- WLUG - wlug.mailman3.com

Fedora Next
by dulsi＠identicalsoftware.com 29 Apr '14

29 Apr '14

Recently I decided to try to get my program Bt Builder into Fedora (https://bugzilla.redhat.com/show_bug.cgi?id=1079064) They identified some issues during review which I've fixed. Initially I didn't do the "introdution" email to the devel because I was joining to package my project and eventually maybe some others. I did eventually join the list and send the email. However I've also been reading the Fedora Present and Future articles on the Fedora Magazine site http://fedoramagazine.org/fedora-present-and-future-a-fedora-next-2014-upda… It's left me wondering if I should bother going with sponsorship into Fedora. I can setup a COPR and perhaps move into the distribution via the Playground. Do you Fedora will continue with the current sponsorship model? Will new projects instead come in through the personal repositories of COPR?

1 0

Lightning Talks @ LOPSA-East 2014!
by Evan Pettrey 25 Apr '14

25 Apr '14

LOPSA East 2014 starts in one week! All the talks have been scheduled, all the tutorials and instructors have been book, now all you need to do is show up, right? In http://scottberkun.com/essays/24-how-to-get-the-most-out-of-conferences/ Scott Berkun (author of five books, including _The Year Without Pants_) states: "There is no better way to meet others and access the most interesting and friendly people than participating." The good news is that even this late in the game, there's still a way you you to participate: Lightning Talks! Lightning Talks are a series of five-minute talks (no slides!) where enthusiasm is paramount and almost anything that might be of interest to sysadmins is on-topic. Have an idea for a talk or tutorial for a future conference you want to try out? Give a Lightning Talk. Want to share a cool new trick with your peers? Give a Lightning Talk. Have an idea for a tool and want feedback? Give a Lightning Talk. Want to convince your peers to change how they do their jobs, or quit their jobs, or not to make the same mistake you did, or step away from the keyboard and learn to cook? Give a Lightning Talk. The Lightning Talks session is Saturday, May 3rd, at 3:30 p.m. There's room for at least nine talks, more if people use fewer than their allotted time (five minutes). To sign up for a Lightning Talk, send email to <lightningtalks(a)lopsaeast.org> or contact the Lightning Talks coordinator (Adam Moskowitz) at the conference and sign up in person. Talk slots are on a first-come, first-served basis; there will be a waiting list, and if there's time at the end of the session you can just step up to the microphone without signing up in advance (but don't count on this as all the slots are usually taken). Remember: Five minutes (hard limit), no slides, pretty much any topic. Yes, even cooking -- if you can find a way to tie it to system administration. There's no easier way to actively participate in the conference than to give a Lightning Talk! Best regards, Evan & the rest of the LOPSA-East Committee

1 0

Tripwire vs rpm -V
by Eric Martin 18 Apr '14

18 Apr '14

I have a weird problem with tripwire on at least two of my servers. A run of tripwire --check shows a few tripwire binaries have changed, which since I didn't do it is very suspicious: ------------------------------------------------------------------------------- Rule Name: Tripwire Binaries (/usr/sbin/tripwire) Severity Level: 100 ------------------------------------------------------------------------------- ---------------------------------------- Modified Objects: 1 ---------------------------------------- Modified object name: /usr/sbin/tripwire Property: Expected Observed ------------- ----------- ----------- Object Type Regular File Regular File Device Number 64768 64768 * Inode Number 9698 10390 Mode -rwxr-xr-x -rwxr-xr-x Num Links 1 1 UID root (0) root (0) GID root (0) root (0) Size 1145520 1145520 Modify Time Mon 05 Jul 2010 08:55:49 PM EDT Mon 05 Jul 2010 08:55:49 PM EDT Blocks 2240 2240 * CRC32 XXXXX YYYYY * MD5 XXXXXXXXXXMJedgAef0 XXXXXXXXXXPFRiVSdGoG/q The inode number is fine, it's the CRC32 and MD5 sums that worry me. As per my usual procedure, I then issue rpm -V ${PACKAGE_NAME} to verify the package: [emartin@mx1 ~]$ sudo rpm -V tripwire S.5....T. c /etc/tripwire/twpol.txt I expect twpol.txt to be changed since you update the policy. What is / isn't missing is the glaring alert that tripwire doesn't match the RPM. Also, the MD5 sum in tripwire on one machine doesn't match it on another, and neither do the SHA1 sums as computed from the command line. While I'm pretty good with CentOS, there are a few things that I'm still learning so I'm thinking that I'm missing something here. Can anybody please shed some light on this, especially the differing sha1sums? If these are binaries, shouldn't they have the same sha1um? Also, do I need to blow away this machine and rebuild? TIA, -- Eric Martin

2 2

"Heartbleed" OpenSSL bug in pictures
by Chuck Anderson 12 Apr '14

12 Apr '14

Today's XKCD comic explains in pictures how the "Heartbleed" OpenSSL bug works: http://xkcd.com/1354/

1 0

Mail User Agent: mail (/bin/mail)
by Larry Camilli 11 Apr '14

11 Apr '14

This message has two parts. The first is about the basic mail program. The second (which is more important to me) is about how to avoid having to use the mail program. Part I: The Basic mail program (I'm running CentOS.) I asked last night about the basic mail program - specifically about navigating through the headers. Chuck looked up some documentation and said that the "h+" and "h-" commands should do it. And, somebody came up to me with his laptop and showed the "z" command.) Here's what the help file within mail shows about the "z" command: (Yes. -It says nothing about the z command.) Here's what I found with the h+ and h- commands: When I invoke mail, it displays the headers of 38 unread messages (numbers 1 - 38) and a prompt ("&"). (The terminal window is 132 characters wide by 42 lines long.) If I type h+, it displays the same 38 headers again. (h- gets "Referencing before 1") If I type h7865782365, I get "Invalid message number". If I type h 1-a, I get "Non-numeric second argument". If I type h 1-4, I get the first 38 headers. The program seems to be parsing what follows an "h", but royally screws up acting on what it finds. If I type "39", I get message 39. (There doesn't seem to be a "LAST" command to see the last message - and find out its number. So, typing, say, 100, gets an error because there's no such message.) Anyway, after viewing message 39, if I THEN type h, it shows headers for messages 39 - 51. (h+ shows the same headers, 39 - 51.) But, h- now shows the first 38. (That makes sense.) But, after using h- to get back to the 1 - 38 list, h+ shows the first 38 messages again. After displaying the first 38 headers, the "z" command DOES cause the next set of headers to be displayed (39 - 51). I figured that, until I figure out how to set things up to forward the logwatch mail to a gmail account, I could tolerate using a separate, basic mail program to check the logs. But, this is crap. People were asking about the guy who screwed up the OpenSSL heartbeat code. What about the guy who wrote this piece of crap? It's very basic stuff that doesn't work. Not too difficult to test... Part II: Getting EMail Forwarded from the Linux System as a Client I have two interests here. One is just academic. -Understanding how to use the mail program, despite (or because of) its suckiness. The other is so I can see the messages that the log scrapers send via /bin/mail to the root account's email. Ideally, I would set things up to have all of root's email get forwarded to, say, a gmail account. But, my setup seems to place some limits on what I can do. I set up an MTA on my VMS box long ago. I used to be able to send email directly from that system. But, it stopped working at some point, and I found that Verizon reports all of the DHCP addresses that they allocate to residential DSL customers as spam sources, so everything was getting blocked. I have written programs (in PHP) that use a PEAR class/API to send email from the Linux box, via a gmail account, to arbitrary addressees. [It requires such information as host (smtp.gmail.com) port (587), username & password for the gmail account...] So, I'm not sure if an MTA is what I really need. Can at MTA be set up to send email as a client of sorts to a real MTA (e.g., google mail)? Or do I need some other type of utility? Sure, I can write my own, but I would hope that somebody else has already done it. (Well, as long as it's not the person who wrote "mail".)

1 0

Sr SW Engineer contract openings - C++, Linux kernel, drivers
by John Spencer 10 Apr '14

10 Apr '14

Our client in Chelmsford, MA has 2-3 contract openings for Sr Software Engineers with a strong background with C++ and low level Linux kernel and drivers experience. These are 6 month contracts. Must be able to interview and work on site as well as pass background check and drug test. Consultants will be responsible for Linux driver and kernel development and board bring up. Any experience with VxWorks is a plus Please feel free to forward this email to your friends and associates If interested, please send a copy of your resume to jspencer (at) connectedsp.com Your resume will not be sent anywhere without your prior approval. Regards, John Spencer Connected Systems Partners Connecting Top Talent with Top Companies Office: 978-455-5550 x208 Cell: 978-621-9743 jspencer(a)connectedsp.com www.connectedsp.com GET CONNECTED! Unless otherwise explicitly instructed by sender, all information in this email is considered confidential and intended for the view and use of the recipient(s) only.

1 0

Simpleton Question
by Colin Novick 09 Apr '14

09 Apr '14

WLUG folk, You guys crunch heavy issues, and I have a cream puff of an issue I just can't crack, and I am not too ashamed to admit it. There is a site with a series of m4v (Quicktime) files I want to be able to at least stream, if not download, but I have two problems. The first is that the site www.worcestercatholictv.com has set the permissions on the files so that they will only play embedded in their webpage, AND they have the files as invisible unless the embedded web page searches for them, and as a result, standalone items like VLC can't touch it, and I can't download it. The second is that the issue seems to be related to my running Ubuntu 12.0.4 LTS, and a buddy is having no issues reportedly in 13.X It makes no difference if it is Chromium of Firefox that tries to playback. Default User Agent Switcher has been installed to see if that was generating a conflict, but that doesn't seem to be it either. Totem 3.0.1 Gecko-mediaplayer 1.0.4 I have searched for similar issues and don't seem to come up with anything. I have scanned help files and that doesn't seem to address this either. At this point, if I had a guess, it is the result of funny permissions on a file that no one is worried about being Linux compatible. Thoughts are most welcome, Colin

3 3

Meeting on Wednesday?
by Tim Keller 08 Apr '14

08 Apr '14

I presume we're having a meeting on Wednesday? Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

4 4

LOPSA-East Keynotes Announced!
by Evan Pettrey 03 Apr '14

03 Apr '14

Hello once again folks, LOPSA-East is proud to announce this year's keynote speakers! Friday evening Keynote: Vish Ishaya, CTO of Nebula Inc. Title: OpenStack in the Datacenter For better or worse, cloud is arriving in the datacenter. The massive growth of OpenStack is paving the way for an onslaught of private clouds. Cloud will be the second datacenter revolution this century. Virtualization changed the way that machines are provisioned and managed, and cloud promises an even more radical set of changes. Come hear Vish discuss the history of OpenStack, cloud versus virtualization, and get guidance for dealing with the specific challenges that cloud creates for system administrators! Bio: Vish Ishaya is Chief Technology Officer of Nebula, Inc. He is a highly prolific developer who was one of the founding engineers of OpenStack. He was elected to the first OpenStack Technical Committee, where he has served consistently since. He was also elected to four consecutive terms as the OpenStack Compute Project Technical Lead and is currently on the board of OpenStack Foundation. In addition to his programming and systems skills, Vish has spent over a decade teaching, most recently classes in object oriented analysis and design. Saturday closing Keynote: Elizabeth Krumbach Joseph Title: Universal Design for Tech: Improving Gender Diversity in our Industry Universal Design is a principle in accessibility thataccessible design makes things better for everyone. A key example of which are curb cuts and door openers which help those who are disabled but also folks with luggage and parents with strollers. Elizabeth will discuss ideas on how to improve gender diversity in our industry, but many of the tips will help everyone beyond improvements that come through diversity. From offering formal education for systems administration to offering flexible schedules and work arrangements, there are many things that can be done to attract much-needed talent. Bio: Elizabeth Krumbach Joseph is an Automation and Tools Engineer at HP working on the OpenStack Infrastructure team. She has been involved with open source communities for over a decade and turned that passion into a profession when she began working as a professional systems administrator in 2006. In addition to her work on OpenStack, she is a member of the Ubuntu Community Council and is a co-author of the upcoming 8th edition of The Official Ubuntu Book. At home, she serves on Board of Directors for Partimus.org, a non-profit in the San Francisco Bay Area providing Linux-based computers to schools in need. LOPSA-East is a regional sysadmin conference in New Brunswick NJ, May 2-3, 2014. Two days of world-class training on a diverse range of topics plus community-selected talks: http://lopsa-east.org/2014/schedule Best, Evan & the rest of the LOPSA-East 2014 Committee http://lopsa-east.org/2014 Register today!

1 0

LOPSA-East Early Bird Deadline Extended!
by William Bilancio 24 Mar '14

24 Mar '14

Great news everybody! We have recieved a number of requests to extend discounted pricing from people either waiting on approval from their boss, or who just didn't get a chance to register beefore today. We've decided to give everybody one final opportunity to register at this greatly discounted rate - Early Bird pricing will be honored through Monday, March 31st. Don't miss this great value - register today! LOPSA-East is a regional sysadmin conference in New Brunswick NJ, May 2-3, 2014. Two days of world-class training on a diverse range of topics plus community-selected talks: http://lopsa-east.org/2014/schedule Best, William, Evan, & the rest of the LOPSA-East 2014 Committee http://lopsa-east.org/2014 Register today!

2 1