Centos 6.5

[Snorkasaurus]

Hey v60...

Even Redhat has not entirely solved that bug between the keyboard and the chair.

LAWL! :-)

Have you tried CentOS as a mail server? I am still looking for a good Linux based mail server solution that can handle virtual domains/users, spamassassin (of course), and does not require fitting together a half dozen different apps to work with each other. A well designed and very configurable greylisting system would also be a huge bonus. <wink> I have not looked at CentOS in a while, does v6.5 have some significant or important changes?

S.

[viking60]

I have to admit that I suck at mail - so I will have to call for other gurus and oracles here:
Gurus and Oracles!!!

[viking60]

While we are waiting I changed my wallpaper to show what this really is:

I have tested Debian 7 too by now.

Regarding Mail if you install postfix and let webmin set it up that might be easier

[viking60]

Ok It has been running nicely since the install with the exception that I had to start the network manually after a boot.
(Not a biggie with a server that is set to run "forever")

I amused myself with setting up a dyndns address to share this with you so here you will see a backup of this forum on Centos 6.5 in a VirtualBox on my Manjaro box

https://thomasbjo.dyndns.org/forum/

This is https and I am not paying zillions for a certificate so you will get some warnings (which is ironical since it is way more secure than the sites without the warnings)

Since I now have explained this, you can now click I understand the risks
Next you need to check add exception

And finally

And you can see; Legitimate Banks Stores and public sites will not ask you to do this.

And since I am way more trustworthy than the Banks and public sites (like the NSA site etc ) I will ask you to confirm this security exception - and you should never do that with the bank... They have your money to buy all the certificates in the world.

You will now be surfing on a copy of this board - check out the address though if you post there - it will not turn up here

This server will be up from time to time but I turn off this box whenever I feel like it, and I often close VB's and open other ones.
So if you cannot get there that will be the reason. The "official" backup where you can post in times of crisis is still
http://viking60.no-ip.org/forum.

ddclient works well with the dyndns service and this is only to prove that you can install Centos in a Virtualbox and make it available to the world

[Snorkasaurus]

Hey v60... it might be possible to get a free StartSSL cert to work with a dyndns address. Just sayin' :-)
S.

[viking60]

Good idea
Since I have not set up mail on this one that could maybe be a problem. And most people on the net are familiar with that exception prompting so it does not matter that much in terms of security.

But this is stuff for the Tips and Tricks section - Do feel free to write it up. We cannot have this site without a tip for free SSL certificates

Great tip there

[Snorkasaurus]

I used to be a user of EveryDNS until dyndns bought them and destroyed the service in 2010/2011. Those of us who were "donating users" at EveryDNS got screwed in the transfer, so I decided not to use dyndns going forward. Since I already had snork.ca I could just use test1.snork.ca for example if I wanted a new domain name. I should add that I have been using he.net for my free DNS services and they have been pretty solid. All that to say "I wouldn't touch dyndns with the dirty end of an eighteen foot CB antenna.". :-)

S.

[viking60]

Well ... one of the things we expect from Centos is stability - even in a virtualbox.
And today it simply refuses to boot properly. It remains at the "loadbar".

That is not stable in my book.
I did manage to log in on tty2 and update centos 6.5 and I noticed that the update did not contain the patched version of openSSL (should be 1.0.1g or higher it is 1.0.1f).
So disappointment there
Checking how Debian is doing...

[jkerr82508]

I noticed that the update did not contain the patched version of openSSL (should be 1.0.1g or higher it is 1.0.1f).

I think that they patched the earlier version (which is what Mageia did also)

http://lwn.net/Alerts/593841/
http://advisories.mageia.org/MGASA-2014-0165.html

Jim

[viking60]

Yup the Oracle has spoken.
That does indeed mean that they both have patched it. The important stuff is taken care off. Thanks
The only disappointment now is why it will not finish the boot process.
I am not alone:
https://www.centos.org/forums/viewtopic ... 13&t=44281
https://communities.vmware.com/thread/468493

I am sure it is fixable but from a server distro I am expecting a "set it and forget it" policy. Debian was moody right after install but is now rock solid, where Centos6.5 is disappointing.
I picked Centos6.5 as a winner in the contest with Debian 7 right after install - but now I am not so sure anymore.

A server has to stay up there too...

[viking60]

...
Well it turns out that this was no show stopper. Pressing the space bar will allow the boot to go on - so I can live with it. I also have the problem that the network service does not autostart (I'll look into it and fix it later).
That made this Centos install a bit "incomunicado" when trying to remote control it. (If the network had been up; that boot (graphical) freeze would not matter much on a server).

So apart form hitting space on boot and manually starting the network (with sudo service network start) - everything works just fine.

[viking60]

I thought I'd try the upgrade tool so I went to /etc/yum.repos.d/ and created the file upgradetool.repo and put this content in there:

Code: Select all

[upg]
name=CentOS-$releasever - Upgrade Tool
baseurl=http://dev.centos.org/centos/6/upg/x86_64/
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-

Then I ran:

Code: Select all

sudo yum install redhat-upgrade-tool preupgrade-assistant-contents

This basically creates the repo file I need to work with and installs the preupgrade assistant from there.

Then I went to yumex and searched for "preupgrade" - and there it was - all ready and installed:


....
Then I ran

Code: Select all

preupg -l

and it showed:

Code: Select all

2014-08-18 13:59:28,464 INFO CentOS6_7
CentOS6_7
2014-08-18 13:59:28,464 INFO CentOS6_7

Since I have Centos 6.7; I must run this command:

Code: Select all

sudo preupg -s CentOS6_7

This runs a tool that gathers the vital info in a log and warns me that I should do a backup now etc. etc... - naturally I ignored the latter part
So yes I do want to continue .....
So the system now gathers "logs used by preupgrade assistant"
....I'll let you know how it went...Looking good so far....According to the "marketing" it can take "several minutes" for the analysis to finish - they were not kidding.....Still running Binary rebuilds I suspect this would not be a good time to run out of space (which is an option )...

Ahh Finally it went through with this result:

Code: Select all

Gathering logs used by preupgrade assistant:
All installed packages : 01/11 ...finished (time 00:00s)
All changed files      : 02/11 ...finished (time 04:10s)
Changed config files   : 03/11 ...finished (time 00:00s)
All users              : 04/11 ...finished (time 00:00s)
All groups             : 05/11 ...finished (time 00:00s)
Service statuses       : 06/11 ...finished (time 00:00s)
All installed files    : 07/11 ...finished (time 00:03s)
All local files        : 08/11 ...finished (time 01:53s)
All executable files   : 09/11 ...finished (time 00:41s)
RedHat signed packages : 10/11 ...finished (time 00:00s)
CentOS signed packages : 11/11 ...finished (time 00:00s)
Assessment of the system, running checks / SCE scripts:
001/095 ...done    (Configuration Files to Review)
002/095 ...done    (File Lists for Manual Migration)
003/095 ...done    (Bacula Backup Software)
004/095 ...done    (MySQL configuration)
005/095 ...done    (Migration of the MySQL data stack)
006/095 ...done    (General changes in default MySQL implementation)
007/095 ...done    (PostgreSQL upgrade content)
008/095 ...running (GNOME Desktop Environment underwent several design modificatdone    (GNOME Desktop Environment underwent several design modifications in CentOS 7 release)
009/095 ...running (KDE Desktop Environment underwent several design modificatiodone    (KDE Desktop Environment underwent several design modifications in CentOS 7 release)
010/095 ...done    (several graphic drivers not supported in CentOS 7)
011/095 ...done    (several input drivers not supported in CentOS 7)
012/095 ...done    (several kernel networking drivers not available in CentOS 7)
013/095 ...done    (several kernel storage drivers not available in CentOS 7)
014/095 ...done    (Names, Options and Output Format Changes in arptables)
015/095 ...done    (BIND9 running in a chroot environment check.)
016/095 ...done    (BIND9 configuration compatibility check)
017/095 ...running (Move dhcpd/dhcprelay arguments from /etc/sysconfig/* to *.sedone    (Move dhcpd/dhcprelay arguments from /etc/sysconfig/* to *.service files)
018/095 ...done    (DNSMASQ configuration compatibility check)
019/095 ...done    (Dovecot configuration compatibility check)
020/095 ...done    (Compatibility Between iptables and ip6tables)
021/095 ...done    (Net-SNMP check)
022/095 ...done    (Squid configuration compatibility check)
023/095 ...done    (Reusable Configuration Files)
024/095 ...done    (VCS repositories)
025/095 ...done    (Added and extended options for BIND9 configuration)
026/095 ...done    (Added options in DNSMASQ configuration)
027/095 ...done    (Packages not signed by CentOS)
028/095 ...done    (Obsoleted rpms)
029/095 ...done    (w3m not available in CentOS 7)
030/095 ...running (report incompatibilities between CentOS 6 and 7 in qemu-guesdone    (report incompatibilities between CentOS 6 and 7 in qemu-guest-agent package)
031/095 ...done    (Removed options in coreutils binaries)
032/095 ...done    (Removed options in gawk binaries)
033/095 ...done    (Removed options in netstat binary)
034/095 ...done    (Removed options in quota tools)
035/095 ...done    (Removed rpms)
036/095 ...done    (Replaced rpms)
037/095 ...done    (GMP library incompatibilities)
038/095 ...done    (package downgrades)
039/095 ...done    (restore custom selinux configuration)
040/095 ...done    (General)
041/095 ...done    (samba shared directories selinux)
042/095 ...done    (CUPS Browsing/BrowsePoll configuration)
043/095 ...done    (CVS Package Split)
044/095 ...done    (FreeRADIUS Upgrade Verification)
045/095 ...done    (httpd configuration compatibility check)
046/095 ...done    (bind-dyndb-ldap)
047/095 ...done    (Identity Management Server compatibility check)
048/095 ...done    (IPA Server CA Verification)
049/095 ...done    (NTP configuration)
050/095 ...done    (Information on time-sync.target)
051/095 ...done    (OpenLDAP /etc/sysconfig and data compatibility)
052/095 ...done    (OpenSSH sshd_config migration content)
053/095 ...done    (OpenSSH sysconfig migration content)
054/095 ...done    (Configuration for quota_nld service)
055/095 ...running (Disk quota netlink message daemon moved into quota-nld packadone    (Disk quota netlink message daemon moved into quota-nld package)
056/095 ...done    (SSSD compatibility check)
057/095 ...done    (Luks encrypted partition)
058/095 ...done    (Clvmd and cmirrord daemon management.)
059/095 ...done    (State of LVM2 services.)
060/095 ...done    (device-mapper-multipath configuration compatibility check)
061/095 ...done    (Removal of scsi-target-utils)
062/095 ...done    (Configuration for warnquota tool)
063/095 ...running (Disk quota tool warnquota moved into quota-warnquota packagedone    (Disk quota tool warnquota moved into quota-warnquota package)
064/095 ...done    (Architecture Support)
065/095 ...running (Binary rebuilds)
done    (Binary rebuilds)
066/095 ...done    (Debuginfo packages)
067/095 ...done    (Cluster and High Availablility)
068/095 ...done    (fix krb5kdc config file)
069/095 ...done    (File Systems, Partitions and Mounts Configuration Review)
070/095 ...done    (Read Only FHS directories)
071/095 ...done    (Sonamebumped libs)
072/095 ...done    (SonameKept Reusable Dynamic Libraries)
073/095 ...done    (Removed .so libs)
074/095 ...done    (In-place Upgrade Requirements for the /usr/ Directory)
075/095 ...done    (CA certificate bundles modified)
076/095 ...done    (Developer Tool Set packages)
077/095 ...done    (Hyper-V)
078/095 ...running (Content for enabling and disabling services based on CentOS done    (Content for enabling and disabling services based on CentOS 6 system)
079/095 ...done    (Check for ethernet interface naming)
080/095 ...done    (User modification in /etc/rc.local and /etc/rc.d/rc.local)
081/095 ...done    (cgroups configuration compatibility check)
082/095 ...done    (Plugable authentication modules (PAM))
083/095 ...done    (Foreign Perl modules)
084/095 ...done    (Python 2.7.5)
085/095 ...done    (Ruby 2.0.0)
086/095 ...done    (SCL collections)
087/095 ...done    (System kickstart)
088/095 ...done    (YUM)
089/095 ...done    (Check for usage of dangerous range of UID/GIDs)
090/095 ...done    (Incorrect usage of reserved UID/GIDs)
091/095 ...done    (NIS ypbind config files back-up)
092/095 ...done    (NIS Makefile back-up)
093/095 ...done    (NIS server maps check)
094/095 ...done    (NIS server MAXUID and MAXGID limits check)
095/095 ...done    (NIS server config file back-up)
Assessment finished (time 35:11s)
Result table with checks and their results for main contents:
---------------------------------------------------------------------------------------------------------------
|Bacula Backup Software                                                                    |notapplicable     |
|PostgreSQL upgrade content                                                                |notapplicable     |
|Names, Options and Output Format Changes in arptables                                     |notapplicable     |
|BIND9 running in a chroot environment check.                                              |notapplicable     |
|Move dhcpd/dhcprelay arguments from /etc/sysconfig/* to *.service files                   |notapplicable     |
|DNSMASQ configuration compatibility check                                                 |notapplicable     |
|Dovecot configuration compatibility check                                                 |notapplicable     |
|Net-SNMP check                                                                            |notapplicable     |
|Squid configuration compatibility check                                                   |notapplicable     |
|w3m not available in CentOS 7                                                             |notapplicable     |
|report incompatibilities between CentOS 6 and 7 in qemu-guest-agent package               |notapplicable     |
|Removed options in quota tools                                                            |notapplicable     |
|restore custom selinux configuration                                                      |notapplicable     |
|CUPS Browsing/BrowsePoll configuration                                                    |notapplicable     |
|FreeRADIUS Upgrade Verification                                                           |notapplicable     |
|bind-dyndb-ldap                                                                           |notapplicable     |
|Identity Management Server compatibility check                                            |notapplicable     |
|IPA Server CA Verification                                                                |notapplicable     |
|NTP configuration                                                                         |notapplicable     |
|Information on time-sync.target                                                           |notapplicable     |
|OpenLDAP /etc/sysconfig and data compatibility                                            |notapplicable     |
|Configuration for quota_nld service                                                       |notapplicable     |
|Disk quota netlink message daemon moved into quota-nld package                            |notapplicable     |
|SSSD compatibility check                                                                  |notapplicable     |
|Clvmd and cmirrord daemon management.                                                     |notapplicable     |
|Removal of scsi-target-utils                                                              |notapplicable     |
|Configuration for warnquota tool                                                          |notapplicable     |
|Disk quota tool warnquota moved into quota-warnquota package                              |notapplicable     |
|fix krb5kdc config file                                                                   |notapplicable     |
|cgroups configuration compatibility check                                                 |notapplicable     |
|Ruby 2.0.0                                                                                |notapplicable     |
|SCL collections                                                                           |notapplicable     |
|NIS ypbind config files back-up                                                           |notapplicable     |
|NIS Makefile back-up                                                                      |notapplicable     |
|NIS server maps check                                                                     |notapplicable     |
|NIS server MAXUID and MAXGID limits check                                                 |notapplicable     |
|NIS server config file back-up                                                            |notapplicable     |
|General changes in default MySQL implementation                                           |pass              |
|KDE Desktop Environment underwent several design modifications in CentOS 7 release        |pass              |
|several graphic drivers not supported in CentOS 7                                         |pass              |
|several input drivers not supported in CentOS 7                                           |pass              |
|several kernel storage drivers not available in CentOS 7                                  |pass              |
|Compatibility Between iptables and ip6tables                                              |pass              |
|Reusable Configuration Files                                                              |pass              |
|OpenSSH sshd_config migration content                                                     |pass              |
|Luks encrypted partition                                                                  |pass              |
|Architecture Support                                                                      |pass              |
|Debuginfo packages                                                                        |pass              |
|Cluster and High Availablility                                                            |pass              |
|Read Only FHS directories                                                                 |pass              |
|In-place Upgrade Requirements for the /usr/ Directory                                     |pass              |
|CA certificate bundles modified                                                           |pass              |
|Developer Tool Set packages                                                               |pass              |
|Hyper-V                                                                                   |pass              |
|Check for ethernet interface naming                                                       |pass              |
|User modification in /etc/rc.local and /etc/rc.d/rc.local                                 |pass              |
|Plugable authentication modules (PAM)                                                     |pass              |
|System kickstart                                                                          |pass              |
|Incorrect usage of reserved UID/GIDs                                                      |pass              |
|MySQL configuration                                                                       |informational     |
|Migration of the MySQL data stack                                                         |informational     |
|VCS repositories                                                                          |informational     |
|Added and extended options for BIND9 configuration                                        |informational     |
|Added options in DNSMASQ configuration                                                    |informational     |
|Removed options in coreutils binaries                                                     |informational     |
|Removed options in gawk binaries                                                          |informational     |
|Removed options in netstat binary                                                         |informational     |
|GMP library incompatibilities                                                             |informational     |
|samba shared directories selinux                                                          |informational     |
|CVS Package Split                                                                         |informational     |
|httpd configuration compatibility check                                                   |informational     |
|File Systems, Partitions and Mounts Configuration Review                                  |informational     |
|Sonamebumped libs                                                                         |informational     |
|SonameKept Reusable Dynamic Libraries                                                     |informational     |
|Content for enabling and disabling services based on CentOS 6 system                      |informational     |
|YUM                                                                                       |informational     |
|BIND9 configuration compatibility check                                                   |fixed             |
|Replaced rpms                                                                             |fixed             |
|package downgrades                                                                        |fixed             |
|OpenSSH sysconfig migration content                                                       |fixed             |
|State of LVM2 services.                                                                   |fixed             |
|device-mapper-multipath configuration compatibility check                                 |fixed             |
|Configuration Files to Review                                                             |needs_inspection  |
|File Lists for Manual Migration                                                           |needs_inspection  |
|Binary rebuilds                                                                           |needs_inspection  |
|Foreign Perl modules                                                                      |needs_inspection  |
|Python 2.7.5                                                                              |needs_inspection  |
|Check for usage of dangerous range of UID/GIDs                                            |needs_inspection  |
|GNOME Desktop Environment underwent several design modifications in CentOS 7 release      |needs_action      |
|Packages not signed by CentOS                                                             |needs_action      |
|Obsoleted rpms                                                                            |needs_action      |
|Removed rpms                                                                              |needs_action      |
|General                                                                                   |needs_action      |
|Removed .so libs                                                                          |needs_action      |
|several kernel networking drivers not available in CentOS 7                               |fail              |
---------------------------------------------------------------------------------------------------------------
Tarball with results is stored here /root/preupgrade-results/preupg_results-140818144639.tar.gz .
The latest assessment is stored in directory /root/preupgrade .
Summary information:
We found some critical issues. In-place upgrade is not advised.
Read the file /root/preupgrade/result.html for more details.
Upload results to UI by command:
e.g. preupg -u http://127.0.0.1:8099/submit/ -r /root/preupgrade-results/preupg_results-*.tar.gz .


Basically the upgrade is not recommended so I have to read the logs closer to check

Here is a failure:

"Several Kernel networking drivers not avilable in Centos 7" - (they were not to peachy in Centos 6 either)
I will not let this stop me - I can change the "Hardware" in Virtualbox - It might be that Centos 7 is not at all compatible with Virtualbox, and in that case I guess I will stop testing it
The report on file:///root/preupgrade/result.html is actually quite nice and easy to read....
It tells me that Gnome desktop "needs action" but I am not even using it - I use Xfce. It might be that polkit Gnome is used by xfce4 and is obsoleted by Gnome.
I need to find a another polkit for XFCE4 which means that I might have to install lxdm and remove gdm or install Gnome.

Non Centos packages are gathered in /root/preupgrade/./kickstart/noncentospkgs I need to manage these myself - that seems only fair.

There are a lot of obsolete packages due to the transition to systemd and others).

Lots of things to concider and fix and lots of warnings.
Ok time to upgrade:

Code: Select all

centos-upgrade-tool-cli --network 7 --instrepo=http://mirror.centos.org/centos/7/os/x86_64/

Again this warns me about an extreme risk (probably the network thing) so i should run

Code: Select all

preupg --riskcheck --verbose

Monkey see monkey do....
Yup my VB apparently requires pcnet32 which is not available in Centos7 - and that stops the upgrade

I guess it is easier to just install Centos 7 the "hard" way.