September 2015 - devel - lists.centos.org

ksplice and CentOS
by Karanbir Singh 25 Sep '25

25 Sep '25

hi guys, lots of people on this list are keen on contributing to the CentOS effort - and one place where we could, as a group of people, make a massive difference is being able to deliver a ksplice upgrade model. A couple of people have started in silo's to try and get something together but I feel it might be a good time to try and see if we can do somethng as a group. Do we have people on the list who find the idea of rebootless kernel upgrades interesting ? Is there some desire to try and make that happen within the CentOS Ecosystem ? - KB

24 47

anaconda dependency calculation?
by Nicholas Byrne 04 Aug '25

04 Aug '25

Hi all, I'm trying to find a tool that calculates all dependencies for a specific package or group of packages for use with CentOS 5 (beta) with the intention of putting together a custom single CD build of CentOS 5. With CentOS 4 i used a python script that used the hdrlist module to find all dependencies which borrowed code from a number of sources. I've looked at yumdownloader and how it checks dependencies (using the --resolve option) but if i pass it the list of packages defined in say the Base and the Core yum groups which generally form an absolute minimal install i end up with about 200 packages. If i do a custom install (using beta 1 disks) and deselect everything i end up with over 300 packages. So i'm guessing anaconda calculates dependencies in a slightly different way, can anyone point me to files/code where i should be looking to find out? Thanks very much in advance for help Nick This e-mail is the property of Quadriga Worldwide Ltd, intended for the addressee only and confidential. Any dissemination, copying or distribution of this message or any attachments is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and deleting it from your computer. Messages sent to and from Quadriga may be monitored. Quadriga cannot guarantee any message delivery method is secure or error-free. Information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. We do not accept responsibility for any errors or omissions in this message and/or attachment that arise as a result of transmission. You should carry out your own virus checks before opening any attachment. Any views or opinions presented are solely those of the author and do not necessarily represent those of Quadriga.

6 11

forums + portal for {lang}.centos.org sites
by Karanbir Singh 16 Aug '24

16 Aug '24

Hi, Earlier in the evening today Ralph, Fabian and I had a chat about the present state of the language subsites. This email sort of summarises the main issue ( s/w ). We seem to have run into a slight technical hitch with punbb/fluxbb. They dont support LDAP as a backend. And we had decided a few months back that all new rollouts must have ldap backend so we can rollin CentOS-DS / openldap based backend. So we need to look at alternatives, and since the primary focus of these international sites is going be forums : Here is a shortlist ( if there is anything else that people are aware of, please add to this list ) - phpBB - SMF - Fudforum - phorum - fluxbb Requirements: - Must be able to scale ( couple of hundred thousand msgs ) - Must be able to handle ldap auth ( if it cant, whats involved in writing the ldap-auth portion ) - Must address the specific requirements raised by the present www.centos.org forum users ( Can you please fill this section in ? ) - Must support all languages we need ( pure utf8 support would be good ) - Secure - Skin'able Nice to have: - Capable of running multiple instances from a single deployment - responsive community :D Things we will need to do: - Decide on what s/w to use. - Give the ArtWork people enough time to get the look & feel sorted. - Migrate newbb forums from www.centos.org to $system ( hey, english is a language too :D ). - Migrate fr.centos.org into the final s/w - setup {de/es/ja/it/pt_br}.centos.org Actions: Ralph and Fabian are going to work on setting up a test ldap server, once that is online we will then start by installing into our test-vm-farm the various s/w to eval them. If anyone would like to help, please feel free to jump right in. I'll setup a wiki page for this issue, which might be a good place to track progress. -- Karanbir Singh : http://www.karan.org/ : 2522219@icq

22 81

CentOS-7 / powerpc LE bring up
by James O'Connor 15 Oct '15

15 Oct '15

Starting a new status thread for CentOS 7 POWER Little Endian. On Monday, Arrfab turned over the keys to a pairf of shiny new Fedora 21 ppc64le VMs running atop PowerKVM. I created a f21-ppc64le mock config and built a Linux from Scratch [1] toolchain with CentOS 7.1.1503 sources. This is necessary to jump back in time from Fedora 21 glibc-2.20 to CentOS 7 glibc-2.17. I then proceeded to build enough ppc64le.el7 rpms with the LFS toolchain to construct a minimal c7.01.01-ppc64le mock buildroot. As of last night, the minimal c7.01.01-ppc64le buildroot is complete and I’m untangling circular dependencies in the CentOS 7.1.1503 source rpms. I’ve built 700 of 2523 source packages so 27% complete with this first pass. Next, I’ll bootstrap java-1.7.0-openjdk and continue to loop through ppc64le rpm builds with mock. In the next 1-2 weeks, I should have 95+% of the source packages building for ppc64le. At which point we can create the first CentOS 7 ppc64le VMs and rebuild c7.01.02-ppc64le atop CentOS 7 instead of Fedora 21. CentOS 7.1.1503 ppc64le Alpha images for the early adopters sometime after that. [1] http://www.linuxfromscratch.org/lfs/view/stable-systemd/

5 9

Atomic-developer-bundle for inclusion in Atomic SIG
by Lalatendu Mohanty 08 Oct '15

08 Oct '15

Hi, Asapart of Project Atomic [1], we are working ona toolchain (as of now it is a Vagrant box),atomic-developer-bundle [2],for helping application developers package their microservice architecture applications for delivery vialinux containers.ADB (atomic developer bundle) is supported on GNU/Linux distributions, OSX and WIndows. It has (or isgoing to have) all the goodies that are part of Project Atomic to better enableLinux containers. Currently, the Vagrant box is based on CentOS. Therefore I think itmakes more sense toinclude it in the CentOS Atomic SIG. I believe this willopen channels with thecommunity and lead togreater participation. Let me know your thoughtson including the ADB as part of the Atomic SIG. For details please go through the README in ADB github repo [2] [1] https://github.com/projectatomic [2] https://github.com/projectatomic/adb-atomic-developer-bundle Thanks, Lala On behalf of ADB developers

4 10

[Storage SIG] Adding new package glusterfs-coreutils to the CBS
by Niels de Vos 01 Oct '15

01 Oct '15

Hi Lala, Today I've prepared the glusterfs-coreutils package for the Storage SIG. Everything works fine, but there is one thing I am unable to get done. Maybe I am missing certain permissions? The new glusterfs-coreutils package would need to be added to the CBS. This fails for me: $ koji -p centos \ add-pkg --owner storage \ storage6-gluster-common-candidate glusterfs-coreutils SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590) Doing scratch-builds works fine, so I doubt that the issue really is the SSL-certificate. Could you let me know if I am doing something wrong, or if it is expected that I can not add new packages? Thanks, Niels

4 7

CentOS SCLo SIG sync-up meeting on #centos-devel (2015-09-30)
by Honza Horak 01 Oct '15

01 Oct '15

It seems I'll beat the record in short notice, but.. SCLo SIG meeting will be at 15:00 UTC (11:00 EST, 17:00 Brno, 11:00 Boston, 0:00+1d Tokyo, 1:00+1d Brisbane) in #centos-devel on Freenode. = Topics = * are we ready to remove the temp pkgs from CBS? * dist-git repos creation -- anything new? * docker images on the hub based on SCLo collections -- check status Honza

2 1

[RFC] ConfigMgmt SIG
by Julien Pivotto 01 Oct '15

01 Oct '15

Hi all, This is a request for comment about a new SIG for the CentOS project. It is also a call for a Centos Board mentor to jump in. The goal of this proposed SIG is to provide vendor-independent, nicely written packages for automation tools. Targeted automation tools include Puppet, Chef, Ansible... Some of those tools come in a so-called all-in-one package, with everything built-in in some vendor-defined dependencies. I do think that an alternative for those packages should be possible. It is good for the diversity of our ecosystems and would help anyone who wants to fine control dependencies on those packages or patch one particular dependencies to do so. It would also do its best to re-use system dependencies as much as possible (e.g openssl). That SIG will probably be a source of interests for other SIG that could use this work to deploy their work based on community packages. It could optionally depend on some Softwares Collections if needed. My personal interest is to target Puppet 4 on ContOS 7, and that would be the first objective, but this SIG is open to any Open-Source Configuration Management tool. About me: I am a sysadmin using CentOS daily. I operate on several infrastructures of different scales mixing several automation/orchestration tools. I come from Belgium and I have been involved as a speaker at previous CentOS DOJO's in Brussels and Paris. -- (o- Julien Pivotto //\ Open-Source Consultant V_/_ Inuits - https://www.inuits.eu

3 4

CATPR - Community Approved Third Party Repos
by Carl George 01 Oct '15

01 Oct '15

Howdy, There are several "release" packages in the Extras repository for SIGs and third party repositories. centos-release-virt-common centos-release-openstack epel-release Currently there are no guidelines for other third party repositories to be included, so I wrote this document. https://wiki.centos.org/CarlGeorge/CATPR What is this document missing? Are there any additional rules that need to be added for a third party repository to be considered? Also, if these guidelines are accepted, what does the approval process look like? Obviously repositories would be evaluated on a case-by-case basis, but who has the final say on whether a repository is approved or not? Carl George IUS CoreDev Team

6 10

Centos 7, 32 bits edition
by john tatt 29 Sep '15

29 Sep '15

Hi everybody I heard that since January, a 32 bits version was about to come. Is there some news ? It would be fine thanks

3 2

Community Authentication Working Group Meeting: 29-Sep-2015 1300UTC
by Brian Stinson 29 Sep '15

29 Sep '15

Hi Folks, As some of you know, CentOS is working on deploying FAS2 for central authentication in the Community Build System. The Fedora Infrastructure team is working on deploying FAS3 for their needs. Going forward, we will need a place for us and other projects to work on features of our authentication systems. One software option is to explore some of the things FreeIPA brings to the table. The IPA devs have approached both projects with the beginnings of a community portal that will handle some of the self-service components (account requests, password resets, etc.) and we thought it would be good to start on some conversations in this space. We'll have our first meeting on Tuesday September 29th at 1300UTC in #centos-devel on Freenode with the following agenda: - Scope for the Community Auth Working Group - Proposed GOAL: Replacing FAS with IPA + custom bits - Proposed GOAL: Work on a general Auth solution for other communities - Resources we need to move forward - Coordinating with the IPA development team - Schedule/Venue/Format for regular-ish meetings - Not necessarily frequent, but regular - OPTIONAL: Scope for a possible Auth SIG Patrick Uiterwijk (Fedora Infrastructure Team) and I will help coordinate this group. As always, we'll keep meetbot minutes for anyone who can't make it. Cheers! Brian

2 1

CBS/Infra Meeting 28-Sep-2015 1400UTC
by Brian Stinson 28 Sep '15

28 Sep '15

Hi All, It's time for another meeting to talk about the Community Build System[0]. We will meet in #centos-devel on irc.freenode.net Proposed Agenda: - Status Updates: - General - Central Auth - Central Auth release blockers - EPEL/SIG Packaging Discussion Cheers! --Brian [0]: http://wiki.centos.org/HowTos/CommunityBuildSystem

2 1

Cloud SIG meetup, OpenStack Summit Tokyo
by Rich Bowen 23 Sep '15

23 Sep '15

Because we were unable to get one of the official BoF rooms at OpenStack Summit, in Tokyo, the Ceph Community Meetup has graciously offered us the use of their room during the lunch our on Wednesday. That's 12:45 - 14:00, Wednesday, October 28th, in the Sakura Tower. Exact room name/number to come very soon. -- Rich Bowen - rbowen(a)redhat.com OpenStack Community Liaison http://rdoproject.org/

1 0

[Proposal] Converge EPEL and CBS
by Haïkel 23 Sep '15

23 Sep '15

Hi, Since the CentOS acquihire, there was a lot of discussion about EPEL's future. Since the FOSDEM meetup between Fedora/CentOS folks, there was little progress on that topic After a discussion with a Smooge, I decided to come with a proposal, knowing that 1. Fedora wants to keep EPEL within it umbrella 2. That CentOS SIGs are in practice rebuilding a lot of EPEL packages (or retag them for other SIGs) leading to poor maintenance as they don't follow EPEL tickets for all their dependencies. 3. EPEL is not part CentOS plans, and as soon as SIGs will progress, *may* turn the former irrelevant 4. Some EPEL packages are poorly maintained especially on older EL releases and/or orphaned We've reached the point where both EPEL/CBS would greatly benefit to join hands. So I suggest that we consider the following: * EPEL will still use Fedora dist-git * EPEL builds should be done in CBS to make it easier for SIGs to consume it. * EPEL will use CentOS repositories instead of mirroring RHEL repositories * Bridging Fedora/CentOS accounting system (CentOS is migrating to FAS) <== we need to see the feasibility of this but that would be optimal, that would increase the permeability between our two contributors pools which is something, we all want to encourage. * Create a EPEL provenpackager group under CentOS core SIG supervision, allowing them to appoint people to maintain EPEL packages. I suggest that we keep the EPEL name to acknowledge EPEL historical effort to provide quality additional packages for EL distros. Fedora contributors would still be able to contribute to EPEL, and CentOS contributors to make it up their standards. Would that work for you? Regards, H.

8 11

RDO OpenStack Liberty test day [Cloud SIG]
by Rich Bowen 22 Sep '15

22 Sep '15

Don't forget - we'll be doing a Liberty test day September 23rd and 24th. Details are here: http://beta.rdoproject.org/testday/rdo-test-day-liberty-01/ You can update that page, and the associated test scenarios page, at https://github.com/redhat-openstack/website Thanks, and "see" you tomorrow. -- Rich Bowen - rbowen(a)redhat.com OpenStack Community Liaison http://rdoproject.org/

1 0

[CBS] koji client issue with CBS with python >= 2.7.9
by Haïkel 22 Sep '15

22 Sep '15

Hi, I finally found a workaround to fix CBS issues when using python >= 2.7.9 (like Fedora 22 and above) https://bugzilla.redhat.com/show_bug.cgi?id=1231616 Though it's dirty, but it's no different from python 2.7.8 and older behavior. Starting python 2.7.9, python ssl standard module enable certificate verification by default, hence causing koji client to fail when interacting with CBS. What I do not get is why withe the same koki client I have no issues with Fedora Koji instance, and why it fails with CBS. People using F21 and older or CentOS, won't experience that issue. I suspect either a configuration or difference of server versions difference, so I'd like CBS admins to investigate that issue. Regards, H.

2 1

Repo for virtualization infrastructure
by George Dunlap 21 Sep '15

21 Sep '15

A user on centos-virt asked about openvswitch, noting that there were openvswitch packages for the cloud SIG, but that they could only be built with the rest of openstack. Sandro said that virt-ovirt also has "several packages tagged from the cloud SIG". We should probably identify a bunch of these common "infrastructure" packages and get them all in one repo where the various sigs can depend on them. So "openstack" would probably be one. Sandro, what others did you have? Any other suggestions for packages, and a place to put them? virt-common would make some sense; or cloud-common perhaps. -George

2 1

Re: [CentOS-devel] CentOS-7 / powerpc BE bring up
by Akira Kuno 18 Sep '15

18 Sep '15

I vote Little Endian. Akira Kuno Manager Power Systems Sales Promotion Server Solutions IBM Systems IBM Japan

3 3

Re: [CentOS-devel] CentOS 7 on power64 status
by sauvignon2015＠yahoo.co.jp 18 Sep '15

18 Sep '15

I vote for little Endian. I want same Endian as x86.

1 0

CentOS/Fedora Atomic Test Day 09/22
by Dusty Mabe 17 Sep '15

17 Sep '15

Hey all, Sorry for the wide distribution.. We'd like to promote the joint test day we are doing next week for Atomic. Please see Jason's blog post for more details and join us on the test day: http://www.projectatomic.io/blog/2015/09/combined-fedora-centos-atomic-test… - Dusty

1 0

CentOS SCLo SIG sync-up meeting on #centos-devel (2015-09-16)
by Honza Horak 16 Sep '15

16 Sep '15

SCLo SIG meeting will be at 15:00 UTC (11:00 EST, 17:00 Brno, 11:00 Boston, 0:00+1d Tokyo, 1:00+1d Brisbane) in #centos-devel on Freenode. = Topics = * are we ready to remove the temp pkgs from CBS? * dist-git repos creation -- anything missing? * docker images on the hub based on SCLo collections Honza

1 1

Re: [CentOS-devel] CentOS-7 / powerpc BE bring up
by Takashi Ohsawa 15 Sep '15

15 Sep '15

>Perhaps we can get folks who have shown interest in having Power on CentOS to post their preferred architecture here? My vote is LE architecture. Currently , I am using CentOS on IA. My application porting is easy because LE is same as IA's endian. -- -- Takashi Ohsawa --

4 3

Intent to participate to a ppc64le beta test
by Takashi Ohsawa 15 Sep '15

15 Sep '15

Hi, We are using CentOS on x86 server to our system. I appreciate your contribution in CentOS community. Your cooperation is really helping our system infrastructure. We are evaluating the new server of OpenPOWER community. We can find the technology innovation in this community, such as fast I/O accelerator, fast GPGPU. We would like to use CentOS on OpenPOWER because our skill and some operation tools are optimized on CentOS. I would like to contribute of evaluation CentOS ppc64le beta build when we can use it. -- -- Takashi Ohsawa --

3 2

Intent to Participate in CentOS for ppc64le Beta Validation
by Sameer Kumar 15 Sep '15

15 Sep '15

Hi, We, at Ashnik, are enterprise open source experts providing Operating system, virtualization, Infrastructure, database, Web server and Business Intelligence services and solutions across India and South East Asia. Ashnik is partner with EnterpriseDB, MongoDB, Pentaho, NGINX, Red Hat. We are excited about goods of open source coming to the hardware world with OpenPOWER. We wish to help in best way we can in bringing choice to enterprise segment and a cost effective Linux on Power Platform. The customer segment we work with and kind of solution which we have seen picking up works on Little Endian platform. Ashnik team from India is keen to be involved in CentOS initiative and build for ppc64le. We are keen to be part of Open Power consortium and contribute towards Beta Validations as CentOS ppc64le build progresses -- -- Best Regards Sameer Kumar | DB Solution Architect *ASHNIK PTE. LTD.* 101 Cecil Street, #11-11 Tong Eng Building, Singapore 069 533 T: +65 6438 3504 | M: +65 8110 0350 | www.ashnik.com

2 3

The Right Way to mount tmpfs using systemd with the right selinux security context
by George Dunlap 14 Sep '15

14 Sep '15

In the context of packaging Xen, I'm looking for the Right Way(tm) to mount a tmpfs with a suitable security context. = Background = xenstored is a daemon run in a Xen domain 0 (control domain). It acts as a sort of registry that domains and the toolstack can use to communicate and store important information. xenstored uses a simple database stored in /var/lib/xenstored/tdb . This file is not persistent across reboots, it is fairly small, and the access speed has a major impact on the speed of the system. For this reason, mounting /var/lib/xenstored as a tmpfs results is highly recommended. The Xen project ships a number of recommended systemd initscripts with its distribution. One of these is var-lib-xenstored.mount, which simply mounts tmpfs on /var/lib/xenstored. xenstored.service requires var-lib-xenstored.mount. The default CentOS selinux policies in /etc/selinux/targeted/modules/active/file_contexts contain labels for xenstored: /var/lib/xenstored(/.*)? system_u:object_r:xenstored_var_lib_t:s0 /usr/sbin/xenstored -- system_u:object_r:xenstored_exec_t:s0 (Presumably somewhere there's a connection defined between the two labels; I haven't found it yet.) The security context for /var/lib/xenstored is set automatically (I presume due to the above rule): # ls -aZ /var/lib/xenstored/ drwxr-xr-x. root root system_u:object_r:xenstored_var_lib_t:s0 . = The Problem = When var-lib-xenstored.mount mounts tmpfs at /var/lib/xenstored, the security context reverts to the default for tmpfs: # systemctl start var-lib-xenstored.mount # ls -aZ /var/lib/xenstored/ drwxr-xr-x. root root system_u:object_r:tmpfs_t:s0 . SELinux subsequently denies permission to xenstored to access the location, and xenstore fails. = Discussion = The version of var-lib-xenstored.mount in Xen 4.5 contains a security context in the mount options, which can be set at configure time; the result looks something like this: Options=mode=755,context=system_u:object_r:xenstored_var_lib_t:s0 Unfortunately, the way this was set up meant that if your system did *not* have selinux, then the mount would fail. So this was removed, leaving us the way things are above. I *could* patch var-lib-xenstored.mount in my xen package; but I would like to avoid patches as much as possible. Furthermore, as someone whose main job is to be an upstream Xen developer, I would prefer to make var-lib-xenstored.mount as useful as possible *by default*, without needing to be patched / modified by people downstream using selinux. One solution which has been proposed is to use a config file (say, /etc/sysconfig/xenstored) which contains a custom set of options for var-lib-xenstored.mount. However, when poking around, I couldn't find any other places where a context is manually added to a mounted place like that, which made me wonder if there was a better, more generic way to automatically get things to work properly. I did some poking around, and found that /usr/lib/systemd/rhel-readonly mounts things with tmpfs, and sorts out the selinux stuff by running restorecon after mounting it. I tried that, and it seems to work: # restorecon -R /var/lib/xenstored # ls -aZ /var/lib/xenstored/ drwxr-xr-x. root root system_u:object_r:xenstored_var_lib_t:s0 . Running "systemctl start xenstored.sevrice" afterwards gets a working xenstore. So I guess I was wondering if there was a better way to get /var/lib/xenstored labelled with the right contexts than trying to shove the contexts in at mount time. Is there a way to have systemd automatically call restorecon after mounting the filesystem? Or is there a better way to get systemd to mount a suitable tmpfs at /var/lib/xenstored? Thanks, -George

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel September 2015