On Sun, 29 Jul 2001, Tzafrir Cohen wrote:
> On Sun, 29 Jul 2001, guy keren wrote:
>
> >
> > On Sun, 29 Jul 2001, Shlomi Fish wrote:
> >
> > > If we want to keep the machine up-to-date with the latest software, it
> > > will have some downtime in any case. As long as we announce it some time
> > > in advance, it should not pose a problem.
> > >
> > > But you are right that it is better to do it, before we re-enact the
> > > mirrors.
> >
> > noet that Ilya is alerady resyncing the mirrors by now, so such downtime
> > should also be coordinated with him.
> >
Isn't Ilya subscribed to iglu-web?
> > > True. But we may need to install less stuff if we upgrade.
> >
> > i dont think i like redhat any more. RH7.1 still comes with a seperate
> > compiler for the kernel, right? what about 'specialized' software we got
> > now, such as a given configuration of apache, and zope, and qmail? won't
> > they need to be recompiled, in order to work with the new glibc that comes
> > with RH7.1 (at least newwer then RH6.2) ?
> >
> > note that the only programs worth upgrading are those that give external
> > services: kernel (to 2.2.19), qmail, apache, zope, sshd, proftpd. and
> > those you have to make yourself anyway, since they never come with the
> > ditribution in the proper format. the only other thing one needs to
> > upgrade are basic libraries (e.g. glibc).
>
> sshd: no point in compiling and maintaining your own. The distros do a
> good job in keeping up with various bugs here, and its configuration
> doesn't need much tweaking (except small number of files under /etc)
>
> Currently installed is the openssh-2.1.1p4-1
>
Yes, but there's already openssh-2.9p2 by now. And judging from LWN, there
has been a lot of OpenSSH-related security holes since the time we
installed it.
Besides, the new OpenSSH will give us ssh2 support and other goodies.
> apache: we currently run apache from RPMs. But any upgrade can probably be
> problematic...
>
Why? We could try upgrading Apache, by upgrading to the RH7.1 RPMs (or
those of the security updates if such exist). That will mean downtime, but
is doable.
The Apache config file did not change between the 1.3.x versions, so we
should not worry about that. But then there are package dependencies. We
might need the new glibc or whatever. Tzafrir, what exactly did you refer
to when saying "problematic" ?
> zope: Needed an upgrade, right? Anyway, there is such a package in 7.1's
> powertools. I don't know about its quality and I have no idea what does an
> upgrade require.
>
On iglu, Zope was installed by using an RPM package.
In fact, Chen installed the new Zope somewhere, but I'm not sure if she
converted the old site to use it. Chen, could we get an ETA for it?
> >
> > i think an overal upgrde sohuld be done only when there is a distribution
> > with a stable gcc 3.0(3.1? :) ) version, where the same compiler can
> > compile both kernel and usermode stuff.
>
> What's the big deal about keeping egcs around just for compiling the
> kernel?
>
> Keep in mind that the kernel people have problems with new compilers in
> general because they use ugly code from time to time, and changes in the
> ocmpiler tend to break that code. Thus I'm not sure waiting for 3.1 is
> worth the wait.
>
I think Tzafrir has a point. I always wondered why the Linux kernel seems
to become incompatible with the latest gcc's. In any case, compiling the
kernel is not a day-to-day task, and if we got to have a separate compiler
for it, we can live with that.
Regards,
Shlomi Fish
> --
> Tzafrir Cohen
> mailto:[EMAIL PROTECTED]
> http://www.technion.ac.il/~tzafrir
>
>
> ----------------------------------------------------------------------------
> To unsubscribe, send a message to [EMAIL PROTECTED]
> Archives available at http://www.mail-archive.com/[email protected]/
>
----------------------------------------------------------------------
Shlomi Fish [EMAIL PROTECTED]
Home Page: http://t2.technion.ac.il/~shlomif/
Home E-mail: [EMAIL PROTECTED]
A more experienced programmer does not make less bugs. He just realizes
what went wrong more quickly.
----------------------------------------------------------------------------
To unsubscribe, send a message to [EMAIL PROTECTED]
Archives available at http://www.mail-archive.com/[email protected]/
