Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread John R Pierce
On 8/21/2014 9:50 PM, Keith Keller wrote:
> On 2014-08-22, Valeri Galtsev  wrote:
>> >
>> >3ware was independent company till it was first bought by AMCC, then LSI
>> >bought them from AMCC. I didn't know LSI sold them to someone else,
> Sorry, I was not clear: LSI was bought, not just 3ware.  If you look at
> LSI's home page, it says "An Avago Technologies Company".

there's been a whole lot of merging and splitting.

Avago used to be HP's semiconductor business, was spun off in the great 
split/merger with Compaq as part of Aglient, then in 2005 kicked to the 
curb as an independent.   They are big on analog, mixed signal, and 
microwave semiconductors.

LSI had acquired 3Ware, ONStor, a bunch more, and merged them into 
Engenio, which was their NAS/SAN division, making OEM storage arrays 
sold by IBM, HP, Dell and others.  Engenio has been sold to Network 
Appliance, the original NAS company.

  LSI acquired the Sandforce SSD chip business.  Avago acquired and 
merged with LSI.   Avago unbundled Sandforce and sold it to Seagate.  
Avago sold LSI's networking stuff to Intel just last week.  AFAIK, Avago 
still sells the LSI sas chips and both megaraid and 3ware raid controllers.






-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Keith Keller
On 2014-08-22, Valeri Galtsev  wrote:
>
> 3ware was independent company till it was first bought by AMCC, then LSI
> bought them from AMCC. I didn't know LSI sold them to someone else,

Sorry, I was not clear: LSI was bought, not just 3ware.  If you look at
LSI's home page, it says "An Avago Technologies Company".

--keith

-- 
kkel...@wombat.san-francisco.ca.us


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread John R Pierce
On 8/21/2014 5:49 PM, Valeri Galtsev wrote:
> I never heard about any LSI card called RAID which are not hardware RAID.

the base LSI SAS HBA cards, like the 2008 chip (9211-8i etc boards) have 
microcoded hardware raid without any write buffer or battery 
backup   Its not quite fake raid but its kinda in limbo..

I *much* prefer to use these cards in IT mode, which requires reflashing 
the firmware and BIOS, as they always seem to be shipped in IR mode.   
IT mode is plain SAS2 Initiator-Target mode, where the disks are just 
plain disks without needing to create volumes or any other nonsense.



-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Valeri Galtsev

On Thu, August 21, 2014 6:47 pm, Keith Keller wrote:
> On 2014-08-21, Valeri Galtsev  wrote:
>> (And I do not include into hardware RAID these fake "raid" cards
>> that rely on "driver" - which are indeed software RAID cards. 3ware
>> never
>> fell that low to make/sell any of such junk. Somebody who knows LSI
>> better
>> than I do will probably say the same about them).
>
> LSI has owned 3ware for some time (who in turn were recently gobbled by
> some other company).

3ware was independent company till it was first bought by AMCC, then LSI
bought them from AMCC. I didn't know LSI sold them to someone else,
www.3ware.com still redirects to LSI. To the credit of all 3ware owners,
they left nicely working 3ware (engineering, manufacturing, etc) mechanism
as is without destroying it. Which is rare, and they deserve my respect
for that alone. I do like LSI too, and have a few of their megaraid
controllers on long lived and still very reliable boxes. I do like 3ware
more as as you said it has more transparent UI, which in my book
diminishes chance of human error tremendously. And I'm merely human. I do
like 3ware is coming with daemon that watches and notifies me when
necessary.

> The LSI MegaRAID cards are real hardware RAID.

I never heard about any LSI card called RAID which are not hardware RAID.
I can not say the same about, say, Adaptec or HighPoint to name two. Some
of Adaptec and some of HighPoint cards even though they are sold as "RAID"
cards are junk and have no place in our server room. Areca, probably, is
one more company whose RAID cards all are indeed hardware RAID cards (I
have 3 or 4 Areca cards in our server room).

So let me name them separately (I consider bad guys everybody who sells as
RAID card at least one product which is not hardware RAID card, they
confuse the world and interfere with fair profits of good guys):

good guys: LSI, 3ware, Areca

bad guys: Adaptec, HighPoint


 Somebody correct me if/where I'm wrong.

Valeri

> What I have heard, but only validated the former, is that the 3ware UI
> is simpler but the MegaRAID controllers are faster.
>
> That being said, I do also like mdraid for certain purposes.  I was able
> to successfully repurpose a very old controller in an old but nicely
> sized chassis (16 bays) by moving to an md RAID6 array, which the
> hardware controller doesn't support (I did say it's old).  I also love
> the want_replacement feature in md RAID, a feature I don't believe is
> supported in the 3ware line (you can "rebuild" just one disk if it's bad
> but hasn't been kicked out of the array yet; that rebuild is much
> faster).
>
> --keith
>
> --
> kkel...@wombat.san-francisco.ca.us
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Keith Keller
On 2014-08-21, Valeri Galtsev  wrote:
> (And I do not include into hardware RAID these fake "raid" cards
> that rely on "driver" - which are indeed software RAID cards. 3ware never
> fell that low to make/sell any of such junk. Somebody who knows LSI better
> than I do will probably say the same about them).

LSI has owned 3ware for some time (who in turn were recently gobbled by
some other company).  The LSI MegaRAID cards are real hardware RAID.
What I have heard, but only validated the former, is that the 3ware UI
is simpler but the MegaRAID controllers are faster.

That being said, I do also like mdraid for certain purposes.  I was able
to successfully repurpose a very old controller in an old but nicely
sized chassis (16 bays) by moving to an md RAID6 array, which the
hardware controller doesn't support (I did say it's old).  I also love
the want_replacement feature in md RAID, a feature I don't believe is
supported in the 3ware line (you can "rebuild" just one disk if it's bad
but hasn't been kicked out of the array yet; that rebuild is much
faster).

--keith

-- 
kkel...@wombat.san-francisco.ca.us


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Valeri Galtsev

On Thu, August 21, 2014 5:32 pm, GKH wrote:
> Valeri,
>
> I hope you realize that your arguments for hardware RAID
> all depend on everything working just right.
>
> If something goes wrong with a disk (on HW RAID)
> you can't just simply take out the disk, move it to another
> computer and maybe do some forensics.

If the drive that is member of hardware RAID failed (say timed out while
dealing with reallocation of badblock), it is kicked out of the RAID, I
get notification by 3ware daemon, hot unplug the drive, hot plug in
replacement (of same or larger size), and start rebuild RAID through
firmware utility, or GUI interface, or controller starts RAID rebuild
automatically if configured so. The system on the machine has no idea
about all this and keeps running happily.

I do no forensics on failed drives. I run manufacturer drive fitness test
(whichever it is called by particular manufacturer), if drive passes, I
usually reuse it, if it fails test, I send it to drive manufacturer for
warranty replacement or toss if it is out of warranty.

>
> The formatting of disks on HW RAID is transparent to Linux.
> Therefore my disks are all RAID or not.
>
> What if I wanted to mix and match?

With 3ware RAID controller you can export one or more of attached drives
directly to the system. They can not participate in [hardware] RAID then.

> Maybe I don't want my swap
> RAID for performance.

Speaking of swap: RAM is large and cheap these days. I do not use swap on
machines with 32 GB of RAM or larger. On multitasking system you have to
switch between processes, which is more often than every millisecond.
Imagine now you need to swap in or out 32GB during some of the switching
between processes. Your system will be on its knees just because of that.
Unless you have very special block device which is almost as fast as RAM,
which you better just have added to the address space of RAM (from kernel
point of view), so we are not speaking of these devices as of hard drives.

>
> The idea of taking my data (which is controlled by an OSS
> Operating System, Linux) and putting it behind a closed source
> and closed system RAID controller is appalling to me.

Me too. Yet all of us use them. Example: hard drive firmware. Which has a
bit more sophisticated function than just take data and write track or
other way around. It detects badblocks, reallocated them, recovers as much
as possible information that was inside that bad block. Another example:
video card, say, NVIDIA one. It has processors inside that run software
that is flashed on its non-volatile memory. Now, with Nvidia cards
sometimes you have to use proprietary driver (if you have more or less
sophisticated display arrangement). Which is closed code binary driver.
What you compile when you install that is just an interface between closed
code driver and this particular version of kernel. And this code runs not
in the card itself, but under your system. And the list goes on. Not to
mention our cell phones...

The only time I was mad about firmware of some controller was one
particular version of via PATA controller that had a bug which was leading
to drive corruption...

>
> It comes down to this: Linux knows where and when to position
> the heads of disks in order to max performance. If a
> RAID controller is in the middle, whatever algorithm
> Linux is using is no longer valid. The RAID controller
> is the one who makes the I/O decisions.

Yes, but... And some of what I'll say was already mentioned in this
thread. You can tweak RAID controller to align stripe sizes with optimal
data chunks of the drives. Furthermore, you can have cache (battery backed
up), which increases device speed tremendously (30 times I saw for
something particular - just off the top of my head). Of course, RAM is
used as a cache for software RAID, but to the contrary to RAID controller
cache RAM content vanishes with power loss. You don't seem to be the
person who had to recover after [software] RAID cache loss. And _I_
definitely will not like to be the one. Hence I use hardware RAID, with
optimized stripe size, and optimized filesystem block size, and with cache
in RAID controller that is battery backed up. If you beat me in IO with
software RAID, I will live with that. As I do not like to give up
reliability. Not at as small extra cost as I have to pay for hardware
RAID. (And I do not include into hardware RAID these fake "raid" cards
that rely on "driver" - which are indeed software RAID cards. 3ware never
fell that low to make/sell any of such junk. Somebody who knows LSI better
than I do will probably say the same about them).

Again, just my 2c.

Valeri

>
> Sorry, this is not something I want to live with.
>
> GKH
>
>
>>
>> On Thu, August 21, 2014 3:54 pm, Matt wrote:
 Hate to change the conversation here but that's why I hate hardware
 RAID.
>>
>> I love hardware RAID. 3ware more than others. In case of hardware RAID
>> it
>> is tiny specialized system (firmware) that is doin

Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Steven Tardy
On Thu, Aug 21, 2014 at 3:43 PM, Matt  wrote:

> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server.  It
> has eight 750GB drives in a hardware RAID6 array.  Its acting as a
> host for a number of OpenVZ containers.
>
> Seems like every time I reboot this server which is not very often it
> sits for hours running a disk check or something on boot.  The server
> is located 200+ miles away so its not very convenient to look at.  Is
> there anyway to tell if it plans to run this or tell it not too?
>
> Right now its reporting one of the drives in array is bad and last
> time it did this a reboot resolved it.
>

run:
 tune2fs -l /dev/mapper/
check:
  Maximum mount count
  Next check after
if those are NOT -1 and 0 respectively change settings by running:
  tune2fs -i 0 -c 0 /dev/mapper/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread John R Pierce
On 8/21/2014 4:11 PM, John R Pierce wrote:
> On 8/21/2014 4:06 PM, Les Mikesell wrote:
>> >Yes, but try a software RAID when you have intermittently bad RAM.
>> >I've been there.  Mirrored disks that were almost, but not quite,
>> >mirrors.
> try any file system when you've got flakey ram.data thats not quite
> what you wanted, oh boy.

which, btw, is why I insist on ECC for servers.  and really prefer ZFS 
where each block of each part of a raid is checksummed and timestamped, 
so when scrub finds mismatching blocks, it can know which one is correct.



-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread John R Pierce
On 8/21/2014 4:06 PM, Les Mikesell wrote:
> Yes, but try a software RAID when you have intermittently bad RAM.
> I've been there.  Mirrored disks that were almost, but not quite,
> mirrors.

try any file system when you've got flakey ram.data thats not quite 
what you wanted, oh boy.



-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Les Mikesell
On Thu, Aug 21, 2014 at 5:32 PM, GKH  wrote:
>
> I hope you realize that your arguments for hardware RAID
> all depend on everything working just right.

Yes, but try a software RAID when you have intermittently bad RAM.
I've been there.  Mirrored disks that were almost, but not quite,
mirrors.

> If something goes wrong with a disk (on HW RAID)
> you can't just simply take out the disk, move it to another
> computer and maybe do some forensics.

You can if that other computer has a matching controller.   If you
expect to do forensics you should have that.  Most people would just
use a backup, though.

> What if I wanted to mix and match? Maybe I don't want my swap
> RAID for performance.

If you want performance, you'll have enough RAM that you won't ever
page swap back in.

> The idea of taking my data (which is controlled by an OSS
> Operating System, Linux) and putting it behind a closed source
> and closed system RAID controller is appalling to me.

Why?  It should all be backed up.

> It comes down to this: Linux knows where and when to position
> the heads of disks in order to max performance. If a
> RAID controller is in the middle, whatever algorithm
> Linux is using is no longer valid.

Really??? I don't think linux has ever known or cared much about disk
geometry and most disks lie about it anyway.

> The RAID controller
> is the one who makes the I/O decisions.
>
> Sorry, this is not something I want to live with.

I think you haven't actually measured any performance.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread GKH
Valeri,

I hope you realize that your arguments for hardware RAID
all depend on everything working just right.

If something goes wrong with a disk (on HW RAID)
you can't just simply take out the disk, move it to another
computer and maybe do some forensics.

The formatting of disks on HW RAID is transparent to Linux.
Therefore my disks are all RAID or not.

What if I wanted to mix and match? Maybe I don't want my swap
RAID for performance.

The idea of taking my data (which is controlled by an OSS
Operating System, Linux) and putting it behind a closed source
and closed system RAID controller is appalling to me.

It comes down to this: Linux knows where and when to position
the heads of disks in order to max performance. If a
RAID controller is in the middle, whatever algorithm
Linux is using is no longer valid. The RAID controller
is the one who makes the I/O decisions.

Sorry, this is not something I want to live with.

GKH


>
> On Thu, August 21, 2014 3:54 pm, Matt wrote:
>>> Hate to change the conversation here but that's why I hate hardware
>>> RAID.
>
> I love hardware RAID. 3ware more than others. In case of hardware RAID it
> is tiny specialized system (firmware) that is doing RAID function. In the
> specialized CPU (I should have called it differently) inside hardware RAID
> controller. Independent on the rest of computer, and needing only power to
> keep going. Tiny piece of code, very simple function. It is really hard to
> introduce bugs into these. Therefore you unlikely will have problem on
> device level. To find the status of the device and its components
> (physical drives) you always can use utility that comes from hardware
> vendor, you can have even web interface if it is 3ware.
>
>>> If it was software RAID, Linux would always tell you what's going on.
>
> It does. And so does hardware RAID device. And most of them (3ware in
> particular) do not do offline (i.e. delaying boot) check/rebuild, but they
> do it online (they are being operational in degraded state, and do
> necessary rebuild with IO present on the device, they just export
> themselves to Linux kernel with the warning of being degraded RAID during
> boot).
>
> Software RAID, however, has a disadvantage (more knowledgeable people will
> correct me wherever necessary). Software RAID function is executed by main
> CPU. Under very sophisticated system (linux kernel), as one of the
> processes (even if it is real time process), on the system that is
> switching between processes. Therefore, RAID task for software RAID lives
> in much more dangerous environment. Now, if it never finishes (say, kernel
> panics due to something else), you get inconsistent device (software RAID
> one), and it is much much much harder task to bring that to to some extent
> consistent state than, e.g., to bring back dirty filesystem that lives on
> the sane device. This is why we still pay for hardware RAID devices. I do.
>
> Just my 2c.
>
> Valeri
>
> 
> Valeri Galtsev
> Sr System Administrator
> Department of Astronomy and Astrophysics
> Kavli Institute for Cosmological Physics
> University of Chicago
> Phone: 773-702-4247
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Bruce Ferrell
Have you inspected via the system iLO console?  Assuming it's cabled to the 
network



On 08/21/2014 01:33 PM, GKH wrote:
> Hate to change the conversation here but that's why I hate hardware RAID.
> If it was software RAID, Linux would always tell you what's going on.
> Besides, Linux knows much more about what is going on on the disk and what is 
> about to happen (like a megabyte DMA transfer).
>
> BTW, check if something is creating:
>
> /forcefsck
>
> That would make the fsck run every time.
>
> GKH
>
>> Matt wrote:
>>> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server.  It
>>> has eight 750GB drives in a hardware RAID6 array.  Its acting as a
>>> host for a number of OpenVZ containers.
>>>
>>> Seems like every time I reboot this server which is not very often it
>>> sits for hours running a disk check or something on boot.  The server
>>> is located 200+ miles away so its not very convenient to look at.  Is
>>> there anyway to tell if it plans to run this or tell it not too?
>>>
>>> Right now its reporting one of the drives in array is bad and last
>>> time it did this a reboot resolved it.
>> You need to know what it's running. If it's doing an fsck, that will take
>> a lot of time. If it's firmware in the RAID controller, that's different.
>> You can run tune2fs /dev/whatever and see how often it wants to run fsck.
>> For that matter, what's the entry in /etc/fstab?
>>
>>mark
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Matt
 Hate to change the conversation here but that's why I hate hardware
 RAID.
 If it was software RAID, Linux would always tell you what's going on.
 Besides, Linux knows much more about what is going on on the disk and
 what is about to happen (like a megabyte DMA transfer).

 BTW, check if something is creating:

 /forcefsck
>>>
>>> These exist:
>>>
>>> -rw-r--r--1 root root 0 Jul  7 10:03 .autofsck
>>> -rw-r--r--1 root root 0 Jul  7 10:03 .autorelabel
>>>
>>> What does that mean?
>>
>> ARRRGGGHGHGHGHGHGHHGHG!!!
>>
>> First, delete /.autofsck. That will stop it from fsckin'g *everything*
>> every reboot. Second, is selinux in enforcing mode? In any case, have you
>> recently done major changes? If not, delete /.autorelabel, since an
>> selinux relabel takes a *while*, esp. if you have *lots* of files.
>>
>>   mark
>
> No, /.autofsck is not harmful and will cause nothing unless
> /etc/sysconfig/autofsck exists and has something specific defined. The
> /.autofsck is automatically created at each boot by the system.
>
> /.autorelabel is as well only a control file and does not cause a full
> SELiux relabeling at each boot.
>
> If you don't believe me, please see /etc/rc.sysinit.
>
> Alexander

So I just need to SELINUXTYPE=disabled and ignore .autofsck and
.autorelabel?  Was the targeted selinux causing the slow reboots?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 7 lockup

2014-08-21 Thread Les Mikesell
On Thu, Aug 21, 2014 at 4:07 PM, Daniel J Walsh  wrote:
>
> mmap_zero is a fairly dangerous access. It means the object is
> attempting to memeory map
> low memory in the kernel.  Bugs in the kernel have been known to allow
> priv escallation, can be prevented by this check.
>
> http://eparis.livejournal.com/
>
> Talks about the access check.
>
> I usually tell people to avoid these apps, but if you need to run it,

Ocsinventory-agent wants to report the hardware where it runs back to
the central server, including the attached monitor, if any.   I think
that is the source of the access. Is there a better way to do that in
a perl script?

> you can turn the protection off as the alert told you.
>
> setsebool -P mmap_low_allowed 1

Thanks.  This is a package from EPEL.   Can they do something in the
package to make it work without being blocked?

In any case, my real question is whether this could be related to the
system hang.  I don't really see why a failing access in a perl script
would be a real problem unless there is some more serious bug, so it
may not be related at all.  There were several such log messages, so
at least we know the first few weren't fatal.

-- 
   Les Mikesell
  lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Valeri Galtsev

On Thu, August 21, 2014 3:54 pm, Matt wrote:
>> Hate to change the conversation here but that's why I hate hardware
>> RAID.

I love hardware RAID. 3ware more than others. In case of hardware RAID it
is tiny specialized system (firmware) that is doing RAID function. In the
specialized CPU (I should have called it differently) inside hardware RAID
controller. Independent on the rest of computer, and needing only power to
keep going. Tiny piece of code, very simple function. It is really hard to
introduce bugs into these. Therefore you unlikely will have problem on
device level. To find the status of the device and its components
(physical drives) you always can use utility that comes from hardware
vendor, you can have even web interface if it is 3ware.

>> If it was software RAID, Linux would always tell you what's going on.

It does. And so does hardware RAID device. And most of them (3ware in
particular) do not do offline (i.e. delaying boot) check/rebuild, but they
do it online (they are being operational in degraded state, and do
necessary rebuild with IO present on the device, they just export
themselves to Linux kernel with the warning of being degraded RAID during
boot).

Software RAID, however, has a disadvantage (more knowledgeable people will
correct me wherever necessary). Software RAID function is executed by main
CPU. Under very sophisticated system (linux kernel), as one of the
processes (even if it is real time process), on the system that is
switching between processes. Therefore, RAID task for software RAID lives
in much more dangerous environment. Now, if it never finishes (say, kernel
panics due to something else), you get inconsistent device (software RAID
one), and it is much much much harder task to bring that to to some extent
consistent state than, e.g., to bring back dirty filesystem that lives on
the sane device. This is why we still pay for hardware RAID devices. I do.

Just my 2c.

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Matt
>>> Hate to change the conversation here but that's why I hate hardware
>>> RAID.
>>> If it was software RAID, Linux would always tell you what's going on.
>>> Besides, Linux knows much more about what is going on on the disk and
>>> what is about to happen (like a megabyte DMA transfer).
>>>
>>> BTW, check if something is creating:
>>>
>>> /forcefsck
>>
>> These exist:
>>
>> -rw-r--r--1 root root 0 Jul  7 10:03 .autofsck
>> -rw-r--r--1 root root 0 Jul  7 10:03 .autorelabel
>>
>> What does that mean?
>
> ARRRGGGHGHGHGHGHGHHGHG!!!
>
> First, delete /.autofsck. That will stop it from fsckin'g *everything*
> every reboot. Second, is selinux in enforcing mode? In any case, have you
> recently done major changes? If not, delete /.autorelabel, since an
> selinux relabel takes a *while*, esp. if you have *lots* of files.
>
>  mark

The directions for installing OpenVZ on Centos 6 stated to disable
selinux, on this box I missed that step, whoops.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Alexander Dalloz
Am 21.08.2014 um 23:00 schrieb m.r...@5-cent.us:
> Matt wrote:
>>> Hate to change the conversation here but that's why I hate hardware
>>> RAID.
>>> If it was software RAID, Linux would always tell you what's going on.
>>> Besides, Linux knows much more about what is going on on the disk and
>>> what is about to happen (like a megabyte DMA transfer).
>>>
>>> BTW, check if something is creating:
>>>
>>> /forcefsck
>>
>> These exist:
>>
>> -rw-r--r--1 root root 0 Jul  7 10:03 .autofsck
>> -rw-r--r--1 root root 0 Jul  7 10:03 .autorelabel
>>
>> What does that mean?
>
> ARRRGGGHGHGHGHGHGHHGHG!!!
>
> First, delete /.autofsck. That will stop it from fsckin'g *everything*
> every reboot. Second, is selinux in enforcing mode? In any case, have you
> recently done major changes? If not, delete /.autorelabel, since an
> selinux relabel takes a *while*, esp. if you have *lots* of files.
>
>   mark

No, /.autofsck is not harmful and will cause nothing unless 
/etc/sysconfig/autofsck exists and has something specific defined. The 
/.autofsck is automatically created at each boot by the system.

/.autorelabel is as well only a control file and does not cause a full 
SELiux relabeling at each boot.

If you don't believe me, please see /etc/rc.sysinit.

Alexander


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Daniel J Walsh

On 08/21/2014 05:00 PM, m.r...@5-cent.us wrote:
> Matt wrote:
>>> Hate to change the conversation here but that's why I hate hardware
>>> RAID.
>>> If it was software RAID, Linux would always tell you what's going on.
>>> Besides, Linux knows much more about what is going on on the disk and
>>> what is about to happen (like a megabyte DMA transfer).
>>>
>>> BTW, check if something is creating:
>>>
>>> /forcefsck
>> These exist:
>>
>> -rw-r--r--1 root root 0 Jul  7 10:03 .autofsck
>> -rw-r--r--1 root root 0 Jul  7 10:03 .autorelabel
>>
>> What does that mean?
> ARRRGGGHGHGHGHGHGHHGHG!!!
>
> First, delete /.autofsck. That will stop it from fsckin'g *everything*
> every reboot. Second, is selinux in enforcing mode? In any case, have you
> recently done major changes? If not, delete /.autorelabel, since an
> selinux relabel takes a *while*, esp. if you have *lots* of files.
>
>  mark
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
/.autorelabel gets created on all SELinux disabled systems. Since if you
re-enable it, you will need a relabel.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 7 lockup

2014-08-21 Thread Daniel J Walsh

On 08/21/2014 02:09 PM, Les Mikesell wrote:
> On Thu, Aug 21, 2014 at 12:23 PM,   wrote:
>> Les Mikesell wrote:
>>> A machine I set up to run OpenNMS stopped working last night - no
>>> hardware alarm lights, but keyboard/monitor/network unresponsive.
>>> After a reboot I see a large stack of messages like this in
>>> /var/log/messages:
>>>
>>> 
>>> Aug 20 14:02:34 opennms-h-03 python: SELinux is preventing
>>> /usr/sbin/monitor-get-edid-using-vbe from mmap
>>> _zero access on the memprotect .
>>> --
>>> and then this final message
>>>
>>> Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute
>>> 'split'
>>>
>>>
>>> Do either of those look fatal?   And where else should I look for the
>>> underlying problem?
>>>
>> Looks like all selinux to me, esp. the wording. Is it in enforcing mode? I
>> wonder if it's possible that there's a bug in an selinux policy that
>> results in "IT'S NOT SAFE!!! SHUT IT DOWN!!!".
> /var/log/audit/audit.log says:
> type=AVC msg=audit(1408478520.792:7016): avc:  denied  { mmap_zero }
> for  pid=17977 comm="monitor-get-edi"
> scontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023
> tcontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023
> tclass=memprotect
>
> which isn't particularly readable but I would guess means that it
> blocked the ocsinventory-agent from getting the monitor type.  Not
> sure why that is supposed to be helpful, but it also doesn't sound
> fatal.  And somewhat irrelevant on a normally headless server.
>
> Does that dbus error looks serious?
> Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute 
> 'split'
>
>  --
>Les Mikesell
>  lesmikes...@gmail.com
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
mmap_zero is a fairly dangerous access. It means the object is
attempting to memeory map
low memory in the kernel.  Bugs in the kernel have been known to allow
priv escallation, can be prevented by this check.

http://eparis.livejournal.com/

Talks about the access check.

I usually tell people to avoid these apps, but if you need to run it,
you can turn the protection off as the alert told you.

setsebool -P mmap_low_allowed 1



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread m . roth
Matt wrote:
>> Hate to change the conversation here but that's why I hate hardware
>> RAID.
>> If it was software RAID, Linux would always tell you what's going on.
>> Besides, Linux knows much more about what is going on on the disk and
>> what is about to happen (like a megabyte DMA transfer).
>>
>> BTW, check if something is creating:
>>
>> /forcefsck
>
> These exist:
>
> -rw-r--r--1 root root 0 Jul  7 10:03 .autofsck
> -rw-r--r--1 root root 0 Jul  7 10:03 .autorelabel
>
> What does that mean?

ARRRGGGHGHGHGHGHGHHGHG!!!

First, delete /.autofsck. That will stop it from fsckin'g *everything*
every reboot. Second, is selinux in enforcing mode? In any case, have you
recently done major changes? If not, delete /.autorelabel, since an
selinux relabel takes a *while*, esp. if you have *lots* of files.

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Matt
> Hate to change the conversation here but that's why I hate hardware RAID.
> If it was software RAID, Linux would always tell you what's going on.
> Besides, Linux knows much more about what is going on on the disk and what is 
> about to happen (like a megabyte DMA transfer).
>
> BTW, check if something is creating:
>
> /forcefsck

These exist:

-rw-r--r--1 root root 0 Jul  7 10:03 .autofsck
-rw-r--r--1 root root 0 Jul  7 10:03 .autorelabel

What does that mean?

> That would make the fsck run every time.
>
> GKH
>
>> Matt wrote:
>>> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server.  It
>>> has eight 750GB drives in a hardware RAID6 array.  Its acting as a
>>> host for a number of OpenVZ containers.
>>>
>>> Seems like every time I reboot this server which is not very often it
>>> sits for hours running a disk check or something on boot.  The server
>>> is located 200+ miles away so its not very convenient to look at.  Is
>>> there anyway to tell if it plans to run this or tell it not too?
>>>
>>> Right now its reporting one of the drives in array is bad and last
>>> time it did this a reboot resolved it.
>>
>> You need to know what it's running. If it's doing an fsck, that will take
>> a lot of time. If it's firmware in the RAID controller, that's different.
>> You can run tune2fs /dev/whatever and see how often it wants to run fsck.
>> For that matter, what's the entry in /etc/fstab?
>>
>>   mark
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Digimer
You know that hpacucli (and MegaCli on LSI-based hardware RAID systems) 
can usually tell you more about the array and the drives than mdadm can, 
right? Also, if you're doing parity, having hardware RAID moves the 
parity calculations to a dedicated ASIC, avoiding any load of note on 
the CPU. Also, with hardware RAID, you get battery-backed or 
flash-backed write-back caching, which can dramatically improve performance.

That said, mdadm is better that cheap fake-RAID controllers like you 
find on most mainboards, I will give you that.

digimer

On 21/08/14 04:33 PM, GKH wrote:
> Hate to change the conversation here but that's why I hate hardware RAID.
> If it was software RAID, Linux would always tell you what's going on.
> Besides, Linux knows much more about what is going on on the disk and what is 
> about to happen (like a megabyte DMA transfer).
>
> BTW, check if something is creating:
>
> /forcefsck
>
> That would make the fsck run every time.
>
> GKH
>
>> Matt wrote:
>>> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server.  It
>>> has eight 750GB drives in a hardware RAID6 array.  Its acting as a
>>> host for a number of OpenVZ containers.
>>>
>>> Seems like every time I reboot this server which is not very often it
>>> sits for hours running a disk check or something on boot.  The server
>>> is located 200+ miles away so its not very convenient to look at.  Is
>>> there anyway to tell if it plans to run this or tell it not too?
>>>
>>> Right now its reporting one of the drives in array is bad and last
>>> time it did this a reboot resolved it.
>>
>> You need to know what it's running. If it's doing an fsck, that will take
>> a lot of time. If it's firmware in the RAID controller, that's different.
>> You can run tune2fs /dev/whatever and see how often it wants to run fsck.
>> For that matter, what's the entry in /etc/fstab?
>>
>>mark
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
Digimer
Papers and Projects: https://alteeve.ca/w/
What if the cure for cancer is trapped in the mind of a person without 
access to education?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread GKH
Hate to change the conversation here but that's why I hate hardware RAID.
If it was software RAID, Linux would always tell you what's going on.
Besides, Linux knows much more about what is going on on the disk and what is 
about to happen (like a megabyte DMA transfer).

BTW, check if something is creating:

/forcefsck

That would make the fsck run every time.

GKH

> Matt wrote:
>> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server.  It
>> has eight 750GB drives in a hardware RAID6 array.  Its acting as a
>> host for a number of OpenVZ containers.
>>
>> Seems like every time I reboot this server which is not very often it
>> sits for hours running a disk check or something on boot.  The server
>> is located 200+ miles away so its not very convenient to look at.  Is
>> there anyway to tell if it plans to run this or tell it not too?
>>
>> Right now its reporting one of the drives in array is bad and last
>> time it did this a reboot resolved it.
>
> You need to know what it's running. If it's doing an fsck, that will take
> a lot of time. If it's firmware in the RAID controller, that's different.
> You can run tune2fs /dev/whatever and see how often it wants to run fsck.
> For that matter, what's the entry in /etc/fstab?
>
>   mark
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread m . roth
Matt wrote:
> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server.  It
> has eight 750GB drives in a hardware RAID6 array.  Its acting as a
> host for a number of OpenVZ containers.
>
> Seems like every time I reboot this server which is not very often it
> sits for hours running a disk check or something on boot.  The server
> is located 200+ miles away so its not very convenient to look at.  Is
> there anyway to tell if it plans to run this or tell it not too?
>
> Right now its reporting one of the drives in array is bad and last
> time it did this a reboot resolved it.

You need to know what it's running. If it's doing an fsck, that will take
a lot of time. If it's firmware in the RAID controller, that's different.
You can run tune2fs /dev/whatever and see how often it wants to run fsck.
For that matter, what's the entry in /etc/fstab?

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HP ProLiant DL380 G5

2014-08-21 Thread John R Pierce
On 8/21/2014 12:43 PM, Matt wrote:
> I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server.  It
> has eight 750GB drives in a hardware RAID6 array.  Its acting as a
> host for a number of OpenVZ containers.
>
> Seems like every time I reboot this server which is not very often it
> sits for hours running a disk check or something on boot.  The server
> is located 200+ miles away so its not very convenient to look at.  Is
> there anyway to tell if it plans to run this or tell it not too?
>
> Right now its reporting one of the drives in array is bad and last
> time it did this a reboot resolved it.

assuming thats a hp smartarray raid controller, use hpacucli to diagnose 
the raid problem.

degraded raid6 is /really/ slow.



-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] HP ProLiant DL380 G5

2014-08-21 Thread Matt
I have CentOS 6.x installed on a "HP ProLiant DL380 G5" server.  It
has eight 750GB drives in a hardware RAID6 array.  Its acting as a
host for a number of OpenVZ containers.

Seems like every time I reboot this server which is not very often it
sits for hours running a disk check or something on boot.  The server
is located 200+ miles away so its not very convenient to look at.  Is
there anyway to tell if it plans to run this or tell it not too?

Right now its reporting one of the drives in array is bad and last
time it did this a reboot resolved it.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 7 lockup

2014-08-21 Thread Les Mikesell
On Thu, Aug 21, 2014 at 12:23 PM,   wrote:
> Les Mikesell wrote:
>> A machine I set up to run OpenNMS stopped working last night - no
>> hardware alarm lights, but keyboard/monitor/network unresponsive.
>> After a reboot I see a large stack of messages like this in
>> /var/log/messages:
>>
>> 
>> Aug 20 14:02:34 opennms-h-03 python: SELinux is preventing
>> /usr/sbin/monitor-get-edid-using-vbe from mmap
>> _zero access on the memprotect .
>> --
>> and then this final message
>>
>> Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute
>> 'split'
>>
>>
>> Do either of those look fatal?   And where else should I look for the
>> underlying problem?
>>
> Looks like all selinux to me, esp. the wording. Is it in enforcing mode? I
> wonder if it's possible that there's a bug in an selinux policy that
> results in "IT'S NOT SAFE!!! SHUT IT DOWN!!!".

/var/log/audit/audit.log says:
type=AVC msg=audit(1408478520.792:7016): avc:  denied  { mmap_zero }
for  pid=17977 comm="monitor-get-edi"
scontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023
tcontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023
tclass=memprotect

which isn't particularly readable but I would guess means that it
blocked the ocsinventory-agent from getting the monitor type.  Not
sure why that is supposed to be helpful, but it also doesn't sound
fatal.  And somewhat irrelevant on a normally headless server.

Does that dbus error looks serious?
Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute 'split'

 --
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 7 lockup

2014-08-21 Thread m . roth
Les Mikesell wrote:
> A machine I set up to run OpenNMS stopped working last night - no
> hardware alarm lights, but keyboard/monitor/network unresponsive.
> After a reboot I see a large stack of messages like this in
> /var/log/messages:
>
> 
> Aug 20 14:02:34 opennms-h-03 python: SELinux is preventing
> /usr/sbin/monitor-get-edid-using-vbe from mmap
> _zero access on the memprotect .
>
> *  Plugin mmap_zero (53.1 confidence) suggests
> *
>
> If you do not think /usr/sbin/monitor-get-edid-using-vbe should need
> to mmap low memory in the kernel.
> Then you may be under attack by a hacker, this is a very dangerous access.
> Do
> contact your security administrator and report this issue.
>
> *  Plugin catchall_boolean (42.6 confidence) suggests
> **
>
> If you want to allow mmap to low allowed
> Then you must tell SELinux about this by enabling the
> 'mmap_low_allowed' boolean.
> You can read 'None' man page for more details.
> Do
> setsebool -P mmap_low_allowed 1
>
> *  Plugin catchall (5.76 confidence) suggests
> **
>
> If you believe that monitor-get-edid-using-vbe should be allowed
> mmap_zero access on the  memprotect by d
> efault.
> Then you should report this as a bug.
> You can generate a local policy module to allow this access.
> Do
> allow this access for now by executing:
> # grep monitor-get-edi /var/log/audit/audit.log | audit2allow -M mypol
> # semodule -i mypol.pp
>
> --
> and then this final message
>
> Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute
> 'split'
>
>
> Do either of those look fatal?   And where else should I look for the
> underlying problem?
>
Looks like all selinux to me, esp. the wording. Is it in enforcing mode? I
wonder if it's possible that there's a bug in an selinux policy that
results in "IT'S NOT SAFE!!! SHUT IT DOWN!!!".

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Skype on CentOS 6.5

2014-08-21 Thread Jonathan Billings
On Thu, Aug 21, 2014 at 11:23:10AM -0500, Valeri Galtsev wrote:
> I was quite displeased since quite some time ago that almost all web
> browsers, whenever I feed URL into location bar, do not go to that URL,
> but instead do the search with the search line that is that URL first. Not
> only when URL doesn't exist (for which case I too prefer not darn search
> but just an error message "URL doesn't exist"). Why would be that? What
> purpose does the search serve.

I'm curious, what web browsers do this?  I can't replicate it with
Firefox.

-- 
Jonathan Billings 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Centos 7 lockup

2014-08-21 Thread Les Mikesell
A machine I set up to run OpenNMS stopped working last night - no
hardware alarm lights, but keyboard/monitor/network unresponsive.
After a reboot I see a large stack of messages like this in
/var/log/messages:


Aug 20 14:02:34 opennms-h-03 python: SELinux is preventing
/usr/sbin/monitor-get-edid-using-vbe from mmap
_zero access on the memprotect .

*  Plugin mmap_zero (53.1 confidence) suggests   *

If you do not think /usr/sbin/monitor-get-edid-using-vbe should need
to mmap low memory in the kernel.
Then you may be under attack by a hacker, this is a very dangerous access.
Do
contact your security administrator and report this issue.

*  Plugin catchall_boolean (42.6 confidence) suggests   **

If you want to allow mmap to low allowed
Then you must tell SELinux about this by enabling the
'mmap_low_allowed' boolean.
You can read 'None' man page for more details.
Do
setsebool -P mmap_low_allowed 1

*  Plugin catchall (5.76 confidence) suggests   **

If you believe that monitor-get-edid-using-vbe should be allowed
mmap_zero access on the  memprotect by d
efault.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep monitor-get-edi /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

--
and then this final message

Aug 20 14:02:42 opennms-h-03 dbus-daemon: 'list' object has no attribute 'split'


Do either of those look fatal?   And where else should I look for the
underlying problem?

-- 
  Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Skype on CentOS 6.5

2014-08-21 Thread Jim Perrin


On 08/21/2014 11:23 AM, Valeri Galtsev wrote:

> I'm sorry Mr. Jim Perrin, I'll disregard your request and I will stay on
> this side topic just for one more message.

Thank you.

> 
> Those [conspiracy] theories are reality not just theories, at least some
> (Mr Snowden, e.g.) put their life on line to tell us about it. If we do
> not care to listen, then we deserve to have what we have.

I don't disagree. This was why I added "(right or wrong)" to the
message. The internet culture as a whole is one of constant
surveillance. It's a common business model for online content
distributors/marketers etc. There are numerous postings about this all
over the internet.

> 
> I was quite displeased since quite some time ago that almost all web
> browsers, whenever I feed URL into location bar, do not go to that URL,
> but instead do the search with the search line that is that URL first. Not
> only when URL doesn't exist (for which case I too prefer not darn search
> but just an error message "URL doesn't exist"). Why would be that? What
> purpose does the search serve. You do your math. I still use often
> browsers with this "nasty" feature. I will mention one browser that
> doesn't to that unnecessary [unnecessary for me, of course] thing: midori.
> If someone has any other suggestions, please, let me know (you can e-mail
> me off the list if you prefer to respect Mr Jim Perrin's request). I also
> will mention one search engine that seems to be "clean" of nastiness to
> the best of my knowledge" DuckDuckGo:


My point, and I said this off-list as well to those who responded to me
directly, is simply this:


I would rather keep the list technical and apolitical. I know we can't
keep politics out of tech, but I would prefer to at least attempt to
limit it on the mailing lists.

A discussion about alternatives and their technical merits would be fine
and I have no problem with that. Derailing a 'how do I fix this' thread
with a political discussion is something I'd like to avoid as a general
rule.



-- 
Jim Perrin
The CentOS Project | http://www.centos.org
twitter: @BitIntegrity | GPG Key: FA09AD77
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] SOLVED!! - Re: Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz
Deleted all the back-and-forthing and will only include what finally 
worked. Sheesh, I got buried in the cruft on this one.

Edit /etc/udev/rules.d/70-persistent-net.rules to have your REAL mac addr:

SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="02:c3:04:01:77:c3", ATTR{type}=="1", KERNEL=="eth*", 
NAME="eth0"

Edit /etc/sysconfig/network-scripts/ifcfg-eth0 with the mac addr you want:

MACADDR=02:67:15:00:01:79

REBOOT!

running start_udev at this point only added the eth1 entry again. The 
kernel was so confused that I needed to 'clean house'.

# ifconfig
eth0 Link encap:Ethernet HWaddr 02:67:15:00:01:79
inet addr:208.83.67.179 Bcast:208.83.67.255 Mask:255.255.255.0
inet6 addr: 2607:f4b8:3:3:67:15ff:fe00:179/64 Scope:Global
inet6 addr: fe80::67:15ff:fe00:179/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:134 errors:0 dropped:11 overruns:0 frame:0
TX packets:77 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:16489 (16.1 KiB) TX bytes:6313 (6.1 KiB)
Interrupt:87 Base address:0x6000

I got my desired MAC addr, my static IPv4 addr, and IPv6 RA + MAC = 
desired IPv6 addr.

Now to reveal why I went to these efforts. STATIC IPv6 is badness when 
you want to be able to change prefixes but have 'nice' IPv6 addresses. 
So I studied how IPv6 suffixes are currently constructed, decided what I 
wanted, and off to the races.

Well another reason, is I will be working in IEEE 802 MAC privacy Study 
Group, and wanted to see what COULD be done to create privacy-enhancing 
MAC addresses.

But thank you ALL for your efforts!


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Skype on CentOS 6.5

2014-08-21 Thread Valeri Galtsev

On Wed, August 20, 2014 9:06 pm, Always Learning wrote:
>
> On Wed, 2014-08-20 at 10:26 -0400, James B. Byrne wrote:
>
>> My recent inquiries have raised the unsettling possibility
>> that recent Skype clients may be designed to permit remote exploitation
>> of
>> host systems by unauthorised entities.
>
> Generally entities, authorised by governments, have been doing back door
> entries over the Internet since at least 1995. Its staggering what has
> been happening, staggering how its done, staggering that every, so it
> seems, network hardware device has a 'backdoor' - sometimes it is
> mentioned in the documentation or discovered by chatting with service
> personnel.
>
> Better never to touch proprietary closed-source software. Don't forget
>  M$ Windoze with 3-knocks-and-anyone-is-in software. It caused a friend
> to get a nasty virus about 10 years ago just by being connected to the
> Internet and NOT downloading anything at all. He didn't even use his
> browser.
>
> Skype piggy-backs on to a lot of different, and unknown to the caller,
> computer systems. Try the grown-up version called SIP. It has open
> source products and it caters for voice and video.
>
> Big companies always fully co-operate with demands from Big Brother but
> never ever boast about their acquiescence. The encryption algorithm for
> GSM mobile phones was deliberately downgraded . We live in the
> Information Age and Big Brother wants information.
>

Thank you Mr. Always Learning for nice reminder about reality we live in.

I'm sorry Mr. Jim Perrin, I'll disregard your request and I will stay on
this side topic just for one more message.

Those [conspiracy] theories are reality not just theories, at least some
(Mr Snowden, e.g.) put their life on line to tell us about it. If we do
not care to listen, then we deserve to have what we have.

I was quite displeased since quite some time ago that almost all web
browsers, whenever I feed URL into location bar, do not go to that URL,
but instead do the search with the search line that is that URL first. Not
only when URL doesn't exist (for which case I too prefer not darn search
but just an error message "URL doesn't exist"). Why would be that? What
purpose does the search serve. You do your math. I still use often
browsers with this "nasty" feature. I will mention one browser that
doesn't to that unnecessary [unnecessary for me, of course] thing: midori.
If someone has any other suggestions, please, let me know (you can e-mail
me off the list if you prefer to respect Mr Jim Perrin's request). I also
will mention one search engine that seems to be "clean" of nastiness to
the best of my knowledge" DuckDuckGo:

https://duckduckgo.com/

(I would welcome information about others "clean" of nastiness)

Thanks.
Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz

On 08/21/2014 11:47 AM, GKH wrote:
> Robert,
> Sorry Dude. I did not mean to make things worse.
> All I wanted to say is this: It can be done via
> the ifconfig command.
>
> Now,
>
> # systemctl status network.service

This tells me you are not using Centos6 which does not have systemd. Or 
at least not my systems.

>
> Tells me that network services still depend on:
>
> "ExecStart=/etc/rc.d/init.d/network start"
>
> Good! File: "/etc/sysconfig/network-scripts/ifup-eth"
>
> Says: "39 # bail out, if the MAC does not fit"
>
> Ok, perfect. As you already guessed we need to make this change
> early on. However, if all else fails, you can always source
> a custom script here and problem solved.

I hope to get a conf file setup to do the work.

>
> I know, this is not elegant. But as an SA who sometimes needs to
> do dirty deeds...
>
> Again, apologies if I am being too simplistic/stupid here.
>
> GKH
>
>
>> On 08/21/2014 10:56 AM, GKH wrote:
>>> I just did it like this:
>>>
>>> ifconfig enp3s0
>>>
>>> enp3s0: flags=4163  mtu 1500
>>>   inet 10.241.27.154  netmask 255.255.255.0  broadcast 10.241.27.255
>>>   inet6 fe80::210:18ff:fe04:4d0  prefixlen 64  scopeid 0x20
>>>   ether 00:10:18:04:04:d0  txqueuelen 1000  (Ethernet)
>>>   RX packets 429591  bytes 41991957 (40.0 MiB)
>>>   RX errors 0  dropped 0  overruns 0  frame 0
>>>   TX packets 249536  bytes 19108398 (18.2 MiB)
>>>   TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>>>   device interrupt 18
>>>
>>> ifconfig enp3s0 hw ether 00:10:18:04:04:d7
>>>
>>> ifconfig enp3s0
>>> enp3s0: flags=4163  mtu 1500
>>>   inet 10.241.27.154  netmask 255.255.255.0  broadcast 10.241.27.255
>>>   inet6 fe80::210:18ff:fe04:4d0  prefixlen 64  scopeid 0x20
>>>   ether 00:10:18:04:04:d7  txqueuelen 1000  (Ethernet)
>>>   RX packets 429615  bytes 41994383 (40.0 MiB)
>>>   RX errors 0  dropped 0  overruns 0  frame 0
>>>   TX packets 249549  bytes 19109350 (18.2 MiB)
>>>   TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>>>   device interrupt 18
>>> Done!
>>>
>>> -GKH
>> I need the changes to be permanent to apply across boots.  Thus using
>> ifcfg-eth0 rather than ifconfig.
>>
>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
 On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
> Keith Keller wrote:
>> On 2014-08-21, John R Pierce  wrote:
>>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
 I am trying to override the mac addr.
>>> pretty sure you need to use NIC model specific utilities to do this,
>>> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
>>> not for reprogramming it.
>> ifconfig claims to support it:
>>
>>   hw class address
> 
> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
 I can't forget what I don't know.  please point me to description of
 these rules?
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Digimer
On 21/08/14 11:43 AM, Robert Moskowitz wrote:
>
> On 08/21/2014 11:31 AM, Digimer wrote:
>> On 21/08/14 11:25 AM, Robert Moskowitz wrote:
>>> On 08/21/2014 10:56 AM, Reindl Harald wrote:
 Am 21.08.2014 um 16:43 schrieb Robert Moskowitz:
> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
>> Keith Keller wrote:
>>> On 2014-08-21, John R Pierce  wrote:
 On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
> I am trying to override the mac addr.
 pretty sure you need to use NIC model specific utilities to do this,
 ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
 not for reprogramming it.
>>> ifconfig claims to support it:
>>>
>>> hw class address
>> 
>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
> I can't forget what I don't know.  please point me to description of
> these rules?
 just look at the file

 in the past and on CentOS before RHEL7 it was to assign MAC/device-names
 at boot, on recent Redhat based systems just remove it and stick with
 place both in the ifcfg-files while disable biosdevname and systemd
 devicenames at boot

 both, that udev rules and what i explained you may collide or at least
 you need to change the MAC there too to not confuse the configs

>>> I worked a bit on this.  I no longer have the MAC or HW addrs in
>>> ifcfg-eth0.  Only in /etc/udev/rules.d/70-persistent-net.rules, and only
>>> for name=eth0:
>>>
>>> # net device ()
>>> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*",
>>> ATTR{address}=="02:67:15:00:01:79", ATTR{type}=="1", KERNEL=="eth*",
>>> NAME="eth0"
>>>
>>> but on reboot, I get the error:
>>>
>>>
>>> Bringing up interface eth0:  Device eth0 does not seem to be present,
>>> delaying initialization.
>>> [FAILED]
>>>
>>> and the ethernet comes up as eth1 and the eth1 line is added to
>>> /etc/udev/rules.d/70-persistent-net.rules
>>>
>>> Almost as if there is something else that needs changing.
>> Note that you still have to tell the OS "See this real MAC address?
>> Change it to this new MAC address". Shy of reprogramming the NIC
>> directly, you will almost certainly need to continue to reference the
>> real MAC address.
>
> So that means I need to find the full syntax of this rule.
>
> Oh, and there is no real MAC address and that MIGHT be part of the
> problem.  Many armv7 cards do not have eeprom so no MAC address.  In
> this case the kernel is creating the MAC address as local scope based on
> the SID.  So somewhere this is happening, and Hans (who maintains the
> uboot Allwinner code) has not told me the magic goo; I have not seen any
> posts from him so he may still be on Holidays.
>
> But I will delve into udev syntax to see what I need to change the mac addr.

I know with Arduinos (at least earlier network shields), there was no 
MAC address assigned, either. So there, I had to assign it in the 
compiled sketch.

I would expect there to be some program somewhere for the NIC to allow 
you to program the static MAC.

I suppose 'ifconfig -a' doesn't show anything?

-- 
Digimer
Papers and Projects: https://alteeve.ca/w/
What if the cure for cancer is trapped in the mind of a person without 
access to education?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Denis Hohryakov
Ыcwqacddpp
On Aug 21, 2014 6:31 PM, "Robert Moskowitz"  wrote:

> Did not work...
>
> On 08/21/2014 10:15 AM, Reindl Harald wrote:
> >
> > Am 21.08.2014 um 16:09 schrieb Robert Moskowitz:
> >> I am trying to override the mac addr.  Now this is on an armv7 actually
> >> running the F19 kernel and Redsleeve 6, but it SHOULD be standard
> >> Centos6 ifcfg-eth0 content.  Of course RSEL does not start with a
> >> ifcfg-eth0 file, letting network services do all the work, so I am
> >> starting from scratch, using the file from one of my C6 boxes with
> >> static addressing.  My file has in it:
> >>
> >> DEVICE="eth0"
> >> BOOTPROTO=none
> >> NM_CONTROLLED="no"
> >> ONBOOT="yes"
> >> TYPE="Ethernet"
> >> NAME="System eth0"
> >> DNS1=208.83.67.188
> >> GATEWAY="208.83.67.177"
> >> IPADDR="208.83.67.179"
> >> HOSTNAME="rigel2.htt-consult.com"
> >> IPV6INIT="yes"
> >> MACADDR=02:67:15:00:01:79
> >> MTU=1500
> > that's easy - you need to tell it the physical too
> > works from Fedora 10 up to Fedora 20 that way
> >
> > [root@srv-rhsoft:~]$ cat ifcfg-eth1
> > DEVICE=eth1
> > HWADDR=68:05:ca:0d:62:c1
> > MACADDR=00:50:8d:b5:cc:de
> >
> > "00:50:8d:b5:cc:de" is the on my interface has after it is up
> > "68:05:ca:0d:62:c1" is the pysical one of the device before fake it
> >
> > [root@srv-rhsoft:~]$ ifconfig eth1
> > eth1: flags=67  mtu 1500
> >  inet 62.178.103.85  netmask 255.255.255.0  broadcast
> 255.255.255.255
> >  ether 00:50:8d:b5:cc:de  txqueuelen 500  (Ethernet)
> >  RX packets 74959980  bytes 25037014848 (23.3 GiB)
> >  RX errors 0  dropped 0  overruns 0  frame 0
> >  TX packets 67607627  bytes 39867204808 (37.1 GiB)
> >  TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
> >  device interrupt 16  memory 0xf7cc-f7ce
> >
> # cat > /etc/sysconfig/network-scripts/ifcfg-eth0
> DEVICE="eth0"
> BOOTPROTO=none
> NM_CONTROLLED="no"
> ONBOOT="yes"
> TYPE="Ethernet"
> NAME="System eth0"
> HWADDR=02:c3:04:01:77:c3
> MACADDR=02:67:15:00:01:79
> MTU=1500
> DNS1=208.83.67.188
> GATEWAY="208.83.67.177"
> IPADDR="208.83.67.179"
> HOSTNAME="rigel2.htt-consult.com"
> IPV6INIT="yes"
> [root@redsleeve ~]# service network restart
> Shutting down loopback interface:  [  OK  ]
> Bringing up loopback interface:  [  OK  ]
> Bringing up interface eth0:  Device eth0 has different MAC address than
> expected, ignoring.
> [FAILED]
>
> And now not even an eth1 interface.
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread GKH
Robert,
Sorry Dude. I did not mean to make things worse.
All I wanted to say is this: It can be done via
the ifconfig command.

Now,

# systemctl status network.service

Tells me that network services still depend on:

"ExecStart=/etc/rc.d/init.d/network start"

Good! File: "/etc/sysconfig/network-scripts/ifup-eth"

Says: "39 # bail out, if the MAC does not fit"

Ok, perfect. As you already guessed we need to make this change
early on. However, if all else fails, you can always source
a custom script here and problem solved.

I know, this is not elegant. But as an SA who sometimes needs to
do dirty deeds...

Again, apologies if I am being too simplistic/stupid here.

GKH


>
> On 08/21/2014 10:56 AM, GKH wrote:
>> I just did it like this:
>>
>> ifconfig enp3s0
>>
>> enp3s0: flags=4163  mtu 1500
>>  inet 10.241.27.154  netmask 255.255.255.0  broadcast 10.241.27.255
>>  inet6 fe80::210:18ff:fe04:4d0  prefixlen 64  scopeid 0x20
>>  ether 00:10:18:04:04:d0  txqueuelen 1000  (Ethernet)
>>  RX packets 429591  bytes 41991957 (40.0 MiB)
>>  RX errors 0  dropped 0  overruns 0  frame 0
>>  TX packets 249536  bytes 19108398 (18.2 MiB)
>>  TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>>  device interrupt 18
>>
>> ifconfig enp3s0 hw ether 00:10:18:04:04:d7
>>
>> ifconfig enp3s0
>> enp3s0: flags=4163  mtu 1500
>>  inet 10.241.27.154  netmask 255.255.255.0  broadcast 10.241.27.255
>>  inet6 fe80::210:18ff:fe04:4d0  prefixlen 64  scopeid 0x20
>>  ether 00:10:18:04:04:d7  txqueuelen 1000  (Ethernet)
>>  RX packets 429615  bytes 41994383 (40.0 MiB)
>>  RX errors 0  dropped 0  overruns 0  frame 0
>>  TX packets 249549  bytes 19109350 (18.2 MiB)
>>  TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>>  device interrupt 18
>> Done!
>>
>> -GKH
>
> I need the changes to be permanent to apply across boots.  Thus using
> ifcfg-eth0 rather than ifconfig.
>
>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
 Keith Keller wrote:
> On 2014-08-21, John R Pierce  wrote:
>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>>> I am trying to override the mac addr.
>> pretty sure you need to use NIC model specific utilities to do this,
>> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
>> not for reprogramming it.
> ifconfig claims to support it:
>
>  hw class address
 
 Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>>> I can't forget what I don't know.  please point me to description of
>>> these rules?
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz

On 08/21/2014 11:31 AM, Digimer wrote:
> On 21/08/14 11:25 AM, Robert Moskowitz wrote:
>> On 08/21/2014 10:56 AM, Reindl Harald wrote:
>>> Am 21.08.2014 um 16:43 schrieb Robert Moskowitz:
 On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
> Keith Keller wrote:
>> On 2014-08-21, John R Pierce  wrote:
>>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
 I am trying to override the mac addr.
>>> pretty sure you need to use NIC model specific utilities to do this,
>>> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
>>> not for reprogramming it.
>> ifconfig claims to support it:
>>
>>hw class address
> 
> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
 I can't forget what I don't know.  please point me to description of
 these rules?
>>> just look at the file
>>>
>>> in the past and on CentOS before RHEL7 it was to assign MAC/device-names
>>> at boot, on recent Redhat based systems just remove it and stick with
>>> place both in the ifcfg-files while disable biosdevname and systemd
>>> devicenames at boot
>>>
>>> both, that udev rules and what i explained you may collide or at least
>>> you need to change the MAC there too to not confuse the configs
>>>
>> I worked a bit on this.  I no longer have the MAC or HW addrs in
>> ifcfg-eth0.  Only in /etc/udev/rules.d/70-persistent-net.rules, and only
>> for name=eth0:
>>
>> # net device ()
>> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*",
>> ATTR{address}=="02:67:15:00:01:79", ATTR{type}=="1", KERNEL=="eth*",
>> NAME="eth0"
>>
>> but on reboot, I get the error:
>>
>>
>> Bringing up interface eth0:  Device eth0 does not seem to be present,
>> delaying initialization.
>> [FAILED]
>>
>> and the ethernet comes up as eth1 and the eth1 line is added to
>> /etc/udev/rules.d/70-persistent-net.rules
>>
>> Almost as if there is something else that needs changing.
> Note that you still have to tell the OS "See this real MAC address?
> Change it to this new MAC address". Shy of reprogramming the NIC
> directly, you will almost certainly need to continue to reference the
> real MAC address.

So that means I need to find the full syntax of this rule.

Oh, and there is no real MAC address and that MIGHT be part of the 
problem.  Many armv7 cards do not have eeprom so no MAC address.  In 
this case the kernel is creating the MAC address as local scope based on 
the SID.  So somewhere this is happening, and Hans (who maintains the 
uboot Allwinner code) has not told me the magic goo; I have not seen any 
posts from him so he may still be on Holidays.

But I will delve into udev syntax to see what I need to change the mac addr.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Digimer
On 21/08/14 11:25 AM, Robert Moskowitz wrote:
>
> On 08/21/2014 10:56 AM, Reindl Harald wrote:
>>
>> Am 21.08.2014 um 16:43 schrieb Robert Moskowitz:
>>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
 Keith Keller wrote:
> On 2014-08-21, John R Pierce  wrote:
>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>>> I am trying to override the mac addr.
>> pretty sure you need to use NIC model specific utilities to do this,
>> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
>> not for reprogramming it.
> ifconfig claims to support it:
>
>   hw class address
 
 Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>>> I can't forget what I don't know.  please point me to description of
>>> these rules?
>> just look at the file
>>
>> in the past and on CentOS before RHEL7 it was to assign MAC/device-names
>> at boot, on recent Redhat based systems just remove it and stick with
>> place both in the ifcfg-files while disable biosdevname and systemd
>> devicenames at boot
>>
>> both, that udev rules and what i explained you may collide or at least
>> you need to change the MAC there too to not confuse the configs
>>
> I worked a bit on this.  I no longer have the MAC or HW addrs in
> ifcfg-eth0.  Only in /etc/udev/rules.d/70-persistent-net.rules, and only
> for name=eth0:
>
> # net device ()
> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*",
> ATTR{address}=="02:67:15:00:01:79", ATTR{type}=="1", KERNEL=="eth*",
> NAME="eth0"
>
> but on reboot, I get the error:
>
>
> Bringing up interface eth0:  Device eth0 does not seem to be present,
> delaying initialization.
> [FAILED]
>
> and the ethernet comes up as eth1 and the eth1 line is added to
> /etc/udev/rules.d/70-persistent-net.rules
>
> Almost as if there is something else that needs changing.

Note that you still have to tell the OS "See this real MAC address? 
Change it to this new MAC address". Shy of reprogramming the NIC 
directly, you will almost certainly need to continue to reference the 
real MAC address.

-- 
Digimer
Papers and Projects: https://alteeve.ca/w/
What if the cure for cancer is trapped in the mind of a person without 
access to education?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Digimer
On 21/08/14 11:22 AM, Robert Moskowitz wrote:
>
> On 08/21/2014 10:49 AM, Digimer wrote:
>> On 21/08/14 10:43 AM, Robert Moskowitz wrote:
>>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
 Keith Keller wrote:
> On 2014-08-21, John R Pierce  wrote:
>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>>> I am trying to override the mac addr.
>> pretty sure you need to use NIC model specific utilities to do this,
>> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
>> not for reprogramming it.
> ifconfig claims to support it:
>
>hw class address
 
 Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>>> I can't forget what I don't know.  please point me to description of
>>> these rules?
>> It's used to assign names to physical devices via udev. How it works
>> depends a bit on your version.
>>
>> It's discussed as part of these tutorials:
>>
>> CentOS 6:
>> https://alteeve.ca/w/Changing_the_ethX_to_Ethernet_Device_Mapping_in_EL6_and_Fedora_12_to_14
>
> Ah.  A bit:
>
> # cat /etc/udev/rules.d/70-persistent-net.rules
> # This file was automatically generated by the /lib/udev/write_net_rules
> # program, run by the persistent-net-generator.rules rules file.
> #
> # You can modify it, as long as you keep each rule on a single
> # line, and change only the value of the NAME= key.
>
> # net device ()
> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*",
> ATTR{address}=="02:c4:03:82:c1:5
> 3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"
>
> # net device ()
> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*",
> ATTR{address}=="02:c3:04:01:77:c
> 3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"
>
> ===
>
> So I can pull that eth1 line that got generated error and change the
> eth0 line?
>
> Well I did that, took the macaddr and hwaddr lines.  restarted network
> and it was not finding eth0.  And it added eth1 back into
> /etc/udev/rules.d/70-persistent-net.rules.
>
> I cleaned that up, and rebooted.  During the boot, I see the message:
>
> Bringing up interface eth0:  Device eth0 does not seem to be present,
> delaying initialization.
> [FAILED]
>
> and once I get started, ifconfig reports eth1 again, and the eth1 line
> got added to rules.  But the network IS working with addresses I want.
> But on eth1 with the errors about eth0.
>
> So there seems to be something before rules that is needed to be edited,
> or there is some limitation on my driver(s).

Note that you generally need to stop the network, edit the udev file and 
then restart the network. It will confuse the kernel otherwise.

Please also note that I've always moved names associated to devices, 
I've not tried changing the address, so there might be something missing 
there.

-- 
Digimer
Papers and Projects: https://alteeve.ca/w/
What if the cure for cancer is trapped in the mind of a person without 
access to education?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz

On 08/21/2014 11:17 AM, m.r...@5-cent.us wrote:
> Robert Moskowitz wrote:
>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
>>> Keith Keller wrote:
 On 2014-08-21, John R Pierce  wrote:
> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>> I am trying to override the mac addr.
> pretty sure you need to use NIC model specific utilities to do this,
> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
> not for reprogramming it.
 ifconfig claims to support it:

  hw class address
>>> 
>>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>> I can't forget what I don't know.  please point me to description of
>> these rules?
> Trying again, after those idiots at Ix who run manitu blocked me
>
> /etc/udev/rules.d are configuration files for udev, to create at boot.
> 70-persistent-net.rules contains MAC addresses

While they were blocking you, my search foo finally started getting 
results and others posted more help.  I have learned more, but not 
working as I think it should.  Working strangely; why the eth1 stuff.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz

On 08/21/2014 10:56 AM, GKH wrote:
> I just did it like this:
>
> ifconfig enp3s0
>
> enp3s0: flags=4163  mtu 1500
>  inet 10.241.27.154  netmask 255.255.255.0  broadcast 10.241.27.255
>  inet6 fe80::210:18ff:fe04:4d0  prefixlen 64  scopeid 0x20
>  ether 00:10:18:04:04:d0  txqueuelen 1000  (Ethernet)
>  RX packets 429591  bytes 41991957 (40.0 MiB)
>  RX errors 0  dropped 0  overruns 0  frame 0
>  TX packets 249536  bytes 19108398 (18.2 MiB)
>  TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>  device interrupt 18
>
> ifconfig enp3s0 hw ether 00:10:18:04:04:d7
>
> ifconfig enp3s0
> enp3s0: flags=4163  mtu 1500
>  inet 10.241.27.154  netmask 255.255.255.0  broadcast 10.241.27.255
>  inet6 fe80::210:18ff:fe04:4d0  prefixlen 64  scopeid 0x20
>  ether 00:10:18:04:04:d7  txqueuelen 1000  (Ethernet)
>  RX packets 429615  bytes 41994383 (40.0 MiB)
>  RX errors 0  dropped 0  overruns 0  frame 0
>  TX packets 249549  bytes 19109350 (18.2 MiB)
>  TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>  device interrupt 18
> Done!
>
> -GKH

I need the changes to be permanent to apply across boots.  Thus using 
ifcfg-eth0 rather than ifconfig.


>
>
>
>
>
>
>
>
>
>
>
>
>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
>>> Keith Keller wrote:
 On 2014-08-21, John R Pierce  wrote:
> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>> I am trying to override the mac addr.
> pretty sure you need to use NIC model specific utilities to do this,
> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
> not for reprogramming it.
 ifconfig claims to support it:

  hw class address
>>> 
>>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>> I can't forget what I don't know.  please point me to description of
>> these rules?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz

On 08/21/2014 10:56 AM, Reindl Harald wrote:
>
> Am 21.08.2014 um 16:43 schrieb Robert Moskowitz:
>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
>>> Keith Keller wrote:
 On 2014-08-21, John R Pierce  wrote:
> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>> I am trying to override the mac addr.
> pretty sure you need to use NIC model specific utilities to do this,
> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
> not for reprogramming it.
 ifconfig claims to support it:

  hw class address
>>> 
>>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>> I can't forget what I don't know.  please point me to description of
>> these rules?
> just look at the file
>
> in the past and on CentOS before RHEL7 it was to assign MAC/device-names
> at boot, on recent Redhat based systems just remove it and stick with
> place both in the ifcfg-files while disable biosdevname and systemd
> devicenames at boot
>
> both, that udev rules and what i explained you may collide or at least
> you need to change the MAC there too to not confuse the configs
>
I worked a bit on this.  I no longer have the MAC or HW addrs in 
ifcfg-eth0.  Only in /etc/udev/rules.d/70-persistent-net.rules, and only 
for name=eth0:

# net device ()
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="02:67:15:00:01:79", ATTR{type}=="1", KERNEL=="eth*", 
NAME="eth0"

but on reboot, I get the error:


Bringing up interface eth0:  Device eth0 does not seem to be present, 
delaying initialization.
[FAILED]

and the ethernet comes up as eth1 and the eth1 line is added to 
/etc/udev/rules.d/70-persistent-net.rules

Almost as if there is something else that needs changing.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz

On 08/21/2014 10:49 AM, Digimer wrote:
> On 21/08/14 10:43 AM, Robert Moskowitz wrote:
>> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
>>> Keith Keller wrote:
 On 2014-08-21, John R Pierce  wrote:
> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>> I am trying to override the mac addr.
> pretty sure you need to use NIC model specific utilities to do this,
> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
> not for reprogramming it.
 ifconfig claims to support it:

   hw class address
>>> 
>>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>> I can't forget what I don't know.  please point me to description of
>> these rules?
> It's used to assign names to physical devices via udev. How it works
> depends a bit on your version.
>
> It's discussed as part of these tutorials:
>
> CentOS 6:
> https://alteeve.ca/w/Changing_the_ethX_to_Ethernet_Device_Mapping_in_EL6_and_Fedora_12_to_14

Ah.  A bit:

# cat /etc/udev/rules.d/70-persistent-net.rules
# This file was automatically generated by the /lib/udev/write_net_rules
# program, run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single
# line, and change only the value of the NAME= key.

# net device ()
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="02:c4:03:82:c1:5
3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# net device ()
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="02:c3:04:01:77:c
3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"

===

So I can pull that eth1 line that got generated error and change the 
eth0 line?

Well I did that, took the macaddr and hwaddr lines.  restarted network 
and it was not finding eth0.  And it added eth1 back into 
/etc/udev/rules.d/70-persistent-net.rules.

I cleaned that up, and rebooted.  During the boot, I see the message:

Bringing up interface eth0:  Device eth0 does not seem to be present, 
delaying initialization.
[FAILED]

and once I get started, ifconfig reports eth1 again, and the eth1 line 
got added to rules.  But the network IS working with addresses I want.  
But on eth1 with the errors about eth0.

So there seems to be something before rules that is needed to be edited, 
or there is some limitation on my driver(s).


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread m . roth
Robert Moskowitz wrote:
>
> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
>> Keith Keller wrote:
>>> On 2014-08-21, John R Pierce  wrote:
 On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
> I am trying to override the mac addr.
 pretty sure you need to use NIC model specific utilities to do this,
 ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
 not for reprogramming it.
>>> ifconfig claims to support it:
>>>
>>> hw class address
>> 
>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>
> I can't forget what I don't know.  please point me to description of
> these rules?

Trying again, after those idiots at Ix who run manitu blocked me

/etc/udev/rules.d are configuration files for udev, to create at boot.
70-persistent-net.rules contains MAC addresses

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread GKH
I just did it like this:

ifconfig enp3s0

enp3s0: flags=4163  mtu 1500
inet 10.241.27.154  netmask 255.255.255.0  broadcast 10.241.27.255
inet6 fe80::210:18ff:fe04:4d0  prefixlen 64  scopeid 0x20
ether 00:10:18:04:04:d0  txqueuelen 1000  (Ethernet)
RX packets 429591  bytes 41991957 (40.0 MiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 249536  bytes 19108398 (18.2 MiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
device interrupt 18

ifconfig enp3s0 hw ether 00:10:18:04:04:d7

ifconfig enp3s0
enp3s0: flags=4163  mtu 1500
inet 10.241.27.154  netmask 255.255.255.0  broadcast 10.241.27.255
inet6 fe80::210:18ff:fe04:4d0  prefixlen 64  scopeid 0x20
ether 00:10:18:04:04:d7  txqueuelen 1000  (Ethernet)
RX packets 429615  bytes 41994383 (40.0 MiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 249549  bytes 19109350 (18.2 MiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
device interrupt 18
Done!

-GKH












>
> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
>> Keith Keller wrote:
>>> On 2014-08-21, John R Pierce  wrote:
 On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
> I am trying to override the mac addr.
 pretty sure you need to use NIC model specific utilities to do this,
 ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
 not for reprogramming it.
>>> ifconfig claims to support it:
>>>
>>> hw class address
>> 
>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>
> I can't forget what I don't know.  please point me to description of
> these rules?
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Digimer
On 21/08/14 10:43 AM, Robert Moskowitz wrote:
>
> On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
>> Keith Keller wrote:
>>> On 2014-08-21, John R Pierce  wrote:
 On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
> I am trying to override the mac addr.
 pretty sure you need to use NIC model specific utilities to do this,
 ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
 not for reprogramming it.
>>> ifconfig claims to support it:
>>>
>>>  hw class address
>> 
>> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules
>
> I can't forget what I don't know.  please point me to description of
> these rules?

It's used to assign names to physical devices via udev. How it works 
depends a bit on your version.

It's discussed as part of these tutorials:

CentOS 6:
https://alteeve.ca/w/Changing_the_ethX_to_Ethernet_Device_Mapping_in_EL6_and_Fedora_12_to_14

CentOS 7:
https://alteeve.ca/w/Changing_Ethernet_Device_Names_in_EL7_and_Fedora_15%2B

-- 
Digimer
Papers and Projects: https://alteeve.ca/w/
What if the cure for cancer is trapped in the mind of a person without 
access to education?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz

On 08/21/2014 10:32 AM, m.r...@5-cent.us wrote:
> Keith Keller wrote:
>> On 2014-08-21, John R Pierce  wrote:
>>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
 I am trying to override the mac addr.
>>> pretty sure you need to use NIC model specific utilities to do this,
>>> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
>>> not for reprogramming it.
>> ifconfig claims to support it:
>>
>> hw class address
> 
> Also, don't forget /etc/udev/rules.d/70-persistant-net.rules

I can't forget what I don't know.  please point me to description of 
these rules?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread m . roth
Keith Keller wrote:
> On 2014-08-21, John R Pierce  wrote:
>> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>>> I am trying to override the mac addr.
>>
>> pretty sure you need to use NIC model specific utilities to do this,
>> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic,
>> not for reprogramming it.
>
> ifconfig claims to support it:
>
>hw class address

Also, don't forget /etc/udev/rules.d/70-persistant-net.rules

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz
Did not work...

On 08/21/2014 10:15 AM, Reindl Harald wrote:
>
> Am 21.08.2014 um 16:09 schrieb Robert Moskowitz:
>> I am trying to override the mac addr.  Now this is on an armv7 actually
>> running the F19 kernel and Redsleeve 6, but it SHOULD be standard
>> Centos6 ifcfg-eth0 content.  Of course RSEL does not start with a
>> ifcfg-eth0 file, letting network services do all the work, so I am
>> starting from scratch, using the file from one of my C6 boxes with
>> static addressing.  My file has in it:
>>
>> DEVICE="eth0"
>> BOOTPROTO=none
>> NM_CONTROLLED="no"
>> ONBOOT="yes"
>> TYPE="Ethernet"
>> NAME="System eth0"
>> DNS1=208.83.67.188
>> GATEWAY="208.83.67.177"
>> IPADDR="208.83.67.179"
>> HOSTNAME="rigel2.htt-consult.com"
>> IPV6INIT="yes"
>> MACADDR=02:67:15:00:01:79
>> MTU=1500
> that's easy - you need to tell it the physical too
> works from Fedora 10 up to Fedora 20 that way
>
> [root@srv-rhsoft:~]$ cat ifcfg-eth1
> DEVICE=eth1
> HWADDR=68:05:ca:0d:62:c1
> MACADDR=00:50:8d:b5:cc:de
>
> "00:50:8d:b5:cc:de" is the on my interface has after it is up
> "68:05:ca:0d:62:c1" is the pysical one of the device before fake it
>
> [root@srv-rhsoft:~]$ ifconfig eth1
> eth1: flags=67  mtu 1500
>  inet 62.178.103.85  netmask 255.255.255.0  broadcast 255.255.255.255
>  ether 00:50:8d:b5:cc:de  txqueuelen 500  (Ethernet)
>  RX packets 74959980  bytes 25037014848 (23.3 GiB)
>  RX errors 0  dropped 0  overruns 0  frame 0
>  TX packets 67607627  bytes 39867204808 (37.1 GiB)
>  TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>  device interrupt 16  memory 0xf7cc-f7ce
>
# cat > /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE="eth0"
BOOTPROTO=none
NM_CONTROLLED="no"
ONBOOT="yes"
TYPE="Ethernet"
NAME="System eth0"
HWADDR=02:c3:04:01:77:c3
MACADDR=02:67:15:00:01:79
MTU=1500
DNS1=208.83.67.188
GATEWAY="208.83.67.177"
IPADDR="208.83.67.179"
HOSTNAME="rigel2.htt-consult.com"
IPV6INIT="yes"
[root@redsleeve ~]# service network restart
Shutting down loopback interface:  [  OK  ]
Bringing up loopback interface:  [  OK  ]
Bringing up interface eth0:  Device eth0 has different MAC address than 
expected, ignoring.
[FAILED]

And now not even an eth1 interface.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Keith Keller
On 2014-08-21, John R Pierce  wrote:
> On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
>> I am trying to override the mac addr.
>
> pretty sure you need to use NIC model specific utilities to do this, 
> ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic, 
> not for reprogramming it.

ifconfig claims to support it:

   hw class address
  Set the hardware address of this interface, if the device driver
  supports  this  operation.   The keyword must be followed by the
  name of the hardware class and the printable ASCII equivalent of
  the  hardware  address.   Hardware  classes  currently supported
  include ether (Ethernet), ax25 (AMPR AX.25), ARCnet  and  netrom
  (AMPR NET/ROM).

The important item is of course "if the device driver supports this
operation".  If not then a tool downloaded from the NIC manufacturer
might be the only way.

Unfortunately I do not know whether ifcfg-eth* supports this ifconfig
syntax.

--keith

-- 
kkel...@wombat.san-francisco.ca.us


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz

On 08/21/2014 10:15 AM, Reindl Harald wrote:
>
> Am 21.08.2014 um 16:09 schrieb Robert Moskowitz:
>> I am trying to override the mac addr.  Now this is on an armv7 actually
>> running the F19 kernel and Redsleeve 6, but it SHOULD be standard
>> Centos6 ifcfg-eth0 content.  Of course RSEL does not start with a
>> ifcfg-eth0 file, letting network services do all the work, so I am
>> starting from scratch, using the file from one of my C6 boxes with
>> static addressing.  My file has in it:
>>
>> DEVICE="eth0"
>> BOOTPROTO=none
>> NM_CONTROLLED="no"
>> ONBOOT="yes"
>> TYPE="Ethernet"
>> NAME="System eth0"
>> DNS1=208.83.67.188
>> GATEWAY="208.83.67.177"
>> IPADDR="208.83.67.179"
>> HOSTNAME="rigel2.htt-consult.com"
>> IPV6INIT="yes"
>> MACADDR=02:67:15:00:01:79
>> MTU=1500
> that's easy - you need to tell it the physical too
> works from Fedora 10 up to Fedora 20 that way
>
> [root@srv-rhsoft:~]$ cat ifcfg-eth1
> DEVICE=eth1
> HWADDR=68:05:ca:0d:62:c1
> MACADDR=00:50:8d:b5:cc:de
>
> "00:50:8d:b5:cc:de" is the on my interface has after it is up
> "68:05:ca:0d:62:c1" is the pysical one of the device before fake it

OK.  I ws going by: 
http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-networkscripts-interfaces.html

which says:

MACADDR=//

where // is the hardware address of the Ethernet device
in the form /AA:BB:CC:DD:EE:FF/. This directive is used to assign a
MAC address to an interface, overriding the one assigned to the
physical NIC. This directive should *not* be used in conjunction
with HWADDR.


>
> [root@srv-rhsoft:~]$ ifconfig eth1
> eth1: flags=67  mtu 1500
>  inet 62.178.103.85  netmask 255.255.255.0  broadcast 255.255.255.255
>  ether 00:50:8d:b5:cc:de  txqueuelen 500  (Ethernet)
>  RX packets 74959980  bytes 25037014848 (23.3 GiB)
>  RX errors 0  dropped 0  overruns 0  frame 0
>  TX packets 67607627  bytes 39867204808 (37.1 GiB)
>  TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>  device interrupt 16  memory 0xf7cc-f7ce
>

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Trying to override MAC addr

2014-08-21 Thread John R Pierce
On 8/21/2014 7:09 AM, Robert Moskowitz wrote:
> I am trying to override the mac addr.

pretty sure you need to use NIC model specific utilities to do this, 
ifcfg-ethN won't do it.   the hwaddr= in there is for finding the nic, 
not for reprogramming it.



-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Trying to override MAC addr

2014-08-21 Thread Robert Moskowitz
I am trying to override the mac addr.  Now this is on an armv7 actually 
running the F19 kernel and Redsleeve 6, but it SHOULD be standard 
Centos6 ifcfg-eth0 content.  Of course RSEL does not start with a 
ifcfg-eth0 file, letting network services do all the work, so I am 
starting from scratch, using the file from one of my C6 boxes with 
static addressing.  My file has in it:

DEVICE="eth0"
BOOTPROTO=none
NM_CONTROLLED="no"
ONBOOT="yes"
TYPE="Ethernet"
NAME="System eth0"
DNS1=208.83.67.188
GATEWAY="208.83.67.177"
IPADDR="208.83.67.179"
HOSTNAME="rigel2.htt-consult.com"
IPV6INIT="yes"
MACADDR=02:67:15:00:01:79
MTU=1500

And when I restart network, it can't find eth0:

# service network restart
Shutting down loopback interface:  [  OK  ]
Bringing up loopback interface:  [  OK  ]
Bringing up interface eth0:  Device eth0 does not seem to be present, 
delaying initialization.
[FAILED]

but:

# ifconfig
eth1  Link encap:Ethernet  HWaddr 02:67:15:00:01:79
   inet addr:208.83.67.179  Bcast:208.83.67.255 Mask:255.255.255.0
   inet6 addr: 2607:f4b8:3:3:67:15ff:fe00:179/64 Scope:Global
   inet6 addr: fe80::67:15ff:fe00:179/64 Scope:Link
   UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
   RX packets:254 errors:0 dropped:17 overruns:0 frame:0
   TX packets:70 errors:0 dropped:0 overruns:0 carrier:0
   collisions:0 txqueuelen:1000
   RX bytes:26575 (25.9 KiB)  TX bytes:6104 (5.9 KiB)
   Interrupt:87 Base address:0x6000

The assigned MAC addr for eth0 is: 02:c3:04:01:77:c3

The tutorials that I have found on ifcfg-ethN say not to use both hwaddr 
and macaddr in the same cfg file, but it almost seems that is what is 
needed?

thanks


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Digest, Vol 115, Issue 21

2014-08-21 Thread Bill Gee
On Thursday, August 21, 2014 12:00:03 centos-requ...@centos.org wrote:
> Re: [CentOS] SELinux vs. logwatch and virsh
> From: Daniel J Walsh 
> To: CentOS mailing list 
> 
> On 08/18/2014 02:13 PM, Bill Gee wrote:
> > Hi Dan -
> > 
> > "ausearch -m avc -ts recent" produces no output.  If I run it as "ausearch
> > -f  virsh" then it produces output similar to this.  Each day's run of
> > logwatch produces three of these audit log entries.  The a1 and a2 values
> > are different for each entry, but everything else is the same.
> > 
> > ===
> > time->Mon Aug 18 03:21:03 2014
> > type=SYSCALL msg=audit(1408350063.257:7492): arch=c03e syscall=21 
> > success=no exit=-13 a0=11ee230 a1=4 a2=7fff722837b0 a3=7fff72283640
> > items=0  ppid=2815 pid=2816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0
> > egid=0 sgid=0 fsgid=0 tty=(none) ses=981 comm="bash" exe="/usr/bin/bash"
> > subj=system_u:system_r:logwatch_t:s0-s0:c0.c1023 key=(null)
> > type=AVC msg=audit(1408350063.257:7492): avc:  denied  { read }
> > for  pid=2816  comm="bash" name="virsh" dev="dm-0" ino=135911290
> > scontext=system_u:system_r:logwatch_t:s0-s0:c0.c1023 
> > tcontext=system_u:object_r:virsh_exec_t:s0 tclass=file
> > ===
> > 
> > I thought about using audit2allow as you suggest.  The problem is then I
> > don't  really know what change is required.  What exactly will it
> > do?  And is there a guarantee that it will work?
> 
> logwatch is executing virsh probably to communicate with libvirt to
> rotate logs or something.  You can look in /etc/logrotate.d for a script
> with virsh to tell you what the command is trying to do.

Hi Dan -

I know EXACTLY what virsh is being called for.  I wrote the script!  It has 
nothing to do with logrotate.  I want virsh to tell logwatch what the status 
is of all virtual machines running on the host.  Logwatch will then include 
that in its daily summary report.  SELinux is getting in the way.

Regards - Bill Gee
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 114, Issue 11

2014-08-21 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2014:1075 Moderate CentOS 6 qemu-kvm Update (Johnny Hughes)
   2. CEBA-2014:1080  CentOS 6 ccid Update (Johnny Hughes)
   3. CEBA-2014:1081 CentOS 7 perl-Test-Pod FASTTRACK   BugFix Update
  (Johnny Hughes)


--

Message: 1
Date: Tue, 19 Aug 2014 10:00:56 +
From: Johnny Hughes 
Subject: [CentOS-announce] CESA-2014:1075 Moderate CentOS 6 qemu-kvm
Update
To: centos-annou...@centos.org
Message-ID: <20140819100056.ga27...@n04.lon1.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2014:1075 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1075.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
4c2f64fbfa724282ccea4c96a54bf8efd0ef9b0994c590b10208f49192f926ae  
qemu-guest-agent-0.12.1.2-2.415.el6_5.14.i686.rpm

x86_64:
6ece8abdbb5f15c1a4fda968db4a9f2a35d3b273c66d3f9e396259762d15  
qemu-guest-agent-0.12.1.2-2.415.el6_5.14.x86_64.rpm
5754d91f336abb86787e1cc3378477de5407c1a3a3c7e20a9a40783a78e8afee  
qemu-img-0.12.1.2-2.415.el6_5.14.x86_64.rpm
4ce7d58ddf89b67cbcaeda217aba78b8a3b4facf1ed632c0ee90ac4f27d00a86  
qemu-kvm-0.12.1.2-2.415.el6_5.14.x86_64.rpm
4c10810d91f41199b63fdf5913a6090c7bc1b1ebda300b63c5b934dc9773f5bc  
qemu-kvm-tools-0.12.1.2-2.415.el6_5.14.x86_64.rpm

Source:
d1c7b724bfb2a1c3ea74e835f2b893ce70eeef66bc95ff073732fbe0efb615d5  
qemu-kvm-0.12.1.2-2.415.el6_5.14.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 2
Date: Wed, 20 Aug 2014 13:00:22 +
From: Johnny Hughes 
Subject: [CentOS-announce] CEBA-2014:1080  CentOS 6 ccid Update
To: centos-annou...@centos.org
Message-ID: <20140820130022.ga5...@n04.lon1.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2014:1080 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1080.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
2ac61bf52b8fead7aa134984cfe47dabef0e038e94bfef1141879a2f7224390c  
ccid-1.3.9-6.1.el6_5.i686.rpm

x86_64:
3acf42c67fbe2f9cd561818b03e7a4d7b1eb7727f67ca31e0d1409bee059e7e5  
ccid-1.3.9-6.1.el6_5.x86_64.rpm

Source:
2c1128b52d06abb7ad4c12e490460fc22fc40a7fdaa24dc07ad940f934bb13f6  
ccid-1.3.9-6.1.el6_5.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 3
Date: Wed, 20 Aug 2014 13:11:14 +
From: Johnny Hughes 
Subject: [CentOS-announce] CEBA-2014:1081 CentOS 7 perl-Test-Pod
FASTTRACK   BugFix Update
To: centos-annou...@centos.org
Message-ID: <20140820131114.ga24...@n04.lon1.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2014:1081 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1081.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

x86_64:
c81d42c09fc4cfff0342f5ae9e76d7ba7b26377c00ac038f17317f3743094bbb  
perl-Test-Pod-1.48-3.el7.noarch.rpm

Source:
da0fb9277a920e37ac3f0b3b1d372093608781ee0a371864ba243efe218feddb  
perl-Test-Pod-1.48-3.el7.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

___
CentOS-announce mailing list
centos-annou...@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce


End of CentOS-announce Digest, Vol 114, Issue 11

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] java 1.6 and 1.7 on CentOS

2014-08-21 Thread Toralf Lund
On 20/08/14 16:45, Les Mikesell wrote:
> On Wed, Aug 20, 2014 at 9:02 AM, Toralf Lund  wrote:
>> I can confirm that. I have both installed. You can configure the default
>> using the 'alternatives' system.
> is it just me, or does anyone else think that 'alternatives' system is
> completely bogus?
 I've always seen it as designed mostly for system services for which
 there are several common implementations - like the SMTP server or the
 printing system. Where I think it makes sense.
>>> But do you really need _two_ symlinks to get a default in your PATH?
>> I think the argument is that "configuration" commands shouldn't change
>> bin directories. Which is right in a way, but maybe this is one of the
>> cases where practicality should have been chosen over formal correctness.
> What is formally correct  about putting executables in some obscure
> place under /var?
I'm not quite sure what you mean by that. For the alternatives setup I 
have links on /usr/bin or whatever pointing to other links on 
/etc/alternatives, which in turn point to the real files - where direct 
links from /usr/bin would of course be simpler. Perhaps you were talking 
about something else, or are the locations different on CentOS 7 (I'm 
using version 6.)

What I was referring to is that I believe it's considered as incorrect 
to put "dynamic" data on /usr these days. I'm not sure there is a 
separate specification saying so, or if it's just taken to be implied by 
the FHS (http://www.pathname.com/fhs/pub/fhs-2.3.html).

- T
>
 It may also be useful to be able to set up a system-wide default for
 user applications "with alternatives", but I suppose a user override
 ought to be possible in that case.

> what if I have one user that wants JDK6 and another that needs JDK7 ?
 I guess the "preferred applications" system in the desktop is in a way
 meant for such cases, but this of course comes across as incomplete, too.

>>> The concept used for 'software collections' is a more realistic
>>> approach - but instead of hiding where things land and needing a tool
>>> to set up use, why not just tell people what to add to their own PATH
>>> and LD_LIBRARY path to get the version you want.  That's almost
>>> certainly what the developers of every package where they need to have
>>> test versions does.  So why treat the users like they would be too
>>> dumb for that?
>> That's a point.
>>
>> You could also easily develop "config" tools that would make that job
>> easier for "dumb" users - this might be more productive than maintaining
>> different solution that essentially have the same effect.
> Or you could just not pretend that users are dumb for choosing your
> product.  And not hide the purpose, content, and functionality of PATH
> and LD_LIBRARY_PATH, things that every developer who needs to have a
> 'stable, trusted' version of an application along with today's build
> is going to understand and utilize.  So it's probably not those
> developers that came up with the weird alternatives scheme - or at
> least decided to use it for applications that really need concurrent
> alternatives, not a site-wide default.
>


This e-mail, including any attachments and response string, may contain 
proprietary information which is confidential and may be legally privileged. It 
is for the intended recipient only. If you are not the intended recipient or 
transmission error has misdirected this e-mail, please notify the author by 
return e-mail and delete this message and any attachment immediately. If you 
are not the intended recipient you must not use, disclose, distribute, forward, 
copy, print or rely on this e-mail in any way except as permitted by the author.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos