Re: [CentOS] customized centos 5.4 install, core install?

2009-10-13 Thread Christoph Maser
Am Dienstag, den 13.10.2009, 02:06 +0200 schrieb David Mehler:
> Hi,
> Thanks for all your replies. I checked out spacewalk and cobbler, both
> of which look like they require a network support infrastructure, at
> least a tftp server. I want to use a CD or DVD. Kickstart sounds like
> the way to go, but i'm looking to have everything self contained, for
> example if i want to install the postfix package, i'll want to remove
> sendmail, set up postfix to start at selected runlevels and configure
> the main.cf and master.cf files so that when the box reboots postfix
> is ready to go. I'd also like to have this install as slimmed down as
> possible, for example i probably won't be using x so i'd prefer not to
> have any x packages in the install dvd.
> Thanks.
> Dave.

This can all be done with kickstart but you will have to have a quite
big uniqe kickstart config for each machine. And then all that
CD-waste... I'd really rethink the network-install options.


financial.com AG

Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | 
Germany
Frankfurt branch office/Niederlassung Frankfurt: Messeturm | 
Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany
Management board/Vorstand: Dr. Steffen Boehnert | Dr. Alexis Eisenhofer | Dr. 
Yann Samson | Matthias Wiederwach
Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender)
Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID 
number/St.Nr.: DE205 370 553
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dell Equallogic

2009-10-13 Thread Pasi Kärkkäinen
On Mon, Oct 12, 2009 at 06:44:55PM -0700, James A. Peltier wrote:
> On Mon, 12 Oct 2009, Eugene Vilensky wrote:
> 
> > Hi List,
> >
> > Does anyone here use Dell Equallogic IP SAN?  If so, do you have any
> > immediate high points / low points you wouldn't mind discussing on- or
> > off-list ?
> >
> 
> Yes, it works fine, however, we don't use the snapshot capability of the 
> system as it is not as fine grained as we would like.
> 

Hmm.. what kind of problems do you have with snapshots? 

-- Pasi

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dell Equallogic

2009-10-13 Thread Pasi Kärkkäinen
On Mon, Oct 12, 2009 at 07:04:21PM -0500, Eugene Vilensky wrote:
> Hi List,
> 
> Does anyone here use Dell Equallogic IP SAN?  If so, do you have any
> immediate high points / low points you wouldn't mind discussing on- or
> off-list ?
> 

Yep, I've been using Equallogic iSCSI arrays with Linux/RHEL5/CentOS5.
It's excellent storage solution.

-- Pasi

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] question on 5.4

2009-10-13 Thread Amos Shapira
While you are at it, consider the packages from go-oo.org. They are
supposed to include enhancements which didn't find their way to the
official release yet.

-Amos

On 10/10/09, Ron Loftin  wrote:
>
> On Fri, 2009-10-09 at 11:45 -0400, Jim Perrin wrote:
>> On Fri, Oct 9, 2009 at 11:43 AM, Jerry Geis  wrote:
>> > Does 5.4 come with an updated openoffice.
>> > 5.3 comes with version 2.3 was wondering if 5.4 will have 3.1
>>
>> Nope. 5.4 won't have openoffice 3.1
>>
> That's not a big surprise, just keeping within the stated policies of
> CentOS.
>
> However, I will point out that for those who want OOO 3.1, all they have
> to do is skip installing the old version that comes with CentOS, and
> install the RPMs that can be downloaded straight from openoffice.org.
> The ones for RHEL 5 work very well, and integrate with the Gnome desktop
> automagically.
>
> --
> Ron Loftin  relof...@twcny.rr.com
>
> "God, root, what is difference ?"   Piter from UserFriendly
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS for boot.kernel.org

2009-10-13 Thread Karanbir Singh
On 10/01/2009 07:25 PM, Geerd-Dietger Hoffmann wrote:
> Hey
>
> Is there an initiative to get CentOS to work with boot.kernel ?
>

not that I am aware of - but well Volunteered. Let me know if you need 
anything :)

- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Copy OS live to different hardware

2009-10-13 Thread Markus Falb
Bob Puff wrote:

> Hello,

> 
> My question: exactly what files should I exclude, so that I copy
> everything -except- what pertains to the ethernet card(s), and hard
> drive mounts.  I know of at least:
> 
> /etc/fstab
> /etc/sysconfig/network-scripts/*
> /var/run
> /proc
> 

I am not sure what you want to achieve, but if you want just to Backup, 
maybe specialized Backup Software like Bacula (http://www.bacula.org/) 
could be a better solution for you (Sorry, could not resist ;-)

That said, if you want to do it that way, my exclude list (maybe) could 
be:

/etc/mtab
/etc/ssh/*_key{,.pub}
/etc/hosts (maybe)
/etc/sysconfig/network-scripts/ifcfg-*
/etc/sysconfig/network-scripts/route-* (not sure, maybe other files too)
/proc/*
/selinux/*
/sys/*
/dev/*
/tmp/*
/*lost+found/* (maybe)
/.auto*

If the partition Layout differs
/etc/fstab
and not lost+found for not existing file systems maybe.

Well, I done that years ago multiple times for one shot cloning not for 
regular Backups and i remember beeing surprised that it worked, its kinda 
hackish i believe. I am sure i forgot something important paths in list 
above.



-- 
best regards,
markus

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] customized centos 5.4 install, core install?

2009-10-13 Thread Markus Falb
David Mehler wrote:

> Hello,
> This might be called a core build not completely positive. What i want
> to do is make a completely customized centos 5.4 unattended CD or DVt
> not only installs a specific list of apps apps that i want on each
> system, but configures them automatically perhaps via scripts, and
> enables or disables services etc. Basically, i want to drop the CD or
> DVD in a box which will probably not have a monitor anyway, and walk
> away. I then come back or ssh in and everything is already installed,
> any repos are added, configured and ready to go. Is this a core build?
> I'd appreciate any pointers on this.
> Thanks.
> Dave.

My Strategy for those things is:

1.
cobbler ( https://fedorahosted.org/cobbler/ ) for a minimal Unattended 
Installation. cobblers primary goal is installation over Network but it 
can also generate CD/DVD. cobbler integrates kickstart files into your CD.

2.
puppet ( http://reductivelabs.com/products/puppet/ ) for central 
configuration management.

-- 
best regards,
markus

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] layer 8 / user level firewall on linux?

2009-10-13 Thread John Doe
From: Rudi Ahlers 
> Does anyone know of a Linux firewall that offers layer 8 firewall /
> user level firewalling? Cyberoam
> (http://www.cyberoam.com/firewall.html) has a layer 8 firewall built
> into their UTM firewalls, and while it's a great product I find it a
> bit limited for what I want.
> 
> I basically want to track which user access what on the internet, from
> an internal network. Ideally I want to limit access to certain objects
> (i.e. websites, by URL / keyword / type, FTP, skype, MSN, etc) for
> certain users as well.

Maybe use squid with authentication and acls...?
And caching as a bonus...

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] customized centos 5.4 install, core install?

2009-10-13 Thread Tait Clarridge
On Tue, 2009-10-13 at 00:21 -0400, David Mehler wrote:
> Hi,
> Thanks for your reply. I'd probably be doing them in pairs spread out
> over a long period. I'd be interested in your php kickstart setup
> script.
> Thanks.
> Dave.

You may want to look at cobbler. It has a PXE boot option that can be
limited by MAC address. This would help in installing a certain
"profile" to your machine making it easier for you to customize each
install without having to burn mountains of CDs...

I am playing around with cobbler right now, but I can still send you the
kickstart script if you would like.




signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] customized centos 5.4 install, core install?

2009-10-13 Thread David Mehler
Hi,
Yes, thank you. Please send that script privately. I'll check in to cobbler.
Thanks.
Dave.


On 10/13/09, Tait Clarridge  wrote:
> On Tue, 2009-10-13 at 00:21 -0400, David Mehler wrote:
>> Hi,
>> Thanks for your reply. I'd probably be doing them in pairs spread out
>> over a long period. I'd be interested in your php kickstart setup
>> script.
>> Thanks.
>> Dave.
>
> You may want to look at cobbler. It has a PXE boot option that can be
> limited by MAC address. This would help in installing a certain
> "profile" to your machine making it easier for you to customize each
> install without having to burn mountains of CDs...
>
> I am playing around with cobbler right now, but I can still send you the
> kickstart script if you would like.
>
>
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] OT: pager pay

2009-10-13 Thread Alan McKay
Hey folks,

I'm trying to compare my small company's policy against other
companies out there.   We pay 10% of your per-hour salary equivalent
per every hour you carry it, whether it goes off or not.  So for
example someone making $55K/year works out to about $27 / hour (I
think), so they'd get $2.70 for every hour they carry the pager
outside of regular work hours.   We are a company of about 25 people.

My old employer Nortel still does it this way :
- $27.50 for every 8 hour shift you carry it, outside of regular work hours.
- any page is billed at time-and-a-half, minimum 1 hour billed
- any page requiring you to go into work, is billed at time-and-a-half
with a 3 hour min

I have a buddy at IBM and while it varies by group, his group does this :
- $30/day for carrying it, whether it goes off or not
- every page gets billed at time-and-a-half, minimum 30 minutes

Anyone else want to share theirs?

thanks,
-Alan

-- 
“Don't eat anything you've ever seen advertised on TV”
 - Michael Pollan, author of "In Defense of Food"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] web based file sharing software

2009-10-13 Thread Ramon Nieto
> depends what you mean by "files sharing"

A file download server similar to RapidShare or MegaUpload.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] web based file sharing software

2009-10-13 Thread Les Mikesell
Ramon Nieto wrote:
> Hello all
> 
> Does anybody knows about web based file sharing software? of course
> that runs on centos.
> 
> i have found 3 proyects on sourceforge, but i would like to hear from
> you what do you use or what do you recommend?.

Most wiki's allow file attachments with up/download through browsers. 
Mediawiki is probably the most popular.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: pager pay

2009-10-13 Thread m . roth
Hi.

> Hey folks,
>
> I'm trying to compare my small company's policy against other
> companies out there.   We pay 10% of your per-hour salary equivalent
> per every hour you carry it, whether it goes off or not.  So for
> example someone making $55K/year works out to about $27 / hour (I
> think), so they'd get $2.70 for every hour they carry the pager
> outside of regular work hours.   We are a company of about 25 people.
>
> My old employer Nortel still does it this way :
> - $27.50 for every 8 hour shift you carry it, outside of regular work
> hours.

Back in the mid-nineties, I worked for Ameritech, a Baby Bell. I was
salaried. Extra pay for carrying it? Ha. HA. Hahahahahaha

   mark 24x7x365.25 (except for the couple months I carried two...)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: pager pay

2009-10-13 Thread Terry Polzin
On Tuesday 13 October 2009 12:28, Alan McKay wrote:
> Hey folks,
>
> I'm trying to compare my small company's policy against other
> companies out there.   We pay 10% of your per-hour salary equivalent
> per every hour you carry it, whether it goes off or not.  So for
> example someone making $55K/year works out to about $27 / hour (I
> think), so they'd get $2.70 for every hour they carry the pager
> outside of regular work hours.   We are a company of about 25 people.
>
> My old employer Nortel still does it this way :
> - $27.50 for every 8 hour shift you carry it, outside of regular work
> hours. - any page is billed at time-and-a-half, minimum 1 hour billed
> - any page requiring you to go into work, is billed at time-and-a-half
> with a 3 hour min
>
> I have a buddy at IBM and while it varies by group, his group does this :
> - $30/day for carrying it, whether it goes off or not
> - every page gets billed at time-and-a-half, minimum 30 minutes
>
> Anyone else want to share theirs?
>
> thanks,
> -Alan


Pager pay, whatever you get is gravy.


pgpVDl28iGIix.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] customized centos 5.4 install, core install?

2009-10-13 Thread Florin Andrei
MHR wrote:
> On Mon, Oct 12, 2009 at 7:53 AM, David Mehler  wrote:
>> Hello,
>> This might be called a core build not completely positive. What i want
>> to do is make a completely customized centos 5.4 unattended CD or DVt
> 
> Did I miss the announcement?  I wasn't expecting 5.4 to be out for
> another few weeks

http://twitter.com/CentOS/status/4831596086

-- 
Florin Andrei

http://florin.myip.org/

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] customized centos 5.4 install, core install?

2009-10-13 Thread Paul Heinlein
On Tue, 13 Oct 2009, Florin Andrei wrote:

>> Did I miss the announcement?  I wasn't expecting 5.4 to be out for 
>> another few weeks
>
> http://twitter.com/CentOS/status/4831596086

It's a sure-hit proposition. I schedule a major downtime to install 
new kernels in all manner of infrastructure servers -- mail, web, nfs, 
vpn, blah, blah -- and then, the VERY NEXT DAY, I see the CentOS 
X.Next announcement telling me that I was about two weeks too soon.

At least there are some things I can count on...  :-)

-- 
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: pager pay

2009-10-13 Thread Max Hetrick
Alan McKay wrote:

> Anyone else want to share theirs?

I don't get on call, but my company pays my text messaging plan on my 
cell phone each month, since it's used as my pager. It's about $10 a month.

Our policy for call outs are as follows:

If I have to come into the office, I get a minimum call out time of 2 
hours, regardless if I'm here for 15 minutes or 2 hours. If that time 
falls on a Friday (I work normal Monday to Thursday 10 hour days), 
anything on Friday until midnight is time and a half pay. If the call 
out time is past 11:59 p.m. on Friday, until 6:00 a.m. Monday morning, 
then I get double time pay. There's some comp time rules in there too, 
but I rarely use it.

I have OpenVPN access from home or anywhere else. If I can fix the 
problem from home without having to come in, I don't get the call out 
minimum time of 2 hours. I only get paid the OT of the time I worked on 
the problem. I same rules apply for pay with the time and a half and 
double time scheme as above.

Regards,
Max
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp with tty

2009-10-13 Thread Marc Wiatrowski
What about disabling the tty requirement for sudo with '!requiretty' in your
/etc/sudoers setup?

On Mon, Oct 12, 2009 at 12:11 PM,  wrote:

>
> Hello
>
> I need to know a way to have scp allocate a tty on a remote machine
> so I can have it run sudo and activate a vpn which it will need to
> activate. scp with "-S" does not work. I can't chmod +s the cisco vpn
> client
> because when I try to run it it says it can not have setuser.
>
> I could have the user scp via root but I do not want to do that.
>
> Any way to have scp allocate a tty?
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: pager pay

2009-10-13 Thread nate
Alan McKay wrote:
> Hey folks,
>
> I'm trying to compare my small company's policy against other
> companies out there.   We pay 10% of your per-hour salary equivalent
> per every hour you carry it, whether it goes off or not.  So for
> example someone making $55K/year works out to about $27 / hour (I
> think), so they'd get $2.70 for every hour they carry the pager
> outside of regular work hours.   We are a company of about 25 people.
>
> My old employer Nortel still does it this way :
> - $27.50 for every 8 hour shift you carry it, outside of regular work hours

I'd say really depends on how much work the pager involves, how
often your paged and how much time you spend responding to such
pages.

A company I worked at two jobs ago had pager pay, they tiered it
per tier. Pager duty was absolutely brutal, you could easily get
100+ pages a week. I think the average pay was something like $150/week
extra for carrying it. I got something like $250/week since I was
the lone tier 3 person. There was about 140 people at the time
I left.

My last company and my current one don't compensate for pager
duty, both places the load is very light, my current company has
a dedicated 24/7 NOC type setup, so as a tier 3 person(or maybe
tier 4 who knows) I get called maybe twice a month. I am technically
on call 24/7/365, but if I don't answer they just escalate to
somebody else.

nate



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp with tty

2009-10-13 Thread Les Mikesell
tony.chamberl...@lemko.com wrote:
> Hello
> 
> I need to know a way to have scp allocate a tty on a remote machine
> so I can have it run sudo and activate a vpn which it will need to
> activate. scp with "-S" does not work. I can't chmod +s the cisco vpn client
> because when I try to run it it says it can not have setuser.
> 
> I could have the user scp via root but I do not want to do that.
> 
> Any way to have scp allocate a tty?

Why don't you set up ssh keys for a passwordless connection as the 
appropriate user for the file copy and avoid the problem?

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp with tty

2009-10-13 Thread aurfalien
I actually had to set both ssh keys and commented out the requiretty  
in the sudoers file.

What I was doing was having ssh called from a script and running a  
command on that remote host it was ssh-ing into.


On Oct 13, 2009, at 11:43 AM, Les Mikesell wrote:

> tony.chamberl...@lemko.com wrote:
>> Hello
>>
>> I need to know a way to have scp allocate a tty on a remote machine
>> so I can have it run sudo and activate a vpn which it will need to
>> activate. scp with "-S" does not work. I can't chmod +s the cisco  
>> vpn client
>> because when I try to run it it says it can not have setuser.
>>
>> I could have the user scp via root but I do not want to do that.
>>
>> Any way to have scp allocate a tty?
>
> Why don't you set up ssh keys for a passwordless connection as the
> appropriate user for the file copy and avoid the problem?
>
> -- 
>   Les Mikesell
> lesmikes...@gmail.com
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: pager pay

2009-10-13 Thread Drew
Like Max I don't have "pager pay" but I do get paid for call outs.

My phone is fully paid for (approx $60/m) and call outs are paid at
time and a half (Sunday is double time), minimum one hour. All travel
time is considered call out time and mileage is eligible for $0.50/km.

I'm on call 7am to 9pm Mon-Sat and I usually work 7am-5pm Mon-Fri.


-- 
Drew

"Nothing in life is to be feared. It is only to be understood."
--Marie Curie
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp with tty

2009-10-13 Thread Les Mikesell
aurfal...@gmail.com wrote:
> I actually had to set both ssh keys and commented out the requiretty  
> in the sudoers file.
> 
> What I was doing was having ssh called from a script and running a  
> command on that remote host it was ssh-ing into.

I'm still missing why you'd need to sudo inside the remote shell instead 
of ssh'ing as the right user in the first place.  Or at least why you'd 
require a password for it.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp with tty

2009-10-13 Thread aurfalien
Well, I noticed that ssh/scp probably requires tty and when called  
from a script, its not from a tty.

At least in my case which was drupal calling a script that lauched  
ssh, a non tty source.

I also required running privileged commands.

Mebbe you don't need all this so check your logs and see what happens.

On Oct 13, 2009, at 12:15 PM, Les Mikesell wrote:

> aurfal...@gmail.com wrote:
>> I actually had to set both ssh keys and commented out the requiretty
>> in the sudoers file.
>>
>> What I was doing was having ssh called from a script and running a
>> command on that remote host it was ssh-ing into.
>
> I'm still missing why you'd need to sudo inside the remote shell  
> instead
> of ssh'ing as the right user in the first place.  Or at least why  
> you'd
> require a password for it.
>
> -- 
>   Les Mikesell
>lesmikes...@gmail.com
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp with tty

2009-10-13 Thread Warren Young
Les Mikesell wrote:
> 
> I'm still missing why you'd need to sudo inside the remote shell instead 
> of ssh'ing as the right user in the first place.  

Perhaps he doesn't know the user@ syntax.

Tony, try this:

[localu...@host1 ~]$ ssh r...@host2 remotecmd

This requires that the public key for localuser on host1 exists in 
host2:.ssh/authorized_keys.  It also requires "PermitRootLogin yes" in 
/etc/ssh/sshd_config, which is unfortunately the default on CentOS.  (I 
usually turn it off.)

Beware that this makes localuser on host1 equivalent to root on host2!

Also realize that remotecmd can be a very complex thing, not just a 
simple command.  You can use pipes and other things through ssh.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp with tty

2009-10-13 Thread Frank Thommen
Warren Young wrote:
> Les Mikesell wrote:
>> [...]
> 
> This requires that the public key for localuser on host1 exists in 
> host2:.ssh/authorized_keys.  It also requires "PermitRootLogin yes" in 
> /etc/ssh/sshd_config, which is unfortunately the default on CentOS.  (I 
> usually turn it off.)

Unfortunately?  I could not live w/o it ;-)


> Also realize that remotecmd can be a very complex thing, not just a 
> simple command.  You can use pipes and other things through ssh.

If using IO redirections or pipes, be sure to quote them correctly:

   [localu...@host1 ~]$ ssh r...@host2 remotecmd > /tmp/file

will create /tmp/file with the output of remotecmd on host1 (!), while

   [localu...@host1 ~]$ ssh r...@host2 remotecmd ">" /tmp/file

will create /tmp/file on host2.


Cheers

frank
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] scp with tty

2009-10-13 Thread m . roth
> Well, I noticed that ssh/scp probably requires tty and when called
> from a script, its not from a tty.
>
> At least in my case which was drupal calling a script that lauched
> ssh, a non tty source.
>
> I also required running privileged commands.
>
> Mebbe you don't need all this so check your logs and see what happens.
>
My last job, I was setting up rsync backups. What I did was create a user,
backup, then in /etc/sudoers, have !requiretty *only* for that user. The
user was also limited in what commands it could run (in that case, rsync
only).

Don't forget to log in as that user first, so that you don't get the "Oh,
This is a new IP, are you Sure you want to continue connecting?!?!"

   mark

> On Oct 13, 2009, at 12:15 PM, Les Mikesell wrote:
>
>> aurfal...@gmail.com wrote:
>>> I actually had to set both ssh keys and commented out the requiretty
>>> in the sudoers file.
>>>
>>> What I was doing was having ssh called from a script and running a
>>> command on that remote host it was ssh-ing into.
>>
>> I'm still missing why you'd need to sudo inside the remote shell
>> instead
>> of ssh'ing as the right user in the first place.  Or at least why
>> you'd
>> require a password for it.
>>
>> --
>>   Les Mikesell
>>lesmikes...@gmail.com
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] timekeeping on VMware guests

2009-10-13 Thread Carlos Santana
Howdy,

I am having time-drift issues on my CentOS VM. I had referred to
following documentation:
http://wiki.centos.org/TipsAndTricks/VMWare_Server , however it didn't
help. I used kickstart for creating this VM and I am listing important
steps in ref to timekeeping issue. Any comments or suggestion would be
appreciated.

-
CS.

---
# For EL5 virtual machines, Append the following in Grub to help keep
the clock from drifting
# and to reduce the interupt requests
#   32bit: --append="rhgb quiet divider=10 clocksource=acpi_pm"
#   64bit: --append="rhgb quiet notsc divider=10"
bootloader --location=mbr
--md5pass=$1$mXSD1l6mO$BBCk1gYArAATS7dlCQGthN. --append="rhgb quiet
divider=10 clocksource=acpi_pm"

%packages --nobase
# Other packages not listed here
# ntp was installed
ntp

### Add step-tickers ###
cat > /etc/ntp/step-tickers <<\EOF2
0.centos.pool.ntp.org
1.centos.pool.ntp.org
EOF2
### End of step-ticker file ###


# Applied patch mentioned on CentOS page
# http://wiki.centos.org/TipsAndTricks/VMWare_Server
patch --verbose -b -l -i /root/ntp.patch



VMware Tools not installed.



Thanks,
CS.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] timekeeping on VMware guests

2009-10-13 Thread Greg Bailey
Carlos Santana wrote:
> Howdy,
>
> I am having time-drift issues on my CentOS VM. I had referred to
> following documentation:
> http://wiki.centos.org/TipsAndTricks/VMWare_Server , however it didn't
> help. I used kickstart for creating this VM and I am listing important
> steps in ref to timekeeping issue. Any comments or suggestion would be
> appreciated.
>
> -
> CS.
>   
I'm not sure what version of VMware Server you're running, but I had 
issues keeping accurate time within guest VMs until I followed the 
instructions at:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1591

If your guest clocks are running too quickly, this may apply to you.

-Greg
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] timekeeping on VMware guests

2009-10-13 Thread Akemi Yagi
On Tue, Oct 13, 2009 at 2:42 PM, Carlos Santana  wrote:
> Howdy,
>
> I am having time-drift issues on my CentOS VM. I had referred to
> following documentation:
> http://wiki.centos.org/TipsAndTricks/VMWare_Server , however it didn't
> help. I used kickstart for creating this VM and I am listing important
> steps in ref to timekeeping issue. Any comments or suggestion would be
> appreciated.

The knowledgebase article referenced in the VMWare Server wiki article:

http://kb.vmware.com/kb/1006427

is the best source as far as I can tell.  This is because VMWare keep
the contents up-to-date.  As suggested in there, you may want to try
the 5.4 kernel -164 (already available for CentOS) without using
clocksource or divider= options.  This kernel has patches that were
offered by VMWare developers to address the time drift issues.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] timekeeping on VMware guests

2009-10-13 Thread nate
Carlos Santana wrote:
> Howdy,
>
> I am having time-drift issues on my CentOS VM. I had referred to
> following documentation:
> http://wiki.centos.org/TipsAndTricks/VMWare_Server , however it didn't
> help. I used kickstart for creating this VM and I am listing important
> steps in ref to timekeeping issue. Any comments or suggestion would be
> appreciated.

[..]
> VMware Tools not installed.

You should certainly install vmware tools, and enable time sync to
the guest. Also don't run an ntp server in a Vmware VM.

I had an issue on my system running Debian and VMware server, I think
it was a hardware/bios issue but the thing was the host system detected
the clock speed of the hardware at 1/2 the proper speed. Which caused
the host OS clock speed to double. Which wrecked havok in the VMs. Once
I loaded the 'p4-clockmod' module that 'fixed' the clock speed in the
host and I restarted the guest VMs and things were good after that.

Another thing to check is to make sure the 'rtc' driver is loaded,
my recent vmware server experience is limited to running it on
Debian(have it on 2 systems), so I can't speak to running it on top
of CentOS. Most of my ESX guests are CentOS though.

Another thing I do is have ntpdate run in cron every so often to
do another 'sync' to the host, typically once every 5 minutes
I found that in my experience at least there is still some drift
over time without doing that even with vmware tools time sync
enabled. I do the same on guests running on ESX(roughly 300 of
them).

I have found on ESX at least, haven't tried any other version
of vmware, but on ESX with a VMI enabled kernel(unfortunately none
of the RHEL4/5 kernels are VMI-enabled) with paravirtualization
you can run an ntp server in the guest. I run dedicated Fedora 8
VMs with ntp servers(my vmware servers sync against those VMs),
for this purpose. I know paravirtualization is going away in
VMware at some point, hoping to find another solution before
that happens.

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] timekeeping on VMware guests

2009-10-13 Thread Ray Van Dolson
On Tue, Oct 13, 2009 at 04:31:03PM -0700, nate wrote:
> Carlos Santana wrote:
> > Howdy,
> >
> > I am having time-drift issues on my CentOS VM. I had referred to
> > following documentation:
> > http://wiki.centos.org/TipsAndTricks/VMWare_Server , however it didn't
> > help. I used kickstart for creating this VM and I am listing important
> > steps in ref to timekeeping issue. Any comments or suggestion would be
> > appreciated.
> 
> [..]
> > VMware Tools not installed.
> 
> You should certainly install vmware tools, and enable time sync to
> the guest. Also don't run an ntp server in a Vmware VM.

This is what I'd always thought, but the VMware KB link[1] referenced
in the other reply in this thread seems to indicate that best practice
is to use NTP + kernel w/ clock/divider options (unless it's new enough
to not need it) and to *not* use the VMware Tools host time sync.

That said, you should certainly still have VMware Tools installed, it
just sounds like the host time sync is no longer preferred...

Also note that they recommend you remove the local time source in
ntp.conf...

Ray

[1] 
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006427
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] timekeeping on VMware guests

2009-10-13 Thread aurfalien
I had a similar issue with my Xen VMs, both fully virtualized and para  
virtualized.

I followed these dirs and was able to fix it.

Perhaps its applicable to you?

http://www.linux.org.za/Lists-Archives/glug-tech-0905/msg00271.html


On Oct 13, 2009, at 4:34 PM, Ray Van Dolson wrote:

> On Tue, Oct 13, 2009 at 04:31:03PM -0700, nate wrote:
>> Carlos Santana wrote:
>>> Howdy,
>>>
>>> I am having time-drift issues on my CentOS VM. I had referred to
>>> following documentation:
>>> http://wiki.centos.org/TipsAndTricks/VMWare_Server , however it  
>>> didn't
>>> help. I used kickstart for creating this VM and I am listing  
>>> important
>>> steps in ref to timekeeping issue. Any comments or suggestion  
>>> would be
>>> appreciated.
>>
>> [..]
>>> VMware Tools not installed.
>>
>> You should certainly install vmware tools, and enable time sync to
>> the guest. Also don't run an ntp server in a Vmware VM.
>
> This is what I'd always thought, but the VMware KB link[1] referenced
> in the other reply in this thread seems to indicate that best practice
> is to use NTP + kernel w/ clock/divider options (unless it's new  
> enough
> to not need it) and to *not* use the VMware Tools host time sync.
>
> That said, you should certainly still have VMware Tools installed, it
> just sounds like the host time sync is no longer preferred...
>
> Also note that they recommend you remove the local time source in
> ntp.conf...
>
> Ray
>
> [1] 
> http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006427
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] timekeeping on VMware guests

2009-10-13 Thread Akemi Yagi
On Tue, Oct 13, 2009 at 4:34 PM, Ray Van Dolson  wrote:
> On Tue, Oct 13, 2009 at 04:31:03PM -0700, nate wrote:

>> You should certainly install vmware tools, and enable time sync to
>> the guest. Also don't run an ntp server in a Vmware VM.
>
> This is what I'd always thought, but the VMware KB link[1] referenced
> in the other reply in this thread seems to indicate that best practice
> is to use NTP + kernel w/ clock/divider options (unless it's new enough
> to not need it) and to *not* use the VMware Tools host time sync.
>
> That said, you should certainly still have VMware Tools installed, it
> just sounds like the host time sync is no longer preferred...
>
> Also note that they recommend you remove the local time source in
> ntp.conf...
>
> Ray
>
> [1] 
> http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006427

Right.  The instructions in the above KB article are contrary to the
tactics we used to employ.  At least one of my VM guests whose clock
was going too fast was corrected by following that KB.

However, there is no one-size-fits-all solution.  The article is the
best effort by VMWare but it does not rectify all cases.  As a matter
of fact, the VMWare techs have helped Red Hat improve the RHEL kernel
by providing patches (as I mentioned in my earlier post).  The details
are in this bugzilla:

https://bugzilla.redhat.com/show_bug.cgi?id=463573

Those patches are now in the -164 kernel.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] timekeeping on VMware guests

2009-10-13 Thread Dag Wieers
On Tue, 13 Oct 2009, Ray Van Dolson wrote:

> On Tue, Oct 13, 2009 at 04:31:03PM -0700, nate wrote:
>> Carlos Santana wrote:
>>> Howdy,
>>>
>>> I am having time-drift issues on my CentOS VM. I had referred to
>>> following documentation:
>>> http://wiki.centos.org/TipsAndTricks/VMWare_Server , however it didn't
>>> help. I used kickstart for creating this VM and I am listing important
>>> steps in ref to timekeeping issue. Any comments or suggestion would be
>>> appreciated.
>>
>> [..]
>>> VMware Tools not installed.
>>
>> You should certainly install vmware tools, and enable time sync to
>> the guest. Also don't run an ntp server in a Vmware VM.
>
> This is what I'd always thought, but the VMware KB link[1] referenced
> in the other reply in this thread seems to indicate that best practice
> is to use NTP + kernel w/ clock/divider options (unless it's new enough
> to not need it) and to *not* use the VMware Tools host time sync.
>
> That said, you should certainly still have VMware Tools installed, it
> just sounds like the host time sync is no longer preferred...
>
> Also note that they recommend you remove the local time source in
> ntp.conf...

Indeed, they changed course over time once they learned that NTP could be 
made to work reliably when using tinker panic 0. I have had my share of 
VMware timekeeping troubles the past 5 years, mostly because the 
recommendations didn't always apply to what we were seeing.

We still use Host-Guest synchronization for ESX 2.0 VM guests, but most of 
the infrastructure has been migrated, recently to ESX 3.5. VMware never 
could confirm that the recommendations laid out in the knowledge base 
article also applies to ESX 2.0.

They seem to update that document (and the timekeeping PDF) for every new 
ESX release, and removing anything that applied to the previous release 
:-/ And without a detailed  changelog and no access to previous versions 
of the document you may get paranoid or get into discussions based on 
different copies of that document.

I've been there too :-)

-- 
--   dag wieers,  d...@wieers.com,  http://dag.wieers.com/   --
[Any errors in spelling, tact or fact are transmission errors]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] timekeeping on VMware guests

2009-10-13 Thread mark
Carlos Santana wrote:
> Howdy,
> 
> I am having time-drift issues on my CentOS VM. I had referred to
> following documentation:
> http://wiki.centos.org/TipsAndTricks/VMWare_Server , however it didn't
> help. I used kickstart for creating this VM and I am listing important
> steps in ref to timekeeping issue. Any comments or suggestion would be
> appreciated.
> 
You want to look at VMware's Best Practices for timekeeping. It says to use 
Linux's NTP, *not* VMware tools.

mark
> -
> CS.
> 
> ---
> # For EL5 virtual machines, Append the following in Grub to help keep
> the clock from drifting
> # and to reduce the interupt requests
> #   32bit: --append="rhgb quiet divider=10 clocksource=acpi_pm"
> #   64bit: --append="rhgb quiet notsc divider=10"
> bootloader --location=mbr
> --md5pass=$1$mXSD1l6mO$BBCk1gYArAATS7dlCQGthN. --append="rhgb quiet
> divider=10 clocksource=acpi_pm"
> 
> %packages --nobase
> # Other packages not listed here
> # ntp was installed
> ntp
> 
> ### Add step-tickers ###
> cat > /etc/ntp/step-tickers <<\EOF2
> 0.centos.pool.ntp.org
> 1.centos.pool.ntp.org
> EOF2
> ### End of step-ticker file ###
> 
> 
> # Applied patch mentioned on CentOS page
> # http://wiki.centos.org/TipsAndTricks/VMWare_Server
> patch --verbose -b -l -i /root/ntp.patch
> 
> 
> 
> VMware Tools not installed.
> 
> 
> 
> Thanks,
> CS.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 


-- 
The truth will out: someone got it at last:
Dogs have masters; cats have staff.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.3 on X86_64: yum installs both i386 and x86_64 packages

2009-10-13 Thread Vnpenguin
I removed all i?86 on my x86_64 servers. No problem.

-- 
http://vnoss.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Best practice settings for channel bonding interface mode?

2009-10-13 Thread Götz Reinicke - IT-Koordinator
Hi,

may be there are some best practice suggestions for the "best mode" for
channel bonding interface?

Or in other words, when should/would I use which mode?

E.g. I do have some fileservers connected to the users lan and to some
ISCSI Storages. Or some Webservers only connected to the LAN. The
switches are all new cisco models.

I've read sone docs (1), (2) and (3) so the theory is mostly clear.

Thanks for any suggestion or hint,

Best regards,

Götz



(1) http://www.linuxhorizon.ro/bonding.html

(2)
http://www.linuxtopia.org/online_books/rhel5/rhel5_administration/rhel5_s1-networkscripts-interfaces.html#s2-networkscripts-interfaces-chan

(3)
http://www.linuxtopia.org/online_books/rhel5/rhel5_administration/rhel5_s1-modules-ethernet.html#s2-modules-bonding

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia Hübner
Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium

Geschäftsführer:
Prof. Thomas Schadt

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos