| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) left irc: Ping timeout: 480 seconds |
| fai-guy (~fai-guy@p4FC216BA.dip0.t-ipconnect.de) joined #fai. |
| fxcp (~ctp@brsg-d9bee0af.pool.mediaWays.net) joined #fai. |
| ErKa (~keryell@APuteaux-154-1-46-165.w83-199.abo.wanadoo.fr) joined #fai. |
| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) joined #fai. |
| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) left irc: Ping timeout: 480 seconds |
| Mrfai (~lange@kueppers.informatik.uni-koeln.de) joined #fai. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) joined #fai. |
| Joelio (~joel@office-112.zen.co.uk) joined #fai. |
| Joelio (~joel@office-112.zen.co.uk) left irc: Quit: Lost terminal |
| cbmuser_ (~glaubitz@z6.physik.fu-berlin.de) joined #fai. |
| cbmuser_ (~glaubitz@z6.physik.fu-berlin.de) left irc: |
| Mrfai (~lange@kueppers.informatik.uni-koeln.de) left irc: Quit: leaving |
| Mrfai (~lange@suenner.informatik.uni-koeln.de) joined #fai. |
| Joelio (~joel@office-112.zen.co.uk) joined #fai. |
| stephen__g (~steffen@dynamic.aei.mpg.de) joined #fai. |
| 11:18 stephen__g | hi |
| 11:25 Mrfai | hi |
| 11:29 Joelio | hi! |
| Action: Mrfai SIGFOOD |
| RealMurphy (~carsten@130.75.117.49) joined #fai. |
| qwerty (~fehrmann@130.75.117.49) joined #fai. |
| bjarne (~bjarne@193.90.149.186) joined #fai. |
| Mrfai_ (~lange@kueppers.informatik.uni-koeln.de) joined #fai. |
| Mrfai_ (~lange@kueppers.informatik.uni-koeln.de) left irc: Remote host closed the connection |
| Nic0 (~courtel@fw.tls.cena.fr) left irc: Remote host closed the connection |
| 14:11 qwerty | Mrfai: I took a generic kernel together with the aufs-modules and live-initramfs. During the boot I end up in the initrd with the message: ALERT! /dev/nfs does not exits. Any hints? |
| Nic0 (~courtel@fw.tls.cena.fr) joined #fai. |
| 14:19 oz__ | qwerty: probably the kernel has neither nfs support compiled in, nor the module loaded |
| 14:21 Mrfai | which kernel parameters did you use? cat /proc/cmdline |
| 14:22 qwerty | it is a bit longer: |
| 14:22 qwerty | root=/dev/nfs nfsroot=/srv/fai/nfsroot,v3,tcp,rsize=32768,wsize=32768 console=ttyS1,19200 union=aufs initrd=initrd.img-2.6.26-1-amd64 ip=::::::dhcp FAI_FLAGS=verbose,sshd,createvt,reboot FAI_ACTION=install BOOT_IMAGE=vmlinuz-2.6.26-1-amd64 |
| 14:23 Mrfai | you are missing boot=live |
| 14:23 qwerty | A self compiled kernel with nfssupport leads to the same result. |
| Action: oz__ never saw "union=aufs" as argument before |
| 14:25 qwerty | It was a guess. I also tried it without union=aufs. |
| 14:26 Mrfai | use fai-chboot for creating the pxe config files |
| 14:26 Mrfai | unionfs=aufs is now default |
| 14:27 oz__ | and "unionfs=aufs" reads much more sensible to me... |
| 14:27 Mrfai | boot=live must appear after nfsroot=.... |
| Joelio (~joel@office-112.zen.co.uk) left irc: Ping timeout: 480 seconds |
| 14:28 qwerty | I'll try it |
| ErKa (~keryell@APuteaux-154-1-46-165.w83-199.abo.wanadoo.fr) left irc: Ping timeout: 480 seconds |
| stephen__g (~steffen@dynamic.aei.mpg.de) left irc: Quit: Leaving. |
| sepski (~seppity@79.170.82.110) joined #fai. |
| RealMurphy (~carsten@130.75.117.49) left irc: Ping timeout: 480 seconds |
| fai-guy (~fai-guy@p4FC216BA.dip0.t-ipconnect.de) left irc: Quit: leaving |
| Joelio (~joel@office-112.zen.co.uk) joined #fai. |
| 17:20 Joelio | I've sucessfully got my test client PXE booting and installing, but what do I need to do *not* to make it do the installation step afterwards. At the moment reboots back into the installer |
| 17:20 Joelio | I presume it's an fai-chboot command |
| 17:20 Joelio | not entirely sure though |
| 17:21 Mrfai | yep, the client call fai-chboot itself on the install server (by default via ssh) |
| 17:21 Joelio | ahh, well I saw some errors to do with ssh right at the end of the install, I presume it's that part |
| 17:22 Joelio | I'll take a look throguh the logs and see if I can find it, ta |
| 17:23 Stereo | Joelio: I think it does this on recent versions |
| 17:24 Joelio | yea, looks like the fai user can't call back to the install server for some reason |
| 17:25 Joelio | is there anything else I need to do on the server to enable this (I thought the fai-setup took care of this?) |
| 17:25 Stereo | is it complaining at the end of the install? |
| 17:25 Joelio | yea, it's asking me to accept the SSH connection, but it fails with a number of permission denied errors |
| 17:26 Joelio | I presume that's linked to why fai-chboot's not getting called |
| 17:26 Stereo | can your fai user access the directory where fai-chboot writes? |
| 17:26 Joelio | which dir is that mate? exuse my neewbishness ;) |
| 17:28 Stereo | it should be /srv/tftp/fai/pxelinux.cfg/ |
| 17:29 Stereo | ls -lad /srv/tftp/fai/pxelinux.cfg/ |
| 17:29 Stereo | drwxr-xr-x 2 fai nogroup 4096 Jan 2 14:38 /srv/tftp/fai/pxelinux.cfg/ |
| 17:29 Joelio | drwxr-xr-x 2 fai nogroup 4096 2009-01-13 17:42 /srv/tftp/fai/pxelinux.cfg/ |
| 17:30 Joelio | I've not done the .rhost stuff that I've seen in the fai.conf file |
| 17:30 Joelio | do I need to do that too? |
| 17:30 Stereo | no, a ssh public key should be generated automagically |
| 17:30 Stereo | oh, I know |
| 17:31 Stereo | did you set |
| 17:31 Stereo | FAI_LOGPROTO=ssh ? |
| 17:31 Stereo | in /etc/fai/fai.conf |
| 17:31 Joelio | yep |
| 17:31 Joelio | FAI_LOGPROTO=ssh |
| 17:32 Mrfai | Joelio: .rhosts was only used in older fai versions. Which version are you using? |
| 17:32 Stereo | can you try ssh fai@faiserver from your installed host? |
| 17:32 Mrfai | ok you've set ssh |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) left irc: Ping timeout: 480 seconds |
| 17:32 Mrfai | Seems like a normal known_hosts problem if it asks for accepting the host key |
| 17:32 Joelio | 3.2.8 Mrfai, it's still listed in the comments of the config file |
| 17:33 Joelio | I'll go and see if I can ssh from the host now.. give me a sec. |
| 17:35 Joelio | It's asking me for a password, so I presume the keys didn't get generated properly during fai-setup? |
| 17:36 Mrfai | yep. that's also what I think |
| 17:37 Joelio | looking at the logs on the client.. |
| 17:37 Joelio | WARNING: ssh -l fai fai-puppet failed. Can't call fai-chboot on the install server. |
| 17:37 Joelio | is me having a different server name to faiserver the problem do you think |
| 17:37 Joelio | I've stuck to all the steps in the docs bar that really |
| 17:37 Stereo | not as long as it can resolve fai-puppet |
| 17:38 Joelio | yea, it can |
| 17:38 Stereo | should be fine then |
| 17:38 Joelio | it's in its /etc/hosts file |
| 17:38 Stereo | on the server |
| 17:38 Stereo | but is it on the client? |
| 17:38 Joelio | test02:/var/log/fai/test02# ping fai-puppet |
| 17:38 Joelio | PING fai-puppet (10.255.0.1) 56(84) bytes of data. |
| 17:38 Joelio | 64 bytes from fai-puppet (10.255.0.1): icmp_seq=1 ttl=64 time=0.194 ms |
| 17:38 Joelio | yep |
| 17:39 Stereo | ssh -v fai@fai-puppet? |
| 17:40 Joelio | http://pastebin.com/m13b78d2b |
| 17:42 Mrfai | ok, the host key is now know. Now you have to copy the ssh key (*.pub) of LOGUSER into the nfsroot for user root (as authorized_keys) |
| 17:43 Stereo | I thought fai-setup was supposed to do that? |
| 17:43 Joelio | me too? |
| 17:43 Joelio | I'll give it a whirl though |
| 17:43 Mrfai | yep, fai-setup will do this normally |
| 17:44 Joelio | ok, just to clarify, on the server copy the *.pub files for user fai into the /root/.ssh directory? |
| 17:44 Stereo | nope |
| 17:44 Stereo | ~fai/.ssh |
| 17:46 Joelio | sorry mate, still doesn't make sense |
| 17:46 Joelio | I'm in the /var/log/fai/.ssh on the server now |
| 17:46 Joelio | what and where do I need to copy to? |
| 17:47 Mrfai | cat ~$LOGUSER/.ssh/*.pub > /srv/fai/nfsroot/live/filesystem.dir/root/.ssh/authorized_keys |
| 17:47 Stereo | what's the home directory of your fai user? |
| 17:47 Stereo | isn't it the other way around? |
| 17:47 Mrfai | no. During installation, the root user on the install client (which only has thing from the nfsroot) |
| 17:48 Mrfai | wants to log into the isntall server aus LOGUSER |
| 17:48 Stereo | the client, which will have /root/ssh/id_dsa.pub , will connect as fai to fai-puppet, which will have ~fai/.ssh/authorized_keys |
| 17:48 Mrfai | yep |
| 17:48 Stereo | why would the fai user on the server want to connect to the fai client? |
| 17:48 Stereo | I think your 18:47:10 command does that |
| qwerty (~fehrmann@130.75.117.49) left irc: Quit: leaving |
| 17:49 Stereo | /srv/fai/nfsroot/live/filesystem.dir/root/.ssh/authorized_keys will be the /root/.ssh/authorized_keys of the client |
| 17:49 Mrfai | yep. you are right. My fault. This always confuses me |
| 17:49 Joelio | right, I've done that now Mrfai, I'll go and check.. cheers for the help so far! Wish me luch :) |
| 17:50 Mrfai | NExt try: |
| 17:50 Joelio | haha, ok |
| 17:50 Mrfai | cat /srv/fai/nfsroot/live/filesystem.dir/root/.ssh/*.pub > ~$LOGUSER/.ssh/authorized_keys |
| 17:50 Mrfai | this should be executed once on the install server |
| 17:51 Joelio | ok, I think I'm going to have to rerun fai-setup then, because that command will have creamed the files |
| 17:51 Mrfai | Stereo: do you agree now? |
| 17:51 Stereo | I agree now :) |
| 17:52 Joelio | I noticed this at the end of the fai-setup log from before too.. could it be the culprit? |
| 17:52 Joelio | /usr/sbin/fai-setup: line 160: [: missing `]' |
| 17:53 Mrfai | Joelio: have a look at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488404 |
| 17:56 Joelio | will do mate, just popping off to the lab to give this new setup a whirl |
| 18:03 Joelio | ok, well it's a bit further along.. it seemed to do the fai-chboot thing, but it's still trying to PXE boot and hence it has a broken menu listing |
| 18:03 Joelio | it also didn't copy the files, permission denied.. |
| 18:03 Joelio | it also still asked me to accept the ssh connection |
| 18:04 Joelio | ahh, i didn't apply that patch |
| 18:04 Joelio | I'll do that now and see if it helps |
| 18:12 Mrfai | I think it's important that LOGUSER does not exists before calling fai-setup |
| les (~lars@s6.math.TU-Berlin.DE) joined #fai. |
| 18:15 Joelio | ahh ok, well I'll do that tomorrow then. Home time now. MANY THANKS for your help! |
| 18:16 Joelio | the install still didn't work properly (asked me to accept the ssh session) |
| 18:18 Mrfai | I will also quit for today |
| Mrfai (~lange@suenner.informatik.uni-koeln.de) left irc: Quit: leaving |
| Joelio (~joel@office-112.zen.co.uk) left irc: Quit: Lost terminal |
| RealMurphy (~carsten@a89-182-212-59.net-htp.de) joined #fai. |
| RealMurphy (~carsten@a89-182-212-59.net-htp.de) left irc: Quit: Konversation terminated! |
| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) joined #fai. |
| codice (DSCym8tTzl@71-92-66-39.static.mtpk.ca.charter.com) joined #fai. |
| 21:33 codice | hello everyone |
| 21:34 codice | I'm running into a strange problem with systems that I deploy using FAI |
| 21:34 codice | basically, sudo doesn't work, and complains that it needs to be setuid root |
| 21:34 codice | however, the permissions on the executable look correct |
| 21:35 codice | -rwsr-xr-x 2 root root 106336 2007-06-15 12:54 /usr/bin/sudo |
| 21:35 codice | strace of the process looks ok as well |
| 21:35 codice | I'll be sending a email to the list shortly, just wanted to run it by you gentlemen first |
| 21:36 mgoetze | codice: is that also the sudo binary that's getting executed ("which sudo")? also, have you possibly mounted the fs nosuid? |
| 21:40 mugwump | how could you meaningfully strace sudo anyway? |
| codice (DSCym8tTzl@71-92-66-39.static.mtpk.ca.charter.com) left irc: Ping timeout: 480 seconds |
| cbmuser (~glaubitz@z6.physik.fu-berlin.de) left irc: Quit: change location of home-directory |
| cbmuser (~glaubitz@z6.physik.fu-berlin.de) joined #fai. |
| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) left irc: Ping timeout: 480 seconds |
| bjarne (~bjarne@193.90.149.186) left irc: Remote host closed the connection |
| sepski (~seppity@79.170.82.110) left irc: Quit: Leaving |
| --- Thu Jan 15 2009 |