Re: [CentOS-docs] Application for joining Chinese (simplified) Team

2011-04-21 Thread Ralph Angenendt
2011/4/21 Timothy Lee timothy.ty@gmail.com:
 Dear Ralph,

 Can you give HaoweiLee (wiki account) permission to change all Chinese
 pages.  Thanks!  He'll be working on the simplified Chinese translations. :)

Done for zh/ and his homepage.

Cheers and thanks,

Ralph
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Application for joining Chinese (simplified) Team

2011-04-21 Thread Cyrus
hi Ralph,
   Thanks for your granting. I just found that wiki site page could not be 
loaded out when I visit from China by IE8. The just page just show me a 
backgroud, but nothing. Could you check it ?
 
Regards,  

At 2011-04-21 18:55:37,Ralph Angenendt ralph.angene...@gmail.com wrote:

2011/4/21 Timothy Lee timothy.ty@gmail.com:
 Dear Ralph,

 Can you give HaoweiLee (wiki account) permission to change all Chinese
 pages.  Thanks!  He'll be working on the simplified Chinese translations. :)

Done for zh/ and his homepage.

Cheers and thanks,

Ralph
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Mathieu Baudier
 'yum update' runs into the following error message.

 Package libuser-devel-0.54.7-2.1.el5_5.2.i386.rpm is not signed

 I got this too, there's two ways around it:

 1) Wait until the package is signed and then update.

 2) Run: yum update --nogpgcheck

Other workarounds for this particular issue have just been suggested here:
http://lists.centos.org/pipermail/centos/2011-April/110547.html
http://lists.centos.org/pipermail/centos/2011-April/110551.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Johnny Hughes
On 04/21/2011 01:04 AM, Mathieu Baudier wrote:
 'yum update' runs into the following error message.

 Package libuser-devel-0.54.7-2.1.el5_5.2.i386.rpm is not signed

 I got this too, there's two ways around it:

 1) Wait until the package is signed and then update.

 2) Run: yum update --nogpgcheck
 
 Other workarounds for this particular issue have just been suggested here:
 http://lists.centos.org/pipermail/centos/2011-April/110547.html
 http://lists.centos.org/pipermail/centos/2011-April/110551.html


This issue has been taken care of on all the CentOS mirrors about 10
hours ago.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] 4kB sector size HDDs

2011-04-21 Thread Dawid Horacio Golebiewski
Hello again.

Do any of you have one of the 'new' HDDs with 4kB Sectors currently in use?
I would upgrade to the 4kB disks but I don't know if this might be
problematic as I intend to use ZFS w/ RAIDz or at least a classic RAID6.
How might this affect performance under 5.5 and how do I go about setting up
the alignment of the partitions I use?

Kind regards

Dawid Horace

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] How to install binutils-devel on Centos Linux 5.5

2011-04-21 Thread Frank Chang

Good morning, I am trying to install binutils-devel on Centos Linux 5.5 so that 
we can obtain lib liberty required by the oprofile-0.9.6 Linux profiler.
  Using root , I enter: yum local install 
binutils-devel-2.20.51.0.7-6.fc14.i686.rpm. Then I get the message: Public key 
for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm is not installed. Please tell me 
where I get the  Public key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm . 
Thank you.  ___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to install binutils-devel on Centos Linux 5.5

2011-04-21 Thread Ned Slider
On 21/04/11 11:14, Frank Chang wrote:

 Good morning, I am trying to install binutils-devel on Centos Linux 5.5 so 
 that we can obtain lib liberty required by the oprofile-0.9.6 Linux profiler.
Using root , I enter: yum local install 
 binutils-devel-2.20.51.0.7-6.fc14.i686.rpm. Then I get the message: Public 
 key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm is not installed. Please 
 tell me where I get the  Public key for 
 binutils-devel-2.20.51.0.7-6.fc14.i686.rpm . Thank you.   
   



Why are you trying to install a Fedora 14 package on CentOS 5.5? Oh, 
it's probably because you're trying to install a later version of 
oprofile that again isn't a part of CentOS. The error you get is 
because, unsurprisingly, you don't have the GPG key installed for Fedora 
14 on your CentOS system.

This isn't a CentOS issue so you're on your own here.

Good luck.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to install binutils-devel on Centos Linux 5.5

2011-04-21 Thread Simon Matter

 Good morning, I am trying to install binutils-devel on Centos Linux 5.5 so
 that we can obtain lib liberty required by the oprofile-0.9.6 Linux
 profiler.
   Using root , I enter: yum local install
 binutils-devel-2.20.51.0.7-6.fc14.i686.rpm. Then I get the message:

So, why this package, doesn't it work with the binutils-devel package from
CentOS 5.x? If it does you could just 'yum install binutils-devel'.

 Public key for binutils-devel-2.20.51.0.7-6.fc14.i686.rpm is not
 installed. Please tell me where I get the  Public key for
 binutils-devel-2.20.51.0.7-6.fc14.i686.rpm . Thank you.

I'm quite sure this will not work even with the correct public key, which
you should get where you got the
binutils-devel-2.20.51.0.7-6.fc14.i686.rpm from, most likely a fedora
mirror. But I think the package won't install on CentOS 5.x.

Simon

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 5.6 - SRPM's

2011-04-21 Thread Karanbir Singh
On 04/21/2011 12:18 AM, Bob Hepple wrote:
 Hmmm - it's 10 days on and I still can't see all of the [a-l]
 *.src.rpm's. I strongly suspect that something's gone wrong - or
 perhaps I'm looking in the wrong place -


Yes, you are right. Amongst the various tests, there is one that checks 
for dupe packages, and we have 2 anaconda srpms this time, the i386 and 
x86_64 are built from identical srpm's; but I had to bump version on one 
arch, without needing to do that on the other. So there are 2 
anaconda-srpm in the SRPMS/ repo, causing the test to fail and that 
entire lot not going through. I like the test, and would like to keep it 
in place, so will do a force-pass for now and that should see the 
packages go through at some point today.

- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 5.6 - SRPM's

2011-04-21 Thread Karanbir Singh
On 04/21/2011 12:47 AM, Don Krause wrote:
 It doesn't appear to be me, as much as kernel.org. Their webpage 
 http://mirrors.kernel.org/centos/5.6/os/SRPMS/?C=M;O=D
 has nothing newer than Dec 14th either..

 Something must be broke (or really slow) out there.


Broke yes, but in a good way. No need to switch from kernel.org!

Also the reason why you are seeing some srpms but not others is that 
there is a second task that was running, to bring in srpms shared from 
the 5.5/ tree ( os + updates ) that are still needed in 5.6/

Its the new packages that are in 5.6/ which were not in eithe 5.5/os or 
5.5/updates that are not on the mirrors at this point.

- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Karanbir Singh
On 04/21/2011 09:26 AM, Johnny Hughes wrote:
 Other workarounds for this particular issue have just been suggested here:
 http://lists.centos.org/pipermail/centos/2011-April/110547.html
 http://lists.centos.org/pipermail/centos/2011-April/110551.html

I find it strange that people are making such recommendations. A non 
verifyable signature is a MASSIVE deal. Working 'around' that is to stop 
doing what you are doing, and not do any package centric operation till 
the issue is fixed and resolved in an acceptable manner.

- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Karanbir Singh
On 04/21/2011 12:49 AM, Ben McGinnes wrote:
 2) Run: yum update --nogpgcheck

please dont do that :(

- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread John Hodrien
On Thu, 21 Apr 2011, Karanbir Singh wrote:

 On 04/21/2011 09:26 AM, Johnny Hughes wrote:
 Other workarounds for this particular issue have just been suggested here:
 http://lists.centos.org/pipermail/centos/2011-April/110547.html
 http://lists.centos.org/pipermail/centos/2011-April/110551.html

 I find it strange that people are making such recommendations. A non
 verifyable signature is a MASSIVE deal. Working 'around' that is to stop
 doing what you are doing, and not do any package centric operation till
 the issue is fixed and resolved in an acceptable manner.

It's all too often the advice you'll see.  On Spacewalk, the standard response
to dealing with unsigned (or signed with an unimported key) is to disable all
gpg checks.  It's cringeworthy, and wrong on so many levels.

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Still a kvm problem after 5.6 upgrade

2011-04-21 Thread David McGuffey
After the upgrade, my VMs stopped loading. Found others with the problem
and followed the guidance to use virsh to dump the xml file of the VM,
undefine the VM, edit the xml file to change 'raw' to 'qcow2', redefine
the VM from the edited xml, and restart the machine.  I still get the
following error when I try to start the VM:

redlibvirtError: internal error Process exited while reading console log
output: qemu: could not open disk image /dev/hda

A libvirt update came in last night, so I was hoping the update would
allow libvirt to automatically recognize the type of image file (as
previous versions did).  Nope.

Any other thoughts?

Dave M


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Mathieu Baudier
 Other workarounds for this particular issue have just been suggested here:
 http://lists.centos.org/pipermail/centos/2011-April/110547.html
 http://lists.centos.org/pipermail/centos/2011-April/110551.html

 I find it strange that people are making such recommendations. A non
 verifyable signature is a MASSIVE deal. Working 'around' that is to stop
 doing what you are doing, and not do any package centric operation till
 the issue is fixed and resolved in an acceptable manner.

Sorry, but not everybody is on production machines.

Since the OP could not analyze himself the error message, one could
safely assume he is not dealing with critical production environments.
Maybe he was just told: install quickly this CentOS in VirtualBox,
just to make sure our app is compatible, and in that case the sooner
the better.

My advice and those of others where underlying the security risk.
The one of Akemi seems pretty safe (not installing the update).

To put it shortly: Freedom, as in free software, is about doing
whatever you want.

This being say, I do agree that having a non signed package is a MASSIVE deal.
Do we have more details about what's going on here?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread John Hodrien
On Thu, 21 Apr 2011, Mathieu Baudier wrote:

 Sorry, but not everybody is on production machines.

 Since the OP could not analyze himself the error message, one could
 safely assume he is not dealing with critical production environments.
 Maybe he was just told: install quickly this CentOS in VirtualBox,
 just to make sure our app is compatible, and in that case the sooner
 the better.

 My advice and those of others where underlying the security risk.
 The one of Akemi seems pretty safe (not installing the update).

 To put it shortly: Freedom, as in free software, is about doing
 whatever you want.

Not updating is entirely sensible and sounds like the best default position.
Installing a package you'd expect to be signed when it isn't signed should
ring alarm bells.

Freedom includes being free to make poor decisions.

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Karanbir Singh
On 04/21/2011 12:26 PM, Mathieu Baudier wrote:
 Sorry, but not everybody is on production machines.

Security and integrity of an install is not optional, wherever you might 
be. Imho anyway.

 Maybe he was just told: install quickly this CentOS in VirtualBox,
 just to make sure our app is compatible, and in that case the sooner
 the better.

 My advice and those of others where underlying the security risk.
 The one of Akemi seems pretty safe (not installing the update).

If there is reason to suspect a mirror or installation is compromised, 
one should - again imho - not be doing any operations against that.

 To put it shortly: Freedom, as in free software, is about doing
 whatever you want.

thats true, but there is also a sense of responsibility that comes with 
that advice that is handed out and who / where its being handed out. One 
could potentially assume that the people on this list would know what 
they are talking about and would only advice based on whats considered 
best practices. The fact that the OP didnt know what was going on would 
be a good sign to assume that he was looking for people who did know 
what was going on eg. Telling people to jump off a cliff, just because 
you can isnt nice. Freedom or otherwise.

 This being say, I do agree that having a non signed package is a MASSIVE deal.
 Do we have more details about what's going on here?

yes, a package was released, unsigned, and has been fixed. ( and 4 more 
tests added to the release process to make sure that this does not 
happen again; or atleast reduce the chance of this going out ).

- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread John Hodrien
On Thu, 21 Apr 2011, Karanbir Singh wrote:

 yes, a package was released, unsigned, and has been fixed. ( and 4 more
 tests added to the release process to make sure that this does not
 happen again; or atleast reduce the chance of this going out ).

And if people stick with the sane practice of only trusting signed packages,
this is quickly caught and the only cost is a short delay while updated
packages are pushed out.

If people think that disabling gpg checking is a good idea, you risk this
finding its way into their yum.conf.  That's exactly what you've seen amongst
some spacewalk users.

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread Ian Murray




- Original Message 
 From: John R. Dennison j...@gerdesas.com
 To: CentOS mailing list centos@centos.org
 Sent: Thu, 21 April, 2011 1:01:22
 Subject: Re: [CentOS] Centos 6 Update?
 
 On Wed, Apr 20, 2011 at 11:31:04PM +0100, Ian Murray wrote:
  
   Seriously, just skip over my posts. I am not forcing you to read them. 
  I'll 

  finish when I am good and ready... not when *you* decide.
 
 How  about I write you a check to just go away?
 

Please make it payable to Dag's Rebuild Fund. (JOKE)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread Ian Murray




- Original Message 
 From: Garry Dale garry.d...@gmail.com
 To: CentOS mailing list centos@centos.org
 Sent: Thu, 21 April, 2011 1:37:33
 Subject: Re: [CentOS] Centos 6 Update?
 
 (someone) wrote:
  Why does the website say something so different,  then?
 
 Seriously?  Are people really this  retarded?


Retarded enough to take what a disty website takes at face value? Are YOU being 
serious?


 ___
 CentOS mailing  list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Still a kvm problem after 5.6 upgrade

2011-04-21 Thread Johnny Hughes
On 04/21/2011 06:11 AM, David McGuffey wrote:
 After the upgrade, my VMs stopped loading. Found others with the problem
 and followed the guidance to use virsh to dump the xml file of the VM,
 undefine the VM, edit the xml file to change 'raw' to 'qcow2', redefine
 the VM from the edited xml, and restart the machine.  I still get the
 following error when I try to start the VM:
 
 redlibvirtError: internal error Process exited while reading console log
 output: qemu: could not open disk image /dev/hda

You should not need to do anything in virsh to dump a file ... there
should be an xml file in /etc/libvirt/qemu/ for every VM already.  In
that file, you need to go to the disk type='file' device='disk'
section and look for a line that says:

driver name='qemu' type='raw' cache='none'/

and change it to

driver name='qemu' type='qcow2' cache='none'/

(the cache might be different, but you can leave it alone)

The key is to change the type=raw to type=qcow2




signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread Ian Murray




- Original Message 
 From: Ron Blizzard rb4cen...@gmail.com
 To: CentOS mailing list centos@centos.org
 Sent: Thu, 21 April, 2011 1:59:19
 Subject: Re: [CentOS] Centos 6 Update?
 
 On Wed, Apr 20, 2011 at 5:31 PM, Ian Murray murra...@yahoo.co.uk  wrote:
 
  Seriously, just skip over my posts. I am not forcing you to  read them. I'll
  finish when I am good and ready... not when *you*  decide.
 
 I'm trying to figure out why someone who, apparently, hates the  CentOS
 distribution so much, spends so much time attacking it. If I  detested
 a Linux distribution I would move on to something else. Or do you  even
 use CentOS any more? (Serious question.)
 

Detest? Hate? I have nothing against the distribution and yes I do still use it 
on several virtual server and look after several other CentOS based systems, 
i.e. SME and AsteriskNOW. I can't be bothered to migrate off, but would think 
twice about any new public facing installs. That applies to all rebuilds at the 
moment, as I am not convinced about the model for the moment.

In case nobody noticed, I am only responding to other comments. If I was 
constantly starting threads of the same topic, I would agree that it would be 
trolling.

Not the first time that attempts are made to silence someone through 
discreditation, though.








 -- 
 RonB -- Using  CentOS 5.6
 ___
 CentOS mailing  list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread Ian Murray


 It sounds to me like  your big beef is that you can't run the CentOS
 distribution the way *you*  want it run. Whether you agree or not,
 doesn't change the fact that CentOS  *is* enterprise ready.-- and many
 enterprises use it. The only time there are  significant delays in

No, I would just like the name and website to match the facts. I would suggest 
that anybody that calls centOS enterprise-ready might have a different 
concept 
to what an enterprise is to me. Enterprise to me is at least a 1000 users and 
dozens of live servers. If CentOS is only suitable for test environment then I 
don't really class that as enterprise-ready, either.

 
 As for rebuilding, why would you want to rebuild  CentOS? Why not do
 what CentOS does and get the sources directly from Red Hat  and rebuild
 that? Obviously you must think there is still some value in the  CentOS
 name.
 

I was just trying to illustrate a point, rather than actually wanting to do it.



 -- 
 RonB -- Using CentOS  5.6
 ___
 CentOS mailing  list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread Ian Murray




- Original Message 
 From: John R. Dennison j...@gerdesas.com
 To: CentOS mailing list centos@centos.org
 Sent: Thu, 21 April, 2011 2:58:36
 Subject: Re: [CentOS] Centos 6 Update?
 
 On Wed, Apr 20, 2011 at 08:29:07PM +0100, Ian Murray wrote:
  
  I  have it black and white in a private email from JH that he would never 
give me 

  sufficient information to start a competing  rebuild.
 
 Information needed to rebuild is, and has  been for quite some
 time, in the archives of this and the  -devel mailing lists.
 
 Johnny has posted such  information.  Russ has posted
 information.   There are at least 5 other rebuilds of EL6 that I know
 of,  and likely many more that I don't.
 
 There is no  magic.
 
 While it can be argued (and I would actually be  in agreement)
 that such information should be wikified the  fact is that the
 information _is_ out  there.
 

The point was the attitude, not the availability. As far as I can gather, some 
if it is out of date, anyway.

What are these 5 rebuilds then, apart from SL?



 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread Ian Murray


 
 And do us a favor?  Take your own  advice.
 


I always try to state as far as I know, as far as I can tell, in my 
opinion/belief.


Can we recall that I commented on the fact that a major Linux magazine had put 
up a pretty damning article. I don't know why I am getting attacked for that. 
Write to Linux Mag.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 4kB sector size HDDs

2011-04-21 Thread compdoc
 how do I go about setting up
the alignment of the partitions I use?


If you use one large partition it's easy: you just create the partition
leaving 1 meg of free space before the partition. This causes the partition
to start at sector 2048, which is a number that 4096 is divisible by. Newer
versions of disk utilities like gparted suggest this for you by placing a 1
in the 'Free Space Preceding' box when you go to create a new partition.

If you create multiple partitions, it's a little harder since you have make
sure that subsequent partitions start on sectors that can be divided evenly
into 4096. I've never done this as I always set up one large partition on my
storage arrays, and I use a separate drive for the OS to boot from and
another separate drive for my VMs. I do this for performance reasons.

All of this is explained more or less if you google.






___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Still a kvm problem after 5.6 upgrade

2011-04-21 Thread compdoc
 I still get the following error when I try to start the VM:

redlibvirtError: internal error Process exited while reading
console log output: qemu: could not open disk image /dev/had

Is the disk image a qcow2 type file?


Someone wrote:
 You should not need to do anything in virsh to dump a file ... there
should be an xml file in /etc/libvirt/qemu/ for every VM already.

There are 2 xml files if the VM is set to run automatically at boot. Using
virsh to dump the file, and the rest of the instructions makes it a cleaner
repair.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Mathieu Baudier
 Not updating is entirely sensible and sounds like the best default position.
 Installing a package you'd expect to be signed when it isn't signed should
 ring alarm bells.

I agree that my first answer was probably wrong, even with all
disclaimers and warnings.

I thought of a technical way (--nogpgcheck) to solve the issue,
whereas the right answer was definitely procedural (as you point out,
not updating, what I would have done on my own systems).

I apologize, but I did my best...

 Freedom includes being free to make poor decisions.

I fully agree with you.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Johnny Hughes
On 04/21/2011 08:34 AM, Mathieu Baudier wrote:
 Not updating is entirely sensible and sounds like the best default position.
 Installing a package you'd expect to be signed when it isn't signed should
 ring alarm bells.
 
 I agree that my first answer was probably wrong, even with all
 disclaimers and warnings.
 
 I thought of a technical way (--nogpgcheck) to solve the issue,
 whereas the right answer was definitely procedural (as you point out,
 not updating, what I would have done on my own systems).
 
 I apologize, but I did my best...
 
 Freedom includes being free to make poor decisions.
 
 I fully agree with you.

Maybe this would work out:

yum --nogpgcheck update libuser-devel

then you can update everything else later with gpg on.

Although, like I said, this particular issue has now been corrected.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread m . roth
Johnny Hughes wrote:
 On 04/21/2011 08:34 AM, Mathieu Baudier wrote:
 Not updating is entirely sensible and sounds like the best default
 position.
 Installing a package you'd expect to be signed when it isn't signed
 should ring alarm bells.

 I agree that my first answer was probably wrong, even with all
 disclaimers and warnings.
snip
 Maybe this would work out:

 yum --nogpgcheck update libuser-devel

 then you can update everything else later with gpg on.

I *like* that answer. And command line only, so the next time you go to
yum update, it'll get the fixed package.

 Although, like I said, this particular issue has now been corrected.

And *very* quickly.

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] KVM virt-install on disk image - no space

2011-04-21 Thread Jussi Hirvi
I guess I need the list again.

I try to install my first KVM guest. Here is what I do, and finally, 
what I stumble on.

First I created a qcow2 img:

# qemu-img create -f qcow2 /var/lib/libvirt/images/test1.img 15G

And I created a network bridge (not essential here)

To get a text-based install, I followed this how-to:

http://sysadminman.net/blog/2011/kvm-virtualization-text-centos-guest-install-2098

My install command was:

virt-install \
--name test1 \
--os-variant=rhel5.4 \
--ram 512 \
--vcpus=1 \
--accelerate \
--nographics \
-v \
--location=/mnt/centos56/ \
--network bridge:br0 \
--disk path=/var/lib/libvirt/images/test1.img,size=15 \
--extra-args=console=ttyS0;

I tried this also without the size argument for disk

Now, the install begins ok. I do a http install from a nearby mirror.

BUT when it is time to do partitions, I get

   Which drive(s) do you want to use for this installation?|
|  [*]vda0 MB (Unknown) ^   |
|

And if I now try to create partitions, I get no space error.

What is going on??

Cheers to CentOS!
- Jussi

-- 
Jussi Hirvi * Green Spot
Suvilahdenkatu 1 B 78 * 00500 Helsinki * Finland
Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms)
jussi.hi...@greenspot.fi * http://www.greenspot.fi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 4kB sector size HDDs

2011-04-21 Thread Devin Reade
--On Thursday, April 21, 2011 11:16:36 AM +0200 Dawid Horacio Golebiewski
dawid.golebiew...@tu-harburg.de wrote:

 Do any of you have one of the 'new' HDDs with 4kB Sectors currently in
 use?

I have them in use, and set up the partitions manually before installing
the OS.  This is the relevent entry from my server changelog, prior to
installing CentOS 5.5:

+ since this machine is using new drives with 4k blocks,
  used fdisk to ensure that sector alignment will be sane:

fdisk -H 224 -S 56 /dev/sd{a,b} 

  In doing so, I created a 200MB RAID1 partition (type 0xfd)
  and another RAID1 partition with the remaining disk for use
  by LVM.

  I found it necessary to use fdisk manually on both disks,
  because the following command choked (probably due to
  the geometry thing):

sfdisk -d /dev/sda | sfdisk /dev/sdb
(DOESN'T WORK)

I case it's not obvious, the partitions on sda and sdb are then
mirrored, the small one for /boot, the large one for the remaining
filesystems under LVM.

If you're using the Caviar green drives, beware of excessive head
park and quickly increasing load cycle counts.  I fixed that with
using an idle timeout of 300 seconds (vice 8 seconds) per:


http://community.wdc.com/t5/Desktop/Green-Caviar-High-Load-Cycle-Cout-after-short-operation-time/td-p/15731/page/7

Devin

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread Stephen Harris
On Thu, Apr 21, 2011 at 01:27:23PM +0100, Ian Murray wrote:

 No, I would just like the name and website to match the facts. I would 
 suggest 
 that anybody that calls centOS enterprise-ready might have a different 
 concept 
 to what an enterprise is to me. Enterprise to me is at least a 1000 users and 
 dozens of live servers. If CentOS is only suitable for test environment then 
 I 
 don't really class that as enterprise-ready, either.

Dozens ?  What a small environment.  My concept of enterprise is thousands
of servers.

CentOS, as an Operating System, is most definitely enterprise ready.
It can scale to 1000s of servers quite easily.  Tools are available
to let you build and deploy on an automated basis.  You could deploy
CentOS to a thousand servers with ease; you could deploy a blade farm
with dynamic provisioning very quickly and easily.

What the CentOS project is _not_ is an enterprise level _support_ service.
It doesn't pretend to be.  That's where the community aspect comes in.
If you want enteprise level support then you probably need to pay for it.
(which is why my employer uses RedHat and not CentOS; we want to be able
to phone someone and bitch at them until they fix stuff)

If you consider enterprise ready to be a combination of enterprise
scalable and enterprise level support then, sure, you'll not find CentOS
meeting your needs.  But if you want an enterprise quality OS then CentOS
fills that gap nicely.

-- 

rgds
Stephen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 74, Issue 7

2011-04-21 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than Re: Contents of CentOS-announce digest...


Today's Topics:

   1. CEBA-2011:0216  CentOS 5 x86_64 vnc Update (Karanbir Singh)
   2. CEBA-2011:0033  CentOS 5 x86_64 conga Update (Karanbir Singh)
   3. CEBA-2011:0388  CentOS 5 i386 openswan Update (Karanbir Singh)
   4. CESA-2011:0394 Important CentOS 5 i386 conga  Update
  (Karanbir Singh)
   5. CEBA-2011:0172  CentOS 5 i386 gdbm Update (Karanbir Singh)
   6. CESA-2011:0394 Important CentOS 5 x86_64 congaUpdate
  (Karanbir Singh)
   7. CEBA-2011:0456 CentOS 5 i386 xorg-x11-server  Update
  (Karanbir Singh)
   8. CEBA-2011:0457 CentOS 5 x86_64 xorg-x11-xfs Update
  (Karanbir Singh)
   9. CESA-2011:0170 Moderate CentOS 5 x86_64 libuser   Update
  (Karanbir Singh)
  10. CEBA-2011:0457 CentOS 5 i386 xorg-x11-xfs Update (Karanbir Singh)
  11. CEBA-2011:0388  CentOS 5 x86_64 openswan Update (Karanbir Singh)
  12. CESA-2011:0170 Moderate CentOS 5 i386 libuser Update
  (Karanbir Singh)
  13. CEBA-2011:0456 CentOS 5 x86_64 xorg-x11-serverUpdate
  (Karanbir Singh)
  14. CEBA-2011:0033  CentOS 5 i386 conga Update (Karanbir Singh)
  15. CEBA-2011:0172  CentOS 5 x86_64 gdbm Update (Karanbir Singh)
  16. CEBA-2011:0216  CentOS 5 i386 vnc Update (Karanbir Singh)
  17. CEBA-2011:0142  CentOS 5 i386 libvirt Update (Karanbir Singh)
  18. CEBA-2011:0142  CentOS 5 x86_64 libvirt Update (Karanbir Singh)


--

Message: 1
Date: Wed, 20 Apr 2011 16:28:05 +
From: Karanbir Singh kbsi...@centos.org
Subject: [CentOS-announce] CEBA-2011:0216  CentOS 5 x86_64 vnc Update
To: centos-annou...@centos.org
Message-ID: 20110420162805.ga23...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2011:0216 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0216.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
95a33840c4dfdafde335b03093c5c678  vnc-4.1.2-14.el5_6.6.x86_64.rpm
228eaec0c7f9df994b6100118c80240a  vnc-server-4.1.2-14.el5_6.6.x86_64.rpm

Source:
908a89b31ceefa6de0a905698e7bdac5  vnc-4.1.2-14.el5_6.6.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 2
Date: Wed, 20 Apr 2011 16:13:09 +
From: Karanbir Singh kbsi...@centos.org
Subject: [CentOS-announce] CEBA-2011:0033  CentOS 5 x86_64 conga
Update
To: centos-annou...@centos.org
Message-ID: 20110420161309.ga22...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2011:0033 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0033.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
57ba15e655580a4ec5f4834252696c98  luci-0.12.2-24.el5.centos.0.x86_64.rpm
a0b895d8c6b372f5c7ca0d5794cb155c  ricci-0.12.2-24.el5.centos.0.x86_64.rpm

Source:
cfaf1fe498770339aba9858172b4d5ff  conga-0.12.2-24.el5.centos.0.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 3
Date: Wed, 20 Apr 2011 16:44:38 +
From: Karanbir Singh kbsi...@centos.org
Subject: [CentOS-announce] CEBA-2011:0388  CentOS 5 i386 openswan
Update
To: centos-annou...@centos.org
Message-ID: 20110420164438.ga23...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2011:0388 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0388.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
7ca1346db509381378418dacdae66695  openswan-2.6.21-5.el5_6.4.i386.rpm
48978756e1c38e6500b83ab1cf7a9ed2  openswan-doc-2.6.21-5.el5_6.4.i386.rpm

Source:
cfe41e13302c7e9fc6d560c0b7f4936e  openswan-2.6.21-5.el5_6.4.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #cen...@irc.freenode.net



--

Message: 4
Date: Wed, 20 Apr 2011 16:13:40 +
From: Karanbir Singh kbsi...@centos.org
Subject: [CentOS-announce] CESA-2011:0394 Important CentOS 5 i386
conga   Update
To: centos-annou...@centos.org
Message-ID: 20110420161340.ga22...@chakra.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2011:0394 Important

Upstream details at : 

Re: [CentOS] Still a kvm problem after 5.6 upgrade

2011-04-21 Thread Kenni Lund
2011/4/21 Johnny Hughes joh...@centos.org:
 On 04/21/2011 06:11 AM, David McGuffey wrote:
 redlibvirtError: internal error Process exited while reading console log
 output: qemu: could not open disk image /dev/hda

 You should not need to do anything in virsh to dump a file ... there
 should be an xml file in /etc/libvirt/qemu/ for every VM already.

The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you
should never edit these files directly while the libvirtd service is
running. You should either use 'virsh edit [vm_name]' or alternatively
virsh dump followed by virsh define. If you edit the file directly
while some manager is running (like virt-manager in CentOS), your
changes will most likely conflict with, or get overwritten by,
virt-manager. Nothing critical should happen, but I don't see any
reason for encouraging doing it The Wrong Way(TM).

Best regards
Kenni
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] KVM virt-install on disk image - no space

2011-04-21 Thread Paul Heinlein
On Thu, 21 Apr 2011, Jussi Hirvi wrote:

 I guess I need the list again.

 I try to install my first KVM guest. Here is what I do, and finally,
 what I stumble on.

 First I created a qcow2 img:

In my experience, virt-install will create the disk image when passed 
a filename via --disk=path=/path/to/nonexistent/disk.dsk,size=15

In other words, I'd suggest skipping the disk-creation step...

-- 
Paul Heinlein  heinl...@madboa.com  http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 5.6 - SRPM's

2011-04-21 Thread Don Krause

On Apr 21, 2011, at 3:32 AM, Karanbir Singh wrote:

 On 04/21/2011 12:47 AM, Don Krause wrote:
 It doesn't appear to be me, as much as kernel.org. Their webpage 
 http://mirrors.kernel.org/centos/5.6/os/SRPMS/?C=M;O=D
 has nothing newer than Dec 14th either..
 
 Something must be broke (or really slow) out there.
 
 
 Broke yes, but in a good way. No need to switch from kernel.org!
 
 Also the reason why you are seeing some srpms but not others is that 
 there is a second task that was running, to bring in srpms shared from 
 the 5.5/ tree ( os + updates ) that are still needed in 5.6/
 
 Its the new packages that are in 5.6/ which were not in eithe 5.5/os or 
 5.5/updates that are not on the mirrors at this point.
 
 - KB

Thanks Karanbir, 

Appreciate all your hard work!

--
Don Krause   
Head Systems Geek, 
Waver of Deceased Chickens.
Optivus Proton Therapy, Inc.
P.O. Box 608
Loma Linda, California 92354
909.799.8327 Tel
909.799.8366 Fax
dkra...@optivus.com
www.optivus.com
This message represents the official view of the voices in my head.








smime.p7s
Description: S/MIME cryptographic signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread aurfalien
Its pretty funny how flaming any thread with Centos 6 in it can get.

So the devs do/do not communicate, who cares.

When Centos 6 does come out, many will say O big daddy, thank you  
sooo much, I love you...  or something like that.

And the old adage about No one ever got fired for buying IBM may  
hold true today but it should be re written as When you buy IBM,  
people get laid off.

Jesus, the prices for IBM and even Oracle gear these days, WTF...

- aurf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread aurfalien
And think about how the Plutonians feel after there home was bumped  
down from planet to moon, or was cold worthless chunk rotating the Sun.

- aurf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread m . roth
aurfal...@gmail.com wrote:
 And think about how the Plutonians feel after there home was bumped
 down from planet to moon, or was cold worthless chunk rotating the Sun.

Equal rights for Pluto!

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 6 Update?

2011-04-21 Thread aurfalien

On Apr 21, 2011, at 10:22 AM, m.r...@5-cent.us wrote:

 aurfal...@gmail.com wrote:
 And think about how the Plutonians feel after there home was bumped
 down from planet to moon, or was cold worthless chunk rotating the  
 Sun.

 Equal rights for Pluto!

Sheee ku, thats what I be sayin.

- aurf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.6 and KVM failure

2011-04-21 Thread Kenni Lund
2011/4/21 Ian Forde ianfo...@gmail.com:
 Turns out that wasn't the only problem I faced in my migration.  With 2
 KVM servers, both sharing a volume mounted via NFS for VMs, I migrated
 all VMs to the second node, upgraded the first, them moved them all back
 to KVM1.  Instant disk corruption on all VMs.  Boom.

Are you sure it was the migration and not the raw/qcow2 error which
caused the disk corruption?

I just had two Windows Servers with image corruption after upgrading
from 5.5 to 5.6 and booting the first time with the raw setting,
before changing it to qcow2 :-/

These two images were both on the same host, which is plain CentOS 5
*BUT* with a 2.6.37 kernel (and therefore 2.6.37 KVM module) from
elrepo...

It could be my special case of running with a vanilla KVM-module +
CentOS KVM userspace which allows the corruption to happen, but if
other people are seeing disk corruption with the regular
kernel/kmod-kvm, then this known issue should probably have a big
fat red warning in the release notes..

Best regards
Kenni
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] User accounts management for small office

2011-04-21 Thread Jeff Boyce
Greetings -

This may be a little off-topic here so if someone wants to point me to a 
more appropriate mailing list I would appreciate it.

I administer the network for my small company and am preparing to install a 
new server in the next month or so.  It will be running CentOS 6 and 
function primarily as a Samba file server to 10 Windows workstations (XP, 
Vista, 7).  It will also host our OpenVPN server and possibly our FTP 
server; however I am hoping to move our FTP server to a gateway box when the 
new server is installed.

The issue that I would like to be able to resolve when the new server is 
installed, is that currently if a user wants to change the password on their 
Windows workstation, I have to manually update that new password on the 
Linux user account, and also manually change the Samba user account. 
Manually updating the password in three different locations is a minor 
headache that I would like to correct.  I have been researching and reading 
lots of information about account management to try and understand what is 
available, and what would be the best fit for my network size.  Much of what 
I have read is related to larger networks or larger user bases, which seem 
to have a lot of extraneous stuff that would be unnecessary in my small user 
environment.  I looked into OpenLDAP, and have recently been reading about 
Samba/Winbind.  But after encountering the following statement in the Samba 
documentation, I am still lost about what I could, or should, be using.
A standalone Samba server is an implementation that is not a member of a 
Windows NT4 domain, a Windows 200X Active Directory domain, or a Samba 
domain.  By definition, this means that users and groups will be created and 
controlled locally, and the identity of a network user must match a local 
UNIX/Linux user login. The IDMAP facility is therefore of little to no 
interest, winbind will not be necessary, and the IDMAP facility will not be 
relevant or of interest.

My only goal is to be able to allow my users to change their Windows 
password at their workstation and have it perpetuate through the system so 
that it also changes their Linux User and Samba User account passwords.  I 
don't expect to ever have more than a dozen users, so I want something that 
fits our size network and is simple to administer.  I am not looking for a 
how-to to set something up, but some opinions about what I should consider 
using, and why it would be a good fit to achieve my goal.  I can do the 
additional research to understand configuration once I know what I should be 
researching.  Thanks.  Please cc me directly, as I only get the list in 
daily digest mode.

Jeff Boyce

Meridian Environmental



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread Lamar Owen
On Thursday, April 21, 2011 07:56:27 AM John Hodrien wrote:
 If people think that disabling gpg checking is a good idea, you risk this
 finding its way into their yum.conf.  That's exactly what you've seen amongst
 some spacewalk users.

FWIW, there are some out there who don't even think unsigned packages are a 
problem.  As an extreme example of this, recently I saw on LinuxToday where 
there was a thread in an archlinux list about signed packages; most of the devs 
didn't consider them a priority.  At all.

One reason arch won't be in production here any time soon.

Unless you know exactly what you are doing and the full ramifications of doing 
it you should never disable gpgcheck, since mirrors can be hacked.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos



Re: [CentOS] User accounts management for small office

2011-04-21 Thread m . roth
Jeff Boyce wrote:
 Greetings -

 This may be a little off-topic here so if someone wants to point me to a
 more appropriate mailing list I would appreciate it.
snip
 The issue that I would like to be able to resolve when the new server is
 installed, is that currently if a user wants to change the password on
 their Windows workstation, I have to manually update that new password
on the
 Linux user account, and also manually change the Samba user account.
 Manually updating the password in three different locations is a minor
 headache that I would like to correct.  I have been researching and
snip
You *could* do it with openldap, with the WinDoze boxen authenticating
through that. Now, I'll warn you that though it may have improved, a few
years ago, openldap was a nightmare to configure, the documentation
dreadull where it wasn't almost useless, and googling involved a *lot* of
searching.

However, I did put it in in '06 for what wound up to be about 14 or 15
folks, and it worked, and they could change passwords themselves.

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread aurfalien
On Apr 21, 2011, at 11:51 AM, m.r...@5-cent.us wrote:

 Jeff Boyce wrote:
 Greetings -

 This may be a little off-topic here so if someone wants to point me  
 to a
 more appropriate mailing list I would appreciate it.
 snip
 The issue that I would like to be able to resolve when the new  
 server is
 installed, is that currently if a user wants to change the password  
 on
 their Windows workstation, I have to manually update that new  
 password
 on the
 Linux user account, and also manually change the Samba user account.
 Manually updating the password in three different locations is a  
 minor
 headache that I would like to correct.  I have been researching and
 snip
 You *could* do it with openldap, with the WinDoze boxen authenticating
 through that. Now, I'll warn you that though it may have improved, a  
 few
 years ago, openldap was a nightmare to configure, the documentation
 dreadull where it wasn't almost useless, and googling involved a  
 *lot* of
 searching.

Yes, agreed OpenLDAP is my suggestion as well.

As for Windows clients, you can either do;

Samba/LDAP tie in so that your LDAP domain also function as a PDC.

Or you can use pGina which is a Windows LDAP plugin that allows your  
Windows clients to auth direct to LDAP w/o the need to join a PDC first.

I prefer pGina but its not for every one.

- aurf


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.6 and KVM failure

2011-04-21 Thread Johnny Hughes
On 04/21/2011 01:16 PM, Kenni Lund wrote:
 2011/4/21 Ian Forde ianfo...@gmail.com:
 Turns out that wasn't the only problem I faced in my migration.  With 2
 KVM servers, both sharing a volume mounted via NFS for VMs, I migrated
 all VMs to the second node, upgraded the first, them moved them all back
 to KVM1.  Instant disk corruption on all VMs.  Boom.
 
 Are you sure it was the migration and not the raw/qcow2 error which
 caused the disk corruption?
 
 I just had two Windows Servers with image corruption after upgrading
 from 5.5 to 5.6 and booting the first time with the raw setting,
 before changing it to qcow2 :-/
 
 These two images were both on the same host, which is plain CentOS 5
 *BUT* with a 2.6.37 kernel (and therefore 2.6.37 KVM module) from
 elrepo...
 
 It could be my special case of running with a vanilla KVM-module +
 CentOS KVM userspace which allows the corruption to happen, but if
 other people are seeing disk corruption with the regular
 kernel/kmod-kvm, then this known issue should probably have a big
 fat red warning in the release notes..

It is in the release notes as a known issue ...

I had this issue and tried to reboot my VM server several times and
there was no disk corruption.

I just tried booting a machine 25 times with the raw setting and it did
not corrupt the image.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread Scott Robbins
On Thu, Apr 21, 2011 at 02:51:35PM -0400, m.r...@5-cent.us wrote:
 Jeff Boyce wrote:
  Greetings -
 


  installed, is that currently if a user wants to change the password on
  their Windows workstation, I have to manually update that new password
 on the
  Linux user account, and also manually change the Samba user account.
  Manually updating the password in three different locations is a minor
  headache that I would like to correct.  I have been researching and
 snip


 You *could* do it with openldap, with the WinDoze boxen authenticating
 through that. Now, I'll warn you that though it may have improved, a few
 years ago, openldap was a nightmare to configure, the documentation
 dreadull where it wasn't almost useless, and googling involved a *lot* of
 searching.

I have a page on openldap--though I don't cover it with samba--that is a
cut above most of the documentation, in my not at all humble opinion--I
fully agree with Mark that the vast majority of ldap documentation is
horrendous.  Some folks have found my page useful, so I'll offer it for
consideration.

http://home.roadrunner.com/~computertaijutsu/ldap.html



-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Cordelia: I do what I want to do. And I wear what I want to wear.
And you know what, I'll date whoever the hell I want to date... 
no matter how lame he is. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Still a kvm problem after 5.6 upgrade

2011-04-21 Thread Johnny Hughes
On 04/21/2011 11:01 AM, Kenni Lund wrote:
 2011/4/21 Johnny Hughes joh...@centos.org:
 On 04/21/2011 06:11 AM, David McGuffey wrote:
 redlibvirtError: internal error Process exited while reading console log
 output: qemu: could not open disk image /dev/hda

 You should not need to do anything in virsh to dump a file ... there
 should be an xml file in /etc/libvirt/qemu/ for every VM already.
 
 The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you
 should never edit these files directly while the libvirtd service is
 running. You should either use 'virsh edit [vm_name]' or alternatively
 virsh dump followed by virsh define. If you edit the file directly
 while some manager is running (like virt-manager in CentOS), your
 changes will most likely conflict with, or get overwritten by,
 virt-manager. Nothing critical should happen, but I don't see any
 reason for encouraging doing it The Wrong Way(TM).

OK ... I just turn off libvirtd and edit the file, then restart libvirtd
and start the VM.

I am an old school SysIII unix admin, so I just edit files by hand all
the time.

If it is wrong, then I guess doing it right is OK.  Though dumping and
importing seem much harder than vi to me.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread Les Mikesell
On 4/21/2011 1:39 PM, Jeff Boyce wrote:
 Greetings -

 This may be a little off-topic here so if someone wants to point me to a
 more appropriate mailing list I would appreciate it.

 I administer the network for my small company and am preparing to install a
 new server in the next month or so.  It will be running CentOS 6 and
 function primarily as a Samba file server to 10 Windows workstations (XP,
 Vista, 7).  It will also host our OpenVPN server and possibly our FTP
 server; however I am hoping to move our FTP server to a gateway box when the
 new server is installed.

Have you looked at the ClearOS distribution?  It comes up with a simple 
web interface to manage all of this with authentication done with a 
pre-configured LDAP setup.  I think LDAP replication is slated for the 
next version - which is waiting for CentOS 6 for it's components but 
you'd only need that if you have several different servers and want 
changes to propagate across them.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread aurfalien
On Apr 21, 2011, at 12:09 PM, Scott Robbins wrote:

 I have a page on openldap--though I don't cover it with samba--that  
 is a
 cut above most of the documentation, in my not at all humble  
 opinion--I
 fully agree with Mark that the vast majority of ldap documentation is
 horrendous.  Some folks have found my page useful, so I'll offer it  
 for
 consideration.

 http://home.roadrunner.com/~computertaijutsu/ldap.html

Nice link, thanks for that.

Wished I would have known about it all those moons ago.  I would also  
advice subing to the openldap mailing lists but keep in mind its  
HEAVILY moderated so be mindful of your posts regarding topic.  They  
will deny the post if they feel its for another ldap list.  A very  
very anal list indeed.


Also for the Samba bit, you can look here as it helped me;

http://pbraun.nethence.com/doc/net/samba-ldap.html

- aurf
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread m . roth
Scott Robbins wrote:
snip
 I have a page on openldap--though I don't cover it with samba--that is a
 cut above most of the documentation, in my not at all humble opinion--I
 fully agree with Mark that the vast majority of ldap documentation is
 horrendous.  Some folks have found my page useful, so I'll offer it for
 consideration.

 http://home.roadrunner.com/~computertaijutsu/ldap.html

And after a *very* brief glance, I've bookmarked it for future reference,
since it has things like *examples* of what needs doing, and how to get
there

Thanks, Scott.

 Cordelia: I do what I want to do. And I wear what I want to wear.
 And you know what, I'll date whoever the hell I want to date...
 no matter how lame he is.

Vorkosigan?

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread m . roth
Les Mikesell wrote:
 On 4/21/2011 1:39 PM, Jeff Boyce wrote:
 Greetings -

 This may be a little off-topic here so if someone wants to point me to a
 more appropriate mailing list I would appreciate it.

 I administer the network for my small company and am preparing to
 install a new server in the next month or so.  It will be running
CentOS 6 and
 function primarily as a Samba file server to 10 Windows workstations
 (XP, Vista, 7).  It will also host our OpenVPN server and possibly our FTP
 server; however I am hoping to move our FTP server to a gateway box when
 the new server is installed.

 Have you looked at the ClearOS distribution?  It comes up with a simple
 web interface to manage all of this with authentication done with a
 pre-configured LDAP setup.  I think LDAP replication is slated for the
 next version - which is waiting for CentOS 6 for it's components but
 you'd only need that if you have several different servers and want
 changes to propagate across them.

Actually, I found webmin helpful in setting up and testing openldap.

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Still a kvm problem after 5.6 upgrade

2011-04-21 Thread Akemi Yagi
On Thu, Apr 21, 2011 at 12:10 PM, Johnny Hughes joh...@centos.org wrote:
 On 04/21/2011 11:01 AM, Kenni Lund wrote:

 The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you
 should never edit these files directly while the libvirtd service is
 running. You should either use 'virsh edit [vm_name]' or alternatively
 virsh dump followed by virsh define. If you edit the file directly
 while some manager is running (like virt-manager in CentOS), your
 changes will most likely conflict with, or get overwritten by,
 virt-manager. Nothing critical should happen, but I don't see any
 reason for encouraging doing it The Wrong Way(TM).

 OK ... I just turn off libvirtd and edit the file, then restart libvirtd
 and start the VM.

 I am an old school SysIII unix admin, so I just edit files by hand all
 the time.

I hear you :-D

 If it is wrong, then I guess doing it right is OK.

If what I have seen/read is correct, 'virsh edit' has an additional
feature. It will check for errors upon exit. So, it's much like visudo
(versus vi).

When you move kvm guests across different platforms (for example
Fedora to CentOS), editing config files using 'virsh edit' will help.
In this case, you will be running 'virsh define' which may also have a
checking mechanism (not quite sure about this though).

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread Les Mikesell
On 4/21/2011 2:24 PM, m.r...@5-cent.us wrote:
 Les Mikesell wrote:
 On 4/21/2011 1:39 PM, Jeff Boyce wrote:
 Greetings -

 This may be a little off-topic here so if someone wants to point me to a
 more appropriate mailing list I would appreciate it.

 I administer the network for my small company and am preparing to
 install a new server in the next month or so.  It will be running
 CentOS 6 and
 function primarily as a Samba file server to 10 Windows workstations
 (XP, Vista, 7).  It will also host our OpenVPN server and possibly our FTP
 server; however I am hoping to move our FTP server to a gateway box when
 the new server is installed.

 Have you looked at the ClearOS distribution?  It comes up with a simple
 web interface to manage all of this with authentication done with a
 pre-configured LDAP setup.  I think LDAP replication is slated for the
 next version - which is waiting for CentOS 6 for it's components but
 you'd only need that if you have several different servers and want
 changes to propagate across them.

 Actually, I found webmin helpful in setting up and testing openldap.

Webmin is a very different concept.  It is a mostly a web-form editor 
for the underlying program's config file that may know enough to keep 
you from making/saving the kinds of syntax errors that you can make with 
a normal text editor, but you still have to know what program to start 
for each service, know the relationships between programs, and make 
separate changes to each program, knowing what all of the options do.

ClearOS and the similar/earlier SME server are much more task/service 
oriented with preconfigured settings to make the common services you 
want come up and forms that relate to what you want to do rather than 
having to deal with options in several different different underlying 
programs.  So even though it is running the same samba and openldap as a 
Centos install, you don't need to change anything to make them work 
together.  And some things that are conceptually even harder, like 
optionally enabling openvpn per user and generating client certificates 
are checkbox/push button items.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread Devin Reade
I'd say base it on OpenLDAP.  As far as the password change option,
one simple but effective system is the passwd.cgi script from cgipaf:

http://freshmeat.net/projects/cgipaf/

Although you already have to provide your old password to do an 
update, putting it behind http-basic authentication will allow 
you to use things like fail2ban to protect against brute forcing.

Devin

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread Devin Reade
--On Thursday, April 21, 2011 01:49:16 PM -0600 Devin Reade g...@gno.org
wrote:

 As far as the password change option,
 one simple but effective system is the passwd.cgi script from cgipaf:
 
 http://freshmeat.net/projects/cgipaf/

Sorry, brain fart.

Yes, cgipaf will allow you to change samba passwords at the same time,
but it's been a few years since I needed to support samba and so I don't
have a *current* assessment of it.  (I currently use a functionally
similar cgi program that updates LDAP via PAM instead, but knows nothing
about samba.)

Devin

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.6 and KVM failure

2011-04-21 Thread Ian Forde
On Thu, 2011-04-21 at 20:16 +0200, Kenni Lund wrote:
 2011/4/21 Ian Forde ianfo...@gmail.com:
  Turns out that wasn't the only problem I faced in my migration.  With 2
  KVM servers, both sharing a volume mounted via NFS for VMs, I migrated
  all VMs to the second node, upgraded the first, them moved them all back
  to KVM1.  Instant disk corruption on all VMs.  Boom.
 
 Are you sure it was the migration and not the raw/qcow2 error which
 caused the disk corruption?

In the second pair of KVM servers, I'd made the changes to the xml files
and restarted libvirtd.  Then did migration of a VM.  Then watched the
corruption.  It's possible I may have needed to reboot the VM before
migrating, so that KVM absolutely knows what it is.  But nevertheless,
I'm now a little gunshy about live migration...

 I just had two Windows Servers with image corruption after upgrading
 from 5.5 to 5.6 and booting the first time with the raw setting,
 before changing it to qcow2 :-/
 
 These two images were both on the same host, which is plain CentOS 5
 *BUT* with a 2.6.37 kernel (and therefore 2.6.37 KVM module) from
 elrepo...
 
 It could be my special case of running with a vanilla KVM-module +
 CentOS KVM userspace which allows the corruption to happen, but if
 other people are seeing disk corruption with the regular
 kernel/kmod-kvm, then this known issue should probably have a big
 fat red warning in the release notes..

Yeah.  I completely agree.  I've got a steaming mess of VMs that I now
have to go and rebuild...

-I

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] KVM virt-install on disk image - no space

2011-04-21 Thread Jussi Hirvi
On 21.4.2011 19.04, Paul Heinlein wrote:
 In my experience, virt-install will create the disk image when passed
 a filename via --disk=path=/path/to/nonexistent/disk.dsk,size=15

 In other words, I'd suggest skipping the disk-creation step...

Thanks Paul - it works! I wonder if the disk image will be of type 
qcow2. I guess I will soon find out.

- Jussi

-- 
Jussi Hirvi * Green Spot
Suvilahdenkatu 1 B 78 * 00500 Helsinki * Finland
Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms)
jussi.hi...@greenspot.fi * http://www.greenspot.fi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] KVM virt-install on disk image - no space

2011-04-21 Thread Jussi Hirvi
On 21.4.2011 23.17, Jussi Hirvi wrote:
 I wonder if the disk image will be of type
 qcow2. I guess I will soon find out.

Nope. Command qemu-img info.. tells me that the image type is raw. 
But I don't think I need any of the qcow2 specialties.

- Jussi

-- 
Jussi Hirvi * Green Spot
Suvilahdenkatu 1 B 78 * 00500 Helsinki * Finland
Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms)
jussi.hi...@greenspot.fi * http://www.greenspot.fi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] iscsi multipath fails

2011-04-21 Thread Adam Wead
Hi all,

I have a Dell server running cent 5.6, new install, connecting to an IBM
DS3500.  I have configured iscsi connections using iscsid and can log into
the targets on the IBM.  I can also mount the LUNs when accessing them from
their active controller path.  When I throw multipath into the mix, it fails
completely.  Multipath is working, when I run multipath -ll it shows me the
correct active path and it is mapped to a device under /dev/mapper.
However, if I try to access the device from that path, no luck.  A mount
request just hangs and eventually there's a kernel error message.

I'm using the native rdac drivers that came with the OS.  Anyone using
something similar?  My guess is that it's either bad drivers, or a bad
multipath config.  I started with the default, but after tweaking different
parameters, it's still not working.

Any advice is greatly appreciated.

thanks,

Adam Wead
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] User accounts management for small office

2011-04-21 Thread Scott Robbins
On Thu, Apr 21, 2011 at 03:23:20PM -0400, m.r...@5-cent.us wrote:
 Scott Robbins wrote:
 snip

 
  http://home.roadrunner.com/~computertaijutsu/ldap.html
 
 And after a *very* brief glance, I've bookmarked it for future reference,
 since it has things like *examples* of what needs doing, and how to get
 there

Yeah, I learned about that example stuff from using FreeBSD.  :)  Most
of their man pages have it.  Seriously, after literally months of trying
to figure it out, I wrote the page that I wished I'd had when I was
trying to get it done .

 
 Thanks, Scott.
 
  Cordelia: I do what I want to do. And I wear what I want to wear.
  And you know what, I'll date whoever the hell I want to date...
  no matter how lame he is.

From my Buffy the Vampire quote generator, made when I had even less of
a life.  :)

http://home.roadrunner.com/~computertaijutsu/buffquote.html

It was actually made into an ArchLinux package by a Buffy fan.  


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Spike: You're not friends. You'll never be friends. You'll be in 
love 'til it kills you both. You'll fight, and you'll shag, and
you'll hate each other 'til it makes you quiver, but you'll never
be friends. Real love isn't brains, children. It's blood. It's 
blood screaming inside you to work its will. I may be love's 
bitch, but at least I'm man enough to admit it. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to install binutils-devel on Centos Linux5.5

2011-04-21 Thread Frank Chang

Simon Matter and Ned Slider, Thank you for your answers. This afternoon , I 
installed binutils-devel on Centos Linux 5.5. Then , I installed all the QT 
packages except for the two QT client packages. 
 When I ran ./configure --with-kernel-support on the OProfile Linux 
profiler distribution 0.9.6, I get the warning: a working QT was not found: no 
GUI was built. How do I resolve this issue on Centos Linux 5.5? Thank you.  
   ___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 5.6 - SRPM's

2011-04-21 Thread Bob Hepple
On Thu, 21 Apr 2011 11:30:37 +0100
Karanbir Singh mail-li...@karan.org wrote:

 On 04/21/2011 12:18 AM, Bob Hepple wrote:
  Hmmm - it's 10 days on and I still can't see all of the [a-l]
  *.src.rpm's. I strongly suspect that something's gone wrong - or
  perhaps I'm looking in the wrong place -
 
 
 Yes, you are right. Amongst the various tests, there is one that checks 
 for dupe packages, and we have 2 anaconda srpms this time, the i386 and 
 x86_64 are built from identical srpm's; but I had to bump version on one 
 arch, without needing to do that on the other. So there are 2 
 anaconda-srpm in the SRPMS/ repo, causing the test to fail and that 
 entire lot not going through. I like the test, and would like to keep it 
 in place, so will do a force-pass for now and that should see the 
 packages go through at some point today.
 

I'll look out them.

Thanks KB, you're legend!

-- 
Bob Hepple bhep...@promptu.com
ph: 07-5584-5908 Fx: 07-5575-9550
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iscsi multipath fails

2011-04-21 Thread Ross Walker
On Apr 21, 2011, at 4:28 PM, Adam Wead amsterda...@gmail.com wrote:

 Hi all,
 
 I have a Dell server running cent 5.6, new install, connecting to an IBM 
 DS3500.  I have configured iscsi connections using iscsid and can log into 
 the targets on the IBM.  I can also mount the LUNs when accessing them from 
 their active controller path.  When I throw multipath into the mix, it fails 
 completely.  Multipath is working, when I run multipath -ll it shows me the 
 correct active path and it is mapped to a device under /dev/mapper.  However, 
 if I try to access the device from that path, no luck.  A mount request just 
 hangs and eventually there's a kernel error message.
 
 I'm using the native rdac drivers that came with the OS.  Anyone using 
 something similar?  My guess is that it's either bad drivers, or a bad 
 multipath config.  I started with the default, but after tweaking different 
 parameters, it's still not working.
 
 Any advice is greatly appreciated.

Check the archives, there was someone who posted their multipathd config for an 
MD3000i a month ago which should be applicable (with a vendor/model name 
change).

-Ross

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] KVM virt-install on disk image - no space

2011-04-21 Thread Tsuyoshi Nagata
Hi Jussi
After installing guest image,
  Convert it from raw to qcow2 by convert command.

qemu-img convert -f raw disk0.raw -O qcow2 newdisk0.qcow2

Now you can mount newdisk  to empty VM with virt-manager.
Or you can edit DOMAIN.xml as follows..

/var/lib/libvirt/qemu/DOMAIN.xml:

domain type='kvm'
   namevm1/name
   memory524288/memory
   vcpu1/vcpu
   os
 type arch='i686'hvm/type
 boot dev='hd'/
   /os
   on_poweroffdestroy/on_poweroff
   on_rebootrestart/on_reboot
   on_crashrestart/on_crash
   devices
 emulator/usr/libexec/qemu-kvm/emulator
 disk type='file' device='disk'
   driver name='qemu' type='qcow2'/
   source file='/home/tsuyoshi/test/newdisk0.qcow2'/
   target dev='hda' bus='ide'/
 /disk
 serial type='pty'
   target port='0'/
 /serial
 console type='pty'
   target port='0'/
 /console
   /devices
/domain

--
Tsuyoshi

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to install binutils-devel on Centos Linux5.5

2011-04-21 Thread Phil Schaffner
Frank Chang wrote on 04/21/2011 05:36 PM:
 Simon Matter and Ned Slider, Thank you for your answers. This afternoon
 , I installed binutils-devel on Centos Linux 5.5. Then , I installed all
 the QT packages except for the two QT client packages.
 When I ran ./configure --with-kernel-support on the OProfile Linux
 profiler distribution 0.9.6, I get the warning: a working QT was not
 found: no GUI was built. How do I resolve this issue on Centos Linux
 5.5? Thank you.

First, the current release is 5.6, so 5.5 is unsupported.

More than likely, the QT package on CentOS is not new enough to be 
compatible with a Fedora 14 package.  Either run Fedora, wait for 
CentOS-6 which has a better chance of working, or try an evaluation copy 
of RHEL6, or give Scientific Linux 6 a test drive in the interim.

Phil
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] iscsi multipath fails

2011-04-21 Thread Peter Brady
On 22/04/11 9:15 AM, Ross Walker wrote:
 Check the archives, there was someone who posted their multipathd config for 
 an MD3000i a month ago which should be applicable (with a vendor/model name 
 change).

Also check Dell's linux wiki at:

http://linux.dell.com/

As some of my new R310s and 510s needed some Dell rpms to run efficiently.

Good luck,
-pete

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Still a kvm problem after 5.6 upgrade

2011-04-21 Thread David McGuffey

On Thu, 2011-04-21 at 18:01 +0200, Kenni Lund wrote:
 2011/4/21 Johnny Hughes joh...@centos.org:
  On 04/21/2011 06:11 AM, David McGuffey wrote:
  redlibvirtError: internal error Process exited while reading console log
  output: qemu: could not open disk image /dev/hda
 
  You should not need to do anything in virsh to dump a file ... there
  should be an xml file in /etc/libvirt/qemu/ for every VM already.
 
 The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you
 should never edit these files directly while the libvirtd service is
 running. You should either use 'virsh edit [vm_name]' or alternatively
 virsh dump followed by virsh define. If you edit the file directly
 while some manager is running (like virt-manager in CentOS), your
 changes will most likely conflict with, or get overwritten by,
 virt-manager. Nothing critical should happen, but I don't see any
 reason for encouraging doing it The Wrong Way(TM).
 
 Best regards
 Kenni

Problem may be an SELinux problem.  Here is the alert. Notice the
reference to '/dev/hda' (which is the virtual machine boot disk), and
the SELinux context 'virt_content_t'

I'm going to create /.autorelable and reboot to ensure the upgrade
properly relabled the filesystems.


Summary:

SELinux is preventing pam_console_app (pam_console_t) getattr
to /dev/hda
(virt_content_t).

Detailed Description:

SELinux denied access requested by pam_console_app. It is not expected
that this
access is required by pam_console_app and this access may signal an
intrusion
attempt. It is also possible that the specific version or configuration
of the
application is causing it to require additional access.

Allowing Access:

Sometimes labeling problems can cause SELinux denials. You could try to
restore
the default system file context for /dev/hda,

restorecon -v '/dev/hda'

If this does not work, there is currently no automatic way to allow this
access.
Instead, you can generate a local policy module to allow this access -
see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can
disable
SELinux protection altogether. Disabling SELinux protection is not
recommended.
Please file a bug report
(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.

Additional Information:

Source Contextsystem_u:system_r:pam_console_t:SystemLow-
  SystemHigh
Target Contextsystem_u:object_r:virt_content_t
Target Objects/dev/hda [ blk_file ]
Sourcepam_console_app
Source Path   /sbin/pam_console_apply
Port  Unknown
Host  d...@mydomain.net
Source RPM Packages   pam-0.99.6.2-6.el5_5.2
Target RPM Packages   
Policy RPMselinux-policy-2.4.6-300.el5
Selinux Enabled   True
Policy Type   targeted
MLS Enabled   True
Enforcing ModeEnforcing
Plugin Name   catchall_file
Host Name  d...@mydomain.net
Platform  Linux  d...@mydomain.net
2.6.18-238.9.1.el5
  #1 SMP Tue Apr 12 18:10:13 EDT 2011 x86_64
x86_64
Alert Count   48
First SeenWed 13 Apr 2011 08:41:32 AM EDT
Last Seen Thu 21 Apr 2011 07:05:23 AM EDT
Local ID  9ee6c9a9-3eda-4082-84d3-5741ea9ff688
Line Numbers  

Raw Audit Messages

host= d...@mydomain.net type=AVC msg=audit(1303383923.130:356): avc:
denied  { getattr } for  pid=15025 comm=pam_console_app
path=/dev/hda dev=tmpfs ino=6206
scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023
tcontext=system_u:object_r:virt_content_t:s0 tclass=blk_file

host= d...@mydomain.net type=SYSCALL msg=audit(1303383923.130:356):
arch=c03e syscall=4 success=no exit=-13 a0=7fff2014b170
a1=7fff2014b1a0 a2=7fff2014b1a0 a3=18cba490 items=0 ppid=15014 pid=15025
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm=pam_console_app
exe=/sbin/pam_console_apply
subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)

Dave M



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Still a kvm problem after 5.6 upgrade

2011-04-21 Thread David McGuffey

On Thu, 2011-04-21 at 21:09 -0400, David McGuffey wrote:
 On Thu, 2011-04-21 at 18:01 +0200, Kenni Lund wrote:
  2011/4/21 Johnny Hughes joh...@centos.org:
   On 04/21/2011 06:11 AM, David McGuffey wrote:
   redlibvirtError: internal error Process exited while reading console log
   output: qemu: could not open disk image /dev/hda
  
   You should not need to do anything in virsh to dump a file ... there
   should be an xml file in /etc/libvirt/qemu/ for every VM already.
  
  The XML-files in /etc/libvirt/qemu represent libvirt defined VMs, you
  should never edit these files directly while the libvirtd service is
  running. You should either use 'virsh edit [vm_name]' or alternatively
  virsh dump followed by virsh define. If you edit the file directly
  while some manager is running (like virt-manager in CentOS), your
  changes will most likely conflict with, or get overwritten by,
  virt-manager. Nothing critical should happen, but I don't see any
  reason for encouraging doing it The Wrong Way(TM).
  
  Best regards
  Kenni
 
 Problem may be an SELinux problem.  Here is the alert. Notice the
 reference to '/dev/hda' (which is the virtual machine boot disk), and
 the SELinux context 'virt_content_t'
 
 I'm going to create /.autorelable and reboot to ensure the upgrade
 properly relabled the filesystems.
 
 
 Summary:
 
 SELinux is preventing pam_console_app (pam_console_t) getattr
 to /dev/hda
 (virt_content_t).
 
 Detailed Description:
 
 SELinux denied access requested by pam_console_app. It is not expected
 that this
 access is required by pam_console_app and this access may signal an
 intrusion
 attempt. It is also possible that the specific version or configuration
 of the
 application is causing it to require additional access.
 
 Allowing Access:
 
 Sometimes labeling problems can cause SELinux denials. You could try to
 restore
 the default system file context for /dev/hda,
 
 restorecon -v '/dev/hda'
 

Yep...each time I try to start the VM, sealert increments this error by
one.

I created /.autorelable and rebooted.  SELinux relabeled everything, but
the sealert still fires when I try to start the VM.

I did a qemu-img path_to_vm/vm.img and the format is declared 'raw'
Therefore I should not be editing the vm.xml file and changing 'raw' to
'qcow2'

Problem is definately with the SELlnux labels in the 5.6 upgrade.

Dave M


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] How to merge many LDAP Servers to the One Server

2011-04-21 Thread sync
Hi , all :


 I have many LDAP Servers which are 389 LDAP Server  on different network .
So I want to merge them to the one server.


Could someone can give some suggestions?


Thanks in advance...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos