Re: Problem with GRUB

2008-09-23 Thread Cristian Ionescu-Idbohrn
On Tue, 23 Sep 2008, Olof Mattsson wrote: > Even though it seems so work the script complains about /dev/md0 as > $BOOT_PARTITION. I get the error: > Can't match device: /dev/md0 But of course. device2grub doesn't like md-devices. It expects this: $device=~ m#^(/dev/(?:[sh]d\D|ida/c\d*d\d*|c

Re: NFS/dhcp/tftp on eth1, kernel search NFS it on eth0

2008-10-05 Thread Cristian Ionescu-Idbohrn
On Sun, 5 Oct 2008, Thomas Neumann wrote: > Jean Spirat schrieb: > > > All my tests works well but i have a failure when i try to install > > > a host with two ethernet cards. The dhcp and tftp runs on the eth1 > > > network and it works fine. But the issue is that the fai kernel when > > > loaded

Re: fai: Unexpected vgdisplay output

2009-01-12 Thread Cristian Ionescu-Idbohrn
On Tue, 13 Jan 2009, Michael Tautschnig wrote: > please just change line 313 of > $NFSROOT/live/filesystem.dir/usr/share/fai/setup-storage/Volumes.pm to > > /^\s*"(\S+)"\s+\d+\.\d+ MB\s+\[\d+\.*\d* MB\s+used \/ \d+(\.\d+)? > MB\s+free\]$/ Is there a good reason to use verbatim space characters i

Re: How to conditionally define a class? (ex. Xorg configuration)

2010-01-21 Thread Cristian Ionescu-Idbohrn
On Thu, 21 Jan 2010, Thomas Lange wrote: > Create a script class/99-radeon: > > #! /bin/bash > > # skip if class XORG is not defined > grep -q XORG $FAI/class && exit 0 > > ATI_RADEON_ID=$(lspci | grep VGA | grep ATI | grep Radeon) > [ "$ATI_RADEON_ID" != "" ] && echo XORG_ATI which could also be

Re: RAID1 and grub - again

2010-01-28 Thread Cristian Ionescu-Idbohrn
On Thu, 28 Jan 2010, Darshaka Pathirana wrote: > diff -r 282adc0454ed class/50-host-classes > --- a/class/50-host-classes Mon Jan 25 12:38:32 2010 +0100 > +++ b/class/50-host-classes Thu Jan 28 18:27:11 2010 +0100 > @@ -29,5 +29,5 @@ > echo "FAIBASE DHCPC" ;; > esac > > -(ifclass

Re: Set pre-encrypted passwords for users

2010-03-31 Thread Cristian Ionescu-Idbohrn
On Wed, 31 Mar 2010, Mathias Friman wrote: > I use some old scripts to create users on a FAI-install system. In > them I run the 30-demo script from simple examples: > > $ROOTCMD adduser --disabled-login --gecos "fai demo user" demo > echo "demo:$ROOTPW" | $ROOTCMD chpasswd --encrypted > > Since U

Re: Set pre-encrypted passwords for users

2010-03-31 Thread Cristian Ionescu-Idbohrn
On Wed, 31 Mar 2010, Joel Merrick wrote: > Use useradd or usermod > > ie.. > > useradd -o -s /bin/bash -p $ENCPASS user But that will make $ENCPASS visible with: $ tr '\0' ' ' < /proc/PID/cmdline for a moment. Isn't reading from a file descriptor is the prefered method for doing that?

Re: Set pre-encrypted passwords for users

2010-03-31 Thread Cristian Ionescu-Idbohrn
On Wed, 31 Mar 2010, Axel Freyn wrote: > Hi Cristian, Axel, > Is that really a problem, if the ENCRYPTED password can be read? IMHO, yes. > For sure, one reason for /etc/shadow is to prevent exactly that, but > during a FAI-installation, I see much more serious security concerns > (well: if yo

Re: FAI boot with eth1

2010-09-15 Thread Cristian Ionescu-Idbohrn
On Wed, 15 Sep 2010, C. V. wrote: > most of my servers have more than one network card. In some cases I have > to use eth devices which are not assigned as eth0 by linux. Sadly that > does not seem to work out of the box since FAI always tries to use eth0. > So, the boot stops when trying to mount

Re: issue with netdevices_up and squeeze

2010-12-13 Thread Cristian Ionescu-Idbohrn
On Mon, 13 Dec 2010, Thomas Lange wrote: > > On Sun, 12 Dec 2010 16:38:23 -0800, David Dreezer > > said: > > > get-boot-info determines $netdevices_up like so: > > > netdevices_up=$(ip link show up | grep "^[1-9$]" | cut -d : -f 2 | > cut -d ' ' -f 2 | grep -v "^lo" | sort |

Re: issue with netdevices_up and squeeze

2010-12-13 Thread Cristian Ionescu-Idbohrn
On Mon, 13 Dec 2010, Thomas Lange wrote: > > Below is the output on Debian lenny with iproute 20080725-2. > > malzmuehle[~]> ip link show help > Usage: ip link set DEVICE { up | down | > arp { on | off } | > dynamic { on | off } | >

Re: issue with netdevices_up and squeeze

2010-12-13 Thread Cristian Ionescu-Idbohrn
On Mon, 13 Dec 2010, David Dreezer wrote: > > This did not work, unfortunately. I patched the get-boot-info script yet > FAI still thinks eth1 is up. If I ssh to the client machine and run that > line manually then echo $netdevices_up I see only eth0, however boot.log > shows this: > > netdevices_a

Re: issue with netdevices_up and squeeze

2010-12-14 Thread Cristian Ionescu-Idbohrn
On Tue, 14 Dec 2010, David Dreezer wrote: > > I can get that information for you tonight (us pacific) but I will > unfortunately not have access to that box until that time as it is not web > accessible and I am not physically at the facility at the moment. When last > I looked it was > > r...@

Re: Removing /usr/sbin/policy-rc.d on target post install

2011-09-16 Thread Cristian Ionescu-Idbohrn
On Fri, 16 Sep 2011, Fredrik Eriksson wrote: > > So i put this in $FAI_CONFIGDIR/hooks/faiend.DEFAULT > > #! /bin/sh > > if [ -e $target/usr/sbin/policy-rc.d ]; then > rm $target/usr/sbin/policy-rc.d > fi Shorter alternative: #!/bin/sh rm -f $target/usr/sbin/policy-rc.

Re: apt-key add inside the chroot

2011-10-11 Thread Cristian Ionescu-Idbohrn
On Tue, 11 Oct 2011, Thomas Lange wrote: > > On Tue, 11 Oct 2011 22:28:01 +0200, Natxo Asenjo > > said: > > > after importing the gpg key as indicated in > > http://fai-project.org/download/ I saw in the log that in the nfsroot > > the key was not present:: > > > W: GPG er

Re: FAI Security Considerations -> Wiki page

2012-02-13 Thread Cristian Ionescu-Idbohrn
On Mon, 13 Feb 2012, Michał Dwużnik wrote: > > I would really appreciate not writing > 'NFS and therefore unencrypted' Forgive my ignorance, but why? Cheers, -- Cristian

Re: FAI Security Considerations -> Wiki page

2012-02-13 Thread Cristian Ionescu-Idbohrn
On Mon, 13 Feb 2012, Michał Dwużnik wrote: > On Mon, Feb 13, 2012 at 18:39, Cristian Ionescu-Idbohrn > wrote: > > On Mon, 13 Feb 2012, Michał Dwużnik wrote: > >> > >> I would really appreciate not writing > >> 'NFS and therefore unencrypted' >