RE: Remote Installworld
From: Nick Price [EMAIL PROTECTED] Subject: RE: Remote Installworld I'm currently administering a machine about 1500mi from me with nobody local to the machine to assist me. Anyways, my only access to this machine is via SSH, no remote serial console or anything. When I try to do a make installworld I end up with install: rename: /lib/[EMAIL PROTECTED] to /lib/libcrypt.so.3: Operation not permitted very shortly thereafter. I cannot boot into single user mode because I am far, far away from the machine. What can I do to finish the installworld? Thanks Nick VHCS Webmail The securelevel wouldn't allow me to change the flag. Thanks anyways Nick Is it really the securelevel? I had a similar problem on a diskless machine, file flags couldn't be changed through NFS, so I had to remove the schg flags on the server. Miguel ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Remote Installworld
Date: Wed, 1 Mar 2006 23:35:31 - From: Nick [EMAIL PROTECTED] Subject: Remote Installworld To: freebsd-stable@freebsd.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=iso-8859-1; I'm currently administering a machine about 1500mi from me with nobody local to the machine to assist me. Anyways, my only access to this machine is via SSH, no remote serial console or anything. When I try to do a make installworld I end up with install: rename: /lib/[EMAIL PROTECTED] to /lib/libcrypt.so.3: Operation not permitted very shortly thereafter. I cannot boot into single user mode because I am far, far away from the machine. What can I do to finish the installworld? Thanks Nick VHCS Webmail -- It's probably because there schg flag set for this file. Try to # chflags noschg /lib/libcrypt.so if your securelevel allows it. Afterward try installworld one more time. Best regards, Denis Barov. ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Remote Installworld
Give us more details.. I assume that 'make buildworld' and 'make buildkernel' and 'make installkernel' have finished successfuly. See if you /tmp isn`t mounted nosuid and noexec On 3/2/06, Nick [EMAIL PROTECTED] wrote: I'm currently administering a machine about 1500mi from me with nobody local to the machine to assist me. Anyways, my only access to this machine is via SSH, no remote serial console or anything. When I try to do a make installworld I end up with install: rename: /lib/[EMAIL PROTECTED] to /lib/libcrypt.so.3: Operation not permitted very shortly thereafter. I cannot boot into single user mode because I am far, far away from the machine. What can I do to finish the installworld? Thanks Nick VHCS Webmail ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Remote Installworld
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ? ? Sent: Thursday, March 02, 2006 12:03 AM To: freebsd-stable@freebsd.org Subject: Re: Remote Installworld Date: Wed, 1 Mar 2006 23:35:31 - From: Nick [EMAIL PROTECTED] Subject: Remote Installworld To: freebsd-stable@freebsd.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=iso-8859-1; I'm currently administering a machine about 1500mi from me with nobody local to the machine to assist me. Anyways, my only access to this machine is via SSH, no remote serial console or anything. When I try to do a make installworld I end up with install: rename: /lib/[EMAIL PROTECTED] to /lib/libcrypt.so.3: Operation not permitted very shortly thereafter. I cannot boot into single user mode because I am far, far away from the machine. What can I do to finish the installworld? Thanks Nick VHCS Webmail -- It's probably because there schg flag set for this file. Try to # chflags noschg /lib/libcrypt.so if your securelevel allows it. Afterward try installworld one more time. Best regards, Denis Barov. ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED] __ NOD32 1.1424 (20060302) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com The securelevel wouldn't allow me to change the flag. Thanks anyways Nick ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Remote Installworld
On Thu, Mar 02, 2006 at 11:00:39AM +0200, Iantcho Vassilev wrote: Give us more details.. I assume that 'make buildworld' and 'make buildkernel' and 'make installkernel' have finished successfuly. See if you /tmp isn`t mounted nosuid and noexec Check kern.securelevel. See security(7) where it talks about setting securelevel and upgrading the system. Or it maybe the securelevel(8) manpage depending on your OS versoin. On 3/2/06, Nick [EMAIL PROTECTED] wrote: I'm currently administering a machine about 1500mi from me with nobody local to the machine to assist me. Anyways, my only access to this machine is via SSH, no remote serial console or anything. When I try to do a make installworld I end up with install: rename: /lib/[EMAIL PROTECTED] to /lib/libcrypt.so.3: Operation not permitted very shortly thereafter. I cannot boot into single user mode because I am far, far away from the machine. What can I do to finish the installworld? Cheers, -- Ruslan Ermilov [EMAIL PROTECTED] FreeBSD committer pgpOKhD5KFeOT.pgp Description: PGP signature
Re: Remote Installworld
The securelevel wouldn't allow me to change the flag. Thanks anyways Nick Try to set kern_securelevel=-1 in /etc/rc.conf, remotely reboot your computer, remove schg flags and do installworld one more time. Set kern_securelevel back and reboot. Best regards, Denis Barov. ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Remote Installworld
On Thu, Mar 02, 2006 at 01:28:34AM -0800, Nick Price wrote: I'm currently administering a machine about 1500mi from me with nobody local to the machine to assist me. Anyways, my only access to this machine is via SSH, no remote serial console or anything. When I try to do a make installworld I end up with install: rename: /lib/[EMAIL PROTECTED] to /lib/libcrypt.so.3: Operation not permitted very shortly thereafter. I cannot boot into single user mode because I am far, far away from the machine. What can I do to finish the installworld? It's probably because there schg flag set for this file. Try to # chflags noschg /lib/libcrypt.so if your securelevel allows it. Afterward try installworld one more time. The securelevel wouldn't allow me to change the flag. You'll have to reboot the machine in order to decrease its securelevel. This part is rather obvious: edit /etc/rc.conf, save, cross your fingers, reboot. In rc.conf, look for kern_securelevel_enable or kern_securelevel. Consult rc.conf(5) manpage for details. The question is whether that machine will succeed in booting to multi-user then, given that make installworld has already changed some system files. The libcrypt.so library gets installed rather early, so there's a good chance that your machine will book OK using old userland programs and libraries. Just make sure you haven't forgot to install the new kernel with make installkernel before the reboot. Assuming here that you haven't done a complete run of mergemaster(8): new files in /etc might confuse old programs. If still in doubt, try to reproduce the case locally on a test machine and see what happens. Apropos, clearing the schg flag on old system files is generally not needed before installworld because install(1) can deal with it if allowed to by the securelevel setting. -- Yar ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Remote Installworld
I'm currently administering a machine about 1500mi from me with nobody local to the machine to assist me. Anyways, my only access to this machine is via SSH, no remote serial console or anything. When I try to do a make installworld I end up with install: rename: /lib/[EMAIL PROTECTED] to /lib/libcrypt.so.3: Operation not permitted very shortly thereafter. I cannot boot into single user mode because I am far, far away from the machine. What can I do to finish the installworld? Thanks Nick VHCS Webmail ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
