| Shingoshi (~Shingoshi@c-98-246-122-42.hsd1.or.comcast.net) left irc: Remote host closed the connection |
| Shingoshi (~Shingoshi@c-98-246-122-42.hsd1.or.comcast.net) joined #fai. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) joined #fai. |
| kai_bo (~kai@statdsl-085-016-072-173.ewe-ip-backbone.de) joined #fai. |
| CWebber (~CWebber@pclabinv7.dma.uvigo.es) joined #fai. |
| 08:10 oz_ | anyone here running FAI to install Systems remotely over a firewall? |
| Action: oz_ doubts that an nfs proxy is really needed for this |
| CWebber (~CWebber@pclabinv7.dma.uvigo.es) left irc: Quit: Leaving |
| 08:38 mgoetze | oz_: iirc you can configure the ports used by nfs explicitly, rather than leaving it to the portmapper |
| 08:39 maswan | nfs4 is nicer for this too |
| verwilst (~verwilst@router.begen1.office.netnoc.eu) joined #fai. |
| 09:21 oz_ | mgoetze: you need to to thins anyway |
| 09:22 oz_ | But I think I better use an *.iso mount |
| 09:22 oz_ | nfs is not so good 'outside' (NFS =~ No File Security) |
| 09:23 oz_ | or does anyone have another suggestion? |
| 09:23 mgoetze | nfs4+kerberos :) |
| 09:24 oz_ | because of the ':)'... |
| 09:24 oz_ | serious? |
| 09:25 mgoetze | well i've never tried it, i'm sure maswan can tell you more about it |
| 09:27 maswan | nfs4 has real security as opposed to just IP "security" |
| 09:28 maswan | kerberos is probably the only one that is well-tested of the security models there though, and I use "well-tested" loosely |
| 09:28 oz_ | :-) |
| 09:28 maswan | but no, we don't do firewalls, so we've never run into that problem |
| 09:29 oz_ | I guess, I start with my *.iso solution and follow the development |
| 09:29 oz_ | and I hope I can develop myself again, when I fixed this network here. |
| Mrfai (~lange@suenner.informatik.uni-koeln.de) joined #fai. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) left irc: Quit: Leaving. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) joined #fai. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) left irc: Quit: Leaving. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) joined #fai. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) left irc: Quit: Leaving. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) joined #fai. |
| mikap (~mika@mail.michael-prokop.at) left irc: Quit: Lost terminal |
| ErKa (~keryell@APuteaux-154-1-21-189.w83-199.abo.wanadoo.fr) joined #fai. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) left irc: Quit: Leaving. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) joined #fai. |
| gcorvala (~gcorvala@di-pc8.ulb.ac.be) joined #fai. |
| 14:06 gcorvala | hi |
| 14:06 gcorvala | I have got a problem with fai / grub installation |
| 14:06 gcorvala | everything seems correctly installed, but after de client install |
| 14:07 gcorvala | I reboot and it seems that grub was not installed correctly |
| 14:07 gcorvala | I don't have the "menu", only a kind of grub shell |
| 14:07 gcorvala | can someone help me ? :s |
| 14:08 Mrfai | have a look at fai.log and shell.log |
| Action: Mrfai brb |
| Mrfai (~lange@suenner.informatik.uni-koeln.de) left irc: Quit: leaving |
| Mrfai (~lange@kueppers.informatik.uni-koeln.de) joined #fai. |
| 14:09 gcorvala | Mrfai: nothing special in the logs |
| 14:13 proti | gcorvala: did you try to do : 'config /grub/menu.lst' in the grub shell ? |
| 14:15 proti | I had some problem with grub on ubuntu. Something related to menu.lst and ucf. |
| 14:16 gcorvala | mrlt |
| 14:16 gcorvala | proti: 'config /grub...' not work |
| 14:17 gcorvala | i must go, i'll retry tonight |
| 14:17 gcorvala | thx all |
| gcorvala (~gcorvala@di-pc8.ulb.ac.be) left irc: Quit: Ex-Chat |
| 14:24 proti | Mrfai: I think I understand my problem but I don't know why. |
| 14:25 proti | /var/lib got white'outed for whatever reason (when making the nfsroot). |
| 14:26 proti | Then I did a touch in every directory of /var/lib on the server and suddenly, they appeared on the client. |
| 14:26 proti | Something related to a timestamp which got refreshed. |
| 14:28 Mrfai | ok, maybe the client only sees /var which was inside the initrd before you touch a file inside /var |
| 14:28 proti | I have to check how the union-mount is done. |
| 14:29 proti | The good news is once the mount is ok, the fai works beautifully. |
| 14:29 proti | But for 2 little things. |
| 14:30 proti | 1 problem with mtab (mounting nfs DEBMIRROR yields a error status of 16 - it cannot change the permissions of mtab). |
| 14:31 proti | Should be harmless but the mount command considers anything different from 0 to be an unrecoverable error. |
| 14:31 proti | And breaks the install. |
| 14:31 Mrfai | /etc/mtab is a symlink to /proc/mounts. Maybe we can revert this, so mtab is a file again |
| 14:32 Mrfai | this symlinks is created in make-fai-nfsroot |
| 14:32 proti | I tried to exclude the errorcode 16 which is mount is ok but cannot change the permissions which the install don't care at all. |
| 14:32 proti | This works ok. |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) left irc: Quit: Leaving. |
| 14:41 proti | 2nd problem is that make-fai-nfsroot forgets to install rsyslog. This yields some error codes at startup (like rsyslog not found). |
| 14:42 proti | And always, setup-storage has problems cleaning up disks with raid and lvm already present. |
| 14:42 proti | But now, swap creation works great compared to the last version we tried (was 3.2.8). |
| 14:42 Mrfai | easy to fix. Just add rsyslog to /etc/fai/NFSROOT |
| 14:43 proti | Maybe, maybe it should go to make-fai-nfsroot. |
| 14:44 Mrfai | no, packagtes are defined in /etc/fai/NFSROOT. In Debian rsyslog is always added by debootstrap |
| 14:45 proti | Ok. Not in ubuntu. |
| 14:45 Mrfai | I would be nice, if you could post a short mail about your experiences with FAI 3.2.x and ubuntu x.y to the linux-fai mailing list |
| 14:45 Mrfai | there are always people interested in those stories |
| 14:45 proti | Ok, i'll do it. |
| 14:46 proti | Next, I would like to choose the distribution to install. |
| 14:47 proti | For this, I could use different nfsroot. |
| 14:47 Mrfai | what do you mean by different distributions? different architecures like i386 and amd64? |
| 14:48 proti | No, different version, like sid etch lenny. |
| 14:48 proti | Or hardy, intrepid, jaunty ... |
| 14:49 proti | If I understand well, the nfsroot install a base using a base.tgz build when debootstrapping the nfsroot. |
| 14:50 Mrfai | ok. Should be possible with the same nfsroot. You can use different base.tar.gz files. |
| 14:50 Mrfai | there's a subdirectory basefile. There you can create different base file for (etch, lenny, jaunty,...) |
| 14:50 Mrfai | Then define a clas JAUNTY, ETCH, LENNY and this file will be used |
| 14:51 Mrfai | Finially, adjust the sources.list file for this class. Ready. |
| 14:51 Mrfai | or copy the sources.lsit file using the fcopy command |
| 14:51 proti | The sources.list is the one on the nfsroot ? |
| 14:51 Mrfai | normally yes |
| 14:51 Mrfai | But you can copy whatever version of it to /target |
| 14:51 Mrfai | before isntalling packages |
| 14:52 proti | Hu ? How is the /target/etc/apt/sources.list used in the install ? |
| 14:53 proti | I thought only the /etc/apt/sources.list was used. |
| 15:06 Mrfai | when isntalling packages, FAI does a chroot into /target and installs packages there. So everything is done inside /target |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) joined #fai. |
| verwilst (~verwilst@router.begen1.office.netnoc.eu) left irc: Quit: Ex-Chat |
| siggg (~jean@tra78-1-87-88-161-80.dsl.club-internet.fr) left irc: Ping timeout: 480 seconds |
| Mrfai (~lange@kueppers.informatik.uni-koeln.de) left irc: Quit: leaving |
| 17:09 FBI | fai: 3 mt committed revision 5408 to 7 fai: Added patch to ignore a parted warning about the disk not being used in an |
| 17:09 FBI | fai: optimal way |
| HerrK (~keryell@APuteaux-154-1-56-153.w81-249.abo.wanadoo.fr) joined #fai. |
| ErKa (~keryell@APuteaux-154-1-21-189.w83-199.abo.wanadoo.fr) left irc: Ping timeout: 480 seconds |
| D00M (~D00M@224.128-65-87.adsl-dyn.isp.belgacom.be) joined #fai. |
| Nick change: D00M -> gcorvala |
| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) joined #fai. |
| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) left irc: |
| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) joined #fai. |
| HerrK (~keryell@APuteaux-154-1-56-153.w81-249.abo.wanadoo.fr) left irc: Ping timeout: 480 seconds |
| siggg (~jean@tra78-5-88-172-128-32.fbx.proxad.net) left irc: Remote host closed the connection |
| verwilst (~verwilst@78-21-41-88.access.telenet.be) joined #fai. |
| mikap (~mika@mail.michael-prokop.at) joined #fai. |
| gcorvala (~D00M@224.128-65-87.adsl-dyn.isp.belgacom.be) left irc: Ping timeout: 480 seconds |
| verwilst (~verwilst@78-21-41-88.access.telenet.be) left irc: Quit: Ex-Chat |
| --- Wed May 6 2009 |