Tchello Blog http://marcelo.mmello.org by Marcelo Moreira de Mello Thu, 22 Dec 2011 16:41:11 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Spacewalk 1.6 Released http://marcelo.mmello.org/2011/12/spacewalk-1-6-released/?utm_source=rss&utm_medium=rss&utm_campaign=spacewalk-1-6-released http://marcelo.mmello.org/2011/12/spacewalk-1-6-released/#comments Thu, 22 Dec 2011 16:36:38 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=1052 Hello world,

   We are happy to announce the release 1.6 of Spacewalk, platform for management
of Linux systems.

The download locations are

http://spacewalk.redhat.com/yum/1.6/RHEL/5/$basearch/
http://spacewalk.redhat.com/yum/1.6/RHEL/6/$basearch/
http://spacewalk.redhat.com/yum/1.6/Fedora/15/x86_64/
http://spacewalk.redhat.com/yum/1.6/Fedora/16/x86_64/

with client repositories under

http://spacewalk.redhat.com/yum/1.6-client
http://download.opensuse.org/repositories/systemsmanagement:/spacewalk:/1.6/openSUSE_11.4/
http://download.opensuse.org/repositories/systemsmanagement:/spacewalk:/1.6/openSUSE_Factory/
http://miroslav.suchy.cz/spacewalk/debian

If you want to do fresh installation, use steps from

https://fedorahosted.org/spacewalk/wiki/HowToInstall

If you plan to upgrade from older release, the following page can be useful:

http://fedorahosted.org/spacewalk/wiki/HowToUpgrade

Features & Enhancements in Spacewalk 1.6

  • IPv6 support: management and provisioning capabilities
  • Support for Fedora 16 (server and client)
  • Kickstarting via Spacewalk Proxy with a CNAME
  • spacewalk-repo-sync supports –include and –exclude options
  • New API calls:
channel.software.getRepoSyncCronExpression
channel.software.listChannelRepos
channel.software.setDetails
channel.software.syncRepo
configchannel.deleteFileRevisions
configchannel.getFileRevision
configchannel.getFileRevisions
kickstart.disableProfile
kickstart.isProfileDisabled
kickstart.keys.update
system.custominfo.updateKey
system.deleteGuestProfiles
system.deleteTagFromSnapshot
system.getScriptActionDetails
system.provisioning.snapshot.addTagToSnapshot
system.tagLatestSnapshot
  • OSAD improvements
  • Security fixes for following CVEs:

CVE-2011-1594
CVE-2011-2919
CVE-2011-2920
CVE-2011-2927
CVE-2011-3344

  • rhn-virtualization supports RHEV 3 hosts
  • spacewalk-reports supports –where-<column-id> option to filter records
  • spacecmd enhancements and bugfixes
  • Preliminary support for cobbler 2.2

Contributors

Our thanks go to the community members who contributed to this release:

Andy Speagle
Aron Parsons
Christian Berendt
Colin Coe
David Nutter
Ionuț Arțăriși
Johannes Renner
Jonathan Hoser
Joshua Roys
Luca Villa
Marcelo Moreira de Mello
Martin Osvald
Michael Calmer
Pierre Casenove
Satoru SATOH
Steve Hardy
Sven Mueller
Tasos Papaioannou
Uwe Gansert

https://fedorahosted.org/spacewalk/wiki/ContributorList

Some statistics

In Spacewalk 1.6, we’ve seen

177 bugs solved
1025 changesets committed
1515 commits done

Thank you for using Spacewalk! Keep the patches flowing!

Regards
-Milan Zázrivec

]]> http://marcelo.mmello.org/2011/12/spacewalk-1-6-released/feed/ 0 Sharing with fpaste.org http://marcelo.mmello.org/2011/10/sharing-with-fpaste-org/?utm_source=rss&utm_medium=rss&utm_campaign=sharing-with-fpaste-org http://marcelo.mmello.org/2011/10/sharing-with-fpaste-org/#comments Sun, 09 Oct 2011 04:17:20 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=988 Howdy folks,

All of us already have ever faced some meltdown issues to dissolve regarding the IT matters. For some, the solution is taking a walk and/or prepares a chimarrão (a typical beverage) to make the ideas clear. And if the problem still persists, the deal is change an idea with a friend to try to clear the problem.

Yes! All of us already got this situation. Ok, Perhaps not everyone have had prepared a chimarrão, but what matter is that in most of the times we need to share a log, configuration file, code’s snippet, etc. Pasting those messages under MSN/gtalk/ICQ/Jabber/IRC is too inconvenient and not mentioning that the format may change making it difficult to read.

A quick way to share logs/codes not needing to perform all the procedure of open the browser, copy and past the message using sites as PasteBin.com per example, is to use the application fpaste shipped in Fedora.

The simple tool fpaste consists in a script wrote in Python (++) which uploads the text into fpaste.org and returns a fresh URL. An interesting point in my opinion is that fpaste allows customization, such as to define which language for content to get the syntax highlighted. For while the maximum stay for the shared data is up to 1 day.

notebook $> rpm -q fpaste
fpaste-0.3.7-1.fc16.noarch

Fpaste usage is quite simple. 

notebook $> fpaste  --help
Usage: fpaste [OPTION]... [FILE]...
  send text file(s), stdin, or clipboard to the http://fpaste.org/ pastebin and return the URL.

Examples:
  fpaste file1.txt file2.txt
  dmesg | fpaste
  (prog1; prog2; prog3) | fpaste
  fpaste --sysinfo -d "my laptop" --confirm
  fpaste -n codemonkey -d "problem with foo" -l python foo.py

To a better experiencing, try to create a command alias setting some options as showed below: 

notebook $> alias fpaste
alias fpaste='fpaste -n mmello -l python -x 3600'

An important funcionality we need to highlight is that we can share some information about our own box. This functionality is very important in moments when we need help with that sound/wifi driver that is not working. 

notebook $> fpaste --sysinfo --confirm
Gathering system info...........................

=== fpaste 0.3.7 System Information (fpaste --sysinfo) ===
* OS Release (lsb_release -ds):
     "Fedora release 16 (Verne)"

* Kernel (uname -r ; cat /proc/cmdline):
     3.1.0-0.rc8.git0.1.fc16.x86_64
     BOOT_IMAGE=/vmlinuz-3.1.0-0.rc8.git0.1.fc16.x86_64 root=/dev/mapper/vg_notebook-lv_root ro rhgb quiet rd.md=0 rd.dm=0 rd.lvm.lv=vg_notebook/lv_swap SYSFONT=latarcyrheb-sun16 rd.luks=0 rd.lvm.lv=vg_notebook/lv_root KEYTABLE=us-acentos LANG=en_US.UTF-8

* Smolt Profile URL:
     N/A

* Desktop(s) Running (ps -eo comm= | egrep '(gnome-session|kdeinit|xfce.?-session|fluxbox|blackbox|hackedbox|ratpoison|enlightenment|icewm-session|od-session|wmaker|wmx|openbox-lxde|openbox-gnome-session|openbox-kde-session|mwm|e16|fvwm|xmonad|sugar-session)' ):
     xfce4-session

* Desktop(s) Installed (ls -m /usr/share/xsessions/ | sed 's/\.desktop//g' ):
     gnome, xfce

* SELinux Status (sestatus):
     SELinux status:                 enabled
     SELinuxfs mount:                /sys/fs/selinux
     Current mode:                   enforcing
     Mode from config file:          enforcing
     Policy version:                 26
     Policy from config file:        targeted

* SELinux Error Count (failed: "selinuxenabled && (grep avc: /var/log/messages; ausearch -m avc -ts today)2>/dev/null|egrep -o "comm=\"[^ ]+"|sort|uniq -c|sort -rn"):
     N/A

* CPU Model (grep 'model name' /proc/cpuinfo | awk -F: '{print $2}' | uniq -c | sed -re 's/^ +//' ):
     2  Intel(R) Core(TM)2 Duo CPU     P8600  @ 2.40GHz

* 64-bit Support (grep -q ' lm ' /proc/cpuinfo && echo Yes || echo No):
     Yes

* Hardware Virtualization Support (egrep -q '(vmx|svm)' /proc/cpuinfo && echo Yes || echo No):
     Yes

* Load average (uptime):
      00:00:19 up  2:15,  2 users,  load average: 0.02, 0.03, 0.05

* Memory usage (free -m):
                  total       used       free     shared    buffers     cached
     Mem:          3915       3704        210          0         32       3027
     -/+ buffers/cache:        644       3270
     Swap:         5951         24       5927

* Top 5 CPU hogs (ps axuScnh | awk '$2!=4785' | sort -rnk3 | head -5):
            0     1 18.3  0.6  57952 24696 ?        Ss   Oct08  24:50 systemd
         1000  3761  2.0  2.9 2990424 119472 ?      Sl   Oct08   0:55 rhythmbox
            0  1296  1.8  0.5 133656 20220 tty1     Ss+  Oct08   2:26 Xorg
         1000  1762  1.4  0.1 253864  7596 ?        Sl   Oct08   1:56 xfce4-session
         1000  4079  1.1  0.1 119568  5148 pts/0    Ss   Oct08   0:15 bash

* Top 5 Memory hogs (ps axuScnh | sort -rnk4 | head -5):
         1000  3761  2.0  2.9 2990424 119472 ?      Sl   Oct08   0:55 rhythmbox
         1000  1802  0.0  1.1 1585400 44800 ?       Ssl  Oct08   0:04 dropbox
         1000  2251  0.0  0.7 981264 28576 ?        Sl   Oct08   0:00 e-calendar-fact
            0     1 18.3  0.6  57952 24696 ?        Ss   Oct08  24:50 systemd
         1000  1821  0.0  0.5 557828 23188 ?        Sl   Oct08   0:02 tracker-store

* Disk space usage (df -hT):
     Filesystem                                            Type      Size  Used Avail Use% Mounted on
     rootfs                                                rootfs     34G  6.7G   27G  21% /
     devtmpfs                                              devtmpfs  1.9G     0  1.9G   0% /dev
     tmpfs                                                 tmpfs     2.0G  2.2M  2.0G   1% /dev/shm
     tmpfs                                                 tmpfs     2.0G   47M  1.9G   3% /run
     /dev/mapper/vg_notebook-lv_root                       ext4       34G  6.7G   27G  21% /
     tmpfs                                                 tmpfs     2.0G   47M  1.9G   3% /run
     tmpfs                                                 tmpfs     2.0G     0  2.0G   0% /sys/fs/cgroup
     tmpfs                                                 tmpfs     2.0G     0  2.0G   0% /media
     /dev/sda1                                             ext4      485M   79M  381M  18% /boot
     /dev/mapper/luks-c24525fe-40a9-4839-81fd-da2b11355741 ext4      107G   32G   71G  31% /home

* Block devices (failed: "blkid" AND "/sbin/blkid"):
     N/A

* PCI devices (lspci):
     00:00.0 Host bridge: Intel Corporation Mobile 4 Series Chipset Memory Controller Hub (rev 07)
     00:02.0 VGA compatible controller: Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller (rev 07)
     00:02.1 Display controller: Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller (rev 07)
     00:03.0 Communication controller: Intel Corporation Mobile 4 Series Chipset MEI Controller (rev 07)
     00:03.3 Serial controller: Intel Corporation Mobile 4 Series Chipset AMT SOL Redirection (rev 07)
     00:19.0 Ethernet controller: Intel Corporation 82567LM Gigabit Network Connection (rev 03)
     00:1a.0 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #4 (rev 03)
     00:1a.1 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #5 (rev 03)
     00:1a.2 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #6 (rev 03)
     00:1a.7 USB Controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #2 (rev 03)
     00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio Controller (rev 03)
     00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 1 (rev 03)
     00:1c.1 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 2 (rev 03)
     00:1c.3 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 4 (rev 03)
     00:1c.4 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 5 (rev 03)
     00:1d.0 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #1 (rev 03)
     00:1d.1 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #2 (rev 03)
     00:1d.2 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #3 (rev 03)
     00:1d.7 USB Controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #1 (rev 03)
     00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev 93)
     00:1f.0 ISA bridge: Intel Corporation ICH9M-E LPC Interface Controller (rev 03)
     00:1f.2 SATA controller: Intel Corporation ICH9M/M-E SATA AHCI Controller (rev 03)
     00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev 03)
     03:00.0 Network controller: Intel Corporation PRO/Wireless 5100 AGN [Shiloh] Network Connection
     15:00.0 CardBus bridge: Ricoh Co Ltd RL5c476 II (rev ba)
     15:00.1 FireWire (IEEE 1394): Ricoh Co Ltd R5C832 IEEE 1394 Controller (rev 04)

* USB devices (lsusb):
     Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
     Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
     Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 007 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 008 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 001 Device 003: ID 22b8:41d9 Motorola PCS Droid/Milestone

* DRM Information (failed: "grep drm /var/log/dmesg"):
     N/A

* Xorg modules (grep LoadModule /var/log/Xorg.0.log | cut -d \" -f 2 | xargs):
     extmod dbe glx record dri dri2 intel vesa fbdev fbdevhw fb dri2 evdev synaptics

* GL Support (failed: "glxinfo | egrep "OpenGL version|OpenGL renderer""):
     N/A

* Xorg errors (failed: "grep '^\[.*(EE)' /var/log/Xorg.0.log"):
     N/A

* Kernel buffer tail (dmesg | tail):
     [ 8072.808666] NEGADO: IN=eth0 OUT= MAC= SRC=172.16.69.3 DST=255.255.255.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8072.813066] NEGADO: IN=eth0 OUT= MAC= SRC=172.16.69.3 DST=172.16.69.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8082.054768] NEGADO: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:84:2b:2b:7c:5c:31:08:00 SRC=172.16.69.2 DST=255.255.255.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8082.055204] NEGADO: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:84:2b:2b:7c:5c:31:08:00 SRC=172.16.69.2 DST=172.16.69.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8090.981265] NEGADO: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f8:1e:df:f2:08:d2:08:00 SRC=172.16.69.20 DST=255.255.255.255 LEN=147 TOS=0x00 PREC=0x00 TTL=64 ID=35624 PROTO=UDP SPT=17500 DPT=17500 LEN=127
     [ 8090.981970] NEGADO: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f8:1e:df:f2:08:d2:08:00 SRC=172.16.69.20 DST=172.16.69.255 LEN=147 TOS=0x00 PREC=0x00 TTL=64 ID=53261 PROTO=UDP SPT=17500 DPT=17500 LEN=127
     [ 8096.243782] NEGADO: IN=eth0 OUT= MAC=01:00:5e:00:00:01:68:7f:74:2b:eb:c0:08:00 SRC=172.16.69.254 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=2
     [ 8102.846392] NEGADO: IN=eth0 OUT= MAC= SRC=172.16.69.3 DST=255.255.255.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8102.847085] NEGADO: IN=eth0 OUT= MAC= SRC=172.16.69.3 DST=172.16.69.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129 

* Last few reboots (last -x -n10 reboot runlevel):
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Sat Oct  8 21:45 - 00:00  (02:14)
     reboot   system boot  3.1.0-0.rc8.git0 Sat Oct  8 21:45 - 00:00  (02:15)
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Fri Oct  7 14:40 - 22:35  (07:54)
     reboot   system boot  3.1.0-0.rc8.git0 Fri Oct  7 14:39 - 22:35  (07:55)
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Thu Oct  6 22:35 - 00:56  (02:21)
     reboot   system boot  3.1.0-0.rc8.git0 Thu Oct  6 22:34 - 00:56  (02:21)
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Thu Oct  6 13:28 - 22:35  (09:07)
     reboot   system boot  3.1.0-0.rc8.git0 Thu Oct  6 13:27 - 00:56  (11:28)
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Thu Oct  6 12:28 - 12:49  (00:21)
     reboot   system boot  3.1.0-0.rc8.git0 Thu Oct  6 12:28 - 12:49  (00:21)    

     wtmp begins Sat Sep 10 11:04:31 2011

* YUM Repositories (yum -C repolist):
     Loaded plugins: downloadonly, fastestmirror, langpacks, presto, refresh-
                   : packagekit
     repo id                       repo name                                   status
     brew                          Brew Buildsystem for Fedora 16 - x86_64          4
     fedora                        Fedora 16 - x86_64                          24,906
     fedora-debuginfo              Fedora 16 - x86_64 - Debug                   5,639
     google-chrome                 google-chrome                                    3
     google-earth                  google-earth                                     1
     google-talkplugin             google-talkplugin                                1
     rpmfusion-free-rawhide        RPM Fusion for Fedora Rawhide - Free           394
     rpmfusion-nonfree-rawhide     RPM Fusion for Fedora Rawhide - Nonfree        164
     updates-debuginfo             Fedora 16 - x86_64 - Updates - Debug             0
     updates-testing               Fedora 16 - x86_64 - Test Updates            6,541
     updates-testing-debuginfo     Fedora 16 - x86_64 - Test Updates Debug      1,196
     repolist: 38,849

* YUM Extras (yum -C list extras):
     Loaded plugins: downloadonly, fastestmirror, langpacks, presto, refresh-
                   : packagekit
     Extra Packages
     clutter-gesture.x86_64    0.0.2-2.fc13             @koji-override-0/$releasever
     clutter-imcontext.x86_64  0.1.6-4.fc15             @koji-override-0/$releasever
     kernel.x86_64             3.1.0-0.rc6.git0.3.fc16  @updates-testing
     kernel.x86_64             3.1.0-0.rc8.git0.0.fc16  @updates-testing
     kernel-devel.x86_64       3.1.0-0.rc6.git0.3.fc16  @updates-testing
     kernel-devel.x86_64       3.1.0-0.rc8.git0.0.fc16  @updates-testing
     lastfm.x86_64             1.4.2.58240-6.fc11       @rpmfusion-free-rawhide
     nautilus-dropbox.x86_64   0.6.9-1.fc10             @/nautilus-dropbox-0.6.9-1.fedora.x86_64
     opera.x86_64              2:11.51-1087             installed
     pygobject3.x86_64         3.0.1-1.fc16             @updates-testing
     selinux-policy.noarch     3.10.0-36.fc16           @updates-testing
     selinux-policy-targeted.noarch
                               3.10.0-36.fc16           @updates-testing
     skype.i586                2.2.0.35-fc10            @/skype-2.2.0.35-fedora.i586 

* Last 20 packages installed (rpm -qa --nodigest --nosignature --last | head -20):
     iptraf-3.0.1-11.fc15                          Sat 08 Oct 2011 10:37:55 PM BRT
     cups-libs-1.5.0-14.fc16                       Fri 07 Oct 2011 03:43:42 PM BRT
     qt-x11-4.8.0-0.12.20111002.fc16               Fri 07 Oct 2011 03:43:41 PM BRT
     qt-4.8.0-0.12.20111002.fc16                   Fri 07 Oct 2011 03:43:38 PM BRT
     glib2-2.30.0-2.fc16                           Fri 07 Oct 2011 03:43:35 PM BRT
     system-config-date-1.9.66-1.fc16              Fri 07 Oct 2011 03:43:32 PM BRT
     google-chrome-beta-15.0.874.83-104223         Fri 07 Oct 2011 03:43:17 PM BRT
     postgresql-jdbc-9.1.901-1.fc16.1              Fri 07 Oct 2011 03:43:10 PM BRT
     tftp-5.1-1.fc16                               Fri 07 Oct 2011 03:43:09 PM BRT
     tftp-server-5.1-1.fc16                        Fri 07 Oct 2011 03:43:06 PM BRT
     biosdevname-0.3.11-5.fc16                     Fri 07 Oct 2011 03:43:06 PM BRT
     stunnel-4.44-1.fc16                           Fri 07 Oct 2011 03:43:05 PM BRT
     telepathy-salut-0.5.2-1.fc16                  Fri 07 Oct 2011 03:43:04 PM BRT
     qemu-img-0.15.0-5.fc16                        Fri 07 Oct 2011 03:43:03 PM BRT
     telepathy-mission-control-5.9.3-1.fc16        Fri 07 Oct 2011 03:43:02 PM BRT
     gnome-color-manager-3.2.0-3.fc16              Fri 07 Oct 2011 03:43:00 PM BRT
     libmx-1.3.2-1.fc16                            Fri 07 Oct 2011 03:42:59 PM BRT
     clutter-gst-1.4.2-1.fc16                      Fri 07 Oct 2011 03:42:58 PM BRT
     net-snmp-utils-5.7.1-2.fc16                   Fri 07 Oct 2011 03:42:57 PM BRT
     net-snmp-python-5.7.1-2.fc16                  Fri 07 Oct 2011 03:42:57 PM BRT

OK to send? [y/N]: y
Uploading (16.7KiB)...

http://fpaste.org/QL1G/

notebook $>

Screenshot for fpaste:

Tchê, that’s all folks! Simple and easy!! And please, do not past anymore log/code into your friend’s IM. See you guys!!

]]> http://marcelo.mmello.org/2011/10/sharing-with-fpaste-org/feed/ 0 Compartilhe com fpaste.org http://marcelo.mmello.org/2011/10/fpaste-org-fedora-pastebin/?utm_source=rss&utm_medium=rss&utm_campaign=fpaste-org-fedora-pastebin http://marcelo.mmello.org/2011/10/fpaste-org-fedora-pastebin/#comments Sun, 09 Oct 2011 03:14:35 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=494 Olá,

Todos nós já passamos por aquele problema “cabeludo” e complicado de ser resolvido, não?! Para alguns a solução é dar uma volta e/ou cevar um novo chimarrão com alecrim para clarear as ideias :) E se mesmo assim o problema persistir, o esquema é então trocar uma ideia com um amigo para tentar clarear o problema.

Sim! Todos nós já passamos por tal situação. OK, talvez nem todos tenham cevado um chimarrão, mas o que importa é que na maioria das vezes precisamos compartilhar um log, arquivo de configuração, trecho de código, etc e colar essas mensagens via MSN/gtalk/ICQ/Jabber/IRC o que é um tanto quanto incoveniente sem contar que a formatação pode ser alterada, dificultando a leitura.

Uma maneira rápida de compartilhar logs/códigos sem precisar realizar todo o procedimento de abrir o browser, copiar e colar a mensagem utilizando sites como o PasteBin.com por exemplo, é utilizar o aplicativo fpaste no Fedora.

A simples ferramenta fpaste consiste em um script em Python(++) que envia o texto para o site fpaste.org retornando a URL recém gerada. Um ponto interessante em minha opinião é que a ferramenta permite a customização, como por exemplo definir a linguagem do trecho de texto compartilhado que irá receber a respectiva syntax highlighting. Por enquanto a permanência máxima para os dados compartilhados é de no máximo 1 dia. 

notebook $> rpm -q fpaste
fpaste-0.3.7-1.fc16.noarch

A utilização do script é bem simples. 

notebook $> fpaste  --help
Usage: fpaste [OPTION]... [FILE]...
  send text file(s), stdin, or clipboard to the http://fpaste.org/ pastebin and return the URL.

Examples:
  fpaste file1.txt file2.txt
  dmesg | fpaste
  (prog1; prog2; prog3) | fpaste
  fpaste --sysinfo -d "my laptop" --confirm
  fpaste -n codemonkey -d "problem with foo" -l python foo.py

Para facilitar na customização da ferramenta sugiro a criação de um alias de comando definindo algumas preferências: 

notebook $> alias fpaste
alias fpaste='fpaste -n mmello -l python -x 3600'

Um funcionalidade que precisa ser destadaca é que podemos compartilhar algumas informações sobre o sistema utilizado. Funcionalidade essa muito interessante em momentos que precisamos de ajuda com aquele driver de som/wifi que não está funcionando. 

notebook $> fpaste --sysinfo --confirm
Gathering system info...........................

=== fpaste 0.3.7 System Information (fpaste --sysinfo) ===
* OS Release (lsb_release -ds):
     "Fedora release 16 (Verne)"

* Kernel (uname -r ; cat /proc/cmdline):
     3.1.0-0.rc8.git0.1.fc16.x86_64
     BOOT_IMAGE=/vmlinuz-3.1.0-0.rc8.git0.1.fc16.x86_64 root=/dev/mapper/vg_notebook-lv_root ro rhgb quiet rd.md=0 rd.dm=0 rd.lvm.lv=vg_notebook/lv_swap SYSFONT=latarcyrheb-sun16 rd.luks=0 rd.lvm.lv=vg_notebook/lv_root KEYTABLE=us-acentos LANG=en_US.UTF-8

* Smolt Profile URL:
     N/A

* Desktop(s) Running (ps -eo comm= | egrep '(gnome-session|kdeinit|xfce.?-session|fluxbox|blackbox|hackedbox|ratpoison|enlightenment|icewm-session|od-session|wmaker|wmx|openbox-lxde|openbox-gnome-session|openbox-kde-session|mwm|e16|fvwm|xmonad|sugar-session)' ):
     xfce4-session

* Desktop(s) Installed (ls -m /usr/share/xsessions/ | sed 's/\.desktop//g' ):
     gnome, xfce

* SELinux Status (sestatus):
     SELinux status:                 enabled
     SELinuxfs mount:                /sys/fs/selinux
     Current mode:                   enforcing
     Mode from config file:          enforcing
     Policy version:                 26
     Policy from config file:        targeted

* SELinux Error Count (failed: "selinuxenabled && (grep avc: /var/log/messages; ausearch -m avc -ts today)2>/dev/null|egrep -o "comm=\"[^ ]+"|sort|uniq -c|sort -rn"):
     N/A

* CPU Model (grep 'model name' /proc/cpuinfo | awk -F: '{print $2}' | uniq -c | sed -re 's/^ +//' ):
     2  Intel(R) Core(TM)2 Duo CPU     P8600  @ 2.40GHz

* 64-bit Support (grep -q ' lm ' /proc/cpuinfo && echo Yes || echo No):
     Yes

* Hardware Virtualization Support (egrep -q '(vmx|svm)' /proc/cpuinfo && echo Yes || echo No):
     Yes

* Load average (uptime):
      00:00:19 up  2:15,  2 users,  load average: 0.02, 0.03, 0.05

* Memory usage (free -m):
                  total       used       free     shared    buffers     cached
     Mem:          3915       3704        210          0         32       3027
     -/+ buffers/cache:        644       3270
     Swap:         5951         24       5927

* Top 5 CPU hogs (ps axuScnh | awk '$2!=4785' | sort -rnk3 | head -5):
            0     1 18.3  0.6  57952 24696 ?        Ss   Oct08  24:50 systemd
         1000  3761  2.0  2.9 2990424 119472 ?      Sl   Oct08   0:55 rhythmbox
            0  1296  1.8  0.5 133656 20220 tty1     Ss+  Oct08   2:26 Xorg
         1000  1762  1.4  0.1 253864  7596 ?        Sl   Oct08   1:56 xfce4-session
         1000  4079  1.1  0.1 119568  5148 pts/0    Ss   Oct08   0:15 bash

* Top 5 Memory hogs (ps axuScnh | sort -rnk4 | head -5):
         1000  3761  2.0  2.9 2990424 119472 ?      Sl   Oct08   0:55 rhythmbox
         1000  1802  0.0  1.1 1585400 44800 ?       Ssl  Oct08   0:04 dropbox
         1000  2251  0.0  0.7 981264 28576 ?        Sl   Oct08   0:00 e-calendar-fact
            0     1 18.3  0.6  57952 24696 ?        Ss   Oct08  24:50 systemd
         1000  1821  0.0  0.5 557828 23188 ?        Sl   Oct08   0:02 tracker-store

* Disk space usage (df -hT):
     Filesystem                                            Type      Size  Used Avail Use% Mounted on
     rootfs                                                rootfs     34G  6.7G   27G  21% /
     devtmpfs                                              devtmpfs  1.9G     0  1.9G   0% /dev
     tmpfs                                                 tmpfs     2.0G  2.2M  2.0G   1% /dev/shm
     tmpfs                                                 tmpfs     2.0G   47M  1.9G   3% /run
     /dev/mapper/vg_notebook-lv_root                       ext4       34G  6.7G   27G  21% /
     tmpfs                                                 tmpfs     2.0G   47M  1.9G   3% /run
     tmpfs                                                 tmpfs     2.0G     0  2.0G   0% /sys/fs/cgroup
     tmpfs                                                 tmpfs     2.0G     0  2.0G   0% /media
     /dev/sda1                                             ext4      485M   79M  381M  18% /boot
     /dev/mapper/luks-c24525fe-40a9-4839-81fd-da2b11355741 ext4      107G   32G   71G  31% /home

* Block devices (failed: "blkid" AND "/sbin/blkid"):
     N/A

* PCI devices (lspci):
     00:00.0 Host bridge: Intel Corporation Mobile 4 Series Chipset Memory Controller Hub (rev 07)
     00:02.0 VGA compatible controller: Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller (rev 07)
     00:02.1 Display controller: Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller (rev 07)
     00:03.0 Communication controller: Intel Corporation Mobile 4 Series Chipset MEI Controller (rev 07)
     00:03.3 Serial controller: Intel Corporation Mobile 4 Series Chipset AMT SOL Redirection (rev 07)
     00:19.0 Ethernet controller: Intel Corporation 82567LM Gigabit Network Connection (rev 03)
     00:1a.0 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #4 (rev 03)
     00:1a.1 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #5 (rev 03)
     00:1a.2 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #6 (rev 03)
     00:1a.7 USB Controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #2 (rev 03)
     00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio Controller (rev 03)
     00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 1 (rev 03)
     00:1c.1 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 2 (rev 03)
     00:1c.3 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 4 (rev 03)
     00:1c.4 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 5 (rev 03)
     00:1d.0 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #1 (rev 03)
     00:1d.1 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #2 (rev 03)
     00:1d.2 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #3 (rev 03)
     00:1d.7 USB Controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #1 (rev 03)
     00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev 93)
     00:1f.0 ISA bridge: Intel Corporation ICH9M-E LPC Interface Controller (rev 03)
     00:1f.2 SATA controller: Intel Corporation ICH9M/M-E SATA AHCI Controller (rev 03)
     00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev 03)
     03:00.0 Network controller: Intel Corporation PRO/Wireless 5100 AGN [Shiloh] Network Connection
     15:00.0 CardBus bridge: Ricoh Co Ltd RL5c476 II (rev ba)
     15:00.1 FireWire (IEEE 1394): Ricoh Co Ltd R5C832 IEEE 1394 Controller (rev 04)

* USB devices (lsusb):
     Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
     Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
     Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 007 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 008 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
     Bus 001 Device 003: ID 22b8:41d9 Motorola PCS Droid/Milestone

* DRM Information (failed: "grep drm /var/log/dmesg"):
     N/A

* Xorg modules (grep LoadModule /var/log/Xorg.0.log | cut -d \" -f 2 | xargs):
     extmod dbe glx record dri dri2 intel vesa fbdev fbdevhw fb dri2 evdev synaptics

* GL Support (failed: "glxinfo | egrep "OpenGL version|OpenGL renderer""):
     N/A

* Xorg errors (failed: "grep '^\[.*(EE)' /var/log/Xorg.0.log"):
     N/A

* Kernel buffer tail (dmesg | tail):
     [ 8072.808666] NEGADO: IN=eth0 OUT= MAC= SRC=172.16.69.3 DST=255.255.255.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8072.813066] NEGADO: IN=eth0 OUT= MAC= SRC=172.16.69.3 DST=172.16.69.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8082.054768] NEGADO: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:84:2b:2b:7c:5c:31:08:00 SRC=172.16.69.2 DST=255.255.255.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8082.055204] NEGADO: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:84:2b:2b:7c:5c:31:08:00 SRC=172.16.69.2 DST=172.16.69.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8090.981265] NEGADO: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f8:1e:df:f2:08:d2:08:00 SRC=172.16.69.20 DST=255.255.255.255 LEN=147 TOS=0x00 PREC=0x00 TTL=64 ID=35624 PROTO=UDP SPT=17500 DPT=17500 LEN=127
     [ 8090.981970] NEGADO: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f8:1e:df:f2:08:d2:08:00 SRC=172.16.69.20 DST=172.16.69.255 LEN=147 TOS=0x00 PREC=0x00 TTL=64 ID=53261 PROTO=UDP SPT=17500 DPT=17500 LEN=127
     [ 8096.243782] NEGADO: IN=eth0 OUT= MAC=01:00:5e:00:00:01:68:7f:74:2b:eb:c0:08:00 SRC=172.16.69.254 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=2
     [ 8102.846392] NEGADO: IN=eth0 OUT= MAC= SRC=172.16.69.3 DST=255.255.255.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129
     [ 8102.847085] NEGADO: IN=eth0 OUT= MAC= SRC=172.16.69.3 DST=172.16.69.255 LEN=149 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=17500 DPT=17500 LEN=129 

* Last few reboots (last -x -n10 reboot runlevel):
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Sat Oct  8 21:45 - 00:00  (02:14)
     reboot   system boot  3.1.0-0.rc8.git0 Sat Oct  8 21:45 - 00:00  (02:15)
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Fri Oct  7 14:40 - 22:35  (07:54)
     reboot   system boot  3.1.0-0.rc8.git0 Fri Oct  7 14:39 - 22:35  (07:55)
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Thu Oct  6 22:35 - 00:56  (02:21)
     reboot   system boot  3.1.0-0.rc8.git0 Thu Oct  6 22:34 - 00:56  (02:21)
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Thu Oct  6 13:28 - 22:35  (09:07)
     reboot   system boot  3.1.0-0.rc8.git0 Thu Oct  6 13:27 - 00:56  (11:28)
     runlevel (to lvl 5)   3.1.0-0.rc8.git0 Thu Oct  6 12:28 - 12:49  (00:21)
     reboot   system boot  3.1.0-0.rc8.git0 Thu Oct  6 12:28 - 12:49  (00:21)    

     wtmp begins Sat Sep 10 11:04:31 2011

* YUM Repositories (yum -C repolist):
     Loaded plugins: downloadonly, fastestmirror, langpacks, presto, refresh-
                   : packagekit
     repo id                       repo name                                   status
     brew                          Brew Buildsystem for Fedora 16 - x86_64          4
     fedora                        Fedora 16 - x86_64                          24,906
     fedora-debuginfo              Fedora 16 - x86_64 - Debug                   5,639
     google-chrome                 google-chrome                                    3
     google-earth                  google-earth                                     1
     google-talkplugin             google-talkplugin                                1
     rpmfusion-free-rawhide        RPM Fusion for Fedora Rawhide - Free           394
     rpmfusion-nonfree-rawhide     RPM Fusion for Fedora Rawhide - Nonfree        164
     updates-debuginfo             Fedora 16 - x86_64 - Updates - Debug             0
     updates-testing               Fedora 16 - x86_64 - Test Updates            6,541
     updates-testing-debuginfo     Fedora 16 - x86_64 - Test Updates Debug      1,196
     repolist: 38,849

* YUM Extras (yum -C list extras):
     Loaded plugins: downloadonly, fastestmirror, langpacks, presto, refresh-
                   : packagekit
     Extra Packages
     clutter-gesture.x86_64    0.0.2-2.fc13             @koji-override-0/$releasever
     clutter-imcontext.x86_64  0.1.6-4.fc15             @koji-override-0/$releasever
     kernel.x86_64             3.1.0-0.rc6.git0.3.fc16  @updates-testing
     kernel.x86_64             3.1.0-0.rc8.git0.0.fc16  @updates-testing
     kernel-devel.x86_64       3.1.0-0.rc6.git0.3.fc16  @updates-testing
     kernel-devel.x86_64       3.1.0-0.rc8.git0.0.fc16  @updates-testing
     lastfm.x86_64             1.4.2.58240-6.fc11       @rpmfusion-free-rawhide
     nautilus-dropbox.x86_64   0.6.9-1.fc10             @/nautilus-dropbox-0.6.9-1.fedora.x86_64
     opera.x86_64              2:11.51-1087             installed
     pygobject3.x86_64         3.0.1-1.fc16             @updates-testing
     selinux-policy.noarch     3.10.0-36.fc16           @updates-testing
     selinux-policy-targeted.noarch
                               3.10.0-36.fc16           @updates-testing
     skype.i586                2.2.0.35-fc10            @/skype-2.2.0.35-fedora.i586 

* Last 20 packages installed (rpm -qa --nodigest --nosignature --last | head -20):
     iptraf-3.0.1-11.fc15                          Sat 08 Oct 2011 10:37:55 PM BRT
     cups-libs-1.5.0-14.fc16                       Fri 07 Oct 2011 03:43:42 PM BRT
     qt-x11-4.8.0-0.12.20111002.fc16               Fri 07 Oct 2011 03:43:41 PM BRT
     qt-4.8.0-0.12.20111002.fc16                   Fri 07 Oct 2011 03:43:38 PM BRT
     glib2-2.30.0-2.fc16                           Fri 07 Oct 2011 03:43:35 PM BRT
     system-config-date-1.9.66-1.fc16              Fri 07 Oct 2011 03:43:32 PM BRT
     google-chrome-beta-15.0.874.83-104223         Fri 07 Oct 2011 03:43:17 PM BRT
     postgresql-jdbc-9.1.901-1.fc16.1              Fri 07 Oct 2011 03:43:10 PM BRT
     tftp-5.1-1.fc16                               Fri 07 Oct 2011 03:43:09 PM BRT
     tftp-server-5.1-1.fc16                        Fri 07 Oct 2011 03:43:06 PM BRT
     biosdevname-0.3.11-5.fc16                     Fri 07 Oct 2011 03:43:06 PM BRT
     stunnel-4.44-1.fc16                           Fri 07 Oct 2011 03:43:05 PM BRT
     telepathy-salut-0.5.2-1.fc16                  Fri 07 Oct 2011 03:43:04 PM BRT
     qemu-img-0.15.0-5.fc16                        Fri 07 Oct 2011 03:43:03 PM BRT
     telepathy-mission-control-5.9.3-1.fc16        Fri 07 Oct 2011 03:43:02 PM BRT
     gnome-color-manager-3.2.0-3.fc16              Fri 07 Oct 2011 03:43:00 PM BRT
     libmx-1.3.2-1.fc16                            Fri 07 Oct 2011 03:42:59 PM BRT
     clutter-gst-1.4.2-1.fc16                      Fri 07 Oct 2011 03:42:58 PM BRT
     net-snmp-utils-5.7.1-2.fc16                   Fri 07 Oct 2011 03:42:57 PM BRT
     net-snmp-python-5.7.1-2.fc16                  Fri 07 Oct 2011 03:42:57 PM BRT

OK to send? [y/N]: y
Uploading (16.7KiB)...

http://fpaste.org/QL1G/

notebook $>

Abaixo um screenshot da URL gerada:

Era isso tchê!! Simples e fácil!!! E por favor, não cole várias linhas de log/código no IM do seu amigo!! :) Forte quebra costelas tchê!!

]]> http://marcelo.mmello.org/2011/10/fpaste-org-fedora-pastebin/feed/ 1 Sharing resources with Synergy http://marcelo.mmello.org/2011/09/sharing-resources-with-synergy/?utm_source=rss&utm_medium=rss&utm_campaign=sharing-resources-with-synergy http://marcelo.mmello.org/2011/09/sharing-resources-with-synergy/#comments Mon, 05 Sep 2011 00:48:37 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=926 For those who already have worked with more than 1 monitor at the computer, knows that this increases a lot the workflow productivity and daily activities. The good news is that such functionality is available when using different computers, with no additional hardware like as KVM or video cards when using the software Synergy.

Synergy is a free an open source application which allows in an easily way to share the keyboard and mouse between different computers. Didn’t get it? OK, so imagine that you have a laptop and a desktop and you want to work with the both computers at the same time. The point is that is quite boring to keep changing the mouse and keyboard across the computers, no? With Synergy, we can just move the mouse to the right/left/top/bottom changing the screen and the computer respectively.

Synergy is currently suportted at Windows, Linux e MacOS.

Synergy

The Synergy’s configuration is quite simples. To Fedora’s users, it’s just follow the steps below:

# yum install synergy-plus

Once the software is installed we need to configure it. In our environment, we have 2 computers (1 desktop e 1 laptop) running Fedora 15. Synergy basically offers 2 binaries: synergys e synergyc.

synergys: sysnergys (server) should be executed at server, in other words, at the computer which the keyboard/mouse is connected.

synergyc: synergyc (client) should be running at further computers.

To get a big picture from the environment below, here follow some informations:

Hostname: stheo.mmello.org IP: 172.16.69.2 – Server

Hostname: notebook.mmello.org IP: 172.16.69.3 – Client

The first step in our walk-thru, an important requisite is the both computers to be able to resolve the names between each other. If you do not have a DNS server configured, putting the hostnames within /etc/hosts file will be enough.

# cat /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

172.16.69.2 stheo.mmello.local stheo
172.16.69.3 notebook.mmello.local notebook

Filled the /etc/hosts file, let’s heading to Synergy’s configuration.

Server:

stheo $> cat ˜/.synergy.conf
section: screens
   stheo.mmello.local:
   notebook.mmello.local:
end

section: links
   stheo.mmello.local:
      left = notebook.mmello.local
   notebook.mmello.local:
      right = stheo.mmello.local
end

Client:

notebook $> cat ~/.synergy.conf
section: screens
   notebook.mmello.local:
   stheo.mmello.local:
end

section: links
   notebook.mmello.local:
      right = stheo.mmello.local
   stheo.mmello.local:
      left = notebook.mmello.local
end

As we can see above, the Synergy configuration is quite simple. Basically, the configuration points that if we move the mouse to the left, the mouse/keyboard will be redirected to the other computer (notebook). Once at the client, moving the mouse back to the right, the mouse/keyboard will be redirected back to the server (stheo).

Configuration is done, so we need to start the processes synergys and synergyc. A good trick is to create an alias at client/server to start those processes. But you can implement the best configuration which works better for you such as SYSV service, etc.

Alias at server’s side (stheo):

stheo $> alias  | grep start
alias start_monitor_share='synergys -a 172.16.69.2 --name stheo.mmello.local \
 -c /home/mdemello/.synergy.conf'

Alias at client’s side (notebook):

notebook $> alias  | grep start
alias start_monitor_share='synergyc --daemon \
--restart -n notebook.mmello.local stheo.mmello.local'

Note: If the firewall is enabled, allow the network port 24800(tcp).

Afterwards, we can observe at /var/log/messages at the client’s side, some Synergy’s message:

notebook $> sudo cat /var/log/messages | grep Syner
Sep  4 20:26:01 notebook Synergy+ 1.3.4: 2011-09-04T20:26:01 NOTE: started client#012#011synergyc.cpp,331
Sep  4 20:26:01 notebook Synergy+ 1.3.4: 2011-09-04T20:26:01 NOTE: connecting to 'stheo.mmello.local': 172.16.69.2:24800#012#011CClient.cpp,112
Sep  4 20:26:01 notebook Synergy+ 1.3.4: 2011-09-04T20:26:01 NOTE: connected to server#012#011synergyc.cpp,248

Note: the mouse/keyboard redirection will not work when the application windows is maximized. For those cases, Synergy accepts some hot-key configuration.

Surely Synergy is a very interesting and cheap resource when working with multiple computers.

Below follow a video showing Synergy in action and running in other platforms as well.

Cheers and see you!!

]]> http://marcelo.mmello.org/2011/09/sharing-resources-with-synergy/feed/ 1 Compartilhando recursos com Synergy http://marcelo.mmello.org/2011/09/compartilhando-recursos-com-synergy/?utm_source=rss&utm_medium=rss&utm_campaign=compartilhando-recursos-com-synergy http://marcelo.mmello.org/2011/09/compartilhando-recursos-com-synergy/#comments Sun, 04 Sep 2011 23:48:56 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=901 Para aqueles já trabalharam com mais de 1 monitor, estão cientes da agilidade e aumento da produtividade em tais condições. A boa notícia é que tal funcionalidade pode ser desfrutada em computadores distintos sem a necessidade de hardware adicional como KVM ou mais de uma placa de vídeo com o aplicativo Synergy.

Synergy é um software livre e opensouce que permite de uma maneira muito fácil compartilhar o mouse e teclado entre computadores distintos. Não entendeu? Imagine que você tem um laptop e desktop em casa e gostaria de trabalhar com os dois computadores. Porém é um tanto chato, ficar trocando de mouse e teclado toda vez. Com Synergy, podemos arrastar o mouse para direita/esquerda/cima/baixo trocando de monitor e de computador respectivamente.

Synergy é atualmente suportado em Windows, Linux e MacOS.

Synergy

A configuração do Synergy é bem simples. Para os usuários de Fedora, basta seguirmos os passos abaixo:

# yum install synergy-plus

Uma vez instalado, basta configurarmos o aplicativo. Em nosso exemplo, temos 2 computadores (1 desktop e 1 laptop) rodando Fedora 15. O Synergy basicamente oferece 2 binários: synergys e synergyc.

synergys: sysnergys (server) deve ser executado no computador servidor, isto é, o computador no qual esta conectado o teclado e o mouse que será compartilhado entre os demais computadores.

synergyc: synergyc (client) deve ser executado nos demais computadores.

Para melhor ilustrar o cenário abaixo utilizado no exemplo, segue algumas informações:

Hostname: stheo.mmello.org IP: 172.16.69.2 – Servidor

Hostname: notebook.mmello.org IP: 172.16.69.3 – Cliente

Como primeiro passo de nossa configuração, é muito importante que ambas as máquinas sejam capazes de resolver nomes entre si. Caso não tenhas um servidor de DNS, colocar os nomes no /etc/hosts será suficiente.

# cat /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

172.16.69.2 stheo.mmello.local stheo
172.16.69.3 notebook.mmello.local notebook

Uma vez configurado o arquivo /etc/hosts, vamos as configurações do Synergy.

Servidor:

stheo $> cat ˜/.synergy.conf
section: screens
   stheo.mmello.local:
   notebook.mmello.local:
end

section: links
   stheo.mmello.local:
      left = notebook.mmello.local
   notebook.mmello.local:
      right = stheo.mmello.local
end

Cliente:

notebook $> cat ~/.synergy.conf
section: screens
   notebook.mmello.local:
   stheo.mmello.local:
end

section: links
   notebook.mmello.local:
      right = stheo.mmello.local
   stheo.mmello.local:
      left = notebook.mmello.local
end

Como podemos ver nos arquivos listados acima, a configuração do Synergy é bem simples. Basicamente a configuração aponta que levando o mouse para o lado esquerdo do computador selecionado como servidor (stheo), o mouse/teclado será direcionado para o computador cliente (notebook). Uma vez no computador cliente, movendo o mouse para o lado direto da tela, voltaremos ao computador servidor (stheo).

Como nossos arquivos de configuração já estão prontos, basta iniciarmos os processos synergyc e synergys.  Para facilitar a vida, eu criei um alias na máquina servidor e cliente. Obviamente você poderia colocar isso como serviço SYSV, rc.local, etc.

Alias no servidor (stheo):

stheo $> alias  | grep start
alias start_monitor_share='synergys -a 172.16.69.2 --name stheo.mmello.local \
 -c /home/mdemello/.synergy.conf'

Alias no cliente (notebook):

notebook $> alias  | grep start
alias start_monitor_share='synergyc --daemon \
--restart -n notebook.mmello.local stheo.mmello.local'

Detalhe: Se estiver utilizando firewall, libere a porta 24800(tcp).

Uma vez os processos em execução, podemos observar no arquivo /var/log/messages do cliente algumas mensagens do Synergy.

notebook $> sudo cat /var/log/messages | grep Syner
Sep  4 20:26:01 notebook Synergy+ 1.3.4: 2011-09-04T20:26:01 NOTE: started client#012#011synergyc.cpp,331
Sep  4 20:26:01 notebook Synergy+ 1.3.4: 2011-09-04T20:26:01 NOTE: connecting to 'stheo.mmello.local': 172.16.69.2:24800#012#011CClient.cpp,112
Sep  4 20:26:01 notebook Synergy+ 1.3.4: 2011-09-04T20:26:01 NOTE: connected to server#012#011synergyc.cpp,248

Detalhe: o redirecionamento de mouse/teclado não funciona quando se utiliza aplicativos em maximizados. Nesses casos, é possível configurar combinações de teclas.

Com certeza Synergy é um recurso muito interessante e barato para quem deseja trabalhar com vários computador simultâneamente.

Segue um vídeo bem interessante mostrando o Synergy em ação em outras plataformas também.

Um forte quebra costela e até a próxima.

]]> http://marcelo.mmello.org/2011/09/compartilhando-recursos-com-synergy/feed/ 0 Boleadoras Show in Porto Alegre/RS – Brazil :) http://marcelo.mmello.org/2011/08/boleadoras-2/?utm_source=rss&utm_medium=rss&utm_campaign=boleadoras-2 http://marcelo.mmello.org/2011/08/boleadoras-2/#comments Wed, 17 Aug 2011 05:18:24 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=891 Having some fun at Galpão Crioulo in Porto Alegre/RS – Brazil

]]> http://marcelo.mmello.org/2011/08/boleadoras-2/feed/ 3 RHN Satellite Tips and Tricks – Red Hat Summit 2011 by Thomas Cameron http://marcelo.mmello.org/2011/06/rhn-satellite-tips-and-tricks-red-hat-summit-2011/?utm_source=rss&utm_medium=rss&utm_campaign=rhn-satellite-tips-and-tricks-red-hat-summit-2011 http://marcelo.mmello.org/2011/06/rhn-satellite-tips-and-tricks-red-hat-summit-2011/#comments Sun, 12 Jun 2011 19:08:59 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=847 Hello,

For who those are interested about RHN Satellite and Spacewalk, here  follow the two presentations made by Thomas Cameron at Red Hat Summit 2011

RHN Satellite Power User Tips and Tricks, Part 1 – PDF

 

 

 

 

 

 

 

 

 

 

 

 

RHN Satellite Power User Tips and Tricks, Part 2 – PDF

 

 

 

 

 

 

 

 

 

 

Congratulations Thomas for this excellent talk!

 
]]> http://marcelo.mmello.org/2011/06/rhn-satellite-tips-and-tricks-red-hat-summit-2011/feed/ 1 World IPv6 day http://marcelo.mmello.org/2011/06/world-ipv6-day/?utm_source=rss&utm_medium=rss&utm_campaign=world-ipv6-day http://marcelo.mmello.org/2011/06/world-ipv6-day/#comments Wed, 08 Jun 2011 20:30:15 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=831 Hello,

Due the World IPv6 day, I decided publish here some notes about this.

Q: What is World IPv6 Day?

This is a trial period where a number of major web sites will provide their content on both IPv4 and IPv6. This is being led by the Internet Society (ISOC). more information is posted on their World IPv6 Day page.

World IPv6 day, scheduled for 8 June 2011, is a global-scale test flight of IPv6 sponsored by the Internet Society. On World IPv6 Day, major web companies and other industry players will come together to enable IPv6 on their main websites for 24 hours. The goal is to motivate organizations across the industry — Internet service providers, hardware makers, operating system vendors and web companies — to prepare their services for IPv6 to ensure a successful transition as IPv4 address space runs out.

Read more at http://test-ipv6.com/ipv6day.html

APNIC IPv4 Address Pool Reaches Final /8 

APNIC published few days ago,  that in  Friday, 15 April 2011, the APNIC pool reached the Final /8 IPv4 address block, bringing us to Stage Three of IPv4 exhaustion in the Asia Pacific.

Source: http://www.apnic.net/publications/news/2011/final-8

Red Hat – IPV6 .redhat.com

Since the world is moving forward regarding IPV6, Red Hat have a interesting page which contains good instructions for who those want to move to IPV6.

Check it out –> http://ipv6.redhat.com/

And you, ready to move to IPV6 dude??

]]> http://marcelo.mmello.org/2011/06/world-ipv6-day/feed/ 0 Diretórios Privados com PAM_Namespace http://marcelo.mmello.org/2011/06/pam_namespaceselinux_contexts/?utm_source=rss&utm_medium=rss&utm_campaign=pam_namespaceselinux_contexts http://marcelo.mmello.org/2011/06/pam_namespaceselinux_contexts/#comments Sun, 05 Jun 2011 04:20:00 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=52 Olá,

Lembro-me dos tempos em que ministrava os cursos da Red Hat pelo Brasil (bons tempos aqueles). Com certeza foi uma das  etapas da minha vida em que mais aprendi profissionalmente e pessoalmente. É incrível estar em lugar diferente a cada semana, com pessoas diferentes com culturas diferentes. Com certeza foi uma experiência fantástica.

Uma das perguntas frequentes que os alunos faziam, era se existia um modelo de particionamento que oferecesse uma boa relação custo vs benefício vs segurança. Acredito que a  melhor resposta para esse questionamento é obtida através de outros questionamentos: Quais serviços irão ser executados? Será utilizado quota? Como será o backup? Os usuários terão acesso remoto? Etc…

Independente do esquema de particionamento escolhido, sempre é observado a questão do diretório /tmp que além de ser compartilhado com os demais usuários, possui permissão de escrita, podendo assim gerar algum desconforto para o sysadmin ou instabilidade do sistema por conta de scripts ou usuários mal intencionados. Por exemplo, executar o comando yes, redirecionando a saída para um arquivo dentro do /tmp? Ou ainda ter acesso à informações  de outros usuários descuidados em salvar arquivos dentro do diretório /tmp.


[root@f15 ~]# yes DoS >> /tmp/disk-FULL
yes: standard output: No space left on device
yes: write error

Sendo um arquivo privado, o seu lugar não deveria ser tal diretório, porém “shit happens”!!! Geralmente cria-se então uma partição para acomodar o diretório /tmp, evitando assim  aborrecimentos causados por usuários ao executar comandos maliciosos no sistema.  Porém, como fica a privacidade dos arquivos armazenados dentro do diretório /tmp?

Com a utilização do módulo da PAM pam_namespace.so, podemos criar diretórios “poli-instanciados privados”, isto é, quando qualquer usuário acessar o diretório mapeado, será um diretório privado.

Nota: Iremos utilizar o diretório /tmp como exemplo, porém a técnica pode ser aplicada para outras situações.

A configuração do módulo pam_namespace.so se dá dentro no arquivo /etc/security/namespace.conf. Basicamente o formato de configuração do arquivo é:

diretório instância_dir_prefix tipo_de_autenticação lista_de_usuário

No primeiro campo, devemos colocar o caminho do diretório privado.

No segundo campo, iremos definir qual prefix do diretório que será utilizado para armazenar os arquivos criados pelo usuários. Esse diretório será automaticamente criado pelo módulo pam_namespace com permissão 000.

No terceiro campo, se define o método utilizado pela pam_namespace. São válidas as seguintes entradas:

  • user -> baseado no nome do usuário
  • level -> baseado no context SELinux MLS e nome do usuário. SELinux é obrigatório!
  • context -> baseado no contexto SELinux do processo e usuário. SELinux é obrigatório!
  • tmpfs -> utilização de diretório TMPFS
  • tmpdir -> para diretórios temporários que serão removidos após o logout do usuário

Por fim no quarto campo, temos a lista dos usuários (separados por vírgula) que serão excluídos dessa regra. Caso a lista inicie com o sinal “~“, a regra se aplicará somente os usuários contidos na lista. Se deixado em branco, a regra se aplicará para todos os usuários do sistema.

No intuito de exemplificar a configuração,  o /tmp será mapeado utilizando o método context para os usuários fulano e sicrano somente.

Primeiramente, iremos configurar o arquivo /etc/security/pam_namespace.conf :

Dica: abra um terminal como usuário root e deixe-o aberto durante o processo de configuração, assim em caso de problemas, você não perderá acesso de root no sistema


[root@f15 ~]# useradd  fulano
[root@f15 ~]# useradd  cicrano
[root@f15 ~]# echo senha | passwd --stdin fulano
Changing password for user fulano.
passwd: all authentication tokens updated successfully.
[root@f15 ~]# echo senha | passwd --stdin sicrano
Changing password for user sicrano.
passwd: all authentication tokens updated successfully.
[root@f15 ~]# ls -lad /tmp
drwxrwxrwt. 7 root root 4096 Jun  5 18:45 /tmp
[root@f15 ~]# cat /etc/security/namespace.conf  | grep -v ^#  | grep -v ^$
/tmp    /var/tmp/tmp-PAM_namespace    context    ~fulano,sicrano
[root@f15 ~]# setsebool -P allow_polyinstantiation 1
[root@f15 ~]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 24
Policy from config file:        targeted

Feito isso, nosso próximo passo será ativar o módulo pam_namespace.so dentro do arquivo /etc/pam.d/system-auth e /etc/pam.d/sshd

[root@f15 /]# cat /etc/pam.d/sshd
#%PAM-1.0
auth	   required	pam_sepermit.so
auth       include      password-auth
account    required     pam_nologin.so
account    include      password-auth

password   include      password-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context

session    required     pam_selinux.so open env_params
session	   required	pam_namespace.so debug
session    optional     pam_keyinit.so force revoke
session    include      password-auth

[root@f15 /]# cat /etc/pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        required      pam_deny.so

account     required      pam_unix.so
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     required      pam_permit.so

password    requisite     pam_cracklib.so try_first_pass retry=3 type=
password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtok
password    required      pam_deny.so
session     optional      pam_keyinit.so revoke

session     required      pam_limits.so
session	    required	  pam_namespace.so debug
-session     optional      pam_systemd.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so

Nota: é muito importante o posicionamento da linha pam_namespace.so dentro dos arquivos de configuração.

Abra uma nova sessão com o usuário root, e monitore os arquivos /var/log/messages e /var/log/secure. Acesse o sistema com os usuários fulano e sicrano e observe:

notebook $> ssh fulano@192.168.122.112
fulano@192.168.122.112's password:
Last login: Sun Jun  5 20:26:01 2011 from 192.168.122.1
[fulano@f15 ~]$ cd /tmp/
[fulano@f15 tmp]$ ls -la
total 8
drwxrwxrwt.  2 root root 4096 Jun  5 20:26 .
dr-xr-xr-x. 23 root root 4096 Jun  5 20:23 ..
[fulano@f15 tmp]$ touch private
[fulano@f15 tmp]$ exit
logout
Connection to 192.168.122.112 closed.

[root@f15 tmp]# tail -f /var/log/messages  /var/log/secure -n0

==> /var/log/messages <==

==> /var/log/secure <==

Jun  5 20:39:05 f15 sshd[1741]: Accepted password for fulano from 192.168.122.1 port 42627 ssh2
Jun  5 23:39:05 f15 sshd[1742]: fatal: mm_request_receive: read: Connection reset by peer
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): open_session - start
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Parsing config file /etc/security/namespace.conf
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Expanded polydir: '/tmp'
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Expanded ruser polydir: '/tmp'
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Expanded instance prefix: '/var/tmp/tmp-PAM_namespace/'
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Configured poly dirs:
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): dir='/tmp' iprefix='/var/tmp/tmp-PAM_namespace/' meth=2
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): override user 500
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): override user 501
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Set up namespace for pid 1741
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Checking for ns override in dir /tmp for uid 500
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Need poly ns for user 500 for dir /tmp
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Checking for ns override in dir /tmp for uid 0
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Checking for ns override in dir /tmp for uid 500
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Setting poly ns for user 500 for dir /tmp
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Set namespace for directory /tmp
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): member context returned by policy system_u:object_r:user_tmp_t:s0
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): poly_name system_u:object_r:user_tmp_t:s0_fulano
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Inst ctxt system_u:object_r:user_tmp_t:s0 Orig ctxt system_u:object_r:tmp_t:s0
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): instance_dir /var/tmp/tmp-PAM_namespace/system_u:object_r:user_tmp_t:s0_fulano
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): Protect mount of /var/tmp/tmp-PAM_namespace over itself
Jun  5 20:39:06 f15 sshd[1741]: pam_namespace(sshd:session): namespace setup ok for pid 1741
Jun  5 20:39:06 f15 sshd[1741]: pam_systemd(sshd:session): Moving new user session for fulano into control group /user/fulano/19.
Jun  5 20:39:06 f15 sshd[1741]: pam_unix(sshd:session): session opened for user fulano by (uid=0)

Logando agora com o usuário sicrano:

notebook $> ssh sicrano@192.168.122.112
sicrano@192.168.122.112's password:
[sicrano@f15 ~]$ cd /tmp/
[sicrano@f15 tmp]$ ls
[sicrano@f15 tmp]$ touch test2
[sicrano@f15 tmp]$ ls -la
total 8
drwxrwxrwt.  2 root    root    4096 Jun  5 20:41 .
dr-xr-xr-x. 23 root    root    4096 Jun  5 20:23 ..
-rw-rw-r--.  1 sicrano sicrano    0 Jun  5 20:41 test2
[sicrano@f15 tmp]$ logout
Connection to 192.168.122.112 closed.

[root@f15 tmp]# tail -f /var/log/messages  /var/log/secure -n0

==> /var/log/messages <==

==> /var/log/secure <==

Jun  5 20:41:29 f15 sshd[1770]: Accepted password for sicrano from 192.168.122.1 port 43159 ssh2
Jun  5 23:41:29 f15 sshd[1771]: fatal: mm_request_receive: read: Connection reset by peer
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): open_session - start
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Parsing config file /etc/security/namespace.conf
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Expanded polydir: '/tmp'
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Expanded ruser polydir: '/tmp'
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Expanded instance prefix: '/var/tmp/tmp-PAM_namespace/'
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Configured poly dirs:
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): dir='/tmp' iprefix='/var/tmp/tmp-PAM_namespace/' meth=2
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): override user 500
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): override user 501
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Set up namespace for pid 1770
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Checking for ns override in dir /tmp for uid 501
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Need poly ns for user 501 for dir /tmp
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Checking for ns override in dir /tmp for uid 0
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Checking for ns override in dir /tmp for uid 501
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Setting poly ns for user 501 for dir /tmp
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Set namespace for directory /tmp
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): member context returned by policy system_u:object_r:user_tmp_t:s0
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): poly_name system_u:object_r:user_tmp_t:s0_sicrano
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Inst ctxt system_u:object_r:user_tmp_t:s0 Orig ctxt system_u:object_r:tmp_t:s0
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): instance_dir /var/tmp/tmp-PAM_namespace/system_u:object_r:user_tmp_t:s0_sicrano
Jun  5 20:41:29 f15 sshd[1770]: pam_namespace(sshd:session): Protect mount of /var/tmp/tmp-PAM_namespace over itself
Jun  5 20:41:30 f15 sshd[1770]: pam_namespace(sshd:session): namespace setup ok for pid 1770
Jun  5 20:41:30 f15 sshd[1770]: pam_systemd(sshd:session): Moving new user session for sicrano into control group /user/sicrano/20.
Jun  5 20:41:30 f15 sshd[1770]: pam_unix(sshd:session): session opened for user sicrano by (uid=0)
Jun  5 20:41:46 f15 sshd[1780]: Received disconnect from 192.168.122.1: 11: disconnected by user
Jun  5 20:41:46 f15 sshd[1770]: pam_namespace(sshd:session): close_session - start
Jun  5 20:41:46 f15 sshd[1770]: pam_namespace(sshd:session): Resetting namespace for pid 1770
Jun  5 20:41:46 f15 sshd[1770]: pam_namespace(sshd:session): orig namespace for pid 1770
Jun  5 20:41:46 f15 sshd[1770]: pam_namespace(sshd:session): Checking for ns override in dir /tmp for uid 501
Jun  5 20:41:46 f15 sshd[1770]: pam_namespace(sshd:session): Unmounting instance dir for user 501 & dir /tmp
Jun  5 20:41:46 f15 sshd[1770]: pam_namespace(sshd:session): Unmount of /tmp succeeded
Jun  5 20:41:46 f15 sshd[1770]: pam_namespace(sshd:session): resetting namespace ok for pid 1770
Jun  5 20:41:46 f15 sshd[1770]: pam_systemd(sshd:session): Moving remaining processes of user session 20 of sicrano into control group /user/sicrano/master.
Jun  5 20:41:46 f15 sshd[1770]: pam_unix(sshd:session): session closed for user sicrano

Verificando os diretórios e arquivos criados, temos:

[root@f15 tmp]# ls -laRZ /var/tmp/
/var/tmp/:
drwxrwxrwt. root root system_u:object_r:tmp_t:s0       .
drwxr-xr-x. root root system_u:object_r:var_t:s0       ..
d---------. root root system_u:object_r:user_tmp_t:s0  tmp-PAM_namespace
/var/tmp/tmp-PAM_namespace:
d---------. root root system_u:object_r:user_tmp_t:s0  .
drwxrwxrwt. root root system_u:object_r:tmp_t:s0       ..
drwxrwxrwt. root root system_u:object_r:tmp_t:s0       system_u:object_r:user_tmp_t:s0_sicrano
drwxrwxrwt. root root system_u:object_r:tmp_t:s0       system_u:object_r:user_tmp_t:s0_fulano

/var/tmp/tmp-PAM_namespace/system_u:object_r:user_tmp_t:s0_sicrano:
drwxrwxrwt. root    root    system_u:object_r:tmp_t:s0       .
d---------. root    root    system_u:object_r:user_tmp_t:s0  ..
-rw-rw-r--. sicrano sicrano unconfined_u:object_r:user_tmp_t:s0 test2

/var/tmp/tmp-PAM_namespace/system_u:object_r:user_tmp_t:s0_fulano:
drwxrwxrwt. root   root   system_u:object_r:tmp_t:s0       .
d---------. root   root   system_u:object_r:user_tmp_t:s0  ..
-rw-rw-r--. fulano fulano unconfined_u:object_r:user_tmp_t:s0 private

A utilização do módulo pam_namespace.so não resolve todos os problemas, mas certamente é uma configuração interessante e uma carta na manga do sysadmin!

Um quebra costela, tchê!!

]]> http://marcelo.mmello.org/2011/06/pam_namespaceselinux_contexts/feed/ 0 Troteando pelos Pampas http://marcelo.mmello.org/2011/06/troteando-pelos-pampas/?utm_source=rss&utm_medium=rss&utm_campaign=troteando-pelos-pampas http://marcelo.mmello.org/2011/06/troteando-pelos-pampas/#comments Fri, 03 Jun 2011 14:19:17 +0000 Marcelo Moreira de Mello http://marcelo.mmello.org/?p=782 Mas barbaridade tchê!!!!

Revirando as coisas do passado, em meio a alguns papéis velhos, minha mãe achou uma poesia que fiz em 1994  aos 10 anos de idade. O engraçado é que 17 anos depois, hoje, durante a releitura do poema algumas partes do texto “surgiram” automaticamente, me lembrando de algumas estrofes naturalmente.

Troteando pelos Pampas

Troteando pelos pampas,
no lombo do meu cavalo,
avistei muito distante
uma prenda linda e irradiante. 

Peguei minha prenda e fui para o galpão,
ao lado do fogo de chão,
preparei um churrasco e um chimarrão,
chamando a indiada
para um fandango bem "bão". 

Após o fandango,
a indiada foi se "bandeando",
assim restando...
Minha prenda e eu nos amando...

O sol renasce no céu limpo,
minha prenda
ao meu lado
montamos no cavalo,
partindo em direção ao vento....
                                                                Marcelo Moreira de Mello

Abaixo, segue o arquivo original:

Um quebra costela apertado tchê!!!

]]> http://marcelo.mmello.org/2011/06/troteando-pelos-pampas/feed/ 1