devel

devel@lists.centos.org

11 participants
4618 discussions

The Branding Hunt - howto
by Karanbir Singh 03 Jun '14

03 Jun '14

hi Here is what's happening at the moment : 1) All the srpms published so far from RHEL are being imported into git repos, and brought into git.centos.org to be hosted under 'The CentOS Linux' group. 2) CentOS-5, CentOS-6 and CentOS-7 content will be hosted in 'c5', 'c6', 'c7' branches, with no content in master, other than a readme file pointing to the branches. Only '7' content being imported right now, we will try and retrofit the 5 and 6 content in the coming weeks. 3) there are components for all the distro pieces in bugs.centos.org already ( if not, please shout and someone will create them ) This is how we can run the branding hunt best : A) find a component that needs a patch B) clone the git repo that matches the srpm name that component came from. eg: git clone https://git.centos.org/git/distro!kernel.git C) create a patch for what you want the change to be D) make sure you also add a patch to the .spec file with your name and your email ID, this is what will get credited with the change E) open an issue report at bugs.centos.org, against Project: CentOS-7 and component that you want to patch. Write up details, attach patch. F) Goto A What we also need to do is establish a whitelist of components that people have looked at and found nothing. Please dont blanket assume that things like lib* or perl* dont need changes, only consider whitelisting code you have physically checked using reasonable means. For these things, please also open issue reports at bugs.centos.org and mention Whitelist in the subject of the issue report, again selecting CentOS-7 as the Project and the component name as required. Another thing to keep in mind with the whitelist is that its OK to check stuff other people might have already checked, the more whitelist reports we get, the better is the overall confidence in getting it in. If you need to patch a binary component, dont do a binary diff - just attach the new blurb that needs replacing in and mention the blurb that needs to go, we will try and automate that. Questions, reports, comments : come find us in #centos-devel on irc.freenode.net and centos-devel list ( http://lists.centos.org/ ). Also, keep in mind that the git repos are only going to be online at git.centos.org in about 8 hrs to 12 hrs time ( midday UTC June 3rd ), in the mean time you can still start off by consuming srpms from here : http://ftp.redhat.com/pub/redhat/rhel/rc/7/ - KB -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

1 1

Kpatch in C7
by Karanbir Singh 03 Jun '14

03 Jun '14

hi, Wondering if anyone has looked at kpatch as yet, and if thats something we should try and get included in the CentOS Seven release. From what I can tell its going to be included in RHEL7. For those who dont know what it is : it lets you patch a running kernel, with a very simple build process and I-am-not-clear-what-the-delivery process might be, perhaps rpms itself. And for the lazy, I've done the search, here are urls to get you started: http://rhelblog.redhat.com/2014/02/26/kpatch/ and https://github.com/dynup/kpatch and http://lwn.net/Articles/597123/ There is even a list for it : http://www.redhat.com/mailman/listinfo/kpatch We dont have any code in the CentOS build process, so we'd need to come up with something ( standalone is fine ). -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

1 0

secure boot comments
by Karanbir Singh 02 Jun '14

02 Jun '14

hi Guys, Working through the mechanics of getting secure boot setup and running - and was wondering what everyones' thoughts are on that. Initially this would just be for CentOS-7, and we can later see if we want to also include CentOS-6 content ( although, we'd need grub2, afaict ) - KB -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

1 0

Next Cloud Instance SIG meetup
by Karanbir Singh 02 Jun '14

02 Jun '14

hi everyone The next meetup for the Cloud Instance SIG is scheduled for 16:30 UTC on the 2nd July 2014 at #centos-devel @irc.freenode.net At this meeting, I am hoping to demo the image building process, the automation around it, the kickstart repos around it and how people can consume this service. The setup works to build docker images, HVM images and AMI's delivered via various fileformats ( tar, qcow2, vmdk, raw ); The intention is to iterate over this setup and eventually get to a point where this becomes, curated by the Cloud Instance SIG, the official CentOS image build and delivery mechanism. Everyone is welcome to come along and join. Regards -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

3 4

CentOS-7 LiveMedia content
by Karanbir Singh 29 May '14

29 May '14

hi guys, not sure how many people saw Fabian's post at http://seven.centos.org/ about his work on the LiveCD/DVD media for the upcoming CentOS-7 release; he's been working on the rhel7rc tree's till we get the CentOS-7rc tree's up ( which should happen in a few days time ). - KB -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

1 0

Reminder: VoIP SIG Hangout today Feb 13, 16:00 UTC
by Patrick Laimbock 29 May '14

29 May '14

Hi, Reminder: as previously announced on the centos-devel list, the VoIP SIG Hangout will be today Feb 13 at 16:00 UTC [0]. For more information how to join the hangout on Google+ or follow it on Youtube please check http://wiki.centos.org/OfficeHours Nothing set in stone but some of the things open for discussion are the scope of the VoIP SIG, the goal, the target audience, the deliverables, content distribution and lets not forget the actual proposal. It's also helpful to get an industry perspective, how to make the production side easier and facilitate processes that improve the usability of CentOS in the VoIP sector. Best regards, Patrick Laimbock [0] http://www.timeanddate.com/worldclock/fixedtime.html?iso=20140213T16&am=30

3 8

schedule based updates
by Karanbir Singh 28 May '14

28 May '14

hi, this is following on from the last Cloud Instance SIG meeting - the idea that we should be doing image updates was proposed, but I dont believe we decided on a time frequency of these builds. We can potentially do nightly builds and push them to ci.dev.centos.org, so if people want to really get a nightly snapshot they can. However, for most production requirements it makes sense to have these builds refreshed on a pre-determined schedule. Should we then be doing these weekly ? monthly ? When there is a major security issue ? Who decides its big-enough-an-issue ? This would then include container, VMs and cloud instance images. - KB -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

2 1

Docker problems with centos 6 image based on libselinux.
by Daniel J Walsh 27 May '14

27 May '14

People are reporting problems in Fedora about using centos rhel6 images. https://bugzilla.redhat.com/show_bug.cgi?id=1098120 The problem is the libselinux in the centos image is reporting that SELinux is enabled to processes running within the container. Tools like useradd and groupadd to attempt to write to /proc/self/attr/* files in order to setup proper labeling for SELinux. Since /proc is now mounted read/only within the docker containers, the writes are denied and useradd/groupadd fail. I wrote the attached patch for RHEL6 libselinux to get RHEL6 images to work properly. Basically the patched libselinux will report to processes that SELinux is disabled if the selinux file system is not mounted or mounted read/only. The fixed version of libselinux is already in Fedora and RHEL7 versions of libselinux. Red Hat will be shipping this new version of libselinux in rhel6.6. But we will also ship it as part of our rhel6.5 Base Image. Privileged containers and systems with SELInux disabled do not have this issue, however systemd with SELinux in permissive mode or enforcing have the problem. In permissive mode the problem will continue, since it is not SELinux denying access to /proc. It is actually the fact that /proc is mounted Read/Only. Previous versions of docker did not mount the /proc file system as read/only It would be a good idea if someone could get a patched version of libselinux into the centos 6 docker image.

5 6

Small Business SIG suggestion
by Omar Eljumaily 27 May '14

27 May '14

I'm trying to see if there's interest in a small business oriented SIG. There are already small business distros based on Centos, and perhaps those groups may also want to participate in a SIG. There are certain issues related to small office servers that I believe deserve to be addressed in a community setting. For instance: 1. Easy backup, archive, & offsite mirroring. - Something that is always problematic for every small business I know regardless of server technology. 2. Security issues specifically related to small business. 3. Smooth updating. Trying to make the transition from one major release to the next as easy as possible. 4. Plugable/scalable vertical market application architecture. For instance making the platform hospitable to vertical applications like accounting systems in which the end user doesn't have to spend weeks setting up hosting stacks. 5. Easy user account management, perms setup, etc. 6. Interoperability, easy scalability with cloud systems. For instance explore ideas like having cloud based file server backup that can also be used as live system in case of local failure. Just some ideas, but anyway if anybody's interested, please let me know. Thanks, Omar

12 32

OpenNebula Variant and Cloud SIG proposals
by Jaime Melis 26 May '14

26 May '14

Apologies, I sent this to KB's direct mailbox earlier today and apparently I didn't send it to centos-devel. So I'm forwarding it now. Given that there are at least two other projects keen to make this happen, it would be great if the Cloud SIG could be a single multicloud target. -- Hello, I'm Jaime Melis from the OpenNebula project [1]. We have been involved with CentOS for the past year making a stable Cloud Management Platform [2]. I would like to hereby propose a new CentOS variant, namely the OpenNebula variant. This variant would add three roles to the CentOS installation: * OpenNebula Frontend * OpenNebula Node KVM * OpenNebula Node Xen The work for the Frontend and Node KVM roles has been completed and is ready to be released. The Node Xen role is still in progress although close to being finished. This work should take place under the Cloud SIG umbrella, which right as of now doesn't exist, so I would like to also propose the creation of this group with the aim of making the major cloud platforms work wth Centos. Regards, Jaime [1] http://opennebula.org/ [2] http://wiki.centos.org/Cloud/OpenNebula/QuickStart -- Jaime Melis Project Engineer OpenNebula - Flexible Enterprise Cloud Made Simple www.OpenNebula.org | jmelis(a)opennebula.org

3 7

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel