Re: [CentOS] bash off topic

2019-05-17 Thread Sean
So others have commented about the particulars of bash and shell quotes, etc.

I wanted to suggest you take a look at ShellCheck [1,2] and BATS [3].
I have been doing syntax, lint, and acceptance testing for Puppet code
for about a year...and love it... but I recently came across these and
have been working to apply the same principles to my shell script
projects.  The sheer number of fringe bugs in my script that using
shellcheck has lead me to clean up has been amazing.  BATS is more
complicated, but the principle is that you write tests that can assert
that your script is working or not.  So I made a project just to play
with this stuff, if you want to check it out [4].

[1] http://shellcheck.net
[2] https://github.com/koalaman/shellcheck
[3] https://github.com/bats-core/bats-core
[4] https://gitlab.com/salderma/bash-spec-test

--Sean


>
> From: Jerry Geis 
> To: CentOS mailing list 
> Cc:
> Bcc:
> Date: Thu, 16 May 2019 12:57:43 -0400
> Subject: [CentOS] bash off topic
> I have a simple bash script it will take arguments from a file that has
> quotes.
>
> my file arg.txt would be this
> -lt "*.txt"
>
> my script file would be
> LS_ARG=`cat arg.txt`
> ls $LS_ARG
>
> it does not run properly:
>  sh -x ./arg.sh
> ++ cat arg.txt
> + LS_ARG='-lt "*.txt"'
> + ls -lt '"*.txt"'
> ls: cannot access "*.txt": No such file or directory
>
>
> How do I resolve that ?  If the quotes are not in my file it all works
> fine. I think its because it looks like the extra single quotes it puts
> around the "*.txt" - or - '"*.txt"'  - how do I do this ?  This is just a
> short example of my larger need.
>
> Thanks,
>
> Jerry
>
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Brasero/cdrecord/growisofs with selinux users confined to staff_u

2019-05-01 Thread Sean
Hello CentOS / RedHat / IBM folks!

I am wondering if I can get a communication channel opened with
someone who can affect changes win upstream RHEL?  I don't have
support accounts with RHEL, and use CentOS almost exclusively.  I did
have a direct email conversation with Mr. Daniel Walsh regarding these
problems, but his answer was to create custom policy to allow what's
being denied, as there is no risk to doing so by his analysis.  That
said, I'm wondering if this isn't more of a bug or a need to adjust
the selinux policy packages to allow the functionality.

The user story is this:  Gnome3 user wants to burn a CD/DVD.  The
system is selinux enforcing, selinux boolean cdrecord_read_content is
set to on, and the user is confined to staff_u.  When the user runs
Brasero to burn a disk, the burn operation fails.

/var/log/audit/audit.log contains the following:
type=AVC msg=audit(1556724762.446:1133340): avc:  denied  { read } for
 pid=8296 comm="growisofs" name="devices" dev="proc" ino=4026532225
scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=0
type=AVC msg=audit(1556724762.446:1133341): avc:  denied  { read } for
 pid=8296 comm="growisofs" name="meminfo" dev="proc" ino=4026532040
scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=0
type=AVC msg=audit(1556724763.464:1133343): avc:  denied  { getattr }
for  pid=8316 comm="growisofs" path="/dev/dm-1" dev="devtmpfs"
ino=21192 scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
permissive=0
type=AVC msg=audit(1556724763.464:1133344): avc:  denied  { getattr }
for  pid=8316 comm="growisofs" path="/dev/sda2" dev="devtmpfs"
ino=11888 scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
permissive=0
type=AVC msg=audit(1556724763.464:1133345): avc:  denied  { getattr }
for  pid=8316 comm="growisofs" path="/dev/dm-6" dev="devtmpfs"
ino=39678 scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
permissive=0
type=AVC msg=audit(1556724763.465:1133346): avc:  denied  { getattr }
for  pid=8316 comm="growisofs" path="/dev/sda1" dev="devtmpfs"
ino=11887 scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
permissive=0
type=AVC msg=audit(1556724763.465:1133347): avc:  denied  { getattr }
for  pid=8316 comm="growisofs" path="/dev/dm-7" dev="devtmpfs"
ino=39681 scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
permissive=0
type=AVC msg=audit(1556724763.465:1133348): avc:  denied  { getattr }
for  pid=8316 comm="growisofs" path="/dev/dm-5" dev="devtmpfs"
ino=39677 scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
permissive=0
type=AVC msg=audit(1556724763.465:1133349): avc:  denied  { getattr }
for  pid=8316 comm="growisofs" path="/dev/dm-4" dev="devtmpfs"
ino=39676 scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
permissive=0
type=AVC msg=audit(1556724763.465:1133350): avc:  denied  { getattr }
for  pid=8316 comm="growisofs" path="/dev/dm-3" dev="devtmpfs"
ino=43433 scontext=staff_u:staff_r:cdrecord_t:s0-s0:c0.c1023
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
permissive=0

This seems like a reasonable task for a Gnome user to do with out
escalating privilege.  I can't explain why growisofs needs getattr on
all those disk devices, or why it "should" be denied.  I have not
texted extensively outside of the current scenario, but I do believe
if the user is unconfined the burn process works as expected.  There
is a very old Fedora bug suggesting similar, but not identical
behavior: https://bugzilla.redhat.com/show_bug.cgi?id=479014

--Sean
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] What is the proper place for GDM related dconf settings now?

2019-02-19 Thread Sean
Mr. Pearson,

Thanks for that, I do not have a RH support account.  I will put in
the scripting to ensure the directory is there.  I can confirm that
after putting it in there manually everything seems to work correctly.

That said, I guess I'm interested in the "design" choice and if there
isn't a more appropriate place to stick this type of config under the
new "design".  Again, I tried to hunt through release notes, issues,
etc. in Gnome's gitlab code tree, but didn't find anything that jumped
out at me as relevant to changing the behavior or otherwise noting a
"design" change between Gnome versions.

--Sean

On Mon, Feb 18, 2019 at 12:40 PM James Pearson
 wrote:
>
> Sean wrote:
> >
> > It seems that with CentOS 7.6 and Gnome 3.28, a clean install of a
> > Workstation package profile does not build the /etc/dconf/db/gdm.d/
> > directory tree.
>
> This is a known issue - see:
>
>   https://access.redhat.com/solutions/3599341
>
> You will need some sort of Redhat support account to see the above page
> - but the 'Resolution' given is:
>
> "Create the /etc/dconf/db/gdm.d/ directory manually. Files in this
> directory are still taken into account."
>
> .. and the "Root Cause" is given as:
>
> "This is by design and as a result of gnome/gdm rebase in RHEL 7.6."
>
>
> James Pearson
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] What is the proper place for GDM related dconf settings now?

2019-02-15 Thread Sean
Hello,

It seems that with CentOS 7.6 and Gnome 3.28, a clean install of a
Workstation package profile does not build the /etc/dconf/db/gdm.d/
directory tree.  I have several desktops in operation which we
kickstart built with an older 7.3/4/5 version of CentOS as the base
install media.  These all have a dconf directory for gdm, and I assume
a dconf profile directory for gdm as well (though I admit it always
worked so I never cared about looking for it).  These existing
machines are all running 7.6 today, and still have the
/etc/dconf/db/gdm.d directory settings applied (like
disable-user-list=true).

A newly built machine from the same kickstart but with 7.6 install
media doesn't provide the gdm.d directory.  I seem to recall, I admit
it's been a long while, that with older versions of Gnome 3, dconf
couldn't set things for gdm properly unless the settings were located
in a special dconf db just for gdm.  I can edit the kickstart %post%
to make the directory(s) before dropping files in them, but I'm
hesitant to do so if the files won't be honored because there's a more
appropriate place now.

I can take this up with the gnome list, if necessary, but CentOS is my
platform so I'm not sure if it's a distribution specific configuration
or functional change to Gnome.  I tried searching through
gitlab.gnome.org to see if I can dig up any issues, release notes and
such, but I didn't find anything that seemed relevant.

Thanks!

--Sean
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] /boot partition running out of space randomly. Please help!

2019-02-12 Thread Sean Son
On Tue, Feb 12, 2019 at 9:39 PM Rob Kampen 
wrote:

> On 13/02/19 2:05 PM, Sean Son wrote:
> > Hello all
> >
> > First off, I am running Oracle Linux 7.6 on a Hyper-V 2016 VM for a
> > customer. I know this is not an Oracle Linux mailling list, but because
> > Oracle Linux and CentOS are so similar, to an extent, I figured why not
> ask
> > on here because someone MIGHT know the answer.. Here is the issue.  I
> have
> > a 600MB /boot partition allocated on a UEFI system. The /boot/efi
> partition
> > is on a separate EFI partition.  Recently, I noticed that this system has
> > been crashing every few minutes and when I checked the disk space, I
> > noticed that the /boot partition has zero free space available.  I
> removed
> > all of the old kernels and left the running kernel in place, in hopes
> that
> > will free up some space. It freed up about 50MB or so, but  then the
> system
> > would crash again. After I would reboot the VM to bring the system back
> up,
> > I ran a df -h /boot, and the results were reporting ZERO disk space again
> > for the /boot partition.. It makes absolutely no sense how a partition
> > which is generally static UNLESS you move something into it, is running
> out
> > of space after space has been manually freed up in the partition! What
> > boggles me even more is that when I do an ls -lh /boot, the file systems
> do
> > not add up to 600M (well 594M) at all.  See below:
> >
> > df -h
> > Filesystem Size  Used Avail Use% Mounted on
> > devtmpfs   2.8G 0  2.8G   0% /dev
> > tmpfs  2.8G 0  2.8G   0% /dev/shm
> > tmpfs  2.8G  8.5M  2.8G   1% /run
> > tmpfs  2.8G 0  2.8G   0% /sys/fs/cgroup
> > /dev/mapper/VolGroup00-LogVolRoot   30G   19G   12G  63% /
> > /dev/sda2  594M  594M 0 100% /boot
> > /dev/sda1  238M  9.7M  229M   5% /boot/efi
> > /dev/mapper/VolGroup00-LogVolHome  3.3G  415M  2.9G  13% /home
> > tmpfs  565M 0  565M   0% /run/user/54321
> > tmpfs  565M 0  565M   0% /run/user/1000
> >
> > ]$ ls -lh /boot
> > total 92M
> > -rw-r--r--  1 root root 179K Dec 12 22:52
> > config-4.14.35-1844.0.7.el7uek.x86_64
> > drwx--  3 root root  16K Dec 31  1969 efi
> > drwx--. 2 root root   21 Feb  8 15:55 grub2
> > -rw---. 1 root root  54M Aug 28 12:31
> > initramfs-0-rescue-0287c4db206d4a9abe14f750b9091a01.img
> > -rw---  1 root root  22M Dec 21 17:24
> > initramfs-4.14.35-1844.0.7.el7uek.x86_64.img
> > -rw-r--r--  1 root root 329K Dec 12 22:52
> > symvers-4.14.35-1844.0.7.el7uek.x86_64.gz
> > -rw-r--r--  1 root root 3.6M Dec 12 22:52
> > System.map-4.14.35-1844.0.7.el7uek.x86_64
> > -rwxr-xr-x. 1 root root 6.1M Aug 28 12:31
> > vmlinuz-0-rescue-0287c4db206d4a9abe14f750b9091a01
> > -rwxr-xr-x  1 root root 7.2M Dec 12 22:52
> > vmlinuz-4.14.35-1844.0.7.el7uek.x86_64
> >
> > I have no idea what is going on here and why the space keeps filling up
> and
> > the VM crashing!  ANY and all help will be greatly appreciated! Thanks!
> >
> > I am running the following kernel:
> > 4.14.35-1844.0.7.el7uek.x86_64
> My stab in the dark is that the system is trying to write a crash /
> rescue image and there is not enough space. du --max-depth 1 is useful too.
> >
> > Thanks!
> >
> > Sean S.
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > https://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos


Hello Rob

Thank you for the reply. What do you recommend I should do to prevent the
crashing? Should I increase the /boot partition's disk space?  I am worried
that it will fill up again randomly like the current one is.. Should I
create a new /boot partition?


Thanks
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] /boot partition running out of space randomly. Please help!

2019-02-12 Thread Sean Son
Hello all

First off, I am running Oracle Linux 7.6 on a Hyper-V 2016 VM for a
customer. I know this is not an Oracle Linux mailling list, but because
Oracle Linux and CentOS are so similar, to an extent, I figured why not ask
on here because someone MIGHT know the answer.. Here is the issue.  I have
a 600MB /boot partition allocated on a UEFI system. The /boot/efi partition
is on a separate EFI partition.  Recently, I noticed that this system has
been crashing every few minutes and when I checked the disk space, I
noticed that the /boot partition has zero free space available.  I removed
all of the old kernels and left the running kernel in place, in hopes that
will free up some space. It freed up about 50MB or so, but  then the system
would crash again. After I would reboot the VM to bring the system back up,
I ran a df -h /boot, and the results were reporting ZERO disk space again
for the /boot partition.. It makes absolutely no sense how a partition
which is generally static UNLESS you move something into it, is running out
of space after space has been manually freed up in the partition! What
boggles me even more is that when I do an ls -lh /boot, the file systems do
not add up to 600M (well 594M) at all.  See below:

df -h
Filesystem Size  Used Avail Use% Mounted on
devtmpfs   2.8G 0  2.8G   0% /dev
tmpfs  2.8G 0  2.8G   0% /dev/shm
tmpfs  2.8G  8.5M  2.8G   1% /run
tmpfs  2.8G 0  2.8G   0% /sys/fs/cgroup
/dev/mapper/VolGroup00-LogVolRoot   30G   19G   12G  63% /
/dev/sda2  594M  594M 0 100% /boot
/dev/sda1  238M  9.7M  229M   5% /boot/efi
/dev/mapper/VolGroup00-LogVolHome  3.3G  415M  2.9G  13% /home
tmpfs  565M 0  565M   0% /run/user/54321
tmpfs  565M 0  565M   0% /run/user/1000

]$ ls -lh /boot
total 92M
-rw-r--r--  1 root root 179K Dec 12 22:52
config-4.14.35-1844.0.7.el7uek.x86_64
drwx--  3 root root  16K Dec 31  1969 efi
drwx--. 2 root root   21 Feb  8 15:55 grub2
-rw---. 1 root root  54M Aug 28 12:31
initramfs-0-rescue-0287c4db206d4a9abe14f750b9091a01.img
-rw---  1 root root  22M Dec 21 17:24
initramfs-4.14.35-1844.0.7.el7uek.x86_64.img
-rw-r--r--  1 root root 329K Dec 12 22:52
symvers-4.14.35-1844.0.7.el7uek.x86_64.gz
-rw-r--r--  1 root root 3.6M Dec 12 22:52
System.map-4.14.35-1844.0.7.el7uek.x86_64
-rwxr-xr-x. 1 root root 6.1M Aug 28 12:31
vmlinuz-0-rescue-0287c4db206d4a9abe14f750b9091a01
-rwxr-xr-x  1 root root 7.2M Dec 12 22:52
vmlinuz-4.14.35-1844.0.7.el7uek.x86_64

I have no idea what is going on here and why the space keeps filling up and
the VM crashing!  ANY and all help will be greatly appreciated! Thanks!

I am running the following kernel:
4.14.35-1844.0.7.el7uek.x86_64


Thanks!

Sean S.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SElinux AVC signull

2019-01-18 Thread Sean
Hi Leon,

I don't have access to a CentOS 6.10 system handy, but it looks like a
policy issue.  If I take you're ausearch output and pipe it to
audit2allow on my CentOS 7.6 system, I get the following:

#= httpd_t ==

# This avc is allowed in the current policy
allow httpd_t httpd_sys_script_t:process signull;

Noting that on my 7.6 system with selinux enforcing with selinux
policy packages at version 3.13.1-229, it notes that your denial would
not happen.  If you don't have it installed policycoreutils-python
provides the audit2allow and audit2why binaries which can help you
generate a policy to avoid this denial if you want.

Also, I often find that to truly diagnose the issue, I need to run the
following:

# semodule --disable_dontaudit --build
# setenforce permissive
# tail -f /var/log/audit/audit.log | grep denied | tee ~/denials.out

... then reproduce the problem, and kill the tail.  The resulting
denials.out file will have a lot of unrelated denials, but if you run
audit2allow against the entire file, you'll be able to determine which
ones are not relevant by the comments produced (much like above where
it told us the "avc is allowed").  You can also use this to generate a
custom policy module for your system.

Sometimes there are denials that are not audited which are relevant to
the problem, which seems problematic to me...that there is a default
set of things that get denied but do not appear in the audit logs.
That's a different conversation though.

Anyway, after the data is collected for the denials.out file you can
reset to your normal operating stance...

# semodule --build
# setenforce enforcing

From: Leon Fauster 
To: CentOS mailing list 
Cc:
Bcc:
Date: Thu, 17 Jan 2019 18:35:23 +0100
Subject: [CentOS] SElinux AVC signull
I have some perl scripts running via CGI to print some monitoring
informations out.

# cat /etc/redhat-release
CentOS release 6.10 (Final)

# getenforce
Enforcing

# LANG=C ausearch -m avc --start today
type=SYSCALL msg=audit(1547733474.941:28): arch=c03e syscall=62
success=no exit=-13 a0=641 a1=0 a2=7f33500079b0 a3=31372f656d6f7268
items=0 ppid=1399 pid=1439 auid=4294967295 uid=48 gid=48 euid=48
suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295
comm="httpd" exe="/opt/rh/httpd24/root/usr/sbin/httpd"
subj=system_u:system_r:httpd_t:s0 key=(null)
type=AVC msg=audit(1547733474.941:28): avc:  denied  { signull } for
pid=1439 comm="httpd" scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:system_r:httpd_sys_script_t:s0 tclass=process


I see a lot of such entries but I don't see any service misbehaviour.
All scripts are running fine.

Any hints how to classify this AVC; "Denied Signull"?
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] high kworker CPU usage in 3.10.0-957 w/ Xorg nouveau driver?

2019-01-09 Thread Sean
Hi all,

I have a number of Gnome/X desktop workstations with NVidia GeForce GT
1030 adapters, dual monitors, Core I7 3770 quad-core hyper-threaded
CPUs, with 32GB of RAM.  Most (haven't checked them all yet) are
exhibiting problems that include significant sluggish-ness with mouse
movement and typing as well as screen rendering problems happening
since upgrading from kernel 3.10.0-862.14.4.el7.x86_64 to
3.10.0-957.1.3.el7.x86_64.  The users have seen this behavior after
logging into Gnome, but with out any additional applications running
(Chrome/Firefox/LibreOffice, etc.).  I can see in top that there are
multiple kworker processes consuming a large amount of CPU time and
unusually high load averages - like 5-7 range on the 5 minute average,
normal load average would be between 1-2 for these users.  At one
point, while troubleshooting with a user, I was logged in remotely
while the user was working on the desktop when it became completely
unresponsive.  /var/log/messages had nouveau messages like:

kernel: nouveau: evo channel stalled
kernel: nouveau :01:00.0: disp: chid 1 mthd  data 
10003000 
kernel: nouveau :01:00.0: DRM: base-1: timeout
kernel: nouveau :01:00.0: DRM: core notifier timeout

Those messages might be meaningless, but they are abundant in the
logs.  For grins before rebooting, I attempted to stop and start GDM.
Both operations seemed successful, I verified all processes owned by
the user were gone, and asked him to log in again, but he reported his
screens still looked like they did before I restarted GDM and that he
didn't have a login screen.

Users are currently booting their systems to the 3.10.862 kernel, and
this problem does not present itself.  I can also add that running the
proprietary nvidia driver (from nvidia.com, not elrepo) version 410.78
does not produce this problem.  I config manage all these desktops
with Puppet and they were all built from by the same kickstart file.
The nvidia driver is not purposefully managed by puppet, I just
happened to be experimenting with it on my workstation.

Before I load the proprietary driver on all the problematic systems, I
was hoping someone on the list might have some insight or suggestions.

Thanks!

--Sean
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] how to implement rate-limiting measures on interfaces using IPTables?

2018-12-19 Thread Sean Son
Hello all

I have been tasked to implement rate-limiting measures on interfaces using
IPTables in RHEL 7.

I know that in order to implement it using FirewallD, I will need to run
the following command:

firewall-cmd --direct --add-rule ipv4 filter IN_public_allow 0 -p tcp -m
limit --limit 25/minute --limit-burst 100 -j ACCEPT

How would I do the same using IPtables?


Thanks!!

Sean
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] NetworkManager, multiple IPs, and selinux...

2018-10-04 Thread Sean
Hello,

I was wondering if any one has seen issues with selinux name_bind denials
that result from having IP:PORT bindings for services to specific IP
addresses managed on an interface under NetworkManager's control?

I do realize that people will probably say stop using NetworkManager, and I
may, but the behavior is strange, and I'd like to have a better
understanding of what's going on.

The config is like so:

# nmcli c mod eth0 ipv4.addresses 192.168.1.10/24,192.168.1.11/24
# nmcli c down eth0
# nmcli c up eth0
# getenforce
Enforcing
# systemctl start httpd
 permission denied binding to 192.168.1.10:443

Apache has two simple IP based VHosts, site1 and site2, with different (and
correct dns records and ssl certs).  I'm snipping the config because I know
the Apache config works.

Listen 443

...

...

I find the denial strange.  I've done some testing such as removing one
VHost's config and adding a NIC to the VM (eth1) and reconfigure to have 1
IP on each NIC and use both Vhosts.  Either way, the selinux denial
disappears and everything works.  All the packaged selinux policy relating
to httpd_t and access to port 443 is correct.

I don't doubt that if I ditched NetworkManager and went for eth0:0 and
eth0:1 for the IP interfaces, all would be well.  I'd just like to see if
anyone has some input on the issue.


--Sean
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Need help with Linux networking interfaces and NIC bonding

2018-10-03 Thread Sean Son
Hello everyone

I am running into some strange issues when configuring networking
interfaces on my physical server running Centos 7.5. Let me give you an
overview of what's going on:

We have a physical server, running CentOS 7.5. This server has one 4 port
NIC and one 2 port NIC and a Dell IDRAC port.  The first port of the 4 port
NIC, em1, is used for Management traffic. The first port of the 2 port NIC,
is used for the second port in the  NIC bond, device p6p2.  The second
port on the 4 port NIC, device em2 is the first, port on the NIC bond.

These interfaces are using Static IPs.

Here is my /etc/sysconfig/network-scripts/ifcfg-em1 file. Please keep in
mind that I have changed the IPs and MAC addresses in the files for
security reasons:

ifcfg-em1:

TYPE="Ethernet"
PROXY_METHOD="none"
BROWSER_ONLY="no"
BOOTPROTO="none"
DEFROUTE="yes"
IPV4_FAILURE_FATAL="no"
IPV6INIT="yes"
IPV6_AUTOCONF="yes"
IPV6_DEFROUTE="yes"
IPV6_FAILURE_FATAL="no"
IPV6_ADDR_GEN_MODE="stable-privacy"
NAME="em1"
UUID="bbb2f9c2-141b-4a99-ab1e-328551aae612"
DEVICE="em1"
ONBOOT="yes"
IPADDR="192.168.56.50"
PREFIX="24"
GATEWAY="192.168.56.1"
DNS1="192.168.126.10"
DNS2="192.168.220.10"
IPV6_PRIVACY="no"
NM_CONTROLLED=no

as for the ifcfg-bond0 (the configuration file for the NIC bond, which is
bond0):

DEVICE=bond0
NAME=bond0
TYPE=Bond
ONBOOT=yes
BOOTPROTO=none
IPADDR=192.168.56.70
PREFIX=24
BONDING_MASTER=yes
BONDING_OPT="mode=1 miimon=100"
TYPE=Ethernet

and the ifcfg-slave1 configuration file, which is the first slave port for
the NIC bond, this corresponds to em2:

DEVICE=em2
HWADDR="c8:2f:87:fg:2a:31"
ONBOOT=yes
TYPE=Ethernet
BOOTPROTO=none
MASTER=bond0
SLAVE=yes

and the ifcfg-slave2 configuration file , which corresponds to the second
slave port for the NIC bond, which is interface p6p2:

DEVICE=p6p2
HWADDR="00:6a:d7:7c:e8:09"
BOOTPROTO=none
ONBOOT=yes
TYPE=Ethernet
MASTER=bond0
SLAVE=yes

I created a custom routing policy for the NIC bond, bond0. Here is the
configuration for the routing  policy:

route-bond0:


192.168.56.0/24 dev bond0 src 192.168.56.70 table t1
default via 192.168.56.1 dev bond0 table t1

and the rule-bond0 file:

table t1 from 192.168.56.70

as for the routing table:

Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse
Iface
0.0.0.0192.168.56.10.0.0.0 UG0  00 bond0
192.168.56.00.0.0.0 255.255.255.0   U 0  00
bond0
192.168.56.00.0.0.0 255.255.255.0   U 0  00 em1
169.254.0.0 0.0.0.0 255.255.0.0 U 1002   00 em1
169.254.0.0 0.0.0.0 255.255.0.0 U 1008   00
bond0



now here is the scenario I am dealing with:

This linux server is used for monitoring purposes. We have Nagios, Cacti
and other tools installed on it. There are a few things I have noticed and
I want help on:

1) Whenever I ping any of the devices on our network, from this server, the
traffic goes out from the management port. I do not want the traffic to go
out of the management port. I want it to go out through the active port of
the NIC bond.  How do I configure the networking so that all primary
network traffic flows to and from the NIC bonded interfaces?  I only want
the management port to be used for SSH purposes and well, management of the
server.

2) I have configured the NIC bond in active-backup mode. I notice that when
I used another computer to do a continuous ping to the NIC bond, and then I
disable one of the slave interfaces of the bond, the ping drops and it does
not failover to the backup slave interface and turn  into the active one.
It also causes any pings to the management  port to drop as well.  Then
when I disable slave2, and enable slave1, the traffic does not fail over to
slave1 and the ping  continuously fails.  It is only when I enable both
slave interfaces and then either restart the networking  using systemctl
restart network, or reboot the server, the networking resumes and the pings
succeed again.  What steps should I take to fix this issue?  Should I even
use active-backup mode with the NIC bond or is there a better mode I should
use?

3) Ive tested the networking, by changing  the VLAN of the NIC bonded
ports, on the switch, to a different VLAN, and it caused the management
port to stop responding to ping. Why is this and how do I fix that if I
decide to one day use two different VLANs for Management and the NIC bond
ports?


Thank you for all of your help in advance!

Sean
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox 60.0.1.0 ESR Progress?

2018-07-05 Thread Sean
Mr. Hughes,

Thank very much for the update!  That's the kind of info I was looking
for, if an ETA isn't reasonable to ask for.  I can report a summary of
your note to my upstream authorities.  I support both SL7 and C7
workstations, but had not yet seen the update on the sl-devel list.

I appreciate you taking the time to answer this thread!  Thanks for
your hard work!

From: Johnny Hughes 
To: centos@centos.org
Cc:
Bcc:
Date: Thu, 5 Jul 2018 06:16:14 -0500
Subject: Re: [CentOS] Firefox 60.0.1.0 ESR Progress?
On 07/03/2018 09:04 AM, Sean wrote:
> Thanks for the idea, I'm not in a hurry and don't have a desire to
> hand-jam upstream versions of firefox onto desktops.  I just need to
> track progress on the patch release and report an ETA to our cyber
> security team.
>
> I just figured CentOS had a fancy devops CI/CD system somewhere that I
> could keep tabs on to watch what's going on as patches get built,
> tested and published.  Seems like all the cool kids are doing that
> kind of stuff these days.
>
>


OK guys .. Firefox 60 is going to take some time .. likely more for
CentOS-6 than CentOS-7.

They both (C6 and C7 versions) require many non OS tools to build.

For CentOS-7 .. we need the rust-toolset, llvm-toolset, and
devtoolset-7, to get the firefox to build.

For CentOS-6, we need less items (no llvm-toolset required .. all the
rest is required).  But, there is no released source code for the EL6
version of rust-devtoolset upstream.

I am working on this now .. but we had the 6.10 release and the also 32
other items that dropped for CentOS-7 (both of which are now done).

I am not the only one having issues with Firefox-60 (see this thread on
the Scientific Linux list):

https://listserv.fnal.gov/scripts/wa.exe?A2=ind1807=scientific-linux-devel=0=74

I hope to have this working soon .. but. it is not just a build and
release kind of package.

Thanks,
Johnny Hughes
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Firefox 60.0.1.0 ESR Progress?

2018-07-03 Thread Sean
Thanks for the idea, I'm not in a hurry and don't have a desire to
hand-jam upstream versions of firefox onto desktops.  I just need to
track progress on the patch release and report an ETA to our cyber
security team.

I just figured CentOS had a fancy devops CI/CD system somewhere that I
could keep tabs on to watch what's going on as patches get built,
tested and published.  Seems like all the cool kids are doing that
kind of stuff these days.


> From: Alice Wonder 
> To: centos@centos.org
> Cc:
> Bcc:
> Date: Mon, 2 Jul 2018 07:31:20 -0700
> Subject: Re: [CentOS] Firefox 60.0.1.0 ESR Progress?
> On 07/02/2018 06:57 AM, Sean wrote:
> > Is there a way to track CentOS's progress on RHSA-2018-2113?
> >
> > https://access.redhat.com/errata/RHSA-2018:2113
> >
> > Thanks!
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > https://lists.centos.org/mailman/listinfo/centos
> >
>
> This is what I do and it works well, script run as root after
> downloading compiled tarball from upstream.
>
> --
> #!/bin/bash
>
> TMP=`mktemp -d /tmp/ff.`
> mv $1 ${TMP}/
>
> pushd ${TMP}
>
> FFOX=`echo $1 |sed -e s?"\.tar\.bz2"?""?`
>
> tar -jxf ${1}
>
> chown -R root:root firefox
>
> mv firefox /usr/local/${FFOX}
>
> popd
>
> pushd /usr/local
>
> rm -f firefox && ln -s ${FFOX} firefox
>
> popd
>
> rm -rf ${TMP}
> -
>
> $1 is the FireFox downloaded from upstream (compiled)
>
> Installing it as root means I am safe from malware over-writing bits of
> it, but I do have to manually download.
>
> /usr/local/firefox/firefox then starts it - and old versions are
> preserved in case something breaks (I just change which one the
> /usr/local/firefox link points to - though I almost never have to revert)
>
> It's not RPM but there are too many advantages to newer FireFox for me
> to wait.
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Firefox 60.0.1.0 ESR Progress?

2018-07-02 Thread Sean
Is there a way to track CentOS's progress on RHSA-2018-2113?

https://access.redhat.com/errata/RHSA-2018:2113

Thanks!
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: hardware: sanitizing a dead SSD?

2018-05-10 Thread Sean
Probably too late for consideration at this point, but there are Enterprise
Class SSDs available with DoD/NSA certified/approved self encryption
capability.  The concept is that encryption is a hardware feature of the
drive, when you want to dispose of it, you throw away the key.  This allows
vendors to receive broken drives back from GOV/MIL clients securely so that
failure methods can be researched.

Dell and EMC have been presenting this to us at storage briefs for a couple
of years now.

--Sean


On Thu, May 10, 2018 at 8:00 AM <centos-requ...@centos.org> wrote:

> From: m.r...@5-cent.us
> To: CentOS mailing list <centos@centos.org>
> Cc:
> Bcc:
> Date: Wed, 9 May 2018 11:35:21 -0400
> Subject: Re: [CentOS] OT: hardware: sanitizing a dead SSD?
> James Szinger wrote:
> > Disclaimer: My $dayjob is with a government contractor, but I am speaking
> > as  private citizen.
> >
> > Talk to your organization's computer security people.  They will have a
> > standard procedure for getting rid of dead disks.  We on the internet
> > can't > know what they are.  I'm betting it involves some degree of
> paperwork.
> >
> > Around here, I give the disks to my local computer support who in turn
> > give them the institutional disk destruction team.  I also zero-fill the
> disk
> > if possible, but that's not an official requirement.  The disk remains
> > sensitive until the process is complete.
> >
> Federal contractor here, too. (I'm the OP). For disks that work, shred or
> DBAN is what we use. For dead disks, we do the paperwork, and get them
> deGaussed. SSD's are a brand new issue. We haven't had to deal with them
> yet, but it's surely coming, so we might as well figure it out now.
>
>   mark
>
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Will RHSA-2018:0980 hit Centos repos soon?

2018-04-24 Thread Sean
Hi all,

RH published the advisory 2 weeks ago, according to
https://access.redhat.com/errata/RHSA-2018:0980.  The main repo does not
appear to have the packages noted yet -
http://mirror.centos.org/centos/7/updates/x86_64/Packages/

We've been waiting on a few of these bugs to be fixed for some time.  I
don't mean to be impatient, just looking for an ETA.

Thanks for all the great work the team does!
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1600x900 not available

2018-01-11 Thread Sean Smith


On 01/11/2018 12:34 PM, m.r...@5-cent.us wrote:

Sean Smith wrote:


setting my resolution to 1600x900 is a cheesy, yet effective, way to do
get what I need.

...Now if I can just get my touchpad to FRICK'N disable while typing.


If/when you do, *PLEASE* post the solution. If you're a manager, or gamer,
I guess touchpads are great. If you're *typing*, they're dreadful, that's
where the ball of my thumb goes.

 mark



Okay, got the "disable touchpad while typing" thingy working.

Here's what I did:

Install dconf-editor if you haven't already.

Then, from a console (not as su), run:

dconf write /org/gnome/desktop/peripherals/touchpad/disable-while-typing 
true


This seems to have worked for me.

Good luck,

--
Sean


||
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1600x900 not available

2018-01-11 Thread Sean Smith



On 01/10/2018 11:45 AM, Scott Robbins wrote:

On Wed, Jan 10, 2018 at 09:25:04AM -0600, Sean Smith wrote:

I have no idea how.  All I can find is the Hi-DPi settings in Gnome-Tweak
but, of course, it only lets  me choose to scale from "1" to "2" which
makes things way too big.


It's better to not top post if possible.  :)

There is an xrandr scale command as well. If for example, your output is
eDP1 then
xrandr --output eDP1 --scale .8x.8

The smaller the scaling, the larger the size, so I think that .5x.5 wou
be what the tweak tool is offering.


Thanks for the help.

I've got it working now.  What I ended up doing was adding 
video=1600x900 to my boot / kernel command line to test and then 
appended it in my grub menu.


I screwed around with font scaling with Gnome Tweak and also in 
about:config of Firefox and Thunderbird but there was always something 
that looked funny and some webpages didn't come out right.


setting my resolution to 1600x900 is a cheesy, yet effective, way to do 
get what I need.


...Now if I can just get my touchpad to FRICK'N disable while typing.

Sean,



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 1600x900 not available

2018-01-10 Thread Sean Smith
I have no idea how.  All I can find is the Hi-DPi settings in 
Gnome-Tweak but, of course, it only lets  me choose to scale from "1" to 
"2" which makes things way too big.




On 01/10/2018 08:54 AM, Giles Coochey wrote:


Is there a way I can add 1600x900 resolution the list of available 
resolutions in settings-display? 
Bit of a generic answer, and not a solution, but the problem for you 
isn't the resolution, it is the DPI you have set, isn't there a way 
for you to change the DPI without losing out on the quality of the 
screen?

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

se
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] 1600x900 not available

2018-01-10 Thread Sean Smith
My laptop is a Dell XPS-13 running CentOS 7.  It has a 13" 1920x1080 
screen and it's a bit difficult for my mid-40s eyesight.  Fedora and 
Debian, on this laptop, give me the option of choosing 1600x900 which is 
much easier for me to read but CentOS doesn't show this resolution as 
available.


I followed the steps I found in a post on stackexchange using xrandr, 
substituting 1600x900 where applicable and it worked but, once I 
rebooted, it went back to 1920x1080 with no 1600x900 option in 
settings-display.


Is there a way I can add 1600x900 resolution the list of available 
resolutions in settings-display?


Thanks,

Sean



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Strange ABRT error when I try to switch to su

2017-01-30 Thread Sean Son
Hello all

One of my VMs, running RHEL 7, has been giving me the following ABRT error
when I try to login as su Ive seen this error the past three times that
Ive logged in. I know that the VM is using Red Hat,but seeing that
RHEL/CentOS are pretty much the same thing, I figured I should ask the
CentOS mailing list for help. Here is the error:

$ su
Password:
ABRT has detected 1 problem(s). For more info run: abrt-cli list --since
1485781

# abrt-cli list --since 1485781
id b35dcbc9f05781fab04cdd9aca28bbe86a93eace
reason: php-fpm killed by SIGSEGV
time:   Wed 25 Jan 2017 07:44:07 PM EST
cmdline:'php-fpm: pool www' '' '' '' '' '' '' '' '' '' '' '' '' ''
'' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' ''
package:rh-php56-php-fpm-5.6.5-9.el7
uid:48 (apache)
count:  4
Directory:  /var/spool/abrt/ccpp-2017-01-25-19:44:07-47637
Run 'abrt-cli report /var/spool/abrt/ccpp-2017-01-25-19:44:07-47637' for
creating a case in Red Hat Customer Portal

id 27190e6535600b6fc4bc97de457b302a10698b95
reason: WARNING: at lib/vsprintf.c:1734 vsnprintf+0x691/0x6a0()
time:   Mon 01 Aug 2016 09:14:44 AM EDT
cmdline:BOOT_IMAGE=/vmlinuz-3.10.0-327.22.2.el7.x86_64
root=/dev/mapper/VolGroup00-LogVol00 ro rd.lvm.lv=VolGroup00/LogVol00
vconsole.keymap=us vconsole.font=latarcyrheb-sun16 crashkernel=auto audit=1
rhgb quiet biosdevname=0 net.ifnames=0 LANG=en_US.UTF-8
package:kernel
uid:0 (root)
count:  1
Directory:  /var/spool/abrt/oops-2016-08-01-09:14:44-8775-0
Reported:   cannot be reported



What is this error trying to say and how do I fix the issue?


All help is greatly appreciated!


Thank you

Sean
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Need help getting two NICs to work on CentOS 7

2016-11-16 Thread Sean Son
On Tue, Nov 15, 2016 at 10:55 AM, Gordon Messmer <gordon.mess...@gmail.com>
wrote:

> On 11/15/2016 06:07 AM, Sean Son wrote:
>
>> I have no network connectivity even
>> when I restart the network service.  Should I reenable NetworkManager now?
>>
>
>
> Yeah, the switch is just a test to see if the problem is specific to
> NetworkManager.  It seems that you have other problems as well.
>
> Before you do that, post the output of the following:
>
> ip route show
>
> ip route show table 300
>
> ip route show table 301
>
> ip rule show
>
> cat /etc/sysconfig/network-scripts/ifcfg-eth0
>
> cat /etc/sysconfig/network-scripts/route-eth0
>
> cat /etc/sysconfig/network-scripts/rule-eth0
>
> cat /etc/sysconfig/network-scripts/ifcfg-eth1
>
> cat /etc/sysconfig/network-scripts/route-eth1
>
> cat /etc/sysconfig/network-scripts/rule-eth1
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


Hello

I think i figured it out.   I had forgotten to install
NetworkManager-config-routing-rules and then enable and start the
NetworkManager-dispatcher service.   I tried that on a different test
machine and I am able to ping both of the IPs from another machine just
fine. Only a few things I have noticed:   No matter how many times I
restart the NetworkManager-dispatcher service, if I reboot the system, and
run a systemctl status NetworkManager-dispatcher.service, the service shows
as Inactive (Dead) even though it has been enabled.   Also whenever I
reboot the VM, after logging into the GUI, I get a pop up that says failed
to activate network connection , yet I still have network connectivity.
Any ideas on what I can do to fix these things?  Also overall, because I am
using a static IP config for both NICs, is it better to just disable
NetworkManager and use network scripts instead?



Thanks!!
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Need help getting two NICs to work on CentOS 7

2016-11-15 Thread Sean Son
On Mon, Nov 14, 2016 at 5:30 PM, Gordon Messmer <gordon.mess...@gmail.com>
wrote:

> On 11/14/2016 12:47 PM, Sean Son wrote:
>
>> Any ideas on what
>> I am doing wrong here?
>>
>
>
> Nothing obvious.  Since your interfaces have static configurations, I'd
> suggest turning off NetworkManager and turning on the "network" service to
> determine whether or not that works correctly after a reboot.
>
> Assuming it does, fixing the issue might be as simple as getting
> NetworkManager to not rename one interface to "wired connection 1".
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


Hello Gordon

Thank you for your response.  I disabled NetworkManager and started the
network service, then I rebooted the VM and now 'ip rule show' has the
rules for both interfaces showing but I have no network connectivity even
when I restart the network service.  Should I reenable NetworkManager now?
How would I go about getting NetworkManager to stop creating new Interface
files and naming them Wired_connection-*?


Thanks!
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Need help getting two NICs to work on CentOS 7

2016-11-14 Thread Sean Son
On Tue, Nov 8, 2016 at 8:02 AM, Boris Epstein <borepst...@gmail.com> wrote:

> Hello there,
>
> What is the hypervisor that hosts the VM? What does ifconfig show on it?
>
> Boris.
>
> On Mon, Nov 7, 2016 at 4:36 PM, Gordon Messmer <gordon.mess...@gmail.com>
> wrote:
>
> > On 11/06/2016 11:00 PM, Sean Son wrote:
> >
> >> How do I
> >> configure the networking so that both IPs are pingable and the VM is
> >> reachable via both IPs?
> >>
> >
> >
> > You need one rule file per interface, which directs traffic out the
> > appropriate interface based on the source address of the packet:
> >
> > https://blogs.oracle.com/networking/entry/advance_
> routing_for_multi_homed
> >
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > https://lists.centos.org/mailman/listinfo/centos
> >
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


Hello all

Thank you for the replies.  I ran into  some issues with the policy based
routing which I will explain in a few.  First off to answer each one of
your questions:

Digimer: No I didnt take a look at IPTables

Peter Brady: Thank you for the example, I tried that but it failed and I
will explain in a minute.

Frank Cox : That works but how do I make it persistent across reboots?

Boris Epstein:  I am using Hyper-V and its getting annoying lol


Ok so here is how I have set everything up:

my /etc/iproute2/rt_tables:


#
# reserved values
#
255 local
254 main
253 default
0   unspec
#
# local
#
#1  inr.ruhep
300 NIC1
310 NIC2

my /etc/sysconfig/network-scripts/route-eth0 file:

168.87.147.0/24 dev eth0 table 300
default via 168.87.147.1 dev eth0 table 300

/etc/sysconfig/network-scripts/route-eth1 file:

10.20.50.0/24 dev eth1 table 310
default via 10.20.50.1 dev eth1 table 310

My /etc/sysconfig/network-scripts/rule-eth0:

from 168.87.147.33/32 table 300
to 168.87.147.33 table 300

My /etc/sysconfig/network-scripts/rule-eth1:

from 10.20.50.90/32 table 310
to 10.20.50.90 table 310


now after implementing this and restarting NetworkManager,  when I run 'ip
rule list', I get the following:

0:  from all lookup local
32764:  from all to 10.20.50.90 lookup NIC2
32765:  from 10.20.50.90 lookup NIC2
32766:  from all lookup main
32767:  from all lookup default


and when i run 'ip route' , i get the following:

default via 168.87.147.1 dev eth0  proto static  metric 1024
10.20.50.0/24 dev eth1  proto kernel  scope link  src 10.20.50.90
168.87.147.0/24 dev eth0  proto kernel  scope link  src 168.87.147.33



yet when I try to ping from another server to 10.20.50.90 it will not ping
at all. Also, whenever I reboot the VM, eth1 switches over to DHCP and I
lose my IP configuration. After I reset the IP Configuration back to Manual
and reenter the IP, Centos creates a new interface file called
ifcfg-Wired_Connection-1 and places the IP configuration for the interface
into that file. Both virtual NICs are set to Static Mac Addresses, so I
dont know why it keeps creating another interface file.  Any ideas on what
I am doing wrong here? All help is greatly appreciated!


Thanks!
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Need help getting two NICs to work on CentOS 7

2016-11-06 Thread Sean Son
Hello all

Here is the scenario:  We have a mail server VM which currently has two
virtual NICs attached to it. One NIC is has an IP on a subnet with a
default gateway defined and the other NIC has an IP on a different subnet
with a different gateway on a different VLAN defined. Now when I activate
both NICs, and run an ifconfig -a, I see that both IP addresses are
showing. Now here is the problem. When I ping the VM, the first NIC's IP is
not pingable at all, but the second NIC's IP is pingable. How do I
configure the networking so that both IPs are pingable and the VM is
reachable via both IPs? Please let me know what I may be doing wrong!


Thank you!

Sean
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Mounting NFS subdirectories individually or just the parent?

2016-07-27 Thread Sean Brisbane
There is a slight performance related reason for exporting disk partitions
individually, the performance boost is server-side as Paul says.  The
advantage is that the no_subtree_check can be used without any additional
security risk.

It is probably the case that the /export/base/a is a partition, is exported
with no_subtree_check, and therefore there is a small performance boost.

Preventing server side mount point traversal can also form part of a
security mechanism if servers have different security options for different
mount points, but in this case mounting server:/export/base wouldn't give
you the same client view of the filesystem tree as mounting each
individually if it worked at all.

Cheers,
Sean

On 27 July 2016 at 23:21, Paul Heinlein <heinl...@madboa.com> wrote:

> On Wed, 27 Jul 2016, Frank Thommen wrote:
>
> Hello,
>>
>> does it in any respect (throughput/performance, cpu load, I/O load,
>> resilience, ...) matter, if one mounts subdirectories of an NFS (v3) export
>> into separate directories or if one just mounts the parent directory?
>>
>> I.e. like this:
>>
>>  server: /export/base/a -> /mnt/a
>>  server: /export/base/b -> /mnt/b
>>  server: /export/base/c -> /mnt/c
>>  server: /export/base/d -> /mnt/d
>>  server: /export/base/e -> /mnt/e
>>
>> or simply like this:
>>
>>  server:/export/base   -> /mnt
>>
>
> Performance wise, any bottleneck will almost certainly be tied to the
> disks on the back end, not the nfs process itself.
>
> There are a couple good reasons for splitting up the mounts:
>
> 1. They can have different export restrictions (e.g., for different
>client hosts, ro vs. rw permissions, user squashing).
>
> 2. /base/[a-e] live on different RAID arrays and might benefit from
>different management cycles; that'd also be a case where multiple
>exports might be a good idea. That said, I've never managed an
>exported filesystem consisting of different arrays; we've always
>exported at the RAID level or below.
>
> --
> Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp via another server

2016-06-13 Thread Sean Brisbane
Hi,

This is fairly common. I would look into the use of a proxy command to do
exactly what you ask. In addition, though not strictly necessary, I also
would generally recommend rsync rather than scp*. Both of these are
documented on my page here:

http://www2.physics.ox.ac.uk/it-services/central-ssh-access

Its got an Oxford Physics specific slant to it but hopefully its helpful.

*I don't think rsync has any issue when the remote machine prints things
either.

Sean
On 13 Jun 2016 7:26 pm, "H" <age...@meddatainc.com> wrote:

> On June 12, 2016 8:51:42 PM CEST, cpol...@surewest.net wrote:
> >On 2016-06-12 19:07, H wrote:
> >> On 06/12/2016 05:21 PM, J Martin Rushton wrote:
> >> > -BEGIN PGP SIGNED MESSAGE-
> >> > Hash: SHA1
> >> >
> >> > $ scp svr2:/path/to/source svr1:/path/to/dest
> >> >
> >> > You'll get twice the network traffic since the copy is running on
> >your
> >> > workstattoin (or whatever).
> >> >
> >> > On 12/06/16 15:40, H wrote:
> >> > > I normally use ssh to log into a remote server, change directory
> >> > > and then use scp from there to copy files from another remote
> >> > > server to the first one.
> >> > >
> >> > > Now the first server has been hit by continuous error correction
> >> > > messages from the ECC controller, all of which are corrected, and
> >I
> >> > > am unable to get a command line to issue the required commands to
> >> > > change directory and then run scp from the other server. I have
> >no
> >> > > problems, however, getting into the first server - except for
> >being
> >> > > drowned by the error correction messages and the server seems to
> >be
> >> > > running "fine".
> >> > >
> >> > > Until I am able to get to the server and investigate, is it
> >> > > possible to accomplish the above on a single command line, thus
> >> > > avoiding seeing the error messages? I should add that both the
> >> > > first and second server are set up to accept keys and not
> >passwords
> >> > > so at least I don't have to worry about that.
> >
> >Try changing kernel console log level to 0, possibly:
> >
> >   echo '0 0 0 0' > /proc/sys/kernel/printk
> >
> >should take effect instantly. You _might_ be able to do this
> >remotely via ssh. Also possibly can do via magic sysrq + 0.
> >
> >(see: RHEL 6 Deployment Guide (rev 3.1 2011-05-19) Appendix C
> >pp.537-538)
> >
> >HTH, HAND,
> >--
> >Charles Polisher
> >
> >___
> >CentOS mailing list
> >CentOS@centos.org
> >https://lists.centos.org/mailman/listinfo/centos
>
> Tried it but did not work since I am not root...
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Cannot figure out what this segfault message means. Please help!

2016-05-11 Thread Sean Son
Hello all

I installed MySQL 5.7 using the Mysql community YUM repository and I also
installed Tomcat 8 from tomcat.apache.org. The installations went fine but
ive been noticing that the VM,which is running CentOS 7.2, has been
freezing periodically. This morning when I checked the VM i saw the
following segfault message:

 kernel:systemd[1]: segfault at  ip  sp
7ffde89aa040 error 15

and

 kernel:systemd[1]: segfault at fe0f ip 7f96bdd021ad sp
7ffde89a8370 error 5 in systemd[7f96bdc2a000+146000]

how do I interpret these error messages and are there any bug fixes out
there for these errors? I am using kernel: 3.10.0-327.13.1.el7.x86_64.  The
VM is running on Hyper-V 2012.

Thank you for all of your help!
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS-virt] Multiple Questions: Xen4CentOS

2013-08-19 Thread Duffy, Sean W
Hi,

Trying to get a handle on the 'not included' aspects of Xen4CentOS.

Anyone care to share their experiences with xm vs virtinstall vs virt-manage.  
Currently I'm running one xm create config to launch a CentOS cd based 
kickstart install, then I use a second xm create config to run the created 
systems.

Thoughts on pvgrub and running unmodified kernels from within the pv guest.  Is 
there a set of modifications that need to be run in the guest system to work 
reliably?

Best practices for using encrypted lv's vs img files.  Clone vs backup, 
performance issues etc.

Thanks,

Sean

Every good work of software starts by scratching a developer's personal itch. 
-- Eric Raymond


The information in this e-mail may be privileged and confidential, intended 
only for the use of the addressee(s) above. Any unauthorized use or disclosure 
of this information is prohibited. If you have received this e-mail by mistake, 
please delete it and immediately contact the sender.

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS] find with -mtime and -print0 = inaccurate results

2012-10-25 Thread Sean Carolan
If I run this:

find /path/to/files/ -type f -mtime -2 -name *.xml.gz

I get the expected results, files with modify time less than two days old.

But, if I run it like this, with the print0 flag:

find /path/to/files/ -print0 -type f -mtime -2 -name *.xml.gz

I get older files included as well.  Anyone know why?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] find with -mtime and -print0 = inaccurate results

2012-10-25 Thread Sean Carolan
 Order of operations
   find /path/to/files/ -type f -mtime -2 -name *.xml.gz -print0

Thanks!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Rsync - include only files containing matching string

2012-10-17 Thread Sean Carolan
I have a string, 2012_10_16; let's call this $YESTERDAY

How can I rsync a file tree from a remote machine to the local one,
including *only* filenames that contain the matching string?  I've
read the man page and googled around but can't seem to get the syntax
right.  I either end up syncing all the files, or none of them.
Here's how the code looks now (I will remove the dry run once it is
working):

rsync -avz --dry-run --include=*$YESTERDAY* remotehost:remotedir/
localdir/transfer/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Gradually adjust NTP sync over time?

2012-09-04 Thread Sean Carolan
Suppose you have server A and server B.  Server B is running 60
seconds too fast, while server A is accurate.  Is there a way to
gradually move server B's time back into sync with server A, without
making a drastic, immediate change to the clock?  In other words, we
would like to 'smear' the difference across several hours or days to
ensure there are no drastic changes in timestamps, etc.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Gradually adjust NTP sync over time?

2012-09-04 Thread Sean Carolan
 This is already how ntpd works.  When you first start the service
 (usually upon reboot), it will use 'ntpdate' to do a hard set of the
 clock, then ntpd picks up and adjusts the clock back and forth to keep
 it correct.

My understanding was that ntpd will use slewing for adjustments of
less than ~120ms or so, but for adjustments between 120ms and 17
minutes it will use stepping instead, making an abrupt and immediate
adjustment of the entire delta.

What I'm trying to avoid is abruptly resetting the clock from 12:06 to
12:05 all at once.  Instead we want to slowly turn the clock back that
one minute, but spread the changes across several hours or days.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Gradually adjust NTP sync over time?

2012-09-04 Thread Sean Carolan
 What I'm trying to avoid is abruptly resetting the clock from 12:06 to
 12:05 all at once.  Instead we want to slowly turn the clock back that
 one minute, but spread the changes across several hours or days.

I think the -x option may be our solution; I R'd the FM and it says:

...If the -x option is included on the command line, the clock will
never be stepped and only slew corrections will be used.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Optimizing grep, sort, uniq for speed

2012-06-28 Thread Sean Carolan
This snippet of code pulls an array of hostnames from some log files.
It has to parse around 3GB of log files, so I'm keen on making it as
efficient as possible.  Can you think of any way to optimize this to
run faster?

HOSTS=()
for host in $(grep -h -o [-\.0-9a-z][-\.0-9a-z]*.com ${TMPDIR}/* |
sort | uniq); do
HOSTS+=($host)
done
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Optimizing grep, sort, uniq for speed

2012-06-28 Thread Sean Carolan
 *sigh*
 awk is not cut. What you want is
 awk '{if (/[-\.0-9a-z][-\.0-9a-z]*.com/) { print $9;}}' | sort -u

 No grep needed; awk looks for what you want *first* this way.

Thanks, Mark.  This is cleaner code but it benchmarked slower than awk
then grep.

real3m35.550s
user2m7.186s
sys 0m27.793s

I'll run it a few more times to make sure that it wasn't some other
process slowing it down.

I really need to brush up some more on my awk skills!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Optimizing grep, sort, uniq for speed

2012-06-28 Thread Sean Carolan
 *sigh*
 awk is not cut. What you want is
 awk '{if (/[-\.0-9a-z][-\.0-9a-z]*.com/) { print $9;}}' | sort -u

I ended up using this construct in my code; this one fetches out
servers that are having issues checking in with puppet:

awk '{if (/Could not find default node or by name with/) { print
substr($15, 2, length($15)-2);}}' ${TMPDIR}/* | sort -u

Thanks again, your knowledge and helpfulness is much appreciated.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] sar -n DEV does not show bonded interfaces

2012-02-08 Thread Sean Carolan
Anyone know how to get statistics on bonded interfaces?  I have a
system that does not use eth0-3, rather we have bond0, bond1, bond2.
The members of each bond are not eth0-3, rather they are eth6, eth7,
etc.  I didn't see anything in the man page about forcing sar to
collect data on specific network interfaces.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sar -n DEV does not show bonded interfaces

2012-02-08 Thread Sean Carolan
 Anyone know how to get statistics on bonded interfaces?  I have a
 system that does not use eth0-3, rather we have bond0, bond1, bond2.
 The members of each bond are not eth0-3, rather they are eth6, eth7,
 etc.  I didn't see anything in the man page about forcing sar to
 collect data on specific network interfaces.

Oops, you can disregard this one...user error.  I was looking at the
wrong host.  Nothing to see here, please move along  ;-)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Convert RTF to ANSI color codes

2011-11-10 Thread Sean Carolan
Anyone have a script or utility to convert an RTF file to ANSI?  The
main idea here is to preserve the color codes that are specified in
the RTF file, so they can be displayed easily in a terminal window.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] offline root lvm resize

2011-07-31 Thread Sean Hart
On Sat, Jul 30, 2011 at 1:00 PM, Sean Hart teve...@gmail.com wrote:
 On Sat, Jul 30, 2011 at 6:40 PM, Sean Hart teve...@gmail.com wrote:
 On Sat, Jul 30, 2011 at 7:40 AM, Alexander Dalloz ad+li...@uni-x.org wrote:
 Am 30.07.2011 10:37, schrieb Sean Hart:
 So here goes...
 First some back story
      -Centos 5 with latest updates as of yesterday. kernel is
 2.6.18-238.19.1.el5
      -setup is raid 1 for /boot and lvm over raid6 for everything else

      -  The / partition (lvm RootVol) had run out of room... (100%
 full, things where falling appart...)

 I resized the root volume (from 20GiB to 50GiB). This was done from a
 fedora 15 livecd, seemed like a better idea than doing it on a live
 system at the time After the resize the content of all the lvs
 could be mounted and all data was still there (all this from within
 fedora).

 You would better have used the CentOS 5 install media to run into rescue
 mode and then to chroot into the system, given you felt better to do an
 offline resizing. Though online resizing (increasing an LV) is trouble
 free from my experience. Well, if / is completely full the offline route
 may indeed be better.

 The problem is when i try to reboot into centos as the root volume
 cannot be found.

 boot message goes as follows

 ...
 No Volume groups found
 Volume Group RaidVolGrp not found
 ...
 Kernel panic


 the UUID's have not changed, but there is definitely a missing link,
 probably something dumb...

 I would greatly appreciate if anyone could help point me in the right
 direction..

 a bit more info

 # lvscan
   ACTIVE            '/dev/RaidVolGrp/RootVol' [50.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/HomeVol' [250.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/SwapVol' [2.44 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/MusicVol' [350.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/VideoVol' [350.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/PicturesVol' [300.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/MiscVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/ShareddocVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/VMVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/TorrentVol' [50.00 GiB] inherit

 That is output from running the Fedora LiveCD?

 Boot up with the CentOS 5 DVD into rescue mode, let it detect the
 existing LVMs. Go into /etc/lvm/backup and validate the info that's
 saved there and to check what CentOS sees.

 sh

 Alexander

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


 Ok, thanks a lot for the reply

 I believe this is the relevant part of /etc/lvm/backup
 
 RaidVolGrp {
        id = gL5X13-q4c8-d8XJ-x6Qc-m36S-eCfp-LKnvIW
        seqno = 22
        status = [RESIZEABLE, READ, WRITE]
        flags = []
        extent_size = 65536             # 32 Megabytes
        max_lv = 0
        max_pv = 0
        metadata_copies = 0

        physical_volumes {

                pv0 {
                        id = BpXoKc-pQYn-zVkU-7HyH-IKLw-0IX2-Ygm2HJ
                        device = /dev/md1     # Hint only

                        status = [ALLOCATABLE]
                        flags = []
                        dev_size = 7805081216 # 3.63452 Terabytes
                        pe_start = 384
                        pe_count = 119096       # 3.63452 Terabytes
                }
        }

        logical_volumes {

                RootVol {
                        id = AWstlr-xw8t-FNTu-FsEA-YUxi-updp-0HfKtr
                        status = [READ, WRITE, VISIBLE]
                        flags = []
                        segment_count = 1

                        segment1 {
                                start_extent = 0
                                extent_count = 625      # 19.5312 Gigabytes

                                type = striped
                                stripe_count = 1        # linear
                                stripes = [
                                        pv0, 16250
                                ]
                        }
                }
 #

 And this is what i get when i run lvdisplay from the centos live-cd
 lvdisplay
  --- Logical volume ---
  LV Name                /dev/RaidVolGrp/RootVol
  VG Name                RaidVolGrp
  LV UUID                AWstlr-xw8t-FNTu-FsEA-YUxi-updp-0HfKtr
  LV Write Access        read/write
  LV Status              available
  # open                 1
  LV Size                50.00 GB
  Current LE             1600
  Segments               2
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     4096
  Block device           253:2

 .

 ##
 It looks like what has changes is the segment count (went from 1 to 2
 segments) for the logical volume RootVol (and also

[CentOS] offline root lvm resize

2011-07-30 Thread Sean Hart
So here goes...
First some back story
 -Centos 5 with latest updates as of yesterday. kernel is
2.6.18-238.19.1.el5
 -setup is raid 1 for /boot and lvm over raid6 for everything else

 -  The / partition (lvm RootVol) had run out of room... (100%
full, things where falling appart...)

I resized the root volume (from 20GiB to 50GiB). This was done from a
fedora 15 livecd, seemed like a better idea than doing it on a live
system at the time After the resize the content of all the lvs
could be mounted and all data was still there (all this from within
fedora).
The problem is when i try to reboot into centos as the root volume
cannot be found.

boot message goes as follows

...
No Volume groups found
Volume Group RaidVolGrp not found
...
Kernel panic


the UUID's have not changed, but there is definitely a missing link,
probably something dumb...

I would greatly appreciate if anyone could help point me in the right
direction..

a bit more info

# lvscan
  ACTIVE'/dev/RaidVolGrp/RootVol' [50.00 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/HomeVol' [250.00 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/SwapVol' [2.44 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/MusicVol' [350.00 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/VideoVol' [350.00 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/PicturesVol' [300.00 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/MiscVol' [60.00 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/ShareddocVol' [60.00 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/VMVol' [60.00 GiB] inherit
  ACTIVE'/dev/RaidVolGrp/TorrentVol' [50.00 GiB] inherit

sh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] offline root lvm resize

2011-07-30 Thread Sean Hart
On Sat, Jul 30, 2011 at 7:40 AM, Alexander Dalloz ad+li...@uni-x.org wrote:
 Am 30.07.2011 10:37, schrieb Sean Hart:
 So here goes...
 First some back story
      -Centos 5 with latest updates as of yesterday. kernel is
 2.6.18-238.19.1.el5
      -setup is raid 1 for /boot and lvm over raid6 for everything else

      -  The / partition (lvm RootVol) had run out of room... (100%
 full, things where falling appart...)

 I resized the root volume (from 20GiB to 50GiB). This was done from a
 fedora 15 livecd, seemed like a better idea than doing it on a live
 system at the time After the resize the content of all the lvs
 could be mounted and all data was still there (all this from within
 fedora).

 You would better have used the CentOS 5 install media to run into rescue
 mode and then to chroot into the system, given you felt better to do an
 offline resizing. Though online resizing (increasing an LV) is trouble
 free from my experience. Well, if / is completely full the offline route
 may indeed be better.

 The problem is when i try to reboot into centos as the root volume
 cannot be found.

 boot message goes as follows

 ...
 No Volume groups found
 Volume Group RaidVolGrp not found
 ...
 Kernel panic


 the UUID's have not changed, but there is definitely a missing link,
 probably something dumb...

 I would greatly appreciate if anyone could help point me in the right
 direction..

 a bit more info

 # lvscan
   ACTIVE            '/dev/RaidVolGrp/RootVol' [50.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/HomeVol' [250.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/SwapVol' [2.44 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/MusicVol' [350.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/VideoVol' [350.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/PicturesVol' [300.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/MiscVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/ShareddocVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/VMVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/TorrentVol' [50.00 GiB] inherit

 That is output from running the Fedora LiveCD?

 Boot up with the CentOS 5 DVD into rescue mode, let it detect the
 existing LVMs. Go into /etc/lvm/backup and validate the info that's
 saved there and to check what CentOS sees.

 sh

 Alexander

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


Ok, thanks a lot for the reply

I believe this is the relevant part of /etc/lvm/backup

RaidVolGrp {
id = gL5X13-q4c8-d8XJ-x6Qc-m36S-eCfp-LKnvIW
seqno = 22
status = [RESIZEABLE, READ, WRITE]
flags = []
extent_size = 65536 # 32 Megabytes
max_lv = 0
max_pv = 0
metadata_copies = 0

physical_volumes {

pv0 {
id = BpXoKc-pQYn-zVkU-7HyH-IKLw-0IX2-Ygm2HJ
device = /dev/md1 # Hint only

status = [ALLOCATABLE]
flags = []
dev_size = 7805081216   # 3.63452 Terabytes
pe_start = 384
pe_count = 119096   # 3.63452 Terabytes
}
}

logical_volumes {

RootVol {
id = AWstlr-xw8t-FNTu-FsEA-YUxi-updp-0HfKtr
status = [READ, WRITE, VISIBLE]
flags = []
segment_count = 1

segment1 {
start_extent = 0
extent_count = 625  # 19.5312 Gigabytes

type = striped
stripe_count = 1# linear
stripes = [
pv0, 16250
]
}
}
#

And this is what i get when i run lvdisplay from the centos live-cd
lvdisplay
  --- Logical volume ---
  LV Name/dev/RaidVolGrp/RootVol
  VG NameRaidVolGrp
  LV UUIDAWstlr-xw8t-FNTu-FsEA-YUxi-updp-0HfKtr
  LV Write Accessread/write
  LV Status  available
  # open 1
  LV Size50.00 GB
  Current LE 1600
  Segments   2
  Allocation inherit
  Read ahead sectors auto
  - currently set to 4096
  Block device   253:2

.

##
It looks like what has changes is the segment count (went from 1 to 2
segments) for the logical volume RootVol (and also the total number
of segments of pv0 has changed from 22 to 23 i suppose)


pvdisplay fom centos live-cd
Scanning for physical

Re: [CentOS] offline root lvm resize

2011-07-30 Thread Sean Hart
On Sat, Jul 30, 2011 at 6:40 PM, Sean Hart teve...@gmail.com wrote:
 On Sat, Jul 30, 2011 at 7:40 AM, Alexander Dalloz ad+li...@uni-x.org wrote:
 Am 30.07.2011 10:37, schrieb Sean Hart:
 So here goes...
 First some back story
      -Centos 5 with latest updates as of yesterday. kernel is
 2.6.18-238.19.1.el5
      -setup is raid 1 for /boot and lvm over raid6 for everything else

      -  The / partition (lvm RootVol) had run out of room... (100%
 full, things where falling appart...)

 I resized the root volume (from 20GiB to 50GiB). This was done from a
 fedora 15 livecd, seemed like a better idea than doing it on a live
 system at the time After the resize the content of all the lvs
 could be mounted and all data was still there (all this from within
 fedora).

 You would better have used the CentOS 5 install media to run into rescue
 mode and then to chroot into the system, given you felt better to do an
 offline resizing. Though online resizing (increasing an LV) is trouble
 free from my experience. Well, if / is completely full the offline route
 may indeed be better.

 The problem is when i try to reboot into centos as the root volume
 cannot be found.

 boot message goes as follows

 ...
 No Volume groups found
 Volume Group RaidVolGrp not found
 ...
 Kernel panic


 the UUID's have not changed, but there is definitely a missing link,
 probably something dumb...

 I would greatly appreciate if anyone could help point me in the right
 direction..

 a bit more info

 # lvscan
   ACTIVE            '/dev/RaidVolGrp/RootVol' [50.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/HomeVol' [250.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/SwapVol' [2.44 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/MusicVol' [350.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/VideoVol' [350.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/PicturesVol' [300.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/MiscVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/ShareddocVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/VMVol' [60.00 GiB] inherit
   ACTIVE            '/dev/RaidVolGrp/TorrentVol' [50.00 GiB] inherit

 That is output from running the Fedora LiveCD?

 Boot up with the CentOS 5 DVD into rescue mode, let it detect the
 existing LVMs. Go into /etc/lvm/backup and validate the info that's
 saved there and to check what CentOS sees.

 sh

 Alexander

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


 Ok, thanks a lot for the reply

 I believe this is the relevant part of /etc/lvm/backup
 
 RaidVolGrp {
        id = gL5X13-q4c8-d8XJ-x6Qc-m36S-eCfp-LKnvIW
        seqno = 22
        status = [RESIZEABLE, READ, WRITE]
        flags = []
        extent_size = 65536             # 32 Megabytes
        max_lv = 0
        max_pv = 0
        metadata_copies = 0

        physical_volumes {

                pv0 {
                        id = BpXoKc-pQYn-zVkU-7HyH-IKLw-0IX2-Ygm2HJ
                        device = /dev/md1     # Hint only

                        status = [ALLOCATABLE]
                        flags = []
                        dev_size = 7805081216 # 3.63452 Terabytes
                        pe_start = 384
                        pe_count = 119096       # 3.63452 Terabytes
                }
        }

        logical_volumes {

                RootVol {
                        id = AWstlr-xw8t-FNTu-FsEA-YUxi-updp-0HfKtr
                        status = [READ, WRITE, VISIBLE]
                        flags = []
                        segment_count = 1

                        segment1 {
                                start_extent = 0
                                extent_count = 625      # 19.5312 Gigabytes

                                type = striped
                                stripe_count = 1        # linear
                                stripes = [
                                        pv0, 16250
                                ]
                        }
                }
 #

 And this is what i get when i run lvdisplay from the centos live-cd
 lvdisplay
  --- Logical volume ---
  LV Name                /dev/RaidVolGrp/RootVol
  VG Name                RaidVolGrp
  LV UUID                AWstlr-xw8t-FNTu-FsEA-YUxi-updp-0HfKtr
  LV Write Access        read/write
  LV Status              available
  # open                 1
  LV Size                50.00 GB
  Current LE             1600
  Segments               2
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     4096
  Block device           253:2

 .

 ##
 It looks like what has changes is the segment count (went from 1 to 2
 segments) for the logical volume RootVol (and also the total number
 of segments of pv0 has changed from 22 to 23 i suppose

[CentOS] Variable assigned to grep output - missing letter n!

2011-07-20 Thread Sean Carolan
This is kind of odd.

[scarolan@host:~]$ cat loremipsum.txt
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec quis
ipsum sed elit laoreet malesuada. Quisque rhoncus dui vitae eros
euismod fermentum sollicitudin sem scelerisque. Nulla facilisi.
Maecenas mollis pulvinar euismod. Duis viverra pharetra turpis eget
feugiat. Nulla facilisi. Nullam facilisis, felis vitae lacinia
fermentum, enim erat placerat erat, vel imperdiet lorem velit et
ligula. Nam congue est in nisl lacinia lobortis. Vivamus elementum
lacinia sodales. Curabitur commodo risus tincidunt augue pulvinar
vehicula. Morbi eget velit sollicitudin nibh porta molestie. Maecenas
in augue id quam ullamcorper rutrum.

[scarolan@host:~]$ vi loremipsum.txt
[scarolan@host:~]$ myvar=$(grep lorem loremipsum.txt)
[scarolan@host:~]$ echo $myvar
Lorem ipsum dolor sit amet, co sectetur adipisci g elit. Do ec quis
ipsum sed elit laoreet malesuada. Quisque rho cus dui vitae eros
euismod ferme tum sollicitudi  sem scelerisque. Nulla facilisi. Maece
as mollis pulvi ar euismod. Duis viverra pharetra turpis eget feugiat.
Nulla facilisi. Nullam facilisis, felis vitae laci ia ferme tum, e im
erat placerat erat, vel imperdiet lorem velit et ligula. Nam co gue
est i   isl laci ia lobortis. Vivamus eleme tum laci ia sodales.
Curabitur commodo risus ti cidu t augue pulvi ar vehicula. Morbi eget
velit sollicitudi   ibh porta molestie. Maece as i  augue id quam
ullamcorper rutrum.

Where did all the letter n's go?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Variable assigned to grep output - missing letter n!

2011-07-20 Thread Sean Carolan
2011/7/20 Lamar Owen lo...@pari.edu:
 On Wednesday, July 20, 2011 03:23:58 PM Sean Carolan wrote:
 [snip]
 Where did all the letter n's go?

 I can't duplicate the problem here on a CentOS 5.6 box.  What locale are you 
 set to?  Here's what I get (note that a copy from the e-mail you sent 
 embedded newlines, which had to be stripped out (one of the many things xargs 
 makes trivially easy) to get the result):

Here's a simpler example, with a single line in the file:

[scarolan@server:~]$ cat loremipsum.txt
Lorem ipsum dolor sit amet, consectetur adipiscing elit. n n n n n
lots of letter n!

[scarolan@server:~]$ myvar=$(grep Lorem loremipsum.txt)

[scarolan@server:~]$ echo $myvar
Lorem ipsum dolor sit amet, co sectetur adipisci g elit.
lots of letter  !

Weird huh?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Variable assigned to grep output - missing letter n!

2011-07-20 Thread Sean Carolan
 [scarolan@server:~]$ echo $myvar
 Lorem ipsum dolor sit amet, co sectetur adipisci g elit.
 lots of letter  !

 Weird huh?

Ok, I'm a bonehead; I had this in my bash history:

IFS='\n'

That seems to have been the cause of the missing n's.  Now the next
question would be, how can I include the \n characters in my variable
string, without fudging with $IFS?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Variable assigned to grep output - missing letter n!

2011-07-20 Thread Sean Carolan
 (No, I don't advocate perl for everything, but knowing more about the
 problem can
 help in determining a suitable solution.)

You're right, I gave up and used python instead.  The basic idea here
was to gather together a long list of hostnames by grepping through a
few hundred files, check the list for duplicates, and alert someone if
duplicates were found.  I had a nifty one-liner using grep, sort, and
uniq -c that basically spat out a list of hosts with duplicate
entries, but in the end it was easier to manipulate the data (at least
for me) using python.

thanks

Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Deleting a KVM virtual machine from the command line

2011-07-11 Thread Sean Carolan
I am working on a sandbox machine that will allow users to play around
with building virtual machines, then blow them all away each night
with a cron job.  I wrote a small script that uses the virsh command
to destroy the VMs, then remove the storage.  For some reason the vm
name still shows up in the virt-manager GUI.  Anyone have an idea how
you delete it from there as well, without using the GUI?

thanks

Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Deleting a KVM virtual machine from the command line

2011-07-11 Thread Sean Carolan
 Did you try:

 virsh undefine  domain-id

 where domain-id is your vm name

Perfect, thanks Earl!  Here's the script in case anyone else might
find it useful.  Please post any improvements if you can see a way to
improve it.

#!/bin/bash
# Removes all KVM virtual machines from this host

# First destroy all running VMs
for i in $(virsh -q list | awk '{ print $2 }'); do
  virsh destroy $i;
  virsh undefine $i;
done;

# Next we delete their virtual disk images
rm -rf /var/lib/libvirt/images/*.img
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] /etc/hosts - hostname alias for 127.0.0.1

2011-03-07 Thread Sean Carolan
Can anyone point out reasons why it might be a bad idea to put this
sort of line in your /etc/hosts file, eg, pointing the FQDN at the
loopback address?

127.0.0.1hostname.domain.com hostname   localhost localhost.localdomain
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] /etc/hosts - hostname alias for 127.0.0.1

2011-03-07 Thread Sean Carolan
 First, if your host is actually communicating with any kind of ip-based
 network, it is quite certain, that 127.0.0.1 simply isn't his IP
 address. And, at least for me, that's a fairly good reason.

Indeed.  It does seem like a bad idea to have a single host using
loopback, while the rest of the network refers to it by it's real IP
address.

 Second, sendmail had the habit of breaking if your hostname was mapped
 to 127.0.0.1, but I stopped using sendmail a decade ago, so I can't
 verify this. :)

The reason this came up is because one of our end-users requested such
a setup in the /etc/hosts file, and I didn't think it was a good idea.
 Seems it would be better to fix the application(s) that require the
data to use the real network IP address.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] /etc/hosts - hostname alias for 127.0.0.1

2011-03-07 Thread Sean Carolan
 (Make sure you pick .dummy so as not to interfere with any other DNS.)

 In theory you could leave off .dummy, but then you risk hostname being
 completed with the search domain in resolv.conf, which creates the
 problems already mentioned with putting hostname.domain.com in
 /etc/hosts.  (I have not tested this at all!)

I will probably just leave this decision to the application
architects, with the recommendation that we should simply use DNS as
intended...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Gnu Screen - terminal issues

2011-03-06 Thread Sean Carolan
 The remote host's $TERM variable is in fact xterm.  When I connect to
 the screen session the $TERM variable is 'screen'.

 Are you running screen locally or remotely?

Remotely.  My work machine is a laptop, which is not powered on all
the time.  Hence I use a remote box as a jumping-off point, and run my
screen sessions there.

 Or you could write a script, scp it to the hosts you want to run it on
 (testing first, natch), and exec it:

   for host in hostlist; do scp myscript $host:.; done

   [fiddle around with tests or verification as necessary]

   for host in hostlist; do echo ** $host **; ssh $host ./myscript; done

Yes, I do this quite a bit.  But there are often times when I have to
do interactive work, running different commands on various hosts.

 As I mentioned earlier, dsh (distributed ssh) is a very powerful tool
 for running multiple remote commands.  Puppet, cfengine, and other tools
 may also be useful.

Yes, thank you for the pointers.  I'm familiar with both puppet and
cfengine.  The GNU screen sessions are mainly used during the build
process, before a server has puppet or cfengine up and running.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Gnu Screen - terminal issues

2011-03-04 Thread Sean Carolan
 In this case, you might want to conditionally assign some reasonable
 value on failure.  Say:

    tput -T $TERM init /dev/null 21 || export TERM=xterm

 'tset -q' is another test which can be used.

The remote host's $TERM variable is in fact xterm.  When I connect to
the screen session the $TERM variable is 'screen'.  I think it's
because I'm opening a new ssh session in each screen window.  Not a
huge deal; I mainly use this for short commands, and if I need to run
something longer I just write it all out in a text editor and paste it
into the terminal.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Gnu Screen - terminal issues

2011-03-03 Thread Sean Carolan
I really like gnu screen and use it everyday but there's one thing
that is a bit inconvenient, and that's the odd line wrapping and
terminal size issues that seem to pop up.  The problem crops up when I
type or paste a really long command, and then go back and try to edit
it; the text starts to wrap over itself and you have no idea what you
are editing.  Any fixes for this?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Gnu Screen - terminal issues

2011-03-03 Thread Sean Carolan
 You wouldn't by any chance be using PuTTY to access the session?  If
 so, you may need to play around with the terminal settings including
 the scroll type so that it displays correctly.  I don't recall the
 specifics but a similar thing happened to me.

Actually, no I'm using gnome-terminal on Ubuntu 10.10.  I wonder if
it's due to the fact that I'm ssh-ing to other machines within each
screen window?  Sometimes I will do this if I have a dozen servers to
work on at the same time, I have a little script that spawns a new ssh
session to each box in separate windows.  Here's a little tidbit that
I just learned; you can send the same command to all windows at the
same time:

[CTRL-A] :at \# stuff pwd; hostname; uptime^M

That will send the pwd, hostname, and uptime commands to all windows.  YMMV.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Load balancing...

2011-03-03 Thread Sean Hart


On 3/3/11 3:51 PM, aurfal...@gmail.com wrote:
 On Mar 3, 2011, at 3:43 PM, Todd wrote:

 Hi All,

 Can anyone help me hash out how best to load balance a website that  
 is getting considerable traffic?  In the past I only have experience  
 with BigIP where you have a load balancing device that keeps track  
 and send traffic to the best server possible at the time. This was a  
 proprietary system that I think was something Dell rebranded.

 Right now, the whole site is is 400gb of video, HTML5, Apache, PHP,  
 MySQL, runs on a single box with 16gb of RAM and mirrored /var/www/ 
 html (2x1tb raid level drives). I have a Comcast 50/10 connection, 5  
 statics and I am seeing about 125 unique visitors a day. The site  
 runs fine, but in anticipation of more traffic as well as a learning  
 experience I would like to load balance.

 Obviously I need a second server just like the one it is running on  
 now. I will probably spec something out that is capable of 32gb of  
 RAM.

 What about a dedicated load balancing device? What specs should this  
 be? How much RAM, HD, processor? It is sufficient to buy something  
 with a GB NIC and say 4gb of RAM? Can one go slower but more RAM,  
 small HD?  I don't really quite know how intensive a task this  
 decision making process is for the load balancer..

 Right now, as example, I have an Untangle Firewall and it runs on a  
 old AMD with 2gb RAM, GB NIC and it seems to do just fine.

 My local computer store has several P4 2.8ghz with 2GB of RAM for  
 like $99

 Can anyone enlighten me on specs, proper setup, caveats?
 Well a bit outside what I know which isn't much, but...

 What about external DNS provider with round robin DNS?

 Or if you have control over your DNS, then you can easily do round  
 robin.

 Qucik and ez faq on round robin;

 http://www.zytrax.com/books/dns/ch9/rr.html

 Hope this helps.

 I do this for my mail servers.

 - aurf
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

Hello,

Building a high throughput, highly available site is a tough job, and
there's a reason good sysadmins get paid what they do.  But to give you
some direction on Load Balancers.

BigIP (Made by f5) is the hands down leader of the Load Balancer world. 
You will pay dearly for it (20K each, min), but depending on your needs,
may very well be the best choice for you.
http://www.google.com/url?sa=tsource=webcd=1sqi=2ved=0CCgQFjAAurl=http%3A%2F%2Fwww.zeus.com%2Fdocuments%2Fen%2FGa%2FGartner_Inc._Magic_Quadrant_for_Application_Delivery_Controllers_24.09.09.pdfrct=jq=load%20balancer%20gartner%20magic%20quadrantei=zipwTdeQG5TCsAOe1N3CCwusg=AFQjCNGeL_a0Jpco1EVVObiAS0mWSnbbqgcad=rja

Zeus also makes a decent product, made to run as software.  The software
will run you ~9K I think, but is pretty feature rich.  Requires hardware
to go with it. http://www.zeus.com/products/load-balancer/

IPVS or LVS can work as a really simple/free solution:
http://www.linuxvirtualserver.org/software/ipvs.html

Round robin DNS would balance load, but will cause problems if one of
them goes down.
You could also set up apache or squid to do proxying...

Cheers,
Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Load balancing...

2011-03-03 Thread Sean Hart

 Hi Sean,

 Can you explain as I may be planning this for a site.

 So if I have 2 identical servers, each with there own IP, how will  
 one
 of them going down cause issues?

 I'm assuming multiple A records for the same host will be handled  
 fine
 by the client lookup?
 example.com resolves to:
 host1.example.com - A.B.C.D
 host2.example.com - W.X.Y.Z

 1. Client performs DNS lookup and gets pointed to host2. All is well.
 2. host2 goes down. DNS for example.com still resolves to host2,  
 which is unreachable. Site is down.

Yeah, what they said!  I've done a few of these myself if you want to
chat further off the list about your specific needs and so forth.  I
don't contract or anything, but I'm down to give advice.

~Sean Hart
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Sorting by date

2011-02-28 Thread Sean Hart
On 2/28/11 12:35 PM, erikmccaskey64 wrote:
 Original:
 Jan 23 2011 10:42 SOMETHING 2007.12.20.avi
 Jun 26 2009 SOMETHING 2009.06.25.avi
 Feb 12 2010 SOMETHING 2010.02.11.avi
 Jan 29 2011 09:17 SOMETHING 2011.01.27.avi
 Feb 11 2011 20:06 SOMETHING 2011.02.10.avi
 Feb 27 2011 23:05 SOMETHING 2011.02.24.avi


 Output:
 Feb 27 2011 23:05 SOMETHING 2011.02.24.avi
 Feb 11 2011 20:06 SOMETHING 2011.02.10.avi
 Jan 29 2011 09:17 SOMETHING 2011.01.27.avi
 Jan 23 2011 10:42 SOMETHING 2007.12.20.avi
 Feb 12 2010 SOMETHING 2010.02.11.avi
 Jun 26 2009 SOMETHING 2009.06.25.avi


 How could I get the output where the newest file is at the top?

Assuming you are getting the time from the ls -l command...

To sort within the ls command (man ls):
ls -lt

To sort after the ls command (man ls):
ls -al --full-time | awk '{print $6   $7   $9}' | sort -r

Not using ls:
To take that input and sort you'd have to do some hashing to translate
the months to a sortable format (like numbers) I think.  Alternatively,
you could use the listed date to generate a UTF date via the date command.  

~Sean



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Donations - Is Money a Curse?

2011-02-20 Thread Sean
cornel panceac wrote:
 in (my) ideal world. money are not necessary. you give me centos, i 
 give you electricity, or hardware, or an office, etc . since we still 
 live in money-lenders ruled world, is there a way to contribute 
 (money) to centos but not directly? like, instead giving money, pay 
 the bill(s).
Core issue, I think, is the rights, privileges etc (the 'ownership' 
attributes -- whether explicit or implicit) which attach to making 
payments under most models. If/when my own little earner project fails 
to earn, it disappears, and little harm is done.
Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Donations - Is Money a Curse?

2011-02-19 Thread Sean
James B. Byrne wrote:
  But, our future financial support
 for CentOS is contingent upon dealing with an independent legal
 entity that conforms with national and international tax laws and
 corporate reporting requirements.

   
A new model (appropriate to OSS) is being worked on  here:
http://flattr.com/
But, apart from being slightly experimental, may not be appropriate 
either to your particular dilemma?
Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] premature question on 5.6

2011-02-07 Thread Sean
Brunner, Brian T. wrote:
  
 You need to check ext4 is supported and compiled in you current kernel.
 Otherwise, you need to apply the patch, and re-compile your kernel. I
 assume that your kernel supports ext4.
And you may want to check certain tools have grown ext4 support. eg 12 
months ago either Clonezilla or Gparted (or both) did not.
Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5.5 check memoray usage too high???

2011-02-02 Thread Sean Hart


On 2/2/11 1:58 PM, mcclnx mcc wrote:
 We have DELL R900 server with 128GB RAM (CENTOS 5.5)in it.  This server only 
 have one application running and few people use it.

 Every week I ata least get one or two messages from monitor tool mail to me 
 say:

 Message=Memory Utilization is 92.02%, crossed warning (80) or critical (90) 
 threshold. 

 Since server have 128 GB RAM and only 1 application.  I really don't belive 
 that.  Does there has some way can check memory utilitation ?


What is the output of the command free?

~Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Is it okay?

2011-01-22 Thread Sean






m.r...@5-cent.us wrote:
Lessee, FC10-FC13 ... but gnome is completely
broken, and you can't log
  in, then find that gnome is hostile to window manager switching ...
  

At least you got to late-FC before that one ... still UNFIXED since
RH8! ...(so KDE since for me).
Sean


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Troubles for an non-IT beginner

2011-01-19 Thread Sean
Maybe ask what sort of cellphones your family use. If they use and are 
happy with old bw text ones (like me), then by all means pursue the 
Linux quest. But if they are up-to-the-minute snappy ones, or if they 
hang out for the latest, you are probably buying into headaches. 
Remember, Linux is always playing catch-up on toys produced for 
commercial OSes.
Sean

Parshwa Murdia wrote:
 But at least work could be done in Fedora too like without
 going into the technical details at least multimedia could be used,
 secured bank transactions could be done, prints can be taken and all
 this I guess without going into the core details we could do but only
 the knowledge of installation (GUI only) is required.
   
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to disable screen locking system-wide?

2011-01-19 Thread Sean Hart


On 1/19/11 11:49 AM, Rudi Ahlers wrote:
 On Wed, Jan 19, 2011 at 9:46 PM, Joshua Baker-LePain jl...@duke.edu wrote:
 On Wed, 19 Jan 2011 at 11:44am, Bob Eastbrook wrote

 By default, CentOS v5 requires a user's password when the system wakes
 up from the screensaver.  This can be disabled by each user, but how
 can I disable this system-wide?  Many of my users forget to do this,
 which results in workstations being locked up.
 Ctrl-Alt-Bksp will fix that right up.  I'm not a big fan of users leaving
 workstations unsecured when they walk away.

 --

 Don't you mean CTRL+ALT+DEL?

 I don't think the OP wanted a plaster, he wants a solution :)


I believe that CTRL-ALT-Bksp will restart X, not the computer.  On
restart of X you should be welcomed with the login screen.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] perl code to remove newlines

2010-12-30 Thread Sean
Not sure exactly what you are trying to do, but Tie::File might be worth 
a look at if you haven't done so already?
Sean

ken wrote:
 Given an HTML file which looks like this:

 - begin snippet -
 HTML
   
 HEAD
 TITLE
 We've Lied to You#8230;/TITLE
 META
 
 NAME=GENERATOR
 CONTENT=Modular DocBook HTML Stylesheet Version 1.79LINK
 REL=HOME
 TITLE=Maximum RPM
 HREF=index.htmlLINK
 REL=UP
 TITLE=Using RPM to Verify Installed Packages
 HREF=ch-rpm-verify.htmlLINK
 ...
 - end snippet -

 I'm coding some perl to make it look something like this:

 - begin snippet -
 html
 head
 titleWe've Lied to You#8230;/title

 meta name=generator content=Modular DocBook HTML Stylesheet Version
 1.79

 link rel=HOME title=Maximum RPM href=index.html

 line rel=UP title=Using RPM to Verify Installed Packages
 href=ch-rpm-verify.html

 link 
 - end snippet -

 I've hit a wall trying to remove all the newlines.  I've tried it
 several ways... here's just one:

 - begin snippet -
 while ($in)
 {
 s/(\w*\W)/\L$1/g;   # Downcase XXX in XXX.
 s/\/(\w*\W)/\/\L$1/g;   # Downcase XXX in /XXX.
 if(/^/)  # if this line starts with ''
 { # then
   $curr = tell $in;   # Note current file position,
   seek $in, $prev, 0; # go back to previous line,
   chomp;  # remove its trailing newline char,
   seek $in, $curr, 0; # and reset position to current line.
 }
 else
 {
   $curr = tell $in;   # Note current file position,
   seek $in, $prev, 0; # go back to previous line
   s/\n/ /;# Append a space,
   chop;   # and then chomp.
   seek $in, $curr, 0; # and reset position to current line.
 }
 print;
 print $out;
 $prev = tell $in; # Location of previous line.
 }
 - end snippet -

 When I cat the output file, it looks like this:

 - begin snippet -
 GLOB(0x9fd587c)htmlGLOB(0x9fd587c)headGLOB(0x9fd587c)titleGLOB(0x9fd587c)We've
 Lied to
 You#8230;/titleGLOB(0x9fd587c)metaGLOB(0x9fd587c)NAME=GENERATORGLOB(0x9fd587c)CONTENT=Modular
 DocBook HTML Stylesheet Version
 1.79linkGLOB(0x9fd587c)REL=HOMEGLOB(0x9fd587c)TITLE=Maximum
 RPMGLOB(0x9fd587c)HREF=index.htmllinkGLOB(0x9fd587c)REL=UPGLOB(0x9fd587c)TITLE=Using
 RPM to Verify Installed
 PackagesGLOB(0x9fd587c)HREF=ch-rpm-verify.htmllinkGLOB(0x9fd587c)
 - end snippet -

 The output I should say *is* all on one line, not line-wrapped the way
 you see it above.  I have a hunch as to why there are the
 GLOB(0x9fd587c) thingies everywhere the newlines or spaces (' ')
 should be.  If some expert here could explain them, that would be really
 good.  More importantly though would be some instruction as to how to
 remove the newlines without creating all the GLOB(...) garbage.  Might I
 have to rewrite the script so to open the file in binary mode... or what?


 Maximum thanks for your assistance.




   
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] two cents or not two cents

2010-12-23 Thread Sean


Les Mikesell wrote:
 div class=moz-text-flowed style=font-family: -moz-fixedOn 
 12/21/2010 1:06 PM, Sean wrote:

If you can treat something as a black box and trust it, the size of
 the component isn't that important.
 If or IFF ..(IF AND ONLY IF)..?  A deep scepticism forces me to
 treat all boxes as grey no matter how long since last visited...
 (including my own, which are a sort of dark grey!?).

 Yes, especially my own.  That's the value of using components that are 
 maintained by others and widely used.   The code gets much better QA 
 than I could ever do myself and all you have to do is peek at the mail 
 list once in a while to know if previously-working interfaces are 
 going to be broken if you update.  For things from the base CentOS 
 package repositories and to a slightly lesser extent EPEL, you can 
 assume someone else has already made sure that the updates aren't 
 behavior-changing and required dependencies are met.

 Java stuff seems to be more self-contained so there is a little more 
 freedom to mix component versions between applications and you aren't 
 completely tied to someone else's update schedule.

Yes, superior exploitation must be granted Java (over say Cpan, 
C-libraries etc) in scenarios that are naturally exploitation-heavy, 
such as you indicate. But for everything? Hmmm.
A long ago tale goes thus: There was once a problem I would have 
attacked with half a page of Prolog had I known I would end up writing 
all the code myself, no matter how hard to actually get it right. I 
conceded to Java for the sake of team effort and wrote my portion as far 
as I could, but was unable to test properly without the other 3 portions 
which, as it turned out, never eventuated. Towards the death knell I 
stayed up and wrote them myself, chapter after chapter .. on .. and on 
.. and on. It ran, but no surprise it produced incorrect results, and 
too much code to go back through and try fix all that spaghetti logic in 
the time available. A lesson learnt, and I haven't written a line of 
Java since!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] two cents or not two cents

2010-12-21 Thread Sean


Les Mikesell wrote:
   If you can treat something as a black box and trust it, the size of 
 the component isn't that important.
If or IFF ..(IF AND ONLY IF)..?  A deep scepticism forces me to  
treat all boxes as grey no matter how long since last visited... 
(including my own, which are a sort of dark grey!?).

Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] two cents or not two cents

2010-12-21 Thread Sean

  a bug in bdb made them regularly overwrite random adjacent data, 
 including other people's accounts.  It was not a fun experience. 
ouch! I wonder if a Perl 'tied-hash' interface was being implemented 
along with BDB 'duplicate keys'? A definite no no. You would certainly 
get overwrites, though not quite random.

Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] two cents or not two cents

2010-12-20 Thread Sean

  And there are IDEs like eclipse that do a lot of the grunge work 
 boilerplate for you, and maven to manage components as you scale up.
eclipse froze my first FC4 tryout ... is for me what BerkeleyDB is for you.

 I do agree personally - I can't think in java and do much better when 
 you can squeeze the logic of a routine onto one page where you can see 
 it all at once.
 .
 I'd relate the importance of code size to the amount of RAM you can 
 afford.  For a long time now it has been cheaper to buy RAM than to 
 hire someone capable of shrinking your code base - unless maybe you 
 have a mass-market application that will run on millions of boxes.
By 'size' I was actually referring to 'source size' :  (1) you say it 
above ..[all micro] logic..[on] one page ...(2) the same idea but 
in a project-macro-logic sense viz a viz sheer quantity of code lines to 
manage overall.
I do rate java for designing GUI-interfaces. No argument there. GUI 
components ARE objects. But most of the real world aint ..(malfits being 
the reason for extensibility in OOP).. and it turns out I think that 
re-usability mostly goes hugely custardly. (And aside, if best 
programming is the truly 'creative' kind, not just spending time finding 
the right lego blocks to make new combinations with, then OOP fits badly 
anyway).

 Why BerkeleyDB? I dont know of an embedded-db equivalent that will 
 store
 'any and every data exactly as is'.

 I'd think sqlite first - these days anyway.  

 You can always do input into temporary tables structured more like the 
 input data and process to normalized form later (if needed).
Not if normalising implies any user-interactivity (the usual scenario). 
An early input in the automated background input stream off the wire 
generates some KEY which a later input of the same stream hours later 
may try to match against. Would the latest sqlite accept a KEY that was 
say ( maybe badly) both QP-encoded and HTML-encoded, and even if it did 
so now would that be guaranteed to endure through future versions of 
those encodings without ever rejecting? Even if the 'normalising' could 
be automated satisfactorily to avoid all rejections for sqlite right now 
within the capture process, it would be biased to sqlite's constraints, 
an unwanted extra layer that may well also actually corrupt the heavy 
duty (search-engine)-normalising already being performed on difficult 
data ..(eg stemming, scoring, indexing).

In a sense, BDB serves the temporary tables suggestion already, but so 
much more as to be sufficient in itself. You seem unduly anti-BDB? Quite 
frankly I have had far less trouble with it than any other db ever. In 
the past year I have had to do one dump/(re)-load [about 1 hour], and 
twice delete the environment files [about 1 minute] so that they would 
self-rebuild on next access. That's it!

Which doesn't mean I'm not also always open to suggestions.


 Sqlite should be equally usable - and easier to convert to/from server 
 backends.  That might not have been true long ago, though.
 If you had moved to Centos3 as the first step, you could have run that
 with nothing more drastic than a periodic 'yum update' for years, then
 jumped to Centos5 with no rush to change again even now.
 Ah, now you tell me!
 You should have asked sooner.   I still have a few centos3 boxes going 
 strong. I had problems with perl modules and a few other things in the 
 early stages of centos4 and skipped over that for most systems.
And proves that the time I can make available for discovery falls short 
by heaps. Nearing closure on a very long project right now, thinking 
ahead to next steps, reviewing the robustness of past decisions, is very 
enjoyable and an unusual luxury for me. Playing the 'distro-hopping' 
game that many seem to indulge in for instance has just been out of the 
question.
I have some processes shared with win boxes over RPC (producung excel 
charts) which require that both Perl version and versions of modules 
like Storable.pm exactly match, so am largely at the mercy of  what the 
Activestate repo provides as to what must be run on the linux box too.
I need lots of browsers too (alongside Firefox) for day to day work. The 
old versions of Mozilla, Konqueror and Opera which will run under FC4 
are critically dysfunctional on some operations needed. So am looking to 
try a more up to date team.
CentOS is beginning to look more  more like my cup of tea, and since I 
gather that a new major is immanent maybe it will support the new Google 
Chrome (along with Seamonkey, Opera-11+)? I wonder if there is a list of 
packages somewhere. If the repo web-page for CentOS provided the actual 
repo-address I was going to try direct my FC4-yum there for listings, 
but cannot seem to find it. It may be still the case that I cannot have 
'both worlds' on one box, or maybe I can try a CentOS + VM-XXX 
configuration hmmm.

Sean
___
CentOS mailing list

Re: [CentOS] two cents or not two cents

2010-12-19 Thread Sean


Les Mikesell wrote:
 div class=moz-text-flowed style=font-family: -moz-fixedOn 
 12/18/10 3:24 PM, Sean wrote:


 Or, you might move to java for a more self-contained, OS/distribution
 independent way of doing things.

 Why Perl? Because writing/maintaining 20,000 lines of terse Perl code is
 manageable, whereas the equivalent 200,000+ in Java ruled itself out at
 the very beginning, (even at a time when I knew some Java but no Perl).
 A practical decision I clap myself on the back for every single day
 despite knowing that had I gone with Java (and this project fallen over
 long ago) I could now be getting big quids from some corporate developer
 who needs a team of new Java graduates overseen.(hm or was it
 the right decision?).

 Starting from scratch now or recently, it would be hard to argue 
 maintainability for perl vs. java, but back in java 1.4 days or 
 before, it was probably the right choice.  But java sort of isolates 
 you from changes in the rest of the platform.  And groovy eliminates 
 most of the unnecessary verbosity if you don't mind a bit of a 
 performance hit.

Groovy is new one on me -- what is it? And surely the driver behind 
widespread Java adoption is still that others maintain your code more 
easily (ie the corporate/factory model), implying a price still to pay 
for a developer who just needs to maintain own code suite? Besides being 
anathema to me, strong data typing, for example, is also just one 
feature that explodes code size, but fits perfectly with the factory 
model. In 5+ years of intense coding with non-typed R/Basic I recall a 
total of maybe 3 compile-crashes from trying to do math on a string 
(seriously a non-issue for the die hard maverick!)  Is code size 
under-rated?, conveniently swept under the carpet?

 Core Perl stability? I agree.

 Why BerkeleyDB? I dont know of an embedded-db equivalent that will store
 'any and every data exactly as is'.

 I'd think sqlite first - these days anyway.  BerkelyDB had bugs in 
 growing existing items way to long for me to ever trust it again.  Or 
 use a server instead of embedding anything.  Either postgresql or 
 mysql are fairly trouble-free although they've had their own 
 version-specific issues.   Or if you need scale, look at something 
 like riak.
I do use postgresql for data that is person-entered, ie where 
interactivity facilitates personal on-the-spot correction of rejected 
inputs. The inbuilt constraints of the server db-model clearly targets 
multi-person updaters who may or may not be focussing on what they are 
doing. Great for keeping mega stores of artificially structured (simple) 
stuff like phone lists, not so good at accepting all the vagaries the 
real world may throw at it in automated background capture scenarios, 
sometimes from suspect sources. BerkeleyDB may break occasionally, but 
is recoverable with basic OS tools and text-editor if provided recovery 
tools fail (not locked in a proprietary binary closet -- been there, 
done that, still hurting!).

 Originally on RH8 for 3/4 years, the first attempt to port onto a brand
 new release of FC4 broke everywhere. The second attempt a year or so
 later went better and remains. In the meantime FC support philosophy has
 tightened/altered to the point where I simply must abandon it. I believe
 it has become just an 'alpha test ground' for RHEL. Reminds me of the
 painful Dos saga -- the first version to work properly (Dos-6) was just
 about irrelevant when finally released. So yes, CentOS has come into my
 sights ... (and I'm a bit long in the tooth to tiptoe around as you may
 have gathered!).

 If you had moved to Centos3 as the first step, you could have run that 
 with nothing more drastic than a periodic 'yum update' for years, then 
 jumped to Centos5 with no rush to change again even now.
Ah, now you tell me!

Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] two cents or not two cents

2010-12-18 Thread Sean


Les Mikesell wrote:
 div class=moz-text-flowed style=font-family: -moz-fixedOn 
 12/17/10 2:12 PM, Sean wrote:
 Interesting, and probably worth a play with indeed, although I tend to
 steer clear of Bash (unhappy with) whenever possible to do the same in
 Perl (happy with). I imagine there is machine level stuff involved that
 would rule out a pure Perl version?
 However, my difficulties for OS replacement are not so much the OS setup
 itself but the 'production' stuff that needs to go on top and a raft of
 dependencies -- compilers, BerkeleyDB, myriad Perl modules etc etc etc.
 Since the system is 'live', I usually have to run 2 versions in parallel
 for a long time... so lots of rollbacks, synchronising overhead and so
 on. Usually newer versions of some things have to be replaced with older
 versions and then inter-dependency issues arise... some of the stuff I
 upgraded specifically for suddenly stops working. You are familiar with
 the general picture, I'm sure.
 But thanks for the thought.

 You didn't exactly make it clear whether you've used CentOS or not, 
 but keeping those interfaces from changing in ways that break things 
 that used to work is the whole point of 'enterprise' distributions and 
 CentOS inherits the work of backporting bug/security fixes without 
 introducing behavior changes over the long life span from RHEL.

 You might also do your own homework and avoid components with a 
 history of breaking backwards compatibility (like BerkeleyDB...).  As 
 you have probably noticed, core perl has excellent historical 
 stability - interpolating unquoted @ in strings is just about the only 
 change in perl 5 that might require a change all the way back from 
 perl1 code.  But the modules are done by lots of other people and 
 occasionally are re-factored in ways that require coordinated changes. 
 If you are getting these from a 3rd party repository, someone else has 
 usually done the work of vetting the dependencies among them.

 Or, you might move to java for a more self-contained, OS/distribution 
 independent way of doing things.

Why Perl? Because writing/maintaining 20,000 lines of terse Perl code is 
manageable, whereas the equivalent 200,000+ in Java ruled itself out at 
the very beginning, (even at a time when I knew some Java but no Perl). 
A practical decision I clap myself on the back for every single day 
despite knowing that had I gone with Java (and this project fallen over 
long ago) I could now be getting big quids from some corporate developer 
who needs a team of new Java graduates overseen.(hm or was it 
the right decision?).

Core Perl stability? I agree.

Why BerkeleyDB? I dont know of an embedded-db equivalent that will store 
'any and every data exactly as is'.

Originally on RH8 for 3/4 years, the first attempt to port onto a brand 
new release of FC4 broke everywhere. The second attempt a year or so 
later went better and remains. In the meantime FC support philosophy has 
tightened/altered to the point where I simply must abandon it. I believe 
it has become just an 'alpha test ground' for RHEL. Reminds me of the 
painful Dos saga -- the first version to work properly (Dos-6) was just 
about irrelevant when finally released. So yes, CentOS has come into my 
sights ... (and I'm a bit long in the tooth to tiptoe around as you may 
have gathered!).

Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] two cents or not two cents

2010-12-17 Thread Sean
Ah, a reminder that it is always dangerous to unveil the vague? Sorry 
... I should have pre-read 6000 pages from Redhat ... (but maybe I did!).
Sean

Michael R. Dilworth wrote:
 I'm sorry (I know don't feed the trolls), but recently 
 there have been quite a few remarks resembling this. 
 Also, I'm beginning to believe the remark made earlier
 by ???, which roughly stated Each time a new release 
 is due, the flame wars erupt.

 Just what part of CentOS is a Mirror or Redhat OS do 
 you miss?

 Now please, return to the rpm building and raid/lvm 
 discussions, as I find them very interesting and
 educational.

 michael...
  

   
 -Original Message-
 From: centos-boun...@centos.org [mailto:centos-boun...@centos.org]on
 Behalf Of Sean
 Sent: Thursday, December 16, 2010 2:46 PM
 To: centos@centos.org
 Subject: [CentOS] two cents or not two cents


 Hello Producers

 Longevity of Support is an attractive drawcard for CentOS if it means 
 the exact opposite of Fedora's short support cycle that does not 
 provide updating of infrastructural libraries for very long, libraries 
 which newer versions of applications (like Firefox, Thunderbird, Opera 
 etc) depend on and which wont install unless the libraries are also 
 newer versions? But is that what it means -- ie that those 
 infrastructural libraries (libpango, libcairo etc) are continuously 
 updateable to fairly recent versions?

 If so, the problem is in reconciling that meaning with the reputation of 
 CentOS to only support older versions of applications (eg Firefox-1.5, 
 Thunderbird-1.0 etc). It does reconcile, of course, if  the implications 
 are merely that the CentOS user must compile and install the later 
 versions of such applications from source, rather than having the luxury 
 of pre-packaged binaries. It doesn't reconcile if there is some other 
 critical reason why newer such applications just wont install. But which?

 I ask here because the profusion of vague mission statements and 
 'target-enduser-profile' claims that litter the internet re '*nix 
 distros' seldom actually address those real issues. And hopefully 
 someone can enlighten. My complex production  developement desktop 
 takes months to fully port to a new OS (or OS-version), so OS updates to 
 get library updates (ala Fedora philosophy) becomes increasingly untenable.

 Then there is a further question, I'm afraid. Since CentOS also does 
 specifically target the profile of a so-called 'enterprise/server-user' 
 what does that actually entail. Does it mean concrete security 
 strictures which bolt down non-'root' users or does it merely mean the 
 availability of SELinux (but which can be turned OFF)? For instance, 
 (with SELinux OFF), can a user still:
 (a) su root via Kterm anytime?
 (b) Access services-admin anytime via Menu+Pam to control printers, 
 modems, daemons etc?
 (c) compile
 (d) have 6 to 8 desktops running
 (e) call up 'konquerorsu.desktop' (root-konqueror with embedded root-Kterm)
 (f) have normal cron scheduling
 .. maybe more, 
 but that's a start.

 Thanks for listening.

 Sean



 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

 

   
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] two cents or not two cents

2010-12-17 Thread Sean
Interesting, and probably worth a play with indeed, although I tend to 
steer clear of Bash (unhappy with) whenever possible to do the same in 
Perl (happy with). I imagine there is machine level stuff involved that 
would rule out a pure Perl version?
However, my difficulties for OS replacement are not so much the OS setup 
itself but the 'production' stuff that needs to go on top and a raft of 
dependencies -- compilers, BerkeleyDB, myriad Perl modules etc etc etc. 
Since the system is 'live', I usually have to run 2 versions in parallel 
for a long time... so lots of rollbacks, synchronising overhead and so 
on. Usually newer versions of some things have to be replaced with older 
versions and then inter-dependency issues arise... some of the stuff I 
upgraded specifically for suddenly stops working. You are familiar with 
the general picture, I'm sure.
But thanks for the thought.
Sean
 div class=moz-text-flowed style=font-family: -moz-fixedOn Fri, 
 17 Dec 2010, Sean wrote:

 To: centos@centos.org
 From: Sean s...@orcon.net.nz
 Subject: [CentOS] two cents or not two cents

 Hello Producers

 Longevity of Support is an attractive drawcard for CentOS if it means
 the exact opposite of Fedora's short support cycle that does not
 provide updating of infrastructural libraries for very long, libraries
 which newer versions of applications (like Firefox, Thunderbird, Opera
 etc) depend on and which wont install unless the libraries are also
 newer versions? But is that what it means -- ie that those
 infrastructural libraries (libpango, libcairo etc) are continuously
 updateable to fairly recent versions?

 If so, the problem is in reconciling that meaning with the reputation of
 CentOS to only support older versions of applications (eg Firefox-1.5,
 Thunderbird-1.0 etc). It does reconcile, of course, if  the implications
 are merely that the CentOS user must compile and install the later
 versions of such applications from source, rather than having the luxury
 of pre-packaged binaries. It doesn't reconcile if there is some other
 critical reason why newer such applications just wont install. But 
 which?

 I ask here because the profusion of vague mission statements and
 'target-enduser-profile' claims that litter the internet re '*nix
 distros' seldom actually address those real issues. And hopefully
 someone can enlighten. My complex production  developement desktop
 takes months to fully port to a new OS (or OS-version), so OS updates to
 get library updates (ala Fedora philosophy) becomes increasingly 
 untenable.

 You might be interested in giving my ALI scripts a whirl on a spare 
 machine (even an old laptop)  to start with, so you get used to how 
 they work.

 I wrote these especially to deal with doing a fresh linux installation.

 http://www.karsites.net/centos/anyuser/auto-linux-installer.php

 I can set up the services I want running in under 10 seconds. Beats 
 sitting there doing it manually for 3 days!

 The general idea is that you modify the installer scripts to work with 
 a particular system - just do it one time. Then you can replay the 
 scripts as often as you want, to re-install your system.

 Please let the list know if they help with your installation/update woes.

 BTW. Some applications such as Firefox need to be updated to their 
 latest versions, otherwise websites will not work with an older 
 version. I had these issues with running an old version of FF on 
 Fedora 8. I went from F8 to F12 using my ALI scripts without any 
 problems.

 Kind Regards,

 Keith Roberts

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] two cents or not two cents

2010-12-16 Thread Sean
Hello Producers

Longevity of Support is an attractive drawcard for CentOS if it means 
the exact opposite of Fedora's short support cycle that does not 
provide updating of infrastructural libraries for very long, libraries 
which newer versions of applications (like Firefox, Thunderbird, Opera 
etc) depend on and which wont install unless the libraries are also 
newer versions? But is that what it means -- ie that those 
infrastructural libraries (libpango, libcairo etc) are continuously 
updateable to fairly recent versions?

If so, the problem is in reconciling that meaning with the reputation of 
CentOS to only support older versions of applications (eg Firefox-1.5, 
Thunderbird-1.0 etc). It does reconcile, of course, if  the implications 
are merely that the CentOS user must compile and install the later 
versions of such applications from source, rather than having the luxury 
of pre-packaged binaries. It doesn't reconcile if there is some other 
critical reason why newer such applications just wont install. But which?

I ask here because the profusion of vague mission statements and 
'target-enduser-profile' claims that litter the internet re '*nix 
distros' seldom actually address those real issues. And hopefully 
someone can enlighten. My complex production  developement desktop 
takes months to fully port to a new OS (or OS-version), so OS updates to 
get library updates (ala Fedora philosophy) becomes increasingly untenable.

Then there is a further question, I'm afraid. Since CentOS also does 
specifically target the profile of a so-called 'enterprise/server-user' 
what does that actually entail. Does it mean concrete security 
strictures which bolt down non-'root' users or does it merely mean the 
availability of SELinux (but which can be turned OFF)? For instance, 
(with SELinux OFF), can a user still:
(a) su root via Kterm anytime?
(b) Access services-admin anytime via Menu+Pam to control printers, 
modems, daemons etc?
(c) compile
(d) have 6 to 8 desktops running
(e) call up 'konquerorsu.desktop' (root-konqueror with embedded root-Kterm)
(f) have normal cron scheduling
.. maybe more, 
but that's a start.

Thanks for listening.

Sean



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Possible to reboot a system after kickstart installation without pressing a key?

2010-10-31 Thread Sean Carolan
The subject just about says it all - I'm wondering if there is a way
to do a completely hands-off installation, including the reboot at the
end, without Press any key to continue?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Possible to reboot a system after kickstart installation without pressing a key?

2010-10-31 Thread Sean Carolan
 Use the 'reboot' option in your kickstart.

Isn't this the default anyway?  I will try to specify it explicitly
and see how it works...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Possible to reboot a system after kickstart installation without pressing a key?

2010-10-31 Thread Sean Carolan
On Sun, Oct 31, 2010 at 6:07 AM, Sean Carolan scaro...@gmail.com wrote:
 Use the 'reboot' option in your kickstart.

 Isn't this the default anyway?  I will try to specify it explicitly
 and see how it works...

Looks like that did the trick, thanks Markus!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] adding user ldif to ldap

2010-10-28 Thread Sean Hart

 Here is the error:

 LDAP# ldapadd -x -D cn=Manager,dc=summitnjhome,dc=com -W -f /tmp/passwd.ldif
 adding new entry uid=root,ou=People,dc=summitnjhome,dc=com
 ldap_add: Invalid syntax (21)
 additional info: objectClass: value #6 invalid per syntax

I believe this is complaining about the 6th entry in the objectClass 
field (starting at 0, I think meaning the kerberosSecurityObject).  If 
you look at the schema entry for that objectClass, there may be 
restraints on the class that are not permitting you to add...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Sendmail - block mail based on recipient address?

2010-10-25 Thread Sean Carolan
Maybe someone can help me sort this out.  I want to block outbound
mail from my network based upon the recipient address.  Internal
servers should still be allowed to send emails, but not to a few
specific addresses.  I've tried creating some rules in
/etc/mail/access but to no avail.  Is it possible to do this?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Sendmail - block mail based on recipient address?

2010-10-25 Thread Sean Carolan
 lefgifu with: sendmail access TO

 http://www.feep.net/sendmail/tutorial/anti-spam/access_db.html

 'The left hand side of each entry can optionally be prefixed
 with one of the tags To:, From:, or Connect:.'

Yes, I have tried this.  I have entries like this in my access file:

To:staff...@unwantedcompany.comDISCARD

Yet mail to staff...@unwantedcompany.com goes through just fine.  I
think I may be missing something here.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Sendmail - block mail based on recipient address?

2010-10-25 Thread Sean Carolan
 One silly thing (but needs to be asked):

 Did you rebuild access.db after editing access?

Yes, the rebuild command is built into my init script.  I just double
checked it.

I'm getting better results having changed the setting to REJECT
instead of DISCARD.  I will investigate a bit further when I have some
spare time.  For now I have verified that the mail server is rejecting
all mails to the problem addresses.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] No last command in VIM?

2010-10-21 Thread Sean Hart

On 10/21/10 9:48 AM, John Kennedy wrote:

Is there an alias hanging around that is redirecting you?
John

On Thu, Oct 21, 2010 at 12:36, Scott Robbins scot...@nyc.rr.com 
mailto:scot...@nyc.rr.com wrote:


On Thu, Oct 21, 2010 at 06:19:54PM +0200, Dotan Cohen wrote:
 Although I made sure that vim-enhanced.i386 is installed, pressing :
 then upArrow does not show me the last command that I've typed.
Might
 I still be using vim-minimal erroneously? How to fix that? I
don't see
 any mention of this in google or the past few months of fine
archives.

One possible guess, but it's a guess only and I don't have high hopes
for it


Is there possibly a /bin/vi which takes precedence over /usr/bin/vim?
(Or is the command vim-enhanced?)

If you do which vim it should show you the path of exactly which vim 
you are using...  There is a history optin in vimrc, is it possible you 
set this to 0?  I believe it sets the number of lines to keep in history.


Cheers,
Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to do repetetive command in shell

2010-10-21 Thread Sean Hart

On 10/21/10 11:45 AM, Roland RoLaNd wrote:

Dear all,

i'm writing a certain script which does a specific task in a 
repetitive manner, i'm going to give a similar script with the same 
concept hope you could advise me to a better way:



Try for
http://www.cyberciti.biz/faq/bash-for-loop/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LDAP Mail Notice

2010-10-12 Thread Sean Hart






Maybe what i said is not clear, because my English is too pool .
Please forgive me if  my expression is not precise.


Doesn't matter what mail server you use, email is email.



 The following  is my environment :

Workspace Environment : CentOS 5.5  64bits  , Using Openldap
Server  or 389 LDAP Server

Mail Server :  Windows  Mail Server

For example :

If I create the new account called Tim on LDAP Server  , and his
password is 123456 , and his mail address is t...@test.com
mailto:t...@test.com
Then will send an E-mail to him to notice his information , like
his name and his passowrd.


So Would someone can give some suggestions ?

Before we go any further on this, I'd like to give a very serious 
warning.  It is NEVER a good idea to email a password.  Email is, by 
definition, insecure.


I'm not familiar with 389 LDAP Server, and after a quick look, it would 
make sense for me to read up on it.  Anyhow, my advice is going to come 
from the OpenLDAP side of things.


I would:

  1. Set up OpenLDAP (make sure to get a real certificate and require
 TLS/SSL)
  2. If using Samba, set up the smbldap tools
 (http://en.wikipedia.org/wiki/Smbldap-Tools), can be useful even
 if not using samba...
  3. Start script (I'd use perl, since it's what I'm most familiar with)
1. Generate username (either collect from input or generate somehow
2. Generate password (There's a sub for that on the page
   referenced earlier)
3. Contemplate making sure that the username is unique, and
   group membership, etc.
4. call smbldap-useradd to add the user (add stuff like -m for
   the mail address, check the smbldap-useradd documentation
   for handy switches
5. Compose body of email to user (this is probably mostly
   static, but you will most likely want to substitute some
   variables like username, etc
6. send the email (sub on the page earlier)
7. I repeat, please don't email passwords...  have them call
   you for them or something...  email is the least secure
   thing on the damn planet
  4. Sit back and have a beer, cuz yer done

I'm happy to help if you need more.

Cheers,
Sean

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] One server not showing SSH port, the other is.

2010-10-12 Thread Sean Hart

 Just disable password authentication on ssh and use only keyfiles ..

 --
My initial thought exactly.  Keys, and require passwords on the keys 
too.  Although if you want to be wicked paranoid, knocking + keys would 
work too.

~Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Openwebmail emergency (Perl)

2010-10-12 Thread Sean Hart

 Transaction Check Error:
 file /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm from install
 of perl-Compress-Zlib-2.015-1.el5.rf.noarch conflicts with file from
 package perl-IO-Compress-2.030-2.el5.rf.noarch
 file /usr/share/man/man3/Compress::Zlib.3pm.gz from install of
 perl-Compress-Zlib-2.015-1.el5.rf.noarch conflicts with file from
 package perl-IO-Compress-2.030-2.el5.rf.noarch

Not sure if this will help... Have you tried updating perl-IO-Compress?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Openwebmail emergency (Perl)

2010-10-12 Thread Sean Hart
  On 10/11/10 11:51 PM, Jussi Hirvi wrote:
 It seems Openwebmail is using Perl-Compress-Zlib from rpmforce, but in
 Centos this is obsoleted by Perl-IO-Compress, and there is a conflict.

 This I got when I tried to install the rpmforce package:

 [r...@mail log]# yum install perl-Compress-Zlib
 Loaded plugins: fastestmirror, installonlyn
 Loading mirror speeds from cached hostfile
* addons: ftp.funet.fi
* base: ftp.funet.fi
* extras: ftp.funet.fi
* rpmforge: wftp.tu-chemnitz.de
* updates: ftp.funet.fi
 Setting up Install Process
 Package perl-Compress-Zlib is obsoleted by perl-IO-Compress, trying to
 install perl-IO-Compress-2.030-2.el5.rf.noarch instead
 Package perl-IO-Compress-2.030-2.el5.rf.noarch already installed and
 latest version
 Nothing to do
In that case, it depends on how brave/desperate you are ;)

First off... You had better have a backup of your system.  If you don't 
already, you've learned a valuable lesson, but still get one RIGHT NOW.

Is there anything on the Openwebmail forums/mailing lists?  I can't 
imagine you are the only one facing this.

Next, you could try removing the conflict or getting the required Zlib 
package (rpm or sourced from cpan) and force install, but I don't really 
recommend.  I don't use Openwebmail, so I can't speak to the 
requirements there.

Good luck,
~Sean

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LDAP Mail Notice

2010-10-11 Thread Sean Hart


 I have a thought of  writing the script to implement the LDAP mail 
 noticerecently.

 That's to say , after creating the new account and his passwd , then 
 how to send an E-mail to notice him?

 By the way , I used the LDAP tool called 389 LDAP or openldap  recently .



 Could someone give me some suggestions ?


What precisely are you looking to do?  Are you trying to write a script 
to create a user and email them?  If so, I've definitely done that.  I 
put together a bunch of tools a while back if you are looking for some 
building blocks (including a send mail to user sub and a lot of 
retrieve/set LDAP attributes).  A lot of this was put together from 
other stuff I found on the web in my years of LDAP administration.

Disclaimer: I'm a self taught perl guy, so I don't know all of the 
tricks, etc

http://xrayspx.com/part-3-subroutines

If you give me a better idea of exactly what you are looking for I'm 
sure I could whip something up.

Cheers,
Sean
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] e2fsck with millions of files

2010-09-18 Thread Sean Carolan
 I'm not sure how much 64-bit support the kernel expects so there might be some
 complications going that direction, but you can certainly install a 64-bit
 system and run the 32-bit versions of the apps and have both versions of most
 libraries available.

To bring some closure to this thread, I ended up using a 64 bit Ubuntu
Desktop Live CD which comes with e2fsck version 1.41.  Here are the
steps required:

sudo /bin/su - root
modprobe dm_mod
apt-get install lvm2
vgscan
vgchange -a y
lvscan
e2fsck /dev/path/to/partition

This worked and the fsck completed within a few hours.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] e2fsck with millions of files

2010-08-31 Thread Sean Carolan
I have a large (1.5TB) partition with millions of files on it.  e2fsck has
been running nearly 12 hours and is still on Checking directory structure.
 Any tips for speeding this along?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] e2fsck with millions of files

2010-08-31 Thread Sean Carolan
 Yep, same answer here, I had RHEL4.8 on a 2.6 TB MSA, and you just leave it 
 going over the weekend.

I kind of figured as much; we're letting ours run during the week so
that hopefully the partition will be ready for weekend backup jobs.
Thanks for the feedback.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] e2fsck with millions of files

2010-08-31 Thread Sean Carolan
On Tue, Aug 31, 2010 at 8:49 AM, Brent L. Bates blba...@vigyan.com wrote:
     Use the XFS file system and never have to worry about fsck again.  You'll
 have a fast, more reliable, and more robust file system with over a decade and
 exabytes of use under its belt that you will never have to wait for fsck
 again.

When this server gets rebuilt this is probably the path we will take.
Thanks for the tip.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] e2fsck with millions of files

2010-08-31 Thread Sean Carolan
 To extend his comment: There is a bug in e2fsck for filesystems with
 many hardlinks.  It could take *weeks* or longer, if it finishes at all,
 to run on a large filesystem with lots of hardlinks.

 http://www.mail-archive.com/scientific-linux-us...@listserv.fnal.gov/msg02180.html

Awesome.  This happens to be our exact situation - this partition is
used for BackupPC which heavily relies on hard links.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] e2fsck with millions of files

2010-08-31 Thread Sean Carolan
According to the release notes this bug has been fixed in version 1.40:

http://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.40
E2fsprogs 1.40 (June 29, 2007)
There was a floating point precision error which could cause e2fsck to
loop forever on really big filesystems with a large inode count.
(Addresses Debian Bug: #411838)

What are the odds of this getting included in CentOS 5.6?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Cannot allocate memory java exception - apache still returns 200 OK

2010-07-20 Thread Sean Carolan
I'm configuring some monitoring for a particular java/tomcat
application.  We have noticed the occasional Cannot allocate memory
error.  When this occurs apache still seems to return a 200 OK
status code.  Anyone know how to configure this so that when java has
an error, apache will also return some kind of error?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ClamAV clamscan command using huge amount of RAM

2010-04-14 Thread Sean Carolan
 Change to clamd (use clamdscan). Yes, clamscan needs quite a bit of RAM.

 Kai

Thank you Kai, our performance looks a lot better now.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


  1   2   3   >