* [gentoo-user] Updating our live servers. I'm scared! @ 2013-03-28 15:38 Nick Khamis 2013-03-28 16:04 ` Joshua Murphy 2013-03-28 16:48 ` Michael Orlitzky 0 siblings, 2 replies; 23+ messages in thread From: Nick Khamis @ 2013-03-28 15:38 UTC (permalink / raw To: gentoo-user Hello Everyone, Just got a ticket assigned to me where we need to update our production servers. uname -a Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux eselect [18] hardened/linux/amd64 * I don't think they have been updated since the initial install and wanted to get a little feedback on some safe practices and methods that should be performed before and while doing so. Thanks in Advance, Nick. ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 15:38 [gentoo-user] Updating our live servers. I'm scared! Nick Khamis @ 2013-03-28 16:04 ` Joshua Murphy 2013-03-28 16:30 ` Nick Khamis 2013-03-28 16:48 ` Michael Orlitzky 1 sibling, 1 reply; 23+ messages in thread From: Joshua Murphy @ 2013-03-28 16:04 UTC (permalink / raw To: gentoo-user [-- Attachment #1: Type: text/plain, Size: 1478 bytes --] On Thu, Mar 28, 2013 at 11:38 AM, Nick Khamis <symack@gmail.com> wrote: > Hello Everyone, > > Just got a ticket assigned to me where we need to update our production > servers. > > uname -a > Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 > Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux > > eselect > [18] hardened/linux/amd64 * > > I don't think they have been updated since the initial install and > wanted to get a little feedback on some safe practices and methods > that should be performed before and while doing so. > > Thanks in Advance, > > Nick. > > Personally, I would recommend pulling an rsync (databases and such might cause a hiccup with that) of one of them to a nonessential system and testing updating there, building packages (assuming matching use flags, etc, across your systems), documenting the pitfalls you run into as you go. After you're up to date there, run through and test it again from a base copy, then test the actual services to ensure changes to them don't hose your environment's configuration, and once that's good, it then depends entirely on what failover, or downtime allowances you have available. If you have no failover to rely on, and can't afford enough downtime to update the system in place from the packages you've built, clone each off, update, then migrate the changes that've occured in the time between... time consuming, and requires a lot of care, but doable. -- Poison [BLX] Joshua M. Murphy [-- Attachment #2: Type: text/html, Size: 1863 bytes --] ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 16:04 ` Joshua Murphy @ 2013-03-28 16:30 ` Nick Khamis 0 siblings, 0 replies; 23+ messages in thread From: Nick Khamis @ 2013-03-28 16:30 UTC (permalink / raw To: gentoo-user So basically rsync configs and databases first? When issuing updates to world and so no. What is the safest process/order to sync portage, and update world? I have seen a number of flags various example use, and was wondering if someone can give me the safest and equally effective commands with flags included. Thanks again, Nick. On 3/28/13, Joshua Murphy <poisonbl@gmail.com> wrote: > On Thu, Mar 28, 2013 at 11:38 AM, Nick Khamis <symack@gmail.com> wrote: > >> Hello Everyone, >> >> Just got a ticket assigned to me where we need to update our production >> servers. >> >> uname -a >> Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 >> Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux >> >> eselect >> [18] hardened/linux/amd64 * >> >> I don't think they have been updated since the initial install and >> wanted to get a little feedback on some safe practices and methods >> that should be performed before and while doing so. >> >> Thanks in Advance, >> >> Nick. >> >> > Personally, I would recommend pulling an rsync (databases and such might > cause a hiccup with that) of one of them to a nonessential system and > testing updating there, building packages (assuming matching use flags, > etc, across your systems), documenting the pitfalls you run into as you go. > After you're up to date there, run through and test it again from a base > copy, then test the actual services to ensure changes to them don't hose > your environment's configuration, and once that's good, it then depends > entirely on what failover, or downtime allowances you have available. If > you have no failover to rely on, and can't afford enough downtime to update > the system in place from the packages you've built, clone each off, update, > then migrate the changes that've occured in the time between... time > consuming, and requires a lot of care, but doable. > > -- > Poison [BLX] > Joshua M. Murphy > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 15:38 [gentoo-user] Updating our live servers. I'm scared! Nick Khamis 2013-03-28 16:04 ` Joshua Murphy @ 2013-03-28 16:48 ` Michael Orlitzky 2013-03-28 16:56 ` Nick Khamis 1 sibling, 1 reply; 23+ messages in thread From: Michael Orlitzky @ 2013-03-28 16:48 UTC (permalink / raw To: gentoo-user On 03/28/2013 11:38 AM, Nick Khamis wrote: > Hello Everyone, > > Just got a ticket assigned to me where we need to update our production servers. > > uname -a > Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 > Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux > > eselect > [18] hardened/linux/amd64 * > > I don't think they have been updated since the initial install and > wanted to get a little feedback on some safe practices and methods > that should be performed before and while doing so. This isn't that old, you'll be fine. First run an emerge --sync to update the tree. Then list everything it wants to upgrade: emerge -puDN1 world Once you have that list, go through a few at a time, updating non-essential packages. For example, emerge -u1 timezone-data man-pages ... Every once in a while, run a revdep-rebuild. If you have service monitoring (e.g. Nagios), great, it'll alert you if something breaks. If not, you'll have to test the services yourself every few packages. And don't forget to open a counter-ticket for someone to implement a monitoring solution, already. After a while, only important packages (apache, mysql, postfix...) will be left. Do those one at a time, and restart the services afterwards. Read the release notes first. Run revdep-rebuild. Check that the services work. Finally, you'll be left with the guaranteed-to-break updates like grub2 (50/50) and udev (100% you're fucked prepare for downtime). Grub2 can of course be skipped until the hardware dies. Best of luck to you with udev =) ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 16:48 ` Michael Orlitzky @ 2013-03-28 16:56 ` Nick Khamis 2013-03-28 17:08 ` Michael Orlitzky 2013-03-28 18:15 ` Dale 0 siblings, 2 replies; 23+ messages in thread From: Nick Khamis @ 2013-03-28 16:56 UTC (permalink / raw To: gentoo-user Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. That was quite an experience!!!! But for kernel 3.* has udev not been phased out in our gentoo boxes? Will have to double check when I get back behind a console. N. On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote: > On 03/28/2013 11:38 AM, Nick Khamis wrote: >> Hello Everyone, >> >> Just got a ticket assigned to me where we need to update our production >> servers. >> >> uname -a >> Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64 >> Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux >> >> eselect >> [18] hardened/linux/amd64 * >> >> I don't think they have been updated since the initial install and >> wanted to get a little feedback on some safe practices and methods >> that should be performed before and while doing so. > > This isn't that old, you'll be fine. First run an emerge --sync to > update the tree. Then list everything it wants to upgrade: > > emerge -puDN1 world > > Once you have that list, go through a few at a time, updating > non-essential packages. For example, > > emerge -u1 timezone-data man-pages ... > > Every once in a while, run a revdep-rebuild. If you have service > monitoring (e.g. Nagios), great, it'll alert you if something breaks. If > not, you'll have to test the services yourself every few packages. And > don't forget to open a counter-ticket for someone to implement a > monitoring solution, already. > > After a while, only important packages (apache, mysql, postfix...) will > be left. Do those one at a time, and restart the services afterwards. > Read the release notes first. Run revdep-rebuild. Check that the > services work. > > Finally, you'll be left with the guaranteed-to-break updates like grub2 > (50/50) and udev (100% you're fucked prepare for downtime). Grub2 can of > course be skipped until the hardware dies. Best of luck to you with udev =) > > > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 16:56 ` Nick Khamis @ 2013-03-28 17:08 ` Michael Orlitzky 2013-03-28 17:16 ` Nick Khamis 2013-03-28 18:15 ` Dale 1 sibling, 1 reply; 23+ messages in thread From: Michael Orlitzky @ 2013-03-28 17:08 UTC (permalink / raw To: gentoo-user On 03/28/2013 12:56 PM, Nick Khamis wrote: > Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. > That was quite an experience!!!! But for kernel 3.* has udev not been > phased out in our gentoo boxes? Will have to double check when I get > back behind a console. > I'm afraid not! Once you sync, you can do, eselect news read 23 to see the news item that was posted about it (title: 2013-01-23-udev-upgrade). Even that doesn't contain all of the information.. some of it is spread throughout bugs and across mailing list discussions. Oh and they decided to rename your NICs to owiu23awds89, which stands for, actually-nobody-knows-welcome24-to16-hell9-slot12-moon-phase-36-hey-if-you-enjoyed-this-give-systemd-a-try, or something like that. It's all explained very poorly in the cited links. ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 17:08 ` Michael Orlitzky @ 2013-03-28 17:16 ` Nick Khamis 2013-03-28 17:33 ` Michael Orlitzky 0 siblings, 1 reply; 23+ messages in thread From: Nick Khamis @ 2013-03-28 17:16 UTC (permalink / raw To: gentoo-user So basically, no long weekend for me here in Canada. Thanks a lot guys for your time.Wish me luck. Happy easter/holidays!!! N. On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote: > On 03/28/2013 12:56 PM, Nick Khamis wrote: >> Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. >> That was quite an experience!!!! But for kernel 3.* has udev not been >> phased out in our gentoo boxes? Will have to double check when I get >> back behind a console. >> > > I'm afraid not! Once you sync, you can do, > > eselect news read 23 > > to see the news item that was posted about it (title: > 2013-01-23-udev-upgrade). Even that doesn't contain all of the > information.. some of it is spread throughout bugs and across mailing > list discussions. > > Oh and they decided to rename your NICs to owiu23awds89, which stands > for, > actually-nobody-knows-welcome24-to16-hell9-slot12-moon-phase-36-hey-if-you-enjoyed-this-give-systemd-a-try, > or something like that. It's all explained very poorly in the cited links. > > > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 17:16 ` Nick Khamis @ 2013-03-28 17:33 ` Michael Orlitzky 2013-03-28 17:43 ` Nick Khamis 0 siblings, 1 reply; 23+ messages in thread From: Michael Orlitzky @ 2013-03-28 17:33 UTC (permalink / raw To: gentoo-user On 03/28/2013 01:16 PM, Nick Khamis wrote: > So basically, no long weekend for me here in Canada. Thanks a lot guys > for your time.Wish me luck. Happy easter/holidays!!! > I'm being a bit dramatic. I would plan on spending ~4 hours researching, planning, and documenting the udev upgrade. Maybe an hour to execute it in the middle of the night, physically present. You can expect around 15 minutes downtime if all goes well. The rest of the updates you can do at your leisure, although the critical services should be restarted and checked during off-hours. ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 17:33 ` Michael Orlitzky @ 2013-03-28 17:43 ` Nick Khamis 2013-03-28 17:49 ` Michael Orlitzky 0 siblings, 1 reply; 23+ messages in thread From: Nick Khamis @ 2013-03-28 17:43 UTC (permalink / raw To: gentoo-user First hickup emerge -puDN1 world !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/eapi-5-files/eapi' !!! Your current profile is invalid. If you have just changed your profile !!! configuration, you should revert back to the previous configuration. !!! Allowed actions are limited to --help, --info, --search, --sync, and We were always running hardened. Never changed the profile. N. On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote: > On 03/28/2013 01:16 PM, Nick Khamis wrote: >> So basically, no long weekend for me here in Canada. Thanks a lot guys >> for your time.Wish me luck. Happy easter/holidays!!! >> > > I'm being a bit dramatic. I would plan on spending ~4 hours researching, > planning, and documenting the udev upgrade. Maybe an hour to execute it > in the middle of the night, physically present. You can expect around 15 > minutes downtime if all goes well. > > The rest of the updates you can do at your leisure, although the > critical services should be restarted and checked during off-hours. > > > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 17:43 ` Nick Khamis @ 2013-03-28 17:49 ` Michael Orlitzky 2013-03-28 17:58 ` Yuri K. Shatroff 2013-03-28 18:00 ` Nick Khamis 0 siblings, 2 replies; 23+ messages in thread From: Michael Orlitzky @ 2013-03-28 17:49 UTC (permalink / raw To: gentoo-user On 03/28/2013 01:43 PM, Nick Khamis wrote: > First hickup > > emerge -puDN1 world > !!! Unable to parse profile: '/etc/portage/make.profile' > !!! ParseError: Profile contains unsupported EAPI '5': > '/usr/portage/profiles/eapi-5-files/eapi' > !!! Your current profile is invalid. If you have just changed your profile > !!! configuration, you should revert back to the previous configuration. > !!! Allowed actions are limited to --help, --info, --search, --sync, and > > > We were always running hardened. Never changed the profile. > Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do to fix it us update portage to the current stable version, which supports EAPI5. Can you switch to another profile temporarily and get portage updated? ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 17:49 ` Michael Orlitzky @ 2013-03-28 17:58 ` Yuri K. Shatroff 2013-03-28 18:00 ` Nick Khamis 1 sibling, 0 replies; 23+ messages in thread From: Yuri K. Shatroff @ 2013-03-28 17:58 UTC (permalink / raw To: gentoo-user On 28.03.2013 21:49, Michael Orlitzky wrote: > On 03/28/2013 01:43 PM, Nick Khamis wrote: >> First hickup >> >> emerge -puDN1 world >> !!! Unable to parse profile: '/etc/portage/make.profile' >> !!! ParseError: Profile contains unsupported EAPI '5': >> '/usr/portage/profiles/eapi-5-files/eapi' >> !!! Your current profile is invalid. If you have just changed your profile >> !!! configuration, you should revert back to the previous configuration. >> !!! Allowed actions are limited to --help, --info, --search, --sync, and >> >> >> We were always running hardened. Never changed the profile. >> > > Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do > to fix it us update portage to the current stable version, which > supports EAPI5. Can you switch to another profile temporarily and get > portage updated? I guess this is related to the recent profile upgrade (as of 2013-02-10). In my $ eselect news list I get the last news item related to this upgrade. As it states, "Everyone should upgrade as soon as possible (but please make sure sys-apps/portage is updated to current stable *before* you switch profile)..... this formally requires a new profile tree with EAPI=5." So, read the news item, emerge portage, then # eselect profile and you're done. -- Best wishes, Yuri K. Shatroff ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 17:49 ` Michael Orlitzky 2013-03-28 17:58 ` Yuri K. Shatroff @ 2013-03-28 18:00 ` Nick Khamis 2013-03-28 18:03 ` Nick Khamis 1 sibling, 1 reply; 23+ messages in thread From: Nick Khamis @ 2013-03-28 18:00 UTC (permalink / raw To: gentoo-user I switched to the default profile from hardened: eselect profile list Available profile symlink targets: [1] default/linux/x86/13.0 * env-update !!! Unable to parse profile: '/etc/portage/make.profile' !!! ParseError: Profile contains unsupported EAPI '5': '/usr/portage/profiles/default/linux/x86/13.0/eapi' >>> Regenerating /etc/ld.so.cache... And still can't update portage. N. On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote: > On 03/28/2013 01:43 PM, Nick Khamis wrote: >> First hickup >> >> emerge -puDN1 world >> !!! Unable to parse profile: '/etc/portage/make.profile' >> !!! ParseError: Profile contains unsupported EAPI '5': >> '/usr/portage/profiles/eapi-5-files/eapi' >> !!! Your current profile is invalid. If you have just changed your >> profile >> !!! configuration, you should revert back to the previous configuration. >> !!! Allowed actions are limited to --help, --info, --search, --sync, and >> >> >> We were always running hardened. Never changed the profile. >> > > Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do > to fix it us update portage to the current stable version, which > supports EAPI5. Can you switch to another profile temporarily and get > portage updated? > > > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 18:00 ` Nick Khamis @ 2013-03-28 18:03 ` Nick Khamis 2013-03-28 18:10 ` Nick Khamis 0 siblings, 1 reply; 23+ messages in thread From: Nick Khamis @ 2013-03-28 18:03 UTC (permalink / raw To: gentoo-user But we never changed our profile? Always running hardened server. N. On 3/28/13, Nick Khamis <symack@gmail.com> wrote: > I switched to the default profile from hardened: > > eselect profile list > Available profile symlink targets: > [1] default/linux/x86/13.0 * > > env-update > !!! Unable to parse profile: '/etc/portage/make.profile' > !!! ParseError: Profile contains unsupported EAPI '5': > '/usr/portage/profiles/default/linux/x86/13.0/eapi' >>>> Regenerating /etc/ld.so.cache... > > And still can't update portage. > > N. > > On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote: >> On 03/28/2013 01:43 PM, Nick Khamis wrote: >>> First hickup >>> >>> emerge -puDN1 world >>> !!! Unable to parse profile: '/etc/portage/make.profile' >>> !!! ParseError: Profile contains unsupported EAPI '5': >>> '/usr/portage/profiles/eapi-5-files/eapi' >>> !!! Your current profile is invalid. If you have just changed your >>> profile >>> !!! configuration, you should revert back to the previous configuration. >>> !!! Allowed actions are limited to --help, --info, --search, --sync, and >>> >>> >>> We were always running hardened. Never changed the profile. >>> >> >> Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do >> to fix it us update portage to the current stable version, which >> supports EAPI5. Can you switch to another profile temporarily and get >> portage updated? >> >> >> > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 18:03 ` Nick Khamis @ 2013-03-28 18:10 ` Nick Khamis 0 siblings, 0 replies; 23+ messages in thread From: Nick Khamis @ 2013-03-28 18:10 UTC (permalink / raw To: gentoo-user As mentioned earlier a temporary change of profile got me on my way eselect profile set 0 env-update eselect profile set 7 Moving forward... Thanks guys. On 3/28/13, Nick Khamis <symack@gmail.com> wrote: > But we never changed our profile? Always running hardened server. > > N. > > On 3/28/13, Nick Khamis <symack@gmail.com> wrote: >> I switched to the default profile from hardened: >> >> eselect profile list >> Available profile symlink targets: >> [1] default/linux/x86/13.0 * >> >> env-update >> !!! Unable to parse profile: '/etc/portage/make.profile' >> !!! ParseError: Profile contains unsupported EAPI '5': >> '/usr/portage/profiles/default/linux/x86/13.0/eapi' >>>>> Regenerating /etc/ld.so.cache... >> >> And still can't update portage. >> >> N. >> >> On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote: >>> On 03/28/2013 01:43 PM, Nick Khamis wrote: >>>> First hickup >>>> >>>> emerge -puDN1 world >>>> !!! Unable to parse profile: '/etc/portage/make.profile' >>>> !!! ParseError: Profile contains unsupported EAPI '5': >>>> '/usr/portage/profiles/eapi-5-files/eapi' >>>> !!! Your current profile is invalid. If you have just changed your >>>> profile >>>> !!! configuration, you should revert back to the previous >>>> configuration. >>>> !!! Allowed actions are limited to --help, --info, --search, --sync, >>>> and >>>> >>>> >>>> We were always running hardened. Never changed the profile. >>>> >>> >>> Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do >>> to fix it us update portage to the current stable version, which >>> supports EAPI5. Can you switch to another profile temporarily and get >>> portage updated? >>> >>> >>> >> > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 16:56 ` Nick Khamis 2013-03-28 17:08 ` Michael Orlitzky @ 2013-03-28 18:15 ` Dale 2013-03-28 18:27 ` Nick Khamis 2013-03-30 14:39 ` eudev - is it a viable *long-term* option? - WAS: " Tanstaafl 1 sibling, 2 replies; 23+ messages in thread From: Dale @ 2013-03-28 18:15 UTC (permalink / raw To: gentoo-user Nick Khamis wrote: > Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. > That was quite an experience!!!! But for kernel 3.* has udev not been > phased out in our gentoo boxes? Will have to double check when I get > back behind a console. > > N. > Just a thought. Have you thought about switching to eudev? That would solve some udev issues. Since you are running a hardened profile and servers, may not be a option tho. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words! ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 18:15 ` Dale @ 2013-03-28 18:27 ` Nick Khamis 2013-03-28 19:05 ` Dale 2013-03-30 14:39 ` eudev - is it a viable *long-term* option? - WAS: " Tanstaafl 1 sibling, 1 reply; 23+ messages in thread From: Nick Khamis @ 2013-03-28 18:27 UTC (permalink / raw To: gentoo-user Yeah these guys seem to think that our servers MUST run on the hardened profile... On 3/28/13, Dale <rdalek1967@gmail.com> wrote: > Nick Khamis wrote: >> Hahahah udev hell!! I did go through that updating from 2.6 to 3.4. >> That was quite an experience!!!! But for kernel 3.* has udev not been >> phased out in our gentoo boxes? Will have to double check when I get >> back behind a console. >> >> N. >> > > Just a thought. Have you thought about switching to eudev? That would > solve some udev issues. Since you are running a hardened profile and > servers, may not be a option tho. > > Dale > > :-) :-) > > -- > I am only responsible for what I said ... Not for what you understood or how > you interpreted my words! > > > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 18:27 ` Nick Khamis @ 2013-03-28 19:05 ` Dale 0 siblings, 0 replies; 23+ messages in thread From: Dale @ 2013-03-28 19:05 UTC (permalink / raw To: gentoo-user Nick Khamis wrote: > Yeah these guys seem to think that our servers MUST run on the > hardened profile... > > I just wanted to mention it in case its existence had slipped your mind. I know when the time came, I switched from udev to eudev and it has worked fine for my desktop. I plug in cameras, USB sticks, printers and other goodies which is likely something you don't do on a server. After reading about all the troubles others have had, I'm glad I switched. My network still has the same name and all too. Still crossing fingers tho. I just wasn't sure how compatible eudev would be with a hardened profile is all. Best of luck with the upgrade tho. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words! ^ permalink raw reply [flat|nested] 23+ messages in thread
* eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-28 18:15 ` Dale 2013-03-28 18:27 ` Nick Khamis @ 2013-03-30 14:39 ` Tanstaafl 2013-03-30 14:47 ` Tanstaafl 1 sibling, 1 reply; 23+ messages in thread From: Tanstaafl @ 2013-03-30 14:39 UTC (permalink / raw To: gentoo-user On 2013-03-28 2:15 PM, Dale <rdalek1967@gmail.com> wrote: > Just a thought. Have you thought about switching to eudev? That would > solve some udev issues. Since you are running a hardened profile and > servers, may not be a option tho. I'm curious... Is eudev still being 'maintained'? Does it still have any advantages over the new udev? I'm mostly concerned about getting so far behind that I end up in an untenable situation... ie, eudev dies in 1+ years, and the changes between now and then make it virtually to update to whatever is the new way... ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-30 14:39 ` eudev - is it a viable *long-term* option? - WAS: " Tanstaafl @ 2013-03-30 14:47 ` Tanstaafl 2013-03-30 16:42 ` Dale 2013-03-30 17:41 ` Pandu Poluan 0 siblings, 2 replies; 23+ messages in thread From: Tanstaafl @ 2013-03-30 14:47 UTC (permalink / raw To: gentoo-user I should have added that this is for a server (not hardened), so I don't care about hot plug this or that, I just care about stability and reliability with respect to updates not breaking booting capability... On 2013-03-30 10:39 AM, Tanstaafl <tanstaafl@libertytrek.org> wrote: > On 2013-03-28 2:15 PM, Dale <rdalek1967@gmail.com> wrote: >> Just a thought. Have you thought about switching to eudev? That would >> solve some udev issues. Since you are running a hardened profile and >> servers, may not be a option tho. > > I'm curious... > > Is eudev still being 'maintained'? Does it still have any advantages > over the new udev? > > I'm mostly concerned about getting so far behind that I end up in an > untenable situation... ie, eudev dies in 1+ years, and the changes > between now and then make it virtually to update to whatever is the new > way... > ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-30 14:47 ` Tanstaafl @ 2013-03-30 16:42 ` Dale 2013-03-30 17:41 ` Pandu Poluan 1 sibling, 0 replies; 23+ messages in thread From: Dale @ 2013-03-30 16:42 UTC (permalink / raw To: gentoo-user Tanstaafl wrote: > I should have added that this is for a server (not hardened), so I > don't care about hot plug this or that, I just care about stability > and reliability with respect to updates not breaking booting > capability... > > As far as I know, it is actively maintained. Do I see the people banging hammers, no. lol I did have a update on eudev tho: Sun Feb 10 20:07:23 2013 >>> sys-fs/eudev-1_beta2-r2 merge time: 55 seconds. This is from the changelog for eudev: 10 Mar 2013; Anthony G. Basile <blueness@gentoo.org> eudev-9999.ebuild: Remove hacky export ac_cv_path_GPERF=true since the check is merged upstream 10 Mar 2013; Anthony G. Basile <blueness@gentoo.org> eudev-9999.ebuild: Depend on gperf only if USE=keymap, bug #452760 20 Feb 2013; Anthony G. Basile <blueness@gentoo.org> files/40-gentoo.rules: Sync 40-gentoo.rules with sys-fs/udev, bug #457868 *eudev-1_beta2-r2 (10 Feb 2013) 10 Feb 2013; Anthony G. Basile <blueness@gentoo.org> +eudev-1_beta2-r2.ebuild, -eudev-1_beta2-r1.ebuild: Rev bump to push out root fix, bug #456384 09 Feb 2013; Luca Barbato <lu_zero@gentoo.org> eudev-1_beta2-r1.ebuild, eudev-9999.ebuild, +files/eudev-hwdb-offset-root.patch: Update eudev ebuilds to support ROOT properly It seems the latest change was March 10 which was not long ago. As I mentioned earlier, I have plugged in USB sticks, cameras, printers and such pretty regular. The eudev fork has worked fine for me. Servers seem to worry less about *new stuff* since they usually run with what they have at boot time anyway. Heck, mdev may would work fine for you too. It seems based on reading the -dev list that udev is about to introduce some more changes. I'm hoping those don't affect me either. I just noticed that someone else on this list has ran into the news message for it too and has questions already. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words! ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-30 14:47 ` Tanstaafl 2013-03-30 16:42 ` Dale @ 2013-03-30 17:41 ` Pandu Poluan 2013-03-31 16:55 ` Tanstaafl 1 sibling, 1 reply; 23+ messages in thread From: Pandu Poluan @ 2013-03-30 17:41 UTC (permalink / raw To: gentoo-user [-- Attachment #1: Type: text/plain, Size: 1024 bytes --] On Mar 30, 2013 9:48 PM, "Tanstaafl" <tanstaafl@libertytrek.org> wrote: > > I should have added that this is for a server (not hardened), so I don't care about hot plug this or that, I just care about stability and reliability with respect to updates not breaking booting capability... > > > On 2013-03-30 10:39 AM, Tanstaafl <tanstaafl@libertytrek.org> wrote: >> >> On 2013-03-28 2:15 PM, Dale <rdalek1967@gmail.com> wrote: >>> >>> Just a thought. Have you thought about switching to eudev? That would >>> solve some udev issues. Since you are running a hardened profile and >>> servers, may not be a option tho. >> >> >> I'm curious... >> >> Is eudev still being 'maintained'? Does it still have any advantages >> over the new udev? >> >> I'm mostly concerned about getting so far behind that I end up in an >> untenable situation... ie, eudev dies in 1+ years, and the changes >> between now and then make it virtually to update to whatever is the new >> way... >> > > All my servers use mdev. 'nuff said. Rgds, -- [-- Attachment #2: Type: text/html, Size: 1529 bytes --] ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-30 17:41 ` Pandu Poluan @ 2013-03-31 16:55 ` Tanstaafl 2013-03-31 17:05 ` Dale 0 siblings, 1 reply; 23+ messages in thread From: Tanstaafl @ 2013-03-31 16:55 UTC (permalink / raw To: gentoo-user On 2013-03-30 1:41 PM, Pandu Poluan <pandu@poluan.info> wrote: > All my servers use mdev. > > 'nuff said. I do remember the conversation about mdev... probably should have paid closer attention. Is the conversion fairly simple? Is there an updated how-to, specifically for older udev (171)? Thanks... ^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared! 2013-03-31 16:55 ` Tanstaafl @ 2013-03-31 17:05 ` Dale 0 siblings, 0 replies; 23+ messages in thread From: Dale @ 2013-03-31 17:05 UTC (permalink / raw To: gentoo-user Tanstaafl wrote: > On 2013-03-30 1:41 PM, Pandu Poluan <pandu@poluan.info> wrote: >> All my servers use mdev. >> >> 'nuff said. > > I do remember the conversation about mdev... probably should have paid > closer attention. > > Is the conversion fairly simple? Is there an updated how-to, > specifically for older udev (171)? > > Thanks... > > Try this: https://wiki.gentoo.org/wiki/Mdev That was originally done by Walter and he does subscribe to this list, saw a post not to long ago. If you run into issues, I'm pretty sure he will help if he can. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words! ^ permalink raw reply [flat|nested] 23+ messages in thread
end of thread, other threads:[~2013-03-31 17:05 UTC | newest] Thread overview: 23+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2013-03-28 15:38 [gentoo-user] Updating our live servers. I'm scared! Nick Khamis 2013-03-28 16:04 ` Joshua Murphy 2013-03-28 16:30 ` Nick Khamis 2013-03-28 16:48 ` Michael Orlitzky 2013-03-28 16:56 ` Nick Khamis 2013-03-28 17:08 ` Michael Orlitzky 2013-03-28 17:16 ` Nick Khamis 2013-03-28 17:33 ` Michael Orlitzky 2013-03-28 17:43 ` Nick Khamis 2013-03-28 17:49 ` Michael Orlitzky 2013-03-28 17:58 ` Yuri K. Shatroff 2013-03-28 18:00 ` Nick Khamis 2013-03-28 18:03 ` Nick Khamis 2013-03-28 18:10 ` Nick Khamis 2013-03-28 18:15 ` Dale 2013-03-28 18:27 ` Nick Khamis 2013-03-28 19:05 ` Dale 2013-03-30 14:39 ` eudev - is it a viable *long-term* option? - WAS: " Tanstaafl 2013-03-30 14:47 ` Tanstaafl 2013-03-30 16:42 ` Dale 2013-03-30 17:41 ` Pandu Poluan 2013-03-31 16:55 ` Tanstaafl 2013-03-31 17:05 ` Dale
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox