Re: [CentOS] GDM could not write to you authorization file ... Please contact your system adminstrator
On Wed, Oct 6, 2010 at 6:16 AM, Brent L. Bates blba...@vigyan.com wrote: This error sounds familiar. If it is the same problem I've had a couple of times, every time it happens, I forget what it was I did the last time to fix it. :-( After I remember, it seems almost obvious. After some more googling I found the solution and it wasn't obvious: sudo chmod 1777 /tmp In the case I really think the error message needs some improvement. I can see where getting the permissions right on the mount points can be tricky. I hope the rest of my permissions are ok. I used the following to do the heavy lifting (cd src; tar cf - --xattrs .) | (cd dest; tar xf -) Don't remember why I chose this over a cp -R based solution, or a similar idiom using dump/restore instead of tar. -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] GDM could not write to you authorization file ... Please contact your system adminstrator
I am the system administrator. I have a system that was built with a default install which resulted in everything in a single file system except for /boot wrote some scripts to split out: /home, /usr, /var, /opt, and /tmp to separate file systems/logical volumes it looks like it ought to work, There's plenty of space in all the filesystems and I can log via ssh and have write access in my home directory. Logging in via ssh did result in a new .Xauthority file being automatically created, but that did not help. Googleing around I saw a thread where the user was actually out of disk space, but before that was established somebody asked if /home was on a different filesystem from /, but what to do in that case never came up. Another google thread suggested looking in .xsession-errors, but I don't have one. I've found irrelevant ubuntu suggestions regarding ubuntu only packages. Still googleing -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] GDM could not write to you authorization file ... Please contact your system adminstrator
There are no selinux related log messages. Tried disabling it anyway. Didn't help. On Tue, Oct 5, 2010 at 11:25 PM, cornel panceac cpanc...@gmail.com wrote: what happens with selinux disabled? -- When one door is closed, another is open. (Robert Nesta Marley) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] sata AHCI controllers (real and virtual)
I saw something somewhere about AHCI support requiring kernel 2.6.19 or later. But the current CentOS/RHEL stable kernels are 2.6.18 I'm trying to run CentOS/RHEL in a VirtualBox vm, which by default creates sata virtual disks with an AHCI virtual controller. These virtual machines are quite unstable, and I'm wondering if the AHCI virtual controller is the problem. I do have a real physical AHCI controller and I'm wondering if I should try it on a CentOS/RHEL 5.5 box, or if I should wait for RHEL/CentOS 6, before even attempting it. -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] vgrename, lvrename
On Sat, Sep 11, 2010 at 2:55 PM, Robert Heller hel...@deepsoft.com wrote: At Sat, 11 Sep 2010 13:45:55 -0600 CentOS mailing list centos@centos.org wrote: Note: in the case of mkinitrd, you will need to rebuild your initrd if you expect to actually boot the machine after renaming the volume group and logical volumes. You'll need to *manually* mount the root and /boot (at least) someplace (eg under /sysroot), then chroot there. Don't forget to fix /etc/fstab and /boot/grub/grub.conf (root=...). Googling got me the command: /sbin/mkinitrd -f /boot/initrd-$(uname -r).img $(uname -r) Unfortunately this resulted in: error opening /sys/block: No such file or directory error opening /sys/block: No such file or directory The renamed root lvm filesystem is mounted on /mnt/root the /boot is in /dev/sda1 and mounted on /mnt/root/boot before doing the chroot, I tried sudo cp -a /sys/block /mnt/root/sys Even though it was done with root privilege I got a lot of read permission errors, but a lot stuff did copy, maybe I got what I need. did the mkinitrd, no errors Lets try booting from the hard drive. Hmm there's a splash screen, that's a good sign. No Joy. It's not booting and complaining about not finding stuff with the old names. Did I screw up the grub.conf edits. Just checked they are ok. It finds the volume groups with the new names then complains about the old names: Volume group VolGroup00 not found Unable to access resume device (/dev/VolGroup00/LogVol01) Hmm. That's the old name of the swap device. There's at least one more piece of the puzzle that's missing. Lets boot up the Live CD again. And take a closer look at fstab. Looks good to me. -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] vgrename, lvrename
Hi, I want to rename some volume groups and logical volumes. I was not surprised when it would not let me rename active volumes. So I booted up the system using the CentOS 5.5 LiveCD, but the LiveCD makes the logical volumes browsable using Nautilus, so they are still active and I can't rename them. Tried: /usr/sbin/lvchange -a n VolGroup00/LogVol00 but it still says: LV VolGroup00/LogVol00 in use: not deactivating Did some googling and found out that other folks have had problems with mkinitrd, but I haven't gotten that far yet. Made a wild guess and killed my nautilus process, a lot of stuff disappeared from the desktop, then reappeared along with a new nautilus process. Still googling, but haven't found anything useful so far. Any idea? -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OpenVPN throughput
On Mon, Aug 30, 2010 at 4:20 AM, j.witvl...@mindef.nl wrote: Last year i've been doing some experiments with openvpn. Just as the O.P. I was curious about sustainable throughput, and was disapointed about the results To obtain maximum resulst, i did: - use two rather heavy machines (HP DL380-G6, dual quad core) - two dedicated 10Gb-nic's - cross-connect both nics - DISABLE openvpn-debug (as it is VERY cpu expensive) - raise MTU to 4K Bottleneck was (in my case) the openvpn-process, that was running 100% on a single core, While network was not saturated. So for max throughput, it is probably strongswan (ipsec) or hw-encryption [or both] What was the bandwidth when the cpu bottlenecked? Were you running a single tcp connection transferring a single file? Or, a mix of traffic with multiple tcp connections, udp traffic, etc? I'm wondering if a more complex traffic mix would get the other cpus working, and increase the total throughput. -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Live CD problems
Hi, I'm trying to repair a remote system using the Live CD. I have VPN access to the subnet where it lives. An onsite person is booting from cd, and running a small script I provided to tweak the default firewall rule set to allow incoming ssh, and set a password for the centos user and start sshd so far so good I can remotely access the system. the problem is the live cd environment is very fragile. I need to rebuild the contents of a couple filesystems, so I need to umount them and remount them rw. If I make a mistake in a mount command instead of giving an error message and letting me try again. The system freezes and any other ssh session freezes, ahnd will not accept any more incoming ssh connections. the only way I have found to recover is have the onsite person reboot from cd and rerun the script allowing incoming ssh again. Hmm. I should try to talk the onsite person through trying something else from the console. Argghhh!!! This is more than just an annoyance. -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Using CentOS Live CD to recover trashed RHEL system
Hi, There's a RHEL5 system somewhere across the internet with a trashed root file system. I have VPN access to the subnet where it lives. But the system is not talking to the network. The current plan is having an onsite person boot from a CentOS Live CD, copy a small script to configure networking, set a password for the centos user, start sshd, and tweak the default firewall to allow incoming ssh connections, once I have remote access to the live cd environment I'll create a new lvm logical volume, create a file system, and restore from a level 0 dump taken from a lvm snapshot just before things broke. I'm pretty confident I have all of the above under control. The part I'm not certain about is the grub voodoo to get the system to boot to the lvm with the restored root file system. I'm not certain of the vintage of the restored root file system it was built from an old RHEL5 installation cd and last updated a year or so ago. I have a CentOS 5.5 live cd .iso image staged for the onsite person to burn. Are there differences in the boot process for CentOS/RHEL 5.x versions that I have to worry about. Would it be better to try to get a closer match between the root file system and the live cd vintages. At the moment I'm googling for info on the grub incantations for changing the root file system logical volume. Any comments suggestions would be appreciated. Thanks, -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Using CentOS Live CD to recover trashed RHEL system
On Thu, Jun 24, 2010 at 7:53 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: The part I'm not certain about is the grub voodoo to get the system to boot to the lvm with the restored root file system. Look at ./etc/lvm/backup/* in your dumped files, it will show you the VG, LV and ID. Create your new VG and LV, then edit fstab to reflect or recreate it w/ the same names. Just make sure fstab reflects whats actually in place. The seems to be something here that I don't get! I have booted from a cd and am running CentOS, I'm assuming my active root file system is some sort of read/write ram disk overlaid on top of the read only file system from the cd. At the moment the right terminology to express this escapes me. I have the original system disk that is corrupted. It needs at least two partitions since the boot loader does not yet understand lvm. There is a tiny ext2/3 file system that contains /boot which contains the boot loader/grub stuff. I assuming we are talking about legacy grub not grub2. And there is a second partition containing an lvm PV and within that is a LV containing the root file system. I do have a level 0 dump of /boot in addition to the level 0 dump of / I can restore the contents of /boot and / but things will proabably not end up in the same physical sectors. Running grub the right way should update parameter for the boot loader to first tranfer control to the right place in /boot which then accesses the right filesytem in the right PV/LV You seem to be saying that all I need to to do is tweak /etc/fstab in the root file system in the new pvn/lvm. Actually as I try to explain my current understanding things are getting clearer. It seems to me that at least one more step is required. getting a proper chroot jail environment set up so I can run a grub command to update the boot sectors on the RHEL5 system disk to transfer control to the right place in /boot and update /boot so that it can mount the right filesystem on / I'm still hoping to find complete documentation with an example of how to do this. -- Drew Einhorn You can see a lot by just looking. -- Yogi Berra ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AIDE or OSSEC on CentOS 5.4 x86_64?
On Sun, Nov 29, 2009 at 7:55 AM, Rob Kampen rkam...@kampensonline.comwrote: David McGuffey wrote: Starting with a fresh load and after I finish hardening the load following the Center for Internet Security (CIS) guidance, I'm wondering whether AIDE or OSSEC would be a better intrusion detection system. I installed AIDE and did a quick test of AIDE and after initializing the db and applying the recent cups update, I found that 1700+ files had changed. Those are a lot of changes to wade through to determine if they are legit or not. If that is all that AIDE can do, then it is not manageable. Seems to me that any IDS must be tied to the yum update process so that one is not dealing with hundreds/thousands of changes that were brought in by a yum update that I choose to apply. Is OSSEC any less noisy? DaveM Also, check out http://ftimes.sourceforge.net/FTimes/index.shtml Even if you choose another tool, I recommend reading their paper. http://ftimes.sourceforge.net/FTimes/Papers.shtml And the related tools hashdig and XMagic are worth a look. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos I run both of these on my servers. AIDE is noisy, however it is simple to scroll through the list of files that it shows and determine that the folders with all the changes relate to the yum update or install that I know about. After a yum update, I run another aide --init and cp the new db over the old one - I do this once a week after the logrotate takes place, thus most days have only two ~ ten files to look at. BUT the real outcome is I get to sleep easy knowing that something will know about every file change. OSSEC can also be noisy but it also adds some other useful monitoring and emails me when certain events occur. Most of these event I know about, thus I delete the email and life is good. The real benefit is that if the number of log messages suddenly grows I get warned, if I get 10 tries from one IP address to dovecot using different hostnames I get warned etc... I get to choose the level of response, by applying my experience and expectations to the mix. I do not think there is any tool you can just set and forget for IDS functions. HTH ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] yum issue with extras repo?
On Fri, Sep 11, 2009 at 3:15 AM, Ralph Angenendt ralph.angene...@gmail.com wrote: On Thu, 2009-09-10 at 09:01 -0600, drew einhorn wrote: This is related to the problem at hand how? The OP has a problem resulting from mixing standard and 3rd party repos, and has noticed some obvious issues. No, he doesn't. His yum hangs. Obviously yum hangs. It hangs because he is improperly mixing 3rd party repos with the standard configuration. Someone suggested just removing the 3rd repos, and continuing on. I don't know how long this has been going on: 1) Somewhere along the line an incompatible package from a 3rd party repo could have been installed as a result of his yum configuration. Just returning to a standard repo config. Will not uniinstall any incompatible packages. The OP should be alert to this possibility. It is a difficult problem to diagnose. We do not have good tools for this. 2) Presumably the OP had a valid reason, for mixining standard and 3rd party repos. yum-priorities is a good, but not perfect tool for mixing repos. Rather than removing all 3rd party repos the OP might want to configure yum-priorities -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] yum issue with extras repo?
