Discuss

discuss@lists.centos.org

34753 discussions

A couple of minutes on GnuPG and signing files
by R P Herrold 22 Aug '08

22 Aug '08

There has been a notice of a breach (see: CVE-2007-4752) as to some binary content upstream of CentOS. I do not address that matter here beyond stating that the CentOS team have responded to the matter, and will continue this review process: updated 22 Aug 2008 CentOS acknowledge CVE-2007-4752 and are reviewing our build and signing processes and hosts for signs of tampering subsequent to retrieval of SRPMs It can be hard for a person to get a capsule writeup on signed content, and how to verify that it is indeed authentic. I have placed clearsigned content addressing this process at my personal domain webserver: http://www.herrold.com/import-key-howto.txt.asc and as an attachment to this email. I have verified that the copy at my site verifies. this email. Hopefully this attched writeup will transit the CentOS mailing list manager intact. I also include it inline below, but this may mangle the signature. -- Russ herrold -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A few minutes on using detached and clearsigned content. In light of today's CVE-2007-4752 by the CentOS project's upstream: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4752 I issue this brief piece on using GnuPG 1. View a proposed key to use, at the MIT keyserver from: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x650D5882 2. Copy and create a local instance [herrold@centos-5 redhat]$ vi rht-key [herrold@centos-5 redhat]$ gpg --import rht-key gpg: key 650D5882: duplicated user ID detected - merged gpg: key 650D5882: public key "Red Hat, Inc. (Security Response Team) <secalert(a)redhat.com>" imported gpg: Total number processed: 1 gpg: imported: 1 gpg: 3 marginal(s) needed, 1 complete(s) needed, classic trust model gpg: depth: 0 valid: 2 signed: 5 trust: 0-, 0q, 0n, 0m, 0f, 2u gpg: depth: 1 valid: 5 signed: 2 trust: 0-, 0q, 0n, 1m, 4f, 0u gpg: next trustdb check due at 2009-03-14 3. Compute a local fingerprint of the candidate [herrold@centos-5 redhat]$ gpg --fingerprint 650D5882 pub 1024D/650D5882 2001-11-21 Key fingerprint = 9273 2337 E5AD 3417 5265 64AB 5E54 8083 650D 5882 uid Red Hat, Inc. (Security Response Team) <secalert(a)redhat.com> sub 2048g/7EAB9AFD 2001-11-21 [herrold@centos-5 redhat]$ 4. Compare and validate the fingerprint of the candidate against the RHT statement of the same fingerprint: http://www.redhat.com/security/team/key/ 5. You do NOT need to accept a key permanently to check signed content purportedly with it; consider the Red Hat notice at: http://www.redhat.com/security/data/openssh-blacklist.html 6. We can retrieve the checking script wget https://www.redhat.com/security/data/openssh-blacklist-1.0.sh and the (presumptively) signed checksum of that file wget https://www.redhat.com/security/data/openssh-blacklist-1.0.sh.asc This is called a detached signature 7. And then we can validate ('--verify') that the signature and the file were signed by a person in possession of the private key. Hopefully that private key is itself protected, as behind one way firewalls, and with a 'pass phrase' which matches a known public (which we retrieved and added earlier). This procedural security process is followed by me [one way firewalls, and pass phrases, and other CentOS team members], along with other measures. [herrold@centos-5 redhat]$ gpg --verify openssh-blacklist-1.0.sh.asc \ openssh-blacklist-1.0.sh gpg: Signature made Fri 22 Aug 2008 05:02:29 AM EDT using DSA key ID 650D5882 gpg: Good signature from "Red Hat, Inc. (Security Response Team) <secalert(a)redhat.com>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 9273 2337 E5AD 3417 5265 64AB 5E54 8083 650D 5882 [herrold@centos-5 redhat]$ 8. As we have not indicated to gpg that we permanently trust this key, gpg adds the WARNING -- this is expected and correct under this outline. The validation checks out. 9. This file can be clearsigned -- the process we will follow is this: [herrold@centos-5 .gnupg]$ gpg --clearsign import-key-howto.txt You need a passphrase to unlock the secret key for user: "R P Herrold <herrold(a)owlriver.com>" 1024-bit DSA key, ID 9B649644, created 2003-02-09 File `import-key-howto.txt.asc' exists. Overwrite? (y/N) y [herrold@centos-5 .gnupg]$ 10. That is, import-key-howto.txt is clearsigned, and a new file, import-key-howto.txt.asc, is produced. As I did it twice, to add this text, the warning about Overwriting a file appeared. 11. This is a non-detached (clearsigned, file, and might also be tested by retrieving the indicated key contents, and doing a '--verify' 12. As I have previously certified my own key, I can do it more simply locally: [herrold@centos-5 .gnupg]$ gpg --verify import-key-howto.txt.asc gpg: Signature made Fri 22 Aug 2008 12:37:39 PM EDT using DSA key ID 9B649644 gpg: Good signature from "R P Herrold <herrold(a)owlriver.com>" [herrold@centos-5 .gnupg]$ Note that the TIME of the signing will vary, as I have to resign the file after adding this content. 13. Previously (prior to 22 Aug 2008), I have included my PGP details in every piece of email I send. Starting today, as to email originate; I will add another line with my GPG details as well. I will send this document to the main centos mailing list. Date: Thu, 21 Aug 2008 17:43:28 -0400 (EDT) From: R P Herrold <herrold(a)owlriver.com> To: trading-shim general mailing list <ts-general(a)trading-shim.org> Subject: segmentation faults In-Reply-To: <1219351509.12150.18.camel@gb07> Message-ID: <alpine.LRH.1.999.0808211742100.2443(a)arj.bjyevire.pbz> References: <200808202117.m7KLH4rf011059(a)pippin.first.lan> <20080820224216.GA11712@localhost> <alpine.LRH.1.10.0808202147340.28881(a)arj.bjyevire.pbz> <1219351509.12150.18.camel@gb07> User-Agent: Alpine 1.999 (LRH 1145 2008-08-19) X-M: Go Blue X-OpenPGP-Key-ID: 0x7BFB98B9 MIME-Version: 1.0 In pine (alpine), one does this with Customized X-headers: Customized Headers = X-M: Go Blue X-GnuPG-GPG-Key-ID: ox9B649644 X-OpenPGP-Key-ID: 0x7BFB98B9 This piece intentionally does not address CentOS response; a preliminary statement on this has been posted in the /topic of the IRC channel #centos on irc.freenode.org, and I have done a blog losting which is up at: http://planet.centos.org/ - -- Russ herrold herrold(a)owlriver.com herrold(a)centos.org security(a)centos.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFIru4fMRh1QZtklkQRAgj6AJ9PDJFL59L2WEpzq3f5t93jUf2SrQCePAjm k8mX//167cFOTV0oF6TJFR8= =LFRY -----END PGP SIGNATURE-----

1 1

RE: [CentOS] Re: Support policy CentOS 5
by Patrick Derwael 22 Aug '08

22 Aug '08

<big snip> > Do you have a link to this application's website? Maybe we could determine > why it might be stuck to a limited set of OS releases. If a software can't > keep up with a limited subset of OS updates, maybe they are concerned more > costs then security. Scott, more info here: http://www.parallels.com/en/pro/reqs/ Cheers

2 1

RH's servers breached
by kfx 22 Aug '08

22 Aug '08

What's the point on this for us, CentOS users ? http://www.redhat.com/security/data/openssh-blacklist.html Regards, kfx

2 1

Support policy CentOS 5
by Patrick Derwael 22 Aug '08

22 Aug '08

Hi list Can someone tell me what the exact CentOS policy for end-of-life is for 5.0? Let me explain: I have been using RHEL for a number of years and had to switch to Fedora for installing some packages only supported under F6. As I find Fedora's policy for release life duration too stringent (and I do no longer need the packages that made me choose F6), I'm considering switching over to CentOS5.0 I know, 5.0 is not the most recent release, but that one is supported by Parallel Pro (new package I need) Thanks

5 5

RE: [CentOS] Re: Support policy CentOS 5
by Patrick Derwael 22 Aug '08

22 Aug '08

> > Patrick Derwael wrote: > > */[Patrick Derwael] /* > > The point is that Parallel supports exactly CentOS 4.4 and 5.0, Fedora > > 4 and 6 and RHEL 4ES and 5ES. > > <snip> > Primary focus of this policy is to address the > specific issue you are running up against My only issue is that I want to be able to get support from Parallels, and (I know software vendors!!) it would be too easy for them to say "Sorry, your OS version is not supported"... <snip> > Now, I dont know what parallel is or what you are doing there, but I > dont belive the Vendor that only one update level is supported. Perhaps > they have a dependancy on a specific package ( like the kernel ) - those > are easy to lock into a version with things like yum-versionlock. Parallels is selling virtualization products and web hosting solutions. I was originally using a hosting package called Ensim, but Parallels bought Ensim over a while ago. Today, due to business growth, I need to expand my hosting capacity and to add an extra licence from Parakllels. > > As far as my other systems are concerned, (pen testing) I will reinstall > > them under Centos 5.2 in the coming weeks > > you dont need to reinstall to get from 5.0 to 5.2, if you do a yum > update, that will bring in all the updated packages. ( remember > 5.0+updates == 5.2 ). I currently run Fedora 7 --> I have to rebuild brand new systems from ISOs Thanks !

2 2

RE: [CentOS] Re: Support policy CentOS 5
by Patrick Derwael 22 Aug '08

22 Aug '08

> But, read that table carefully. It says "CentOS 5" not "CentOS 5.0" > "CentOS 5" tracks the current point release and is now equivalent > to "CentOS 5.2". Running "CentOS 5.0" means you do not receive any > updates from a subsequent point release and are locked into the > package versions that were current just before the release of > CentOS 5.1. > > -- Bob, Small typo it is REALLY 4.4 and 5.0 Thanks

1 0

Simple IPTABLES Question
by Matt 22 Aug '08

22 Aug '08

I added these rules to IPTABLES to slow brute force attacks. iptables -A INPUT -p tcp --dport 22 -s my_subnet/24 -j ACCEPT iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 5 --rttl --name SSH -j DROP I would like log entries when connections are dropped to see that its working. How do I do that? I am guessing I would add this before the drop. iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 5 --rttl --name SSH -j LOG --log-prefix 'SSH attack: ' Is that right? Thanks. Matt

7 12

iscsi and the last mile...
by Scott R. Ehrlich 21 Aug '08

21 Aug '08

I have a new Dell PowerEdge 2950 running CentOS 5.0 out-of-box and a Dell MD3000i. I am new to iscsi and, with google and included documentation, am having a heck of a time trying to get the RAID volumes I have created on the 3000i to be seen by the OS as usuable drives. I have printed out SMcli and iscsiadm documentation. I have asked on the linux-poweredge(a)dell.com site, too. Many leads, but there is something - be it a command, setting, or whatever else, that is just eluding me. How do I get the RAID devices seen on my C 5.0 box? The setup is currently on an isolated LAN and has no valuable data - all testing and experimenting by me, for now, to learn how it works, before putting it into production. Thanks for any and all leads. Scott

4 10

Xen "bridged" networking config
by David Dyer-Bennet 21 Aug '08

21 Aug '08

I've got a Centos guest and a Windows 2003 server guest running in Xen under Centos (5.2 in both cases), and they can get out to the network, and I can ping them from dom0. This is my first Xen install, and I haven't used Linux as a router before (I'm very familiar with it as a webserver and development platform) so I'm a bit weak on the bridging code and NAT / IP masquerading. (Amusingly, I was a voting member of IEEE 802.1 and worked on the .d standard for bridging; that was back when it was new, more than a decade ago, and my memories from then may be doing more harm than good now.) The problem is, I can't originate a connection to either guest from outside. Dom0 is getting IP 192.168.1.91 (from our enterprise DHCP server), which is a reasonable address. There are two bridges created, xenbr0 and virbr0. Virbr0 has an IP of 192.168.122.1 assigned to it, which evidence suggests did *not* come from our DHCP server. The interfaces for the two guest domains have 192.168.122.185 and .198 assigned, also not from our DHCP server. The IPs plus the behavior (can't connect in, can connect out) make it look very much like NAT has been setup, but I can't find any evidence like a "MASQUERADE" target in the dom0 iptables or anything (I've never run NAT on Linux, I could be looking for the wrong thing in the wrong place). This setup does not look anything like the "default" bridging config I find documented on various Xen websites (particularly <http://wiki.xensource.com/xenwiki/XenNetworking>). None of them have "virbr0". I've seen a number of reports that people's working configurations broke when the upgraded to Centos 5.2, so I'm suspecting that what I'm seeing here is how Centos 5.2 chooses to package Xen. And hence I'm asking on a Centos list :-). I created these guests in virt-manager. I selected the "bridging" network configuration. Oh, ip forwarding is on in dom0; that was one of the things several places I looked said was an obvious fix for my problem, but it was already on in the default config, and it wasn't helping. I'm currently not using either vlan or bonding, though I believe both are in my future. One thing at a time; and if I understand the basics I think I just might be able to take it to the next stage. This has gotta be simple; I want the most basic bridged configuration, with the guests directly visible to the outside world. Any ideas? -- David Dyer-Bennet, dd-b(a)dd-b.net; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info

1 1

kickstart error on 5.2 exception
by Jerry Geis 21 Aug '08

21 Aug '08

Hi, I am trying to get my kickstart file that worked under 5.1 to work under 5.2 centos x86_64. This is the error that I get. On the screen it says Exception occured and gives me the option to save it. This is that file. I dont see any odd that would cause it to crash. Can anyone help. My kickstart file is in the mix below. Seems to be related to network, my line seems fine (I think) for network. Thanks, Jerry ----------------------------- Traceback (most recent call first): File "/usr/lib/anaconda/network.py", line 341, in lookupHostname ret = isys.pumpNetDevice(dev.get('device'), dev.get('dhcpclass')) File "/usr/lib/anaconda/network.py", line 531, in write ip = self.lookupHostname() File "/tmp/treedir.1828/instimage/usr/lib/anaconda/yuminstall.py", line 1401, in doPreInstall anaconda.id.network.write(anaconda.rootPath) File "/tmp/treedir.1828/instimage/usr/lib/anaconda/backend.py", line 180, in doPreInstall anaconda.backend.doPreInstall(anaconda) File "/usr/lib/anaconda/dispatch.py", line 201, in moveStep rc = stepFunc(self.anaconda) File "/usr/lib/anaconda/dispatch.py", line 124, in gotoNext self.moveStep() File "/usr/lib/anaconda/gui.py", line 1018, in nextClicked self.anaconda.dispatch.gotoNext() File "/usr/lib/anaconda/iw/progress_gui.py", line 243, in renderCallback self.intf.icw.nextClicked() File "/usr/lib/anaconda/gui.py", line 1045, in handleRenderCallback self.currentWindow.renderCallback() AttributeError: 'module' object has no attribute 'pumpNetDevice' Local variables in innermost frame: self: <network.Network instance at 0x2b2109c8b680> myns: 65.24.0.168 dev: DEVICE=eth0 BOOTPROTO=dhcp DHCPCLASS= HWADDR=00:13:D4:FA:EB:53 ONBOOT=yes Anaconda instance, containing members: rootPath: /mnt/sysimage rescue_mount: True intf: InstallInterface instance, containing members: intf.ppw: InstallProgressWindow instance, containing members: intf.ppw.pixmaps: [rnotes/01-centos5-welcome.png, rnotes/02-centos5-donate.png, rnotes/03-centos5-yum.png, rnotes/04-centos5-repos.png, rnotes/05-centos5-centosplus.png, rnotes/06-centos5-support.png, rnotes/07-centos5-docs.png, rnotes/08-centos5-wiki.png, rnotes/09-centos5-virtualization.png] intf.ppw.intf: Already dumped intf.ppw.pixcurnum: 0 intf.ppw.sizeComplete: 0 intf.ppw.lastTimeEstimate: None intf.ppw.wrappedpixlist: 0 intf.ppw.filesComplete: 0 intf.ppw.pixtimer: None intf.ppw.initialTimeEstimate: None intf.ppw.adpix: <gtk.Image object (GtkImage) at 0xec6cd20> intf.ppw.adbox: <gtk.EventBox object (GtkEventBox) at 0xec6ce10> intf.ppw.curPackage: {'summary': <gtk.Label object (GtkLabel) at 0xfb1d0a0>, 'package': <gtk.Label object (GtkLabel) at 0xfb1d050>} intf.ppw.estimateHistory: [] intf.ppw.numComplete: 0 intf.ppw.pkgstatus: None intf.ppw.ics: InstallControlState instance, containing members: intf.ppw.ics.prevEnabled: False intf.ppw.ics.cw: InstallControlWindow instance, containing members: intf.ppw.ics.cw.handle: 150 intf.ppw.ics.cw.mainxml: <glade.XML object (PyGladeXML) at 0xec6c5a0> intf.ppw.ics.cw.reloadRcQueued: 0 intf.ppw.ics.cw.currentWindow: Already dumped intf.ppw.ics.cw.window: <gtk.Window object (GtkWindow) at 0xec6c550> intf.ppw.ics.cw.installFrame: <gtk.Frame object (GtkFrame) at 0xec6c690> intf.ppw.ics.cw.anaconda: Already dumped intf.ppw.ics.cw.rnv: ReleaseNotesViewer instance, containing members: intf.ppw.ics.cw.rnv.textWin: <gtk.Window object (GtkWindow) at 0xec6ef50> intf.ppw.ics.cw.rnv.vue: <gtkhtml2.View object (HtmlView) at 0x2b2109cc9f00> intf.ppw.ics.cw.rnv.currentURI: /mnt/source/RELEASE-NOTES-en_US.html intf.ppw.ics.cw.rnv.topDir: /mnt/source intf.ppw.ics.cw.rnv.doc: <gtkhtml2.Document object (HtmlDocument) at 0x2b2109cc9fa0> intf.ppw.ics.cw.rnv.height: 600 intf.ppw.ics.cw.rnv.width: 800 intf.ppw.ics.cw.rnv.opener: FancyURLopener instance, containing members: intf.ppw.ics.cw.rnv.opener._URLopener__unlink: <built-in function unlink> intf.ppw.ics.cw.rnv.opener._URLopener__tempfiles: [] intf.ppw.ics.cw.rnv.opener.cert_file: None intf.ppw.ics.cw.rnv.opener.addheaders: [('User-agent', 'Python-urllib/1.16')] intf.ppw.ics.cw.rnv.opener.tries: 0 intf.ppw.ics.cw.rnv.opener.ftpcache: {} intf.ppw.ics.cw.rnv.opener.tempcache: None intf.ppw.ics.cw.rnv.opener.auth_cache: {} intf.ppw.ics.cw.rnv.opener.key_file: None intf.ppw.ics.cw.rnv.opener.proxies: {} intf.ppw.ics.cw.rnv.opener.type: file intf.ppw.ics.cw.rnv.opener.maxtries: 10 intf.ppw.ics.cw.rnv.anaconda: Already dumped intf.ppw.ics.cw.rnv.htmlheader: <html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body bgcolor="white"><pre> intf.ppw.ics.cw.rnv.htmlfooter: </pre></body></html> intf.ppw.ics.cw.rnv.is_showing: False intf.ppw.ics.nextEnabled: False intf.ppw.ics.grabNext: True intf.ppw.ics.title: Installing Packages intf.ppw.progress: <gtk.ProgressBar object (GtkProgressBar) at 0xec6ce60> intf.ppw.totalProgress: <gtk.ProgressBar object (GtkProgressBar) at 0xec6ceb0> intf.ppw.remainingTimeLabel: <gtk.Label object (GtkLabel) at 0xec6cfa0> intf.icw: Already dumped intf.runres: 800x600 intf.anaconda: Already dumped rescue: False updateSrc: None methodstr: cdrom://hdc:/mnt/source dispatch: Dispatcher instance, containing members: dispatch.step: 37 dispatch.skipSteps: {'upgrademigfind': 1, 'accounts': 1, 'keyboard': 2, 'timezone': 1, 'confirminstall': 1, 'bootloader': 2, 'addswap': 1, 'network': 1, 'upgrademigratefs': 1, 'parttype': 1, 'confirmupgrade': 1, 'welcome': 1, 'bootloaderadvanced': 2, 'tasksel': 1, 'betanag': 2, 'upgbootloader': 2, 'upgrademount': 1, 'upgradecontinue': 1, 'findrootparts': 1, 'findinstall': 1, 'language': 2, 'upgradeswapsuggestion': 1, 'partition': 1, 'group-selection': 1, 'regkey': 1} dispatch.firstStep: 0 dispatch.method: CdromInstallMethod instance, containing members: dispatch.method.messageWindow: <bound method InstallInterface.messageWindow of <gui.InstallInterface instance at 0x2b2104c91a70>> dispatch.method.splitmethod: True dispatch.method.intf: Already dumped dispatch.method.isoPath: /mnt/source dispatch.method.timestamp: 1214240246.285059 dispatch.method.tree: /mnt/source dispatch.method.rootPath: /mnt/sysimage dispatch.method.waitWindow: <bound method InstallInterface.waitWindow of <gui.InstallInterface instance at 0x2b2104c91a70>> dispatch.method.loopbackFile: /mnt/sysimage/home/rhinstall-stage2.img dispatch.method.progressWindow: <bound method InstallInterface.progressWindow of <gui.InstallInterface instance at 0x2b2104c91a70>> dispatch.method.device: hdc dispatch.method.currentMedia: [1, 2, 3, 4, 5, 6, 7] dispatch.anaconda: Already dumped method: Already dumped isKickstart: True id: InstallData instance, containing members: id.dbpath: None id.firewall: Firewall instance, containing members: id.firewall.portlist: [22:tcp, 80:tcp, 443:tcp, 22:tcp, 25:tcp] id.firewall.trustdevs: [] id.firewall.enabled: True id.anaconda: Already dumped id.upgradeDeps: id.upgradeRoot: None id.xsetup: XSetup instance, containing members: id.xsetup.skipx: 0 id.xsetup.imposed_sane_default: 0 id.xsetup.xserver: XServer instance, containing members: id.xsetup.xserver.videohw: primary: 0 vidCards: [<rhpxl.videocard.VideoCard instance at 0x2b21015c8a70>] Primary Video Card Info: device: None driver : vesa descr : nVidia Corporation GeForce 7100 GS vidRam: None id.xsetup.xserver.serverflags: [vt6, -config, /tmp/XConfig.test, -extension, Composite, -s, 1440, -dpms, -v, -ac, -nolisten, tcp, -fp, /usr/share/X11/fonts/misc, -screen, Anaconda, -br] id.xsetup.xserver.resolution: 800x600 id.xsetup.xserver.root: / id.xsetup.xserver.hwstate: XF86HardwareState instance, containing members: id.xsetup.xserver.hwstate.videocard_PCIFn: None id.xsetup.xserver.hwstate.monitor: monName: None monID: Unprobed Monitor monHoriz: None monVert: None physicalWidth: 0 physicalHeight: 0 id.xsetup.xserver.hwstate.config_resolutions: [] id.xsetup.xserver.hwstate.videocard_name: nVidia Corporation GeForce 7100 GS id.xsetup.xserver.hwstate.monitor_name: Unknown monitor id.xsetup.xserver.hwstate.video_ram: 0 id.xsetup.xserver.hwstate.videocard: Already dumped id.xsetup.xserver.hwstate.videocard_driver: vesa id.xsetup.xserver.hwstate.videocard_options: [] id.xsetup.xserver.hwstate.all_resolutions: [640x480, 800x480, 800x512, 800x600, 1024x600, 1024x768, 1152x768, 1152x864, 1280x800, 1280x960, 1280x1024, 1400x1050, 1440x900, 1600x1024, 1600x1200, 1680x1050, 1900x1200, 1920x1200, 1920x1440, 2048x1536] id.xsetup.xserver.hwstate.hsync: 31.5-37.9 id.xsetup.xserver.hwstate.vsync: 50-70 id.xsetup.xserver.hwstate.probed_video_ram: 0 id.xsetup.xserver.hwstate.videocard_PCIBus: None id.xsetup.xserver.hwstate.colordepth: 24 id.xsetup.xserver.hwstate.videocard_PCIDev: None id.xsetup.xserver.hwstate.resolution: 800x600 id.xsetup.xserver.hwstate.dri_enabled: 0 id.xsetup.xserver.hwstate.xconfig: None id.xsetup.xserver.monitorhw: Already dumped id.xsetup.xserver.keyboard: Keyboard instance, containing members: id.xsetup.xserver.keyboard.info: {'KEYBOARDTYPE': pc, 'KEYTABLE': us} id.xsetup.xserver.keyboard.type: PC id.xsetup.xserver.keyboard.beenset: 1 id.xsetup.xserver.keyboard._mods: KeyboardModels instance, containing members: id.xsetup.xserver.mousehw: FULLNAME="Generic - 3 Button Mouse (PS/2)" MOUSETYPE="imps2" XEMU3="no" XMOUSETYPE="IMPS/2" id.xsetup.xserver.defaultdepth: 24 id.xsetup.xserver.logfile: /tmp/ramfs/X.log id.xsetup.xserver.config: <XF86Config object at 0x2b20f8b86600> id.xsetup.xserver.display: :1 id.keyboard: Already dumped id.timezone: Timezone instance, containing members: id.timezone.utc: True id.timezone.utcOffset: 0 id.timezone.arc: 0 id.timezone.tz: America/Indiana/Indianapolis id.timezone.dst: 0 id.mouse: Already dumped id.backend: YumBackend instance, containing members: id.backend.modeText: Installing %s id.backend.instPath: /mnt/sysimage id.backend.totalSize: 2685748 id.backend.instLog: <open file '/mnt/sysimage/root/install.log', mode 'w+' at 0xdf83300> id.backend._installedDriverModules: [] id.backend.method: Already dumped id.backend.totalFiles: 146916 id.upgrade: None id.monitor: Already dumped id.iscsi: <iscsi.iscsi object at 0x2b2109c99650> id.methodstr: cdrom://hdc:/mnt/source id.fsset: FileSystemSet instance, containing members: id.fsset.messageWindow: <bound method InstallInterface.messageWindow of <gui.InstallInterface instance at 0x2b2104c91a70>> id.fsset.volumesCreated: 1 id.fsset.progressWindow: <bound method InstallInterface.progressWindow of <gui.InstallInterface instance at 0x2b2104c91a70>> id.fsset.migratedfs: 1 id.fsset.waitWindow: <bound method InstallInterface.waitWindow of <gui.InstallInterface instance at 0x2b2104c91a70>> id.fsset.entries: [fsentry -- device: sda1 mountpoint: / fsystem: ext3 format: True ismounted: 1 options: 'defaults' bytesPerInode: 4096 label: / , fsentry -- device: sda3 mountpoint: /home fsystem: ext3 format: True ismounted: 1 options: 'defaults' bytesPerInode: 4096 label: /home , fsentry -- device: shm mountpoint: /dev/shm fsystem: tmpfs format: 0 ismounted: 0 options: 'defaults' bytesPerInode: 4096 label: None , fsentry -- device: devpts mountpoint: /dev/pts fsystem: devpts format: 0 ismounted: 0 options: 'gid=5,mode=620' bytesPerInode: 4096 label: None , fsentry -- device: sys mountpoint: /sys fsystem: sysfs format: 0 ismounted: 1 options: 'defaults' bytesPerInode: 4096 label: None , fsentry -- device: proc mountpoint: /proc fsystem: proc format: 0 ismounted: 1 options: 'defaults' bytesPerInode: 4096 label: None , fsentry -- device: sda2 mountpoint: swap fsystem: swap format: True ismounted: 1 options: 'defaults' bytesPerInode: 4096 label: SWAP-sda2 ] id.fsset.anaconda: Already dumped id.fsset.mountcount: 5 id.desktop: Desktop instance, containing members: id.desktop.info: {'DESKTOP': } id.desktop.runlevel: 5 id.rootParts: None id.x_already_set: 0 id.upgradeRemove: [] id.partitions: Partitions instance, containing members: id.partitions.useFdisk: 0 id.partitions.useAutopartitioning: 1 id.partitions.autoClearPartType: 1 id.partitions.nextUniqueID: 5 id.partitions.reinitializeDisks: True id.partitions.autoClearPartDrives: [] id.partitions.zeroMbr: 1 id.partitions.isKickstart: 0 id.partitions.requests: [New Part Request -- mountpoint: / uniqueID: 2 type: ext3 format: True badblocks: None device: sda1 drive: ['sda'] primary: True size: 20000 grow: 0 maxsize: None start: None end: None migrate: None fslabel: origfstype: None bytesPerInode: 4096 options: 'None' , PreexistingPartitionSpec instance, containing members: currentDrive: None migrate: None origfstype: None primary: None dev: None uniqueID: 1 mountpoint: None requestSize: 305245.335938 size: 305245.335938 end: 625142447 grow: 0 start: 0 ignoreBootConstraints: 0 type: 1 badblocks: None format: None fsopts: None fstype: None preexist: 1 device: sda-1 maxSizeMB: None bytesPerInode: 4096 drive: sda fslabel: None protected: 0 multidrive: None , New Part Request -- mountpoint: uniqueID: 3 type: swap format: True badblocks: None device: sda2 drive: ['sda'] primary: True size: 4000 grow: 0 maxsize: None start: None end: None migrate: None fslabel: origfstype: None bytesPerInode: 4096 options: 'None' , New Part Request -- mountpoint: /home uniqueID: 4 type: ext3 format: True badblocks: None device: sda3 drive: ['sda'] primary: True size: 1 grow: True maxsize: None start: None end: None migrate: None fslabel: origfstype: None bytesPerInode: 4096 options: 'None' ] id.partitions.autoPartitionRequests: [New Part Request -- mountpoint: / uniqueID: None type: ext3 format: True badblocks: None device: None drive: ['sda'] primary: True size: 20000 grow: 0 maxsize: None start: None end: None migrate: None fslabel: origfstype: None bytesPerInode: 4096 options: 'None' , New Part Request -- mountpoint: uniqueID: None type: swap format: True badblocks: None device: None drive: ['sda'] primary: True size: 4000 grow: 0 maxsize: None start: None end: None migrate: None fslabel: origfstype: None bytesPerInode: 4096 options: 'None' , New Part Request -- mountpoint: /home uniqueID: None type: ext3 format: True badblocks: None device: None drive: ['sda'] primary: True size: 1 grow: True maxsize: None start: None end: None migrate: None fslabel: origfstype: None bytesPerInode: 4096 options: 'None' ] id.partitions.deletes: [] id.firstboot: 1 id.diskset: DiskSet instance, containing members: id.diskset.initializedDisks: {'sda': True} id.diskset.disks: {'sda': <PedDisk object at 0x2b20f8b87310>} id.diskset.anaconda: Already dumped id.diskset.onlyPrimary: None id.upgradeInfoFound: None id.zfcp: ZFCP instance, containing members: id.zfcp.hasReadConfig: True id.zfcp.fcpdevs: [] id.displayMode: g id.excludeDocs: 0 id.auth: --enableshadow --enablemd5 id.instProgress: Already dumped id.dependencies: [] id.ksdata: KickstartData instance, containing members: id.ksdata.raidList: [] id.ksdata.firewall: {'enabled': True, 'ports': ['80:tcp', '443:tcp', '22:tcp', '25:tcp'], 'trusts': []} id.ksdata.selinux: 0 id.ksdata.keyboard: us id.ksdata.reboot: {'action': 0, 'eject': False} id.ksdata.services: {'disabled': [], 'enabled': []} id.ksdata.handleMissing: 0 id.ksdata.firstboot: 1 id.ksdata.timezone: {'timezone': America/Indiana/Indianapolis, 'isUtc': True} id.ksdata.skipx: False id.ksdata.groupList: [development-libs, editors, x-software-development, gnome-desktop, dialup, core, base, ftp-server, legacy-software-development, base-x, web-server, smb-server, printing, mail-server, sound-and-video, development-tools, graphical-internet] id.ksdata.upgrade: False id.ksdata.monitor: {'probe': True, 'hsync': , 'monitor': , 'vsync': } id.ksdata.autopart: False id.ksdata.deviceprobe: id.ksdata.iscsi: [] id.ksdata.clearpart: {'type': 1, 'initAll': True, 'drives': []} id.ksdata.platform: id.ksdata.iscsiname: id.ksdata.mpaths: [] id.ksdata.zerombr: True id.ksdata.partitions: [KickstartPartData instance, containing members: size: 20000 disk: sda end: 0 bytesPerInode: 4096 format: True onbiosdisk: fsopts: fstype: ext3 start: 0 maxSizeMB: 0 onPart: active: False mountpoint: / label: grow: False primOnly: True recommended: False , KickstartPartData instance, containing members: size: 4000 disk: sda end: 0 bytesPerInode: 4096 format: True onbiosdisk: fsopts: fstype: start: 0 maxSizeMB: 0 onPart: active: False mountpoint: label: grow: False primOnly: True recommended: False , KickstartPartData instance, containing members: size: 1 disk: sda end: 0 bytesPerInode: 4096 format: True onbiosdisk: fsopts: fstype: ext3 start: 0 maxSizeMB: 0 onPart: active: False mountpoint: /home label: grow: True primOnly: True recommended: False ] id.ksdata.method: {'method': cdrom} id.ksdata.mediacheck: False id.ksdata.lvList: [] id.ksdata.vgList: [] id.ksdata.zfcp: [] id.ksdata.excludeDocs: False id.ksdata.displayMode: 1 id.ksdata.excludedList: [sysreport] id.ksdata.autostep: {'autoscreenshot': False} id.ksdata.authconfig: --enableshadow --enablemd5 id.ksdata.driverdisk: id.ksdata.key: id.ksdata.scripts: [AnacondaKSScript instance, containing members: script: #!/bin/sh ##Â genericÂ scriptÂ toÂ pickÂ hda, sda, or RAID 1 HD1="/dev/sda" HD1SHORT="sda" HD2="/dev/sdb" HD2SHORT="sdb" if [ -e /proc/ide/hda/media ] then if [ "`cat /proc/ide/hda/media`" = "disk" ] then HD1="/dev/hda" HD1SHORT="hda" HD2="/dev/hdb" HD2SHORT="hdb" fi fi ## Determine size of harddisk HD1SIZE=`fdisk -l $HD1 | grep Disk | cut -f 3 -d ' ' | cut -f 1 -d '.'` if [ $HD1SIZE -eq 8 ] then ROOTSIZE=7000 SWAPSIZE=1000 SWAPGROW="--grow" HOMEGROW="" elif [ $HD1SIZE -le 20 ] then ROOTSIZE=10000 SWAPSIZE=1000 SWAPGROW="" HOMEGROW="--grow" else ROOTSIZE=20000 SWAPSIZE=4000 SWAPGROW="" HOMEGROW="--grow" fi ##Â Save partitioning information into file so include section can grab it. echo "bootloader --location=mbr --driveorder=$HD1SHORT --append=\"rhgb quiet\" " > /tmp/partition-information echo "clearpart --all --initlabel " >> /tmp/partition-information echo "part / --ondisk=$HD1SHORT --fstype ext3 --size=$ROOTSIZE --asprimary " >> /tmp/partition-information echo "part swap --ondisk=$HD1SHORT --size=$SWAPSIZE --asprimary $SWAPGROW " >> /tmp/partition-information if [ "$HOMEGROW" = "--grow" ] then echo "part /home --ondisk=$HD1SHORT --fstype ext3 --size=1 --asprimary $HOMEGROW " >> /tmp/partition-information fi interp: /bin/sh errorOnFail: False inChroot: False logfile: None type: 0 , AnacondaKSScript instance, containing members: script: # Install is complete show the post progress. init 3 chvt 3 # Echo the type of install we are doing cat /proc/cmdline > /tmp/MN_server echo "Change RunLevel boot console mode..." sed -i s'/id:5:/id:3:/'g /etc/inittab echo "Setting up nameserver" echo nameserver 65.24.0.168 > /etc/resolv.conf echo nameserver 65.24.0.169 >> /etc/resolv.conf service network restart # Make directory for mounting mkdir /mnt/silentmhome rpm -e --nodeps festival rpm -e --nodeps mgetty-sendfax #echo "Full yum Update" #yum -y update echo "Short yum Update" yum -y update kernel* yum -y update tzdata* openssh* httpd* yum -y install vnc yum -y install tftp yum -y install tftp-server yum -y install sendmail-cf yum -y install dhcp yum -y install ncurses-devel yum -y install compat-openldap yum -y install libxml2 yum -y install libxml2-devel yum -y install lsscsi yum -y install alsa-lib-devel yum -y install alsa-lib-devel.i386 # Need the 32-bit development libraries for libasound yum -y install glibc-devel.i386 yum clean all service yum-updatesd stop chkconfig yum-updatesd off service haldaemon stop chkconfig haldaemon off # Make NFS available service portmap start # Mount the server for setup (parse the /proc/cmdline for ks=http://IP) SERVERIP=`cat /proc/cmdline | tr ' ' '\n' | grep ks=http | tr '/' ' ' | awk {' print $2'} ` echo mount -t nfs $SERVERIP:/home/silentm /mnt/silentmhome mount -t nfs $SERVERIP:/home/silentm /mnt/silentmhome # Install preparation (Create directory and script files) cd /mnt/silentmhome/multimedia_controller . ./functions.sh cp -af *.sh $MN_INSTALL_TREE # Install nVidia cd /mnt/silentmhome/multimedia_controller/NVIDIA ./mn_install.sh ## Install alsa-project before MessageNet #cd /mnt/silentmhome/multimedia_controller/alsa-project #./mn_install.sh # Install asterisk before MessageNet cd /mnt/silentmhome/multimedia_controller/digium ./mn_install.sh # Install vlc cd /mnt/silentmhome/multimedia_controller/vlc ./mn_install.sh # Install MPlayer cd /mnt/silentmhome/multimedia_controller/MPlayer ./mn_install.sh # Install cepstral before MessageNet cd /mnt/silentmhome/cepstral ./mn_install.sh # Install the latest version cd /mnt/silentmhome/Versions ./mn_install.sh # Set path location source /etc/profile ## Setup RAID arrays for booting #/home/silentm/bin/smset_raidboot.sh # Setup Mediaport #/home/silentm/bin/smclient.sh -multimediapc PROC_CMD_LINE_MN_KICKSTART=`grep -c "mn_demobox" /proc/cmdline` if [ "$PROC_CMD_LINE_MN_KICKSTART" = "1" ] then /home/silentm/bin/smfunctions -set_node_name demobox echo demobox | passwd --stdin else # Default this machine to the MAC address NODE=`/home/silentm/bin/smfunctions -eth0mac ` /home/silentm/bin/smfunctions -set_node_name $NODE fi # Setup Siemens mode PROC_CMD_LINE_MN_KICKSTART=`grep -c "mn_siemens" /proc/cmdline` if [ "$PROC_CMD_LINE_MN_KICKSTART" = "1" ] then echo Siemens > /etc/silentm/siemens fi # Umount NFS cd / umount /mnt/silentmhome echo "" echo "Kickstart installation complete - reboot" interp: /bin/sh errorOnFail: False inChroot: True logfile: None type: 1 ] id.ksdata.device: id.ksdata.network: [KickstartNetworkData instance, containing members: ethtool: onboot: True wepkey: notksdevice: False ip: hostname: MessageNet.msgnet.com mtu: netmask: bootProto: dhcp essid: ipv6: True device: eth0 nameserver: dhcpclass: nodns: False gateway: ipv4: True ] id.ksdata.lang: en_US.UTF-8 id.ksdata.packageList: [mesa-libGLU-devel, device-mapper-multipath, xorg-x11-server-Xnest, xorg-x11-server-Xvfb, imake] id.ksdata.logging: {'host': , 'port': , 'level': info} id.ksdata.xconfig: {'startX': True, 'videoRam': , 'driver': , 'depth': 0, 'defaultdesktop': , 'resolution': } id.ksdata.userList: [] id.ksdata.ignoredisk: [] id.ksdata.addBase: True id.ksdata.repoList: [] id.ksdata.dmraids: [] id.ksdata.interactive: False id.users: None id.bootloader: x86BootloaderInfo instance, containing members: id.bootloader.doUpgradeOnly: 0 id.bootloader.above1024: 1 id.bootloader.defaultDevice: mbr id.bootloader.pure: None id.bootloader.args: KernelArguments instance, containing members: id.bootloader.args.args: rhgb quiet id.bootloader.kernelLocation: /boot/ id.bootloader.device: sda id.bootloader.configfile: /etc/lilo.conf id.bootloader.kickstart: 0 id.bootloader.serialOptions: None id.bootloader.useGrubVal: 1 id.bootloader.serialDevice: None id.bootloader.images: BootImages instance, containing members: id.bootloader.images.default: sda1 id.bootloader.images.images: {'sda1': ('linux', 'CentOS', 'ext3')} id.bootloader.drivelist: [sda] id.bootloader.serial: 0 id.bootloader.password: None id.bootloader.forceLBA32: False id.extraModules: [] id.network: Network instance, containing members: id.network.hostname: MessageNet.msgnet.com id.network.overrideDHCPhostname: 1 id.network.netdevices: {'eth0': DEVICE=eth0 BOOTPROTO=dhcp DHCPCLASS= HWADDR=00:13:D4:FA:EB:53 ONBOOT=yes } id.network.primaryNS: 65.24.0.168 id.network.firstnetdevice: eth0 id.network.isConfigured: 0 id.network.domains: [] id.network.secondaryNS: id.network.gateway: id.instClass: Kickstart instance, containing members: id.instClass.ksparser: AnacondaKSParser instance, containing members: id.instClass.ksparser.script: {'body': ['# Install is complete show the post progress.\n', 'init 3\n', 'chvt 3\n', '\n', '# Echo the type of install we are doing\n', 'cat /proc/cmdline > /tmp/MN_server\n', '\n', 'echo "Change RunLevel boot console mode..."\n', "sed -i s'/id:5:/id:3:/'g /etc/inittab\n", '\n', 'echo "Setting up nameserver"\n', 'echo nameserver 65.24.0.168 > /etc/resolv.conf\n', 'echo nameserver 65.24.0.169 >> /etc/resolv.conf\n', 'service network restart\n', '\n', '# Make directory for mounting\n', 'mkdir /mnt/silentmhome\n', '\n', 'rpm -e --nodeps festival\n', 'rpm -e --nodeps mgetty-sendfax\n', '\n', '#echo "Full yum Update"\n', '#yum -y update\n', 'echo "Short yum Update"\n', 'yum -y update kernel* \n', 'yum -y update tzdata* openssh* httpd*\n', '\n', 'yum -y install vnc\n', 'yum -y install tftp\n', 'yum -y install tftp-server\n', 'yum -y install sendmail-cf\n', 'yum -y install dhcp\n', 'yum -y install ncurses-devel\n', 'yum -y install compat-openldap\n', 'yum -y install libxml2\n', 'yum -y install libxml2-devel\n', 'yum -y install lsscsi\n', 'yum -y install alsa-lib-devel\n', 'yum -y install alsa-lib-devel.i386\n', '\n', '# Need the 32-bit development libraries for libasound\n', 'yum -y install glibc-devel.i386\n', '\n', 'yum clean all\n', '\n', 'service yum-updatesd stop\n', 'chkconfig yum-updatesd off\n', '\n', 'service haldaemon stop\n', 'chkconfig haldaemon off\n', '\n', '# Make NFS available\n', 'service portmap start\n', '\n', '# Mount the server for setup (parse the /proc/cmdline for ks=http://IP)\n', "SERVERIP=`cat /proc/cmdline | tr ' ' '\\n' | grep ks=http | tr '/' ' ' | awk {' print $2'} `\n", 'echo mount -t nfs $SERVERIP:/home/silentm /mnt/silentmhome\n', 'mount -t nfs $SERVERIP:/home/silentm /mnt/silentmhome\n', '\n', '# Install preparation (Create directory and script files)\n', 'cd /mnt/silentmhome/multimedia_controller\n', '. ./functions.sh\n', 'cp -af *.sh $MN_INSTALL_TREE\n', '\n', '# Install nVidia\n', 'cd /mnt/silentmhome/multimedia_controller/NVIDIA\n', './mn_install.sh\n', '\n', '## Install alsa-project before MessageNet\n', '#cd /mnt/silentmhome/multimedia_controller/alsa-project\n', '#./mn_install.sh\n', '\n', '# Install asterisk before MessageNet\n', 'cd /mnt/silentmhome/multimedia_controller/digium\n', './mn_install.sh\n', '\n', '# Install vlc\n', 'cd /mnt/silentmhome/multimedia_controller/vlc\n', './mn_install.sh\n', '\n', '# Install MPlayer\n', 'cd /mnt/silentmhome/multimedia_controller/MPlayer\n', './mn_install.sh\n', '\n', '# Install cepstral before MessageNet\n', 'cd /mnt/silentmhome/cepstral\n', './mn_install.sh\n', '\n', '# Install the latest version\n', 'cd /mnt/silentmhome/Versions\n', './mn_install.sh\n', '\n', '# Set path location\n', 'source /etc/profile\n', '\n', '## Setup RAID arrays for booting\n', '#/home/silentm/bin/smset_raidboot.sh\n', '\n', '# Setup Mediaport\n', '#/home/silentm/bin/smclient.sh -multimediapc \n', '\n', 'PROC_CMD_LINE_MN_KICKSTART=`grep -c "mn_demobox" /proc/cmdline`\n', 'if [ "$PROC_CMD_LINE_MN_KICKSTART" = "1" ]\n', 'then\n', '\t/home/silentm/bin/smfunctions -set_node_name demobox\n', '\techo demobox | passwd --stdin\n', 'else\n', '\t# Default this machine to the MAC address\n', '\tNODE=`/home/silentm/bin/smfunctions -eth0mac `\n', '\t/home/silentm/bin/smfunctions -set_node_name $NODE\n', 'fi\n', '\n', '# Setup Siemens mode\n', 'PROC_CMD_LINE_MN_KICKSTART=`grep -c "mn_siemens" /proc/cmdline`\n', 'if [ "$PROC_CMD_LINE_MN_KICKSTART" = "1" ]\n', 'then\n', '\techo Siemens > /etc/silentm/siemens\n', 'fi\n', '\n', '# Umount NFS\n', 'cd /\n', 'umount /mnt/silentmhome\n', '\n', 'echo ""\n', 'echo "Kickstart installation complete - reboot"\n'], 'chroot': True, 'log': None, 'interp': /bin/sh, 'errorOnFail': False, 'type': 1} id.instClass.ksparser.errorsAreFatal: True id.instClass.ksparser.state: 0 id.instClass.ksparser.includeDepth: 0 id.instClass.ksparser.followIncludes: True id.instClass.ksparser.ksdata: Already dumped id.instClass.ksparser.missingIncludeIsFatal: True id.instClass.ksparser.sawPackageSection: True id.instClass.earlySwapOn: 1 id.instClass.repopaths: {'base': CentOS} id.instClass.ksdata: Already dumped id.instClass.file: /tmp/ks.cfg id.instClass.anaconda: Already dumped id.instClass.serial: False id.instClass.id: Already dumped id.floppyDevice: fd0 id.isHeadless: 0 id.videocard: Already dumped id.instLanguage: Language instance, containing members: id.instLanguage.targetLang: None id.instLanguage.default: en_US.UTF-8 id.instLanguage.displayMode: g id.instLanguage.current: en_US.UTF-8 id.security: Security instance, containing members: id.security.selinux: 0 id.upgradeSwapInfo: None dir: 1 backend: Already dumped

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss