Discuss October 2014

discuss@lists.centos.org

199 participants
220 discussions

Re: [CentOS] And now for something completely different. Win7 on KVM
by James B. Byrne 27 Oct '14

27 Oct '14

On Mon, October 27, 2014 03:57, Patrick Bervoets wrote: > > Op 23-10-14 om 18:00 schreef James B. Byrne: >> At the moment none I guess. The message is that the client cannot find a >> driver. I have virtio-win-0.1-74.iso and virtio-win-0.1-81.iso on the >> hypervisor host. How do I get the driver from there into the guest? Does >> the >> client have access to the hypervisor's file-systems? Do I mount the ISO as >> a >> cd-rom in the guest? How is that done? In virt-manager? Is there a >> document >> somewhere that I can get an idea on how this is supposed to work? >> > > James, > > I don't know if help is still needed. Trust me. I am always in need of help. > > You can mount the iso via virt-manager if you have (or create) a > virt-storage-pool. > > If you can reboot the client you could edit > /etc/libvirt/qemu/virtclientname.xml and add > <disk type='file' device='cdrom'> > <driver name='qemu' type='raw'/> > <source file='/opt/isos/virtio-win-0.1-81.iso'/> > <target dev='hdc' bus='ide'/> > <readonly/> > <address type='drive' controller='0' bus='1' target='0' unit='0'/> > to <devices> > > (if your client already has more than 2 drives attached, change target dev hdc > to hdd or ...) > > You can switch your storages to virtio too, I did it in the past but fail to > find my notes. They are already virtio. > > I think that the steps on this page are correct: > http://setdosa.blogspot.be/2013/09/moving-your-windows-guest-from-ide-to.ht… > > And, of course, work on a snapshot or at least have a copy of your client. > > If you need help to change the driver in Windows I suggest we take this > off-list since some are very allergic to Microsoft. > At the moment all I am looking for is how to use the CentOS tools to mount a guest system. So I think that probably falls in the scope of this list. If (when) I get into trouble on the Win side of things then I will take you up on your kind offer. Per your suggestion I used virt-manager to open the guest and added a hardware device. I selected the option "Select managed or other existing storage", browsed for the virtio-win.iso and set the Device type to IDE CDROM with storage type 'raw'. I started the guest and the new CDROM shows in the hardware list. I will see how it goes from there. Thanks again, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 2

Re: [CentOS] And now for something completely different. Win7 on KVM
by James B. Byrne 27 Oct '14

27 Oct '14

On Thu, October 23, 2014 02:58, Patrick Bervoets wrote: > > James, > > on the client, which driver do you use? Mine is 'Red Hat VirtIO Ethernet > Adapter' 61.65.104.7400 20/11/2013. I got it from virtio-win-0.1-74.iso > At the moment none I guess. The message is that the client cannot find a driver. I have virtio-win-0.1-74.iso and virtio-win-0.1-81.iso on the hypervisor host. How do I get the driver from there into the guest? Does the client have access to the hypervisor's file-systems? Do I mount the ISO as a cd-rom in the guest? How is that done? In virt-manager? Is there a document somewhere that I can get an idea on how this is supposed to work? Bear in mind that other than the occasional configuration and diagnostic issue I have very, very little experience with MS-Win since XPsp3 and none at all in running it as a guest on KVM. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Filesystem writes unexpectedly slow (CentOS 6.4)
by Joakim Ziegler 26 Oct '14

26 Oct '14

On 16/10/14, 15:35, m.roth(a)5-cent.us wrote: > I missed the beginning of this thread - how is the filesystem mounted? > For ext4, we finally found that it worked well... *if* it was mounted > nobarrier. That made the detar of a compressed tar file go from > literally 7 minutes to about 30-46 seconds. That is interesting. I have barriers enabled, I will try disabling them (I have battery backup on the RAID controller, so it should be ok). Then again, I have barriers enabled on the other, very similar box too, and I hit 2GB/sec there, so I don't think that's the main factor. Still, will test. Thanks. -- Joakim Ziegler - Supervisor de postproducción - Terminal joakim(a)terminalmx.com - 044 55 2971 8514 - 5264 0864

2 1

Centos 6.5 - Fping - SE Linux - Missing type enforcement (TE) allow rule
by admin 26 Oct '14

26 Oct '14

Hi gents, I seem to have a small issue with fping and Observium(a monitoring solution). The particular VPS I'm using does have SELinux enabled and it seems to be causing issues when the httpd process is attempting to use Fping? Here is what I know so far : Output from "audit2why -a" : --------------- type=AVC msg=audit(1414265994.125:6744): avc: denied { create } for pid=8968 comm="fping" scontext=unconfined_u:system_r:httpd_t:s0 Was caused by: Missing type enforcement (TE) allow rule. You can use audit2allow to generate a loadable module to allow this access. --------------- Which does seem to confirm that something is wrong between httpd and fping. I then ran "audit2allow -M fping-httpd < audit2allow" which did create both the .te and .pp files. The issue is that inside the .te file, I have a warning saying that the rules already exists! Which does make sense since I had to allow those particular function for the Mysql connection to function properly. --------------- .te file : "module fping-httpd 1.0; require { type httpd_t; class capability net_raw; class rawip_socket create; } #============= httpd_t ============== #!!!! This avc is allowed in the current policy allow httpd_t self:capability net_raw; allow httpd_t self:rawip_socket create; " --------------- Is the "Missing type enforcement" related to all of this? I really don't want to disable SELinux and would rather learn to actually use it properly. Thank you!

3 3

Re: [CentOS] And now for something completely different. Win7 on KVM
by James B. Byrne 26 Oct '14

26 Oct '14

On Fri, October 24, 2014 16:09, Nathan Duehr wrote: >> On Oct 22, 2014, at 15:15, James B. Byrne <byrnejb(a)harte-lyne.ca> wrote: >> >> >> As you can probably guess by now I am working my way down through my >> outstanding issue list trying to get as many deferred items closed out as I >> can before the next security storm hits. > > They stopped? :-) > I am in the eye of the hurricane more likely. But I will take whatever calm I can find. For however long it lasts. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

C7 : Firewalld
by Always Learning 26 Oct '14

26 Oct '14

Being a fan of IPtables and dreading the eventual transition to Centos 7, I wondered if in C7's firewalld an interface can be assigned to a single zone or to multiple zones such as 'private' and 'trusted'. For example interface em1 having both trusted and public zones assigned to it. If multiple zones per interface are permitted presumably one can segregate traffic by IP range ? -- Thank you. Paul. England, EU.

4 3

Re: [CentOS] [exim] Some feature
by Always Learning 25 Oct '14

25 Oct '14

On Fri, 2014-10-24 at 13:35 +0400, Фадеев Виталий Львович wrote: > Yes. Its worked if i send email to fvl+test(a)domain.com from fvl(a)domain.com account, but doesnt work if a i send to another user like realuser+test(a)domain.com . > In logs "Unknown user" What is your Exim configuration syntax for delivering emails to (a) fvl(a)domain.com (b) fvl+test(a)domain.com (c) realuser(a)domain.com ? What specific configuration are you using for email delivery ? -- Regards, Paul. England, EU.

1 0

Q. LUKS or ecryptfs-utils ?
by James B. Byrne 25 Oct '14

25 Oct '14

I am now investigating encrypting our IMAP user spool files. Does anyone have experience with handling encrypted data stores using either or both of the subject methods and would care tio share their observations? Which is the preferred method (I know: it depends, but on what?)? What administrative pain does each cause? Our IMAP host is a KVM guest so spinning up a duplicate and simply copying the data to an encrypted device or filesystem is not a very big deal. We can live with manually mounting the file system and providing a pass-phrase at boot. we are also looking into a semi-auto USB based solution to that issue. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 6

What is a client certificate?
by Timothy Murphy 25 Oct '14

25 Oct '14

A very ignorant question, sans doute. I get my certificates from cacert.org, to whom I am very grateful. I follow what I take to be the official procedure, first creating <server>.key and <server>.csr on my server and then getting <server>.crt by going to Server Certificate=>New at the cacert site. I then place the key certficate *.key in /etc/pki/tls/private/ and what I call the client certificate *.crt in /etc/pki/tls/certs/ . But I notice that there at www.cacert.org there is a Client Certificate folder as well as the Server Certificate folder, and it seems that one can create a "client certificate" there. My quesion is: what is the purpose of this second client certificate? And while I am on the topic, what are the recommended file permissions for PKI certificates? I was a little surprised to find my <server>.key has permission 640, while <server>.crt has permission 644. The folder /etc/pki/tls/private/ on my server does not seem to have any special security; it is owned by root but can be opened and listed by anybody. Is that the recommended setup? -- Timothy Murphy e-mail: gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin 2, Ireland

3 2

How to update
by Néstor 25 Oct '14

25 Oct '14

HI people, I am using centos 5 and I am confused on what file to put in my yum.repo.d to update my centos. Can some one provide me with a link or an example file. Thanks, rotsen

5 13

← Newer
1
2
3
4
5
6
7
8
9
...
22
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2014