devel January 2015

devel@lists.centos.org

55 participants
51 discussions

kickstart extra minimal
by Marcos Carraro 17 Jan '15

17 Jan '15

Hay Group, happy new year !! I am looking to make a very small kickstart to try to leave the installation of very light hundreds. Both for use of RAM and also to disk. Follow my kickstart for hundreds 6.6 x64, any suggestions? install text reboot cdrom // Caso a instalação vai ser por CD/DVD Descomente esta linha; lang en_US.UTF-8 // Eu utilizo a linguagem Ingles, caso deseja alterar use pt_BR.UTF-8 keyboard br-abnt2 // Já o teclado utilizo abt2 skipx network --device eth0 --bootproto dhcp rootpw a12345 // Senha Default do ROOT firewall --disabled // Firewall já desativado selinux --disabled // SElinux desativado authconfig --enableshadow --enablemd5 timezone UTC bootloader --pasword=abc123 --location=MBR --append="crashkernel=auto rhgb quiet" %packages --nobase #use the next line instead of the previous one if you do not care about the doc files #%packages --nobase --excludedocs coreutils yum rpm e2fsprogs lvm2 grub openssh-server openssh-clients dhclient -anacron -autofs -yum-updatesd -wireless-tools -irda-utils -nfs-utils -NetworkManager -atmel-firmware -b43-openfwwf -cronie -cronie-anacron -crontabs -cyrus-sasl -info -sudo -sysstat -yum-utils -ipw2100-firmware -ipw2200-firmware -ivtv-firmware -iwl1000-firmware -iwl3945-firmware -iwl4965-firmware -iwl5000-firmware -iwl5150-firmware -iwl6000-firmware -iwl6050-firmware -libertas-usb8388-firmware -rt61pci-firmware -rt73usb-firmware -mysql-libs -zd1211-firmware // Programas Extras tar vim-enhanced vim-common %end %post --log=/root/my-post-log exec < /dev/tty3 > /dev/tty3 chvt 3 echo echo "##################################" echo "# Aplicando configuração Pós Instalação #" echo "##################################" yum update –y chvt 1 %end *--* Att Marcos Carraro about.me/marcoscarraro

9 30

livecd-tools in Extras
by Thomas Oulevey 16 Jan '15

16 Jan '15

Hello, For CentOS 7 I rely, at work for our minimal pxe image, on the livecd-tools that are provided by Fabian: http://people.centos.org/arrfab/CentOS7/LiveMedia/RPMS/ I would like to know if there is a plan to maybe ship these RPMs in centos Extras (http://mirror.centos.org/centos/7/extras/) ? Is there strong opinions against this idea ? What do you think ? Is it useful to more people ? thanks for the feedback, -- Thomas.

4 3

json file used to build the ostree repo
by Karanbir Singh 16 Jan '15

16 Jan '15

hi, This is the json file used to build the ostree repo at : http://buildlogs.centos.org/centos/7/atomic/x86_64/repo/ centos-atomic-cloud-docker-host.json { "include": "centos-atomic-base.json", "ref": "centos/7/atomic/x86_64/cloud-docker-host", "packages": ["tuned", "man-db", "man-pages", "bash-completion", "rsync", "tmux", "net-tools", "nmap-ncat", "bind-utils", "git","sysstat", "policycoreutils-python", "setools-console", "docker","audit", "cloud-init", "cloud-utils-growpart", "cockpit", "kubernetes", "etcd", "cadvisor", "flannel","centos-release-atomic"], "units": ["docker.service", "cockpit.socket"] } and centos-atomic-base.json { "comment": "CentOS 7 Base Atomic Defs", "osname": "centos-atomic", "ref": "centos/7/atomic/x86_64/base", "repos": ["base", "updates," "extras," "atomic7-testing", "virt7-testing"], "selinux": true, "bootstrap_packages": ["filesystem", "glibc", "nss-altfiles", "shadow-utils","centos-release", "kernel", "rpm-ostree", "lvm2"], "packages": ["syslinux-extlinux", "e2fsprogs", "xfsprogs", "selinux-policy-targeted", "audit","openssh-server", "openssh-clients", "sudo","passwd", "NetworkManager", "vim-minimal"], "default_target": "multi-user.target" } -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

2 3

CentOS Atomic host repo now has nightly updates
by Karanbir Singh 16 Jan '15

16 Jan '15

hi, the CentOS Atomic Host repo is now getting nightly updates. These are done automatically, and pushed to the repo location on buildlogs.centos.org/centos/7/atomic/x86_64/repo In order to apply the updates, login to your atomic host and run : sudo rpm-ostree upgrade You can also see the Atomic history and rollback options via: sudo atomic status In order to compare available rollback options, you can use the 'atomic rpm diff' and 'atomic rpm list' commands. Finally, you can rollback the changes using this atomic command; details on the process are mentioned in the man page available via 'man atomic' on the machine instance. ------- The repo is updated with all devel components going into the Atomic host, including docker, cockpit, flannel, kubernetes and rpm-ostree itself. Additionally, all CentOS Linux 7 updates are included as well. Highlights from todays update include: cockpit 0.27 docker 1.4 kubernetes 0.7.0 ostree 2014.13 kernel 3.10.0-123.13.2.el7 and added to the collect is : flannel 0.1.0 -------- Getting Started with CentOS Atomic Host is easy, the image is shipped as a qcow2.xz file ( 270MB in size ) and can be downloaded from http://buildlogs.centos.org/rolling/7/isos/x86_64/CentOS-7-x86_64-AtomicHos… this image includes cloud-init, and therefore expects cloud metadata to be available when the instance is booted up. You can find details on howto setup an iso file with this informat at : http://www.projectatomic.io/blog/2014/10/getting-started-with-cloud-init/ Enjoy! -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

4 5

Meeting logs from Cloud SIG weekly meeting
by Kushal Das 15 Jan '15

15 Jan '15

=============================== #centos-devel: CentOS Cloud SIG =============================== Meeting started by kushal at 15:02:20 UTC. The full logs are available at centos-devel/2015/centos-devel.2015-01-15-15.02.log.html . Meeting summary --------------- * Last meeting's action items. (kushal, 15:05:15) * tstclair thinks mesos may be a better fit for EPEL. (kushal, 15:08:19) * ACTION: rbowen will write to the RDO community about helping us on Juno on EL6 and for future releases. (kushal, 15:22:24) * LINK: https://www.redhat.com/archives/rdo-list/2015-January/msg00066.html <-- there it is. (rbowen, 15:22:26) * LINK: https://www.redhat.com/mailman/listinfo/rdo-list (kushal, 15:25:49) * ACTION: kbsingh will find some box for number80 for a RDO install (kushal, 15:32:01) * ACTION: number80 will do the RDO install on that box (number80, 15:32:22) Meeting ended at 15:42:26 UTC. Action Items ------------ * rbowen will write to the RDO community about helping us on Juno on EL6 and for future releases. * kbsingh will find some box for number80 for a RDO install * number80 will do the RDO install on that box Action Items, by person ----------------------- * kbsingh * kbsingh will find some box for number80 for a RDO install * number80 * kbsingh will find some box for number80 for a RDO install * number80 will do the RDO install on that box * rbowen * rbowen will write to the RDO community about helping us on Juno on EL6 and for future releases. * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * kushal (55) * kbsingh (38) * rbowen (25) * number80 (16) * centbot (2) Kushal -- Fedora Cloud Engineer CPython Core Developer Director Python Software Foundation http://kushaldas.in

1 0

Dbus not installed as dependency of Was RE: What happened to the default iptables rules on the minimal install of CentOS6 x86_64
by Jason Pyeron 15 Jan '15

15 Jan '15

Is this a CentoOS or upstream issue? If upstream I will file a bug. [root@twenty-one-100 ~]# yum install system-config-firewall-tui Loaded plugins: fastestmirror Setting up Install Process Loading mirror speeds from cached hostfile Resolving Dependencies --> Running transaction check ---> Package system-config-firewall-tui.noarch 0:1.2.27-7.2.el6_6 will be installed --> Processing Dependency: system-config-firewall-base = 1.2.27-7.2.el6_6 for package: system-config-firewall-tui-1.2.27-7.2.el6_6.noarch --> Processing Dependency: newt-python for package: system-config-firewall-tui-1.2.27-7.2.el6_6.noarch --> Running transaction check ---> Package newt-python.x86_64 0:0.52.11-3.el6 will be installed --> Processing Dependency: newt = 0.52.11-3.el6 for package: newt-python-0.52.11-3.el6.x86_64 --> Processing Dependency: libnewt.so.0.52(NEWT_0.52.6)(64bit) for package: newt-python-0.52.11-3.el6.x86_64 --> Processing Dependency: libnewt.so.0.52(NEWT_0.52.13)(64bit) for package: newt-python-0.52.11-3.el6.x86_64 --> Processing Dependency: libnewt.so.0.52(NEWT_0.52)(64bit) for package: newt-python-0.52.11-3.el6.x86_64 --> Processing Dependency: libnewt.so.0.52()(64bit) for package: newt-python-0.52.11-3.el6.x86_64 ---> Package system-config-firewall-base.noarch 0:1.2.27-7.2.el6_6 will be installed --> Running transaction check ---> Package newt.x86_64 0:0.52.11-3.el6 will be installed --> Processing Dependency: libslang.so.2(SLANG2)(64bit) for package: newt-0.52.11-3.el6.x86_64 --> Processing Dependency: libslang.so.2()(64bit) for package: newt-0.52.11-3.el6.x86_64 --> Running transaction check ---> Package slang.x86_64 0:2.2.1-1.el6 will be installed --> Finished Dependency Resolution Dependencies Resolved =============================================================================================================================================================================== Package Arch Version Repository Size =============================================================================================================================================================================== Installing: system-config-firewall-tui noarch 1.2.27-7.2.el6_6 updates 39 k Installing for dependencies: newt x86_64 0.52.11-3.el6 base 97 k newt-python x86_64 0.52.11-3.el6 base 48 k slang x86_64 2.2.1-1.el6 base 473 k system-config-firewall-base noarch 1.2.27-7.2.el6_6 updates 434 k Transaction Summary =============================================================================================================================================================================== Install 5 Package(s) Total download size: 1.1 M Installed size: 4.5 M Is this ok [y/N]: y Downloading Packages: (1/5): newt-0.52.11-3.el6.x86_64.rpm | 97 kB 00:00 (2/5): newt-python-0.52.11-3.el6.x86_64.rpm | 48 kB 00:00 (3/5): slang-2.2.1-1.el6.x86_64.rpm | 473 kB 00:00 (4/5): system-config-firewall-base-1.2.27-7.2.el6_6.noarch.rpm | 434 kB 00:00 (5/5): system-config-firewall-tui-1.2.27-7.2.el6_6.noarch.rpm | 39 kB 00:00 ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Total 6.1 MB/s | 1.1 MB 00:00 Running rpm_check_debug Running Transaction Test Transaction Test Succeeded Running Transaction Installing : slang-2.2.1-1.el6.x86_64 1/5 Installing : newt-0.52.11-3.el6.x86_64 2/5 Installing : newt-python-0.52.11-3.el6.x86_64 3/5 Installing : system-config-firewall-base-1.2.27-7.2.el6_6.noarch 4/5 Installing : system-config-firewall-tui-1.2.27-7.2.el6_6.noarch 5/5 Verifying : system-config-firewall-base-1.2.27-7.2.el6_6.noarch 1/5 Verifying : newt-0.52.11-3.el6.x86_64 2/5 Verifying : slang-2.2.1-1.el6.x86_64 3/5 Verifying : system-config-firewall-tui-1.2.27-7.2.el6_6.noarch 4/5 Verifying : newt-python-0.52.11-3.el6.x86_64 5/5 Installed: system-config-firewall-tui.noarch 0:1.2.27-7.2.el6_6 Dependency Installed: newt.x86_64 0:0.52.11-3.el6 newt-python.x86_64 0:0.52.11-3.el6 slang.x86_64 0:2.2.1-1.el6 system-config-firewall-base.noarch 0:1.2.27-7.2.el6_6 Complete! [root@twenty-one-100 ~]# system-config-firewall -bash: system-config-firewall: command not found [root@twenty-one-100 ~]# system-config-firewall-tui Traceback (most recent call last): File "/usr/bin/system-config-firewall-tui", line 29, in <module> import fw_tui File "/usr/share/system-config-firewall/fw_tui.py", line 34, in <module> import fw_nm File "/usr/share/system-config-firewall/fw_nm.py", line 29, in <module> import dbus ImportError: No module named dbus [root@twenty-one-100 ~]# yum install dbus Loaded plugins: fastestmirror Setting up Install Process Loading mirror speeds from cached hostfile Resolving Dependencies --> Running transaction check ---> Package dbus.x86_64 1:1.2.24-7.el6_3 will be installed --> Finished Dependency Resolution -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00. > -----Original Message----- > From: Jason Pyeron [mailto:jpyeron@pdinc.us] > Sent: Thursday, January 15, 2015 14:04 > To: CentOS mailing list > Subject: What happened to the default iptables rules on the > minimal install of CentOS6 x86_64 > > Sometime ago the minimal install stopped putting a default > /etc/sysconfig/iptables file which allowed only ssh, why the change? > > -- > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > - - > - Jason Pyeron PD Inc. http://www.pdinc.us - > - Principal Consultant 10 West 24th Street #100 - > - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - > - - > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > This message is copyright PD Inc, subject to license 20080407P00. >

1 0

Building kernel modules via the CBS ?
by Bart Van Assche 14 Jan '15

14 Jan '15

Hello, Earlier today I tried to build the SCST source RPM via the CentOS Community Build System (CBS). The first attempt failed because kernel headers under /lib/modules/%{kver} were missing. So I added "BuildRequires: kernel-devel" in the SCST spec. However, this caused the build server to install the kernel-debug-devel RPM instead of the kernel-devel RPM (see also https://cbs.centos.org/koji/taskinfo?taskID=6041 for the logs). Does anyone know whether I am doing something wrong or whether this is an issue with the build system ? An attempt to build against the bananas6-el6 target also failed. In the logs generated for this target I found the following: http://mirror.rdu2.centos.org/centos/6/os/x86_64/Packages/audit-libs-2.2-2.…: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 404 Not Found". See also https://cbs.centos.org/koji/taskinfo?taskID=6043. Is this error message expected ? Is this the right mailing list for such questions ? Thanks, Bart.

4 5

Image building features enabled in CBS
by Ian McLeod 14 Jan '15

14 Jan '15

Hello all, Thanks to Thomas' (alphacc) work last Friday, we now have the image building features enable on the CBS koji instance. I'll give a very brief summary of how to use it. The general form of the koji command is: koji -p cbs image-build <image_name> <image_version> <build_target> <install_tree_url> <arch> --release <image_release> --distro <distro_name_version> --kickstart <local_kickstart_file> --format <format_type> --disk-size <disk_size_in_gb> --repo <repo_url> (optional) --scratch (optional) --nowait (optional) The image build must be given a name, version and release. These function in much the same way as they do in RPM. In particular, the name must be added as an allowed package in the output tag for the <build_target> provided on the command line. You can specify more than one --format option. The most useful options are: 'raw-xz' - xz compressed raw file 'qcow2' - qcow2 'rhevm-ova' - A single file OVF image (aka OVA) for RHEV-M 'vsphere-ova' - An OVA for vSphere/VMWare 'docker' - A docker base image, suitable for "docker load" Any "url" or "repo" lines in your input kickstart file will be removed. The "url" line is replaced by whatever <install_tree_url> you give above. You can, optionally, provide additional repos to Anaconda by giving one or more "--repo <url>" arguments. Until we sort out how exactly we want kickstart files store in RCM (likely git.centos.org) we will be restricted to doing scratch builds, indicated with a "--scratch" option above. Here is the exact command I used to do initial testing of the feature: koji image-build \ centos-7-imcleod-test 1 atomic7-el7.centos \ http://mirror.centos.org/centos/7/os/x86_64/ x86_64 \ --release=1 \ --distro RHEL-7.0 \ --kickstart=/tmp/RHEL7.auto \ --format=qcow2 \ --scratch \ --nowait \ --disk-size=10 The "RHEL7.auto" kickstart is the minimal/JEOS RHEL7 kickstart from Oz, available here: https://raw.githubusercontent.com/clalancette/oz/master/oz/auto/RHEL7.auto In order for this to work I had to ask alphacc to add me to the "image" permission in the CBS. I then had to add the centos-7-imcleod-test "package" to the "atomic7-testing" tag (which is the destination for the "atomic7-el7.centos" build target). The command to do this was: koji add-pkg --owner=imcleod atomic7-testing centos-7-imcleod-test Please follow up with questions, thoughts, RFEs, etc. -Ian

3 3

CentOS Atomic SIG Minutes (6 January 2015)
by Joe Brockmeier 13 Jan '15

13 Jan '15

Meeting minutes from last week's meeting. Note that our meeting has been moved to Thursdays at 15:30 UTC. Meeting started by jzb at 14:33:48 UTC. The full logs are available at http://centos.org/minutes/2015/january/centos-devel.2015-01-06-14.33.log.ht…. Meeting summary --------------- * ACTION: imcleod discuss building Vagrant boxes / add Vagrant building feature (jzb, 14:36:41) * "Fleet" features (jzb, 14:43:49) * ACTION: walters to carry discussion on tools / Ansible to lists (jzb, 15:19:44) * open floor (jzb, 15:20:05) Meeting ended at 15:27:36 UTC. Action Items ------------ * imcleod discuss building Vagrant boxes / add Vagrant building feature * walters to carry discussion on tools / Ansible to lists Action Items, by person ----------------------- * imcleod * imcleod discuss building Vagrant boxes / add Vagrant building feature * walters * walters to carry discussion on tools / Ansible to lists * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * jzb (80) * nzwulfin (43) * kbsingh (18) * walters (18) * imcleod (8) * centbot (4) * Evolution (3) * lalatenduM (2) * jbrooks (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -- Joe Brockmeier | Principal Cloud & Storage Analyst jzb(a)redhat.com | http://community.redhat.com/ Twitter: @jzb | http://dissociatedpress.net/

1 0

CentOSPlus kernels for C7 that have Ceph enabled may have a security issue
by Akemi Yagi 12 Jan '15

12 Jan '15

CentOSPlus kernels, kernel-plus-3.10.0-123.4.4.el7 or newer, have the Ceph option enabled. It was discovered that there is a security issue in Ceph [1]. A patch that fixes the issue is available from kernel.org [2] but cannot be applied to the RHEL/CentOS kernel as such. We will have to disable Ceph in the next update to the plus kernel unless someone comes up with a fix for the current RHEL code. You can find more details in this CentOS bug report: http://bugs.centos.org/view.php?id=7372 Please note that the distro kernels are not affected because Ceph is not enabled. Akemi [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6416 [2] https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=…

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel January 2015