Author Archives: squinney

Running daily tasks

As we replaced the boot component with systemd in EL7 we lost the ability to schedule daily tasks using the boot.run resources. This has now been replaced with the specialist runner component. I have some plans for how we can … Continue reading

Posted in Uncategorized | Leave a comment

New installer feature

One of the problems we’ve encountered with systemd is the handling of interaction with the user on the console. In particular, we have always had the kerberos component run the kdcregister tool after the final reboot of the install process. … Continue reading

Posted in Uncategorized | Leave a comment

openafs client changes

As part of the move to EL7 we are trying to use systemd where possible to manage daemons rather than doing so through LCFG components. One service we want to move over to this model is openafs. Sadly the existing … Continue reading

Posted in Uncategorized | Leave a comment

Service function improvements

In May 2014 version 1.6.0 of lcfg-ngeneric was released which provided a new Service function for LCFG components (see this blog article for more details). The aim of this new feature was to make it possible to call daemon methods … Continue reading

Posted in Uncategorized | Leave a comment

grub2 – sanity prevails

Back in April 2014 I wrote a new LCFG component to configure the grub2 bootloader. At the time I blogged about the problems with restricting edit access for menu items. The issue was that once you had a list of … Continue reading

Posted in Uncategorized | Leave a comment

Local firefox configuration

For various reasons we need to apply some local configuration to firefox on DICE machines. In particular we set the negotiate_auth options so that we get single-sign-on to our various Cosign protected web services. Recent testing of our SL7 desktop … Continue reading

Posted in Uncategorized | Leave a comment

jabber GSSAPI SASL problems

A number of Computing Officers in Informatics are now using SL7 for their standard desktop. This is good because it means various bugs are being flushed out of the woodwork. A recent issue we have found is that the pidgin … Continue reading

Posted in Uncategorized | Leave a comment

Trusting a local CA

For some of our services we use SSL certificates which are signed using the local university CA. On Redhat systems to get applications such as firefox to trust this CA we have always had to hackily patch and rebuild the … Continue reading

Posted in Uncategorized | Leave a comment

Describing features of a system

Recently I have added a new concept to the sysinfo component which allows admins to describe general features of a system. These are simple arbitrary flags which indicate the presence (or possibly lack) of some feature on a system. The … Continue reading

Posted in Uncategorized | Leave a comment

Replacing boot.run

With the demise of the LCFG boot component we have lost the boot.run facility. This was a useful place to hang jobs which needed to be run on a daily basis, for example, the daily run of updaterpms to update … Continue reading

Posted in Uncategorized | Leave a comment