eloper_Toolset/>
I hope this could clarify some of your questions in regards to what a
stable Linux distro is and how it works in a long term perspective.
--
kind regards,
David Sommerseth
e this section in your /etc/named.conf ... and then you can
ditch the forwarders completely:
zone "." IN {
type hint;
file "named.ca";
};
And please avoid the typical mistake of disabling DNSSEC (which 98% of
all Internet blogs suggest). DNSSEC usually works out-of-the-box on a
EL6 installation.
--
kind regards,
David Sommerseth
e,
to avoid downloading this information each time you do a yum operation.
And when yum figures the cache has expired, it downloads a new one.
This can also happen with the SL repos as well.
And you can expire the yum cache at will too, by doing
# yum clean expire-cache
This will cause yum to download all repos again on the next yum operation.
kind regards,
David Sommerseth
gh.default.retrans_time_ms
instead.
It's not caused by 'grep' itself, but as 'grep' was looking at a sysctl
parameter which is now deprecated - this triggered the warning you saw.
--
kind regards,
David Sommerseth
longer
needed/useful and got removed in in 6.x.
--
kind regards,
David Sommerseth
On 25/02/13 18:44, Stephen Isard wrote:
> On Mon, 25 Feb 2013 18:20:58 +0100, David Sommerseth
> wrote:
>
>> On 23/02/13 19:08, Stephen Isard wrote:
>>> A strange item turned up in my logs yesterday:
>>>
>>> kernel: process `grep' is
microkernel or other random crazy thing. "
(2012-03-08, Linus Torvalds)
<https://lkml.org/lkml/2012/3/8/495>
And of course, you have the classic Tanenbaum-Torvalds debate as well.
<http://en.wikipedia.org/wiki/Tanenbaum-Torvalds_debate>
--
kind regards,
David Sommerseth
On 05/03/13 17:27, Mahmood Naderan wrote:
> [mahmood@tiger ~]$ telnet localhost:5900
> telnet: localhost:5900: Name or service not known
Try instead:
[mahmood@tiger ~]$ telnet localhost 5900
(without the ':', just a space)
--
kind regards,
David Sommerseth
a
>
> Connection to host lost.
>
You have no problems now ... just run your favourite VNC client on your
box and connect to IP:1 or IP:5901
And it should just work.
--
kind regards,
David Sommerseth
> ---
nfig files and log files. For more info, also
consult the man pages.
--
kind regards,
David Sommerseth
> --------
> *From:* David Sommerseth
> *To:* Mahmood Naderan
> *Cc:* Eero Volotinen ;
> "scientific-linux
debuginfo-install kernel-2.6.32-279.el6.i686
--
kind regards,
David Sommerseth
hroot though
... But encrypting the filesystem which contains /etc will help you out
there.
On the other hand, if this is a server installation this usually isn't a
problem. Servers are usually installed in a server room with
(hopefully) limited access. On workstations and (in particular)
laptops, encrypted root filesystem is the best solution.
--
kind regards,
David Sommerseth
s important.
Absolutely. The '-f' option with cp, mv and rm are always dangerous.
Do always think trice about what you are doing when you use -f/--force
before hitting the ENTER key.
--
kind regards,
David Sommerseth
as an image here:
>
> https://plus.google.com/u/0/112648813199640203443/posts/7LrVTf43yz8
>
Please see that message in context of this one too:
<http://www.h-online.com/open/news/item/Chrome-stops-declaring-Linux-systems-obsolete-1803451.html>
Not a fully optimal solution for all the Chrome users, but at least not
as misleading as it was before.
--
kind regards,
David Sommerseth
ELinux
policy. The semanage command is the tool to use to modify the policy.
kind regards,
David Sommerseth
On 28/04/13 04:15, Fernando Andrés Muñoz Bravo wrote:
Interesting... I didn't try that. I'll test with your suggestion, and will be
here reporting...
Thanks a lot for your help.
nt_t and httpd_user_content_t, but
both would grant the needed access.
> Thanks a lot a lot... you saved me :)
You're welcome! I'm really happy you solved your issue :)
kind regards,
David Sommerseth
> On Sun, Apr 28, 2013 at 6:16 AM, David Sommerseth
> <mailto:sl+us...@li
ame thing in a
more safe and controlled manner.
kind regards,
David Sommerseth
On 13 May 2013 04:30, Jamie Duncan mailto:jamie.e.dun...@gmail.com>> wrote:
Read that article. There's an option in yum that can turn on/off that
behavior in RHEL6 and clones.
On Sun, May
ncluding a
line similar to this one:
/path/to/binary
And then the updater need to be started via /usr/bin/pkexec ... and it
would Just Work.
See the polkit(8) man page for more info.
--
kind regards,
David Sommerseth
then it will be
considerably harder - as that may break your SL installation if you
update some commonly shared libraries.
--
kind regards,
David Sommerseth
gt;
> Does anyone know if this is fixed in 2.2.15 ?
I haven't checked myself, but I presume this command line could give
some qualified clues:
$ rpm -q --changelog httpd
--
kind regards,
David Sommerseth
how did you extract the above information?
>
> When I use a fairly universal method (please see below), I do find
> essentially the same precise64 ... information, but not the RPM version.
>
try: less $RPM_FILE
;-)
There's also some tricks to dump this info using 'rpm' too if you only
have the rpm file available ... but I've forgotten how and I'm too lazy
to look it up now.
But you can use this rpm command on installed RPM packages:
rpm -qi $PACKAGE_NAME
F.ex: rpm -qi firefox
--
kind regards,
David Sommerseth
KVM mailing lists and IRC channels
http://www.linux-kvm.org/page/Lists%2C_IRC
* QEMU mailing lists
http://wiki.qemu.org/MailingLists
> They take questions from the general public. (They
> can get "cranky" though.)
Yeah, I can understand that though ... asking about things in the wrong
list can also cause such issues.
--
kind regards,
David Sommerseth
e missing some needed 32bit libraries, the app server will fail
to start and the logs will hopefully tell you which libraries you're
lacking.
For a starter, you can start by doing: yum install glibc.i686
kind regards,
David Sommerseth
9.03.38/sysconfig.txt fairly
informative and straight to the point - for most files in /etc/sysconfig.
--
kind regards,
David Sommerseth
gt;
> Any idea? I am so tired and out of hand ;-(
NTP. If you run NTP on all your local boxes, you can even make them
point at each other in addition to public NTP servers. And the local
NTP daemons will connect to the ones which have a reasonable and
available clock.
And NTP is kernel independent. So no need to fiddle with kernel
depended tools at all. At minimum, it just needs access to a local NTP
server if no public is available.
kind regards,
David Sommerseth
stic comment quite is far off, at least from my emacs
universe ... and I doubt I'm alone with this opinion ...
--
kind regards
David Sommerseth
some new issues without seeing them so easily.
Rather use --skip-broken on the command line when you can supervise what
you're doing. It should be rather seldom you would need to use this option at
all.
--
kind regards,
David Sommerseth
s to try.
>
> (The website: http://lss-kickstart1.ih.lucent.com is our internal
> rsync'd copy of the SL repo)
As it is your own internal server, you need to ensure that there is no
download restrictions for your SL yum clients.
--
kind regards,
David Sommerseth
clue is to pay attenion
to what happens in Fedora. If it doesn't show up here at all, it's
almost for sure it won't reach RHEL. Fedora is the playground where new
feature are tested out in a bigger scale.
kind regards,
David Sommerseth
nary installations.
kind regards,
David Sommerseth
ccess.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Realtime_Reference_Guide/chap-Realtime_Reference_Guide-Timestamping.html>
But my hunch tells me it's a driver related issue, with some bad locking.
There seems to be several filesystem operations happening on two or more CPU
cores in a certain order which seems to trigger a deadlock.
--
kind regards,
David Sommerseth
#x27;t really matter
if you have IPv6 lookups. Just set IPV6INIT=no. For more information,
see /usr/share/doc/initscripts-*/sysconfig.txt
And btw. Don't be scared of IPv6. When you start implementing it, it
is in many ways far simpler to tackle than IPv4.
--
kind regards,
David Sommerseth
ntext to that directory. Just run as root:
# semanage fcontext -a -t dhcpc_t '/var/cahce/ddclient(/.*)?'
Then you can try the restorecon command again and see if it helps.
--
kind regards,
David Sommerseth
On 16. des. 2013 12:52, jdow wrote:
> On 2013/12/16 02:48, David Sommerseth wrote:
>> On 15. des. 2013 03:13, jdow wrote:
>>> On 2013/12/14 18:05, S.Tindall wrote:
>>>> On Sat, 2013-12-14 at 17:36 -0800, jdow wrote:
>>>>> I kinda wondered if s
On 16. des. 2013 13:57, jdow wrote:
> On 2013/12/16 02:48, David Sommerseth wrote:
>> On 15. des. 2013 03:13, jdow wrote:
>>> On 2013/12/14 18:05, S.Tindall wrote:
>>>> On Sat, 2013-12-14 at 17:36 -0800, jdow wrote:
>>>>> I kinda wondered if s
ariety of OSes and it seems to work pretty decently. The functionality
is also pretty much close to what you'll get from DropBox too.
--
kind regards,
David Sommerseth
on. It's natural you can't run more
current versions of Xfce or other software packages, unless you do a
massive rework with SL packages and other dependencies.
But ... did you want bleeding edge or a stable system? The "inbetween"
comes with EL7, until that begins to age and EL8 comes to market.
--
kind regards,
David Sommerseth
native. But I'd try out what's already
in SL first and see if it covers your need. Most of them are usually
faster than Adobe Reader too.
--
kind regards,
David Sommerseth
happened.
And that's all we on the outside knows. That's the only conclusion we can see
currently.
So please, stop speculating. Unless you have some real facts which proves
things differently.
--
kind regards,
David Sommerseth
.
+1
Nice summary. (despite ignoring that Oracle's spin of CentOS most likely is
more open than what's indicated here)
--
kind regards,
David Sommerseth
- Original Message -
From: "Patrick J. LoPresti"
To: scientific-linux-users@fnal.gov
Sent: Tuesday, January 14,
ttp://www.scientificlinux.org/documentation/faq/distro.versions/view?searchterm=rolling>
Even though it talks about SL3 and SL4, I don't think this has changed for SL5
or SL6.
--
kind regards,
David Sommerseth
exactly what you want instantly.
But I'm just thinking aloud, I might be wrong.
--
kind regardsm
David Sommerseth
aking Thunderbird not
responsive when updating the calendars. I believe this issue was
particularly fixed around TB17 or so. So I'd recommend you to do
benchmarks with all add-ons disabled, if you have anything loaded.
--
kind regards,
David Sommerseth
; releases[1].
>
> [1]: <https://www.scientificlinux.org/documentation/howto/upgrade.6x>
If you have enabled the sl6x repositories, then yes, this is the
expected behaviour.
--
kind regards,
David Sommerseth
e misunderstood it. With Zimbra, it's
just to install the OS, download and install the Zimbra tarball and run
the install script - and you're "done". From now on you can then
configure the rest via the Zimbra admin webUI.
Okay, lets stop now ... As you've probably unders
provide a list of users via a file, containing username and
passwords for fully automated migration.
--
kind regards,
David Sommerseth
out what's they will do, and I guess they're in
contact with CentOS about this too. Let's avoid speculating, it's way
too early for that.
--
kind regards,
David Sommerseth
ervices.
The systemd.unit(5) man page is also quite comprehensive and informative.
--
kind regards,
David Sommerseth
hat simpler too, and you are
always guaranteed that logging goes via systemd, even things which goes
to stdout (and stderr? I don't recall now). A script can easily do odd
tweaks there too.
So by doing as much as possible in the systemd unit file, it gets less
convoluted and a bit easier to
On 11/02/14 02:05, Yasha Karant wrote:
> On 02/10/2014 02:52 PM, David Sommerseth wrote:
>> On 10/02/14 23:02, Tom H wrote:
>>> To see a "complex" systemd service file, take a look at a Fedora 20
>>> nfs-utils; nfsd is started by three lines:
>>>
&
x27;authconfig --enable-sssd
--enable-sssdauth'.
[1] <http://shop.oreilly.com/product/9781565924918.do>
[2]
<https://docs.fedoraproject.org/en-US/Fedora/16/html/System_Administrators_Guide/chap-SSSD_User_Guide-Introduction.html>
--
kind regards,
David Sommerseth
then the client side
requires very little efforts.
The hardest nut to crack, no matter which setup, is getting Kerberos right
and to ensure the needed extra services are running and correctly
configured too. (Having that said, Kerberos gives other neat features too,
such as SSO, especially if enabled on workstations/laptops)
--
kind regards,
David Sommerseth
access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Virtualization_Getting_Started_Guide/>
And another quite good "getting started guide", explaining a more
advanced network setup:
<http://www.cyberciti.biz/faq/kvm-virtualization-in-redhat-centos-scientific-li
On 28/02/14 14:33, jdow wrote:
>
> And for reasons I can't figure out kvm does not work on a Win7 host. (sarcasm)
I'd say that's rather irrelevant, as the subject says installing
virtualbox on SL. Not running SL inside virtualbox on Windows7.
--
kind regards,
David Sommerseth
nager/libvirtd will take care of setting up
the proper arguments to qemu-kvm, for better performance. Also try to
use the virtio drivers wherever possible, as they don't require the
complete hardware emulation layer.
--
kind regards,
David Sommerseth
y good encryption support these
days. So it should be possible.
I'm sorry I don't have any wise pointers right now.
--
kind regards,
David Sommerseth
ownload the source RPM for the running kernel (iirc). Then
you just install the RPM file (can be a non-root user) and go into
~/rpmbuild/SPECS where you do: rpmbuild -bp kernel.spec
--
kind regards,
David Sommerseth
elog of the httpd
package (rpm -q --changelog httpd) and compare it against the changelog of the
upstream apache httpd project.
kind regards,
David Sommerseth
s to be run as root.
I like the call myself option with "su"
I think that's more a hack, which will probably kick-back at you sometime in
the future.
--
kind regards,
David Sommerseth
e the response you already got here:
<http://listserv.fnal.gov/scripts/wa.exe?A2=ind1405&L=scientific-linux-users&T=0&P=1444>
--
kind regards,
David Sommerseth
t;server" (target) and
iscsi-utils on the "client" (initiator)), I would strongly recommend
using a separate network interface for the iSCSI traffic - preferably
back-to-back, to not get too bad network performance.
--
kind regards,
David Sommerseth
> ---
elete the target discovery
information related to the given iSCSI server.
You can do a lot more too, but I won't cover that in this quick setup
guide. The man pages and --help screens to both iscsiadm and tgtd are
fairly good too.
If somebody else finds errors, mistakes or better ways to do t
p and udp)
on all my boxes when they're not on a network I fully trust. And I also
carefully configure avahi-daemon (/etc/avahi/avahi-daemon.conf) too, if I want
avahi-daemon running.
[2] <http://en.wikipedia.org/wiki/Zero_configuration_networking#Security_issues>
--
kind regards,
David Sommerseth
n order to secure these
services?
(iptables, mod_security for Apache, chroot, SELinux, etc, etc, process
uid/gid)
- Who can access these services?
--
kind regards,
David Sommerseth
tack size can sometimes
be too small for XFS.
[1] <https://lwn.net/Articles/600644/>
--
kind regards,
David Sommerseth
epos enabled and upgrade to minor versions manually, and
(hopefully) in a more controlled manner.
--
kind regards,
David Sommerseth
say that if you take the
best racing driver from the 60s and put him into a racing car of this
century, he probably won't win a race. Because the technology has
evolved. We need tools and drivers of the new technology to be in sync.
So I encourage people to give systemd a fair chance. Accept that it
does things differently, and see how it can be used to reach your goals.
Hopefully you'll see what I've seen so far, that it actually works
quite well.
--
kind regards,
David Sommerseth
On 26/08/14 14:01, Steven Haigh wrote:
> On 26/08/2014 9:42 PM, David Sommerseth wrote:
[...snip...]
> Ok, so off the top of my head, the following is broken with systemd as
> of right now:
>
> 1) Logwatch doesn't work at all with journals.
>
> 2) You can't
ed-hat-enterprise-mrg-realtime/>
If you can get hold of the SRPMS, it should be fairly easy to do a
build, even using mock.
--
kind regards,
David Sommerseth
But I don't know if this has come any
further.
<http://lwn.net/images/conf/rtlws11/papers/proc/p18.pdf>
--
kind regards,
David Sommerseth
x/rx threads) - But also not too high priorities,
otherwise it may block important kernel threads doing their job. But
doing this correctly, you can get really good results.
--
kind regards,
David Sommerseth
stall --enablerepo fedora --installroot /opt/fedora-root @core
(given that you have the fedora repos handy)
When that's done, you could just do:
chroot /opt/fedora
yum localinstall $PKG
At least in theory :)
--
kind regards,
David Sommerseth
On 31/08/14 10:50, Yasha Karant wrote:
On 08/30/2014 12:17 PM, David Sommerseth wrote:
It's a hack ... but you could probably install a newer Fedora or SL7
user-space into a chroot and run the application from that chroot. Look at
--installroot in yum. You just need to have the proper
workManager
uses wpa_supplicant under the hood even nowadays.
This might provide some better clues on the wpa_supplicant config files:
http://wiki.centos.org/HowTos/Laptops/WpaSupplicant
http://wiki.gentoo.org/wiki/Wpa_supplicant#WPA2_with_wpa_supplicant
--
kind regards,
David Sommerseth
builds happens
in a mock chroot with the proper compiler and libraries installed for
that distro.
For anyone who haven't played with mock, I can highly recommend it!
--
kind regards,
David Sommerseth
is easier to ensure the commits
have not been modified by a MITM.
A fairly well written blog about these features can be found here:
<http://mikegerwitz.com/papers/git-horror-story>
--
kind regards,
David Sommerseth
Hat_Enterprise_Linux/6/html/Installation_Guide/s1-kickstart2-options.html>
Another interesting source is also the copy of the "kickstart" anaconda saves
in /root/anaconda-ks.cfg on installed servers. You'll see all the
partitioning commented out there too. That might give even more clues too.
--
kind regards,
David Sommerseth
er instead - and the rest of my boxes
(even DHCP server) didn't need to be updated. At home, things are
definitely in a better state now than before.
For NTP, as long as the clocks on all boxes are in sync, there's really
no need to worry about that. But once clocks are more than 5 minutes
(IIRC) out of sync against the IPA server, authentication may fail. I
even think the time scew tolerance is configurable too.
--
kind regards,
David Sommerseth
right approach. But systemd have different levels of
dependencies. I recommend you to check the dependency you used against man
systemd.unit. Check out After=, Requires= and Requisite=.
--
kind regards,
David Sommerseth
e the setup/configuration is always persistent - for the times
if an abrupt reboot happens.
--
kind regards,
David Sommerseth
that Red Hat has provided . It is built
>> from the same source that all rebuilds can build from. There is no
>> such thing as "RHEL packaged CentOS source" .
>>
>> --
>> Connie J. Sieh
>> Computing Services Specialist III
>>
>> Fermi National Accelerator Laboratory
>> 630 840 8531 office
>>
>> http://www.fnal.gov
>> cs...@fnal.gov
>>
> Please correct me if I am in error. RHEL, binary licensed for fee,
No, you are wrong. You pay for a subscription, which may include
updates, support and so on, depending on what you sign up for. You
don't pay for a license at all, only subscription. Which is what Red
Hat calls it all over their site.
<https://www.redhat.com/wapps/store/catalog.html>
> is built from a source that RH does not seem to release.
<ftp://ftp.redhat.com/pub/redhat/linux/enterprise/7Server/en/os/README>
--
kind regards,
David Sommerseth
--
kind regards,
David Sommerseth
On 03/02/15 17:12, Yasha Karant wrote:
> To be clear, the legal language may be "license for fee", "subscription
> for fee", or "stand on your head for fee". The operative language is
> "FEE". The RHEL 7 binary executable and the RPM updates are not
> available from Red Hat (not CentOS, SL, etc.
ipset. When I installed the ugly closed source drivers from
nvidia (via elrepo, iirc), SL7 began to behave nicely again. However,
it seems plymouth gets cranky with those drivers and it freezes when it
asks for the harddrive decryption passwords. So I removed 'rhgb' from
the kernel command line, and it behaves somewhat more predictable.
--
kind regards,
David Sommerseth
done such big gaps like you're doing here, but I'd expect
this would work just as well.
--
kind regards,
David Sommerseth
powerful tools, and suddenly pure Windows-admins might
not be that afraid of to start getting familiar with Linux
systems.
[1] <http://cockpit-project.org/>
--
kind regards,
David Sommerseth
> From: "John Lauro"
> To: "David Sommerseth"
> Cc: "scientific-linux-users" ,
> kei...@kl-ic.com
> Sent: 15. februar 2015 14:33:25
> Subject: Re: systemd (again)
>
> Sounds just what hackers would like. A nice web interface that
> do
On 15/02/15 13:11, David Sommerseth wrote:
>
> I was recently at devconf.cz where Cockpit was presented. That
> provides a really neat way of system management via a
> web-browser and makes use of several systemd features. It is
> now shipped by default in Fedora 21, but I'
ndy. And since I'm using IMAP and a
proper maildir setup for "incomming" mails, I'm not even bound to
Thunderbird if I decide to switch to something else.
--
kind regards,
David Sommerseth
dinary hard drive). To
have better data security, the ordinary hard drive(s) can be an md-raid
device.
Maybe dm-cache can provide the best from SDD, HDD and RAID combined?
Just my 2 cents.
--
kind regards,
David Sommerseth
have released security updates when that
has been needed. I've not caught that they've changed their involvement
here:
"NOTE: Adobe Flash Player 11.2 will be the last version to target Linux
as a supported platform. Adobe will continue to provide security
backports to Flash Player
On 07/05/15 03:51, Jeff Siddall wrote:
> On 05/06/2015 09:33 PM, ToddAndMargo wrote:
>> Thank you. I will have to get over my phobia of software
>> RAID.
>
> FWIW I have used SW RAID1 for years (maybe decades by now) on all sorts
> of systems. It has saved me many times and never burned me.
>
>
rther instability. But as always, YMMV.
On 20 May 2015 05:29:12 CEST, ToddAndMargo wrote:
>Hi All,
>
>Despite Red Hat's assurance that EL6 will be supported
>till 2020, I am finding a lot of stuff that Red Hat
>is not willing to fix in EL6, but is going to or already has
>fixed in EL7.
--
kind regards,
David Sommerseth
the Windows desktop.
<https://github.com/FreeRDP/FreeRDP/wiki/RemoteApp>
--
kind regards,
David Sommerseth
d them, as I do penetration testing for
>PCI (credit card security).
>
>Does Docker do Coherence (seamless windows)?
Maybe this systemd article can give you some ideas?
< http://0pointer.net/blog/systemd-for-administrators-part-xxi.html>
Should be possible to kick off a systemd managed container with EL6 in a
similar way too, from an EL7 host.
--
kind regards,
David Sommerseth
s/gedit whatever.spec
$ rpmbuild -bs whatever.spec
Remeber that you should normally increase the Release tag number and add an
entry in the %changelog section towards the end. You can alsorun rpmlint on the
spec file to do some sanity checks.
--
kind regards,
David Sommerseth
On 23 May 2015 06:16:23 CEST, ToddAndMargo wrote:
>On 05/20/2015 03:36 PM, David Sommerseth wrote:
>> That means that once a new major release of RHEL is out, it aims to
>be rock solid and stable for a long time
>
>
>Sometimes. Other times it freezes bugs and instabilitie
release. But
that fix won't hit RHEL until there is a RHEL bugzilla on this issue. That is
what triggers a process where Red Hat will evaluate if and how to fix that
issue in RHEL.
--
kind regards,
David Sommerseth
ded security patches. The same goes for EL7.
<https://www.mozilla.org/en-US/firefox/organizations/>
--
kind regards,
David Sommerseth
st. The advantage here is that when you
upload updated packages to your web server and run createrepo again, all your
boxes gets updated automatically next time the yum update job runs (unless
you've disabled the auto update, then running 'yum update' or the gnome/kde
update app
With systemd, there is a dbus API available, which is all cockpit depends on.
So writing other UIs for systemd should be far easier than most other
alternatives.
--
kind regards,
David Sommerseth
1 - 100 of 234 matches
Mail list logo
