[00:24] siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) left irc: Ping timeout: 480 seconds [07:55] fai-guy (~fai-guy@p4FC216BA.dip0.t-ipconnect.de) joined #fai. [07:57] fxcp (~ctp@brsg-d9bee0af.pool.mediaWays.net) joined #fai. [08:05] ErKa (~keryell@APuteaux-154-1-46-165.w83-199.abo.wanadoo.fr) joined #fai. [08:16] siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) joined #fai. [08:50] siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) left irc: Ping timeout: 480 seconds [09:01] Mrfai (~lange@kueppers.informatik.uni-koeln.de) joined #fai. [09:56] siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) joined #fai. [10:24] Joelio (~joel@office-112.zen.co.uk) joined #fai. [10:39] Joelio (~joel@office-112.zen.co.uk) left irc: Quit: Lost terminal [11:03] cbmuser_ (~glaubitz@z6.physik.fu-berlin.de) joined #fai. [11:03] cbmuser_ (~glaubitz@z6.physik.fu-berlin.de) left irc: [11:05] Mrfai (~lange@kueppers.informatik.uni-koeln.de) left irc: Quit: leaving [11:06] Mrfai (~lange@suenner.informatik.uni-koeln.de) joined #fai. [11:17] Joelio (~joel@office-112.zen.co.uk) joined #fai. [11:18] stephen__g (~steffen@dynamic.aei.mpg.de) joined #fai. [11:18] hi [11:25] hi [11:29] hi! [11:29] Action: Mrfai SIGFOOD [12:48] RealMurphy (~carsten@130.75.117.49) joined #fai. [12:48] qwerty (~fehrmann@130.75.117.49) joined #fai. [13:02] bjarne (~bjarne@193.90.149.186) joined #fai. [13:41] Mrfai_ (~lange@kueppers.informatik.uni-koeln.de) joined #fai. [13:41] Mrfai_ (~lange@kueppers.informatik.uni-koeln.de) left irc: Remote host closed the connection [14:10] Nic0 (~courtel@fw.tls.cena.fr) left irc: Remote host closed the connection [14:11] Mrfai: I took a generic kernel together with the aufs-modules and live-initramfs. During the boot I end up in the initrd with the message: ALERT! /dev/nfs does not exits. Any hints? [14:13] Nic0 (~courtel@fw.tls.cena.fr) joined #fai. [14:19] qwerty: probably the kernel has neither nfs support compiled in, nor the module loaded [14:21] which kernel parameters did you use? cat /proc/cmdline [14:22] it is a bit longer: [14:22] root=/dev/nfs nfsroot=/srv/fai/nfsroot,v3,tcp,rsize=32768,wsize=32768 console=ttyS1,19200 union=aufs initrd=initrd.img-2.6.26-1-amd64 ip=::::::dhcp FAI_FLAGS=verbose,sshd,createvt,reboot FAI_ACTION=install BOOT_IMAGE=vmlinuz-2.6.26-1-amd64 [14:23] you are missing boot=live [14:23] A self compiled kernel with nfssupport leads to the same result. [14:23] Action: oz__ never saw "union=aufs" as argument before [14:25] It was a guess. I also tried it without union=aufs. [14:26] use fai-chboot for creating the pxe config files [14:26] unionfs=aufs is now default [14:27] and "unionfs=aufs" reads much more sensible to me... [14:27] boot=live must appear after nfsroot=.... [14:27] Joelio (~joel@office-112.zen.co.uk) left irc: Ping timeout: 480 seconds [14:28] I'll try it [16:15] ErKa (~keryell@APuteaux-154-1-46-165.w83-199.abo.wanadoo.fr) left irc: Ping timeout: 480 seconds [16:20] stephen__g (~steffen@dynamic.aei.mpg.de) left irc: Quit: Leaving. [16:46] sepski (~seppity@79.170.82.110) joined #fai. [17:01] RealMurphy (~carsten@130.75.117.49) left irc: Ping timeout: 480 seconds [17:13] fai-guy (~fai-guy@p4FC216BA.dip0.t-ipconnect.de) left irc: Quit: leaving [17:19] Joelio (~joel@office-112.zen.co.uk) joined #fai. [17:20] I've sucessfully got my test client PXE booting and installing, but what do I need to do *not* to make it do the installation step afterwards. At the moment reboots back into the installer [17:20] I presume it's an fai-chboot command [17:20] not entirely sure though [17:21] yep, the client call fai-chboot itself on the install server (by default via ssh) [17:21] ahh, well I saw some errors to do with ssh right at the end of the install, I presume it's that part [17:22] I'll take a look throguh the logs and see if I can find it, ta [17:23] Joelio: I think it does this on recent versions [17:24] yea, looks like the fai user can't call back to the install server for some reason [17:25] is there anything else I need to do on the server to enable this (I thought the fai-setup took care of this?) [17:25] is it complaining at the end of the install? [17:25] yea, it's asking me to accept the SSH connection, but it fails with a number of permission denied errors [17:26] I presume that's linked to why fai-chboot's not getting called [17:26] can your fai user access the directory where fai-chboot writes? [17:26] which dir is that mate? exuse my neewbishness ;) [17:28] it should be /srv/tftp/fai/pxelinux.cfg/ [17:29] ls -lad /srv/tftp/fai/pxelinux.cfg/ [17:29] drwxr-xr-x 2 fai nogroup 4096 Jan 2 14:38 /srv/tftp/fai/pxelinux.cfg/ [17:29] drwxr-xr-x 2 fai nogroup 4096 2009-01-13 17:42 /srv/tftp/fai/pxelinux.cfg/ [17:30] I've not done the .rhost stuff that I've seen in the fai.conf file [17:30] do I need to do that too? [17:30] no, a ssh public key should be generated automagically [17:30] oh, I know [17:31] did you set [17:31] FAI_LOGPROTO=ssh ? [17:31] in /etc/fai/fai.conf [17:31] yep [17:31] FAI_LOGPROTO=ssh [17:32] Joelio: .rhosts was only used in older fai versions. Which version are you using? [17:32] can you try ssh fai@faiserver from your installed host? [17:32] ok you've set ssh [17:32] siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) left irc: Ping timeout: 480 seconds [17:32] Seems like a normal known_hosts problem if it asks for accepting the host key [17:32] 3.2.8 Mrfai, it's still listed in the comments of the config file [17:33] I'll go and see if I can ssh from the host now.. give me a sec. [17:35] It's asking me for a password, so I presume the keys didn't get generated properly during fai-setup? [17:36] yep. that's also what I think [17:37] looking at the logs on the client.. [17:37] WARNING: ssh -l fai fai-puppet failed. Can't call fai-chboot on the install server. [17:37] is me having a different server name to faiserver the problem do you think [17:37] I've stuck to all the steps in the docs bar that really [17:37] not as long as it can resolve fai-puppet [17:38] yea, it can [17:38] should be fine then [17:38] it's in its /etc/hosts file [17:38] on the server [17:38] but is it on the client? [17:38] test02:/var/log/fai/test02# ping fai-puppet [17:38] PING fai-puppet (10.255.0.1) 56(84) bytes of data. [17:38] 64 bytes from fai-puppet (10.255.0.1): icmp_seq=1 ttl=64 time=0.194 ms [17:38] yep [17:39] ssh -v fai@fai-puppet? [17:40] http://pastebin.com/m13b78d2b [17:42] ok, the host key is now know. Now you have to copy the ssh key (*.pub) of LOGUSER into the nfsroot for user root (as authorized_keys) [17:43] I thought fai-setup was supposed to do that? [17:43] me too? [17:43] I'll give it a whirl though [17:43] yep, fai-setup will do this normally [17:44] ok, just to clarify, on the server copy the *.pub files for user fai into the /root/.ssh directory? [17:44] nope [17:44] ~fai/.ssh [17:46] sorry mate, still doesn't make sense [17:46] I'm in the /var/log/fai/.ssh on the server now [17:46] what and where do I need to copy to? [17:47] cat ~$LOGUSER/.ssh/*.pub > /srv/fai/nfsroot/live/filesystem.dir/root/.ssh/authorized_keys [17:47] what's the home directory of your fai user? [17:47] isn't it the other way around? [17:47] no. During installation, the root user on the install client (which only has thing from the nfsroot) [17:48] wants to log into the isntall server aus LOGUSER [17:48] the client, which will have /root/ssh/id_dsa.pub , will connect as fai to fai-puppet, which will have ~fai/.ssh/authorized_keys [17:48] yep [17:48] why would the fai user on the server want to connect to the fai client? [17:48] I think your 18:47:10 command does that [17:49] qwerty (~fehrmann@130.75.117.49) left irc: Quit: leaving [17:49] /srv/fai/nfsroot/live/filesystem.dir/root/.ssh/authorized_keys will be the /root/.ssh/authorized_keys of the client [17:49] yep. you are right. My fault. This always confuses me [17:49] right, I've done that now Mrfai, I'll go and check.. cheers for the help so far! Wish me luch :) [17:50] NExt try: [17:50] haha, ok [17:50] cat /srv/fai/nfsroot/live/filesystem.dir/root/.ssh/*.pub > ~$LOGUSER/.ssh/authorized_keys [17:50] this should be executed once on the install server [17:51] ok, I think I'm going to have to rerun fai-setup then, because that command will have creamed the files [17:51] Stereo: do you agree now? [17:51] I agree now :) [17:52] I noticed this at the end of the fai-setup log from before too.. could it be the culprit? [17:52] /usr/sbin/fai-setup: line 160: [: missing `]' [17:53] Joelio: have a look at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488404 [17:56] will do mate, just popping off to the lab to give this new setup a whirl [18:03] ok, well it's a bit further along.. it seemed to do the fai-chboot thing, but it's still trying to PXE boot and hence it has a broken menu listing [18:03] it also didn't copy the files, permission denied.. [18:03] it also still asked me to accept the ssh connection [18:04] ahh, i didn't apply that patch [18:04] I'll do that now and see if it helps [18:12] I think it's important that LOGUSER does not exists before calling fai-setup [18:13] les (~lars@s6.math.TU-Berlin.DE) joined #fai. [18:15] ahh ok, well I'll do that tomorrow then. Home time now. MANY THANKS for your help! [18:16] the install still didn't work properly (asked me to accept the ssh session) [18:18] I will also quit for today [18:18] Mrfai (~lange@suenner.informatik.uni-koeln.de) left irc: Quit: leaving [18:27] Joelio (~joel@office-112.zen.co.uk) left irc: Quit: Lost terminal [18:32] RealMurphy (~carsten@a89-182-212-59.net-htp.de) joined #fai. [18:51] RealMurphy (~carsten@a89-182-212-59.net-htp.de) left irc: Quit: Konversation terminated! [21:07] siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) joined #fai. [21:33] codice (DSCym8tTzl@71-92-66-39.static.mtpk.ca.charter.com) joined #fai. [21:33] hello everyone [21:34] I'm running into a strange problem with systems that I deploy using FAI [21:34] basically, sudo doesn't work, and complains that it needs to be setuid root [21:34] however, the permissions on the executable look correct [21:35] -rwsr-xr-x 2 root root 106336 2007-06-15 12:54 /usr/bin/sudo [21:35] strace of the process looks ok as well [21:35] I'll be sending a email to the list shortly, just wanted to run it by you gentlemen first [21:36] codice: is that also the sudo binary that's getting executed ("which sudo")? also, have you possibly mounted the fs nosuid? [21:40] how could you meaningfully strace sudo anyway? [21:55] codice (DSCym8tTzl@71-92-66-39.static.mtpk.ca.charter.com) left irc: Ping timeout: 480 seconds [22:20] cbmuser (~glaubitz@z6.physik.fu-berlin.de) left irc: Quit: change location of home-directory [22:24] cbmuser (~glaubitz@z6.physik.fu-berlin.de) joined #fai. [22:27] siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) left irc: Ping timeout: 480 seconds [22:39] bjarne (~bjarne@193.90.149.186) left irc: Remote host closed the connection [23:54] sepski (~seppity@79.170.82.110) left irc: Quit: Leaving [00:00] --- Thu Jan 15 2009