  I want extras and misc for both el4 
and el5 all arches.


I would say mrepo

Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


I have decided that mrepo is not the right solution for me.  I do not 
want to have to mirror entire repositories in order to get the software 
that I need and use at the expense of bandwidth and disk space for 
useless stuff to me.


That said, I'm focusing my efforts into attempting a creating/porting of 
apt-cacher to yum based distributions.  I will notify everyone on my 
progress, as time progresses.



James,
I was looking exactly for the same thing.
I don't have programming skills, but I can do  debugging and testing... So if 
you want we can join our efforts on this project.
I also asked the local LUG on some help, maybe we can have other people joining 
the project.

Let me know if you are interested

Regards

Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] restrict network access

2007-10-19 Thread Lorenzo Quatrini

Arne Pelka ha scritto:

Hi,

I have two pc using centos 4, these machines need only access to the 
(big, class b) local network. Because of security reasons the network 
access should be restricted to this local network - mainly the users of 
these pc should not be able to access webpages outside of the local 
network. My problem is, that I have no own centos repository and 
therefore these two pc need access to the centos mirrors to get updates.
What would be the best way to restrict the network access to the local 
network and allow the access to some external addresses (a centos mirror 
and maybe some other servers/websites).
I was thinking about iptables but I'm not very experienced in this 
questions - maybe there is an easier way. The configuration with 
iptables seems to be very complex, I was skimming through some tutorials 
and the man pages.


In thanks and with best reagrds,
Arne

I would setup a box with a proxy (eg. squid) and grant full internet access 
only to that box. On the other boxes either remove the default route, or block 
on the router/firewall internet access.
On the proxy you can easily configure proxies for other services too (eg. 
pop3/imap) and filter out traffic from/to Internet at will 
(dansguardian/squidguard); on the pc's you just need to setup the proxy on 
yum.conf to enable yum updates and (if needed) configure the proxy on your 
browser, you email-client and so on.
I'm still on my way to figure out how to implement a simple yum cache/proxy; as 
soon as I have news I'll let you know, as in that case you don't need anymore 
to setup squid and the proxy box will be really trivial to setup.


Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] apt-cacher for CentOS

2007-10-11 Thread Lorenzo Quatrini

James A. Peltier ha scritto:

Hi All,

Is there something similar to apt-cacher available for CentOS?  I would 
like to ensure that an application is only downloaded once to the 
network and not hundreds of times.


If there isn't an equivalent, would someone please point me in the 
direction of how I might accomplish this with CentOS?



Hi,
after a lot of googling and searching I think I've found something that looks 
really interesting:


http://freshmeat.net/projects/http-replicator

I'm testing it right now, it looks really promising.

Regards

Lorenzo Quatrini
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Local mirroring of the CentOS repos

2007-10-11 Thread Lorenzo Quatrini

Kai Schaetzl ha scritto:

Lorenzo wrote on Thu, 11 Oct 2007 09:38:21 +0200:


Have you tried mrepo?


How would this help? The main problem is to get rid of the old updates. 


Kai

You're right, I thought that mrepo would get rid of old updates by himself, but 
id doesn't.
I am looking right now on different ways to get the same goal (save bandwidth, 
time and disk space); if I find someting I'll post on the mailing list.


Regards

Lorenzo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos