Re: [CentOS] ssh in while in fsck

[Bent Terp]

On Wed, Apr 27, 2011 at 10:28 PM,   wrote:
> Hmm, now *that's* an interesting thought: with, say, DRAC, could you ssh
> into a management server, then go to a booting system?

I'd recommend you use a vpn connection instead, so you can go straight
to the iDRAC/ILO/RSA2 (Dell/HP/IBM, respectively) using ssh and https

That way you can powercycle the server, access the bios, and work in
the console without a running sshd.

BR Bent
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Missing packages since January (broken update for CentOS 5)

[Markus Falb]

On 28.4.2011 07:13, Milan Keršláger wrote:
> There are missing updates (there could be more of them):
> 
> libselinux-1.33.4-5.7.el5.src.rpm (RHBA-2011:0029, 1/12/11)
> device-mapper-1.02.55-2.el5.src.rpm (RHBA-2011:0051, 1/13/11)

Nothing is missing. Those are in CentOS 5.6
What version are you running ?

> 
> 
> My error message:
> 
> --> Running transaction check
> ---> Package libvirt.x86_64 0:0.8.2-15.el5_6.1 set to be updated
> --> Processing Dependency: libselinux >= 1.33.4-5.6 for package: libvirt
> ---> Package libvirt-python.x86_64 0:0.8.2-15.el5_6.1 set to be updated
> ---> Package lvm2.x86_64 0:2.02.74-5.el5_6.1 set to be updated
> --> Processing Dependency: device-mapper >= 1.02.55-2 for package: lvm2
> --> Finished Dependency Resolution
> libvirt-0.8.2-15.el5_6.1.x86_64 from updates has depsolving problems
>--> Missing Dependency: libselinux >= 1.33.4-5.6 is needed by package 
> libvirt-0.8.2-15.el5_6.1.x86_64 (updates)
> lvm2-2.02.74-5.el5_6.1.x86_64 from updates has depsolving problems
>--> Missing Dependency: device-mapper >= 1.02.55-2 is needed by 
> package lvm2-2.02.74-5.el5_6.1.x86_64 (updates)
> Error: Missing Dependency: device-mapper >= 1.02.55-2 is needed by 
> package lvm2-2.02.74-5.el5_6.1.x86_64 (updates)
> Error: Missing Dependency: libselinux >= 1.33.4-5.6 is needed by package 
> libvirt-0.8.2-15.el5_6.1.x86_64 (updates)

libvirt was an update after 5.6
Your yum points to the latest update but possibly not to the latest base
? What baseurl or mirrorlist is your base repo pointing to ?

-- 
Kind Regards, Markus Falb



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Simon Grinberg]

- Original Message -
> From: "Emmanuel Noobadmin" 
> To: "CentOS mailing list" , "kvm" 
> Sent: Tuesday, April 26, 2011 11:57:18 PM
> Subject: Re: [CentOS] Install CentOS as KVM guest
> Unfortunately, things still don't work.
> 
> 
> It's just ridiculous that the installer under KVM does not detect the
> cdrom drive it was booted from. Trying to do a net-install doesn't
> work, maybe I messed up the networking even though br0 and eth0 is
> working on the host.
> 
> Nevermind, let's install apache and use the mounted ISO. Verified
> apache is working and the CentOS folder is accessible via web browser.
> But, still the guest installer cannot seem to access the installation
> files.
> 
> OK, so maybe I messed up the networking, after all I am the noob...
> maybe specifying --network=bridge:br0 isn't enough. There was
> something about a tap or tunnel when initially reading up on bridged
> networking. Looking up more on this, there are several resources
> (sorry KVM FAQ leads to a page that no longer exist) which like many
> other instructions, give the commands without really explaining
> what/why.
> 
> So I have to run some tunctl command and scripts to add a bridge and
> tunnel/tap... but wait, I already made my bridge, will running the
> script kill my networking by creating a second bridge? Especially the
> warning about temporarily loosing connectivity due to ifcfg1 being
> reset.
> 
> And if I need to run this script everytime in order to activate the
> bridge and tunnel, doesn't that mean all my guest OS are screwed if
> the host reboots while I'm not around? Shouldn't these things go into
> permanent files like if-tun0 or something?
> 
> Every year, I get a little closer to not using VMWare but it seems
> like this year is going to be victory for VMWare again.

What version of VMWare are you using?

> 
> CC to kvm mailing list but I expect, like my previous request for help
> to the list, it will be rejected by mailman or a moderator.
> 
> 
> Just damn frustrated, even if it's probably just me being too stupid
> to know how to use KVM.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Jussi Hirvi]

> On 4/28/11, Jussi Hirvi  wrote:
>>>  Try virt-install without creating the image first.

On 28.4.2011 9.17, Emmanuel Noobadmin wrote:
> I'll give that a spin next, although the disks file I created are RAW
> as well. The problem wth using virt-install to create files is that it
> takes forever, I've no idea why.

For me creating the images does not take any noticeable time. Only when 
the installer formats the "disk" to ext3 (or others), it will take some 
time. Probably your syntax does not work. Try the syntax in my example, like

--disk path=/kvmail/mail.img,size=290 \

(making sure that the image does not exist beforehand).

>> >  No, I definitely did not do that. I don't know why that would be needed.
> That's what I'm puzzling over. But reading up so far seems to imply
> that it acts as a way for qemu/KVM to receive and inject network
> traffic into the kernel network stack.

You are probably reading some outdated howtos. No wonder, because where 
are the up-to-date howtos?? Red Hat Virtualization Guide is a nice book, 
but only an overview - it does not go into the gritty details.

>> >  The double slash does not look good... On next try, try it with no slash
>> >  at the end of ip, and no slash at the beginning of path. (But keep the
>> >  last slash.):-)
> The installer adds that double slash, it was one of the first oddity I
> noted. But googling indicates that this was normal and testing it,
> indicates that the URL was valid. I suppose it just meant root of root
> which is still root :D

I just got the double slash too on one installation try. I believe the 
double slash is an error of the error messaging. :-) If so, it only 
shows the level of "sophistication" of virt-install.

> Anyway I tried out different variations just to be safe, but whether I
> used /Centos56 or Centos56 or Centos56/, the same url comes up. The
> installer apparently does some basic sanitization of the parameters.

So it should. But that only "sanitizes" the error message, and 
erroneously (producing a double slash). :-)

I am just installing CentOS 4. I tried it first without a trailing slash 
in the path, and I got instantly "unable to get the image" or so. After 
that I could not get the image again, whatever I did. I had to restart 
the install from scratch, and then, after being sure to add the trailing 
slash, I got the image at once.

If this is problem in Anaconda or virt-install, I am not sure.

> As for the httpd log you mentioned in another email, that's also one
> of the reason I keep suspecting that networking is the issue. There
> are no entries in the httpd logs for the guest, but I can see my
> external access entries.

Ok, that could be the case.

- Jussi
-- 
Jussi Hirvi * Green Spot
Suvilahdenkatu 1 B 78 * 00500 Helsinki * Finland
Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms)
jussi.hi...@greenspot.fi * http://www.greenspot.fi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Emmanuel Noobadmin]

On 4/28/11, Simon Grinberg  wrote:
> What version of VMWare are you using?

Currently, I'm not using VMWare yet on this new server as I really do
hope to be able to use an "unified" solution. But so far, it's just
one brickwall after another. I've given myself until this weekend to
get things working or just go the easy way.

Previously, I've used VMServer 2 as well as VMPlayer 3. All running
off CentOS 5.x host.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ssh in while in fsck

[Johnny Hughes]

On 04/27/2011 03:22 PM, Brian Mathis wrote:
> On Wed, Apr 27, 2011 at 4:14 PM,   wrote:
>> My manager reminds me that "in the old Sun days", the ssh server came up
>> first, *before* the fsck on boot, so that if there was a problem, and fsck
>> was waiting for an answer, you could remotely ssh in, kill it, restart it,
>> and answer (or give it the right flags).
>>
>> Does anyone know if it's possible to have that happen with CentOS? It
>> would be nice to have it boot that way, so that if you checked, and
>> figured it should have been up already, you could handle the problem
>> without coming in
>>
>>mark
> 
> 
> I think having a decent remote console is the solution to that.  DRAC,
> KVMoIP, Serial console, etc...  I'm not sure how it could be
> considered safe to start services like sshd before the filesystem has
> been checked.

sshd can't come up before the fsck ... fsck is done on unmounted file
systems.  On the old Sun machines (and the new ones for that matter)
there was a remote console (exactly what Brian mentions) that you had
access to where you started the OS.  This Console allow you to see
things before sshd was turned on via the machine, but it was also on a
separate IP address from the machine.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Emmanuel Noobadmin]

On 4/28/11, Jussi Hirvi  wrote:
> For me creating the images does not take any noticeable time. Only when
> the installer formats the "disk" to ext3 (or others), it will take some
> time. Probably your syntax does not work. Try the syntax in my example, like
>
> --disk path=/kvmail/mail.img,size=290 \
>
> (making sure that the image does not exist beforehand).

Thanks for pointing out that it really is abnormal because it takes
about 2 hours for virt-install to create a 190G disk for me. I'll try
this on my next attempt.


> You are probably reading some outdated howtos. No wonder, because where
> are the up-to-date howtos?? Red Hat Virtualization Guide is a nice book,
> but only an overview - it does not go into the gritty details.

That's generally the issue, I've tried to use mostly information from
the newer pages/articles but still, most of them skip important
caveats/notes like the fact while specifying the ISO is good enough
for the GUI, it doesn't work with the CLI.

> I just got the double slash too on one installation try. I believe the
> double slash is an error of the error messaging. :-) If so, it only
> shows the level of "sophistication" of virt-install.

Damn!

> So it should. But that only "sanitizes" the error message, and
> erroneously (producing a double slash). :-)

But in any case, since I tried all kinds of variations on host IP and
directory, including stupidities like Centos56/images/ just in case.
So this doesn't seem to be the problem.

> If this is problem in Anaconda or virt-install, I am not sure.

Should be an anaconda issue I think since this is entirely within the
virtualized environment already?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Samba with 389 Directory Server Auth problem

[sync]

Hi Folks,

I had a crack at setting up a Samba PDC using a fresh installation of FDS
1.2.4  as the backend on one of our RHEL  5.3 servers per the Wiki
Howto:Samba but ran into a few issues.

In the section 'Populating FDS with PDC Entry', it instructs the user to run
'net getlocalsid'. This results in the following:

[root@mybox logs]# net getlocalsid

lib/smbldap.c:smbldap_search_domain_info(1392) Adding domain info for CMOMA
failed with NT_STATUS_UNSUCCESSFUL SID for domain mybox is:
S-1-5-21-4207250186-2406131440-3849861866

Thinking that I might just have a Samba configuration problem, I continued
by attempting to add the following ldif:

dn: sambaDomainName=CMOMA,dc=cmoma,dc=mycompany,dc=com

objectclass: sambaDomain

objectclass: sambaUnixIDPool

objectclass: top

sambaDomainName: CMOMA samba

SID: S-1-5-21-4207250186-2406131440-3849861866

uidNumber: 550

gidNumber: 550


which resulted in the following error:

adding new entry sambaDomainName=CMOMA,dc=cmoma,dc=mycompany,dc=com
ldap_add: Object class violation ldap_add: additional info: unknown object
class "sambaUnixIDPool"

I double checked /opt/fedora-ds/slapd-/config/schema/61samba.ldif
created in the initial setup steps and was unable to find a sambaUnixIDPool
objectclass, but did see a sambaUnixIdPool. However, after I edited
/tmp/sambaDomainName.ldif to reflect this objectclass name, ldif2ldap still
complains about an 'unknown object class'.

Any idea of what might be happening here?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Curious fdisk report on large disk

[Timothy Murphy]

Robert Nichols wrote:

> Actually, if it were my drive I would just re-create the 4 primary
> partitions using whatever tool was handy, but giving that extended
> partition a "normal" type instead.  Once I had the primary partitions
> looking right, then I'd go in with a hex editor and change the type code
> to "5" for that partition.  Listing the partition table again with fdisk
> should now show that everything is back.  (It's very unlikely that any
> of those secondary partition tables got overwritten when you
> essentially turned the whole disk into one giant DOS file system.)

Thanks.
I think I'd better wait until I have acquired a large external drive,
and backed up everything!

But re your method, couldn't I just use fdisk to change the type of sdb4?


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] INN removed from CentOS 6

[Tony Mountifield]

In article <20110427185049.ga3...@frodo.gerdesas.com>,
John R. Dennison  wrote:
> 
> Best practices call for not building rpm as root.  For additional
> information please take a look at:
> 
> http://wiki.centos.org/HowTos/RebuildSRPM

Thanks for the pointer!

Tony
-- 
Tony Mountifield
Work: t...@softins.co.uk - http://www.softins.co.uk
Play: t...@mountifield.org - http://tony.mountifield.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] malware scanner

[Ljubomir Ljubojevic]

Les Mikesell wrote:
> On 4/27/11 10:46 PM, Fajar Priyanto wrote:
>> On Thu, Apr 28, 2011 at 11:43 AM, Fajar Priyanto  wrote:
>>> On Wed, Apr 27, 2011 at 5:32 PM, Ljubomir Ljubojevic  
>>> wrote:
 You should check out ClearOS. It's based on CentOS and it's full
 gateway/proxy/anti-malware solution with web interface.

 Ljubomir
>> Oh ClearOS is previously known as ClarkConnect?
>> Isn't it a commercial product?
> 
> You can buy enhancements and support but the basic product is free and does 
> not 
> have a user limit like the old ClarkConnect.
> 

Yes, entire system is now Open Source and developers focused on paid 
services like mail backup servers, etc. since they found out that is 
where money is.

I used ClarkConnect from ver 3.0 and I still use them on some 
systems/networks.

Ljubomir
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Emmanuel Noobadmin]

On 4/28/11, Gleb Natapov  wrote:
> So why don't you use virt-manager?

The original intention was to run the host without any graphical
desktop or anything not necessary to host the guests. That was based
on reading and such which recommends not having anything beyond the
necessary to minimize potential security problems and maximize
resources available.

Then there were those pages which warn that virt-manager didn't work
too well if bridged networking was required.

Last but not least, when I finally gave up and installed the desktop,
virt-manager couldn't find the hypervisor. Checking up, it appears
that the user needed additional permissions to certain files, which
after given and tested via CLI, I still get errors.

Starting up X as root gave me this ominous warning that I really
shouldn't be doing this and since I didn't think it was wise in the
first place to have the desktop with root access running on what's
supposed to be a production machine, I stopped trying that route and
went back to figuring how to get virt-install to work.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] INN removed from CentOS 6

[Cal Sawyer]

In a past life when i was working with IRIX systems, i changed from innd to 
DNews (http://netwinsite.com/dnews/install.htm, 
http://netwinsite.com/dnews/faq1.htm#2).  Looks like it's been out of 
development since 2007 (but what's changed nntp-wise since 2007?  dunno), but 
it was a piece of cake to configure and administer.  

- csawyer
 


-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of 
Reynolds McClatchey
Sent: 27 April 2011 14:57
To: centos@centos.org
Subject: [CentOS] INN removed from CentOS 6

I use inn to make internal company announcements and
 discussions available to remote offices.
 I note inn is removed form RHEL 6. What replaces inn?

http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Technical_Notes/apc.html

Will inn be available from elsewhere? Will I have to compile
 it?

Should I modify my scripts to create and install html files
 for a web server? That would make article deletion, archiving,
 and maintenance more difficult than it is with the inn
 nntp server.

Is there some "forum" type package that would be better
 than the inn system? 
-- 
M Reynolds McClatchey JrVP Engineering and Inventory
Southern Aluminum Finishing Co Inc  404-355-1560 x222 Voice
1581 Huber St NW404-350-0581 Fax
Atlanta GA 30318


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Ljubomir Ljubojevic]

Emmanuel Noobadmin wrote:
> On 4/28/11, Gleb Natapov  wrote:
>> So why don't you use virt-manager?
> 
> The original intention was to run the host without any graphical
> desktop or anything not necessary to host the guests. That was based
> on reading and such which recommends not having anything beyond the
> necessary to minimize potential security problems and maximize
> resources available.
> 
> Then there were those pages which warn that virt-manager didn't work
> too well if bridged networking was required.
> 
> Last but not least, when I finally gave up and installed the desktop,
> virt-manager couldn't find the hypervisor. Checking up, it appears
> that the user needed additional permissions to certain files, which
> after given and tested via CLI, I still get errors.
> 
> Starting up X as root gave me this ominous warning that I really
> shouldn't be doing this and since I didn't think it was wise in the
> first place to have the desktop with root access running on what's
> supposed to be a production machine, I stopped trying that route and
> went back to figuring how to get virt-install to work.


I log in as root and setup KVM guest, set it to boot automatically and 
next login as root is only if something is wrong.

Ljubomir


> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
> 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] libvirt security update CVE-2011-1146

[Riccardo Veraldi]

Hello,
I have seen that package libvirt-0.8.2-15.el5_6.3 on CentOS 5.6 which 
addresses CVE-2011-1146 
 vulnerability

is not yet available while for example it is on Scientific Linux.
Is there any particular reason why the above rpm update is still not 
available on mirrors ?


thank you

Rick

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Curious fdisk report on large disk

[Robert Nichols]

On 04/28/2011 04:06 AM, Timothy Murphy wrote:
> Robert Nichols wrote:
>
>> Actually, if it were my drive I would just re-create the 4 primary
>> partitions using whatever tool was handy, but giving that extended
>> partition a "normal" type instead.  Once I had the primary partitions
>> looking right, then I'd go in with a hex editor and change the type code
>> to "5" for that partition.  Listing the partition table again with fdisk
>> should now show that everything is back.  (It's very unlikely that any
>> of those secondary partition tables got overwritten when you
>> essentially turned the whole disk into one giant DOS file system.)
>
> Thanks.
> I think I'd better wait until I have acquired a large external drive,
> and backed up everything!
>
> But re your method, couldn't I just use fdisk to change the type of sdb4?

No, you can't change a normal partition to one of the "extended" types
or change an extended partition to a normal one.  Making either of those
changes radically alters the way that portion of the disk is viewed, and
I don't know of any partitioning tool that is written to handle that.
In particular, creating an extended partition implies initializing the
secondary partition table at the start of that new partition, and that
might or might not be what you intended if you changed a normal type
to an extended one.

-- 
Bob Nichols "NOSPAM" is really part of my email address.
 Do NOT delete it.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ssh in while in fsck

[Scott Robbins]

On Thu, Apr 28, 2011 at 03:38:44AM -0500, Johnny Hughes wrote:
> > On Wed, Apr 27, 2011 at 4:14 PM,   wrote:
> >>
> >> Does anyone know if it's possible to have that happen with CentOS? It
> >> would be nice to have it boot that way, so that if you checked, and
> >> figured it should have been up already, you could handle the problem
> >> without coming in
> >>
> >>mark
> > 
> > 
> 
> sshd can't come up before the fsck ... fsck is done on unmounted file
> systems.  On the old Sun machines (and the new ones for that matter)
> there was a remote console (exactly what Brian mentions) that you had
> access to where you started the OS.  This Console allow you to see
> things before sshd was turned on via the machine, but it was also on a
> separate IP address from the machine.

Same with DRAC.  It's useful, for example, if one is trying to do
something like team NICs, and a mistype makes the machine's main IP
address unreachable.  As Johnny says, it's a separate IP address. 



-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Xander: Generally speaking, when scary things get scared, not 
good. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Johnny Hughes]

On 04/28/2011 06:46 AM, Emmanuel Noobadmin wrote:
> On 4/28/11, Gleb Natapov  wrote:
>> So why don't you use virt-manager?
> 
> The original intention was to run the host without any graphical
> desktop or anything not necessary to host the guests. That was based
> on reading and such which recommends not having anything beyond the
> necessary to minimize potential security problems and maximize
> resources available.
> 
> Then there were those pages which warn that virt-manager didn't work
> too well if bridged networking was required.
> 
> Last but not least, when I finally gave up and installed the desktop,
> virt-manager couldn't find the hypervisor. Checking up, it appears
> that the user needed additional permissions to certain files, which
> after given and tested via CLI, I still get errors.
> 
> Starting up X as root gave me this ominous warning that I really
> shouldn't be doing this and since I didn't think it was wise in the
> first place to have the desktop with root access running on what's
> supposed to be a production machine, I stopped trying that route and
> went back to figuring how to get virt-install to work.

You don't have to run an entire X desktop on the server to use
virt-manager there.

If you have a graphical linux workstation on the same network (x can be
slow across a WAN, so I would only do it locally), you can just do this
from the workstation with X running:

ssh -XY -l root 

then from the server do this:

virt-manager

This will run just the application "virt-manager" on the server and push
the video display back to your machine.

You may need to run this on the workstation before you ssh to the server
machine:

xhost +




signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] libvirt security update CVE-2011-1146

[Johnny Hughes]

On 04/28/2011 07:47 AM, Riccardo Veraldi wrote:
> Hello,
> I have seen that package libvirt-0.8.2-15.el5_6.3 on CentOS 5.6 which
> addresses CVE-2011-1146
>  vulnerability
> is not yet available while for example it is on Scientific Linux.
> Is there any particular reason why the above rpm update is still not
> available on mirrors ?
> 

This was pushed, it just had a .el5 instead of .el5_6 dist tag, so it
looks older than the other update.  Corrected and repushed.

Thanks,
Johnny Hughes



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] LDAPs causing System Message Bus to hang when there's no network

[Mattias Geniar]

Hi Everyone,

I'm experiencing the following problem, for which I've not yet found a
resolution. It's been discussed elsewhere, but unfortunately nothing
actually solves it.

Here's my /etc/ldap.conf file:
#
ldap_version 3
base ou=people,o=xxx
uri ldaps://server1.domain.be/ ldaps://server2.domain.be/
bind_policy soft
scope sub
timelimit 3
bind_timelimit 5
idle_timelimit 120
referrals no
ssl start_tls
ssl on
tls_checkpeer yes
tls_cacertdir /etc/openldap/cacerts
#

And the relevant nsswitch:
#
passwd: files ldap
shadow: files ldap
group: files ldap
#

So that's pretty straight forward. My LDAP systems are running fine, and
I can authenticate to them.

However, the problem: when the client boots *without network
connectivity*, the server gets stuck/hangs at "Start System Message
Bus". I've tracked this down to the following known bug in Redhat, but
it dates back to early 2010.
https://bugzilla.redhat.com/show_bug.cgi?id=182464#c46

The solution works: if I comment out the "group" from nsswitch to only
load from "files" and not from "ldap", it works and the system boots.
However, since most systems (and that includes ours) uses groups for
management, that's not a viable option.

We're running the very latest 5.6 with all packages (only from the
CentOS repo's) up-to-date.

Has anyone else ever solved this to still be able to keep the group ldap
entry in nsswitch.conf without having a server hang on boot if there's
no network?

Regards,
Mattias
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Install CentOS as KVM guest

[R P Herrold]

On Thu, 28 Apr 2011, Emmanuel Noobadmin wrote:

> Thanks for pointing out that it really is abnormal because 
> it takes about 2 hours for virt-install to create a 190G 
> disk for me.

As you are having issues with the install, I might suggest 
creating a more modest sized disk image, at least during 
testing --- It would be a rare test case that would need more 
than 8 G for a CentOS image while you are still solving setup 
issues

We have supported guest images up to 400G for one user who 
kept re-sizing an image up and up from an initial 4G to over 
400 G ... eventually the 2 1/2 hour lag in moving content from 
one big image to another bigger image caused him to ask why it 
was taking so long. When our interface 'resizes' an image, 
it takes a safety snapshot first to an NFS backup store, 
tests is, and only then deletes the old image and creates the 
old one ... so it takes a while for images over say 100 G.

The delays you note do not surprise me -- it takes time to 
reliably shuttle bits around a disk, and no cacheing effects 
are possible with off the shelf setups (i.e., lacking huge 
memory based drives) to support such large image sizes

-- Russ herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Benjamin Hackl]

On Thu, 28 Apr 2011 16:21:58 +0200
"Mattias Geniar"  wrote:

> Here's my /etc/ldap.conf file:

Did you include nss_initgroups_ignoreuser in your /etc/ldap.conf?

nss_initgroups_ignoreusers root,ldap 

Brgds
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Mattias Geniar]

> Did you include nss_initgroups_ignoreuser in your /etc/ldap.conf?
> 
> nss_initgroups_ignoreusers root,ldap
> 
> Brgds

Hi Benjamin,

I tried that, but that just makes it hang upon the next service trying
to start (in our case: a zabbix monitoring daemon running as
zabbix/zabbix). 

It works, if I include the entire list of all "local" users/groups that
can be ignored. However, that's not feasible when doing mass-deploys on
varied systems. 

If there's a way to simply say "ignore all users with UID's < 500" that
could be a work-around I can live with, but it doesn't appear there is.

Regards,
Mattias
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] FASTTRACK Update

[Akemi Yagi]

Johnny,

Thanks for releasing the fasttrack updates for CentOS-5.  Could you
also provide the repo file for this?

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[John Hodrien]

On Thu, 28 Apr 2011, Mattias Geniar wrote:

>> Did you include nss_initgroups_ignoreuser in your /etc/ldap.conf?
>>
>> nss_initgroups_ignoreusers root,ldap
>>
>> Brgds
>
> Hi Benjamin,
>
> I tried that, but that just makes it hang upon the next service trying
> to start (in our case: a zabbix monitoring daemon running as
> zabbix/zabbix).
>
> It works, if I include the entire list of all "local" users/groups that
> can be ignored. However, that's not feasible when doing mass-deploys on
> varied systems.
>
> If there's a way to simply say "ignore all users with UID's < 500" that
> could be a work-around I can live with, but it doesn't appear there is.

I'd hope you'd see these problems almost entirely go away in future with a
switch to sssd rather than nss_ldap, as it makes the whole process a lot more
stateful and aware of what's going on.

Having an rc.local that does an nsswitch.conf twiddle is probably a viciously
robust way of dealing with this problem...

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Scott Robbins]

On Thu, Apr 28, 2011 at 04:21:58PM +0200, Mattias Geniar wrote:
> Hi Everyone,
> 
> 
> So that's pretty straight forward. My LDAP systems are running fine, and
> I can authenticate to them.
> 
> However, the problem: when the client boots *without network
> connectivity*, the server gets stuck/hangs at "Start System Message
> Bus". I've tracked this down to the following known bug in Redhat, but
> it dates back to early 2010.
> https://bugzilla.redhat.com/show_bug.cgi?id=182464#c46

Yes, the bug is actually older than that---Don't know if it's only RH
based systems (as so many things seem to work everywhere but RH and
their offshoots) or ldap.
You should be able to fix it by changing /etc/ldap.conf.  There is a
default commented line in there

#bind_policy hard

Uncomment it, change it to soft.  (On the client.)  Note this is
/etc/ldap.conf--in Fedora, if that's the client, I believe it's now
/etc/pam_ldap.conf or possibly /etc/nss_ldap.conf.  

I can't find the earlier bug at first glance, but it's FAR older than
2010, and they never bothered to fix it. 


> Has anyone else ever solved this to still be able to keep the group ldap
> entry in nsswitch.conf without having a server hang on boot if there's
> no network?

See above.  Darn, I wish I could find that older bug, so that I could go
to the newer one you mention and point out that they've been unable to
fix it for far longer than a year.  :)  (I might do it anyway)  

Grouchily yours,  (Not at you, at RH for being unable to get such a
basic thing to work--actually, at one point, Fedora changed bind_policy
to soft so that it would work, but now they're back to the broken way.)


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Principal Snyder: It's fuzzy-minded liberal thinking like that 
that gets you eaten. 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Scott Robbins]

On Thu, Apr 28, 2011 at 03:52:44PM +0100, John Hodrien wrote:
> On Thu, 28 Apr 2011, Mattias Geniar wrote:
> 
> > could be a work-around I can live with, but it doesn't appear there is.
> 
> I'd hope you'd see these problems almost entirely go away in future with a
> switch to sssd rather than nss_ldap, as it makes the whole process a lot more
> stateful and aware of what's going on.
> 

Fear not, Fedora has managed to have that break things for many people
too.  

I see they just closed the bug with a won't fix, though the fix is known
and available. 


> Having an rc.local that does an nsswitch.conf twiddle is probably a viciously
> robust way of dealing with this problem...

Unnecessary too.  :)  See my earlier email.

I might as well give a link to my ldap page, so if anyone else comes
across this, they can see the issue mentioned withfix.

http://home.roadrunner.com/~computertaijutsu/ldap.html


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Buffy: You sound like Mr. Initiative! 'Demons bad, 
people good.' 
Riley: Something wrong with that theorem? 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Mattias Geniar]

> Yes, the bug is actually older than that---Don't know if it's only RH
> based systems (as so many things seem to work everywhere but RH and
> their offshoots) or ldap.
> You should be able to fix it by changing /etc/ldap.conf.  There is a
> default commented line in there
> 
> #bind_policy hard
> 
> Uncomment it, change it to soft.  (On the client.)  Note this is
> /etc/ldap.conf--in Fedora, if that's the client, I believe it's now
> /etc/pam_ldap.conf or possibly /etc/nss_ldap.conf.
> 
> I can't find the earlier bug at first glance, but it's FAR older than
> 2010, and they never bothered to fix it.
> 
> 
> > Has anyone else ever solved this to still be able to keep the group
ldap
> > entry in nsswitch.conf without having a server hang on boot if
there's
> > no network?
> 
> See above.  Darn, I wish I could find that older bug, so that I could
go
> to the newer one you mention and point out that they've been unable to
> fix it for far longer than a year.  :)  (I might do it anyway)
> 
> Grouchily yours,  (Not at you, at RH for being unable to get such a
> basic thing to work--actually, at one point, Fedora changed
bind_policy
> to soft so that it would work, but now they're back to the broken
way.)
> 
> 
> --
> Scott Robbins

Hi Scott,

In case you're wondering, this is about the oldest entry (2006):
https://bugzilla.redhat.com/show_bug.cgi?id=186527

The bind_policy didn't seem to have the wanted effect with me, it kept
trying to connect to LDAP server even after 10+ failed attempts, taking
1m50s on each and every attempt.

I read quite a few topics on that solving the issue, but it didn't seem
to be that case in my environment.
Are there other workarounds/tips if the bind_policy doesn't work? The
rc.local  hack seems ... ugly ... and embarrassing if a client would
ever find it out. :-)

Regards,
Mattias
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[John Hodrien]

On Thu, 28 Apr 2011, Scott Robbins wrote:

> On Thu, Apr 28, 2011 at 03:52:44PM +0100, John Hodrien wrote:
>> On Thu, 28 Apr 2011, Mattias Geniar wrote:
>>
>>> could be a work-around I can live with, but it doesn't appear there is.
>>
>> I'd hope you'd see these problems almost entirely go away in future with a
>> switch to sssd rather than nss_ldap, as it makes the whole process a lot more
>> stateful and aware of what's going on.
>>
>
> Fear not, Fedora has managed to have that break things for many people
> too.
>
> I see they just closed the bug with a won't fix, though the fix is known
> and available.
>
>
>> Having an rc.local that does an nsswitch.conf twiddle is probably a viciously
>> robust way of dealing with this problem...
>
> Unnecessary too.  :)  See my earlier email.
>
> I might as well give a link to my ldap page, so if anyone else comes
> across this, they can see the issue mentioned withfix.
>
> http://home.roadrunner.com/~computertaijutsu/ldap.html

bind_policy soft isn't a panacea in my experience.  I've had failures that
aren't fixed with this (I've had udev go into a world of its own stopping the
machine booting).

nss_ldap's just a bit sucky by design.  It lacks any caching, and nscd simply
isn't in a position to provide it in a sane manner.  Performance with large
directories and nested groups is terrible unless you completely avoid
enumeration of groups which breaks some tools.

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Scott Robbins]

On Thu, Apr 28, 2011 at 05:03:55PM +0200, Mattias Geniar wrote:


> 
> Hi Scott,
> 
> In case you're wondering, this is about the oldest entry (2006):
> https://bugzilla.redhat.com/show_bug.cgi?id=186527
> 
> The bind_policy didn't seem to have the wanted effect with me, it kept
> trying to connect to LDAP server even after 10+ failed attempts, taking
> 1m50s on each and every attempt.
> 
> I read quite a few topics on that solving the issue, but it didn't seem
> to be that case in my environment.
> Are there other workarounds/tips if the bind_policy doesn't work? The
> rc.local  hack seems ... ugly ... and embarrassing if a client would
> ever find it out. :-)

Agreed.  I've never known that fix to not work though.  

(Thanks for the input,will have to add that it doesn't work in all
cases t my page).

-- 

Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Spike: Should I really trust you? 
Adam: Scout's honor. 
Spike: You were a Boy Scout? 
Adam: Parts of me.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[John Hodrien]

On Thu, 28 Apr 2011, Mattias Geniar wrote:

> I read quite a few topics on that solving the issue, but it didn't seem
> to be that case in my environment.
> Are there other workarounds/tips if the bind_policy doesn't work? The
> rc.local  hack seems ... ugly ... and embarrassing if a client would
> ever find it out. :-)

Automatic generation of the nss_initrgroups_ignoreusers line on boot?  A
creative patch to nss_ldap?

Current versions of sssd look really promising to me (I tested against a
candidate for RHEL 6.1), and offer workable performance compared to a heavily
hacked nss_ldap against a large LDAP tree (much better than an unmodified
nss_ldap).

I also seemed to recall that bind_policy soft potentially opened you up to
security issues.  An allow all, deny denied-people would let someone in if
ldap timed out.  Variations on that would presumably leak if you throw nscd
into the mix.

Newer versions of nss_ldap support nss_initgroups_minimum_uid 500, so
presumably that has a good chance of solving your problem.

jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Steve Thompson]

On Thu, 28 Apr 2011, Benjamin Hackl wrote:

> On Thu, 28 Apr 2011 16:21:58 +0200
> "Mattias Geniar"  wrote:
>
>> Here's my /etc/ldap.conf file:
>
> Did you include nss_initgroups_ignoreuser in your /etc/ldap.conf?
>
> nss_initgroups_ignoreusers root,ldap

This works:

   nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus

-Steve
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Emmanuel Noobadmin]

On 4/28/11, Gleb Natapov  wrote:
> Qemu is not intended to be used directly by end user. It is too complex as
> you already found out. VMware don't even give you access to such low parts
> of virt stack. You should use libvirt or virt-manager instead. Especially
> if you are concerned about security. I think libvirt can start guest on
> headless server.

Sorry for the confusion, I was using libvirtd in CLI, i.e.
virt-install and virsh, not qemu directly.

> If this still fails for you you need to complain to libvirt developers
> (not in a rant mode, but providing details of what exact version of
> software you have problem with and what are you trying to do). And
> libvirt developers will not be shy to complain to qemu developers if the
> problem turned to be on their side.

Apologies about the rant mode as well. Before that, I tried sending
two emails (25th and 26th Apr) to the KVM list with some details,
hoping to get some advice. But each of these failed to materialize on
the kvm list for unknown reasons.

So I resorted to posting to the CentOS list, where I did get some
response for which I'm very thankful. The rant post came when despite
the additional advice which helped me get a little further, I keep
running into unexpected brickwalls like anaconda not seeing the "dvd"
(mounted ISO specified using --location) that it just booted from.

Out of frustration, I CC'd that particular email to the kvm list,
figuring that since it's likely to get me flamed, the imp of
perversity would probably let it through... and it did.

> As far as I know libvirt has no problem using bridged networking and
> virt-manager use libvirt so it should work if you use new enough virt
> stack, but you should ask on libvirt mailing list instead.

I guess those were outdated warnings on older versions. I'll give it
another spin given some of the new suggestions like using virt-install
to create the disk file. If it still doesn't work, I'll go check the
libvirt ML (I'm belatedly getting the idea that libvirt is not part of
kvm).
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS-announce Digest, Vol 74, Issue 9

[centos-announce-request]

Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CEBA-2011:470  CentOS 5 x86_64 cman Update (Johnny Hughes)
   2. CEBA-2011:470  CentOS 5 i386 cman Update (Johnny Hughes)
   3. CEEA-2011:0443 CentOS 5 i386 exim FASTTRACK Update (Johnny Hughes)
   4. CEEA-2011:0443 CentOS 5 x86_64 exim FASTTRACK Update
  (Johnny Hughes)
   5. CEEA-2011:0442 CentOS 5 i386 lapack FASTTRACK Update
  (Johnny Hughes)
   6. CEEA-2011:0442 CentOS 5 x86_64 lapack FASTTRACK   Update
  (Johnny Hughes)
   7. CEEA-2011:0441 CentOS 5 i386 gnome-vfs2 FASTTRACK Update
  (Johnny Hughes)
   8. CEEA-2011:0441 CentOS 5 x86_64 gnome-vfs2 FASTTRACK Update
  (Johnny Hughes)
   9. CEEA-2011:0440 CentOS 5 x86_64 nautilus FASTTRACK Update
  (Johnny Hughes)
  10. CEEA-2011:0440 CentOS 5 i386 nautilus FASTTRACK   Update
  (Johnny Hughes)
  11. CEEA-2011:0459 CentOS 5 i386 procps FASTTRACK Update
  (Johnny Hughes)
  12. CEEA-2011:0459 CentOS 5 x86_64 procps FASTTRACK   Update
  (Johnny Hughes)
  13. CEEA-2011:0458 CentOS 5 i386 tetex FASTTRACK  Update
  (Johnny Hughes)
  14. CEEA-2011:0458 CentOS 5 x86_64 tetex FASTTRACKUpdate
  (Johnny Hughes)
  15. CEEA-2011:0469 CentOS 5 i386 traceroute FASTTRACK Update
  (Johnny Hughes)
  16. CEEA-2011:0469 CentOS 5 x86_64 traceroute FASTTRACK Update
  (Johnny Hughes)
  17. CEEA-2011:0468 CentOS 5 i386 emacs FASTTRACK  Update
  (Johnny Hughes)
  18. CEEA-2011:0468 CentOS 5 x86_64 emacs FASTTRACKUpdate
  (Johnny Hughes)
  19. CEEA-2011:0467 CentOS 5 i386 emacs FASTTRACK  Update
  (Johnny Hughes)
  20. CEEA-2011:0467 CentOS 5 x86_64 emacs FASTTRACKUpdate
  (Johnny Hughes)
  21. CESA-2011:0391 Important CentOS 5 i386 libvirtUpdate
  (Johnny Hughes)
  22. CESA-2011:0391 Important CentOS 5 x86_64 libvirt  Update
  (Johnny Hughes)


--

Message: 1
Date: Thu, 28 Apr 2011 10:00:57 +
From: Johnny Hughes 
Subject: [CentOS-announce] CEBA-2011:470  CentOS 5 x86_64 cman Update
To: centos-annou...@centos.org
Message-ID: <20110428100057.ga22...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2011:470 

Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-0470.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
99065c2a6b725675f0129128cdbe257e  cman-2.0.115-68.el5_6.3.x86_64.rpm
be4a7de750e24f8c774e03a6d2ed79e1  cman-devel-2.0.115-68.el5_6.3.i386.rpm
95af2e49517ca7b13b9d5dcb5eb2d5f2  cman-devel-2.0.115-68.el5_6.3.x86_64.rpm

Source:
06c81f96091f72b6c918069950b6f0c1  cman-2.0.115-68.el5_6.3.src.rpm


-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 2
Date: Thu, 28 Apr 2011 10:00:57 +
From: Johnny Hughes 
Subject: [CentOS-announce] CEBA-2011:470  CentOS 5 i386 cman Update
To: centos-annou...@centos.org
Message-ID: <20110428100057.ga22...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2011:470 

Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-0470.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
d7b4b952ca4f27db21b7617ffae642a3  cman-2.0.115-68.el5_6.3.i386.rpm
f092b00fc883f8b9e22c1f44dbc62aa1  cman-devel-2.0.115-68.el5_6.3.i386.rpm

Source:
06c81f96091f72b6c918069950b6f0c1  cman-2.0.115-68.el5_6.3.src.rpm


-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 3
Date: Thu, 28 Apr 2011 12:24:08 +
From: Johnny Hughes 
Subject: [CentOS-announce] CEEA-2011:0443 CentOS 5 i386 exim FASTTRACK
Update
To: centos-annou...@centos.org
Message-ID: <20110428122408.ga23...@chakra.karan.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Enhancement Advisory 2011:0443 

Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-0443.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
c54a8e2a9b4f2fc521d5d6c289366d4c  exim-4.63-10.el5.i386.rpm
5e1012715ee15bd5e2a63daec56717ea  exim-mon-4.63-10.el5.i386.rpm
2c1c675ad2128da3e584207f6fc693f2  exim-sa-4.63-10.el5.i386.rpm

Source:
14decc56c98937f6395875ff6d45396e  exim-4.63-10.el5.src

Re: [CentOS] Install CentOS as KVM guest

[Emmanuel Noobadmin]

On 4/28/11, Johnny Hughes  wrote:
> You don't have to run an entire X desktop on the server to use
> virt-manager there.
>
> If you have a graphical linux workstation on the same network (x can be
> slow across a WAN, so I would only do it locally), you can just do this
> from the workstation with X running:
>
> ssh -XY -l root 
>
> then from the server do this:
>
> virt-manager
>
> This will run just the application "virt-manager" on the server and push
> the video display back to your machine.
>
> You may need to run this on the workstation before you ssh to the server
> machine:
>
> xhost +

Thanks a lot for this tip, it'll probably come in very useful for me
since it sounds a lot easier/efficient than having VNC (freenx never
worked for me) on every CentOS machine in my office. Although maybe
not in this particular case since my usual access to this particular
server is through WAN.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Ljubomir Ljubojevic]

Emmanuel Noobadmin wrote:
> On 4/28/11, Johnny Hughes  wrote:
>> You don't have to run an entire X desktop on the server to use
>> virt-manager there.
>>
>> If you have a graphical linux workstation on the same network (x can be
>> slow across a WAN, so I would only do it locally), you can just do this
>> from the workstation with X running:
>>
>> ssh -XY -l root 
>>
>> then from the server do this:
>>
>> virt-manager
>>
>> This will run just the application "virt-manager" on the server and push
>> the video display back to your machine.
>>
>> You may need to run this on the workstation before you ssh to the server
>> machine:
>>
>> xhost +
> 
> Thanks a lot for this tip, it'll probably come in very useful for me
> since it sounds a lot easier/efficient than having VNC (freenx never
> worked for me) on every CentOS machine in my office. Although maybe
> not in this particular case since my usual access to this particular
> server is through WAN.

It's SSH, it' safe from the internet also.

Ljubomir
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Paul Heinlein]

On Thu, 28 Apr 2011, Steve Thompson wrote:

> This works:
>
>   nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus

We use a slightly longer version:

nss_initgroups_ignoreusers 
root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman

I suspect, however, that the extra users listed in our setup aren't 
the cause of the hangups...

-- 
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Les Mikesell]

On 4/28/2011 11:02 AM, Emmanuel Noobadmin wrote:
>
>> If you have a graphical linux workstation on the same network (x can be
>> slow across a WAN, so I would only do it locally), you can just do this
>> from the workstation with X running:
>>
>> ssh -XY -l root
>>
>> then from the server do this:
>>
>> virt-manager
>>
>> This will run just the application "virt-manager" on the server and push
>> the video display back to your machine.
>>
>> You may need to run this on the workstation before you ssh to the server
>> machine:
>>
>> xhost +
>
> Thanks a lot for this tip, it'll probably come in very useful for me
> since it sounds a lot easier/efficient than having VNC (freenx never
> worked for me) on every CentOS machine in my office. Although maybe
> not in this particular case since my usual access to this particular
> server is through WAN.

Freenx is worth taking the time to solve whatever problem you had with 
it.  It should 'just work' from a yum install as long as you install the 
/etc/nxserver/client.id_dsa.key into your NX client and have the default 
ssh access.  You don't need to install it on every machine, just one 
that you use as your management desktop using the approach above to open 
windows for GUI programs from nearby machines.  You can run the NX 
client->freenx connection over a WAN and get much better performance 
than you will with ssh-forwarded windows direct to your remote location 
- plus you can disconnect the NX session and pick it up elsewhere with 
all your windows still open and programs still running.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Jussi Hirvi]

On 28.4.2011 18.58, Emmanuel Noobadmin wrote:
> like anaconda not seeing the "dvd"
> (mounted ISO specified using --location) that it just booted from.

That's ok, once you know that... But I agree, it is frustrating, because 
of lack of documentation. How much time wasted!

I found an interesting series of tutorials, looks pretty much 
up-to-date. Here is one:

http://www.cyberciti.biz/faq/kvm-virt-install-install-freebsd-centos-guest/

I never tried handing the install media over with the --connect (-c) 
flag like there:

virt-install...
-c /nfsclient/iso/FreeBSD-7.3-RELEASE-amd64-disc1.iso \

- Jussi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] ETA

[Dimitri Maziuk]

Dear developers,

I don't care for reasons, arguments, or flamefests. I need to plan my
workload.

By now I have half a dozen servers overdue for reimaging. I can put this
off for another week or two, but not really much longer.

There's obviously no point in installing centos 5 on any new machine.

So I need to know: is there any point in my waiting another week, or
should I just say 'screw it' and start scheduling SL roll-outs.

Thank you in advance
Dima



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Tru Huynh]

On Thu, Apr 28, 2011 at 08:17:46PM +0300, Jussi Hirvi wrote:
> On 28.4.2011 18.58, Emmanuel Noobadmin wrote:
> > like anaconda not seeing the "dvd"
> > (mounted ISO specified using --location) that it just booted from.
> 
> That's ok, once you know that... But I agree, it is frustrating, because 
> of lack of documentation. How much time wasted!
> 
does that mean that you volonteer to add some pages to wiki.centos.org
(-> centos-docs mailing list for more) ? ;P

Tru
-- 
Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance)
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B


pgpvf0Bu8gmt4.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

[Craig White]

On Thu, 2011-04-28 at 09:28 -0700, Paul Heinlein wrote:
> On Thu, 28 Apr 2011, Steve Thompson wrote:
> 
> > This works:
> >
> >   nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus
> 
> We use a slightly longer version:
> 
> nss_initgroups_ignoreusers 
> root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman
> 
> I suspect, however, that the extra users listed in our setup aren't 
> the cause of the hangups...

I use the following to prevent hanging at startup with LDAP.

nss_initgroups_ignoreusers root,ldap,bacula,named
timelimit 30
bind_timelimit 30
bind_policy soft

This is because some daemons start prior to the start of OpenLDAP
service.

Obviously adding haldaemon, dbus, radvd, tomcat, etc. or other 'users'
for daemons that launch prior to your LDAP server application is useful
but those users would have to be listed in /etc/passwd|group to
significantly benefit.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ETA

[m . roth]

Dimitri Maziuk wrote:
> Dear developers,
>
> I don't care for reasons, arguments, or flamefests. I need to plan my
> workload.
>
> By now I have half a dozen servers overdue for reimaging. I can put this
> off for another week or two, but not really much longer.
>
> There's obviously no point in installing centos 5 on any new machine.
>
> So I need to know: is there any point in my waiting another week, or
> should I just say 'screw it' and start scheduling SL roll-outs.

I don't understand. CentOS 5.6 is out - I've been rolling it out for well
over a week.

Or did you mean 6.0?

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] How to switching terminal/console to /dev/pts/X while in SSH?

[Emmanuel Noobadmin]

Is there a way to switch the display/console while connected while SSH
to another display e.g /dev/pts/X ?

The purpose is because qemu-kvm diverts the char device output to
/dev/pts/X so there's no further way to view/interact with the VM.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ETA

[Johnny Hughes]

On 04/28/2011 12:25 PM, Dimitri Maziuk wrote:
> Dear developers,
> 
> I don't care for reasons, arguments, or flamefests. I need to plan my
> workload.
> 
> By now I have half a dozen servers overdue for reimaging. I can put this
> off for another week or two, but not really much longer.
> 
> There's obviously no point in installing centos 5 on any new machine.
> 
> So I need to know: is there any point in my waiting another week, or
> should I just say 'screw it' and start scheduling SL roll-outs.
> 

If you want to deploy 6.0 within two weeks then you need to use
Scientific Linux.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ETA

[Dimitri Maziuk]

Johnny Hughes wrote:
> On 04/28/2011 12:25 PM, Dimitri Maziuk wrote:
>> Dear developers,
>>
>> I don't care for reasons, arguments, or flamefests. I need to plan my
>> workload.
>>
>> By now I have half a dozen servers overdue for reimaging. I can put this
>> off for another week or two, but not really much longer.
>>
>> There's obviously no point in installing centos 5 on any new machine.
>>
>> So I need to know: is there any point in my waiting another week, or
>> should I just say 'screw it' and start scheduling SL roll-outs.
>>
> 
> If you want to deploy 6.0 within two weeks then you need to use
> Scientific Linux.

Thank you.

So long and thanks for all the fish.

Dima



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ETA

[Daniel Heitmann]

He meant 6, that's why he mentioned SL, I think.

You should at least wait "a few days" upon making a decision, see: 
https://twitter.com/#!/centos

You should also remember that CentOS is a community effort and not RHEL.

Greetings,
Daniel Heitmann

gpg id: B251006E | key: http://horrendum.de/gpg.asc
xmpp: maledic...@jabber.ccc.de | otr-fingerprint: http://horrendum.de/otr.txt

Proprietary attachments instantly go to /dev/null. 



PGP.sig
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Jussi Hirvi]

On 28.4.2011 20.29, Tru Huynh wrote:
> does that mean that you volonteer to add some pages to wiki.centos.org
> (->  centos-docs mailing list for more) ? ;P
>
Maybe I could, How could that be done? Though I should have started to 
think about that earlier, now the big install hassle starts to be over 
already. But at least I have a rudimentary roadmap for installing CentOS 
4 or 5 guests text-based.

BTW, can guests be installed on raw (unformatted or formatted) 
partitions (not images)? Can virt-install do that? I tried it and had no 
luck.

- Jussi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ETA

[Robert Heller]

At Thu, 28 Apr 2011 12:25:26 -0500 CentOS mailing list  
wrote:

> 
> 
> 
> Dear developers,
> 
> I don't care for reasons, arguments, or flamefests. I need to plan my
> workload.
> 
> By now I have half a dozen servers overdue for reimaging. I can put this
> off for another week or two, but not really much longer.
> 
> There's obviously no point in installing centos 5 on any new machine.

I am not so sure about that.  If you need the machine up today, install
5.6 on it -- you can always upgrade later.  If you want bleeding edge
software install Fedora Core 14.  Otherwise sit tight.  Hassling the
developers is not going to make CentOS 6 show up any sooner.

I know that if I needed a server up this week or next week, I'd go ahead
and install CentOS 5.6.  (And I would have installed CentOS 5.5 back
before CentOS 5.6 was released.)

> 
> So I need to know: is there any point in my waiting another week, or
> should I just say 'screw it' and start scheduling SL roll-outs.
> 
> Thank you in advance
> Dima
> 
> Content-Description: OpenPGP digital signature
> 
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2.0.10 (GNU/Linux)
> Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org/
> 
> iD8DBQFNuaMGxzG8ttqkbbgRAuiFAJ4lVycU9++LqKXw1DeRsWJpDg9efACgs8tH
> pAMbztLgMdUblZ4QJ/6lXgw=
> =c4yp
> -END PGP SIGNATURE-
> 
> MIME-Version: 1.0
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
>   

-- 
Robert Heller -- 978-544-6933 / hel...@deepsoft.com
Deepwoods Software-- http://www.deepsoft.com/
()  ascii ribbon campaign -- against html e-mail
/\  www.asciiribbon.org   -- against proprietary attachments



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Jim Wildman]

On Thu, 28 Apr 2011, Jussi Hirvi wrote:

> BTW, can guests be installed on raw (unformatted or formatted)
> partitions (not images)? Can virt-install do that? I tried it and had no
> luck.
>
> - Jussi

You can install them to logical volumes...

Season to taste 
virt-install -p -n test_phys -r 512 --arch=x86_64 --os-type=linux
--os-variant=rhel5 -l http://192.168.200.2/c5u5_x86_64 -x
ks=http://192.168.200.2/buildhost.ks -f /dev/vg_tosh/lv_phys -b virbr0

--
Jim Wildman, CISSP, RHCE   j...@rossberry.com http://www.rossberry.net
"Society in every state is a blessing, but Government, even in its best
state, is a necessary evil; in its worst state, an intolerable one."
Thomas Paine
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ETA

[Johnny Hughes]

On 04/28/2011 01:18 PM, Robert Heller wrote:
> At Thu, 28 Apr 2011 12:25:26 -0500 CentOS mailing list  
> wrote:
> 
>>
>>
>>
>> Dear developers,
>>
>> I don't care for reasons, arguments, or flamefests. I need to plan my
>> workload.
>>
>> By now I have half a dozen servers overdue for reimaging. I can put this
>> off for another week or two, but not really much longer.
>>
>> There's obviously no point in installing centos 5 on any new machine.
> 
> I am not so sure about that.  If you need the machine up today, install
> 5.6 on it -- you can always upgrade later.  If you want bleeding edge
> software install Fedora Core 14.  Otherwise sit tight.  Hassling the
> developers is not going to make CentOS 6 show up any sooner.
> 
> I know that if I needed a server up this week or next week, I'd go ahead
> and install CentOS 5.6.  (And I would have installed CentOS 5.5 back
> before CentOS 5.6 was released.)
> 

CentOS-5.x has an EOL data of March 31, 2014.  I deploy new 5.x servers
all the time.

3 years is half of the useful lifetime of the distribution.

But, if people have to make a decision and deploy within the new 2
weeks, then I would not be waiting for 6.0 to be released during that time.

We might have a tree with installable net images by then.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ETA

[Johnny Hughes]

On 04/28/2011 01:34 PM, Johnny Hughes wrote:
> On 04/28/2011 01:18 PM, Robert Heller wrote:
>> At Thu, 28 Apr 2011 12:25:26 -0500 CentOS mailing list  
>> wrote:
>>
>>>
>>>
>>>
>>> Dear developers,
>>>
>>> I don't care for reasons, arguments, or flamefests. I need to plan my
>>> workload.
>>>
>>> By now I have half a dozen servers overdue for reimaging. I can put this
>>> off for another week or two, but not really much longer.
>>>
>>> There's obviously no point in installing centos 5 on any new machine.
>>
>> I am not so sure about that.  If you need the machine up today, install
>> 5.6 on it -- you can always upgrade later.  If you want bleeding edge
>> software install Fedora Core 14.  Otherwise sit tight.  Hassling the
>> developers is not going to make CentOS 6 show up any sooner.
>>
>> I know that if I needed a server up this week or next week, I'd go ahead
>> and install CentOS 5.6.  (And I would have installed CentOS 5.5 back
>> before CentOS 5.6 was released.)
>>
> 
> CentOS-5.x has an EOL data of March 31, 2014.  I deploy new 5.x servers
> all the time.
> 
> 3 years is half of the useful lifetime of the distribution.
> 
> But, if people have to make a decision and deploy within the new 2
> weeks, then I would not be waiting for 6.0 to be released during that time.
> 
> We might have a tree with installable net images by then.

I meant to say "IN QA" by then :)



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Server offline :-( please help to repair software RAID

[Alexander Farber]

Hello,

since weeks I was ignoring this warning at my CentOS 5.6/64 bit machine -

/etc/cron.weekly/99-raid-check:
WARNING: mismatch_cnt is not 0 on /dev/md0

in the hope that the software RAID will slowly repair itself.

I also had executed "echo 10 > /proc/sys/dev/raid/speed_limit_max"
on the advice from the mailing list.

But now my web server is offline - I had to boot it remotely with rescue system.

Does anybody please have an advice what commands to run
and do you think it is a RAID problem at all?

# dmesg
Linux version 2.6.34 (root@imagemaster30) (gcc version 4.3.2 (Debian
4.3.2-1.1) ) #20 SMP Mon Jul 19 18:35:15 CEST 2010
Command line: ramdisk_size=81920 initrd=rescue-image-2.6-64
root=/dev/ram BOOT_IMAGE=rescue-kernel-2.6-64
BIOS-provided physical RAM map:
 BIOS-e820:  - 0009f000 (usable)
 BIOS-e820: 0009f000 - 000a (reserved)
 BIOS-e820: 000e4000 - 0010 (reserved)
 BIOS-e820: 0010 - ddfb (usable)
 BIOS-e820: ddfb - ddfbe000 (ACPI data)
 BIOS-e820: ddfbe000 - ddfe (ACPI NVS)
 BIOS-e820: ddfe - ddfee000 (reserved)
 BIOS-e820: ddff - de00 (reserved)
 BIOS-e820: ff70 - 0001 (reserved)
 BIOS-e820: 0001 - 00012000 (usable)
NX (Execute Disable) protection: active
DMI present.
AMI BIOS detected: BIOS may corrupt low RAM, working around it.
e820 update range:  - 0001 (usable) ==> (reserved)
e820 update range:  - 1000 (usable) ==> (reserved)
e820 remove range: 000a - 0010 (usable)
No AGP bridge found
last_pfn = 0x12 max_arch_pfn = 0x4
MTRR default type: uncachable
MTRR fixed ranges enabled:
  0-9 write-back
  A-E uncachable
  F-F write-protect
MTRR variable ranges enabled:
  0 base  mask 8000 write-back
  1 base 8000 mask C000 write-back
  2 base C000 mask E000 write-back
  3 disabled
  4 disabled
  5 disabled
  6 disabled
  7 disabled
TOM2: 00012000 aka 4608M
x86 PAT enabled: cpu 0, old 0x7040600070406, new 0x7010600070106
e820 update range: e000 - 0001 (usable) ==> (reserved)
last_pfn = 0xddfb0 max_arch_pfn = 0x4
initial memory mapped : 0 - 2000
found SMP MP-table at [880ff780] ff780
Using GB pages for direct mapping
init_memory_mapping: -ddfb
 00 - 00c000 page 1G
 00c000 - 00dde0 page 2M
 00dde0 - 00ddfb page 4k
kernel direct mapping tables up to ddfb @ 12000-15000
init_memory_mapping: 0001-00012000
 01 - 012000 page 2M
kernel direct mapping tables up to 12000 @ 14000-16000
RAMDISK: 7d792000 - 8000
ACPI: RSDP 000faf80 00014 (v00 ACPIAM)
ACPI: RSDT ddfb 0003C (v01 032510 RSDT1503 20100325 MSFT 0097)
ACPI: FACP ddfb0200 00084 (v02 032510 FACP1503 20100325 MSFT 0097)
ACPI: DSDT ddfb0440 0447E (v01  A96B3 A96B3210 0210 INTL 20051117)
ACPI: FACS ddfbe000 00040
ACPI: APIC ddfb0390 0006C (v01 032510 APIC1503 20100325 MSFT 0097)
ACPI: MCFG ddfb0400 0003C (v01 032510 OEMMCFG  20100325 MSFT 0097)
ACPI: OEMB ddfbe040 00071 (v01 032510 OEMB1503 20100325 MSFT 0097)
ACPI: HPET ddfb48c0 00038 (v01 032510 OEMHPET  20100325 MSFT 0097)
ACPI: SSDT ddfb4900 0088C (v01 A M I  POWERNOW 0001 AMD  0001)
ACPI: Local APIC address 0xfee0
Scanning NUMA topology in Northbridge 24
No NUMA configuration found
Faking a node at -00012000
Initmem setup node 0 -00012000
  NODE_DATA [0001 - 00014fff]
 [ea00-ea0003ff] PMD ->
[88010020-880103bf] on node 0
Zone PFN ranges:
  DMA  0x0010 -> 0x1000
  DMA320x1000 -> 0x0010
  Normal   0x0010 -> 0x0012
Movable zone start PFN for each node
early_node_map[3] active PFN ranges
0: 0x0010 -> 0x009f
0: 0x0100 -> 0x000ddfb0
0: 0x0010 -> 0x0012
On node 0 totalpages: 1040191
  DMA zone: 56 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 3927 pages, LIFO batch:0
  DMA32 zone: 14280 pages used for memmap
  DMA32 zone: 890856 pages, LIFO batch:31
  Normal zone: 1792 pages used for memmap
  Normal zone: 129280 pages, LIFO batch:31
ACPI: PM-Timer IO Port: 0x808
ACPI: Local APIC address 0xfee0
ACPI: LAPIC (acpi_id[0x01] lapic_id[0x00] enabled)
ACPI: LAPIC (acpi_id[0x02] lapic_id[0x01] enabled)
ACPI: LAPIC (acpi_id[0x03] lapic_id[0x02] enabled)
ACPI: LAPIC (acpi_id[0x04] lapic_id[0x03] enabled)
ACPI: IOAPIC (id[0x04] address[0xfec0] gsi_base[0])
IOAPIC[0]: apic_id 4, version 33, address 0xfec0, GSI 0-23
ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)

Re: [CentOS] Server offline :-( please help to repair software RAID

[Alexander Farber]

Additional info (how many RAID arrays do I have??):

# mdadm -D /dev/md3
/dev/md3:
Version : 00.90
  Creation Time : Sat Mar 19 22:53:25 2011
 Raid Level : raid1
 Array Size : 185151360 (176.57 GiB 189.59 GB)
  Used Dev Size : 185151360 (176.57 GiB 189.59 GB)
   Raid Devices : 2
  Total Devices : 2
Preferred Minor : 3
Persistence : Superblock is persistent

Update Time : Thu Apr 28 21:09:12 2011
  State : clean, resyncing
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

 Rebuild Status : 38% complete

   UUID : 1b3668a3:4b6c5593:3d186b3c:53958f34
 Events : 0.15

Number   Major   Minor   RaidDevice State
   0   860  active sync   /dev/sda6
   1   8   221  active sync   /dev/sdb6
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Digimer]

On 04/28/2011 03:10 PM, Alexander Farber wrote:
>  Rebuild Status : 38% complete

That's potentially promising. What does 'cat /proc/mdstat' show? Did you
have to recover the array, or were you able to use /etc/mdadm.conf?

-- 
Digimer
E-Mail: digi...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Alexander Farber]

Hello, I didn't touch anything, just booted the hoster's "rescue image".

# cat /etc/mdadm.conf
cat: /etc/mdadm.conf: No such file or directory


# cat /proc/mdstat
Personalities : [linear] [raid0] [raid1]
md0 : active raid1 sda1[0] sdb1[1]
  1023936 blocks [2/2] [UU]

md1 : active raid1 sda3[0] sdb3[1]
  20479936 blocks [2/2] [UU]
resync=DELAYED

md2 : active raid1 sda5[0] sdb5[1]
  277728192 blocks [2/2] [UU]

md3 : active raid1 sda6[0] sdb6[1]
  185151360 blocks [2/2] [UU]
  [=>...]  resync = 85.3% (158109056/185151360)
finish=5.3min speed=83532K/sec

unused devices: 

# mdadm -D /dev/md3
/dev/md3:
Version : 00.90
  Creation Time : Sat Mar 19 22:53:25 2011
 Raid Level : raid1
 Array Size : 185151360 (176.57 GiB 189.59 GB)
  Used Dev Size : 185151360 (176.57 GiB 189.59 GB)
   Raid Devices : 2
  Total Devices : 2
Preferred Minor : 3
Persistence : Superblock is persistent

Update Time : Thu Apr 28 21:23:48 2011
  State : active, resyncing
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

 Rebuild Status : 85% complete

   UUID : 1b3668a3:4b6c5593:3d186b3c:53958f34
 Events : 0.31

Number   Major   Minor   RaidDevice State
   0   860  active sync   /dev/sda6
   1   8   221  active sync   /dev/sdb6
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Les Mikesell]

On 4/28/2011 2:07 PM, Alexander Farber wrote:
> Hello,
>
> since weeks I was ignoring this warning at my CentOS 5.6/64 bit machine -
>
>  /etc/cron.weekly/99-raid-check:
>  WARNING: mismatch_cnt is not 0 on /dev/md0
>
> in the hope that the software RAID will slowly repair itself.
>
> I also had executed "echo 10>  /proc/sys/dev/raid/speed_limit_max"
> on the advice from the mailing list.
>
> But now my web server is offline - I had to boot it remotely with rescue 
> system.
>
> Does anybody please have an advice what commands to run
> and do you think it is a RAID problem at all?
>

A 'cat /proc/mdstat' should show the state of the raid mirroring.  I 
don't see anything that would explain not booting, though.  Raid1 works 
normally even when only one member is available and should continue to 
work while rebuilding.  Maybe the problem that caused the mismatch has 
corrupted the drive the system normally boots.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Michel van Deventer]

Hi,

what is the output of 'cat /proc/mdstat' ?

A healthy raid should look something like below :
[root@janeway ~]# cat /proc/mdstat 
Personalities : [raid1] 
md2 : active raid1 sdb1[0] sda1[1]
  256896 blocks [2/2] [UU]
  
md0 : active raid1 sdd1[0] sdc1[1]
  1465135936 blocks [2/2] [UU]
  
md3 : active raid1 sdb3[1] sda3[0]
  730218432 blocks [2/2] [UU]

I have 3 RAID1 arrays (over 4 disks)

On Thu, 2011-04-28 at 21:10 +0200, Alexander Farber wrote:
> Additional info (how many RAID arrays do I have??):
> 
> # mdadm -D /dev/md3
> /dev/md3:
> Version : 00.90
>   Creation Time : Sat Mar 19 22:53:25 2011
>  Raid Level : raid1
>  Array Size : 185151360 (176.57 GiB 189.59 GB)
>   Used Dev Size : 185151360 (176.57 GiB 189.59 GB)
>Raid Devices : 2
>   Total Devices : 2
> Preferred Minor : 3
> Persistence : Superblock is persistent
> 
> Update Time : Thu Apr 28 21:09:12 2011
>   State : clean, resyncing
>  Active Devices : 2
> Working Devices : 2
>  Failed Devices : 0
>   Spare Devices : 0
> 
>  Rebuild Status : 38% complete
> 
>UUID : 1b3668a3:4b6c5593:3d186b3c:53958f34
>  Events : 0.15
> 
> Number   Major   Minor   RaidDevice State
>0   860  active sync   /dev/sda6
>1   8   221  active sync   /dev/sdb6
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Digimer]

On 04/28/2011 03:26 PM, Alexander Farber wrote:
> Hello, I didn't touch anything, just booted the hoster's "rescue image".
> 
> # cat /etc/mdadm.conf
> cat: /etc/mdadm.conf: No such file or directory
> 
> 
> # cat /proc/mdstat
> Personalities : [linear] [raid0] [raid1]
> md0 : active raid1 sda1[0] sdb1[1]
>   1023936 blocks [2/2] [UU]
> 
> md1 : active raid1 sda3[0] sdb3[1]
>   20479936 blocks [2/2] [UU]
> resync=DELAYED
> 
> md2 : active raid1 sda5[0] sdb5[1]
>   277728192 blocks [2/2] [UU]
> 
> md3 : active raid1 sda6[0] sdb6[1]
>   185151360 blocks [2/2] [UU]
>   [=>...]  resync = 85.3% (158109056/185151360)
> finish=5.3min speed=83532K/sec
> 
> unused devices: 

I'd wait for it to finish and then try rebooting normally. Post back
after md1 and md3 are completed sync'ing.

-- 
Digimer
E-Mail: digi...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Michel van Deventer]

Hi,

On Thu, 2011-04-28 at 21:26 +0200, Alexander Farber wrote:
> Hello, I didn't touch anything, just booted the hoster's "rescue image".
Cool :)

> # cat /proc/mdstat
> Personalities : [linear] [raid0] [raid1]
> md0 : active raid1 sda1[0] sdb1[1]
>   1023936 blocks [2/2] [UU]
> 
> md1 : active raid1 sda3[0] sdb3[1]
>   20479936 blocks [2/2] [UU]
> resync=DELAYED
> 
> md2 : active raid1 sda5[0] sdb5[1]
>   277728192 blocks [2/2] [UU]
> 
> md3 : active raid1 sda6[0] sdb6[1]
>   185151360 blocks [2/2] [UU]
>   [=>...]  resync = 85.3% (158109056/185151360)
> finish=5.3min speed=83532K/sec
> 
Let md3 rebuild, wait for md1 to rebuild (check regularly with
cat /proc/mdstat) and reboot your machine without the rescue, it should
come up again.

Regards,

Michel



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Digimer]

On 04/28/2011 03:31 PM, Michel van Deventer wrote:
> Hi,
> 
> On Thu, 2011-04-28 at 21:26 +0200, Alexander Farber wrote:
>> Hello, I didn't touch anything, just booted the hoster's "rescue image".
> Cool :)
> 
>> # cat /proc/mdstat
>> Personalities : [linear] [raid0] [raid1]
>> md0 : active raid1 sda1[0] sdb1[1]
>>   1023936 blocks [2/2] [UU]
>>
>> md1 : active raid1 sda3[0] sdb3[1]
>>   20479936 blocks [2/2] [UU]
>> resync=DELAYED
>>
>> md2 : active raid1 sda5[0] sdb5[1]
>>   277728192 blocks [2/2] [UU]
>>
>> md3 : active raid1 sda6[0] sdb6[1]
>>   185151360 blocks [2/2] [UU]
>>   [=>...]  resync = 85.3% (158109056/185151360)
>> finish=5.3min speed=83532K/sec
>>
> Let md3 rebuild, wait for md1 to rebuild (check regularly with
> cat /proc/mdstat) and reboot your machine without the rescue, it should
> come up again.
> 
>   Regards,
> 
>   Michel

Run 'watch cat /proc/mdstat'. :)

-- 
Digimer
E-Mail: digi...@alteeve.com
AN!Whitepapers: http://alteeve.com
Node Assassin:  http://nodeassassin.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Alexander Farber]

Thank you all, it seems to have finished - I'm rebooting.

Just curious why is the State of md3 "active", while the others are "clean"?


# cat /proc/mdstat
Personalities : [linear] [raid0] [raid1]
md0 : active raid1 sda1[0] sdb1[1]
  1023936 blocks [2/2] [UU]

md1 : active raid1 sda3[0] sdb3[1]
  20479936 blocks [2/2] [UU]
  [=>...]  resync = 86.6% (17746816/20479936)
finish=0.3min speed=131514K/sec

md2 : active raid1 sda5[0] sdb5[1]
  277728192 blocks [2/2] [UU]

md3 : active raid1 sda6[0] sdb6[1]
  185151360 blocks [2/2] [UU]

unused devices: 

..Then after some wait:...


# cat /proc/mdstat
Personalities : [linear] [raid0] [raid1]
md0 : active raid1 sda1[0] sdb1[1]
  1023936 blocks [2/2] [UU]

md1 : active raid1 sda3[0] sdb3[1]
  20479936 blocks [2/2] [UU]

md2 : active raid1 sda5[0] sdb5[1]
  277728192 blocks [2/2] [UU]

md3 : active raid1 sda6[0] sdb6[1]
  185151360 blocks [2/2] [UU]

unused devices: 


# mdadm -D /dev/md3
/dev/md3:
Version : 00.90
  Creation Time : Sat Mar 19 22:53:25 2011
 Raid Level : raid1
 Array Size : 185151360 (176.57 GiB 189.59 GB)
  Used Dev Size : 185151360 (176.57 GiB 189.59 GB)
   Raid Devices : 2
  Total Devices : 2
Preferred Minor : 3
Persistence : Superblock is persistent

Update Time : Thu Apr 28 21:31:12 2011
  State : active
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

   UUID : 1b3668a3:4b6c5593:3d186b3c:53958f34
 Events : 0.39

Number   Major   Minor   RaidDevice State
   0   860  active sync   /dev/sda6
   1   8   221  active sync   /dev/sdb6


# mdadm -D /dev/md1
/dev/md1:
Version : 00.90
  Creation Time : Sat Mar 19 22:52:20 2011
 Raid Level : raid1
 Array Size : 20479936 (19.53 GiB 20.97 GB)
  Used Dev Size : 20479936 (19.53 GiB 20.97 GB)
   Raid Devices : 2
  Total Devices : 2
Preferred Minor : 1
Persistence : Superblock is persistent

Update Time : Thu Apr 28 21:33:56 2011
  State : clean
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

   UUID : 8812725b:ea156bc6:3d186b3c:53958f34
 Events : 0.48

Number   Major   Minor   RaidDevice State
   0   830  active sync   /dev/sda3
   1   8   191  active sync   /dev/sdb3


# mdadm -D /dev/md0
/dev/md0:
Version : 00.90
  Creation Time : Sat Mar 19 22:52:12 2011
 Raid Level : raid1
 Array Size : 1023936 (1000.11 MiB 1048.51 MB)
  Used Dev Size : 1023936 (1000.11 MiB 1048.51 MB)
   Raid Devices : 2
  Total Devices : 2
Preferred Minor : 0
Persistence : Superblock is persistent

Update Time : Thu Apr 28 21:06:24 2011
  State : clean
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

   UUID : 87db17c2:d806a38c:3d186b3c:53958f34
 Events : 0.14

Number   Major   Minor   RaidDevice State
   0   810  active sync   /dev/sda1
   1   8   171  active sync   /dev/sdb1


# mdadm -D /dev/md2
/dev/md2:
Version : 00.90
  Creation Time : Sat Mar 19 22:52:32 2011
 Raid Level : raid1
 Array Size : 277728192 (264.86 GiB 284.39 GB)
  Used Dev Size : 277728192 (264.86 GiB 284.39 GB)
   Raid Devices : 2
  Total Devices : 2
Preferred Minor : 2
Persistence : Superblock is persistent

Update Time : Thu Apr 28 21:17:54 2011
  State : clean
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

   UUID : 2db0174b:e45768d5:3d186b3c:53958f34
 Events : 0.14

Number   Major   Minor   RaidDevice State
   0   850  active sync   /dev/sda5
   1   8   211  active sync   /dev/sdb5
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Alexander Farber]

On the 2nd try it has booted and seems to work.

The /var/log/mcelog is (and was) empty.

# sudo cat /proc/mdstat
Personalities : [raid1]
md0 : active raid1 sdb1[1] sda1[0]
  1023936 blocks [2/2] [UU]

md2 : active raid1 sdb5[1] sda5[0]
  277728192 blocks [2/2] [UU]

md3 : active raid1 sdb6[1] sda6[0]
  185151360 blocks [2/2] [UU]

md1 : active raid1 sdb3[1] sda3[0]
  20479936 blocks [2/2] [UU]

unused devices: 


Below is the output from the remote console of my hoster.

If you notice anything or have any advice, please share.




GNU GRUB  version 0.97  (636K lower / 3635904K upper memory)

 +-+
 | CentOS (2.6.18-238.9.1.el5) |
 | CentOS (2.6.18-238.5.1.el5) |
 | CentOS (2.6.18-194.32.1.el5)|
 | CentOS 5|
 | CentOS 5 Disk 2 |
 | |
 | |
 | |
 | |
 | |
 | |
 | |
 +-+
  Use the ^ and v keys to select which entry is highlighted.
  Press enter to boot the selected OS, 'e' to edit the
  commands before booting, 'a' to modify the kernel arguments
  before booting, or 'c' for a command-line.

   The highlighted entry will be booted automatically in 1 seconds.
  Booting 'CentOS (2.6.18-238.9.1.el5)'

root (hd0,0)
 Filesystem type is ext2fs, partition type 0xfd
kernel /vmlinuz-2.6.18-238.9.1.el5 root=/dev/md1 console=tty0 console=ttyS0,576
00
   [Linux-bzImage, setup=0x1e00, size=0x1fd9fc]
initrd /initrd-2.6.18-238.9.1.el5.img
   [Linux-initrd @ 0x37d5f000, 0x290aac bytes]

Linux version 2.6.18-238.9.1.el5 (mockbu...@builder10.centos.org) (gcc
version 4.1.2 20080704 (Red Hat 4.1.2-50)) #1 SMP Tue Apr 12 18:10:13
EDT 2011
Command line: root=/dev/md1 console=tty0 console=ttyS0,57600
BIOS-provided physical RAM map:
 BIOS-e820: 0001 - 0009f000 (usable)
 BIOS-e820: 0009f000 - 000a (reserved)
 BIOS-e820: 000e4000 - 0010 (reserved)
 BIOS-e820: 0010 - ddfb (usable)
 BIOS-e820: ddfb - ddfbe000 (ACPI data)
 BIOS-e820: ddfbe000 - ddfe (ACPI NVS)
 BIOS-e820: ddfe - ddfee000 (reserved)
 BIOS-e820: ddff - de00 (reserved)
 BIOS-e820: ff70 - 0001 (reserved)
 BIOS-e820: 0001 - 00012000 (usable)
DMI present.
No NUMA configuration found
Faking a node at -00012000
Bootmem setup node 0 -00012000
Memory for crash kernel (0x0 to 0x0) notwithin permissible range
disabling kdump
ACPI: PM-Timer IO Port: 0x808
ACPI: LAPIC (acpi_id[0x01] lapic_id[0x00] enabled)
Processor #0 0:4 APIC version 16
ACPI: LAPIC (acpi_id[0x02] lapic_id[0x01] enabled)
Processor #1 0:4 APIC version 16
ACPI: LAPIC (acpi_id[0x03] lapic_id[0x02] enabled)
Processor #2 0:4 APIC version 16
ACPI: LAPIC (acpi_id[0x04] lapic_id[0x03] enabled)
Processor #3 0:4 APIC version 16
ACPI: IOAPIC (id[0x04] address[0xfec0] gsi_base[0])
IOAPIC[0]: apic_id 4, version 33, address 0xfec0, GSI 0-23
ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 low level)
Setting APIC routing to flat
ACPI: HPET id: 0x8300 base: 0xfed0
Using ACPI (MADT) for SMP configuration information
Nosave address range: 0009f000 - 000a
Nosave address range: 000a - 000e4000
Nosave address range: 000e4000 - 0010
Nosave address range: ddfb - ddfbe000
Nosave address range: ddfbe000 - ddfe
Nosave address range: ddfe - ddfee000
Nosave address range: ddfee000 - ddff
Nosave address range: ddff - de00
Nosave address range: de00 - ff70
Nosave address range: ff70 - 0001
Allocating PCI resources starting at e000 (gap: de00:2170)
SMP: Allowing 4 CPUs, 0 hotplug CPUs
Built 1 zonelists.  Total pages: 1022573
Kernel command line: root=/dev/md1 console=tty0 console=ttyS0,57600
Initializing CPU#0
PID hash table entries: 4096 (order: 12, 32768 bytes)
Console: colour VGA+ 80x25

Re: [CentOS] Server offline :-( please help to repair software RAID

[m . roth]

Alexander Farber wrote:
> On the 2nd try it has booted and seems to work.
>
> The /var/log/mcelog is (and was) empty.

To be expected - I'd expect this as a h/d error. Check your logfiles for
info from smartd

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Scott Silva]

on 4/28/2011 12:40 PM Alexander Farber spake the following:
> Thank you all, it seems to have finished - I'm rebooting.
> 
> Just curious why is the State of md3 "active", while the others are "clean"?
> 
If I remember right, clean means it is completely synced and not being written
to or mounted. Active means it is or has been written to and is synced.
Usually dirty means that there is un-synced data on one or the other drives.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Michel van Deventer]

On Thu, 2011-04-28 at 21:52 +0200, Alexander Farber wrote:
> On the 2nd try it has booted and seems to work.
Did it give an error on the first try and if so, which one ?

You should check /var/log/messages for i/o errors and check your disks
with smartctl

I have had my raid1 arrays rebuild sometime without a (for me known)
reason. Even had a defective networkcard kernel panic the machine for
two hours and the raids were still working afterwards ;) 

Regards,

Michel


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Rsync 3 from rpmforge

[Scott Silva]

on 4/27/2011 7:46 AM Jussi Hirvi spake the following:
> Thanks for a triple answer. :-) Now I remember - like I said, I solved 
> this problem once already. Hm, I should document better what I do...
> 
> - Jussi
Where's the fun in that?  ;)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[Alexander Farber]

Turned out, smartd kept saying, that it had no entries in smartd.conf.

I've copied smartd.rpmnew over smartd.conf, restarted it,
now I have (in /var/log/messages, date+hostname removed):

smartd version 5.38 [x86_64-redhat-linux-gnu] Copyright (C) 2002-8 Bruce Allen
Home page is http://smartmontools.sourceforge.net/
Opened configuration file /etc/smartd.conf
Configuration file /etc/smartd.conf was parsed, found DEVICESCAN,
scanning devices
Problem creating device name scan list
Device: /dev/sda, opened
Device /dev/sda: using '-d sat' for ATA disk behind SAT layer.
Device: /dev/sda, opened
Device: /dev/sda, not found in smartd database.
Device: /dev/sda, is SMART capable. Adding to "monitor" list.
Device: /dev/sdb, opened
Device /dev/sdb: using '-d sat' for ATA disk behind SAT layer.
Device: /dev/sdb, opened
Device: /dev/sdb, not found in smartd database.
Device: /dev/sdb, is SMART capable. Adding to "monitor" list.
Monitoring 0 ATA and 2 SCSI devices
smartd has fork()ed into background mode. New PID=3427.

And the /etc/smartd.conf contains:
DEVICESCAN -H -m root
and the rest are comments.

Do you think it is configured okay this way?

My disk info is:

# df -h
FilesystemSize  Used Avail Use% Mounted on
/dev/md1   20G  1.7G   17G   9% /
/dev/md3  176G  7.0G  160G   5% /var
/dev/md0  993M   42M  901M   5% /boot
/dev/md2  263G  2.0G  248G   1% /home
tmpfs 2.0G 0  2.0G   0% /dev/shm

#  cat /proc/mdstat
Personalities : [raid1]
md0 : active raid1 sdb1[1] sda1[0]
  1023936 blocks [2/2] [UU]

md2 : active raid1 sdb5[1] sda5[0]
  277728192 blocks [2/2] [UU]

md3 : active raid1 sdb6[1] sda6[0]
  185151360 blocks [2/2] [UU]

md1 : active raid1 sdb3[1] sda3[0]
  20479936 blocks [2/2] [UU]

unused devices: 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Server offline :-( please help to repair software RAID

[m . roth]

Alexander Farber wrote:
> Turned out, smartd kept saying, that it had no entries in smartd.conf.
>
> I've copied smartd.rpmnew over smartd.conf, restarted it,
> now I have (in /var/log/messages, date+hostname removed):

At this point, I'd run the long test on each drive, and (after coming back
an hour or two later, see the results.

mark "yes, it does take that long"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Install CentOS as KVM guest

[Emmanuel Noobadmin]

On 4/28/11, Gleb Natapov  wrote:
> of virt stack. You should use libvirt or virt-manager instead. Especially
> if you are concerned about security. I think libvirt can start guest on
> headless server.
>
> If this still fails for you you need to complain to libvirt developers
> (not in a rant mode, but providing details of what exact version of
> software you have problem with and what are you trying to do). And
> libvirt developers will not be shy to complain to qemu developers if the
> problem turned to be on their side.

I've finally got an installation working, not using virt-install or
virt-manager. After reading through the libvirt site, I started
writing the domain definition manually.

Through trial and error, comparison with what virt-install generated
and the online examples, I got a working xml. Just for the record,
virsh --version reports 0.8.1

For the benefits of other newbies, my discovery so far is that

1. No-activity after the guest VM started
Originally, when I specified the CentOS DVD ISO, the guest will load
and then do nothing but chew up 100% CPU cycle on the allocated 1 vcpu
for quite some time. Subsequently, it appeared that mounting the ISO
as loop back is the solution. This seemed to imply that libvirt or KVM
couldn't boot a guest from ISO... which didn't quite make sense.

I ran into the issue when using my manually generated XML, it turned
out that the reason was the permissions (644) on vmlinuz and
initrd.img on the DVD. By copying the two files to local disk,
changing the permissions and using the  and  options,
I was able to boot the guest.

I was curious how virt-install got around this and learnt that I could
dump the config from a running machine. It turns out that virt-install
didn't exactly use the .xml it created, it added stuff to the running
version. Importantly making a temporary copy of initrd.img and
vmlinuz. I think the ISO problem with virt-install may be that it was
unable to mount the ISO to copy these files despite me running it as
root.


2. Anaconda couldn't see the DVD
Which was my rant earlier, since it sounded really stupid that the
installer couldn't see the disc it just booted off. Now, with #1
solved, it seems that anaconda wasn't booting off the disc after all.

However, the interesting thing here is that once I got past #1, My
guest could install from the DVD.

After comparing the xml files, it seems the problem is virt-install
did not save the path to the ISO/mounted DVD. Under the 
element, there wasn't a source. With my manually generated xml,
specifying the ISO as the source worked.

But the virt-installed anaconda was complaining I don't have any hard
disks or cdroms. Not that there was no disk in the drive. Everytime I
picked an option like install media in HDD or CDROM, it prompted me no
device, do I want to install a driver. Since the hard disk definition
appears to be the same, I'm not sure why that happened with
virt-install's xml but not mine.


So right now, I managed to get the OS installed, rebooting it required
removing the initrd and kernel entry as well as the source so that it
would boot from the image disk.

Only problem is... networking still isn't working although brctl show
on the host shows that a vnet0 had been created and attached to the
bridge. Any pointers would be appreciated!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Can somebody explay the here down message lines from server Centos 5.6

[Michel Donais]

 **Unmatched Entries**
 gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about user
 gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about user
 gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about user
 9 gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
 user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
 user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
 user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
 user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
 user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
 user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
 user

---
Michel Donais___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Can somebody explay the here down message lines from server Centos 5.6

[Christopher Chan]

Messed up user information database? LDAP?

On Friday, April 29, 2011 12:38 PM, Michel Donais wrote:
> **Unmatched Entries**
> gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about user
> gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about user
> gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about user
> 9 gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
> user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
> user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
> user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
> user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
> user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
> user gdm[5342]: pam_succeed_if(gdm:auth): error retrieving information about
> user
> ---
> Michel Donais
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] the mirrors are still not updated

[fakessh]

hello centos network

ads on the list centos-annonces  Thursday
 
the mirrors are still not updated
even the main deposit

No it has never been so long

someone has an explanation can be

thanks
-- 
 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7
 gpg --keyserver pgp.mit.edu --recv-key 092164A7


pgp03FMI2DJyI.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos