Tag Info

Hot answers tagged

7

Most modern servers come with an out-of-band management option, eg HP's ILO, Dells DRAC, IBM's RSA, so you don't actually need to go to the rack anymore to manage them. Simply use the correct form of KVM over IP to take over the console from the comfort of your desk! They come with virtual media which uses an ISO image on your desktop to emulate an CD/DVD ...


7

If your out-of-band management does not allow you to flash the indicator, you could try ethtool if you have a spare/empty network interface ethtool -p eth2 Should flash the LED for eth2: -p --identify Initiates adapter-specific action intended to enable an operator to easily identify the adapter by sight. Typically this involves blinking ...


6

If you absolutely want to use yum security plugin, there is a way to do this, although a little elaborate. But once you have it setup, it's all automated. The only requirement is that you will need to have at-least one subscription to RHN. Which is a good investment IMO, but lets stick to the point. Once you have the subscription, you can use mrepo, or ...


4

It could be an SELinux issue. Check /var/log/audit/audit.log for any related messages. See this informative post for more information, including a possible fix: # chcon -t home_root_t /homedir/stefanl


4

I use CentOS, but the easiest way I've found to configure a system via kickstart is to install and configure a system the way I want it to be, then look at /root/anaconda-ks.cfg. That file is a kickstart the install you just did. I assume that Scientific has this file as well. Once you have that file, I've found it much easier to modify (add/remove) what I ...


4

Well, get creative - there's USB controlled LED device like the blink(1) or the blink stick that may work, though the blink(1) seems out of stock everywhere. For a more ghetto solution, get a bunch of the cheapest USB keys you can, stick them on a USB port, and when you need to identify a system, create and delete a small file (or just keep writing to it) ...


3

Download the package(s) and type rpm -Uvh <packagenames> as root or sudo rpm -Uvh <packagenames> as normal user I used rpm -qpR yum-3.2.27-14.el6.noarch.rpm to get a list of dependencies for yum, hope that gets all off them in one go: Download all the packages with the following code block: wget ...


3

Never, ever edit any system files by hand unless you have a good clue about what they do and their correct format. By editing any copying those files by hand, you have corrupted their contents, and reset the permissions of the original ones (Thanks god you did a backup). I do not know about the stock configuration of CentOS, but this might or might not ...


3

Make sure you have shadow and passalgo=sha512 on a machine, set the root pass to whatever password you want on that machine and take it from /etc/shadow and put it in the kickstart. This is not advisable for production use. To do it programmatic, use the crypt library of your chosen language that generates the kickstart file: RUBY: 'password'.crypt('$6$' ...


3

I have just tested an automated kickstart install (driven by cobbler) and it works fine for me. All I had to do is press Ctrl + Alt + F2 (virt-manager has a menu for this). The only problem is that the shell is not avaialble right away, you have to wait for the installer to reach a certain stage. Regarding debugging, you might find the Anaconda logging page ...


2

The way a hashed password is generated is documented here. $ python -c 'import crypt; print(crypt.crypt("My Password", "$6$My salt"))' The reason why it is not working for you is because you are using a Mac to generate the hash. The crypt implementation differs from the GNU/Linux one. From the crypt(3) manpage: Glibc notes The glibc2 version of ...


2

AFAIK all of the modern servers come with the BMC [Baseboard management card] and provide an IPMI compliant interface both accessible from the OS and network, Other vendors should provide something similar, in case of Dell servers this is the generic IPMI command which starts flashing the chassis LED: ipmitool chassis identify 1 and ipmitool chassis ...


2

Since you have CFEngine, you could apply changes to groups of systems at time based on the security updates posted at: http://twitter.com/#!/CentOS_Announce I'm not the biggest server security engineer out there... but I tend to find that I only care about a few packages when it comes to security. Anything that's public-facing (ssl, ssh, apache) or has a ...


1

i think the partition type of sdb1 is set to 83, which indicates a Linux fs like Ext4. While sdc1 seems to be set to some other type, according to your output of lsblk. you can modify the partition type via utilities like fdisk or cfdisk. if i remember correctly, in fdisk you can change it by using the t command and then entering 83.


1

When using more than one server for Mailman, every server needs to have access to the queue directories on shared storage. That's it. Understanding where moderated messages go If a message is held for moderation, it is moved into $DATA_DIR and the message ID is appended to $LIST_DATA_DIR/listname/pending.pck. The Mailman web interface looks in pending.pck ...


1

There is no direct upgrade support, you must format system partitions. do the user directories and other custom directories that I have installed get overwritten during the installation? If these directories are uncommon or /home - no need, you just need to recreate all the configuration and change uid/gids. Some configuration files from /home might ...


1

We had this problem as well. You need to use text mode, or disable/downshift the graphical install during the netboot. On your kernel options pass nohz=off highres=off See: https://bugzilla.redhat.com/show_bug.cgi?id=632811


1

[root@node ~]# crontab -l no crontab for root It displays this message because crontab -l list entries from user crontab and you edited just global crontab. If you want to edit users crontab just use this command: crontab -e To verify that your task has been executed just grep syslog: grep CRON /var/log/syslog


1

I was just going to advise the OSP option, but the real fix is probably upgrading your ESXi host to the current revision/patch level. As of this writing, your build number is 1065491, and the current is 1483097. VMware Tools often get incremented in the ESXi patch releases. It makes sense to keep your hosts up to date.


1

I'm guessing the machine you're using also has the puppetlabs repo installed in /etc/yum.repos.d/? If you remove it from there (and flush the yum cache), do you still see this issue? I would suspect you're going to want to give reposync an entirely new yum.conf (via --config), specifying a different cache directory then the normal system one.


1

The files that are missing (that are specified in the spec file as Source[123]) are either RedHat specific or is the basic my.cnf file. These won't be typically included in the basic mysql-5.5.18 source tarball and are generally added by Red Hat in their RPMs. What I would do is get the SRPM for this version of MySQL. Go to ...


1

Could be a simple host name issue or a domain realm mapping issue. (It's probably the first one, but for completeness here are both.) hostname issue hostname -f on kerberos.monzell.com should return: kerberos.monzell.com should not return: localhost.localdomain domain realm mapping issue dig -t txt _kerberos.kerberos.monzell.com dig -t txt ...


1

Scientific Linux (at least 6.2 and 6.3; I don't have any 6.1 systems left) not only supports yum-plugin-security but the configuration file for for yum-autoupdate, /etc/sysconfig/yum-autoupdate, allows you enable only the installation of security updates. # USE_YUMSEC # This switches from using yum update to using yum-plugin-security # true - run ...


1

Scientific Linux can now list security updates from the commandline. Furthermore I can update a system to only apply security updates, which is better then the default ("Just update everything! Including bugfixes which you don't care about and which introduce regressions." I have tested this on both Scientific Linux 6.1 and a 6.4. I'm not sure when this was ...


1

With simple boolean options, I've done a grep in /proc/cmdline, which is very easy. For key-value options, the set trick seems handy, though I haven't tried it. Specific answers to your questions: 1) Yes, it sounds like this will work. I've done very similar things with kickstart and /proc/cmdline. 2) No, I don't believe there is any better way. The ...


1

This might be a little bit beyond what you're trying to do, but have you considered using a virtualized server? We had the exact same goal - setup an OS to test on, configure it to a baseline, test a few things then nuke it from orbit when we're done and start over. For us, we found ESXi with VM's to be easiest by utilizing VMWare's snapshot feature. We ...


1

It looks like: yum wants to update glibc-common-2.12-1.80.el6_3.3.x86_64 to glibc-comon-2.12-1.80.el6_3.5.x86_64 the glibc-common:i686 package needs to stay in lockstep with glibc-common:x86_64 the latest version of glibc-common:i686 available is glibc-common-2.12-1.80.el6_3.3.i686 hence, it cannot resolve the two So it appears that ...


1

Just download the SDK from Oracle, place it in a suitable directory like /opt/java. chmod it, i.e.: chmod 744 jdk-6u37-linux-x64.bin unpack it, i.e.: ./jdk-6u37-linux-x64.bin symlink it, i.e.: ln -s jdk1.6.0_37/ jdk set environment variables in /etc/profile.d/java.sh, e.g. (for ant but you get the idea): export JAVA_HOME=/opt/java/jdk export ...


1

Well, as ewwhite said, this looks fine. but if you want to use the Sun JAva, you can download the same from their site. After downloading, you can use this command to switch the java from default to the Sun java. # sudo /usr/sbin/update-alternatives --config java After running this command, you will get an option to add new java and use that instead of ...


1

You can blacklist the drive and multipath will skip it. Put: blacklist { devnode "sd[a-b]" } defaults { user_friendly_names yes } in /etc/multipath.conf and reboot. It looks like everything with the filesystem is intact, so do not be worried about it. When you issue lsof it should be on the partition, not on the whole device (lsof /dev/sdb1 not lsof ...



Only top voted, non community-wiki answers of a minimum length are eligible