Re: systemd (again)
Sounds just what hackers would like. A nice web interface that doesn't even show up as a resource after it's been idle for 10 minutes so admins might not even realize if it's wide open... - Original Message - From: David Sommerseth sl+us...@lists.topphemmelig.net To: kei...@kl-ic.com Cc: scientific-linux-users SCIENTIFIC-LINUX-USERS@fnal.gov Sent: Sunday, February 15, 2015 7:11:52 AM Subject: Re: systemd (again) Cockpit is not running by default, but if you go to https://$IPADDRESS_OF_SERVER:9090/ systemd starts it on-the-fly (through socket activation). In the moment it's been lingering idle for approx. 10 minutes, it is shut down again. So there's basically zero-footprint when it is not being used. This is one of the nice things about systemd.
Re: Is there any data base collecting data on breakin attempts?
Check out https://dshield.org/howto.html for a central place to submit attempts... Some useful pages: https://dshield.org/reports.html https://dshield.org/sources.html As many sources can be anonymous, it's easy for hosts to be on someones lists from either spoofed or replies to spoofed ips, etc... and so shouldn't be used as a blacklist, at least not exclusively. (ie: wouldn't want to block port 80 based on this for a public web server) - Original Message - From: hansel han...@mnstate.edu To: SCIENTIFIC-LINUX-USERS@FNAL.GOV Sent: Sunday, February 8, 2015 12:41:56 PM Subject: Is there any data base collecting data on breakin attempts? I accept it as normal many (upwards of several thousand) daily root breaking attempts. My defense is careful sshd configuration and restrictive incoming router firewall. Does anyone mantain a database of consistently offending sites (maybe a news source, such as politico or propublica)? Initial use of whois and dig for a few returned familiar countries of origin, coutries that may encourage or even sponsor some attempts. I searched the archive for breakin and failed with an without subject line qualifiers (like root) and found nothing. Thank you. mark hansel
Re: Library security updates
If it doesn't protect us is there practicable way to make sure we are genuinely protected short of rebooting the whole system every time there is a security update? Depending on what the update is. If you want to be 100% certain, reboot. If you don't want to reboot, you can hunt through what programs use certain libraries using ld - however the effort taken to do this is much more than a reboot - and probably takes longer. It actually isn't that hard to track down. [root@colo-a2vm t2]# lsof -n | grep gcc hpiod 2649 root DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea mysqld 2851mysql DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea libvirtd 3121 root DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea yum-updat 3343 root DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea smartd 3469 root DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea automount 6482 root DEL REG 252,0 4718600 /lib64/libgcc_s-4.1.2-20080825.so.1.#prelink#.dvRyeN httpd 11089 root mem REG 252,0 58400 4718834 /lib64/libgcc_s-4.1.2-20080825.so.1 php 11639 ioi mem REG 252,0 58400 4718834 /lib64/libgcc_s-4.1.2-20080825.so.1 php 24239 ioi mem REG 252,0 58400 4718834 /lib64/libgcc_s-4.1.2-20080825.so.1 httpd 27057 daemon mem REG 252,0 58400 4718834 /lib64/libgcc_s-4.1.2-20080825.so.1 httpd 27058 daemon mem REG 252,0 58400 4718834 /lib64/libgcc_s-4.1.2-20080825.so.1 You can tell the processes that were not restarted as they show DEL instead of mem...
Re: Library security updates
Actually, looking at what files were updated, that should probably be lsof -n | grep -e libc- (Probably not a lot of difference in the programs listed, but...) - Original Message - From: John Lauro john.la...@covenanteyes.com To: Steven Haigh net...@crc.id.au Cc: scientific-linux-users@fnal.gov Sent: Wednesday, January 28, 2015 9:13:08 AM Subject: Re: Library security updates If it doesn't protect us is there practicable way to make sure we are genuinely protected short of rebooting the whole system every time there is a security update? Depending on what the update is. If you want to be 100% certain, reboot. If you don't want to reboot, you can hunt through what programs use certain libraries using ld - however the effort taken to do this is much more than a reboot - and probably takes longer. It actually isn't that hard to track down. [root@colo-a2vm t2]# lsof -n | grep gcc hpiod 2649 root DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea mysqld 2851mysql DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea libvirtd 3121 root DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea yum-updat 3343 root DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea smartd 3469 root DEL REG 252,0 4718941 /lib64/libgcc_s-4.1.2-20080825.so.1;545bc2ea automount 6482 root DEL REG 252,0 4718600 /lib64/libgcc_s-4.1.2-20080825.so.1.#prelink#.dvRyeN httpd 11089 root mem REG 252,0 584004718834 /lib64/libgcc_s-4.1.2-20080825.so.1 php 11639 ioi mem REG 252,0 584004718834 /lib64/libgcc_s-4.1.2-20080825.so.1 php 24239 ioi mem REG 252,0 584004718834 /lib64/libgcc_s-4.1.2-20080825.so.1 httpd 27057 daemon mem REG 252,0 584004718834 /lib64/libgcc_s-4.1.2-20080825.so.1 httpd 27058 daemon mem REG 252,0 584004718834 /lib64/libgcc_s-4.1.2-20080825.so.1 You can tell the processes that were not restarted as they show DEL instead of mem...
Re: Torrent for SL7
I suggest you use wget --continue. If for some reason it fails in one-shot, then when you run it again, it will continue from where it left off. That should work with most http servers. For me, I find direct download is typically faster than torrents, assuming the server has a good connection and rtt latency is lower than most torrent peers. - Original Message - From: bac...@landtrekker.com To: scientific-linux-users@fnal.gov Sent: Wednesday, November 19, 2014 3:33:36 AM Subject: Torrent for SL7 Hello, Is there any plan to release SL7 as a torrent download ? My ADSL link is too weak to sustain a one-shot DVD download. Thanks
Re: about realtime system
Why spread FUD about Vmware. Anyways, to hear what they say on the subject: http://www.vmware.com/files/pdf/techpaper/latency-sensitive-perf-vsphere55.pdf Anyways, KVM will not handle latency any better than Vmware. - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Nico Kadel-Garcia nka...@gmail.com Cc: Brandon Vincent brandon.vinc...@asu.edu, llwa...@gmail.com, SCIENTIFIC-LINUX-USERS@FNAL.GOV scientific-linux-users@fnal.gov Sent: Sunday, August 24, 2014 12:26:17 PM Subject: Re: about realtime system Wow I don't know how VMware got mentioned in this string but VMware is not capable of real time operation and if you ask the senior engineers at VMware they will tell you they don't want you even trying it on their product because they know it wont work. The reason is VMware plays games with the clock on the VM so the clocks can never be 100% accurate. It should be possible to do real time in KVM assuming you don't overbook your CPU Cores or RAM. Apparently Red Hat has been doing VM's with microsecond accurate clocks with PTP running on the visualization
Re: about realtime system
The recommendation changed with 5.5. http://blogs.vmware.com/performance/2013/09/deploying-extremely-latency-sensitive-applications-in-vmware-vsphere-5-5.html ... However, performance demands of latency-sensitive applications with very low latency requirements such as distributed in-memory data management, stock trading, and high-performance computing have long been thought to be incompatible with virtualization. vSphere 5.5 includes a new feature for setting latency sensitivity in order to support virtual machines with strict latency requirements. - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Nico Kadel-Garcia nka...@gmail.com Cc: John Lauro john.la...@covenanteyes.com, Brandon Vincent brandon.vinc...@asu.edu, Lee Kin llwa...@gmail.com, SCIENTIFIC-LINUX-USERS@FNAL.GOV scientific-linux-users@fnal.gov Sent: Sunday, August 24, 2014 3:27:39 PM Subject: Re: about realtime system ... By the way one of those stock exchanges is where the VMware engineers told us never to use their product in production. In fact we had huge problems with VMware in our development environments because some of our applications would actually detect the clock instability in the VMware clocks and would shut themselves down rather than have inaccurate audit logs. as a result we found we had trouble even using it in our development environments.
Re: Boot hangs / loops
These are the type of things that can be difficult to do over email... Try mounting the /dev/sda6 after fsck in rescue mode and make sure the filesystem has at least 10% free space. Is it ext2, 3, or 4, or other? What other partitions are on /sda? I assume /boot is one, any others? - Original Message - From: Dormition Skete (Hotmail) dormitionsk...@hotmail.com To: SCIENTIFIC-LINUX-USERS@FNAL.GOV Sent: Thursday, July 10, 2014 4:34:00 PM Subject: Boot hangs / loops I needed some more storage space on our SL6.5 server, so I hooked up a USB external drive to the machine. The external drive had a Macintosh file system on it, so I installed kmod-hfsplus from the elrepo.org/elrepo-release-6-5-el6.elrepo.noarch.org repository. I mounted the drive, and everything worked fine. I could read and write files to it just fine. I set up a file share under Samba, and that worked fine, too. Then I made the stupid mistake of trying to delete a bunch of files off of it using nautilus from a thin client, rather than from the command line. In the middle of the deletion process, it took the entire server down. Now it won’t reboot. Whenever I try to reboot it, I get the following message: — Checking file systems. /dev/sda6 is in use. e2fsck: Cannot continue, aborting. *** An error occurred during the file system check. *** Dropping you into a shell; The system will reboot *** when you leave the shell. — I booted it from a Rescue CD, and did not mount the volumes. I ran fsck on the two Linux ext4 file systems with: fsck /dev/sda6 (my / file system) fsck /dev/sda7 (my /home file system) That did not help. Something gave me the thought to try changing the labels in the /etc/fstab file. I changed the “UUID=…..” with the device names /dev/sda5 (swap), 6 and 7. That didn’t help. I tried booting it with “fastboot” in the kernel line, and that places me in a perpetual loop. I get a message saying: — Warning — SELinux targeted policy relabel is required. Relabeling could take a very long time, depending on file system size and speed of hard drives. — I’ve also tried putting “fastboot enforcing=0 autorelabel=0” in the kernel line, and that does not seem to do anything. Without “fastboot”, I get the file system check kicking me into a maintenance prompt. With “fastboot”, I get the perpetual SELinux relabeling. I also find it really odd that when I changed the fstab entries, I first made a backup copy of the fstab file. I also copied the existing lines I was going to change, commented them out, and changed the second set of lines. Neither the backup fstab file, nor the commented lines are anywhere to be found. If somebody would please help me get this machine back up, I would *greatly* appreciate it! Peter, hieromonk
Re: [SL-Users] Re: Scientific Linux 7 ALPHA
Looks like the first usable C7 builds were around the 18th (didn't realize they were out, just decided to check) and sound a little rougher (at least when first released) than SL7. However, the C6 builds took a very long time compared to SL6... One question... Is it expected to be able to upgrade to non beta from the current alpha, or will a reinstall be required once it is out of beta? - Original Message - From: John R. Dennison j...@gerdesas.com To: scientific-linux-users@fnal.gov Sent: Friday, July 4, 2014 7:51:18 AM Subject: Re: [SL-Users] Re: Scientific Linux 7 ALPHA On Fri, Jul 04, 2014 at 06:14:05AM -0400, Nico Kadel-Garcia wrote: There was already a copy in my local rsync mirror, and I'm happy to install from there and keep the lod off your servers. Getting the alpha into people's hands this quickly is one of the reasons I've come to personally prefer Scientific Linux over CentOS. Oh come, now. The C7 builds have been public and installable for how long now? John -- mharris You have to wonder why monosyllabic is not one syllable, and why phonetic isn't spelled the way it sounds.
Re: RedHat CentOS acquisition: stating the obvious
At the risk of repeating myself... I refer you to Red Hat's 10-K filing: http://www.sec.gov/Archives/edgar/data/1087423/000119312513173724/d484576d10k.htm#tx484576_1 See the Competition section on pages 12-14. Search for Oracle and CentOS. So when I say, Red Hat considers CentOS a competitor, that is a demonstrable statement of fact, appearing in an authoritative document where lies can result in prison sentences. (Unsurprisingly, the mission statement you keep citing appears nowhere in this document. When choosing between words and legally binding words, which to believe? Hm, hard to say...) Then mention Centos and Fedora are at the end of paragraphs stating we also, meaning they (at least at this time) is not considered a significant competitor relative to others mentioned. Also, you need to read the entire document. For example, they also list Fedora as something they compete with, but if you search for Fedora in that document you will also notice sections like: Red Hat’s role in the open source community We are an active contributor in many open source communities, often in a leadership role. Red Hat’s participation in the open source development process is illustrated by our sponsorship of the Fedora Project, JBoss.org, GlusterFS and other open source communities. This participation enables us to leverage the efforts of these worldwide communities, which we believe allows us to reduce both development cost and time and enhance acceptance and support of our offerings and technologies. Thus, we are able to use the Fedora Project, JBoss.org and other open source communities as proving grounds and virtual laboratories for innovations that we can draw upon for inclusion in our enterprise offerings and technologies. Additionally, the open and transparent nature of these communities provides our customers and potential customers with access and insights into, and the ability to influence, the future direction of Red Hat offerings and technologies. We are dedicated to helping serve the interests and needs of open source software users and developers online. Our websites, which include redhat.com, fedoraproject.org, jboss.org, opensource.com and gluster.org, serve as substantial resources for information related to open source initiatives and our open source offerings. These websites contain news we believe to be of interest to open source users and developers, features for the open source community, a commerce site and a point-of-access for software downloads and upgrades. Visitors to our websites can organize and participate in user groups, make available fixes and enhancements and share knowledge regarding the use and development of open source software and methods. By acting as a publisher of open source information and by facilitating the interaction of users and developers, particularly through the Fedora and JBoss.org projects, we believe our websites have become community centers for open source. Additionally, redhat.com serves as a primary customer interface, web store and order mechanism for many of our offerings. Future versions will likely mention Centos as they do Fedora in terms of being an active contributor.
Re: RedHat CentOS acquisition: stating the obvious
Your first assumption, although largely correct as a generality it is not entirely accurate, and at a minimum is not the sole purpose. That is why companies have mission statements. They rarely highlight the purpose of making money, although that is often the main purpose even if not specified. What is Red Hat's mission? It is listed as: To be the catalyst in communities of customers, contributors, and partners creating better technology the open source way. Making things exceedingly difficult would go against the stated mission. In my opinion it would also go against making money as it would kill the eco system of vendors that support RedHat Enterprise Linux for their applications. There are so many distributions out there, the biggest way for them to not make money is to become insignificant. Having free alternatives like Centos keeps high market share of the EL product and ensures compatibility and a healthy eco system. If there was not open clones of EL, then ubuntu or something else would take over and the main supported platform of enterprise applications, and then the large enterprises that pay for RedHat support contracts would move completely off. Having people use Centos or Scientific linux might not directly help the bottom line, but for RedHat it's a lot better than having people use ubuntu or suse. Oracle not being free could pose a bigger threat, but either RedHat remains on top as they are the main source for good support, or they do not and Oracle will have to pick up the slack for driving RedHat out of business. and what's left of RedHat would have to start using Oracle as TUV... I don't see too many switching to Oracle besides those that are already Oracle shops. - Original Message - From: Patrick J. LoPresti lopre...@gmail.com To: scientific-linux-users@fnal.gov Sent: Tuesday, January 14, 2014 12:45:01 PM Subject: RedHat CentOS acquisition: stating the obvious RedHat is a company. Companies exist for the sole purpose of making money. Every action by any company -- literally every single action, ever -- is motivated by that goal. The question you should be asking is: How does Red Hat believe this move is going to make them money? Those were statements of fact. What follows is merely my opinion. Right now, anybody can easily get for free the same thing Red Hat sells, and their #1 competitor is taking their products, augmenting them, and reselling them. If you think Red Hat perceives this as being in their financial interest, I think you are out of your mind. SRPMs will go away and be replaced by an ever-moving git tree. Red Hat will make it as hard as legally possible to rebuild their commercial releases. The primary target of this move is Oracle, but Scientific Linux will be collateral damage. I consider all of this pretty obvious, but perhaps I am wrong. I hope I am. - Pat
Re: Still having problem with epel
Those instructions look like they are for centos. Try: yum install yum-conf-epel instead of wget/rpm Did you use yum install yum-conf-rpmfusion - Original Message - From: Mahmood Naderan nt_mahm...@yahoo.com To: scientific-linux-users@fnal.gov Sent: Thursday, January 2, 2014 2:39:35 AM Subject: Still having problem with epel Hi, Recently I have faced a problem with epel repository ad asked a question about that. That thread was messy so I decided to create a simpler scenario. I have followed the instructions from http://www.rackspace.com/knowledge_center/article/installing-rhel-epel-repo-on-centos-5x-or-6x and downloaded the rpm file. However the epel repository doesn't work for me. If I remove it, then everything is normal. Please see the commands # wget http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm --2014-01-02 11:07:27-- http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm Resolving dl.fedoraproject.org... 209.132.181.23, 209.132.181.24, 209.132.181.25, ... Connecting to dl.fedoraproject.org|209.132.181.23|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 14540 (14K) [application/x-rpm] Saving to: epel-release-6-8.noarch.rpm 100%[] 14,540 59.5K/s in 0.2s 2014-01-02 11:07:33 (59.5 KB/s) - epel-release-6-8.noarch.rpm # rpm -Uvh epel-release-6-8.noarch.rpm Preparing... ### [100%] 1:epel-release ### [100%] # ls -1 /etc/yum.repos.d/epel* /etc/yum.repos.d/epel.repo /etc/yum.repos.d/epel-testing.repo # cat /etc/yum.repos.d/epel.repo [epel] name=Extra Packages for Enterprise Linux 6 - $basearch #baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-6arch=$basearch failovermethod=priority enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6 [epel-debuginfo] name=Extra Packages for Enterprise Linux 6 - $basearch - Debug #baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch/debug mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-debug-6arch=$basearch failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6 gpgcheck=1 [epel-source] name=Extra Packages for Enterprise Linux 6 - $basearch - Source #baseurl=http://download.fedoraproject.org/pub/epel/6/SRPMS mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-source-6arch=$basearch failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6 gpgcheck=1 # yum makecache Loaded plugins: fastestmirror, refresh-packagekit, security Loading mirror speeds from cached hostfile Error: Cannot retrieve metalink for repository: epel. Please verify its path and try again # rpm -qa | grep epel rpm epel-release-6-8.noarch # rpm -e epel-release-6-8.noarch # yum makecache Loaded plugins: fastestmirror, refresh-packagekit, security Loading mirror speeds from cached hostfile * sl: ftp2.scientificlinux.org * sl-security: ftp2.scientificlinux.org sl | 3.5 kB 00:00 sl-livecd-extra | 1.4 kB 00:00 sl-security | 3.0 kB 00:00 Metadata Cache Created So, how can I resolve the issue? Regards, Mahmood
Re: Kernel Panic after power failure
Is it a SSD? A lot of SSD (especially consumer grade) lie about writes
completing and cause nasty problems when the power goes out...
Try mounting it with ro,noload.
- Original Message -
From: Henrique C. S. Junior henrique...@gmail.com
To: Scientific Linux Users scientific-linux-users@fnal.gov
Sent: Monday, October 21, 2013 8:52:52 AM
Subject: Kernel Panic after power failure
After a power failure in my building, my SL 6.4 (x86_64) is
experiencing a kernel panic in the first stages of booting.
Error messages suggests that a serious problem occurred with my Ext4
filesystem in /dev/mapper/VolGroup-lv_root.
Here are the error messages aftes the kernel panic:
ata3.00: status: { DRDY ERR }
ata3.00: error: { UNC }
ata3.00: exception Emask 0xoSAct 0x0 SErr 0x0 action 0x0
ata3.00: BMDMA stat 0x25
ata3.00: failed command: READ DMA
ata3.00: cmd c8/00:00:c0:86:14/00:00:00:00:00/e3 tag 0 dm 131072 in
res 51/40:cf:e8:86:14/00:00:00:00:00/e3 Emask 0x9 (media error)
ata3.00: status: { DRDY ERR }
ata3.00: error: { UNC }
JBD: Failed to read block at offset 6886
EXT4-fs (dm-0): error loading journal
mount: wrong fs type, bad option, bad superblock on
/dev/mapper/VolGroup-lv_root,
missing codepage or helper program, or other error
In some cases useful info is found in syslog - try
dmesg | tail or so
Rescue disk says that I don't have any Linux partitions and I need
to rescue, at least, two MySQL databases in this server.
Can someone, please, provide some help with this case?
---
Henrique C. S. Junior
http://about.me/henriquejunior
Química Industrial - UFRRJ
Prefeitura Muncipal de Paracambi
Centro de Processamento de Dados
Re: How a user can execute a file from anothe user
One minor note, Read isn't needed on the directories if the user/script/etc knows the path. If the filename is known (no requirement to do a ls on the directory), then execute is sufficient. If you give read, then all the filenames in your directory are revealed (but not necessarily the contents). - Original Message - From: Earl Ramirez earlarami...@gmail.com To: Mahmood Naderan nt_mahm...@yahoo.com Cc: scientific-linux-users@fnal.gov Sent: Thursday, September 26, 2013 4:43:31 PM Subject: Re: How a user can execute a file from anothe user ... Sorry, I just saw the mistake, I forgot to mention that you need to grant access to the your home directory as mentioned by Mark. chmod o+rx /home/mahmood (I added read as the user didn't have permission to access the directory. You should now be able to execute the script as another user. For your reference: I created a folder named shared in user2 home directory @lab19 ~]# ls -la /home/user2 total 40 drwx---r-x. 5 user2 user2 4096 Sep 26 15:57 . drwxr-xr-x. 5 root root 4096 Sep 26 15:53 .. -rw---. 1 user2 user2 1387 Sep 26 16:27 .bash_history -rw-r-. 1 user2 user218 Feb 21 2013 .bash_logout -rw-r-. 1 user2 user2 176 Feb 21 2013 .bash_profile -rw-r-. 1 user2 user2 124 Feb 21 2013 .bashrc drwxr-x---. 2 user2 user2 4096 Nov 11 2010 .gnome2 drwxr-x---. 4 user2 user2 4096 Dec 20 2012 .mozilla drwxrws---. 2 user2 public 4096 Sep 26 15:57 shared -rw---. 1 user2 user2 641 Sep 26 15:57 .viminfo Created the script and was able to execute it from the user name user1 @lab19 ~]# ls -la /home/user2/shared/ total 12 drwxrws---. 2 user2 public 4096 Sep 26 15:57 . drwx---r-x. 5 user2 user2 4096 Sep 26 15:57 .. -rwxrwx---. 1 user2 public 18 Sep 26 15:57 script1 user1@lab19 ~]$ /home/user2/shared/script1 FilesystemSize Used Avail Use% Mounted on /dev/mapper/vg_lab11-lv_root 5.5G 2.8G 2.5G 54% / tmpfs 504M 232K 504M 1% /dev/shm /dev/vda1 485M 92M 369M 20% /boot /dev/md1272.0G 100M 1.9G 5% /home/labs -- Kind Regards Earl Ramirez GPG Key: http://trinipino.com/PublicKey.asc
Re: yum update failure for 6x x86_64 - [Errno 14] Downloaded more than max size
Sounds like you did the update in the middle of or an only partially complete sync, or the sync didn't finish and so primary.sqlite.bz2 is newer or older than other parts of the repo. Make sure your rsync runs cleanly, and then try again. Does your rsync have --delete-delay --delay-updates ? If not, that should at least reduce the window of a partial sync in the future. - Original Message - From: Paul Jochum paul.joc...@alcatel-lucent.com To: scientific-linux-users@fnal.gov Sent: Thursday, September 12, 2013 11:21:55 AM Subject: yum update failure for 6x x86_64 - [Errno 14] Downloaded more than max size Hi All: This morning, I am trying to perform a yum update from our rsync'd copy of the Scientific Linux 6.x x86_64 repo, and ran into the following error: [root@lss-desktop01 yum.repos.d]# yum clean all Loaded plugins: refresh-packagekit, security Cleaning repos: adobe-linux-i386 adobe-linux-x86_64 sl6x sl6x-fastbugs sl6x-security Cleaning up Everything [root@lss-desktop01 yum.repos.d]# yum update Loaded plugins: refresh-packagekit, security adobe-linux-i386 | 951 B 00:00 adobe-linux-i386/primary | 11 kB 00:00 adobe-linux-i386 17/17 adobe-linux-x86_64 | 951 B 00:00 adobe-linux-x86_64/primary | 1.2 kB 00:00 adobe-linux-x86_64 2/2 sl6x | 3.7 kB 00:00 sl6x/primary_db | 4.2 MB 00:02 sl6x-fastbugs | 2.6 kB 00:00 http://lss-kickstart1.ih.lucent.com/scientific/6x/x86_64/updates/fastbugs/repodata/primary.sqlite.bz2: [Errno 14] Downloaded more than max size for http://lss-kickstart1.ih.lucent.com/scientific/6x/x86_64/updates/fastbugs/repodata/primary.sqlite.bz2: 365918 332221 Trying other mirror. http://lss-kickstart1.ih.lucent.com/scientific/6x/x86_64/updates/fastbugs/repodata/primary.sqlite.bz2: [Errno 14] Downloaded more than max size for http://lss-kickstart1.ih.lucent.com/scientific/6x/x86_64/updates/fastbugs/repodata/primary.sqlite.bz2: 365918 332221 Trying other mirror. Error: failure: repodata/primary.sqlite.bz2 from sl6x-fastbugs: [Errno 256] No more mirrors to try.
Re: Bug in yum-autoupdate
- Original Message - From: Nico Kadel-Garcia nka...@gmail.com It's exceedingly dangerous in a production environment. I've helped run, and done OS specifications and installers for a system over 10,000 hosts. and you *never*, *never*, *never* auto-update them without warning or outside the maintenance windows. *Never*. If I caught someone else on the team doing that as a matter of policy, I would have campaigned to have them fired ASAP. If you have to manage 10,000 hosts then you are lucky you never had to learn to deal with no maintenance window and 0 downtime, and so most of your maintenance had to be possible outside of a maintenance window. That is how many IT shops with thousands of machines have to operate these days. You might even want to read up on Netflix's thoughts on chaos monkey. Autoupgrades are just another form of random outage you might have to deal with. As long as you have different hosts upgrading on different days and times, and you have automated routines that test and take servers out of service automatically if things fail, then autogrades is perfectly fine. If things break from the autoupgrades, it becomes real obvious based on the update history of which machines broke from it. Campaigning to have someone fired without even hearing their reason for upgrading, or even warning them first that at your location is is standard practice not to ever autoupgrade because you have a separate QA process that even critical security patches must go through is a very bad practice on your part. I am not going to state what patch policy I use, only that different policies work for different environments. Based on your statement, it sounds like you could be loosing some valuable co-workers by lobbying to get people fired that have a different opinion from you instead of trying to educate and/or learn from each other. If you feel you can not learn from your peers, you have already proven you are correct in that respect, but you have also shown there is much you don't know by being incapable of learning new things. (Personally I would hate to use Nagios for 10,000 hosts. It didn't really scale that well IMHO, but to be honest I haven't bothered looking at it in over 4 years, and maybe it's improved. Not familiar with Icinga, but I have had good luck with Zabbix for large scale)
Re: is this a this virus or an error
Linux can get viruses too including ones that could cause the symptoms described. Not sure what you mean by oos viruses, but the claim was blaster like, not the blaster virus. That said, it sounds suspicious like an attempt to get you to buy something. Anyways, a virus on Linux is possible, but you can use argus or tcpdump or a ton of other network monitoring tools on your machine and see if it is spewing out random connections that it shouldn't be. - Original Message - From: g gel...@bellsouth.net To: scientific linux users scientific-linux-users@fnal.gov Sent: Friday, May 24, 2013 12:50:12 PM Subject: is this a this virus or an error greetings. last night while reading articles at 'news.yahoo.com' using firefox 17.0.6, i had 3 pages opened and this message popped up; +++ Excessive Sessions Warning Error Your 2701HG-B Gateway has intercepted your web page request to provide you with this important message. The following devices on your network are using a large number of simultaneous Internet sessions: 192.168.1.144 The most likely cause of this issue is a ~blaster~ type virus which has infected the device. It is strongly recommended that the devices above be scanned for potential viruses. Note that a large number of sessions may occasionally be the result of application software or gaming software installed on the device. If you believe this is the case, click the ~Do not show me excessive session warnings in the future~ to disable this feature. To access the requested Web page that was intercepted, please close all browser windows and then restart your Web browser software. If you continue to see this page after closing all open Web browser windows, restart your computer. [ ] Do not show me excessive session warnings in the future +++ i have, at previous times, had 8 to 10 pages opened and not received such a notice. curious as to what such a virus infected, i looked up 'blaster' at wikipedia.org to find; +++ The Blaster Worm (also known as Lovsan, Lovesan or MSBlast) was a computer worm that spread on computers running the Microsoft operating systems: Windows XP and Windows 2000, during August 2003.[1] The worm was first noticed and started spreading on August 11, 2003. The rate that it spread increased until the number of infections peaked on August 13, 2003. Filtering by ISPs and widespread publicity about the worm curbed the spread of Blaster. +++ i contacted bellsouth and the rep insisted that i had a virus that was causing message. when i told her that i had doubt that it was a virus, because i run linux and oos viruses do not effect linux. she insisted that viruses have a way of creeping into a system and that for $100, i could have an online scan run to check my system. when i mentioned that notice stated; It is strongly recommended that the devices above be scanned for potential viruses. rep insisted that meant my computer and not the dsl modem. needless to say, if she did not understand what i was trying to explain to her that i was not using oos, she has little understanding about any virus problem. so, have any readers run across above notice or know of any virus that can enter a linux system to cause such a message to appear? tia. -- peace out. in a world with out fences, who needs gates. sl5.9 linux tc.hago. g .
Re: Network is ok, web browser won't browse
One possibility is a proxy issue. Configured when it shouldn't be, or the proxy server down, or not configured but an upstream firewall enforces you go through it, etc... Less likely, but sometimes a switch or router just acts up and needs to be reset. Assuming you have identically configured machines, and groups are acting different, makes it a little more likely... Have you tried different utilities for http, such as wget? - Original Message - From: Nathan Moore ntmo...@gmail.com To: scientific-linux-users scientific-linux-users@fnal.gov Sent: Thursday, April 25, 2013 10:03:41 PM Subject: Network is ok, web browser won't browse Context: small academic cluster of SL5.8 machines, x86_64. Recently, some of the machines on the cluster stopped being able to access the outside internet. Machines can still update via ftp, yum, nslookup, and ping, but http requests beyond the local cluster seem to be universally denied. I've never encountered a problem like this before (and it is probably my own fault, as I am a self-taught sys-admin), but I'm wondering if anyone else has seen a similar problem. Bonus points if you can tell me where in /etc or /var I should look to find the offending config file. regards, NTM
Mirror questions
I am trying to setup a mirror (internal initially, might make public). It seems to be taking significantly more space than expected based on the FAQ. The page on https://www.scientificlinux.org/download/mirroring/mirror.rsync recommends --exclude=archive/obsolete and --exclude=archive/debuginfo. Any reason not to also exclude archives/obsolete and archives/debuginfo too? They seem rather big and are under the 5rolloing directory. Perhaps a mistake in the directory name as 6rolling is called archive? Also, sites/example under most seem to be going forever and causing part of my problem. Is some sym or hard link not syncing correctly? For example: http://rsync.scientificlinux.org/linux/scientific/53/i386/sites/example/sites/example/sites/example/sites/example/sites/example/sites/example/sites/example/sites/example/ (etc...)
