Re: [CentOS] Ubiquiti Model UAP-AC-PRO

[William Warren]

I would just buy a cloudkey and not have to bother installing the software
onto your machine directly.  If you do not have a power over ethernet
switch you'll need a micro USB cable and power supply adapter to run it but
after that it takes care of running your software for you you don't have to
install anything on to your machine

On Feb 15, 2018 20:43, "Gregory P. Ennis"  wrote:

> Everyone,
>
> Have any of you installed ubiguiti wireless routers on your network?
>
> It looks like the setup requires the use of software;  they have some
> packages that are ready made for Ubuntu and Debian, but not RedHat
>
> https://www.ubnt.com/download/unifi/unifi-ap-ac-pro
>
> Have any of you tried or succeeded in installation this on Centos 7.4?
>
> Greg Ennis
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What's Next

[William Warren]

That is not a concern.  Ryzen is already taking the desktop market by
storm.  Ryzen is not an Intel design.  Intel excels in single threaded
performance and does very well in multi-thread workloads.  Ryzen so far is
at least 20 percent faster in multi-thread loads at the same price level.
Naples/Ryzen is a serious competitor to Intel.  Once compilers are fully
optimized it gets better.  I have built several Ryzen systems and
compatibility is a non-issue.  It it is x86/64 it runs on Ryzen/Naples.

On May 17, 2017 00:54, "John R Pierce"  wrote:

> On 5/16/2017 8:34 PM, Eugene Poole wrote:
>
>> OK, AMD has announced it's new line of server and desktop processors.
>> What level of CentOS has been tested on them? OK then, when will CentOS
>> be tested on them? Or do we wait for Red Hat?
>>
>
> If AMD's new CPUs aren't 100% compatible with existing software w/o
> needing special versions, AMD is shooting themselves in the foot.
>
>
> --
> john r pierce, recycling bits in santa cruz
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] softwarecollections.org

[William Warren]

Who do I contact about softwarecollections being offline?  I am having 
to bypass that repo for right now and the packets disappear in the ether 
on their way..:)


William Warren
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 6.3 packages updates options without upgrading.

[William Warren]

Yes you would break all kinds of things.  In a nutshell folks are saying
you are free to try but when it blows up...you better have a total backup
to restore the entire box.  Your first priority should be getting whatever
is holding you back from proper system updates and security out of the way.

On Nov 8, 2016 00:59, "Dipal Bhatt"  wrote:

> The specs may have certain dependency on subset of 6.3 packages, but not
> for all other packages/binaries, as I mentioned earlier.  So, to keep
> things rather intact, we would simply meet requirements by only updating
> "selected packages only".  And, for now, that should be considered
> intermittent solution until we can safely land to a proper job as you
> mentioned.  So, would there be any issue by upgrading "selected only
> packages" temporarily?  For example, only updating nss-util or openssl to
> 6.8 version.  Thanks all, appreciated very much.
>
> On Mon, Nov 7, 2016 at 11:43 PM, Frank Cox 
> wrote:
>
> > On Mon, 7 Nov 2016 23:33:56 -0600
> > Dipal Bhatt wrote:
> >
> > > But, yes, there's
> > > no way to update the 6.3 to 6.8 as I repeatedly mentioned which is the
> > only
> > > requirement/constraint.
> >
> > It occurs to me to ask what you consider to be version 6.3.  If you
> update
> > any of the rpms to the 6.8 version you are no longer running version 6.3.
> > If the spec requires 6.3 and nothing else, then you will no longer be
> > compatible with the spec as soon as you install the first 6.8 rpm.
> >
> > On the other hand, if you are allowed to install 6.8 rpms, then what's
> > keeping you back from doing a proper job instead of a halfway and
> > half-assed one?
> >
> > Upgrading "selected packages only" will leave you with something that's
> > neither fish or fowl, and it won't meet your requirements as stated
> either.
> >
> > --
> > MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > https://lists.centos.org/mailman/listinfo/centos
> >
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 6.3 packages updates options without upgrading.

[William Warren]

What constraint is requiring you to run a highly vulnerable server?

On Nov 8, 2016 00:34, "Dipal Bhatt"  wrote:

> On Mon, Nov 7, 2016 at 11:12 PM, John R Pierce 
> wrote:
>
> > On 11/7/2016 8:33 PM, Dipal Bhatt wrote:
> >
> >> Unfortunately, there's not possibility in this specific situation to be
> >> able to update from 6.3 -> 6.8.
> >>
> >
> > any such external specifications that insist you run an old obsolete
> > operating system are inherently broken.   I hope this server isn't
> > connected to the internet, and isn't providing any services to untrusted
> > users.
> >
> > any RHEL/CentOS 6 compatible applications you have that work on 6.3 that
> > won't work on 6.8 are broken.
> >
> >  * 6.8's kernel is is still 2.6.32, same as 6.3.
> >  * 6.8's glibc is still 2.12
> >  * 6.8's php is still 5.3
> >  * 6.8's mysql is still 5.1
> >  * 6.8's postgresql is still 8.4
> >  * 6.8's perl is still 5.10
> >  * 6.8's python is still 2.6.6
> >  * etc etc.
> >
> > all of these components have security and bug fixes from later releases
> > backported to them.
>
>
> Excellent, and thanks John to clarify the above compatibility factor.  It
> seems,  any application that strictly depends on the 6.3 packages must not
> be updated to 6.8.  And, outside of that dependency, I gather it should be
> safe to update any hand picked packages to the latest is my understanding
> here. It seems, in general RHEL tries to maintain ABI level compatibility
> but they may not be perfect and they may only test with the packages set
> current at the time.  So, it's worth testing and possibly updating to 6.8
> packages where there's serious security fixes or such.  But, yes, there's
> no way to update the 6.3 to 6.8 as I repeatedly mentioned which is the only
> requirement/constraint.
>
> Thanks again!
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] tune2fs: Filesystem has unsupported feature(s) while trying to open

[William Warren]

ALL systems need patching so obsessing about uptime is insecurity on its 
face.  It doe not matter if it is windows or linux or anything else.



On 4/30/2016 11:33 AM, Valeri Galtsev wrote:

On Sat, April 30, 2016 8:54 am, William Warren wrote:

uptime=insecurity.

This sounds like MS Windows admin's statement. Are there any Unix admins
still left around who remember systems with kernel that doesn't need
[security] patching for few years? And libc that does not need security
patches often. I almost said glibc, but on those Unixes it was libc;
glibc, however, wasn't getting security patches too often some long time
ago as well. Because these are only kernel and libc/glibc that do require
reboot (no splice or similar for me on servers, thank you).

It sounds to me like the system you are talking about, and us, sysadmins
administering it, is pretty much in MS Widows ballpark already. Right?

Sorry about my rant. I still consider not well debugged code not well
debugged code...

Valeri


Patches must be kept up these days or your uptime
won't matter when your server gets compromised.


On 4/22/2016 4:33 AM, Rob Townley wrote:

tune2fs against a LVM (albeit formatted with ext4) is not the same as
tune2fs against ext4.

Could this possibly be a machine where uptime has outlived its
usefulness?

On Thu, Apr 21, 2016 at 10:02 PM, Chris Murphy <li...@colorremedies.com>
wrote:


On Tue, Apr 19, 2016 at 10:51 AM, Matt Garman
<matthew.gar...@gmail.com>
wrote:



# rpm -qf `which tune2fs`
e2fsprogs-1.41.12-18.el6.x86_64

That's in the CentOS 6.4 repo, I don't see a newer one through 6.7 but
I didn't do a thorough check, just with google site: filter.



# cat /etc/redhat-release
CentOS release 6.5 (Final)
# uname -a
Linux lnxutil8 2.6.32-504.12.2.el6.x86_64 #1 SMP Wed Mar 11 22:03:14
UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

And that's a centosplus kernel in the 6.6 repo; while the regular
kernel for 6.7 is currently kernel-2.6.32-573.22.1.el6.src.rpm. So I'm
going to guess you'd have this problem even if you weren't using the
centosplus kernel.

I suggest you do a yum upgrade anyway, 6.7 is current, clean it up,
test it, and then while chances are it's still a problem, then it's
probably a legit bug worth filing. In the meantime you'll have to
upgrade your e2fsprogs yourself.



I did a little web searching on this, most of the hits were for much
older systems, where (for example) the e2fsprogs only supported up to
ext3, but the user had an ext4 filesystem.  Obviously that's not the
case here.  In other words, the filesystem was created with the
mkfs.ext4 binary from the same e2fsprogs package as the tune2fs binary
I'm trying to use.

Anyone ever seen anything like this?

Well the date of the kernel doesn't tell the whole story, so you need
a secret decoder ring to figure out what's been backported into this
distro kernels. There's far far less backporting happening in user
space tools. So it's not difficult for them to get stale when the
kernel is providing new features. But I'd say the kernel has newer
features than the progs supports and the progs are too far behind.

And yes, this happens on the XFS list and the Btrfs list too where
people are using old progs with new kernels and it can be a problem.
Sometimes new progs and old kernels are a problem too but that's less
common.


--
Chris Murphy
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos




Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] tune2fs: Filesystem has unsupported feature(s) while trying to open

[William Warren]

uptime=insecurity.  Patches must be kept up these days or your uptime 
won't matter when your server gets compromised.



On 4/22/2016 4:33 AM, Rob Townley wrote:

tune2fs against a LVM (albeit formatted with ext4) is not the same as
tune2fs against ext4.

Could this possibly be a machine where uptime has outlived its usefulness?

On Thu, Apr 21, 2016 at 10:02 PM, Chris Murphy 
wrote:


On Tue, Apr 19, 2016 at 10:51 AM, Matt Garman 
wrote:



# rpm -qf `which tune2fs`
e2fsprogs-1.41.12-18.el6.x86_64

That's in the CentOS 6.4 repo, I don't see a newer one through 6.7 but
I didn't do a thorough check, just with google site: filter.



# cat /etc/redhat-release
CentOS release 6.5 (Final)
# uname -a
Linux lnxutil8 2.6.32-504.12.2.el6.x86_64 #1 SMP Wed Mar 11 22:03:14
UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

And that's a centosplus kernel in the 6.6 repo; while the regular
kernel for 6.7 is currently kernel-2.6.32-573.22.1.el6.src.rpm. So I'm
going to guess you'd have this problem even if you weren't using the
centosplus kernel.

I suggest you do a yum upgrade anyway, 6.7 is current, clean it up,
test it, and then while chances are it's still a problem, then it's
probably a legit bug worth filing. In the meantime you'll have to
upgrade your e2fsprogs yourself.



I did a little web searching on this, most of the hits were for much
older systems, where (for example) the e2fsprogs only supported up to
ext3, but the user had an ext4 filesystem.  Obviously that's not the
case here.  In other words, the filesystem was created with the
mkfs.ext4 binary from the same e2fsprogs package as the tune2fs binary
I'm trying to use.

Anyone ever seen anything like this?

Well the date of the kernel doesn't tell the whole story, so you need
a secret decoder ring to figure out what's been backported into this
distro kernels. There's far far less backporting happening in user
space tools. So it's not difficult for them to get stale when the
kernel is providing new features. But I'd say the kernel has newer
features than the progs supports and the progs are too far behind.

And yes, this happens on the XFS list and the Btrfs list too where
people are using old progs with new kernels and it can be a problem.
Sometimes new progs and old kernels are a problem too but that's less
common.


--
Chris Murphy
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] www.centos.org/forums/

[William Warren]

actually that isn't true either.  Just install a newer version of 
firefox or chrome or whatever..then you are independent of the operating 
system in many cases.


On 3/26/2016 9:00 AM, Dennis Jacobfeuerborn wrote:

On 25.03.2016 17:29, Eero Volotinen wrote:

@Eero: IMHO you are missing some points here. There are more and more
browsers that are unable to use SSL{2,3} as well as TLS1.0, not just
disabled via config, but this decission was made at compile time.
Newer Android and Apple-iOS devices for example.



This is not true. it works fine with latest android and ios. I just tested
it.

The latest version of Android is Marshmallow and currently is only
installed on 2.3% of the devices out there:
http://developer.android.com/about/dashboards/index.html

You cannot just support the latest version of a client if your site is
accessed by regular users out there.


And the point is not that the site supports TLS1.0, but that it does
not support TLS1.1 and/or TLS 1.2, and as such is incassessible
to devices that ask for TLS1.1 as minimum for HTTPS.

But that is for the admins/webmasters of the servers to resolve.


Many sites are still using centos 5 and clones and cannot support tls 1.2
and tls 1.1 without upgrade.

Then they might be forced to upgrade to a newer CentOS version. If you
only run your personal blog then you can of course whatever you want but
if you run a commercial site then the OS you can run depends on what the
clients support and not the other way around.

Regards,
   Dennis


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] ssh issues with centos 6

[William Warren]

I have a new centos 6 install.  Randomly i get out of memory messages and
my ssh file transfer dies.  I have tried this in filezilla as well as
winscp.  I have disabled motd in ssh and i also had entropy problems so i
enacted   rngd -r /dev/urandom -o /dev/random but did not stop the out of
memory errors.  I am seeing the below in the logs.  It only occurs during
ssh file transfers.

Feb 28 17:18:19 web1 t of memory [13604]
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Good Anti-virus for Linux desktops and servers

[William Warren]

On 8/15/2012 3:40 AM, James Hogarth wrote:
 the only method I know that works consistently is to block all direct
 web and ssl access and force use of a web proxy, so the SSL is between
 the remote server and the proxy server, which is your security gateway.
 The way I've handled this in previous places when the requirement has
 existed is a company CA cert installed on all corporate devices (windows
 with AD makes this very easy) and man in the middle everything.

 There's no browser security errors then and the unencrypted data is visible
 for security inspection.

 Of course if doing this make sure you notify in the AUP for the company
 employees have to sign and agree to abide by etc etc...
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
that is how astaro does ssl scanning.  Once it has gotten to the 
endpoint it is too late.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Good Anti-virus for Linux desktops and servers

[William Warren]

On 8/14/2012 8:21 PM, Gregory Machin wrote:
 I'm  not to keen either. but one cant account for what users may bring
 in on USB / cdrom or other possible sources. Quite often the users are
 clueless that they have a virus on their usb flash drive :-( . We have
 edge devices with all the bells etc.

 Thanks

 GM

 On Tue, Aug 14, 2012 at 9:02 PM, William Warren
 hescomins...@emmanuelcomputerconsulting.com wrote:
 On 8/13/2012 12:25 AM, Gregory Machin wrote:
 Hi.

 I'm look for an enterprise quality Anti-virus / Malware for my Linux
 machines . Mostly Ubuntu on the desktop, CentOS and RHEL servers. I
 must have real time scanning, on demand scanning, and centralized
 management.

 Is there anything out there that can do this ?

 GM
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 I'm not a fan of anti-crud on servers.  Put an astaro security gateway
 in front of your network and let it scan everything before it gets to
 your internal devices
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
a/v on endpoints yes..I run a/v on endpoints for clients..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Good Anti-virus for Linux desktops and servers

[William Warren]

On 8/13/2012 12:25 AM, Gregory Machin wrote:
 Hi.

 I'm look for an enterprise quality Anti-virus / Malware for my Linux
 machines . Mostly Ubuntu on the desktop, CentOS and RHEL servers. I
 must have real time scanning, on demand scanning, and centralized
 management.

 Is there anything out there that can do this ?

 GM
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
I'm not a fan of anti-crud on servers.  Put an astaro security gateway 
in front of your network and let it scan everything before it gets to 
your internal devices
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] A problem with power outages

[William Warren]

On 3/25/2012 2:39 PM, Timothy Murphy wrote:
 Ryan Wagoner wrote:

 Additionally if your computer BIOS supports configuring the AC recovery
 power mode to always on, the computer will start back up. Most default to
 last state, which doesn't work as well since shutting down will power off
 the computer, which means that last state is off. There are some
 workarounds to change the shutdown sequence to just halt and not power
 Thanks again for your response.
 I did an experiment which I probably should have done before,
 to find out exactly what happens if the power is cut off, and then restored.
 You were completely correct.

 My server is an HP MicroServer (running CentOS-6.2).
 If the machine was running before being cut off
 then it reboots normally when power is restored.
 If however it is shutdown before the power is cut
 then it does not reboot when power is restored.
 As you say, it always returns to the state it was in when the outage occurs.

 I looked in the BIOS, but there is no option on this machine
 to change that.

 So I shall know what to do when I get a UPS.
 If there is no better setting I can just allow the UPS to become exhausted
 if the outage lasts longer than the life of the UPS.


in the apc software(or nut worst case) you'll be able to specify that 
after x minutes it will shutdown.  Better to have a clean shutdown and 
have to hit the power button than a dirty one and risk corrupting your 
filesystem.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] A problem with power outages

[William Warren]

get a ups that has a usb connection.  What you can do then is when you 
loose power after x amount of time the ups software will gracefully 
shutdown the server automatically.  some ups software will even start 
the server back up once a sufficient charge has been obtained.

On 3/24/2012 7:33 AM, Timothy Murphy wrote:
 I have a CentOS-6.2 server in Italy.
 Every few months the server gets into a strange state
 and stops working after a power outage.
 I should say that this does not occur after every power outage;
 I suspect, but have no real evidence for this,
 that if the power comes back too quickly
 then the machine gets confused because it is in the middle of closing down.

 If I am in Italy the solution is simple;
 I just press the power button on the machine until it stops
 and then switch it on again, and everything works fine.

 I guess that the proper solution is to get a UPS.
 PowerTrust (or Trust) UPS's are available at a reasonable price (€40-€50).
 But I have one question about this solution.
 What if the outage lasts longer than the life of the UPS, about 10
 minutes?
 I'd actually like the UPS simply to halt the machine in the proper way
 after say 1 minute; but can this be arranged?
 (If the machine knew it had gone onto UPS,
 this could be arranged fairly simply.)

 There is one other possibility.
 There is a Billion modem/router between the ADSL input and the computer.
 This does not seem to have any problem with power outages.
 So if it were possible to send a message to the router
 which would cause the computer to be turned off and on again,
 that might offer an alternative solution.
 One problem with this is that the Italian ISP
 only offers a dynamic IP address.
 I run ddclient with dyndns on the server to translate this
 into a fixed domain-name.
 But this means that any action of this kind would have to be taken
 before the IP address changes.
 I think it usually stays the same for several days,
 but I guess this might not be true if there is an outage at the ISP's site,
 during a big electric storm.

 Any suggestions, advice or experience of this problem gratefully received.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] md raid 10

[William Warren]

well ubuntu allows me to boot from MD RAID10...so there's something they
are doing that allows that to boot.  I think RH needs to take a cue in that
areaI'm not going to reconfigure my entire array to accommodate centos
in this instance.  if i don't need MDRAID 10 boot then this machine will
come back to centos6..:)  Centos 6 is great but it's not right for this
particluar machine..:(

On Tue, Mar 6, 2012 at 11:27 AM, Les Mikesell lesmikes...@gmail.com wrote:

 On Tue, Mar 6, 2012 at 9:29 AM, William Warren
 hescomins...@emmanuelcomputerconsulting.com wrote:
  why will Centos 6 not boot from an mdraid 10 partition?

 It has to load code before you have the kernel that understands raid
 or how to detect it.  That's why they call it booting.

 --
  Les Mikesell
lesmikes...@gmail.com
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] md raid 10

[William Warren]

the problem with that is when your boot drive dies your can't boot...with
ubuntu at least if any drive dies i can stilll boot off of the other 3..:)

On Wed, Mar 7, 2012 at 12:40 PM, Ross Walker rswwal...@gmail.com wrote:

 On Mar 7, 2012, at 11:02 AM, Les Mikesell lesmikes...@gmail.com wrote:

  On Wed, Mar 7, 2012 at 9:49 AM, William Warren
  hescomins...@emmanuelcomputerconsulting.com wrote:
  well ubuntu allows me to boot from MD RAID10...so there's something they
  are doing that allows that to boot.
 
  That ubuntu version has probably switched to grub2.  Good luck
  debugging it when it breaks - it is very different.

 Plus it is very handy to have a /boot that is readable/mountable without
 LVM or MDRAID drivers loaded and configured.

 /boot is only 256-512MB partition that is read only during boot and
 updated only when there is a new kernel, so it ain't no big thing. Even
 when RH goes to grub2 I think I'll keep this setup by default.

 -Ross

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] md raid 10

[William Warren]

why will Centos 6 not boot from an mdraid 10 partition?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Software RAID1 with CentOS-6.2

[William Warren]

What's funny is WD is just being idiotic. Seagate does NOT have that 
extended error checking. I have two barracuda green drives in an sbs 2k8 
server on a sas 6 ir and they work perfectly.

On 2/29/2012 3:05 PM, m.r...@5-cent.us wrote:
 Miguel Medalha wrote:
 A few months ago I had an enormous amount of grief trying to understand
 why a RAID array in a new server kept getting corrupted and suddenly
 changing configuration. After a lot of despair and head scratching it
 turned out to be the SATA cables. This was a rack server from Asus with
 a SATA backplane. The cables, made by Foxconn, came pre-installed.

 After I replaced the SATA cables with new ones, all problems were gone
 and the array is now rock solid.
 Thanks for this info, Miguel.
 snip
 As an additional information, I quote from the Caviar Black range
 datasheet:

 Desktop / Consumer RAID Environments - WD Caviar Black Hard Drives are
 tested and recommended for use in consumer-type RAID applications
 (RAID-0 /RAID-1).
 - Business Critical RAID Environments – WD Caviar Black Hard Drives are
 not recommended for and are not warranted for use in RAID environments
 utilizing Enterprise HBAs and/or expanders and in multi-bay chassis, as
 they are not designed for, nor tested in, these specific types of RAID
 applications. For all Business Critical RAID applications, please
 consider WD’s Enterprise Hard Drives that are specifically designed with
 RAID-specific, time-limited error recovery (TLER), are tested
 extensively in 24x7 RAID applications, and include features like
 enhanced RAFF technology and thermal extended burn-in testing.
 Wonderful... NOT. We've got a number of Caviar Green, so I looked up its
 datasheet... and it says the same.

 That rebuild of my system at home? I think I'll look at commercial grade
 drives

 mark

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Software RAID1 with CentOS-6.2

[William Warren]

first off..if you are using the on bios raid turn it off.  Secondly 
black drives form WD intentionally put themselves into deep cycle diags 
every so often.  This makes them impossible to use in hardware and FRAID 
setups.  I have 4 of them in raid 10 under mdraid and i had to disable 
bios raid for them to not go nuts.  I still get the occasional error but 
usually the kernel is smart enough to let them take their breather they 
want to take.  unfortunately the only drives that don't do this are 
their enterprise drives.  this is the primary reason i have 
discontinued my use of all western digital products.

On 2/28/2012 8:08 PM, Kahlil Hodgson wrote:
 Hi Scott,

 On Tue, 2012-02-28 at 16:48 -0800, Scott Silva wrote:
 First thing... Are they green drives? Green drives power down randomly and 
 can
 cause these types of errors...
 These are 'Black' drives.

 Also, maybe the 6GB sata isn't fully supported
 by linux and that board... Try the 3 GB channels
 Yer, I was thinking that might be the case.  I'll give that a go.

 Thanks,

 Kal


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSD Drives

[William Warren]

On 2/2/2012 5:19 PM, Peter A wrote:
 On 02/02/12 17:01, William Warren wrote:
 On 2/2/2012 2:15 PM, Peter A wrote:
 If you're worried about io reliability, then buy a (way more expensive)
 SLC drive, rather than the consumer level MLC... We have some SLC drives
 here that from their manufacturer have been rated at 3 or more years of
 100% write 24x7...

 Peter.

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 exactly hence why i said stay with OCZ or Intel..MLC drives are the
 best.  But also the smaller the process node the shorter the lifespan of
 the flash.  MLC drives will also over provision more spare flash area
 most times.
 Aeh... that's exactly the opposite of what I said. MLC (multi level
 cell) SSDs store more than one bit per cell. In current devices that's
 mostly 2 bits per cell, but more is around the corner. On an SLC (single
 level cell) there is only one bit per cell - true binary just like what
 we have in RAM and others. SLC devices are superior in reliability
 because it simply takes a lot more disturbing of a cell to make it lose
 enough charge that a 1 gets interpreted as a 0. The devices are also
 usually faster, especially on a re-write basis.
 A Oracle 96GB flash card (SLC) physically has 128GB. Most consumer MLC
 devices with 128GB are sold as 120GB visible... Again in favor of the
 SLC. Only problem is that you pay for what you get. SLC devices are
 significantly more expensive. Fusion I/O and all the other server ssd
 vendors do the same - they give you a cheap MLC device with limited
 performance and reliability and a high end, much more pricey SLC unit.

 Peter.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
i mistyped meant to type slc...:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSD Drives

[William Warren]

On 2/2/2012 1:19 PM, Matt wrote:
 Has anyone installed a high I/O application such as an email server on
 SSD drives?  Was thinking about doing two SSD's in RAID1.  It would
 solve my I/O latency issues but I have heard that SSD's wear out
 quickly in high I/O situations?  Something like each memory location
 only has X many writes before its done.  Just wandering if anyone has
 tested it and if newer SSD's are better about this?
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
it all depends on how much writing you do AND how much spare space the 
drives have.  The more spare flash the drives have the longer they'll 
live due to being able to spread the writing wear over a larger area.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSD Drives

[William Warren]

On 2/2/2012 2:15 PM, Peter A wrote:
 On 02/02/12 14:05, Mike wrote:
 On Thu, 2 Feb 2012, William Warren wrote:

 On 2/2/2012 1:19 PM, Matt wrote:
 Has anyone installed a high I/O application such as an email server on
 SSD drives?  Was thinking about doing two SSD's in RAID1.  It would
 solve my I/O latency issues but I have heard that SSD's wear out
 quickly in high I/O situations?  Something like each memory location
 only has X many writes before its done.  Just wandering if anyone has
 tested it and if newer SSD's are better about this?

 it all depends on how much writing you do AND how much spare space the
 drives have.  The more spare flash the drives have the longer they'll
 live due to being able to spread the writing wear over a larger area.

 How very timely, I'm just starting to investigate something similar
 myself.  I don't have much to contribute however this forum post:
 http://www.xtremesystems.org/forums/showthread.php?271063-SSD-Write-Endurance-25nm-Vs-34nm
 seems as though it'll be interesting, if I can ever make it through 3500+
 pages to get to the conclusion.

 If you're worried about io reliability, then buy a (way more expensive)
 SLC drive, rather than the consumer level MLC... We have some SLC drives
 here that from their manufacturer have been rated at 3 or more years of
 100% write 24x7...

 Peter.

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
exactly hence why i said stay with OCZ or Intel..MLC drives are the 
best.  But also the smaller the process node the shorter the lifespan of 
the flash.  MLC drives will also over provision more spare flash area 
most times.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Is avahi essential?

[William Warren]

On 1/11/2012 6:42 AM, Timothy Murphy wrote:
 Rilindo Foster wrote:

 So I looked up avahi on the web, but as far as I could see
 it is not doing anything essential;
 so I was wondering if stopping avahi-daemon would have any bad effect?
 Avahi is a mdns daemon. You can safely disable it in most cases.
 But what applications use mdns?

 As far as I can see, it is some sort of rival to dhcpd.
 Is it only used within local LANs?
 Is it used, for example, by CUPS to identify printers?
 When, if ever, would it be used in a home network?

http://www.google.com/search?sourceid=chromeie=UTF-8q=mdns 
http://www.google.com/search?sourceid=chromeie=UTF-8q=mdns

multicast dns.  How it applies to cent though i don't know at this instant.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Disable autoneg on r8169?

[William Warren]

On 12/20/2011 12:59 AM, Barry Brimer wrote:
 1. The switch being used has autoneg off and has port set to 100 full duplex.
 2. Many times NIC fails to come up properly during PXE boot:

 Any other ideas?
 udev rules?
 mii-tool?
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
re-enable autoneg on switch?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What happened to 6.1

[William Warren]

On 10/30/2011 8:33 PM, Christopher Chan wrote:
 On Sunday, October 30, 2011 08:38 PM, William Warren wrote:

 Or move to another distro that has timely security updates and long term
 support like Centos.
 What...Ubuntu LTS?
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
yeppers.  I have 1 cent 5 machine left.  Like I said before It it too 
bad RH is doing what they are doing.  It is going to mean the death of 
RHEL rebuilds...look at what is happening to Centos.  Per Johnny's 
statement they can't truly maintain 100% binary compatibility.  It is 
not the Centos team's fault although they are going to be the biggest 
casualty.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What happened to 6.1

[William Warren]

On 10/21/2011 9:23 AM, Johnny Hughes wrote:
 On 10/21/2011 06:25 AM, Steve Walsh wrote:
 On 10/21/2011 10:16 PM, Ljubomir Ljubojevic wrote:
 Vreme: 10/21/2011 12:25 PM, Fajar Priyanto pis(e:
 As far as I am aware, how I understood official explanation, packages
 that are introduced in CR repo already PASSED QA testing, but are in
 limbo because there are issues with building ISO
 Nope.

 http://wiki.centos.org/AdditionalResources/Repositories/CR

 The continuous release ( CR ) repository makes generally available
 packages that will appear in the next point release of CentOS, on a
 testing and *hotfix* basis until formally released. 

 System administrators who choose to opt-in to this process can access
 the newly built packages, as soon as they are exported from the build
 system. They are less comprehensively reviewed in the QA validation stage. 
 There is SOME QA ... just not all the QA that they get as part of the
 main release.

 They are not right off the build and into the server ... we do our
 functionality test suite prior to pushing CR (and other tests, and look
 for repo closure).  They are fairly well vetted.

 We are trying to serve two masters here ... fast release and fully
 tested release.  CR is the middle of that and a compromise that should
 work and not break things AND still allow us to do the testing we want
 for the main release too.

 So, you should expect more issues from CR than the main tree ... but the
 risk should be minimal for any kind of major breakage.

 For what its worth, I use CR on the machines I manage in production.



 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
I think many of us would like to see releases in a timely manner.  
Centos is now months behind in nearly every version with the onset of 
cent6.  I've started moving boxes to ubuntu due to this increasing 
delay.  The security of many machines is now at stake with these 
continued delays.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What happened to 6.1

[William Warren]

On 10/21/2011 10:17 AM, Giles Coochey wrote:
 On Fri, October 21, 2011 16:02, Nicolas Thierry-Mieg wrote:

 Giles Coochey wrote:
 So Centos 6.0 is EOL?
 not familiar with the rhel life cycle are you?
 Read this:
 https://access.redhat.com/support/policy/updates/errata/
 ___
 Thanks. I see that.

 However, if I install whatever latest version of an operating system
 distribution. I expect to be able to run something that will give me
 stable security-updates for that distribution.

 It appears that this is not the case, and my only option is to take my
 servers down the beta route to Centos 6.1 Release Candidates.

 Other than that - the only advice given so far is: remain vulnerable to
 attack.


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
Or move to another distro that has timely security updates and long term 
support like Centos.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What happened to 6.1

[William Warren]

On 10/21/2011 12:54 PM, Johnny Hughes wrote:
 On 10/21/2011 10:01 AM, Les Mikesell wrote:
 On Fri, Oct 21, 2011 at 9:51 AM, Nicolas Thierry-Mieg
 nicolas.thierry-m...@imag.fr  wrote:

 Johnny, chill. I don't blame him for being confused. Up until right now,
 you updated to a point release, then, over the weeks and months, there
 were updates. All of a sudden, there are *no* updates for the 6.0 point
 release, which is a major change in what everyone expected, based on
 history.
 this is the way it has always been: once upstream releases x.y+1 , there
 are no more updates to x.y (in upstream and therefore also in centos),
 until centos releases x.y+1 .
 Yes, but that used to be transparent, because the centos x.y+1 release
 happened quickly so it didn't matter that the update repo was held
 back until an iso build was done.

 Yes, and NOW the release process is MUCH harder.

 Red Hat used to have an AS release that contained everything ... we
 build that and we get everything.  Nice and simple.  Build all the
 packages, look at it against the AS iso set ... done.  Two weeks was
 about as long as it took.

 Now, for version 6, they have:

 Red Hat Enterprise Linux Server (v. 6)
 Red Hat Enterprise Linux Workstation (v. 6)
 Red Hat Enterprise Linux Desktop (v. 6)
 Red Hat Enterprise Linux HPC Node (v. 6)
 Red Hat Enterprise Linux Workstation FasTrack (v. 6)
 Red Hat Enterprise Linux Server FasTrack (v. 6)
 Red Hat Enterprise Linux Desktop FasTrack (v. 6)
 Red Hat Enterprise Linux Scalable File System (v. 6)
 Red Hat Enterprise Linux Resilient Storage (v. 6)
 Red Hat Enterprise Linux Load Balancer (v. 6)
 Red Hat Enterprise Linux HPC Node FasTrack (v. 6)
 Red Hat Enterprise Linux High Performance Network (v. 6)
 Red Hat Enterprise Virtualization

 They have the same install groups with different packages based on the
 above groupings, so we have to do some kind of custom generation of the
 comps files to things work.

 They have created an optional channel in several of those groupings that
 is only accessible via RHN and they do not put those RPMS on any ISOs
 ... and they have completely changed their Authorized Use Policy so
 that we can NOT login to RHN and use anything that is not on a public
 FTP server or on an ISO set ... effectively cutting us off from the
 ability to check anything on the optional channel.

 Now we have to engineer a compilation of all those groupings, we have to
 figure out what parts of the optional channels go at the point release
 and which ones do not (the ones that are upgrades).   Sometimes the only
 way to tell is when something does not build correctly and you have
 reverse an optional package to a previous version for the build, etc.

 We have to use anaconda to build our ISOs and upstream is using
 something else to build theirs .. so anaconda NEVER works anymore out
 of the box.  We get ISOs (or usb images) that do not work and have to
 basically redesign anaconda.

 We can't look at upstream build logs, we can't get all the binary RPMs
 for testing and be within the Terms of Service.

 And with the new release, it seems that they have purposely broken the
 rpmmacros, and do not care to fix it:

 https://bugzilla.redhat.com/show_bug.cgi?id=743229

 So, trust me, it is MUCH more complicated now than it was with previous
 releases to build.

 With the 5.7 release, there were several SRPMS that did not make it to
 the public FTP server without much prompting from us.  And with the
 Authorized Use Policy, I can not just go to RHN and grab that SRPM and
 use it.  If it is not public, we can no longer release it.

 So, the short answer is, it now takes longer.

 Thanks,
 Johnny Hughes




 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
And that Johnny has been the answer we have been requesting for a 
long time now.  I figured the upstream packaging changes broke your 
systems even when lance said that wasn't the case.  The results speak 
for themselves.  Nothing against the Centos folks you are now being 
actively worked against by Redhat itself.  This is going to slowly choke 
off community builds of RHEL...and force them to fedora.  Due to this 
decicion byt he upstream is why I'm moving to Ubuntu LTS for my new 
servers.  It is unfortunate that the abuse by Orcale of the exact 
procedure you use that prompted Red Hat to take these packaging measures.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 6.0

[William Warren]

On 8/28/2011 12:43 PM, Thomas Dukes wrote:


 -Original Message-
 From: centos-boun...@centos.org
 [mailto:centos-boun...@centos.org] On Behalf Of Always Learning
 Sent: Sunday, August 28, 2011 12:31 PM
 To: CentOS mailing list
 Subject: Re: [CentOS] CentOS 6.0


 On Sun, 2011-08-28 at 12:29 -0400, Thomas Dukes wrote:

 Can anyone pls tell me if a ThinkServer TS130 with a E3-1225 Xeon
 processor is compatible with CentOS 6.0? I would like to
 upgrade from
 5.6 but my hardware will not allow me to do so.
 Intel
 Quad-core
 3.10 GHz
 L2 Cache 1 MB
 L3 Cache 6 MB
 64-bit Processing
* Turbo Boost Technology
* Virtualization Technology
* Trusted Execution Technology
* Extended Memory 64 Technology
 Platform: PC

 Seems OK, what specific problems are you having ?
 Sorry, I meant the hardware I have now is preventing me from upgrading to
 6.0

 I just want to make sure CentOS 6.0 would have the necessary drivers for the
 on board video, ethernet, etc., for the TS130 before I make the purchase. I
 just don't want to be in the same boat as I'm in now.

 I have bought a PC in eight years so I just want to make sure its going to
 run 6.0.

 Thanks,

 Eddie

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
first off don't upgrade from cent 5 to 6.  backup and reinstall..
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] UPS issues with PFC PSU

[William Warren]

On 8/24/2011 10:28 PM, Robert Arkiletian wrote:
 On Wed, Aug 24, 2011 at 4:26 PM, Rudi Ahlersr...@softdux.com  wrote:
 Because the original post made no mention of CentOS at all.  At least
 that's my guess and that's also the first impression I had about the
 post.
 Sorry I should have initially stated it was for CentOS6.

 well, where else would he connect the UPS to? His fish tank?
 Surely if someone has a PC, and is subscribed to a Linux mailing linux
 and asks for advice on a hardware device then it would be related to
 compatibility as well.

 Thanks for the support but I really don't want my query to turn into a
 debate about what's off topic. It's just that I have only ever used
 APC and apcupsd. I've never used CyberPower and wondered if other
 CentOS people were using it with success/reliability. If that's off
 topic then I've learned something.


cypberpower does provide a linux utility to communicate with their ups 
systems.  I have one that is on three server...:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Problem getting eth0 up

[William Warren]

Is there a technical reason...like the system won't network at all.. as 
to not removing network manager?


On 8/17/2011 9:58 AM, Lisandro Grullon wrote:

Alfred,
I would not delete network manager, it would be better if you stop it 
service NetworkManager stop and disable from booting chkconfig 
NetworkManager offit can turn a useful tool for troubleshooting 
in the future. In a second note about the multi-NIC, i would focus in 
the actual card that have the connectionshere at work we have 
system with 8 NIC for redundant links, but my main focus is in the 
actual ports that have connectivity. Take a look at 
/etc/sysconfig/network-scripts.focus in the ifcfg-ethx that is 
actually working in your box. Don't forget that you can always use 
system-config-network-tui as an alternative to using the GUI, as long 
as you have it install yum install system-config-network-tui 
-y.I think you are in the right path, let us know how it turn 
out. In reference to the host name, take a look at the file 
/etc/sysconfig/network and /etc/sysconfig/network-scripts/ifcfg_ethx 
to assign host name informationI hope I didn't confuse you 
morethe Redhat documentation is rocksolid, take a glance at it. 
Best of luck to you.




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] hardware isues

[William Warren]

On 8/17/2011 9:59 AM, lists-centos wrote:

  Original Message 
 Date: Wednesday, August 17, 2011 01:33:39 PM +
 From: lists-centos
 To: William Warrenhescomins...@emmanuelcomputerconsulting.com
 Subject: Re: [CentOS] hardware isues



  Original Message 
 Date: Wednesday, August 17, 2011 06:43:24 AM -0400
 From: William Warrenhescomins...@emmanuelcomputerconsulting.com
 To: lists-centos
 Subject: Re: [CentOS] hardware isues

 On 8/13/2011 9:40 PM, lists-centos wrote:
  Original Message 
 Date: Saturday, August 13, 2011 09:06:51 PM -0400
 From: William
 Warrenhescomins...@emmanuelcomputerconsulting.com

 I have a broadcom bcm5722 and a dual intel pro/1000 pt nic in a
 dell  t110.  The setup sees the cards and i put them into
 automatic mode.   After the install no cards are detected at
 all. Astaro 8.01 detects and  utilizes all of these cards just
 fine. I have also tried ubuntu server  10.04 lts and they work
 fine. I'm curious if this is a bug with Centos 6?
 I have a new T310 with what I suspect has the same intel dual NIC
 - the machine is off at the moment and the order detail just
 says:

 On-Board Dual Gigabit Network Adapter [430-2008]

 that I installed centos 6.0 on last week. I only configured first
 port and it worked fine. The install set up a stub ifcfg-eth1
 which looked fine too, but I haven't configured it yet to confirm
 that it works as expected.


   - Richard


 how did your testing go?  I've reburned and md5ed multiple times.
 I just cannot get cent6 to work on this machine.  ubuntu 10.05lts
 works flawlessly.
 I installed centos6.0 on a second new Dell T310 yesterday with no
 problems. I'm doing net installs from a local repository so do the
 network setup at that point, assigning a static (ipv4) ipnumber.
 I'm given the choice of NIC, and in both cases have selected the
 first one. I don't touch the networking stuff after that point in
 the install, and  it all works fine. The
 /etc/sysconfig/network-scripts/ifcfg-eth0 file is fully populated.
 The eth1 file has stub information.

 The card on the second machine is a Broadcom (haven't brought the
 first t310 back up yet to confirm its card) -- below are the
 details from dmesg from the last reboot.


 Broadcom NetXtreme II Gigabit Ethernet Driver bnx2 v2.0.8-j15 (Feb
 15, 2010)
 bnx2 :02:00.0: PCI INT A -  GSI 16 (level, low) -  IRQ 16
 bnx2 :02:00.0: setting latency timer to 64
 bnx2 :02:00.0: firmware: requesting
 bnx2/bnx2-mips-09-5.0.0.j15.fw
 bnx2 :02:00.0: firmware: requesting
 bnx2/bnx2-rv2p-09-5.0.0.j10.fw
 eth0: Broadcom NetXtreme II BCM5716 1000Base-T (C0) PCI Express
 found at mem da00, IRQ 16, node addr 78:2b:cb:3d:08:98
alloc irq_desc for 17 on node -1
alloc kstat_irqs on node -1
 bnx2 :02:00.1: PCI INT B -  GSI 17 (level, low) -  IRQ 17
 bnx2 :02:00.1: setting latency timer to 64
 bnx2 :02:00.1: firmware: requesting
 bnx2/bnx2-mips-09-5.0.0.j15.fw
 bnx2 :02:00.1: firmware: requesting
 bnx2/bnx2-rv2p-09-5.0.0.j10.fw
 eth1: Broadcom NetXtreme II BCM5716 1000Base-T (C0) PCI Express
 found at mem dc00, IRQ 17, node addr 78:2b:cb:3d:08:99

  ---

 A couple of years ago I had trouble with a RealTek card and found
 that the kernel didn't have (working) firmware support for it. In
 that case I was able to get the necessary driver and would load it
 after the machine came up. The next kernel update or two had the
 issue fixed.

 I was just looking at the message on the list [CentOS] Problem
 getting eth0 up and it got me wondering. Are you configuring the
 network at any point in the install process? With previous versions
 I seem to remember the network configuration step as being obvious.
 With 6 it isn't. Because I configure eth0 as part of the net install
 setup I skip the Configure Network box, but it's rather subtle and
 easily missed if you haven't already done the network setup.


- Richard



First time I didn't...the subsequent times I did.  I tried setting them 
as dhcp to no avail.  I then tried static.  I'll try one more time if it 
doesn't work i'll have to stick with ubuntu...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] hardware isues

[William Warren]

On 8/14/2011 6:39 AM, lists-centos wrote:
 did you add the broadcom card, or did it come installed? i'm
 wondering if there's some type of conflict between it and the
 onboard  NICs.


  Original Message 
 Date: Saturday, August 13, 2011 11:29:25 PM -0400
 From: William Warren
 To: lists-centos
 Subject: Re: [CentOS] hardware isues

 Well i have also tried the minimal version and the same thing.  it
 seems there's something not going well with the t110(and maybe
 higher units) and centos?

 On 8/13/2011 9:40 PM, lists-centos wrote:
  Original Message 
 Date: Saturday, August 13, 2011 09:06:51 PM -0400
 From: William Warrenhescomins...@emmanuelcomputerconsulting.com

 I have a broadcom bcm5722 and a dual intel pro/1000 pt nic in a
 dell  t110.  The setup sees the cards and i put them into
 automatic mode.   After the install no cards are detected at all.
 Astaro 8.01 detects and  utilizes all of these cards just fine.
 I have also tried ubuntu server  10.04 lts and they work fine.
 I'm curious if this is a bug with Centos 6?
 I have a new T310 with what I suspect has the same intel dual NIC
 - the machine is off at the moment and the order detail just says:

 On-Board Dual Gigabit Network Adapter [430-2008]

 that I installed centos 6.0 on last week. I only configured first
 port and it worked fine. The install set up a stub ifcfg-eth1
 which looked fine too, but I haven't configured it yet to confirm
 that it works as expected.


   - Richard


  End Original Message 


The broadcom is embedded the intel dual port is the addon.  Only centos 
6 has this issue i am currently running kvm under ubuntu 10.04 right 
now.  I also did a test install of esxi and astaro and they worked 
perfectly there.  It is something weird with centos.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] instlaling onto mdadm centos 6

[William Warren]

On 8/13/2011 7:40 AM, B.J. McClure wrote:
 On Sat, 2011-08-13 at 00:01 -0400, William Warren wrote:
 I am attempting to use mdraid for booting my machine but it never does.
 Does the centos 5 guide for linux software raid work for centos 6?
 Dunno, but boot partition must be raid 1.  Grub does not work with 5,
 10. etc.

 Cheers,
 B.J.


 CentOS Linux release 6.0 (Final)

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
found out grub will not boot directly off the /boot md device..but i can 
make grub put itself on the mbr's of both disks..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] hardware isues

[William Warren]

I have a broadcom bcm5722 and a dual intel pro/1000 pt nic in a dell 
t110.  The setup sees the cards and i put them into automatic mode.  
After the install no cards are detected at all.  Astaro 8.01 detects and 
utilizes all of these cards just fine.  I have also tried ubuntu server 
10.04 lts and they work fine.  I'm curious if this is a bug with Centos 6?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] instlaling onto mdadm centos 6

[William Warren]

I am attempting to use mdraid for booting my machine but it never does.  
Does the centos 5 guide for linux software raid work for centos 6?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] managing a rack full of centos servers

[William Warren]

On 7/19/2011 7:43 PM, John R Pierce wrote:
 to date, I've done all my administration on a manual 1 at a time basis,
 as each system has been pretty much unique.

 its looking like I might need to setup a deployment of a dozen or 2
 basically identical machines, all running pretty much the same sorts of
 stuff.  I have zero experience with the sorts of management tools folks
 use to automate this type of configuration, both initial setup, and
 ongoing management (system updates, user application updates,
 configuration changes, etc).

 anyone care to suggest any such tools, maybe some real-world pros and
 cons?   of course, being centos, I prefer FOSS tools.   for various
 reasons, this environment likely will NOT be virtualized (although I may
 emulate a test setup with vmware).



webmin is a good free option depending on your admin needs.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] firewall?

[William Warren]

On 7/16/2011 12:33 AM, hadi motamedi wrote:
 Dear All
 I need to put my centos 5.6 server as firewall server in fron of a
 windows-running node before connecting it to the net. Can you please
 let me know what stuff do I need to put on my centos server?
 Thank you
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
I would sugget a dedicated firewall distro like untangle, pfsense, 
smoothwall,...etc etc etc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 6 Server has no GUI

[William Warren]

On 7/11/2011 10:43 AM, Keith Beeby wrote:
 Hi,

 So first daft question with Centos 6 (someone had to be first!) I've setup 
 Centos 6 as a Server but as with Centos 5 it used to boot into the GUI but v6 
 doesn't do this, startx etc doesn't seem to work to launch the GUI

 Any suggestions on how I can get this to work?

 Thank you

 Keith
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
install webmin or something.  why load the machine down with x..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How much SWAP Space.

[William Warren]

On 7/6/2011 9:17 PM, Kaushal Shriyan wrote:
 Hi,

 I have loaded CentOS 5.6 on HP DL 180G6 2U Rack Server and the
 physical RAM is 32 GB. As per
 http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-swapspace.html
 It says it should be 1 x of Physical RAM or less. Not sure about the
 less word in deciding swap space size

 Please suggest/guide further on what all parameters i should decide to
 set swap space.

 Regards,

 Kaushal
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
frankly unless you anticipate needing to use swap i would not set more 
than 8 gigs..it really depends on your application.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 1U firewall hardware

[William Warren]

On 5/15/2011 5:26 PM, Miguel Medalha wrote:
 You can use something like this Atom 525 dual core motherboard:

 http://www.jetwaycomputer.com/NF99.html

 Or this Atom C550 dual core board:

 http://www.jetwaycomputer.com/NC9C.html

 With the AD3INLAN-G daughterboard:

 http://www.jetwaycomputer.com/Daughter_Board.html

 This will give you 5 Gigabit Ethernet ports (2 on PCIe and 3 on PCI) and
 a free PCI slot on which you can put up to 4 more.
 Of course it all depends on the needed concurrent traffic.

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
pci is a shared bus with a max of 2 gigabits.  you'll see a gigabit but 
never see two or more.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] status of 5.6 updates

[William Warren]

There has been a steady stream of updates of security issues for 5.6.  
I'm curious about the timeline for these updates from centos...:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] status of 5.6 updates

[William Warren]

On 4/13/2011 5:20 PM, Ljubomir Ljubojevic wrote:
 William Warren wrote:
 There has been a steady stream of updates of security issues for 5.6.
 I'm curious about the timeline for these updates from centos...:)
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


 You should try to search the mailing list first, then ask redundant
 question. This was answered in last 24-48h.

 Do to the bandwidth constrictions, currently they push SRPMS. They will
 either push updates in parallel, or they will wait a day or two for
 SRPM's to finish mirroring to primary mirrors and then push updates.

 Ljubomir
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
I simply missed that..:)  Thanks..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Download the repo DAG of CentOS 5.5

[William Warren]

On 4/3/2011 2:33 PM, Fidel Dominguez-Valero wrote:
 Yes, I know that, but I want to download for make a local repository

 On Sun, 2011-04-03 at 14:25 -0400, Winter wrote:
 On 4/3/2011 2:12 PM, Fidel Dominguez-Valero wrote:
 hello
 somebody might help to create a script to download the repo DAG of
 CentOS 5.5 to my PC. I already did with OS, Update, and Extras packages.
 I want to do with DAG repository.

 I tried but I don't know much about scripts.
 Thanks
 Fidel

 Hello Fidel,

 This should help you out:

 http://dag.wieers.com/rpm/FAQ.php#B1


 W.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
look up how to build a centos mirror and simply sub in the dag repo.  NO 
scripting involved.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] question on software raid

[William Warren]

On 4/1/2011 11:32 AM, Jerry Geis wrote:
 Device /dev/sda 20 offline uncorrectable sectors
my .02 i would replace the drive.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] check memory configuration

[William Warren]

What's there way to do this?  AKA is there a proc command that will show 
me what chips i have installed in a server without having to crack the 
case?  Just a general pointer is fine..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] check memory configuration

[William Warren]

On 3/28/2011 5:29 PM, m.r...@5-cent.us wrote:
 William Warren wrote:
 What's there way to do this?  AKA is there a proc command that will show
 me what chips i have installed in a server without having to crack the
 case?  Just a general pointer is fine..:)
 lshw, dmidecode, cat'ing files in /proc

 mark

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
that lshw gave me the pointer i needed..thanks to all who answered..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] The delays on CentOS 5.6 arecausing EPEL incompatibilities [OT]

[William Warren]

On 3/21/2011 6:19 PM, Jason Pyeron wrote:
 Now I have read this thread twice.

 :(

 --
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 -   -
 - Jason Pyeron  PD Inc. http://www.pdinc.us -
 - Principal Consultant  10 West 24th Street #100-
 - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
 -   -
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 This message is copyright PD Inc, subject to license 20080407P00.




 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
yeah i'm getting everything in duplicate too.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Duplicate Mails

[William Warren]

On 3/21/2011 7:53 PM, Max Hetrick wrote:
 On 03/21/2011 05:57 PM, Ralph Angenendt wrote:

 Apologies if this caused any inconveniences.
 No apology necessary from you. Much appreciated for fixing it quickly,
 Ralph.

 If anyone is using Thunderbird, there's a handy add-on called Remove
 Duplicate Messages on Mozilla's add-on site.

 https://addons.mozilla.org/en-US/thunderbird/addon/remove-duplicate-messages/

 Regards,
 Max
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
glad to see this fixed...i thought something was weird..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] The delays on CentOS 5.6 are causing EPEL incompatibilities

[William Warren]

On 3/20/2011 3:30 PM, Les Mikesell wrote:
 On 3/20/11 1:57 PM, Eero Volotinen wrote:
 .
 I hope the situation may change now with Oracle in direct competition with
 RH
 for RH and RH-based distros user base. BTW Oracle offers installable
 binaries for free.
 Yes, but patches (support) cost money, as you might know. Anyway, it
 is better to pay for real
 RH instead of oracle linux..
 Or, maybe there was back in the days when they released source that matched
 their binaries...  Personally, I think everyone would be better off today if
 they had turned their back on anything RH-related the day they stopped
 permitting redistribution of their binaries among the community that created
 them and made them usable in the first place.  I was too lazy to change and
 Centos made it look reasonable to leave things approximately the same.  But, 
 now
 that RH is putting the screws on anyone who doesn't pay up it is probably time
 for anyone who cares about free software to rethink things.

exactly.  Nothing against Centos but I've deployed my last RH based 
box.  It'll be either Debian or Ubuntu from now on.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] The delays on CentOS 5.6 are causing EPEL incompatibilities

[William Warren]

On 3/20/2011 6:02 PM, aurfal...@gmail.com wrote:
 On Mar 20, 2011, at 1:52 PM, William Warren wrote:

 On 3/20/2011 3:30 PM, Les Mikesell wrote:
 On 3/20/11 1:57 PM, Eero Volotinen wrote:
 .
 I hope the situation may change now with Oracle in direct
 competition with
 RH
 for RH and RH-based distros user base. BTW Oracle offers
 installable
 binaries for free.
 Yes, but patches (support) cost money, as you might know. Anyway, it
 is better to pay for real
 RH instead of oracle linux..
 Or, maybe there was back in the days when they released source that
 matched
 their binaries...  Personally, I think everyone would be better off
 today if
 they had turned their back on anything RH-related the day they
 stopped
 permitting redistribution of their binaries among the community
 that created
 them and made them usable in the first place.  I was too lazy to
 change and
 Centos made it look reasonable to leave things approximately the
 same.  But, now
 that RH is putting the screws on anyone who doesn't pay up it is
 probably time
 for anyone who cares about free software to rethink things.

 exactly.  Nothing against Centos but I've deployed my last RH based
 box.  It'll be either Debian or Ubuntu from now on.
 I don't get it, why so radical?

 Why not go SL and maintain the same methodology?

 - aurf
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
because the software i use for myself and my clients...rhel availability 
is dropping and unbuntu debian is increasing.  rhel's various code 
decisions aren't helping.  It's not radical..it's still Linux and still 
free.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] The delays on CentOS 5.6 are causing EPEL incompatibilities

[William Warren]

On 3/20/2011 7:00 PM, compdoc wrote:
 It'll be either Debian or Ubuntu from now on.

 Ubuntu makes a great server. But because of recent news I tried opensuse for
 the first time and I really like it.

 I understand the need for stability, but for what I do, having the newest
 (stable) kernel and packages has a greater benefit.

 Kernel 2.6.37 is in some releases now, and although everyone is crazy about
 2.6.38, I'll wait until its released as an official upgrade.

 And that won't be long - just a few months, likely...





 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
to which news are you referring about ubuntu-wise?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] The delays on CentOS 5.6 are causing EPEL incompatibilities

[William Warren]

On 3/20/2011 7:11 PM, compdoc wrote:
 to which news are you referring about ubuntu-wise?
 I meant recent redhat news about the change in how it will deliver code to
 the community. They mentioned opensuse as being a competitor, I believe.




 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
their changes are really aimed at oracle..the rest is smoke and 
mirrors..:)  oracle is basically(pardon me here) Centos with charges.  
That's basically all oracle is going with unbreakable Linux.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] The delays on CentOS 5.6 are causing EPEL incompatibilities

[William Warren]

On 3/20/2011 7:29 PM, compdoc wrote:
 their changes are really aimed at oracle..the rest is smoke and
 Somehow a story led me to try opensuse. Sorry, don't know which it was that
 I read.



 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
oh they mentioned opensuse as part of the kernel patch obfuscation issue 
that was raised..that's probably where opensuse got your attention..but 
their mention of opensuse is jsut to hide the fact their latest thing is 
aimed at oracle..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] The delays on CentOS 5.6 are causing EPEL incompatibilities

[William Warren]

On 3/20/2011 10:44 PM, Marko A. Jennings wrote:
 On Sun, March 20, 2011 7:29 pm, William Warren wrote:
 their changes are really aimed at oracle..the rest is smoke and
 mirrors..:)  oracle is basically(pardon me here) Centos with charges.
 That's basically all oracle is going with unbreakable Linux.
 Not just Oracle.  Novell is actively pursuing Red Hat customers and
 offering to support their Red Hat installations cheaper than Read Hat
 does.  I know a large international technology company which buys RHEL
 licenses only for the first year and then switches to Novell for support
 after that.

 Marko
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
nods i forgot about that mention in same said article..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] php53-5.3.3-1.el5_6.1

[William Warren]

On 3/19/2011 8:42 PM, Jason Pyeron wrote:
 Curious I do not see the php53 in the yum centos 5 repositories.

 Has this package been excluded?

 http://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/php53-5.3.
 3-1.el5_6.1.src.rpm

 http://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/php53-5.3.
 3-1.el5_6.1.src.rpm

 --
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 -   -
 - Jason Pyeron  PD Inc. http://www.pdinc.us -
 - Principal Consultant  10 West 24th Street #100-
 - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
 -   -
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 This message is copyright PD Inc, subject to license 20080407P00.



 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
It will be seen with the release of Cent 5.6
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 5.5 does not recognise SAS drives with LSI 1068E Controller

[William Warren]

On 3/9/2011 12:10 PM, Peter Peltonen wrote:
 Hi,

 On Wed, Mar 9, 2011 at 6:57 PM, Les Mikeselllesmikes...@gmail.com  wrote:
 Some controllers want to map arrays to volumes and present the volumes
 to the OS instead of drives, so you have to go through the motions of
 assigning the resources to volumes and initializing them even if you
 only want one disk in the array or volume.
 I am pretty sure this was done already as that was what I had been
 told, and I remember seeing on the screen during the bootup messages
 about the drives being initialized and RAID5 working ok. But its been
 a while since I've been working with hardware issues so I will double
 check this tomorrow and show you the config.

 So is it so that the LSI 1068E Controller *should* be supported by
 megaraid_sas driver and the net install should use it without any
 driver disk needed?

 Regards,
 Peter
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
go into the configuration of the card itself and make sure the raid 
array is not only configured./.but initialized and bootable.  ONce it is 
seutp correctly it should get seen correctly.  Megaraid is the 
technical name for jsut about all of it's controller chips..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] KVM Question

[William Warren]

I'm curious exactly how KVM works.  If i see things right it's 
virtualization that's still within a full base operating system load 
correct?  How does KVM perform against VMware which uses a much smaller 
footprint?  Is KVM really a hypervisor?  I'm just trying figure out the 
basics of KVM..:)

Thanks,
William Warren
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Samba quota for AD users

[William Warren]

AFAIK Samba doesn't directly support quotas..you CAN however setup 
quotas using the linux Filesystem quota manager.  I'm a wimp and use 
webmin most times for that..:)  of course i do NOT have that exposed 
externally(that's what vpn's are for..G.)

On 3/1/2011 11:20 AM, John Hodrien wrote:
 On Mon, 28 Feb 2011, John R Pierce wrote:

 On 02/28/11 7:28 AM, system minami wrote:
 Can someone please help how to enable samba quota for Active Directory
 users' home directory automatically ?
 Samba has quota support?  Good luck with that.   Quotas are generally a
 file system thing, enforced on system users.  In my experience they
 cause more problems then they solve.
 Really?  What's your hate list with quotas?

 I think bounding users file system usage is rather desirable.  It'd seem
 slightly odd *not* to use them...

 jh
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Alternative to cPanel

[William Warren]

On 2/23/2011 9:49 AM, Trutwin, Joshua wrote:


Hello all,

I'm looking to setup a new CentOS box for a buddy of mine who
wants to do hosting on a server via CoLo, Years ago I whipped up a CP 
of my
own on a Debian box he colo'd running a basterdized qmail/tinydns and 
custom
built httpd/mysql/etc (I was young).  It worked ok but time to move on 
and I

don't have time to maintain all those packages.  I also don't have
time to write another CP or port my PoS to it.  I'm also just going to 
use the


default  packages (bind, postfix, etc) instead of the DJB stuff.

Main requirements are fairly straightforward:

1. able to add/manage domains, ssl cert management, manage DNS records
2. able to manage email accounts and anti-spam settings
3. able to add/manage mysql and pgsql (nice to have)
4. user management - ftp/ssh accounts, password change, etc.
5. nice to have: add a wordpress blog / xcart store to a site
6. nice to have: users have own login to do some of the above for 
their domain only

7. nice to have: integrated website stats (awstats or equiv)
8. not optional - should have a focus on security

Stuff like viewing logs, automated billing, hosting plans, managing 
backups,

bandwidth monitoring, uploading web pages, managing server patches,
adding new software, etc. I don't mind leaving off or doing myself.  
Willing to


pay a license, but not a huge budget.

I was leaning towards webmin/virtualmin but thought I'd check with 
this list

for any suggestions.  Had bad experiences with Plesk from a while
ago so leaving that off the table.  We have experience with cPanel
through another fail host, it's ok but too much stuff and too
expensive.

Josh


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
I currently use virtualmin GPL.  There are a few features that are kept 
in virtualmin pro...i have one server that runs pro..i have another that 
runs virtualmin gpl.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Any update on 5.6 / 6?

[William Warren]

On 2/21/2011 12:18 PM, Johnny Hughes wrote:

On 02/21/2011 11:08 AM, Les Mikesell wrote:

On 2/21/11 10:35 AM, Johnny Hughes wrote:

So you are now saying that you cannot scale out this work to more people
to release faster ? This is something that has to be done by Karanbir only ?


Dag,

The packages have to be built in a specific order, preferably the order
that they are originally produced in, so that they can be linked
properly.  Package A builds, then Package B, then Package C.  If package
B is broken, it needs to be fixed, then Package C needs to be built, etc.

This is not something that can be done by several people at the same
time in parallel, no.  Not and be done correctly.

Couldn't the process be wrapped into a matrix build in Hudson (or now Jenkins)
across a large farm of build slaves with a list of successful builds falling out
at the end?  For at least the set of things that succeed in one of the common
environments...


Seeing as how we are currently dealing with 2 trees in the QA directory
for testing right now (4.9 and 5.6) ... 6.0 will be waiting until we get
those out of QA.

So you are constrained by workspace?  Or number of people involved?  And you
don't see that as a problem that could be corrected?



SHUT UP

if you do not like CentOS ... use something else



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
step away johnny.  These type of responses only further the highminded 
reputation Centos core is developing.  Just ignore it..continue your 
great work on Centos in general..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Any update on 5.6 / 6?

[William Warren]

On 2/21/2011 1:28 PM, Nico Kadel-Garcia wrote:
 On Mon, Feb 21, 2011 at 12:36 PM, Johnny Hughesjoh...@centos.org  wrote:

 This is the last post I am making to this thread ... and maybe to this
 list in general.  During the build processes, here are the files that we
 have had to add (at various times) to get packages to build.  I have no
 idea if this list is current (we first try to build without add anything
 and test it), then we add packages if the testing says we need to.
 Thanks for the information. Could you drop it in the Wiki? And drop
 your notes on this process for CentOS 6 pre-building there, too?

 *EL4*
 dump: ncurses-devel

 pidgin: python-devel
 [ etc. ]
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
if it's a wiki how about you drop the information in Nico?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] server specifications

[William Warren]

On 2/14/2011 12:29 AM, Nico Kadel-Garcia wrote:
 On Mon, Feb 14, 2011 at 12:16 AM, Rob Kampenrkam...@kampensonline.com  
 wrote:
 Nico Kadel-Garcia wrote:
 Pleae, name a single instance in the last 10 years where ECC
 demonstrably saved you work, especially if you made sure ti burn in
 the ssytem components on servers upon their first bootup...
 Twice in the last two years my intel server mb with ECC RAM showed errors
 (after moving system physically) and thus I did a reseat (after cleaning) of
 the modules and all is now well. No data lost, complete confidence -
 definitely gets my vote for servers!!
 Same system? Did you burn it in (running it under serious load with
 memory and CPU testing tools for a day or two after initial
 installation)? And given that you opened it up, I also assume you
 cleaned out accumulated dust and cleaned the filters.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
A burn in only tests the ram at burn in.  Later as parts wear(and 
electronic parts DO wear) bit errors can begin.  There's two ways to 
hanlde this:
1. spend maybe 5% more for ecc memory so bit errors can be either fixed 
or alerte3d automatically
2. save 5% money wise but loose more time to burn in your system at 
regular intervals to make sure nothing is failing
3. Do nothing.  Save the 5% and go with the...it's worked before...

When number 3 bites you in the arse the costs of your penny-pinching 
laziness will be many orders of magnitude higher..due to file system 
corruption, backup corruption..etc etc etc.  If the system is doing bit 
errors those bit errors WILL show up in your backups.  If the machine 
has been in service for years...the costs are even more drastic.  Spend 
5% on ECC and number 3 won't bite you in the arse...unless you don't 
monitor your systems at all..then you are going to get hosed anyway.  
This is one time the 5% is worth the cost.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Package updates for 5.4?

[William Warren]

On 1/26/2011 8:35 PM, Mitch Patenaude wrote:
We're running a large cluster, and are leery of upgrading them all to 
5.5, but would like to find the latest security patches.


Is there a repo for this?  I can't seem to find a 5.4 specific update 
repo with anything since last March.  Is 5.4 EOL'd?


Thanks,
  -- Mitch


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
if its a cluster can you take one node offline..update to 5.6 and see if 
it bombs or not?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Let's talk about compression rates

[William Warren]

On 1/22/2011 5:45 PM, Sven Aluoor wrote:
 On Sat, Jan 22, 2011 at 5:28 PM, Karanbir Singhmail-li...@karan.org  wrote:
 I am sure there is a more relevant list you could take something of this
 nature to.
 Hi Karanbir

 can you name me a list for general Open Source discussions?
 thanks

 cheers Sven
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
google it..there's tons
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to convert 7 cd iso images into one dvd image?

[William Warren]

On 1/14/2011 9:05 PM, John R Pierce wrote:
 On 01/14/11 5:29 PM, Kenneth Wolcott wrote:
 Home ISP blocking bittorrent; company now blocks bittorrent.

 I want/need an old release (CentOS 5.2) to install as a VirtualBox guest.

 I suppose I could install from the cd iso images, but it is a pain to
 virtually eject and remount cd iso images during the install :-(

 So, is there a technique or an open source tool that will create a dvd
 iso given the cd iso images?
 I've seen the DVD ISO files on select mirrors.it can be difficult to
 reliably transfer a  4GB file over http/ftp


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
I routinely do 4 GB plus transfers using https and ftp.  Rock solid.  
One thing i do is the gui install..choose minimal then choose custom.  
uncheck everything and you'll get a machine with access to a shell and 
then you can yum everything else.  Only need disk 1.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server unresponsive until reboot, memory exhausted

[William Warren]

On 12/28/2010 5:18 PM, Nataraj wrote:

On 12/28/2010 01:41 PM, james wrote:

Do you have everything *else* updated? And what kind of web service
are you running?

There's a lot of third party freeware and commercial tools that was
not written with any kind of resource management in mind, and which
may require a simple web server restart on a regular baris to free
memory. (MusicBrainz: I remember porting MusicBrainz.)

Yes, all the packages are up to date. General web services -- static 
HTML, and the rest is mainly wordpress.


You may be right about the restart, but I would like to know WHAT is 
crashing my web server regardless. We are not running any shiftily 
coded sites or apps on this server that I'm aware of (obviously 
something is shifty!). Is anyone aware of any other methods for 
drilling into the problem?


Look in /var/log/http/*.

Yes, these are the web server logs I am referring to having checked.

Do you have a search engine scanning your web server?

Hmm, no, nothing systematic. The usual crawlers out there but nothing 
we are doing.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


I think the answer will come from analyzing your log files and 
possibly running something under cron (or in a shell script that wakes 
up periodically) to gather memory/resource utilization.  Even look at 
a web log analyzer, like analog and see if there is a correlation 
between web server hits and resource usage.  You could also try 
upgrading your web server/plugins or checking bugzilla for related bugs.


Nataraj


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
What's your http.conf?  There's an setting where you can limit the 
amount of time a process/thread stays alive..you can limit ram usage by 
lowering that value.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] lvm 1 drive fails whole vol data lost

[William Warren]

On 12/26/2010 11:04 AM, Kwan Lowe wrote:
 On Sat, Dec 25, 2010 at 2:23 PM, Ryan Wagonerrswago...@gmail.com  wrote:
 RAID 5 does provide speed increases for read operations. There are
 still some applications where RAID 5 has its benefits. For a smaller
 department file server 3-4 TB drives in RAID 5 works great. The money
 saved can be put towards backups, etc. Having said that I use RAID 10
 for most applications.
 I've been thinking about the whole backup/redundancy approach to
 maintaining my home network. Though it is a home network, I use it
 to support  my work so though it's not business critical, it can't
 tolerate much downtime.

 Two approaches that I see:

 1) Use some form of RAID or mirroring and a backup process to provide
 recoverability.

 2) Maintain a centralized configuration in order to quickly re-build a
 downed system.

 They  are not completely separate, but I've been trying to move my
 recovery philosophy to the latter to minimize costs.

 For example, I used to backup my DNS/LDAP server by creating a
 snapshot of the Xen LVM partition. Recovery was simply a matter of
 restoring the backup.

 The problem with this approach was that the number of virtual machines
 started to balloon and with it, the storage requirements.  Though the
 images were only 10G to 20G, I had dozens of them.  Not to mention
 that the virtualization hosts keep changing: VMWare Server stopped
 being free; The upstream vendor moved to KVM instead of Xen.

 The approach I'm taking now is to use a combination of
 Kickstart/Anaconda and cfengine with the goal of removing all host
 identity from a OS instance.

 For my DNS server, for example, I use kickstart to build a standard
 image with a cfengine client. On bootup, cfengine pulls in the bind
 configuration and within a few minutes I have a duplicate of the old
 server. This is also much more resilient to changes in the underlying
 VM technology.

 There are still some kinks to work out. For one, I haven't backed up
 the cfengine server the same way. Supposedly it's just a matter of
 making the server its own client, but right now I'm using an image
 backup and rsync copies to another fileserver.

 I'm also trying to integrate a Spacewalk server into the mix.  This
 will allow me to rebuild a system with the exact same packages (right
 now I just update to the latest). In a real production environment
 this is critical as some applications may only be certified against
 particular kernel/glibc/etc.  versions.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
vmware esxi is still free and it's superior to vmware server.  I don't 
know if you have the cpu to directly support the bare-metal hypervisor 
though.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] lvm 1 drive fails whole vol data lost

[William Warren]

On 12/24/2010 7:57 AM, Markandeya wrote:
 Dear Friends of CentOS,
 I read a reply by John R Pierce, Re: [CentOS] LVM change disk
 December 04, 2010 01:30PM
 do you realize that if any one of those 4 miscellaneous drives fails,
 you lose the whole volume?

 Can anyone confirm this? and thank you to John above.

 2: can you add(extend) a physical hdd with data to a LV without losing the 
 data?

 3: can you remove one hdd to add another of same size and file system
 but with different data?

 Thanks much. i am about to install and need to know my constraints.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
this is why RAID is still needed.  LVM  isn't a fault tolerant 
thing..RAID is still required.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 6

[William Warren]

On 12/20/2010 3:35 PM, m.r...@5-cent.us wrote:
 *sigh*
 I'm sitting here with my manager and the other admin, as they argue as to
 when CentOS 6 will be out. Anyone have a clue as to when? Are we getting
 close?

 mark

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
this happens every release.  there's no set date.  it'll be done when it 
is completed.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SATA NCQ and Linux Software RAID

[William Warren]

On 12/20/2010 5:40 PM, Matt wrote:
 Does SATA Native Command Queueing and Linux software RAID1 play well
 together or is it better to turn off NCQ when doing software RAID?
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
AKAIK NCQ works jsut fine with MDRAID.  I've used it in that scenario.  
I don't know about DMRAID though.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What NAS device(s) do you use? And why?

[William Warren]

On 12/11/2010 11:15 AM, Rudi Ahlers wrote:
 If you use any NAS (or a SAN) devices, what do you use? And I'm
 referring more to larger scale network storage than your home PC or
 home theater system.

 We've had very good experiences with our NetGear ReadyNAS devices but
 I'm in the market for something new. The NetGear's aren't the cheapest
 ones around but they do what it says on the box. My only real gripe
 with them is the lack of decent scalability.

 TheCus devices seems to be rather powerful as well, and you can stack
 upto 5 units together. But that's where the line stops.

 I'm now looking for something that could scale beyond 100TB on one
 device (not necessarily one unit though) and find it frustrating that
 most NAS's come in 1U or 2U at most.

 Maybe I'm just not shopping around enough, or maybe I prefer to well
 known brands, I don't know.



 So, what do you use?
 How well does it work for you?
 And, how reliable / fast / scalable is it?

Two things:
QNAP
coraid

coraid is in the Linux Kernel(don't know about Cent 5 though) but you 
can also look into them directly as well..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SELinux - way of the future or good idea but !!!

[William Warren]

On 12/8/2010 9:13 AM, Christopher Chan wrote:
 On Wednesday, December 08, 2010 09:31 PM, Les Mikesell wrote:
 On 12/8/10 4:22 AM, David Sommerseth wrote:
 On 30/11/10 03:52, cpol...@surewest.net wrote:
 Christopher Chan wrote:
 Les Mikesell wrote:
 [...snip...]
 As was already mentioned in another post, run in permissive mode, for a
 few days if you must, and go through all the things the software does
 and voila! setroubleshoot and/or logs tell you what needs doing.
 Very optimistic, that. In my shop, some things run annually.
 A comprehensive system test = production, for a year. Just
 this morning a 1099 (annual tax-form) script failed in test.
 So you would rather disable SELinux completely - 365 days a year, rather
 than to switch to permissive mode when running this script once a year?

 I'm sorry, but I'm not able follow that logic.
 In our case if something fails once a year we lose customers and money.  I'd
 expect that to be fairly common.

 Again, that particular process is unlikely to be missed and also show to
 be easily mitigated by doing a realtime switch from enforcing to
 permissive. Such annual processes are fairly common and usually run
 manually. You have yet to make a compelling case for completely
 disabling SELinux just for this sort of thing.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
loosing customers and money on an annual basis is a great reason to kill 
it.  Make it able to work without updates interfering with a formerly 
running configuration on a regular basis and more folks will adopt it.  
Saying killing it because it is hurting your business isn't a valid 
reason is arrogant and frankly stupid.  Frankly, there's several other 
distros that don't run SeLinux and they aren't anymore problematic when 
properly configured than RHEL is..and they just work.  Let's put the 
SeLinux religion aside..make it not only technically superior but 
actually usable and helpful and you'll see a wider adoption.  The kind 
of arrogance I've seen in this thread is a primary reason it won't get 
appreciable traction outside of RHEL and why it won't be a major tool in 
admins toolbox inside RHEL unless folks don't NEED the flexibility Linux 
in general offers and SELinux restricts.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 1 Gbit/s Ethernet NIC under CentOS

[William Warren]

On 12/1/2010 2:12 PM, Boris Epstein wrote:
 Hello listmates,

 As some of you may know we have been having a really bad problem with
 Realtek Semiconductor Co., Ltd. RTL-8169 cards. See here for details:

 http://forum.nginx.org/read.php?24,140124,140224

 So now my question is, what PCI 1 Gbit/s Ethernet adapters should I
 use under CentOS? If you have had a consistent positive experience
 with any particular chipset/brand please speak up.

 Thanks.

 Boris.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
Intel.  No need to mess with any Winnic(which is what most are).  
Broadcom is another good one.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 1 Gbit/s Ethernet NIC under CentOS

[William Warren]

On 12/1/2010 2:33 PM, Boris Epstein wrote:
 On Wed, Dec 1, 2010 at 2:29 PM, Gilbert Sebenste
 seben...@weather.admin.niu.edu  wrote:
 On Wed, 1 Dec 2010, Steve Thompson wrote:

 On Wed, 1 Dec 2010, Timo Schoeler wrote:

 Intel. Broadcom. That's what we use here w/o any issues; however, there
 are some Intel NICs that are *not* able to handle Jumbo Frames due to an
 internal design glitch.
 Seconded. I have a load of Intel 82576 and 82571EB's, and there have been
 no issues at all, including with Jumbo frames.
 Thirded. :-) Same thing here, even with generic Intel 1 GB Ethernet cards.

 ***
 Gilbert Sebenste 
 (My opinions only!)  **
 ***
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

 Thanks. Looks good.

 I just looked around - looks like manufacturers tend not to list the
 chipset in their NIC specifications (like here, for instance:
 http://www.trendnet.com/products/proddetail.asp?prod=140_TEG-PCITXRcat=14
 )

 Is there a list somewhere out there listing what card features what chipset?

 It definitely looks like it is best to just stick to the better
 chipsets - might be a little more expensive but definitely worth the
 money.

 Thanks.

 Boris.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
trendnet is realtek.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 1 Gbit/s Ethernet NIC under CentOS

[William Warren]

On 12/1/2010 2:33 PM, Boris Epstein wrote:
 On Wed, Dec 1, 2010 at 2:29 PM, Gilbert Sebenste
 seben...@weather.admin.niu.edu  wrote:
 On Wed, 1 Dec 2010, Steve Thompson wrote:

 On Wed, 1 Dec 2010, Timo Schoeler wrote:

 Intel. Broadcom. That's what we use here w/o any issues; however, there
 are some Intel NICs that are *not* able to handle Jumbo Frames due to an
 internal design glitch.
 Seconded. I have a load of Intel 82576 and 82571EB's, and there have been
 no issues at all, including with Jumbo frames.
 Thirded. :-) Same thing here, even with generic Intel 1 GB Ethernet cards.

 ***
 Gilbert Sebenste 
 (My opinions only!)  **
 ***
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

 Thanks. Looks good.

 I just looked around - looks like manufacturers tend not to list the
 chipset in their NIC specifications (like here, for instance:
 http://www.trendnet.com/products/proddetail.asp?prod=140_TEG-PCITXRcat=14
 )

 Is there a list somewhere out there listing what card features what chipset?

 It definitely looks like it is best to just stick to the better
 chipsets - might be a little more expensive but definitely worth the
 money.

 Thanks.

 Boris.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
if you look at the pic on that page see the crab?  that's realtek.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SELinux - way of the future or good idea but !!!

[William Warren]

On 11/28/2010 8:15 AM, Bob McConnell wrote:
 Marko Vojinovic wrote:
 On Sunday 28 November 2010 03:45:54 Nico Kadel-Garcia wrote:
 On Sat, Nov 27, 2010 at 9:21 PM, John R. Dennisonj...@gerdesas.com  wrote:
 You run it in Permissive mode, you deal with the exceptions as
 they arise while the software is running in its normal
 environment and while its running normally using any of the
 documented methods.  You thoroughly test the application in such
 a manner and once you have ironed out any and all issues by
 putting together a custom policy, setting the right SElinux
 booleans, etc, you then enable Enforcing mode.  There is really
 no reason that SElinux should have a negative impact on your
 application or server if you use Permissive first.
 You forgot take on becoming the SELinux integration  manager for that
 project with every single update.
 Every single update? Update of what?
 Marko,

 You have completely missed his point. Every update of the application
 *his company* is writing to run on those CentOS servers. This has
 nothing to do with RedHat, CentOS, or any other FLOSS package. It is a
 management problem within his employer's organization. If the managers
 don't care to require the application be SE compliant, he will never be
 able to get the developers to deal with those issues. So for him it is
 already a lost battle.

 Bob McConnell
 N2SPP

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
I run a mix of Centos and Debian.  If you setup your system correctly 
you aren't going to get hammered.  It's all down to what apps you are 
running.  SeLinux helps but I find it gets in the way.  If SeLinux where 
the panacea it's being billed as here then more distros would have it 
enabled by default...however the opposite is true.  Contrary to the 
apparent belief on this list it IS possible to properly harden a box 
without SeLinux.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SELinux - way of the future or good idea but !!!

[William Warren]

On 11/28/2010 7:55 PM, Nico Kadel-Garcia wrote:
 On Sun, Nov 28, 2010 at 10:39 AM, Bob McConnellrmcco...@lightlink.com  
 wrote:
 Marko Vojinovic wrote:
 On Sunday 28 November 2010 13:15:24 Bob McConnell wrote:
 Marko Vojinovic wrote:
 On Sunday 28 November 2010 03:45:54 Nico Kadel-Garcia wrote:
 You forgot take on becoming the SELinux integration  manager for that
 project with every single update.
 Every single update? Update of what?
 You have completely missed his point. Every update of the application
 *his company* is writing to run on those CentOS servers. This has
 nothing to do with RedHat, CentOS, or any other FLOSS package. It is a
 management problem within his employer's organization. If the managers
 don't care to require the application be SE compliant, he will never be
 able to get the developers to deal with those issues. So for him it is
 already a lost battle.
 His companies. Plural.

 I've been in way too many envornments where various applicatons have
 ben brought in, from outside sources, with wildly disparate security
 models. It's gotten better, as SELinux itself has matured and code
 that's complete crap is less likely to be deployed. This is often
 because, I, pesonally, take a look at code coming from people who have
 *no idea* how badly their tools violate basic security principals and
 UNIX file system behaviors and help them clean it up. In fact, I can
 give you an example.

 Allow you to give a specific sample. The lilac tool for Nagios
 configuration allows powerful manipulation, including the insertion of
 shell scripting, for Nagios and NRPE configurations. So good do far,
 right? It's in PHP, and run as the 'apache' user, and needs ot be able
 to restart that daimon. So the apache user needs root privileges to
 restart a daemon, because the /var/run information for the relevant
 daomon is in /var/un/. It can't easily be Apache suexec operated
 because it's based on a full PHP web based site, not a CGI program,
 and the default sudo won't work because there's no tty associated with
 PhP operations.

 Now, insert SELinux privilege management into the mix, and watch your
 brain explode as you try to track the issues. (I did. It was very
 messy). And update your SELinux setup *eveyr time* you update the core
 software, unsupported by the author who doens't play that game.

 Well, in that case he is dealing with a broken/badly coded app, and
 irresponsible managers and developers. It's a problem, yes, but this isn't a
 I'm dealing with the software as it's published. I'm afraid a
 tremendous amount of software is written *terribly* in security terms.
 Take a look at jabber and subversion, storing passwords in plaintext,
 for examples.

 fault of SELinux, and advocating that SELinux is bad because some manager
 doesn't know about security is completely wrong IMHO. And supporting advice
 given to people on this list to turn off SELinux because some devs in some
 company don't do their job right is also completely wrong.
 No, I quesiton its utility because the engineering effort is
 burdensome, it wastes testing cycles best spent elsewhere, and the
 error messages are less than helpful.

 Been there, done that. We had the same problems just a few years ago,
 managers with no concerns about security as long as everything worked.
 Our project leader was beside himself trying to get even rudimentary
 validation and sanitization into the code. Then it was decided that we
 needed to accept credit card transactions on the server. Suddenly the
 developers had to learn and apply the OWASP guidelines. Next there was
 PCI training and a flurry of activity to make all of our web based
 applications conform before the initial audit.
 But SE wasn't even discussed, nor was it ever required. It is still not
 enabled on any of our test or development servers. The only reason we
 ended up with it on the production servers was our switch from
 self-hosted to a managed hosting service who enabled it in the normal
 course of setting up their servers. Maybe we're just lucky, but we have
 never touched a line of code because of it.

 If Nico had to deal with lousy-coded software conflicting with SELinux, it
 doesn't mean that shutting down SELinux is a good idea for everyone (or
 anyone) else.
 Maybe not, but the risks should be evaluated on a case by case basis. I
 don't believe it can be considered a panacea either. Even with SE in
 full protected mode, a simple SQL injection flaw can still expose much
 of the sensitive data on your server.
 Amen. I have this issue with Subversion. I don't *CARE* if you use
 HTTPS, when the passwords are stored in clear text on the client and
 optionally in clear text on the server.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
run the php code inside of a cgi wrapper as the user not apache.
___
CentOS mailing list

Re: [CentOS] Upgrade from RHEL 6 beta ?

[William Warren]

On 11/23/2010 9:18 AM, Nicolas Ross wrote:
 Hi again !

 I am begining to play with my new servers. I got for starter 2 nodes (1u
 intel server platform, with a LSI Logic FC949ES FC card). I am like a child
 playing with his new toys at christmas... I can't wait for CentOS 6 to come
 out.

 I do not want to clutter the list about requests for CentOS 6, but I'd like
 to keep myself informed as where the build process is and how far the
 release is. Is there any place where I can get more info on the coming
 CentOS 6 ?

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
http://www.twit.tv/floss142

Interview With Karan..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] RHEL Released

[William Warren]

It's on their website right now.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] PATA Hard Drive woes

[William Warren]

On 10/31/2010 3:27 PM, Keith Roberts wrote:
 Hi All.

 Yesterday I was installing Centos 5.5 to my web server, and
 it looks like the main hard drive has gone AWOL.

 Fedora 12 put the file system into r/o mode.

 The drive is an Hitachi, still under warranty.

 There are bad sectors on it, and running the Hitachi DFT
 tool confirms this. Also I cannot repair the bad sectors.

 Would this be caused by a faulty I/O chip, or is it safe to
 say it's definately the HDD at fault?

 Kind Regards,

 Keith Roberts

hdd at fault
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] netinstlal question

[William Warren]

  my church just got some ibm x335's donated.  Cent 5 is only relaly 
dvd's.  I do have a windows server using IIS for internal stuff.  How 
would i setup a local repo for the dvd so i can point the net install 
iso to the windows box?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Linux Kernel Physical Interface Limit

[William Warren]

  On 7/14/2010 1:16 AM, Emmanuel Noobadmin wrote:
 On 7/14/10, William Warrenhescomins...@emmanuelcomputerconsulting.com  
 wrote:
 ok let me specify.  Is there any real limit?  I've seen some folks(and
 been told by a few) that you can't more than 10 physical interfaces in a
 linux system.
 Googling up a really old 2005 newsgroup thread says some people had 24
 physical NIC (6x 4quad) in a system before and one person vaguely
 remembers a hard 256 limit which would make sense if physical
 interface count is a byte value.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
can you give me a link to that thread?  My googling skills are 
apparently not up to snuff to find that..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Linux Kernel Physical Interface Limit

[William Warren]

  I think it's baloney mainly because i can't find a mention of it 
anywhere.  Is there REALLY a limit on the number of physical network 
interfaces in the Kernel?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Linux Kernel Physical Interface Limit

[William Warren]

  On 7/13/2010 9:11 PM, Ross Walker wrote:
 On Jul 13, 2010, at 8:58 PM, Eero Volotineneero.voloti...@iki.fi  wrote:

 2010/7/14 William Warrenhescomins...@emmanuelcomputerconsulting.com:
   I think it's baloney mainly because i can't find a mention of it
 anywhere.  Is there REALLY a limit on the number of physical network
 interfaces in the Kernel?
 can you really create hardware with huge number or real ethernet controllers?
 With tagged VLANs, bridges and virtual switches, is there a need for that 
 many physical interfaces?

 -Ross

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
ok let me specify.  Is there any real limit?  I've seen some folks(and 
been told by a few) that you can't more than 10 physical interfaces in a 
linux system.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Simple solution for small network in a school ?

[William Warren]

  On 7/10/2010 10:59 AM, Niki Kovacs wrote:
 Hi,

 I have to install a small network in a school in a nearby village. The
 network will be Linux-only, one server and fifteen desktops. Here's the
 idea.

 1) Authentication should be managed centrally on the server.

 2) User home directories should also be on the server.

 3) Users should all have disk quotas, something like 1 GB per user.

 4) Some shared directories should be read/write for a defined group of
 users (teachers) and read-only for others.

 So far, I've only dealt with local authentication. I have a little
 practice in basic setups of Samba and NFS and managed to get these to
 work OK. On the other hand, I've never worked with NIS, LDAP or the likes.

 My question is more general, and I don't want to go into technical
 details. According to the KISS principle, which solution would you
 recommend (or explicitly *not* recommend)? A mix of LDAP and Samba? Or
 NIS and NFS? And what's this thing called Directory Server, which
 vaguely sounds like it's the right way to go?

 Any suggestions?

 Cheers from the hot South of France,

 Niki
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
for simple solutions such as this i use a distro that is designed for 
this purpose.  Three coe into my mind
sme server
e-box
and clearos

of these i have found e-box to the the most reliable and easiest to 
use.  Now i have not used them in a purely Linux environment but they 
should work well..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Intel ICH10R on CentOS 5.4

[William Warren]

On 6/9/2010 7:44 PM, nate wrote:
 Hey there..

 I was wondering if anyone could share experiences they have had
 with the Intel ICH10R SATA controller? I tried looking around
 but all I could find were RAID references, I have no interest
 in using the RAID functionality just basic SATA JBOD. Wondering
 if there are any gotchas for performance, drivers, quality etc.

 I normally don't touch anything that is not hardware RAID though
 this is a special project.. And even if I get demo gear I won't
 have enough time to put it through real paces(likely need weeks)
 before a decision needs to be made.

 I don't see anything that is causing alarm but just curious if
 anyone else has experiences.

 thanks

 nate

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

jsut put the bios into sata or ata mode and not raid..then the raid 
functionality is zero..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Intel ICH10R on CentOS 5.4

[William Warren]

On 6/9/2010 8:27 PM, John R Pierce wrote:
 William Warren wrote:

 jsut put the bios into sata or ata mode and not raid..then the raid
 functionality is zero..:
  
 even when its enabled, the raid functionaliy of the ICH??R chips is
 zero.  :) enabling RAID in the BIOS simply sets a bit in the chip
 thats write-once (once its set, it can't be reset short of a full chip
 reset), this does two things.

  A) it changes the PCI DEVICE_ID of the chip so it requires different
 drivers,
  B) it tells the BIOS and drivers that they should implement Intel
 Matrix aka fake raid rather than standard SATA JBOD.

 thats *ALL* it does in hardware.  nada else.


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

i understand that..but he doesn't want the fakeriad of the bios 
emulation or bit flip or whatever active so my comments about how to 
avoid it are accurate and stand as accurate.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Is every CentOS release supported for 7 years?

[William Warren]

On 5/22/2010 3:39 PM, Aniruddha wrote:
 Coming from Gentoo -  Debian I am to trying to understand the way
 CentOS works. In Debian very little happens in stable releases and you
 use apt-get update to apply security updates and apt-get dist-upgrade
 for a major upgrade.

 In CentOS there is an yum-security plugin which allows you to install
 security updates only. If I understand correctly the preferred way
 though is to do at least an yum upgrade every 6 months in order to
 upgrade to a point release.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

my mahcines run yum update every night.  Security updates are NOT only 
at the point releases but whenever the upstream releases them.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] downgrade

[William Warren]

On 4/2/2010 2:22 PM, mattias wrote:
 i no i can upgrade centos the new version
 but can i downgrade?

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

Backup and reload..
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Release 6?

[William Warren]

I'm not surprised at the delay for RHEL 6.  Consider 2.x is still 
supported this means they are supporting 4 different RHEL versions right 
now.  I would actually wait until at least 2.x dies..if not maybe 3.x 
before spitting out another version.

On 4/1/2010 7:16 AM, Mogens Kjaer wrote:
 On 03/31/2010 11:43 PM, Milos Blazevic wrote:
 ...

 Current RHEL life cycle is in fact 7 years.
 Interesting, I remember hearing just the opposite - that they're about
 to reduce the life cycle from 7 to 5 years, since allegedly no one uses
 the same EL major release for more than 5 years. I mean, can you imagine
 anyone who used RHEL 2.1 up until less than a year ago?
  
 So, if I set up a server with RHEL 5.5 or CentOS 5.4 today,
 I would only get updates until 14-Mar-2012, if the life
 time is reduced to 5 years?

 That's less than two years.

 That's a bit too short lifetime for my servers.

 Yes of course, I can upgrade to RHEL 6 when it comes out,
 but my reason for paying Red Hat is to avoid the upgrade.

 Mogens



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] testing

[William Warren]

Having list issues..sorry.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] release

[William Warren]

On 3/21/2010 9:31 AM, mattias wrote:
 I upgraded my centos from 5.0 to 5.4
 But i still see 5.0 n the version number

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

did you reboot?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] what causes CUPS to dis-enable a printer?

[William Warren]

On 2/10/2010 9:15 AM, Robert Heller wrote:
 At Tue, 9 Feb 2010 22:37:28 -0600 CentOS mailing listcentos@centos.org  
 wrote:


 In our computer lab, there are 6 Centos 5.4 workstations. There is an
 HP printer with jet direct card. It often works.

 But sometimes users come and get me saying the printer is broken, but
 it is actually working fine for *most* of the workstations.

 On the troubled system, I run system-config-printer and I check the
 printer in question (under properties)  and I see the printer has been
 disabled. I mean, the box by the word Enabled is empty.

 After I manually (use lprm) remove the print jobs, and set the printer
 to Enabled, then the print queue will start working again.

 I've checked the files in /var/log/cups and there's nothing evident.
 error_log has nothing.

 We have had the problem during the year (that others have reported in
 this list).  When trying to print some pdf files from Evince, the
 symptom of the problem is that the pdf files don't print. They seem to
 clog the printer.  When that happens, I have seen the Enabled box
 come unchecked in the printer configurator.  However, the most recent
 problems are not associated with the use of Evince.
  
 Unless you have a proper print filter for them (on the Linux system!),
 PDF files cannot be printed.


 I would really appreciate some tips about how to bugshoot this problem.

 pj

 ps. The Cups server is running on the system in question, lpq shows
 lots of print jobs waiting.
  
 Wondering if the printer *by itself* can manage handling connections
 for a number of workstations and arbitrating jobs.  Maybe you need a
 Linux print server to manage the print queue and feed jobs to the
 printer one at a time.  It seems like some of the workstations are
 getting a refused connection and thinking the printer is 'dead' (and
 thus disabling it), when it is merely too busy to respond.  A proper
 linux print server would queue up the job and be ready for additional
 connections.



  

I have to agree with Robert here.  Instead of running a separate server 
on each box run a central cups server on one machine and have it take 
care of everything.  I bet since all of the machines are their own 
servers they printer can't keep up and the individual machines are 
timing out...:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Virtualization - what do You recommend?

[William Warren]

On 2/2/2010 6:20 AM, Rafa? Radecki wrote:

Hi All.

I plan to use virtualization in my production environment. I plan to 
use one of the following options:

- KVM;
- VMWare Esxi;
- VMWare Workstation.

I plan to install Windows 2008 as a guest. I want to use something 
like LVM snapshots for backups. Stability is also very important, the 
guest will be used as a production server.

Which option could You recommend and why?

Thank You very much in advance :)

With regards,
R.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
   
I use exsi personally..that way i'm not running centos and then a 
virtualization host and then a host in that...go for a bare metal 
hypervisor..then you can run windows right off the hypervisor..much faster.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 8-15 TB storage: any recommendations?

[William Warren]

On 1/11/2010 1:33 PM, Les Mikesell wrote:
 On 1/11/2010 11:38 AM, John R Pierce wrote:

 Pasi Kärkkäinen wrote:
  
 It seems X4500 (not available anymore) had Marvell SATA controllers, that
 are not supported with RHEL5.


 And those marvell controllers caused major grief for Sun, especially
 when Solaris added support for NCQ somewhere in there. under heavy IO
 workloads, the controllers would just hang.   Some nasty bugs.  Driver
 software workarounds caused a big performance hit.
  
 Is that a different chipset than
 http://www.newegg.com/Product/Product.aspx?Item=N82E16815121009 uses?  I
 replaced a Paradise and Adaptec card with one of these (or maybe the
 PCI-E version) and Centos recognized it and worked better than with the
 two different cards.


http://linuxmafia.com/faq/Hardware/sata.html#marvell

it's fakeraid.  I don't know if it's a different one than what was in 
there previously though..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] [OT] 8-15 TB storage: any recommendations?

[William Warren]

On 1/7/2010 9:30 AM, Boris Epstein wrote:
 On Thu, Jan 7, 2010 at 9:27 AM, Karanbir Singhmail-li...@karan.org  wrote:

 On 01/06/2010 09:35 PM, Boris Epstein wrote:
  
 Hello everyone,

 This is not directly related to CentOS but still: we are trying to set
 up some storage servers to run under Linux - most likely CentOS. The
 storage volume would be in the range specified: 8-15 TB. Any
 recommendations as far as hardware?


 I would recommend dont-homebrew. Get a vendor to build you a 3/4U box,
 get a couple of quad core cpu's in, and enough ram to do you in-use
 buffers. Also dont go over 1 TiB in storage per spindle if you want to
 get even relatively reasonable performance ( even when in use as a filer
 box ).

 Not long back, I had the chance to do some performance metrics on a dual
 Areca-16xx hosted 24x1TiB disk setup - and we tested it for various
 loads, running CentOS-5.4/x86_64 and it consistently outperformed the
 sun thumper box's, coming in about 1/4th the price.

 The other thing to keep in mind is to estimate and prove the cpu
 processing capability and network capability you are going to need out
 of this machine and dont skim on that. Dont just get overly focused on
 just the hba and disk metrics.

 - KB
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

  
 KB, thanks. When you say dont go over 1 TiB in storage per spindle
 what are you referring to as spindle?

 Boris.
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos



per HDD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] upgrade adivce

[William Warren]

I have a new client that is running a fedora 4 system.  Can i upgrade 
that box to centos 5 with a reasonable expectation of success or should 
i just back it up and do it from scratch?  Also will the samba version 
in centos 5 natively support windows 7 clients?

Links to tips and tricks are appreciated..:)

Sincerely,
William Warren
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] upgrade adivce

[William Warren]

On 12/30/2009 8:23 PM, Corey Chandler wrote:
 William Warren wrote:

 I have a new client that is running a fedora 4 system.  Can i upgrade
 that box to centos 5 with a reasonable expectation of success or should
 i just back it up and do it from scratch?  Also will the samba version
 in centos 5 natively support windows 7 clients?

 Links to tips and tricks are appreciated..:)

 Sincerely,
 William Warren

  
 That's so far from supported that I wouldn't even know WHERE to begin...

 -- Corey / KB1JWQ
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos



ok so the upgrade is out..:)  Just need to make sure when they bring in 
windows 7 machine(this machine runs as a pdc) the 7 clients can connect 
without huge amounts of headaches hence why i was looking at cent 5.  
I'm not into using third part repos for cent 5 so if the samba native to 
cent 5 won't do windows 7 clients without huge issues then i'll have to 
find workarounds..:)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] storage servers crashing, hair being pulled out!

[William Warren]

I'm looking at the controller myself.  Have you tried updating either 
the firmware on the card the drivers or both?

On 12/19/2009 10:55 PM, Gordon McLellan wrote:
 The other variable is the two machines running drbd have promise raid
 cards in them.  I also have the same raid card in my personal server
 at home.  That server also has a nack of crashing during heavy disk IO
 to the raid volume.  The entire OS doesn't crash, just the raid
 volume, and the only way to bring it back is a reboot.

 I'm really at a loss on what to do next... Any suggestions?


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos