devel June 2014

devel@lists.centos.org

115 participants
109 discussions

CentOS 7 Public QA: CentOSPlus kernel available for testing
by Akemi Yagi 27 Jun '14

27 Jun '14

The first version of the centosplus kernel for 7 is now available for testing. The kernel version is 3.10.0-123.el7 (GA kernel). You can download it from: http://buildlogs.centos.org/c7-plus/kernel-plus/ Or use yum with a .repo file similar to: [c7-kernel-plus] name=CentOS Open QA - CentOSPlus baseurl=http://buildlogs.centos.org/c7-plus/kernel-plus enabled=1 gpgcheck=0 Up to CentOS 6, the centosplus kernel has been distributed with a repotag '.centos.plus'. The 7 version has the same tag but the name is now 'kernel-plus'. Its name space is separate from the distro kernel. This was done to keep with other kernel names such as 'kernel-xen' (being planned for 7) and 'kernel-ml' (available for 7), etc. The C7 plus kernel should work with Secure Boot enabled just like the distro kernel. Extra features enabled in the config file include some network adapters, BusLogic, IPX, Appletalk, and ReiserFS. TOMOYO and AppArmor are also enabled but SeLinux remains the default. Please test the following: - Install/uninstall in UEFI mode (with or without Secure Boot enabled) or in BIOS mode. - Install the -devel, -headers, -tools etc packages. - Load [and use] modules/features that are unique to the plus kernel. - and so on. Feedback greatly appreciated. Happy testing! Akemi

4 6

Just curious about accounts on the cbs
by Pat Riehecky 27 Jun '14

27 Jun '14

Just wondering what authentication software you were looking at. These days, I've found FreeIPA to be surprisingly feature rich (and bundled with the OS!). -LDAP -Kerberos -Certificates -Multi-Master replication -Password policies All built in! There is a Samba hook too, but I'm not sure that is relevant here.... The FreeIPA devs are also very nice people who've been receptive to feature requests. Mostly I'm just curious what people are thinking ..... Pat -- Pat Riehecky Scientific Linux developer http://www.scientificlinux.org/

2 2

CentOS 7 and release numbering
by Karanbir Singh 26 Jun '14

26 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi, Taking on board the community and environment expansion that is taking place around the CentOS project, the CentOS Board has been considering how best to accomodate these efforts. I'm attaching here a plan put forward by the board towards that aim. Thoughts ? Comments ? - - KB - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlOSYF4ACgkQMA29nj4Tz1usTwCgr9K0th6XcMzSmjGQvwnbeeiR KhsAn36gaRbCuGoGzqEa2TN+TDFEEZjR =GbVM -----END PGP SIGNATURE-----

45 146

Community build system
by Thomas Oulevey 26 Jun '14

26 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi All, The initial idea is to configure Koji and make it available to the community. Thanks to Karanbir/Fabian we already got the hardware and installation is on going. But first, we would like to ask for feedback: 1/ PKI setup, a proposal: - - koji-web use a certificate signed by an external CA (and obviously trusted) - - the rest of the koji architecture (hub and kojid) will use a self-signed CA that we'll use to also generate other certs. The proposal is to gpg encrypt the CA within a non-public GIT repo. Talking with Fabian, he already use this method for other infrastructure project. - - the clients (at the beginning git.c.o) will use self-signed CA. This need to be discussed in the light of future integration of different user facing tools (koji, git, etc...) and if we want to provide koji client accesses, as Fedora project does. 2/ Hostnames to use: - - After a round on #centos-devel, cbs.centos.org was the best we can come up with. Comments ? - - For the builders machine, we should decide on a decent naming as this info appears in RPM metadata. i.e : builder01.cbs.centos.org, builder02.cbs.centos.org, etc... Do we want to deal with different "architecture family" within the name (e.g ARM) ? i.e : x86-builder01.cbs.centos.org, arm-builder01.cbs.centos.org Your comments are very welcome! cheers, - -- Thomas 'alphacc' Oulevey -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTrBiUAAoJEH2Wn86OP8Ni5xYH/jYyRN+gr6r8v8zih/yF7fOi INws9FC9+U+kP1r9Wsfg6Ge92uQJdX7t5G6Oom89ZcHoshVY685Cv647Es5ySkMP ls5NBXQu92l5QcXFOSP6gcThOyd7bO7Kh5onziULmIkdDWkEdz12kBPI2bVPQqwI JrZVTwvHSEN+5sVBccMKGYmiqFhs/qt12i/EaK2bvWCs/CRcrjyKJiHhlej3Zo+7 nSo8pwFCsq2T08FWfvnWYfjzFs8RmpFclBGakYRRyKk74TV63jKExqAL1zJGhaSF yZxYt8XZeXrv5fdxXtKzA0WL8rf3tKN0rRC/mMcQUo28OaN53Wxuzw/YCRnN0po= =2Hqy -----END PGP SIGNATURE-----

7 10

[PATCH 0/3] Somewhat standardize overrides and on getopt
by Pat Riehecky 26 Jun '14

26 Jun '14

From: Pat Riehecky <riehecky(a)fnal.gov> These three patches try and create a generic interface for some basic overrides, drawing from get_sources.sh I've also updated get_sources.sh to utilize getopt for arg parsing Pat Riehecky (3): Allow overrides of $RHELAUTHOR May want to set defaults from the override file.... Refactor to use getopt for arg parsing get_sources.sh | 151 ++++++++++++++++++++++++++++++++++++------------ show_possible_srpms.sh | 11 +++- 2 files changed, 122 insertions(+), 40 deletions(-)

2 4

Subject=Re: secure boot comments
by Keivan Motavalli 26 Jun '14

26 Jun '14

I downloaded and burned livecd-centos-7-live-gnome-201406261459.iso (checking its hashsum). It does boot flawlessly on a lenovo thinkpad T430-2349H3G using uefi only and secureboot enabled. modsign-uefi throws "Couldn't parse DBX signatures: -74", but the boot process continues. The live image, however, is not usable, neither textually nor graphically. The laptop comes with an integrated 3G modem, "Ericsson HSPA+ WWAN Minicard (H5321gw)". modem-manager.service fails to start, and subsequently also "systemd-logind.service" repetitively fails to starts, leaving the system in an unusable state, without any working tty and/or display manager. IMHO, systemd-logind tries to start getty on one of the 3g modem serial interfaces, probably not recognizing it as one, thus failing. disabling the integrated modem and wlan adapter via a physical switch is a workaround to the issue. This seems to be a fedora 19-20 bug gone unfixed into RHEL7.

2 1

EL 7 Extras Test BUild
by Johnny Hughes 26 Jun '14

26 Jun '14

EL7 Extras contain docker and the things to make it work, including several golang-* RPMs. It seems that the golang addon packages (golang-github-coreos-go-systemd-0-0.4.git9d69345.el7.src.rpm, golang-github-godbus-dbus-0-0.1.gitcb98efb.el7.src.rpm, golang-github-gorilla-context-0-0.22.git708054d.el7.src.rpm, golang-github-gorilla-mux-0-0.11.gite718e93.el7.src.rpm, golang-github-kr-pty-0-0.19.git98c7b80.el7.src.rpm, golang-github-syndtr-gocapability-0-0.5.git3454319.el7.src.rpm, golang-googlecode-net-0-0.12.hg84a4013f96e0.el7.src.rpm, golang-googlecode-sqlite-0-0.9.hg74691fb6f837.el7.src.rpm) were built before the final golang-1.2.1-3.el7.src.rpm that is in git.centos.org. We have seen in the past where Red Hat uses interim staged packages that are older (and not published) in their build systems for development, and that the released SRPMs build on those older staged packages but not the released ones. As I said, we have seen this in the past and it was one of the main reasons that we could not get all of CentOS-6.0 to build properly before. So, how this is relevant now is that several of those addon golang packages (and docker) do not build with the RPMs provided by building golang-1.2.1-3.el7.src.rpm. After talking with the golang maintainer and some people who worked on the golang and docker packages via email, while I could not look inside the build trees (we don't have access to any of that for RHEL products), I did get conformation that the packages in EL7 extras were built on older versions of golang that 1.2.1-3 and that golang-1.2.1-3 is in the middle of a process to transition things to a new set of packages instead of most things directly in the one main RPM. I was also pointed to golang.el7 rpms here as potential versions that would work: http://koji.fedoraproject.org/koji/packageinfo?packageID=16224 The greatest specific version of golang required to build the packages of EL7 Extras (docker-0.11.1-19.el7.src.rpm) is golang >= 1.2-7 (see the spec file for the golang BuildRequires): https://git.centos.org/blob/rpms!docker.git/b28b51e15aa6779281060b1e61368d9… So, looking for golang-1.2-7.el7 put me here: http://koji.fedoraproject.org/koji/buildinfo?buildID=499629 I downloaded that SRPM (golang-1.2-7.el7.src.rpm) and built it into c7-extras instead of the 1.2.1-3 version and then rebuilt all the other golang-* SRPMs from git.centos.org into c7-extras as well. They all built OK against golang 1.2-7. I then built all the other things that are in EL7 Extras into c7-extras and the final result is here: http://buildlogs.centos.org/c7-extras/ Here is a bug filed on this issue for reference: http://bugs.centos.org/view.php?id=7252 So, the short summary is, please test the c7-extras in the buildlogs repo ... it has the same version of packages built from git.centos.org except for golang, where I had to get version 1.2-7 from EPEL. All the SRPMs, buildlogs, mock configs, etc used are available for review from the buildlogs.centos.org link above. Lets get this tested and it is certainly considered a test build. Hopefully newer versions of everything will be out soon so we can build / use the RHEL version of golang and we are likely not to officially release these packages until then, although if these packages work for you feel free to use them. Thanks, Johnny Hughes

5 7

ipa-server package and sort of branding issue
by Gianluca Cecchi 26 Jun '14

26 Jun '14

Hello, I'm configuring ipa server on CentOS 6.5 and I notice that when the ipa-server-install command configures ntp.conf it puts inside "rhel" for pool of ntp servers instead of "centos". ### Added by IPA Installer ### server 0.rhel.pool.ntp.org server 1.rhel.pool.ntp.org server 2.rhel.pool.ntp.org The rpm involved is ipa-server-3.0.0-37.el6.x86_64 and the file involved is /usr/lib/python2.6/site-packages/ipaserver/install/ntpinstance.py where there is this if conditional statement # We use the OS variable to point it towards either the rhel # or fedora pools. Other distros should be added in the future # or we can get our own pool. os = "" if ipautil.file_exists("/etc/fedora-release"): os = "fedora" elif ipautil.file_exists("/etc/redhat-release"): os = "rhel" So I think this should be changed in something like os = "" if ipautil.file_exists("/etc/fedora-release"): os = "fedora" elif ipautil.file_exists("/etc/centos-release"): os = "centos" What do you think? Possibly valid for rhel 7 too, but not already tested. Gianluca

4 4

missing packages from buildlogs repo
by Bojtos Péter 26 Jun '14

26 Jun '14

Hi all, I tried to built some RHEL packages for i686 architecture. I tried to use the i686 packages here: http://buildlogs.centos.org/centos/7/os/x86_64-latest/ The build did not succeed, since several packages are missing. (that's ok since Red Hat dropped i686 support) The interesting part is that there is the source package cracklib , which produces the following packages: cracklib, cracklib-devel, cracklib-dicts, cracklib-python. Cracklib and cracklib devel is in the repo for i686 but the other two packages are missing. How can it be? Did I miss some information about populating the repo? Thank you, Peter Bojtos ULX Ltd.

3 7

Docker images for CentOS-7qa are now available
by Karanbir Singh 26 Jun '14

26 Jun '14

Hi, http://buildlogs.centos.org/centos/7/docker/ has docker images, along with a sha256sum to validate the image. Its a 32MB payload size. Note that since its built from the centos7qa tree's - there is no yum.conf present inside. -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel June 2014