Scientific Linux Fermi lts41 i386 September 20,2005 Please send bug reports to dawson@fnal.gov,csieh@fnal.gov Please read the Release Notes for Scientific Linux. It is located at SL.releasenote Also read the Upstream Vendor release notes . They are located in Upstream.vendor.U1.releasenote and the older releasenotes in SL.documentation/ . All of the info in the SL.releasenote is valid unless this document states otherwise. This document only contains info that is specific to the Fermi site. Any reference to SL.releasenote is done to emphasis that it contains important information. ---------------------------------------------------------------------------- This is based on the rebuilding of RPMS out of SRPMS's that form Scientific Linux. Please read this entire document before installing. Table of contents HARDWARE REQUIREMENTS INSTALLATION INFO * ADDED compared to Scientific Linux 4.1 * UPDATED compared to Scientific Linux 4.1 Installer modifications /contrib /docs /notsupported MISC Notes HARDWARE SPECIFIC ISSUES SOFTWARE ISSUES/BUGS SUPPORT INFO vendor ERRATA Each has a "---" line above and below it. _____________________________________________________________________________ HARDWARE REQUIREMENTS _____________________________________________________________________________ - See SL.releasenotes - Common "Fermi Generic Desktop" Installation : 5GB _____________________________________________________________________________ INSTALLATION INFO _____________________________________________________________________________ Installation Locations Via NFS linux.fnal.gov:/export/linux/lts41/i386/ with floppy There is no floppy install as the kernel is too big to fit on a floppy. with cdrom There is a boot.iso which is small iso image which includes all the drivers. After download you can use cdrecord to create a cdr with this image on it. ftp://linux.fnal.gov/linux/lts41/i386/images/Fermi/boot.iso Via CDROM Download and then burn cdrom iso images from ftp://linux.fnal.gov/linux/iso/lts41/i386/ ----------------------------------------------------------------------------- ADDED compared to Scientific Linux 41 i386 ----------------------------------------------------------------------------- Fermi-release Made change so that /etc/issue and /etc/issue.net showed Fermi Linux instead of RedHat. flpr I am installing the flpr rpm by default. I got the latest version from Randy. This does NOT require ups/upd. The flpr binary will reside in /usr/local/bin/ . This should just make using flpr easier for all. flpr-2.4-4f.9x.i386.rpm Java See SL.releasenote Kerberos -- Fermi version * krb5-fermi-config-1.10-1.LTS4.noarch.rpm * krb5-fermi-krb5.conf-1.10-1.LTS4.noarch.rpm * krb5-libs-fermi-1.8a-LTS4.4.i386.rpm * krb5-workstation-fermi-1.8a-LTS4.4.i386.rpm * * The fixes in these new kerberos packages should fix the * kerberos - afs problem. * The configuration rpm's set ignore_afs = true, this get's rid of the * long wait as pam decides what to do. * The libs rpm, which has the /etc/pam.d/z_krb5* scripts, now checks * to see if you have AFS, then if you have a keberos ticket, and if * you do, then it does an aklog -setpag for you. * The end result is a quicker login, with the benifit of cutting down * on afs token stealing if multiple people log in as the same user. krb5-fermi-krb5.conf will ONLY put on a /etc/krb5.conf that points to the fermi domain. If you have krb5-fermi-config you DO NOT need this. This is intended for use with the Redhat provided kerberos. Many offsite users will find this of use. krb5-fermi-config-1.9-4 and later has a seperate script that only adds or removes aklog from your krb5.conf. This script now get's run (via triggers) whenever openafs get's added or removed. Korn shell from ATT ksh93-2000.10.31.0-1.i386.rpm OpenAFS See SL.releasenote Performance Co-Pilot (PCP) config Config file specific for Fermi site. pcp-config-2.3.0-LTS3x.2.i386.rpm *redhat-logos-1.1.25-1.LTS.4.noarch.rpm This version of redhat-logo's has all of the generic changes that were made with Scientific Linux. It has also changed all of the Scientific Linux specific logo's, as well as anything that was in the old zz_fermi-logos upsupdbootstrap * * Not installed by default anymore for "Fermi Generic Desktop". * Other workgroups can decide on installing or not. * Can select during install if needed. * Links from /usr/local/bin are NOT made anymore. * * upsupdbootstrap-4.1-1.i386.rpm * upsupdbootstrap-fnal-4.0-6.i386.rpm * Does a "conflicts with upsupdbootstrap-local" so as * to not let both be installed * Renamed upsupdbootstrap-generic to upsupdbootstrap-fnal * Installs ups/upd to /fnal/ups * upsupdbootstrap-local-4.0-6.i386.rpm * Does a "conflicts with upsupdbootstrap-fnal" so as * to not let both be installed * Installs ups/upd to /local/ups *yum-conf-41-3.LTS.noarch.rpm Modified to give Fermi's rpm's a priority, as well as point to Fermi's linux distribution servers instead of scientific linux's. * Also excludes the generic SL openssh rpm's. *SL_sendmail_accept-1.1-3.noarch.rpm * * Changed so that it now requires sendmail-cf, so that it installs correctly zz_a2ps_stdout-1.0-3.noarch.rpm Change the output of a2ps to go to stdout vs the printer. *zz_dhcp_resolv-3.0.1-2.noarch.rpm This rpm fixes that so that when your network starts, as it checks your resolv.conf, if you have dhcp.fnal.gov, but not fnal.gov it will put it in, so that you will have "search fnal.gov dhcp.fnal.gov" in your /etc/resolv.conf file. zz_emacs_link-1.1-5.noarch.rpm Make a symbolic link from "emacs" to "xemacs" when xemacs is installed and emacs is not installed. This version uses triggers to make or remove the link when emacs, or xemacs is added or removed. zz_firstboot_fix-1.0-1.noarch.rpm Make changes to firstboot. zz_lang_collate-1.0-2.noarch.rpm Changes LANG so that sorting is done the same as 6.1 and earlier. (ABCabc instead of AaBbCc). This is not installed by default for the "Fermi Generic Desktop" workgrouo. Can be added later with a "yum install zz_lang_collate" . *zz_logwatch_df-1.1-2.noarch.rpm * * By default logwatch does a df -h when looking at disk usage. * This can be unwanted if you have alot of NFS mounted disks. * This rpm changes that command to be df -lP -h, which looks at * local disks only, and the output is in the POSIX output format. *zz_ntp_configure-4.2.0-6.noarch.rpm * * Configure ntp for Fermi site network. * Startup script now pokes hole in the firewall for itself * One can manually change the script by editing the file * /etc/sysconfig/ntpd.fermi zz_pine_user_domain-1.0-1.noarch.rpm By default when a user sends mail from pine their email address is myname@mycomputer.fnal.gov. This rpm changes it so that the default is myname@fnal.gov by modifying the /etc/pine.conf config file. Installed by default for "Fermi Generic Desktop" *zz_sendmail_accept-2.0-1.noarch.rpm * * Changes Sendmail config so that it allows incomming mail. * This the same as the SL_sendmail_accept except that the sendmail * startup script pokes holes the firewall for fermilab on startup, i * and closes them on shutdown. One can manually change the script * by editing the file /etc/sysconfig/sendmail.fermi *zz_sendmail_fermi_gateway-2.0-1.noarch.rpm * * This rpm is designed to send outbound sendmail e-mail through * the fermilab e-mail gateway(smtp.fnal.gov). zz_sshd_aklog-1.1-6.noarch.rpm This rpm contains a script that will ensure that you have the correct path to aklog in your sshd_config script. It you do not have AFS installed it comments out the aklog line. This script is 'trigger'able, so that when you update your openssh-server or your afs client, it will re-run to keep the sshd_config file up to date. zz_sshd_nonkerberized-1.0-0.7.noarch.rpm Fermi's openssh is normally kerberized out of the box. This rpm will make it non-kerberized. Should only be used offsite. version 1.0-0.7 fixes the privilege separation user - server start problem. zz_tcp_wrappers_change-3.0-1.noarch.rpm Disable all offsite access to common network services. Also puts in the "DOE required login banners". If it determines that you have already modified /etc/hosts.allow or host.deny it leaves them alone. zz_tex_tweaks-1.0-1.noarch.rpm Changes the default paper size to 8.5 x 11 vs A3 apt-get Scientific Linux Fermi is not aptable. We do NOT provide any config files for this. We only support yum handling the daily "auto update" function. Only YUM is installed by default and ONLY YUM is SUPPORTED at Fermi. Workgroup tag files These are used to specify which workgroup you belong to. Astro-tag-3.0-4.noarch.rpm BooNE-tag-3.0-4.noarch.rpm BooNEDataServer-tag-3.0-5.noarch.rpm BTeV-tag-3.0-5.noarch.rpm BTeVTrigger-tag-3.0-5.noarch.rpm BTeVSimulation-tag-3.0-7.noarch.rpm BTeVWorker-tag-3.0-7.noarch.rpm CDFCAFworker-tag-3.0-4.noarch.rpm CDFlevel3-tag-3.0-4.noarch.rpm CDFoffsite-tag-3.0-4.noarch.rpm CDFonline-tag-3.0-4.noarch.rpm CDF-tag-3.0-4.noarch.rpm ClueD0Workstation-tag-3.0-4.noarch.rpm CMSdesktop-tag-3.0-4.noarch.rpm CMSfarm-tag-3.0-4.noarch.rpm CMSserver-tag-3.0-4.noarch.rpm ConsoleServer-tag-3.0-4.noarch.rpm CPD-tag-3.0-4.noarch.rpm CPDserver-tag-3.0-5.noarch.rpm CSS-tag-3.0-4.noarch.rpm FarmsConsole-tag-3.0-4.noarch.rpm Farms-tag-3.0-4.noarch.rpm FermiStandAlone-tag-3.0-4.noarch.rpm FermiVeryGeneric-tag-3.0-4.noarch.rpm FnaluBatch-tag-3.0-4.noarch.rpm FnaluInteractive-tag-3.0-4.noarch.rpm FOCUS-tag-3.0-4.noarch.rpm GenericFarm-tag-3.0-4.noarch.rpm Minos-tag-3.0-4.noarch.rpm OAA-tag-3.0-4.noarch.rpm RIP-tag-3.0-4.noarch.rpm SDSS-tag-3.0-4.noarch.rpm Sidet-tag-3.0-4.noarch.rpm Theory-tag-3.0-4.noarch.rpm FermiGenericDesktopOffsite-tag-3.0-6.noarch.rpm * D0online-tag-3.0-8.noarch.rpm * EAG-tag-3.0-8.noarch.rpm --------------------------------------------------------------------------- UPDATED compared to 3 ---------------------------------------------------------------------------- *authconfig * * Authconfig needed to be tweeked because it was putting a line into * the /etc/pam.d/system-auth that would not allow you to log into * root or a group account if there was a .k5login file in the accounts * home area. This is the same change that was done in LTS 3.0.x * * authconfig-4.6.10-LTS4x.3.i386.rpm * authconfig-gtk-4.6.10-LTS4x.3.i386.rpm * OpenSSH Fermi version of openssh with kerberos cryptocard changes. If a workgroup wants to install openssh-server then they just need to add the entry from their "comps" file as it is NOT installed by default. openssh-3.5p1f12-1SL4.i386.rpm openssh-askpass-3.5p1f12-1SL4.i386.rpm openssh-askpass-gnome-3.5p1f12-1SL4.i386.rpm openssh-clients-3.5p1f12-1SL4.i386.rpm openssh-server-3.5p1f12-1SL4.i386.rpm *pam_krb5-2.1.2-1.SL.1.i386.rpm * * The kerberos pam module had several bad bugs that were causing problems * when AFS was installed on the system. This addresses those bugs. ---------------------------------------------------------------------------- Installer modifications --------------------------------------------------------------------------- Anaconda (installer) anaconda-10.1.1.13-9SL.i386.rpm anaconda-runtime-10.1.1.13-9SL.i386.rpm Changes to "defaults" from vendor installer. * Firewall is on by default. The zz_sendmail_accept-2.0-1.noarch.rpm * rpm pokes a hole for inbound mail. The zz_ntp_configure-4.2.0-6 rpm * pokes a hole for inbound ntp. US/Central is default timezone. vendor default was New York. Kerberos is on by default with a realm of FNAL.GOV . vendor default was off. --------------------------------------------------------------------------- /contrib/ --------------------------------------------------------------------------- The packages in this section have been contributed by various people. They are presented AS IS and there is no guarantee of them working. These packages are NOT supported by us. They will only get security updates if the contributor provides them. If you have questions about them then ask the contributor. There are really 2 contrib trees. One for the base Scientific Linux and one for this site. To use with yum you will need to uncomment out either/both of the "contrib" lines in /etc/yum.conf See README's in the RPMS/ directorys for specific info. /sites/Fermi/contrib/RPMS/ /contrib/RPMS/ --------------------------------------------------------------------------- LIMITATIONS --------------------------------------------------------------------------- VIA-RHINE ethernet driver loads but does NOT work --------------------------------------------------------------------------- MISC NOTES --------------------------------------------------------------------------- Upgrades from prior versions. UPDATES are only supported via the installer for upgrading from Scientific Linux LTS 3.0.x to Scientific Linux Fermi LTS 41. YUM will NOT work, do not use it. --------------------------------------------------------------------------- SUPPORT INFO --------------------------------------------------------------------------- Fermi site users should start with the "Fermi" specific support areas and use the Scientific Linux next. Scientific LInux Fermi web pages http://www.fnal.gov/cd/unix/linux Fermi Linux Community support mailing list linux-users@fnal.gov Which is archived at http://listserv.fnal.gov/archives/linux-users.html Scientific Linux web page http://www.scientificlinux.org ---------------------------------------------------------------------------- ERRATA released after SL 41 i386 ------------------------------------------------------------------------------ * xorg-x11-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-deprecated-libs-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-deprecated-libs-devel-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-devel-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-doc-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-font-utils-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-libs-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-Mesa-libGL-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-Mesa-libGLU-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-sdk-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-tools-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-twm-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-xauth-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-xdm-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-Xdmx-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-xfs-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-Xnest-6.8.2-1.EL.13.16.i386.rpm * xorg-x11-Xvfb-6.8.2-1.EL.13.16.i386.rpm * firefox-1.0.6-1.4.2.i386.rpm * mozilla-1.7.10-1.4.2.i386.rpm * mozilla-chat-1.7.10-1.4.2.i386.rpm * mozilla-devel-1.7.10-1.4.2.i386.rpm * mozilla-dom-inspector-1.7.10-1.4.2.i386.rpm * mozilla-js-debugger-1.7.10-1.4.2.i386.rpm * mozilla-mail-1.7.10-1.4.2.i386.rpm * mozilla-nspr-1.7.10-1.4.2.i386.rpm * mozilla-nspr-devel-1.7.10-1.4.2.i386.rpm * mozilla-nss-1.7.10-1.4.2.i386.rpm * mozilla-nss-devel-1.7.10-1.4.2.i386.rpm * cvs-1.11.17-8.RHEL4.i386.rpm * exim-4.43-1.RHEL4.5.i386.rpm * exim-doc-4.43-1.RHEL4.5.i386.rpm * exim-mon-4.43-1.RHEL4.5.i386.rpm * exim-sa-4.43-1.RHEL4.5.i386.rpm * httpd-2.0.52-12.2.ent.i386.rpm * httpd-devel-2.0.52-12.2.ent.i386.rpm * httpd-manual-2.0.52-12.2.ent.i386.rpm * httpd-suexec-2.0.52-12.2.ent.i386.rpm * mod_ssl-2.0.52-12.2.ent.i386.rpm * pcre-4.5-3.2.RHEL4.i386.rpm * pcre-devel-4.5-3.2.RHEL4.i386.rpm * evolution-2.0.2-16.3.i386.rpm * evolution-devel-2.0.2-16.3.i386.rpm * netpbm-devel-10.25-2.EL4.1.i386.rpm * netpbm-progs-10.25-2.EL4.1.i386.rpm * php-4.3.9-3.8.i386.rpm * php-devel-4.3.9-3.8.i386.rpm * php-domxml-4.3.9-3.8.i386.rpm * php-gd-4.3.9-3.8.i386.rpm * php-imap-4.3.9-3.8.i386.rpm * php-ldap-4.3.9-3.8.i386.rpm * php-mbstring-4.3.9-3.8.i386.rpm * php-mysql-4.3.9-3.8.i386.rpm * php-ncurses-4.3.9-3.8.i386.rpm * php-odbc-4.3.9-3.8.i386.rpm * php-pear-4.3.9-3.8.i386.rpm * php-pgsql-4.3.9-3.8.i386.rpm * php-snmp-4.3.9-3.8.i386.rpm * php-xmlrpc-4.3.9-3.8.i386.rpm * vim-common-6.3.046-0.40E.7.i386.rpm * vim-enhanced-6.3.046-0.40E.7.i386.rpm * vim-minimal-6.3.046-0.40E.7.i386.rpm * vim-X11-6.3.046-0.40E.7.i386.rpm * cups-1.1.22-0.rc1.9.7.i386.rpm * cups-devel-1.1.22-0.rc1.9.7.i386.rpm * cups-libs-1.1.22-0.rc1.9.7.i386.rpm * ethereal-0.10.12-1.EL4.1.i386.rpm * ethereal-gnome-0.10.12-1.EL4.1.i386.rpm * gaim-1.3.1-0.el4.3.i386.rpm * gpdf-2.8.2-4.4.i386.rpm * kdegraphics-3.3.1-3.4.i386.rpm * kdegraphics-devel-3.3.1-3.4.i386.rpm * sysreport-1.3.15-5.noarch.rpm * xpdf-3.00-11.8.i386.rpm * ruby-devel-1.8.1-7.EL4.1.i386.rpm * ruby-1.8.1-7.EL4.1.i386.rpm * ruby-tcltk-1.8.1-7.EL4.1.i386.rpm * ruby-mode-1.8.1-7.EL4.1.i386.rpm * ruby-libs-1.8.1-7.EL4.1.i386.rpm * ruby-docs-1.8.1-7.EL4.1.i386.rpm * irb-1.8.1-7.EL4.1.i386.rpm * squirrelmail-1.4.3a-12.EL4.noarch.rpm