devel

devel@lists.centos.org

11 participants
4618 discussions

[cloud] Features of a cloud VM template
by Nux! 09 Apr '14

09 Apr '14

Hello, While the Cloud SIG is still being established, let's get to actual work and think of a set of features for a CentOS cloud template. I am referring here to VMs, not containers (e.g. docker). This is how I see it so far, please feel free to come with suggestions/comments/questions. A - Single partition for simplicity (and lack of good arguments against it) - dracut-modules-growroot included so the template partition will expand to match target, cloud-init in charge of resize2fs B - To swap or not to swap? C - "tuned-adm profile virtual-host" which translates to: - kern.sched_min_granularity_ns 10ms - kernel.sched_wakeup_granularity_ns 15ms - vm.dirty_ratio 40% - vm.swappiness 30 - IO scheduler "deadline" - fs barriers off - CPU governor "performance" - disk readahead 4x D - tso and gso off on the network interfaces http://s.nux.ro/gsotso E - network interface remapping (75-persistent-net-generator.rules, BZ 912801) F - Selinux on. Do we relabel for uniqueness? Seen small VMs run out of memory while relabelling.. G - PERSISTENT_DHCLIENT="1" (BZ 1011013) H - Bundle all the paravirt drivers in the ramdisk (virtio/xen/vmware/hyperv) so the same image can boot everywhere? I - Per "stack" requirements (e.g. cloudstack relies a lot on root user and password logins, openstack tends not to, SSH key only logins etc etc) That's about all that crosses my mind for now. Thoughts? Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

3 3

Official Docker Image
by Adam Miller 05 Apr '14

05 Apr '14

Hello all, I was recently in #docker-dev on freenode and it was brought up that they are currently in search of a maintainer for the official CentOS docker image for the docker index[0]. I would be happy to do this but I also know that there is a core team and a Cloud SIG already in place and wanted to bring this up to the group so I'm not stepping on anyones toes *and* so that I'm not slinging around an image called "official" without blessing from the project and community at large. I'm aware of the docker scripts[1] from the Cloud SIG and would effectively just like to find a way to have us collaborate on this (I would like to join which ever group ends up being the owner of this task) and then farm builds somewhere that can be uploaded by whom ever has the appropriate permissions to the docker index. Looking forward to thoughts from the group. Thanks, -AdamM [0] - https://index.docker.io/ [1] - https://github.com/CentOS/sig-cloud-instance-build/tree/master/docker

3 3

Storage SIG Moving Forward
by Patrick McGarry 04 Apr '14

04 Apr '14

Now that the Storage SIG has been (mostly) ratified, I wanted to start looking forward. We are already started on some of the simple first steps; so giving a little time to have a few tasks under our belt (and give people a chance to wrap their head around the tasks ahead) we're aiming for the first SIG meeting to be on: 04-Apr @ 15:00 UTC. Anyone who is interested in attending please let me know before then and I'll make sure you're added to the invite. Our current plan is to just keep it simple w/ a Google Hangout (not on-air) so if we grow beyond 10 we'll need to know beforehand. In this meeting we'll be discussing the following: * Infrastructure plans (repositories, lists, etc) * Form & Function (who does what, how repos are handled) * Rough roadmap (what to accomplish when) * Identify potential additions to SIG (have Ceph&Gluster, anyone else?) * Any other ideas/questions that may come up If you have any questions in the meantime feel free to reply here, or hit me directly via email (patrick(a)inktank.com) or on IRC (scuttlemonkey). Thanks. Best Regards, Patrick McGarry Director, Community || Inktank http://ceph.com || http://inktank.com @scuttlemonkey || @ceph || @inktank

6 8

t_functional tests and integrated packages
by Davide Principi 04 Apr '14

04 Apr '14

Hi all, I'd like to write t_functional tests covering the setup of different packages working together. For instance, think about a complete mail server setup, consisting of Postfix, Amavis, ClamAV, Dovecot and more... This is the typical situation I deal with, when I run configuration management software, like NethServer -- I hope it will be a CentOS variant :) -- acting on the top of CentOS. How to extend t_functional in that case? Should I add a "role" test, such as the existing "lamp"? I saw "role" tests are executed on the same environment, after other "package" tests. What if a particular role test must be executed on a pristine environment? I'm worried about - say - OpenLDAP or MySQL: what if they are provisioned by different test cases in a conflicting way? Thanks in advance, -- Davide Principi Nethesis srl - Pesaro (Italy)

2 1

CentOS docker testing image
by Karanbir Singh 04 Apr '14

04 Apr '14

hi, I've just pushed to cloud.centos.org a test build for a CentOS-6-x86_64 docker image. Please test and provide feedback. The image is hosted at http://cloud.centos.org/centos/6/devel/ and is called : CentOS-6.5-x86_64-GA-docker_01.img.tar.bz2 sha256sum for this file: dab02fd8eafa80995830d0bacdf6a7ae6bcad8cd94af6f71c747dc861ebb77d9 ---- Known Issues: * Need to run rpm --rebuilddb inside the container once, otherwise yum is largely non functional. * There seem to be some selinux issues ( afaict, leaving libselinux intact would fix that ) ---- Using this image: (with epel enabled, on your CentOS-6.5/x86_64 host ): # yum install docker-io # /sbin/service docker start # docker import http://cloud.centos.org/centos/6/devel/CentOS-6.5-x86_64-GA-docker_01.img.t… c65_x64 test1 # docker images ( you should see the image listed ) # docker run -t -i <image id> /bin/bash ( you should now be inside the container ) bash-4.1# rpm --rebuilddb ---- Contributing changes: please send pull requests via: https://github.com/CentOS/sig-cloud-instance-build regards, -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc

4 7

Recompiling the Kernel for CentOS 6.5
by Saket Sinha 28 Mar '14

28 Mar '14

Hi, I am working on CentOS 6.5 which has 2.6.32-431 kernel. I have a problem with my driver and I need to enable Kernel-Memory leak in the kernel for which I will have to recompile the kernel. I get the kernel source tree from the the source rpm for my running kernel from below link- http://vault.centos.org/6.5/updates/Source/SPackages/kernel-2.6.32-431.11.2… and I try to build the kernel according to the below link on CentOS Wiki - http://www.centos.org/docs/rhel-sag-en-3/s1-custom-kernel-modularized.html according to which it tells me , after make menuconfig( and customizing my configuration), I need to follow the following steps- 1. make bzImage 2. make modules 3. make modules_install 4. make install but I get errors in the first step only-(make bzImage) Kindly suggest me as to what I am doing wrong. Regards, Saket SInha

3 2

Fwd: Announcing: Data Liberate, a Storage Hackathon and Mixer - Sunday, April 13, SF
by John Mark Walker 24 Mar '14

24 Mar '14

Forwarding this here - we'd like to get some CentOS storage SIG packaging done. Free lunch and happy hour drinks will be served on-site. -JM ----- Forwarded Message ----- From: "John Mark Walker" <johnmark(a)gluster.org> To: "Gluster Devel" <gluster-devel(a)nongnu.org> Sent: Monday, March 24, 2014 12:01:37 PM Greetings, Red Hat Storage is sponsoring Data Liberate: a Storage Hackathon and Mixer in San Francisco on Sunday, April 13. Would be great to get general participation from people in the area, as well as some hacking on big data, cloud and virtualization management integration. RSVP at http://dataliberate.eventbrite.com/ If you're interested in sponsoring, contact me off-list. Description: Hack all day, stay for the prizes and party! Modern cloud workloads demand storage services that are easily consumable and available to a variety of platforms. We need to liberate our data from the shackles of the big, dumb (proprietary) storage box and move it into the 21st century. So come one, come all storage, cloud and big data developers and devops practitioners. The Data Liberate Hackathon will be a chance for developers in disparate worlds to link their applications, infrastructure and other code with storage services. And did I mention fabulous prizes? And drinks? _______________________________________________ Gluster-devel mailing list Gluster-devel(a)nongnu.org https://lists.nongnu.org/mailman/listinfo/gluster-devel

1 0

Re: [CentOS-devel] CentOS Firewall and UTM SIG
by Shafiee Roozbeh 22 Mar '14

22 Mar '14

@eduardo Yes you are right. You are not crazy dreamer ! A midrange UTM and uper should support this features and another... The technical topic will open later, for now we are talking about general subjects ! Are goal is CentOS Security SIG ! A version of CentOS that provide features for network security and my topics to discuss are: - Do we need this SIG in CentOS ecosystem? - Is it any parallel project in CentOS right now? - Is CentOS a suitable base to provide and create this project? - and anything you think... :-) On Mar 22, 2014 3:15 AM, "Eduardo Kaftanski" <ekaftan(a)gmail.com> wrote: Can I elaborate a bit on what I would like this SIG to provide? -An integrated web console for object oriented (objects being servers, pc-workstations and people) network access manager. This console would get installed in a centralized server (maybe a small VM on whatever virtualization system you have) -A small dedicated CentOS server that you can install over comodity hardware. This would be an 'almost zero config' server. You only need to specify the IP for the admin interface and the IP for the central admin-server -This small servers can act as firewalls, mail proxys, antiviruses, web proxies, DNS, etc. -Small network? One small VM for the adminserver + one box doing firewall, proxy, mx, snort, etc. -Growing up? install a second box. Select proxy off for box 1 on the admin console, select proxy on on the second box. Select 'transparent on'. Select antivirus on. Click apply. Box one is no longer your proxy but transparently redirects proxy traffic to box two, now your proxy. yes, I am a crazy dreamer, but its like Asterisk... if you want a very small cheap PBX you can buy a Panasonic for US$500. You need Asterisk when you want the strange and crazy features. you dont install a CentOS firewall for a tiny network. A small WRT box works better is more stable and its way cheaper. You need a CentOS box when you are doing strange things, like balancinh, HA, multiview DNS, multiple ISP links, openvpn servers, ipsec, etc.. Ah... at least down here customers place MUCH more weight on the ability to selectively block access to their own people than protecting from outside attacks and 90% of the configurations I make have no external access at all. All they care is to be able to allow and block youtube and facebook with a mouse click. On Fri, Mar 21, 2014 at 6:36 PM, Shafiee Roozbeh <roozbeh.shafiee(a)gmail.com> wrote: > @Manuel > Our goal is not IPtables rule generator ! We are talking about a version of > CentOS that provide unified threat management which will be install on a > device or server. On this machine except iptables we need proxy and caching > service like squid and some tools else. > Firewalling is one of our goal... > :-) > > On Mar 22, 2014 1:51 AM, "Manuel Wolfshant" <wolfy(a)nobugconsulting.ro> > wrote: >> >> >> >> On 21 martie 2014 22:50:39 EET, Shafiee Roozbeh >> <roozbeh.shafiee(a)gmail.com> wrote: >> >@Christoph >> >Yes, I worked with this tool sometimes ago but I think that a web GUI >> >is >> >better for an administrator and our project because: >> > >> >- An administrator maybe doesn't access to a Linux desktop to work >> >with >> >fwbuilder but with his/her tablet or smartphone or even a Microsoft >> >Windows >> >OS can work with web GUI >> > >> If you can expose a web interface, you can expose ssh /VNC/VPN whatever to >> a machine where fwbuilder can run. Google Play provides apps for all of >> those and then some more >> >> >- Designing and development of web GUI with HTML/CSS is faster and >> >easier >> >that using a framework like Qt or GTK >> > >> >- The world is going to web ! >> And fwbuilder can run on your management workstation and push the rules to >> ANY server. Including the web server that you mentioned :) >> > > _______________________________________________ > CentOS-devel mailing list > CentOS-devel(a)centos.org > http://lists.centos.org/mailman/listinfo/centos-devel > -- Eduardo Kaftanski eduardo(a)kdi.cl ekaftan(a)gmail.com _______________________________________________ CentOS-devel mailing list CentOS-devel(a)centos.org http://lists.centos.org/mailman/listinfo/centos-devel

1 0

Start Cluster SIG
by Shafiee Roozbeh 21 Mar '14

21 Mar '14

Actually I mean HA my idea about this SIG is create HA Cluster spin of centos with installation media that has cli interface or web interface to perform and configure centos for HA usage. HA Cluster spin of centos with ISO installation media is my goal ! -- Roozbeh Shafiee Linux/BSD System Administrator and Python Developer RoozbehShafiee.Com

2 2

how minimal is a minimal too minimal
by Karanbir Singh 20 Mar '14

20 Mar '14

Hi Something that keeps coming up is how far can we minimalise an Instance / Image / Installer before we cant call it CentOS anymore. In the past, what we have generally stuck with is: - CentOS Shipped kernel - Initscripts - functional yum - functional openssh-server - atleast all of @base however, in some cases, openssh-server might not be needed, and initscripts has a fairly long dep tree, similarly making yum work needs a few things. Can we get away with losing yum as an example and replacing it with a script that says 'need yum? I can download and install it for you' and have it hit mirror.centos.org for static yum and yum dep urls ? similarly, should nobase and nocore be acceptable ? the aim being to setup a base image, that is under 150mb to download and deploy. -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

13 33

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel