Discuss June 2012

discuss@lists.centos.org

185 participants
179 discussions

Puppet + Passenger SELinux issues
by Trey Dockendorf 15 Jun '12

15 Jun '12

I recently setup my Puppetmaster server to run through Passenger via Apache instead of on the default webrick web server. SELinux made that not work and I've found some documentation on making rules to allow it however mine won't load. This is the policy I found via this website, http://sandcat.nl/~stijn/2012/01/20/selinux-passenger-and-puppet-oh-my/comm… . module puppet_passenger 1.7; require { type bin_t; type devpts_t; type httpd_t; type passenger_t; type port_t; type proc_net_t; class process { getattr siginh setexec sigchld noatsecure transition rlimitinh }; class unix_stream_socket { getattr accept read write }; class capability { sys_resource sys_ptrace }; class file { entrypoint open create relabelfrom relabelto getattr setattr read write append ioctl lock rename link unlink }; class lnk_file { getattr read }; class udp_socket name_bind; class dir { getattr setattr add_name remove_name search open read write ioctl lock }; } #============= httpd_t ============== allow httpd_t port_t:udp_socket name_bind; allow httpd_t proc_net_t:file { read getattr open }; allow httpd_t bin_t:file entrypoint; allow httpd_t passenger_t:process sigchld; allow httpd_t passenger_t:unix_stream_socket { getattr accept read write }; optional_policy(` puppet_manage_lib(httpd_t) puppet_search_log(httpd_t) puppet_search_pid(httpd_t) allow httpd_t puppet_var_lib_t:file { relabelfrom relabelto }; ') #============= passenger_t ============== allow passenger_t devpts_t:dir search; allow passenger_t httpd_t:process { siginh rlimitinh transition noatsecure }; allow passenger_t self:capability { sys_resource sys_ptrace }; allow passenger_t self:process setexec; ps_process_pattern(passenger_t, httpd_t) domain_read_all_domains_state(passenger_t) Using the SELinux Make file works but when I try to add the new policy via "semodule -i puppet_passenger.pp" I get the following # semodule -i puppet_passenger.pp libsepol.print_missing_requirements: puppet_passenger's global requirements were not met: type/attribute passenger_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! The blog I got the policy from mentioned disabling the rubygem_passenger policy, is that where passenger_t is defined? I've looked at the source of selinux-policy and see the required type of passenger_t is working so unsure why it doesn't work in my policy. The policy from audit2allow generates this when using "grep -e 'httpd\|passenger'" but it seems like too much allowance module passenger 1.0; require { type unconfined_t; type semanage_t; type init_t; type system_cronjob_t; type mysqld_t; type syslogd_t; type apmd_t; type initrc_t; type postfix_local_t; type puppet_etc_t; type setfiles_t; type rpm_t; type unlabeled_t; type var_run_t; type kernel_t; type puppet_var_run_t; type puppet_var_lib_t; type auditd_t; type httpd_t; type rpm_var_lib_t; type postfix_cleanup_t; type postfix_master_t; type inetd_t; type udev_t; type mysqld_safe_t; type postfix_pickup_t; type sshd_t; type crond_t; type getty_t; type postfix_qmgr_t; type ntpd_t; class sock_file { write unlink open }; class capability { sys_resource sys_ptrace }; class process setexec; class dir { write getattr read create search add_name }; class file { execute read create execute_no_trans write open append }; } #============= httpd_t ============== allow httpd_t apmd_t:dir { getattr search }; allow httpd_t apmd_t:file { read open }; allow httpd_t auditd_t:dir { getattr search }; allow httpd_t auditd_t:file { read open }; allow httpd_t crond_t:dir { getattr search }; allow httpd_t crond_t:file { read open }; allow httpd_t getty_t:dir { getattr search }; allow httpd_t getty_t:file { read open }; allow httpd_t inetd_t:dir { getattr search }; allow httpd_t inetd_t:file { read open }; allow httpd_t init_t:dir { getattr search }; allow httpd_t init_t:file { read open }; allow httpd_t initrc_t:dir { getattr search }; allow httpd_t initrc_t:file { read open }; allow httpd_t kernel_t:dir { getattr search }; allow httpd_t kernel_t:file { read open }; allow httpd_t mysqld_safe_t:dir { getattr search }; allow httpd_t mysqld_safe_t:file { read open }; allow httpd_t mysqld_t:dir { getattr search }; allow httpd_t mysqld_t:file { read open }; allow httpd_t ntpd_t:dir { getattr search }; allow httpd_t ntpd_t:file { read open }; allow httpd_t postfix_cleanup_t:dir { getattr search }; allow httpd_t postfix_cleanup_t:file { read open }; allow httpd_t postfix_local_t:dir { getattr search }; allow httpd_t postfix_local_t:file { read open }; allow httpd_t postfix_master_t:dir { getattr search }; allow httpd_t postfix_master_t:file { read open }; allow httpd_t postfix_pickup_t:dir { getattr search }; allow httpd_t postfix_pickup_t:file { read open }; allow httpd_t postfix_qmgr_t:dir { getattr search }; allow httpd_t postfix_qmgr_t:file { read open }; allow httpd_t puppet_etc_t:file { execute execute_no_trans }; #!!!! The source type 'httpd_t' can write to a 'dir' of the following types: # squirrelmail_spool_t, dirsrv_config_t, httpd_tmp_t, httpd_cache_t, httpd_tmpfs_t, dirsrvadmin_tmp_t, httpd_squirrelmail_t, dirsrv_var_log_t, zarafa_var_lib_t, dirsrv_var_run_t, httpd_var_run_t, dirsrvadmin_config_t, httpd_dirsrvadmin_rw_content_t, httpd_prewikka_rw_content_t, httpd_w3c_validator_rw_content_t, httpd_awstats_rw_content_t, httpd_user_rw_content_t, httpdcontent, httpd_cobbler_rw_content_t, httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t, httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t, httpd_nutups_cgi_rw_content_t, httpd_mediawiki_rw_content_t, httpd_apcupsd_cgi_rw_content_t, httpd_squid_rw_content_t, httpd_smokeping_cgi_rw_content_t allow httpd_t puppet_var_lib_t:dir { read write create add_name }; allow httpd_t puppet_var_lib_t:file { write create append }; allow httpd_t puppet_var_run_t:dir { search getattr }; allow httpd_t rpm_t:dir { getattr search }; allow httpd_t rpm_t:file { read open }; allow httpd_t rpm_var_lib_t:dir { search getattr }; allow httpd_t rpm_var_lib_t:file open; #!!!! This avc can be allowed using the boolean 'httpd_setrlimit' allow httpd_t self:capability sys_resource; allow httpd_t self:capability sys_ptrace; allow httpd_t self:process setexec; allow httpd_t semanage_t:dir { getattr search }; allow httpd_t semanage_t:file { read open }; allow httpd_t setfiles_t:dir { getattr search }; allow httpd_t setfiles_t:file { read open }; allow httpd_t sshd_t:dir { getattr search }; allow httpd_t sshd_t:file { read open }; allow httpd_t syslogd_t:dir { getattr search }; allow httpd_t syslogd_t:file { read open }; allow httpd_t system_cronjob_t:dir { getattr search }; allow httpd_t system_cronjob_t:file { read open }; allow httpd_t udev_t:dir { getattr search }; allow httpd_t udev_t:file { read open }; allow httpd_t unconfined_t:dir { getattr search }; allow httpd_t unconfined_t:file { read open }; allow httpd_t unlabeled_t:file { read execute open execute_no_trans }; #!!!! The source type 'httpd_t' can write to a 'file' of the following types: # squirrelmail_spool_t, httpd_lock_t, dirsrv_config_t, httpd_tmp_t, httpd_cache_t, httpd_tmpfs_t, dirsrvadmin_tmp_t, httpd_squirrelmail_t, dirsrv_var_log_t, zarafa_var_lib_t, dirsrv_var_run_t, httpd_var_lib_t, httpd_var_run_t, dirsrvadmin_config_t, httpd_dirsrvadmin_rw_content_t, httpd_prewikka_rw_content_t, root_t, httpd_w3c_validator_rw_content_t, httpd_awstats_rw_content_t, httpd_user_rw_content_t, httpdcontent, httpd_cobbler_rw_content_t, httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t, httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t, httpd_nutups_cgi_rw_content_t, httpd_mediawiki_rw_content_t, httpd_apcupsd_cgi_rw_content_t, httpd_squid_rw_content_t, httpd_smokeping_cgi_rw_content_t allow httpd_t var_run_t:file { write open }; #!!!! The source type 'httpd_t' can write to a 'sock_file' of the following types: # httpd_tmp_t, httpd_tmpfs_t, dirsrv_var_run_t, httpd_var_run_t allow httpd_t var_run_t:sock_file { write unlink open }; Here's my version of selinux-policy selinux-policy.noarch 3.7.19-126.el6_2.10 selinux-policy-targeted.noarch 3.7.19-126.el6_2.10 Any advice or pointers of how to get puppetmasterd to run through passenger WITH SELinux would be great. Thanks - Trey

2 1

Should we run Amavisd on our final delivery hosts?
by James B. Byrne 15 Jun '12

15 Jun '12

We use Cyrus-imapd together with Postix to effect final delivery of email messages to our clients. The final delivery server is isolated from the internet via a firewall and only pre-authorized host addresses can connect. All user pickup and delivery email traffic is handled through separate Internet accessible hosts that may establish these connections. The Internet facing hosts have Postfix and Amavisd running configured with ClamAV and Spamassassin. Is there anything to be gained by having Amavisd, ClamAV and Spamassassin running on the IMAP delivery box in addition to the public hosts? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] Centos 6 - Networking: Some Queries -- GURUS HELP PL
by Sanjay Arora 15 Jun '12

15 Jun '12

With NM_Controlled=No in the ifcfg file, NM applet shows "Not Managed", so the ifcfg file is being read. What is the extent of interaction of NetworkManager with ifcfg files is unknown....very little information on the net. Seems Network Manager is still mostly unplublished compared to other utilities. Any pointers to literature on this or macro architecture of NM would be appreciated, as Google is not throwing up the right results. On a separate note however, I'd still like to know how to use a bridge to route packets between two networks.....say network card having address...192.168.1.3 and a kvm based virtual network say 172.31.1.0/24needing to use this device for Internet access (through router 192.168.1.1) using a bridge? How to do it? With regards. Sanjay.

6 24

OT - Is there a package to monitor network traffic
by Steve Campbell 15 Jun '12

15 Jun '12

We have a situation here that is a real mystery. Our MRTG on our outgoing router and a firewall server that protects our web servers is showing a spike every six hours. I can't find the server behind the firewall that is generating such an extreme amount of packets, even though I've looked through the crontabs of nearly all servers, performed "ps" variations, and other types of investigation. Is there any type of package I can install that will monitor traffic and report abnormal, over-threshold packets similar to what wireshark might do in a manner that would allow me to determine where these packets might be going or from where they originate? Thanks for any help. steve campbell

12 17

CentOS 4x Download
by Shiv. Nath 14 Jun '12

14 Jun '12

Dear Community Friends, i badly require CentOS 4x, because one of our application only work with that version, and current server has failed. The image which is available in CentOS following sites. CD is not boot able, cannot install. http://vault.centos.org/4.9/ http://vault.centos.org/ can anyone help to guide me how can o get CD or DVD image CentOS 4x. Thanks / Regards

2 2

CentOS-announce Digest, Vol 88, Issue 9
by centos-announce-request＠centos.org 14 Jun '12

14 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0731 Moderate CentOS 5 expat Update (Johnny Hughes) 2. CESA-2012:0730 Important CentOS 5 java-1.6.0-openjdk Update (Johnny Hughes) 3. CESA-2012:0729 Critical CentOS 6 java-1.6.0-openjdk Update (Johnny Hughes) 4. CESA-2012:0731 Moderate CentOS 6 expat Update (Johnny Hughes) 5. CEBA-2012:0738 CentOS 5 gawk FASTTRACK Update (Johnny Hughes) 6. CEBA-2012:0737 CentOS 6 corosync Update (Johnny Hughes) 7. CEEA-2012:0739 CentOS 6 mlx4_ib Update (Johnny Hughes) 8. CEEA-2012:0739 CentOS 6 mlx4_en Update (Johnny Hughes) 9. CEBA-2012:0740 CentOS 6 apr Update (Johnny Hughes) 10. CEEA-2012:0739 CentOS 6 mlx4_core Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 13 Jun 2012 17:07:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0731 Moderate CentOS 5 expat Update To: centos-announce(a)centos.org Message-ID: <20120613170710.GA31156(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0731 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0731.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3cd68b239349db1f2a58ad30ef511148235cda9e7b692323d0b8606aa0f094e3 expat-1.95.8-11.el5_8.i386.rpm 1a19aae09d3fae92d7e31244abe1d12804206a3f0445a7d56c34e363d16e870a expat-devel-1.95.8-11.el5_8.i386.rpm x86_64: 3cd68b239349db1f2a58ad30ef511148235cda9e7b692323d0b8606aa0f094e3 expat-1.95.8-11.el5_8.i386.rpm 9e40d6c5cfd8288231e0a3c7a193a1601fb6a909df00a917d59cc02e596ea7dd expat-1.95.8-11.el5_8.x86_64.rpm 1a19aae09d3fae92d7e31244abe1d12804206a3f0445a7d56c34e363d16e870a expat-devel-1.95.8-11.el5_8.i386.rpm 25f29550c06e68dbdd2847421e2c1db4f8fa3a02dab12f6cdfc7b2b3ab72e2c8 expat-devel-1.95.8-11.el5_8.x86_64.rpm Source: f394a130aa92f025255ee20283d9dc9e93f73c8858bfb1a87736e211df8b65b6 expat-1.95.8-11.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 13 Jun 2012 17:29:00 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0730 Important CentOS 5 java-1.6.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20120613172900.GA31415(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0730 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0730.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f1f34d561b7a8792c87baa365b8c476dbc16149df94ea0a932e022d474097445 java-1.6.0-openjdk-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm 0cea3bb758babe5704bdf9897f07f29a96eb97c4be5ce21c618fc8d33747b04a java-1.6.0-openjdk-demo-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm 71ab34ae5c8c4d7e43a61fcfae9e10f50941cbeebc2e0fe23d82285817b21efb java-1.6.0-openjdk-devel-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm 21f4b7cbe5175549528a3dac11c505f28b7a668e9dde5ccbf17cf345cf83575b java-1.6.0-openjdk-javadoc-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm 280419ee63d45161e204fef85af031d278eb0909e9cc1bafc452b0705db7836e java-1.6.0-openjdk-src-1.6.0.0-1.27.1.10.8.el5_8.i386.rpm x86_64: 1b0412bd15d348d4877e0fbd9cd50e82c3e6dce631bf308f6f8858de98f7b5f2 java-1.6.0-openjdk-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm b9dcd93b7fa94e31887896710a5fa359db59f4e9718560529595b54a68153434 java-1.6.0-openjdk-demo-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm 5f3e3f41f9e0f012d12d42fc238ca0c71bbebc2e50c090a104797ef9f216d723 java-1.6.0-openjdk-devel-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm 9a78d0538ab735128188ea3a6aa5664db2111d94c2e8162f1acd44875c4aaa29 java-1.6.0-openjdk-javadoc-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm f5b83eb56f378bcf7dfbb99231b715455b98c0dd6c259b4373b6c5822bece004 java-1.6.0-openjdk-src-1.6.0.0-1.27.1.10.8.el5_8.x86_64.rpm Source: 49f7df8ca0562c4a706c0553ac41c4b625a2035d21ba7a730c154d3f79c95b43 java-1.6.0-openjdk-1.6.0.0-1.27.1.10.8.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 13 Jun 2012 18:29:41 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0729 Critical CentOS 6 java-1.6.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20120613182941.GA2032(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0729 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0729.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f6064d60ec45630845556ea2bfbf70ebbc5ea95717803eb8027128f9655bc5d3 java-1.6.0-openjdk-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm bdbcde99f4db7a8f3fb1718f34af8dbe54e6c253c3a7049a23afa1f95a920494 java-1.6.0-openjdk-demo-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm 6382c6a20130004aa6a3a34c39ffd61cd49ebddcb4670c8b110b5094943a76f8 java-1.6.0-openjdk-devel-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm 264fed7959f4939ddc6549e33f2e37af2c6e1a9692be0055f0fb3dec03c1cc4e java-1.6.0-openjdk-javadoc-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm b4d12776a4096262a4afb507186986695174aa496b0e9400aa57d500375e2eb6 java-1.6.0-openjdk-src-1.6.0.0-1.48.1.11.3.el6_2.i686.rpm x86_64: 294692a655d216d9694d4689aa905751ee441fd12bdba84eb0201cb982d1364b java-1.6.0-openjdk-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm aa479002a611beb1f85db30896cc18eb93499c1ba80cd210bdb4a0f9bc2e61f5 java-1.6.0-openjdk-demo-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm 04417bda745a7af5bf82eb91ad2c522471a530822eb271ecbb6f04d29d2f8b54 java-1.6.0-openjdk-devel-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm 4023d85f98a659ffd44cafda01d52092db6a2c36624b758415d47182308c150a java-1.6.0-openjdk-javadoc-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm a73b6aeb73341c9319cbf6950b95a6a9eb3b5fd381ec0ed8949d092ea64d215f java-1.6.0-openjdk-src-1.6.0.0-1.48.1.11.3.el6_2.x86_64.rpm Source: 55fecca6690cbd8855e3da09599f8de4cdb51ac812b457a5ca69a3f0ce2c0f15 java-1.6.0-openjdk-1.6.0.0-1.48.1.11.3.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 13 Jun 2012 18:29:54 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0731 Moderate CentOS 6 expat Update To: centos-announce(a)centos.org Message-ID: <20120613182954.GA2114(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0731 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0731.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: aefccd0285b312ec3cf053715b66c45e7883145255c993c7e2bd1848b420deb1 expat-2.0.1-11.el6_2.i686.rpm 17e426a5bdf8c89b247e4f45de8ce69fbf7c3be00c39b753e1047b447ed4a8e0 expat-devel-2.0.1-11.el6_2.i686.rpm x86_64: aefccd0285b312ec3cf053715b66c45e7883145255c993c7e2bd1848b420deb1 expat-2.0.1-11.el6_2.i686.rpm 28847d115e3c8dd72e6535b8148a61fb9e33f66a00de8bea82f449aca78d6970 expat-2.0.1-11.el6_2.x86_64.rpm 17e426a5bdf8c89b247e4f45de8ce69fbf7c3be00c39b753e1047b447ed4a8e0 expat-devel-2.0.1-11.el6_2.i686.rpm 1166744647cdcaf5732fe68362b1b9011cca481f74a8c0c7bd2d0353d049b00f expat-devel-2.0.1-11.el6_2.x86_64.rpm Source: e73a78c840f047c382984201f9be499041c411f82e26f02359183f5fe25fad6a expat-2.0.1-11.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Thu, 14 Jun 2012 12:03:16 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0738 CentOS 5 gawk FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120614120316.GA22484(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0738 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-0738.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1b9fd31792bc4cf959a942d8e1ef9fb03e8a8cfa913cc62e92e014929729e4b8 gawk-3.1.5-16.el5.i386.rpm x86_64: 8551946d42238c5c8df44d51b82218ae66ca8a9ce9f95d1a379c8b07d61d42fa gawk-3.1.5-16.el5.x86_64.rpm Source: c863aec9045f0a9e8a629eb3df290b902d1b6cfac69098a48c2fd03f22680815 gawk-3.1.5-16.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Thu, 14 Jun 2012 13:43:13 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0737 CentOS 6 corosync Update To: centos-announce(a)centos.org Message-ID: <20120614134313.GA26996(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0737 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0737.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3120b000ba613d70bc9bb9d03c7d710a80416a4426c6a232638c9c2fdc7221a2 corosync-1.4.1-4.el6_2.3.i686.rpm 2e890b0218462dd15c17d81ea176c1704d335f1252072db10c5313c33c8e2d9b corosynclib-1.4.1-4.el6_2.3.i686.rpm 7449f7bb3884d39d31f6603d6db3267aa91b271e65bb64aae4a0a0fce6632aec corosynclib-devel-1.4.1-4.el6_2.3.i686.rpm x86_64: f236368bfe3539deee104eab3ce3d22f768dbb32a2129381034157ac916a59e5 corosync-1.4.1-4.el6_2.3.x86_64.rpm 2e890b0218462dd15c17d81ea176c1704d335f1252072db10c5313c33c8e2d9b corosynclib-1.4.1-4.el6_2.3.i686.rpm 935cef83b9f28f16180fd972d8a58a5cdedf02938136ea1880d5e91a6164ce82 corosynclib-1.4.1-4.el6_2.3.x86_64.rpm 7449f7bb3884d39d31f6603d6db3267aa91b271e65bb64aae4a0a0fce6632aec corosynclib-devel-1.4.1-4.el6_2.3.i686.rpm b05cbe8c2c2d2e1bc686d031c1ab1df918817d6c6bb1f8ab2e4d0b148ed80c50 corosynclib-devel-1.4.1-4.el6_2.3.x86_64.rpm Source: f666c63498a2b0a47474255f5bebdac27f8b19d043aeb03ee3a0dceadda61be2 corosync-1.4.1-4.el6_2.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Thu, 14 Jun 2012 13:43:46 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0739 CentOS 6 mlx4_ib Update To: centos-announce(a)centos.org Message-ID: <20120614134346.GA27073(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0739 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0739.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c67537efae105b7c70f56fadaa3e34834502ab152af7a16aa3f44b383999d094 kmod-mlx4_ib-1.0.32.269-1.el6_2.i686.rpm x86_64: 1c64fd86aa78e8f610622ee0ead655d5c73d229e47b191403259ed2b40516c42 kmod-mlx4_ib-1.0.32.269-1.el6_2.x86_64.rpm Source: 777bdacc77b367a9bfb853a458cd01d968c802b41f8d4a7b79bafb135207559d mlx4_ib-1.0.32.269-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Thu, 14 Jun 2012 13:44:03 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0739 CentOS 6 mlx4_en Update To: centos-announce(a)centos.org Message-ID: <20120614134403.GA27144(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0739 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0739.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4535fe7fca08e503ad67afe4ba8371c3def9069118ac9528647cf264012f6f43 kmod-mlx4_en-2.0.32.269-1.el6_2.i686.rpm x86_64: ee92c416be5b0390a2ff481678d5d072f6038c9dfdf6e8fd1de14411cee7c0a7 kmod-mlx4_en-2.0.32.269-1.el6_2.x86_64.rpm Source: 59d88b1ff8d4c248ab04e36d40e4342f0c68756bfca1aa7ecd38140b4e1836d9 mlx4_en-2.0.32.269-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Thu, 14 Jun 2012 13:44:33 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0740 CentOS 6 apr Update To: centos-announce(a)centos.org Message-ID: <20120614134433.GA27226(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0740 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0740.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fb234149db1d4b3ef3b6e75bbaf11d848213e4a6e0656d50364d9da8bb860d28 apr-1.3.9-5.el6_2.i686.rpm 37b9e9870317f6ba8b36666752b0aa16e1eca6ea35738f5bb8369bd2b27b8ed5 apr-devel-1.3.9-5.el6_2.i686.rpm x86_64: fb234149db1d4b3ef3b6e75bbaf11d848213e4a6e0656d50364d9da8bb860d28 apr-1.3.9-5.el6_2.i686.rpm 6fa37b8f1ff2dabec810dd59e5b1de60660187755725d9de5f303fbfd8eb0366 apr-1.3.9-5.el6_2.x86_64.rpm 37b9e9870317f6ba8b36666752b0aa16e1eca6ea35738f5bb8369bd2b27b8ed5 apr-devel-1.3.9-5.el6_2.i686.rpm 9df664b194f72be491a3ad6e31b7b9009a3ccc0bd916cdcbfe6928750e55078a apr-devel-1.3.9-5.el6_2.x86_64.rpm Source: 9775f276bb8e6b80a33a5bdbfa2d1619a42e9499702c5507e22268358ff01c8d apr-1.3.9-5.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Thu, 14 Jun 2012 13:44:53 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0739 CentOS 6 mlx4_core Update To: centos-announce(a)centos.org Message-ID: <20120614134453.GA27297(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0739 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0739.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cd17436881234bf53282fef05c00d459d58b88d804b1de21843c55270463c925 kmod-mlx4_core-1.1.32.269-1.el6_2.i686.rpm x86_64: 8727bad5734d882c761c6e3a537c478dd012b1a512dde109814a08227c7692fc kmod-mlx4_core-1.1.32.269-1.el6_2.x86_64.rpm Source: 4c58d2912a6d1531973aca3fea9a63009f187c385d797ad7d2e21648318925e7 mlx4_core-1.1.32.269-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 9 **********************************************

1 0

Best way to duplicate a live Centos 5 server?
by Emmanuel Noobadmin 14 Jun '12

14 Jun '12

I've got a CentOS 5 server that I want to migrate over into a virtualized instance. The problem is I need to minimize downtime so was trying to figure out a way to "live" clone the original. Initially, I thought I could do this via exporting an iSCSI target from the virtual host, create a MD raid 1 array on the C5 server, wait for it to sync, then shutdown the physical server and switch to the virtual one. But after getting iSCSI working... I realize I could not create a md device on a mounted disk. Unfortunately this old C5 wasn't setup with md raid 1 originally so I can't just add a the iSCSI target as an additional member for a triplicate. So I remembered DRBD was supposed to be used for replication. But after getting things set up, running the drbd-admin create-md command gave me this scary warning it will destroy data on the disk. Apparently because drbd writes meta data to the drive. So that appears to be a no go too. Am I missing something glaringly obvious here, or is the only way I'm going be able to migrate is to shutdown the C5 server for a few hours while duping the old drives? Would greatly appreciate any pointers how best to do this.

5 7

CentOS 6.2 32 default kernel support pae?
by Arun Khan 14 Jun '12

14 Jun '12

A client is insisting to install CentOS 6.2 32 bit version [1] on a system with 4GB RAM. Lately, I have done 64 bit installations only; not sure if the 32 bit kernel supports pae for >= 4GB RAM. If anyone knows the answer please let me know (will save me time on an installation in my setup). [1] The Client's ERP vendor has validated the application on the 32 bit platform only thus the reason for 32 bit version. Thanks, -- Arun Khan

3 4

Two CentOS installations failed dual boot
by Amindeed 14 Jun '12

14 Jun '12

Hello everybody, I installed Centos 6.2 on a computer with an older version of it in order to dual boot both of them. I managed to install the new OS on a physically seperated hard drive, and configured grub to make the newly installed OS the default one. Now the older OS won't boot and this error message shows: *"error 13: invalid or unsupported executable format"*. I attached to the email the output of *"fdisk -l"* and a copy of the *"/etc/grub.conf"* configuration file. I have no experience dealing with boot/grub issues, so any help on this will be much appreciated. Regards.

1 0

kvm CLI :: meaning of "vlan=" and "name=" options in -net nic and -net tap
by Arun Khan 14 Jun '12

14 Jun '12

Did not get any response in the CentOS Virt list. Posting in the CentOS General list hoping that some one here can provide clarification. Thx, -- Arun Khan ---------- Forwarded message ---------- From: Arun Khan Date: Tue, Jun 12, 2012 at 8:54 PM Subject: Meaning of "vlan=" and "name=" in Linux KVM To: CentOS Virt <centos-virt(a)centos.org> Greetings KVM gurus, I am trying to understand a "use case" scenario for the "vlan=n" option and "name=name" for the "-net nic" and "-net tap" directives. I have done some search but I have not come up with anything that sheds any light on the above. <quote from kvm man> Network options: -net nic[,vlan=n][,macaddr=mac][,model=type] [,name=name][,addr=addr][,vectors=v] Create a new Network Interface Card and connect it to VLAN n (n = 0 is the default). The NIC is an e1000 by default on the PC target. Optionally, the MAC address can be changed to mac, the device address set to addr (PCI cards only), and a name can be assigned for use in monitor commands. Optionally, for PCI cards, you can specify the number v of MSI-X vectors that the card should have; this option currently only affects virtio cards; set v = 0 to disable MSI-X. If no -net option is specified, a single NIC is created. Qemu can emulate several different models of network card. Valid values for type are "virtio", "i82551", "i82557b", "i82559er", "ne2k_pci", "ne2k_isa", "pcnet", "rtl8139", "e1000", "smc91c111", "lance" and "mcf_fec". Not all devices are supported on all targets. -net tap[,vlan=n][,name=name][,fd=h][,ifname=name] [,script=file][,downscript=dfile] Connect the host TAP network interface name to VLAN n, use the network script file to configure it and the network script dfile to deconfigure it. If name is not provided, the OS automatically provides one. fd=h can be used to specify the handle of an already opened host TAP interface. The default network configure script is /etc/qemu-ifup and the default network deconfigure script is /etc/qemu-ifdown. Use script=no or downscript=no to disable script execution. </quote from kvm man> My objective is to create a small "virtual" network using bridges/tap interfaces on the Host OS and running the Guest OSs (the network segment separated by vlan=somenumber) My hypothesis is that with "vlan=X" and "name=somename" the VMs can be separated into different segments i.e. a set of tap interfaces on vlan=10 and another set of tap interfaces on vlan=20 connected to the same bridge br0. I have two VMs started with "kvm -net tap,vlan=10" and "kvm -net tap,vlan=20" respectively but with IP numbers in the same subnet 172.16.0.0/24; they are able to ping each other with different "vlan" numbers. I would appreciate any clarification on the "vlan=" and "name=" options. Sample script for my KVM VMs <script> #!/bin/bash kvm \ -vga std \ -m 1024 \ -cpu core2duo \ -smp 2,cores=2 \ -drive file=/home/kvmusr/KVM/vdisks/centos62.img,index=0 \ -net nic,vlan=1,model=e1000,macaddr=${nic_mac_addr0} \ -net tap,vlan=1,ifname=tap0,script=no,downscript=no \ </script> Thanks, -- Arun Khan

1 0

← Newer
1
...
8
9
10
11
12
13
14
...
18
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2012