Re: [SCIENTIFIC-LINUX-USERS] Security ERRATA Moderate: kernel on SL6.x i386/x86_64
On 05/04/2016 12:39 PM, olli hauer wrote: On 2016-05-04 15:31, Pat Riehecky wrote: Synopsis: Moderate: kernel security, bug fix, and enhancement Advisory ID: SLSA-2016:0715-1 Issue Date:2016-05-04 CVE Numbers: CVE-2015-5157 CVE-2015-8767 -- ... Hi Pat / SL Team, don't know if it is a local issue on my site, but after the last rsync of the 6rolling, 6x and 6.7 repo I get again a checksum mismatch. Comparing the sha256 values from $repo/x86_64/updates/security/repodata/repomd.xml with the calculated sha256 in the directory does not match any of the files. In case it is useful as additional info, I've synced directly from rsync.scientificlinux.org (sldist.fnal.gov) IPv4: 131.225.105.11 some minutes ago. Perhaps someone can do a manual cross check? The files on the server seem to match what is expected. Can I have you try a yum clean all? Pat linux/scientific/6.7/x86_64/updates/security/repodata [riehecky@testify repodata]$ sha256sum * 28ae1141d5fab86d48ec456fb9766d875050105cd77a5679a1883181d1c1b518 filelists.sqlite.bz2 04994a859d615f7cc1d5cf8027b2417412a29b739941aa6c9136a8877741fa9c filelists.xml.gz 7973023955f2cc583c25f6ed59c22a215ed19151f903c6eea3cb0bacdc736cf9 other.sqlite.bz2 ec84e4610ee81c3387bc9cda4217cec520fa3248861e3d2efc80a22e64da6be3 other.xml.gz 2d3ee225327745cb43e9874c2d5fcb58411c178e9654be1619e6cab4ad1056f1 primary.sqlite.bz2 2528e5f97add7874d159ef687bd4ff9e7f256381b022c692b37c55c33d3aecd7 primary.xml.gz abc1c989aa3ae37f47b3c39a0ecb8dbc19becb06f1bbb0e1fa31f8a12563e061 repomd.xml de6609b12d04d98fa4c9c3d6801dac80d46c19b00cf1dbb03935d2e4eaeb915d updateinfo.xml d574666081cc0e3275c4bd6d6dca49f95751cad3b6512ec5b4465aac9a7599a2 updateinfo.xml.bz2 [riehecky@testify repodata]$ cat repomd.xml http://linux.duke.edu/metadata/repo"; xmlns:rpm="http://linux.duke.edu/metadata/rpm";> 1462368176 type="sha256">04994a859d615f7cc1d5cf8027b2417412a29b739941aa6c9136a8877741fa9c type="sha256">79f597f28a21bb69eb60cec6ea42dd4632ece69409d4b9242fec9a9733d94ac6 1462368259 2177845 37142966 type="sha256">d574666081cc0e3275c4bd6d6dca49f95751cad3b6512ec5b4465aac9a7599a2 type="sha256">de6609b12d04d98fa4c9c3d6801dac80d46c19b00cf1dbb03935d2e4eaeb915d 1462369638.19 68753 type="sha256">2528e5f97add7874d159ef687bd4ff9e7f256381b022c692b37c55c33d3aecd7 type="sha256">80a33d6703b9451860ee1355063d6d3293d9fbb02976f6c5c6aaa50e95fc6d5b 1462368259 1511509 11289422 type="sha256">ec84e4610ee81c3387bc9cda4217cec520fa3248861e3d2efc80a22e64da6be3 type="sha256">588588faf9467e00b4713dbdadca93d31718acae48a61f3a5dc5d35c296d6fbb 1462368259 75780 781339 type="sha256">28ae1141d5fab86d48ec456fb9766d875050105cd77a5679a1883181d1c1b518 type="sha256">a9c3dccbde88029f2e8206db9b6dc01e1231b5efc93db7dba9e814aa997d16f2 1462368299 10 2071260 17189888 type="sha256">2d3ee225327745cb43e9874c2d5fcb58411c178e9654be1619e6cab4ad1056f1 type="sha256">8641452dcf688a0c6b77fbcf09ff344cafe3b53397e847eddfc06011d47c46a1 1462368299 10 2941783 13830144 type="sha256">7973023955f2cc583c25f6ed59c22a215ed19151f903c6eea3cb0bacdc736cf9 type="sha256">8dd532e42ce6a07afbfe7f9e84bbc52c0d258a94b8a5ef2b57410cc5fb2aea6b 1462368299 10 130333 802816
Re: [SCIENTIFIC-LINUX-USERS] firefox 45.1 crashes
On 04/28/2016 01:25 PM, Graham Allan wrote: After the excitement of seeing firefox 45.1 ESR released for SL, we're getting a handful of reports of frequent crashing. I've had people try the obvious things (disable plugins esp. flash, create a new firefox profile, reboot entire workstation) without any obvious improvement. Just wondering if anyone else has seen the same thing. Not seeing anything reported in bugzilla, but it's only been ~1 day. Graham I've not seen any issues running it nearly 100% of the time since the release. Pat
Re: [SCIENTIFIC-LINUX-USERS] SL6.7: yum complains "6.7/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match checksum"
On 04/27/2016 01:03 AM, olli hauer wrote: Hi SL Team, it seems the metadata for SL6.7 has some issues. On my 6.7 systems yum complains ... 6.7/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match checksum I've already done a re-sync and a 'yum clean all', could you please verify the 6.7 metadata? ls -ltr /mirror/linux/scientific/6.7/x86_64/updates/security/repodata/ total 8509 -rw-r--r-- 1 root wheel 1181784 Apr 26 23:51 primary.xml.gz -rw-r--r-- 1 root wheel69860 Apr 26 23:51 other.xml.gz -rw-r--r-- 1 root wheel 1973074 Apr 26 23:51 filelists.xml.gz -rw-r--r-- 1 root wheel 2391386 Apr 26 23:51 primary.sqlite.bz2 -rw-r--r-- 1 root wheel 127155 Apr 26 23:51 other.sqlite.bz2 -rw-r--r-- 1 root wheel 1868170 Apr 26 23:51 filelists.sqlite.bz2 -rw-r--r-- 1 root wheel67539 Apr 27 00:11 updateinfo.xml.bz2 -rw-r--r-- 1 root wheel 499777 Apr 27 00:11 updateinfo.xml -rw-r--r-- 2 root wheel 2969 Apr 27 00:14 repomd.xml The files look right on the system, but I'll rebuild the metadata just to be safe. Should take about 10m. Pat
Re: [SCIENTIFIC-LINUX-USERS] yum-cron problem on 7.x
On 04/26/2016 11:59 AM, Dan McDaniel wrote: Is there any way to get yum-cron to read environment variables? There doesn't seem to be anyway in /etc/yum/yum-cron.conf. They seem to expect you to edit that file on every single system. I want to change the email_from setting because getting 100 emails all from "root@localhost" is less than helpfull. On 6.x the emails came from root@$HOSTNAME, but I can't find any way to make this work on 7.x. Am I missing something simple? Alas no you are not missing anything: https://bugzilla.redhat.com/show_bug.cgi?id=1121189
Re: [SCIENTIFIC-LINUX-USERS] yum error, SL 6.3, file is encrypted or is not a database
Weird, the only change to the on April 21 was a security errata that was published just like the rest. I'll rebuild the metadata across the board just to be safe. Pat On 04/23/2016 05:38 PM, P. Larry Nelson wrote: I am having same problem with 3 of my SL5.x systems. One is 5.1 and two are 5.4. All my other SL 5.x are 5.5 and have had no problems, nor have I seen this problem with any of my SL6.x systems. The problem seems to be with sl-security repo. If I do a 'yum update --disablerepo=sl-security' on the 5.1 and 5.4 systems I do NOT get the: Error: file is encrypted or is not a database This just started happening with the early morning auto yum update on 4/22/16. - Larry Joseph Areeda wrote on 4/23/16 4:35 PM: I see people are having the same problem with some of the version 7 repos. But I don't understand how to figure out which repo is causing the problem. Are people disabling star and enabling one at a time? Thanks, Joe On 4/23/16 1:53 PM, Joseph Areeda wrote: We started getting this error couple of days ago machine that has been auto updating for years. I would assume that it was a corruption of a local database but it happened on two systems simultaneously. Googling for that error message produces nothing on yum but several hits on's SQLite. I'd appreciate any insight into what the error means and how to track down exactly which repo or file on my system is causing it the problem. Below is what I see, yum update also produces the same error message. Thanks, Joe [root@mavraki yum.repos.d]# yum clean all Loaded plugins: fastestmirror, refresh-packagekit, security Cleaning repos: CONDOR-stable VDT-Production-sl6 elrepo lscsoft-epel lscsoft-pegasus lscsoft-production sl sl-security Cleaning up Everything Cleaning up list of fastest mirrors [root@mavraki yum.repos.d]# yum repolist Loaded plugins: fastestmirror, refresh-packagekit, security Determining fastest mirrors * elrepo: elrepo.org * sl: ftp1.scientificlinux.org * sl-security: ftp1.scientificlinux.org CONDOR-stable | 2.9 kB 00:00 CONDOR-stable/primary_db | 427 kB 00:00 VDT-Production-sl6 | 1.3 kB 00:00 VDT-Production-sl6/primary | 35 kB 00:00 VDT-Production-sl6 11/11 elrepo | 2.9 kB 00:00 elrepo/primary_db | 732 kB 00:00 lscsoft-epel | 2.7 kB 00:00 lscsoft-epel/primary_db | 4.2 MB 00:02 lscsoft-pegasus | 2.6 kB 00:00 lscsoft-pegasus/primary_db | 5.8 kB 00:00 lscsoft-production | 2.9 kB 00:00 lscsoft-production/primary_db | 301 kB 00:00 sl | 3.5 kB 00:00 sl/primary_db | 4.2 MB 00:03 sl-security | 3.0 kB 00:00 sl-security/primary_db | 12 MB 00:06 Error: file is encrypted or is not a database [root@mavraki yum.repos.d]#
Re: [SCIENTIFIC-LINUX-USERS] SL7 DVD creation
Hi Mark, We use lorax (in SL) to create the install trees and pungi to create the media (was in EPEL). You can host an SL context on the DVD following: http://ftp.scientificlinux.org/linux/scientific/7/contexts/#_context_directory_structure You can also use the attached script to build a DVD. Pat On 04/21/2016 01:28 PM, Mark Stodola wrote: I'm working on making the jump from SL5 to 7 (skipped over 6). For SL5 I have a nice shell script that unpacks the official DVD iso, adds/removes a few packages, rebuilds the repo data, tosses in a custom syslinux config and kickstart files, and finally builds a resultant bootable respun iso image. From a quick search, I found instructions on using revisor for SL6. I don't see revisor in any of the SL7 repos and don't see updated information on the website. I see this "Context" idea, but it seems overkill and (possibly) network dependent. I want everything to end up right on the install DVD for easy off-line installation. My existing setup has some workarounds and kludges to make it work, and would prefer to attempt to use the modern, accepted method for doing this. Especially for the EFI booting. Any help or directional pointing is much appreciated. Pat, is the toolset used to build the official images available somewhere for consumption? -Mark build.context.dvd.sh Description: application/shellscript
Re: [SCIENTIFIC-LINUX-USERS] libssh in SL 7
The updated libssh will be published shortly. Not sure why the build scripts didn't take care of it already. Pat On 04/19/2016 12:06 PM, Glenn Morris wrote: Hi, libssh is needed by EPEL's x2goclient. In RHEL 7, it is in the "Extras" channel. In SL 7.1, libssh 0.7.1-1 is available in sl-fastbugs. It doesn't seem to be anywhere in the SL 7.2 tree, but 7x/external_products/extras includes the same version. There was the following security update for RHEL7 libssh recently that updates it to 0.7.1-2. https://rhn.redhat.com/errata/RHSA-2016-0566.html Are there any plans to update the version in SL 7? EPEL includes libssh-0.6.5-2, which does include the fix for the relevant CVE. So perhaps it is better to use the EPEL version, despite the apparent lower version number. TIA.
Re: [SCIENTIFIC-LINUX-USERS] abiword
On 04/14/2016 09:26 AM, Lamar Owen wrote: On 04/14/2016 10:08 AM, Pat Riehecky wrote: On 04/14/2016 12:27 AM, Lamar Owen wrote: Not sure how difficult that will be to get those packages (and the packages the -devel packages depend upon) built. I have a client who is waiting on a CentOS 7-compatible Abiword to migrate to CentOS 7 from CentOS 6, and Abiword is a blocker. Has there been a request for an EPEL7 branch? I don't know, but I would support such a thing. It is currently supported in F23, so it appears to be actively maintained (but I am not an EPEL insider). These links should probably get you started: https://fedoraproject.org/wiki/EPEL/FAQ#How_do_I_request_a_EPEL_branch_for_an_existing_Fedora_package.3F https://fedoraproject.org/wiki/Getting_a_Fedora_package_in_EPEL https://fedoraproject.org/wiki/Join_the_package_collection_maintainers Pat
Re: [SCIENTIFIC-LINUX-USERS] abiword
On 04/14/2016 12:27 AM, Lamar Owen wrote: On 04/11/2016 07:02 AM, Yasha Karant wrote: Is there any EL7 rpm or other successful build of a recent stable release of abiword? If so, what is URL to download the build including whatever other rpms are required (or a large static image that does not require any .so components that are not part of the standard SL 7 repo)? Yasha Karant Several of abiword's buildrequires are not in the various EL7 repos. There aren't very many of them; in attempting to rebuild the FC22 Abiword and attempting to install the buildreqs I get: No package aiksaurus-devel available. No package aiksaurus-gtk-devel available. No package gtkmathview-devel available. No package link-grammar-devel available. No package loudmouth-devel available. No package ots-devel available. No package wv-devel available. Not sure how difficult that will be to get those packages (and the packages the -devel packages depend upon) built. I have a client who is waiting on a CentOS 7-compatible Abiword to migrate to CentOS 7 from CentOS 6, and Abiword is a blocker. Has there been a request for an EPEL7 branch? Pat
Re: Security ERRATA Critical: samba and samba4 on SL6.x, SL7.x i386/x86_64
On 04/13/2016 10:36 AM, Glenn Morris wrote: Hi, Pat Riehecky wrote: SL7 x86_64 [...] openchange-2.0-10.el7_2.i686.rpm openchange-2.0-10.el7_2.x86_64.rpm openchange-debuginfo-2.0-10.el7_2.i686.rpm openchange-debuginfo-2.0-10.el7_2.x86_64.rpm These ones don't seem to appear in ftp://ftp.scientificlinux.org/linux/scientific/7.2/x86_64/updates/security/ which causes updates to fail with: Error: Package: openchange-2.0-9.el7.x86_64 (@sl) Requires: libsamba-debug-samba4.so(SAMBA_4.2.3)(64bit) Removing: samba-client-libs-4.2.3-12.el7_2.x86_64 (@sl-security) libsamba-debug-samba4.so(SAMBA_4.2.3)(64bit) Updated By: samba-client-libs-4.2.10-6.el7_2.x86_64 (sl-security) ~libsamba-debug-samba4.so(SAMBA_4.2.10)(64bit) Available: samba-client-libs-4.2.3-10.el7.x86_64 (sl) libsamba-debug-samba4.so(SAMBA_4.2.3)(64bit) Available: samba-client-libs-4.2.3-11.el7_2.x86_64 (sl-security) libsamba-debug-samba4.so(SAMBA_4.2.3)(64bit) You could try using --skip-broken to work around the problem Weird, I'll republish the repo and watch it for unexpected behavior. Pat
Re: [SCIENTIFIC-LINUX-USERS] Fermi has stopped using SL?
On 04/08/2016 09:07 PM, Bruce Ferrell wrote: I heard a rumor today that said Fermi labs has moved off of Scientific Linux to Centos? Is this a factual thing? We are very much still here. Pat http://www.scientificlinux.org/about/
Re: [SCIENTIFIC-LINUX-USERS] Need NAS recommendations
On 03/18/2016 08:04 PM, ToddAndMargo wrote: Hi All, Anyone have a favorite small (2 to 4 TB) Network Attached Storage (NAS) that is Linux friendly. No weird drivers, etc.. Many thanks, -T I have mixed feelings about my Thecus N5550. On the one hand I've got it running SL 7.2 with Glusterfs very happily. On the other, it requires a custom kernel and some out of tree kmods to get all the front buttons to work. If you're unwilling to put your own OS on it, this is probably not the right NAS for you. Oat
Re: [SCIENTIFIC-LINUX-USERS] "Not using downloaded repomd.xml because it is older than what we have:"
On 03/09/2016 03:36 AM, Antonio Querubin wrote: On Wed, 9 Mar 2016, John Pilkington wrote: But doesn't SL7 use chrony? We're talking servers (ie. always on systems) right? - where supposedly ntpd is the better choice. I would think the mirrors are running ntpd instead of chronyd. But this discussion got me to rechecking again why ntpd wasn't starting up on some of my own servers and it turns out chronyd was still enabled on those. Perhaps the repo servers have the same issue? I've verified that the distribution servers have a stable ntpd running and remain synced with several on site stratum1 time sources. Pat
Re: [SCIENTIFIC-LINUX-USERS] Dependency problems with 7.2
Can I have you run a 'yum clean all' for me? I show ver 0.5.5-1 in the 7.2 public tree: http://ftp.scientificlinux.org/linux/scientific/7.2/x86_64/os/repoview/device-mapper-persistent-data.html Pat On 02/23/2016 11:54 AM, Dan McDaniel wrote: After a fresh install of 7.2 I get dependency problems when doing a yum update. Error: Package: libtool-2.4.2-21.el7_2.x86_64 (sl-fastbugs) Requires: gcc = 4.8.5 Installed: gcc-4.8.3-9.el7.x86_64 (@anaconda/7.2) gcc = 4.8.2-16.el7 gcc = 4.8.3-9.el7 Error: Package: 7:lvm2-2.02.130-5.el7_2.1.x86_64 (sl-fastbugs) Requires: device-mapper-persistent-data >= 0.5.5-1 Installed: device-mapper-persistent-data-0.4.1-2.el7.x86_64 (@anaconda/7.2) device-mapper-persistent-data = 0.4.1-2.el7 I can remove libtool, but I'm a little hesitant to remove lvm2. Is there a fix/workaround for this?
Re: [SCIENTIFIC-LINUX-USERS] ABRT / rhtsupport.conf
You may have ended up with libreport-plugin-rhtsupport installed. you should be able to remove that plugin with yum. Pat On 02/08/2016 01:39 PM, Thomas Leavitt wrote: Abrt prompts me to activate autoreporting (this appeared after an install from 7.0 media and an update to 7.2), and fails… is this a branding issue, or a non-existent functionality issue, or should it work? (see attached screenshot) Thomas -- Thomas Leavitt (tleav...@eag.com) Interim Sr. Linux IT Consultant (880 IT Services) 831-469-3382 (Google Voice forwards to 880 IT cell, accepts SMS) 1-408-454-4569 (desk) / This e-mail may contain privileged or confidential information. If you are not the intended recipient: (1) you may not disclose, use, distribute, copy or rely upon this message or attachment(s); and (2) please notify the sender by reply e-mail, and then delete this message and its attachment(s). EAG, Inc. and its affiliates disclaim all liability for any errors, omissions, corruption or virus in this message or any attachments. /
Re: [SCIENTIFIC-LINUX-USERS] Upgrading SL 7.1 to SL 7.2 - auto update switched back on
This is an upstream bug: id=1293513 On 02/08/2016 12:02 PM, Tim Kanuka wrote: The effect of installing SL_yum-cron_no_automated_apply_updates and SL_yum-cron_no_default_excludes were *both* undone by the update. As Bill implies, the TUV change of a config file back to the default for the sake of a few comment lines seems a bit severe (although, admittedly, those comment lines are important.) rpmconf(8) is your friend. I run this after every operating system update to production servers (and most especially point releases.) It finds and helps you resolve these kinds of issues. It is available in EPEL. Should the SL packages rerun their postinstall scriptlets (via, say, a %triggerin) when a new yum-cron package comes along? Or is this a bug for TUV? Tim Kanuka Canadian Light Source Inc. -Original Message- From: owner-scientific-linux-us...@listserv.fnal.gov [mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Bill Maidment Sent: February 5, 2016 23:28 To: Bill Maidment ; scientific-linux-us...@fnal.gov Subject: RE: Upgrading SL 7.1 to SL 7.2 - auto update switched back on That should have been /etc/yum/yum-cron.conf -Original message- From:Bill Maidment Sent: Saturday 6th February 2016 16:21 To: scientific-linux-us...@fnal.gov Subject: Upgrading SL 7.1 to SL 7.2 - auto update switched back on Be aware The upgrade overwrites /etc/yum/yum.conf (putting the old file in /etc/yum/yum.conf.saved). All for the sake of a few changed comment lines. Cheers Bill Maidment
Re: [SCIENTIFIC-LINUX-USERS] SL mirror lists with expanded variables
This bug should be fixed in SL7.2, the Release Candidate media is published: http://ftp.scientificlinux.org/linux/scientific/7.2/ Pat On 01/29/2016 04:22 PM, Anthony Seward wrote: Is there a version of the SL mirror lists (e.g. http://ftp2.scientificlinux.org/linux/scientific/mirrorlist/sl-fastbugs-7.txt) that have the $slreleasever $basearch variables expanded? I’m adding the update repos to my kickstart file using the “repo —mirrorlist” option, but anaconda does not replace $slreleasever and $basearch in the mirror list. I have to use the —baseurl option instead. I’d rather use the mirrorlist, though. TIA, Tony
Re: [SCIENTIFIC-LINUX-USERS] Metadata Digest Mismatch On sl-security
No worries, I'm glad things are working as expected again! Pat On 01/27/2016 12:04 PM, Elias Wulcan wrote: Thank you, that worked. I am sorry I didn’t find the FAQ. And… now I see checked against the open-checksum instead of the checksum. *From:*Pat Riehecky [mailto:riehe...@fnal.gov] *Sent:* 27 January 2016 19:00 *To:* Elias Wulcan ; SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV *Subject:* Re: [SCIENTIFIC-LINUX-USERS] Metadata Digest Mismatch On sl-security Please try the workaround from: http://www.scientificlinux.org/documentation/faq/faq-updates/#not-match-checksum Pat On 01/27/2016 11:47 AM, Elias Wulcan wrote: I was trying to use repoquery for a task but as it tried to fetch filelists for sl-security from its configured mirrors it failed on all of them with an error message “Metadata file does not match checksum”. The mirrors it tried where ftp.scientificlinux.org <ftp://ftp.scientificlinux.org>, ftp1 and ftp2 over http and ftp.scientificlinux.org <ftp://ftp.scientificlinux.org> again but over ftp. Then I downloaded filelists.sqliste.bz2 and repomd.xml on another machine, calculated the SHA-256 digest of filelists and the result does not match repomd. 6256646334f2aa42c16f4e7541cd2c47c4182987733cd3112182b111ad2deb91 787cf215674f6ec2a42ec5d653906db6c1766793eacf1d62a7dc47adf452fdfe 1453910828 10 1348907 10261504 SHA-256 digest of filelists.sqlite.bz2 downloaded over http from ftp.scientificlinux.org <ftp://ftp.scientificlinux.org> at roughly 6 pm CET today: 6256646334F2AA42C16F4E7541CD2C47C4182987733CD3112182B111AD2DEB91 The size element matches the size of the downloaded file.
Re: [SCIENTIFIC-LINUX-USERS] Metadata Digest Mismatch On sl-security
Please try the workaround from: http://www.scientificlinux.org/documentation/faq/faq-updates/#not-match-checksum Pat On 01/27/2016 11:47 AM, Elias Wulcan wrote: I was trying to use repoquery for a task but as it tried to fetch filelists for sl-security from its configured mirrors it failed on all of them with an error message “Metadata file does not match checksum”. The mirrors it tried where ftp.scientificlinux.org, ftp1 and ftp2 over http and ftp.scientificlinux.org again but over ftp. Then I downloaded filelists.sqliste.bz2 and repomd.xml on another machine, calculated the SHA-256 digest of filelists and the result does not match repomd. 6256646334f2aa42c16f4e7541cd2c47c4182987733cd3112182b111ad2deb91 787cf215674f6ec2a42ec5d653906db6c1766793eacf1d62a7dc47adf452fdfe 1453910828 10 1348907 10261504 SHA-256 digest of filelists.sqlite.bz2 downloaded over http from ftp.scientificlinux.org at roughly 6 pm CET today: 6256646334F2AA42C16F4E7541CD2C47C4182987733CD3112182B111AD2DEB91 The size element matches the size of the downloaded file.
Posted for testing: Scientific Linux 7.2 x86_64 Release Candidate
Scientific Linux 7.2 x86_64 Release Candidate - Jan 26, 2016 == Information == If no critical bugs are reported by Feb 2, 2016 this will become the official release of Scientific Linux 7.2 NOTE: Please review the SL Release Notes along with The Upstream Vendor's Release Notes: http://ftp.scientificlinux.org/linux/scientific/7.2/x86_64/release-notes/ https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/index.html There is a great deal of information within those documents not listed here. Send comments/issues/test reports to: scientific-linux-de...@listserv.fnal.gov == Media == You can find the release media at: http://ftp.scientificlinux.org/linux/scientific/7.2/x86_64/iso/ Alternatively the livecd-iso-to-disk utility is able to convert this to USB successfully. A USB device of sufficient size is required. Alternatively you can utilize the dd command to write the raw image to a USB device. http://ftp.scientificlinux.org/linux/scientific/7/x86_64/release-notes/#_how_to_make_a_bootable_usb_installer == SL Specific Updates == .External Repos With SL 7.2, yum-conf files pointing to non-base SL (such as EPEL, ELRepo, SL-Extras, SL-SoftwareCollections, ZFS) have moved to a central location. Since these repos are not specific to individual releases of SL, the separate location will allow for easier adding and removing of these resources for any SL7 system. To load a resource, such as EPEL: `yum install yum-conf-repos` followed by `yum install yum-conf-epel`. .Install Media Updates The install media now features the yum-fastest-mirror plugin. The yum-fastest-mirror plugin should locate a quickly responding mirror for network installs. .Scientific Linux Contexts SL 7.2 includes initial support for Scientific Linux Contexts which should allow for ease of creating local customization for specific computing needs. For more information on Scientific Linux Contexts: http://ftp.scientificlinux.org/linux/scientific/7/contexts/README.html .OpenAFS With SL 7.2 OpenAFS has been updated to version 1.6.16 the latest upstream stable. .Yum behavior update Backported patch from upstream for yum fs-vars, per BZ#1281593 Now yum vars set in /etc/yum/vars will be checked even in an alternate yum-root. Thanks for the bug report Lincoln Bryant! .IPA customizations The IPA packages have been customized to remove the upstream links to their support services. .Build Fixes The curl and mariadb packages were modified to ensure their unit tests for date validation worked after Oct 2015 == Known Bugs == == UEFI Secure Boot == The status of UEFI Secure Boot for Scientific Linux is noted in detail at: http://ftp.scientificlinux.org/linux/scientific/7/x86_64/release-notes/#_about_uefi_secure_boot Booting SL7 with Secure Boot enabled works but requires a manual step. This is because the "shim" has not been signed by the UEFI CA. Instructions are included within the SL7 Release Notes.
Re: [SCIENTIFIC-LINUX-USERS] Devtoolset 4
It is. I'm not sure where my release email went. sent folder shows it went out Pat On 01/22/2016 07:41 AM, Thompson, Herb wrote: I see devtoolset-4 in the 7x repository. Is it released? *From:*Thompson, Herb *Sent:* November-20-15 1:09 PM *To:* 'Pat Riehecky'; SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV *Subject:* RE: [SCIENTIFIC-LINUX-USERS] Devtoolset 4 That’s understandable. Thanks for the feedback. *From:*Pat Riehecky [mailto:riehe...@fnal.gov] <mailto:[mailto:riehe...@fnal.gov]> *Sent:* November-20-15 1:06 PM *To:* Thompson, Herb; SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV <mailto:SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV> *Subject:* Re: [SCIENTIFIC-LINUX-USERS] Devtoolset 4 DTS4 is staged on the buildservers, but with 7.2 published our focus is there right now. Pat On 11/20/2015 10:24 AM, Thompson, Herb wrote: I see that TUV released devtoolset-4 this week. Hope that SL will continue their much appreciated efforts to provide new devtoolset releases. This e-mail communication (including any or all attachments) is intended only for the use of the person or entity to which it is addressed and may contain confidential and/or privileged material. If you are not the intended recipient of this e-mail, any use, review, retransmission, distribution, dissemination, copying, printing, or other use of, or taking of any action in reliance upon this e-mail, is strictly prohibited. If you have received this e-mail in error, please contact the sender and delete the original and any copy of this e-mail and any printout thereof, immediately. Your co-operation is appreciated. Le présent courriel (y compris toute pièce jointe) s'adresse uniquement à son destinataire, qu'il soit une personne ou un organisme, et pourrait comporter des renseignements privilégiés ou confidentiels. Si vous n'êtes pas le destinataire du courriel, il est interdit d'utiliser, de revoir, de retransmettre, de distribuer, de disséminer, de copier ou d'imprimer ce courriel, d'agir en vous y fiant ou de vous en servir de toute autre façon. Si vous avez reçu le présent courriel par erreur, prière de communiquer avec l'expéditeur et d'éliminer l'original du courriel, ainsi que toute copie électronique ou imprimée de celui-ci, immédiatement. Nous sommes reconnaissants de votre collaboration.
Re: [SCIENTIFIC-LINUX-USERS] Update notice SLBA-2015:0339-1 (from sl-security) is broken, or a bad duplicate, skipping.
On 01/08/2016 11:18 AM, Thomas Leavitt wrote: I’m a twenty year Unix/Linux veteran, but new to SL with this client, so not sure where to send this, and didn’t see a general contact list. Update notice SLBA-2015:0339-1 (from sl-security) is broken, or a bad duplicate, skipping. You should report this problem to the owner of the sl-security repository. -- Thomas Leavitt (tleav...@eag.com) Interim Sr. Linux IT Consultant (880 IT Services) 831-469-3382 (Google Voice forwards to 880 IT cell, accepts SMS) 1-408-454-4569 (desk) / This e-mail may contain privileged or confidential information. If you are not the intended recipient: (1) you may not disclose, use, distribute, copy or rely upon this message or attachment(s); and (2) please notify the sender by reply e-mail, and then delete this message and its attachment(s). EAG, Inc. and its affiliates disclaim all liability for any errors, omissions, corruption or virus in this message or any attachments. / Hi Thomas, can I get the output of: lsb_release -a grep enabled=1 /etc/yum.repos.d/*.repo so I can track down the offending update? Pat
Posted for testing: Software Collection Library updates (SL6, SL7)
Updated packages have been posted for testing: ftp://ftp.scientificlinux.org/linux/scientific/6rolling/testing/x86_64/ ftp://ftp.scientificlinux.org/linux/scientific/7rolling/testing/x86_64/ The pending software collections updates have all been posted to the sl-testing repos for SL6 and SL7. Interested users should test collections relevant to their environments. You can install this update for testing via the sl-testing repo on your SL system: yum --enablerepo=sl-testing update
Re: [SCIENTIFIC-LINUX-USERS] Who maintains the webpage?
It is maintained by the SL team here at Fermilab. Pat On 12/03/2015 02:16 AM, Paul Millar wrote: Hi, I was wondering who maintains the www.scientificlinux.org website? I have some comments about the site and don't know how to contact them. Cheers, Paul.
Re: [SCIENTIFIC-LINUX-USERS] heads up: kmod-nvidia for SL7 users
On 12/01/2015 04:20 PM, ToddAndMargo wrote: On 11/30/2015 12:59 PM, Akemi Yagi wrote: Hi SL7 users, If you are using ELRepo's kmod-nvidia packages, please note that the latest version 352.63 just announced [1] is for EL 7.2. It is not backward compatible with EL 7.1 or earlier, so yum will complain. I suggest you exclude the packages in yum.conf until SL 7.2 is released. Akemi [1] http://lists.elrepo.org/pipermail/elrepo/2015-November/002858.html Thank you for the heads up! Any rumors on when EL 7.2 will hit? (I am seeing a lot of "this will fix fixed in a 7.2 errata".) Generally speaking "when its ready". Pat
Re: [SCIENTIFIC-LINUX-USERS] Devtoolset 4
DTS4 is staged on the buildservers, but with 7.2 published our focus is there right now. Pat On 11/20/2015 10:24 AM, Thompson, Herb wrote: I see that TUV released devtoolset-4 this week. Hope that SL will continue their much appreciated efforts to provide new devtoolset releases. This e-mail communication (including any or all attachments) is intended only for the use of the person or entity to which it is addressed and may contain confidential and/or privileged material. If you are not the intended recipient of this e-mail, any use, review, retransmission, distribution, dissemination, copying, printing, or other use of, or taking of any action in reliance upon this e-mail, is strictly prohibited. If you have received this e-mail in error, please contact the sender and delete the original and any copy of this e-mail and any printout thereof, immediately. Your co-operation is appreciated. Le présent courriel (y compris toute pièce jointe) s'adresse uniquement à son destinataire, qu'il soit une personne ou un organisme, et pourrait comporter des renseignements privilégiés ou confidentiels. Si vous n'êtes pas le destinataire du courriel, il est interdit d'utiliser, de revoir, de retransmettre, de distribuer, de disséminer, de copier ou d'imprimer ce courriel, d'agir en vous y fiant ou de vous en servir de toute autre façon. Si vous avez reçu le présent courriel par erreur, prière de communiquer avec l'expéditeur et d'éliminer l'original du courriel, ainsi que toute copie électronique ou imprimée de celui-ci, immédiatement. Nous sommes reconnaissants de votre collaboration.
Re: [SCIENTIFIC-LINUX-USERS] SL on single-board ARM (eg Pi2 or Beagle board)
The folks over at http://www.redsleeve.org/ are active on the ARM port. Pat On 11/04/2015 10:56 AM, Nathan Moore wrote: Have any of you-all considered replacing (student) linux workstations with small single-board arm systems (eg a Raspberry Pi2 or TI's Beagleboard)? In terms of unit cost and power consumption they seem like an attractive solution for run of the mill, interactive work. Related question, is there a fork of SL/RHEL that comes precompiled for arm? Nathan - - - - - - - - - - - - - - - - - - - - - Nathan Moore Mississippi River and 44th Parallel - - - - - - - - - - - - - - - - - - - - - -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: Security ERRATA Critical: openafs on SL5.x, SL6.x, SL7.x i386/x86_64
This package contains a back ported version of the patch to resolve the issue. Pat On 10/29/2015 02:04 PM, Sean Murray wrote: Hi Pat The openafs mailling list says the openafs release fixing those CVE's is v 1.6.15. The packages listed in the errata state 1.6.14. SL6/7 Do the SL packages not track the openafs release numbers ? Thanks Sean -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: Security ERRATA Important: qemu-kvm on SL6.x i386/x86_64
On 10/23/2015 12:32 AM, olli hauer wrote: On 2015-10-22 21:58, Pat Riehecky wrote: Synopsis: Important: qemu-kvm security update Advisory ID: SLSA-2015:1924-1 Issue Date:2015-10-22 CVE Numbers: CVE-2015-5279 ... SL6 x86_64 qemu-guest-agent-0.12.1.2-2.479.el6_7.2.x86_64.rpm ... Running a private rsync mirror, and after the last rsync I get the following errors? scientific/6.7/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match checksum Error: failure: repodata/primary.sqlite.bz2 from sl-security: [Errno 256] No more mirrors to try. Is it only me or anyone else having the same issue ? That is surprising. Can I have you re-sync? I've rebuilt the metatdata just to be safe. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Creating a new install tree for SL 7 rolling + other RPMs
Hi Torsten, The lorax tool should get you where you are going. It ships within SL7. Pat This doc might help: https://fedoraproject.org/wiki/Anaconda/Features/Lorax-TreeBuilder https://www.brianlane.com/creating-the-anaconda-bootiso-with-lorax.html On 10/15/2015 06:54 AM, Torsten Luettgert wrote: Hello all, I'm looking for a way to create own "install media" - an install repo tree would be fine, too, because the boxen I'm setting up are all installed via PXE from an nfs tree. In SL6, there was this revisor thingy (http://scientificlinux.org/documentation/customize-sl-for-your-site/) which looks perfect; there is no revisor in SL7, though, and I think I remember it being discontinued. Is there a replacement which enables me to throw a truckload of RPMs on top of the SL7.1 install RPMs and create an install tree from them? Thanks for help and best regards, Torsten P.S.: if anyone's interested, the background is this: I'm working on an internal product which sets up a bunch of KVM machines working together in a defined way (heavily firewalled, intricate internal networking etc.); a test run will create and configure 21 machines from scratch and takes a whopping 19 hours now. A lot of time is wasted during the installs for pulling and installing updates, setting up other repos and installing needed packages from there, then re-checking for updates during the first configuration run (I'm using salt for this). A customized tree would speed things up a lot. -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] GDM Banner Message display issue
Out of curiosity, what do you see with this for your banner-message-text: banner-message-text='You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By using this IS (which includes any device attached to this IS), you consent to the following conditions:\n -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n -At any time, the USG may inspect and seize data stored on this IS.\n -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n -This IS includes security measures (e.g., authentication and access controls) to protect USG interests -- not for your personal benefit or privacy.\n -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.\nThis is a Federal computer (and/or it is directly connected to a Fermilab local network system) that is the property of the United States Government. It is for authorized use only. Users (authorized or unauthorized) have no explicit or implicit expectation of privacy.\nAny or all uses of this system and all files on this system may be intercepted, monitored, recorded, copied, audited, inspected, and disclosed to authorized site, Department of Energy and law enforcement personnel, as well as authorized officials of other agencies, both domestic and foreign. By using this system, the user consents to such interception, monitoring, recording, copying, auditing, inspection, and disclosure at the discretion of authorized site or Department of Energy personnel.\nUnauthorized or improper use of this system may result in administrative disciplinary action and civil and criminal penalties. By continuing to use this system you indicate your awareness of and consent to these terms and conditions of use.\nLOG OFF IMMEDIATELY if you do not agree to the conditions stated in this warning.\nFermilab policy and rules for computing, including appropriate use, may be found at\nhttp://www.fnal.gov/cd/main/cpolicy.html\n' I get a well formatted message on the side of the box similar to your "Medium Screen" Pat On 10/14/2015 02:47 PM, Sean wrote: I'll just paste the relevant stuff here: # banner stuff [org/gnome/login-screen] banner-message-enable=true banner-message-text='You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By using this IS (which includes any device attached to this IS), you consent to the following conditions:\n -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n -At any time, the USG may inspect and seize data stored on this IS.\n -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n -This IS includes security measures (e.g., authentication and access controls) to protect USG interests -- not for your personal benefit or privacy.\n -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.' # don't show lists of users on login screen disable-user-list=true # disable fingerprint reader enable-fingerprint-authentication=false By my count it's 1311 characters, but that's probably not treating the \n's as a single character. FWIW, this is our approved "short" version of the banner. On Wed, Oct 14, 2015 at 3:37 PM, Pat Riehecky <mailto:riehe...@fnal.gov>> wrote: That's a bit odd, I've got a 1920x1200 in front of me with no issues. Perhaps my login banner is too short. Can I get a copy of your dconf settings file
Re: [SCIENTIFIC-LINUX-USERS] GDM Banner Message display issue
That's a bit odd, I've got a 1920x1200 in front of me with no issues. Perhaps my login banner is too short. Can I get a copy of your dconf settings file (not the compiled db)? Pat On 10/14/2015 02:30 PM, Sean wrote: Good point, thanks for asking! The LCD displays we are running are 24" Hyundai P247D's, defaulting to 1920x1080, and we're running nVidia Quadro FX 570 cards. On Wed, Oct 14, 2015 at 3:15 PM, Pat Riehecky <mailto:riehe...@fnal.gov>> wrote: On 10/14/2015 02:10 PM, S A wrote: I just found that I can reproduce the issue using the VM when I have a 24" display on my desktop and maximize the VM's window. Attached are three screenshots of the VM. Small - banner above the login dialog with scroll bar Medium - banner on the left side of the login dialog with scroll bar Large - banner in column overlaying the login dialog without scroll bar - this is what the physical machine with 24" display does all the time Thank you kindly for your consideration! Interesting! What is the resolution of the 24" display? Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov <http://www.fnal.gov> www.scientificlinux.org <http://www.scientificlinux.org> -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] GDM Banner Message display issue
On 10/14/2015 02:10 PM, S A wrote: I just found that I can reproduce the issue using the VM when I have a 24" display on my desktop and maximize the VM's window. Attached are three screenshots of the VM. Small - banner above the login dialog with scroll bar Medium - banner on the left side of the login dialog with scroll bar Large - banner in column overlaying the login dialog without scroll bar - this is what the physical machine with 24" display does all the time Thank you kindly for your consideration! Interesting! What is the resolution of the 24" display? Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] why not 2.6.32-573.7.1 ?
It was published on 9/29/2015 http://ftp.scientificlinux.org/linux/scientific/6x/x86_64/updates/fastbugs/repoview/kernel.html Pat On 10/01/2015 09:39 AM, Matthieu Guionnet wrote: Hi, why the kernel 2.6.32-573.7.1 had never been released for SL6 ? https://rhn.redhat.com/errata/RHBA-2015-1827.html It was for Centos 6 also Thanks -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: Software Collections devtoolset-3 and Eclipse (was php 5.5)
The stack trace would be helpful. Pat On 09/24/2015 10:55 AM, Gilbert E. Detillieux wrote: Not specifically related to the original question about PHP 5.5, but one thing I just stumbled on in trying to use the SL7 softwarecollections repo... Eclipse, or some of the required Java classes/tools seem to be broken, when you install devtoolset-3 via the SL7 repo. It throws Java errors about missing class files and the GUI never launches. (I can send you the generated log file offline, if you're interested.) If I autoremove all of those packages (as well as the yum-conf-softwarecollections package that contains the repo file), and install the equivalent from softwarecollections.org, I don't get this problem. So, either the SL7 repo is out of date, or something broke in the rebuild from source. I have my work-around, so no rush on this, but it would be good to get this fixed for those using the SL7 repos. Thanks, Gilbert On 23/09/2015 8:20 AM, Pat Riehecky wrote: or http://ftp.scientificlinux.org/linux/scientific/7x/external_products/softwarecollections/ On 09/23/2015 05:08 AM, Matthieu Guionnet wrote: Hi you can use one of this repositories http://rpms.famillecollet.com/enterprise/7/ or https://www.softwarecollections.org/en/scls/rhscl/php55/ Le mercredi 23 septembre 2015 à 12:03 +0200, Ralf Farke a écrit : Hi, is there a way to get php 5.5 for Scientific Linux 7.1? Thanks and greetings, Ralf Farke -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Scientific Linux Fermi 6.7 BETA 1 i386/x86_64
Wrong list On 09/23/2015 03:02 PM, Pat Riehecky wrote: Scientific Linux Fermi 6.7 BETA1 i386/x86_64 Sept 23, 2015 These are notes of the "Alpha/Beta" releases for Scientific Linux 6.7 . THIS IS NOT FOR PRODUCTION. There should be no expectation that a "yum" upgrade to SLF 6.7 will work. A new install is the recommended method to move from "slf6rolling"(this alpha/beta release) and the released "SLF 6.7". Items marked with * are changes from the last release DOWNLOAD INFO Network Install Images: http://ftp.scientificlinux.org/linux/fermi/slf6rolling/i386/os/images/boot.iso http://ftp.scientificlinux.org/linux/fermi/slf6rolling/x86_64/os/images/boot.iso CHANGES WE MADE SINCE PREVIOUS RELEASE ITEMS MARKED with a ** are changes since last ALPHA/BETA *slf-release-6.7-0.rolling -Updated to point at rolling *OpenAFS -Updated to latest upstream release Major Differences from SLF6.6 POSSIBLE UPGRADE PROBLEMS sssd-common is no longer multilib compatible. If you are using sssd-common.i686 on x86_64 systems you will be unable to update. Please remove the i686 rpm on your x86_64 systems to resolve this issue. -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Scientific Linux Fermi 6.7 BETA 1 i386/x86_64
Scientific Linux Fermi 6.7 BETA1 i386/x86_64 Sept 23, 2015 These are notes of the "Alpha/Beta" releases for Scientific Linux 6.7 . THIS IS NOT FOR PRODUCTION. There should be no expectation that a "yum" upgrade to SLF 6.7 will work. A new install is the recommended method to move from "slf6rolling"(this alpha/beta release) and the released "SLF 6.7". Items marked with * are changes from the last release DOWNLOAD INFO Network Install Images: http://ftp.scientificlinux.org/linux/fermi/slf6rolling/i386/os/images/boot.iso http://ftp.scientificlinux.org/linux/fermi/slf6rolling/x86_64/os/images/boot.iso CHANGES WE MADE SINCE PREVIOUS RELEASE ITEMS MARKED with a ** are changes since last ALPHA/BETA *slf-release-6.7-0.rolling -Updated to point at rolling *OpenAFS -Updated to latest upstream release Major Differences from SLF6.6 POSSIBLE UPGRADE PROBLEMS sssd-common is no longer multilib compatible. If you are using sssd-common.i686 on x86_64 systems you will be unable to update. Please remove the i686 rpm on your x86_64 systems to resolve this issue. -- Pat Riehecky Scientific Linux developer http://www.scientificlinux.org/
Re: [SCIENTIFIC-LINUX-USERS] php 5.5
or http://ftp.scientificlinux.org/linux/scientific/7x/external_products/softwarecollections/ On 09/23/2015 05:08 AM, Matthieu Guionnet wrote: Hi you can use one of this repositories http://rpms.famillecollet.com/enterprise/7/ or https://www.softwarecollections.org/en/scls/rhscl/php55/ Le mercredi 23 septembre 2015 à 12:03 +0200, Ralf Farke a écrit : Hi, is there a way to get php 5.5 for Scientific Linux 7.1? Thanks and greetings, Ralf Farke -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] sl6.4 & tshark: undefined symbol: pcap_set_tstamp_precision
Hi Leo, Thanks for the report! RPM deps should have pointed that out, but it seems they didn't. I'll get an updated pcap library scheduled for publication shortly. Pat On 09/14/2015 08:23 AM, Leo Baltus wrote: Hi, We are running SL 6.4. After recently upgrading it appears that wireshark seems be be needing an new libpcap which is not available in 6.4 tshark: Unknown message from dumpcap, try to show it as a string: /usr/sbin/dumpcap: symbol lookup error: /usr/sbin/dumpcap: undefined symbol: pcap_set_tstamp_precision rpm -q wireshark wireshark-1.8.10-17.el6.x86_64 rpm -q libpcap libpcap-1.0.0-6.20091201git117cb5.el6.x86_64 As far as I can see wireshark-1.8.10-17 is shipped with centos6.7 and probably RHEL6.7 not in 6.4 I have found SRPMS/vendor/libpcap-1.4.0-4.20130826git2dbcaa1.el6.src.rpm which has pcap_set_tstamp_precision so building libpcap from this rpm seems to be a workaround for now. Was updating to wireshark-1.8.10-17 a glitch? Can it be reversed? -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] LLVM and OCAML
I generally utilize LLVM/clang from EPEL. If you need a newer version than is published there, you may be able to get some forward progress by getting the EPEL sourcerpm to build first. Pat On 09/06/2015 10:34 AM, Keith Smith wrote: I'm trying to build LLVM & Clang from sources on SL7. I have installed ocaml, but I still get the following two errors when running ../llvm/configure configure: WARNING: --enable-bindings=ocaml specified, but ctypes is not installed configure: WARNING: --enable-bindings=ocaml specified, but OUnit 2 is not installed. Tests will not run I can't seem to find anything on how to correct these errors. One recommendation for the 'types' error was to run opam, but opam is not in the SL7 or EL distros. I can't find anything on OUnit 2. Thank you for your assistance. I will be posting to the LLVM mailing list as well. Keith Smith -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] GDM login screen (dconf and system name)
Typically I find the upstream Gnome3 guide a bit more complete: https://help.gnome.org/admin/system-admin-guide/stable/index.html.en I do not see a suitable setting there either. Pat On 08/28/2015 01:23 PM, Nathan Moore wrote: In older versions of SL one could include the machine name in the login banner. Somethings like "%n.university.edu <http://n.university.edu>" in the login banner config screen would produce "physics1.university.edu <http://physics1.university.edu>" at the login screen. In the present RHEL7 documentation (link below) I don't see this option in the dconf docs. Is there an easy way to include machine name in the gdm login screen? reference, https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Desktop_Migration_and_Administration_Guide/customizing-login-screen.html -- - - - - - - - - - - - - - - - - - - - - - Nathan Moore Mississippi River and 44th Parallel - - - - - - - - - - - - - - - - - - - - - -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL 6.7 packaging changes?
Hello, It looks like the Everything ISOs didn't sync to the public tree. I'll look into it. Pat On 08/27/2015 06:00 AM, Bluejay Adametz wrote: I don't recall seeing anything about this, but has the packaging of SL 6.7 been changed? I don't see the "Everything" DVD ISOs out there. Do I need to mirror the os directories in addition to iso to have "everything"? - Bluejay Adametz War doesn't decide who's right -- only who's left. -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] bogus date in cups src rpm
The attached script here works well:https://bugzilla.redhat.com/show_bug.cgi?id=119 On 08/24/2015 01:37 PM, ToddAndMargo wrote: Hi Tim, What does this error mean? Any way to work around it? Many thanks, -T # rpmbuild --rebuild cups-1.4.2-67.el6.src.rpm ... bogus date in %changelog: Mon Aug 28 2011 Tim Waugh 1:1.4.2-42 bogus date in %changelog: Thu Apr 1 2008 Tim Waugh 1:1.3.6-9 bogus date in %changelog: Thu Apr 1 2008 Tim Waugh 1:1.3.6-8 bogus date in %changelog: Tue Oct 26 2006 Tim Waugh bogus date in %changelog: Wed May 16 2006 Tim Waugh Bad exit status from /var/tmp/rpm-tmp.v63d72 (%build) -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Scientific Linux 6.7 RC2 i386/x86_64
Scientific Linux 6.7 RC 2 i386/x86_64 Aug 21, 2015 These are notes of the "Alpha/Beta" releases for Scientific Linux 6.7 . If no critical bugs are reported within the testing window, this will be released as SL 6.7 on Aug 26 2015. This is for testing. Please report back any issues to scientific-linux-de...@listserv.fnal.gov . Items marked with * are changes from the last release DOWNLOAD INFO Network Install Images: http://ftp.scientificlinux.org/linux/scientific/6.7/i386/os/images/boot.iso http://ftp.scientificlinux.org/linux/scientific/6.7/x86_64/os/images/boot.iso CHANGES WE MADE SINCE PREVIOUS RELEASE ITEMS MARKED with a ** are changes since last ALPHA/BETA * sl-release-6.7-2 -Updated to point at final location * OpenAFS -OpenAFS has been updated to the latest bugfix release * epel-release-6-8 -the epel-release RPM has been updated to the latest upstream release * package cleanup - Several packages had incorrect versions or incorrect multilib in BETA1 this has been corrected. ** SL_desktop_tweaks - This tweak rpm is included in more yum package groups now for greater consistency. RPMS ADDED IN THIS RELEASE * glusterfs-geo-replication * glusterfs-server -These packages were built from the TUV provided sources for the glusterfs client. MAJOR CHANGES TUV MADE POSSIBLE UPGRADE PROBLEMS sssd-common is no longer multilib compatible. If you are using sssd-common.i686 on x86_64 systems you will be unable to update. Please remove the i686 rpm on your x86_64 systems to resolve this issue. -- Pat Riehecky Scientific Linux developer http://www.scientificlinux.org/
Re: [SCIENTIFIC-LINUX-USERS] IP addresses that are blocked from SL6.x repos
I'll get a ticket open with Fermilab Network Services. Pat On 08/19/2015 12:42 PM, Susan James wrote: does anyone know who we contact if our class ip addresses are blocked from SL6.x updates? -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Software Collections 2.0?
On 08/17/2015 11:56 AM, Graham Allan wrote: I know it hasn't been out for very long, but I was wondering if it's planned to have a scientific linux rebuild of SCL 2.0? Or, indeed, if the preferred strategy these days is to use the repos at softwarecollections.org? My impression from dipping into Centos mailing list archives is that softwarecollections.org isn't necessarily a direct equivalent to the RHEL or Scientific Linux SCL builds, but perhaps that's outdated information. Graham I'm hopeful for a SL release of SCL 2.0 next week. I've been putting most of my time lately into 6.7. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] missing debuginfo packages for apache (httpd)
hm I'll fire off another repodata rebuild On 08/13/2015 03:34 PM, Jonathon Nelson wrote: While I see the rpm if I visit the right directory over http, yum doesn't find it. Does something need to be kicked to rebuild the repodata? On Wed, Aug 12, 2015 at 9:34 AM, Pat Riehecky <mailto:riehe...@fnal.gov>> wrote: Sorry about that, the oversight has been corrected. Pat On 08/12/2015 09:19 AM, Jon Nelson wrote: I can't seem to find the corresponding apache (httpd) debuginfo packages for httpd-2.2.15-45.sl6.x86_64 in http://ftp.scientificlinux.org/linux/scientific/6x/archive/debuginfo/ I see up through httpd-debuginfo-2.2.15-39.sl6.x86_64.rpm but not -45. Am I looking in the wrong place? -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov <http://www.fnal.gov> www.scientificlinux.org <http://www.scientificlinux.org> -- Jon Nelson Dyn / Senior Software Engineer p. +1 (603) 263-8029 -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] missing debuginfo packages for apache (httpd)
Sorry about that, the oversight has been corrected. Pat On 08/12/2015 09:19 AM, Jon Nelson wrote: I can't seem to find the corresponding apache (httpd) debuginfo packages for httpd-2.2.15-45.sl6.x86_64 in http://ftp.scientificlinux.org/linux/scientific/6x/archive/debuginfo/ I see up through httpd-debuginfo-2.2.15-39.sl6.x86_64.rpm but not -45. Am I looking in the wrong place? -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL 6 IA-32 hplip-3.14.10 HP M225dw driver
On 08/11/2015 12:29 PM, Yasha Karant wrote: On 08/11/2015 05:58 AM, Pat Riehecky wrote: On 08/11/2015 01:46 AM, Yasha Karant wrote: I have a colleague for whom I have installed IA-32 SL 6 . She has recently purchased a HP M225dw "all-in-one" laser printer. However, I cannot find a driver for this printer for SL 6. HP open systems supported this printer starting with hplip-3.14.10, but I cannot find this RPM for SL 6. The current hplip distributed by HP supports the M225dw, but will not install under SL 6. At present, the printer will not print from SL6 although the printer is discovered over the LAN. Any help or suggestions greatly would be appreciated. Yasha Karant What version of hplip is installed on the system? Pat hplip-3.12.4-6.el6.i686.rpm <http://ftp1.scientificlinux.org/linux/scientific/6x/i386/os/Packages/hplip-3.12.4-6.el6.i686.rpm> that is the most recent version I can find (could not find a more recent one in EPEL, etc., that would work with IA-32 SL6) HPLIP 3.14.10 is the lowest rev level that supports the HP M225dw (http://hplipopensource.com/hplip-web/release_notes.html, search on 225dw, scroll up to find the release number). hplip-3.13.7-6.el7.x86_64.rpm <http://ftp1.scientificlinux.org/linux/scientific/7x/x86_64/os/Packages/hplip-3.13.7-6.el7.x86_64.rpm> seems to be the current SL7 version, but that too will not support this printer. The RPM from HP for current, HPLIP 3.15.7, definitely will not install on SL 6 IA-32 and I have not experimented with SL 7 X86-64. Has anyone ported HPLIP 3.14.10 or higher to IA-32 SL6? to X86-64 SL7? Does a CUPS that will run on IA-32 SL6 have support for a M225dw (I cannot find a list of supported printers under CUPS)? Thanks, Yasha The 6.7 BETA/rolling release includes a newer version of hplip. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL 6 IA-32 hplip-3.14.10 HP M225dw driver
On 08/11/2015 01:46 AM, Yasha Karant wrote: I have a colleague for whom I have installed IA-32 SL 6 . She has recently purchased a HP M225dw "all-in-one" laser printer. However, I cannot find a driver for this printer for SL 6. HP open systems supported this printer starting with hplip-3.14.10, but I cannot find this RPM for SL 6. The current hplip distributed by HP supports the M225dw, but will not install under SL 6. At present, the printer will not print from SL6 although the printer is discovered over the LAN. Any help or suggestions greatly would be appreciated. Yasha Karant What version of hplip is installed on the system? Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] AW: Pacemaker problem after last night updates..
For SL, we've just added the updated library to the security repos. Pat On 08/04/2015 09:04 AM, Andreas Mock wrote: Hi Akemi, besides the rescue solution prvided by you: Do you know if there will be an "official" correction for this library dependency problem in the 6.x repos? Best regards Andreas -Ursprüngliche Nachricht- Von: Akemi Yagi [mailto:amy...@gmail.com] Gesendet: Dienstag, 4. August 2015 14:54 An: Andreas Mock Cc: scientific-linux-us...@fnal.gov Betreff: Re: Pacemaker problem after last night updates.. On Tue, Aug 4, 2015 at 4:46 AM, Andreas Mock wrote: Hi all, just jumped into the same mess... There is a bug report at RHEL https://access.redhat.com/solutions/1415913 But I don't know the solution. It seems that libqb should have been updated too. Can you please investigate this problem? Try installing libqb-0.17.1-1.el6 from "sl6rolling": http://ftp.scientificlinux.org/linux/scientific/6rolling/x86_64/os/Package s/libqb-0.17.1-1.el6.i686.rpm or http://ftp.scientificlinux.org/linux/scientific/6rolling/x86_64/os/Package s/libqb-0.17.1-1.el6.x86_64.rpm I believe that will solve the issue. Akemi -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Security Errata missing (sssd)
On 08/05/2015 10:44 AM, Brian Davis wrote: Hello List, I noticed that we have some security updates coming in which don't seem to have an associated errata posted to the scientific-linux-errata mailing list. For example package sssd-1.12.4-47.el6.x86_64.rpm was uploaded to the mirrors on July 28th, but there is no associated errata. Does anyone know what is happening here? are these updates legitimate? Thanks, Brian Hello, Yes these updates are legitimate. The sssd package updates are required for the installation of SLSA-2015:1462-1 a security update for IPA. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Pending SL6 security errata posted for testing
Updated packages have been posted for testing: ftp://ftp.scientificlinux.org/linux/scientific/6rolling/testing/i386/ ftp://ftp.scientificlinux.org/linux/scientific/6rolling/testing/x86_64/ All pending Scientific Linux 6 security errata has been posted for testing in the sl-testing repo. The is pre-release software. Please direct feedback on these packages to scientific-linux-de...@listserv.fnal.gov We expect to publish these for all existing SL 6 releases on August 3, 2015. You can install this update for testing via the sl-testing repo on your SL system: yum --enablerepo=sl-testing update A complete package list can be found at: http://ftp.scientificlinux.org/linux/scientific/6rolling/testing/i386/repoview/ http://ftp.scientificlinux.org/linux/scientific/6rolling/testing/x86_64/repoview/
Re: [SCIENTIFIC-LINUX-USERS] yum - update notice is broken, or duplicate, skipping
On 07/17/2015 02:58 PM, Akemi Yagi wrote: On Fri, Jul 17, 2015 at 9:58 AM, Pat Riehecky wrote: What is the output of: yum repolist Pat On 07/16/2015 11:33 AM, Krach Bumm wrote: Hi, one of my systems(sl6.6) is showing the following output on "yum --security update": [root@host pluginconf.d]# yum --security check-update Geladene Plugins: security Limiting package lists to security relevant ones An update notice is broken, or duplicate, skipping: SLBA-2013:1751-1 An update notice is broken, or duplicate, skipping: SLBA-2014:1672-1 (snip) I'm seeing similar messages on my SL 6 box. Turns out if I disable both sl6x-fastbugs and softwarecollections, those messages do not show up at all. When I disable one of them at a time: $ sudo yum --disablerepo=softwarecollections --security check-update Loaded plugins: fastestmirror, priorities, refresh-packagekit, security Loading mirror speeds from cached hostfile * sl6x: ftp1.scientificlinux.org * sl6x-fastbugs: ftp1.scientificlinux.org * sl6x-security: ftp1.scientificlinux.org sl6x-fastbugs | 2.9 kB 00:00 sl6x-fastbugs/primary_db | 662 kB 00:01 Limiting package lists to security relevant ones An update notice is broken, or duplicate, skipping: SLBA-2013:1746-1 An update notice is broken, or duplicate, skipping: SLBA-2013:1747-1 An update notice is broken, or duplicate, skipping: SLBA-2013:1748-2 An update notice is broken, or duplicate, skipping: SLBA-2013:1749-1 An update notice is broken, or duplicate, skipping: SLBA-2013:1750-1 An update notice is broken, or duplicate, skipping: SLBA-2013:1751-1 An update notice is broken, or duplicate, skipping: SLBA-2013:1758-1 An update notice is broken, or duplicate, skipping: SLBA-2013:1768-1 No packages needed for security; 0 packages available $ sudo yum --disablerepo=sl6x-fastbugs --security check-updateLoaded plugins: fastestmirror, priorities, refresh-packagekit, security Loading mirror speeds from cached hostfile * sl6x: ftp1.scientificlinux.org * sl6x-security: ftp1.scientificlinux.org * softwarecollections: ftp1.scientificlinux.org softwarecollections | 2.9 kB 00:00 softwarecollections/primary_db| 1.1 MB 00:03 Limiting package lists to security relevant ones An update notice is broken, or duplicate, skipping: SLBA-2013:1239-1 An update notice is broken, or duplicate, skipping: SLBA-2014:0621-1 No packages needed for security; 0 packages available Wonder if this is related to the repodata files? Some duplicate entries in updateinfo? By the way I did run 'yum clean all'. Akemi hm, I'll see if I can sort out what all is going on here... Looks like there are a few repos in need of some more assistance. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] yum - update notice is broken, or duplicate, skipping
ex.php?act=ST&f=18&t=3203 As only one of my system shows this behavior I believe that the problem comes from my side. Any tips? Thx Harry -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] dhcpd doesn't start on boot in SL7.1 system
other causes in my systems already and I want to try as hard as possible to avoid another one), or forcing systemd not to give up on restarting services too quickly or disabling dispatcher scripts altogether (I need them, at least for named). Can anyone suggest nice solution - like changing some config file or something - which solves it without breaking the way system works? Is this a bug in systemd? I mean, of course it's badly written dispatcher script (should consult config with the list of interfaces or something..), but *why* systemd thinks that service fails and disables it in the first place? -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL6 latest mysql update (mysql-5.1.73-5.el6_6.x86_64)
There was some delay in publication of fastbugs for 6. They will be published as scheduled on Tuesday, but I've tossed the pending ones into sl-testing so you can have quicker access. Pat On 07/02/2015 04:53 AM, Robert Frank wrote: Hi, Redhat released a mysql update on 22/06/2015 which fixes a problem with ssl connections to the mysql (see https://bugs.mysql.com/bug.php?id=77275). The update hasn't made it into SL yet. Can you tell me when this update is going to be available in SL6 ? Cheers, Robert -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] httpd 2.2.15-32 for Scientific Linux 6?
Is http://ftp.scientificlinux.org/linux/scientific/6x/x86_64/os/repoview/httpd.html not working for you? On 06/16/2015 02:18 PM, Gerhard Schneider wrote: For adding custom DH groups in Apache 2.2.15 TUV backported the necessary changes to Apache 2.2.15-32 (preventing Logjam). Will this package be available to Scientific Linux 6, too? Thank you in advance! Gerhard Schneider -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SSL certificate problems on content.scientificlinux.org
The problem should now be corrected. Pat On 06/08/2015 09:32 AM, Pat Riehecky wrote: Hi, Thanks for the report, the "content.scientificlinux.org" links shouldn't be there. I'll take a look. Pat On 06/08/2015 09:27 AM, Hogben, Colin H wrote: Hi, I'm having problems accessing the Scientific Linux web site. Many of the resources linked from www.scientificlinux.org are pages on https://content.scientificlinux.org but there appear to be two problems with SSL configuration on the server side for this host. Firstly, the server certificate is not valid for the hostname content.scientificlinux.org - Firefox reports: content.scientificlinux.org uses an invalid security certificate. The certificate is only valid for the following names: uhosts.fnal.gov , cd-docdb.fnal.gov , osg-docdb.opensciencegrid.org , www.darkenergysurvey.org , www.usluo.org , www.scientificlinux.org , staging.scientificlinux.org , www.uslua.org (Error code: ssl_error_bad_cert_domain) Secondly, even if you click through the warnings and accept the invalid certificate, the SSL handshake fails, apparently because the server is requesting a client certificate. Firefox reports: Secure Connection Failed An error occurred during a connection to content.scientificlinux.org. SSL peer was unable to negotiate an acceptable set of security parameters. (Error code: ssl_error_handshake_failure_alert) I found a workaround: when the browser displays its error message, manually replace "content" with "www" in the address bar. However this is tedious to say the least! I hope someone can sort out this certificate problem, as I think it reflects badly on a great project. Regards, -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SSL certificate problems on content.scientificlinux.org
Hi, Thanks for the report, the "content.scientificlinux.org" links shouldn't be there. I'll take a look. Pat On 06/08/2015 09:27 AM, Hogben, Colin H wrote: Hi, I'm having problems accessing the Scientific Linux web site. Many of the resources linked from www.scientificlinux.org are pages on https://content.scientificlinux.org but there appear to be two problems with SSL configuration on the server side for this host. Firstly, the server certificate is not valid for the hostname content.scientificlinux.org - Firefox reports: content.scientificlinux.org uses an invalid security certificate. The certificate is only valid for the following names: uhosts.fnal.gov , cd-docdb.fnal.gov , osg-docdb.opensciencegrid.org , www.darkenergysurvey.org , www.usluo.org , www.scientificlinux.org , staging.scientificlinux.org , www.uslua.org (Error code: ssl_error_bad_cert_domain) Secondly, even if you click through the warnings and accept the invalid certificate, the SSL handshake fails, apparently because the server is requesting a client certificate. Firefox reports: Secure Connection Failed An error occurred during a connection to content.scientificlinux.org. SSL peer was unable to negotiate an acceptable set of security parameters. (Error code: ssl_error_handshake_failure_alert) I found a workaround: when the browser displays its error message, manually replace "content" with "www" in the address bar. However this is tedious to say the least! I hope someone can sort out this certificate problem, as I think it reflects badly on a great project. Regards, -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Open-sourced: OpenCL-based multiphysics simulation software package
On 06/08/2015 06:52 AM, Zeev Pekar wrote: Dear Scientific Linux community, we would like to announce the recent open-source release of our GPU-enabled multiphysics software - Advanced Simulation Library. http://asl.org.il/ Here are some remarkable benchmarks: http://asl.org.il/benchmarks/multicomponent_flow/ I hope that it will be included in Scientific Linux as a package in some near future (you may join the volunteers from Fedora's SciTech SIG) but till then you might find it useful in its current form. Happy hacking, Zeev ps: Please, "like" us on Facebook, if you find ASL cool: https://www.facebook.com/pages/Avtech-Scientific/828973737156105 Hello, You've mentioned a Fedora SIG, any chance for an EPEL branch of ASL? Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Howto Auto Login
On 06/01/2015 08:00 AM, Jeff Siddall wrote: On 06/01/2015 08:07 AM, Nico Kadel-Garcia wrote: So think very carefully before activating autologin. Agreed. Using autologin is like handing out free usernames and passwords to anyone with network connectivity to your server. If you like the idea of that then autologin may be for you. For the record I do run some LTSP servers with autologin for some kiosks. Jeff For kiosk systems, you may consider the xguest package.[1] Pat [1] https://docs.fedoraproject.org/en-US/Fedora/13/html/Security-Enhanced_Linux/sect-Security-Enhanced_Linux-Confining_Users-xguest_Kiosk_Mode.html -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] It looks like something was missed in the latest SL7 fastbugs
Glad to hear it is fixed up! Pat On 05/28/2015 01:27 AM, Bill Maidment wrote: Thanks Pat That fixed it. (I use the rsync server). Cheers Bill -Original message- From:Pat Riehecky Sent: Wednesday 27th May 2015 23:28 To: Jose Marques ; SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV Subject: Re: [SCIENTIFIC-LINUX-USERS] It looks like something was missed in the latest SL7 fastbugs On 05/27/2015 04:55 AM, Jose Marques wrote: On 27 May 2015, at 01:54, Bill Maidment wrote: /etc/cron.daily/0yum-daily.cron: Failed to check for updates with the following error message: Failed to build transaction: libreport-plugin-rhtsupport-2.1.11-21.sl7.x86_64 requires libtar.so.1()(64bit) libreport-plugin-reportuploader-2.1.11-21.sl7.x86_64 requires libtar.so.1()(64bit) I'm seeing the same thing. I'm not seeing an error in the repoclosure, I'll rebuild the metadata just to be safe. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] It looks like something was missed in the latest SL7 fastbugs
On 05/27/2015 04:55 AM, Jose Marques wrote: On 27 May 2015, at 01:54, Bill Maidment wrote: /etc/cron.daily/0yum-daily.cron: Failed to check for updates with the following error message: Failed to build transaction: libreport-plugin-rhtsupport-2.1.11-21.sl7.x86_64 requires libtar.so.1()(64bit) libreport-plugin-reportuploader-2.1.11-21.sl7.x86_64 requires libtar.so.1()(64bit) I'm seeing the same thing. I'm not seeing an error in the repoclosure, I'll rebuild the metadata just to be safe. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Logrotate not working properly on SL7 (solved)
FYI, upstream bug: 1172542 On 05/18/2015 01:38 AM, Bill Maidment wrote: glusterfs-3.6.0.29-2.el7.x86_64 and glusterfs-3.6.0.29-2.el6.x86_64 have the bad logwatch.d file dated 19th Sept 2014. The previous version 3.40.59 was OK. Cheers Bill -Original message- From:Bill Maidment Sent: Monday 18th May 2015 13:47 To: scientific-linux-us...@fnal.gov Subject: RE: Logrotate not working properly on SL7 (solved) It appears that the /etc/logwatch.d/glusterfs file has some globals defined which override the previous global definitions. I'm not sure why this has suddenly become an issue on March 26th (maybe some logwatch.d filenames were renamed?) Cheers Bill -Original message- From:Bill Maidment Sent: Sunday 17th May 2015 13:57 To: scientific-linux-us...@fnal.gov Subject: RE: Logrotate not working properly on SL7 Just found a SL6.6 machine that is also ignoring daily in /etc/logrotate.conf -Original message- From:Bill Maidment Sent: Sunday 17th May 2015 13:35 To: scientific-linux-us...@fnal.gov Subject: Logrotate not working properly on SL7 Hi After the yum updates on 26th March 2014 my logrotate reverted to weekly rotation instead of the daily rotation defined in /etc/logrotate.conf There wasn't a yum update for logrotate, so some other update has caused the problem. I'm using logrotate-3.8.6-4.el7-x86_64 Anyone else found this issue? Cheers Bill -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] parameters for yum upgrade
Correct,
Scientific Linux tries to preserve package names from upstream when
we've not made any changes from their published sources.
Pat
On 05/10/2015 10:13 PM, Steven C Timm wrote:
i can't speak officially on this but it is my understanding and
experience that when upstream tags a package
with el7_1 in the name such as the systemd below, SL keeps that same
name tag, so I would expect
to see el7_1 tags in the names of some packages like you are seeing.
Steve Timm
*From:* Ria Caussyn [causs...@gmail.com]
*Sent:* Sunday, May 10, 2015 9:59 PM
*To:* Steven C Timm
*Cc:* scientific-linux-users
*Subject:* Re: parameters for yum upgrade
Hi, Steven, it appears that's what happened - an upgrade happened w/o
me quite being aware, prob Apr 15. A little odd, I was expecting to
see some sl7_1 packages in there but they are all either el7_1 or
sl7. But, maybe I didn't have any SL packages that had 7.1 versions.
For example:
Apr 11 18:37:15 Updated: firefox-31.6.0-2.el7_1.x86_64
Apr 15 22:26:07 Updated: systemd.x86_64 208-20.el7_1.2
I don't see any sl7_1 references. Just this sort of thing:
Apr 15 22:26:23 Updated: libreport-filesystem.x86_64 2.1.11-21.sl7
Apr 15 22:26:23 Updated: libreport-python.x86_64 2.1.11-21.sl7
Thanks for your time,
Ria
On Sun, May 10, 2015 at 2:43 PM, Steven C Timm <mailto:t...@fnal.gov>> wrote:
Look at your /var/log/yum.log. It's possible that since you have
the slrelease set to 7x, all the
rpms from the next release have already been automatically updated
for you before you did anything,
and that the sl-release already said 7.1 before you tried to do
the update. I have no direct
experience with 7.0->7.1 but that is the way it works in 5 and 6.
Steve Timm
*From:* owner-scientific-linux-us...@listserv.fnal.gov
<mailto:owner-scientific-linux-us...@listserv.fnal.gov>
[owner-scientific-linux-us...@listserv.fnal.gov
<mailto:owner-scientific-linux-us...@listserv.fnal.gov>] on behalf
of Ria Caussyn [causs...@gmail.com <mailto:causs...@gmail.com>]
*Sent:* Sunday, May 10, 2015 12:03 PM
*To:* scientific-linux-users
*Subject:* parameters for yum upgrade
Apologies for the silly question. First time I've attempted to do
an upgrade.. going from an install of 7.0 to 7.1
In /etc/yum/vars, I have releasever=7, slreleasever=7x.
yum-conf-sl7x is installed.
I had redhat epel enabled, but I've disabled it. I pulled in an R
stat package from 7.1.. which I wonder if that is somehow
contributing to my problem.
Anyway.. like I said.. releasever=7, slreasever=7x and then..
yum clean all
yum upgrade
No packages marked for update.
yum clean all
yum update sl-release
No packaged marked for update.
Yet, when I look in /etc/sl-release it says 7.1.
/etc/redhat-release also says 7.1.
I probably got lazy and sloppy. Fortunately there's nothing I
can't live w/o on this laptop.
Regards,
Ria Caussyn
--
Pat Riehecky
Scientific Linux developer
Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] firefox security update
Hi Orion, Are you using the rolling tree? Firefox was published there without its dependencies this morning while I test it out. Should be published to the official releases later today. Pat On 05/12/2015 08:27 PM, Orion Poplawski wrote: Error: Package: firefox-38.0-3.el7_1.x86_64 (sl-security) Requires: nss >= 3.18.0 Installed: nss-3.16.2.3-5.el7.x86_64 (@sl) nss = 3.16.2.3-5.el7 Error: Package: firefox-38.0-3.el7_1.x86_64 (sl-security) Requires: nspr >= 4.10.8 Installed: nspr-4.10.6-3.el7.x86_64 (@sl) nspr = 4.10.6-3.el7 -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] RHEL -> SL conversion
On 05/07/2015 02:55 PM, Jim Campbell wrote: Hi Vinod, On Thu, May 7, 2015, at 02:36 PM, Vinod Gupta wrote: CMS is one of about twenty Physics groups here in Princeton University. We have our own Linux distribution based on RHEL with a few Princeton specific home grown RPMs. The CMS group has been using SL. We are trying to find a most practical way of providing a "SL" environment on top of RHEL based Linux without having to change the base distribution for the other 19 groups in the department. I guess Princeton is not the only University that has and want to maintain their own Linux distribution. Since both PU and SL are based on RHEL, I believe, there is lot more similarity than differences in the two distributions. Can we simply setup workstations of CMS group using PU linux and then install a few SL RPMs to convert them to SL? Will it work for CMS work or there are some fundamental changes which make SL very different, and probably incompatible with RHEL? Thanks, Vinod Gupta Physics department Princeton University It sounds like you're wanting to know how different SL is from RHEL. I'd suggest taking a look at the SL Release Notes [0] that correspond to the version(s) that you use to derive your PU distribution. The release notes cover packages that are added to SL that aren't in upstream, packages that are modified, and packages that are removed. On the whole, I'd be very wary of mixing and matching repositories and / or arbitrary packages, but if you decide that you can manage it, the release notes should at least be a good starting point. Feel free to follow-up with the list if you have other questions. Also, thanks to the SL team for making it clear how they diverge from upstream. :) Jim [0] http://ftp.scientificlinux.org/linux/scientific/7.0/x86_64/os/sl-release-notes.html Thanks Jim! On top of that, for the very curious, we try to include the patches we apply to the SRPMs in the SRPMs themselves for a clear explanation of exactly what was changed. For example, http-2-4.6-31.sl7.src.rpm includes: httpd-sl_index.html.sl.patch httpd-spec_sl_index.html.sl7.patch in the hopes that this helps clarify specifics for highly technical users. Pat The source for our automated patching tool can be found at: https://cdcvs.fnal.gov/redmine/projects/python-rpmpatch -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] It happening again - yum -daily
Hi Bill, thanks for the report. I'm not sure how that snuck back in, but it should be fixed now. Pat On 04/22/2015 10:50 PM, Bill Maidment wrote: /etc/cron.daily/0yum-daily.cron: Update notice SLBA-2015:0409-1 (from sl-fastbugs) is broken, or a bad duplicate, skipping. You should report this problem to the owner of the sl-fastbugs repository. Cheers Bill -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL7x fastbugs issue
This was a spurious metadata issue, it should be fixed now. Pat On 04/17/2015 12:58 AM, Bill Maidment wrote: Hi After updating servers from 7.0 to 7.1 I am seeing the following message on every server: /etc/cron.daily/0yum-daily.cron: Update notice SLBA-2015:0409-1 (from sl-fastbugs) is broken, or a bad duplicate, skipping. You should report this problem to the owner of the sl-fastbugs repository. I have deleted my local repo for sl-fastbugs and resynced it from the rsync server, but the error still occurs. Anyone else seeing this? Cheers Bill -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Repo error after 7.0 to 7.1 upgrade
On 04/15/2015 11:24 AM, John Pilkington wrote: On 15/04/15 17:08, Pat Riehecky wrote: On 04/15/2015 11:07 AM, Mark Stodola wrote: On 04/15/2015 10:49 AM, John Pilkington wrote: On 15/04/15 15:38, Pat Riehecky wrote: On 04/15/2015 09:13 AM, John Pilkington wrote: On 15/04/15 14:37, Pat Riehecky wrote: can I have you run: yum clean expire-cache and see if the errors persist? Pat I've been through the sequence twice. Still exactly the same. Thanks. John What is the output of df -h /var/cache/yum Pat [john@HP_Box ~]$ df -h /var/cache/yum Filesystem Size Used Avail Use% Mounted on /dev/mapper/sl-root 50G 12G 39G 23% / [john@HP_Box ~]$ I downloaded (with Firefox) http://ftp2.scientificlinux.org/linux/scientific/7x/x86_64/updates/security/repodata/primary.sqlite.bz2 It's 764.2 KiB. And I don't see a problem unless 7x-security is enabled. I'm guessing Pat had a typo and meant either: du -h /var/cache/yum OR du -sh /var/cache/yum -Mark Good call! Didn't even notice I've rebuilt the metadata, can I have you run a 'yum clean all' and see if that gets things fixed up? Pat Still the problem; but now: [Errno 14] curl#36 - "Offset (7638280) was beyond file size (783178)" while before it was [Errno 14] curl#36 - "Offset (7638280) was beyond file size (782492)" Count the digits :-) John That is a fair bit to be seeking lets get some more logs out of it: yum -d 10 --disablerepo=* --enablerepo=sl-security --noplugins makecache yum -d 10 --disablerepo=* --enablerepo=sl-security --noplugins search flac and just a quick double check on these: rpm -V yum libcurl rpm Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Repo error after 7.0 to 7.1 upgrade
On 04/15/2015 11:07 AM, Mark Stodola wrote: On 04/15/2015 10:49 AM, John Pilkington wrote: On 15/04/15 15:38, Pat Riehecky wrote: On 04/15/2015 09:13 AM, John Pilkington wrote: On 15/04/15 14:37, Pat Riehecky wrote: can I have you run: yum clean expire-cache and see if the errors persist? Pat I've been through the sequence twice. Still exactly the same. Thanks. John What is the output of df -h /var/cache/yum Pat [john@HP_Box ~]$ df -h /var/cache/yum Filesystem Size Used Avail Use% Mounted on /dev/mapper/sl-root 50G 12G 39G 23% / [john@HP_Box ~]$ I downloaded (with Firefox) http://ftp2.scientificlinux.org/linux/scientific/7x/x86_64/updates/security/repodata/primary.sqlite.bz2 It's 764.2 KiB. And I don't see a problem unless 7x-security is enabled. I'm guessing Pat had a typo and meant either: du -h /var/cache/yum OR du -sh /var/cache/yum -Mark Good call! Didn't even notice I've rebuilt the metadata, can I have you run a 'yum clean all' and see if that gets things fixed up? Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Repo error after 7.0 to 7.1 upgrade
On 04/15/2015 10:49 AM, John Pilkington wrote: On 15/04/15 15:38, Pat Riehecky wrote: On 04/15/2015 09:13 AM, John Pilkington wrote: On 15/04/15 14:37, Pat Riehecky wrote: can I have you run: yum clean expire-cache and see if the errors persist? Pat I've been through the sequence twice. Still exactly the same. Thanks. John What is the output of df -h /var/cache/yum Pat [john@HP_Box ~]$ df -h /var/cache/yum Filesystem Size Used Avail Use% Mounted on /dev/mapper/sl-root 50G 12G 39G 23% / [john@HP_Box ~]$ I downloaded (with Firefox) http://ftp2.scientificlinux.org/linux/scientific/7x/x86_64/updates/security/repodata/primary.sqlite.bz2 It's 764.2 KiB. And I don't see a problem unless 7x-security is enabled. That is very weird, I'll look into rebuilding the metadata on my end to see if something somewhere got weird. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Repo error after 7.0 to 7.1 upgrade
On 04/15/2015 09:13 AM, John Pilkington wrote: On 15/04/15 14:37, Pat Riehecky wrote: can I have you run: yum clean expire-cache and see if the errors persist? Pat I've been through the sequence twice. Still exactly the same. Thanks. John What is the output of df -h /var/cache/yum Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Repo error after 7.0 to 7.1 upgrade
can I have you run: yum clean expire-cache and see if the errors persist? Pat On 04/15/2015 05:51 AM, John Pilkington wrote: On 15/04/15 11:34, John Pilkington wrote: I'm seeing this in yumex. I've reinstalled yum-conf-sl7x failure: repodata/primary.sqlite.bz2 from sl-security: [Errno 256] No more mirrors to try. ftp://ftp.scientificlinux.org/linux/scientific/7x/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno 14] curl#36 - "Offset (7638280) was beyond file size (782492)" http://ftp.scientificlinux.org/linux/scientific/7x/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno 14] HTTP Error 416 - Requested Range Not Satisfiable http://ftp1.scientificlinux.org/linux/scientific/7x/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno 14] HTTP Error 416 - Requested Range Not Satisfiable http://ftp2.scientificlinux.org/linux/scientific/7x/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno 14] HTTP Error 416 - Requested Range Not Satisfiable You can try starting 'yumex -n' from a command line and deselecting the repositories causing problems and try again. After a reboot it looks as if it just can't find updates/security 11:48:30 : WARNING - WARNING: Failure getting ftp://ftp.scientificlinux.org/linux/scientific/7x/x86_64/updates/security/repodata/primary.sqlite.bz2: 11:48:30 : WARNING - WARNING: Trying other mirror. ...etc -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
(DRAFT)Scientific Linux 7.1 x86_64 is officially released
Scientific Linux 7.1 x86_64 RELEASED - Apr 13, 2015 == Information == NOTE: Please review the SL Release Notes along with The Upstream Vendor's Release Notes: http://ftp.scientificlinux.org/linux/scientific/7.1/x86_64/release-notes/ https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/index.html There is a great deal of information within those documents not listed here. Send comments/issues/test reports to: SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV == Media == You can find the release media at: http://ftp.scientificlinux.org/linux/scientific/7.1/x86_64/iso/ NOTE: The 'everything' dvd image requires a Dual-Layer (DL) compatible drive for both burning and booting off of. Alternatively the livecd-iso-to-disk utility is able to convert this to USB successfully. A USB device of sufficient size is required. Alternatively you can utilize the dd command to write the raw image to a USB device. http://ftp.scientificlinux.org/linux/scientific/7.1/x86_64/release-notes/#_how_to_make_a_bootable_usb_installer == UEFI Secure Boot == The status of UEFI Secure Boot for Scientific Linux is noted in detail at: http://ftp.scientificlinux.org/linux/scientific/7.1/x86_64/release-notes/#_about_uefi_secure_boot Booting SL7 with Secure Boot enabled works but requires a manual step. This is because the "shim" has not been signed by the UEFI CA. Instructions are included within the SL7 Release Notes.
Posted for testing: Scientific Linux 7.1 x86_64 RC2
Scientific Linux 7.1 x86_64 RC2 - Apr 7, 2015 == Information == NOTE: Please review the SL Release Notes along with The Upstream Vendor's Release Notes: http://ftp.scientificlinux.org/linux/scientific/7.1/x86_64/release-notes/ https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/index.html There is a great deal of information within those documents not listed here. Send comments/issues/test reports to: SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV If no critical issues are reported by April 10, 2015 this Release Candidate will be released on April 13 as Scientific Linux 7.1 == Media == You can find the release media at: http://ftp.scientificlinux.org/linux/scientific/7.1/x86_64/iso/ NOTE: The 'everything' dvd image requires a Dual-Layer (DL) compatible drive for both burning and booting off of. Alternatively the livecd-iso-to-disk utility is able to convert this to USB successfully. A USB device of sufficient size is required. Alternatively you can utilize the dd command to write the raw image to a USB device. http://ftp.scientificlinux.org/linux/scientific/7/x86_64/release-notes/#_how_to_make_a_bootable_usb_installer == SL Specific Updates == .Updates to sl-release Updated to use the 7.1 Release repos .Updates to sl-indexhtml Now alters the user agent string of Firefox .Updated epel-release The packaged version of epel-release matches that of EPEL once again .Update sl-logos The grub boot splash was not always centered as expected leading to odd visuals. This has been corrected. .IPA customizations The IPA packages have been customized to remove the upstream links to their support services. .Added zfs on linux repo Per community request, you can now install the ZFS on Linux yum repo via 'yum install yum-conf-zfsonlinux' == UEFI Secure Boot == The status of UEFI Secure Boot for Scientific Linux is noted in detail at: http://ftp.scientificlinux.org/linux/scientific/7/x86_64/release-notes/#_about_uefi_secure_boot Booting SL7 with Secure Boot enabled works but requires a manual step. This is because the "shim" has not been signed by the UEFI CA. Instructions are included within the SL7 Release Notes.
Re: [SCIENTIFIC-LINUX-USERS] bug report: SL7.1 - Virtual Machine Manager
On 04/04/2015 02:53 AM, Otto-Michael BRAUN wrote: As I can test SL7.1 only and not R..7.1 I cannot decide if this bug should be reportet to R..H directly. From the SL side, we are not changing anything that should be related to this issue. The build logs for related packages look as I'd expect. I believe this bug is probably present upstream as well. Please file it there and add me to the CC list so I can keep an eye out and see about possible fixes/workarounds beyond what you've listed here. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL 7.1 schedule? (was Re: SL7x and the 'epel' repo)
On 03/30/2015 08:53 AM, John Pilkington wrote: On 30/03/15 14:10, Pat Riehecky wrote: On 03/27/2015 02:03 PM, Steve Gaarder wrote: My main concern would be how to go back to 7x after the release. For this one, I will refer you to this section of our 7 release notes: http://ftp.scientificlinux.org/linux/scientific/7x/x86_64/release-notes/#_using_sl_yum_variables That section didn't gather a lot of feedback during the 7.0 pre-release phase, so if it is unclear let me know and I'll see about making some adjustments. Pat Thank you, Pat. Yes, it's all there and labelled 'Important'. I just hadn't realised, when it all started, that I was "wishing to test packages from the Release Candidate during the Release Candidate process". I didn't have my eye on TUV's releases at all; I hoped I was providing the feedback implicitly invited by the 'testing' label. John Happy to help John, As always we value all the feedback we get during our testing phases! Hope everyone reading this has a nice day! Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL 7.1 schedule? (was Re: SL7x and the 'epel' repo)
On 03/27/2015 02:03 PM, Steve Gaarder wrote: My main concern would be how to go back to 7x after the release. For this one, I will refer you to this section of our 7 release notes: http://ftp.scientificlinux.org/linux/scientific/7x/x86_64/release-notes/#_using_sl_yum_variables That section didn't gather a lot of feedback during the 7.0 pre-release phase, so if it is unclear let me know and I'll see about making some adjustments. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL 7.1 schedule? (was Re: SL7x and the 'epel' repo)
SL 7.1 BETA was published on Monday. Community testing has already uncovered a few issues which we expect to correct with the next pre-release. Depending on your needs, utilizing the BETA may help alleviate your problems. On 03/27/2015 01:39 PM, Steve Gaarder wrote: It would be very helpful to me if I could have some idea of when SL 7.1 is likely to emerge. That will tell me whether I can just wait or need to come up with some kind of workaround for the EPEL problem. thanks, Steve Gaarder System Administrator, Dept of Mathematics Cornell University, Ithaca, NY, USA gaar...@math.cornell.edu -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] bug report: sl71 - afs-server initscript
Thanks for the bug report! We will try and get it fixed for the next 7.1 pre-release. Pat On 03/27/2015 07:40 AM, Otto-Michael BRAUN wrote: Starting openafs server using "systemctl start afs-server" immediately fa= ils: afs-server unit file calls "/etc/rc.d/init.d/afs-server prepare", which checks for "network available" in function "on_network()": ADDRS=`LANG=C ifconfig -a | grep 'inet addr' | grep -v 127.0.0.1 | wc= -l` ifconfig does no longer return 'inet addr' but 'inet' only. So "prepare" immediately exits with error 1. Please change 'inet addr' to 'inet' BTW: would be nice to have a dedicated place for SL bug reports (as oppos= ite to RHEL bugzilla). Thank you very much, OMB -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL7.0 yum update error
Hi Bill, The automatic repoclosure we run with errata publication doesn't show this issue: - Reading in repository metadata - please wait Checking Dependencies Repos looked at: 2 sl-7.0-x86_64 sl-7.0-x86_64-security Num Packages in Repos: 8530 Can I get the output of rpm -qi libguestfs and have you run a yum clean all? Pat On 03/26/2015 01:49 AM, Bill Maidment wrote: It looks like libguestfs needs to be updated to use libkadm5srv_mit.so.9 Error: Package: 1:libguestfs-1.22.6-22.el7.x86_64 (@anaconda) Requires: libkadm5srv_mit.so.8()(64bit) Removing: krb5-libs-1.11.3-49.el7.x86_64 (@anaconda) libkadm5srv_mit.so.8()(64bit) Updated By: krb5-libs-1.12.2-14.el7.x86_64 (sl-security) ~libkadm5srv_mit.so.9()(64bit) -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-DEVEL] Posted for testing: 7.1 security updates (SL7)
These packages are still on schedule for publication on March 25, 2015. Pat On 03/12/2015 10:37 AM, Pat Riehecky wrote: Updated packages have been posted for testing: http://ftp.scientificlinux.org/linux/scientific/7rolling/testing/x86_64/ With the recent release of TUV 7.1, we have assembled the relevant security errata packages within the SL 7 testing repo. Please test these packages to verify they produce the expected behavior. These will be published for all versions of Scientific Linux 7 on March 25, 2015 You can install this update for testing via the sl-testing repo on your SL system: yum --enablerepo=sl-testing update Updates include: - GNOME Shell - 389-ds-base - glibc - hivex - httpd - ipa - krb5 - libreoffice - libvirt - openssh - pcre - qemu-kvm - virt-who -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] SL 7.0 does not appear to provide complete support for the nVidia GK208 (NV108) chip set.
On 02/25/2015 08:22 AM, EXT-Askew, R W wrote: Hi All I installed SL 7.0 in a system that contains a nVidia GK208 (NV108) chip set. This installation does come up but the only display sizes are 1024x768, 800x600 and 640x480. The nouveau package that was installed as part of the installation is “xorg-x11-drv-nouveau-1.0.10-5.el7.x86_64.rpm”. The system message file contains; kernel: nouveau [ DEVICE][:01:00.0] BOOT0 : 0x108390a1 kernel: nouveau [ DEVICE][:01:00.0] Chipset: GK208 (NV108) kernel: nouveau [ DEVICE][:01:00.0] Family : NVE0 kernel: nouveau [ VBIOS][:01:00.0] checking PRAMIN for image... kernel: nouveau [ VBIOS][:01:00.0] ... signature not found kernel: nouveau [ VBIOS][:01:00.0] checking PROM for image... kernel: nouveau [ VBIOS][:01:00.0] ... signature not found kernel: nouveau [ VBIOS][:01:00.0] checking ACPI for image... kernel: nouveau [ VBIOS][:01:00.0] ... signature not found kernel: nouveau [ VBIOS][:01:00.0] checking PCIROM for image... kernel: nouveau :01:00.0: Invalid ROM contents kernel: nouveau [ VBIOS][:01:00.0] ... appears to be valid kernel: nouveau [ VBIOS][:01:00.0] using image from PCIROM kernel: nouveau [ VBIOS][:01:00.0] BIT signature found kernel: nouveau [ VBIOS][:01:00.0] version 80.28.82.00.01 kernel: nouveau E[ VBIOS][:01:00.0] 0xa303[ ]: unknown opcode 0x07 kernel: nouveau E[ DEVINIT][:01:00.0] init failed, -22 kernel: nouveau E[ DRM] failed to create 0x8080, -22 kernel: nouveau: probe of :01:00.0 failed with error -22 I have looked around on the internet and it looks as though version 1.0.11-1 will support this chipset. I have not been able to locate a “.el7.” version but there is a fedora version “xorg-x11-drv-nouveau-1.0.11-1.fc21.x86_64.rpm” Does anyone know where I can get an “.el7” version of 1.0.11-1 or has anyone tried the Fedora version? Thanks Bill Askew You may wish to look into the nvidia drivers provided by the elrepo project (yum install yum-conf-elrepo on an SL6/7 system). Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Errata database?
On 02/18/2015 03:22 PM, Steve Gaarder wrote: Are the SL Errata available in any sort of machine-parseable form? The Errata page has a nice pretty presentation, but what I'd like is a list of errata, their severity, and what packages are involved, all in a format that I can parse with a Perl script or equivalent. Is such a thing available? thanks, Steve Gaarder System Administrator, Dept of Mathematics Cornell University, Ithaca, NY, USA gaar...@math.cornell.edu Does: http://ftp.scientificlinux.org/linux/scientific/6x/x86_64/updates/security/repodata/updateinfo.xml meet your needs? Similar files available for the base os and fastbugs for SL6 and SL7. Source code for the tool that makes this at: https://cdcvs.fnal.gov/redmine/projects/python-updateinfo/repository RPM packaged at: http://ftp.scientificlinux.org/linux/scientific/6x/addons/ Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] ipa installation requires subscription-manager
We've filed an upstream bug to get this resolved: 1183116 Pat On 02/17/2015 11:55 AM, greg boyd wrote: i apologize if this is a rehash of an old issue. I did a check of the archives and couldn't find a fix for it. I have been experimenting with ipa on SL7, but when I install the ipa-server it requires subscription-manager which disables yum unless I subscribe. Is there a workaround for this? btw, we've been using SCI LNX for the last few years here, as suggested by folks at NERSC. It's been excellent and enabled us to teach to the Redhat certs without being able to afford licenses. Thanks to the Sci Lnx developers! -- -- greg gb...@ccsf.edu <mailto:gb...@ccsf.edu> Instructor, Computer Science http://fog.ccsf.edu/~gboyd <http://fog.ccsf.edu/%7Egboyd> -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] AMD Catalyst Driver Broke
Have you considered using the kmod packages from ELRepo? Pat On 02/16/2015 06:48 PM, Paul Hein wrote: Thank you Tony (and Alec). Reinstalling with an 'aticonfig --initial -f' worked. Thank you! I would not have thought to do that. Paul On 02/16/2015 05:17 PM, Hoffmann, Tony wrote: Did you try re-installing the catalyst driver? Sometimes xorg updates overwrite things the proprietary driver install had put in place earlier. Just grasping at straws here. -Original Message- From: owner-scientific-linux-us...@listserv.fnal.gov [mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Paul Hein Sent: February-16-15 3:31 PM To: scientific-linux-us...@fnal.gov Subject: AMD Catalyst Driver Broke The minor update to xorg-x11-server-common-1.15.0-25.1.sl6.x86_64 broke the AMD Catalyst 14.12 (14.501.1003) graphics card driver. It boots up just fine displaying everything but at the end we get a blank screen. The terminal windows are not there either. It is the latest version of the driver and I am not certain what to do. The error message is (EE) fglrx(0): atiddxDriScreenInit failed. Probably kernel module missing or incompatible. I tried to downgrade X11 rpms but it says "Only Upgrade available on package". The graphics card is XFX FX-775A-ZNP4 Radeon HD 7750 and it is in a Dell PowerEdge T110 II. Any ideas on what I can do? Thank you for your help. Paul -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Upgrade from SL 5.3
On 02/05/2015 09:21 AM, Alan Bartlett wrote: On 5 February 2015 at 13:54, Pat Riehecky wrote: Added: http://www.scientificlinux.org/documentation/faq/faq-releases/#update-particular-release Pat, A minor editorial adjustment is required to the above -- s/sl-releae/sl-release/ Alan. Alas. Thanks for checking up on me Alan! Should be fixed now. Pat -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Upgrade from SL 5.3
Added:
http://www.scientificlinux.org/documentation/faq/faq-releases/#update-particular-release
On 02/05/2015 07:47 AM, Pat Riehecky wrote:
Alas, for SL 5 $releasever isn't used by the yum repos we provide.
I'll add the comment on releasever to the docs for 6 and 7 as it is a
handy command set.
Pat
On 02/05/2015 02:26 AM, Werf, C.G. van der (Carel) wrote:
Thanks to all who responded.
There was indeed a typo in de scientific.org documentation.
Therefor I have succeeded in upgrading to 5.11.
Also David mentioned:
Without installing the yum-conf-5x package, you can most likely do an
upgrade doing:
yum --releasever=5.11 update sl-release
yum clean all
yum update
<
(@Pat) I remember this was also in the documentation on the old
scientific.org website... maybe add this to the new site?
Regards,
Carel van der Werf
-Original Message-
From: owner-scientific-linux-us...@listserv.fnal.gov
[mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of
Pat Riehecky
Sent: 04 February, 2015 18:02
To: Doug Johnson; SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Subject: Re: [SCIENTIFIC-LINUX-USERS] Upgrade from SL 5.3
Documentation updated, thanks for finding this!
Pat
On 02/04/2015 10:59 AM, Doug Johnson wrote:
Greetings,
Perhaps it is a typo in the documentation?
{root}> yum search yum-conf
Loaded plugins: kernel-module, priorities
463 packages excluded due to repository priority protections
Matched: yum-conf
yum-conf.noarch : RPM installer/updater config files
yum-conf-5x.noarch : RPM installer/updater config files
yum-conf-adobe.i686 : linux.adobe.com Repository Configuration
yum-conf-adobe.x86_64 : linux.adobe.com Repository Configuration
yum-conf-elrepo.noarch : ElRepo.org Community Enterprise Linux
Repository release file
yum-conf-epel.noarch : Extra Packages for Enterprise Linux
repository configuration
But I don't use this method, so take this with a grain of salt.
Hope this helps,
doug
Hi,
I have several different releases of Scientific Linux running, and
now one =
of my spare-fileservers is repowerd again
Then I found out it is still running SL 5.3, so I would like to
update to 5=
.11, but ScienticfLinux.org in its FAQ only mentions:
How do I update to the latest release?
To upgrade from SL 5.5 (or any older SL 5 release) to the
latest SL 5, =
simply install yum-conf-sl5x
To upgrade from SL 6.1 (or any older SL 6 release) to the
latest SL 6, =
simply install yum-conf-sl6x
Upgrades between major versions (from SL 5 to SL 6, or SL 6
to SL 7) ar=
e not supported.
Starting with Scientific Linux 5.9 and Scientific Linux 6.4, the
'x' repo i=
s installed by default.
So:
# yum install yum-conf-sl5x=20
Shows:
"No package yum-conf-sl5x available" (from
ftp1.scientificlinux.org)=20
Therefor: Is the phrase " or any older SL 5 release " correct ?
Regards,
Carel=20
-
Doug Johnsonemail: drj...@pizero.colorado.edu
B390, Duane Physics (303)-492-4506 Office
Boulder, CO 80309 (303)-492-5119 FAX
http://www.aaccchildren.org
http://www-hep.colorado.edu/support/fulbright
Father, father, father. We don't need to escalate
War is not the answer, 'cause only love can conquer hate.
--------
--
Pat Riehecky
Scientific Linux developer
Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Upgrade from SL 5.3
Alas, for SL 5 $releasever isn't used by the yum repos we provide.
I'll add the comment on releasever to the docs for 6 and 7 as it is a
handy command set.
Pat
On 02/05/2015 02:26 AM, Werf, C.G. van der (Carel) wrote:
Thanks to all who responded.
There was indeed a typo in de scientific.org documentation.
Therefor I have succeeded in upgrading to 5.11.
Also David mentioned:
Without installing the yum-conf-5x package, you can most likely do an upgrade
doing:
yum --releasever=5.11 update sl-release
yum clean all
yum update
<
(@Pat) I remember this was also in the documentation on the old scientific.org
website... maybe add this to the new site?
Regards,
Carel van der Werf
-Original Message-
From: owner-scientific-linux-us...@listserv.fnal.gov
[mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Pat
Riehecky
Sent: 04 February, 2015 18:02
To: Doug Johnson; SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Subject: Re: [SCIENTIFIC-LINUX-USERS] Upgrade from SL 5.3
Documentation updated, thanks for finding this!
Pat
On 02/04/2015 10:59 AM, Doug Johnson wrote:
Greetings,
Perhaps it is a typo in the documentation?
{root}> yum search yum-conf
Loaded plugins: kernel-module, priorities
463 packages excluded due to repository priority protections
Matched:
yum-conf
yum-conf.noarch : RPM installer/updater config files
yum-conf-5x.noarch : RPM installer/updater config files
yum-conf-adobe.i686 : linux.adobe.com Repository Configuration
yum-conf-adobe.x86_64 : linux.adobe.com Repository Configuration
yum-conf-elrepo.noarch : ElRepo.org Community Enterprise Linux Repository
release file
yum-conf-epel.noarch : Extra Packages for Enterprise Linux repository
configuration
But I don't use this method, so take this with a grain of salt.
Hope this helps,
doug
Hi,
I have several different releases of Scientific Linux running, and now one =
of my spare-fileservers is repowerd again
Then I found out it is still running SL 5.3, so I would like to update to 5=
.11, but ScienticfLinux.org in its FAQ only mentions:
How do I update to the latest release?
To upgrade from SL 5.5 (or any older SL 5 release) to the latest SL 5, =
simply install yum-conf-sl5x
To upgrade from SL 6.1 (or any older SL 6 release) to the latest SL 6, =
simply install yum-conf-sl6x
Upgrades between major versions (from SL 5 to SL 6, or SL 6 to SL 7) ar=
e not supported.
Starting with Scientific Linux 5.9 and Scientific Linux 6.4, the 'x' repo i=
s installed by default.
So:
# yum install yum-conf-sl5x=20
Shows:
"No package yum-conf-sl5x available" (from ftp1.scientificlinux.org)=20
Therefor: Is the phrase " or any older SL 5 release " correct ?
Regards,
Carel=20
-
Doug Johnsonemail: drj...@pizero.colorado.edu
B390, Duane Physics (303)-492-4506 Office
Boulder, CO 80309 (303)-492-5119 FAX
http://www.aaccchildren.org
http://www-hep.colorado.edu/support/fulbright
Father, father, father. We don't need to escalate
War is not the answer, 'cause only love can conquer hate.
--------
--
Pat Riehecky
Scientific Linux developer
Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Upgrade from SL 5.3
Documentation updated, thanks for finding this!
Pat
On 02/04/2015 10:59 AM, Doug Johnson wrote:
Greetings,
Perhaps it is a typo in the documentation?
{root}> yum search yum-conf
Loaded plugins: kernel-module, priorities
463 packages excluded due to repository priority protections
Matched:
yum-conf
yum-conf.noarch : RPM installer/updater config files
yum-conf-5x.noarch : RPM installer/updater config files
yum-conf-adobe.i686 : linux.adobe.com Repository Configuration
yum-conf-adobe.x86_64 : linux.adobe.com Repository Configuration
yum-conf-elrepo.noarch : ElRepo.org Community Enterprise Linux Repository
release file
yum-conf-epel.noarch : Extra Packages for Enterprise Linux repository
configuration
But I don't use this method, so take this with a grain of salt.
Hope this helps,
doug
Hi,
I have several different releases of Scientific Linux running, and now one =
of my spare-fileservers is repowerd again
Then I found out it is still running SL 5.3, so I would like to update to 5=
.11, but ScienticfLinux.org in its FAQ only mentions:
How do I update to the latest release?
To upgrade from SL 5.5 (or any older SL 5 release) to the latest SL 5, =
simply install yum-conf-sl5x
To upgrade from SL 6.1 (or any older SL 6 release) to the latest SL 6, =
simply install yum-conf-sl6x
Upgrades between major versions (from SL 5 to SL 6, or SL 6 to SL 7) ar=
e not supported.
Starting with Scientific Linux 5.9 and Scientific Linux 6.4, the 'x' repo i=
s installed by default.
So:
# yum install yum-conf-sl5x=20
Shows:
"No package yum-conf-sl5x available" (from ftp1.scientificlinux.org)=20
Therefor: Is the phrase " or any older SL 5 release " correct ?
Regards,
Carel=20
-
Doug Johnsonemail: drj...@pizero.colorado.edu
B390, Duane Physics (303)-492-4506 Office
Boulder, CO 80309 (303)-492-5119 FAX
http://www.aaccchildren.org
http://www-hep.colorado.edu/support/fulbright
Father, father, father. We don't need to escalate
War is not the answer, 'cause only love can conquer hate.
--------
--
Pat Riehecky
Scientific Linux developer
Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Security ERRATA Critical: glibc on SL6.x, SL7.x i386/x86_64
Not sure how that happened Any way, they are correctly posted now (repodata still rebuilding) Pat On 01/28/2015 09:14 AM, Phil Wyett wrote: On Tue, 2015-01-27 at 21:16 +, Pat Riehecky wrote: Synopsis: Critical: glibc security update Advisory ID: SLSA-2015:0092-1 Issue Date:2015-01-27 CVE Numbers: CVE-2015-0235 -- A heap-based buffer overflow was found in glibc's __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the application. (CVE-2015-0235) -- SL6 x86_64 glibc-2.12-1.149.el6_6.5.i686.rpm glibc-2.12-1.149.el6_6.5.x86_64.rpm glibc-common-2.12-1.149.el6_6.5.x86_64.rpm glibc-debuginfo-2.12-1.149.el6_6.5.i686.rpm glibc-debuginfo-2.12-1.149.el6_6.5.x86_64.rpm glibc-debuginfo-common-2.12-1.149.el6_6.5.i686.rpm glibc-debuginfo-common-2.12-1.149.el6_6.5.x86_64.rpm glibc-devel-2.12-1.149.el6_6.5.i686.rpm glibc-devel-2.12-1.149.el6_6.5.x86_64.rpm glibc-headers-2.12-1.149.el6_6.5.x86_64.rpm glibc-utils-2.12-1.149.el6_6.5.x86_64.rpm nscd-2.12-1.149.el6_6.5.x86_64.rpm glibc-static-2.12-1.149.el6_6.5.i686.rpm glibc-static-2.12-1.149.el6_6.5.x86_64.rpm i386 glibc-2.12-1.149.el6_6.5.i686.rpm glibc-common-2.12-1.149.el6_6.5.i686.rpm glibc-debuginfo-2.12-1.149.el6_6.5.i686.rpm glibc-debuginfo-common-2.12-1.149.el6_6.5.i686.rpm glibc-devel-2.12-1.149.el6_6.5.i686.rpm glibc-headers-2.12-1.149.el6_6.5.i686.rpm glibc-utils-2.12-1.149.el6_6.5.i686.rpm nscd-2.12-1.149.el6_6.5.i686.rpm glibc-static-2.12-1.149.el6_6.5.i686.rpm SL7 x86_64 glibc-2.17-55.el7_0.5.i686.rpm glibc-2.17-55.el7_0.5.x86_64.rpm glibc-common-2.17-55.el7_0.5.x86_64.rpm glibc-debuginfo-2.17-55.el7_0.5.i686.rpm glibc-debuginfo-2.17-55.el7_0.5.x86_64.rpm glibc-debuginfo-common-2.17-55.el7_0.5.i686.rpm glibc-debuginfo-common-2.17-55.el7_0.5.x86_64.rpm glibc-devel-2.17-55.el7_0.5.i686.rpm glibc-devel-2.17-55.el7_0.5.x86_64.rpm glibc-headers-2.17-55.el7_0.5.x86_64.rpm glibc-utils-2.17-55.el7_0.5.x86_64.rpm nscd-2.17-55.el7_0.5.x86_64.rpm glibc-static-2.17-55.el7_0.5.i686.rpm glibc-static-2.17-55.el7_0.5.x86_64.rpm - Scientific Linux Development Team Hi all, The debuginfo rpm files for this update do not seem to have hit server. Regards Phil -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Using yum to apply security patches (CVE-2014-9322)
Hello, I appreciate your interest in the yum-security plugin! For SL 5, we do not currently build the relevant yum metadata for the yum-security plugin. Pat On 01/27/2015 09:03 AM, D Laff wrote: I am working my way around a number of 5.x and 6.x systems to address CVE-2014-9322: https://www.scientificlinux.org/sl-errata/slsa-20142008-1/ https://www.scientificlinux.org/sl-errata/slsa-20141997-1/ In doing this, I have become a little more familiar with the security plugin for yum. On my systems, following a typical requirement for the installation of this plugin, I query the requirement for patches for the given CVE: --- (eg) yum list updates --cve=CVE-2014-9322 Loaded plugins: refresh-packagekit, security Limiting package lists to security relevant ones 5 package(s) needed for security, out of 164 available Updated Packages kernel.x86_64 2.6.32-504.3.3.el6 sl-security --- This is what I expect as my kernel is below the "fixed by" release listed against the given CVE for SL 6.x (-504). However, when undertaking similar diagnostics on my 5.x systems I am being informed that there are no patches applicable for the given CVE --- (eg) yum --cve CVE-2014-9322 info updates Loaded plugins: kernel-module, security Limiting package lists to security relevant ones CVE "CVE-2014-9322" not found applicable for this system No packages needed, for security, 323 available --- (eg) yum info-security SLSA-2014:2008-1 Argument "SLSA-2014:2008-1" not found applicable for this system --- This isn't what I expect as my kernel version is below the "fixed by" release listed against the given CVE for SL 5.x (-400). I'm concerned that I'm using yum incorrectly, and missing out on important security patches (in this instance for the given CVE). However, it might be that the systems in question are actually patched / not vulnerable, but in a way which I don't understand (and, if possible, I'd like to!). Any guidance or insight would be much appreciated. Thanks in advance . . . -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Chromium in EL?
That source package appeared on upstream's FTP site and was automatically picked up by our builders. The chromium-browser packages are part of the Supplementary channel from TUV. Though I could not match the version found there to any announcements from TUV. The future state of this package in SL is unknown. Since they've not previously published this package, future updates are uncertian. Particularly since it has been removed from the ftp site. That SRPM probably shouldn't have been published as we have not published the binaries. I've since removed it. Sorry for the confusion. Pat On 01/21/2015 01:24 PM, Schaaf, Jonathan P (GE Healthcare) wrote: I couldn't help but notice that chromium appeared in the source tree on SL just yesterday. Is this is a recent addition to upstream? From what little I can learn by querying the omnipotent google, this sounds like an update… but an update to what? I can't find any previous packages for this in EL. Does anyone have more information on this? For a variety of reasons I'd like to have a chromium build that I don't need to build/maintain myself… Jonathan -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] fastbugs: yum-autoupdate package broken?
hm.. I'll rebuild the repodata. Pat On 01/07/2015 08:00 AM, ~Stack~ wrote: Greetings, Is anyone else having this issue? A bunch of my servers sent me emails this morning about the yum-autoupdate package. Should I just be patient and wait for a while or is there an actual issue? Thanks. ~Stack~ # yum clean all && yum update Loaded plugins: security Cleaning repos: epel sl sl-fastbugs sl-security Cleaning up Everything Loaded plugins: security Setting up Update Process epel/metalink | 14 kB 00:00 epel | 4.4 kB 00:00 epel/primary_db | 6.4 MB 00:01 sl | 3.6 kB 00:00 sl/primary_db | 4.3 MB 00:03 sl-fastbugs | 3.0 kB 00:00 sl-fastbugs/primary_db | 256 kB 00:00 sl-security | 2.9 kB 00:00 sl-security/primary_db | 1.2 MB 00:00 Resolving Dependencies --> Running transaction check ---> Package yum-autoupdate.noarch 5:2-6.3 will be updated ---> Package yum-autoupdate.noarch 5:2-6.6 will be an update --> Finished Dependency Resolution Dependencies Resolved = Package Arch Version Repository Size = Updating: yum-autoupdatenoarch 5:2-6.6 sl-fastbugs 27 k Transaction Summary = Upgrade 1 Package(s) Total download size: 27 k Is this ok [y/N]: y Downloading Packages: http://ftp.scientificlinux.org/linux/scientific/6.6/x86_64/updates/fastbugs/yum-autoupdate-2-6.6.noarch.rpm: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 404 Not Found" Trying other mirror. http://ftp1.scientificlinux.org/linux/scientific/6.6/x86_64/updates/fastbugs/yum-autoupdate-2-6.6.noarch.rpm: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 404 Not Found" Trying other mirror. http://ftp2.scientificlinux.org/linux/scientific/6.6/x86_64/updates/fastbugs/yum-autoupdate-2-6.6.noarch.rpm: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 404 Not Found" Trying other mirror. ftp://ftp.scientificlinux.org/linux/scientific/6.6/x86_64/updates/fastbugs/yum-autoupdate-2-6.6.noarch.rpm: [Errno 14] PYCURL ERROR 19 - "Given file does not exist" Trying other mirror. Error Downloading Packages: 5:yum-autoupdate-2-6.6.noarch: failure: yum-autoupdate-2-6.6.noarch.rpm from sl-fastbugs: [Errno 256] No more mirrors to try. -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Re: [SCIENTIFIC-LINUX-USERS] Firewall-cmd doesn't assign an interface permanently to a zone
This appears somewhat similar to TUV bugzilla 1112742 I'm afraid I don't have 7 system to test with at the moment, but the listed workaround there may be of some help. Pat On 12/29/2014 02:47 AM, Peter Boy wrote: Hi all, I’m installing a new SL7 box running a KVM host and several guests. I established a bridge br0 attached to eth0 for external access for host and all guests und use virbr0 as an internal connection between guests and host to access protected resources (e.g. a tomcat application server). Anything works fine so far. I tried to assign the internal network devices (eth1 on guests, virbr0 on host) to the trusted zones using # firewall-cmd --permanent --zone=public --remove-interface=eth1 # firewall-cmd --permanent —zone=trusted --add-interface=eth1 # firewall-cmd —reload but it doesn’t work, eth1 is always in public zone after reload. If I omit the —permanent option I can successfully modify the running firewall. But after an reload or a reboot the modification is lost. I found an entry at https://bugs.centos.org/view.php?id=7526 that it is a bug and SL7 might be affected as well. I found a workaround as well. You can add ZONE=trusted to the /etc/sysconfig/netrwork-scripts/ifcfg-eth1 file and eth1 is added to the trusted zone on reboot and firewall reload. There is no ifcfg-virbr0 file, of course. I found an information (Fedora) that you may add fwzone=‚trusted‘ using virsh net-edit, but on save it is deleted in SL7. My question is: Does anyone know how to accomplish it for virbr0 in SL7? Thanks in advance PB — Dr. Peter Boy Universität Bremen Mary-Somerville-Str. 5 28359 Bremen Germany p...@zes.uni-bremen.de www.zes.uni-bremen.de Are you looking for a web content management system for scientific research organizations? Have a look at http://www.scientificcms.org -- Pat Riehecky Scientific Linux developer Fermi National Accelerator Laboratory www.fnal.gov www.scientificlinux.org
Posted for testing: sl-release (SL7)
Updated packages have been posted for testing: ftp://ftp.scientificlinux.org/linux/scientific/7rolling/testing/x86_64/ An updated version of the 'sl-release' rpm has been posted to the sl-testing repo. This new version should resolve a surprising dependency loop in the initial bootstraping of an SL 7 system. This change alters the code defining $slreleasever used for the official SL7 yum repos. If no bugs are reported against this package by Dec 15, 2014, it will be published as a bugfix. Please test this package. For more information on yum variables in SL7: http://ftp.scientificlinux.org/linux/scientific/7x/x86_64/release-notes/#_using_sl_yum_variables You can install this update for testing via the sl-testing repo on your SL system: yum --enablerepo=sl-testing update
Re: [SCIENTIFIC-LINUX-USERS] [SL-errata] FASTBUGS for SL 7x x86_64 now available
On 12/02/2014 07:10 PM, Kohei Takahashi wrote: Hi guys, On 2014/12/03 0:22, Pat Riehecky wrote: The following FASTBUGS have been uploaded to http://ftp.scientificlinux.org/linux/scientific/6x/x86_64/updates/fastbugs/ I've got FASTBUG announcement for SL7x, but the URI points to SL6x repo. Is this correct? Kohei It appears I made a typo. Thanks for the report. Pat -- Pat Riehecky Scientific Linux developer http://www.scientificlinux.org/
Re: [SCIENTIFIC-LINUX-USERS] shim/mokutil update conflict in SL7
Thought I'd cleaned that up, I'll have it fixed up shortly. Pat On 11/26/2014 05:31 AM, Vladimir Mosgalin wrote: That's what happens: # LANG=C yum update mokutil Loaded plugins: fastestmirror, langpacks, rpm-warm-cache Loading mirror speeds from cached hostfile * elrepo: mirrors.coreix.net * epel: ftp.lysator.liu.se * sl: ftp.scientificlinux.org * sl-extras: ftp.scientificlinux.org * sl-fastbugs: ftp.scientificlinux.org * sl-security: ftp.scientificlinux.org Resolving Dependencies --> Running transaction check ---> Package mokutil.x86_64 0:0.7-5.el7 will be updated --> Processing Dependency: mokutil = 0.7-5.el7 for package: shim-0.7-5.2.sl7.1.x86_64 ---> Package mokutil.x86_64 0:0.7-8.el7_0 will be an update --> Finished Dependency Resolution Error: Package: shim-0.7-5.2.sl7.1.x86_64 (@anaconda/7) Requires: mokutil = 0.7-5.el7 Removing: mokutil-0.7-5.el7.x86_64 (@anaconda/7) mokutil = 0.7-5.el7 Updated By: mokutil-0.7-8.el7_0.x86_64 (sl-fastbugs) mokutil = 0.7-8.el7_0 You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest -- Pat Riehecky Scientific Linux developer http://www.scientificlinux.org/
