Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
On 2013-03-30 1:41 PM, Pandu Poluan pa...@poluan.info wrote: All my servers use mdev. 'nuff said. I do remember the conversation about mdev... probably should have paid closer attention. Is the conversion fairly simple? Is there an updated how-to, specifically for older udev (171)? Thanks...
Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
Tanstaafl wrote: On 2013-03-30 1:41 PM, Pandu Poluan pa...@poluan.info wrote: All my servers use mdev. 'nuff said. I do remember the conversation about mdev... probably should have paid closer attention. Is the conversion fairly simple? Is there an updated how-to, specifically for older udev (171)? Thanks... Try this: https://wiki.gentoo.org/wiki/Mdev That was originally done by Walter and he does subscribe to this list, saw a post not to long ago. If you run into issues, I'm pretty sure he will help if he can. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
On 2013-03-28 2:15 PM, Dale rdalek1...@gmail.com wrote: Just a thought. Have you thought about switching to eudev? That would solve some udev issues. Since you are running a hardened profile and servers, may not be a option tho. I'm curious... Is eudev still being 'maintained'? Does it still have any advantages over the new udev? I'm mostly concerned about getting so far behind that I end up in an untenable situation... ie, eudev dies in 1+ years, and the changes between now and then make it virtually to update to whatever is the new way...
Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
I should have added that this is for a server (not hardened), so I don't care about hot plug this or that, I just care about stability and reliability with respect to updates not breaking booting capability... On 2013-03-30 10:39 AM, Tanstaafl tansta...@libertytrek.org wrote: On 2013-03-28 2:15 PM, Dale rdalek1...@gmail.com wrote: Just a thought. Have you thought about switching to eudev? That would solve some udev issues. Since you are running a hardened profile and servers, may not be a option tho. I'm curious... Is eudev still being 'maintained'? Does it still have any advantages over the new udev? I'm mostly concerned about getting so far behind that I end up in an untenable situation... ie, eudev dies in 1+ years, and the changes between now and then make it virtually to update to whatever is the new way...
Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
Tanstaafl wrote: I should have added that this is for a server (not hardened), so I don't care about hot plug this or that, I just care about stability and reliability with respect to updates not breaking booting capability... As far as I know, it is actively maintained. Do I see the people banging hammers, no. lol I did have a update on eudev tho: Sun Feb 10 20:07:23 2013 sys-fs/eudev-1_beta2-r2 merge time: 55 seconds. This is from the changelog for eudev: 10 Mar 2013; Anthony G. Basile bluen...@gentoo.org eudev-.ebuild: Remove hacky export ac_cv_path_GPERF=true since the check is merged upstream 10 Mar 2013; Anthony G. Basile bluen...@gentoo.org eudev-.ebuild: Depend on gperf only if USE=keymap, bug #452760 20 Feb 2013; Anthony G. Basile bluen...@gentoo.org files/40-gentoo.rules: Sync 40-gentoo.rules with sys-fs/udev, bug #457868 *eudev-1_beta2-r2 (10 Feb 2013) 10 Feb 2013; Anthony G. Basile bluen...@gentoo.org +eudev-1_beta2-r2.ebuild, -eudev-1_beta2-r1.ebuild: Rev bump to push out root fix, bug #456384 09 Feb 2013; Luca Barbato lu_z...@gentoo.org eudev-1_beta2-r1.ebuild, eudev-.ebuild, +files/eudev-hwdb-offset-root.patch: Update eudev ebuilds to support ROOT properly It seems the latest change was March 10 which was not long ago. As I mentioned earlier, I have plugged in USB sticks, cameras, printers and such pretty regular. The eudev fork has worked fine for me. Servers seem to worry less about *new stuff* since they usually run with what they have at boot time anyway. Heck, mdev may would work fine for you too. It seems based on reading the -dev list that udev is about to introduce some more changes. I'm hoping those don't affect me either. I just noticed that someone else on this list has ran into the news message for it too and has questions already. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
On Mar 30, 2013 9:48 PM, Tanstaafl tansta...@libertytrek.org wrote: I should have added that this is for a server (not hardened), so I don't care about hot plug this or that, I just care about stability and reliability with respect to updates not breaking booting capability... On 2013-03-30 10:39 AM, Tanstaafl tansta...@libertytrek.org wrote: On 2013-03-28 2:15 PM, Dale rdalek1...@gmail.com wrote: Just a thought. Have you thought about switching to eudev? That would solve some udev issues. Since you are running a hardened profile and servers, may not be a option tho. I'm curious... Is eudev still being 'maintained'? Does it still have any advantages over the new udev? I'm mostly concerned about getting so far behind that I end up in an untenable situation... ie, eudev dies in 1+ years, and the changes between now and then make it virtually to update to whatever is the new way... All my servers use mdev. 'nuff said. Rgds, --
Re: [gentoo-user] Updating our live servers. I'm scared!
On Thu, Mar 28, 2013 at 11:38 AM, Nick Khamis sym...@gmail.com wrote: Hello Everyone, Just got a ticket assigned to me where we need to update our production servers. uname -a Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux eselect [18] hardened/linux/amd64 * I don't think they have been updated since the initial install and wanted to get a little feedback on some safe practices and methods that should be performed before and while doing so. Thanks in Advance, Nick. Personally, I would recommend pulling an rsync (databases and such might cause a hiccup with that) of one of them to a nonessential system and testing updating there, building packages (assuming matching use flags, etc, across your systems), documenting the pitfalls you run into as you go. After you're up to date there, run through and test it again from a base copy, then test the actual services to ensure changes to them don't hose your environment's configuration, and once that's good, it then depends entirely on what failover, or downtime allowances you have available. If you have no failover to rely on, and can't afford enough downtime to update the system in place from the packages you've built, clone each off, update, then migrate the changes that've occured in the time between... time consuming, and requires a lot of care, but doable. -- Poison [BLX] Joshua M. Murphy
Re: [gentoo-user] Updating our live servers. I'm scared!
So basically rsync configs and databases first? When issuing updates to world and so no. What is the safest process/order to sync portage, and update world? I have seen a number of flags various example use, and was wondering if someone can give me the safest and equally effective commands with flags included. Thanks again, Nick. On 3/28/13, Joshua Murphy poiso...@gmail.com wrote: On Thu, Mar 28, 2013 at 11:38 AM, Nick Khamis sym...@gmail.com wrote: Hello Everyone, Just got a ticket assigned to me where we need to update our production servers. uname -a Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux eselect [18] hardened/linux/amd64 * I don't think they have been updated since the initial install and wanted to get a little feedback on some safe practices and methods that should be performed before and while doing so. Thanks in Advance, Nick. Personally, I would recommend pulling an rsync (databases and such might cause a hiccup with that) of one of them to a nonessential system and testing updating there, building packages (assuming matching use flags, etc, across your systems), documenting the pitfalls you run into as you go. After you're up to date there, run through and test it again from a base copy, then test the actual services to ensure changes to them don't hose your environment's configuration, and once that's good, it then depends entirely on what failover, or downtime allowances you have available. If you have no failover to rely on, and can't afford enough downtime to update the system in place from the packages you've built, clone each off, update, then migrate the changes that've occured in the time between... time consuming, and requires a lot of care, but doable. -- Poison [BLX] Joshua M. Murphy
Re: [gentoo-user] Updating our live servers. I'm scared!
On 03/28/2013 11:38 AM, Nick Khamis wrote: Hello Everyone, Just got a ticket assigned to me where we need to update our production servers. uname -a Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux eselect [18] hardened/linux/amd64 * I don't think they have been updated since the initial install and wanted to get a little feedback on some safe practices and methods that should be performed before and while doing so. This isn't that old, you'll be fine. First run an emerge --sync to update the tree. Then list everything it wants to upgrade: emerge -puDN1 world Once you have that list, go through a few at a time, updating non-essential packages. For example, emerge -u1 timezone-data man-pages ... Every once in a while, run a revdep-rebuild. If you have service monitoring (e.g. Nagios), great, it'll alert you if something breaks. If not, you'll have to test the services yourself every few packages. And don't forget to open a counter-ticket for someone to implement a monitoring solution, already. After a while, only important packages (apache, mysql, postfix...) will be left. Do those one at a time, and restart the services afterwards. Read the release notes first. Run revdep-rebuild. Check that the services work. Finally, you'll be left with the guaranteed-to-break updates like grub2 (50/50) and udev (100% you're fucked prepare for downtime). Grub2 can of course be skipped until the hardware dies. Best of luck to you with udev =)
Re: [gentoo-user] Updating our live servers. I'm scared!
Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. That was quite an experience But for kernel 3.* has udev not been phased out in our gentoo boxes? Will have to double check when I get back behind a console. N. On 3/28/13, Michael Orlitzky mich...@orlitzky.com wrote: On 03/28/2013 11:38 AM, Nick Khamis wrote: Hello Everyone, Just got a ticket assigned to me where we need to update our production servers. uname -a Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux eselect [18] hardened/linux/amd64 * I don't think they have been updated since the initial install and wanted to get a little feedback on some safe practices and methods that should be performed before and while doing so. This isn't that old, you'll be fine. First run an emerge --sync to update the tree. Then list everything it wants to upgrade: emerge -puDN1 world Once you have that list, go through a few at a time, updating non-essential packages. For example, emerge -u1 timezone-data man-pages ... Every once in a while, run a revdep-rebuild. If you have service monitoring (e.g. Nagios), great, it'll alert you if something breaks. If not, you'll have to test the services yourself every few packages. And don't forget to open a counter-ticket for someone to implement a monitoring solution, already. After a while, only important packages (apache, mysql, postfix...) will be left. Do those one at a time, and restart the services afterwards. Read the release notes first. Run revdep-rebuild. Check that the services work. Finally, you'll be left with the guaranteed-to-break updates like grub2 (50/50) and udev (100% you're fucked prepare for downtime). Grub2 can of course be skipped until the hardware dies. Best of luck to you with udev =)
Re: [gentoo-user] Updating our live servers. I'm scared!
On 03/28/2013 12:56 PM, Nick Khamis wrote: Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. That was quite an experience But for kernel 3.* has udev not been phased out in our gentoo boxes? Will have to double check when I get back behind a console. I'm afraid not! Once you sync, you can do, eselect news read 23 to see the news item that was posted about it (title: 2013-01-23-udev-upgrade). Even that doesn't contain all of the information.. some of it is spread throughout bugs and across mailing list discussions. Oh and they decided to rename your NICs to owiu23awds89, which stands for, actually-nobody-knows-welcome24-to16-hell9-slot12-moon-phase-36-hey-if-you-enjoyed-this-give-systemd-a-try, or something like that. It's all explained very poorly in the cited links.
Re: [gentoo-user] Updating our live servers. I'm scared!
So basically, no long weekend for me here in Canada. Thanks a lot guys for your time.Wish me luck. Happy easter/holidays!!! N. On 3/28/13, Michael Orlitzky mich...@orlitzky.com wrote: On 03/28/2013 12:56 PM, Nick Khamis wrote: Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. That was quite an experience But for kernel 3.* has udev not been phased out in our gentoo boxes? Will have to double check when I get back behind a console. I'm afraid not! Once you sync, you can do, eselect news read 23 to see the news item that was posted about it (title: 2013-01-23-udev-upgrade). Even that doesn't contain all of the information.. some of it is spread throughout bugs and across mailing list discussions. Oh and they decided to rename your NICs to owiu23awds89, which stands for, actually-nobody-knows-welcome24-to16-hell9-slot12-moon-phase-36-hey-if-you-enjoyed-this-give-systemd-a-try, or something like that. It's all explained very poorly in the cited links.
Re: [gentoo-user] Updating our live servers. I'm scared!
On 03/28/2013 01:16 PM, Nick Khamis wrote: So basically, no long weekend for me here in Canada. Thanks a lot guys for your time.Wish me luck. Happy easter/holidays!!! I'm being a bit dramatic. I would plan on spending ~4 hours researching, planning, and documenting the udev upgrade. Maybe an hour to execute it in the middle of the night, physically present. You can expect around 15 minutes downtime if all goes well. The rest of the updates you can do at your leisure, although the critical services should be restarted and checked during off-hours.
Re: [gentoo-user] Updating our live servers. I'm scared!
First hickup emerge -puDN1 world !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/eapi-5-files/eapi' !!! Your current profile is invalid. If you have just changed your profile !!! configuration, you should revert back to the previous configuration. !!! Allowed actions are limited to --help, --info, --search, --sync, and We were always running hardened. Never changed the profile. N. On 3/28/13, Michael Orlitzky mich...@orlitzky.com wrote: On 03/28/2013 01:16 PM, Nick Khamis wrote: So basically, no long weekend for me here in Canada. Thanks a lot guys for your time.Wish me luck. Happy easter/holidays!!! I'm being a bit dramatic. I would plan on spending ~4 hours researching, planning, and documenting the udev upgrade. Maybe an hour to execute it in the middle of the night, physically present. You can expect around 15 minutes downtime if all goes well. The rest of the updates you can do at your leisure, although the critical services should be restarted and checked during off-hours.
Re: [gentoo-user] Updating our live servers. I'm scared!
On 03/28/2013 01:43 PM, Nick Khamis wrote: First hickup emerge -puDN1 world !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/eapi-5-files/eapi' !!! Your current profile is invalid. If you have just changed your profile !!! configuration, you should revert back to the previous configuration. !!! Allowed actions are limited to --help, --info, --search, --sync, and We were always running hardened. Never changed the profile. Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do to fix it us update portage to the current stable version, which supports EAPI5. Can you switch to another profile temporarily and get portage updated?
Re: [gentoo-user] Updating our live servers. I'm scared!
On 28.03.2013 21:49, Michael Orlitzky wrote: On 03/28/2013 01:43 PM, Nick Khamis wrote: First hickup emerge -puDN1 world !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/eapi-5-files/eapi' !!! Your current profile is invalid. If you have just changed your profile !!! configuration, you should revert back to the previous configuration. !!! Allowed actions are limited to --help, --info, --search, --sync, and We were always running hardened. Never changed the profile. Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do to fix it us update portage to the current stable version, which supports EAPI5. Can you switch to another profile temporarily and get portage updated? I guess this is related to the recent profile upgrade (as of 2013-02-10). In my $ eselect news list I get the last news item related to this upgrade. As it states, Everyone should upgrade as soon as possible (but please make sure sys-apps/portage is updated to current stable *before* you switch profile). this formally requires a new profile tree with EAPI=5. So, read the news item, emerge portage, then # eselect profile and you're done. -- Best wishes, Yuri K. Shatroff
Re: [gentoo-user] Updating our live servers. I'm scared!
I switched to the default profile from hardened: eselect profile list Available profile symlink targets: [1] default/linux/x86/13.0 * env-update !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/default/linux/x86/13.0/eapi' Regenerating /etc/ld.so.cache... And still can't update portage. N. On 3/28/13, Michael Orlitzky mich...@orlitzky.com wrote: On 03/28/2013 01:43 PM, Nick Khamis wrote: First hickup emerge -puDN1 world !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/eapi-5-files/eapi' !!! Your current profile is invalid. If you have just changed your profile !!! configuration, you should revert back to the previous configuration. !!! Allowed actions are limited to --help, --info, --search, --sync, and We were always running hardened. Never changed the profile. Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do to fix it us update portage to the current stable version, which supports EAPI5. Can you switch to another profile temporarily and get portage updated?
Re: [gentoo-user] Updating our live servers. I'm scared!
But we never changed our profile? Always running hardened server. N. On 3/28/13, Nick Khamis sym...@gmail.com wrote: I switched to the default profile from hardened: eselect profile list Available profile symlink targets: [1] default/linux/x86/13.0 * env-update !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/default/linux/x86/13.0/eapi' Regenerating /etc/ld.so.cache... And still can't update portage. N. On 3/28/13, Michael Orlitzky mich...@orlitzky.com wrote: On 03/28/2013 01:43 PM, Nick Khamis wrote: First hickup emerge -puDN1 world !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/eapi-5-files/eapi' !!! Your current profile is invalid. If you have just changed your profile !!! configuration, you should revert back to the previous configuration. !!! Allowed actions are limited to --help, --info, --search, --sync, and We were always running hardened. Never changed the profile. Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do to fix it us update portage to the current stable version, which supports EAPI5. Can you switch to another profile temporarily and get portage updated?
Re: [gentoo-user] Updating our live servers. I'm scared!
As mentioned earlier a temporary change of profile got me on my way eselect profile set 0 env-update eselect profile set 7 Moving forward... Thanks guys. On 3/28/13, Nick Khamis sym...@gmail.com wrote: But we never changed our profile? Always running hardened server. N. On 3/28/13, Nick Khamis sym...@gmail.com wrote: I switched to the default profile from hardened: eselect profile list Available profile symlink targets: [1] default/linux/x86/13.0 * env-update !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/default/linux/x86/13.0/eapi' Regenerating /etc/ld.so.cache... And still can't update portage. N. On 3/28/13, Michael Orlitzky mich...@orlitzky.com wrote: On 03/28/2013 01:43 PM, Nick Khamis wrote: First hickup emerge -puDN1 world !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/eapi-5-files/eapi' !!! Your current profile is invalid. If you have just changed your profile !!! configuration, you should revert back to the previous configuration. !!! Allowed actions are limited to --help, --info, --search, --sync, and We were always running hardened. Never changed the profile. Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do to fix it us update portage to the current stable version, which supports EAPI5. Can you switch to another profile temporarily and get portage updated?
Re: [gentoo-user] Updating our live servers. I'm scared!
Nick Khamis wrote: Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. That was quite an experience But for kernel 3.* has udev not been phased out in our gentoo boxes? Will have to double check when I get back behind a console. N. Just a thought. Have you thought about switching to eudev? That would solve some udev issues. Since you are running a hardened profile and servers, may not be a option tho. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
Re: [gentoo-user] Updating our live servers. I'm scared!
Yeah these guys seem to think that our servers MUST run on the hardened profile... On 3/28/13, Dale rdalek1...@gmail.com wrote: Nick Khamis wrote: Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. That was quite an experience But for kernel 3.* has udev not been phased out in our gentoo boxes? Will have to double check when I get back behind a console. N. Just a thought. Have you thought about switching to eudev? That would solve some udev issues. Since you are running a hardened profile and servers, may not be a option tho. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
Re: [gentoo-user] Updating our live servers. I'm scared!
Nick Khamis wrote: Yeah these guys seem to think that our servers MUST run on the hardened profile... I just wanted to mention it in case its existence had slipped your mind. I know when the time came, I switched from udev to eudev and it has worked fine for my desktop. I plug in cameras, USB sticks, printers and other goodies which is likely something you don't do on a server. After reading about all the troubles others have had, I'm glad I switched. My network still has the same name and all too. Still crossing fingers tho. I just wasn't sure how compatible eudev would be with a hardened profile is all. Best of luck with the upgrade tho. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
