* [gentoo-user] Updating our live servers. I'm scared!
@ 2013-03-28 15:38 Nick Khamis
2013-03-28 16:04 ` Joshua Murphy
2013-03-28 16:48 ` Michael Orlitzky
0 siblings, 2 replies; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 15:38 UTC (permalink / raw
To: gentoo-user
Hello Everyone,
Just got a ticket assigned to me where we need to update our production servers.
uname -a
Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64
Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux
eselect
[18] hardened/linux/amd64 *
I don't think they have been updated since the initial install and
wanted to get a little feedback on some safe practices and methods
that should be performed before and while doing so.
Thanks in Advance,
Nick.
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 15:38 [gentoo-user] Updating our live servers. I'm scared! Nick Khamis
@ 2013-03-28 16:04 ` Joshua Murphy
2013-03-28 16:30 ` Nick Khamis
2013-03-28 16:48 ` Michael Orlitzky
1 sibling, 1 reply; 23+ messages in thread
From: Joshua Murphy @ 2013-03-28 16:04 UTC (permalink / raw
To: gentoo-user
[-- Attachment #1: Type: text/plain, Size: 1478 bytes --]
On Thu, Mar 28, 2013 at 11:38 AM, Nick Khamis <symack@gmail.com> wrote:
> Hello Everyone,
>
> Just got a ticket assigned to me where we need to update our production
> servers.
>
> uname -a
> Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64
> Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux
>
> eselect
> [18] hardened/linux/amd64 *
>
> I don't think they have been updated since the initial install and
> wanted to get a little feedback on some safe practices and methods
> that should be performed before and while doing so.
>
> Thanks in Advance,
>
> Nick.
>
>
Personally, I would recommend pulling an rsync (databases and such might
cause a hiccup with that) of one of them to a nonessential system and
testing updating there, building packages (assuming matching use flags,
etc, across your systems), documenting the pitfalls you run into as you go.
After you're up to date there, run through and test it again from a base
copy, then test the actual services to ensure changes to them don't hose
your environment's configuration, and once that's good, it then depends
entirely on what failover, or downtime allowances you have available. If
you have no failover to rely on, and can't afford enough downtime to update
the system in place from the packages you've built, clone each off, update,
then migrate the changes that've occured in the time between... time
consuming, and requires a lot of care, but doable.
--
Poison [BLX]
Joshua M. Murphy
[-- Attachment #2: Type: text/html, Size: 1863 bytes --]
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 16:04 ` Joshua Murphy
@ 2013-03-28 16:30 ` Nick Khamis
0 siblings, 0 replies; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 16:30 UTC (permalink / raw
To: gentoo-user
So basically rsync configs and databases first? When issuing updates
to world and so no. What is the safest process/order to sync portage,
and update world? I have seen a number of flags various example use,
and was wondering if someone can give me the safest and equally
effective commands with flags included.
Thanks again,
Nick.
On 3/28/13, Joshua Murphy <poisonbl@gmail.com> wrote:
> On Thu, Mar 28, 2013 at 11:38 AM, Nick Khamis <symack@gmail.com> wrote:
>
>> Hello Everyone,
>>
>> Just got a ticket assigned to me where we need to update our production
>> servers.
>>
>> uname -a
>> Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64
>> Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux
>>
>> eselect
>> [18] hardened/linux/amd64 *
>>
>> I don't think they have been updated since the initial install and
>> wanted to get a little feedback on some safe practices and methods
>> that should be performed before and while doing so.
>>
>> Thanks in Advance,
>>
>> Nick.
>>
>>
> Personally, I would recommend pulling an rsync (databases and such might
> cause a hiccup with that) of one of them to a nonessential system and
> testing updating there, building packages (assuming matching use flags,
> etc, across your systems), documenting the pitfalls you run into as you go.
> After you're up to date there, run through and test it again from a base
> copy, then test the actual services to ensure changes to them don't hose
> your environment's configuration, and once that's good, it then depends
> entirely on what failover, or downtime allowances you have available. If
> you have no failover to rely on, and can't afford enough downtime to update
> the system in place from the packages you've built, clone each off, update,
> then migrate the changes that've occured in the time between... time
> consuming, and requires a lot of care, but doable.
>
> --
> Poison [BLX]
> Joshua M. Murphy
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 15:38 [gentoo-user] Updating our live servers. I'm scared! Nick Khamis
2013-03-28 16:04 ` Joshua Murphy
@ 2013-03-28 16:48 ` Michael Orlitzky
2013-03-28 16:56 ` Nick Khamis
1 sibling, 1 reply; 23+ messages in thread
From: Michael Orlitzky @ 2013-03-28 16:48 UTC (permalink / raw
To: gentoo-user
On 03/28/2013 11:38 AM, Nick Khamis wrote:
> Hello Everyone,
>
> Just got a ticket assigned to me where we need to update our production servers.
>
> uname -a
> Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64
> Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux
>
> eselect
> [18] hardened/linux/amd64 *
>
> I don't think they have been updated since the initial install and
> wanted to get a little feedback on some safe practices and methods
> that should be performed before and while doing so.
This isn't that old, you'll be fine. First run an emerge --sync to
update the tree. Then list everything it wants to upgrade:
emerge -puDN1 world
Once you have that list, go through a few at a time, updating
non-essential packages. For example,
emerge -u1 timezone-data man-pages ...
Every once in a while, run a revdep-rebuild. If you have service
monitoring (e.g. Nagios), great, it'll alert you if something breaks. If
not, you'll have to test the services yourself every few packages. And
don't forget to open a counter-ticket for someone to implement a
monitoring solution, already.
After a while, only important packages (apache, mysql, postfix...) will
be left. Do those one at a time, and restart the services afterwards.
Read the release notes first. Run revdep-rebuild. Check that the
services work.
Finally, you'll be left with the guaranteed-to-break updates like grub2
(50/50) and udev (100% you're fucked prepare for downtime). Grub2 can of
course be skipped until the hardware dies. Best of luck to you with udev =)
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 16:48 ` Michael Orlitzky
@ 2013-03-28 16:56 ` Nick Khamis
2013-03-28 17:08 ` Michael Orlitzky
2013-03-28 18:15 ` Dale
0 siblings, 2 replies; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 16:56 UTC (permalink / raw
To: gentoo-user
Hahahah udev hell!! I did go through that updating from 2.6 to 3.4.
That was quite an experience!!!! But for kernel 3.* has udev not been
phased out in our gentoo boxes? Will have to double check when I get
back behind a console.
N.
On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote:
> On 03/28/2013 11:38 AM, Nick Khamis wrote:
>> Hello Everyone,
>>
>> Just got a ticket assigned to me where we need to update our production
>> servers.
>>
>> uname -a
>> Linux noun 3.4.9-gentoo #2 SMP Sat Oct 13 09:35:07 EDT 2012 x86_64
>> Intel(R) Xeon(TM) CPU 3.60GHz GenuineIntel GNU/Linux
>>
>> eselect
>> [18] hardened/linux/amd64 *
>>
>> I don't think they have been updated since the initial install and
>> wanted to get a little feedback on some safe practices and methods
>> that should be performed before and while doing so.
>
> This isn't that old, you'll be fine. First run an emerge --sync to
> update the tree. Then list everything it wants to upgrade:
>
> emerge -puDN1 world
>
> Once you have that list, go through a few at a time, updating
> non-essential packages. For example,
>
> emerge -u1 timezone-data man-pages ...
>
> Every once in a while, run a revdep-rebuild. If you have service
> monitoring (e.g. Nagios), great, it'll alert you if something breaks. If
> not, you'll have to test the services yourself every few packages. And
> don't forget to open a counter-ticket for someone to implement a
> monitoring solution, already.
>
> After a while, only important packages (apache, mysql, postfix...) will
> be left. Do those one at a time, and restart the services afterwards.
> Read the release notes first. Run revdep-rebuild. Check that the
> services work.
>
> Finally, you'll be left with the guaranteed-to-break updates like grub2
> (50/50) and udev (100% you're fucked prepare for downtime). Grub2 can of
> course be skipped until the hardware dies. Best of luck to you with udev =)
>
>
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 16:56 ` Nick Khamis
@ 2013-03-28 17:08 ` Michael Orlitzky
2013-03-28 17:16 ` Nick Khamis
2013-03-28 18:15 ` Dale
1 sibling, 1 reply; 23+ messages in thread
From: Michael Orlitzky @ 2013-03-28 17:08 UTC (permalink / raw
To: gentoo-user
On 03/28/2013 12:56 PM, Nick Khamis wrote:
> Hahahah udev hell!! I did go through that updating from 2.6 to 3.4.
> That was quite an experience!!!! But for kernel 3.* has udev not been
> phased out in our gentoo boxes? Will have to double check when I get
> back behind a console.
>
I'm afraid not! Once you sync, you can do,
eselect news read 23
to see the news item that was posted about it (title:
2013-01-23-udev-upgrade). Even that doesn't contain all of the
information.. some of it is spread throughout bugs and across mailing
list discussions.
Oh and they decided to rename your NICs to owiu23awds89, which stands
for,
actually-nobody-knows-welcome24-to16-hell9-slot12-moon-phase-36-hey-if-you-enjoyed-this-give-systemd-a-try,
or something like that. It's all explained very poorly in the cited links.
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 17:08 ` Michael Orlitzky
@ 2013-03-28 17:16 ` Nick Khamis
2013-03-28 17:33 ` Michael Orlitzky
0 siblings, 1 reply; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 17:16 UTC (permalink / raw
To: gentoo-user
So basically, no long weekend for me here in Canada. Thanks a lot guys
for your time.Wish me luck. Happy easter/holidays!!!
N.
On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote:
> On 03/28/2013 12:56 PM, Nick Khamis wrote:
>> Hahahah udev hell!! I did go through that updating from 2.6 to 3.4.
>> That was quite an experience!!!! But for kernel 3.* has udev not been
>> phased out in our gentoo boxes? Will have to double check when I get
>> back behind a console.
>>
>
> I'm afraid not! Once you sync, you can do,
>
> eselect news read 23
>
> to see the news item that was posted about it (title:
> 2013-01-23-udev-upgrade). Even that doesn't contain all of the
> information.. some of it is spread throughout bugs and across mailing
> list discussions.
>
> Oh and they decided to rename your NICs to owiu23awds89, which stands
> for,
> actually-nobody-knows-welcome24-to16-hell9-slot12-moon-phase-36-hey-if-you-enjoyed-this-give-systemd-a-try,
> or something like that. It's all explained very poorly in the cited links.
>
>
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 17:16 ` Nick Khamis
@ 2013-03-28 17:33 ` Michael Orlitzky
2013-03-28 17:43 ` Nick Khamis
0 siblings, 1 reply; 23+ messages in thread
From: Michael Orlitzky @ 2013-03-28 17:33 UTC (permalink / raw
To: gentoo-user
On 03/28/2013 01:16 PM, Nick Khamis wrote:
> So basically, no long weekend for me here in Canada. Thanks a lot guys
> for your time.Wish me luck. Happy easter/holidays!!!
>
I'm being a bit dramatic. I would plan on spending ~4 hours researching,
planning, and documenting the udev upgrade. Maybe an hour to execute it
in the middle of the night, physically present. You can expect around 15
minutes downtime if all goes well.
The rest of the updates you can do at your leisure, although the
critical services should be restarted and checked during off-hours.
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 17:33 ` Michael Orlitzky
@ 2013-03-28 17:43 ` Nick Khamis
2013-03-28 17:49 ` Michael Orlitzky
0 siblings, 1 reply; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 17:43 UTC (permalink / raw
To: gentoo-user
First hickup
emerge -puDN1 world
!!! Unable to parse profile: '/etc/portage/make.profile'
!!! ParseError: Profile contains unsupported EAPI '5':
'/usr/portage/profiles/eapi-5-files/eapi'
!!! Your current profile is invalid. If you have just changed your profile
!!! configuration, you should revert back to the previous configuration.
!!! Allowed actions are limited to --help, --info, --search, --sync, and
We were always running hardened. Never changed the profile.
N.
On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote:
> On 03/28/2013 01:16 PM, Nick Khamis wrote:
>> So basically, no long weekend for me here in Canada. Thanks a lot guys
>> for your time.Wish me luck. Happy easter/holidays!!!
>>
>
> I'm being a bit dramatic. I would plan on spending ~4 hours researching,
> planning, and documenting the udev upgrade. Maybe an hour to execute it
> in the middle of the night, physically present. You can expect around 15
> minutes downtime if all goes well.
>
> The rest of the updates you can do at your leisure, although the
> critical services should be restarted and checked during off-hours.
>
>
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 17:43 ` Nick Khamis
@ 2013-03-28 17:49 ` Michael Orlitzky
2013-03-28 17:58 ` Yuri K. Shatroff
2013-03-28 18:00 ` Nick Khamis
0 siblings, 2 replies; 23+ messages in thread
From: Michael Orlitzky @ 2013-03-28 17:49 UTC (permalink / raw
To: gentoo-user
On 03/28/2013 01:43 PM, Nick Khamis wrote:
> First hickup
>
> emerge -puDN1 world
> !!! Unable to parse profile: '/etc/portage/make.profile'
> !!! ParseError: Profile contains unsupported EAPI '5':
> '/usr/portage/profiles/eapi-5-files/eapi'
> !!! Your current profile is invalid. If you have just changed your profile
> !!! configuration, you should revert back to the previous configuration.
> !!! Allowed actions are limited to --help, --info, --search, --sync, and
>
>
> We were always running hardened. Never changed the profile.
>
Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do
to fix it us update portage to the current stable version, which
supports EAPI5. Can you switch to another profile temporarily and get
portage updated?
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 17:49 ` Michael Orlitzky
@ 2013-03-28 17:58 ` Yuri K. Shatroff
2013-03-28 18:00 ` Nick Khamis
1 sibling, 0 replies; 23+ messages in thread
From: Yuri K. Shatroff @ 2013-03-28 17:58 UTC (permalink / raw
To: gentoo-user
On 28.03.2013 21:49, Michael Orlitzky wrote:
> On 03/28/2013 01:43 PM, Nick Khamis wrote:
>> First hickup
>>
>> emerge -puDN1 world
>> !!! Unable to parse profile: '/etc/portage/make.profile'
>> !!! ParseError: Profile contains unsupported EAPI '5':
>> '/usr/portage/profiles/eapi-5-files/eapi'
>> !!! Your current profile is invalid. If you have just changed your profile
>> !!! configuration, you should revert back to the previous configuration.
>> !!! Allowed actions are limited to --help, --info, --search, --sync, and
>>
>>
>> We were always running hardened. Never changed the profile.
>>
>
> Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do
> to fix it us update portage to the current stable version, which
> supports EAPI5. Can you switch to another profile temporarily and get
> portage updated?
I guess this is related to the recent profile upgrade (as of 2013-02-10).
In my
$ eselect news list
I get the last news item related to this upgrade.
As it states,
"Everyone should upgrade as soon as possible (but please make sure
sys-apps/portage is updated to current stable *before* you switch
profile)..... this formally requires a new profile tree with EAPI=5."
So, read the news item, emerge portage, then
# eselect profile
and you're done.
--
Best wishes,
Yuri K. Shatroff
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 17:49 ` Michael Orlitzky
2013-03-28 17:58 ` Yuri K. Shatroff
@ 2013-03-28 18:00 ` Nick Khamis
2013-03-28 18:03 ` Nick Khamis
1 sibling, 1 reply; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 18:00 UTC (permalink / raw
To: gentoo-user
I switched to the default profile from hardened:
eselect profile list
Available profile symlink targets:
[1] default/linux/x86/13.0 *
env-update
!!! Unable to parse profile: '/etc/portage/make.profile'
!!! ParseError: Profile contains unsupported EAPI '5':
'/usr/portage/profiles/default/linux/x86/13.0/eapi'
>>> Regenerating /etc/ld.so.cache...
And still can't update portage.
N.
On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote:
> On 03/28/2013 01:43 PM, Nick Khamis wrote:
>> First hickup
>>
>> emerge -puDN1 world
>> !!! Unable to parse profile: '/etc/portage/make.profile'
>> !!! ParseError: Profile contains unsupported EAPI '5':
>> '/usr/portage/profiles/eapi-5-files/eapi'
>> !!! Your current profile is invalid. If you have just changed your
>> profile
>> !!! configuration, you should revert back to the previous configuration.
>> !!! Allowed actions are limited to --help, --info, --search, --sync, and
>>
>>
>> We were always running hardened. Never changed the profile.
>>
>
> Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do
> to fix it us update portage to the current stable version, which
> supports EAPI5. Can you switch to another profile temporarily and get
> portage updated?
>
>
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 18:00 ` Nick Khamis
@ 2013-03-28 18:03 ` Nick Khamis
2013-03-28 18:10 ` Nick Khamis
0 siblings, 1 reply; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 18:03 UTC (permalink / raw
To: gentoo-user
But we never changed our profile? Always running hardened server.
N.
On 3/28/13, Nick Khamis <symack@gmail.com> wrote:
> I switched to the default profile from hardened:
>
> eselect profile list
> Available profile symlink targets:
> [1] default/linux/x86/13.0 *
>
> env-update
> !!! Unable to parse profile: '/etc/portage/make.profile'
> !!! ParseError: Profile contains unsupported EAPI '5':
> '/usr/portage/profiles/default/linux/x86/13.0/eapi'
>>>> Regenerating /etc/ld.so.cache...
>
> And still can't update portage.
>
> N.
>
> On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote:
>> On 03/28/2013 01:43 PM, Nick Khamis wrote:
>>> First hickup
>>>
>>> emerge -puDN1 world
>>> !!! Unable to parse profile: '/etc/portage/make.profile'
>>> !!! ParseError: Profile contains unsupported EAPI '5':
>>> '/usr/portage/profiles/eapi-5-files/eapi'
>>> !!! Your current profile is invalid. If you have just changed your
>>> profile
>>> !!! configuration, you should revert back to the previous configuration.
>>> !!! Allowed actions are limited to --help, --info, --search, --sync, and
>>>
>>>
>>> We were always running hardened. Never changed the profile.
>>>
>>
>> Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do
>> to fix it us update portage to the current stable version, which
>> supports EAPI5. Can you switch to another profile temporarily and get
>> portage updated?
>>
>>
>>
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 18:03 ` Nick Khamis
@ 2013-03-28 18:10 ` Nick Khamis
0 siblings, 0 replies; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 18:10 UTC (permalink / raw
To: gentoo-user
As mentioned earlier a temporary change of profile got me on my way
eselect profile set 0
env-update
eselect profile set 7
Moving forward... Thanks guys.
On 3/28/13, Nick Khamis <symack@gmail.com> wrote:
> But we never changed our profile? Always running hardened server.
>
> N.
>
> On 3/28/13, Nick Khamis <symack@gmail.com> wrote:
>> I switched to the default profile from hardened:
>>
>> eselect profile list
>> Available profile symlink targets:
>> [1] default/linux/x86/13.0 *
>>
>> env-update
>> !!! Unable to parse profile: '/etc/portage/make.profile'
>> !!! ParseError: Profile contains unsupported EAPI '5':
>> '/usr/portage/profiles/default/linux/x86/13.0/eapi'
>>>>> Regenerating /etc/ld.so.cache...
>>
>> And still can't update portage.
>>
>> N.
>>
>> On 3/28/13, Michael Orlitzky <michael@orlitzky.com> wrote:
>>> On 03/28/2013 01:43 PM, Nick Khamis wrote:
>>>> First hickup
>>>>
>>>> emerge -puDN1 world
>>>> !!! Unable to parse profile: '/etc/portage/make.profile'
>>>> !!! ParseError: Profile contains unsupported EAPI '5':
>>>> '/usr/portage/profiles/eapi-5-files/eapi'
>>>> !!! Your current profile is invalid. If you have just changed your
>>>> profile
>>>> !!! configuration, you should revert back to the previous
>>>> configuration.
>>>> !!! Allowed actions are limited to --help, --info, --search, --sync,
>>>> and
>>>>
>>>>
>>>> We were always running hardened. Never changed the profile.
>>>>
>>>
>>> Hmm.. this is probably /someone's/ bug. Nevertheless, all you have to do
>>> to fix it us update portage to the current stable version, which
>>> supports EAPI5. Can you switch to another profile temporarily and get
>>> portage updated?
>>>
>>>
>>>
>>
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 16:56 ` Nick Khamis
2013-03-28 17:08 ` Michael Orlitzky
@ 2013-03-28 18:15 ` Dale
2013-03-28 18:27 ` Nick Khamis
2013-03-30 14:39 ` eudev - is it a viable *long-term* option? - WAS: " Tanstaafl
1 sibling, 2 replies; 23+ messages in thread
From: Dale @ 2013-03-28 18:15 UTC (permalink / raw
To: gentoo-user
Nick Khamis wrote:
> Hahahah udev hell!! I did go through that updating from 2.6 to 3.4.
> That was quite an experience!!!! But for kernel 3.* has udev not been
> phased out in our gentoo boxes? Will have to double check when I get
> back behind a console.
>
> N.
>
Just a thought. Have you thought about switching to eudev? That would
solve some udev issues. Since you are running a hardened profile and
servers, may not be a option tho.
Dale
:-) :-)
--
I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 18:15 ` Dale
@ 2013-03-28 18:27 ` Nick Khamis
2013-03-28 19:05 ` Dale
2013-03-30 14:39 ` eudev - is it a viable *long-term* option? - WAS: " Tanstaafl
1 sibling, 1 reply; 23+ messages in thread
From: Nick Khamis @ 2013-03-28 18:27 UTC (permalink / raw
To: gentoo-user
Yeah these guys seem to think that our servers MUST run on the
hardened profile...
On 3/28/13, Dale <rdalek1967@gmail.com> wrote:
> Nick Khamis wrote:
>> Hahahah udev hell!! I did go through that updating from 2.6 to 3.4.
>> That was quite an experience!!!! But for kernel 3.* has udev not been
>> phased out in our gentoo boxes? Will have to double check when I get
>> back behind a console.
>>
>> N.
>>
>
> Just a thought. Have you thought about switching to eudev? That would
> solve some udev issues. Since you are running a hardened profile and
> servers, may not be a option tho.
>
> Dale
>
> :-) :-)
>
> --
> I am only responsible for what I said ... Not for what you understood or how
> you interpreted my words!
>
>
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 18:27 ` Nick Khamis
@ 2013-03-28 19:05 ` Dale
0 siblings, 0 replies; 23+ messages in thread
From: Dale @ 2013-03-28 19:05 UTC (permalink / raw
To: gentoo-user
Nick Khamis wrote:
> Yeah these guys seem to think that our servers MUST run on the
> hardened profile...
>
>
I just wanted to mention it in case its existence had slipped your
mind. I know when the time came, I switched from udev to eudev and it
has worked fine for my desktop. I plug in cameras, USB sticks, printers
and other goodies which is likely something you don't do on a server.
After reading about all the troubles others have had, I'm glad I
switched. My network still has the same name and all too. Still
crossing fingers tho.
I just wasn't sure how compatible eudev would be with a hardened profile
is all.
Best of luck with the upgrade tho.
Dale
:-) :-)
--
I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
^ permalink raw reply [flat|nested] 23+ messages in thread
* eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-28 18:15 ` Dale
2013-03-28 18:27 ` Nick Khamis
@ 2013-03-30 14:39 ` Tanstaafl
2013-03-30 14:47 ` Tanstaafl
1 sibling, 1 reply; 23+ messages in thread
From: Tanstaafl @ 2013-03-30 14:39 UTC (permalink / raw
To: gentoo-user
On 2013-03-28 2:15 PM, Dale <rdalek1967@gmail.com> wrote:
> Just a thought. Have you thought about switching to eudev? That would
> solve some udev issues. Since you are running a hardened profile and
> servers, may not be a option tho.
I'm curious...
Is eudev still being 'maintained'? Does it still have any advantages
over the new udev?
I'm mostly concerned about getting so far behind that I end up in an
untenable situation... ie, eudev dies in 1+ years, and the changes
between now and then make it virtually to update to whatever is the new
way...
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-30 14:39 ` eudev - is it a viable *long-term* option? - WAS: " Tanstaafl
@ 2013-03-30 14:47 ` Tanstaafl
2013-03-30 16:42 ` Dale
2013-03-30 17:41 ` Pandu Poluan
0 siblings, 2 replies; 23+ messages in thread
From: Tanstaafl @ 2013-03-30 14:47 UTC (permalink / raw
To: gentoo-user
I should have added that this is for a server (not hardened), so I don't
care about hot plug this or that, I just care about stability and
reliability with respect to updates not breaking booting capability...
On 2013-03-30 10:39 AM, Tanstaafl <tanstaafl@libertytrek.org> wrote:
> On 2013-03-28 2:15 PM, Dale <rdalek1967@gmail.com> wrote:
>> Just a thought. Have you thought about switching to eudev? That would
>> solve some udev issues. Since you are running a hardened profile and
>> servers, may not be a option tho.
>
> I'm curious...
>
> Is eudev still being 'maintained'? Does it still have any advantages
> over the new udev?
>
> I'm mostly concerned about getting so far behind that I end up in an
> untenable situation... ie, eudev dies in 1+ years, and the changes
> between now and then make it virtually to update to whatever is the new
> way...
>
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-30 14:47 ` Tanstaafl
@ 2013-03-30 16:42 ` Dale
2013-03-30 17:41 ` Pandu Poluan
1 sibling, 0 replies; 23+ messages in thread
From: Dale @ 2013-03-30 16:42 UTC (permalink / raw
To: gentoo-user
Tanstaafl wrote:
> I should have added that this is for a server (not hardened), so I
> don't care about hot plug this or that, I just care about stability
> and reliability with respect to updates not breaking booting
> capability...
>
>
As far as I know, it is actively maintained. Do I see the people
banging hammers, no. lol I did have a update on eudev tho:
Sun Feb 10 20:07:23 2013 >>> sys-fs/eudev-1_beta2-r2
merge time: 55 seconds.
This is from the changelog for eudev:
10 Mar 2013; Anthony G. Basile <blueness@gentoo.org> eudev-9999.ebuild:
Remove hacky export ac_cv_path_GPERF=true since the check is merged
upstream
10 Mar 2013; Anthony G. Basile <blueness@gentoo.org> eudev-9999.ebuild:
Depend on gperf only if USE=keymap, bug #452760
20 Feb 2013; Anthony G. Basile <blueness@gentoo.org>
files/40-gentoo.rules:
Sync 40-gentoo.rules with sys-fs/udev, bug #457868
*eudev-1_beta2-r2 (10 Feb 2013)
10 Feb 2013; Anthony G. Basile <blueness@gentoo.org>
+eudev-1_beta2-r2.ebuild,
-eudev-1_beta2-r1.ebuild:
Rev bump to push out root fix, bug #456384
09 Feb 2013; Luca Barbato <lu_zero@gentoo.org> eudev-1_beta2-r1.ebuild,
eudev-9999.ebuild, +files/eudev-hwdb-offset-root.patch:
Update eudev ebuilds to support ROOT properly
It seems the latest change was March 10 which was not long ago. As I
mentioned earlier, I have plugged in USB sticks, cameras, printers and
such pretty regular. The eudev fork has worked fine for me. Servers
seem to worry less about *new stuff* since they usually run with what
they have at boot time anyway. Heck, mdev may would work fine for you
too.
It seems based on reading the -dev list that udev is about to introduce
some more changes. I'm hoping those don't affect me either. I just
noticed that someone else on this list has ran into the news message for
it too and has questions already.
Dale
:-) :-)
--
I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-30 14:47 ` Tanstaafl
2013-03-30 16:42 ` Dale
@ 2013-03-30 17:41 ` Pandu Poluan
2013-03-31 16:55 ` Tanstaafl
1 sibling, 1 reply; 23+ messages in thread
From: Pandu Poluan @ 2013-03-30 17:41 UTC (permalink / raw
To: gentoo-user
[-- Attachment #1: Type: text/plain, Size: 1024 bytes --]
On Mar 30, 2013 9:48 PM, "Tanstaafl" <tanstaafl@libertytrek.org> wrote:
>
> I should have added that this is for a server (not hardened), so I don't
care about hot plug this or that, I just care about stability and
reliability with respect to updates not breaking booting capability...
>
>
> On 2013-03-30 10:39 AM, Tanstaafl <tanstaafl@libertytrek.org> wrote:
>>
>> On 2013-03-28 2:15 PM, Dale <rdalek1967@gmail.com> wrote:
>>>
>>> Just a thought. Have you thought about switching to eudev? That would
>>> solve some udev issues. Since you are running a hardened profile and
>>> servers, may not be a option tho.
>>
>>
>> I'm curious...
>>
>> Is eudev still being 'maintained'? Does it still have any advantages
>> over the new udev?
>>
>> I'm mostly concerned about getting so far behind that I end up in an
>> untenable situation... ie, eudev dies in 1+ years, and the changes
>> between now and then make it virtually to update to whatever is the new
>> way...
>>
>
>
All my servers use mdev.
'nuff said.
Rgds,
--
[-- Attachment #2: Type: text/html, Size: 1529 bytes --]
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-30 17:41 ` Pandu Poluan
@ 2013-03-31 16:55 ` Tanstaafl
2013-03-31 17:05 ` Dale
0 siblings, 1 reply; 23+ messages in thread
From: Tanstaafl @ 2013-03-31 16:55 UTC (permalink / raw
To: gentoo-user
On 2013-03-30 1:41 PM, Pandu Poluan <pandu@poluan.info> wrote:
> All my servers use mdev.
>
> 'nuff said.
I do remember the conversation about mdev... probably should have paid
closer attention.
Is the conversion fairly simple? Is there an updated how-to,
specifically for older udev (171)?
Thanks...
^ permalink raw reply [flat|nested] 23+ messages in thread
* Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!
2013-03-31 16:55 ` Tanstaafl
@ 2013-03-31 17:05 ` Dale
0 siblings, 0 replies; 23+ messages in thread
From: Dale @ 2013-03-31 17:05 UTC (permalink / raw
To: gentoo-user
Tanstaafl wrote:
> On 2013-03-30 1:41 PM, Pandu Poluan <pandu@poluan.info> wrote:
>> All my servers use mdev.
>>
>> 'nuff said.
>
> I do remember the conversation about mdev... probably should have paid
> closer attention.
>
> Is the conversion fairly simple? Is there an updated how-to,
> specifically for older udev (171)?
>
> Thanks...
>
>
Try this:
https://wiki.gentoo.org/wiki/Mdev
That was originally done by Walter and he does subscribe to this list,
saw a post not to long ago. If you run into issues, I'm pretty sure he
will help if he can.
Dale
:-) :-)
--
I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
^ permalink raw reply [flat|nested] 23+ messages in thread
end of thread, other threads:[~2013-03-31 17:05 UTC | newest]
Thread overview: 23+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-03-28 15:38 [gentoo-user] Updating our live servers. I'm scared! Nick Khamis
2013-03-28 16:04 ` Joshua Murphy
2013-03-28 16:30 ` Nick Khamis
2013-03-28 16:48 ` Michael Orlitzky
2013-03-28 16:56 ` Nick Khamis
2013-03-28 17:08 ` Michael Orlitzky
2013-03-28 17:16 ` Nick Khamis
2013-03-28 17:33 ` Michael Orlitzky
2013-03-28 17:43 ` Nick Khamis
2013-03-28 17:49 ` Michael Orlitzky
2013-03-28 17:58 ` Yuri K. Shatroff
2013-03-28 18:00 ` Nick Khamis
2013-03-28 18:03 ` Nick Khamis
2013-03-28 18:10 ` Nick Khamis
2013-03-28 18:15 ` Dale
2013-03-28 18:27 ` Nick Khamis
2013-03-28 19:05 ` Dale
2013-03-30 14:39 ` eudev - is it a viable *long-term* option? - WAS: " Tanstaafl
2013-03-30 14:47 ` Tanstaafl
2013-03-30 16:42 ` Dale
2013-03-30 17:41 ` Pandu Poluan
2013-03-31 16:55 ` Tanstaafl
2013-03-31 17:05 ` Dale
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox