Re: [CentOS] HP ProLiant DL380 G5
On 8/21/2014 9:50 PM, Keith Keller wrote: > On 2014-08-22, Valeri Galtsev wrote: >> > >> >3ware was independent company till it was first bought by AMCC, then LSI >> >bought them from AMCC. I didn't know LSI sold them to someone else, > Sorry, I was not clear: LSI was bought, not just 3ware. If you look at > LSI's home page, it says "An Avago Technologies Company". there's been a whole lot of merging and splitting. Avago used to be HP's semiconductor business, was spun off in the great split/merger with Compaq as part of Aglient, then in 2005 kicked to the curb as an independent. They are big on analog, mixed signal, and microwave semiconductors. LSI had acquired 3Ware, ONStor, a bunch more, and merged them into Engenio, which was their NAS/SAN division, making OEM storage arrays sold by IBM, HP, Dell and others. Engenio has been sold to Network Appliance, the original NAS company. LSI acquired the Sandforce SSD chip business. Avago acquired and merged with LSI. Avago unbundled Sandforce and sold it to Seagate. Avago sold LSI's networking stuff to Intel just last week. AFAIK, Avago still sells the LSI sas chips and both megaraid and 3ware raid controllers. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On 2014-08-22, Valeri Galtsev wrote: > > 3ware was independent company till it was first bought by AMCC, then LSI > bought them from AMCC. I didn't know LSI sold them to someone else, Sorry, I was not clear: LSI was bought, not just 3ware. If you look at LSI's home page, it says "An Avago Technologies Company". --keith -- kkel...@wombat.san-francisco.ca.us ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On 8/21/2014 5:49 PM, Valeri Galtsev wrote: > I never heard about any LSI card called RAID which are not hardware RAID. the base LSI SAS HBA cards, like the 2008 chip (9211-8i etc boards) have microcoded hardware raid without any write buffer or battery backup Its not quite fake raid but its kinda in limbo.. I *much* prefer to use these cards in IT mode, which requires reflashing the firmware and BIOS, as they always seem to be shipped in IR mode. IT mode is plain SAS2 Initiator-Target mode, where the disks are just plain disks without needing to create volumes or any other nonsense. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On Thu, August 21, 2014 6:47 pm, Keith Keller wrote: > On 2014-08-21, Valeri Galtsev wrote: >> (And I do not include into hardware RAID these fake "raid" cards >> that rely on "driver" - which are indeed software RAID cards. 3ware >> never >> fell that low to make/sell any of such junk. Somebody who knows LSI >> better >> than I do will probably say the same about them). > > LSI has owned 3ware for some time (who in turn were recently gobbled by > some other company). 3ware was independent company till it was first bought by AMCC, then LSI bought them from AMCC. I didn't know LSI sold them to someone else, www.3ware.com still redirects to LSI. To the credit of all 3ware owners, they left nicely working 3ware (engineering, manufacturing, etc) mechanism as is without destroying it. Which is rare, and they deserve my respect for that alone. I do like LSI too, and have a few of their megaraid controllers on long lived and still very reliable boxes. I do like 3ware more as as you said it has more transparent UI, which in my book diminishes chance of human error tremendously. And I'm merely human. I do like 3ware is coming with daemon that watches and notifies me when necessary. > The LSI MegaRAID cards are real hardware RAID. I never heard about any LSI card called RAID which are not hardware RAID. I can not say the same about, say, Adaptec or HighPoint to name two. Some of Adaptec and some of HighPoint cards even though they are sold as "RAID" cards are junk and have no place in our server room. Areca, probably, is one more company whose RAID cards all are indeed hardware RAID cards (I have 3 or 4 Areca cards in our server room). So let me name them separately (I consider bad guys everybody who sells as RAID card at least one product which is not hardware RAID card, they confuse the world and interfere with fair profits of good guys): good guys: LSI, 3ware, Areca bad guys: Adaptec, HighPoint Somebody correct me if/where I'm wrong. Valeri > What I have heard, but only validated the former, is that the 3ware UI > is simpler but the MegaRAID controllers are faster. > > That being said, I do also like mdraid for certain purposes. I was able > to successfully repurpose a very old controller in an old but nicely > sized chassis (16 bays) by moving to an md RAID6 array, which the > hardware controller doesn't support (I did say it's old). I also love > the want_replacement feature in md RAID, a feature I don't believe is > supported in the 3ware line (you can "rebuild" just one disk if it's bad > but hasn't been kicked out of the array yet; that rebuild is much > faster). > > --keith > > -- > kkel...@wombat.san-francisco.ca.us > > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On 2014-08-21, Valeri Galtsev wrote: > (And I do not include into hardware RAID these fake "raid" cards > that rely on "driver" - which are indeed software RAID cards. 3ware never > fell that low to make/sell any of such junk. Somebody who knows LSI better > than I do will probably say the same about them). LSI has owned 3ware for some time (who in turn were recently gobbled by some other company). The LSI MegaRAID cards are real hardware RAID. What I have heard, but only validated the former, is that the 3ware UI is simpler but the MegaRAID controllers are faster. That being said, I do also like mdraid for certain purposes. I was able to successfully repurpose a very old controller in an old but nicely sized chassis (16 bays) by moving to an md RAID6 array, which the hardware controller doesn't support (I did say it's old). I also love the want_replacement feature in md RAID, a feature I don't believe is supported in the 3ware line (you can "rebuild" just one disk if it's bad but hasn't been kicked out of the array yet; that rebuild is much faster). --keith -- kkel...@wombat.san-francisco.ca.us ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On Thu, August 21, 2014 5:32 pm, GKH wrote: > Valeri, > > I hope you realize that your arguments for hardware RAID > all depend on everything working just right. > > If something goes wrong with a disk (on HW RAID) > you can't just simply take out the disk, move it to another > computer and maybe do some forensics. If the drive that is member of hardware RAID failed (say timed out while dealing with reallocation of badblock), it is kicked out of the RAID, I get notification by 3ware daemon, hot unplug the drive, hot plug in replacement (of same or larger size), and start rebuild RAID through firmware utility, or GUI interface, or controller starts RAID rebuild automatically if configured so. The system on the machine has no idea about all this and keeps running happily. I do no forensics on failed drives. I run manufacturer drive fitness test (whichever it is called by particular manufacturer), if drive passes, I usually reuse it, if it fails test, I send it to drive manufacturer for warranty replacement or toss if it is out of warranty. > > The formatting of disks on HW RAID is transparent to Linux. > Therefore my disks are all RAID or not. > > What if I wanted to mix and match? With 3ware RAID controller you can export one or more of attached drives directly to the system. They can not participate in [hardware] RAID then. > Maybe I don't want my swap > RAID for performance. Speaking of swap: RAM is large and cheap these days. I do not use swap on machines with 32 GB of RAM or larger. On multitasking system you have to switch between processes, which is more often than every millisecond. Imagine now you need to swap in or out 32GB during some of the switching between processes. Your system will be on its knees just because of that. Unless you have very special block device which is almost as fast as RAM, which you better just have added to the address space of RAM (from kernel point of view), so we are not speaking of these devices as of hard drives. > > The idea of taking my data (which is controlled by an OSS > Operating System, Linux) and putting it behind a closed source > and closed system RAID controller is appalling to me. Me too. Yet all of us use them. Example: hard drive firmware. Which has a bit more sophisticated function than just take data and write track or other way around. It detects badblocks, reallocated them, recovers as much as possible information that was inside that bad block. Another example: video card, say, NVIDIA one. It has processors inside that run software that is flashed on its non-volatile memory. Now, with Nvidia cards sometimes you have to use proprietary driver (if you have more or less sophisticated display arrangement). Which is closed code binary driver. What you compile when you install that is just an interface between closed code driver and this particular version of kernel. And this code runs not in the card itself, but under your system. And the list goes on. Not to mention our cell phones... The only time I was mad about firmware of some controller was one particular version of via PATA controller that had a bug which was leading to drive corruption... > > It comes down to this: Linux knows where and when to position > the heads of disks in order to max performance. If a > RAID controller is in the middle, whatever algorithm > Linux is using is no longer valid. The RAID controller > is the one who makes the I/O decisions. Yes, but... And some of what I'll say was already mentioned in this thread. You can tweak RAID controller to align stripe sizes with optimal data chunks of the drives. Furthermore, you can have cache (battery backed up), which increases device speed tremendously (30 times I saw for something particular - just off the top of my head). Of course, RAM is used as a cache for software RAID, but to the contrary to RAID controller cache RAM content vanishes with power loss. You don't seem to be the person who had to recover after [software] RAID cache loss. And _I_ definitely will not like to be the one. Hence I use hardware RAID, with optimized stripe size, and optimized filesystem block size, and with cache in RAID controller that is battery backed up. If you beat me in IO with software RAID, I will live with that. As I do not like to give up reliability. Not at as small extra cost as I have to pay for hardware RAID. (And I do not include into hardware RAID these fake "raid" cards that rely on "driver" - which are indeed software RAID cards. 3ware never fell that low to make/sell any of such junk. Somebody who knows LSI better than I do will probably say the same about them). Again, just my 2c. Valeri > > Sorry, this is not something I want to live with. > > GKH > > >> >> On Thu, August 21, 2014 3:54 pm, Matt wrote: Hate to change the conversation here but that's why I hate hardware RAID. >> >> I love hardware RAID. 3ware more than others. In case of hardware RAID >> it >> is tiny specialized system (firmware) that is doin
Re: [CentOS] HP ProLiant DL380 G5
On Thu, Aug 21, 2014 at 3:43 PM, Matt wrote: > I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server. It > has eight 750GB drives in a hardware RAID6 array. Its acting as a > host for a number of OpenVZ containers. > > Seems like every time I reboot this server which is not very often it > sits for hours running a disk check or something on boot. The server > is located 200+ miles away so its not very convenient to look at. Is > there anyway to tell if it plans to run this or tell it not too? > > Right now its reporting one of the drives in array is bad and last > time it did this a reboot resolved it. > run: tune2fs -l /dev/mapper/ check: Maximum mount count Next check after if those are NOT -1 and 0 respectively change settings by running: tune2fs -i 0 -c 0 /dev/mapper/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On 8/21/2014 4:11 PM, John R Pierce wrote: > On 8/21/2014 4:06 PM, Les Mikesell wrote: >> >Yes, but try a software RAID when you have intermittently bad RAM. >> >I've been there. Mirrored disks that were almost, but not quite, >> >mirrors. > try any file system when you've got flakey ram.data thats not quite > what you wanted, oh boy. which, btw, is why I insist on ECC for servers. and really prefer ZFS where each block of each part of a raid is checksummed and timestamped, so when scrub finds mismatching blocks, it can know which one is correct. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On 8/21/2014 4:06 PM, Les Mikesell wrote: > Yes, but try a software RAID when you have intermittently bad RAM. > I've been there. Mirrored disks that were almost, but not quite, > mirrors. try any file system when you've got flakey ram.data thats not quite what you wanted, oh boy. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On Thu, Aug 21, 2014 at 5:32 PM, GKH wrote: > > I hope you realize that your arguments for hardware RAID > all depend on everything working just right. Yes, but try a software RAID when you have intermittently bad RAM. I've been there. Mirrored disks that were almost, but not quite, mirrors. > If something goes wrong with a disk (on HW RAID) > you can't just simply take out the disk, move it to another > computer and maybe do some forensics. You can if that other computer has a matching controller. If you expect to do forensics you should have that. Most people would just use a backup, though. > What if I wanted to mix and match? Maybe I don't want my swap > RAID for performance. If you want performance, you'll have enough RAM that you won't ever page swap back in. > The idea of taking my data (which is controlled by an OSS > Operating System, Linux) and putting it behind a closed source > and closed system RAID controller is appalling to me. Why? It should all be backed up. > It comes down to this: Linux knows where and when to position > the heads of disks in order to max performance. If a > RAID controller is in the middle, whatever algorithm > Linux is using is no longer valid. Really??? I don't think linux has ever known or cared much about disk geometry and most disks lie about it anyway. > The RAID controller > is the one who makes the I/O decisions. > > Sorry, this is not something I want to live with. I think you haven't actually measured any performance. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
Valeri, I hope you realize that your arguments for hardware RAID all depend on everything working just right. If something goes wrong with a disk (on HW RAID) you can't just simply take out the disk, move it to another computer and maybe do some forensics. The formatting of disks on HW RAID is transparent to Linux. Therefore my disks are all RAID or not. What if I wanted to mix and match? Maybe I don't want my swap RAID for performance. The idea of taking my data (which is controlled by an OSS Operating System, Linux) and putting it behind a closed source and closed system RAID controller is appalling to me. It comes down to this: Linux knows where and when to position the heads of disks in order to max performance. If a RAID controller is in the middle, whatever algorithm Linux is using is no longer valid. The RAID controller is the one who makes the I/O decisions. Sorry, this is not something I want to live with. GKH > > On Thu, August 21, 2014 3:54 pm, Matt wrote: >>> Hate to change the conversation here but that's why I hate hardware >>> RAID. > > I love hardware RAID. 3ware more than others. In case of hardware RAID it > is tiny specialized system (firmware) that is doing RAID function. In the > specialized CPU (I should have called it differently) inside hardware RAID > controller. Independent on the rest of computer, and needing only power to > keep going. Tiny piece of code, very simple function. It is really hard to > introduce bugs into these. Therefore you unlikely will have problem on > device level. To find the status of the device and its components > (physical drives) you always can use utility that comes from hardware > vendor, you can have even web interface if it is 3ware. > >>> If it was software RAID, Linux would always tell you what's going on. > > It does. And so does hardware RAID device. And most of them (3ware in > particular) do not do offline (i.e. delaying boot) check/rebuild, but they > do it online (they are being operational in degraded state, and do > necessary rebuild with IO present on the device, they just export > themselves to Linux kernel with the warning of being degraded RAID during > boot). > > Software RAID, however, has a disadvantage (more knowledgeable people will > correct me wherever necessary). Software RAID function is executed by main > CPU. Under very sophisticated system (linux kernel), as one of the > processes (even if it is real time process), on the system that is > switching between processes. Therefore, RAID task for software RAID lives > in much more dangerous environment. Now, if it never finishes (say, kernel > panics due to something else), you get inconsistent device (software RAID > one), and it is much much much harder task to bring that to to some extent > consistent state than, e.g., to bring back dirty filesystem that lives on > the sane device. This is why we still pay for hardware RAID devices. I do. > > Just my 2c. > > Valeri > > > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
Have you inspected via the system iLO console? Assuming it's cabled to the network On 08/21/2014 01:33 PM, GKH wrote: > Hate to change the conversation here but that's why I hate hardware RAID. > If it was software RAID, Linux would always tell you what's going on. > Besides, Linux knows much more about what is going on on the disk and what is > about to happen (like a megabyte DMA transfer). > > BTW, check if something is creating: > > /forcefsck > > That would make the fsck run every time. > > GKH > >> Matt wrote: >>> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server. It >>> has eight 750GB drives in a hardware RAID6 array. Its acting as a >>> host for a number of OpenVZ containers. >>> >>> Seems like every time I reboot this server which is not very often it >>> sits for hours running a disk check or something on boot. The server >>> is located 200+ miles away so its not very convenient to look at. Is >>> there anyway to tell if it plans to run this or tell it not too? >>> >>> Right now its reporting one of the drives in array is bad and last >>> time it did this a reboot resolved it. >> You need to know what it's running. If it's doing an fsck, that will take >> a lot of time. If it's firmware in the RAID controller, that's different. >> You can run tune2fs /dev/whatever and see how often it wants to run fsck. >> For that matter, what's the entry in /etc/fstab? >> >>mark >> >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
Hate to change the conversation here but that's why I hate hardware RAID. If it was software RAID, Linux would always tell you what's going on. Besides, Linux knows much more about what is going on on the disk and what is about to happen (like a megabyte DMA transfer). BTW, check if something is creating: /forcefsck >>> >>> These exist: >>> >>> -rw-r--r--1 root root 0 Jul 7 10:03 .autofsck >>> -rw-r--r--1 root root 0 Jul 7 10:03 .autorelabel >>> >>> What does that mean? >> >> ARRRGGGHGHGHGHGHGHHGHG!!! >> >> First, delete /.autofsck. That will stop it from fsckin'g *everything* >> every reboot. Second, is selinux in enforcing mode? In any case, have you >> recently done major changes? If not, delete /.autorelabel, since an >> selinux relabel takes a *while*, esp. if you have *lots* of files. >> >> mark > > No, /.autofsck is not harmful and will cause nothing unless > /etc/sysconfig/autofsck exists and has something specific defined. The > /.autofsck is automatically created at each boot by the system. > > /.autorelabel is as well only a control file and does not cause a full > SELiux relabeling at each boot. > > If you don't believe me, please see /etc/rc.sysinit. > > Alexander So I just need to SELINUXTYPE=disabled and ignore .autofsck and .autorelabel? Was the targeted selinux causing the slow reboots? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 lockup
On Thu, Aug 21, 2014 at 4:07 PM, Daniel J Walsh wrote: > > mmap_zero is a fairly dangerous access. It means the object is > attempting to memeory map > low memory in the kernel. Bugs in the kernel have been known to allow > priv escallation, can be prevented by this check. > > http://eparis.livejournal.com/ > > Talks about the access check. > > I usually tell people to avoid these apps, but if you need to run it, Ocsinventory-agent wants to report the hardware where it runs back to the central server, including the attached monitor, if any. I think that is the source of the access. Is there a better way to do that in a perl script? > you can turn the protection off as the alert told you. > > setsebool -P mmap_low_allowed 1 Thanks. This is a package from EPEL. Can they do something in the package to make it work without being blocked? In any case, my real question is whether this could be related to the system hang. I don't really see why a failing access in a perl script would be a real problem unless there is some more serious bug, so it may not be related at all. There were several such log messages, so at least we know the first few weren't fatal. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On Thu, August 21, 2014 3:54 pm, Matt wrote: >> Hate to change the conversation here but that's why I hate hardware >> RAID. I love hardware RAID. 3ware more than others. In case of hardware RAID it is tiny specialized system (firmware) that is doing RAID function. In the specialized CPU (I should have called it differently) inside hardware RAID controller. Independent on the rest of computer, and needing only power to keep going. Tiny piece of code, very simple function. It is really hard to introduce bugs into these. Therefore you unlikely will have problem on device level. To find the status of the device and its components (physical drives) you always can use utility that comes from hardware vendor, you can have even web interface if it is 3ware. >> If it was software RAID, Linux would always tell you what's going on. It does. And so does hardware RAID device. And most of them (3ware in particular) do not do offline (i.e. delaying boot) check/rebuild, but they do it online (they are being operational in degraded state, and do necessary rebuild with IO present on the device, they just export themselves to Linux kernel with the warning of being degraded RAID during boot). Software RAID, however, has a disadvantage (more knowledgeable people will correct me wherever necessary). Software RAID function is executed by main CPU. Under very sophisticated system (linux kernel), as one of the processes (even if it is real time process), on the system that is switching between processes. Therefore, RAID task for software RAID lives in much more dangerous environment. Now, if it never finishes (say, kernel panics due to something else), you get inconsistent device (software RAID one), and it is much much much harder task to bring that to to some extent consistent state than, e.g., to bring back dirty filesystem that lives on the sane device. This is why we still pay for hardware RAID devices. I do. Just my 2c. Valeri Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
>>> Hate to change the conversation here but that's why I hate hardware >>> RAID. >>> If it was software RAID, Linux would always tell you what's going on. >>> Besides, Linux knows much more about what is going on on the disk and >>> what is about to happen (like a megabyte DMA transfer). >>> >>> BTW, check if something is creating: >>> >>> /forcefsck >> >> These exist: >> >> -rw-r--r--1 root root 0 Jul 7 10:03 .autofsck >> -rw-r--r--1 root root 0 Jul 7 10:03 .autorelabel >> >> What does that mean? > > ARRRGGGHGHGHGHGHGHHGHG!!! > > First, delete /.autofsck. That will stop it from fsckin'g *everything* > every reboot. Second, is selinux in enforcing mode? In any case, have you > recently done major changes? If not, delete /.autorelabel, since an > selinux relabel takes a *while*, esp. if you have *lots* of files. > > mark The directions for installing OpenVZ on Centos 6 stated to disable selinux, on this box I missed that step, whoops. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
Am 21.08.2014 um 23:00 schrieb m.r...@5-cent.us: > Matt wrote: >>> Hate to change the conversation here but that's why I hate hardware >>> RAID. >>> If it was software RAID, Linux would always tell you what's going on. >>> Besides, Linux knows much more about what is going on on the disk and >>> what is about to happen (like a megabyte DMA transfer). >>> >>> BTW, check if something is creating: >>> >>> /forcefsck >> >> These exist: >> >> -rw-r--r--1 root root 0 Jul 7 10:03 .autofsck >> -rw-r--r--1 root root 0 Jul 7 10:03 .autorelabel >> >> What does that mean? > > ARRRGGGHGHGHGHGHGHHGHG!!! > > First, delete /.autofsck. That will stop it from fsckin'g *everything* > every reboot. Second, is selinux in enforcing mode? In any case, have you > recently done major changes? If not, delete /.autorelabel, since an > selinux relabel takes a *while*, esp. if you have *lots* of files. > > mark No, /.autofsck is not harmful and will cause nothing unless /etc/sysconfig/autofsck exists and has something specific defined. The /.autofsck is automatically created at each boot by the system. /.autorelabel is as well only a control file and does not cause a full SELiux relabeling at each boot. If you don't believe me, please see /etc/rc.sysinit. Alexander ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On 08/21/2014 05:00 PM, m.r...@5-cent.us wrote: > Matt wrote: >>> Hate to change the conversation here but that's why I hate hardware >>> RAID. >>> If it was software RAID, Linux would always tell you what's going on. >>> Besides, Linux knows much more about what is going on on the disk and >>> what is about to happen (like a megabyte DMA transfer). >>> >>> BTW, check if something is creating: >>> >>> /forcefsck >> These exist: >> >> -rw-r--r--1 root root 0 Jul 7 10:03 .autofsck >> -rw-r--r--1 root root 0 Jul 7 10:03 .autorelabel >> >> What does that mean? > ARRRGGGHGHGHGHGHGHHGHG!!! > > First, delete /.autofsck. That will stop it from fsckin'g *everything* > every reboot. Second, is selinux in enforcing mode? In any case, have you > recently done major changes? If not, delete /.autorelabel, since an > selinux relabel takes a *while*, esp. if you have *lots* of files. > > mark > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos /.autorelabel gets created on all SELinux disabled systems. Since if you re-enable it, you will need a relabel. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 lockup
On 08/21/2014 02:09 PM, Les Mikesell wrote: > On Thu, Aug 21, 2014 at 12:23 PM, wrote: >> Les Mikesell wrote: >>> A machine I set up to run OpenNMS stopped working last night - no >>> hardware alarm lights, but keyboard/monitor/network unresponsive. >>> After a reboot I see a large stack of messages like this in >>> /var/log/messages: >>> >>> >>> Aug 20 14:02:34 opennms-h-03 python: SELinux is preventing >>> /usr/sbin/monitor-get-edid-using-vbe from mmap >>> _zero access on the memprotect . >>> -- >>> and then this final message >>> >>> Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute >>> 'split' >>> >>> >>> Do either of those look fatal? And where else should I look for the >>> underlying problem? >>> >> Looks like all selinux to me, esp. the wording. Is it in enforcing mode? I >> wonder if it's possible that there's a bug in an selinux policy that >> results in "IT'S NOT SAFE!!! SHUT IT DOWN!!!". > /var/log/audit/audit.log says: > type=AVC msg=audit(1408478520.792:7016): avc: denied { mmap_zero } > for pid=17977 comm="monitor-get-edi" > scontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 > tcontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 > tclass=memprotect > > which isn't particularly readable but I would guess means that it > blocked the ocsinventory-agent from getting the monitor type. Not > sure why that is supposed to be helpful, but it also doesn't sound > fatal. And somewhat irrelevant on a normally headless server. > > Does that dbus error looks serious? > Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute > 'split' > > -- >Les Mikesell > lesmikes...@gmail.com > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos mmap_zero is a fairly dangerous access. It means the object is attempting to memeory map low memory in the kernel. Bugs in the kernel have been known to allow priv escallation, can be prevented by this check. http://eparis.livejournal.com/ Talks about the access check. I usually tell people to avoid these apps, but if you need to run it, you can turn the protection off as the alert told you. setsebool -P mmap_low_allowed 1 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
Matt wrote: >> Hate to change the conversation here but that's why I hate hardware >> RAID. >> If it was software RAID, Linux would always tell you what's going on. >> Besides, Linux knows much more about what is going on on the disk and >> what is about to happen (like a megabyte DMA transfer). >> >> BTW, check if something is creating: >> >> /forcefsck > > These exist: > > -rw-r--r--1 root root 0 Jul 7 10:03 .autofsck > -rw-r--r--1 root root 0 Jul 7 10:03 .autorelabel > > What does that mean? ARRRGGGHGHGHGHGHGHHGHG!!! First, delete /.autofsck. That will stop it from fsckin'g *everything* every reboot. Second, is selinux in enforcing mode? In any case, have you recently done major changes? If not, delete /.autorelabel, since an selinux relabel takes a *while*, esp. if you have *lots* of files. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
> Hate to change the conversation here but that's why I hate hardware RAID. > If it was software RAID, Linux would always tell you what's going on. > Besides, Linux knows much more about what is going on on the disk and what is > about to happen (like a megabyte DMA transfer). > > BTW, check if something is creating: > > /forcefsck These exist: -rw-r--r--1 root root 0 Jul 7 10:03 .autofsck -rw-r--r--1 root root 0 Jul 7 10:03 .autorelabel What does that mean? > That would make the fsck run every time. > > GKH > >> Matt wrote: >>> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server. It >>> has eight 750GB drives in a hardware RAID6 array. Its acting as a >>> host for a number of OpenVZ containers. >>> >>> Seems like every time I reboot this server which is not very often it >>> sits for hours running a disk check or something on boot. The server >>> is located 200+ miles away so its not very convenient to look at. Is >>> there anyway to tell if it plans to run this or tell it not too? >>> >>> Right now its reporting one of the drives in array is bad and last >>> time it did this a reboot resolved it. >> >> You need to know what it's running. If it's doing an fsck, that will take >> a lot of time. If it's firmware in the RAID controller, that's different. >> You can run tune2fs /dev/whatever and see how often it wants to run fsck. >> For that matter, what's the entry in /etc/fstab? >> >> mark >> >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
You know that hpacucli (and MegaCli on LSI-based hardware RAID systems) can usually tell you more about the array and the drives than mdadm can, right? Also, if you're doing parity, having hardware RAID moves the parity calculations to a dedicated ASIC, avoiding any load of note on the CPU. Also, with hardware RAID, you get battery-backed or flash-backed write-back caching, which can dramatically improve performance. That said, mdadm is better that cheap fake-RAID controllers like you find on most mainboards, I will give you that. digimer On 21/08/14 04:33 PM, GKH wrote: > Hate to change the conversation here but that's why I hate hardware RAID. > If it was software RAID, Linux would always tell you what's going on. > Besides, Linux knows much more about what is going on on the disk and what is > about to happen (like a megabyte DMA transfer). > > BTW, check if something is creating: > > /forcefsck > > That would make the fsck run every time. > > GKH > >> Matt wrote: >>> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server. It >>> has eight 750GB drives in a hardware RAID6 array. Its acting as a >>> host for a number of OpenVZ containers. >>> >>> Seems like every time I reboot this server which is not very often it >>> sits for hours running a disk check or something on boot. The server >>> is located 200+ miles away so its not very convenient to look at. Is >>> there anyway to tell if it plans to run this or tell it not too? >>> >>> Right now its reporting one of the drives in array is bad and last >>> time it did this a reboot resolved it. >> >> You need to know what it's running. If it's doing an fsck, that will take >> a lot of time. If it's firmware in the RAID controller, that's different. >> You can run tune2fs /dev/whatever and see how often it wants to run fsck. >> For that matter, what's the entry in /etc/fstab? >> >>mark >> >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
Hate to change the conversation here but that's why I hate hardware RAID. If it was software RAID, Linux would always tell you what's going on. Besides, Linux knows much more about what is going on on the disk and what is about to happen (like a megabyte DMA transfer). BTW, check if something is creating: /forcefsck That would make the fsck run every time. GKH > Matt wrote: >> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server. It >> has eight 750GB drives in a hardware RAID6 array. Its acting as a >> host for a number of OpenVZ containers. >> >> Seems like every time I reboot this server which is not very often it >> sits for hours running a disk check or something on boot. The server >> is located 200+ miles away so its not very convenient to look at. Is >> there anyway to tell if it plans to run this or tell it not too? >> >> Right now its reporting one of the drives in array is bad and last >> time it did this a reboot resolved it. > > You need to know what it's running. If it's doing an fsck, that will take > a lot of time. If it's firmware in the RAID controller, that's different. > You can run tune2fs /dev/whatever and see how often it wants to run fsck. > For that matter, what's the entry in /etc/fstab? > > mark > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
Matt wrote: > I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server. It > has eight 750GB drives in a hardware RAID6 array. Its acting as a > host for a number of OpenVZ containers. > > Seems like every time I reboot this server which is not very often it > sits for hours running a disk check or something on boot. The server > is located 200+ miles away so its not very convenient to look at. Is > there anyway to tell if it plans to run this or tell it not too? > > Right now its reporting one of the drives in array is bad and last > time it did this a reboot resolved it. You need to know what it's running. If it's doing an fsck, that will take a lot of time. If it's firmware in the RAID controller, that's different. You can run tune2fs /dev/whatever and see how often it wants to run fsck. For that matter, what's the entry in /etc/fstab? mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] HP ProLiant DL380 G5
On 8/21/2014 12:43 PM, Matt wrote: > I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server. It > has eight 750GB drives in a hardware RAID6 array. Its acting as a > host for a number of OpenVZ containers. > > Seems like every time I reboot this server which is not very often it > sits for hours running a disk check or something on boot. The server > is located 200+ miles away so its not very convenient to look at. Is > there anyway to tell if it plans to run this or tell it not too? > > Right now its reporting one of the drives in array is bad and last > time it did this a reboot resolved it. assuming thats a hp smartarray raid controller, use hpacucli to diagnose the raid problem. degraded raid6 is /really/ slow. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] HP ProLiant DL380 G5
I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server. It has eight 750GB drives in a hardware RAID6 array. Its acting as a host for a number of OpenVZ containers. Seems like every time I reboot this server which is not very often it sits for hours running a disk check or something on boot. The server is located 200+ miles away so its not very convenient to look at. Is there anyway to tell if it plans to run this or tell it not too? Right now its reporting one of the drives in array is bad and last time it did this a reboot resolved it. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 lockup
On Thu, Aug 21, 2014 at 12:23 PM, wrote: > Les Mikesell wrote: >> A machine I set up to run OpenNMS stopped working last night - no >> hardware alarm lights, but keyboard/monitor/network unresponsive. >> After a reboot I see a large stack of messages like this in >> /var/log/messages: >> >> >> Aug 20 14:02:34 opennms-h-03 python: SELinux is preventing >> /usr/sbin/monitor-get-edid-using-vbe from mmap >> _zero access on the memprotect . >> -- >> and then this final message >> >> Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute >> 'split' >> >> >> Do either of those look fatal? And where else should I look for the >> underlying problem? >> > Looks like all selinux to me, esp. the wording. Is it in enforcing mode? I > wonder if it's possible that there's a bug in an selinux policy that > results in "IT'S NOT SAFE!!! SHUT IT DOWN!!!". /var/log/audit/audit.log says: type=AVC msg=audit(1408478520.792:7016): avc: denied { mmap_zero } for pid=17977 comm="monitor-get-edi" scontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 tclass=memprotect which isn't particularly readable but I would guess means that it blocked the ocsinventory-agent from getting the monitor type. Not sure why that is supposed to be helpful, but it also doesn't sound fatal. And somewhat irrelevant on a normally headless server. Does that dbus error looks serious? Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute 'split' -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 7 lockup
Les Mikesell wrote: > A machine I set up to run OpenNMS stopped working last night - no > hardware alarm lights, but keyboard/monitor/network unresponsive. > After a reboot I see a large stack of messages like this in > /var/log/messages: > > > Aug 20 14:02:34 opennms-h-03 python: SELinux is preventing > /usr/sbin/monitor-get-edid-using-vbe from mmap > _zero access on the memprotect . > > * Plugin mmap_zero (53.1 confidence) suggests > * > > If you do not think /usr/sbin/monitor-get-edid-using-vbe should need > to mmap low memory in the kernel. > Then you may be under attack by a hacker, this is a very dangerous access. > Do > contact your security administrator and report this issue. > > * Plugin catchall_boolean (42.6 confidence) suggests > ** > > If you want to allow mmap to low allowed > Then you must tell SELinux about this by enabling the > 'mmap_low_allowed' boolean. > You can read 'None' man page for more details. > Do > setsebool -P mmap_low_allowed 1 > > * Plugin catchall (5.76 confidence) suggests > ** > > If you believe that monitor-get-edid-using-vbe should be allowed > mmap_zero access on the memprotect by d > efault. > Then you should report this as a bug. > You can generate a local policy module to allow this access. > Do > allow this access for now by executing: > # grep monitor-get-edi /var/log/audit/audit.log | audit2allow -M mypol > # semodule -i mypol.pp > > -- > and then this final message > > Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute > 'split' > > > Do either of those look fatal? And where else should I look for the > underlying problem? > Looks like all selinux to me, esp. the wording. Is it in enforcing mode? I wonder if it's possible that there's a bug in an selinux policy that results in "IT'S NOT SAFE!!! SHUT IT DOWN!!!". mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Skype on CentOS 6.5
On Thu, Aug 21, 2014 at 11:23:10AM -0500, Valeri Galtsev wrote: > I was quite displeased since quite some time ago that almost all web > browsers, whenever I feed URL into location bar, do not go to that URL, > but instead do the search with the search line that is that URL first. Not > only when URL doesn't exist (for which case I too prefer not darn search > but just an error message "URL doesn't exist"). Why would be that? What > purpose does the search serve. I'm curious, what web browsers do this? I can't replicate it with Firefox. -- Jonathan Billings ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Centos 7 lockup
A machine I set up to run OpenNMS stopped working last night - no hardware alarm lights, but keyboard/monitor/network unresponsive. After a reboot I see a large stack of messages like this in /var/log/messages: Aug 20 14:02:34 opennms-h-03 python: SELinux is preventing /usr/sbin/monitor-get-edid-using-vbe from mmap _zero access on the memprotect . * Plugin mmap_zero (53.1 confidence) suggests * If you do not think /usr/sbin/monitor-get-edid-using-vbe should need to mmap low memory in the kernel. Then you may be under attack by a hacker, this is a very dangerous access. Do contact your security administrator and report this issue. * Plugin catchall_boolean (42.6 confidence) suggests ** If you want to allow mmap to low allowed Then you must tell SELinux about this by enabling the 'mmap_low_allowed' boolean. You can read 'None' man page for more details. Do setsebool -P mmap_low_allowed 1 * Plugin catchall (5.76 confidence) suggests ** If you believe that monitor-get-edid-using-vbe should be allowed mmap_zero access on the memprotect by d efault. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep monitor-get-edi /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp -- and then this final message Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute 'split' Do either of those look fatal? And where else should I look for the underlying problem? -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Skype on CentOS 6.5
On 08/21/2014 11:23 AM, Valeri Galtsev wrote: > I'm sorry Mr. Jim Perrin, I'll disregard your request and I will stay on > this side topic just for one more message. Thank you. > > Those [conspiracy] theories are reality not just theories, at least some > (Mr Snowden, e.g.) put their life on line to tell us about it. If we do > not care to listen, then we deserve to have what we have. I don't disagree. This was why I added "(right or wrong)" to the message. The internet culture as a whole is one of constant surveillance. It's a common business model for online content distributors/marketers etc. There are numerous postings about this all over the internet. > > I was quite displeased since quite some time ago that almost all web > browsers, whenever I feed URL into location bar, do not go to that URL, > but instead do the search with the search line that is that URL first. Not > only when URL doesn't exist (for which case I too prefer not darn search > but just an error message "URL doesn't exist"). Why would be that? What > purpose does the search serve. You do your math. I still use often > browsers with this "nasty" feature. I will mention one browser that > doesn't to that unnecessary [unnecessary for me, of course] thing: midori. > If someone has any other suggestions, please, let me know (you can e-mail > me off the list if you prefer to respect Mr Jim Perrin's request). I also > will mention one search engine that seems to be "clean" of nastiness to > the best of my knowledge" DuckDuckGo: My point, and I said this off-list as well to those who responded to me directly, is simply this: I would rather keep the list technical and apolitical. I know we can't keep politics out of tech, but I would prefer to at least attempt to limit it on the mailing lists. A discussion about alternatives and their technical merits would be fine and I have no problem with that. Derailing a 'how do I fix this' thread with a political discussion is something I'd like to avoid as a general rule. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] SOLVED!! - Re: Trying to override MAC addr
Deleted all the back-and-forthing and will only include what finally worked. Sheesh, I got buried in the cruft on this one. Edit /etc/udev/rules.d/70-persistent-net.rules to have your REAL mac addr: SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="02:c3:04:01:77:c3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" Edit /etc/sysconfig/network-scripts/ifcfg-eth0 with the mac addr you want: MACADDR=02:67:15:00:01:79 REBOOT! running start_udev at this point only added the eth1 entry again. The kernel was so confused that I needed to 'clean house'. # ifconfig eth0 Link encap:Ethernet HWaddr 02:67:15:00:01:79 inet addr:208.83.67.179 Bcast:208.83.67.255 Mask:255.255.255.0 inet6 addr: 2607:f4b8:3:3:67:15ff:fe00:179/64 Scope:Global inet6 addr: fe80::67:15ff:fe00:179/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:134 errors:0 dropped:11 overruns:0 frame:0 TX packets:77 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:16489 (16.1 KiB) TX bytes:6313 (6.1 KiB) Interrupt:87 Base address:0x6000 I got my desired MAC addr, my static IPv4 addr, and IPv6 RA + MAC = desired IPv6 addr. Now to reveal why I went to these efforts. STATIC IPv6 is badness when you want to be able to change prefixes but have 'nice' IPv6 addresses. So I studied how IPv6 suffixes are currently constructed, decided what I wanted, and off to the races. Well another reason, is I will be working in IEEE 802 MAC privacy Study Group, and wanted to see what COULD be done to create privacy-enhancing MAC addresses. But thank you ALL for your efforts! ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Skype on CentOS 6.5
On Wed, August 20, 2014 9:06 pm, Always Learning wrote: > > On Wed, 2014-08-20 at 10:26 -0400, James B. Byrne wrote: > >> My recent inquiries have raised the unsettling possibility >> that recent Skype clients may be designed to permit remote exploitation >> of >> host systems by unauthorised entities. > > Generally entities, authorised by governments, have been doing back door > entries over the Internet since at least 1995. Its staggering what has > been happening, staggering how its done, staggering that every, so it > seems, network hardware device has a 'backdoor' - sometimes it is > mentioned in the documentation or discovered by chatting with service > personnel. > > Better never to touch proprietary closed-source software. Don't forget > M$ Windoze with 3-knocks-and-anyone-is-in software. It caused a friend > to get a nasty virus about 10 years ago just by being connected to the > Internet and NOT downloading anything at all. He didn't even use his > browser. > > Skype piggy-backs on to a lot of different, and unknown to the caller, > computer systems. Try the grown-up version called SIP. It has open > source products and it caters for voice and video. > > Big companies always fully co-operate with demands from Big Brother but > never ever boast about their acquiescence. The encryption algorithm for > GSM mobile phones was deliberately downgraded . We live in the > Information Age and Big Brother wants information. > Thank you Mr. Always Learning for nice reminder about reality we live in. I'm sorry Mr. Jim Perrin, I'll disregard your request and I will stay on this side topic just for one more message. Those [conspiracy] theories are reality not just theories, at least some (Mr Snowden, e.g.) put their life on line to tell us about it. If we do not care to listen, then we deserve to have what we have. I was quite displeased since quite some time ago that almost all web browsers, whenever I feed URL into location bar, do not go to that URL, but instead do the search with the search line that is that URL first. Not only when URL doesn't exist (for which case I too prefer not darn search but just an error message "URL doesn't exist"). Why would be that? What purpose does the search serve. You do your math. I still use often browsers with this "nasty" feature. I will mention one browser that doesn't to that unnecessary [unnecessary for me, of course] thing: midori. If someone has any other suggestions, please, let me know (you can e-mail me off the list if you prefer to respect Mr Jim Perrin's request). I also will mention one search engine that seems to be "clean" of nastiness to the best of my knowledge" DuckDuckGo: https://duckduckgo.com/ (I would welcome information about others "clean" of nastiness) Thanks. Valeri Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 08/21/2014 11:47 AM, GKH wrote: > Robert, > Sorry Dude. I did not mean to make things worse. > All I wanted to say is this: It can be done via > the ifconfig command. > > Now, > > # systemctl status network.service This tells me you are not using Centos6 which does not have systemd. Or at least not my systems. > > Tells me that network services still depend on: > > "ExecStart=/etc/rc.d/init.d/network start" > > Good! File: "/etc/sysconfig/network-scripts/ifup-eth" > > Says: "39 # bail out, if the MAC does not fit" > > Ok, perfect. As you already guessed we need to make this change > early on. However, if all else fails, you can always source > a custom script here and problem solved. I hope to get a conf file setup to do the work. > > I know, this is not elegant. But as an SA who sometimes needs to > do dirty deeds... > > Again, apologies if I am being too simplistic/stupid here. > > GKH > > >> On 08/21/2014 10:56 AM, GKH wrote: >>> I just did it like this: >>> >>> ifconfig enp3s0 >>> >>> enp3s0: flags=4163 mtu 1500 >>> inet 10.241.27.154 netmask 255.255.255.0 broadcast 10.241.27.255 >>> inet6 fe80::210:18ff:fe04:4d0 prefixlen 64 scopeid 0x20 >>> ether 00:10:18:04:04:d0 txqueuelen 1000 (Ethernet) >>> RX packets 429591 bytes 41991957 (40.0 MiB) >>> RX errors 0 dropped 0 overruns 0 frame 0 >>> TX packets 249536 bytes 19108398 (18.2 MiB) >>> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 >>> device interrupt 18 >>> >>> ifconfig enp3s0 hw ether 00:10:18:04:04:d7 >>> >>> ifconfig enp3s0 >>> enp3s0: flags=4163 mtu 1500 >>> inet 10.241.27.154 netmask 255.255.255.0 broadcast 10.241.27.255 >>> inet6 fe80::210:18ff:fe04:4d0 prefixlen 64 scopeid 0x20 >>> ether 00:10:18:04:04:d7 txqueuelen 1000 (Ethernet) >>> RX packets 429615 bytes 41994383 (40.0 MiB) >>> RX errors 0 dropped 0 overruns 0 frame 0 >>> TX packets 249549 bytes 19109350 (18.2 MiB) >>> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 >>> device interrupt 18 >>> Done! >>> >>> -GKH >> I need the changes to be permanent to apply across boots. Thus using >> ifcfg-eth0 rather than ifconfig. >> >> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: > Keith Keller wrote: >> On 2014-08-21, John R Pierce wrote: >>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote: I am trying to override the mac addr. >>> pretty sure you need to use NIC model specific utilities to do this, >>> ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, >>> not for reprogramming it. >> ifconfig claims to support it: >> >> hw class address > > Also, don't forget /etc/udev/rules.d/70-persistant-net.rules I can't forget what I don't know. please point me to description of these rules? >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 21/08/14 11:43 AM, Robert Moskowitz wrote: > > On 08/21/2014 11:31 AM, Digimer wrote: >> On 21/08/14 11:25 AM, Robert Moskowitz wrote: >>> On 08/21/2014 10:56 AM, Reindl Harald wrote: Am 21.08.2014 um 16:43 schrieb Robert Moskowitz: > On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: >> Keith Keller wrote: >>> On 2014-08-21, John R Pierce wrote: On 8/21/2014 7:09 AM, Robert Moskowitz wrote: > I am trying to override the mac addr. pretty sure you need to use NIC model specific utilities to do this, ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, not for reprogramming it. >>> ifconfig claims to support it: >>> >>> hw class address >> >> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules > I can't forget what I don't know. please point me to description of > these rules? just look at the file in the past and on CentOS before RHEL7 it was to assign MAC/device-names at boot, on recent Redhat based systems just remove it and stick with place both in the ifcfg-files while disable biosdevname and systemd devicenames at boot both, that udev rules and what i explained you may collide or at least you need to change the MAC there too to not confuse the configs >>> I worked a bit on this. I no longer have the MAC or HW addrs in >>> ifcfg-eth0. Only in /etc/udev/rules.d/70-persistent-net.rules, and only >>> for name=eth0: >>> >>> # net device () >>> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", >>> ATTR{address}=="02:67:15:00:01:79", ATTR{type}=="1", KERNEL=="eth*", >>> NAME="eth0" >>> >>> but on reboot, I get the error: >>> >>> >>> Bringing up interface eth0: Device eth0 does not seem to be present, >>> delaying initialization. >>> [FAILED] >>> >>> and the ethernet comes up as eth1 and the eth1 line is added to >>> /etc/udev/rules.d/70-persistent-net.rules >>> >>> Almost as if there is something else that needs changing. >> Note that you still have to tell the OS "See this real MAC address? >> Change it to this new MAC address". Shy of reprogramming the NIC >> directly, you will almost certainly need to continue to reference the >> real MAC address. > > So that means I need to find the full syntax of this rule. > > Oh, and there is no real MAC address and that MIGHT be part of the > problem. Many armv7 cards do not have eeprom so no MAC address. In > this case the kernel is creating the MAC address as local scope based on > the SID. So somewhere this is happening, and Hans (who maintains the > uboot Allwinner code) has not told me the magic goo; I have not seen any > posts from him so he may still be on Holidays. > > But I will delve into udev syntax to see what I need to change the mac addr. I know with Arduinos (at least earlier network shields), there was no MAC address assigned, either. So there, I had to assign it in the compiled sketch. I would expect there to be some program somewhere for the NIC to allow you to program the static MAC. I suppose 'ifconfig -a' doesn't show anything? -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
Ыcwqacddpp On Aug 21, 2014 6:31 PM, "Robert Moskowitz" wrote: > Did not work... > > On 08/21/2014 10:15 AM, Reindl Harald wrote: > > > > Am 21.08.2014 um 16:09 schrieb Robert Moskowitz: > >> I am trying to override the mac addr. Now this is on an armv7 actually > >> running the F19 kernel and Redsleeve 6, but it SHOULD be standard > >> Centos6 ifcfg-eth0 content. Of course RSEL does not start with a > >> ifcfg-eth0 file, letting network services do all the work, so I am > >> starting from scratch, using the file from one of my C6 boxes with > >> static addressing. My file has in it: > >> > >> DEVICE="eth0" > >> BOOTPROTO=none > >> NM_CONTROLLED="no" > >> ONBOOT="yes" > >> TYPE="Ethernet" > >> NAME="System eth0" > >> DNS1=208.83.67.188 > >> GATEWAY="208.83.67.177" > >> IPADDR="208.83.67.179" > >> HOSTNAME="rigel2.htt-consult.com" > >> IPV6INIT="yes" > >> MACADDR=02:67:15:00:01:79 > >> MTU=1500 > > that's easy - you need to tell it the physical too > > works from Fedora 10 up to Fedora 20 that way > > > > [root@srv-rhsoft:~]$ cat ifcfg-eth1 > > DEVICE=eth1 > > HWADDR=68:05:ca:0d:62:c1 > > MACADDR=00:50:8d:b5:cc:de > > > > "00:50:8d:b5:cc:de" is the on my interface has after it is up > > "68:05:ca:0d:62:c1" is the pysical one of the device before fake it > > > > [root@srv-rhsoft:~]$ ifconfig eth1 > > eth1: flags=67 mtu 1500 > > inet 62.178.103.85 netmask 255.255.255.0 broadcast > 255.255.255.255 > > ether 00:50:8d:b5:cc:de txqueuelen 500 (Ethernet) > > RX packets 74959980 bytes 25037014848 (23.3 GiB) > > RX errors 0 dropped 0 overruns 0 frame 0 > > TX packets 67607627 bytes 39867204808 (37.1 GiB) > > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > > device interrupt 16 memory 0xf7cc-f7ce > > > # cat > /etc/sysconfig/network-scripts/ifcfg-eth0 > DEVICE="eth0" > BOOTPROTO=none > NM_CONTROLLED="no" > ONBOOT="yes" > TYPE="Ethernet" > NAME="System eth0" > HWADDR=02:c3:04:01:77:c3 > MACADDR=02:67:15:00:01:79 > MTU=1500 > DNS1=208.83.67.188 > GATEWAY="208.83.67.177" > IPADDR="208.83.67.179" > HOSTNAME="rigel2.htt-consult.com" > IPV6INIT="yes" > [root@redsleeve ~]# service network restart > Shutting down loopback interface: [ OK ] > Bringing up loopback interface: [ OK ] > Bringing up interface eth0: Device eth0 has different MAC address than > expected, ignoring. > [FAILED] > > And now not even an eth1 interface. > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
Robert, Sorry Dude. I did not mean to make things worse. All I wanted to say is this: It can be done via the ifconfig command. Now, # systemctl status network.service Tells me that network services still depend on: "ExecStart=/etc/rc.d/init.d/network start" Good! File: "/etc/sysconfig/network-scripts/ifup-eth" Says: "39 # bail out, if the MAC does not fit" Ok, perfect. As you already guessed we need to make this change early on. However, if all else fails, you can always source a custom script here and problem solved. I know, this is not elegant. But as an SA who sometimes needs to do dirty deeds... Again, apologies if I am being too simplistic/stupid here. GKH > > On 08/21/2014 10:56 AM, GKH wrote: >> I just did it like this: >> >> ifconfig enp3s0 >> >> enp3s0: flags=4163 mtu 1500 >> inet 10.241.27.154 netmask 255.255.255.0 broadcast 10.241.27.255 >> inet6 fe80::210:18ff:fe04:4d0 prefixlen 64 scopeid 0x20 >> ether 00:10:18:04:04:d0 txqueuelen 1000 (Ethernet) >> RX packets 429591 bytes 41991957 (40.0 MiB) >> RX errors 0 dropped 0 overruns 0 frame 0 >> TX packets 249536 bytes 19108398 (18.2 MiB) >> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 >> device interrupt 18 >> >> ifconfig enp3s0 hw ether 00:10:18:04:04:d7 >> >> ifconfig enp3s0 >> enp3s0: flags=4163 mtu 1500 >> inet 10.241.27.154 netmask 255.255.255.0 broadcast 10.241.27.255 >> inet6 fe80::210:18ff:fe04:4d0 prefixlen 64 scopeid 0x20 >> ether 00:10:18:04:04:d7 txqueuelen 1000 (Ethernet) >> RX packets 429615 bytes 41994383 (40.0 MiB) >> RX errors 0 dropped 0 overruns 0 frame 0 >> TX packets 249549 bytes 19109350 (18.2 MiB) >> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 >> device interrupt 18 >> Done! >> >> -GKH > > I need the changes to be permanent to apply across boots. Thus using > ifcfg-eth0 rather than ifconfig. > > >> >> >> >> >> >> >> >> >> >> >> >> >>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: Keith Keller wrote: > On 2014-08-21, John R Pierce wrote: >> On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >>> I am trying to override the mac addr. >> pretty sure you need to use NIC model specific utilities to do this, >> ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, >> not for reprogramming it. > ifconfig claims to support it: > > hw class address Also, don't forget /etc/udev/rules.d/70-persistant-net.rules >>> I can't forget what I don't know. please point me to description of >>> these rules? > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 08/21/2014 11:31 AM, Digimer wrote: > On 21/08/14 11:25 AM, Robert Moskowitz wrote: >> On 08/21/2014 10:56 AM, Reindl Harald wrote: >>> Am 21.08.2014 um 16:43 schrieb Robert Moskowitz: On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: > Keith Keller wrote: >> On 2014-08-21, John R Pierce wrote: >>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote: I am trying to override the mac addr. >>> pretty sure you need to use NIC model specific utilities to do this, >>> ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, >>> not for reprogramming it. >> ifconfig claims to support it: >> >>hw class address > > Also, don't forget /etc/udev/rules.d/70-persistant-net.rules I can't forget what I don't know. please point me to description of these rules? >>> just look at the file >>> >>> in the past and on CentOS before RHEL7 it was to assign MAC/device-names >>> at boot, on recent Redhat based systems just remove it and stick with >>> place both in the ifcfg-files while disable biosdevname and systemd >>> devicenames at boot >>> >>> both, that udev rules and what i explained you may collide or at least >>> you need to change the MAC there too to not confuse the configs >>> >> I worked a bit on this. I no longer have the MAC or HW addrs in >> ifcfg-eth0. Only in /etc/udev/rules.d/70-persistent-net.rules, and only >> for name=eth0: >> >> # net device () >> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", >> ATTR{address}=="02:67:15:00:01:79", ATTR{type}=="1", KERNEL=="eth*", >> NAME="eth0" >> >> but on reboot, I get the error: >> >> >> Bringing up interface eth0: Device eth0 does not seem to be present, >> delaying initialization. >> [FAILED] >> >> and the ethernet comes up as eth1 and the eth1 line is added to >> /etc/udev/rules.d/70-persistent-net.rules >> >> Almost as if there is something else that needs changing. > Note that you still have to tell the OS "See this real MAC address? > Change it to this new MAC address". Shy of reprogramming the NIC > directly, you will almost certainly need to continue to reference the > real MAC address. So that means I need to find the full syntax of this rule. Oh, and there is no real MAC address and that MIGHT be part of the problem. Many armv7 cards do not have eeprom so no MAC address. In this case the kernel is creating the MAC address as local scope based on the SID. So somewhere this is happening, and Hans (who maintains the uboot Allwinner code) has not told me the magic goo; I have not seen any posts from him so he may still be on Holidays. But I will delve into udev syntax to see what I need to change the mac addr. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 21/08/14 11:25 AM, Robert Moskowitz wrote: > > On 08/21/2014 10:56 AM, Reindl Harald wrote: >> >> Am 21.08.2014 um 16:43 schrieb Robert Moskowitz: >>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: Keith Keller wrote: > On 2014-08-21, John R Pierce wrote: >> On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >>> I am trying to override the mac addr. >> pretty sure you need to use NIC model specific utilities to do this, >> ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, >> not for reprogramming it. > ifconfig claims to support it: > > hw class address Also, don't forget /etc/udev/rules.d/70-persistant-net.rules >>> I can't forget what I don't know. please point me to description of >>> these rules? >> just look at the file >> >> in the past and on CentOS before RHEL7 it was to assign MAC/device-names >> at boot, on recent Redhat based systems just remove it and stick with >> place both in the ifcfg-files while disable biosdevname and systemd >> devicenames at boot >> >> both, that udev rules and what i explained you may collide or at least >> you need to change the MAC there too to not confuse the configs >> > I worked a bit on this. I no longer have the MAC or HW addrs in > ifcfg-eth0. Only in /etc/udev/rules.d/70-persistent-net.rules, and only > for name=eth0: > > # net device () > SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", > ATTR{address}=="02:67:15:00:01:79", ATTR{type}=="1", KERNEL=="eth*", > NAME="eth0" > > but on reboot, I get the error: > > > Bringing up interface eth0: Device eth0 does not seem to be present, > delaying initialization. > [FAILED] > > and the ethernet comes up as eth1 and the eth1 line is added to > /etc/udev/rules.d/70-persistent-net.rules > > Almost as if there is something else that needs changing. Note that you still have to tell the OS "See this real MAC address? Change it to this new MAC address". Shy of reprogramming the NIC directly, you will almost certainly need to continue to reference the real MAC address. -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 21/08/14 11:22 AM, Robert Moskowitz wrote: > > On 08/21/2014 10:49 AM, Digimer wrote: >> On 21/08/14 10:43 AM, Robert Moskowitz wrote: >>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: Keith Keller wrote: > On 2014-08-21, John R Pierce wrote: >> On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >>> I am trying to override the mac addr. >> pretty sure you need to use NIC model specific utilities to do this, >> ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, >> not for reprogramming it. > ifconfig claims to support it: > >hw class address Also, don't forget /etc/udev/rules.d/70-persistant-net.rules >>> I can't forget what I don't know. please point me to description of >>> these rules? >> It's used to assign names to physical devices via udev. How it works >> depends a bit on your version. >> >> It's discussed as part of these tutorials: >> >> CentOS 6: >> https://alteeve.ca/w/Changing_the_ethX_to_Ethernet_Device_Mapping_in_EL6_and_Fedora_12_to_14 > > Ah. A bit: > > # cat /etc/udev/rules.d/70-persistent-net.rules > # This file was automatically generated by the /lib/udev/write_net_rules > # program, run by the persistent-net-generator.rules rules file. > # > # You can modify it, as long as you keep each rule on a single > # line, and change only the value of the NAME= key. > > # net device () > SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", > ATTR{address}=="02:c4:03:82:c1:5 > 3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" > > # net device () > SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", > ATTR{address}=="02:c3:04:01:77:c > 3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" > > === > > So I can pull that eth1 line that got generated error and change the > eth0 line? > > Well I did that, took the macaddr and hwaddr lines. restarted network > and it was not finding eth0. And it added eth1 back into > /etc/udev/rules.d/70-persistent-net.rules. > > I cleaned that up, and rebooted. During the boot, I see the message: > > Bringing up interface eth0: Device eth0 does not seem to be present, > delaying initialization. > [FAILED] > > and once I get started, ifconfig reports eth1 again, and the eth1 line > got added to rules. But the network IS working with addresses I want. > But on eth1 with the errors about eth0. > > So there seems to be something before rules that is needed to be edited, > or there is some limitation on my driver(s). Note that you generally need to stop the network, edit the udev file and then restart the network. It will confuse the kernel otherwise. Please also note that I've always moved names associated to devices, I've not tried changing the address, so there might be something missing there. -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 08/21/2014 11:17 AM, m.r...@5-cent.us wrote: > Robert Moskowitz wrote: >> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: >>> Keith Keller wrote: On 2014-08-21, John R Pierce wrote: > On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >> I am trying to override the mac addr. > pretty sure you need to use NIC model specific utilities to do this, > ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, > not for reprogramming it. ifconfig claims to support it: hw class address >>> >>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules >> I can't forget what I don't know. please point me to description of >> these rules? > Trying again, after those idiots at Ix who run manitu blocked me > > /etc/udev/rules.d are configuration files for udev, to create at boot. > 70-persistent-net.rules contains MAC addresses While they were blocking you, my search foo finally started getting results and others posted more help. I have learned more, but not working as I think it should. Working strangely; why the eth1 stuff. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 08/21/2014 10:56 AM, GKH wrote: > I just did it like this: > > ifconfig enp3s0 > > enp3s0: flags=4163 mtu 1500 > inet 10.241.27.154 netmask 255.255.255.0 broadcast 10.241.27.255 > inet6 fe80::210:18ff:fe04:4d0 prefixlen 64 scopeid 0x20 > ether 00:10:18:04:04:d0 txqueuelen 1000 (Ethernet) > RX packets 429591 bytes 41991957 (40.0 MiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 249536 bytes 19108398 (18.2 MiB) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 18 > > ifconfig enp3s0 hw ether 00:10:18:04:04:d7 > > ifconfig enp3s0 > enp3s0: flags=4163 mtu 1500 > inet 10.241.27.154 netmask 255.255.255.0 broadcast 10.241.27.255 > inet6 fe80::210:18ff:fe04:4d0 prefixlen 64 scopeid 0x20 > ether 00:10:18:04:04:d7 txqueuelen 1000 (Ethernet) > RX packets 429615 bytes 41994383 (40.0 MiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 249549 bytes 19109350 (18.2 MiB) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 18 > Done! > > -GKH I need the changes to be permanent to apply across boots. Thus using ifcfg-eth0 rather than ifconfig. > > > > > > > > > > > > >> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: >>> Keith Keller wrote: On 2014-08-21, John R Pierce wrote: > On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >> I am trying to override the mac addr. > pretty sure you need to use NIC model specific utilities to do this, > ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, > not for reprogramming it. ifconfig claims to support it: hw class address >>> >>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules >> I can't forget what I don't know. please point me to description of >> these rules? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 08/21/2014 10:56 AM, Reindl Harald wrote: > > Am 21.08.2014 um 16:43 schrieb Robert Moskowitz: >> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: >>> Keith Keller wrote: On 2014-08-21, John R Pierce wrote: > On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >> I am trying to override the mac addr. > pretty sure you need to use NIC model specific utilities to do this, > ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, > not for reprogramming it. ifconfig claims to support it: hw class address >>> >>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules >> I can't forget what I don't know. please point me to description of >> these rules? > just look at the file > > in the past and on CentOS before RHEL7 it was to assign MAC/device-names > at boot, on recent Redhat based systems just remove it and stick with > place both in the ifcfg-files while disable biosdevname and systemd > devicenames at boot > > both, that udev rules and what i explained you may collide or at least > you need to change the MAC there too to not confuse the configs > I worked a bit on this. I no longer have the MAC or HW addrs in ifcfg-eth0. Only in /etc/udev/rules.d/70-persistent-net.rules, and only for name=eth0: # net device () SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="02:67:15:00:01:79", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" but on reboot, I get the error: Bringing up interface eth0: Device eth0 does not seem to be present, delaying initialization. [FAILED] and the ethernet comes up as eth1 and the eth1 line is added to /etc/udev/rules.d/70-persistent-net.rules Almost as if there is something else that needs changing. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 08/21/2014 10:49 AM, Digimer wrote: > On 21/08/14 10:43 AM, Robert Moskowitz wrote: >> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: >>> Keith Keller wrote: On 2014-08-21, John R Pierce wrote: > On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >> I am trying to override the mac addr. > pretty sure you need to use NIC model specific utilities to do this, > ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, > not for reprogramming it. ifconfig claims to support it: hw class address >>> >>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules >> I can't forget what I don't know. please point me to description of >> these rules? > It's used to assign names to physical devices via udev. How it works > depends a bit on your version. > > It's discussed as part of these tutorials: > > CentOS 6: > https://alteeve.ca/w/Changing_the_ethX_to_Ethernet_Device_Mapping_in_EL6_and_Fedora_12_to_14 Ah. A bit: # cat /etc/udev/rules.d/70-persistent-net.rules # This file was automatically generated by the /lib/udev/write_net_rules # program, run by the persistent-net-generator.rules rules file. # # You can modify it, as long as you keep each rule on a single # line, and change only the value of the NAME= key. # net device () SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="02:c4:03:82:c1:5 3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" # net device () SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="02:c3:04:01:77:c 3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" === So I can pull that eth1 line that got generated error and change the eth0 line? Well I did that, took the macaddr and hwaddr lines. restarted network and it was not finding eth0. And it added eth1 back into /etc/udev/rules.d/70-persistent-net.rules. I cleaned that up, and rebooted. During the boot, I see the message: Bringing up interface eth0: Device eth0 does not seem to be present, delaying initialization. [FAILED] and once I get started, ifconfig reports eth1 again, and the eth1 line got added to rules. But the network IS working with addresses I want. But on eth1 with the errors about eth0. So there seems to be something before rules that is needed to be edited, or there is some limitation on my driver(s). ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
Robert Moskowitz wrote: > > On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: >> Keith Keller wrote: >>> On 2014-08-21, John R Pierce wrote: On 8/21/2014 7:09 AM, Robert Moskowitz wrote: > I am trying to override the mac addr. pretty sure you need to use NIC model specific utilities to do this, ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, not for reprogramming it. >>> ifconfig claims to support it: >>> >>> hw class address >> >> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules > > I can't forget what I don't know. please point me to description of > these rules? Trying again, after those idiots at Ix who run manitu blocked me /etc/udev/rules.d are configuration files for udev, to create at boot. 70-persistent-net.rules contains MAC addresses mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
I just did it like this: ifconfig enp3s0 enp3s0: flags=4163 mtu 1500 inet 10.241.27.154 netmask 255.255.255.0 broadcast 10.241.27.255 inet6 fe80::210:18ff:fe04:4d0 prefixlen 64 scopeid 0x20 ether 00:10:18:04:04:d0 txqueuelen 1000 (Ethernet) RX packets 429591 bytes 41991957 (40.0 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 249536 bytes 19108398 (18.2 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 18 ifconfig enp3s0 hw ether 00:10:18:04:04:d7 ifconfig enp3s0 enp3s0: flags=4163 mtu 1500 inet 10.241.27.154 netmask 255.255.255.0 broadcast 10.241.27.255 inet6 fe80::210:18ff:fe04:4d0 prefixlen 64 scopeid 0x20 ether 00:10:18:04:04:d7 txqueuelen 1000 (Ethernet) RX packets 429615 bytes 41994383 (40.0 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 249549 bytes 19109350 (18.2 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 18 Done! -GKH > > On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: >> Keith Keller wrote: >>> On 2014-08-21, John R Pierce wrote: On 8/21/2014 7:09 AM, Robert Moskowitz wrote: > I am trying to override the mac addr. pretty sure you need to use NIC model specific utilities to do this, ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, not for reprogramming it. >>> ifconfig claims to support it: >>> >>> hw class address >> >> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules > > I can't forget what I don't know. please point me to description of > these rules? > > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 21/08/14 10:43 AM, Robert Moskowitz wrote: > > On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: >> Keith Keller wrote: >>> On 2014-08-21, John R Pierce wrote: On 8/21/2014 7:09 AM, Robert Moskowitz wrote: > I am trying to override the mac addr. pretty sure you need to use NIC model specific utilities to do this, ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, not for reprogramming it. >>> ifconfig claims to support it: >>> >>> hw class address >> >> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules > > I can't forget what I don't know. please point me to description of > these rules? It's used to assign names to physical devices via udev. How it works depends a bit on your version. It's discussed as part of these tutorials: CentOS 6: https://alteeve.ca/w/Changing_the_ethX_to_Ethernet_Device_Mapping_in_EL6_and_Fedora_12_to_14 CentOS 7: https://alteeve.ca/w/Changing_Ethernet_Device_Names_in_EL7_and_Fedora_15%2B -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote: > Keith Keller wrote: >> On 2014-08-21, John R Pierce wrote: >>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote: I am trying to override the mac addr. >>> pretty sure you need to use NIC model specific utilities to do this, >>> ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, >>> not for reprogramming it. >> ifconfig claims to support it: >> >> hw class address > > Also, don't forget /etc/udev/rules.d/70-persistant-net.rules I can't forget what I don't know. please point me to description of these rules? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
Keith Keller wrote: > On 2014-08-21, John R Pierce wrote: >> On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >>> I am trying to override the mac addr. >> >> pretty sure you need to use NIC model specific utilities to do this, >> ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, >> not for reprogramming it. > > ifconfig claims to support it: > >hw class address Also, don't forget /etc/udev/rules.d/70-persistant-net.rules mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
Did not work... On 08/21/2014 10:15 AM, Reindl Harald wrote: > > Am 21.08.2014 um 16:09 schrieb Robert Moskowitz: >> I am trying to override the mac addr. Now this is on an armv7 actually >> running the F19 kernel and Redsleeve 6, but it SHOULD be standard >> Centos6 ifcfg-eth0 content. Of course RSEL does not start with a >> ifcfg-eth0 file, letting network services do all the work, so I am >> starting from scratch, using the file from one of my C6 boxes with >> static addressing. My file has in it: >> >> DEVICE="eth0" >> BOOTPROTO=none >> NM_CONTROLLED="no" >> ONBOOT="yes" >> TYPE="Ethernet" >> NAME="System eth0" >> DNS1=208.83.67.188 >> GATEWAY="208.83.67.177" >> IPADDR="208.83.67.179" >> HOSTNAME="rigel2.htt-consult.com" >> IPV6INIT="yes" >> MACADDR=02:67:15:00:01:79 >> MTU=1500 > that's easy - you need to tell it the physical too > works from Fedora 10 up to Fedora 20 that way > > [root@srv-rhsoft:~]$ cat ifcfg-eth1 > DEVICE=eth1 > HWADDR=68:05:ca:0d:62:c1 > MACADDR=00:50:8d:b5:cc:de > > "00:50:8d:b5:cc:de" is the on my interface has after it is up > "68:05:ca:0d:62:c1" is the pysical one of the device before fake it > > [root@srv-rhsoft:~]$ ifconfig eth1 > eth1: flags=67 mtu 1500 > inet 62.178.103.85 netmask 255.255.255.0 broadcast 255.255.255.255 > ether 00:50:8d:b5:cc:de txqueuelen 500 (Ethernet) > RX packets 74959980 bytes 25037014848 (23.3 GiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 67607627 bytes 39867204808 (37.1 GiB) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 16 memory 0xf7cc-f7ce > # cat > /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE="eth0" BOOTPROTO=none NM_CONTROLLED="no" ONBOOT="yes" TYPE="Ethernet" NAME="System eth0" HWADDR=02:c3:04:01:77:c3 MACADDR=02:67:15:00:01:79 MTU=1500 DNS1=208.83.67.188 GATEWAY="208.83.67.177" IPADDR="208.83.67.179" HOSTNAME="rigel2.htt-consult.com" IPV6INIT="yes" [root@redsleeve ~]# service network restart Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ] Bringing up interface eth0: Device eth0 has different MAC address than expected, ignoring. [FAILED] And now not even an eth1 interface. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 2014-08-21, John R Pierce wrote: > On 8/21/2014 7:09 AM, Robert Moskowitz wrote: >> I am trying to override the mac addr. > > pretty sure you need to use NIC model specific utilities to do this, > ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, > not for reprogramming it. ifconfig claims to support it: hw class address Set the hardware address of this interface, if the device driver supports this operation. The keyword must be followed by the name of the hardware class and the printable ASCII equivalent of the hardware address. Hardware classes currently supported include ether (Ethernet), ax25 (AMPR AX.25), ARCnet and netrom (AMPR NET/ROM). The important item is of course "if the device driver supports this operation". If not then a tool downloaded from the NIC manufacturer might be the only way. Unfortunately I do not know whether ifcfg-eth* supports this ifconfig syntax. --keith -- kkel...@wombat.san-francisco.ca.us ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 08/21/2014 10:15 AM, Reindl Harald wrote: > > Am 21.08.2014 um 16:09 schrieb Robert Moskowitz: >> I am trying to override the mac addr. Now this is on an armv7 actually >> running the F19 kernel and Redsleeve 6, but it SHOULD be standard >> Centos6 ifcfg-eth0 content. Of course RSEL does not start with a >> ifcfg-eth0 file, letting network services do all the work, so I am >> starting from scratch, using the file from one of my C6 boxes with >> static addressing. My file has in it: >> >> DEVICE="eth0" >> BOOTPROTO=none >> NM_CONTROLLED="no" >> ONBOOT="yes" >> TYPE="Ethernet" >> NAME="System eth0" >> DNS1=208.83.67.188 >> GATEWAY="208.83.67.177" >> IPADDR="208.83.67.179" >> HOSTNAME="rigel2.htt-consult.com" >> IPV6INIT="yes" >> MACADDR=02:67:15:00:01:79 >> MTU=1500 > that's easy - you need to tell it the physical too > works from Fedora 10 up to Fedora 20 that way > > [root@srv-rhsoft:~]$ cat ifcfg-eth1 > DEVICE=eth1 > HWADDR=68:05:ca:0d:62:c1 > MACADDR=00:50:8d:b5:cc:de > > "00:50:8d:b5:cc:de" is the on my interface has after it is up > "68:05:ca:0d:62:c1" is the pysical one of the device before fake it OK. I ws going by: http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-networkscripts-interfaces.html which says: MACADDR=// where // is the hardware address of the Ethernet device in the form /AA:BB:CC:DD:EE:FF/. This directive is used to assign a MAC address to an interface, overriding the one assigned to the physical NIC. This directive should *not* be used in conjunction with HWADDR. > > [root@srv-rhsoft:~]$ ifconfig eth1 > eth1: flags=67 mtu 1500 > inet 62.178.103.85 netmask 255.255.255.0 broadcast 255.255.255.255 > ether 00:50:8d:b5:cc:de txqueuelen 500 (Ethernet) > RX packets 74959980 bytes 25037014848 (23.3 GiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 67607627 bytes 39867204808 (37.1 GiB) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 16 memory 0xf7cc-f7ce > ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to override MAC addr
On 8/21/2014 7:09 AM, Robert Moskowitz wrote: > I am trying to override the mac addr. pretty sure you need to use NIC model specific utilities to do this, ifcfg-ethN won't do it. the hwaddr= in there is for finding the nic, not for reprogramming it. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Trying to override MAC addr
I am trying to override the mac addr. Now this is on an armv7 actually running the F19 kernel and Redsleeve 6, but it SHOULD be standard Centos6 ifcfg-eth0 content. Of course RSEL does not start with a ifcfg-eth0 file, letting network services do all the work, so I am starting from scratch, using the file from one of my C6 boxes with static addressing. My file has in it: DEVICE="eth0" BOOTPROTO=none NM_CONTROLLED="no" ONBOOT="yes" TYPE="Ethernet" NAME="System eth0" DNS1=208.83.67.188 GATEWAY="208.83.67.177" IPADDR="208.83.67.179" HOSTNAME="rigel2.htt-consult.com" IPV6INIT="yes" MACADDR=02:67:15:00:01:79 MTU=1500 And when I restart network, it can't find eth0: # service network restart Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ] Bringing up interface eth0: Device eth0 does not seem to be present, delaying initialization. [FAILED] but: # ifconfig eth1 Link encap:Ethernet HWaddr 02:67:15:00:01:79 inet addr:208.83.67.179 Bcast:208.83.67.255 Mask:255.255.255.0 inet6 addr: 2607:f4b8:3:3:67:15ff:fe00:179/64 Scope:Global inet6 addr: fe80::67:15ff:fe00:179/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:254 errors:0 dropped:17 overruns:0 frame:0 TX packets:70 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:26575 (25.9 KiB) TX bytes:6104 (5.9 KiB) Interrupt:87 Base address:0x6000 The assigned MAC addr for eth0 is: 02:c3:04:01:77:c3 The tutorials that I have found on ifcfg-ethN say not to use both hwaddr and macaddr in the same cfg file, but it almost seems that is what is needed? thanks ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS Digest, Vol 115, Issue 21
On Thursday, August 21, 2014 12:00:03 centos-requ...@centos.org wrote: > Re: [CentOS] SELinux vs. logwatch and virsh > From: Daniel J Walsh > To: CentOS mailing list > > On 08/18/2014 02:13 PM, Bill Gee wrote: > > Hi Dan - > > > > "ausearch -m avc -ts recent" produces no output. If I run it as "ausearch > > -f virsh" then it produces output similar to this. Each day's run of > > logwatch produces three of these audit log entries. The a1 and a2 values > > are different for each entry, but everything else is the same. > > > > === > > time->Mon Aug 18 03:21:03 2014 > > type=SYSCALL msg=audit(1408350063.257:7492): arch=c03e syscall=21 > > success=no exit=-13 a0=11ee230 a1=4 a2=7fff722837b0 a3=7fff72283640 > > items=0 ppid=2815 pid=2816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 > > egid=0 sgid=0 fsgid=0 tty=(none) ses=981 comm="bash" exe="/usr/bin/bash" > > subj=system_u:system_r:logwatch_t:s0-s0:c0.c1023 key=(null) > > type=AVC msg=audit(1408350063.257:7492): avc: denied { read } > > for pid=2816 comm="bash" name="virsh" dev="dm-0" ino=135911290 > > scontext=system_u:system_r:logwatch_t:s0-s0:c0.c1023 > > tcontext=system_u:object_r:virsh_exec_t:s0 tclass=file > > === > > > > I thought about using audit2allow as you suggest. The problem is then I > > don't really know what change is required. What exactly will it > > do? And is there a guarantee that it will work? > > logwatch is executing virsh probably to communicate with libvirt to > rotate logs or something. You can look in /etc/logrotate.d for a script > with virsh to tell you what the command is trying to do. Hi Dan - I know EXACTLY what virsh is being called for. I wrote the script! It has nothing to do with logrotate. I want virsh to tell logwatch what the status is of all virtual machines running on the host. Logwatch will then include that in its daily summary report. SELinux is getting in the way. Regards - Bill Gee ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOS-announce Digest, Vol 114, Issue 11
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ...@centos.org You can reach the person managing the list at centos-announce-ow...@centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1075 Moderate CentOS 6 qemu-kvm Update (Johnny Hughes) 2. CEBA-2014:1080 CentOS 6 ccid Update (Johnny Hughes) 3. CEBA-2014:1081 CentOS 7 perl-Test-Pod FASTTRACK BugFix Update (Johnny Hughes) -- Message: 1 Date: Tue, 19 Aug 2014 10:00:56 + From: Johnny Hughes Subject: [CentOS-announce] CESA-2014:1075 Moderate CentOS 6 qemu-kvm Update To: centos-annou...@centos.org Message-ID: <20140819100056.ga27...@n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1075 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1075.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4c2f64fbfa724282ccea4c96a54bf8efd0ef9b0994c590b10208f49192f926ae qemu-guest-agent-0.12.1.2-2.415.el6_5.14.i686.rpm x86_64: 6ece8abdbb5f15c1a4fda968db4a9f2a35d3b273c66d3f9e396259762d15 qemu-guest-agent-0.12.1.2-2.415.el6_5.14.x86_64.rpm 5754d91f336abb86787e1cc3378477de5407c1a3a3c7e20a9a40783a78e8afee qemu-img-0.12.1.2-2.415.el6_5.14.x86_64.rpm 4ce7d58ddf89b67cbcaeda217aba78b8a3b4facf1ed632c0ee90ac4f27d00a86 qemu-kvm-0.12.1.2-2.415.el6_5.14.x86_64.rpm 4c10810d91f41199b63fdf5913a6090c7bc1b1ebda300b63c5b934dc9773f5bc qemu-kvm-tools-0.12.1.2-2.415.el6_5.14.x86_64.rpm Source: d1c7b724bfb2a1c3ea74e835f2b893ce70eeef66bc95ff073732fbe0efb615d5 qemu-kvm-0.12.1.2-2.415.el6_5.14.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #cen...@irc.freenode.net -- Message: 2 Date: Wed, 20 Aug 2014 13:00:22 + From: Johnny Hughes Subject: [CentOS-announce] CEBA-2014:1080 CentOS 6 ccid Update To: centos-annou...@centos.org Message-ID: <20140820130022.ga5...@n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1080 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1080.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2ac61bf52b8fead7aa134984cfe47dabef0e038e94bfef1141879a2f7224390c ccid-1.3.9-6.1.el6_5.i686.rpm x86_64: 3acf42c67fbe2f9cd561818b03e7a4d7b1eb7727f67ca31e0d1409bee059e7e5 ccid-1.3.9-6.1.el6_5.x86_64.rpm Source: 2c1128b52d06abb7ad4c12e490460fc22fc40a7fdaa24dc07ad940f934bb13f6 ccid-1.3.9-6.1.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #cen...@irc.freenode.net -- Message: 3 Date: Wed, 20 Aug 2014 13:11:14 + From: Johnny Hughes Subject: [CentOS-announce] CEBA-2014:1081 CentOS 7 perl-Test-Pod FASTTRACK BugFix Update To: centos-annou...@centos.org Message-ID: <20140820131114.ga24...@n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1081 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1081.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c81d42c09fc4cfff0342f5ae9e76d7ba7b26377c00ac038f17317f3743094bbb perl-Test-Pod-1.48-3.el7.noarch.rpm Source: da0fb9277a920e37ac3f0b3b1d372093608781ee0a371864ba243efe218feddb perl-Test-Pod-1.48-3.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #cen...@irc.freenode.net -- ___ CentOS-announce mailing list centos-annou...@centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 114, Issue 11 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] java 1.6 and 1.7 on CentOS
On 20/08/14 16:45, Les Mikesell wrote: > On Wed, Aug 20, 2014 at 9:02 AM, Toralf Lund wrote: >> I can confirm that. I have both installed. You can configure the default >> using the 'alternatives' system. > is it just me, or does anyone else think that 'alternatives' system is > completely bogus? I've always seen it as designed mostly for system services for which there are several common implementations - like the SMTP server or the printing system. Where I think it makes sense. >>> But do you really need _two_ symlinks to get a default in your PATH? >> I think the argument is that "configuration" commands shouldn't change >> bin directories. Which is right in a way, but maybe this is one of the >> cases where practicality should have been chosen over formal correctness. > What is formally correct about putting executables in some obscure > place under /var? I'm not quite sure what you mean by that. For the alternatives setup I have links on /usr/bin or whatever pointing to other links on /etc/alternatives, which in turn point to the real files - where direct links from /usr/bin would of course be simpler. Perhaps you were talking about something else, or are the locations different on CentOS 7 (I'm using version 6.) What I was referring to is that I believe it's considered as incorrect to put "dynamic" data on /usr these days. I'm not sure there is a separate specification saying so, or if it's just taken to be implied by the FHS (http://www.pathname.com/fhs/pub/fhs-2.3.html). - T > It may also be useful to be able to set up a system-wide default for user applications "with alternatives", but I suppose a user override ought to be possible in that case. > what if I have one user that wants JDK6 and another that needs JDK7 ? I guess the "preferred applications" system in the desktop is in a way meant for such cases, but this of course comes across as incomplete, too. >>> The concept used for 'software collections' is a more realistic >>> approach - but instead of hiding where things land and needing a tool >>> to set up use, why not just tell people what to add to their own PATH >>> and LD_LIBRARY path to get the version you want. That's almost >>> certainly what the developers of every package where they need to have >>> test versions does. So why treat the users like they would be too >>> dumb for that? >> That's a point. >> >> You could also easily develop "config" tools that would make that job >> easier for "dumb" users - this might be more productive than maintaining >> different solution that essentially have the same effect. > Or you could just not pretend that users are dumb for choosing your > product. And not hide the purpose, content, and functionality of PATH > and LD_LIBRARY_PATH, things that every developer who needs to have a > 'stable, trusted' version of an application along with today's build > is going to understand and utilize. So it's probably not those > developers that came up with the weird alternatives scheme - or at > least decided to use it for applications that really need concurrent > alternatives, not a site-wide default. > This e-mail, including any attachments and response string, may contain proprietary information which is confidential and may be legally privileged. It is for the intended recipient only. If you are not the intended recipient or transmission error has misdirected this e-mail, please notify the author by return e-mail and delete this message and any attachment immediately. If you are not the intended recipient you must not use, disclose, distribute, forward, copy, print or rely on this e-mail in any way except as permitted by the author. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos