Ira Abramov wrote:

is there an official procedure for this or should one
"improvise"?

What raid level do you want to add?

RAID1.

there are two standalone disks in there, they want to add another to
mirror one of the existing ones.
SCSI? Do NOT use raid-1 on two IDE disks that reside on the same bus, as performance is going to suck big time. I don't know how well it will work with two disks on separate buses, but another disk on one of them.

In theory, SecurePlatform is no different than any other Linux. It's just a standard system with a couple of extra software pieces, a couple of which in the kernel.

plus there is no compiler, no kernel source readily available, old
libraries since it's based on RHL 7.x, and quite a few other changes.
That's not a problem. I believe you will find a kernel source on the CD, but if not, just email Check Point and ask for one. They were responsive to GPL compliance requests in the past, and I doubt that has changed.

As for the rest, just install another SPLAT on a spare machine, and compile an RPM there.

oh, and I didn't read any fine print, but I bet adding GCC on my own to
the machine voids the warrenty or something.

THEY PROVIDE WARRANTY????? Wow, that's excellent news.

it's supported as an
appliance I am guessing, so I would not want to just go around CP's
protections (easy at it may be with a root password) but instead use
what they recommend to do.
I don't think so. It's an RPM based distro. I'm also not aware that it's supported at all.

One more thing - recompiling the (non-existant) kernel source may also
violate the warrenty, so that's why I was wondering if the official
supported kernel supported MD, or the older method of /etc/raidtab
(whatever it was called) or none at all.
Like I said, I'm not sure there is a warranty. Even if there is, as you and I both know that it won't break anything, just resort to non-raided system with the original kernel whenever you need support.

The general procedure for setting up md on the fly is to set up the raid with one failed disk (being the disk that currently holds the data), copy the data to the raid, and then attaching the last disk to the raid. I've only tried it on raid-1 before, but there is no reason for it not to work on any other raid level.

no, except the client wants to do it on the fly with a living system, at
minimum downtime. sounds a bit of a problem to me.

the howtos indeed tell you to set up MD in failed mode, move over the
stuff to it, reboot the system from the new MD, format the old disk (or
if you are sane, get a virgin disk) and "re"attach the "failed" pats of
the raid.

they don't discuss doing it in-place by just adding a disk and synching
to it.
I believe that if you tried to phrase to yourself the phases of what you describe, you will find out that the request makes no sense. The root FS is mounted over /dev/hda1, and you want to move it to /dev/md0. How can you do that without unmounting /dev/hda1?

Anyways, that's just one reboot worth of down time. I'm not aware of any way of replacing the root FS of a running system without a reboot. You can pivot root, I guess, but that won't help with unmounting the old files, as file in use will prevent you from unmounting the old file system anyways.

This is before I mention that you WANT that reboot, so as not to find out that you forgot something important and the new system will not boot (see next paragraph).

Word of advice from someone who's been there, after setting up the MD, chroot into it and regenerate the initrd. Your original initrd likely did not contain md, which means you won't be able to boot from it after the change. Figuring out this single advice costed me a day of my time to achieve. I'll invoice you by mail :-).

Depends on whether the SecurePlatform installation allows raid installation.
well, that's something I'd love to know.
         Shachar

--
Shachar Shemesh
Lingnu Open Source Consulting ltd.
http://www.lingnu.com/


=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to