I should probably rewrite the following, moving some paragraphs around. But I'm done for now. On Thu, Sep 10, 2009 at 3:20 AM, Ralph Angenendt ralph.angene...@gmail.com wrote: On Wed, 2009-09-09 at 15:09 -0600, drew einhorn wrote: On Wed, Sep 9, 2009 at 2:13 PM, Akemi Yagiamy...@gmail.com wrote: On Wed, Sep 9, 2009 at 1:02 PM, Dave Stevensg...@uniserve.com wrote: As you can see below I am having a problem checking for updates. This happens repeatedly. I have to kill the process then rerun. I have tried yum clean all but no joy - the process hangs again on extras I suspect it is the non-CentOS repos that are causing the hang (?). You might want to check that by running: yum update --disablerepo=\* --enablerepo=base,extras,updates and see if this one runs fine. This will get things back to standard repos only. But if you have already loaded an incompatible package from a nonstandard repo, this will not fix it. This is related to the problem at hand how? The OP has a problem resulting from mixing standard and 3rd party repos, and has noticed some obvious issues. There may be much more subtle, less obvious issues. For example, a 3rd party repo, may have replaced a standard library with a version with a subtle incompatibity. It may add a bug, along with a feature necessary to support another package that it provides. It doesn't happen often. But it can and does happen. Rather than trying to figure out what you have and how to fix it, it may be easier to start over an build a new system from scratch. This isn't Windows. True. But figuring out which packages came from which repo, can be difficult. There was a hotly debated repotag battle that could have mitigated the problem. The epel folks were strongly opposed. The problem becomes really nasty, when package xyz from repo A, is incompatible with package xyz from repo B. You can probably get the 3rd party repos to play nicer with one another by using yum-priorities. This is related to the problem at hand how? The OP was using packages from the standard repos, epel, and a couple other repos I never heard of for a reason that he did not share with us. yum-priorities can be used to control which packages are installed from which libraries. Count the mumber of packages on your system. Do a: rpm -qa | wc If you have subtle problem with compatability between repos. Do you want to go through all those package determine which repo each package can from and determine whether there are compatibility issues with packages from other repos? Or do you want to start over installing only packages from the centos repos that have been tested by the centos developers. Then add third party repos with yum-priorities preventing centos packages from being replaced by non centos packages, but adding needed packages and their prerequisites from 3rd party repos. There are techniques for finer grained management of compatiblity issues among repositories, that I have never needed to learn about. Someday this is going to sneak up and bite me. Yes, probably, but still not related to the problem at hand. epel is careful not to replace package from the standard repos. I have no idea whether the repos other repos (I never heard of them) are as careful. epel is not concerned about their compatability with other 3rd party repos. And there is a lot of lingering animosity. Just mentioning epel in some places is enough to evoke a bitter response. I did not want to get into those issues. Sometimes the problem does get all the way down to very nasty, tangled compatibily issues among repos, and there is a solution, but it's not easy. Pretty sure there is a 3rd party repo page in the centos wiki. Yes, but you couldn't be bothered to check, could you? Sometimes it would be smarter to not try to help. I'm not the one who has a problem and needs to do the research on this problem. I gave the OP a hint on where to look. Ralph But since you insist. Here's the wiki page on repositiories. http://wiki.centos.org/AdditionalResources/Repositories New repositories have been added since the last time I looked. I have not looked to see whether the repositories used by the OP are discussed here. And here the wiki page on yum-priorities. http://wiki.centos.org/PackageManagement/Yum/Priorities ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] yum issue with extras repo?
Y9ou On Wed, Sep 9, 2009 at 2:13 PM, Akemi Yagiamy...@gmail.com wrote: On Wed, Sep 9, 2009 at 1:02 PM, Dave Stevensg...@uniserve.com wrote: Hello All, As you can see below I am having a problem checking for updates. This happens repeatedly. I have to kill the process then rerun. I have tried yum clean all but no joy - the process hangs again on extras - see second listing below. Suggestions? Dave [r...@cserver ~]# yum check-update Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * epel: fedora.mirror.facebook.net * base: ftp.telus.net * updates: ftp.telus.net * addons: ftp.telus.net * extras: ftp.telus.net epel | 2.1 kB 00:00 virtualmin | 951 B 00:00 pgdg83 | 1.9 kB 00:00 virtualmin-universal | 951 B 00:00 base | 1.1 kB 00:00 updates | 951 B 00:00 addons | 951 B 00:00 extras | 1.1 kB 00:00 I suspect it is the non-CentOS repos that are causing the hang (?). You might want to check that by running: yum update --disablerepo=\* --enablerepo=base,extras,updates and see if this one runs fine. This will get things back to standard repos only. But if you have already loaded an incompatible package from a nonstandard repo, this will not fix it. Rather than trying to figure out what you have and how to fix it, it may be easier to start over an build a new system from scratch. You can probably get the 3rd party repos to play nicer with one another by using yum-priorities. There are techniques for finer grained management of compatiblity issues among repositories, that I have never needed to learn about. Someday this is going to sneak up and bite me. Pretty sure there is a 3rd party repo page in the centos wiki. I've never heard of some of these repos. epel wants to be the only 3rd party repo, and sometimes there are issues with other 3rd party repos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to tell if I've been hacked?
On Sat, Aug 22, 2009 at 10:49 AM, Bill Campbell cen...@celestial.com wrote: On Fri, Aug 21, 2009, Dave wrote: On Tue, Aug 18, 2009 at 3:53 PM, Scott Ehrlichsrehrl...@gmail.com wrote: ... stuff deleted On Tue, Aug 18, 2009 at 6:57 PM, Bill Campbellcen...@celestial.com wrote: To really know whether a system has been hacked, it's necessary to use something like Tripwire or Aide, One of the problems I've found with tripwire in particular and aide to a lesser extent is that they (a) tend to be very verbose even when nothing has changed, and (b) updating their database is fairly complex. I have developed a system that we use here and at our client sites that uses the tripwire formatted configuration files, but maintains its own database, and produces minimal reports of changes (none of nothing has changed). Updating its database after changes have been checked and verified is a simple file ``mv'' command. Another open source tool you might want to consider. http://ftimes.sourceforge.net/FTimes/index.shtml -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LSI Logic MegaRAID 8480 Storage controller
On Wed, Mar 11, 2009 at 8:26 AM, Joseph L. Casale jcas...@activenetwerx.com wrote: + /home/drew/bin/MegaCli -AdpPRSetDelay 168 -a0 ^MInvalid input at or near token -AdpPRSetDelay Doesn't like the syntax Looks like the manual is outdated, you should have ran a -h :) Hmm. I've seen a bunch of bad syntax in the manual. Can't trust the manual. Haven't looked at the -h Will probably have better luck there. Turns out this is the correct syntax: MegaCli -AdpPR -Dsbl|EnblAuto|EnblMan|Start|Stop|Info|{SetDelay Val} -aN|-a0,1,2|-aALL MegaCli -AdpPR -SetDelay X -a0 where X is between 0 and 65535... jlc ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] LSI Logic MegaRAID 8480 Storage controller policies?
Life is much better now that I'm using -h instead of the manual. I have a new question about policies Direct and DisDskCache makes sense Cached and EnDiskCache makes sense not so sure about Directand EnDskCache Cached and DisDsk Cache Do they make sense? -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LSI Logic MegaRAID 8480 Storage controller policies?
On Wed, Mar 11, 2009 at 12:55 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: Life is much better now that I'm using -h instead of the manual. I have a new question about policies Direct and DisDskCache makes sense Cached and EnDiskCache makes sense not so sure about Direct and EnDskCache Cached and DisDsk Cache Do they make sense? I believe Cached|Direct refers to adapter based caching of the logical (virtual) disk whereas EnDskCache|DisDskCache refers to physical disk cache. The adapter can hold data in the event of a powerloss with a BBU but I can't see how the disc could. Hmm. The drive cabinets could have their own UPS. Doesn't have to be very big to keep the power up for long enough for the drive disk caches to get emptied. And I've seen data centers with amaizing multiple layers of redundant power. I'm thinking production database Secondary servers should be configured for reliability, and production Primary servers should be configure for speed. The secondary will be extremely paranoid. WT Direct DisDskCache. Not sure understand the performance benefit/risk trade offs well enough to choose intelligently for the primary. Especially when the application may be making lots of assumptions about what is happening on the lower levels. And may have much more memory available to do its own caching and optimization. Does the controller really know enough about what's going on in the drive to make effective use of the drives cache to speed things up? My guess is that I'll start with WB Cached DisDskCache on the primary, and may be surprised where we end up. And it seems to me that ADRA is almost always the better choice. But I could easily be missing something important. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LSI Logic MegaRAID 8480 Storage controller
On Mon, Mar 9, 2009 at 11:14 AM, Joseph L. Casale jcas...@activenetwerx.com wrote: There is a MegaCLI command line interface that runs under the operating system. Normally I prefer command line tools. But this software is big, and complex. All I have been able to find is a reference manual, that has lots of typos and is not very well organized for me to learn what I need to know. I have not been able to find a tutorial for this software. It will take more time than I have at the moment to figure out this tool. Huh? It's one tiny binary, and the syntax is trivial? You are looking at something else... Its own help is decent and it installs via rpm on RHEL. What you need is the mr_sas_sw_ug.pdf from lsi's site. The manual IS sloppy. missing - characters in the syntax Tryijng to figure out -Val syntax megacli AdpPRSetDelay -Val -aN|-a0,1,2|-aALL + /home/drew/bin/MegaCli -AdpPRSetDelay 0 -a0 Invalid input at or near token -AdpPRSetDelay Tried sticking a - in front of the zero. Doesn't make much sense, tried it anyway, didn't help. This cheat sheet for another vintage of the controller rebadged by Dell, seems to be exactly what I need. http://tools.rapidsoft.de/perc/perc-cheat-sheet.html Looks like I can get most of what I need, without any stinking -Val That will do for now. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LSI Logic MegaRAID 8480 Storage controller
On Tue, Mar 10, 2009 at 1:52 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: The manual IS sloppy. missing - characters in the syntax Tryijng to figure out -Val syntax megacli AdpPRSetDelay -Val -aN|-a0,1,2|-aALL + /home/drew/bin/MegaCli -AdpPRSetDelay 0 -a0 Invalid input at or near token -AdpPRSetDelay Tried sticking a - in front of the zero. Doesn't make much sense, tried it anyway, didn't help. Seriously, I get that you are frustrated, been there myself. I don't have any of our LSI's actually running at the moment, but it makes sense to me if the Patrol Read is disabled, you get an error configuring it. Just a guess... What does a -AdpPR -Info -a0 yield? + /home/drew/bin/MegaCli -AdpPR -Info -a0 ^M Adapter 0: Patrol Read Information: Patrol Read Mode: Auto Patrol Read Execution Delay: 168 hours Number of iterations completed: 43 Current State: Stopped It's already 168 hours, lets try a command setting it to 168 hours + /home/drew/bin/MegaCli -AdpPRSetDelay 168 -a0 ^MInvalid input at or near token -AdpPRSetDelay Doesn't like the syntax + /home/drew/bin/MegaCli -AdpPRSetDelay 0 -a0 ^MInvalid input at or near token -AdpPRSetDelay Lets try setting it to 0, Doesn't like that either. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LSI Logic MegaRAID 8480 Storage controller
On Tue, Mar 10, 2009 at 4:18 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: I wish I had one of my cards running, but just looking at the syntax, from my experience running this app, I would say you need to do: # MegaCli -AdpPRSetDelay -Val33 -a0 if you wanted 33 hours :) What are you trying to change it to anyway? Is the value sane? + /home/drew/bin/MegaCli -AdpPRSetDelay -Val168 -a0 ^MInvalid input at or near token -AdpPRSetDelay Hmm. It didn't like that either! I'm just trying to figure out the command syntax. And writing some utility scripts. -AdpPRSetDelay -Val is just the first command in the manual that sets a value, and there is neither a specification of the syntax for -Val, nor an example command using -Val Will probably leave the -AdpPRSetDelay at 168 But I still need the syntax for setting -Val in other commands. I bet you didn't learn the syntax from the manual. I'll bet you inherited some scripts from someone else, and learned by tweaking working scripts. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LSI Logic MegaRAID 8480 Storage controller
Secured: Unsecured Locked: Unlocked Foreign State: None Media Type: Hard Disk Device + /home/drew/bin/MegaCli -CfgSpanAdd -R10 -Array0[11:3,11:4] -Array1[11:5,11:6] -a0 Drives are not consistent with Disk Group. Doesn't look like it liked the way I specified the mirrors! MegaCli –CfgSpanAdd -aN|-a0,1,2|-aALL -R10|-R50|R60 – Array0[E0:S0,E1:S1,...] –Array1[E0:S0,E1:S1,...] [...] [WT | WB] [NORA | RA | ADRA] [Direct | Cached] [CachedBadBBU|NoCachedBadBBU] [- sz [-sz [... ]]] [-strpszM] [–afterLdX] -aN Hmm. The -aN|-a0,1,2|-aALL part looks completely bogus The Arrays look right to me. Will set some different polices, etc after I get this part working! -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] LSI Logic MegaRAID 8480 Storage controller
I have LSI Logic MegaRAID 8480 Storage controller I am having trouble reconfigure one of the hardware raid devices It is configured with 4 hardware raid logical volumes on /dev/sda /dev/sdb /dev/sdc /dev/sdd. I am in the middle of rebuilding the system, and at this point I am only using one of the volumes, /dev/sda /dev/sda, /dev/sdb, and /dev/sdd are all 2 drive raid1 mirrors I will be using the hardware raid logical volumes /dev/sdb and /dev/sdd with their current configurations I doubt that the hardware raid device on /dev/hda is causing any problems /dev/sda has two partitiions /dev/sda1 is a 100 MB ext3 partition mounted on /boot /dev/sda2 is a 20 GB lvm logical volume in a 67 GB volume group with an ext3 partition mounted on / the rest of the volume group is empty. I don't like the /dev/sdc is configued. It's configured as a 4 drive raid6. It will be used for database journal, nearly all sequential writes. I would rather use raid10 There are 3 ways to configure the hardware raid. The is something called WebBIOS which is sort of like a web browser that you access from the BIOS. This is ruled out since we will need to maintain the raid configuration with shutting down the operating system, or applications. There is a MegaCLI command line interface that runs under the operating system. Normally I prefer command line tools. But this software is big, and complex. All I have been able to find is a reference manual, that has lots of typos and is not very well organized for me to learn what I need to know. I have not been able to find a tutorial for this software. It will take more time than I have at the moment to figure out this tool. Finally there is the MegaRAID Storage Manager a GUI tool that runs under the OS. I'm running v2.77-00 So the first thing I need to do is delete the unwanted raid6 logical volume. When I try to delete it, it refuses and says: This is an OS drive. The virtual drive cannot be deleted. Any ideas on how to get past this problem with the MegaRAID Storage Manager, or pointers the better documentation, and maybe even a tutorial for the MegaCLI interface. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LSI Logic MegaRAID 8480 Storage controller
On Mon, Mar 9, 2009 at 10:38 AM, John Doe jd...@yahoo.com wrote: From: drew einhorn drew.einh...@gmail.com When I try to delete it, it refuses and says: This is an OS drive. The virtual drive cannot be deleted. Any ideas on how to get past this problem with the MegaRAID Storage Manager, or pointers the better documentation, and maybe even a tutorial for the MegaCLI interface. Hum, is it unmounted? No, the only mounted stuff is on /dev/sda If it was, maybe try to remove any partitions on it... That's it! It won't delete a raid logical volume if it sees a partition on it, even if it is not mounted. Once I cleared the partition table. The it let me delete the, logical volume. Thanks, -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] getting Centos on used rackable systems 1U withdualOpteron 248 HE
the machines are screamer... As in sound like an industrial strength vacuum clearer? Where did you get them? What did you pay for them? I've seen similar boxes dual 3.0 GHz Xenons upgradable to 12GB RAM SATA RAID controller from an unfortunately unreliable source. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Bezerk they will go!
On Thu, Jan 22, 2009 at 4:41 PM, Ralph Angenendt ra+cen...@br-online.dera%2bcen...@br-online.de wrote: Michael St. Laurent wrote: Is there a projected release date for CentOS-5.3? hedidnotask...this search the forums..when it's done..unless you would like to help..:) I have helped by sending money. I don't know if that counts or not though. Sure does and thank you for that. But just as you don't mention the Reinemachefrau in front of the Nazi chief in Dead men don't wear plaid, you don't ask when the next release comes out here. Someone might go berzerk. Bezerk they will go, because for each person who doesn't ask, there will be dozens who do. Betcha one of you can make this rhyme, I can't. Note the minimalist .sig Probably should fatten it up -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Bogus ssh complaints about dns
Hi, If I ssh to a CentOS5 box using just the hostname, not the full name, resulting from appending domain name from the search record in resolv.conf it says the ip maps to the correct full name it gets from reverse dns, and claims the full name does not map back to the ip, but it does as verified by both nslookup and dig If I ssh to the full name instead of the short name, the I don't get these complaints. The short term work around is to make sure all scripts use the full name, instead of the short name without the domain. But that is very annoying. I browsed through the man pages for ssh, sshd, ssh_config, and sshd_config and did not spot anything that was misconfigured. But I could have missed something -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Bogus ssh complaints about dns
On Tue, Dec 16, 2008 at 6:52 PM, nate cen...@linuxpowered.net wrote: drew einhorn wrote: I browsed through the man pages for ssh, sshd, ssh_config, and sshd_config and did not spot anything that was misconfigured. But I could have missed something check your /etc/hosts file for any entries related to the system your connecting to. Bingo! I should have thought of that nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] net-snmp puzzle
I have a bunch of centos 5.2 boxes. I'm trying to run smtp on all of them. Using indentical net-snmp configuration files. /etc/snmp/snmpd.conf com2sec notConfigUser localhost smssnmp com2sec notConfigUser 10.1.1.0/24 smssnmp group notConfigGroup v1 notConfigUser group notConfigGroup v2c notConfigUser viewsystemviewincluded .1 access notConfigGroup any noauthexact systemview none none syslocation SMS - North Carolina syscontact [EMAIL PROTECTED] pass .1.3.6.1.4.1.4413.4.1 /usr/bin/ucd5820stat I came up with this config file by tweaking some examples from howto docs on the web, I have not gotten to them point where I feel like I really understand it as well as I should. On some boxes it just works On some boxes it complains with: Nov 19 01:15:08 s1s0105 snmpd[7073]: /etc/snmp/snmpd.conf: line 1: Error: bad source address Nov 19 01:15:08 s1s0105 snmpd[7073]: net-snmp: 1 error(s) in config file(s) Nov 19 01:15:08 s1s0105 snmpd[7073]: NET-SNMP version 5.3.1 But it works anyway. On other boxes, it complains with: Nov 19 10:55:03 s1s0106 snmpd[22621]: Warning: no access control information configured. It's unlikely this agent can serve any useful purpose in this state. Run snmpconf -g basic_setup to help you configure the snmpd.conf file for this agent. Nov 19 10:55:03 s1s0106 snmpd[22621]: NET-SNMP version 5.3.1 And does not work. Fooling around with snmpconf leads to much different config files but they don't work any better. Any ideas? -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] net-snmp
CentOS 5 uses the net-snmp package. I am used to the similar but different snmpd package. They appear to have different conventions about what can be used as a community string. And when net-snmp sees a community string it doesn't like, it just fails silently without giving an error message. I have not been able to find what net-snmp considers a valid community string. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Difference between system-config-* and system-config-*-tui ?
tui = text user interface runs in an terminal don't need X windows. On Fri, Jul 18, 2008 at 6:52 AM, Fabrice La Farina [EMAIL PROTECTED] wrote: Hello List, I have a little question. What is the difference between the system-config-* and system-config-*-tui ? Thank you. Fabrice ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RHEL vs. CentOS
On Wed, Jul 2, 2008 at 10:09 AM, Johnny Hughes [EMAIL PROTECTED] wrote: drew einhorn wrote: Hi, we have a new customer to support. They have RHEL5 not CentOS5. You need to think more about things like compiling custom kernels or 3rd party repos, since you have upstream paid support now. I've been thinking about 3rd party repos So far the only non RHEL packages I've installed are freenx and nx from the CentOS extras. I haven't been able to find them anywhere else. I am puzzled by the status of yum-priorities. Unless I'm looking at things cross eyed. It's in the CentOS5 base repository, Which I think means it should be in the RHEL5 repositories, but I can't find it there. I'm pretty sure I have a sufficient understanding of yum-priorities on CentOS to adapt it to RHEL, once I install it. And I really need to learn more about package management and repositories in a pure CentOS environment. I really don't understand the voodoo for overriding the priorities, for a specific packages when necessary. And I really wish there was a way to browse the available packages by repo after the priorities have been taken into consideration. And in addition I wish there was to browse the packages that are blocked by packages in other repositories, And better ways to understand how dependency issues effect which versions of a package are available. Is there a good place to look for documentation relative to the above. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RHEL vs. CentOS
In looking at the possibility of using yum-priorities on a RHEL5 system, I noticed on thing that is different from my recollection, I see that the default priority it 99, but I seem to recall that it used to be 1. Is my memory faulty, or did it change? Actually 99 seems to make the most sense when using it in its native environment on a CentOS box. But when trying to use it in a foreign environment on a RHEL box, 1 seems to be a better choice, because of the repos that are magically created by the rhnplugin, that do not have configurations in /etc/yum.repos.d It would be ideal if there turned out to be a undocumented feature in */etc/yum/pluginconf.d/priorities.conf *that allowed us to change the default priority. * * ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] RHEL vs. CentOS
Hi, we have a new customer to support. They have RHEL5 not CentOS5. Is there a summary of the differences between RHEL and CentOS? We have come across differences in how yum works. There is magic involving the rhnplugin that connects us to invisible repositories not mentioned in the yum config files, interacts with the web interface via rhn.redhat.com, ... We wonder if there are other differences that we have not yet stumbled upon, that might create issues in the future. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] setroubleshoot
There is a setroubleshoot package that runs under X, that really makes it a lot easier to troubleshoot selinux, but I really don't want to run X on all my vms. Does anyone here know of an equivalent that doesn't require X? -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mdadm on reboot
On Mon, Jun 16, 2008 at 12:09 AM, Les Mikesell [EMAIL PROTECTED] wrote: drew einhorn wrote: Hi, I'm in the process of trying mdadm for the first time I've been trying stuff out of tutorials, etc. At this point I know how to create stripes, and mirrors. My stripe is automatically restarting on reboot, but the degraded mirror isn't. Is the partition type set to FD? That's the problem, but now I'm having trouble fixing it. md1 has a single partitions md1p1 [EMAIL PROTECTED] ~]$ sudo fdisk /dev/md1 The number of cylinders for this disk is set to 244123680. There is nothing wrong with that, but this is larger than 1024, and could in certain setups cause problems with: 1) software that runs at boot time (e.g., old versions of LILO) 2) booting and partitioning software from other OSs (e.g., DOS FDISK, OS/2 FDISK) Command (m for help): p Disk /dev/md1: 999.9 GB, 30593280 bytes 2 heads, 4 sectors/track, 244123680 cylinders Units = cylinders of 8 * 512 = 4096 bytes Device Boot Start End Blocks Id System /dev/md1p1 1 244123680 976494718 fd Linux raid autodetect Command (m for help): q but the attempt to create md2 fails: [EMAIL PROTECTED] ~]$ sudo mdadm -C -ayes /dev/md2 --level=raid1 --raid-devices=2 missing /dev/md1p1 mdadm: Cannot open /dev/md1p1: No such file or directory mdadm: create aborted [EMAIL PROTECTED] ~]$ sudo mdadm -C -ayes /dev/md2 --level=raid1 --raid-devices=2 missing /dev/md1p1 mdadm: Cannot open /dev/md1p1: No such file or directory mdadm: create aborted Hmm. That's right. I does not exist. [EMAIL PROTECTED] dev]$ ls -l /dev/md* brw-r- 1 root disk 9, 0 Jun 16 06:43 /dev/md0 brw-r- 1 root disk 9, 1 Jun 16 06:46 /dev/md1 brw-r- 1 root disk 9, 2 Jun 16 06:48 /dev/md2 [EMAIL PROTECTED] dev]$ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] mdadm on reboot
Hi, I'm in the process of trying mdadm for the first time I've been trying stuff out of tutorials, etc. At this point I know how to create stripes, and mirrors. My stripe is automatically restarting on reboot, but the degraded mirror isn't. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] dependency on /usr/lib/nx
I do a: sudo yum update and I get: yada, yada, yada,... --- Package freenx-server.i386 0:0.7.2-8.el5 set to be updated -- Running transaction check -- Processing Dependency: /usr/lib/nx for package: freenx-server Importing additional filelist information -- Finished Dependency Resolution Error: Missing Dependency: /usr/lib/nx is needed by package freenx-server Not only does this sound like an odd dependency /usr/lib/nx exists! Any ideas? -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Software raid tutorial and hardware raid questions.
I remember seeing one with an example migrating from an old fashioned filesystem on a partition to a new filesystem on a mirrored lvm logical volume but one only one side of the mirror is set up at this time. First I need to copy stuff from what will become the second side of the mirror to filesystem on the first side or the mirror Then I will be ready to follow the rest of the tutorial and build and attach the second side of the mirror. Wish I could remember where I saw that tutorial. Want to embellish the example and stripe each side of the mirror. Understanding a mirrored pair of stripes, seems easier than understanding a striped pair of mirrors. But this seems like a place where counterintuitive results are not a big surprise. I can do mirroring and striping in lvm, mdadm, or a hardware raid controller. There are lots of configurations to ponder. What about recovery after a hardware raid controller? What are the chances of being able to replace the controller and start up successfully from drives? I know that assuming the failed controller did write bad stuff to the drives while it was crashing and burning. I would not be surprised if the controller firmware revisions had to match. I would be surprised but not astonished if the board hardware revision level had to match, too. I hope we are past those days. Anybody know about the LSI Logic MegaRAID 8480 Storage controller in particular. -- Drew Einhorn -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] EVMS?
EVMS Enterprise Volume Management System sounds interesting, looks like it supported CentOS4, but not CentOS5. But maybe I'm not looking in the right places. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Custom vmlinuz/initrd.img ??
Unless I am barking up the wrong tree. I need to build a custom vmlinuz/initrd.img. I am using cobbler http://cobbler.et.redhat.com/ and am trying to get it to work with VMware, When I imported the CentOS 5 installation CD cobbler selected a vmlinuz/initrd.img and stuffed them into /tftpboot/images/CentOS5-i386/ I don't betlieve this vmlinuz/initrd.img supports the WMware network drivers. How do I check what drivers are supported in this vmlinuz/initrd.img pair? If as I suspect I need to add support for the vmware nic drivers, how do I do that? -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] inexpensive / reasonably priced workstation / server development box
I always look here http://cr.yp.to/hardware/build-20060107.html He hasn't updated it recently. But the reasons Dan Bernstein made the choices he did are mostly still vaiid and it's interesting reading. On 8/9/07, Robert - elists [EMAIL PROTECTED] wrote: We are testing some simple low bandwidth video and audio broadcasting using real server and client softwares. So, for quick check and simplicity, we were plunking along TESTING on an 3.2GHz XP box and I noticed frames were getting dropped on the broadcast just for resizing a window on the screen during the session. Talk about totally lame... I know this can be a big deal and start conflicting opinions yet I need some experienced perspective please? Can anyone chime in on what they use or what they would buy if they were going to have a workstation box for development that could double as test server and have good high speed storage and excellent video and audio etc etc Im thinking of a box that does audio and video development, can easily handle virtualization, and of course do general work apps plus setting up various server processes for testing whether intranet or internet etc etc It can be premade like specific dell or hp (please list component choices for clarity) OR A hand built box with specific list of components that Now, I know this has been done in magazines with great expense, and even with lower expense, yet I trust the list more than a magazine that wants to sell me advertising etc Thanks in advance - rh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Re: Mixing RPMforge and EPEL (Was: EPEL repo)
Stupid question redux. With some more explanation Why not? Make a mirror of the epel repo. For each package in the repo. Create a repotag using the original signature. Sign the package with repotag using a new key. Anyone wanting to mix repos. Should require signatures with the new key. Problems will certainly remain, but I think this will help with some of the problems. On 7/30/07, Les Mikesell [EMAIL PROTECTED] wrote: R P Herrold wrote: ATM we'll just live and let live, and there will not be any one-side effort to rectify any compatibility issues EPEL created. It's their mess, they'll have to clean it up. Live and let die, you mean - at least as far as the users are concerned. I don't think this issue has any solution other than separate namespaces. Les Your issue belongs on another list Sorry, but I believe that the people affected need to know about it at least as much as the people who control it. -- the 'mark by nameing' the rpm's in a way obvious to a low sophistication user (rather than some checksum based method that does not exist) has been proposed and rejected already. That misses the point that there may very well be reasons to want to have more than one version installed at once. Every developer should know that there are times you need to at least test 2 different versions of something on the same machine - and they generally know how to do it so they don't conflict. Sadly, the FHS guys seem to live on some planet of perfection where real world issues of version differences and places to store them don't exist, and packagers have followed along with this mistake. sad, but still the case. We'll be having pain for this for years and years. See: https://www.redhat.com/archives/epel-devel-list/2007-June/msg00031.html Please read the archive and the back thread leading up to it. Several @redhat.com showed up to pack the gallery at the 'last chance' epel meeting which could have avoided this train wreck Reasons for disagreements are pretty much irrelevant to their effect. There is not much reason to ever expect everyone to agree and lots of reasons to provide a mechanism to allow them to disagree in separate spaces. Try to imagine what the internet would be like if DNS did not provide managed hierarchal namespace and anyone could usurp anyone else's domain. That's what we get when different people can put different contents into packages of the same names. And it isn't going to go away until there is a namespace based system that lets the end user choose which he wants. I'd just like to see a little less granularity in that namespace than centos vs. ubuntu... -- Les Mikesell [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Mixing RPMforge and EPEL (Was: EPEL repo)
Dumb question. Can't we identify the source of the package by looking at the signature. On 7/28/07, Dag Wieers [EMAIL PROTECTED] wrote: On Fri, 27 Jul 2007, JC Júnior wrote: I received a message about EPEL repository, I would like to know if this repo is long term support too. Let me add that an effort to make sure EPEL is compatible with RPMforge failed as EPEL wants to become the only repository for RHEL and there is no interest to consider current RPMforge users. EPEL refused the repotag, so one cannot easily identify where a package comes from and mixing repositories becomes harder. Since compatibility is a 2 way interaction and EPEL shows no interest, it is certain that mixing EPEL with other repositories may break something. Also EPEL's Fedora legacy makes EPEL closer to Fedora's Extras packages than they are with RPMforge's packages, which can lead to problems with eg. nagios-plugins or clamav packages. I already foresee a lot of frustration caused by bug-reports that make it not clear that packages come from EPEL (much like in the Fedora era where Fedora Extras packages caused problems with RPMforge that were hard to identify or fix). Also, EPEL packages only exist for RHEL4 and RHEL5, resp 340 and 600 projects while RPMforge builds for RHEL2, RHEL3, RHEL4 and RHEL5, about 3400 projects. We however do not provide any PPC packages. As always, be careful what you enable and cherry pick rather than enable fully. PS Within a corporate environment, look at the mrepo tool for managing repositories and cherry picking packages for deploying and managing systems. Do not enable repositories company wide ! -- dag wieers, [EMAIL PROTECTED], http://dag.wieers.com/ -- [Any errors in spelling, tact or fact are transmission errors] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] setroubleshoot w/o X?
Hi, I recently discovered setroubleshoot, a wonderful tool that helps diagnose and resolve selinux problems, even if you really do not understand selinux. I need to read up on selinux and get to where I understand it much better. I'm wondering if there is a text only version of setroubleshoot that runs on a minimal server configuration without X installed? -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Re: setroubleshoot w/o X?
On 7/27/07, Tom Diehl [EMAIL PROTECTED] wrote: On Fri, 27 Jul 2007, drew einhorn wrote: Hi, I recently discovered setroubleshoot, a wonderful tool that helps diagnose and resolve selinux problems, even if you really do not understand selinux. I need to read up on selinux and get to where I understand it much better. I'm wondering if there is a text only version of setroubleshoot that runs on a minimal server configuration without X installed? Not that I am aware of but there is sealert -l in C5. Avc messages show up in the logs like the following: Jul 27 13:04:23 calamari setroubleshoot: SELinux is preventing samba (/usr/sbin/smbd) search to bin (bin_t). For complete SELinux messages. run sealert -l ca16f5d1-dd8a-4c9f-a535-1ff823c14583 The sealert thing displays information similar to setroubleshootd. Hope this helps, sealert is part of the setroubleshoot package and the setroubleshoot package requires gnome, pygtk2, ... It would be very helpful if there was a way to split the basic text based part and the X based part into separate packages. -- Tom Diehl [EMAIL PROTECTED] Spamtrap address [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Thank you: Wiki data for adding 3rd party repository, ProtectBase and Priorities
epel exists, but not ready for prime time? I'm assuming that when it is ready it will go here. EPEL isn't a CentOS repo ... as all the other ones you have listed above are. It is your box though, so you can put it where you want. I would have it in the other 3rd party repos section though One thing to remember is you can have 99 priorities ... so you can have one for each repo if there is overlap of packages ... that will keep you always getting packageA from the higher priority repo (say dag over kbs-CentOS-Extras as an example). You can also skip 5 or 10 between repos instead of one, which makes it easy to throw something in the middle between 2 packagesif you need to. I think epel probably goes between 3 and 4, so I think we need the wider for it. Will repost my final set of priorities once the stream of suggestions dries up. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Thank you: Wiki data for adding 3rd party repository, ProtectBase and Priorities
Great minds think alike. I just sent a message suggesting the same thing. Also, I think I've found that if you really want to use the plus repo it needs to be the same priority as base and updates. That could be a problem. Thanks. Well ... actually, having plus lower is a good thing. BUT, it requires you to exclude the packages that exist in Base/Updates if you use the Plus repo. This is A GOOD THING though. You can install anything in plus that is not a duplicate package in base/updates without a problem ... but you can't accidentally install a package that is also in base/updates without specifically excluding it. Hmm. I'm not sure I understand the easiest way to see the correct solution, to these kinds of problemd. It would be nice if there were a way to see what packages are available, but blocked by packages in higher priority repos, or missing dependencies. This reminds me of another related question but forgot to ask. Don't remember exactly which distribution I was running at the time. But I had problems with yum being unable to install certain packages, because issues with complex dependencies were too difficult for it. Someone suggested switching to the smart package manager, which was smart enough to downgrade certain packages to resolve dependency issues. Have not seen signs of similar problems so far with yum on CentOS. Has yum caught up with smart, or are there still some issues here. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Thank you: Wiki data for adding 3rd party repository, ProtectBase and Priorities
On 7/26/07, Dave K [EMAIL PROTECTED] wrote: On 7/26/07, Akemi Yagi [EMAIL PROTECTED] wrote: If you ever set up your own local repo, that should be given the highest priority. In that case, you'd better start with a 2 for base etc. I'm just starting to play with priorities, but I actually made mine all multiples of 10 on the first setup to make tuning easier. Great minds think alike. I just sent a message suggesting the same thing. Also, I think I've found that if you really want to use the plus repo it needs to be the same priority as base and updates. That could be a problem. Thanks. -- Dave K Unix Systems Network Administrator Mount Laurel NJ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Thank you: Wiki data for adding 3rd party repository, ProtectBase and Priorities
Information about the epel repository should be added http://fedoraproject.org/wiki/EPEL But since it is an immutable page someone with more privileges than I will have to do it. On 7/26/07, Akemi Yagi [EMAIL PROTECTED] wrote: On 7/26/07, Lanny Marcus [EMAIL PROTECTED] wrote: This is a public thank you, to whoever wrote the Wiki's for adding 3rd party repositories, ProtectBase and Priorities. Clear, excellent, step by step instructions. I did this late last night and I missed the thing that Priorities is the recommended plugin, so I will change to that, from ProtectBase. :-) Lanny The CentOS team is great. See who contributed to that articular article: http://wiki.centos.org/Repositories?action=info Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Thank you: Wiki data for adding 3rd party repository, ProtectBase and Priorities
Great idea, But to take it one step further, think I'll use 10, 20, 30, ... That way I'll have room to insert new levels where ever I need them. On 7/26/07, Akemi Yagi [EMAIL PROTECTED] wrote: On 7/26/07, drew einhorn [EMAIL PROTECTED] wrote: Here's how I set up my repository priorities, with some questions, and request for comments on whether there are better ways of doing things. I'm running on CentOS 5, some of the repositories do not exist, some exist but are empty, etc. If you ever set up your own local repo, that should be given the highest priority. In that case, you'd better start with a 2 for base etc. Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] disabling SELinux on CentOS: a good idea?
On 7/15/07, Johnny Hughes [EMAIL PROTECTED] wrote: Learning to use it correctly is the real answer. That's on my list of things to. I'm the meantime setroubleshoot helps me get by. -- Drew Einhorn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos