Discuss February 2015

discuss@lists.centos.org

153 participants
158 discussions

Anyone using torque/pbs/munge?
by m.roth＠5-cent.us 20 Feb '15

20 Feb '15

CentOS 6.6 I've got two servers, server1 and hbs (honkin' big server). Both are running munge, and torque... *separately*. My problem is that I've got users who want to be able to submit from server1 to hbs. I see that munged can be pointed to an alternate keyfile... but is there any way to tell qsub what to use? (And yes, I got on the torque users' list, and I'm trying there, too). mark "really needs to solve this tomorrow"

1 0

Re: [CentOS] Help with routing question.
by James B. Byrne 19 Feb '15

19 Feb '15

On Wed, February 18, 2015 13:07, Les Mikesell wrote: > On Wed, Feb 18, 2015 at 11:39 AM, James B. Byrne > <byrnejb(a)harte-lyne.ca> wrote: >> 2. How does one configure the routing table on network startup to >> specifically detail the route particular addresses are supposed to >> take? >> > > Not exactly sure how routing works with aliases on the same interface > but the first thing I would try is the same as you would use on > different interfaces. That is, leave the 'GATEWAY=' on your > internet-facing etho, but remove the entry from the private eth0:192. > Then add a route-eth0:192 file containing the network(s) and > gateway for the private side. The source address it picks should be > the one appropriate to reach the next-hop router specified in your > routes. > I created a file called /etc/sysconfig/network-scripts/route-eth0:192 and in accordance with the instructions obtained at: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/ht… I added these directives to the route-eth0:192 file: ADDRESS0=192.168.6.9 NETMASK0=255.255.255.0 GATEWAY0=192.168.6.1 However, when I restart the network service I see this: service network restart Shutting down interface eth0: [ OK ] Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ] Bringing up interface eth0: Determining if ip address 216.185.71.9 is already in use for device eth0... Determining if ip address 216.185.71.Y is already in use for device eth0... Determining if ip address 192.168.6.9 is already in use for device eth0... RTNETLINK answers: Invalid argument [ OK ] If I comment out all the directives in route-eth0:192 then the Invalid argument error disappears so it is definitely the contents of the new file that is triggering the error. But I cannot see any obvious error and the syntax seems rather limited to hide any. Switching to the ip route syntax gives the same error: 192.168.6.9/24 via 192.168.6.1 dev eth0 The ifcfg-eth0:192 file now contains: BOOTPROTO="static" DEVICE="eth0:192" IPADDR="192.168.6.9" NETMASK="255.255.255.0" # Also see route-eth0:192 NM_CONTROLLED="no" ONPARENT="yes" TYPE="Ethernet" Can anyone see what it is that I have done that is incorrect? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 3

Masquerading (packet forwarding) on CentOS 7
by Niki Kovacs 19 Feb '15

19 Feb '15

Hi, I just migrated my office's server from Slackware64 14.1 to CentOS 7. So far everything's running fine, I just have a few minor details to work out. I removed the firewalld package and replaced it by a simple Iptables script: --8<---------------------------------------------------- #!/bin/sh # # firewall-lan.sh IPT=$(which iptables) MOD=$(which modprobe) SYS=$(which sysctl) SERVICE=$(which service) # Internet IFACE_INET=enp2s0 # Réseau local IFACE_LAN=enp3s0 IFACE_LAN_IP=192.168.2.0/24 # Relais des paquets (yes/no) MASQ=yes # Tout accepter $IPT -t filter -P INPUT ACCEPT $IPT -t filter -P FORWARD ACCEPT $IPT -t filter -P OUTPUT ACCEPT $IPT -t nat -P PREROUTING ACCEPT $IPT -t nat -P POSTROUTING ACCEPT $IPT -t nat -P OUTPUT ACCEPT $IPT -t mangle -P PREROUTING ACCEPT $IPT -t mangle -P INPUT ACCEPT $IPT -t mangle -P FORWARD ACCEPT $IPT -t mangle -P OUTPUT ACCEPT $IPT -t mangle -P POSTROUTING ACCEPT # Remettre les compteurs à zéro $IPT -t filter -Z $IPT -t nat -Z $IPT -t mangle -Z # Supprimer toutes les règles actives et les chaînes personnalisées $IPT -t filter -F $IPT -t filter -X $IPT -t nat -F $IPT -t nat -X $IPT -t mangle -F $IPT -t mangle -X # Désactiver le relais des paquets $SYS -q -w net.ipv4.ip_forward=0 # Politique par défaut $IPT -P INPUT DROP $IPT -P FORWARD ACCEPT $IPT -P OUTPUT ACCEPT # Faire confiance à nous-même $IPT -A INPUT -i lo -j ACCEPT # Ping $IPT -A INPUT -p icmp --icmp-type echo-request -j ACCEPT $IPT -A INPUT -p icmp --icmp-type time-exceeded -j ACCEPT $IPT -A INPUT -p icmp --icmp-type destination-unreachable -j ACCEPT # Connexions établies $IPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT # SSH local $IPT -A INPUT -p tcp -i $IFACE_LAN --dport 22 -j ACCEPT # SSH limité en provenance de l'extérieur $IPT -A INPUT -p tcp -i $IFACE_INET --dport 22 -m state \ --state NEW -m recent --set --name SSH $IPT -A INPUT -p tcp -i $IFACE_INET --dport 22 -m state \ --state NEW -m recent --update --seconds 60 --hitcount 2 \ --rttl --name SSH -j DROP $IPT -A INPUT -p tcp -i $IFACE_INET --dport 22 -j ACCEPT # DNS $IPT -A INPUT -p tcp -i $IFACE_LAN --dport 53 -j ACCEPT $IPT -A INPUT -p udp -i $IFACE_LAN --dport 53 -j ACCEPT # DHCP $IPT -A INPUT -p udp -i $IFACE_LAN --dport 67:68 -j ACCEPT # Activer le relais des paquets if [ $MASQ = 'yes' ]; then $IPT -t nat -A POSTROUTING -o $IFACE_INET -s $IFACE_LAN_IP \ -j MASQUERADE $SYS -q -w net.ipv4.ip_forward=1 fi # Enregistrer les connexions refusées $IPT -A INPUT -j LOG --log-prefix "+++ IPv4 packet rejected +++" $IPT -A INPUT -j REJECT # Enregistrer la configuration $SERVICE iptables save --8<---------------------------------------------------- As you can see, the script is also supposed to handle IP packet forwarding (masquerading). Once I run firewall-lan.sh manually, everything works as expected. When I restart the server, Iptables rules are still the same. The only thing that's not activated is IP forwarding. So as far as I can tell, iptables rules are stored, but packet forwarding returns to its pristine state (not activated). What would be an orthodox way of handling this? Put "net.ipv4.ip_forward=1" in /etc/sysctl.conf? Something else? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 4

CentOS6: ntfs-3g and writing utf-8 filenames
by wwp 19 Feb '15

19 Feb '15

Hello there, I know this has been widely discussed over the net, but I still can't find a way to write a file whose name contains accented characters in ntfs-3g partitions that are automatically mounted on my CentOS6 system. Whatever my locale is POSIX, en_US or en_US.utf8, I always get a: Invalid or incomplete multibyte or wide character error when I attempt to create a directory or a file when the name contains an accented char. I tried remounting manually the ntfs-3g partition using -o utf8 (and older variants: iocharset= and nls=), but it doesn't work better. My ntfs-3g disks are automatically mounted in GNOME (as fuseblk). Using ntfs-3g-2014.2.15-8.el6.x86_64 in an up-to-date CentOS6 system. Any hint? Regards, -- wwp

1 0

Re: [CentOS] CentOS 7: software RAID 5 array with 4 disks and no spares?
by James B. Byrne 19 Feb '15

19 Feb '15

On Thu, February 19, 2015 02:25, Niki Kovacs wrote: > Le 19/02/2015 05:43, Chris Murphy a écrit : >> My personal view on installers is extremely biased toward the user >> staying out of trouble, they shouldn't have to read documentation >> for >> a GUI installer. > > A *user* never has to even see - or use - an installer. A USER has to > USE a computer, by which I mean the applications he or she needs to > get some work done. Outside of the corporate world, and very often at the low-end of that itself, the user is the ADMIN. One can purchase computer systems with the OS and applications pre-installed of course. But, at some point, in every sufficiently complex and long-lived environment somebody has to do maintenance. Which on occasion does include installing operating systems. And even ADMINs can use some help from time-to-time. Let us be frank, the Linux/GNU hoge-poge of syntax makes the English language look positively simple in comparison. And that is not a good thing. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS Participation in GSOC-2015
by Saket Sinha 19 Feb '15

19 Feb '15

Hi Johnny, This is to enquire as to whether CentOS will be participating in GSOC this year? The Mentoring Organization applications are now being accepted for Google Summer of Code 2015. http://google-opensource.blogspot.in/2015/02/mentoring-organization-applica… Regards, Saket Sinha

2 1

sw raid issue with C5.10-xen
by Dave Stevens 19 Feb '15

19 Feb '15

My raid array won't boot, gives a kernel panic - attempt to kill init message and goes into endless reboots. MB is a supermicro 2P with opteron 2376 4-core cpus, centos sw raid, installed C5.3, updated as possible, currently c5.10. 5 seagate 750GB drives as raid-10 and hot spare. we set this up about 5 years ago and IIRC we set aside the first 10GB on drive 0 as a boot partition. Grub runs and the system tries to boot 2.6.18-308.20.1.el5xen, sees a dirty raid array and md: md0: raid array is not clean - starting background reconstruction which looks hopeful but then md10: not enough operational mirrors for raid 10 and then the panic and reboot. ideas? stuff to read? diagnostics? TIA, Dave -- "As long as politics is the shadow cast on society by big business, the attenuation of the shadow will not change the substance." -- John Dewey

1 0

Skip creating anaconda-ks.cfg in EL7?
by Nux! 19 Feb '15

19 Feb '15

Hello, In EL6 I could well remove /root/anaconda-ks.cfg in %post, but not any more it seems and I like my installs clean. Anyone has any idea how to skip creating this file or deleting during install? I don't want to resort to running scripts upon first boot. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

1 0

Setting up new spacewalk server
by Eckert, Doug 18 Feb '15

18 Feb '15

We have a DHCP/PXE server in a build environment, which is separate from our Spacewalk v1.5 server. We direct builds to Satellite or Spacewalk based as needed. It contains initrd & vmlinuz files for each version/arch we currently deploy for both RHEL & CEL. I'd like to keep the storage footprint to a minimum, if possible. Keeping a big directory of ISOs to loop-mount for kickstart profile distributions seems excessive, especially when DVD#1 exceeds 4GB now. Is there any way around this requirement for kickstarting?

3 5

Help with routing question.
by James B. Byrne 18 Feb '15

18 Feb '15

CentOS-6.6 We have a host that has multiple IPv4 addresses aliased to eth0. The primary address is 216.185.71.x and the alias is 192.168.6.x. This host connects to devices on both netblocks without problems. Only default routing is used and it looks like this: #ip route 192.168.6.0/24 dev eth0 proto kernel scope link src 192.168.6.x 216.185.71.0/24 dev eth0 proto kernel scope link src 216.185.71.x 169.254.0.0/16 dev eth0 scope link metric 1002 default via 192.168.6.1 dev eth0 src 192.168.6.x default via 216.185.71.1 dev eth0 When the system connects to internal systems via ssh it uses the src 216.185.71.x for devices on that netblock and 192.168.6.x for devices on the other. The problem is that when we try to establish an ssh connection off-site to another netblock altogether the host uses 192.168.6.x as the source and the destination gets the public side IP address of our gateway router as the point of origin due to masquerading. I have solved this by explicitly binding ssh to the public ipv4 when connecting using the --bind=216.185.71.x parameter. But I have two questions I would like to find answers for 1. Why is ssh using the private IP in preference to the public IP when connecting to off-site addresses? 2. How does one configure the routing table on network startup to specifically detail the route particular addresses are supposed to take? For diagnosis here are the ifcfg scripts used for both interfaces: DEVICE="eth0" BOOTPROTO="static" BROADCAST="216.185.71.255" DNS1="216.185.71.33" GATEWAY="216.185.71.1" HWADDR="38:60:77:D5:AC:D8" IPADDR="216.185.71.x" IPV6INIT="yes" IPV6_AUTOCONF="yes" NETMASK="255.255.255.0" NM_CONTROLLED="no" ONBOOT="yes" TYPE="Ethernet" UUID="0202e615-ce93-4fe1-833a-c11259afb850" DEVICE="eth0:192" BOOTPROTO="static" BROADCAST="192.168.6.255" GATEWAY="192.168.6.1" IPADDR="192.168.6.x" NETMASK="255.255.255.0" NM_CONTROLLED="no" ONPARENT="yes" TYPE="Ethernet" -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

← Newer
1
...
4
5
6
7
8
9
10
...
16
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2015