Scientific Linux Fermi 5.1 i386 February 21, 2008 Please send bug reports to dawson@fnal.gov,csieh@fnal.gov Please read the Release Notes for Scientific Linux. It is located at SL.releasenote Also read the Upstream Vendor release notes . They are located in Upstream.vendor.releasenote All of the info in the SL.releasenote is valid unless this document states otherwise. This document only contains info that is specific to the Fermi site. Any reference to SL.releasenote is done to emphasis that it contains important information. ---------------------------------------------------------------------------- This is based on the rebuilding of RPMS out of SRPMS's that form Scientific Linux. Please read this entire document before installing. Table of contents INSTALLATION INFO ADDED compared to Scientific Linux 5.1 UPDATED compared to Scientific Linux 5.1 Installer modifications /contrib /docs /notsupported MISC Notes HARDWARE SPECIFIC ISSUES SOFTWARE ISSUES/BUGS SUPPORT INFO vendor ERRATA Each has a "---" line above and below it. _____________________________________________________________________________ INSTALLATION INFO _____________________________________________________________________________ Installation Locations Via NETWORK: nfs: linux.fnal.gov:/export/linux/slf51/i386/ ftp: linux.fnal.gov /linux/slf51/i386 http: linux1.fnal.gov /linux/slf51/i386 And our easy to remember location ftp://linux.fnal.gov/downloads/slf51/ Default is http, ftp is very very slow. network install with floppy There is no floppy install as the kernel is too big to fit on a floppy. network install with cdrom There is a boot.iso which is small iso image which includes all the drivers. After download you can use cdrecord to create a cdr with this image on it. ftp://linux.fnal.gov/download/slf51/network.install.i386/boot.iso Via CDROM/DVD: There is no cdrom images at this time. But there is a DVD image Download and then burn the dvd iso image from ftp://linux.fnal.gov/download/slf51/dvd.install.i386/ Installing a Xen Paravirtualized Guest When installing a Xen Paravirtualized Guest, the location is http://linux1.fnal.gov/linux/slf51/i386/sites/Fermi ----------------------------------------------------------------------------- ADDED compared to Scientific Linux 51 i386 ----------------------------------------------------------------------------- Fermi-release Fermi-release-notes Made change so that /etc/redhat-release, /etc/issue and /etc/issue.net show Scientific Linux Fermi instead of just Scientific Linux. Clam Anti Virus Clam Anti-Virus. Obtained from the DAG repository and rebuilt from src.rpm. http://www.clamav.net clamav-0.91.2-1.rf.i386.rpm clamav-db-0.91.2-1.rf.i386.rpm clamav-devel-0.91.2-1.rf.i386.rpm clamav-milter-0.91.2-1.rf.i386.rpm clamd-0.91.2-1.rf.i386.rpm clamtk-2.32-1.rf.i386.rpm flpr Installed by default. This does NOT require ups/upd. The flpr binary will reside in /usr/local/bin/ flpr-2.4-4f.9x.i386.rpm Kerberos For SLF 5, we no longer need Fermi's kerberos. We are only including packages for configuring krb5.conf, as well as some utilities. * krb5-fermi-config-2.7-4.noarch.rpm krb5-getcert-1.9-5.slf5.noarch.rpm OpenAFS See SL.releasenote Here is the procedure for installing openafs, using yum yum install openafs-client openafs-thiscell kernel-module-openafs-`uname -r` openafs-thiscell-FNAL-5.noarch.rpm redhat-logos-1.1.25-1.LTS.6.noarch.rpm This version of redhat-logo's has all of the generic changes that were made with Scientific Linux as well as changes to make it look like SLF. redhat-logos-4.9.16-1.SLF.4.noarch.rpm SLIP Scientific Linux Inventory Project client ocsinventory-client-0.9.9-9.noarch.rpm upsupdbootstrap Not installed by default. Links from /usr/local/bin are NOT made anymore. upsupdbootstrap-5.0-0.i386.rpm * upsupdbootstrap-fnal-5.0-0.i386.rpm conflicts with upsupdbootstrap-local Installs ups/upd to /fnal/ups * upsupdbootstrap-local-5.0-0.i386.rpm conflicts with upsupdbootstrap-fnal Installs ups/upd to /local/ups yum-conf Modified to give Fermi's rpm's a priority, as well as point to Fermi's linux distribution servers instead of scientific linux's. * yum-conf-51-2.SLF.noarch.rpm yum-conf-5x Will keep you at 5x which is the current stable 5x release. So when we release the next 5 release yum will automatically yum install it except for the kernel. * yum-conf-5x-2-2.SLF.noarch.rpm yum install yum-conf-5x yum-autoupdate-1-1.SLF.noarch.rpm yum-autoupdate has the nightly yum cron job in it. The nightly cron job has been modified to check the add-ons directory. zz_dhcp_resolv-3.0.5-1.noarch.rpm This rpm fixes that so that when your network starts, as it checks your resolv.conf, if you have dhcp.fnal.gov, but not fnal.gov it will put it in, so that you will have "search fnal.gov dhcp.fnal.gov" in your /etc/resolv.conf file. *zz_lang_collate-1.0-4.noarch.rpm * * Changes LANG so that sorting is done the same as 6.1 and * earlier. (ABCabc instead of AaBbCc). zz_local_dns_cache-1.0-3.noarch.rpm This rpm will change your machine to use a local dns cache before looking for the standard dns servers zz_logwatch_df-1.1-2.noarch.rpm By default logwatch does a df -h when looking at disk usage. This can be unwanted if you have alot of NFS mounted disks. This rpm changes that command to be df -lP -h, which looks at local disks only, and the output is in the POSIX output format. *zz_ntp_configure-4.2.0-8.noarch.rpm Configure ntp for Fermi site network. Startup script now pokes hole in the firewall for itself One can manually change the script by editing the file /etc/sysconfig/ntpd.fermi zz_pine_user_domain-1.0-2.noarch.rpm By default when a user sends mail from pine their email address is myname@mycomputer.fnal.gov. This rpm changes it so that the default is myname@fnal.gov by modifying the /etc/pine.conf config file. zz_sendmail_fermi_gateway-2.0-1.noarch.rpm This rpm is designed to send outbound sendmail e-mail through the fermilab e-mail gateway(smtp.fnal.gov). *zz_sshd_pam-3.9-3.noarch.rpm - Removed * Functionality not provided by changing the default sshd config to * use pam. zz_tcp_wrappers_change-3.0-3.noarch.rpm Disable all offsite access to common network services. Also puts in the "DOE required login banners". If it determines that you have already modified /etc/hosts.allow or host.deny it leaves them alone. zz_tex_tweaks-1.0-1.noarch.rpm Changes the default paper size to 8.5 x 11 vs A3 --------------------------------------------------------------------------- UPDATED compared to Scientific Linux 50 i386 ---------------------------------------------------------------------------- OpenSSH This is the openssh from S.L. 5.x with some patches and modifications. The client does kerberos with both fermi's old openssh(old gssapi), as well as generic new openssh's(new gssapi) The server only does the kerberos with the newer versions of openssh It does 'kerberos only' by default * openssh-server is NOT installed by default. * openssh-4.3p2-41.slf5.i386.rpm * openssh-askpass-4.3p2-41.slf5.i386.rpm * openssh-clients-4.3p2-41.slf5.i386.rpm * openssh-server-4.3p2-41.slf5.i386.rpm *pam_krb5 * * This is a modified version of the pam_krb5 that comes with SL5. * This pam module has the ability to do cryptocard authentication. * * pam_krb5-2.2.11-5.slf5.i386.rpm ---------------------------------------------------------------------------- Installer modifications --------------------------------------------------------------------------- Anaconda (installer) Changes to "defaults" from vendor installer. Firewall is on by default. The zz_ntp_configure-4.2.0-6 rpm pokes a hole for inbound ntp. US/Central is default timezone. vendor default was New York. Kerberos is on by default with a realm of FNAL.GOV . vendor default was off. Default install is via http. If one wishes to use nfs then type nfs at the isolinux prompt. If one wishes to use ftp then type ftp at the isolinux prompt. Added support for "sites" * Added support for workgroups * Workgroup maintainers can now check their workgroups in an out of cvs * Fixed the kernel-module bug that was in SLF 5.0 --------------------------------------------------------------------------- /contrib/ --------------------------------------------------------------------------- The packages in this section have been contributed by various people. They are presented AS IS and there is no guarantee of them working. These packages are NOT supported by us. They will only get security updates if the contributor provides them. If you have questions about them then ask the contributor. To use with yum: For one time only (prefered method) yum --enablerepo=Fermi-contrib install To enable for all yum updates/install (including autoyum) edit the file /etc/yum.repos.d/fermi-contrib.repo and change the line enabled=0 to enabled=1 See README's in the RPMS/ directorys for specific package info. /sites/Fermi/contrib/RPMS/ --------------------------------------------------------------------------- KNOWN LIMITATIONS/BUGS --------------------------------------------------------------------------- The estimated time to install is not even close. **After you have picked a workgroup on the workgroup selection page and moved ** to the next back, you cannot go back to that page. The installer will die. --------------------------------------------------------------------------- MISC NOTES --------------------------------------------------------------------------- If you select "linux text" or you might want to type "linux text noipv6" because the install trys to do ipv6 and since there is no support at FNAL for ipv6 it takes a long time to timeout kickstart users might want to add the "noipv6" option to their ks.cfg file --------------------------------------------------------------------------- SUPPORT INFO --------------------------------------------------------------------------- Fermi site users should start with the "Fermi" specific support areas and use the Scientific Linux next. Scientific Linux Fermi web pages http://www.fnal.gov/cd/unix/linux Fermi Linux Community support mailing list linux-users@fnal.gov Which is archived at http://listserv.fnal.gov/archives/linux-users.html Scientific Linux web page http://www.scientificlinux.org ------------------------------------------------------------------------------ SECURITY ERRATA RELEASED AFTER SL51 was released ------------------------------------------------------------------------------ kernel-2.6.18-53.1.6.el5.i686.rpm kernel-debug-2.6.18-53.1.6.el5.i686.rpm kernel-debug-devel-2.6.18-53.1.6.el5.i686.rpm kernel-devel-2.6.18-53.1.6.el5.i686.rpm kernel-doc-2.6.18-53.1.6.el5.noarch.rpm kernel-headers-2.6.18-53.1.6.el5.i386.rpm kernel-module-fuse-2.6.18-53.1.6.el5-2.6.3-1.el5_0.i686.rpm kernel-module-fuse-2.6.18-53.1.6.el5PAE-2.6.3-1.el5_0.i686.rpm kernel-module-fuse-2.6.18-53.1.6.el5xen-2.6.3-1.el5_0.i686.rpm kernel-module-ipw3945-2.6.18-53.1.6.el5-1.2.0-2.el5_0.i686.rpm kernel-module-ipw3945-2.6.18-53.1.6.el5PAE-1.2.0-2.el5_0.i686.rpm kernel-module-ipw3945-2.6.18-53.1.6.el5xen-1.2.0-2.el5_0.i686.rpm kernel-module-madwifi-2.6.18-53.1.6.el5-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-2.6.18-53.1.6.el5PAE-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-2.6.18-53.1.6.el5xen-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-hal-2.6.18-53.1.6.el5-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-hal-2.6.18-53.1.6.el5PAE-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-hal-2.6.18-53.1.6.el5xen-0.9.3.3-12.el5_0.i686.rpm kernel-module-ndiswrapper-2.6.18-53.1.6.el5-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.18-53.1.6.el5PAE-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.18-53.1.6.el5xen-1.41-1.SL.i686.rpm kernel-module-openafs-2.6.18-53.1.6.el5-1.4.6-58.SL5.i686.rpm kernel-module-openafs-2.6.18-53.1.6.el5PAE-1.4.6-58.SL5.i686.rpm kernel-module-openafs-2.6.18-53.1.6.el5xen-1.4.6-58.SL5.i686.rpm kernel-module-r1000-2.6.18-53.1.6.el5-1.05-1.sl.i686.rpm kernel-module-r1000-2.6.18-53.1.6.el5PAE-1.05-1.sl.i686.rpm kernel-module-r1000-2.6.18-53.1.6.el5xen-1.05-1.sl.i686.rpm kernel-PAE-2.6.18-53.1.6.el5.i686.rpm kernel-PAE-devel-2.6.18-53.1.6.el5.i686.rpm kernel-xen-2.6.18-53.1.6.el5.i686.rpm kernel-xen-devel-2.6.18-53.1.6.el5.i686.rpm a2ps-4.13b-57.2.el5.i386.rpm amtu-1.0.6-1.el5.i386.rpm apr-util-1.2.7-7.el5.i386.rpm apr-util-devel-1.2.7-7.el5.i386.rpm apr-util-docs-1.2.7-7.el5.i386.rpm crypto-utils-2.3-2.el5.i386.rpm diffutils-2.8.1-15.2.3.el5.i386.rpm gedit-2.16.0-9.el5.i386.rpm gedit-devel-2.16.0-9.el5.i386.rpm gnome-panel-2.16.1-7.el5.i386.rpm gnome-panel-devel-2.16.1-7.el5.i386.rpm gnome-screensaver-2.16.1-6.el5.i386.rpm gnome-utils-2.16.0-5.el5.i386.rpm gnome-utils-devel-2.16.0-5.el5.i386.rpm hwbrowser-0.30-2.el5.noarch.rpm icu-3.6-5.11.1.i386.rpm kdeadmin-3.5.4-3.el5.i386.rpm kernel-2.6.18-53.1.6.el5.i686.rpm kernel-debug-2.6.18-53.1.6.el5.i686.rpm kernel-debug-devel-2.6.18-53.1.6.el5.i686.rpm kernel-devel-2.6.18-53.1.6.el5.i686.rpm kernel-doc-2.6.18-53.1.6.el5.noarch.rpm kernel-headers-2.6.18-53.1.6.el5.i386.rpm kernel-module-fuse-2.6.18-53.1.6.el5-2.6.3-1.el5_0.i686.rpm kernel-module-fuse-2.6.18-53.1.6.el5PAE-2.6.3-1.el5_0.i686.rpm kernel-module-fuse-2.6.18-53.1.6.el5xen-2.6.3-1.el5_0.i686.rpm kernel-module-ipw3945-2.6.18-53.1.6.el5-1.2.0-2.el5_0.i686.rpm kernel-module-ipw3945-2.6.18-53.1.6.el5PAE-1.2.0-2.el5_0.i686.rpm kernel-module-ipw3945-2.6.18-53.1.6.el5xen-1.2.0-2.el5_0.i686.rpm kernel-module-madwifi-2.6.18-53.1.6.el5-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-2.6.18-53.1.6.el5PAE-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-2.6.18-53.1.6.el5xen-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-hal-2.6.18-53.1.6.el5-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-hal-2.6.18-53.1.6.el5PAE-0.9.3.3-12.el5_0.i686.rpm kernel-module-madwifi-hal-2.6.18-53.1.6.el5xen-0.9.3.3-12.el5_0.i686.rpm kernel-module-ndiswrapper-2.6.18-53.1.6.el5-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.18-53.1.6.el5PAE-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.18-53.1.6.el5xen-1.41-1.SL.i686.rpm kernel-module-openafs-2.6.18-53.1.6.el5-1.4.6-58.SL5.i686.rpm kernel-module-openafs-2.6.18-53.1.6.el5PAE-1.4.6-58.SL5.i686.rpm kernel-module-openafs-2.6.18-53.1.6.el5xen-1.4.6-58.SL5.i686.rpm kernel-module-r1000-2.6.18-53.1.6.el5-1.05-1.sl.i686.rpm kernel-module-r1000-2.6.18-53.1.6.el5PAE-1.05-1.sl.i686.rpm kernel-module-r1000-2.6.18-53.1.6.el5xen-1.05-1.sl.i686.rpm kernel-PAE-2.6.18-53.1.6.el5.i686.rpm kernel-PAE-devel-2.6.18-53.1.6.el5.i686.rpm kernel-xen-2.6.18-53.1.6.el5.i686.rpm kernel-xen-devel-2.6.18-53.1.6.el5.i686.rpm libicu-3.6-5.11.1.i386.rpm libicu-devel-3.6-5.11.1.i386.rpm libicu-doc-3.6-5.11.1.i386.rpm libsmi-0.4.5-2.el5.i386.rpm libsmi-devel-0.4.5-2.el5.i386.rpm libXfont-1.2.2-1.0.3.el5_1.i386.rpm libXfont-devel-1.2.2-1.0.3.el5_1.i386.rpm m17n-db-1.3.3-48.el5.noarch.rpm m17n-db-amharic-1.3.3-48.el5.noarch.rpm m17n-db-arabic-1.3.3-48.el5.noarch.rpm m17n-db-armenian-1.3.3-48.el5.noarch.rpm m17n-db-assamese-1.3.3-48.el5.noarch.rpm m17n-db-bengali-1.3.3-48.el5.noarch.rpm m17n-db-chinese-1.3.3-48.el5.noarch.rpm m17n-db-common-cjk-1.3.3-48.el5.noarch.rpm m17n-db-croatian-1.3.3-48.el5.noarch.rpm m17n-db-datafiles-1.3.3-48.el5.noarch.rpm m17n-db-dhivehi-1.3.3-48.el5.noarch.rpm m17n-db-farsi-1.3.3-48.el5.noarch.rpm m17n-db-generic-1.3.3-48.el5.noarch.rpm m17n-db-georgian-1.3.3-48.el5.noarch.rpm m17n-db-greek-1.3.3-48.el5.noarch.rpm m17n-db-gujarati-1.3.3-48.el5.noarch.rpm m17n-db-hebrew-1.3.3-48.el5.noarch.rpm m17n-db-hindi-1.3.3-48.el5.noarch.rpm m17n-db-japanese-1.3.3-48.el5.noarch.rpm m17n-db-kannada-1.3.3-48.el5.noarch.rpm m17n-db-kazakh-1.3.3-48.el5.noarch.rpm m17n-db-khmer-1.3.3-48.el5.noarch.rpm m17n-db-korean-1.3.3-48.el5.noarch.rpm m17n-db-lao-1.3.3-48.el5.noarch.rpm m17n-db-latin-1.3.3-48.el5.noarch.rpm m17n-db-malayalam-1.3.3-48.el5.noarch.rpm m17n-db-marathi-1.3.3-48.el5.noarch.rpm m17n-db-myanmar-1.3.3-48.el5.noarch.rpm m17n-db-nepali-1.3.3-48.el5.noarch.rpm m17n-db-oriya-1.3.3-48.el5.noarch.rpm m17n-db-punjabi-1.3.3-48.el5.noarch.rpm m17n-db-russian-1.3.3-48.el5.noarch.rpm m17n-db-serbian-1.3.3-48.el5.noarch.rpm m17n-db-sinhala-1.3.3-48.el5.noarch.rpm m17n-db-slovak-1.3.3-48.el5.noarch.rpm m17n-db-swedish-1.3.3-48.el5.noarch.rpm m17n-db-syriac-1.3.3-48.el5.noarch.rpm m17n-db-tamil-1.3.3-48.el5.noarch.rpm m17n-db-telugu-1.3.3-48.el5.noarch.rpm m17n-db-thai-1.3.3-48.el5.noarch.rpm m17n-db-tibetan-1.3.3-48.el5.noarch.rpm m17n-db-urdu-1.3.3-48.el5.noarch.rpm m17n-db-vietnamese-1.3.3-48.el5.noarch.rpm m2crypto-0.16-6.el5.2.i386.rpm ntp-4.2.2p1-8.el5.i386.rpm oddjob-0.27-9.el5.i386.rpm oddjob-devel-0.27-9.el5.i386.rpm oddjob-libs-0.27-9.el5.i386.rpm pygtk2-2.10.1-11.el5.i386.rpm pygtk2-codegen-2.10.1-11.el5.i386.rpm pygtk2-devel-2.10.1-11.el5.i386.rpm pygtk2-libglade-2.10.1-11.el5.i386.rpm scim-chewing-0.3.1-11.el5.i386.rpm scim-pinyin-0.5.91-16.el5.i386.rpm sysklogd-1.4.1-42.el5.i386.rpm wireshark-0.99.7-1.el5.i386.rpm wireshark-gnome-0.99.7-1.el5.i386.rpm xorg-x11-server-sdk-1.1.1-48.26.el5_1.4.i386.rpm xorg-x11-server-sdk-1.1.1-48.26.el5_1.5.i386.rpm xorg-x11-server-Xdmx-1.1.1-48.26.el5_1.4.i386.rpm xorg-x11-server-Xdmx-1.1.1-48.26.el5_1.5.i386.rpm xorg-x11-server-Xephyr-1.1.1-48.26.el5_1.4.i386.rpm xorg-x11-server-Xephyr-1.1.1-48.26.el5_1.5.i386.rpm xorg-x11-server-Xnest-1.1.1-48.26.el5_1.4.i386.rpm xorg-x11-server-Xnest-1.1.1-48.26.el5_1.5.i386.rpm xorg-x11-server-Xorg-1.1.1-48.26.el5_1.4.i386.rpm xorg-x11-server-Xorg-1.1.1-48.26.el5_1.5.i386.rpm xorg-x11-server-Xvfb-1.1.1-48.26.el5_1.4.i386.rpm xorg-x11-server-Xvfb-1.1.1-48.26.el5_1.5.i386.rpm yum-rhn-plugin-0.5.2-5.el5_1.2.noarch.rpm