swarm32: (Default)
After finding a lot of posts from over a decade ago, I figured it wouldn't hurt to write out some notes on getting a minimally functional JWM environment going on Debian Bookworm.

My particular requirements for going with JWM are:

  • Need something lightweight to run on ram limited hardware.

  • Need somthing especially lightweight as Hardware is further limited by the fact it's also running Proxmox, Ceph and Debian VMs

  • Need at least one node with a local UI for managing the cluster

  • My spouse would be most displeased if I can't direct her how to bring the internet back if I'm out of town.


Step 1 : Have a working Debian Bookworm Box with the bare minimum installed (base system + ssh server is fine)
Step 1A : Install some useful utilities like htop and screen
Step 2 : install xinit and jwm
apt-get install xinit jwm

Step 3 : Launch X and enjoy minimal graphical-ness
startx

That's cool but ...
Making things useful... )
A shout out to Joe Wingbermuehle for continuing to make one of the lightest weight Window Managers for Linux.
swarm32: (Default)
I went down the gnarly road of crossgrading from i686 to x86_64 fedora one of my VMs because it was supposedly possible. While it is definitely doable with enough patience, it's time consuming and needs to be done in the right sequence. I figured I'd at least write down the cliff's notes
1) Backup/snapshot your working system
2) Upgrade from a 32-bit kernel to a 64-bit kernel, reboot and confirm everything works
3) et selinux to permissive
4) Make sure you download or statically compile a 64-bit version of RPM
5) be prepared to use rpm -qa , rpm -e , rpm -e --nodeps, rpm -ivh a lot, dnf download
6) when you get to the point of migrating RPM and DNF, be prepared for fixing a lot of python stuff too
7) make sure plymouth is x86_64
8) set selinux to permissive
9) you will have to power cycle/hard reset the machine to start the final upgrade, be prepared for if this fails

Other notes:
- it's actually helpful to have an X session with something like XFCE terminal and firefox running if you can
- Be prepared to download and manually install/reinstall a lot of packages
- expect sudo to either break or get weird, use sudo -i or just plain su
- at a certain point, authorizing not root users will break and you will not be able to establish a new ssh session if using ssh
- Post migration things will be wonky and may take some additional time to sort out
swarm32: (thalban)
This took some trial and error, and my google-foo didn't turn up the answer, so here it is for all to enjoy.

Prerequisites

  1. Working PXE server

  2. Server that can share the ISO via NFS


Howto:

  1. Create an nfs export with a folder that contains just the Live XFCE ISO. In this example it is located on the server 192.168.1.10 in /mnt/netboot/Fedora-Live-Xfce-x86_64-22

  2. Open up the appropriate menu file for your PXE server, and add the following

    LABEL f22x64XFCE
    MENU LABEL Fedora 22 x86_x64 XFCE Live
    kernel /fedora/f22_x86_64/vmlinuz
    append initrd=fedora/f22_x86_65/initrd.img inst.repo=nfs:nfsvers=4:192.168.1.10:/mnt/netboot/Fedora-Live-Xfce-x86_64-22/ ro rd.live.image rd.luks=0 rd.md=0 rd.dm-0

  3. Save your config file

  4. Download the PXEboot files from one of the mirrors to the appropriate location, in this example the path is fedora/f22_x68_64/ in the tfproot. The files can be found under fedora/linux/releases/22/Workstation/x86_64/os/images/pxeboot/ on the mirrors

  5. You should be able to netboot the live CD via NFS now.

Good luck getting your install to work. Make sure to edit the paths and IPs for your environment.
swarm32: (thalban)
Turns out that the unix extended ACLs control the access to the samba share in Openfiler (and in ldap setups) and that ZFS on linux does not have them turned on by default. I also had to replicate the ACL setup from the shares in Openfiler to the new host using getfacl and setfacl.
After restarting the smb service, I was able to access the share. For now I'm glad I don't have to change permissions very often.
swarm32: (thalban)
A little background is in order. Several years ago I set up a CentOS 5 LDAP server and two virtual machines running Openfiler 2.99. Since then the Openfiler project has gone more or less defunct and hasn't seen any significant activity in over a year. The two Openfiler machines rely on the CentOS LDAP server for authentication.

I have been working on migrating the primary filserver over to my new Rackable 3U server running CentOS 7 and ZFS and so far it's been an uphill battle. I thought I could cheat a bit and copy the samba.conf from the main Openfiler VM to the new machine and it would work. Turns out there is more setup behind the scenes for Samba and LDAP to play nice than expected, plus there are features that have been changed or depreciated between Samba 3 and Samba 4.
And then their are SIDs. A SID is an identifier used by Samba and Active Directory to distinctly identify things like users, groups, and computers. While this is spiffy, things apparently go sideways in a setup like the one I have where I have multiple computers that aren't on a domain but are joined to LDAP.
"The primary group domain sid(S-1-5-21-[LOCALSID]-1236) does not match
the domain sid(S-1-5-21-[LDAPSID]) for someid(S-1-5-21-[LDAPSID]-5708)
check_sam_security: make_server_info_sam() failed with
'NT_STATUS_UNSUCCESSFUL'
check_ntlm_password: Authentication for user [someid] -> [someid]
FAILED with error NT_STATUS_UNSUCCESSFUL
"
Is a rather infuriating error to receive, in part due to the fact it does not show up in the default log level of Samba. In combination to this, I was getting errors like "mount error(6): No such device or address" or "CIFS VFS: cifs_mount failed w/return code = -5" and Windows 7 would see a list of shares but complain they did not exist when trying to connect.
What I ended up doing to resolve it was to copy the machine SID from the original Openfiler box that I created the accounts on to the machine object for the new server in my LDAP tree.
On top of this, I had to use authconfig-tui to set up ldap on the new server, as well as add a samba config to /etc/pam.d . I was able to copy the latter from my existing opefiler box.

Now, onward to seeing if I can get something other than access denied on my newly visible shares.
swarm32: (thalban)
Since last summer I have been steadily working on rebuilding my lab while attempting some semblance of power efficiency.
While I would have loved to have built the storage server NAS Brian Moses did it's definitely out of my budget.

So what am I cobbling together instead?
Primary Storage Node - Media files, etc
Rackable Systems 3U server
- 12 how-swap bay 3U Short Depth Chassis
- 450W Rackables Power Supply
- Intel S5000PSL Motherboard
- 1x Intel Xeon L5310 1.6GHz Quad-Core
- 8x 1G DDR2-ECC FB-DIMMS
- LSI 8-port SAS 6 PCIE Controller
- 4x 2TB Hitachi 7200RPM SATA Drives
- 1x 4GB SATA Flash disk
- 1x 40GB 2.5" 5400RPM Sata Hard drive
Secondary Storage Node - Virtual Machine Storage
Rackable Systems 2U Server
- 4 hot-swap bay 2U Short Depth Chassis
- 450W Rackables Power Supply
- Intel S5000PSL Motherboard
- 1x Intel Xeon L5310 1.6GHz Quad-Core
- 8x 1G DDR2-ECC FB-DIMMS
- Intel Dual-port PCI-E NIC
- 4x 1TB Western Digital RE2 drives
- 1x 4GB SATA Flash disk
- 1x 40GB 2.5" 5400RPM Sata Hard drive
Virtual Machine Host
HP Proliant DL585 G2 (pdf)
- 4x Dual-Core AMD Operon 8220s
- 64GB DDR2 ECC RAM
- 2x Intel Dual-port gigabit PCI-X NICs
- Random 2GB Flash drive
- Redundant power Supplies
Networking
HP Procurve 2824

Software
Both storage nodes are currently running CentOS 7 combined with ZFS on linux. The Virtual host is running VMWare ESXi 5.5

So far other than swearing at firewalld, finding a bug and some update teething, things have not gone too bad so far. This is still a bit of a work in progress (rebuilding the VM storage node for more space, etc), and I figured for once I might post online how I am building things out, to either help others or serve as a warning to the rest of the internet
swarm32: (Default)
Well, it turns out my nifty kludge to get namecheap to behave on IPfire got brought into the latest update to the OS.

Now that things have quieted down a bit at work (no datacenter move in progress), I have started work again on a project that I started while a student at NU. A gentoo based, network booting, compile node for the DISTCC system. I'm still in the stage of solidifying and revamping the build process at the moment as a number of the components that I originally used have either been removed, or increased in size significantly. The biggest thing I'm debating on is whether I want to keep using the full init stack from gentoo, or build my own, more compact and less dependent scripts.
swarm32: (stalin kitten)
I finally switched my router distribution from IPCop to IPFire. I was hoping for the 2.0 to become stable of IPCop, but even though SVN/CVS updates are occurring, no real releases have happened. As the last major update to IPCop was mid 2008 and still runs the 2.4 kernel, most newer hardware isn't supported. While my new firewall isn't all that new (Pentium M on an Axiomtek Board) it was running into some oddities with the older IPCop that went away with the much more current IPFire. Also, IPFire has one of the most important addons (for me at least), updateaccelerator built-in from the get-go. It is also more of a standard distribution despite being built from LFS sources, so programs such as Teamspeak3 can be installed on the box without too much difficulty.

Did run into a couple of interesting issues though, one that had a couple of good tutorials, and one that didn't. The easy one was getting the update cache from my old IPCop machine to my new IPFire box.
Yes, it is possible.
A quick, well written refresher on SCP. If you do copy over with SCP, you will need to initiate the copy from the IPFire side, as the SSH in IPCop does not have SCP.

As for issue #2, I use namecheap.com's dynamic DNS service, which IPCop supports but the current build of IPFire does not. Due to the wonderful nature of opensource and IPFire being a less obfuscated IPCop derivative, I was able to kludge together what I needed.
So today I was able to replace a 2.66GHz P4 & an Athlon XP 1800+ machine with a single 1U system running IPFire on a Pentium M. Now to see if my power bill actually goes down at all...
swarm32: (Cauldron Born)
Since I was dragged from the East Coast by my employer, I've started to refurbish and redo a number of the computers I have. Partially because I have to pay the power bill now, partially because some of them I have simply outgrown.
Pictures and explanations behind the cut... )
swarm32: (Default)
Been at my job 4 months now. Its pretty interesting and there are a number of staff shifts going on right now. Have an apartment and all, still haven't fully cleaned up and organized from moving in. Been playing eve online and watching through the entirety of stargate sg-1.

Also have a project on sourceforge that I've been poking at.
swarm32: (Default)
Wrote a fairly long bash script the other day and got the order of arguments wrong on all 100 something lines of it.
Also spent an hour trying to find what package includes the mount command in linux. It is apparently util-linux.

Go watch anonymous have fun
swarm32: (Cauldron Born)
OMG! M$ Playing nice with OPEN SOURCE!
Well, sort of. Red Hat managed to negotiate a no-strings contract for virtualization certifications. Still, its a pretty big step in the right direction.

Also, apparently the motherboard I'm using at the moment is now supported by coreboot. Coreboot is pretty neat because it allows for more customization of the boot process as well as better multi-os support.
swarm32: (stalin kitten)
First of all, just went to the Market Pro Shows website... The July 1&2 computer show in richmond vanished... GRRR... Next one is scheduled to be about the same time i'm supposed to be checking into my dorm room at Norwich. I sent an email inquiring about this vanishment because on occasion they have dissapeared yet occured or been there and not occured.
Secondly, The OVERMIND MKIII is being assemble from the remains of OVERMIND MKI and a mound of miscellaneous hardware. Currentlty, I have 1 of 3 network cards that I installed working. If I can get an answer out of the people on the fedora forum as to how I can acquire the modules "ne" and "eexpress" I don't think I can get the other two to function. It also looks like I have a snowball's chance in hell of getting any of the modems I have to function.
Thirdly, the date had been configrmed by both parental units to be the weekend of 7/8, however, unless my mom finishes here 18500 piece puzzle by then, we will be in the garage, which is a little cramped (ask ratboy, trevafish or psycho/pyro joe)

Lastly, I need sleep ...
swarm32: (Cauldron Born)
I haven't said much in a while and i cant sleep... anyways... .I have a job in VA (YEAH!) Goin to cuputer show on 7/1 or 7/2 (YEAH). Planning to have LANCLAN 7/8 to 7/9 (double yeah)... i'll post some more interesting stuff when i finish fighting with Fedora Core 5 i386 and my horde of NE2000 and compatable network cards.. laters...
swarm32: (Cauldron Born)
Hooray for abrrubt weather changes. Fiday, it was sunny and 70, today we got 3" of snow and it was 30... and so goes spring in Vermont.
Also, last night i had what I think was the most unusual indicator that I should go to sleep I have ever had. I've been reading "The Red Badge of Courage" for english 102 and as I was trying to get through the chapters and answer the required questions last night, I decided it was time to stop (thankfully I was on the last question) when I swore I was seeing penguins with read bowties dancing above the lines of perfectly legible text much like the Cid's were dancing in Chocobo Robo Voice. I don't know if I just fell asleep for a minute and didn't notice it or what, but I remember that quite clearly.
In other news, I spent half the afternoon in IM conversation with a friend from the UK in order to figure out how to change the permissions of a folder in linux. I already knew how to chnge the permissions, but for some reason they wouldn't stay that way. But in the end, we figured it out. yeah!

Profile

swarm32: (Default)
swarm32

April 2025

S M T W T F S
  12345
6789101112
13141516171819
2021 2223242526
27282930   

Syndicate

RSS Atom

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Jul. 19th, 2025 10:40 pm
Powered by Dreamwidth Studios