From dwalsh at redhat.com Tue Jun 16 16:13:40 2009 From: dwalsh at redhat.com (Daniel J Walsh) Date: Tue, 16 Jun 2009 12:13:40 -0400 Subject: [Thincrust-devel] Just checking on the status of thincrust working with SELinux. Message-ID: <4A37C4B4.7000304@redhat.com> Is there any problems with running thincrust applications with SELinux in enforcing mode? If so I would like to work with the developers to fix any problems they are having. Dan From bkearney at redhat.com Wed Jun 17 11:09:39 2009 From: bkearney at redhat.com (Bryan Kearney) Date: Wed, 17 Jun 2009 07:09:39 -0400 Subject: [Thincrust-devel] Just checking on the status of thincrust working with SELinux. In-Reply-To: <4A37C4B4.7000304@redhat.com> References: <4A37C4B4.7000304@redhat.com> Message-ID: <4A38CEF3.7070608@redhat.com> Daniel J Walsh wrote: > Is there any problems with running thincrust applications with SELinux > in enforcing mode? If so I would like to work with the developers to > fix any problems they are having. > > Dan > I have not heard any issues lately. David/Joey? -- bk From dhuff at redhat.com Wed Jun 17 11:36:38 2009 From: dhuff at redhat.com (David Huff) Date: Wed, 17 Jun 2009 07:36:38 -0400 Subject: [Thincrust-devel] Just checking on the status of thincrust working with SELinux. In-Reply-To: <4A38CEF3.7070608@redhat.com> References: <4A37C4B4.7000304@redhat.com> <4A38CEF3.7070608@redhat.com> Message-ID: <4A38D546.8080404@redhat.com> Bryan Kearney wrote: > Daniel J Walsh wrote: >> Is there any problems with running thincrust applications with SELinux >> in enforcing mode? If so I would like to work with the developers to >> fix any problems they are having. >> >> Dan >> > > I have not heard any issues lately. David/Joey? > > -- bk As long as the image is build on a machine with se-linux enabled it should work fine. Also I am pretty sure the pre-build images ship with se-linux already set in enforcing mode, someone plese correct me if I a mistaken.... -D From lmacken at redhat.com Fri Jun 19 00:17:18 2009 From: lmacken at redhat.com (Luke Macken) Date: Thu, 18 Jun 2009 20:17:18 -0400 Subject: [Thincrust-devel] Just checking on the status of thincrust working with SELinux. Message-ID: <20090619001718.GB13997@x300> David Huff wrote: > Bryan Kearney wrote: > > Daniel J Walsh wrote: > >> Is there any problems with running thincrust applications with SELinux > >> in enforcing mode? If so I would like to work with the developers to > >> fix any problems they are having. > >> > >> Dan > >> > > > > I have not heard any issues lately. David/Joey? > > > > -- bk > > As long as the image is build on a machine with se-linux enabled it > should work fine. Also I am pretty sure the pre-build images ship with > se-linux already set in enforcing mode, someone plese correct me if I a > mistaken.... > > -D Please correct me if I'm wrong, but it looks like SELinux is not enabled on by default on any of the appliances? git.et.redhat.com/act/config/fedora-aos.ks:selinux --permissive git.et.redhat.com/act/config/fedora-aos.ks:#needed to disable selinux git.et.redhat.com/act/config/fedora-aos.ks:-selinux-policy* git.et.redhat.com/act/config/fedora-aos.ks:-libselinux-python git.et.redhat.com/act/config/fedora-aos.ks:-libselinux git.et.redhat.com/ace/resources/moinAppliance-f10.ks:selinux --disabled git.et.redhat.com/ace/resources/cobblerAppliance-f10.ks:selinux --disabled git.et.redhat.com/ace/resources/drupalAppliance-f10.ks:selinux --disabled git.et.redhat.com/ace/resources/mediaWikiAppliance-f10.ks:selinux --disabled git.et.redhat.com/ace/resources/ec2Appliance-f10.ks:selinux --disabled git.et.redhat.com/ace/resources/gitAppliance-f10.ks:selinux --permissive git.et.redhat.com/ace/resources/kronolithAppliance-f10.ks:selinux --disabled git.et.redhat.com/ace/resources/appliance-os-base-pkgs.ks:#needed to disable selinux git.et.redhat.com/ace/resources/appliance-os-base-pkgs.ks:selinux-policy* git.et.redhat.com/ace/resources/appliance-os-base-pkgs.ks:libselinux-python git.et.redhat.com/ace/resources/appliance-os-base-pkgs.ks:libselinux git.et.redhat.com/ace/resources/cobbler/cobbler.ks:selinux --disabled git.et.redhat.com/ace/resources/cobbler/cobbler.ks:echo "SELINUX=disabled" > /etc/selinux/config git.et.redhat.com/ace/resources/cobbler/snippets/aos_package_header:-selinux-policy* git.et.redhat.com/ace/resources/baseAppliance-f9.ks:selinux --permissive git.et.redhat.com/ace/resources/baseAppliance-f10.ks:selinux --permissive git.et.redhat.com/aos/rhel-aos.ks:selinux --disabled git.et.redhat.com/aos/snippets/rhel5-pkgs.ks:# selinux toolchain of policycoreutils, libsemanage, ustr git.et.redhat.com/aos/snippets/rhel5-pkgs.ks:#-selinux-policy* git.et.redhat.com/aos/snippets/rhel5-pkgs.ks:#-libselinux-python git.et.redhat.com/aos/snippets/rhel5-pkgs.ks:#-libselinux git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:#needed to disable selinux git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:# selinux toolchain of policycoreutils, libsemanage, ustr git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:-selinux-policy* git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:-libselinux-python git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:-libselinux git.et.redhat.com/aos/fedora-aos.ks:selinux --permissive luke From bhkwan at thoughtworks.com Fri Jun 19 00:27:42 2009 From: bhkwan at thoughtworks.com (Barrow H Kwan) Date: Thu, 18 Jun 2009 19:27:42 -0500 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image Message-ID: anyone have that working? I have tried to build the image then use the thincrust tool to convert the raw image to VMware vmdk file. When I load the image in VMware, it stuck on GRUB with Failed 2. I am not sure if it is the image conversation to vmdk has problem or the image already has problem when appliance-creator create it. any help will be appreciated -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2952 bytes Desc: S/MIME Cryptographic Signature URL: From bhkwan at thoughtworks.com Fri Jun 19 01:07:19 2009 From: bhkwan at thoughtworks.com (Barrow H Kwan) Date: Thu, 18 Jun 2009 20:07:19 -0500 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image In-Reply-To: References: Message-ID: I have verified that the raw image created by appliance-creator is not working. When I load the image with virt-image, I got GRUB Loading stage1.5. GRUB loading, please wait... Error 2 Again, I was trying to create CentOS 5 image from FC10 ( since thincrust has no support on CentOS/RHEL yet ). here is my ks file #version=RHEL5# System authorization information auth --useshadow --enablemd5 # Firewall configuration firewall --disabled # System keyboard keyboard us # System language lang C # SELinux configuration selinux --disabled repo --name=released --baseurl=http:///centos/5/os/i386 repo --name=updates --baseurl=http:///centos/5/updates/i386 # System services services --enabled=network # System timezone timezone US/Central # Network information network --bootproto=dhcp --device=eth0 --onboot=on # System bootloader configuration bootloader --location=mbr # Disk partitioning information part / --fstype="ext3" --ondisk=sda --size=4096 %packages bash grub kernel system-config-securitylevel-tui e2fsprogs passwd policycoreutils chkconfig rootfiles yum vim-minimal acpid #needed to disable selinux #lokkit #Allow for dhcp access dhclient iputils # # Packages to Remove # # no need for kudzu if the hardware doesn't change -kudzu -prelink -setserial -ed # Remove the authconfig pieces -authconfig -rhpl -wireless-tools # Remove the kbd bits -kbd -usermode # these are all kind of overkill but get pulled in by mkinitrd ordering -mkinitrd -kpartx -dmraid -mdadm -lvm2 -tar # selinux toolchain of policycoreutils, libsemanage, ustr -policycoreutils -checkpolicy -selinux-policy* -libselinux-python -libselinux # Things it would be nice to loose -redhat-logos -redhat-release-notes From: Barrow H Kwan To: thincrust-devel at redhat.com Date: 06/18/2009 05:32 PM Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image anyone have that working? I have tried to build the image then use the thincrust tool to convert the raw image to VMware vmdk file. When I load the image in VMware, it stuck on GRUB with Failed 2. I am not sure if it is the image conversation to vmdk has problem or the image already has problem when appliance-creator create it. any help will be appreciated [attachment "smime.p7s" deleted by Barrow H Kwan/Corporate/ThoughtWorks/US] _______________________________________________ Thincrust-devel mailing list Thincrust-devel at redhat.com https://www.redhat.com/mailman/listinfo/thincrust-devel -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2952 bytes Desc: S/MIME Cryptographic Signature URL: From ian.m.wilson at gmail.com Fri Jun 19 02:32:05 2009 From: ian.m.wilson at gmail.com (Ian Wilson) Date: Thu, 18 Jun 2009 22:32:05 -0400 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image In-Reply-To: References: Message-ID: On Thu, Jun 18, 2009 at 9:07 PM, Barrow H Kwan wrote: > I have verified that the raw image created by appliance-creator is not > working. ?When I load the image with virt-image, I got I've had this issue in the past as well, but, it was an issue with my kickstart file, not appliance-creator. Do you have the output from appliance-creator? Also, I've attached a known-good CentOS5 kickstart file (used earlier this evening) that should work for you. Let me know if you're still having any issues. ian -- Ian Wilson ian.m.wilson at gmail.com http://ianwilson.org || http://www.ians-blog.com Solving site load issues with database replication is a lot like solving your own personal problems with heroin -- at first, it sorta works, but after a while things just get out of hand. -------------- next part -------------- A non-text attachment was scrubbed... Name: CentOS5-Ace.ks Type: application/octet-stream Size: 1719 bytes Desc: not available URL: From bkearney at redhat.com Fri Jun 19 10:36:27 2009 From: bkearney at redhat.com (Bryan Kearney) Date: Fri, 19 Jun 2009 06:36:27 -0400 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image In-Reply-To: References: Message-ID: <4A3B6A2B.4060808@redhat.com> Barrow H Kwan wrote: > I have verified that the raw image created by appliance-creator is not > working. When I load the image with virt-image, I got > > GRUB Loading stage1.5. > GRUB loading, please wait... > Error 2 > > Again, I was trying to create CentOS 5 image from FC10 ( since thincrust > has no support on CentOS/RHEL yet ). > > here is my ks file > We have a livecd/appliance-creator patch stream going for EPEL/RHEL/CENTOS. David Huff.. do you remember where that ended up? It was being driven out of the oVirt project. -- bk From bhkwan at thoughtworks.com Fri Jun 19 14:14:44 2009 From: bhkwan at thoughtworks.com (Barrow H Kwan) Date: Fri, 19 Jun 2009 09:14:44 -0500 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image In-Reply-To: References: Message-ID: Thanks Ian, I tried your ks and got this error Retrieving http://mirrors.liquidweb.com/CentOS/5.2/extras/i386/repodata/filelists.xml.gz ...OK base_appliance-0.0.4-1.fc10.noarch from thincrust has depsolving problems --> Missing Dependency: ace-banners is needed by package base_appliance-0.0.4-1.fc10.noarch (thincrust) From: Ian Wilson To: Thincrust tooling devel list Date: 06/18/2009 07:37 PM Subject: Re: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image On Thu, Jun 18, 2009 at 9:07 PM, Barrow H Kwan wrote: > I have verified that the raw image created by appliance-creator is not > working. When I load the image with virt-image, I got I've had this issue in the past as well, but, it was an issue with my kickstart file, not appliance-creator. Do you have the output from appliance-creator? Also, I've attached a known-good CentOS5 kickstart file (used earlier this evening) that should work for you. Let me know if you're still having any issues. ian -- Ian Wilson ian.m.wilson at gmail.com http://ianwilson.org || http://www.ians-blog.com Solving site load issues with database replication is a lot like solving your own personal problems with heroin -- at first, it sorta works, but after a while things just get out of hand. [attachment "CentOS5-Ace.ks" deleted by Barrow H Kwan/Corporate/ThoughtWorks/US] _______________________________________________ Thincrust-devel mailing list Thincrust-devel at redhat.com https://www.redhat.com/mailman/listinfo/thincrust-devel -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2952 bytes Desc: S/MIME Cryptographic Signature URL: From bhkwan at thoughtworks.com Fri Jun 19 14:16:31 2009 From: bhkwan at thoughtworks.com (Barrow H Kwan) Date: Fri, 19 Jun 2009 09:16:31 -0500 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image In-Reply-To: <4A3B6A2B.4060808@redhat.com> References: <4A3B6A2B.4060808@redhat.com> Message-ID: Hi Bryan, that will be very helpful if we can get the patch somewhere. Since I use CentOS/RHEL a lot in my work ( and personal use ), I can help to maintain the patch if it is needed. thanks! Barrow From: Bryan Kearney To: Thincrust tooling devel list Date: 06/19/2009 03:42 AM Subject: Re: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image Barrow H Kwan wrote: > I have verified that the raw image created by appliance-creator is not > working. When I load the image with virt-image, I got > > GRUB Loading stage1.5. > GRUB loading, please wait... > Error 2 > > Again, I was trying to create CentOS 5 image from FC10 ( since thincrust > has no support on CentOS/RHEL yet ). > > here is my ks file > We have a livecd/appliance-creator patch stream going for EPEL/RHEL/CENTOS. David Huff.. do you remember where that ended up? It was being driven out of the oVirt project. -- bk _______________________________________________ Thincrust-devel mailing list Thincrust-devel at redhat.com https://www.redhat.com/mailman/listinfo/thincrust-devel -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2952 bytes Desc: S/MIME Cryptographic Signature URL: From bkearney at redhat.com Thu Jun 25 13:26:05 2009 From: bkearney at redhat.com (Bryan Kearney) Date: Thu, 25 Jun 2009 09:26:05 -0400 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image In-Reply-To: References: <4A3B6A2B.4060808@redhat.com> Message-ID: <4A437AED.1070603@redhat.com> Barrow H Kwan wrote: > Hi Bryan, > > that will be very helpful if we can get the patch somewhere. Since > I use CentOS/RHEL a lot in my work ( and personal use ), I can help to > maintain the patch if it is needed. > > thanks! > > Barrow > I am still trying to find the code. I will keep you updated.... as I would like to see this in EPEL. -- bk From bhkwan at thoughtworks.com Thu Jun 25 16:42:34 2009 From: bhkwan at thoughtworks.com (Barrow H Kwan) Date: Thu, 25 Jun 2009 11:42:34 -0500 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image In-Reply-To: <4A437AED.1070603@redhat.com> References: <4A3B6A2B.4060808@redhat.com> <4A437AED.1070603@redhat.com> Message-ID: thanks!. I am still waiting for that.. :( I hope to hear from you very soon :D From: Bryan Kearney To: Thincrust tooling devel list Cc: thincrust-devel-bounces at redhat.com Date: 06/25/2009 06:30 AM Subject: Re: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image Barrow H Kwan wrote: > Hi Bryan, > > that will be very helpful if we can get the patch somewhere. Since > I use CentOS/RHEL a lot in my work ( and personal use ), I can help to > maintain the patch if it is needed. > > thanks! > > Barrow > I am still trying to find the code. I will keep you updated.... as I would like to see this in EPEL. -- bk _______________________________________________ Thincrust-devel mailing list Thincrust-devel at redhat.com https://www.redhat.com/mailman/listinfo/thincrust-devel -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2952 bytes Desc: S/MIME Cryptographic Signature URL: From ian.m.wilson at gmail.com Thu Jun 25 17:07:32 2009 From: ian.m.wilson at gmail.com (Ian Wilson) Date: Thu, 25 Jun 2009 13:07:32 -0400 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image In-Reply-To: References: Message-ID: On Fri, Jun 19, 2009 at 10:14 AM, Barrow H Kwan wrote: > Retrieving > http://mirrors.liquidweb.com/CentOS/5.2/extras/i386/repodata/filelists.xml.gz > ...OK > base_appliance-0.0.4-1.fc10.noarch from thincrust has depsolving problems > ? --> Missing Dependency: ace-banners is needed by package > base_appliance-0.0.4-1.fc10.noarch (thincrust) Yikes. That's my bad. In order to get past this, you'll need to either remove the base_appliance package from the package list, or, create a local repository that contains the Thincrust ACE packages. In the images that I've been playing around with, we've been creating our own rpms of our ACE packages to make installation simpler, but, you may or may not need that level of functionality. Ian -- Ian Wilson ian.m.wilson at gmail.com http://ianwilson.org || http://www.ians-blog.com Solving site load issues with database replication is a lot like solving your own personal problems with heroin -- at first, it sorta works, but after a while things just get out of hand. From gbuzzard at venturiwireless.com Fri Jun 26 23:28:50 2009 From: gbuzzard at venturiwireless.com (Greg Buzzard) Date: Fri, 26 Jun 2009 16:28:50 -0700 Subject: [Thincrust-devel] applicance-creator on FC10 to create CentOS 5 image Message-ID: Hi Ian, et.al., I?ve created a local repo to provide ace-banners (I also switched the CentOS repos in the ?.ks? file to use 5.3, added ace-banners to the ?.ks? file, added my local repo to the ?.ks? file and, just FYI, my host is FC-11). The build from appliance-creator seems to work (snippet of the last part of console output is shown below). But, when I try to run it with virt-image and connect via virt-viewer, all I see is a ?grub prompt?. Sorry if this is a newbie question, I?m rather new to playing with redhat and these kinds of build issues. What to do next? Is there some way I can mount this virtual disk and see what is going on in the file system? The snippet below makes it appear as though the grub install actions succeeded. ...last part of output from ?appliance-creator?... Installing: ace ##################### [145/155] Installing: ace-banners ##################### [146/155] Installing: yum-fastestmirror ##################### [147/155] Installing: acpid ##################### [148/155] Installing: dhclient ##################### [149/155] Installing: base_appliance ##################### [150/155] Installing: kernel ##################### [151/155] Installing: setools ##################### [152/155] Installing: openssh-clients ##################### [153/155] Installing: openssh-server ##################### [154/155] Installing: dhcpv6-client ##################### [155/155] Probing devices to guess BIOS drives. This may take a long time. GNU GRUB version 0.97 (640K lower / 3072K upper memory) [ Minimal BASH-like line editing is supported. For the first word, TAB lists possible command completions. Anywhere else TAB lists the possible completions of a device/filename.] grub> device (hd0) /dev/loop4 grub> root (hd0,0) Filesystem type is ext2fs, partition type 0x83 grub> setup --stage2=/var/tmp/imgcreate-XldNQ3/install_root/boot/grub/stage2 --prefix=/boot/grub (hd0) Checking if "/boot/grub/stage1" exists... yes Checking if "/boot/grub/stage2" exists... yes Checking if "/boot/grub/e2fs_stage1_5" exists... yes Running "embed /boot/grub/e2fs_stage1_5 (hd0)"... failed (this is not fatal) Running "embed /boot/grub/e2fs_stage1_5 (hd0,0)"... failed (this is not fatal) Running "install --stage2=/var/tmp/imgcreate-XldNQ3/install_root/boot/grub/stage2 /boot/grub/stage1 (hd0) /boot/grub/stage2 p /boot/grub/grub.conf "... succeeded Done. grub> quit cp: cannot stat `tcsplash.xpm.gz': No such file or directory ioctl: LOOP_CLR_FD: Device or resource busy Finished ----------- Thanks... Greg -------------- next part -------------- An HTML attachment was scrubbed... URL: