[CentOS-docs] ModularIT, the GPL modular service architecture, based on CENTOS
Hi all, I'm Agustín Benito, community Manager of ModularIT. Following the advices of the CENTOS crew that I met at FOSDEM a few days ago, I introduce ModularIT in this mailing list so the Centos community can take a look at it, since it is strongly related to this project. ModularIT is a SOA architecture based on virtualised services. Our goal is to save time in tedious activities allowing sysadmins to live longer ;). These are the major links: Web: http://www.modularit.org Description: http://www.modularit.org/wiki/modularit/ModularITDescription Mailing list: http://lists.modularit.org/mailman/listinfo/modularit-users Repossitory: http://www.modularit.org/repositories/show/modularit We are making big efforts in the internacioalisation and documentation part right now. I hope you find it interesting. Please feel free to ask me questions about it or join us through the mailing list. Saludos -- Agustín Benito Bethencourt (Toscalix) aben...@grupocpd.com ModularIT Community Manager http://www.modularit.org ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
[CentOS-docs] VPNC article
I have put the article on the wiki at http://wiki.centos.org/HowTos/vpnc I wasn't sure where to put in the main table of contents. In the end, I put it under security, using the FreeBSD ports as an example. It could have also gone under Network. As far as its actual location, as you can see from the link above, I just put it directly under howtos. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6 Buffy: Willow, you're alive. Willow: Aren't I usually? ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
[CentOS-announce] CESA-2009:0261 Moderate CentOS 3 i386 vnc - security update
CentOS Errata and Security Advisory CESA-2009:0261 vnc security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-0261.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/vnc-4.0-0.beta4.1.8.i386.rpm updates/i386/RPMS/vnc-server-4.0-0.beta4.1.8.i386.rpm source: updates/SRPMS/vnc-4.0-0.beta4.1.8.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update vnc\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B pgpD0hVzW8x84.pgp Description: PGP signature ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CESA-2009:0012 Moderate CentOS 4 i386 netpbm - security update
CentOS Errata and Security Advisory CESA-2009:0012 netpbm security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2009-0012.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/netpbm-10.25-2.1.el4.4.i386.rpm updates/i386/RPMS/netpbm-devel-10.25-2.1.el4.4.i386.rpm updates/i386/RPMS/netpbm-progs-10.25-2.1.el4.4.i386.rpm source: updates/SRPMS/netpbm-10.25-2.1.el4.4.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update netpbm\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B pgpqzV3t8RIMg.pgp Description: PGP signature ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CESA-2009:0261 Moderate CentOS 4 i386 vnc - security update
CentOS Errata and Security Advisory CESA-2009:0261 vnc security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2009-0261.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/vnc-4.0-12.el4.1.i386.rpm updates/i386/RPMS/vnc-server-4.0-12.el4.1.i386.rpm source: updates/SRPMS/vnc-4.0-12.el4.1.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update vnc\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B pgp7GairL5xMc.pgp Description: PGP signature ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CESA-2009:0261 Moderate CentOS 4 x86_64 vnc - security update
CentOS Errata and Security Advisory CESA-2009:0261 vnc security update for CentOS 4 x86_64: https://rhn.redhat.com/errata/RHSA-2009-0261.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/vnc-4.0-12.el4.1.x86_64.rpm updates/x86_64/RPMS/vnc-server-4.0-12.el4.1.x86_64.rpm source: updates/SRPMS/vnc-4.0-12.el4.1.src.rpm You may update your CentOS-3 x86_64 installations by running the command: yum update vnc\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0xBEFA581B pgp5rBpMEMmCv.pgp Description: PGP signature ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
Re: [CentOS-virt] Centos 5.2 Xen question?
Manuel Wolfshant wrote: On 02/10/2009 11:09 PM, Leam Hall wrote: Did this one ever get resolved? I'm having the same issue with a different card set. http://lists.centos.org/pipermail/centos-virt/2008-January/000192.html There are two issues described over there: a) support for Realtek 8111B b) dnsmasq I did not yet have the chance to test the 2.6.18-128 series of kernels, but even if the driver for RTL811B/C has not been solved, the solutions are in the wiki. As of dnsmasq.. I do not know, I have not tested that configuration. Now, could you please give more details about your problem ? Symptom exactly the same: vif0.0: received packet with own address as source address. Machine is a brand new CentOS 5.2 build Failed Kernel: 2.6.18-92.1.22el5xen dmesg | grep eth0: eth0: ADMtek Comet rev 17 at e084e000, FE:FF:FF:FF:FF:FF, IRQ 12. more /proc/cpuinfo processor : 0 vendor_id : AuthenticAMD cpu family : 6 model : 6 model name : AMD Athlon(tm) XP 1800+ stepping: 2 cpu MHz : 1533.095 cache size : 256 KB fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 mtrr pge mca cmov pat pse36 mmx fxsr sse syscall mp mmxext 3dnowext 3dnow up ts bogomips: 3067.95 I'll confess I'm new to CentOS 5.2 so there's probably some room for operator error. This was the only real Xen page I found: http://wiki.centos.org/HowTos/Virtualization/Introduction If there's an older kernel I need to use, that's fine. Let me know which one. I'm just setting things up to learn a few more skills and don't need the latest and greatest. Leam ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
[CentOS-es] ModularIT, una arquitectura de servicios virtualizados basada en CENTOS
Hola a todos, siguiendo la recomendación de los miembros del equipo de CENTOS que asistieron a FOSDEM el pasado fin de semana, me presento en esta lista de correo con el fin de dar a conocer el proyecto que presentamos en ese evento, además de en otros como la OSWC'08 celebrada en Málaga en otoño. ModularIT usa CENTOS ampliamente y está orientado a ahorrar tiempo en tareas tediosas para administradores de sistemas, así como mejorar la eficiencia en la gestión de grandes redes de servicios distribuidos. Se trata de un proyecto, no sólo libre, sino que invita a la participación de todo aquel que lo desee, no sólo desde el punto de vista técnico sino empresarial. Los principales enlaces son: Web: http://www.modularit.org Descripción: http://www.modularit.org/wiki/modularit/ModularITDescription Lista de correo: http://lists.modularit.org/mailman/listinfo/modularit-users Repositorio: http://www.modularit.org/repositories/show/modularit saludos -- Agustín Benito Bethencourt (Toscalix) aben...@grupocpd.com ModularIT Community Manager http://www.modularit.org ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS] What is the System Event Log?
On Wednesday 11 February 2009, Bill Campbell wrote: On Tue, Feb 10, 2009, nate wrote: Timothy Murphy wrote: ... How would I access it if it were available? You have to configure it first, how you do that depends, sometimes you can configure it via openipmi. I just installed the OpenIPMI-tools package with yum yesterday on a Supermicro box that seems to be having overheating or fan problems. This is my first time looking into IPMI monitoring, but looking at the contents of the OpenIPMI-tools rpm package, it seems to be missing some of the configuration files necessary to run things like the ipmievd daemon (e.g. no /etc/init.d/ipmievd script, only /usr/share/ipmitool/ipmievd.init.redhat Yes, ipmievd is lacking a proper init.d script and if you want to run it the file you found above is probably the way to go (copy it to /etc/init.d/..., chkconfig, etc.). But evd is not needed to talk to the IPMI-controller/BMC/service-processor/whatever. To talk locally the only thing needed is to start the ipmi service (init.d-file from the OpenIPMI package) and then, for example, ipmitool sel list. /Peter , and the so sample of the /etc/sysconfig/ipmievd file). Any suggestions on documentation covering configuration on CentOS systems? I have no problems with RTFM, if only I know where to find TFM. Bill signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] What is the System Event Log?
On Tuesday 10 February 2009, Timothy Murphy wrote: Peter Kjellstrom wrote: However, with or without /dev/ipmi0 you can access the BMC remotely with (assuming you have an IP configured etc.). I'd never heard of BMC (I am not an expert in this area, to put it mildly) BMC, on-board baseboard management controller, IPMI-controller, service processor, ... The piece of hardware that runs independently from the main part of the server and that typically does things like: * keep the SEL * perform power controll * monitor temperatures and fan speeds * provide serial port over LAN functionality but on googling for dell bmc I found http://www.dell.com/downloads/global/power/ps1q05-20040219-Brumley.pdf where I learnt that The on-board baseboard management controller (BMC) is a powerful and flexible device that can be used to effectively manage eighth-generation Dell servers such as the PowerEdge 1850, PowerEdge 2800, and PowerEdge 2850. This suggests to me that my modest PowerEdge T105 probably does not support this service. Googling a bit it does seem that the T105 lacks a BMC :-( Earlier cheap servers from dell (sc1435 for example) did have it... How would I access it if it were available? I see a large number of BMC-related ports in /etc/services , but none of them seem to be active on my server. The BMC is independent from the OS, think a small separate server inside your real server. If a server has one you access it in one of the following ways: * service ipmi start, local access (requires OpenIPMI kernel driver support) * via LAN to a dedicated management ethernet port on the server * via LAN to a shared ethernet port on the server The LAN access way depends on the BMC having a connection to an ethernet port and a working TCP/IP configuration. /Peter signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] smartd and 3ware 9xxx configs
On Wednesday 11 February 2009, Jim Perrin wrote: I'm looking to do a bit more monitoring of my 3ware 9550 with smartd, and wanted to see what others were doing with smart for monitoring 3ware hardware. Do you have the smartd.conf configured to test, or simply monitor health status? Are you monitoring the drive as centos sees it (/dev/sdX) or are you using the 3ware /dev/twaX for monitoring? I don't use smartd against them but I do run smartctl from time to time. I have had issues with using /dev/sdX and now only use /dev/twaX (but I can't really remember what bit me...). /Peter Opinions and discussions are welcome :-P signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache
Hi, Thanks for your reply, If I have my content in a centralised system like amazon s3, will I have problem syncronizing? Thanks and Regards Marky On Tue, Feb 10, 2009 at 3:38 PM, Sergej Kandyla sk.p...@gmail.com wrote: Anto Marky пишет: Hi, I am new to clustering and loadbalancing in apache, What is best way of doing it? How do I do the clustering and what tools do I need to use? Do I have those tools, I use CentOS , Do i have any tools in CenOs which comes default in it? And how do I do apache load balancing? should I rely on apache forums or mailing list or is there any way or tool I can use in CentOS? Can any throw some vague Idea on how to do it so that I start reading documents before I do it? Hi, apache is good as backend server for dynamic applications. You could use something like nginx, haproxy as frontend for balancing multiple backend servers. I'm using nginx. This light web server could serve many thousand concurrent connections! It works great! look at http://wiki.codemongers.com/NginxLoadBalanceExample http://blog.kovyrin.net/2006/08/25/haproxy-load-balancer/lang/en/ http://blog.kovyrin.net/2006/05/18/nginx-as-reverse-proxy/lang/en/ and http://highscalability.com/ Another issue is keeping content synchronizing between apache servers. There are several solutions: NAS\SAN or programbased DRBD http://en.wikipedia.org/wiki/DRBD. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache
Anto Marky wrote: If I have my content in a centralised system like amazon s3, will I have problem syncronizing? s3 is an example of a DE-centralized distributed cloud system. by the simple fact that you're asking such a vague and generic question, I'd hazard to guess, yes, you will have problems with synchronization whatever it is you're doing, depending on your expectations and experience, of course. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache
John R Pierce schrieb: Anto Marky wrote: If I have my content in a centralised system like amazon s3, will I have problem syncronizing? s3 is an example of a DE-centralized distributed cloud system. by the simple fact that you're asking such a vague and generic question, I'd hazard to guess, yes, you will have problems with synchronization whatever it is you're doing, depending on your expectations and experience, of course. Hm. He could try reverse-proxying his content locally ;-) Rainer ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with mysql multi-master after update.
On 2/10/2009 10:28 PM, J Potter wrote: For what it's worth, I haven't seen this on any systems I manage when going from 5.0.22-5.0.45, which include permutations of master-slave and master-master. Is there anything useful in /var/log/mysqld.log? Just that I cant't read the incremental that does exist anymore. []s. after I updated from mysql-5.0.22 CentOS 5.0 to mysqld-5.0.45 in CentOS 5.2, mysql looses master-slave sync after one node reboots. I've noticed that the slave doest not respect the informantion on master.info, instead, it tries to read the informantion from the master server file inc-index.index ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache, using nginx
Rainer Duffner пишет: Sergej Kandyla schrieb: Hi, apache is good as backend server for dynamic applications. You could use something like nginx, haproxy as frontend for balancing multiple backend servers. I'm using nginx. This light web server could serve many thousand concurrent connections! It works great! look at http://wiki.codemongers.com/NginxLoadBalanceExample http://blog.kovyrin.net/2006/08/25/haproxy-load-balancer/lang/en/ http://blog.kovyrin.net/2006/05/18/nginx-as-reverse-proxy/lang/en/ and http://highscalability.com/ Yup. NGINX is probably the fastest way to serve content nowadays. But content has to be static and be available as a file (AFAIK) directly to NGINX. No, nginx could serve any kind of content via ngx_http_proxy_module module http://wiki.codemongers.com/NginxHttpProxyModule For example I'm using nginx as reverse proxy for tomcat servers\applications. Also I've wrote some article about using nginx in shared hosting sphere. Look at http://directadmin.com/forum/showthread.php?t=27344 When content located on the some server (or via NAS\SAN) nginx could serve this content directly using some efficient mechanisms like sendfile http://wiki.codemongers.com/NginxHttpCoreModule#sendfile For serving static content nginx even more times efficient than ftp!! On some servers with low-power hardware like celeron\sempron processors and 512M ram I have upload rate nearly 100mbit, It's not limit for nginx, its a limit of sata disks and chanel to that servers :) As for load-balancing: http://wiki.codemongers.com/NginxHttpUpstreamModule http://barry.wordpress.com/2008/04/28/load-balancer-update/ There's also varnish, if you can't meet the above provision easily. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Possible CentsOS licensing issue
Dear Friends, I have few questions. 1. I have a device on which I have installed CentOS 5.2 as an operating system. Now I want to sell this device. Will there be any issue ? points to keep in mind: a. There are no changes in OS. (it is just a stripped down image of original OS) b. I have installed few generic user space applications of my own installed in that OS. I do not want to violate GPL or any other licenses. That's why to make sure I want to confim from you folks. Thanks Puneet ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache
Florin Andrei пишет: Sergej Kandyla wrote: apache is good as backend server for dynamic applications. You could use something like nginx, haproxy as frontend for balancing multiple backend servers. I'm using nginx. This light web server could serve many thousand concurrent connections! It works great! In addition to the user-space solutions mentioned above, there are also kernel-level solutions, such as Linux Virtual Server, or LVS: http://www.linuxvirtualserver.org/ IMHO it's not right compare light web server with Virtual servers. Look at http://www.linuxvirtualserver.org/whatis.html In this scheme you could naturally use nginx as loadbalancer on the Load Balancer Linux Box. Also The mission of the project is to build a high-performance and highly available server for Linux using clustering http://en.wikipedia.org/wiki/Computer_cluster technology, which provides good scalability, reliability and serviceability. If you need high-availability you could also use XEN\KVM or OpenVZ. These technologies are actively developing... XEN\KVM are supported natively in the RHEL\Centos kernel. I'm prefer OpenVZ as light-weight virtualization. http://wiki.openvz.org/HA_cluster_with_DRBD_and_Heartbeat I am under the impression that, speaking in general, user-space balancers provide more features (are smarter), while the kernel-space ones are faster (provide more in terms of raw speed and max load). I could be wrong. Can anybody provide a performance comparison between, say, nginx and LVS? (max connections, max new connections rate, max bandwidth, max packets per second, etc.) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problems with mysql multi-master after update.
On 2/11/2009 12:46 AM, Jim Perrin wrote: On Mon, Feb 9, 2009 at 7:33 AM, Alessandro Ren alessandro@opservices.com.br wrote: e incremental.01 on the master and this causes the problem. In 5.0.22 this would not happen, this does not happen as I have servers running this version and after the reboot, it starts syncing on the right incremental. Any idea? While I haven't seen this going from 0.22 to 0.45, did you run mysql_upgrade following your upgrade? Last I had this issue my table structure wasn't quite what the server was expecting, and running mysql_upgrade was the solution. I tried it , but it did't help. I just rebooted one of the nodes and I am getting this error in the logs. 090211 9:07:41 [ERROR] Failed to open the relay log '/var/run/mysqld/mysqld-relay-bin.12' (relay_log_pos 358860475) 090211 9:07:41 [ERROR] Could not find target log during relay log initialization 090211 9:07:41 [ERROR] Failed to initialize the master info structure 090211 9:07:41 [Note] /usr/libexec/mysqld: ready for connections. Version: '5.0.45-log' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution Afeter deleting master.info and relay-log.ingo I get the incremental error: 090211 9:23:23 [ERROR] Error reading packet from server: File './incremental.03' not found (Errcode: 2) ( server_errno=29) 090211 9:23:23 [Note] Slave I/O thread: Failed reading log event, reconnecting to retry, log 'FIRST' position 4 090211 9:23:23 [Note] Slave: connected to master 'r...@192.168.10.207:3306',replication resumed in log 'FIRST' at position 4 090211 9:23:23 [ERROR] Error reading packet from server: File './incremental.03' not found (Errcode: 2) ( server_errno=29) After fixing de inc-index on the master en restarting, abd restarting the slave, it workis fine: Version: '5.0.45-log' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution 090211 9:26:14 [Note] Slave SQL thread initialized, starting replication in log 'FIRST' at position 0, relay log '/var/run/mysqld/mysqld-relay-bin.05' position: 98 090211 9:26:14 [Note] Slave I/O thread: connected to master 'r...@192.168.10.207:3306', replication started in log 'FIRST' at position 4 Any tips? On 5.0.22 I never had this problem. Tks. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Possible CentsOS licensing issue
Puneet Goel puneet.maill...@gmail.com schreef in bericht news:4b08f1290902110258i53788379gdfc266c2359a7...@mail.gmail.com... Dear Friends, I have few questions. 1. I have a device on which I have installed CentOS 5.2 as an operating system. Now I want to sell this device. Will there be any issue ? points to keep in mind: a. There are no changes in OS. (it is just a stripped down image of original OS) b. I have installed few generic user space applications of my own installed in that OS. I do not want to violate GPL or any other licenses. That's why to make sure I want to confim from you folks. Thanks Puneet ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Hi, IMHO, if I understand the GPL lic correctly, in general you may ask what you want, but you MUST provide ALL sources including your modified and or added applications, and include no other lic restrictions than the GPL lic itself. If you want to keep you apps closed source, than you should consult a GPL specialist layer. It makes a difference how the application is build and or linked against other libs. Can anyone confirm or improve the above 2 liner statement? Recent GPL lic disputes all boilled down to not providing the (modified) sources John ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] installation needs libpng but rpm is there
Hi I got an error configure: error: png library not found. please install libpng but I check rpm is installed libpng-1.2.10-7.1.el5_0.1 How can I do? Thank you __ Yahoo! Canada Toolbar: Search from anywhere on the web, and bookmark your favourite sites. Download it now at http://ca.toolbar.yahoo.com. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] installation needs libpng but rpm is there
configure: error: png library not found. please install libpng but I check rpm is installed libpng-1.2.10-7.1.el5_0.1 How can I do? what do you install? libpng-devel? t ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] gnome-sound-recorder or similar?
I have gnome-sound-recorder on my FC10 system, but cannot find it for Centos. Is there a way to get it for Centos or a similar package? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Possible CentsOS licensing issue
It would be very helpful if you could tell your OE to use quoting () instead of just clutching your reply below the original without any distinction. I know that it can do this. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] gnome-sound-recorder or similar?
If you like a console text tool, you can use the arecord. A tool of alsa's project. []s Renato de Oliveira Diogo Bacharel em Ciência da Computação UNESP - Bauru LPIC1 - Linux Professional Institute Certification - Nível 1 renato.di...@gmail.com renato.di...@yahoo.com.br On Wed, Feb 11, 2009 at 11:26, Robert Moskowitz r...@htt-consult.com wrote: I have gnome-sound-recorder on my FC10 system, but cannot find it for Centos. Is there a way to get it for Centos or a similar package? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache, using nginx
Sergej Kandyla wrote: No, nginx could serve any kind of content via ngx_http_proxy_module module http://wiki.codemongers.com/NginxHttpProxyModule For example I'm using nginx as reverse proxy for tomcat servers\applications. Is there some advantage to this over apache with mod_jk? -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] installation needs libpng but rpm is there
Ann kok wrote on Wed, 11 Feb 2009 05:15:33 -0800 (PST): configure: error: png library not found. please install libpng This signals that you are not using an rpm. Get an rpm version of what you want to install. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] installation needs libpng but rpm is there
From: Kai Schaetzl mailli...@conactive.com Ann kok wrote on Wed, 11 Feb 2009 05:15:33 -0800 (PST): configure: error: png library not found. please install libpng This signals that you are not using an rpm. Get an rpm version of what you want to install. Or just install libpng-devel as suggested... JD ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache, using nginx
Les Mikesell пишет: Sergej Kandyla wrote: No, nginx could serve any kind of content via ngx_http_proxy_module module http://wiki.codemongers.com/NginxHttpProxyModule For example I'm using nginx as reverse proxy for tomcat servers\applications. Is there some advantage to this over apache with mod_jk? afaik mod_jk is only available for RHEL4\Centos4 i.e apache 2.0 (of course you could compile it manually for apache 2.2 coming with centos5) So, recommended way for centos5 (apache 2.2) is using mod_proxy (mod_proxy_ajp) nginx http_proxy module is universal complex solution. Also apache working in prefork mode (in general cases), I don't know does mod_jk\mod_proxy_ajp works in the worker-MPM mode... In the preforking mode apache create a child on each incoming request, so it's too much expensive for resource usage. Also apache spend about 15-30Kb mem for serving each tcp connection at this time nginx only 1-1.5Kb. If you have, for example, abount 100 concurrent connections from different IPs there is nearly 100 apache forks... it's too expensive. If you don't need full power of apache flexibility as server for dynamic applications, why use it for simple job such as proxing ? So, I think nginx is great as light frontend server. example config for proxing to tomcat backend: location / { rewrite ^/$ /tomcatapp/ redirect; } location /tomcatapp { proxy_pass http://localhost:8080/tomcatapp; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_connect_timeout 120; proxy_send_timeout 120; proxy_read_timeout 180; } ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clamAV problem
On Friday 06 February 2009 10:31, Kai Schaetzl wrote: Anne Wilson wrote on Fri, 6 Feb 2009 07:50:58 +: WARNING: Clamd was NOT notified: Can't connect to clamd through /tmp/clamd.socket well, is it started, does the socket exist? Kai First, thanks and apologies to all who responded. I've been away a few days and there's always a lot of catching up to be done when I get back. Checking Olaf's list, I realised that clamav was installed and I had falsely believed that clamd would be installed at the same time. Since there was an old config and log file, I hadn't noticed. I've now installed it, chkconfig'd it, touched the socket, and I'll wait to see what is reported in the morning. Thanks again Anne ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] vsftpd virtual users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dnk wrote: ... I just need to have the option to have a read only account able to access another users directory. There is no main directory that all users work out of. Don't know how possible that could be. Remember that each user is in a chrooted environment, each user is confined into its own directory. Best Regards, - -- Alain Reguera Delgado a...@ciget.cienfuegos.cu -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFJkuk2yXxCQEoXDZARAosxAKCHwOcqaR9VvXqG7I3PvuuofvRkrQCfc3JI yLaTrIuQhGjQ9+jhKKkaLy8= =Hn+R -END PGP SIGNATURE- ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Possible CentsOS licensing issue
Kai Schaetzl mailli...@conactive.com schreef in bericht news:va.36b6.012f5...@news.conactive.com... It would be very helpful if you could tell your OE to use quoting () instead of just clutching your reply below the original without any distinction. I know that it can do this. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com It normally does, but the orriginal message is in HTML, so when the reply was ready, OE complained that the message was in HTML and recomended to convert it to text format, what I did. There the went lost. I missed that. John ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Possible CentsOS licensing issue
It would be very helpful if you could tell your OE to use quoting () instead of just clutching your reply below the original without any distinction. I know that it can do this. Kai It normally does, but the orriginal message is in HTML, so when the reply was ready, OE complained that the message was in HTML and recomended to convert it to text format, what I did. There the went lost. I missed that. John I have no idea why it in previous post failed and now worked. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache
Look at pound: http://www.apsis.ch/pound/ If you are concerned about traffic volume, you might consider running squid as a transparent proxy in front of pound. I.e.: request - squid - pound - apache Where squid will return the response for everything marked as cacheable and still fresh; and pound will take care of load balancing to apache. (Pound can inspect/insert cookies to send visitors to the same back-end node on subsequent requests.) On some of our setups, squid responds to 98% of the requests coming in, and is able to respond to an extremely insane high volume of requests. Other list users might be able to provide good stats as to what sort of volume they can support. (I'd be curious to hear what others have seen...) For HA: - 2 instances of squid, active/standby or active/active (i.e. two IP address in DNS for the public hostname, and have each squid instance pick up the others during failure). - 2 instances of pound, active/standby - N instances of apache Re: replication of content on your apache nodes, another poster suggested drbd. From my understanding, I do not think this is possible, since only one node can mount the drbd volume at a time. If you have shared data that needs to be seen across apache nodes, either stick it in SQL or mount an NFS volume across the nodes. (But then you have NFS in the picture, which might not be so good.) If your apache code is constant, then have a master apache node and write a shell script that runs rsync to push code changes out to the other instances. It's hard to get very specific about what's best for your setup without know the specifics of things like the data sync needs on the apache nodes, so take all of this with a grain of salt -- or as a default starting place. best, Jeff ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] vsftpd virtual users
On 11-Feb-09, at 7:05 AM, Alain Reguera Delgado wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dnk wrote: ... I just need to have the option to have a read only account able to access another users directory. There is no main directory that all users work out of. Don't know how possible that could be. Remember that each user is in a chrooted environment, each user is confined into its own directory. Best Regards, - -- Alain Reguera Delgado a...@ciget.cienfuegos.cu Well as far as I have made it, it is possible to share a directory by using a per user config option. It is geting hte different permissions I am having to deal with. Part of me thinks this would be easier using a real system account so I can restrict permissions using tools like chmod, etc. But I hate the idea of using system accounts for FTP. d ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] smartd and 3ware 9xxx configs
On Tue, 10 Feb 2009 at 9:42pm, Jim Perrin wrote I'm looking to do a bit more monitoring of my 3ware 9550 with smartd, and wanted to see what others were doing with smart for monitoring 3ware hardware. Do you have the smartd.conf configured to test, or simply monitor health status? Are you monitoring the drive as centos sees it (/dev/sdX) or are you using the 3ware /dev/twaX for monitoring? Opinions and discussions are welcome :-P Have you thought about tying tw_cli into nagios? That's one of my round-tuit projects. I'm sure there are already plugins for it, and it seems like you may get better info. -- Joshua Baker-LePain QB3 Shared Cluster Sysadmin UCSF ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] smartd and 3ware 9xxx configs
On Wed, Feb 11, 2009 at 12:17:09PM -0500, Joshua Baker-LePain wrote: On Tue, 10 Feb 2009 at 9:42pm, Jim Perrin wrote I'm looking to do a bit more monitoring of my 3ware 9550 with smartd, and wanted to see what others were doing with smart for monitoring 3ware hardware. Do you have the smartd.conf configured to test, or simply monitor health status? Are you monitoring the drive as centos sees it (/dev/sdX) or are you using the 3ware /dev/twaX for monitoring? Opinions and discussions are welcome :-P Have you thought about tying tw_cli into nagios? That's one of my round-tuit projects. I'm sure there are already plugins for it, and it seems like you may get better info. On a somewhat related note. I haven't yet looked into what 3ware does on the SNMP side. Does it include a MIB file? Anyone generating traps on bad disk events? Not hard to set up your own OID to run a shell script to check disk status, but traps are cooler. :) Ray ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Possible CentsOS licensing issue
John wrote on Wed, 11 Feb 2009 16:45:46 +0100: I have no idea why it in previous post failed and now worked. That is certainly somewhat better, thanks :-) It normally does, but the orriginal message is in HTML, so when the reply was ready, OE complained that the message was in HTML and recomended to convert it to text format, what I did. There the went lost. I missed that. You have to tell your OE to *not* answer in the format of the message, but always reply in plain text. Then you won't get this problem. I think. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache, using nginx
Sergej Kandyla wrote: nginx http_proxy module is universal complex solution. Also apache working in prefork mode (in general cases), I don't know does mod_jk\mod_proxy_ajp works in the worker-MPM mode... In the preforking mode apache create a child on each incoming request, so it's too much expensive for resource usage. Have you actually measured this? Preforking apache doesn't fork per request, it forks enough instances to accept the concurrent connection count plus a few spares. Each child would typically handle thousands of requests before exiting and requiring a new fork - the number is configurable. Also apache spend about 15-30Kb mem for serving each tcp connection at this time nginx only 1-1.5Kb. If you have, for example, abount 100 concurrent connections from different IPs there is nearly 100 apache forks... it's too expensive. A freshly forked child should have nearly 100% memory shared with its parent and other child instances. As things change, this will decrease, but you are going to have to store the unique socket/buffer info somewhere whether it is a copy-on-write fork or allocated in an event-loop program. If you run something like mod_perl, the shared memory effect degrades pretty quickly because of the way perl stores reference counts along with its variables, but I'd expect the base apache and most module code to be pretty good about retaining their inherited shared memory. If you don't need full power of apache flexibility as server for dynamic applications, why use it for simple job such as proxing ? So, I think nginx is great as light frontend server. It may be, but I'd like to see some real-world measurements. Most of the discussions about more efficient approaches seem to use straw-man arguments that aren't realistic about the way apache works or timings of a few static pages under ideal conditions that don't match an internet web server. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] smartd and 3ware 9xxx configs
Jim Perrin wrote: I'm looking to do a bit more monitoring of my 3ware 9550 with smartd, and wanted to see what others were doing with smart for monitoring 3ware hardware. Do you have the smartd.conf configured to test, or simply monitor health status? Are you monitoring the drive as centos sees it (/dev/sdX) or are you using the 3ware /dev/twaX for monitoring? Opinions and discussions are welcome :-P I run smart tests weekly in a staggered fashion during off hours on my 3ware arrays. Like this: /dev/twa0 -d 3ware,0 -H -l selftest -l error -o on -S on -s (O/../../1/18|S/../../2/22|L/../../3/01) -m root /dev/twa0 -d 3ware,1 -H -l selftest -l error -o on -S on -s (O/../../2/18|S/../../3/22|L/../../4/01) -m root I've found that the smart monitors are pretty good about giving me at least some warning about imminent drive failures when I do this. -- Benjamin Franz ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache, using nginx
Les Mikesell wrote: It may be, but I'd like to see some real-world measurements. Most of the discussions about more efficient approaches seem to use straw-man arguments that aren't realistic about the way apache works or timings of a few static pages under ideal conditions that don't match an internet web server. In my experience apache has not been any kind of noticeable bottleneck. At my last company we deployed a pair of apache reverse proxy nodes that did: - reverse proxy(188 rewrite rules) - HTTP compression (compression level set to 9) - mod_expires for some static content that we hosted on the front end proxy nodes - SSL termination for the portion of the sites that needed SSL - Header manipulation (had to remove some headers to work around IE browser issues with SSL) - Serve up a maintenance page when we took the site down for software updates(this was on another dedicated apache instance) traffic flow was: internet-BigIP-proxy-BigIP-front end web servers-BigIP-back end apps (utilizing BigIP's ability to transparently/effortlessly NAT traffic internal to the network, and using HTTP headers to communicate the originating IP addresses from the outside world). Each proxy node had 8 copies of apache going, 4 for HTTP and 4 for HTTPS, at the moment they seem to average about 125 workers per proxy node, and an average of 80 idle workers per node. CPU averages 3%, memory averages about 650MB(boxes have 3GB). When I first started at the company they were trying to do this via a low end F5 BigIP load balancer but it was not able to provide the same level of service at low latency(and that was when we had a dozen proxy rules). I love BigIPs but for proxies I prefer apache. It wasn't until recently that F5 made their code sudo multithreaded, until then even if you had a 4 CPU load balancer, the proxy stuff could only use one of those CPUs. Because of this limitation one large local customer F5 told me that they had to implement 5 layers of load balancers due to their app design depended on the full proxy support in the BigIPs to route traffic. Systems were dual proc single core hyperthreaded. They proxied requests for four dual proc quad core systems which seem to average around 25-35% CPU usage and about 5GB of memory usage(8GB total) a piece. At the company before that we had our stuff split out per customer, and had 3 proxy nodes in front and about 100 web servers and application servers behind them for the biggest customers, having 3 was just for N+1 redundancy, 1 was able to handle the job. And those proxies were single processor. At my current job 99% of the load is served directly by tomcat, the application on the front end at least is simple by comparison so there's no need for rewrite-type rules. Load balancing is handled by F5 BigIPs, as is SSL termination. We don't do any HTTP compression as far as I know. I personally would not want to load balance using apache, I load balance with BigIPs, and I do layer 7 proxying(URL inspection) with apache. If I need to do deeper layer 7 inspection then I may resort to F5 iRules, but the number of times I've had to do that over the past several years I think is maybe two. And even today with the latest version of code, our dual processor BigIPs cannot run in multithreaded mode, it's not supported on the platform, only on the latest greatest(ours is one generation back from the latest). I use apache because I've been using it for so long and know it so well, it's rock solid stable at least for me, and the fewer different platforms I can use reduces complexity and improves manageability for me. If I was in a situation where apache couldn't scale to meet the needs and something else was there that could handle say 5x the load, then I might take a look. So far haven't come across that yet. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] smartd and 3ware 9xxx configs
On Wed, Feb 11, 2009 at 12:17 PM, Joshua Baker-LePain jl...@duke.edu wrote: Have you thought about tying tw_cli into nagios? That's one of my round-tuit projects. I'm sure there are already plugins for it, and it seems like you may get better info. I actually did think about doing this, but this is for my home network, and I'm a little too lazy/busy currently to set up nagios for personal use. I might do that a bit later on if I'm feeling frisky, but for now I was just looking for quick-fix type checking. There are plugins for this already as you suggested, but I have no idea how well they actually function. -- During times of universal deceit, telling the truth becomes a revolutionary act. George Orwell ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] INIT: Id snmp respawning too fast: disabled for 5 minutes
Thanks for the reply. I've tried both init q and init u without any luck, the message still appeared five minutes later. Init did post a message that it was reloaded, so the command worked, yet the process is still complaining about this snmp id. Here's my inittab. It's fairly standard and I don't think any custom changes were made. # # inittab This file describes how the INIT process should set up # the system in a certain run-level. # # Author: Miquel van Smoorenburg, miqu...@drinkel.nl.mugnet.org # Modified for RHS Linux by Marc Ewing and Donnie Barnes # # Default runlevel. The runlevels used by RHS are: # 0 - halt (Do NOT set initdefault to this) # 1 - Single user mode # 2 - Multiuser, without NFS (The same as 3, if you do not have networking) # 3 - Full multiuser mode # 4 - unused # 5 - X11 # 6 - reboot (Do NOT set initdefault to this) # id:3:initdefault: # System initialization. si::sysinit:/etc/rc.d/rc.sysinit l0:0:wait:/etc/rc.d/rc 0 l1:1:wait:/etc/rc.d/rc 1 l2:2:wait:/etc/rc.d/rc 2 l3:3:wait:/etc/rc.d/rc 3 l4:4:wait:/etc/rc.d/rc 4 l5:5:wait:/etc/rc.d/rc 5 l6:6:wait:/etc/rc.d/rc 6 # Trap CTRL-ALT-DELETE ca::ctrlaltdel:/sbin/shutdown -t3 -r now # When our UPS tells us power has failed, assume we have a few minutes # of power left. Schedule a shutdown for 2 minutes from now. # This does, of course, assume you have powerd installed and your # UPS connected and working correctly. pf::powerfail:/sbin/shutdown -f -h +2 Power Failure; System Shutting Down # If power was restored before the shutdown kicked in, cancel it. pr:12345:powerokwait:/sbin/shutdown -c Power Restored; Shutdown Cancelled # Run gettys in standard runlevels co:2345:respawn:/sbin/agetty ttyS0 9600 vt100-nav 1:2345:respawn:/sbin/mingetty tty1 2:2345:respawn:/sbin/mingetty tty2 3:2345:respawn:/sbin/mingetty tty3 4:2345:respawn:/sbin/mingetty tty4 5:2345:respawn:/sbin/mingetty tty5 6:2345:respawn:/sbin/mingetty tty6 # Run xdm in runlevel 5 x:5:respawn:/etc/X11/prefdm -nodaemon Filipe Brandenburger wrote: Hi, On Tue, Feb 10, 2009 at 14:23, David Halik dha...@jla.rutgers.edu wrote: INIT: Id snmp respawning too fast: disabled for 5 minutes INIT: Id snmp respawning too fast: disabled for 5 minutes INIT: Id snmp respawning too fast: disabled for 5 minutes What does grep -i snmp /etc/inittab say? If there is really nothing, try init q to see if init is still using old contents of that file. If that does not help, try init u as well. If it still does not fix it, please post the full contents of your inittab so that we can help you fix the problem. HTH, Filipe ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- David Halik System Administrator OIT-CSS Rutgers University dha...@jla.rutgers.edu ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] rt_cache leak in 2.6.18
Hello, This is a CentOS 5.2 box configured as a router for a network handling about 200-300 Mbps, routing traffic to/from the internet for about 6,000 IPs. After about 2-3 days, the kernel complains about dst cache overflow and even thought it hasn't crashed, the network is un-responsive. All IP forwarding stops and the server cannot be reached from any network interfaces. After diagnosing the issue, it appears that there is a rt_cache leak in the kernel. At 5 minute intervals I collect the following two values: `/sbin/ip -o route ls cache | wc -l` `grep ip_dst_cache /proc/slabinfo | awk -F' ' '{ print $2; }'` The first value represents the number of cached routes in the network stack. The second value represents the number of cached route objects the kernel has allocated. After collecting the data for 8 hours, I have seen the cached routes count remain fairly constant, but the number of cached route objects increase from about 220,000 objects to 410,000 objects. The cached routes count remains between 4,000 and 8,000 routes. I posted a pretty graph at http://www.pier-pro.com/ip_dst_cache_leak.png (the blue line is the value of ip_dst_cache, the green value represents the count of cached routes). Once the ip_dst_cache value reaches the value of /proc/sys/net/ipv4/route/max_size then the network fails and the kernel complains about 'dst cache overflow' whenever a packet arrives. The only solution at that point is to perform a reboot. Flushing the routing tables by `echo 1 /proc/sys/net/ipv4/route/flush` only clears the cached routes, however the value of ip_dst_cache does not change. According to http://linux.derkeiler.com/Mailing-Lists/Fedora/2005-07/1175.html this is a known bug that was fixed in 2.6.11, however, I'm running 2.6.18 (as updated with `yum update`) I downloaded the kernel sources, and indeed, the kernel source contains the bug fix in the above article. Therefore ... I'm at a loss as to where to go from here. Certainly rebooting the server every day is not an option, and increasing the max_size will just delay it. Suggestions? Thank you, Hector ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache
J Potter wrote: It's hard to get very specific about what's best for your setup without know the specifics of things like the data sync needs on the apache nodes, so take all of this with a grain of salt -- or as a default starting place. I did not ask anything related to my setup. I already use a couple different load balancing technologies. I was just curious about performance comparisons between different types of load balancers in general. -- Florin Andrei http://florin.myip.org/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] clustering and load balancing Apache
On Wed, 11 Feb 2009 11:50:34 -0800 Florin Andrei flo...@andrei.myip.org wrote: I was just curious about performance comparisons between different types of load balancers in general. It's hard to say ... you usualy use load balancers to achieve higher availability and put as little as possible in the way of traffic when you want performance (save for the most expensive hw load balancers). For Apache, I had great success with mod_backhand, available at www.backhand.org iirc. It's one of the smartest balancers, but only available for apache 1.3. I've heard 1.3 is still faster than 2.x in many cases. But I'm nginx only now for a few years now ;) -- Jure Pečar http://jure.pecar.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rt_cache leak in 2.6.18
Hector Herrera wrote: Hello, This is a CentOS 5.2 box configured as a router for a network handling about 200-300 Mbps, routing traffic to/from the internet for about 6,000 IPs. Therefore ... I'm at a loss as to where to go from here. Certainly rebooting the server every day is not an option, and increasing the max_size will just delay it. Suggestions? Use a real router or L3 switch to do the job instead of a PC? Or run the newer patched kernel on the system. 300mbit is trivial. Even modern good gigabit L3 switches can forward over 100 million packets per second, which is tens of gigs of data. (not talking cisco gear, it's astonishing how poor performing most cisco gear is given their prices). nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mirroring centos servers
fabian dacunha wrote: Dear All, I have 2 server with almost identical configuration nd would like to mirror them bascillay i would like to use it as a firewall. i was thinking of linux HA but could not really find clear examples if it could achive my purpose apprecite if someone can help me of any site with examples on how to mirror 2 centos servers so i one fails the other works perfect thanks and really apprecite regards fabian I've already used Heartbeat between two centos machines acting as gateway/iptables firewall and it worked perfectly. The only 'problem' is that iptables connection status is of course not shared between the two nodes. Never used shorewall though. -- -- Fabian Arrotin idea=`grep -i clue /dev/brain` ; test -z $idea echo sorry, init 6 in progress || sh ./answer.sh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] httpd: internal dummy connection
On my Centos 2.5 web server, in /var/log/httpd/access_log, I saw several occurrences of: new.mydomain.net - - [11/Feb/2009:14:34:58 -0500] GET / HTTP/1.0 403 - - Apache/2.2.3 (CentOS) (internal dummy connection) I have never seen anything like this before over many years of watching my logs. I presume it failed because my named virtual host does not have new..., if for no other reason. What is it? Why do I have it now, and not before? Thanks for your advice. Mike. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] tinydns/djbdns opinion poll
Message-ID: 4991e3b7.6090...@andrei.myip.org On: Tue, 10 Feb 2009 12:29:43 -0800, Florin Andrei flo...@andrei.myip.org wrote: Jake wrote: We're about to start moving our public DNS to in-house managed servers. My first thought was Linux + BIND and we're done. Someone in another business unit's IT dept. has suggested tinydns be used. But things have changed. Nowadays Bind is solid enough. If you're still worried about security issues (you shouldn't, but I'm assuming the paranoid scenario) then CentOS has a good SELinux policy around it, so just install the latest CentOS, keep SELinux enabled, do a yum update every once in a while, and be at peace. By the way, this is also the most sweat-free solution from a sysadmining perspective. With one very large caveat. Be aware that updating bind via yum can result in your existing bind configuration files being renamed to something.rmpsave and your name server left in a dysfunctional state. I suggest that you consider excluding bind from normal updates and only update it when you are ready and able to check for possible configuration issues. -- *** E-Mail is NOT a SECURE channel *** James B. Byrnemailto:byrn...@harte-lyne.ca Harte Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] httpd: internal dummy connection
Mike -- EMAIL IGNORED wrote: new.mydomain.net - - [11/Feb/2009:14:34:58 -0500] GET / HTTP/1.0 403 - - Apache/2.2.3 (CentOS) (internal dummy connection) What is it? Why do I have it now, and not before? http://tinyurl.com/cnzaf6 -- Florin Andrei http://florin.myip.org/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] httpd: internal dummy connection
On Wed, 11 Feb 2009 14:45:36 -0800, Florin Andrei wrote: Mike -- EMAIL IGNORED wrote: new.mydomain.net - - [11/Feb/2009:14:34:58 -0500] GET / HTTP/1.0 403 - - Apache/2.2.3 (CentOS) (internal dummy connection) What is it? Why do I have it now, and not before? http://tinyurl.com/cnzaf6 If I click this on a FC7) Linux box, Firefox gets redirected to google, and automatically runs a search. I wonder how that happens. If I try to access it on a WinXP box, ZoneAlarm blocks it as a spy site. I wonder why it thinks so. Mike. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] 5.2 x86_64 DVD
I've pulled this down with Firefox, wget, a bittorrent client and an ftp client using Windows as well as Linux hosts. Is something wrong with the distributed DVD image? It has failed an MD5 check every time I've pulled it down. Paul Fontenot Wells Fargo Public Key Infrastructure Team Cryptography Services|IST|EIM|TES|TIG|Wells Fargo Email: ward.p.fonte...@wellsfargo.com mailto:ward.p.fonte...@wellsfargo.com Phone: (480) 437-7795 This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] tinydns/djbdns opinion poll
James B. Byrne wrote: Be aware that updating bind via yum can result in your existing bind configuration files being renamed to something.rmpsave and your name server left in a dysfunctional state. I suggest that you consider excluding bind from normal updates and only update it when you are ready and able to check for possible configuration issues. Or put those files under Cfengine or Puppet and have auto-yum work with the config management system. But yeah, I agree, if the number of systems is small (so config management is not justified), avoid doing auto-updates to the critical components. -- Florin Andrei http://florin.myip.org/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 5.2 x86_64 DVD
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of ward.p.fonte...@wellsfargo.com Sent: Wednesday, February 11, 2009 3:17 PM To: CentOS@centos.org Subject: [CentOS] 5.2 x86_64 DVD Paul Fontenot said: I've pulled this down with Firefox, wget, a bittorrent client and an ftp client using Windows as well as Linux hosts. Is something wrong with the distributed DVD image? It has failed an MD5 check every time I've pulled it down. I created my own as I needed it as I already had the CD's. This site http://www.electrictoolbox.com/save-time-bandwidth-dvd-from-cds/ actually does a good job of explaining how. Eucke ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] httpd: internal dummy connection
on 2-11-2009 3:07 PM Mike -- EMAIL IGNORED spake the following: On Wed, 11 Feb 2009 14:45:36 -0800, Florin Andrei wrote: Mike -- EMAIL IGNORED wrote: new.mydomain.net - - [11/Feb/2009:14:34:58 -0500] GET / HTTP/1.0 403 - - Apache/2.2.3 (CentOS) (internal dummy connection) What is it? Why do I have it now, and not before? http://tinyurl.com/cnzaf6 If I click this on a FC7) Linux box, Firefox gets redirected to google, and automatically runs a search. I wonder how that happens. That is what it is supposed to do. It is the smartass way to suggest that you try google before posting a question. If I try to access it on a WinXP box, ZoneAlarm blocks it as a spy site. I wonder why it thinks so. Couldn't say why that is. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't signature.asc Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] logs such as messages, boot.log, and kernel contained 0 size
Hi, My both CentOS 5 servers have logging problems. Logs such as messages, boot.log, kernel, spooler, and tallylog in /var/log directory are all 0 size. The kernel is: Linux 2.6.18-92.1.22.el5 #1 SMP. Since the /var/log/messages contained no information it would be impossible to troubleshoot the problem. I am very sure both systems have not been hacked by others. Sincerely, Frank Ling -- -rw--- 1 root root 0 Feb 8 04:02 messages -rw--- 1 root root 0 Feb 3 11:04 messages.1 -rw--- 1 root root 0 Jan 25 04:02 messages.3 -rw--- 1 root root 0 Jan 11 04:03 messages.4 -rw--- 1 root root 10 Dec 27 13:00 messages.offset -rwx-- 1 root root 0 Feb 11 19:12 kernel -rwx-- 1 root root 0 Feb 11 16:53 kernel.1 -rwx-- 1 root root 0 Jan 25 04:02 kernel.3 -rwx-- 1 root root 0 Jan 11 04:03 kernel.4 -rw--- 1 root root 0 Feb 8 04:02 spooler -rw--- 1 root root 0 Feb 3 07:51 spooler.1 -rw--- 1 root root 0 Jan 25 04:02 spooler.3 -rw--- 1 root root 0 Jan 11 04:03 spooler.4 -rw--- 1 root root 0 Jun 24 2008 tallylog -- ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] tinydns/djbdns opinion poll
On Wed, 2009-02-11 at 17:34 -0500, James B. Byrne wrote: With one very large caveat. Be aware that updating bind via yum can result in your existing bind configuration files being renamed to something.rmpsave and your name server left in a dysfunctional state. I suggest that you consider excluding bind from normal updates and only update it when you are ready and able to check for possible configuration issues. That's true of pretty much every rpm that has config files... it's part of my standard updating routine: yum update updatedb locate rpmsave locate rpmnew fix any config files... restart services and/or reboot if necessary... -I ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Logrotate base
Hi guys, Logrotate is checked every day by cron.daily, right? I notice in logrotate.conf by default it's weekly. If I change it into monthly (now, on 12 of Feb), when will it do the monthly rotation? a. On 12 of March or b. On 1st of March? Thanks for any insight. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Logrotate base
On Thu, Feb 12, 2009 at 11:05 AM, Fajar Priyanto fajar...@arinet.org wrote: Hi guys, Logrotate is checked every day by cron.daily, right? I notice in logrotate.conf by default it's weekly. If I change it into monthly (now, on 12 of Feb), when will it do the monthly rotation? AFAIK it is a default value to rotate the log file which could be override by individual configuration on /etc/logrotate.d/ so if it the individual configuration doesn't specify the rotation period it will use the default which is weekly a. On 12 of March or b. On 1st of March? weekly use monday so I think it will be 1st of march. CMIIW regards, -- Muhammad Panji http://sumodirjo.wordpress.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] logs such as messages, boot.log, and kernel contained 0 size
Frank Ling wrote: Hi, My both CentOS 5 servers have logging problems. Logs such as messages, boot.log, kernel, spooler, and tallylog in /var/log directory are all 0 size. The kernel is: Linux 2.6.18-92.1.22.el5 #1 SMP. Since the /var/log/messages contained no information it would be impossible to troubleshoot the problem. I am very sure both systems have not been hacked by others. Sincerely, Frank Ling -- -rw--- 1 root root 0 Feb 8 04:02 messages -rw--- 1 root root 0 Feb 3 11:04 messages.1 -rw--- 1 root root 0 Jan 25 04:02 messages.3 -rw--- 1 root root 0 Jan 11 04:03 messages.4 -rw--- 1 root root 10 Dec 27 13:00 messages.offset -rwx-- 1 root root 0 Feb 11 19:12 kernel -rwx-- 1 root root 0 Feb 11 16:53 kernel.1 -rwx-- 1 root root 0 Jan 25 04:02 kernel.3 -rwx-- 1 root root 0 Jan 11 04:03 kernel.4 -rw--- 1 root root 0 Feb 8 04:02 spooler -rw--- 1 root root 0 Feb 3 07:51 spooler.1 -rw--- 1 root root 0 Jan 25 04:02 spooler.3 -rw--- 1 root root 0 Jan 11 04:03 spooler.4 -rw--- 1 root root 0 Jun 24 2008 tallylog -- I've had something similar happen a couple of times after an update. In my case the /etc/services file got it's security context clobbered when some package tried to update it's contents. When logrotate ran, the syslog daemon couldn't open /etc/services because of the error and I ended up with a bunch of empty log files. The quickest way to check for this is the command: restorecon -v /etc/services If nothing prints out in response, that's not the problem. If it DOES, that might explain it. I have been checking the contexts occasionally to try and trap exactly when it happens. I use: restorecon -R -n -v /etc which walks through the entire /etc tree looking for contexts to change but just reports any exceptions. Just a thought! -- Jay Leafey - Memphis, TN jay.lea...@mindless.com smime.p7s Description: S/MIME Cryptographic Signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Logrotate base
On Thu, Feb 12, 2009 at 12:12 PM, muhammad panji sumodi...@gmail.com wrote: On Thu, Feb 12, 2009 at 11:05 AM, Fajar Priyanto fajar...@arinet.org wrote: Hi guys, Logrotate is checked every day by cron.daily, right? I notice in logrotate.conf by default it's weekly. If I change it into monthly (now, on 12 of Feb), when will it do the monthly rotation? AFAIK it is a default value to rotate the log file which could be override by individual configuration on /etc/logrotate.d/ so if it the individual configuration doesn't specify the rotation period it will use the default which is weekly My question is changing weekly to monthly. Anyway, after googling2, I found this very good indepth article on logrotate, thought I share it here: http://www.softpanorama.org/Logs/Log_rotation/logrotate.shtml One item that you didn't cover, is how logrotate knows when it is the proper time to rotate a daily, weekly, or monthly file. Part of that is controlled by the status file (/var/lib/logrotate.status on most Linux system) which tracks when a particular file was last rotated. The other part is that Monthly rotations are done with the first run of logrotate that month, and Weekly's are run if the last run was later in the previous week, or the last rotation was over 7 days prior (Sunday=0 Saturday=6). So if you are running logrotate daily, then it works itself out to the first day of the month, and Sunday's for the weeklies. So, it will be March 1st. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos