Carlos Ordonez - RIP

[Michael MacIsaac]

My good buddy Carlos passed away. Those of you who knew him, no doubt knew
what a great guy he was. We will miss him.  May he rest in peace.



https://www.tributearchive.com/obituaries/28143502/carlos-a-ordonez/poughkeepsie/new-york/william-g-miller-and-son-funeral-home-inc


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Taking some time

[Michael MacIsaac]

Mark,

Good luck.

I'll never forget that first zLinux redbook - good memories.

-Mike Mac

On Wed, Feb 15, 2023 at 10:57 AM Mark Post  wrote:

> All,
>
> I'm retiring from SUSE. Today is my last day on the job. I intend to
> stay involved with Linux on the mainframe, including this mailing list,
> but I'm not sure just how involved. I'll know better after I've had some
> time to adjust to my new life.
>
> When I left EDS in 2007, the environment at the company had become very
> toxic, with layoffs every quarter of good people with decades of
> experience. Joining Novell/SUSE at that time was the best possible thing
> that could have happened to me professionally. It's been very satisfying
> to contribute to the creation of SUSE's products. It has literally been
> a dream job for me.
>
> I'm thankful to the many people that have helped me over the years.
> Without them, I might never have been able to make working with
> mainframe Linux my career for 20+ years.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Permissions of mounted CMS disks after cmsfs-fuse

[Michael MacIsaac]

Thanks bear, that worked.

I could argue that ignoring the umask is a bug, but I'd probably get
"working as designed", so I won't bother to open a case.

-Mike M

On Fri, Jan 8, 2021 at 3:32 PM r.stricklin  wrote:

> On Jan 8, 2021, at 8:52 AM, MacIsaac, Michael (CORP) wrote:
>
> > Hello list,
> >
> > I need to get CMS files to Linux as a non-root user (zadmin in this
> case).  I am able to mount the CMS disk as such (had to add the -o umask
> flag):
> >  # sudo cmsfs-fuse -a -o umask=022 /dev/dasdi /mnt/CMSdiskRO
>
> fuse is user-space. It wouldn't surprise me to learn that a fuse-mounted
> filesystem is only usable by the user who mounted it.
>
> indeed, this would seem the reason for `-o allow_other`
>
> ok
> bear.
>
>
> --
> until further notice
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

consolez - a new open-source package to view z/VM consoles and run CP commands from a browser

[Michael MacIsaac]

Hello zLinux and zVMers,

Merry Christmas, Happy Hanukkah, Kwaanza and Festivus for the rest of us!

I had some slow time the last few weeks and started a 'skunkworks' project
to address a requirement that recently came up.  The code just started
gelling so I decided to open-source it before this crazy 2020 year is out,
under the heading of 'release early, release often'.

'consolez' is an open source package that gives browser access to z/VM
consoles and CP commands, while limiting access to certain teams. It can
save user's lots of time when they have to interact with many z/VM LPARs.
You will need a zLinux server on each z/VM LPAR and a user that can do
'passwordless' SSH. LDAP authentication is recommended but not necessary.

There's a 14 minute video describing it here: https://youtu.be/vD_6PXeJWdE

And the code and some charts are on my free Google 'site':
  -) Main page: https://sites.google.com/site/mike99mac/home
  -) Code : https://sites.google.com/site/mike99mac/consolez-0.90.tgz
or https://tinyurl.com/y8ceas4c
  -) Charts   : https://sites.google.com/site/mike99mac/consolez.pptx

Enjoy.  Send comments, questions and bug reports to this venue or directly
to mike99mac at gmail.com

Hope this might help you end the year on a slight uptick. ☺

-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: adding cpus without logoff

[Michael MacIsaac]

Gregory,

There is code in zoom that does this.  We've been using it for a few years
at my organization.

See: https://sourceforge.net/projects/system-zoom/  The bulk of the code
for this operation is in /usr/local/sbin/zstartclients (which many other
operations are symbolic links to) in zoom.tgz. Download and 'tar -zvf' it.

I haven't updated the code on sourceforge lately, but will do so after I
send this.  Feel free to email me off-list if you have any questions.

-Mike M

On Mon, Sep 7, 2020 at 6:55 PM Grzegorz Powiedziuk 
wrote:

> On Mon, Sep 7, 2020 at 3:48 AM Herald ten Dam 
> wrote:
>
> >
> > you can dynamically add cpus. You changed only the definition. Have a
> look
> > at this note form IBM:
> >
> >
> https://www.ibm.com/support/pages/dynamically-adding-or-removing-cpus-linux-zvm-guest
> >
> > thank you. This is actually what I was trying to do. I've updated the
> definition and then from the guest VM (via vmcp, from linux) I run the
> define CPU 08 command which gave me an error about reaching the max number
> of cpus defined in the directory.  Even though the number right now is "12"
> it doesn't let me go with it. I am 100% sure that logoff/logon will fix
> that but I can't shutdown that vm at the moment
>  Thanks
> Gregory
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: CP FOR through vmcp?

[Michael MacIsaac]

Hi,

Thanks for all the replies. However, what I take away is

> vmcp would need enhancements to  ...


Most of the code I write is driven from Linux, so it can issue CP commands
but cannot run CMS commands, thus any REXX EXEC.

Have any of the vmcp developers heard this requirement before?

-Mike M


On Sat, Aug 22, 2020 at 8:15 PM Donald Russell 
wrote:

> Does CPFOR have to be the first stage? I’d like to pass the userid as an
> argument and have it read commands from primary input and write responses
> to primary output, and the return code from each command to secondary
> output if connected.
>
> Similar to the CO and COMMAND stages.
>
>
>
> On Sat, Aug 22, 2020 at 13:23 Rob van der Heij  wrote:
>
>> I'm not going to try with vmcp, but I can do it with CMS Pipelines. Enjoy
>> (make sure to uppercase the relevant part of the CP command it issue).
>>
>> PIPE (END \) cpfor rvdh Q V 191 | insert ,> , | cons
>> > DASD 0191 3390 M01U01 R/W250 CYL ON DASD  1206 SUBCHANNEL = 
>> Ready; T=0.01/0.01 16:22:19
>> id
>> RVDHEIJ  AT RMHVMY   VIA *08/22/20 16:22:24 EDT  SATURDAY
>> Ready; T=0.01/0.01 16:22:24
>>
>>
>> https://gist.githubusercontent.com/rvdheij/293d9cb197c138598142d5349afbd112
>> 
>>
>> On Sat, 22 Aug 2020 at 17:29, Donald Russell 
>> wrote:
>>
>>> I’m saying if the vmcp commend in Linux is to handle the response from
>>> CP FOR, it’s not as simple as “use diag 8 to put the response in a buffer”.
>>> That’s what vmcp does now and then writes the buffer to STDOUT. vmcp would
>>> need enhancements to catch the asynchronous response and write *that*
>>> to STDOUT.
>>>
>>> On Sat, Aug 22, 2020 at 08:18 John P. Hartmann 
>>> wrote:
>>>
 On 8/22/20 15:46, Donald Russell wrote:

 > diag 8 may not do what you want (depends on what you want) when using
 CP

 > FOR... the response is asynchronous. When I use CP FOR in an
 exec/pipe I

 > have to set up  a *ASYNC pipeline if I want the exec to handle the

 > response.



 So something in CP generates what looks like a MSGNOH response.

 Presumably that also means that CP FOR and pipes STARMSG don't
 interoperate?


>>>
>>>
>>
>>

-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

CP FOR through vmcp?

[Michael MacIsaac]

Hello lists,

I can use CP FOR to run a command on another user ID and I get back the
output in a normal CMS session:

  for engzs01 cmd q cplevel
  ENGZS01  : z/VM Version 6 Release 4.0, service level 1802 (64-bit)
  ENGZS01  : Generated at 03/11/20 13:28:04 EDT
  ENGZS01  : IPL at 03/11/20 14:20:57 EDT
  ENGZS01  : HCPFOR069I Command Complete.  CP return code = .

But when I try this from Linux:

  # sudo vmcp for engzs01 cmd q cplevel

I get no output.  Is there any way to persuade vmcp to do this?

(right now I'm spooling consoles, but the code is kludgy and slow).

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: z15 on-board compression

[Michael MacIsaac]

Thanks Christian, Neale and Rob for your replies.

Like I said, I'm not a performance expert.  Of course all 0's are not good
test data.

So I use /dev/random and get halfway (logarithmically) to 2**15 and then
loop another 2**15 times to get a 1G file.

z14:

# time dd if=/dev/random of=32K.file bs=1 count=32768
32768+0 records in
32768+0 records out
32768 bytes (33 kB, 32 KiB) copied, 0.323818 s, 101 kB/s

real0m0.326s
user0m0.006s
sys 0m0.153s

# time for i in `seq 1 32768`; do cat 32K.file >> 1G.file; done

real0m34.635s
user0m5.579s
sys 0m23.865s

# time cat 1G.file | gzip -c > 1G.compressed.file

real1m4.806s
user0m37.590s
sys 0m3.411s

root@dc2engv2c101:~ # time cat 1G.compressed.file | gzip -d > 1G.file

real0m31.715s
user0m4.407s
sys 0m2.767s

z15:
# time dd if=/dev/random of=32K.file bs=1 count=32768
32768+0 records in
32768+0 records out
32768 bytes (33 kB, 32 KiB) copied, 0.113121 s, 290 kB/s

real0m0.115s
user0m0.004s
sys 0m0.050s

# time for i in `seq 1 32768`; do cat 32K.file >> 1G.file; done
real0m30.675s
user0m6.390s
sys 0m20.601s

# time cat 1G.file | gzip -c > 1G.compressed.file

real0m43.974s
user0m35.411s
sys 0m3.428s

# time cat 1G.compressed.file | gzip -d > 1G.file

real0m7.550s
user0m4.039s
sys 0m2.754s

So the compress is about 32% faster on the z15 and the decompress is about
76% faster. I'm not trying to get the best numbers possible, rather, I'm trying
to see what gains we might expect to see in the real world.  Again, this
may not be a good test case, definitely better than all 0s.

Let me ask this, is anyone utilizing the z15 on-board compression to save
both CPU and disk space as I saw advertised at SHARE this past Feb?

HA!  Then I look at the two files and see the compressed file is larger
than the test file.  Why?:

# ls -lh 1G*
-rw-r--r-- 1 root root 1.1G Jun 10 07:34 1G.compressed.file
-rw-r--r-- 1 root root 1.0G Jun 10 07:36 1G.file

-Mike M

On Wed, Jun 10, 2020 at 3:35 AM Rob van der Heij  wrote:

> On Wed, 10 Jun 2020 at 07:06, Neale Ferguson  wrote:
>
> > Also, take a look at my post from last week. I used /dev/urandom as the
> > "real" test case and /dev/zero as "best case".
> >
>
> Ah, but random numbers are not cheap either. I use two large files on the
> CMS S-disk as my input and repeat them with "instore | dup * | outstore" to
> provide an infinite stream of bytes. One is 7M of readable text, the other
> is 2 MB of load module. Such a mix is not unlikely when you're compressing
> archives, for example.
>
> As expected, the throughput of the instruction depends heavily on the block
> size. When you invoke the DFLTCC on small blocks, the overhead of parameter
> block setup and millicode entry and exit reduces throughput. In the extreme
> case you'd be quicker doing it yourself in software. My understanding from
> the Linux zlib patch is that the blocks were apparently rather small, and
> possibly the code still does some double blocking that impacts throughput.
> The compression ratio mildly depends on the block size, but in general the
> hardware delivers a ratio comparable to the cheapest mode of zlib.
>
> An experimental CMS Pipelines stage showed with decent block size the
> following (which includes the cost of the test scaffolding to compress,
> expand and move the data through the digest stage twice to verify
> integrity). So the throughput number should be taken as a relative
> comparison to see order of magnitude.
>
> 1 GB Mode RatioTransfer
> 18:26:27 copy   100.00%  716.1 MB/s
> 18:26:33 pack60.39%  193.2 MB/s
> 18:27:04 terse   31.13%   33.2 MB/s
> 18:27:34 fplunzcp30.65%   33.4 MB/s
> 18:27:36 zedccp  29.33%  747.4 MB/s
>
> As you see compression is around "terse" level and runs some 20 times
> quicker. The "fplunzcp" is an implementation of the UNIX compress
> algorithm. It's interesting to see that going through the
> DFLTCC instruction is about as fast as just copying the data without
> compression (which takes more data to move through part of the pipeline).
>
> Remember that even a program that "does nothing but compression" will still
> spend a lot of time getting the data through the CPU and processing the
> data in general. So even when the cost of compression drops to zero, it
> only eliminates a part of the total application cost. Many time-critical
> applications on Linux deal with expanding previously compressed data (like
> loading Java classes during WAS startup) where the benefit of hardware
> support is far less important.
>
> Sir Rob the Plumber
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> 

z15 on-board compression

[Michael MacIsaac]

Hello list,

I heard about the new DFLTCC instruction on the z15, aka on board
compression.  I tried a quick experiment to see the difference from a z14.
Disclaimer: I am not a performance expert.

Here are three commands to create, compress and decompress a 1G file on a
z14:

# grep Type: /proc/sysinfo
Type: 3906

# time dd if=/dev/zero of=1G.file bs=1G count=1
1+0 records in
1+0 records out
1073741824 bytes (1.1 GB, 1.0 GiB) copied, 21.93 s, 49.0 MB/s

real0m22.047s
user0m0.001s
sys 0m3.669s

# time cat 1G.file | gzip -c > 1G.compressed.file

real0m7.603s
user0m5.362s
sys 0m0.789s

# time cat 1G.compressed.file | gzip -d > 1G.file

real0m24.833s
user0m4.103s
sys 0m1.845s

Here's the same commands on z15:

# grep Type: /proc/sysinfo
Type: 8561

# time dd if=/dev/zero of=1G.file bs=1G count=1
1+0 records in
1+0 records out
1073741824 bytes (1.1 GB, 1.0 GiB) copied, 1.59126 s, 675 MB/s

real0m1.621s
user0m0.000s
sys 0m1.216s

# time cat 1G.file | gzip -c > 1G.compressed.file

real0m5.722s
user0m4.946s
sys 0m0.510s
# time cat 1G.compressed.file | gzip -d > 1G.file

real0m6.150s
user0m3.922s
sys 0m1.290s

Wow more than 10x faster on dd - was not expecting that as I didn't think
it uses compression. But the compress with gzip -c, was only 25% faster on
the z15 while the decompress was about 4x.

Are these results expected?

Thanks.


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Redbook draft: The Virtualization Cookbook for IBM Z Volume 5: KVM

[Michael MacIsaac]

Hello list,

Wow, The Virtualization Cookbook still alive and kicking. Nice work to all
involved!  I remember working on the first one more than 15 years ago.

   - Sir Mike the Chef of Books

On Tue, Apr 7, 2020 at 9:42 AM Christian Borntraeger 
wrote:

> There is now a redbook draft for a KVM cookbook:
>
> http://www.redbooks.ibm.com/Redbooks.nsf/RedpieceAbstracts/sg248463.html?Open
>
> As this is still in draft state review feedback is still possible:
> redbo...@us.ibm.com
>
> Christian
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Cloud using zlinux

[Michael MacIsaac]

Peter,

I will look into this and get back.  I'll update to the latest code level
too.

-MIke Mac

On Sun, Mar 1, 2020 at 10:54 PM Peter  wrote:

> I am unable to download the zoom PDF and am not sure if this common problem
> ?
>
> Can someone please help me with this?
>
> On Sun, 1 Mar, 2020, 4:30 PM Michael MacIsaac, 
> wrote:
>
> > Peter,
> >
> > We use an open source project on
> > https://sourceforge.net/projects/system-zoom/
> >
> > Contact me off-list if it looks interesting.
> >
> > -Mike MacIsaac.
> >
> > On Sun, Mar 1, 2020 at 2:09 AM Peter  wrote:
> >
> > > Hello
> > >
> > > I am trying to understand how cloud is configured using zlinux.
> > >
> > > Any manuals or white papers which can help me to read and understand in
> > > detail ?
> > >
> > > Peter
> > >
> > > --
> > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> > > visit
> > > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> > >
> >
> >
> > --
> >  -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> >
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Cloud using zlinux

[Michael MacIsaac]

Peter,

We use an open source project on
https://sourceforge.net/projects/system-zoom/

Contact me off-list if it looks interesting.

-Mike MacIsaac.

On Sun, Mar 1, 2020 at 2:09 AM Peter  wrote:

> Hello
>
> I am trying to understand how cloud is configured using zlinux.
>
> Any manuals or white papers which can help me to read and understand in
> detail ?
>
> Peter
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Theia?

[Michael MacIsaac]

Mark,

I guess:
> Depending on how determined you are...
is the operative phrase.  I just wanted to check out a zLinux IDE.  I was
hoping it was just a "zypper install" or a "git clone".

Ironically, working at the other end of the computer hardware spectrum, the
Raspberry Pi, it was a very simple install for me.

Thanks for everyone's feedback.

-Mike

On Wed, Jan 8, 2020 at 1:47 PM Mark Post  wrote:

> On 1/8/20 1:25 PM, Michael MacIsaac wrote:
> > Mark,
> >
> > Thanks for the suggestion, however, no joy.
> >
> > I created the .curlrc file with no change.  yarn is a node.js script -
> > don't see any wget in it, but ...
>
> Depending on how determined you are, when I run into a situation like
> this, I re-run whatever command I'm trying to run using strace, with the
> output going to a file.
> strace -f -o /path/to/outputfile -s 999 cmd cmdparms
>
> Then, I look at the output file to see if I can figure out what causes
> that message to be issued. If I can, then I try to figure out how to
> work around the problem.
>
> Note that this method usually results in a *ton* of output to wade
> through, so if you're on the edge of deciding to give up, this may not
> be the route you want to take.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Theia?

[Michael MacIsaac]

Mark,

Thanks for the suggestion, however, no joy.

I created the .curlrc file with no change.  yarn is a node.js script -
don't see any wget in it, but ...

-Mike Mac

On Tue, Jan 7, 2020 at 4:38 PM Mark Post  wrote:

> On 1/7/20 1:23 PM, Michael MacIsaac wrote:
> > Hmm, hit a snag:
> >
> > :~/theia # yarn
> > yarn install v1.2.1
> > [1/5] Validating package.json...
> > [2/5] Resolving packages...
> > [3/5] Fetching packages...
> > error An unexpected error occurred: "
> >
> https://registry.yarnpkg.com/@types/tough-cookie/-/tough-cookie-2.3.2.tgz:
> > self signed certificate in certificate chain".
> > info If you think this is a bug, please open a bug report with the
> > information provided in "/root/theia/yarn-error.log".
> >
> > Any ideas?
>
> Do you know what is doing the retrieval? If it's curl, or a call to
> libcurl, create a ~/.curlrc file and put "insecure" in it.
>
> If it's wget, use --no-check-certificate (if you can figure out where
> the call is being made from).
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Theia?

[Michael MacIsaac]

Hmm, hit a snag:

:~/theia # yarn
yarn install v1.2.1
[1/5] Validating package.json...
[2/5] Resolving packages...
[3/5] Fetching packages...
error An unexpected error occurred: "
https://registry.yarnpkg.com/@types/tough-cookie/-/tough-cookie-2.3.2.tgz:
self signed certificate in certificate chain".
info If you think this is a bug, please open a bug report with the
information provided in "/root/theia/yarn-error.log".

Any ideas?

Thanks

-Mike Mac

On Mon, Jan 6, 2020 at 10:45 AM Michael MacIsaac 
wrote:

> Herald,
>
> Thanks for a quick reply.  I'll give it a try.
>
> -Mike Mac
>
> On Mon, Jan 6, 2020 at 7:57 AM Herald ten Dam 
> wrote:
>
>> Maybe a start:
>> https://github.com/linux-on-ibm-z/docs/wiki/Building-Theia
>>
>> Met vriendelijke groet,
>> Herald ten Dam
>> Database Specialist Oracle, Medior z/VM
>>
>> ICU IT Services BV
>> Transistorstraat 55b  I  1322 CK  ALMERE
>>
>> M 06 – 28 891 653  I  E herald.ten@icu-it.nl> herald.ten@icu-it.nl>
>> T 088 – 5 234 123  I  www.icu-it.nl<
>> https://mail.tonec.nl/owa/redir.aspx?C=VXsWzolNszaPfEV0NyI4hHlHi_HLsvmJPdc-hUPEoam3bq_3CljVCA..=http%3a%2f%2fwww.icu-it.nl%2f>
>> I  KvK 32135776
>>
>> 
>> Van: Linux on 390 Port  namens Michael MacIsaac
>> 
>> Verzonden: maandag 6 januari 2020 12:25
>> Aan: LINUX-390@VM.MARIST.EDU 
>> Onderwerp: Theia?
>>
>> Hello list,
>>
>> Has anyone tried porting Eclipse Theia to zLinux?  Looks like a cool
>> browser-driven Interactive Development Environment (IDE).
>>
>> SSH and vi seem so 2010's  :))
>>
>> Thanks.
>>
>> --
>>  -Mike MacIsaac
>>
>> --
>> For LINUX-390 subscribe / signoff / archive access instructions,
>> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
>> visit
>> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>>
>> --
>> For LINUX-390 subscribe / signoff / archive access instructions,
>> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
>> visit
>> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>>
>
>
> --
>  -Mike MacIsaac
>


-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Theia?

[Michael MacIsaac]

Herald,

Thanks for a quick reply.  I'll give it a try.

-Mike Mac

On Mon, Jan 6, 2020 at 7:57 AM Herald ten Dam 
wrote:

> Maybe a start:
> https://github.com/linux-on-ibm-z/docs/wiki/Building-Theia
>
> Met vriendelijke groet,
> Herald ten Dam
> Database Specialist Oracle, Medior z/VM
>
> ICU IT Services BV
> Transistorstraat 55b  I  1322 CK  ALMERE
>
> M 06 – 28 891 653  I  E herald.ten@icu-it.nl herald.ten@icu-it.nl>
> T 088 – 5 234 123  I  www.icu-it.nl<
> https://mail.tonec.nl/owa/redir.aspx?C=VXsWzolNszaPfEV0NyI4hHlHi_HLsvmJPdc-hUPEoam3bq_3CljVCA..=http%3a%2f%2fwww.icu-it.nl%2f>
> I  KvK 32135776
>
> ________
> Van: Linux on 390 Port  namens Michael MacIsaac <
> mike99...@gmail.com>
> Verzonden: maandag 6 januari 2020 12:25
> Aan: LINUX-390@VM.MARIST.EDU 
> Onderwerp: Theia?
>
> Hello list,
>
> Has anyone tried porting Eclipse Theia to zLinux?  Looks like a cool
> browser-driven Interactive Development Environment (IDE).
>
> SSH and vi seem so 2010's  :))
>
> Thanks.
>
> --
>  -Mike MacIsaac
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Theia?

[Michael MacIsaac]

Hello list,

Has anyone tried porting Eclipse Theia to zLinux?  Looks like a cool
browser-driven Interactive Development Environment (IDE).

SSH and vi seem so 2010's  :))

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: zLINUX end user provisioning

[Michael MacIsaac]

Alan,

Yes, OK, many shops prefer 'build' over 'clone'. Chapter 2 of
http://www.redbooks.ibm.com/abstracts/sg248303.html?Open
shows how to use kickstart for RHEL.

Our shop still does clones because we have to use golden images hardened by
another team.

-Mike M


On Wed, Dec 11, 2019 at 11:19 AM Alan Altmark 
wrote:

> On Wednesday, 12/11/2019 at 03:31 GMT, Jake Anderson
>  wrote:
> > We are a small shop non SSI and most of the Linux requirements are for
> > Oracle.
> >
> > So which is the best way to do cloning alone ?
>
> How does your company deploy Linux and Oracle today (on other platforms)?
> Cloning isn't always the best choice.  It's sexy and it exploits a lot of
> Z functionality, but it comes with a down side, too:  Your Linux admins
> have to buy into it.
>
> Alan Altmark
>
> Senior Managing z/VM and Linux Consultant
> IBM Systems Lab Services
> IBM Z Delivery Practice
> ibm.com/systems/services/labservices
> office: 607.429.3323
> mobile; 607.321.7556
> alan_altm...@us.ibm.com
> IBM Endicott
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: zLINUX end user provisioning

[Michael MacIsaac]

Robert,

I would not recommend "read only root".  It sounds good on paper, but the
devil is in the details.  I'm not sure any shops are still trying that
approach.

-Mike

On Wed, Dec 11, 2019 at 11:23 AM Hamilton, Robert  wrote:

> I'm interested in this too. I am following the read-only root
> documentation, which is starting to show its age a little (RedPaper
> redp4322 is good, but copyright 2008), but still has good stuff about gold
> instances, maintenance and cloning.
> The other documents I have are the workbooks from some VM and Linux
> installation classes I've taken, but a lot of the preparation stuff is
> skipped over.
>
> like, where and how to put an ISO. Nothing I've found in any cookbook says
> how it was done, or what tools I can use to manage or unpack an ISO. BFS?
> OMVS? RPI?
>
> I'm just interested in the latest doc. I'm trying to install ClefOS and
> manage it as cleanly as possible.
>
> R;
>
>
> Rob Hamilton
> Infrastructure Engineer
> Chemical Abstracts Service
>
>
> -----Original Message-
> From: Linux on 390 Port  On Behalf Of Michael
> MacIsaac
> Sent: Wednesday, December 11, 2019 10:24 AM
> To: LINUX-390@VM.MARIST.EDU
> Subject: [EXT] Re: zLINUX end user provisioning
>
> [Actual Sender is owner-linux-...@vm.marist.edu]
>
> Jake,
>
> Which cookbook are you using?
>
> -Mike M
>
> On Wed, Dec 11, 2019 at 10:20 AM Jake Anderson 
> wrote:
>
> > Hello
> >
> > I am pretty new to zLINUX provisioning.
> >
> > I have used cookbook to build Linux and if functional.
> >
> > From the provisioning part untill which chapter of cookbook i can follow
> ?
> >
> > Generally untill which chapter will be followed to provision the Linux
> > guest ?
> >
> > Jake
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> >
>
>
> --
>  -Mike MacIsaac
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
> Confidentiality Notice: This electronic message transmission, including
> any attachment(s), may contain confidential, proprietary, or privileged
> information from CAS, a division of the American Chemical Society ("ACS").
> If you have received this transmission in error, be advised that any
> disclosure, copying, distribution, or use of the contents of this
> information is strictly prohibited. Please destroy all copies of the
> message and contact the sender immediately by either replying to this
> message or calling 614-447-3600.
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: zLINUX end user provisioning

[Michael MacIsaac]

Jake,

This redbook is old, but I'd hope most of it is still pertinent:

http://www.redbooks.ibm.com/abstracts/sg248104.html?Open


See Chapter 10  "Automating Oracle on System z"

Hope this helps.

-Mike

On Wed, Dec 11, 2019 at 10:34 AM Jake Anderson 
wrote:

> Hi Mike
>
> I am using
>
> The Virtualization Cookbook for IBM z Systems Volume 1: IBM z/VM 6.3,
> SG24-8147-01
>
> I have built Linux and done with LVM part alone .
>
> We are a small shop non SSI and most of the Linux requirements are for
> Oracle.
>
> So which is the best way to do cloning alone ?
>
> Jake
>
> On Wed, 11 Dec, 2019, 7:28 PM Michael MacIsaac, 
> wrote:
>
> > Jake,
> >
> > Which cookbook are you using?
> >
> > -Mike M
> >
> > On Wed, Dec 11, 2019 at 10:20 AM Jake Anderson  >
> > wrote:
> >
> > > Hello
> > >
> > > I am pretty new to zLINUX provisioning.
> > >
> > > I have used cookbook to build Linux and if functional.
> > >
> > > From the provisioning part untill which chapter of cookbook i can
> follow
> > ?
> > >
> > > Generally untill which chapter will be followed to provision the Linux
> > > guest ?
> > >
> > > Jake
> > >
> > > --
> > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> > > visit
> > > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> > >
> >
> >
> > --
> >  -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> >
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: zLINUX end user provisioning

[Michael MacIsaac]

Jake,

Which cookbook are you using?

-Mike M

On Wed, Dec 11, 2019 at 10:20 AM Jake Anderson 
wrote:

> Hello
>
> I am pretty new to zLINUX provisioning.
>
> I have used cookbook to build Linux and if functional.
>
> From the provisioning part untill which chapter of cookbook i can follow ?
>
> Generally untill which chapter will be followed to provision the Linux
> guest ?
>
> Jake
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Why Linux Developers Should Reconsider IBM Mainframes - Linux.com

[Michael MacIsaac]

Shoulda been 's390z'. IIRC it was decided less than a year before the
mainframe got rebranded to 'z'.

-Mike

On Mon, Oct 14, 2019 at 12:48 PM Rick Troth  wrote:

> On 10/14/19 8:03 AM, James Tison wrote:
> >  ...
> > 390x (z/Architecture) was introduced almost immediately after s390 came
> on
> > board, and it seems to be the ID "with legs". In modern terms, i390 means
> > nothing (unless someone would care to revive it), s390 means XA, s390x
> > still means z/Architecture as it always has.
> >
> > You're right. The s390x tag isn't used much outside of GNU/Linux & BSD
> > circles. Too bad. I think it's a very convenient shorthand (not to
> mention
> > 10 characters' less typing to do), YMMV :-)
>
>
> I've been seeing "s390x" (and occasionally "s390") in USS regularly.
> Probably *did* originate with Linux, but works.
>
>
> -- R; <><
>
>
>
>
>
>
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Computer progress

[Michael MacIsaac]

Hello list,

Somewhat off topic, but ...

50 years ago we put men on the moon using a computer with one CPU, 4KB of
RAM and 70KB of ROM.

This morning I search for some VMs and see a subtotal:
  Total number of guests found: 6
  Total CPUs defined: 56
  Total memory defined: 404 GB

Thank you Gordon Moore, but is this progress?   :))
--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Full root file system

[Michael MacIsaac]

Rich,

Thanks, we'll look into it.

-Mike

On Wed, Aug 28, 2019 at 9:53 AM Rich Smrcina 
wrote:

> You have zVPS. Our zAlert component can detect this situation and notify
> interested parties.
>
> Rich Smrcina
> Sr. Systems Engineer
>
> Velocity Software Inc.
> Main: (650) 964-8867
> Main: (877) 964-8867
> r...@velocitysoftware.com <mailto:r...@velocitysoftware.com>
>
>
> > On Aug 28, 2019, at 8:43 AM, Michael MacIsaac 
> wrote:
> >
> > Hello list,
> >
> > We had a SLES12 root file system get full. The system would not boot, nor
> > was there an error message "file system full".  Rather, we got many error
> > messages on the console like:
> >
> > INFO: rcu_sched self-detected stall on CPU
> >
> >0-...: (15658428 ticks this GP) idle=0aa/141/0
> > softirq=15372/15372 fqs=244
> > (t=15776674 jiffies g=1614 c=1613 q=698)
> >
> > rcu_sched kthread starved for 15776164 jiffies! g1614 c1613 f0x0
> > RCU_GP_WAIT_FQS(3) ->state=0x0
> >
> >
> > I would expect journalling to be turned off, the system to boot, and a
> > message such as "root file system full, please clean up".
> >
> > I opened an SR with Suse.
> >
> > Do other distros handle this scenario better? (I pretty much only work
> with
> > SLES these days)
> >
> > Thanks.
> >
> > --
> > -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or visit
> > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> >
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Full root file system

[Michael MacIsaac]

Jay,

It's an XFS file system (we had issues with btrfs).  SLES 12 SP4.

-Mike

On Wed, Aug 28, 2019 at 10:18 AM Robert J Brenneman 
wrote:

> Is your root fs btrfs ? Thats the most meaningul difference I can think of
> comparing SLES 11 to 12.
>
> On Wed, Aug 28, 2019 at 9:53 AM Rich Smrcina 
> wrote:
>
> > You have zVPS. Our zAlert component can detect this situation and notify
> > interested parties.
> >
> > Rich Smrcina
> > Sr. Systems Engineer
> >
> > Velocity Software Inc.
> > Main: (650) 964-8867
> > Main: (877) 964-8867
> > r...@velocitysoftware.com <mailto:r...@velocitysoftware.com>
> >
> >
> > > On Aug 28, 2019, at 8:43 AM, Michael MacIsaac 
> > wrote:
> > >
> > > Hello list,
> > >
> > > We had a SLES12 root file system get full. The system would not boot,
> nor
> > > was there an error message "file system full".  Rather, we got many
> error
> > > messages on the console like:
> > >
> > > INFO: rcu_sched self-detected stall on CPU
> > >
> > >0-...: (15658428 ticks this GP) idle=0aa/141/0
> > > softirq=15372/15372 fqs=244
> > > (t=15776674 jiffies g=1614 c=1613 q=698)
> > >
> > > rcu_sched kthread starved for 15776164 jiffies! g1614 c1613 f0x0
> > > RCU_GP_WAIT_FQS(3) ->state=0x0
> > >
> > >
> > > I would expect journalling to be turned off, the system to boot, and a
> > > message such as "root file system full, please clean up".
> > >
> > > I opened an SR with Suse.
> > >
> > > Do other distros handle this scenario better? (I pretty much only work
> > with
> > > SLES these days)
> > >
> > > Thanks.
> > >
> > > --
> > > -Mike MacIsaac
> > >
> > > --
> > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> > or visit
> > > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> > >
> >
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> >
>
>
> --
> Jay Brenneman
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Full root file system

[Michael MacIsaac]

Hello list,

We had a SLES12 root file system get full. The system would not boot, nor
was there an error message "file system full".  Rather, we got many error
messages on the console like:

INFO: rcu_sched self-detected stall on CPU

0-...: (15658428 ticks this GP) idle=0aa/141/0
softirq=15372/15372 fqs=244
 (t=15776674 jiffies g=1614 c=1613 q=698)

rcu_sched kthread starved for 15776164 jiffies! g1614 c1613 f0x0
RCU_GP_WAIT_FQS(3) ->state=0x0


I would expect journalling to be turned off, the system to boot, and a
message such as "root file system full, please clean up".

I opened an SR with Suse.

Do other distros handle this scenario better? (I pretty much only work with
SLES these days)

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

[no subject]

[Michael MacIsaac]

Hello list,

We patched many zLinux SLES servers and found that chmem and lsmem moved.
Here's an unpatched system:

  # *which chcpu chmem lsmem lscpu*
  /sbin/chcpu

* /usr/sbin/chmem  /usr/sbin/lsmem*
  /usr/bin/lscpu

Here's a patched system - lsmem and chmem moved to /usr/bin
  # *which chcpu chmem lsmem lscpu*
  /sbin/chcpu

*/usr/bin/chmem  /usr/bin/lsmem*
  /usr/bin/lscpu

According to the FHS, I contend it should be:
  /sbin/chcpu  - system administrator command
  /sbin/chmem  - system administrator command
  /usr/bin/lsmem   - general user command
  /usr/bin/lscpu   - general user command

So this change breaks code where we have fully qualified paths - memory is
no longer being changed on Linux, just in the user directory and CP.  I
guess we have to remove the fully qualified paths and be sure the PATH
env't var is correct on all target systems.

I'm pretty sure SUSE won't change this again, so I won't ask.

Thoughts?

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Cron does not restart after reboots

[Michael MacIsaac]

Mike, is systemV chkconfig deprecated in favor of systemD?  How about
trying:

# systemctl enable crond
# reboot
...
# systemctl status crond


-Mike M

On Fri, Jul 5, 2019 at 8:54 AM Mike Riggs  wrote:

> Having a strange occurrence where the service 'cron' fails to startup
> following normal reboots.  Here's some info.
>
> chkconfig cron   displays 'cron on'
>
> mikecc1:/etc/init.d # service cron status
> Checking for Cron: unused
>
> mikecc1:/etc/init.d # service cron start
> Starting CRON daemon done
>
> mikecc1:/etc/init.d # service cron status
> Checking for Cron: running
>
> After reboot:  status is back to unused
>
> mikecc1:/etc/init.d # chkconfig --list cron
> cron  0:off  1:off  2:on   3:on   4:off  5:on   6:off
>
> When I attempt to chkconfig cron off,  I get this:
>
> Mikecc1:/etc/init.d # chkconfig cron off
> insserv: warning: script 'S01ITMAgents3' missing LSB tags
> insserv: warning: script 'S01dsmc.client' missing LSB tags
> insserv: warning: script 'ITMAgents1' missing LSB tags
> insserv: Default-Start undefined, assuming default start runlevel(s) for
> script `ITMAgents1'
> insserv: warning: script 'dsmc.client' missing LSB tags
> insserv: warning: script 'ITMAgents2' missing LSB tags
> insserv: Default-Start undefined, assuming default start runlevel(s) for
> script `ITMAgents2'
> insserv: warning: script 'ITMAgents3' missing LSB tags
>
> Not certain if the warnings are causing the cron service to fail on
> reboot.
>
> ANY ideas would be most appreciated.
>
> Mike
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: SLES 15 - no help?

[Michael MacIsaac]

Tim,

> Linux is not UNIX
Agreed.  Linux is a kernel.  GNU/Linux is UNIX (oh, wait, Gnu's *NOT*
UNIX.  :))

-Mike



On Mon, Jun 10, 2019 at 1:01 AM Timothy Sipples  wrote:

> Michael MacIsaac wrote:
> >I get my hands on a minimal SLES 15 for the first time.
> >I try to edit a file:
> ># *vi foo*
> >-bash: vi: command not found
> ># *vim foo*
> >-bash: vim: command not found
> >HUH?  A UNIX with no vi?  NEVER seen that before.
>
> If you haven't, you still haven't. SLES is Linux®, but Linux is not UNIX®.
>
> I've encountered many Linux distributions without vi/vim, man, info, and
> help commands.
>
>
> 
> Timothy Sipples
> IT Architect Executive, Industry Solutions, IBM Z & LinuxONE
>
> 
>
> E-Mail: sipp...@sg.ibm.com
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: SLES 15 - no help?

[Michael MacIsaac]

Mark,

Thanks for the quick reply. If you can pass the word up the line that a few
paying customers expect 'vi' to be part of minimal, that would be great.

But how do I install the man pages?  'zypper install man' does not get it.

Let me ask this - do you have a doc that states how to make a fairly useful
system out of 'minimal'?  We are trying to get to a minimal system that has
basic function like editing files and getting help, then adding SaaS later.

Thanks.

-Mike

On Sun, Jun 9, 2019 at 1:17 PM Mark Post  wrote:

> On 6/9/19 7:47 AM, Michael MacIsaac wrote:
> > Hi,
> >
> > I get my hands on a minimal SLES 15 for the first time.  I try to edit a
> > file:
> >
> > # *vi foo*
> > -bash: vi: command not found
> > # *vim foo*
> > -bash: vim: command not found
> >
> > HUH?  A UNIX with no vi?  NEVER seen that before.
>
> You're the one that selected minimal, and nothing else. ;) As Rob
> pointed out, "minimal" is a changing concept. With SLES15 that happened.
> The minimal pattern is intended to be used by people who want a truly
> small footprint that they can add to and get what they want, with the
> least amount of unwanted packages. Think embedded systems.
>
> I can't say I like the way SLES15 (and now SLES15 SP1) is packaged, but
> I didn't have any say over that. (Big surprise.)
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Are you "man" enough?

[Michael MacIsaac]

Flint,

Yeah, I know 'which' and 'find'.  vim was not installed, but now it is.
Yes this was on SLES15S0 on Dave's system. Scary part is there are no man
pages.  Hopefully we find out tomorrow how to add them back.

   -Mike

On Sun, Jun 9, 2019 at 9:23 AM Paul Flint  wrote:

> Dear Michael,
>
> Check if "vi" is in the root path...
>
> (Type what is in the qoutes)
>
> # "which vi"
> ^
> |
> Note you are presumed to be root...
>
> If this comes back empty, then you got to go find it.
>
> The best way to find it is the following:
>
> "find / |grep vi$ | less"
>
> This will show you every file ending in 'vi'.
>
> If this comes up snake, then it is time to start the dreaded "yast",
> something I have not done in a while...
>
> On of my favorite ways that AT Unix 'saved money' on a USDA system
> installation was to not install any 'man' pages...  Wow what a
> nightmare...
>
> Call me for more silly suggestions...
>
> Regards,
>
> Paul
>
> On Sun, 9 Jun 2019, Michael MacIsaac wrote:
>
> > Date: Sun, 9 Jun 2019 07:47:27 -0400
> > From: Michael MacIsaac 
> > Reply-To: Linux on 390 Port 
> > To: LINUX-390@VM.MARIST.EDU
> > Subject: SLES 15 - no help?
> >
> > Hi,
> >
> > I get my hands on a minimal SLES 15 for the first time.  I try to edit a
> > file:
> >
> > # *vi foo*
> > -bash: vi: command not found
> > # *vim foo*
> > -bash: vim: command not found
> >
> > HUH?  A UNIX with no vi?  NEVER seen that before.
> >
> > So I install it:
> >
> > # *zypper install -y vim*
> > ...
> >
> >
> > Now I need to check a flag:
> >
> > #* man vim *
> > -bash: man: command not found
> >
> >
> > So I try to install man:
> >
> > # *zypper install -y man*
> > ...
> > No provider of 'man' found.
> >
> >
> > HUH? A UNIX with no man pages at all?  NEVER seen that before either.
> > Hopefully there's another way to install man.
> >
> > So I try to get help another way:
> >
> > # *info vim*
> > info: No menu item 'vim' in node '(dir)Top'
> > # *help vim*
> > -bash: help: no help topics match `vim'.  Try `help help' or `man -k vim'
> > or `info vim'.
> >
> >
> > No 'info', no 'help' (which suggests to use man or info - hehe)
> >
> > Am I just spoiled with the backward compatibility baked into the
> mainframe?
> >
> > --
> > -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or visit
> > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> >
>
> Kindest Regards,
>
>
>
> ☮ Paul Flint
> (802) 479-2360 Home
> (802) 595-9365 Cell
>
> /
> Based upon email reliability concerns,
> please send an acknowledgement in response to this note.
>
> Paul Flint
> 17 Averill Street
> Barre, VT
> 05641
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: SLES 15 - no help?

[Michael MacIsaac]

Rob,

> We could argue that a server can do without,
Yeah, maybe z/VM should deprecate XEDIT and HELP in v8 and have people use
something more modern (hehe).

-Mike

On Sun, Jun 9, 2019 at 7:56 AM Rob van der Heij  wrote:

> We could argue that a server can do without, and I’ve always complained the
> minimal was too much. The container stuff likely focus them. It may be too
> minimal for manual sysadmin work. I think it lacks sudo as well.
> And I hate they put ifconfig cs in nettools-very-much-deprecated in some
> other repository.
>
> Rob
>
> On Sun, 9 Jun 2019 at 13:48, Michael MacIsaac  wrote:
>
> > Hi,
> >
> > I get my hands on a minimal SLES 15 for the first time.  I try to edit a
> > file:
> >
> > # *vi foo*
> > -bash: vi: command not found
> > # *vim foo*
> > -bash: vim: command not found
> >
> > HUH?  A UNIX with no vi?  NEVER seen that before.
> >
> > So I install it:
> >
> > # *zypper install -y vim*
> > ...
> >
> >
> > Now I need to check a flag:
> >
> > #* man vim *
> > -bash: man: command not found
> >
> >
> > So I try to install man:
> >
> > # *zypper install -y man*
> > ...
> > No provider of 'man' found.
> >
> >
> > HUH? A UNIX with no man pages at all?  NEVER seen that before either.
> > Hopefully there's another way to install man.
> >
> > So I try to get help another way:
> >
> > # *info vim*
> > info: No menu item 'vim' in node '(dir)Top'
> > # *help vim*
> > -bash: help: no help topics match `vim'.  Try `help help' or `man -k vim'
> > or `info vim'.
> >
> >
> > No 'info', no 'help' (which suggests to use man or info - hehe)
> >
> > Am I just spoiled with the backward compatibility baked into the
> mainframe?
> >
> > --
> >  -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www2.marist.edu/htbin/wlvindex?LINUX-390
> >
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

SLES 15 - no help?

[Michael MacIsaac]

Hi,

I get my hands on a minimal SLES 15 for the first time.  I try to edit a
file:

# *vi foo*
-bash: vi: command not found
# *vim foo*
-bash: vim: command not found

HUH?  A UNIX with no vi?  NEVER seen that before.

So I install it:

# *zypper install -y vim*
...


Now I need to check a flag:

#* man vim *
-bash: man: command not found


So I try to install man:

# *zypper install -y man*
...
No provider of 'man' found.


HUH? A UNIX with no man pages at all?  NEVER seen that before either.
Hopefully there's another way to install man.

So I try to get help another way:

# *info vim*
info: No menu item 'vim' in node '(dir)Top'
# *help vim*
-bash: help: no help topics match `vim'.  Try `help help' or `man -k vim'
or `info vim'.


No 'info', no 'help' (which suggests to use man or info - hehe)

Am I just spoiled with the backward compatibility baked into the mainframe?

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: dasd_configure in SLES 12 SP4

[Michael MacIsaac]

Mark,

Thanks for a thorough reply.

We have been warned :))

-Mike M

On Fri, May 31, 2019 at 1:43 PM Mark Post  wrote:

> On 5/31/19 6:47 AM, Michael MacIsaac wrote:
> > Why?  Doing so will break scripts we have ...
>
> Because they require maintenance, cause bug reports (such as Marcy's),
> etc., etc. They're not going away tomorrow, but please plan ahead.
>
> One of the complaints we hear is that "doing X on SLES for the mainframe
> is different from how it's done on RHEL."  Red Hat hears the same, in
> reverse. SUSE and Red Hat both approached IBM to ask them to write and
> maintain a replacement set of tools for these sorts of scripts. That
> way, the tools to perform persistent and transient configuration will be
> the same across distributions. I haven't looked, but I'm guessing Ubuntu
> for the mainframe is using them as well.
>
> So, IBM came up the lszdev and chzdev utilities. To provide
> compatibility, I modified the existing *_configure scripts to use them
> instead of the previous logic. Moving forward, SUSE will be using the
> lszdev and chzdev commands in our own tools where the *_configure
> scripts have been used in the past. The linuxrc program to set up the
> installation environment is already doing that.
>
> The wrapper scripts were written solely as a means of translating the
> old semantics into the ones required by IBM's commands. The lszdev and
> chzdev commands provide a lot more functionality than the old
> *_configure scripts did. There will be no changes to the *_configure
> scripts unless there's a bug, or for some reason IBM changes the
> parameters their commands accept or require.
>
> If you set an environment variable of DEBUG to "yes", the *_configure
> scripts will display the chzdev command that gets executed, as well as
> actually executing it. Besides helping in debugging, this will allow
> anyone wishing to get ahead of the curve to see exactly what command
> needs to be executed to accomplish the same task as before.
>
> The old scripts will not be removed from the SLES12 product. At this
> point, we're not sure if they will be removed from future service pack
> levels of SLES15 or not. They almost certainly will not be part of the
> follow-on version after SLES15. (After what happened between SLES12 and
> SLES15, I'm not going to even try and outguess Product Management as to
> what name that's going to be.)
>
> Finally, this is Open Source Software. If you decide you're simply not
> going to move to the new commands from IBM, you're welcome to make and
> keep copies of the *_configure scripts for your own use, for ever and ever.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: dasd_configure in SLES 12 SP4

[Michael MacIsaac]

Mark,

> The wrappers will be removed at some point in the future.
Why?  Doing so will break scripts we have ...

-Mike

On Thu, May 30, 2019 at 5:06 PM Mark Post  wrote:

> On 5/30/19 4:54 PM, Marcy Cortes wrote:
> > Should I just be using that chzdev command now?
>
> Yes. Starting with SLES12 SP4, the following SUSE-provided scripts:
> ctc_configure
> dasd_configure
> qeth_configure
> zfcp_disk_configure
> zfcp_host_configure
>
> are simply wrappers for the chzdev command. The wrappers will be removed
> at some point in the future.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: Redhat zlinux error with CCW

[Michael MacIsaac]

Jake,

LNXADMIN is a virtual machine designed to run CMS.  It's main purpose is to
populate it's 192 minidisk to become the 191 disk - read/only to all Linux
virtual machines.

It seems like you're trying to boot a Linux on LNXADMIN.

   -Mike MacIsaac

On Tue, Oct 16, 2018 at 5:56 AM Jake Anderson 
wrote:

> Hi
>
> I was able to load the redhat exec using LNXADMIN and I am receiving the
> error as
>
> Dracut - initqueueY806 : Warning : Could not bring interface enccw0.0.0600
> up !.
>
>
> Is there any modifications to be done to lnxmaint ?
>
> Regards
> Jake
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Lnxadmin overlap

[Michael MacIsaac]

Jake,

I still use CPFMTXA to format an entire volume before using it the first
time.  That will prompt you for a 6 character label. You might choose
something like LX5535. Once it is formatted, you will need to attach it to
SYSTEM (att 5535 system).  Then you can use it in the user directory entry,
referencing it by label not rdev.  For example:

MDISK 0100 3390 0001 10016 *LX5535 *MR LNX4VM LNX4VM LNX4VM
MDISK 0100 3390 *10017 *9496  *LX5535 *MR LNX4VM LNX4VM LNX4VM

Hope this helps.

-Mike

On Tue, Oct 2, 2018 at 11:46 PM Jake Anderson 
wrote:

> Hi Mike,
>
> When I do Q DA FREE I find a quite number of free volumes.
>
> For example 5535 Device is free. How can I use this volume ? Is there a way
> to initialise and use it ?
>
> So that I can use as below
>
> USER LNXADMIN LNX4VM 256M 1G BG
>INCLUDE LNXDFLT
>OPTION LNKNOPAS
> MDISK 0100 3390 0001 10016 5535 MR LNX4VM LNX4VM LNX4VM
>
> MDISK 0100 3390 0001 9496 5535 MR LNX4VM LNX4VM LNX4VM
>
> Jake
>
> On Tue 2 Oct, 2018, 5:05 PM Michael MacIsaac,  wrote:
>
> > Jake,
> >
> > Can you copy the output of DISKMAP showing the overlaps please?
> >
> > So you're probably using a volume that is already being used.  DON'T USE
> > THESE MINIDISKS on LNXADMIN.  If you format them you will destroy other
> > data.
> >
> > How many DASD volumes do you have free?  (Q DA FREE).
> >
> > -Mike
> >
> > On Tue, Oct 2, 2018 at 8:51 AM Jake Anderson 
> > wrote:
> >
> > > Hi Mike
> > >
> > > It shows overlap for both 100 and 101.
> > >
> > >
> > >
> > > On Tue 2 Oct, 2018, 3:05 PM Michael MacIsaac, 
> > wrote:
> > >
> > > > Jake,
> > > >
> > > > There are some overlaps in the user directory IBM ships.  Are the
> > > overlaps
> > > > with the LNXADMIN 100 or 101 disks?  Please post them here.
> > > >
> > > > Thanks.
> > > >
> > > > -Mike
> > > >
> > > > On Tue, Oct 2, 2018 at 6:49 AM Jake Anderson <
> justmainfra...@gmail.com
> > >
> > > > wrote:
> > > >
> > > > > Hi
> > > > >
> > > > > I am using cookbook to build RHEL.
> > > > >
> > > > > I am trying to add LNXADMIN with mdisk 0100 and 0101 but when I do
> > > > DISKMAP
> > > > > for the user file with All /gap/|/ overlap/ I get overlap.
> > > > >
> > > > > I Must confess that I am new to VM
> > > > >
> > > > > Could someone point me in what I must be missing ?
> > > > >
> > > > > Regards
> > > > > Jake
> > > > >
> > > > >
> > --
> > > > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > > > send email to lists...@vm.marist.edu with the message: INFO
> > LINUX-390
> > > or
> > > > > visit
> > > > > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > > >
> > --
> > > > > For more information on Linux on System z, visit
> > > > > http://wiki.linuxvm.org/
> > > > >
> > > >
> > > >
> > > > --
> > > >  -Mike MacIsaac
> > > >
> > > >
> --
> > > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > > send email to lists...@vm.marist.edu with the message: INFO
> LINUX-390
> > or
> > > > visit
> > > > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > >
> --
> > > > For more information on Linux on System z, visit
> > > > http://wiki.linuxvm.org/
> > > >
> > >
> > > --
> > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> > > visit
> > > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > --
> > > For more information on Linux on System z, visit
> > > http://wiki.linuxvm.org/
> > >
> >
> >
> > --
> 

Re: Lnxadmin overlap

[Michael MacIsaac]

Jake,

Can you copy the output of DISKMAP showing the overlaps please?

So you're probably using a volume that is already being used.  DON'T USE
THESE MINIDISKS on LNXADMIN.  If you format them you will destroy other
data.

How many DASD volumes do you have free?  (Q DA FREE).

-Mike

On Tue, Oct 2, 2018 at 8:51 AM Jake Anderson 
wrote:

> Hi Mike
>
> It shows overlap for both 100 and 101.
>
>
>
> On Tue 2 Oct, 2018, 3:05 PM Michael MacIsaac,  wrote:
>
> > Jake,
> >
> > There are some overlaps in the user directory IBM ships.  Are the
> overlaps
> > with the LNXADMIN 100 or 101 disks?  Please post them here.
> >
> > Thanks.
> >
> > -Mike
> >
> > On Tue, Oct 2, 2018 at 6:49 AM Jake Anderson 
> > wrote:
> >
> > > Hi
> > >
> > > I am using cookbook to build RHEL.
> > >
> > > I am trying to add LNXADMIN with mdisk 0100 and 0101 but when I do
> > DISKMAP
> > > for the user file with All /gap/|/ overlap/ I get overlap.
> > >
> > > I Must confess that I am new to VM
> > >
> > > Could someone point me in what I must be missing ?
> > >
> > > Regards
> > > Jake
> > >
> > > --
> > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> > > visit
> > > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > --
> > > For more information on Linux on System z, visit
> > > http://wiki.linuxvm.org/
> > >
> >
> >
> > --
> >  -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > --
> > For more information on Linux on System z, visit
> > http://wiki.linuxvm.org/
> >
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Lnxadmin overlap

[Michael MacIsaac]

Jake,

There are some overlaps in the user directory IBM ships.  Are the overlaps
with the LNXADMIN 100 or 101 disks?  Please post them here.

Thanks.

-Mike

On Tue, Oct 2, 2018 at 6:49 AM Jake Anderson 
wrote:

> Hi
>
> I am using cookbook to build RHEL.
>
> I am trying to add LNXADMIN with mdisk 0100 and 0101 but when I do DISKMAP
> for the user file with All /gap/|/ overlap/ I get overlap.
>
> I Must confess that I am new to VM
>
> Could someone point me in what I must be missing ?
>
> Regards
> Jake
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Issue cloning RHEL server

[Michael MacIsaac]

Bus error   mv -f
> /var/log/dmesg /var/log/dmesg.old
> EXT4-fs error (device dm-0): __ext4_ext_check_block: bad header/extent in
> inode #5136: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
> EXT4-fs error (device dm-0): __ext4_ext_check_block: bad header/extent in
> inode #5136: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
> /etc/rc.d/rc.sysinit: line 667:  1151 Bus error   dmesg -s
> 131072 > /var/log/dmesg
> /etc/rc.d/rc.sysinit: line 670:  1152 Bus error   touch
> /.autofsck &>/dev/null
> DCVML99 :
> EXT4-fs error (device dm-0): __ext4_ext_check_block: bad header/extent in
> inode #5136: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
> init: rc main process (1158) killed by BUS signal
>
> Thanks..
>
> Paul Feller
> AGT Mainframe Technical Support
>
> -Original Message-
> From: Feller, Paul
> Sent: Wednesday, July 25, 2018 4:15 PM
> To: 'Linux on 390 Port' 
> Subject: RE: Issue cloning RHEL server
>
> Mike, I'll get with the team member.  He does more of the zLinux type
> stuff and I do more of the z/VM type stuff.
>
> Thanks..
>
> Paul Feller
> AGT Mainframe Technical Support
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
> Michael MacIsaac
> Sent: Wednesday, July 25, 2018 1:19 PM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Re: Issue cloning RHEL server
>
> Paul,
>
> Can you post the contents of the clone script?  Is it based on the code
> starting on p. 528?
>
> When you say "  corrupts one or more of the copy's file systems", can you
> be more specific?
>
> Thanks.
>
> -Mike
>
> On Wed, Jul 25, 2018 at 1:08 PM Feller, Paul  >
> wrote:
>
> > One of my team members is trying to run the cloning process described
> > in "The Virtualization Cookbook for z/VM 6.3, RHEL 6.4 and SLES 11 SP3
> > October 2013, January 2014 (SG-248147-00)".  I believe the process has
> > worked in the past.  But as things go the environment has changed over
> time.
> >
> >
> > Here is the question from the team member.
> >
> > We are still using the cloning process documented in, and scripts
> > provided with, "The Virtualization Cookbook for z/VM 6.3, RHEL 6.4 and
> > SLES 11 SP3 October 2013, January 2014 (SG-248147-00)".  It's been
> > sometime since I last used the process to create a new zLinux system
> > and when I try now I'm finding that the procedure to update the IP
> > information on the clone copy corrupts one or more of the copy's file
> > systems.  I can use DDR to build a bootable system from the gold image
> > so I'm fairly sure the dasd copy process is working ok.  The gold
> > image is not corrupted.  It boots without an error and so does the DDR
> copy.
> >
> > We're currently running z/VM 6.4 (RSU1801).  The 'LNXADMIN' system is
> > running Linux version 2.6.32-504.8.1.el6.s390x (Red Hat 4.4.7-4) and
> > that's what we're cloning.  Has anyone experienced this problem and
> > found a work around?
> >
> >
> > Thanks..
> >
> > Paul Feller
> > AGT Mainframe Technical Support
> >
> >
> >
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions, send
> > email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > https://urldefense.proofpoint.com/v2/url?u=http-3A__www.marist.edu_htb
> > in_wlvindex-3FLINUX-2D390=DwIBaQ=9g4MJkl2VjLjS6R4ei18BA=Ikyt8xWj
> > ONqWHqSm_SmciXJmsnpmyFU9ccyeMRtzQHc=aAy6Wme7j7nn5JDewpSlMrLzWigB2wRu
> > 7ZzXBMAn_2Q=8YEDwSUUW6k1Eic6YXb-tpis6DEin60TNeH_D5rLyjM=
> > --
> > For more information on Linux on System z, visit
> > https://urldefense.proofpoint.com/v2/url?u=http-3A__wiki.linuxvm.org_;
> > d=DwIBaQ=9g4MJkl2VjLjS6R4ei18BA=Ikyt8xWjONqWHqSm_SmciXJmsnpmyFU9cc
> > yeMRtzQHc=aAy6Wme7j7nn5JDewpSlMrLzWigB2wRu7ZzXBMAn_2Q=lgGYDNMH5l_L
> > 4-JL7-a3S4TlQNxD4Qfyx6hB8rvH1zQ=
> >
>
>
> --
>  -Mike MacIsaac
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions, send
> email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.marist.edu_htbin_wlvindex-3FLINUX-2D390=DwIBaQ=9g4MJkl2VjLjS6R4ei18BA=Ikyt8xWjONqWHqSm_SmciXJmsnpmyFU9ccyeMRtzQHc=aAy6Wme7j7nn5JDewpSlMrLzWigB2wRu7ZzXBMAn_2Q=

Re: Issue cloning RHEL server

[Michael MacIsaac]

Paul,

Can you post the contents of the clone script?  Is it based on the code
starting on p. 528?

When you say "  corrupts one or more of the copy's file systems", can you
be more specific?

Thanks.

-Mike

On Wed, Jul 25, 2018 at 1:08 PM Feller, Paul 
wrote:

> One of my team members is trying to run the cloning process described in
> "The Virtualization Cookbook for z/VM 6.3, RHEL 6.4 and SLES 11 SP3 October
> 2013, January 2014 (SG-248147-00)".  I believe the process has worked in
> the past.  But as things go the environment has changed over time.
>
>
> Here is the question from the team member.
>
> We are still using the cloning process documented in, and scripts provided
> with, "The Virtualization Cookbook for z/VM 6.3, RHEL 6.4 and SLES 11 SP3
> October 2013, January 2014 (SG-248147-00)".  It's been sometime since I
> last used the process to create a new zLinux system and when I try now I'm
> finding that the procedure to update the IP information on the clone copy
> corrupts one or more of the copy's file systems.  I can use DDR to build a
> bootable system from the gold image so I'm fairly sure the dasd copy
> process is working ok.  The gold image is not corrupted.  It boots without
> an error and so does the DDR copy.
>
> We're currently running z/VM 6.4 (RSU1801).  The 'LNXADMIN' system is
> running Linux version 2.6.32-504.8.1.el6.s390x (Red Hat 4.4.7-4) and that's
> what we're cloning.  Has anyone experienced this problem and found a work
> around?
>
>
> Thanks..
>
> Paul Feller
> AGT Mainframe Technical Support
>
>
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Sample bash script to get user directory entries faster

[Michael MacIsaac]

Hi lists,

I just uploaded two files - smcli and finduserdirentry.  smcli is a
compliled wrapper around SMAPI originating from IBM. It is called in the
bash script finduserdirentry. See:

 https://sourceforge.net/projects/system-zoom/files

We have a process to cycle through our managed guests and see if they were
modified "out of band" (for example, if someone on z/VM adds a CPU to a
user directory entry). To get each user directory entry using SMAPI takes a
handful of seconds.  Let's say 5 seconds for round numbers.  But to cycle
through say 3600 guests would take 5 hours - not too usable.  This code
sample gets the entire user directory and keeps it in memory.  So the first
User ID is more expensive but then I'm hoping around 100ms for each one
after that.  So maybe 5 hours is now 5 minutes... time will tell...

I plan to incorporate this prototype into zoom, but thought the it might be
useful as is.  The code merges PROFILEs into USERs by default (CPU cards
for example can be in PROFILEs), strips comments and leading spaces.

For it to work, you need a zLinux virtual machine authorized to use a
functioning SMAPI.  smcli may need a library path setting, but I can't seem
to recall.

Enjoy.  Feedback is welcome. It is only lightly tested.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

ulimit -u value

[Michael MacIsaac]

Hello list,

I wrote a recursive function to log messages to one file from different
systems.  Something like:

  if on local system; then
log to local file
  else
log back to calling system

But I had a bug where the local system thought it was remote so the else
clause was executed on both sides. So system A called system B to log,
which called system A, which called system B...  In not too much time the
stacks filled up and the system with the least free memory died.

So then I read about ulimit -u to limit the number of processes that can be
forked.  On SLES the ulimit -u seems to be based on the amount of memory.
Is there a way to have it set to a smaller, safer value?  Has anyone
addressed this issue to limit the damage dangerous programmers (such as
myself :)) can do?

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: From read-only-root to containers

[Michael MacIsaac]

Rick,

Nice writeup!  (did you think of getting that published?)

Here's the URL (the asterisks above give a 404):  https://github.com/trothr/
blog/blob/master/sir.santa/2018/05/shared-sys.md
<https://github.com/trothr/blog/blob/master/sir.santa/2018/05/shared-sys.md*>

Thanks.

-Mike


On Tue, May 29, 2018 at 8:26 PM, Rick Troth  wrote:

> Trying to answer the question, "Can we somehow lead?". Kind of
> stream-of-consciousness, but it's personal.
>
> *https://github.com/trothr/blog/blob/master/sir.santa/
> 2018/05/shared-sys.md*
>
>
> I've been tinkering with using GitHub for blogging, and that's why the
> above site. But that's a whole nutha story.
>
> -- R; <><
>
>
> On 05/25/2018 06:11 PM, Michael MacIsaac wrote:
> > Hello lists,
> >
> > I stumbled onto the first "Read-only root" paper that the guys from
> > Nationwide basically wrote. While on the Redbooks website, I was
> surprised
> > to be asked if I wanted to chat about it. I said yes, and tried to be
> > respectful. Below is the chat text, which in the Turing Test, I would
> vote
> > yes, that was a live sapien (perhaps I failed?).
> >
> > I look back and now reflect - are Containers and Docker the new
> "read-only
> > root"? Is mainframe playing catch-up 10 years later?  Can we somehow
> lead?
> > Just some questions for thought ...
> >
> > IBM Sales Rep
> > Hello! My name is Taylor. Welcome to IBM Live Chat – Sales. How may I
> help
> > you today?
> > Me on May 25, 5:29 PM
> > Hi, is this paper still relevant? It is more than 10 years old
> > Taylor on May 25, 5:30 PM
> > What paper are you referring to?
> > Me on May 25, 5:30 PM
> > Sharing and maintaining Linux under z/VM
> > Me on May 25, 5:31 PM
> > The Web page I am on
> > Taylor on May 25, 5:31 PM
> > I'm not able to see what you're looking at, could you send me the URL?
> > Me on May 25, 5:31 PM
> > http://www.redbooks.ibm.com/abstracts/redp4322.html
> > Taylor on May 25, 5:31 PM
> > Thanks! Let me take a look
> > Taylor on May 25, 5:33 PM
> > Parts of it will still be relevant, but as you said, with it being 10
> years
> > old...some concepts will be dated
> > Me on May 25, 5:33 PM
> > OK, thanks
> > Taylor on May 25, 5:33 PM
> > Absolutely. Is there anything else I can help you with?
> > Me on May 25, 5:34 PM
> > No, you've been very helpful, thanks
> > Taylor on May 25, 5:34 PM
> > My pleasure, I hope you have a wonderful day!
> >
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

From read-only-root to containers

[Michael MacIsaac]

Hello lists,

I stumbled onto the first "Read-only root" paper that the guys from
Nationwide basically wrote. While on the Redbooks website, I was surprised
to be asked if I wanted to chat about it. I said yes, and tried to be
respectful. Below is the chat text, which in the Turing Test, I would vote
yes, that was a live sapien (perhaps I failed?).

I look back and now reflect - are Containers and Docker the new "read-only
root"? Is mainframe playing catch-up 10 years later?  Can we somehow lead?
Just some questions for thought ...

IBM Sales Rep
Hello! My name is Taylor. Welcome to IBM Live Chat – Sales. How may I help
you today?
Me on May 25, 5:29 PM
Hi, is this paper still relevant? It is more than 10 years old
Taylor on May 25, 5:30 PM
What paper are you referring to?
Me on May 25, 5:30 PM
Sharing and maintaining Linux under z/VM
Me on May 25, 5:31 PM
The Web page I am on
Taylor on May 25, 5:31 PM
I'm not able to see what you're looking at, could you send me the URL?
Me on May 25, 5:31 PM
http://www.redbooks.ibm.com/abstracts/redp4322.html
Taylor on May 25, 5:31 PM
Thanks! Let me take a look
Taylor on May 25, 5:33 PM
Parts of it will still be relevant, but as you said, with it being 10 years
old...some concepts will be dated
Me on May 25, 5:33 PM
OK, thanks
Taylor on May 25, 5:33 PM
Absolutely. Is there anything else I can help you with?
Me on May 25, 5:34 PM
No, you've been very helpful, thanks
Taylor on May 25, 5:34 PM
My pleasure, I hope you have a wonderful day!

-- 

 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: /proc/sysinfo on other architectures?

[Michael MacIsaac]

> There is something to be said for not leaking all of this information.
We use the hierarchy under system z in our organization.  The information
is available to all employees without authentication (unless an operation
is being performed). The LPAR/VM value is the most detail that some users
care about (myself, I still think it's cool when I see that the serial
number in the "tree" under CEC, does in fact match the number on the door
of the physical CEC :))

-Mike MacIsaac

On Mon, Mar 26, 2018 at 5:53 PM, Philipp Kern <pk...@debian.org> wrote:

> On 26.03.2018 23:18, Michael MacIsaac wrote:
> > So, no LPARs, OK, but virtual machines, right?  I assume the VMs can run
> > Linux or Windows, or other OS's.
> >
> > So would such a hierarchy be possible:
> >
> > systems
> > ├── CEC:0FF28
> > │   └── LPAR:VM23
> > │   └── zVM:VM23
> > │   └── virtualMachine:LNXADM32
> > │   └── Linux:admin32.example.com
> > └── IntelServer:serialNum
> > └── VMware:someID
> > └── virtualMachine:someID
> > └── Linux:hostname.example.com
>
> Traditionally you inquire the hypervisor (in this case VMware) about
> this. There is something to be said for not leaking all of this
> information.
>
> Kind regards
> Philipp Kern
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: /proc/sysinfo on other architectures?

[Michael MacIsaac]

Phillip,

This helps too.

So, no LPARs, OK, but virtual machines, right?  I assume the VMs can run
Linux or Windows, or other OS's.

So would such a hierarchy be possible:

systems
├── CEC:0FF28
│   └── LPAR:VM23
│   └── zVM:VM23
│   └── virtualMachine:LNXADM32
│   └── Linux:admin32.example.com
└── IntelServer:serialNum
└── VMware:someID
└── virtualMachine:someID
└── Linux:hostname.example.com

Thanks.

-Mike

On Mon, Mar 26, 2018 at 4:16 PM, Philipp Kern <pk...@debian.org> wrote:

> On 26.03.2018 16:45, Michael MacIsaac wrote:
> > Dan,
> >
> > Thanks, that's helpful too.
> >
> > So I try "systemd-detect-virt" on a zLinux and get only get "zvm", which
> is
> > a start but not too helpful.
> >
> > What I'm learning is that /proc/sysinfo (and thus STSI) is arguably a
> > treasure trove of information, because (along with vmcp) can determine
> the
> > hierarchy of hardware and hipervisors as such:
> >
> > └── systems
> > ├── CEC:0FF28
> > │   ├── LPAR:VM23
> > │   │   └── zVM:VM23
> > │   │   ├── SSIcluster:none
> > │   │   ├── devices
> > │   │   ├── virtualMachine:LNXADM32
> >
> > I'm hoping dmidecode will provide the equivalent on Lintel.
>
> It won't. DMI data is offered by the immediate hypervisor BIOS layer.
>
> Generally you can't probe on Intel how many layers there are. But Intel
> virtualization generally doesn't nest either. It's possible but people
> don't do it. Also partitioning a machine is not a thing.
>
> Kind regards
> Philipp Kern
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: /proc/sysinfo on other architectures?

[Michael MacIsaac]

Dan,

Thanks, that's helpful too.

So I try "systemd-detect-virt" on a zLinux and get only get "zvm", which is
a start but not too helpful.

What I'm learning is that /proc/sysinfo (and thus STSI) is arguably a
treasure trove of information, because (along with vmcp) can determine the
hierarchy of hardware and hipervisors as such:

└── systems
├── CEC:0FF28
│   ├── LPAR:VM23
│   │   └── zVM:VM23
│   │   ├── SSIcluster:none
│   │   ├── devices
│   │   ├── virtualMachine:LNXADM32

I'm hoping dmidecode will provide the equivalent on Lintel.

-Mike M

On Mon, Mar 26, 2018 at 10:32 AM, Dan Horák <dho...@redhat.com> wrote:

> On Mon, 26 Mar 2018 10:20:18 -0400
> Michael MacIsaac <mike99...@gmail.com> wrote:
>
> > Christian,
> >
> > Thanks, that helps.  I also found "dmidecode" after searching for
> > "systemd-detect-virt".
>
> an advantage of systemd-detect-virt is that it's multi-platform, while
> dmidecode is usable on x86 and aarch64 only
>
> There is also "virt-what" tool. And "lscpu" returns also info about
> hypervisor.
>
>
> Dan
>
> > I'll look into them...
> >
> >     -Mike M
> >
> > On Mon, Mar 26, 2018 at 9:52 AM, Christian Borntraeger <
> > borntrae...@de.ibm.com> wrote:
> >
> > > On 03/26/2018 03:38 PM, Michael MacIsaac wrote:
> > > > Thanks to all who replied.
> > > >
> > > > So does anyone know how to query the hipervisor hierarchy, or if
> > > > a Lintel is running on "bare metal"?
> > >
> > > systemd-detect-virt
> > >
> > > should work.
> > >
> > > >
> > > > -Mike
> > > >
> > > > On Mon, Mar 26, 2018 at 9:17 AM, Christian Borntraeger <
> > > > borntrae...@de.ibm.com> wrote:
> > > >
> > > >> Yes, /proc/sysinfo is a method to expose parts of the STSI
> > > >> instruction
> > > to
> > > >> unpriviledged code.
> > > >> This is very z-specific.
> > > >>
> > > >> On 03/26/2018 02:38 PM, Michael MacIsaac wrote:
> > > >>> Hello list,
> > > >>>
> > > >>> Is /proc/sysinfo a zLinux thing only?
> > > >>>
> > > >>> I got on a Lintel VMWare virtual machine and was surprised to
> > > >>> not see
> > > >> that
> > > >>> file.  If it's not part of Lintel, how do they query their
> > > >>> hipervisor hierarchy?
> > > >>>
> > > >>> Thanks.
> > > >>>
> > > >>> --
> > > >>>  -Mike MacIsaac
> > > >>>
> > > >>> 
> --
> > > >>> For LINUX-390 subscribe / signoff / archive access instructions,
> > > >>> send email to lists...@vm.marist.edu with the message: INFO
> > > >>> LINUX-390
> > > >> or visit
> > > >>> http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > >>> 
> --
> > > >>> For more information on Linux on System z, visit
> > > >>> http://wiki.linuxvm.org/
> > > >>>
> > > >>
> > > >> 
> --
> > > >> For LINUX-390 subscribe / signoff / archive access instructions,
> > > >> send email to lists...@vm.marist.edu with the message: INFO
> > > >> LINUX-390
> > > or
> > > >> visit
> > > >> http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > >> 
> --
> > > >> For more information on Linux on System z, visit
> > > >> http://wiki.linuxvm.org/
> > > >>
> > > >
> > > >
> > > >
> > > > --
> > > >  -Mike MacIsaac
> > > >
> > > > 
> --
> > > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > > send email to lists...@vm.marist.edu with the message: INFO
> > > > LINUX-390
> > > or visit
> > > > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > > --

Re: /proc/sysinfo on other architectures?

[Michael MacIsaac]

Christian,

Thanks, that helps.  I also found "dmidecode" after searching for
"systemd-detect-virt".
I'll look into them...

-Mike M

On Mon, Mar 26, 2018 at 9:52 AM, Christian Borntraeger <
borntrae...@de.ibm.com> wrote:

> On 03/26/2018 03:38 PM, Michael MacIsaac wrote:
> > Thanks to all who replied.
> >
> > So does anyone know how to query the hipervisor hierarchy, or if a Lintel
> > is running on "bare metal"?
>
> systemd-detect-virt
>
> should work.
>
> >
> > -Mike
> >
> > On Mon, Mar 26, 2018 at 9:17 AM, Christian Borntraeger <
> > borntrae...@de.ibm.com> wrote:
> >
> >> Yes, /proc/sysinfo is a method to expose parts of the STSI instruction
> to
> >> unpriviledged code.
> >> This is very z-specific.
> >>
> >> On 03/26/2018 02:38 PM, Michael MacIsaac wrote:
> >>> Hello list,
> >>>
> >>> Is /proc/sysinfo a zLinux thing only?
> >>>
> >>> I got on a Lintel VMWare virtual machine and was surprised to not see
> >> that
> >>> file.  If it's not part of Lintel, how do they query their hipervisor
> >>> hierarchy?
> >>>
> >>> Thanks.
> >>>
> >>> --
> >>>  -Mike MacIsaac
> >>>
> >>> --
> >>> For LINUX-390 subscribe / signoff / archive access instructions,
> >>> send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> >> or visit
> >>> http://www.marist.edu/htbin/wlvindex?LINUX-390
> >>> --
> >>> For more information on Linux on System z, visit
> >>> http://wiki.linuxvm.org/
> >>>
> >>
> >> --
> >> For LINUX-390 subscribe / signoff / archive access instructions,
> >> send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> >> visit
> >> http://www.marist.edu/htbin/wlvindex?LINUX-390
> >> --
> >> For more information on Linux on System z, visit
> >> http://wiki.linuxvm.org/
> >>
> >
> >
> >
> > --
> >  -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > --
> > For more information on Linux on System z, visit
> > http://wiki.linuxvm.org/
> >
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: /proc/sysinfo on other architectures?

[Michael MacIsaac]

Thanks to all who replied.

So does anyone know how to query the hipervisor hierarchy, or if a Lintel
is running on "bare metal"?

-Mike

On Mon, Mar 26, 2018 at 9:17 AM, Christian Borntraeger <
borntrae...@de.ibm.com> wrote:

> Yes, /proc/sysinfo is a method to expose parts of the STSI instruction to
> unpriviledged code.
> This is very z-specific.
>
> On 03/26/2018 02:38 PM, Michael MacIsaac wrote:
> > Hello list,
> >
> > Is /proc/sysinfo a zLinux thing only?
> >
> > I got on a Lintel VMWare virtual machine and was surprised to not see
> that
> > file.  If it's not part of Lintel, how do they query their hipervisor
> > hierarchy?
> >
> > Thanks.
> >
> > --
> >  -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > --
> > For more information on Linux on System z, visit
> > http://wiki.linuxvm.org/
> >
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

/proc/sysinfo on other architectures?

[Michael MacIsaac]

Hello list,

Is /proc/sysinfo a zLinux thing only?

I got on a Lintel VMWare virtual machine and was surprised to not see that
file.  If it's not part of Lintel, how do they query their hipervisor
hierarchy?

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: RHEL and HMC load from FTP

[Michael MacIsaac]

If you FTP to the server manually with the same credentials and do a:
> cd /software/RHEL
> dir

What do you see?

-Mike M

On Fri, Mar 23, 2018 at 6:48 PM, R P Herrold  wrote:

> On Fri, 23 Mar 2018, munif sadek wrote:
>
> > Now when I am trying to use -RECOVERY -> Load from Removable Media or
> > Server, I am getting
> >
> > "An error occurred while trying to obtain a list of software that can
> > be loaded. Please verify the information you entered and that the
> > correct media in the selected drive." ACT36201
>
> > Rsp: 200 Representation type is Ascii NonPrint
> > Req: NLST /software/RHEL/generic.ins/.
> > Rsp: 550 No data sets found.
>
> that looks, all the world, like a blocked read permissions
> problem somewhere in the chain, over on the FTP Server side
>
> -- Russ herrold
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: SLES 12 upgrade fails

[Michael MacIsaac]

Victor,

Does the virtual machine have at least 1G of memory?

-Mike

On Tue, Mar 13, 2018 at 4:02 PM, Victor Echavarry <
victor.echava...@evertecinc.com> wrote:

> We are planning a upgrade of all our z/Linux guest from SLES 11 SP4 to
> SLES 12 SP3. When executing the upgrade we receive the following message:
>
> Failed to execute /init (error -2)
> Kernel panic - not syncing: Requested init /linuxrc failed (error -2).
> CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.4.73-5-default #1
>1ee5fcc8 1ee5fd58 0002 
>1ee5fdf8 1ee5fd70 1ee5fd70 00260734
>00ad5ea8 007dc9ee 007ca056 000b
>1ee5fdb8 1ee5fd58  
>04001ee5ff48 00113c36 1ee5fd58 1ee5fdb8
> Call Trace:
> ([<00113b2a>] show_trace+0xf2/0x140)
>  [<00113bea>] show_stack+0x72/0xf0
>  [<00439e7a>] dump_stack+0x82/0xb0
>  [<0025f928>] panic+0xf0/0x228
>  [<0064b428>] kernel_init+0xc0/0x118
>  [<00654e2e>] kernel_thread_starter+0x6/0xc
>  [<00654e28>] kernel_thread_starter+0x0/0xc
>
> This are our configuration files:
>
> SLES12   EXEC
>
> /* REXX LOAD EXEC FOR SUSE Linux S/390 VM GUESTS */
> /* LOADS SUSE Linux S/390 FILES INTO READER */
> SAY ''
> SAY 'LOADING SLES12 FILES INTO READER...'
> 'CP CLOSE PUN *'
> 'CP CLOSE RDR'
> 'PURGE RDR ALL'
> 'SPOOL PUNCH * RDR'
> 'PUNCH SLES12 Linux * (NOH'
> 'PUNCH PARMFILE 'USERID() ' * (NOHEADER'
> 'PUNCH SLES12 INITRD * (NOH'
> 'CHANGE RDR ALL KEEP NOHOLD'
> 'CP IPL 000C CLEAR'
>
> PARMFILE
>
> ramdisk_size=65536 root=/dev/ram1 ro init=/linuxrc TERM=dumb
> hostip=10.23.11.246 netmask=255.255.248.0 gateway=10.23.11.193
> nameserver=10.23.0.238 portname=none portno=0
> instnetdev=osa osainterface=qdio osamedium=eth layer2=1
> OSAHWaddr=02:78:C1:02:48:00
> readchannel=0.0.0360 writechannel=0.0.0361 datachannel=0.0.0362
> usevnc=1 vncpassword=vncpassw
> install=http://10.1.38.158/upgrade/SLE-12-SP3-Server-DVD-s390x-GM-DVD1.iso
>
> INITRD and LINUX
>
> SLES12   INITRD   D1 F 80 333414   6512  3/09/18
> SLES12   LINUXD1 F 80 139085   2438  3/09/18
>
> Why it can't connect? Our z/VM version is 6.4
>
> Regards,
>
> Victor Echavarry
>
> System Programmer
>
> Operating Systems
>
> EVERTEC, LLC
>
>
>
>
>
>
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Largest Linux cluster ever?

[Michael MacIsaac]

OK, that's funny!  Nice.

-Mike

On Mon, Mar 5, 2018 at 9:43 AM, Rick Ralston  wrote:

> https://www.cmg.org/publications/measureit/2006-2/
> mit28/measureit-issue-4-02-cmg-antarctica-by-richard-s-ralston/
>
>
> Richard Ralston
> Enterprise Server Capacity Planner | Performance and Capacity Management
> Information Technology Infrastructure
> Humana
> Indianapolis, IN
> T 502-855-0397
> rrals...@humana.com
> Humana.com
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
> Gregg Levine
> Sent: Sunday, March 4, 2018 11:21 PM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Re: Largest Linux cluster ever?
>
> Hello!
> Isn't that the gathering of Linux system administrators taking shape
> there? Yes that's an amazing site over there.
> -
> Gregg C Levine gregg.drw...@gmail.com
> "This signature fought the Time Wars, time and again."
>
>
> On Sun, Mar 4, 2018 at 11:20 AM, Phil Smith III  wrote:
> > A supercolony of 1.5 million penguins went unnoticed until now
> >
> > https://qz.com/1220822/scientists-have-documented-a-secret-supercolony
> > -of-1-
> > 5-million-penguins-with-the-help-of-nasa-images-drones-and-artificial-
> > intell
> > igence/
> >
> >
> >
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions, send
> > email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > --
> > For more information on Linux on System z, visit
> > http://wiki.linuxvm.org/
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions, send
> email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit http://wiki.linuxvm.org/
>
> The information transmitted is intended only for the person or entity to
> which it is addressed
> and may contain CONFIDENTIAL material.  If you receive this
> material/information in error,
> please contact the sender and delete or destroy the material/information.
>
> Humana Inc. and its subsidiaries comply with applicable Federal civil
> rights laws and
> do not discriminate on the basis of race, color, national origin, age,
> disability or
> sex. Humana Inc. and its subsidiaries do not exclude people or treat them
> differently
> because of race, color, national origin, age, disability or sex.
>
> English: ATTENTION: If you do not speak English, language assistance
> services, free
> of charge, are available to you. Call 1‐877‐320‐1235 (TTY: 711).
>
> Español (Spanish): ATENCIÓN: Si habla español, tiene a su disposición
> servicios
> gratuitos de asistencia lingüística. Llame al 1‐877‐320‐1235 (TTY: 711).
>
> 繁體中文(Chinese)：注意：如果您使用繁體中文，您可以免費獲得語言援助
> 服務。請致電 1‐877‐320‐1235 (TTY: 711)。
>
> Kreyòl Ayisyen (Haitian Creole): ATANSION: Si w pale Kreyòl Ayisyen, gen
> sèvis èd
> pou lang ki disponib gratis pou ou. Rele 1‐877‐320‐1235 (TTY: 711).
>
> Polski (Polish): UWAGA: Jeżeli mówisz po polsku, możesz skorzystać z
> bezpłatnej
> pomocy językowej. Zadzwoń pod numer 1‐877‐320‐1235 (TTY: 711).
>
> 한국어 (Korean): 주의: 한국어를 사용하시는 경우, 언어 지원 서비스를 무료로
> 이용하실 수 있습니다. 1‐877‐320‐1235 (TTY: 711)번으로 전화해 주십시오.
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Extended LVM - want to make sure changes are ready for next boot

[Michael MacIsaac]

Dave,

> What does dasd_configure do, and is it too late now to run that command
to harden changes??

I believe it sets up udev rules. It's a shell script so you can read for
yourself:

# file `which dasd_configure`
/sbin/dasd_configure: POSIX shell script, ASCII text executable


-Mike M


On Fri, Mar 2, 2018 at 12:53 PM, Dave Myers 
wrote:

> This is a SLES12 question.
> I extended an LVM and DID NOT run the dasd_configure command.
> Extend is fine, but now I'm wondering if my changes will survive a boot ??
>
> What does dasd_configure do, and is it too late now to run that command to
> harden changes??
> If so, how do I make sure my LVM extend will be OK after next boot ??
>
> Thanks,
> Dave
>
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: SMACLIENT

[Michael MacIsaac]

Mike,

Is that virtual machine authorized to SMAPI and was SMAPI recycled?

Do you have smaclient.conf set?

# cat /etc/smaclient.conf
smhost="IUCV"


-Mike

On Fri, Feb 23, 2018 at 1:48 PM, Michael Weiner 
wrote:

> Hello all
>
> I have configured SMAPI and setup the smaclient on my Linux guest. When I
> try to finish image query I am getting
>
> Connection closed by remote just. Get4 called with insufficient data.
>
> Any ideas?
>
> Sent from my iPhone
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Web UI testing on zLinux?

[Michael MacIsaac]

Mark (Mike),

OK we will possibly look into OpenQA.

Oh, forgot to answer Neale.  We are on SLES 12 SP2.

-Mike

On Thu, Feb 22, 2018 at 2:19 PM, Mark Post <mp...@suse.com> wrote:

> >>> On 2/22/2018 at 08:24 AM, Michael MacIsaac <mike99...@gmail.com>
> wrote:
> > Hello list,
> >
> > We are hoping to get an automated Web UI testing environment set up on
> > zLinux.
>
> As Mike Friesenegger pointed out, openQA is an option.  To expand a bit
> more, SUSE uses it extensively to perform QA during product development
> (such as SLES12, etc.) as well as during the maintenance cycle.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Web UI testing on zLinux?

[Michael MacIsaac]

Neale,

I asked the developer for a description of the issue.  Here is what he sent
me:

Once the mainClass compiles using the attached script it creates a –jar
file named run_18Jan18.jar

But when we run this the immediate reply is a JNI error stating that
required Class was not found /defined.



# java -jar run_18Jan18.jar

Error: A JNI error has occurred, please check your installation and try
again

Exception in thread "main" java.lang.NoClassDefFoundError:
org/openqa/selenium/WebDriver

at java.lang.Class.getDeclaredMethods0(Native Method)

at java.lang.Class.privateGetDeclaredMethods(Class.java:2701)

at java.lang.Class.privateGetMethodRecursive(Class.java:3048)

at java.lang.Class.getMethod0(Class.java:3018)

at java.lang.Class.getMethod(Class.java:1784)

at
sun.launcher.LauncherHelper.validateMainClass(LauncherHelper.java:544)

at
sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:526)

Caused by: java.lang.ClassNotFoundException: org.openqa.selenium.WebDriver

at java.net.URLClassLoader.findClass(URLClassLoader.java:381)

at java.lang.ClassLoader.loadClass(ClassLoader.java:424)

at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:335)

at java.lang.ClassLoader.loadClass(ClassLoader.java:357)

... 7 more


On Thu, Feb 22, 2018 at 1:55 PM, Neale Ferguson <ne...@sinenomine.net>
wrote:

> openJDK 9 now has s390x hotspot JIT support so it may be worth
> considering. Are you RH or SUSE?
>
> On 2/22/18, 1:49 PM, "Linux on 390 Port on behalf of Michael MacIsaac"
> <LINUX-390@VM.MARIST.EDU on behalf of mike99...@gmail.com> wrote:
>
> >Neale, (Wayne),
> >
> >I'm not involved very directly in this effort.  There seems to be a need
> >to
> >compile Java manually.
> >
> >I have asked why the IBM-built Java does not work.  I'll ask again...
> >thanks.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Web UI testing on zLinux?

[Michael MacIsaac]

Neale, (Wayne),

I'm not involved very directly in this effort.  There seems to be a need to
compile Java manually.

I have asked why the IBM-built Java does not work.  I'll ask again...
thanks.

-Mike

On Thu, Feb 22, 2018 at 9:05 AM, Neale Ferguson <ne...@sinenomine.net>
wrote:

> What is dragging the effort down?
>
> On 2/22/18, 8:24 AM, "Linux on 390 Port on behalf of Michael MacIsaac"
> <LINUX-390@VM.MARIST.EDU on behalf of mike99...@gmail.com> wrote:
>
> >So we need a browser running on zLinux and many Java components.  The
> >effort is dragging down, so I was just wondering if, by chance, someone
> >has
> >already blazed this trail. Or perhaps there is an alternative to Selenium.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Web UI testing on zLinux?

[Michael MacIsaac]

Hello list,

We are hoping to get an automated Web UI testing environment set up on
zLinux.  Many have suggested the open source tool Selenium. We have been
able to get it running from a laptop, but would like to get it running from
zLinux, so we can "press a button" and run many types of tests including
Web UI.

So we need a browser running on zLinux and many Java components.  The
effort is dragging down, so I was just wondering if, by chance, someone has
already blazed this trail. Or perhaps there is an alternative to Selenium.

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: vmcp cannot allocate memory

[Michael MacIsaac]

Hi,

I thought of a way to work around this issue. Then I looked at my vmcp
wrapper function (below) and it seems I already did (Homer slapping head -
D'oh).

But I still had the default buffer size for the vmcp command set to 1M.
Given the previous comments, I moved that down to 32K in zoom and zuess
(will have to update code on SourceForge after some testing):

< vmcpCmd="/sbin/vmcp --buffer=32K"
---
> vmcpCmd="/sbin/vmcp --buffer=1M"


The wrapper function tries to trap the error for buffer overflow and if
found, resend the vmcp command with the required size.  So I'm guessing the
vast majority of vmcp calls made will have output that will fit in 32K.

Does this look like a good approach?

#+--+
function zCPcmd
# invoke a CP command with the vmcp module/command
# Args 1-n: the command to issue
# Return:   the CP return code (not the vmcp rc)
#+--+
 {
  : SOURCE: ${BASH_SOURCE}
  : STACK:  ${FUNCNAME[@]}

  local CPrc=0 # assume CP command succeeds
  # local CPout  # CP output

  zVerbose "Invoking CP command: $vmcpCmd $@"
  CPout=`$vmcpCmd $@ 2>&1` # run the CP command
  local rc=$?
  if [ "$rc" = 2 ]; then   # output buffer overflow
local bytes=`echo $CPout | awk -F'(' '{print $2}' | awk '{print $1}'`
if [[ "$bytes" -gt 1048576 ]]; then# output too large
  zWarn "Unable to get CP output of $bytes bytes - larger than 1 MB"
  return 11# so caller can exit 11
fi
zWarn "Warning: increasing vmcp buffer size to $bytes bytes and trying
again"
CPout=`$vmcpCmd --buffer=$bytes $@ 2>&1`
local rc2=$?
if [ $rc2 != 0 ]; then # capture the CP return code
after "#"
  CPrc=`echo $CPout | grep "Error: non-zero CP" | awk -F# '{print $2}'`
fi
  elif [ $rc != 0 ]; then  # capture the CP return code
after "#"
CPrc=`echo $CPout | grep "Error: non-zero CP" | awk -F# '{print $2}'`
  fi
  if [ ${#CPout} != 0 -a "$CPverbose" = "yes" ]; then
echo "$CPout"  # show CPoutput in verbose mode
  fi
  return $CPrc # return code from CP
 } # zCPcmd()

Thanks.

-Mike

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Announcing zoom and zuess 3.0

[Michael MacIsaac]

Whoops,

> It would be cool to see some
Clicked "Send" too early.

It would be cool to see someone write some code to support KVM on z.  Then
KVM and z/VM guests could be supported similarly.  It would be non-trivial,
but not too too much work.

-Mike

On Sun, Oct 22, 2017 at 4:35 PM, Michael MacIsaac <mike99...@gmail.com>
wrote:

> Gadi,
>
> Effectively, yes z/VM is required.  There is code that hasn't been tested
> for years to support Linux on an LPAR being added to the zoom tree, but no
> support for any hipervisor running in it such as KVM.  It would be cool to
> see some
>
> I have tested zoom servers and clients (managed guests) heavily on SLES,
> and lightly on RHEL and Ubuntu.
>
> -Mike
>
> On Sun, Oct 22, 2017 at 8:32 AM, גדי בן אבי <gad...@malam.com> wrote:
>
>> Hi,
>>
>> Is z/VM requited, or will it work on zLinux installed in an LPAR?
>> What versions of zLinux are supported?
>>
>> Gadi
>>
>> -Original Message-
>> From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
>> Michael MacIsaac
>> Sent: Sunday, October 22, 2017 2:41 PM
>> To: LINUX-390@VM.MARIST.EDU
>> Subject: Announcing zoom and zuess 3.0
>>
>> Hello linux-390 and IBMBM lists,
>>
>> zoom (System z object-oriented management) and zuess (System z
>> user-enabled
>> self-service) are
>> open-source packages that provide "Private Cloud" on IBM mainframe
>> hardware, the z/VM hipervisor and the GNU/Linux operating system - arguably
>> the most solid and mature virtualization trio on earth. They provide three
>> interfaces for systems management of Linux on the
>> mainframe:
>>   1) Command line (zoom)
>>   2) Web UI   (zuess)
>>   3) RESTful API  (zuess)
>>
>> Together, they create a "self-service portal", where end users can build
>> new Linux systems*, rebuild*, destroy* power-on and off, add and remove
>> CPUs and memory non-disruptively, and report on these systems. It also has
>> a complete "cookbook" with a user guide and command reference.
>> (* some code has to be written by the user)
>>
>> Also supported are:
>>   -) An authentication/authorization mechanism for operations on data or
>> systems
>>   -) Ability to run Linux or z/VM commands and copy files with
>> "passwordless" SSH
>>   -) Inline Web editing of metadata fields "description" and "owner"
>>   -) Quotas for CPUs and memory used by Linux group
>>   -) A second level arbitrary grouping mechanism below Linux groups
>>   -) A locking mechanism for systems being operated on
>>   -) User preferences
>>   -) z/VM DASD, FCP and OSA device reporting
>>   -) Monitoring, Software as a Service and live guest relocation are
>> works in progress
>>
>> The main Web page is https://sourceforge.net/projects/system-zoom/
>> The document in PDF:
>> https://sourceforge.net/projects/system-zoom/files/zoom.pdf/download
>> The download page is https://sourceforge.net/projects/system-zoom/files/
>>
>> You should see six files available for download:
>>   README.txt Basic information - this file
>>   zoom-3-XX.s390x.rpmThe "back-end" RPM  - CLI to be installed on a
>> zLinux system
>>   zuess-3-XX.s390x.rpm   The "front-end" RPM - Web UI to be installed on
>> same zLinux system
>>   zoom.pdf   The documentation - if you just want to read
>> about
>> it
>>   zoom.tgz   Tar file with zoom code - if you just want to see
>> the CLI code
>>   zuess.tgz  Tar file with zuess code - if you just want to
>> see
>> the UI code
>>
>> The version was bumped to 3 because of the new "zoom tree" data structure.
>> To create a zoom cluster of multiple z/VM systems, one zoom server on one
>> z/VM system calls the "zaddserver" command to combine another zoom server
>> on a different z/VM LPAR. The first server becomes to be the "primary", and
>> the second server becomes the "secondary". The primary server can then add
>> any number of additional servers on different z/VM LPARs which all become
>> "tertiary". The primary and secondary servers each maintain an identical
>> copy of the complete zoom tree. Each tertiary server only maintains a tree
>> with clients on that z/VM LPAR. Think of this as an active-active
>> configuration. Should the primary server fail, the secondary will be a hot
>> standby. It should be possible to create a Virtual IP address (VIP) th

Re: Announcing zoom and zuess 3.0

[Michael MacIsaac]

Gadi,

Effectively, yes z/VM is required.  There is code that hasn't been tested
for years to support Linux on an LPAR being added to the zoom tree, but no
support for any hipervisor running in it such as KVM.  It would be cool to
see some

I have tested zoom servers and clients (managed guests) heavily on SLES,
and lightly on RHEL and Ubuntu.

-Mike

On Sun, Oct 22, 2017 at 8:32 AM, גדי בן אבי <gad...@malam.com> wrote:

> Hi,
>
> Is z/VM requited, or will it work on zLinux installed in an LPAR?
> What versions of zLinux are supported?
>
> Gadi
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
> Michael MacIsaac
> Sent: Sunday, October 22, 2017 2:41 PM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Announcing zoom and zuess 3.0
>
> Hello linux-390 and IBMBM lists,
>
> zoom (System z object-oriented management) and zuess (System z user-enabled
> self-service) are
> open-source packages that provide "Private Cloud" on IBM mainframe
> hardware, the z/VM hipervisor and the GNU/Linux operating system - arguably
> the most solid and mature virtualization trio on earth. They provide three
> interfaces for systems management of Linux on the
> mainframe:
>   1) Command line (zoom)
>   2) Web UI   (zuess)
>   3) RESTful API  (zuess)
>
> Together, they create a "self-service portal", where end users can build
> new Linux systems*, rebuild*, destroy* power-on and off, add and remove
> CPUs and memory non-disruptively, and report on these systems. It also has
> a complete "cookbook" with a user guide and command reference.
> (* some code has to be written by the user)
>
> Also supported are:
>   -) An authentication/authorization mechanism for operations on data or
> systems
>   -) Ability to run Linux or z/VM commands and copy files with
> "passwordless" SSH
>   -) Inline Web editing of metadata fields "description" and "owner"
>   -) Quotas for CPUs and memory used by Linux group
>   -) A second level arbitrary grouping mechanism below Linux groups
>   -) A locking mechanism for systems being operated on
>   -) User preferences
>   -) z/VM DASD, FCP and OSA device reporting
>   -) Monitoring, Software as a Service and live guest relocation are works
> in progress
>
> The main Web page is https://sourceforge.net/projects/system-zoom/
> The document in PDF:
> https://sourceforge.net/projects/system-zoom/files/zoom.pdf/download
> The download page is https://sourceforge.net/projects/system-zoom/files/
>
> You should see six files available for download:
>   README.txt Basic information - this file
>   zoom-3-XX.s390x.rpmThe "back-end" RPM  - CLI to be installed on a
> zLinux system
>   zuess-3-XX.s390x.rpm   The "front-end" RPM - Web UI to be installed on
> same zLinux system
>   zoom.pdf   The documentation - if you just want to read about
> it
>   zoom.tgz   Tar file with zoom code - if you just want to see
> the CLI code
>   zuess.tgz  Tar file with zuess code - if you just want to see
> the UI code
>
> The version was bumped to 3 because of the new "zoom tree" data structure.
> To create a zoom cluster of multiple z/VM systems, one zoom server on one
> z/VM system calls the "zaddserver" command to combine another zoom server
> on a different z/VM LPAR. The first server becomes to be the "primary", and
> the second server becomes the "secondary". The primary server can then add
> any number of additional servers on different z/VM LPARs which all become
> "tertiary". The primary and secondary servers each maintain an identical
> copy of the complete zoom tree. Each tertiary server only maintains a tree
> with clients on that z/VM LPAR. Think of this as an active-active
> configuration. Should the primary server fail, the secondary will be a hot
> standby. It should be possible to create a Virtual IP address (VIP) that
> would load balance between the two servers.  For data reliability and
> operation integrity, when clients (managed guests) are being operated on,
> they are locked. So if two administrators try to reboot the same client,
> the first one will succeed, and the second one will get a “system is locked”
> message. Locks are
> maintained on the primary sever, but if it is down, they are maintained on
> the secondary.
>
> The zuess Web User Interface was designed with the goal of giving users in
> an organization Self-Service portal to z/VM and zLinux resources. It
> requires that a Web server be running on the zoom server (only Apache has
> been tested).
>
> With version 3.0, access to the Web UI is spl

Re: Announcing zoom and zuess 3.0

[Michael MacIsaac]

on the zoom server's
console, IBM OpsMgr traps it and calls the appropriate REXX EXEC.  I'd
imagine the sample code could use PROP instead.  A free six-pack of the
beer of your choice to the first person to do that!

A great goal would be to get to a series of three one hour labs where (1)
Linux/zoom/zuess are installed, (2) a zoom tree is created and the Web UI
set up, and (3) all the teams in the class cluster the zoom servers
together.  Wouldn't that be cool to come back from SHARE or VM Workshop and
say "Yeah, I set up Private Cloud on the mainframe in three hours with open
source tools"?  Simultaneously, that exercise would help drive out the bugs
which are certainly there.

C'mon community, stop letting "distributed" beat us at Cloud!

-Mike MacIsaac

On Sun, Oct 22, 2017 at 7:41 AM, Michael MacIsaac <mike99...@gmail.com>
wrote:

> Hello linux-390 and IBMBM lists,
>
> zoom (System z object-oriented management) and zuess (System z
> user-enabled self-service) are
> open-source packages that provide "Private Cloud" on IBM mainframe
> hardware, the z/VM hipervisor
> and the GNU/Linux operating system - arguably the most solid and mature
> virtualization trio on
> earth. They provide three interfaces for systems management of Linux on
> the mainframe:
>   1) Command line (zoom)
>   2) Web UI   (zuess)
>   3) RESTful API  (zuess)
>
> Together, they create a "self-service portal", where end users can build
> new Linux systems*,
> rebuild*, destroy* power-on and off, add and remove CPUs and memory
> non-disruptively, and report
> on these systems. It also has a complete "cookbook" with a user guide and
> command reference.
> (* some code has to be written by the user)
>
> Also supported are:
>   -) An authentication/authorization mechanism for operations on data or
> systems
>   -) Ability to run Linux or z/VM commands and copy files with
> "passwordless" SSH
>   -) Inline Web editing of metadata fields "description" and "owner"
>   -) Quotas for CPUs and memory used by Linux group
>   -) A second level arbitrary grouping mechanism below Linux groups
>   -) A locking mechanism for systems being operated on
>   -) User preferences
>   -) z/VM DASD, FCP and OSA device reporting
>   -) Monitoring, Software as a Service and live guest relocation are works
> in progress
>
> The main Web page is https://sourceforge.net/projects/system-zoom/
> The document in PDF: https://sourceforge.net/projects/system-zoom/files/
> zoom.pdf/download
> The download page is https://sourceforge.net/projects/system-zoom/files/
>
> You should see six files available for download:
>   README.txt Basic information - this file
>   zoom-3-XX.s390x.rpmThe "back-end" RPM  - CLI to be installed on a
> zLinux system
>   zuess-3-XX.s390x.rpm   The "front-end" RPM - Web UI to be installed on
> same zLinux system
>   zoom.pdf   The documentation - if you just want to read
> about it
>   zoom.tgz   Tar file with zoom code - if you just want to see
> the CLI code
>   zuess.tgz  Tar file with zuess code - if you just want to
> see the UI code
>
> The version was bumped to 3 because of the new "zoom tree" data
> structure.
> To create a zoom cluster of multiple z/VM systems, one zoom server on one
> z/VM system calls
> the "zaddserver" command to combine another zoom server on a different
> z/VM LPAR. The first
> server becomes to be the "primary", and the second server becomes the
> "secondary". The primary
> server can then add any number of additional servers on different z/VM
> LPARs which all become
> "tertiary". The primary and secondary servers each maintain an identical
> copy of the complete zoom
> tree. Each tertiary server only maintains a tree with clients on that z/VM
> LPAR. Think of this as
> an active-active configuration. Should the primary server fail, the
> secondary will be a hot
> standby. It should be possible to create a Virtual IP address (VIP) that
> would load balance between
> the two servers.  For data reliability and operation integrity, when
> clients (managed guests) are
> being operated on, they are locked. So if two administrators try to reboot
> the same client, the
> first one will succeed, and the second one will get a “system is locked”
> message. Locks are
> maintained on the primary sever, but if it is down, they are maintained on
> the secondary.
>
> The zuess Web User Interface was designed with the goal of giving users in
> an organization
> Self-Service portal to z/VM and zLinux resources. It requires that a Web
> server be running on
> the zoom

Announcing zoom and zuess 3.0

[Michael MacIsaac]

Hello linux-390 and IBMBM lists,

zoom (System z object-oriented management) and zuess (System z user-enabled
self-service) are
open-source packages that provide "Private Cloud" on IBM mainframe
hardware, the z/VM hipervisor
and the GNU/Linux operating system - arguably the most solid and mature
virtualization trio on
earth. They provide three interfaces for systems management of Linux on the
mainframe:
  1) Command line (zoom)
  2) Web UI   (zuess)
  3) RESTful API  (zuess)

Together, they create a "self-service portal", where end users can build
new Linux systems*,
rebuild*, destroy* power-on and off, add and remove CPUs and memory
non-disruptively, and report
on these systems. It also has a complete "cookbook" with a user guide and
command reference.
(* some code has to be written by the user)

Also supported are:
  -) An authentication/authorization mechanism for operations on data or
systems
  -) Ability to run Linux or z/VM commands and copy files with
"passwordless" SSH
  -) Inline Web editing of metadata fields "description" and "owner"
  -) Quotas for CPUs and memory used by Linux group
  -) A second level arbitrary grouping mechanism below Linux groups
  -) A locking mechanism for systems being operated on
  -) User preferences
  -) z/VM DASD, FCP and OSA device reporting
  -) Monitoring, Software as a Service and live guest relocation are works
in progress

The main Web page is https://sourceforge.net/projects/system-zoom/
The document in PDF:
https://sourceforge.net/projects/system-zoom/files/zoom.pdf/download
The download page is https://sourceforge.net/projects/system-zoom/files/

You should see six files available for download:
  README.txt Basic information - this file
  zoom-3-XX.s390x.rpmThe "back-end" RPM  - CLI to be installed on a
zLinux system
  zuess-3-XX.s390x.rpm   The "front-end" RPM - Web UI to be installed on
same zLinux system
  zoom.pdf   The documentation - if you just want to read about
it
  zoom.tgz   Tar file with zoom code - if you just want to see
the CLI code
  zuess.tgz  Tar file with zuess code - if you just want to see
the UI code

The version was bumped to 3 because of the new "zoom tree" data structure.
To create a zoom cluster of multiple z/VM systems, one zoom server on one
z/VM system calls
the "zaddserver" command to combine another zoom server on a different z/VM
LPAR. The first
server becomes to be the "primary", and the second server becomes the
"secondary". The primary
server can then add any number of additional servers on different z/VM
LPARs which all become
"tertiary". The primary and secondary servers each maintain an identical
copy of the complete zoom
tree. Each tertiary server only maintains a tree with clients on that z/VM
LPAR. Think of this as
an active-active configuration. Should the primary server fail, the
secondary will be a hot
standby. It should be possible to create a Virtual IP address (VIP) that
would load balance between
the two servers.  For data reliability and operation integrity, when
clients (managed guests) are
being operated on, they are locked. So if two administrators try to reboot
the same client, the
first one will succeed, and the second one will get a “system is locked”
message. Locks are
maintained on the primary sever, but if it is down, they are maintained on
the secondary.

The zuess Web User Interface was designed with the goal of giving users in
an organization
Self-Service portal to z/VM and zLinux resources. It requires that a Web
server be running on
the zoom server (only Apache has been tested).

With version 3.0, access to the Web UI is split into two categories
 (1) Read-only - the home page and any other page that does not perform
operations is in a
 directory (usually /srv/www/cgi-bin/) open to all users. No audit trail
is needed, so no
 user/group information is available.

 (2) Read-write - any page that performs any operation or makes any change
to the tree is in
 a directory that is password protected (usually /srv/www/cgi-bin/zuess/).
Once the user
 supplies valid credentials, the user name is maintained along with their
primary and secondary
 groups. An audit trail is maintained in the zoom log file (usually
/var/log/zoom.log).

OK, that's probably enough description.  Phil Tully and I presented on this
at the last SHARE
and MVMUA.  Both were pretty well received. Unfortunately, no more
presentations are planned
at this time.

If anyone does get it set up, please let me know.  What would be great is a
contribution of
some Linux/VM code to do build (clone to new VM), rebuild (clone to
existing) and destroy. All
of those operations are outlined in the file
/usr/local/src/userexits.stubs. It would have to
be copied to userexits.local. What we do in house is put a message on the
zoom server's console,
IBM OpsMgr traps it and calls the appropriate REXX EXEC.  I'd imagine the
sample code could
use PROP instead.  A free six-pack of the beer of your 

vmcp cannot allocate memory

[Michael MacIsaac]

Hello list,

We use vmcp extensively to issue CP commands.  More and more I'm seeing
this error:

Error: Could not issue CP command: Cannot allocate memory

I always use the --buffer=1M flag to be able to get the largest output. I've
bumped up the VM size from 2 to 3 to 4GB, but still see it. We have some
VDISK swap:
# swapon -s
FilenameTypeSizeUsed
Priority
/dev/dasda1 partition   99156   0   100
/dev/dasdc1 partition   1057796 0   1

I reboot the system and it's gone.

Has anyone seen this?  Seems like it could be considered a bug - everything
else on the Linux system seems fine.  Or maybe I just need more swap?

Thanks.


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: HTTPS, Apache and crypto hardware

[Michael MacIsaac]

Wayne, Mark, Eric,


The "sluggishness" I encountered turned out to be nscd thrashing. When I
restarted it, the Web UI seemed as peppy as the http: version.  I believe
the nscd issue is known and I'm working at getting a patch for that.

Yes Eric, those charts are helpful.

Thanks all for the appends.

-Mike MacIsaac

On Fri, Sep 1, 2017 at 7:38 PM, Eric Covener <cove...@gmail.com> wrote:

> On Fri, Sep 1, 2017 at 12:48 PM, Michael MacIsaac <mike99...@gmail.com>
> wrote:
> > Hi,
> >
> > If I believe the marketing, I should get crypto magically when switching
> > from HTTP to HTTPS using Apache under zLinux, just by buying a z14.
> >
> > Well we don't have any z14s and I'm not sure I believe the hype.  Does
> > anyone know of a HOWTO on this?
> >
> > I did write up a "recipe" (26.4 Hardware cryptographic support for
> OpenSSH)
> > in a Cookbook years ago on using the library openssl/engines/libibmca.so
> -
> > but I am under the impression this process is for OpenSSH, not Apache
> HTTPS.
> >
>
> There are a few good slides here:
>
> https://www-01.ibm.com/common/ssi/cgi-bin/ssialias?htmlfid=ZSP04731USEN
>
> > Focus on Transparent Enablement:
> > Transparently accelerate TLS & IPSec using CPACF & SIMD to leverage
> hardware performance gains
>
> But it's unclear to me if this means "without configuration [of
> PKCS11]" in things like Apache+mod_ssl+openssl.  I don't get the
> impression that the new SIMD instructions they talk about are crypto
> related, those kinds of instructions are usually the only
> "configuration-free" crypto acceleration that I've seen on Linux.
>
> In addition, the deck talks about LUKS-like encrypted block devices
> backed by CPACF in the same way that datasets can now be encrypted at
> rest by policy in the Z14.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

HTTPS, Apache and crypto hardware

[Michael MacIsaac]

Hi,

If I believe the marketing, I should get crypto magically when switching
from HTTP to HTTPS using Apache under zLinux, just by buying a z14.

Well we don't have any z14s and I'm not sure I believe the hype.  Does
anyone know of a HOWTO on this?

I did write up a "recipe" (26.4 Hardware cryptographic support for OpenSSH)
in a Cookbook years ago on using the library openssl/engines/libibmca.so -
but I am under the impression this process is for OpenSSH, not Apache HTTPS.

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Docker question

[Michael MacIsaac]

Neale,

Thanks for the quick reply.  That's great.

-Mike

On Fri, Aug 4, 2017 at 9:42 AM, Neale Ferguson <ne...@sinenomine.net> wrote:

> A couple of options. First the certificates: build the container with a
> VOLUME statement that you will then use the -v option on the docker run
> command to mount a unique file or directory on. That would contain your
> certificate although isn’t it possible to put all the certs in /etc/pki/…
>
> Use --ip option to assign a fixed IP to the container – see
> https://stackoverflow.com/questions/27937185/assign-
> static-ip-to-docker-container
>
> Alternatively you could use something like openShift that allows you to
> configure this including allowing you to assign publicly accessible IP
> addresses to the container (openShift runs haproxy). For a description of
> building and running things on openShift Origin under Linux on Z see:
>
> http://download.sinenomine.net/clefos/epel7/Getting_
> Started_with_OpenShift_on_z.pdf
>
> Neale
>
> On 8/4/17, 9:32 AM, "Linux on 390 Port on behalf of Michael MacIsaac" <
> LINUX-390@VM.MARIST.EDU<mailto:LINUX-390@VM.MARIST.EDU> on behalf of
> mike99...@gmail.com<mailto:mike99...@gmail.com>> wrote:
>
>
> I still don't grok Docker.
>
> Let's say I want to create a Docker image of a zLinux system.  Let's say
> this system runs Apache and needs a certificate to enable https.  Let's say
> I want to run this image on multiple LPARs. So each system will need a
> unique host name and thus a unique certificate, right?
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Docker question

[Michael MacIsaac]

Hello list,

I still don't grok Docker.

Let's say I want to create a Docker image of a zLinux system.  Let's say
this system runs Apache and needs a certificate to enable https.  Let's say
I want to run this image on multiple LPARs. So each system will need a
unique host name and thus a unique certificate, right?

How is this accomplished with Docker?

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: KVM's /proc/sysinfo

[Michael MacIsaac]

Thanks to all who replied.  The information is helpful.

-Mike MacIsaac


On Thu, Jun 22, 2017 at 10:09 AM, Johan Schelling <johan.schell...@icu-it.nl
> wrote:

> This is what I get from /proc/sysinfo in the zKVM environment…. no VM00
> but LPAR-info
>
> LPAR Number:  1
> LPAR Characteristics: Shared
> LPAR Name:ICU1
> LPAR Adjustment:  1000
> LPAR CPUs Total:  2
> LPAR CPUs Configured: 2
> LPAR CPUs Standby:0
> LPAR CPUs Reserved:   0
> LPAR CPUs Dedicated:  0
> LPAR CPUs Shared: 2
>
> Info from a Linux Guest running under zKVM:
>
> VM00 Name:lnxicu10
> VM00 Control Program: KVM/Linux
> VM00 Adjustment:  1000
> VM00 CPUs Total:  2
> VM00 CPUs Configured: 2
> VM00 CPUs Standby:0
> VM00 CPUs Reserved:   0
> VM00 Extended Name:   lnxicu10
> VM00 UUID:55520880-26c4-4ca5-b363-cce581b91496
>
> Johan Schelling
> Infrastructure Solution Architect
>
>
>
>
>
> ICU IT Services BV
> Transistorstraat 55b  I  1322 CK  ALMERE
>
> M 06 – 21 245 992  I  E johan.schell...@icu-it.nl  johan.schell...@icu-it.nl>
> T 088 – 5 234 123  I  www.icu-it.nl <http://www.icu-it.nl/>  I  KvK
> 32135776
>
> > Op 22 jun. 2017, om 14:37 heeft Michael MacIsaac <mike99...@gmail.com>
> het volgende geschreven:
> >
> > Hello list,
> >
> > Could someone who has access to a KVM LPAR, please give me sample output
> > from /proc/sysinfo for the hipervisor?
> >
> > This is what I get on a z/VM LPAR:
> >
> > # grep ^VM00 /proc/sysinfo
> > VM00 Name:ENGZS01
> > VM00 Control Program: z/VM6.4.0
> > VM00 Adjustment:  
> > VM00 CPUs Total:  1
> > VM00 CPUs Configured: 1
> > VM00 CPUs Standby:0
> > VM00 CPUs Reserved:   0
> >
> > ADVthanksANCE.
> >
> > --
> > -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > --
> > For more information on Linux on System z, visit
> > http://wiki.linuxvm.org/
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Crazy idea - a KVM-SMAPI interface?

[Michael MacIsaac]

Thanks to all who replied.

I guess KVM and z/VM are just apples and oranges.

-Mike

On Fri, Jun 23, 2017 at 8:56 AM, Neale Ferguson 
wrote:

> We explored this many years ago and attempted to map libvirt API to SMAPI.
>
> On 6/22/17, 11:38 PM, "Linux on 390 Port on behalf of Rick Troth"
>  wrote:
>
> >insane!
> >
> >That's almost as crazy as a LIBVIRT interface to z/VM.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

KVM's /proc/sysinfo

[Michael MacIsaac]

Hello list,

Could someone who has access to a KVM LPAR, please give me sample output
from /proc/sysinfo for the hipervisor?

This is what I get on a z/VM LPAR:

# grep ^VM00 /proc/sysinfo
VM00 Name:ENGZS01
VM00 Control Program: z/VM6.4.0
VM00 Adjustment:  
VM00 CPUs Total:  1
VM00 CPUs Configured: 1
VM00 CPUs Standby:0
VM00 CPUs Reserved:   0

ADVthanksANCE.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Crazy idea - a KVM-SMAPI interface?

[Michael MacIsaac]

Hello linux-390 list,

I was talking about z/VM, Linux and the SMAPI layer with others who also
work with KVM on z as a hipervisor (myself, I have never had the
opportunity to try it).

Then I had a crazy thought that what might be cool is an interface to SMAPI
for KVM.  Yes, the verbs and objects would be all wrong, but in principle,
would it be doable?  Could you have one 'front end', calling SMAPIs and
performing operations on both z/VM and KVM? This is probably naive, but I
thinking along the lines of Linux's Hardware Abstraction Layer.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

zoom 2-06

[Michael MacIsaac]

Hello listers,

I uploaded zoom 2-06 to SourceForge at:
https://sourceforge.net/projects/system-zoom/files

Here are the line items for this version:
-) Updated zsetlifecycle to more completely apply system life cycle
-) Function sendWarning() defined in userexits.stubs to send e-mail warning
on expiring nodes
-) New commands zsynctree and zsyncnodes freshen possible stale z/VM and
Linux data
-) Prefixed sudo before smcli calls when not running as root
-) Changed default SMAPI wrapper from smaclient to smcli

I wrote a short section in the first chapter "System Life Cycle".  I have
copied it here in case anyone is interested.

===
Linux systems managed by zoom follow a life cycle. When a Linux system is
built (clone to new virtual machines) or rebuilt (clone to existing virtual
machines), the creation date is saved. An expiration date is set relative
to the creation date. This can be set with user input, or if not specified
the default is three months after the creation date.

The zlsexpirations command lists expirations.
The zsetlifecycle command applies this life cycle to managed system based
on their creation and expiration dates.
The zchexpiration command can add time to the expiration date.

As times go by, systems get closer to their expiration dates. When the
zsetlifecycle command runs, systems that are either 7, 3 or 1 days from
their expiration date have an e-mail sent to the owner. When each system
reaches its expiration date, it is 'destroyed'; that is, it is 'NOLOG'ed in
user directory and changed to the artificial group 'deathrow'. System
administrators can purge these systems manually which actually do the DIRM
PURGE or VM:Secure equivalent.

System synchronization is required when virtual machines or Linux
attributes are modified 'out-of-band'. If the number of CPUs or amount of
memory are modified using zoom (which calls SMAPI), those values are
updated in the zoom tree.  If however, these values are modified directly,
with DirMaint for example, this is considered an 'out-of-band' change and
the values in the zoom tree are now 'stale'. The zsynctree command will
interrogate all systems and update the z/VM CPUs and memory values, and the
Linux IP address, distribution and kernel levels.

If it is run once a night, these important data about systems will never be
more than one day out of date.

These two commands work well with cron, so performing the daily maintenance
described above is as easy as:
# crontab -u zadmin -e
# run zsetlifecycle against every system each night at 2 AM
  0 2 * * * /usr/local/sbin/zsetlifecycle :
# run zsynctree each night at 3 AM
  0 3 * * * /usr/local/sbin/zsynctree

===

I should point out that zoom does not have all the code needed to do
provisioning.  The commands that build (zbuildsystem - clone to new VM),
rebuild (zrebuildsystem - clone to existing) and destroy (zdestroysystem -
shut down Linux and NOLOG VM) call functions in the file userexits.stubs.
At our shop we have the moving parts in the file userexits which send
commands to an Ops Manager console, which then calls REXX EXECs doing the
heavy lifting.

I just didn't want to set anyone's expectations too high.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Linux SMAPI wrappers

[Michael MacIsaac]

I see this in the append:
> smcli is supported.

But in an SR I have open, I see this:
> z/VM does not own or officially support the smcli function.

You can't have it both ways.

-Mike M

On Mon, May 22, 2017 at 9:33 AM, Emily K Hugenbruch <ekhugenbr...@us.ibm.com
> wrote:

>
> Hi,
> Although I responded to Mike directly, reposting here for the listserv's
> benefit with some extra information:
>
> smcli is supported.  We ship it as part of our z/VM Cloud Manager
> Appliance, so it's supported that way.  It's also supported via open
> source, it could be separated from the rest of the zHCP code and run
> standalone.  We even have a wiki that explains exactly how to do this
> https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/
> W21ed5ba0f4a9_46f4_9626_24cbbb86fbb9/page/Using%20the%
> 20zHCP%20code%20without%20CMA
>
> Anyone is welcome to open Github issues on it
> https://github.com/zVMopenstack/zhcp/issues
>
> It can be run with sudo.  The problem originated because it was run once as
> root, which created the file that tracks the SMAPI
> level: /var/opt/zhcp/smapi.level and then it was run not as root, so that
> file is not available.  I did submit a patch
> https://review.gerrithub.io/#/c/361193/ to make the error messages easier
> to decipher.  We can add a second patch that also makes sure the file name
> is put out on every error message (or anyone else can, we're always happy
> to review any submissions).
>
> Furthermore, as the newly created project maintainer for the Open Mainframe
> Project's Cloudstack for z/VM project, I invite anyone interested in the
> topic of cloud and z/VM to join us.  We have weekly calls (we're leaning
> towards Fridays at 11 eastern) where you can articulate your requirements
> or talk about what you think cloud should look like on z.  If you'd like a
> meeting invite please send me an email.  We can also discuss these topics
> on the Open Mainframe Project's forum
> http://community.openmainframeproject.org/ or Slack channel
> https://openmainframeproject.slack.com
>
> Thank you.
> Sincerely,
> Emily Kate Hugenbruch
> OpenStack Cloud Enablement Engineer - z/VM and Software Engineer - z/VM
> IBM Corporation Endicott, NY
> Twitter: @ekhugen
> IRC: ekhugen@freenode
>
>
>
> From:   Michael MacIsaac <mike99...@gmail.com>
> To: LINUX-390@VM.MARIST.EDU
> Date:   05/19/2017 01:43 PM
> Subject:Linux SMAPI wrappers
> Sent by:Linux on 390 Port <LINUX-390@VM.MARIST.EDU>
>
>
>
> Hello list,
>
> One way to automate operations (aka do Private Cloud) is to use z/VM's
> SMAPI. There are two ways to call 'SMAPIs' from Linux that I know of:
> 1) The bash smaclient from Sine Nomine (thanks to Leland, et al)
> 2) The C compiled smcli originating from IBM (thanks to Chuck, Thang,
> Emily, et al)
>
> Both are large and helpful pieces of code. However, neither are 'supported'
> to my knowledge, but smcli seems to be somewhat 'more supported' in that
> I've seen updates to it recently.
>
> We've gotten errors on smaclient of the form "Unable to bind: 98" which
> seems to lose connectivity to SMAPI when the CPU utilization is 'high'.
>
> So I'm looking into switching to smcli. It works fine when I run as root,
> but everybody knows That's Bad so I try as a non-root and get the error:
>
> # *smcli Image_Query_DM -T VMENG004*
>
> ERROR: File stat error. Errno: 13
>
>
>
> ERROR: Unable to determine SMAPI level.
>
>
> Error number 13 seems to be a generic UNIX/Linux error for "not
> authorized".  Does anyone know which files/directories are in question? I
> was hoping it would be easy enough to chown/chmod some files or
> directories.  Or does anyone know how to use smcli as non-root?
>
> Thanks.
>
> --
>  -Mike MacIsaac
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>
>
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>
>


--
   

Linux SMAPI wrappers

[Michael MacIsaac]

Hello list,

One way to automate operations (aka do Private Cloud) is to use z/VM's
SMAPI. There are two ways to call 'SMAPIs' from Linux that I know of:
1) The bash smaclient from Sine Nomine (thanks to Leland, et al)
2) The C compiled smcli originating from IBM (thanks to Chuck, Thang,
Emily, et al)

Both are large and helpful pieces of code. However, neither are 'supported'
to my knowledge, but smcli seems to be somewhat 'more supported' in that
I've seen updates to it recently.

We've gotten errors on smaclient of the form "Unable to bind: 98" which
seems to lose connectivity to SMAPI when the CPU utilization is 'high'.

So I'm looking into switching to smcli. It works fine when I run as root,
but everybody knows That's Bad so I try as a non-root and get the error:

# *smcli Image_Query_DM -T VMENG004*

ERROR: File stat error. Errno: 13



ERROR: Unable to determine SMAPI level.


Error number 13 seems to be a generic UNIX/Linux error for "not
authorized".  Does anyone know which files/directories are in question? I
was hoping it would be easy enough to chown/chmod some files or
directories.  Or does anyone know how to use smcli as non-root?

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Lesson learned - do not idly send links to the Maris Listserver

[Michael MacIsaac]

Mauro,

"Persistence and patience" is my mantra.  One thing we found is worth
mentioning: a RESTful API that can drive both the code that runs on the
back-end CLI *and* through the Web UI is great for creating a regression
test. Once you have the regression test, it's a lot easier to 'push the
testing button' regularly and you're effectively testing three different
paths (RESTful, CLI, Web UI) through the same code.

-Mike

On Thu, May 4, 2017 at 1:28 PM, Mauro Souza <thoriu...@gmail.com> wrote:

> Anybody can write bugged code, only the smart ones can find the bugs.
>
> On May 4, 2017 14:18, "Michael MacIsaac" <mike99...@gmail.com> wrote:
>
> Paul,
>
> > Let me just say that Michael MacIsaac is a VERY smart puppy.
> Thanks Flint.  But if I'm so smart why am I finding bugs in my code just
> about daily???  樂
>
> -Mike
>
> On Thu, May 4, 2017 at 11:56 AM, Paul Flint <fl...@flint.com> wrote:
>
> > Greetings Scott,
> >
> > Thanks for the RST check.
> >
> > On Thu, 4 May 2017, Scott Rohling wrote:
> >
> > I've seen 3 posts from you so they are getting through..   If Michael was
> >> using visual bash they might have been helpful ...   ;-)
> >>
> >>
> > Let me just say that Michael MacIsaac is a VERY smart puppy.  I have had
> a
> > glimpse into his universe, and let me state for the record it is a long
> > way down...
> >
> > I for one, intend to be in the audience when he presents at SHARE.
> >
> > That is not so say the the Visual Bash Framework might not be a wee bit
> > useful in a small way...
> >
> > Sincerely,
> >
> > Flint
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > --
> > For more information on Linux on System z, visit
> > http://wiki.linuxvm.org/
> >
>
>
>
> --
>  -Mike MacIsaac
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Lesson learned - do not idly send links to the Maris Listserver

[Michael MacIsaac]

Paul,

> Let me just say that Michael MacIsaac is a VERY smart puppy.
Thanks Flint.  But if I'm so smart why am I finding bugs in my code just
about daily???  樂

-Mike

On Thu, May 4, 2017 at 11:56 AM, Paul Flint <fl...@flint.com> wrote:

> Greetings Scott,
>
> Thanks for the RST check.
>
> On Thu, 4 May 2017, Scott Rohling wrote:
>
> I've seen 3 posts from you so they are getting through..   If Michael was
>> using visual bash they might have been helpful ...   ;-)
>>
>>
> Let me just say that Michael MacIsaac is a VERY smart puppy.  I have had a
> glimpse into his universe, and let me state for the record it is a long
> way down...
>
> I for one, intend to be in the audience when he presents at SHARE.
>
> That is not so say the the Visual Bash Framework might not be a wee bit
> useful in a small way...
>
> Sincerely,
>
> Flint
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



-- 
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Bash loop failing

[Michael MacIsaac]

Thanks to all who replied - I tried most, but not all suggestions

The good news is I got the bug fixed.

It's pretty clear that 'stdin' was getting 'drained' somewhere down the
stack (I'm still now sure where), as John M. suggested.

Using another file descriptor instead of stdin (0) worked around the issue:

  *exec 3<&0  *  # Link file descriptor #3 with
stdin.
  local nextLine
  while read -u 3 nextLine; do
zVerbose "calling zSetOneSystem $nextLine"
zSetOneSystem $nextLine
  done *3<* <(echo "$expList")   # read from expList on file
descriptor 3


On Thu, May 4, 2017 at 10:40 AM, Neale Ferguson 
wrote:

> Rather than using read can you load the results of the command into an
> array and iterate:
>
>
> FILES=`ls`
>
> FILE=(${FILES})
>
> for ((i=0; i<${#FILE[@]}; i++))
>
> do
>
>echo ${i} ${FILE[$i]}
>
>done
>
> Exit
>
>
> This should load the variables before the other scripts are invoked.
>
>
> Neale
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Bash loop failing

[Michael MacIsaac]

Hello list,

This code has been failing for days and I'm at my wit's end.  Maybe someone
on this forum can help.

I've coded a bash script that is supposed to loop through managed Linux
systems. It calls another bash script to get records with 8 fields:

  local cmd="/usr/local/sbin/zlsexpirations -s -l $nodeList"
  local expList# list of nodes and expiration
days
  expList=`$cmd`   # run the command

  ...

So the variable 'expList' has the records. It should then loop through all
the records passing them to the function zSetOneSystem to process one
system at a time. Here's the main loop (the double quotes around expList
are needed to pass a record, not just one token):

  local nextLine
  while read nextLine; do
zVerbose "calling zSetOneSystem $nextLine"
zSetOneSystem $nextLine
  done < <(echo "$expList")

This was my first attempt at the loop:

  echo "$expList" |
  while read nextLine; do
zVerbose "calling zSetOneSystem $nextLine"
zSetOneSystem $nextLine
  done

Both flavors of the loop above have this behavior:
1) If the -n flag (no operation) is passed, the loop runs fine to
completion.
2) If that flag is not passed, the loop runs, processes one system (which
results in files being changed on disk), but then the loop simply stops.

When I trace it, the 'read nextLine' fails.  I print out 'expList' after
the loop and all records are still in place. How can a sub-process affect
the parent this way? I've narrowed it down to two resulting bash script
calls nested deeper in zSetOneSystem(). If I comment out those two, the
loop succeeds.  If I un-comment either of the two bash scripts, the loop
fails as described.  Strange.

Any help will be appreciated.

Thanks.


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: SHARE Providence

[Michael MacIsaac]

Mark,

OK, but when to we 'raise the bar'?  I was hoping a one-day (or even a half
day) lab could be created to get to a working "Self-service portal" (aka
"Private Cloud").

I'd like to say zoom on top of SMAPI on top of a directory manager would be
adequate for a 'back-end'.  But an open-source Web UI front-end is still
needed IMHO.  It's not a trivial amount of code, but neither would it be
excessively large.

I'm hoping to get to SHARE in August and present on what we have running
internally (if all goes as planned - can't make promises).

-Mike MacIsaac


On Mon, Apr 24, 2017 at 1:28 PM, Mark Post  wrote:

> >>> On 4/24/2017 at 01:20 PM, Andrew Lemay  wrote:
> > This list is great thanks Mark. Now I just hope there are similar labs in
> > RI.
>
> Because they're so popular, those labs get repeated pretty much every
> SHARE.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: High steal on z/linux guest

[Michael MacIsaac]

Hi Victor,

We have used the statement "The hipervisor is busy".  Sometimes it works :))

-Mike MacIsaac

On Fri, Apr 21, 2017 at 3:15 PM, Victor Echavarry Diaz <
vechava...@evertecinc.com> wrote:

> Alan:
>
> The Unix group are asking for this. Because they see the steal alert, they
> want to know what is this happen. Is there a red book or presentation that
> talk about this so the Unix group understand this?
>
> Thanks,
>
> Victor Echavarry
> System Programmer
> Operating Systems
> EVERTEC, LLC
>
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
> Alan Altmark
> Sent: Wednesday, April 19, 2017 5:48 PM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Re: High steal on z/linux guest
>
> On Wednesday, 04/19/2017 at 08:27 GMT, Victor Echavarry Diaz <
> vechava...@evertecinc.com> wrote:
> > We are having issues with Linux guests that show high cpu steal when
> > the
> IFL's is not at full
> > capacity.
> >
> > Why this happening is system has IFL? How z/VM works with that? Some
> > of
> the guest with high steal
> > are Top Users. A guest under cluster do fencing
>
> I assert that users who consume a lot of CPU are more likely to notice
> that CPU time and wall clock time do not match.  All virtualization
> platforms with shared CPU resources will have this issue.  We're just
> better at measuring it.  :-)
>
> I tell my clients:
> a) Stop running top.  It wastes resources.
> b) If the application is running well, don't worry about it.
> c) Steal time doesn't tell you *why* the guest (or LPAR!) is not being
> dispatched, so you need to use z/VM performance data to find out why.
> d) If steal is steadily increasing, you might be adding workload faster
> than you are adding CPUs, or your LPAR weights are out of whack.
>
> Alan Altmark
>
> Senior Managing z/VM and Linux Consultant Lab Services System z Delivery
> Practice IBM Systems & Technology Group ibm.com/systems/services/
> labservices
> office: 607.429.3323
> mobile; 607.321.7556
> alan_altm...@us.ibm.com
> IBM Endicott
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions, send
> email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit http://wiki.linuxvm.org/
>
> WARNING: This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they are
> addressed. If you have received this email in error please delete it
> immediately.
> Please note that any views or opinions presented in this email are solely
> those
> of the author and do not necessarily represent those of EVERTEC, Inc. or
> its
> affiliates. Finally, the integrity and security of this message cannot be
> guaranteed on the Internet, and as such EVERTEC, Inc. and its affiliates
> accept
> no liability for any damage caused by any virus transmitted by this email.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

zoom 2.02

[Michael MacIsaac]

Good day IBMVM and linux-390 mailing lists,

zoom version 2-02 is available on
https://sourceforge.net/projects/system-zoom/

Line items:
-) Fairly significant modification to user preferences code
-) Added binary smcli and library libzhcp.so as a second SMAPI interface
-) Added global variable SMAPIint so SMAPI wrappers can be interchanged
-) Renamed zadddasd to zaddminidisk and zlsdasd to zlsminidisks
-) Significant cleanup of zaddminidisk and zlsminidisks


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Ruby on rails?

[Michael MacIsaac]

Jay, Neale,

Excellent!

Thanks.

-Mike

On Thu, Mar 23, 2017 at 4:38 PM, Neale Ferguson 
wrote:

> This is in the EPEL library at
>
> http://download.sinenomine.net/clefos/epel7/noarch/
> rubygem-rails-4.2.5-2.el
> 7.noarch.rpm
>
> Name: rubygem-rails
> Epoch   : 1
> Version : 4.2.5
> Release : 2.el7
> Architecture: noarch
> Install Date: (not installed)
> Group   : Development/Languages
> Size: 2940392
> License : MIT
> Signature   : RSA/SHA256, Fri 27 Jan 2017 05:44:43 PM EST, Key ID
> ae6aefa8dcbb4d09
> Source RPM  : rubygem-rails-4.2.5-2.el7.src.rpm
> Build Date  : Wed 02 Nov 2016 01:56:19 AM EDT
> Build Host  : clefos-build-image05.bld.sinenomine.net
> Relocations : (not relocatable)
> URL : http://www.rubyonrails.org
> Summary : Web-application framework
> Description :
> Rails is a framework for building web-application using CGI, FCGI,
> mod_ruby,
> or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or
> Oracle with eRuby- or Builder-based templates.
>
>
>
> On 3/23/17, 4:35 PM, "Linux on 390 Port on behalf of Robert J Brenneman"
>  wrote:
>
> >Yeah, works as expected.
> >
> >These guys have a huge listing of open source projects that they've gotten
> >ported to s390x:
> >https://www.ibm.com/developerworks/community/
> forums/html/topic?id=5dee144a
> >-7c64-4bfe-884f-751d6308dbdf=
> >
> >
> >
> >--
> >Jay Brenneman
> >
> >--
> >For LINUX-390 subscribe / signoff / archive access instructions,
> >send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> >visit
> >http://www.marist.edu/htbin/wlvindex?LINUX-390
> >--
> >For more information on Linux on System z, visit
> >http://wiki.linuxvm.org/
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Ruby on rails?

[Michael MacIsaac]

Does anyone have Ruby on rails running on zLinux?

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Redmine on zLinux?

[Michael MacIsaac]

Rob,

I have zlib.  Looks like it also needs Ruby on Rails.  Does that run on
zLinux?

Thanks.

-Mike

On Fri, Mar 10, 2017 at 2:18 AM, Rob van der Heij <rvdh...@gmail.com> wrote:

> You probably need zlib-devel or whatever package your distribution is
> shipping that in. The library is most certainly available for s390x.
>
> On 9 March 2017 at 21:52, Michael MacIsaac <mike99...@gmail.com> wrote:
>
> > Hello list,
> >
> > Has anyone tried to install redmine on zLinux ( see
> > http://www.redmine.org/
> > )
> >
> > We are getting the error "cannot load file zlib" when trying to install
> the
> > co-req bundler.
> >
> > Thanks.
> > --
> >  -Mike MacIsaac
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> > visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > --
> > For more information on Linux on System z, visit
> > http://wiki.linuxvm.org/
> >
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Redmine on zLinux?

[Michael MacIsaac]

Hello list,

Has anyone tried to install redmine on zLinux ( see http://www.redmine.org/
)

We are getting the error "cannot load file zlib" when trying to install the
co-req bundler.

Thanks.
--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: High Kernel CPU usage z/vm 6.3 redhat 7.3

[Michael MacIsaac]

Sheldon,

A quick 'google' found this hit:
http://serverfault.com/questions/385360/mysql-high-sy-kernel-cpu-time

-Mike M

On Wed, Feb 15, 2017 at 9:06 AM, Sheldon Davis 
wrote:

> Hi
>
> We are in the process installing new z/Linux guests and are experiencing
> high kernel CPU usage.
> The guests  run on XFS file system
>
> Thanks in advance for any advice
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: EPEL

[Michael MacIsaac]

Cool!

Nice work Neale.

-Mike

On Mon, Feb 13, 2017 at 9:55 PM, Neale Ferguson 
wrote:

> The EPEL for ClefOS (CentOS) 7 is now available at
> http://download.sinenomine.net/clefos/epel7/
>
> There are around 13,000 (binary) packages for Linux on z along with their
> source in this repository:
>
> s390x:  7368
> noarch: 5589
> srpms:  6547
>
> These packages should be fine to run under 7.3 of RHEL as well.
>
> Neale
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

zoom 2.01

[Michael MacIsaac]

Hello IBMVM and linux-390 listers and lurkers,

I just uploaded zoom 2.01 to SourceForge:
https://sourceforge.net/projects/system-zoom/files

Here are the line items:
Version 2-01 - Jan 30, 2017
-) Added command zchexpiration to reset nodes' expiration date
-) Changed dates to seconds since 1/1/70 not days so reversing date is exact
-) Added 4 console commands to store and show z/VM consoles
-) Added 3 preference commands to store and show user preferences


--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Typescript on zLinux?

[Michael MacIsaac]

Hi,

Has the typescript environment been ported to zLinux (superset of
JavaScript that 'transpiles' to JavaScript)?

I have a SLES 12 SP1 system and got node.js and npm installed, but npm
can't seem to find typescript.

Thanks.

--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Having trouble getting started.

[Michael MacIsaac]

Another issue I vaguely remember is the FTP home directory.
If the home directory when you ftp is something like /home/ftp/ and your
install directory is something like /sles/iso/, then the install files will
be looked for in /home/ftp/sles/iso/ where they may not be found.

Hope this helps.

-Mike

On Thu, Jan 5, 2017 at 4:35 PM, Hamilton, Robert  wrote:

>  On 1/5/2017 at 03:51 PM, Mike Walter
> > wrote:
> >> Rob,
> >>
> >> There's an FTP exit used to authorize users on z/VM to access the HMC
> >> DVD drive.  I don't recall the name of the IBM provided sample exit,
> >> but it wasn't too difficult to find in the TCPIP manuals.
> >>
> >> I set ours up to authorize specific ID's, and to MSG OP when any
> >> attempt was made to FTP using the HMC DVD drive -- clearly pointing out
> >invalid attempts.
> >> That way both good and invalid attempts are logged.
> >>
> >> That exit was needed in addition to connecting the DVD drive to the
> >> proper LPAR from the HMC.
> >
> >That would only be true if
> >1. They had z/VM installed.
> >2. They were trying to have z/VM access the DVD drive for TCP/IP.
> >
> >Neither is the case here.
> >
> >
> >Mark Post
>
>
> The documentation on the HMC is "funny" here (Appendix H); if I need to
> access the DVD via FTP, I need to go to Configure Network Setup (or
> something very close to that), which does not seem to be an option
> anywhere. HA.
> Then, it says I should use "Enable FTP Access to Mass Storage Media",
> which I kinda found by accident. When I go there, it asks for the IP
> address of the server that will be accessing this DVD drive, so I give it
> an existing IP address, only to have it tell me that
>
> (A) There's no media in the drive, and
> (B) I can't read it anyway because the file system is...unknown.
>
> And then, after I Enable FTP Access Blah Blah it says I can Load from
> Removable Media. Or Server.
>
> There is also an Access Removable Media, that also says there's no actual
> media in there.
>
> Sohardware problem? I don't know whether this DVD drive has been used
> since the z114 was installed. What's the MTBF for something you don't use?
>
> R;
>
>
> Rob Hamilton
> Sr. System Engineer
> Chemical Abstracts Service
> A division of the American Chemical Society
>
>
> Confidentiality Notice: This electronic message transmission, including
> any attachment(s), may contain confidential, proprietary, or privileged
> information from Chemical Abstracts Service ("CAS"), a division of the
> American Chemical Society ("ACS"). If you have received this transmission
> in error, be advised that any disclosure, copying, distribution, or use of
> the contents of this information is strictly prohibited. Please destroy all
> copies of the message and contact the sender immediately by either replying
> to this message or calling 614-447-3600.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: XMAS gift Ubuntu ooRexx 4.2 for s390x

[Michael MacIsaac]

Rick,

I found Ubuntu was able to convert an RPM to a DEB with the alien command -
example in "The zoom Cookbook".

-Mike

On Tue, Dec 27, 2016 at 7:40 PM, Rick Troth  wrote:

> On 12/24/2016 10:51 AM, Dave Jones wrote:
> > I have created a Ubuntu ooRexx 4.2 .deb install file for the s390x
> > architecture, 64 bit. It has been tested on Ubuntu 16.04.1 LTS running
> as a guest of z/VM 6.3.
> > If anyone would like it, it can be found here:
> >
> > http://www.vsoft-software.com/oorexx_4.2.0-1_s390x.deb
> >
> > If anyone want the 32 bit version of ooRexx, drop me a note off list.
> > Happy Holidays.
>
> Awesome!
>
> You gotta show me how to build a DEB file. (Figgered out RPMs a while
> back.)
>
> There's a 32 bit version here ...
>
> rsync://pk.casita.net/opt/oorexx-4.2.0/
>
>
>  ... but it's compiled with a Chicory prefix. (So it's not necessarily
> interesting for simple payloading into a DEB file.)
>
> -- R; <><
>
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
 -Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

zoom 2.0

[Michael MacIsaac]

Merry ${yourFavoriteHoliday},

The zoom 2.0 package is now available on SourceForge at:
https://sourceforge.net/projects/system-zoom/files

It is an open source systems management tool designed specifically for z/VM
and Linux on the mainframe. If you have z/VM and mainframe hardware, it
should allow you to easily do "Private Cloud".

It adds (or removes) the following function from zoom 1.24:
1) 'Node-groups' have been replaced with a simpler two-level grouping
mechanism with the first level based on Linux groups.
2) Quotas for virtual CPUs and memory by group have been added -
administrators can set quotas.
3) The ability to specify a single zoom user which simplifies SSH key
management (but adds to audit-trail maintenance).
4) SMAPI is now required if operations are to be performed, previously it
was optional
5) Linux Systems are now locked when operations are being performed on them.
6) The creation and expiration day of Linux systems are maintained and can
be configured.
7) Event logging is now centralized on a primary server and duplicated if a
second server exists.
8) 'Appliances' in OVF format have been replaced with user exits for
'Build', 'Rebuild' and 'Destroy'.
9) The RESTful API has been significantly enhanced and is now driven by a
single input file.
10) "The zoom Cookbook" 180 page PDF is updated with all the details.

On the down side:
1) The Web UI is now deprecated as it is "data-structure-centric". The
front end is more useful when it is "operation-centric".
The existing Web UI scripts are still included for reference, but will
probably not be updated.  If there is a new operation-centric Web front
end, it will probably be packaged as a separate RPM so front-ends can
easily be switched in and out.
2) 'Build', 'Rebuild' and 'Destroy' operations are not fully functional -
the moving parts need to be coded. You would have to copy userexits.stubs
to userexits and write code to implement the function.

One more addition: The RESTful API is a great mechanism of driving a
regression test. To improve code quality a regression test has been written
and is being employed. A sample script and input file have been added.  See
regrtest and regrtest.input in the /usr/local/share/zoom/ directory.

I hope this helps the community.

-Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Root, sudo, su and preserving audit trail

[Michael MacIsaac]

> You say your audit trail is lost but then cite environment variables.
> Don't count environment variables as "audit". Ever.
With Apache password-protected directories tied to LDAP, this seems to be
working. Users must authenticate to get in to the system from a browser. We
then have AUTHENTICATE_UID or REMOTE_USER set.  The user is passed on from
our scripts that perform operations.  I'm not sure how that can be
circumvented, at least from the Web.  It's SSH sessions that are trickier.

> Both 'su' and 'sudo' are logged.
Yes, of course, good point! So now I will try using 'sudo logger' to log
operations from our scripts and then we will have a complete audit trail in
the syslong (usually /var/log/messages).

Re: sudo and history, yes we are good there, but also good points.

Thanks Rick!

-Mike M


On Tue, Dec 20, 2016 at 11:38 AM, Rick Troth <r...@casita.net> wrote:

> Remember that some of the audit trail will be in your SYSLOG traffic.
>
>
> On 12/19/2016 09:12 AM, Michael MacIsaac wrote:
> > We cannot SSH as root in our organization which is good for preserving
> > audit trail because all users must use their own credentials.
>
> And that's a GOOD thing.
> Many customers either don't know this method (and why would they?) or
> don't like it (because it's an added step, annoying). Security isn't
> easy and isn't exactly fun.
>
>
> > I (but not all users) can then 'su to root', and my login user is
> preserved
> > in the environment variable SUDO_USER.
>
> The concept "su to root" takes a couple different forms.
> You can 'su' to root from (e.g.) mike if you know the password.
> (Password maint is a pain, but let's not open that can-o-worms just
> yet.) Clearly you want to use 'sudo' instead. Good!
>
>
> > However, then as root I can 'su to another user' and the audit trail
> seems
> > to be lost.  Has anyone solved this issue?
>
> You say your audit trail is lost but then cite environment variables.
> Don't count environment variables as "audit". Ever.
>
> Both 'su' and 'sudo' are logged. That's your audit trail.
> Best practice w/r/t audit would be to fan-out SYSLOG traffic both
> locally and remotely.
> The local copy is per-host unique for per-host troubleshooting. The
> remote copy is untouchable by a malicious user or an intruder hitting a
> specific host.
>
> Put selected users, or (better) selected groups, into /etc/sudoers then
> let them 'sudo su -' as needed.
> Break that down: 'sudo' is the magical verb letting you "do stuff",
> controlled by /etc/sudoers.
> 'su' is the stuff you want to do (and the doing gets logged), and the
> lone dash "-" means "reprofile",
> establishing a fresh environment as if you logged on as that user (as if
> you logged in as root).
>
> Forcing the profile means everyone gets a consistent environment.
> It starts with /etc/profile and traditionally then sources
> $HOME/.profile, but BASH skews things.
> (Am omitting those details for the time being. Not everyone runs BASH,
> not even all Linux.)
>
> Most shells have command history. That's another audit trail.
> BASH has a nice feature that you can get timestamped history. Very nice!
>
> At one shop, some even wanted keystroke logging. Want that too?
>
> -- R; <><
>
>
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Root, sudo, su and preserving audit trail

[Michael MacIsaac]

Mark,

Thanks for the suggestion, but it seems I can't have it both ways:

# su -p zadmin
mkdir: cannot create directory â/rootâ: Permission denied
chmod: cannot access â/root/.bash_history.dâ: Permission denied
bash: /root/.bashrc: Permission denied
$ exit
# su -p - zadmin
su: ignore --preserve-environment, it's mutually exclusive to --login.


On Mon, Dec 19, 2016 at 3:37 PM, Mark Post <mp...@suse.com> wrote:

> >>> On 12/19/2016 at 09:12 AM, Michael MacIsaac <mike99...@gmail.com>
> wrote:
> > Hi,
> >
> > We cannot SSH as root in our organization which is good for preserving
> > audit trail because all users must use their own credentials.
> >
> > I (but not all users) can then 'su to root', and my login user is
> preserved
> > in the environment variable SUDO_USER.
> >
> > However, then as root I can 'su to another user' and the audit trail
> seems
> > to be lost.  Has anyone solved this issue?
>
> Some time back Novell had a product called Privileged User Manager.  I
> don't know if it's still around or not.  But, something like that is going
> to be necessary to accomplish a really good audit trail.
>
> One possibility to do exactly what you asked for, that you didn't mention
> was that instead of the root user using su, the scripting (or users) could
> have root use sudo instead.  Also, I don't know if you've tried it or not,
> but the su command has the "-m" and "-p" options to preserve the
> environment.  In my (brief) testing, that seems to do what you want.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Root, sudo, su and preserving audit trail

[Michael MacIsaac]

Steve,

Yes, I just confirmed the same results on RHEL, SLES and Ubuntu (in
alphabetical order :))

   -Mike

On Mon, Dec 19, 2016 at 9:21 AM, Gentry, Steve <
steve.gen...@westernsouthernlife.com> wrote:

> Mike, is this distro dependent or does it affect all distros?
> Thanks,
> Steve
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
> Michael MacIsaac
> Sent: Monday, December 19, 2016 9:12 AM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Root, sudo, su and preserving audit trail
>
> Hi,
>
> We cannot SSH as root in our organization which is good for preserving
> audit trail because all users must use their own credentials.
>
> I (but not all users) can then 'su to root', and my login user is
> preserved in the environment variable SUDO_USER.
>
> However, then as root I can 'su to another user' and the audit trail seems
> to be lost.  Has anyone solved this issue?
>
> # env | grep mike
> USER=mike
> ...
> # sudo -i
> mike's password:
> # env | grep mike
> SUDO_USER=mike   # su - zadmin env | grep mike
> 
>
> Please don't say just don't allow root to su to another user - it is
> necessary.  What I want is to preserve the SUDO_USER value with the initial
> login ID no matter how many times su is used.
>
> Any thoughts would be appreciated.
>
> Thanks.
>
> -Mike MacIsaac
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions, send
> email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Root, sudo, su and preserving audit trail

[Michael MacIsaac]

Christian,

Thanks for the quick reply. That is good input.

-Mike

On Mon, Dec 19, 2016 at 9:28 AM, Christian Ehrhardt <
christian.ehrha...@canonical.com> wrote:

> On Mon, Dec 19, 2016 at 3:12 PM, Michael MacIsaac <mike99...@gmail.com>
> wrote:
>
> > # env | grep mike
> > USER=mike
> > ...
> > # sudo -i
> > mike's password:
> > # env | grep mike
> > SUDO_USER=mike  
> > # su - zadmin
> > env | grep mike
> > 
> >
> > Please don't say just don't allow root to su to another user - it is
> > necessary.  What I want is to preserve the SUDO_USER value with the
> initial
> > login ID no matter how many times su is used.
> >
> > Any thoughts would be appreciated.
> >
>
> Hi Mike,
> SUDO_USER is only a helper, relying on it appears too brittle to me.
> You might loose the environment intentionally or unintentionally anyway.
> Especially for any real malicious attempt.
> E.g.:
> $ echo $USER
> paelzer
> $ sudo -i
> root@lap:~# env | grep paelzer
> SUDO_USER=paelzer
> root@lap:~# unset SUDO_USER
> root@lap:~# env | grep paelzer
> # no "tracking" here anymore
>
> IMHO - auditd is the infrastructure for this job.
> It has some painful configuration depending on what you want but it is what
> is meant to do the task you asked for.
>
> I'm no expert on this, but this seems to be a good starter for your case:
> http://serverfault.com/questions/470755/log-all-commands-run-by-admins-on-
> production-servers/475134#475134
>
> P.S. be aware such auditing come at an overhead
>
>
> --
> Christian Ehrhardt
> Software Engineer, Ubuntu Server
> Canonical Ltd
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Root, sudo, su and preserving audit trail

[Michael MacIsaac]

Hi,

We cannot SSH as root in our organization which is good for preserving
audit trail because all users must use their own credentials.

I (but not all users) can then 'su to root', and my login user is preserved
in the environment variable SUDO_USER.

However, then as root I can 'su to another user' and the audit trail seems
to be lost.  Has anyone solved this issue?

# env | grep mike
USER=mike
...
# sudo -i
mike's password:
# env | grep mike
SUDO_USER=mike  
# su - zadmin
env | grep mike


Please don't say just don't allow root to su to another user - it is
necessary.  What I want is to preserve the SUDO_USER value with the initial
login ID no matter how many times su is used.

Any thoughts would be appreciated.

Thanks.

-Mike MacIsaac

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/