setting up fai for the first time - no kernel image found

2011-10-15 Diskussionsfäden Michał Dwużnik
Hi, I'm trying to setup FAI for a test machine (KVM virtual machine, managed from virt-manager) in order to understand enough to deploy FAI for some 120 machines (of 5 flavours) in faculty computer rooms. fai-setup -v shows quite nice installation of ubuntu 10.04 to /srv/fai/nfsroot/live/filesy

Re: setting up fai for the first time - no kernel image found

2011-10-15 Diskussionsfäden Michał Dwużnik
>> Hi, >> >> I'm trying to setup FAI for a test machine (KVM virtual machine, >> managed from virt-manager) >> in order to understand enough to deploy FAI for some 120 machines (of >> 5 flavours) in faculty  computer rooms. >> >> fai-setup -v shows quite nice installation of ubuntu 10.04 to >>  /sr

Re: Problem partitioning dual-boot

2011-10-26 Diskussionsfäden Michał Dwużnik
On Wed, Oct 26, 2011 at 17:45, John G. Heim wrote: > > After running this version of the experiment, it wouldn't boot into Windows. > So I did a straight debian install and it still wouldn't boot into Windows. > In other words, while a straight debian install doesn't create the same > problem, it

Re: FAI-CD to usb stick from Windows

2011-12-18 Diskussionsfäden Michał Dwużnik
Hi David, I have never done that with fai-cd in particular, but I would look around the UNETBOOTIN project. Good luck Michal On Sun, Dec 18, 2011 at 14:16, david touzeau wrote: > Dear > > I there a procedure/way from Microsoft Windows user to transform a ISO > generated by fai-cd to an usb stic

local hard disk boot after installation

2011-12-29 Diskussionsfäden Michał Dwużnik
Hi, I have a question concerning booting fai-installed hosts After the installation I would like to make FAI to boot the local hard disk on _server_ side, not touching the (presumably quite remote) host I mean -> host is initially setup for PXE boot, FAI takes over the installation process, finish

Re: local hard disk boot after installation

2011-12-29 Diskussionsfäden Michał Dwużnik
2011/12/29 Thomas Lange : >>>>>> On Thu, 29 Dec 2011 09:44:31 +0100, Michał Dwużnik >>>>>> said: > >    > After the installation I would like to make FAI to boot the local hard >    > disk on _server_ side, not touching the (presumably quit

Re: setup-storage with 3ware controller and additional drives

2012-01-09 Diskussionsfäden Michał Dwużnik
Hi, by path is ok after reboots, even after disk change for difference btween :00 and :03 maybe see the numbers produced by lspci ;) I have quite the same setup here: pci-:07:01.0-scsi-0:0:0:0 disk belongs of course to 07:01.0 RAID bus controller: 3ware Inc 9xxx-series SATA-RAID de

Re: setup-storage with 3ware controller and additional drives

2012-01-09 Diskussionsfäden Michał Dwużnik
On Mon, Jan 9, 2012 at 14:48, Carsten Aulbert wrote: > Hi > > On Monday 09 January 2012 14:43:17 Michał Dwużnik wrote: >> by path is ok after reboots, even after disk change > > Yeah, but I'm fearing a student exchanging the motherboard and putting the > 3wa

Re: Detect secure a clean hard disk.

2012-02-05 Diskussionsfäden Michał Dwużnik
Hi, keep in mind that members of software RAID, lvm physical volumes and so on may house the data despite zeroed out first sector: #dd if=/dev/md0 of=file count=1 1+0 records in 1+0 records out 512 bytes (512 B) copied, 0.00886503 s, 57.8 kB/s #dd if=/dev/zero of=zero count=1 1+0 records in 1

Re: How to prevent new installations when I have already installed my client through LAN boot?

2012-02-06 Diskussionsfäden Michał Dwużnik
Hi, why do you need that? A well configured installation (ssh) runs fai-chboot on its own... Regards Michal On Mon, Feb 6, 2012 at 07:38, Natxo Asenjo wrote: > What I do is create a pxe boot menu and set the hd as 1st boot device. That > way you need to confirm the installation > > > On Feb 5,

Re: How to prevent new installations when I have already installed my client through LAN boot?

2012-02-06 Diskussionsfäden Michał Dwużnik
Hi Ivan, According to my limited experience - it's already done by FAI, just configure the installation properly, so a succesfull installation runs fai-chboot on its own, without your intervention. Cheers Michal >> > > I'm sorry, I think I wasn't clear enough. I was talking about the laptop but >

Re: How to prevent new installations when I have already installed my client through LAN boot?

2012-02-08 Diskussionsfäden Michał Dwużnik
Hi Ivan, that's exactly what I meant in the original post by 'properly configuring ssh' ;) Generate the key inside the nfs chroot and set it up for server login. have a look there: https://lists.uni-koeln.de/pipermail/linux-fai/2009-October/007357.html Good luck Michal > > I've studied the propo

Re: How to prevent new installations when I have already installed my client through LAN boot?

2012-02-09 Diskussionsfäden Michał Dwużnik
Hi Thomas, On Thu, Feb 9, 2012 at 10:41, Thomas Neumann wrote: > Please note: I haven't used fai-chboot to automatically disable > fai-installation yet because the manpage scares me too much. What is > described in this mail is an attack scenario that seems to be possible > judging from the manpa

Re: How to prevent new installations when I have already installed my client through LAN boot?

2012-02-09 Diskussionsfäden Michał Dwużnik
Hi Thomas, > I apologize with all sincerence if you had the impression I'm trying to > attack you. I didn't intend to at all. > Apologies if I overreacted, too. I find it very useful to talk about vulnerabilities, sorry that particular phrasing of 'Does nobody see the fault in...' made me read '

Re: FAI Security Considerations -> Wiki page

2012-02-13 Diskussionsfäden Michał Dwużnik
> > I don't know what would be the best way to proceed from here. Maybe start > a discussion on the related wiki discussion page? > I would really appreciate not writing 'NFS and therefore unencrypted' Regards M. -- Michal Dwuznik

Re: FAI Security Considerations -> Wiki page

2012-02-13 Diskussionsfäden Michał Dwużnik
On Mon, Feb 13, 2012 at 18:39, Cristian Ionescu-Idbohrn wrote: > On Mon, 13 Feb 2012, Michał Dwużnik wrote: >> >> I would really appreciate not writing >> 'NFS and therefore unencrypted' > > Forgive my ignorance, but why? > NFS4, krb5, krb5i, krb5

Re: FAI Security Considerations -> Wiki page

2012-02-13 Diskussionsfäden Michał Dwużnik
Fai does not use NFS4 as of yet AFAIK, and I think Thomas (the one responsible for the wiki) already rephrased it. Regards Michal On Mon, Feb 13, 2012 at 21:08, Cristian Ionescu-Idbohrn wrote: > On Mon, 13 Feb 2012, Michał Dwużnik wrote: >> On Mon, Feb 13, 2012 at 18:39, Cristia

Re: Working example of LVM + RAID?

2012-06-14 Diskussionsfäden Michał Dwużnik
On Thu, Jun 14, 2012 at 12:03 PM, Thomas Neumann wrote: > For _GRUB1_ configurations my typical suggestion is: > > /dev/sda1: /boot (1) > /dev/sda2: [swap1] > /dev/sda3: MD-dev1 > > /dev/sda1: /boot (2) > /dev/sda2: [swap2] > /dev/sda3: MD-dev2 > > MD-dev1 and MD-dev2 are combined into a RAID1, th

Re: Problem with su and sudo after installation

2012-07-06 Diskussionsfäden Michał Dwużnik
Hi, Word of explanation to avoid further confusion: the problem has been traced back to a misconfiguration -> NOSUID was set on the partition in question... quick and dirty summary: FAI OK, PAM OK, sudo/su OK. Regards Michal On Thu, Jul 5, 2012 at 12:26 PM, Katarzyna Myrek wrote: > In /var/log

Re: FAI performance

2012-09-21 Diskussionsfäden Michał Dwużnik
Hi, by the way - what are the default options of mounting the NFS by FAI when installing? (rsize in particular, atime?) Regards Michal On Fri, Sep 21, 2012 at 8:48 PM, Michael Senizaiz wrote: > Increase the amount of nfs processes in /etc/default/nfs-kernel-server. > Or your disk is saturated

Re: FAI performance

2012-09-24 Diskussionsfäden Michał Dwużnik
Hence my original question (which seems to be in line with Nicolas Courtel experience) Regards Michal On Mon, Sep 24, 2012 at 2:03 PM, Thomas Lange wrote: > >>>>> On Fri, 21 Sep 2012 22:06:27 +0200, Michał Dwużnik < > michal.dwuz...@gmail.com> said: > > >

Re: FAI performance

2012-09-24 Diskussionsfäden Michał Dwużnik
> If your config space is over a meg in total, I'd be surprised. This is > not the issue. > > I have some large tarballs in mine (a few gig) and it moves along smoothly > with 100 nodes going at once. > > My config space is indeed in order of 10GB :> Regards Michal

Re: FAI performance

2012-09-24 Diskussionsfäden Michał Dwużnik
ultimate step forward I'm thinking more of a bittorrent seeder for the 'big tarfiles to unpack on clients'... Regards Michal On Mon, Sep 24, 2012 at 6:28 PM, Denny Schierz wrote: > hi, > > Am 24.09.2012 um 17:30 schrieb Michał Dwużnik : > > > My config space is

Re: on sending a kerberos keytab to the client machine

2012-09-24 Diskussionsfäden Michał Dwużnik
Hi, > At the end of the day, if you need to really be secure, you need to have > some kind of state on the client machine (Kerberos password, 802.1x > credentials, etc.)--which generally doesn't exist on a clean image. > > > 'Clean image' runs on a particular machine which, it seems to me, can b

Re: FAI performance

2012-09-25 Diskussionsfäden Michał Dwużnik
Hi Denny [...] > "My config space is indeed in order of 10GB :> " > > If you have to transfer ~10GB to several clients at the same time, and you > are not satisfied with the speed (NFS / tar ...) you should reconsider the > underlying protocol. I red month ago an article to use bittorrent to > tr

Re: on sending a kerberos keytab to the client machine

2012-09-25 Diskussionsfäden Michał Dwużnik
On Tue, Sep 25, 2012 at 4:41 PM, David Magda wrote: > On Tue, September 25, 2012 03:02, Toomas Tamm wrote: > > > Getting all this data into machine-readable form and onto your FAI > > server may well involve a lot more manual labour than typing an unique > > secret into each machine at install ti

server down

2013-07-27 Diskussionsfäden Michał Dwużnik
Hi, I can't seem to be able to connect to the repository. Did I miss some announcement? Shall I worry? Regards Michał -- Michal Dwuznik

update to wheezy / r8169 card

2013-07-29 Diskussionsfäden Michał Dwużnik
Hi, I'm in the middle of a big leap to wheezy on my stations. The faisrv itself is upgraded to wheezy, I checked booting and installing squeeze from wheezy server, everything went fine for the test stations. Installs on dell optiplex 3010 machines were smooth (r8169 network card I was a bit worr

fai4 status

2013-11-24 Diskussionsfäden Michał Dwużnik
Hi, I'm considering a new installation on wheezy (having used the squeeze one for some time...), destined to install wheezy clients. The client disk setup is the following (I managed to get down from 7 hardware flavours to one for the new install...): # example of new config file for setup-storag

testing fai4 on wheezy

2013-12-10 Diskussionsfäden Michał Dwużnik
Hi, setting up wheezy FAI4 I found the following problem - tftpd-hpa, even after pointing it's config in /etc/default to /srv/tftp/fai does not work - probably because the files in /srv/tftp/fai iare owned by root.root. Changing that to root.tftpd (default user for tftp is tftp) does not change m

Re: testing fai4 on wheezy

2013-12-10 Diskussionsfäden Michał Dwużnik
Well... root@fai4:~# /etc/init.d/tftpd-hpa restart [ ok ] Restarting HPA's tftpd: in.tftpd. root@fai4:~# ps aux |grep tftp root 3026 0.0 0.0 14856 152 ?Ss 22:38 0:00 /usr/sbin/in.tftpd --listen --user tftp --address 0.0.0.0:69 - --secure /srv/tftp/ root@fai4:~# ls -ltra /

Re: testing fai4 on wheezy

2013-12-10 Diskussionsfäden Michał Dwużnik
http://imgur.com/mqwCgfQ shows the error when trying to boot the test virtual machine -> the options from dhcp look ok. Michal On Tue, Dec 10, 2013 at 10:51 PM, Michał Dwużnik wrote: > Well... > > root@fai4:~# /etc/init.d/tftpd-hpa restart > [ ok ] Restarting HPA's tftpd: i

Re: testing fai4 on wheezy

2013-12-10 Diskussionsfäden Michał Dwużnik
n Tue, Dec 10, 2013 at 10:58 PM, Michał Dwużnik wrote: > http://imgur.com/mqwCgfQ shows the error when trying to boot the test > virtual machine -> > the options from dhcp look ok. > > Michal > > On Tue, Dec 10, 2013 at 10:51 PM, Michał Dwużnik > wrote: >> Well... &g

Re: testing fai4 on wheezy

2013-12-10 Diskussionsfäden Michał Dwużnik
.50; filename "fai/pxelinux.0"; host lab120{ hardware ethernet b8:ca:3a:ac:5e:b2; fixed-address 172.20.50.120; } host lab100{ hardware ethernet 00:de:ad:be:ef:00; fixed-address 172.20.50.100; } } Is there something obvious I mis

Re: testing fai4 on wheezy

2013-12-11 Diskussionsfäden Michał Dwużnik
On Wed, Dec 11, 2013 at 10:59 AM, Thomas Lange wrote: >>>>>> On Wed, 11 Dec 2013 02:29:08 +0100, Michał Dwużnik >>>>>> said: > > > NFSROOT:dracut-network live-boot- live-boot-initramfs-tools- > You are using dracut inside the nfsroot. Th

log+ssh problem with fai4

2013-12-27 Diskussionsfäden Michał Dwużnik
Hi, within my new deployment of FAI 4 I seem to have two problems -> every installed host asks for accepting the server ssh key when saving logs (in the same time form within chroot to nfsroot ssh fai@faisrv works fine) and it does not 'disable' pxe booting (default is localboot, after the inst