oovoo.com
by Gregory P. Ennis
Dear List,
I was asked to assist connecting a Fedora linux system for video
conferencing with oovoo.com. It is apparent that they support Mac and
Windows.
Does anyone have any experience in using the Mac installation for oovoo
for Fedora? Can anyone make recommendations for connections that allow
video conferencing with Fedora.
Thanks much
--
Greg Ennis
PoMec Corporation
www.PoMec.net
12 years
Question on shredding a terebyte drive
by Dean S. Messing
I have a terebyte sata drive that I need to securely wipe clean. It
originally had 2 partitions. I deleted them using `fdisk', rebooted,
and then as root ran
shred -vz /dev/sdd
The drive is capable of about 60MB/sec, but shred is only "shredding"
about 25MB every 5 seconds according to its output. Since the default
number of passes is 25, this works out to about 5 days.
The `shred' process is running at 100% CPU, presumably computing
the special random patterns for erasure. Since I have 4 CPUs
would creating 4 unformatted partions on the drive and then running
something like:
shred -vz /dev/sdd1
shred -vz /dev/sdd2
shred -vz /dev/sdd3
shred -vz /dev/sdd4
in parallel cut my time? Would be just as secure?
Thanks
Dean
12 years, 3 months
Best FOSS alternative for skype?
by Marko Vojinovic
Ok, I just lost enthusiasm in further use of skype. Being closed source was
bad enough already, but I tolerated it due to its good-enough quality,
reliability and free-of-charge use for skype-to-skype calls. But now that
Microsoft is taking it over, I suddenly lost faith that these good features
will still be there from now on (not to mention Linux support).
Thus the question: is there a FOSS VoIP app that provides roughly the same
quality, reliability and free-as-in-beer service?
I do know that there are such VoIP apps, but I am not familiar with the
quality of service, availability and accessibility of each of those. I am
willing to migrate and start persuading my existing skype contacts (which are
scattered all over the globe) to migrate to a FOSS solution as well. But I
cannot do that if this alternative does not provide functionality that at
least matches that of skype. It has to be up to the task.
So which one is on the top of the list, in your opinion?
TIA, :-)
Marko
12 years, 6 months
/var/cache/abrt-di
by Ranjan Maitra
Hi,
Looking at my files and diskspace, I note the following:
$ sudo du -sm /var/cache/*
1961 /var/cache/abrt-di
1 /var/cache/cups
1 /var/cache/fontconfig
1 /var/cache/foomatic
1 /var/cache/hald
1 /var/cache/jwhois
1 /var/cache/ldconfig
3 /var/cache/man
1 /var/cache/mash
1 /var/cache/PackageKit
217 /var/cache/yum
Googling on how to reduce this abrt-di beast, I came up with the
solution that you should delete the reports in the abrt GUI tool. But
these are all deleted for me, and I think there must be a better way to
remove this cache? Any suggestions on how to do this cleanly?
Many thanks and best wishes,
Ranjan
12 years, 6 months
Fedora 15: a NFSv4 to glusterfs migration HOW-TO
by Dr. Michael J. Chudobiak
As detailed in another thread, we upgraded a few test machines on our
LAN to Fedora 15 (with gnome-shell and firefox), with user folders
served from a NFSv4 server (F14 originally, then F15).
It just didn't work. The F15 desktops would freeze frequently. And
worse, this would freeze ALL desktops on the LAN intermittently, as the
NFS server struggled with client flakiness.
When it did work, Firefox would lose authenticated logins randomly,
presumably due to corruption of its cookies.sqlite file. sqlite and NFS
seems to be a nightmare, for both NFSv3 and NFSv4.
Moving from a NFSv4 server to a glusterfs server solved all of these
problems, and sped up boot times significantly too. glusterfs looks
intimidating at first, because of all its fancy replicating features and
what-not, but it turns out to be trivially easy to set up a simple
server than will replace 95% of the NFS installations out there.
Luckily, you can easily point both the NFS daemon and the glusterfs
daemon at the same export folder, so you can migrate clients slowly over
time.
This HOW-TO is intended to document the process. There are other similar
HOW-TOs out there, but they are all a little out-of-date or don't show
how to enable locking correctly, which is critical for Firefox.
In this example, we export the server's /fileserver folder, and mount it
on /fileserver on the clients. In my server, /fileserver was already
being served by the NFSv4 server, which is fine.
--------------------------------------------
1. On the server:
- yum install glusterfs-server
--------------------------------------------
2. On each client:
- yum install glusterfs-fuse
- mkdir /etc/glusterfs/
- mkdir /fileserver
--------------------------------------------
3. On the server, edit the volume configuration file
(/etc/glusterfs/glusterfsd.vol) so that it looks like this:
volume raw
type storage/posix
option directory /fileserver
end-volume
volume brick
type features/posix-locks
subvolumes raw
end-volume
volume server
type protocol/server
option transport-type tcp
subvolumes brick
option auth.addr.brick.allow *
end-volume
The first stanza selects the basic folder to export.
The second stanza adds file locking to it. This is required to support
Firefox, and some other applications.
The third stanza authorizes everyone to access this file-locked export
over the network.
There is also a /etc/glusterfs/glusterfsd.vol file on the system, for
configuring the management interface. For this simple installation it
does not need to be modified.
--------------------------------------------
4. Restart the server services:
- service glusterd restart
- service glusterfsd restart
I believe the first service is a management service, and the second is
the actual file-export service.
--------------------------------------------
--------------------------------------------
5. On the client, create the /etc/glusterfs/glusterfs.vol configuration
file, which should look like this:
volume client
type protocol/client
option transport-type tcp
option remote-host 192.168.0.3 # use YOUR server IP here
option remote-subvolume brick
end-volume
--------------------------------------------
6. On the client, add this line to the end of /etc/rc.d/rc.local:
mount -t glusterfs /etc/glusterfs/glusterfs.vol /fileserver
--------------------------------------------
7. On the client, reboot, and check /var/log/messages for errors. On one
machine, we had an selinux problem that was flagged in the logs. We had
to manually create the logging file using:
touch /var/log/glusterfs/fileserver.log; reboot
--------------------------------------------
8. On the client, see if you can access the files in /fileserver. If
not, read the /var/log/glusterfs/* files on both the client and the server.
At this point, everything should work!
Weird things and gotchas:
A. You need the file-locking option to make Firefox work properly.
B. LibreOffice wouldn't start on one system, until we did:
rm ~/.libreoffice
rm ~/.openoffice.org
C. selinux prevented the creation of log files on one client, which
prevented the filesystem from mouting. The manual fix noted above fixed
that.
D. This HOWTO mounts the glusterfs from /etc/rc.d/rc.local, which is the
last step in the boot process. In theory, you can mount it from
/etc/fstab or using autofs. However, we found that autofs mounting just
didn't work - not sure why. fstab mounting didn't work either - I
suspect it occurred too early in the boot process. /etc needs to be up
and running so glusterfs can read the config file, and I don't think the
current init/systemd files handle this correctly. There are some Debian
bug reports about this that you can google.
I hope this is useful to someone, and that we can finally drive a stake
through the heart of NFS...
- Mike
12 years, 6 months
kadischi post failed -- Reposted here -- iptables always started no matter what
by Phil Meyer
Please tolerate this post intended for the livecd-creator list. They
are bouncing me now days. Maybe its time I changed deodorant? I dunno ...
I am desperate!
---
livecd-tools-15.7-1.fc15.x86_64
Kickstarts all contain:
firewall --disabled
selinux --disabled
I even went as far as this:
%packages
---
[stuff deleted]
---
-system-config-firewall*
and
%post
---
[stuff deleted]
---
/sbin/chkconfig iptables off
/sbin/chkconfig ip6tables off
echo '#' > /etc/sysconfig/iptables
echo '#' > /etc/sysconfig/ip6tables
echo '#' > /etc/sysconfig/iptables-config
echo '#' > /etc/sysconfig/ip6tables-config
echo "#\n--disabled" > /etc/sysconfig/system-config-firewall
%end
What happens is that /etc/sysconfig/iptables, /etc/sysconfig/iptables,
and /etc/sysconfig/system-config-firewall ALWAYS get recreated AFTER
%post runs!
That causes the iptables kernel modules to load, and filtering started,
even though iptables is actually configured for off and does not start.
What is doing that? I cannot find it.
Any help is appreciated.
Thanks!
12 years, 7 months
How to setup IPSEC client?
by Eric B.
Hi,
I'm trying to setup FC14 with an IPSEC client to connect to my VPN at
work. I have been given a PEM/KEY file for authentication (and a p12 if
needed) but I can't seem to figure out how to configure IPSEC. I've
been trying to read up on it as much as possible, but I just can't get a
good grasp on how to do this.
I have all the settings I need, but I just can't figure out how/where to
configure them. The Network Manager tool doesn't have anything that
supports PEM/Key certificates, and the same goes for the Network
Configuration gui as well.
Can anyone please point me in the right direction how to best set this up?
Thanks!
Eric
12 years, 7 months
selinux + mailman +postfix security problem (F14)
by Fulko Hew
On Fedora 14, I am setting up postfix and mailman.
I had this working once, but I decided to yum erase postfix and mailman
and redo the configuration to prove I knew how to recreate it.
Turns out I don't know how to recreate a working combination
because when creating a new list I now have mailman error log that
talks about:
command failed: /usr/sbin/postalias /etc/mailman/aliases (status: 1,
Operation not permitted)
and a corresponding AVC error:
Aug 25 10:28:54 (null) (null): audit(1314282534.501:4326): avc: denied {
search } for
pid=12121 comm=postalias name=postfix ino=295074 dev=dm-0
scontext=system_u:system_r:mailman_cgi_t:s0
tcontext=system_u:object_r:postfix_etc_t:s0 tclass=dir
Suggestions?
Fulko
12 years, 7 months
Kernel bug ?
by linux guy
I get the following when I boot F15 on my Dell Duo.
kernel BUG at drivers/media/media-entity.c 346!
invalid opcode: 0000 [#1] SMP
Modules linked in: snd_hda_codec_conexant uvcvideo(+) microcode(+)
snd_hda_intel(+)....
It goes on from there, including a Call Trace.
My Duo won't boot because of this problem.
Its also not displaying the grub kernel selection screen. It just boots.
It runs F15 Live just fine.
How do I fix this problem or what can I do to work around it ?
Thanks
12 years, 7 months
Latest update boots to blank screen (nvidia)
by CS DBA
Hi All;
I have an IBM Thinkpad with an Nvidia card ( nVidia Corporation GT218
[NVS 3100M] (rev a2) )
I currently have the nouveau driver black listed in my grub.conf setup:
/rhgb quiet nouveau.modeset=0 rdblacklist=nouveau/
I did the update which installed/updated the following:
---> Package kernel.i686 0:2.6.35.14-95.fc14 set to be installed
---> Package kernel-devel.i686 0:2.6.35.14-95.fc14 set to be installed
---> Package kernel-headers.i686 0:2.6.35.14-95.fc14 set to be updated
---> Package kmod-nvidia.i686 1:280.13-2.fc14 set to be updated
However when I reboot the system boots to a blank screen, and even the
previous kernel boots to a blank screen.
I tried installing akmod-nvidia but get the same results
I've restored the system back to before the update for now...
Thoughts?
Thanks in advance
--
---------------------------------------------
Kevin Kempter - Constent State
A PostgreSQL Professional Services Company
www.consistentstate.com
---------------------------------------------
12 years, 7 months