Arm-dev August 2015

arm-dev@lists.centos.org

14 participants
35 discussions

nf_conntrack: automatic helper assignment is deprecated
by Robert Moskowitz 31 Aug '15

31 Aug '15

On booting te Centos pre-alpha on my Cubietruck I always see: [ 42.855609] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. I see both firewalld and iptables installed on the original image.

2 1

Cubieboard2 eth0 link bounced?
by Robert Moskowitz 31 Aug '15

31 Aug '15

[ 3290.069352] stmmaceth 1c50000.ethernet eth0: Link is Down [ 3292.074401] stmmaceth 1c50000.ethernet eth0: Link is Up - 100Mbps/Full - flow control rx/tx Why? I am plugged into an HP2524 switch. Quite a good switch; not some $5 special.

1 1

Cubieboard2 - selinux testing
by Robert Moskowitz 31 Aug '15

31 Aug '15

So I set selinux to 'permissive' and rebooted. Took some time and a few interesting messages occured on the serial console like: [ 132.847434] systemd-readahead[302]: open(/etc/selinux/targeted/modules/active/policy.kern) failed: Too many levels of symbolic links Finally get the login prompt and log in on the serial console as root. I then move sshd to a different port. I have been doing this for years and know the selinux secret codes. First I need to: yum install policycoreutils-python Then: semanage port -a -t ssh_port_t -p tcp 745 firewall-cmd --permanent --add-port=745/tcp firewall-cmd --reload vi /etc/ssh/sshd_config <- change port to 745, and that is not the real port number I use. systemctl restart sshd.service After the semanage command I got: [ 310.545666] SELinux: Permission audit_read in class capability2 not defined in policy. [ 310.554040] SELinux: Class binder not defined in policy. [ 310.559671] SELinux: the above unknown classes and permissions will be allowed But I am able to ssh into my server. So are these messages an indicator that things are not right? I of course want to move on the selinux 'targeted' to get this secure. I plan on putting bind on this unit and have it for my testing dns server. Advise?

1 0

Cubieboard2 sata boot
by Robert Moskowitz 31 Aug '15

31 Aug '15

I am booted off sata by doing the following: I took David's image: http://www.mininodes.com/uploads/cubieboard2-centos-image.img.tar.gz And first dd it to a 4Gb mSD card. I used gparted to delete all three partitions. This way I was assured to get the uboot David used. Then I dd it to a 80Gb sata drive. I use gparted to increase the size of the / partition. I put the uboot only mSD card in the slot and attached to sata drive and it booted right up. Here is what the serial console showed. U-Boot SPL 2015.07-rc1-00513-g5bcec54 (Jun 17 2015 - 13:48:34) DRAM: 1024 MiB CPU: 912000000Hz, AXI/AHB/APB: 3/2/2 U-Boot 2015.07-rc1-00513-g5bcec54 (Jun 17 2015 - 13:48:34 +0530) Allwinner Techn ology CPU: Allwinner A20 (SUN7I) I2C: ready DRAM: 1 GiB MMC: SUNXI SD/MMC: 0 *** Warning - bad CRC, using default environment HDMI connected: Setting up a 1920x1080 hdmi console In: serial Out: vga Err: vga SCSI: SUNXI SCSI INIT Target spinup took 0 ms. AHCI 0001.0100 32 slots 1 ports 3 Gbps 0x1 impl SATA mode flags: ncq stag pm led clo only pmp pio slum part ccc apst Net: eth0: ethernet@01c50000 starting USB... USB0: USB EHCI 1.00 USB1: USB OHCI 1.0 USB2: USB EHCI 1.00 USB3: USB OHCI 1.0 scanning bus 0 for devices... 1 USB Device(s) found scanning bus 2 for devices... 1 USB Device(s) found scanning bus 1 for devices... 2 USB Device(s) found scanning bus 3 for devices... 1 USB Device(s) found Hit any key to stop autoboot: 0 switch to partitions #0, OK mmc0 is current device ** Invalid partition 1 ** scanning bus for devices... Device 0: (0:0) Vendor: ATA Prod.: WDC WD800BEVS-75 Rev: 04.0 Type: Hard Disk Capacity: 76319.0 MB = 74.5 GB (156301488 x 512) Found 1 device(s). SCSI device 0: Device 0: (0:0) Vendor: ATA Prod.: WDC WD800BEVS-75 Rev: 04.0 Type: Hard Disk Capacity: 76319.0 MB = 74.5 GB (156301488 x 512) ... is now current device Scanning scsi 0:1... Found /extlinux/extlinux.conf Retrieving file: /extlinux/extlinux.conf 327 bytes read in 57 ms (4.9 KiB/s) Ignoring unknown command: ui Ignoring malformed menu command: autoboot Ignoring unknown command: totaltimeout centos Options 1: centos Enter choice: 1: centos Retrieving file: /initramfs-4.0.0-1.el7.armv7hl.img 66687488 bytes read in 1838 ms (34.6 MiB/s) Retrieving file: /vmlinuz-4.0.0-1.el7.armv7hl and so forth. So looks good.

1 0

My test platforms
by Robert Moskowitz 28 Aug '15

28 Aug '15

I only have one Cubietruck available for testing purposes. I have 2 - 4 Cubieboard2 units. To date, all of my work has been on this one Cubietruck. If I had an image for the Cubieboard2, I would put those into play. For example, I need a DNS server for my Samba development. I have that running on a F22 C2 right now. If I had a C2 image to work with, I would spin that up to replace F22. I did see that there was a successful test on the C2, but nowhere to get the image. Though if I DO spin up more platforms, I am going to have to get another Anker multi-port power supply: http://www.amazon.com/Anker-PowerPort-Charging-Multi-Port-Charger/dp/B00VH8… I see they have come down $6 since I bought one last October. These work great in powering 5 Cubieboards each. But DON'T plug in a phone as well, or the smart logic will reduce the Amps to the Cubieboards to 1A which is bad.

2 4

phpmyadmin
by Robert Moskowitz 28 Aug '15

28 Aug '15

I have installed mariadb to develop the dns backend. Still researching what tables are needed, but... I would like to have phpmyadmin, but that is part of epel. Could we at least start with the noarch rpms from epel7 (there IS an epel7?) and grow from there? I suppose I can bring in the epel7 repo and carefully install only noarch rpms...

3 9

Re: [Arm-dev] phpmyadmin
by Gordan Bobic 28 Aug '15

28 Aug '15

On 2015-08-28 13:01, Robert Moskowitz wrote: > On 08/28/2015 12:48 AM, Nicolas wrote: > >> Hello >> >> There is an epel for C7, but not yet for arm. That's why I've >> compiled some epel packages I need on myself :-) > > Take all the noarchs and use createrepo to start the epel7-arm. Then > add what you have compiled, and let me know where to access this repo. > >> I've tried to contact epel to see if they are working on arm repo >> but no answers > > No supprise there. I tried that back when I was working with the > epel-rsel6. They were rather negative on adding yet another epel > repo. I kind of understand; who is the maintainer? Pro tip: You can probably get away with using any missing packages from F19 armv7hl, F19 and EL7 are very, very similar. F17 armv5tel packages on RSEL7 are also likely to work. Just bear in mind that those packages will be unmaintained as those distros are EOL so you will be on your own for any security patches for them. Gordan

3 2

Packages compiled
by Nicolas Repentin 28 Aug '15

28 Aug '15

Hello I don't want to spam, but until I have access the build farm and repos (I know it's in progress :)), I tell you the new packages I have compiled today on my repo, in case someone need it before it goes to the central repo. 389-ds-base-1.3.3.1-20.el7.centos.armv7hl.rpm 389-ds-base-debuginfo-1.3.3.1-20.el7.centos.armv7hl.rpm 389-ds-base-devel-1.3.3.1-20.el7.centos.armv7hl.rpm 389-ds-base-libs-1.3.3.1-20.el7.centos.armv7hl.rpm cheese-3.8.2-7.el7.centos.armv7hl.rpm cheese-debuginfo-3.8.2-7.el7.centos.armv7hl.rpm cheese-libs-3.8.2-7.el7.centos.armv7hl.rpm cheese-libs-devel-3.8.2-7.el7.centos.armv7hl.rpm libreport-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-anaconda-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-centos-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-cli-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-compat-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-debuginfo-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-devel-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-filesystem-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-gtk-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-gtk-devel-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-newt-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-plugin-bugzilla-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-plugin-kerneloops-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-plugin-logger-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-plugin-mailx-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-plugin-mantisbt-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-plugin-reportuploader-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-plugin-rhtsupport-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-plugin-ureport-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-python-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-rhel-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-rhel-anaconda-bugzilla-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-rhel-bugzilla-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-web-2.1.11-23.el7.centos.0.1.armv7hl.rpm libreport-web-devel-2.1.11-23.el7.centos.0.1.armv7hl.rpm and abrt for tomorrow (in progress). Availables on http://repo.shivaserv.fr/centos/7/shivaserv-C7base.repo Regards, -- Nicolas Repentin <nicolas(a)shivaserv.fr>

2 1

armv7l pre-alpha - selinux
by Robert Moskowitz 28 Aug '15

28 Aug '15

I see selinux is disabled in this pre-alpha image. Are there concerns running selinux on armv7 or is this simply a matter of get something together and then get everything working? I understand that there are 'issues?' enabling selinux on armv5, or is it a kernel, not hardware issue? My F22 system is running selinux enforceing. Should I turn on selinux on this pre-alpha? One of the reasons for the question is for bind9 - do I count on selinux or do I run it chrooted?

2 2

DIfference between bind C7-intel and C7-arm?
by Robert Moskowitz 28 Aug '15

28 Aug '15

Look over at: https://www.centos.org/forums/viewtopic.php?f=48&t=53761 This poster at least has a C7 bind with dlz support. On the bind I got in my Cubietruck pre-alpha (had to do a yum install bind), bind -V does not list any dlz options. Can someone with access to the building check this out? Perhaps also check out the aarch64 bind? I really need dlz support, or so it seems, for Samba4 AD.

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

Arm-dev August 2015