devel

devel@lists.centos.org

10 participants
4617 discussions

Install and authentication
by Larry Brigman 27 Jun '14

27 Jun '14

I just finished my net install here of latest. I'm missing the options to select the type of authentication. It is either local or Enterprise. It finds the domain and I have a domain account but it is trying to create a domain account. Since I wasn't given the option to attach the machine to the domain, the login fails. I also don't get NIS/LDAP/etc... options to configure on the first boot.

1 0

Adding the EPEL release package to the extras repository
by Jim Perrin 27 Jun '14

27 Jun '14

In the discussions for putting CentOS 7 together, the board's agreed to make the epel-release package available in the centos-extras repository as part of the el7 build. What this means: The EPEL repository will NOT be enabled by default, but it will be available. Following an install, an admin would be able to 'yum install epel-release'. Following the success of that command, they could then use epel normally. In order to accomplish this without having yum complain, we will re-sign the epel-release package with the centos key. The EPEL gpg keys will remain intact in the file included, so yum will prompt and import normally on the first package installed via EPEL. Are there any objections to this before we execute? -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

12 13

c7-updates repo on buildlogs.centos.org
by Johnny Hughes 27 Jun '14

27 Jun '14

The structure of the build repos on buildlogs.centos.org are as follows: RC and GA build trees: c7.00.02/ c7.00.03/ c7-00.04/ CentOS 7 Extras: c7-extras/ CentOS 7 Plus: c7-plus/ <==Not there yet, will be when we build the plus kernel later today CentOS 7 Updates: c7-updates/ So, everything that goes on the CentOS 7 ISOs (and are the same versions as the RHEL7 GA release) will come from c7.00.02, c7.00.03, and c7-00.04 (except the actual secureboot signed content that KB mentioned earlier). Anything that is an updated package form those on the ISOs will come from c7-updates. The centos/ directory is the actual testing tree(s) for the open qa process and will eventually go away once we have a GA release .. however, the build repos (which are actually the staged repos used for building the packages via mock) and listed above will remain indefinitely to show the RPMs, SRPMs, and logs from mock used to produce CentOS 7. Thanks, Johnny Hughes

3 3

[PATCH] allow get_sources.sh hash verification to work with other hashes
by Tyler Parsons 27 Jun '14

27 Jun '14

The existing hash verification patch only allows get_sources.sh to work with sha1. I've found other repositories, most notably centos-release use larger hash sizes. This patch should allow for a wider variety of hashes to be used & subsequently verified. Tyler Parsons (1): Allow get_sources.sh hash verification to work with hashes other than sha1 get_sources.sh | 50 ++++++++++++++++++++++++++++++++++++++++---------- 1 file changed, 40 insertions(+), 10 deletions(-) -- 1.8.4

2 2

CentOS 7 Public QA: CentOSPlus kernel available for testing
by Akemi Yagi 27 Jun '14

27 Jun '14

The first version of the centosplus kernel for 7 is now available for testing. The kernel version is 3.10.0-123.el7 (GA kernel). You can download it from: http://buildlogs.centos.org/c7-plus/kernel-plus/ Or use yum with a .repo file similar to: [c7-kernel-plus] name=CentOS Open QA - CentOSPlus baseurl=http://buildlogs.centos.org/c7-plus/kernel-plus enabled=1 gpgcheck=0 Up to CentOS 6, the centosplus kernel has been distributed with a repotag '.centos.plus'. The 7 version has the same tag but the name is now 'kernel-plus'. Its name space is separate from the distro kernel. This was done to keep with other kernel names such as 'kernel-xen' (being planned for 7) and 'kernel-ml' (available for 7), etc. The C7 plus kernel should work with Secure Boot enabled just like the distro kernel. Extra features enabled in the config file include some network adapters, BusLogic, IPX, Appletalk, and ReiserFS. TOMOYO and AppArmor are also enabled but SeLinux remains the default. Please test the following: - Install/uninstall in UEFI mode (with or without Secure Boot enabled) or in BIOS mode. - Install the -devel, -headers, -tools etc packages. - Load [and use] modules/features that are unique to the plus kernel. - and so on. Feedback greatly appreciated. Happy testing! Akemi

4 6

Just curious about accounts on the cbs
by Pat Riehecky 27 Jun '14

27 Jun '14

Just wondering what authentication software you were looking at. These days, I've found FreeIPA to be surprisingly feature rich (and bundled with the OS!). -LDAP -Kerberos -Certificates -Multi-Master replication -Password policies All built in! There is a Samba hook too, but I'm not sure that is relevant here.... The FreeIPA devs are also very nice people who've been receptive to feature requests. Mostly I'm just curious what people are thinking ..... Pat -- Pat Riehecky Scientific Linux developer http://www.scientificlinux.org/

2 2

CentOS 7 and release numbering
by Karanbir Singh 26 Jun '14

26 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi, Taking on board the community and environment expansion that is taking place around the CentOS project, the CentOS Board has been considering how best to accomodate these efforts. I'm attaching here a plan put forward by the board towards that aim. Thoughts ? Comments ? - - KB - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlOSYF4ACgkQMA29nj4Tz1usTwCgr9K0th6XcMzSmjGQvwnbeeiR KhsAn36gaRbCuGoGzqEa2TN+TDFEEZjR =GbVM -----END PGP SIGNATURE-----

45 146

Community build system
by Thomas Oulevey 26 Jun '14

26 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi All, The initial idea is to configure Koji and make it available to the community. Thanks to Karanbir/Fabian we already got the hardware and installation is on going. But first, we would like to ask for feedback: 1/ PKI setup, a proposal: - - koji-web use a certificate signed by an external CA (and obviously trusted) - - the rest of the koji architecture (hub and kojid) will use a self-signed CA that we'll use to also generate other certs. The proposal is to gpg encrypt the CA within a non-public GIT repo. Talking with Fabian, he already use this method for other infrastructure project. - - the clients (at the beginning git.c.o) will use self-signed CA. This need to be discussed in the light of future integration of different user facing tools (koji, git, etc...) and if we want to provide koji client accesses, as Fedora project does. 2/ Hostnames to use: - - After a round on #centos-devel, cbs.centos.org was the best we can come up with. Comments ? - - For the builders machine, we should decide on a decent naming as this info appears in RPM metadata. i.e : builder01.cbs.centos.org, builder02.cbs.centos.org, etc... Do we want to deal with different "architecture family" within the name (e.g ARM) ? i.e : x86-builder01.cbs.centos.org, arm-builder01.cbs.centos.org Your comments are very welcome! cheers, - -- Thomas 'alphacc' Oulevey -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTrBiUAAoJEH2Wn86OP8Ni5xYH/jYyRN+gr6r8v8zih/yF7fOi INws9FC9+U+kP1r9Wsfg6Ge92uQJdX7t5G6Oom89ZcHoshVY685Cv647Es5ySkMP ls5NBXQu92l5QcXFOSP6gcThOyd7bO7Kh5onziULmIkdDWkEdz12kBPI2bVPQqwI JrZVTwvHSEN+5sVBccMKGYmiqFhs/qt12i/EaK2bvWCs/CRcrjyKJiHhlej3Zo+7 nSo8pwFCsq2T08FWfvnWYfjzFs8RmpFclBGakYRRyKk74TV63jKExqAL1zJGhaSF yZxYt8XZeXrv5fdxXtKzA0WL8rf3tKN0rRC/mMcQUo28OaN53Wxuzw/YCRnN0po= =2Hqy -----END PGP SIGNATURE-----

7 10

[PATCH 0/3] Somewhat standardize overrides and on getopt
by Pat Riehecky 26 Jun '14

26 Jun '14

From: Pat Riehecky <riehecky(a)fnal.gov> These three patches try and create a generic interface for some basic overrides, drawing from get_sources.sh I've also updated get_sources.sh to utilize getopt for arg parsing Pat Riehecky (3): Allow overrides of $RHELAUTHOR May want to set defaults from the override file.... Refactor to use getopt for arg parsing get_sources.sh | 151 ++++++++++++++++++++++++++++++++++++------------ show_possible_srpms.sh | 11 +++- 2 files changed, 122 insertions(+), 40 deletions(-)

2 4

Subject=Re: secure boot comments
by Keivan Motavalli 26 Jun '14

26 Jun '14

I downloaded and burned livecd-centos-7-live-gnome-201406261459.iso (checking its hashsum). It does boot flawlessly on a lenovo thinkpad T430-2349H3G using uefi only and secureboot enabled. modsign-uefi throws "Couldn't parse DBX signatures: -74", but the boot process continues. The live image, however, is not usable, neither textually nor graphically. The laptop comes with an integrated 3G modem, "Ericsson HSPA+ WWAN Minicard (H5321gw)". modem-manager.service fails to start, and subsequently also "systemd-logind.service" repetitively fails to starts, leaving the system in an unusable state, without any working tty and/or display manager. IMHO, systemd-logind tries to start getty on one of the 3g modem serial interfaces, probably not recognizing it as one, thus failing. disabling the integrated modem and wlan adapter via a physical switch is a workaround to the issue. This seems to be a fedora 19-20 bug gone unfixed into RHEL7.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel