Category Archives: Uncategorized

Running daily tasks

As we replaced the boot component with systemd in EL7 we lost the ability to schedule daily tasks using the boot.run resources. This has now been replaced with the specialist runner component. I have some plans for how we can … Continue reading

Posted in Uncategorized | Leave a comment

Logging under EL7

In the good old days, prior to EL7 and systemd, the syslog daemon (and, later, the rsyslog daemon) would listen on the unix socket /dev/log for messages sent from daemons. The syslog daemon would then decide on which messages to … Continue reading

Posted in Uncategorized | Leave a comment

internet-online.target

Stock EL7 (and SL7) has a target called network-online.target. This is used to delay services until the network interface is configured and online. Whilst this is suitable for a scenario where the network gateway is statically configured or obtained via … Continue reading

Posted in Uncategorized | Leave a comment

New installer feature

One of the problems we’ve encountered with systemd is the handling of interaction with the user on the console. In particular, we have always had the kerberos component run the kdcregister tool after the final reboot of the install process. … Continue reading

Posted in Uncategorized | Leave a comment

openafs client changes

As part of the move to EL7 we are trying to use systemd where possible to manage daemons rather than doing so through LCFG components. One service we want to move over to this model is openafs. Sadly the existing … Continue reading

Posted in Uncategorized | Leave a comment

Service function improvements

In May 2014 version 1.6.0 of lcfg-ngeneric was released which provided a new Service function for LCFG components (see this blog article for more details). The aim of this new feature was to make it possible to call daemon methods … Continue reading

Posted in Uncategorized | Leave a comment

grub2 – sanity prevails

Back in April 2014 I wrote a new LCFG component to configure the grub2 bootloader. At the time I blogged about the problems with restricting edit access for menu items. The issue was that once you had a list of … Continue reading

Posted in Uncategorized | Leave a comment

Local firefox configuration

For various reasons we need to apply some local configuration to firefox on DICE machines. In particular we set the negotiate_auth options so that we get single-sign-on to our various Cosign protected web services. Recent testing of our SL7 desktop … Continue reading

Posted in Uncategorized | Leave a comment

jabber GSSAPI SASL problems

A number of Computing Officers in Informatics are now using SL7 for their standard desktop. This is good because it means various bugs are being flushed out of the woodwork. A recent issue we have found is that the pidgin … Continue reading

Posted in Uncategorized | Leave a comment

Trusting a local CA

For some of our services we use SSL certificates which are signed using the local university CA. On Redhat systems to get applications such as firefox to trust this CA we have always had to hackily patch and rebuild the … Continue reading

Posted in Uncategorized | Leave a comment