You can subscribe to this list here.
2002 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(227) |
Sep
(185) |
Oct
(259) |
Nov
(168) |
Dec
(163) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2003 |
Jan
(94) |
Feb
(92) |
Mar
(121) |
Apr
(83) |
May
(158) |
Jun
(72) |
Jul
(150) |
Aug
(64) |
Sep
(81) |
Oct
(98) |
Nov
(79) |
Dec
(27) |
2004 |
Jan
(93) |
Feb
(81) |
Mar
(85) |
Apr
(43) |
May
(71) |
Jun
(28) |
Jul
(89) |
Aug
(156) |
Sep
(51) |
Oct
(50) |
Nov
(48) |
Dec
(56) |
2005 |
Jan
(59) |
Feb
(180) |
Mar
(68) |
Apr
(58) |
May
(44) |
Jun
(59) |
Jul
(50) |
Aug
(103) |
Sep
(100) |
Oct
(66) |
Nov
(41) |
Dec
(33) |
2006 |
Jan
(41) |
Feb
(51) |
Mar
(133) |
Apr
(66) |
May
(40) |
Jun
(34) |
Jul
(86) |
Aug
(28) |
Sep
(62) |
Oct
(54) |
Nov
(24) |
Dec
(23) |
2007 |
Jan
(72) |
Feb
(81) |
Mar
(33) |
Apr
(64) |
May
(23) |
Jun
(67) |
Jul
(33) |
Aug
(54) |
Sep
(38) |
Oct
(40) |
Nov
(108) |
Dec
(84) |
2008 |
Jan
(49) |
Feb
(44) |
Mar
(65) |
Apr
(43) |
May
(75) |
Jun
(171) |
Jul
(121) |
Aug
(86) |
Sep
(189) |
Oct
(326) |
Nov
(172) |
Dec
(178) |
2009 |
Jan
(86) |
Feb
(154) |
Mar
(159) |
Apr
(112) |
May
(113) |
Jun
(64) |
Jul
(147) |
Aug
(170) |
Sep
(157) |
Oct
(153) |
Nov
(149) |
Dec
(184) |
2010 |
Jan
(196) |
Feb
(234) |
Mar
(191) |
Apr
(233) |
May
(95) |
Jun
(200) |
Jul
(134) |
Aug
(189) |
Sep
(158) |
Oct
(135) |
Nov
(104) |
Dec
(135) |
2011 |
Jan
(101) |
Feb
(142) |
Mar
(157) |
Apr
(142) |
May
(145) |
Jun
(195) |
Jul
(306) |
Aug
(268) |
Sep
(128) |
Oct
(80) |
Nov
(125) |
Dec
(112) |
2012 |
Jan
(93) |
Feb
(125) |
Mar
(94) |
Apr
(102) |
May
(134) |
Jun
(85) |
Jul
(80) |
Aug
(130) |
Sep
(104) |
Oct
(104) |
Nov
(133) |
Dec
(107) |
2013 |
Jan
(136) |
Feb
(127) |
Mar
(172) |
Apr
(183) |
May
(158) |
Jun
(84) |
Jul
(132) |
Aug
(143) |
Sep
(46) |
Oct
(94) |
Nov
(42) |
Dec
(61) |
2014 |
Jan
(248) |
Feb
(89) |
Mar
(93) |
Apr
(102) |
May
(59) |
Jun
(44) |
Jul
(131) |
Aug
(69) |
Sep
(199) |
Oct
(88) |
Nov
(38) |
Dec
(59) |
2015 |
Jan
(54) |
Feb
(57) |
Mar
(70) |
Apr
(71) |
May
(63) |
Jun
(79) |
Jul
(85) |
Aug
(106) |
Sep
(69) |
Oct
(72) |
Nov
(48) |
Dec
(28) |
2016 |
Jan
(42) |
Feb
(70) |
Mar
(89) |
Apr
(87) |
May
(114) |
Jun
(57) |
Jul
(47) |
Aug
(60) |
Sep
(38) |
Oct
(36) |
Nov
(12) |
Dec
(28) |
2017 |
Jan
(32) |
Feb
(44) |
Mar
(135) |
Apr
(101) |
May
(98) |
Jun
(42) |
Jul
(54) |
Aug
(21) |
Sep
(23) |
Oct
(83) |
Nov
(89) |
Dec
(15) |
2018 |
Jan
(18) |
Feb
(2) |
Mar
(35) |
Apr
(12) |
May
(52) |
Jun
(103) |
Jul
(65) |
Aug
(35) |
Sep
(47) |
Oct
(81) |
Nov
(86) |
Dec
(44) |
2019 |
Jan
(34) |
Feb
(63) |
Mar
(58) |
Apr
(21) |
May
(39) |
Jun
(30) |
Jul
(43) |
Aug
(22) |
Sep
(26) |
Oct
(62) |
Nov
(39) |
Dec
(47) |
2020 |
Jan
(40) |
Feb
(27) |
Mar
(30) |
Apr
(20) |
May
(42) |
Jun
(24) |
Jul
(60) |
Aug
(26) |
Sep
(60) |
Oct
(29) |
Nov
(15) |
Dec
(7) |
2021 |
Jan
(34) |
Feb
(31) |
Mar
(54) |
Apr
(8) |
May
(40) |
Jun
(49) |
Jul
(14) |
Aug
(26) |
Sep
(25) |
Oct
(13) |
Nov
(46) |
Dec
(19) |
2022 |
Jan
(45) |
Feb
(8) |
Mar
(20) |
Apr
(25) |
May
(8) |
Jun
(12) |
Jul
(10) |
Aug
(11) |
Sep
(4) |
Oct
(11) |
Nov
(3) |
Dec
(3) |
2023 |
Jan
|
Feb
(25) |
Mar
(7) |
Apr
(16) |
May
(7) |
Jun
(8) |
Jul
(31) |
Aug
(11) |
Sep
(32) |
Oct
(18) |
Nov
(25) |
Dec
(6) |
2024 |
Jan
(48) |
Feb
(31) |
Mar
(7) |
Apr
(1) |
May
(22) |
Jun
(8) |
Jul
(3) |
Aug
|
Sep
|
Oct
(5) |
Nov
|
Dec
|
From: Glick, B. <bg...@il...> - 2024-10-09 18:19:24
|
Thank you, Markus. I want to apologize for the tone of my original email. You had given an update about this on May 10, 2024<https://sourceforge.net/p/xcat/mailman/message/58770579/>, but I was having trouble locating that when I sent this latest enquiry. I have been using the last development release<https://urldefense.com/v3/__http:/xcat.org/files/xcat/repos/yum/devel/core-snap/__;!!DZ3fjg!4r59aVCvn4jsWNCCrHAh6xyrgu5mx6BI9J0SxQ-d0TGtijvuu86F-dHJdhhvulngQh7UVfY6X1ZJUe-x7E-_X1DEjgU$> for the last week. It is working well for us. Thanks! - Bill Glick From: Markus Hilger <mar...@me...> Date: Tuesday, October 8, 2024 at 10:56 AM To: Glick, Bill <bg...@il...>, xCAT Users Mailing list <xca...@li...> Subject: AW: xCAT Consortium Update Hi Bill, yes, we are still here :) However, as we are all only following the project on the side, things are sometimes progressing a little slower than we would like. The current plan is to release 2.17<https://urldefense.com/v3/__https:/github.com/xcat2/xcat-core/milestone/53__;!!DZ3fjg!4r59aVCvn4jsWNCCrHAh6xyrgu5mx6BI9J0SxQ-d0TGtijvuu86F-dHJdhhvulngQh7UVfY6X1ZJUe-x7E-_I0DJmgo$> before Supercomputing this year. The codebase is ready, and the last development release<https://urldefense.com/v3/__http:/xcat.org/files/xcat/repos/yum/devel/core-snap/__;!!DZ3fjg!4r59aVCvn4jsWNCCrHAh6xyrgu5mx6BI9J0SxQ-d0TGtijvuu86F-dHJdhhvulngQh7UVfY6X1ZJUe-x7E-_X1DEjgU$> is what 2.17 will be. So, anyone is welcome to use it already. You don't have to wait for an "official release". We might want to hold another BoF session at Supercomputing. But we are still finalizing the details. Nevertheless, I would like to mention again that xCAT itself has no long-term future. We do not recommend using xCAT for new clusters that may want to upgrade to newer operating systems such as RHEL 10. The project is only in maintenance mode. We will provide a small fix here and there for existing installations but there will be no major new development or regular releases. We are happy to merge pull requests though. For new deployments we recommend using confluent<https://urldefense.com/v3/__https:/github.com/xcat2/confluent__;!!DZ3fjg!4r59aVCvn4jsWNCCrHAh6xyrgu5mx6BI9J0SxQ-d0TGtijvuu86F-dHJdhhvulngQh7UVfY6X1ZJUe-x7E-_IdZDBVg$> instead. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<https://urldefense.com/v3/__http:/www.megware.com/__;!!DZ3fjg!4r59aVCvn4jsWNCCrHAh6xyrgu5mx6BI9J0SxQ-d0TGtijvuu86F-dHJdhhvulngQh7UVfY6X1ZJUe-x7E-_gOWqpSY$> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: Glick, Bill <bg...@il...> Gesendet: Mittwoch, 2. Oktober 2024 18:13 An: xCAT Users Mailing list <xca...@li...>; Markus Hilger <mar...@me...> Betreff: Re: xCAT Consortium Update Any news or updates regarding the xCAT Consortium? Did discussion move to some new place? Or are we to presume the xCAT Consortium is defunct? - Bill Glick From: Glick, Bill <bg...@il...> Date: Thursday, May 2, 2024 at 10:33 AM To: xCAT Users Mailing list <xca...@li...> Subject: Re: [xcat-user] xCAT Consortium Update How is the xCAT Consortium effort going? I had the impression we’d hear approximately monthly updates about its progress, but I haven’t seen any updates since this message in December. - Bill Glick From: Markus Hilger <mar...@me...> Date: Monday, December 11, 2023 at 11:07 AM To: xCAT Users Mailing list <xca...@li...> Subject: [xcat-user] xCAT Consortium Update Dear xCAT community, it is one month ago, since we met at Supercomputing ’23 to announce that a consortium led by RedLine, OCF and MEGWARE is willing to take over the ownership of the current xCAT project to provide continuity for existing xCAT 2 based clusters. And we are still thrilled having seen so many of you during this event who have shown their interest and support, both in presence and online. On the technical side, we have started to dive into the IBM-internal integration setup for compiling and testing xCAT releases. Our goal is to replicate and extend this infrastructure at RedLine, OCF and MEGWARE to provide even wider test coverage on more hardware infrastructures for future releases. At the same time, we continue to investigate the various legal aspects of the transition. During our SC’23 meeting, we have also announced that in addition to our efforts surrounding xCAT 2, we would work with LENOVO towards making Confluent a suitable, community backed, xCAT 2 replacement for future cluster systems. For this reason, we invited LENOVO to become a full member of our consortium from the beginning. Understandably, this plan is a significant step for the Confluent team that requires thorough preparation and careful consideration and we will share further updates as this effort takes shape. We would also like to take this opportunity to thank the team at IBM, namely Nathan A Besaw, for their continued support during the transition. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<https://urldefense.com/v3/__http:/www.megware.com/__;!!DZ3fjg!408lxur06Jk8-bQWQGKw6CU6hJUpB8yNM9CuibvOFzrB8wxMVavWBFshC-oqQggakVDDlr1jpM49BBSszZMCWMo_ObU$> Geschäftsführer: André Singer, Axel Auweter Amtsgericht: Chemnitz HRB 584 |
From: Markus H. <mar...@me...> - 2024-10-08 16:09:09
|
Hi Bill, yes, we are still here :) However, as we are all only following the project on the side, things are sometimes progressing a little slower than we would like. The current plan is to release 2.17<https://github.com/xcat2/xcat-core/milestone/53> before Supercomputing this year. The codebase is ready, and the last development release<http://xcat.org/files/xcat/repos/yum/devel/core-snap/> is what 2.17 will be. So, anyone is welcome to use it already. You don't have to wait for an "official release". We might want to hold another BoF session at Supercomputing. But we are still finalizing the details. Nevertheless, I would like to mention again that xCAT itself has no long-term future. We do not recommend using xCAT for new clusters that may want to upgrade to newer operating systems such as RHEL 10. The project is only in maintenance mode. We will provide a small fix here and there for existing installations but there will be no major new development or regular releases. We are happy to merge pull requests though. For new deployments we recommend using confluent<https://github.com/xcat2/confluent> instead. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<http://www.megware.com/> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: Glick, Bill <bg...@il...> Gesendet: Mittwoch, 2. Oktober 2024 18:13 An: xCAT Users Mailing list <xca...@li...>; Markus Hilger <mar...@me...> Betreff: Re: xCAT Consortium Update Any news or updates regarding the xCAT Consortium? Did discussion move to some new place? Or are we to presume the xCAT Consortium is defunct? - Bill Glick From: Glick, Bill <bg...@il...> Date: Thursday, May 2, 2024 at 10:33 AM To: xCAT Users Mailing list <xca...@li...> Subject: Re: [xcat-user] xCAT Consortium Update How is the xCAT Consortium effort going? I had the impression we’d hear approximately monthly updates about its progress, but I haven’t seen any updates since this message in December. - Bill Glick From: Markus Hilger <mar...@me...> Date: Monday, December 11, 2023 at 11:07 AM To: xCAT Users Mailing list <xca...@li...> Subject: [xcat-user] xCAT Consortium Update Dear xCAT community, it is one month ago, since we met at Supercomputing ’23 to announce that a consortium led by RedLine, OCF and MEGWARE is willing to take over the ownership of the current xCAT project to provide continuity for existing xCAT 2 based clusters. And we are still thrilled having seen so many of you during this event who have shown their interest and support, both in presence and online. On the technical side, we have started to dive into the IBM-internal integration setup for compiling and testing xCAT releases. Our goal is to replicate and extend this infrastructure at RedLine, OCF and MEGWARE to provide even wider test coverage on more hardware infrastructures for future releases. At the same time, we continue to investigate the various legal aspects of the transition. During our SC’23 meeting, we have also announced that in addition to our efforts surrounding xCAT 2, we would work with LENOVO towards making Confluent a suitable, community backed, xCAT 2 replacement for future cluster systems. For this reason, we invited LENOVO to become a full member of our consortium from the beginning. Understandably, this plan is a significant step for the Confluent team that requires thorough preparation and careful consideration and we will share further updates as this effort takes shape. We would also like to take this opportunity to thank the team at IBM, namely Nathan A Besaw, for their continued support during the transition. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<https://urldefense.com/v3/__http:/www.megware.com/__;!!DZ3fjg!408lxur06Jk8-bQWQGKw6CU6hJUpB8yNM9CuibvOFzrB8wxMVavWBFshC-oqQggakVDDlr1jpM49BBSszZMCWMo_ObU$> Geschäftsführer: André Singer, Axel Auweter Amtsgericht: Chemnitz HRB 584 |
From: Jarrod J. <jjo...@le...> - 2024-10-03 11:01:43
|
As to why root, ultimately 'nodeapply' has to ssh in to the nodes in a way that currently allows arbitrary commands as root, so it's not going through the confluent api and so you have to be 'really root' to do nodeshell and nodeapply, as that is the only user, by default, allowed to ssh into nodes to do such a thing. If you want a common user to be able to do that, then you can create: /var/lib/confluent/public/site/ssh/*.rootpubkey Files including a public key your user has access too. Also you can use ssh-agent and ssh-add if you want to add /root/.ssh/id_ed25519 for non-interactive use in a sesion. In terms of why that fails, there are some things I would check: /var/log/confluent/stdout /var/log/confluent/stderr /var/log/confluent/trace And the output of: confluent_selfcheck -an node01 ________________________________ From: Brian Joiner <mar...@gm...> Sent: Wednesday, October 2, 2024 10:00 PM To: xCAT Users Mailing list <xca...@li...> Subject: [External] [xcat-user] Confluent nodeapply -F fail I'm trying to setup syncfiles to transfer some configs for munge and slurm, and no matter what I do 'nodeapply -F <nodename>' fails if run after the node has booted: [brian@confluent01 confluent]$ sudo -i nodeapply -F node01 Enter passphrase for key '/root/.ssh/id_ed25519': node01: node01: --------------------------------------------------------------------------- node01: Running python script 'syncfileclient' from https://10.13.13.5/confluent-public/os/rocky-9.2-x86_64-default/scripts/ node01: Executing in /tmp/confluentscripts.Nm4k5fCWl node01: Traceback (most recent call last): node01: File "/tmp/confluentscripts.Nm4k5fCWl/syncfileclient", line 286, in <module> node01: synchronize() node01: File "/tmp/confluentscripts.Nm4k5fCWl/syncfileclient", line 233, in synchronize node01: status, rsp = ac.grab_url_with_status('/confluent-api/self/remotesyncfiles') node01: File "/opt/confluent/bin/apiclient", line 413, in grab_url_with_status node01: raise Exception(rsp.read()) node01: 'syncfileclient' exited with code 1 node01: Exception: b"500 - Command '['rsync', '-rvLD', '/tmp/tmp9wxzgajv.synctonode01/', 'root@[10.13.13.11]:/']' returned non-zero exit status 255." I have tried using various section headers like APPENDONCE and REPLACE in /var/lib/confluent/public/os/rocky-9.2-x86_64-default/syncfiles or just no header and it fails every time. I have no issue running other post scripts from various scripts subdirs. The files I want to transfer are in /var/lib/confluent/syncfiles, but I even tried them in /var/lib/confluent/public/syncfiles and no difference. Also, my user 'brian' is supposed to be an admin but I have to use 'sudo -i' to run anything. Syncffiles on xCAT never gave me any issues and I'm using the same syntax in this syncfiles file for Confluent: /source/file -> /destination/file Brian Joiner |
From: Brian J. <mar...@gm...> - 2024-10-03 02:00:33
|
I'm trying to setup syncfiles to transfer some configs for munge and slurm, and no matter what I do 'nodeapply -F <nodename>' fails if run after the node has booted: [brian@confluent01 confluent]$ sudo -i nodeapply -F node01 Enter passphrase for key '/root/.ssh/id_ed25519': node01: node01: --------------------------------------------------------------------------- node01: Running python script 'syncfileclient' from https://10.13.13.5/confluent-public/os/rocky-9.2-x86_64-default/scripts/ node01: Executing in /tmp/confluentscripts.Nm4k5fCWl node01: Traceback (most recent call last): node01: File "/tmp/confluentscripts.Nm4k5fCWl/syncfileclient", line 286, in <module> node01: synchronize() node01: File "/tmp/confluentscripts.Nm4k5fCWl/syncfileclient", line 233, in synchronize node01: status, rsp = ac.grab_url_with_status('/confluent-api/self/remotesyncfiles') node01: File "/opt/confluent/bin/apiclient", line 413, in grab_url_with_status node01: raise Exception(rsp.read()) node01: 'syncfileclient' exited with code 1 node01: Exception: b"500 - Command '['rsync', '-rvLD', '/tmp/tmp9wxzgajv.synctonode01/', 'root@[10.13.13.11]:/']' returned non-zero exit status 255." I have tried using various section headers like APPENDONCE and REPLACE in /var/lib/confluent/public/os/rocky-9.2-x86_64-default/syncfiles or just no header and it fails every time. I have no issue running other post scripts from various scripts subdirs. The files I want to transfer are in /var/lib/confluent/syncfiles, but I even tried them in /var/lib/confluent/public/syncfiles and no difference. Also, my user 'brian' is supposed to be an admin but I have to use 'sudo -i' to run anything. Syncffiles on xCAT never gave me any issues and I'm using the same syntax in this syncfiles file for Confluent: /source/file -> /destination/file Brian Joiner |
From: Glick, B. <bg...@il...> - 2024-10-02 17:13:17
|
Any news or updates regarding the xCAT Consortium? Did discussion move to some new place? Or are we to presume the xCAT Consortium is defunct? - Bill Glick From: Glick, Bill <bg...@il...> Date: Thursday, May 2, 2024 at 10:33 AM To: xCAT Users Mailing list <xca...@li...> Subject: Re: [xcat-user] xCAT Consortium Update How is the xCAT Consortium effort going? I had the impression we’d hear approximately monthly updates about its progress, but I haven’t seen any updates since this message in December. - Bill Glick From: Markus Hilger <mar...@me...> Date: Monday, December 11, 2023 at 11:07 AM To: xCAT Users Mailing list <xca...@li...> Subject: [xcat-user] xCAT Consortium Update Dear xCAT community, it is one month ago, since we met at Supercomputing ’23 to announce that a consortium led by RedLine, OCF and MEGWARE is willing to take over the ownership of the current xCAT project to provide continuity for existing xCAT 2 based clusters. And we are still thrilled having seen so many of you during this event who have shown their interest and support, both in presence and online. On the technical side, we have started to dive into the IBM-internal integration setup for compiling and testing xCAT releases. Our goal is to replicate and extend this infrastructure at RedLine, OCF and MEGWARE to provide even wider test coverage on more hardware infrastructures for future releases. At the same time, we continue to investigate the various legal aspects of the transition. During our SC’23 meeting, we have also announced that in addition to our efforts surrounding xCAT 2, we would work with LENOVO towards making Confluent a suitable, community backed, xCAT 2 replacement for future cluster systems. For this reason, we invited LENOVO to become a full member of our consortium from the beginning. Understandably, this plan is a significant step for the Confluent team that requires thorough preparation and careful consideration and we will share further updates as this effort takes shape. We would also like to take this opportunity to thank the team at IBM, namely Nathan A Besaw, for their continued support during the transition. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<https://urldefense.com/v3/__http:/www.megware.com/__;!!DZ3fjg!408lxur06Jk8-bQWQGKw6CU6hJUpB8yNM9CuibvOFzrB8wxMVavWBFshC-oqQggakVDDlr1jpM49BBSszZMCWMo_ObU$> Geschäftsführer: André Singer, Axel Auweter Amtsgericht: Chemnitz HRB 584 |
From: Kevin K. <kk...@sa...> - 2024-07-23 17:15:27
|
The problem with nvidia is that it needs to compile drivers from source, and then you have to use your own key to sign it. Usually, dkms handles that (to some extent), but in this case that wouldn't work. Personally, I avoid NVIDIA like the plague for that reason, but if you need GPUs, you probably can't. Yum can't completely skip GPG checks. You need to use rpm to install those RPMs. On Tue, Jul 23, 2024 at 9:08 AM kei...@lm... <kei...@lm...> wrote: > I am trying to add some nvidia rpms to a rhel7.9 diskless image and I am > getting some GPG errors I can work around. The below message is printed > during genimage. > > > > *“Warning: Enforcing GPG signature check globally as per active RPM > security policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this > message)”* > > > > > > And I get the errors below: > > > > otherpkgs3 37 MB/s | 46 kB 00:00 > > Dependencies resolved. > > > ================================================================================ > > Package Arch Version Repository > Size > > > ================================================================================ > > Installing: > > cuda-drivers x86_64 550.90.07-1 otherpkgs3 > 3.7 k > > Upgrading: > > kmod-nvidia-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 41 M > > nvidia-driver-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 125 M > > nvidia-driver-latest-dkms-NVML x86_64 3:550.90.07-1.el7 otherpkgs3 > 603 k > > nvidia-driver-latest-dkms-NvFBCOpenGL > > x86_64 3:550.90.07-1.el7 otherpkgs3 > 61 k > > nvidia-driver-latest-dkms-cuda x86_64 3:550.90.07-1.el7 otherpkgs3 > 452 k > > nvidia-driver-latest-dkms-cuda-libs x86_64 3:550.90.07-1.el7 otherpkgs3 > 56 M > > nvidia-driver-latest-dkms-devel x86_64 3:550.90.07-1.el7 otherpkgs3 > 19 k > > nvidia-driver-latest-dkms-libs x86_64 3:550.90.07-1.el7 otherpkgs3 > 133 M > > nvidia-modprobe-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 31 k > > nvidia-persistenced-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 38 k > > nvidia-xconfig-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 90 k > > Installing dependencies: > > nvidia-libXNVCtrl x86_64 3:550.90.07-2.el7 otherpkgs3 > 50 k > > nvidia-libXNVCtrl-devel x86_64 3:550.90.07-2.el7 otherpkgs3 > 59 k > > nvidia-settings x86_64 3:550.90.07-2.el7 otherpkgs3 > 1.5 M > > > > Transaction Summary > > > ================================================================================ > > Install 4 Packages > > Upgrade 11 Packages > > > > Total size: 358 M > > Downloading Packages: > > otherpkgs3 7.8 MB/s | 8.0 kB 00:00 > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x7CA8798C) is > already installed > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0xFD431D51) is > already installed > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x2FA658E0) is > already installed > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0xF4A80EB5) is > already installed > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x352C64E5) is > already installed > > The GPG keys listed for the "otherpkgs3" repository are already installed > but they are not correct for this package. > > Check that the correct key URLs are configured for this repository.. > Failing package is: cuda-drivers-550.90.07-1.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-libXNVCtrl-550.90.07-2.el7.x86_64.rpm is not > installed. Failing package is: nvidia-libXNVCtrl-3:550.90.07-2.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-libXNVCtrl-devel-550.90.07-2.el7.x86_64.rpm is not > installed. Failing package is: > nvidia-libXNVCtrl-devel-3:550.90.07-2.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-settings-550.90.07-2.el7.x86_64.rpm is not > installed. Failing package is: nvidia-settings-3:550.90.07-2.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for kmod-nvidia-latest-dkms-550.90.07-1.el7.x86_64.rpm is not > installed. Failing package is: > kmod-nvidia-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-550.90.07-1.el7.x86_64.rpm is not > installed. Failing package is: > nvidia-driver-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-NVML-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-driver-latest-dkms-NVML-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for > nvidia-driver-latest-dkms-NvFBCOpenGL-550.90.07-1.el7.x86_64.rpm is not > installed. Failing package is: > nvidia-driver-latest-dkms-NvFBCOpenGL-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-cuda-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-driver-latest-dkms-cuda-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for > nvidia-driver-latest-dkms-cuda-libs-550.90.07-1.el7.x86_64.rpm is not > installed. Failing package is: > nvidia-driver-latest-dkms-cuda-libs-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-devel-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-driver-latest-dkms-devel-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-libs-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-driver-latest-dkms-libs-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-modprobe-latest-dkms-550.90.07-1.el7.x86_64.rpm is > not installed. Failing package is: > nvidia-modprobe-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-persistenced-latest-dkms-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-persistenced-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-xconfig-latest-dkms-550.90.07-1.el7.x86_64.rpm is > not installed. Failing package is: > nvidia-xconfig-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Error: GPG check FAILED > > yum invocation failed. > > > > > > I tried hacking the genimage code to force “yum --nogpgcheck -y -c” but I > still get the errors. For some reason genimage is creating the repos with > gpgcheck=1 and ALL the gpgkeys are the same as below. > > > > [otherpkgs3] > > name=otherpkgs3 > > > baseurl=file:///install/post/otherpkgs/rhels7.4/x86_64/nvidia-driver-local-repo-rhel7-550.90.07 > > gpgcheck=0 > > gpgkey=file:///XCAT/RPM-GPG-KEY-redhat-release > > skip_if_unavailable=True > > > > has anyone seen this problem and worked around it? > > _______________________ > > - Keith Hannum > > - kei...@lm... > > > _______________________________________________ > xCAT-user mailing list > xCA...@li... > https://lists.sourceforge.net/lists/listinfo/xcat-user > |
From: <kei...@lm...> - 2024-07-23 16:07:47
|
I am trying to add some nvidia rpms to a rhel7.9 diskless image and I am getting some GPG errors I can work around. The below message is printed during genimage. "Warning: Enforcing GPG signature check globally as per active RPM security policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this message)" And I get the errors below: otherpkgs3 37 MB/s | 46 kB 00:00 Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: cuda-drivers x86_64 550.90.07-1 otherpkgs3 3.7 k Upgrading: kmod-nvidia-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 41 M nvidia-driver-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 125 M nvidia-driver-latest-dkms-NVML x86_64 3:550.90.07-1.el7 otherpkgs3 603 k nvidia-driver-latest-dkms-NvFBCOpenGL x86_64 3:550.90.07-1.el7 otherpkgs3 61 k nvidia-driver-latest-dkms-cuda x86_64 3:550.90.07-1.el7 otherpkgs3 452 k nvidia-driver-latest-dkms-cuda-libs x86_64 3:550.90.07-1.el7 otherpkgs3 56 M nvidia-driver-latest-dkms-devel x86_64 3:550.90.07-1.el7 otherpkgs3 19 k nvidia-driver-latest-dkms-libs x86_64 3:550.90.07-1.el7 otherpkgs3 133 M nvidia-modprobe-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 31 k nvidia-persistenced-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 38 k nvidia-xconfig-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 90 k Installing dependencies: nvidia-libXNVCtrl x86_64 3:550.90.07-2.el7 otherpkgs3 50 k nvidia-libXNVCtrl-devel x86_64 3:550.90.07-2.el7 otherpkgs3 59 k nvidia-settings x86_64 3:550.90.07-2.el7 otherpkgs3 1.5 M Transaction Summary ================================================================================ Install 4 Packages Upgrade 11 Packages Total size: 358 M Downloading Packages: otherpkgs3 7.8 MB/s | 8.0 kB 00:00 GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x7CA8798C) is already installed GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0xFD431D51) is already installed GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x2FA658E0) is already installed GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0xF4A80EB5) is already installed GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x352C64E5) is already installed The GPG keys listed for the "otherpkgs3" repository are already installed but they are not correct for this package. Check that the correct key URLs are configured for this repository.. Failing package is: cuda-drivers-550.90.07-1.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-libXNVCtrl-550.90.07-2.el7.x86_64.rpm is not installed. Failing package is: nvidia-libXNVCtrl-3:550.90.07-2.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-libXNVCtrl-devel-550.90.07-2.el7.x86_64.rpm is not installed. Failing package is: nvidia-libXNVCtrl-devel-3:550.90.07-2.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-settings-550.90.07-2.el7.x86_64.rpm is not installed. Failing package is: nvidia-settings-3:550.90.07-2.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for kmod-nvidia-latest-dkms-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: kmod-nvidia-latest-dkms-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-driver-latest-dkms-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-driver-latest-dkms-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-driver-latest-dkms-NVML-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-driver-latest-dkms-NVML-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-driver-latest-dkms-NvFBCOpenGL-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-driver-latest-dkms-NvFBCOpenGL-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-driver-latest-dkms-cuda-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-driver-latest-dkms-cuda-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-driver-latest-dkms-cuda-libs-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-driver-latest-dkms-cuda-libs-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-driver-latest-dkms-devel-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-driver-latest-dkms-devel-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-driver-latest-dkms-libs-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-driver-latest-dkms-libs-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-modprobe-latest-dkms-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-modprobe-latest-dkms-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-persistenced-latest-dkms-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-persistenced-latest-dkms-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Public key for nvidia-xconfig-latest-dkms-550.90.07-1.el7.x86_64.rpm is not installed. Failing package is: nvidia-xconfig-latest-dkms-3:550.90.07-1.el7.x86_64 GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release Error: GPG check FAILED yum invocation failed. I tried hacking the genimage code to force "yum --nogpgcheck -y -c" but I still get the errors. For some reason genimage is creating the repos with gpgcheck=1 and ALL the gpgkeys are the same as below. [otherpkgs3] name=otherpkgs3 baseurl=file:///install/post/otherpkgs/rhels7.4/x86_64/nvidia-driver-local-repo-rhel7-550.90.07 gpgcheck=0 gpgkey=file:///XCAT/RPM-GPG-KEY-redhat-release skip_if_unavailable=True has anyone seen this problem and worked around it? _______________________ - Keith Hannum - kei...@lm... |
From: Vinícius F. <fe...@ve...> - 2024-07-02 21:20:51
|
Hi all, any news on this request? Can we get rsync on the repos? Thanks all. On 9 Jun 2023, at 21:22, Vinícius Ferrão <fe...@ve...> wrote: Any updates on this matter? Can we get it guys? Thanks. On 24 May 2023, at 00:32, Vinícius Ferrão via xCAT-user <xca...@li...> wrote: As for https://xcat.org/files/xcat/repos/ which is the actual repositories (.deb and .rpm) it’s only 35GB. # du -sh xcat 35G xcat My plan is to keep it also public: http://mirror.versatushpc.com.br/xcat/ Regards. On 24 May 2023, at 00:26, Russell Jones <arj...@gm...> wrote: How large is the xcat repository? If there's any concern about opening up rsync causing a bandwidth or availability issue, maybe the community could come together to host a few public mirrors with rsync access, and I'd be happy to be one. I run "official" public mirrors for epel, fedora, rocky, and CentOS stream. I have the infrastructure to donate :-) On Tue, May 23, 2023, 6:36 PM Vinícius Ferrão via xCAT-user <xca...@li...<mailto:xca...@li...>> wrote: Hi Kilian, reposync is great, mainly with Red Hat, since it’s the only way to mirror Red Hat distributions due to it’s “subscription manager” nature. I already use it for RHEL, but it’s not that great when you want to mirror multiple repositories and multiple versions. Also with EL8 there’s the would —download-metadata issue. We do use it when it’s a stateful cluster with a single arch and single distribution, but my objetive here is to have a mirror, not a reposync one. Also as I said on the last message, the storage system has standard storage tools, like rsync. Reposync is not available. Regards. > On 23 May 2023, at 20:06, Kilian Cavalotti <kil...@gm...<mailto:kil...@gm...>> wrote: > > Hi all, > > We routinely use reposync [1] to mirror the xcat-core and xcat-dep > repositories, without rsync, and without having to re-download already > downloaded packages. > [2] has pointers on how to use it. > > Hope this helps! > > [1]: https://linux.die.net/man/1/reposync > [2]: https://access.redhat.com/solutions/23016 > > Cheers, > -- > Kilian > > On Tue, May 23, 2023 at 12:51 PM Nathan A Besaw via xCAT-user > <xca...@li...<mailto:xca...@li...>> wrote: >> >> Hi Vinícius, >> >> Currently rsync is not available from xcat.org<http://xcat.org/>, but we can consider enabling it. >> >> How frequently do you plan to sync your local mirror from the xcat.org<http://xcat.org/> version? >> >> For the initial sync, I think you can use wget or curl to recursively download everything from https://xcat.org/files/xcat/ (or whatever directories are relevant to you). >> If you are going to refresh your mirror infrequently (after every release?), using wget or curl may be sufficient. If you want to resync more regularly I would prefer to use a solution that includes incremental copying so you don't have to redownload ever file every time. >> >> ________________________________ >> From: Vinícius Ferrão via xCAT-user <xca...@li...<mailto:xca...@li...>> >> Sent: Friday, May 19, 2023 1:02 PM >> To: xCAT Users Mailing list <xca...@li...<mailto:xca...@li...>> >> Cc: Vinícius Ferrão <fe...@ve...<mailto:fe...@ve...>> >> Subject: [EXTERNAL] [xcat-user] rsync on https://xcat.org/files/xcat/repos >> >> Hello, I would like to know if rsync is available on xCAT repository. I want to mirror it locally. >> >> I know that I can download the entire tarball from a given version, but I would like to use rsync to keep it updated. >> >> Thank you. >> >> >> >> _______________________________________________ >> xCAT-user mailing list >> xCA...@li...<mailto:xCA...@li...> >> https://lists.sourceforge.net/lists/listinfo/xcat-user >> _______________________________________________ >> xCAT-user mailing list >> xCA...@li...<mailto:xCA...@li...> >> https://lists.sourceforge.net/lists/listinfo/xcat-user > > > > -- > Kilian > > > _______________________________________________ > xCAT-user mailing list > xCA...@li...<mailto:xCA...@li...> > https://lists.sourceforge.net/lists/listinfo/xcat-user _______________________________________________ xCAT-user mailing list xCA...@li...<mailto:xCA...@li...> https://lists.sourceforge.net/lists/listinfo/xcat-user _______________________________________________ xCAT-user mailing list xCA...@li... https://lists.sourceforge.net/lists/listinfo/xcat-user _______________________________________________ xCAT-user mailing list xCA...@li... https://lists.sourceforge.net/lists/listinfo/xcat-user |
From: Calvin S. <c.s...@qm...> - 2024-06-28 15:08:14
|
You nailed it, Kilian - worked like a charm. The "-y " flag was the magic (i had been trying to use xcat_key with "-k <file_containing_keydata>". It's also necessary to use fqdn: > zone <zonee> > update add CNAME.zone 86400 CNAME ANAME.zone > send thanks very much! Cal Sawyer ITS Research Platforms Manager Queen Mary University of London ________________________________ From: Kilian Cavalotti <kil...@gm...> Sent: 26 June 2024 18:39 To: xCAT Users Mailing list <xca...@li...> Subject: Re: [xcat-user] [External] Manually add CNAME records to xcat-managed DNS? [Some people who received this message don't often get email from kil...@gm.... Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] CAUTION: This email originated from outside of QMUL. Do not click links, scan QR codes or open attachments unless you recognise the sender and know the content is safe. Hi Calvin, On Fri, Jun 21, 2024 at 5:47 AM Calvin Sawyer <c.s...@qm...> wrote: > The issue is no so much what makedns -n will do , but how to actually create a CNAME record in xcat's DNS > > Running nsupdate using a keyfile containing the key data that exists in both named.conf and in passwd tabdb, any change attempt results in : > > ; TSIG error with server: tsig indicates error > update failed: NOTAUTH(BADKEY > > What I'm hoping to discover is how to add a record manually using nsupdate in the same manner as xcat does running makedns <node>. I usually do something like this to get the TSIG auth key from the xCAT passwd table, and use it to authenticate nsupdate: $ xk=$(tabdump -w key==omapi passwd | awk -F, '!/#/ {gsub(/"/,""); print $3}') $ nsupdate -l -v -y xcat_key:$xk Hope this helps! Cheers, -- Kilian _______________________________________________ xCAT-user mailing list xCA...@li... https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fxcat-user&data=05%7C02%7Cc.sawyer%40qmul.ac.uk%7C8f8d4f7cdb664cb444ed08dc96074088%7C569df091b01340e386eebd9cb9e25814%7C0%7C0%7C638550205103029916%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=GRQDLRCmI2E2fT3vB1FJEsY0RRTaGiYbWK3s5t%2Fjrxs%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/xcat-user> |
From: Tomer S. <tom...@ma...> - 2024-06-28 12:32:56
|
Where tsgi is located? בברכה , תומר שחף | מהנדס אינטגרציה ותשתיות | חטיבת אינטגרציה ותשתיות | מטריקס | נייד 054-2686841 | tom...@ma...<mailto:tom...@ma...> | www.matrix.co.il<http://www.matrix.co.il/> [image001.jpg] On 28 Jun 2024, at 14:43, Calvin Sawyer <c.s...@qm...> wrote: "TSIG error is a problem that occurs when a DNS server fails to verify a transaction signature". Wrong/bad rndc key used Cal Sawyer ITS Research Platforms Manager Queen Mary University of London ________________________________ From: Tomer Shachaf via xCAT-user <xca...@li...> Sent: 26 June 2024 18:43 To: xCAT Users Mailing list <xca...@li...> Cc: Tomer Shachaf <tom...@ma...> Subject: Re: [xcat-user] [External] Manually add CNAME records to xcat-managed DNS? CAUTION: This email originated from outside of QMUL. Do not click links, scan QR codes or open attachments unless you recognise the sender and know the content is safe. What is TSIG ? And where I can find it ? בברכה , תומר שחף | מהנדס אינטגרציה ותשתיות | חטיבת אינטגרציה ותשתיות | מטריקס | נייד 054-2686841 | tom...@ma...<mailto:tom...@ma...> | www.matrix.co.il<http://www.matrix.co.il/> [image001.jpg] On 26 Jun 2024, at 20:42, Kilian Cavalotti <kil...@gm...> wrote: Hi Calvin, On Fri, Jun 21, 2024 at 5:47 AM Calvin Sawyer <c.s...@qm...> wrote: The issue is no so much what makedns -n will do , but how to actually create a CNAME record in xcat's DNS Running nsupdate using a keyfile containing the key data that exists in both named.conf and in passwd tabdb, any change attempt results in : ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADKEY What I'm hoping to discover is how to add a record manually using nsupdate in the same manner as xcat does running makedns <node>. I usually do something like this to get the TSIG auth key from the xCAT passwd table, and use it to authenticate nsupdate: $ xk=$(tabdump -w key==omapi passwd | awk -F, '!/#/ {gsub(/"/,""); print $3}') $ nsupdate -l -v -y xcat_key:$xk Hope this helps! Cheers, -- Kilian _______________________________________________ xCAT-user mailing list xCA...@li... https://lists.sourceforge.net/lists/listinfo/xcat-user זהירות: מקור הדואל הזה הוא מחוץ למטריקס. חל איסור ללחוץ על קישורים או לפתוח קבצים מצורפים אלא אם כן השולח מוכר והתוכן בטוח Caution: The source of this email is from outside Matrix. it is forbidden to click on links or open attachments unless you recognize the sender and know the content is safe. זהירות: מקור הדואל הזה הוא מחוץ למטריקס. חל איסור ללחוץ על קישורים או לפתוח קבצים מצורפים אלא אם כן השולח מוכר והתוכן בטוח Caution: The source of this email is from outside Matrix. it is forbidden to click on links or open attachments unless you recognize the sender and know the content is safe. |
From: Calvin S. <c.s...@qm...> - 2024-06-28 11:57:47
|
"TSIG error is a problem that occurs when a DNS server fails to verify a transaction signature". Wrong/bad rndc key used Cal Sawyer ITS Research Platforms Manager Queen Mary University of London ________________________________ From: Tomer Shachaf via xCAT-user <xca...@li...> Sent: 26 June 2024 18:43 To: xCAT Users Mailing list <xca...@li...> Cc: Tomer Shachaf <tom...@ma...> Subject: Re: [xcat-user] [External] Manually add CNAME records to xcat-managed DNS? CAUTION: This email originated from outside of QMUL. Do not click links, scan QR codes or open attachments unless you recognise the sender and know the content is safe. What is TSIG ? And where I can find it ? בברכה , תומר שחף | מהנדס אינטגרציה ותשתיות | חטיבת אינטגרציה ותשתיות | מטריקס | נייד 054-2686841 | tom...@ma...<mailto:tom...@ma...> | www.matrix.co.il<http://www.matrix.co.il/> [image001.jpg] On 26 Jun 2024, at 20:42, Kilian Cavalotti <kil...@gm...> wrote: Hi Calvin, On Fri, Jun 21, 2024 at 5:47 AM Calvin Sawyer <c.s...@qm...> wrote: The issue is no so much what makedns -n will do , but how to actually create a CNAME record in xcat's DNS Running nsupdate using a keyfile containing the key data that exists in both named.conf and in passwd tabdb, any change attempt results in : ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADKEY What I'm hoping to discover is how to add a record manually using nsupdate in the same manner as xcat does running makedns <node>. I usually do something like this to get the TSIG auth key from the xCAT passwd table, and use it to authenticate nsupdate: $ xk=$(tabdump -w key==omapi passwd | awk -F, '!/#/ {gsub(/"/,""); print $3}') $ nsupdate -l -v -y xcat_key:$xk Hope this helps! Cheers, -- Kilian _______________________________________________ xCAT-user mailing list xCA...@li... https://lists.sourceforge.net/lists/listinfo/xcat-user זהירות: מקור הדואל הזה הוא מחוץ למטריקס. חל איסור ללחוץ על קישורים או לפתוח קבצים מצורפים אלא אם כן השולח מוכר והתוכן בטוח Caution: The source of this email is from outside Matrix. it is forbidden to click on links or open attachments unless you recognize the sender and know the content is safe. |
From: Tomer S. <tom...@ma...> - 2024-06-26 17:59:20
|
What is TSIG ? And where I can find it ? בברכה , תומר שחף | מהנדס אינטגרציה ותשתיות | חטיבת אינטגרציה ותשתיות | מטריקס | נייד 054-2686841 | tom...@ma...<mailto:tom...@ma...> | www.matrix.co.il<http://www.matrix.co.il/> [image001.jpg] On 26 Jun 2024, at 20:42, Kilian Cavalotti <kil...@gm...> wrote: Hi Calvin, On Fri, Jun 21, 2024 at 5:47 AM Calvin Sawyer <c.s...@qm...> wrote: The issue is no so much what makedns -n will do , but how to actually create a CNAME record in xcat's DNS Running nsupdate using a keyfile containing the key data that exists in both named.conf and in passwd tabdb, any change attempt results in : ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADKEY What I'm hoping to discover is how to add a record manually using nsupdate in the same manner as xcat does running makedns <node>. I usually do something like this to get the TSIG auth key from the xCAT passwd table, and use it to authenticate nsupdate: $ xk=$(tabdump -w key==omapi passwd | awk -F, '!/#/ {gsub(/"/,""); print $3}') $ nsupdate -l -v -y xcat_key:$xk Hope this helps! Cheers, -- Kilian _______________________________________________ xCAT-user mailing list xCA...@li... https://lists.sourceforge.net/lists/listinfo/xcat-user זהירות: מקור הדואל הזה הוא מחוץ למטריקס. חל איסור ללחוץ על קישורים או לפתוח קבצים מצורפים אלא אם כן השולח מוכר והתוכן בטוח Caution: The source of this email is from outside Matrix. it is forbidden to click on links or open attachments unless you recognize the sender and know the content is safe. |
From: Kilian C. <kil...@gm...> - 2024-06-26 17:39:28
|
Hi Calvin, On Fri, Jun 21, 2024 at 5:47 AM Calvin Sawyer <c.s...@qm...> wrote: > The issue is no so much what makedns -n will do , but how to actually create a CNAME record in xcat's DNS > > Running nsupdate using a keyfile containing the key data that exists in both named.conf and in passwd tabdb, any change attempt results in : > > ; TSIG error with server: tsig indicates error > update failed: NOTAUTH(BADKEY > > What I'm hoping to discover is how to add a record manually using nsupdate in the same manner as xcat does running makedns <node>. I usually do something like this to get the TSIG auth key from the xCAT passwd table, and use it to authenticate nsupdate: $ xk=$(tabdump -w key==omapi passwd | awk -F, '!/#/ {gsub(/"/,""); print $3}') $ nsupdate -l -v -y xcat_key:$xk Hope this helps! Cheers, -- Kilian |
From: Calvin S. <c.s...@qm...> - 2024-06-21 12:46:23
|
Apologies for late/slow reply, Jerrod (at al). Thanks very much for yours The issue is no so much what makedns -n will do , but how to actually create a CNAME record in xcat's DNS Running nsupdate using a keyfile containing the key data that exists in both named.conf and in passwd tabdb, any change attempt results in : ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADKEY What I'm hoping to discover is how to add a record manually using nsupdate in the same manner as xcat does running makedns <node>. Cal Sawyer ITS Research Platforms Manager Queen Mary University of London ________________________________ From: Jarrod Johnson via xCAT-user <xca...@li...> Sent: 07 June 2024 20:06 To: xCAT Users Mailing list <xca...@li...> Cc: Jarrod Johnson <jjo...@le...> Subject: Re: [xcat-user] [External] Manually add CNAME records to xcat-managed DNS? CAUTION: This email originated from outside of QMUL. Do not click links, scan QR codes or open attachments unless you recognise the sender and know the content is safe. Anyone else is likely to be more fresh on this, but some feedback based on my recollection is that apart from '-n', makedns shouldn't step on your CNAME. Further, you probably shouldn't need '-n' except maybe once to get started (with the update key to enable nsupdate-like updates like xCAT normally uses it). You should be able to add nodes or change ip addresses without '-n'. Back up just in case, it has been quite a while since I had reason to delve into the DNS stuff. ________________________________ From: Calvin Sawyer <c.s...@qm...> Sent: Friday, June 7, 2024 6:11 AM To: xca...@li... <xca...@li...> Subject: [External] [xcat-user] Manually add CNAME records to xcat-managed DNS? Hi We're somewhat limited due to the being unable to add CNAME records to xcat's DNS records. Wonder if anyone has an nsupdate procedure for doing so? I realise that "makedns -n" would completely burn any manual changes that would need to be reinstated. thank you, Cal Sawyer ITS Research Platforms Manager Queen Mary University of London |
From: Jarrod J. <jjo...@le...> - 2024-06-07 19:06:15
|
Anyone else is likely to be more fresh on this, but some feedback based on my recollection is that apart from '-n', makedns shouldn't step on your CNAME. Further, you probably shouldn't need '-n' except maybe once to get started (with the update key to enable nsupdate-like updates like xCAT normally uses it). You should be able to add nodes or change ip addresses without '-n'. Back up just in case, it has been quite a while since I had reason to delve into the DNS stuff. ________________________________ From: Calvin Sawyer <c.s...@qm...> Sent: Friday, June 7, 2024 6:11 AM To: xca...@li... <xca...@li...> Subject: [External] [xcat-user] Manually add CNAME records to xcat-managed DNS? Hi We're somewhat limited due to the being unable to add CNAME records to xcat's DNS records. Wonder if anyone has an nsupdate procedure for doing so? I realise that "makedns -n" would completely burn any manual changes that would need to be reinstated. thank you, Cal Sawyer ITS Research Platforms Manager Queen Mary University of London |
From: Calvin S. <c.s...@qm...> - 2024-06-07 13:47:38
|
Hi We're somewhat limited due to the being unable to add CNAME records to xcat's DNS records. Wonder if anyone has an nsupdate procedure for doing so? I realise that "makedns -n" would completely burn any manual changes that would need to be reinstated. thank you, Cal Sawyer ITS Research Platforms Manager Queen Mary University of London |
From: David J. <dav...@br...> - 2024-05-18 11:57:27
|
<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">I think I heard that the problem BMCs claim to support cipher suite 17 but actually don’t. <br id="lineBreakAtBeginningOfSignature"><div dir="ltr"> -- ddj<div>Dave Johnson</div></div><div dir="ltr"><br><blockquote type="cite">On May 18, 2024, at 7:47 AM, Markus Hilger <mar...@me...> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Hi David,</div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> unfortunately, you can't.</div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> For rpower/rvitals/rinv/nodeset etc. xCAT uses its own IPMI implementation in Perl. Previously this was using -C 3 ciphers. The current upstream code will try -C 17 ciphers and fallback to -C 3. Check this: <a href="https://github.com/xcat2/xcat-core/pull/6391" id="LPlnk">https://github.com/xcat2/xcat-core/pull/6391</a></div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div id="Signature" style="color: inherit; background-color: inherit;"> <div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Mit freundlichen Grüßen / Kind regards</div> <div><br> </div> <table style="box-sizing: border-box; border-collapse: collapse; border-spacing: 0px; color: inherit; background-color: inherit;"> <tbody> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 75, 149);"><b>Markus Hilger</b></span></p> </td> <td style="padding: 0cm; vertical-align: top; width: 1cm;"> <p style="margin: 0cm;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt;"></td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">HPC Engineer</span></p> </td> <td style="padding: 0cm; vertical-align: top; width: 1cm;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">MEGWARE Computer Vertrieb und Service GmbH</span></p> </td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">Tel: +49 3722 528-47</span></p> </td> <td style="padding: 0cm; vertical-align: top; width: 1cm;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">Nordstraße 19</span></p> </td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt;"> <span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"><a href="mailto:mar...@me..." target="_blank" title="mailto:mar...@me..." rel="noopener noreferrer" data-linkindex="0" data-auth="NotApplicable" style="color: rgb(61, 118, 174); margin: 0px;">mar...@me...</a></span></td> <td style="padding: 0cm; vertical-align: top; width: 1cm;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">09247 Chemnitz-Röhrsdorf, Germany</span></p> </td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt; height: 8.5pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"><a href="http://www.megware.com/" target="_blank" rel="noopener noreferrer" data-linkindex="1" data-auth="NotApplicable" style="color: rgb(61, 118, 174); margin-top: 0px; margin-bottom: 0px;">www.megware.com</a></span></p> </td> <td style="padding: 0cm; vertical-align: top; width: 1cm; height: 8.5pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt; height: 8.5pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">Geschäftsführer: André Singer, Dr. Axel Auweter</span></p> </td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: bottom; width: 140.35pt;"> <p style="margin: 0cm;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm; vertical-align: bottom; width: 1cm;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: bottom; width: 636.45pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">Amtsgericht: Chemnitz HRB 584</span></p> </td> </tr> </tbody> </table> <br> </div> <div id="appendonsend"></div> <hr style="display:inline-block;width:98%" tabindex="-1"> <div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Von:</b> David Johnson <dav...@br...><br> <b>Gesendet:</b> Freitag, 17. Mai 2024 19:31<br> <b>An:</b> xCAT Users Mailing list <xca...@li...><br> <b>Betreff:</b> Re: [xcat-user] 2.16.5 and rcons</font> <div> </div> </div> <div dir="auto">Ok, but how can one configure xcat to use some particular set of options for one set of nodes? We can get gocons to work almost everywhere, except one batch of tyan boxes from 2019. <div> <div dir="ltr"> -- ddj <div>Dave Johnson</div> </div> <div dir="ltr"><br> <blockquote type="cite">On May 17, 2024, at 12:42 PM, Markus Hilger <mar...@me...> wrote:<br> <br> </blockquote> </div> <blockquote type="cite"> <div dir="ltr"> <div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)"> With the following command you can enable (a) / disable (X) certain ciphers:</div> <div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)"> <br> </div> <div class="x_elementToProof" style="font-family:"Aptos Mono",Aptos_EmbeddedFont,Aptos_MSFontService,monospace; font-size:12pt; color:rgb(0,0,0)"> ipmitool -I lanplus -U XXX -P XXX -H <node> lan set <channel> cipher_privs aaaaaaaaaaaaaaa</div> <div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)"> <br> </div> <div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)"> This might be useful for some of you.</div> <div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)"> <br> </div> <div id="x_Signature" style="color:inherit; background-color:inherit"> <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)"> Mit freundlichen Grüßen / Kind regards</div> <div><br> </div> <table style="box-sizing:border-box; border-collapse:collapse; border-spacing:0px; color:inherit; background-color:inherit"> <tbody> <tr> <td style="border-right:1pt solid rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,75,149)"><b>Markus Hilger</b></span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <p style="margin:0cm"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)"> </span></p> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"></td> </tr> <tr> <td style="border-right:1pt solid rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">HPC Engineer</span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span></p> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">MEGWARE Computer Vertrieb und Service GmbH</span></p> </td> </tr> <tr> <td style="border-right:1pt solid rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Tel: +49 3722 528-47</span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span></p> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Nordstraße 19</span></p> </td> </tr> <tr> <td style="border-right:1pt solid rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"><a href="mailto:mar...@me..." target="_blank" title="mailto:mar...@me..." rel="noopener noreferrer" data-linkindex="0" data-auth="NotApplicable" style="color:rgb(61,118,174); margin:0px">mar...@me...</a></span></td> <td style="padding:0cm; vertical-align:top; width:1cm"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span></p> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">09247 Chemnitz-Röhrsdorf, Germany</span></p> </td> </tr> <tr> <td style="border-right:1pt solid rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt; height:8.5pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"><a href="http://www.megware.com/" target="_blank" rel="noopener noreferrer" data-linkindex="1" data-auth="NotApplicable" style="color:rgb(61,118,174); margin-top:0px; margin-bottom:0px">www.megware.com</a></span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm; height:8.5pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span></p> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt; height:8.5pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Geschäftsführer: André Singer, Dr. Axel Auweter</span></p> </td> </tr> <tr> <td style="border-right:1pt solid rgb(0,75,149); padding:0cm 5.4pt; vertical-align:bottom; width:140.35pt"> <p style="margin:0cm"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span></p> </td> <td style="padding:0cm; vertical-align:bottom; width:1cm"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span></p> </td> <td style="padding:0cm 5.4pt; vertical-align:bottom; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Amtsgericht: Chemnitz HRB 584</span></p> </td> </tr> </tbody> </table> <br> </div> <div id="x_appendonsend"></div> <hr tabindex="-1" style="display:inline-block; width:98%"> <div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Von:</b> Ryan Novosielski via xCAT-user <xca...@li...><br> <b>Gesendet:</b> Dienstag, 14. Mai 2024 17:06<br> <b>An:</b> xCAT Users Mailing list <xca...@li...><br> <b>Cc:</b> Ryan Novosielski <nov...@ru...><br> <b>Betreff:</b> Re: [xcat-user] 2.16.5 and rcons</font> <div> </div> </div> <div style="line-break:after-white-space">What has changed in later releases for RHEL-based OS is the behavior of ipmitool. I don’t know enough about the origins of the ipmitool that xCAT uses or how much it relies on the OS, but we have many systems that require -C 3 in order to connect on I believe both RHEL8 and RHEL9. <div><br id="x_x_lineBreakAtBeginningOfMessage"> <div> <div dir="auto" style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; line-break:after-white-space"> <div dir="auto" style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; line-break:after-white-space"> <div dir="auto" style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; line-break:after-white-space"> <div dir="auto" style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; line-break:after-white-space"> <div style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; line-break:after-white-space"> --<br> #BlackLivesMatter</div> <div style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; line-break:after-white-space"> ____<br> || \\UTGERS, |---------------------------*O*---------------------------<br> ||_// the State<span class="x_x_Apple-tab-span" style="white-space:pre"> </span> | Ryan Novosielski - nov...@ru...<br> || \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus<br> || \\ of NJ<span class="x_x_Apple-tab-span" style="white-space:pre"> </span> | Office of Advanced Research Computing - MSB A555B, Newark<br> `'</div> </div> </div> </div> </div> </div> <div><br> <blockquote type="cite"> <div>On May 14, 2024, at 07:51, Markus Hilger <mar...@me...> wrote:</div> <br class="x_x_Apple-interchange-newline"> <div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Hi,</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> this is really strange because the goconserver should be the very same for quite some time.</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> goconserver-0.3.3-snap202011021058.x86_64.rpm</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> With site.consoleondemand set to yes the following happens:</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> goconserver reads /var/lib/goconserver/nodes.json and spawns the following command:</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; margin:0px; font-family:"Aptos Mono",Aptos_EmbeddedFont,Aptos_MSFontService,monospace; font-size:12pt"> /opt/xcat/share/xcat/cons/ipmi <node></div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> This will spawn:</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:"Aptos Mono",Aptos_EmbeddedFont,Aptos_MSFontService,monospace; font-size:12pt"> /opt/xcat/bin/ipmitool-xcat -I lanplus -U XXXXXX -P XXXXXX -H <node>.ipmi sol activate</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Can you please try to use the sol activate command manually and compare ipmitool-xcat vs. ipmitool?</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> We might want to use ipmitool directly instead of ipmitool-xcat in /opt/xcat/share/xcat/cons/ipmi.</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Please also try with explicit cipher settings -C 3 -C 17 etc.</div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div id="x_x_Signature" style="color:inherit; font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; text-decoration:none; background-color:inherit"> <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">Mit freundlichen Grüßen / Kind regards</div> <div><br> </div> <table style="box-sizing:border-box; border-collapse:collapse; border-spacing:0px; color:inherit; background-color:inherit"> <tbody> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,75,149)"><b>Markus Hilger</b></span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <p style="margin:0cm"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"> </span></p> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"></td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">HPC Engineer</span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">MEGWARE Computer Vertrieb und Service GmbH</span></p> </td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Tel: +49 3722 528-47</span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Nordstraße 19</span></p> </td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"><a href="mailto:mar...@me..." target="_blank" title="mailto:mar...@me..." rel="noopener noreferrer" data-linkindex="0" data-auth="NotApplicable" id="OWA55ccd6c4-d277-7763-b816-d9757ed6afe8" class="x_x_OWAAutoLink" style="color:rgb(61,118,174); margin:0px">mar...@me...</a></span></td> <td style="padding:0cm; vertical-align:top; width:1cm"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">09247 Chemnitz-Röhrsdorf, Germany</span></p> </td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt; height:8.5pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"><a href="http://www.megware.com/" target="_blank" rel="noopener noreferrer" data-linkindex="1" data-auth="NotApplicable" id="OWAe65ead4c-e488-eb9a-44c6-0c1d762dc38c" class="x_x_OWAAutoLink" style="color:rgb(61,118,174); margin-top:0px; margin-bottom:0px">www.megware.com</a></span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm; height:8.5pt"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt; height:8.5pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Geschäftsführer: André Singer, Dr. Axel Auweter</span></p> </td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:bottom; width:140.35pt"> <p style="margin:0cm"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span></p> </td> <td style="padding:0cm; vertical-align:bottom; width:1cm"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:bottom; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Amtsgericht: Chemnitz HRB 584</span></p> </td> </tr> </tbody> </table> <br> </div> <div id="x_x_appendonsend" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> </div> <hr tabindex="-1" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; text-decoration:none; display:inline-block; width:630.125px"> <span style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; float:none; display:inline!important"></span> <div id="x_x_divRplyFwdMsg" dir="ltr" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <font face="Calibri, sans-serif" style="font-size:11pt"><b>Von:</b><span class="x_x_Apple-converted-space"> </span>Calvin Sawyer <<a href="mailto:c.s...@qm...">c.s...@qm...</a>><br> <b>Gesendet:</b><span class="x_x_Apple-converted-space"> </span>Montag, 13. Mai 2024 10:01<br> <b>An:</b><span class="x_x_Apple-converted-space"> </span><a href="mailto:xca...@li...">xca...@li...</a><span class="x_x_Apple-converted-space"> </span><<a href="mailto:xca...@li...">xca...@li...</a>><br> <b>Betreff:</b><span class="x_x_Apple-converted-space"> </span>[xcat-user] 2.16.5 and rcons</font> <div> </div> </div> <div dir="ltr" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Hi</div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> We've just migrated to a fresh 2.16.5 in a Rocky9.3 VM using imports from the previous 2.16.3, which has been mostly successful. We can rinstall and perform most r-commands</div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Our test cluster which this xcat manages is comprised of older hardware and is meant to serve as a dress rehearsal for upgrading similarly in our production cluster with newer-gen hardware</div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> For the most part, 2.16.5 has been working fine with the notable exception of rcons. Both system types in the test cluster work fine with rcons under 2.16.3 user CentOS7, but under 2.16.5:</div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Flex System x240 and NeXtScale nx360 M5 respond on C3 only, C17 is inoperative (and verified using ipmitool) with error:</div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="margin:0px 40px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Error: Unable to establish IPMI v2 / RMCP+ session<br> Error in open session response message : no matching cipher suite</div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Testing on other hardware is complicated by many accepting both C3 and C17 (dell iDrac is one). More contemporary IMM2 allows both cipher suites as well</div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> This leads me to think that rcons is still somewhere hardwired to C3. We downloaded and patched IPMI.pm with the one from<span class="x_x_Apple-converted-space"> </span><a href="https://github.com/xcat2/xcat-core" id="LPlnk" class="x_x_x_OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">https://github.com/xcat2/xcat-core</a> but the issue persists.</div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> However, I also don't understand exactly which system or xcat-specific components are involved in operation of goconserver or establishing an rcons connection to track down where the cipher suite is set</div> <div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div id="x_x_x_Signature"> <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"><span style="background-color:rgb(255,255,255)">Cal Sawyer</span></div> <div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(34,34,34)"> <span style="background-color:rgb(255,255,255)">ITS Research Platforms Manager</span></div> <div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(34,34,34)"> <span style="background-color:rgb(255,255,255)">Queen Mary University of London</span></div> </div> </div> <span style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; float:none; display:inline!important">_______________________________________________</span><br style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <span style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; float:none; display:inline!important">xCAT-user mailing list</span><br style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <a href="mailto:xCA...@li..." style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">xCA...@li...</a><br style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <a href="https://lists.sourceforge.net/lists/listinfo/xcat-user" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">https://lists.sourceforge.net/lists/listinfo/xcat-user</a></div> </blockquote> </div> <br> </div> </div> <span>_______________________________________________</span><br> <span>xCAT-user mailing list</span><br> <span>xCA...@li...</span><br> <span>https://lists.sourceforge.net/lists/listinfo/xcat-user</span><br> </div> </blockquote> </div> </div> <span>_______________________________________________</span><br><span>xCAT-user mailing list</span><br><span>xCA...@li...</span><br><span>https://lists.sourceforge.net/lists/listinfo/xcat-user</span><br></div></blockquote></body></html> |
From: Markus H. <mar...@me...> - 2024-05-18 11:47:06
|
Hi David, unfortunately, you can't. For rpower/rvitals/rinv/nodeset etc. xCAT uses its own IPMI implementation in Perl. Previously this was using -C 3 ciphers. The current upstream code will try -C 17 ciphers and fallback to -C 3. Check this: https://github.com/xcat2/xcat-core/pull/6391 Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<http://www.megware.com/> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: David Johnson <dav...@br...> Gesendet: Freitag, 17. Mai 2024 19:31 An: xCAT Users Mailing list <xca...@li...> Betreff: Re: [xcat-user] 2.16.5 and rcons Ok, but how can one configure xcat to use some particular set of options for one set of nodes? We can get gocons to work almost everywhere, except one batch of tyan boxes from 2019. -- ddj Dave Johnson On May 17, 2024, at 12:42 PM, Markus Hilger <mar...@me...> wrote: With the following command you can enable (a) / disable (X) certain ciphers: ipmitool -I lanplus -U XXX -P XXX -H <node> lan set <channel> cipher_privs aaaaaaaaaaaaaaa This might be useful for some of you. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<http://www.megware.com/> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: Ryan Novosielski via xCAT-user <xca...@li...> Gesendet: Dienstag, 14. Mai 2024 17:06 An: xCAT Users Mailing list <xca...@li...> Cc: Ryan Novosielski <nov...@ru...> Betreff: Re: [xcat-user] 2.16.5 and rcons What has changed in later releases for RHEL-based OS is the behavior of ipmitool. I don’t know enough about the origins of the ipmitool that xCAT uses or how much it relies on the OS, but we have many systems that require -C 3 in order to connect on I believe both RHEL8 and RHEL9. -- #BlackLivesMatter ____ || \\UTGERS, |---------------------------*O*--------------------------- ||_// the State | Ryan Novosielski - nov...@ru... || \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus || \\ of NJ | Office of Advanced Research Computing - MSB A555B, Newark `' On May 14, 2024, at 07:51, Markus Hilger <mar...@me...> wrote: Hi, this is really strange because the goconserver should be the very same for quite some time. goconserver-0.3.3-snap202011021058.x86_64.rpm With site.consoleondemand set to yes the following happens: goconserver reads /var/lib/goconserver/nodes.json and spawns the following command: /opt/xcat/share/xcat/cons/ipmi <node> This will spawn: /opt/xcat/bin/ipmitool-xcat -I lanplus -U XXXXXX -P XXXXXX -H <node>.ipmi sol activate Can you please try to use the sol activate command manually and compare ipmitool-xcat vs. ipmitool? We might want to use ipmitool directly instead of ipmitool-xcat in /opt/xcat/share/xcat/cons/ipmi. Please also try with explicit cipher settings -C 3 -C 17 etc. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<http://www.megware.com/> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: Calvin Sawyer <c.s...@qm...<mailto:c.s...@qm...>> Gesendet: Montag, 13. Mai 2024 10:01 An: xca...@li...<mailto:xca...@li...> <xca...@li...<mailto:xca...@li...>> Betreff: [xcat-user] 2.16.5 and rcons Hi We've just migrated to a fresh 2.16.5 in a Rocky9.3 VM using imports from the previous 2.16.3, which has been mostly successful. We can rinstall and perform most r-commands Our test cluster which this xcat manages is comprised of older hardware and is meant to serve as a dress rehearsal for upgrading similarly in our production cluster with newer-gen hardware For the most part, 2.16.5 has been working fine with the notable exception of rcons. Both system types in the test cluster work fine with rcons under 2.16.3 user CentOS7, but under 2.16.5: Flex System x240 and NeXtScale nx360 M5 respond on C3 only, C17 is inoperative (and verified using ipmitool) with error: Error: Unable to establish IPMI v2 / RMCP+ session Error in open session response message : no matching cipher suite Testing on other hardware is complicated by many accepting both C3 and C17 (dell iDrac is one). More contemporary IMM2 allows both cipher suites as well This leads me to think that rcons is still somewhere hardwired to C3. We downloaded and patched IPMI.pm with the one from https://github.com/xcat2/xcat-core but the issue persists. However, I also don't understand exactly which system or xcat-specific components are involved in operation of goconserver or establishing an rcons connection to track down where the cipher suite is set Cal Sawyer ITS Research Platforms Manager Queen Mary University of London _______________________________________________ xCAT-user mailing list xCA...@li...<mailto:xCA...@li...> https://lists.sourceforge.net/lists/listinfo/xcat-user _______________________________________________ xCAT-user mailing list xCA...@li... https://lists.sourceforge.net/lists/listinfo/xcat-user |
From: David J. <dav...@br...> - 2024-05-17 19:02:56
|
<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Ok, but how can one configure xcat to use some particular set of options for one set of nodes? We can get gocons to work almost everywhere, except one batch of tyan boxes from 2019. <div><div dir="ltr"> -- ddj<div>Dave Johnson</div></div><div dir="ltr"><br><blockquote type="cite">On May 17, 2024, at 12:42 PM, Markus Hilger <mar...@me...> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> With the following command you can enable (a) / disable (X) certain ciphers:</div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div class="elementToProof" style="font-family: "Aptos Mono", Aptos_EmbeddedFont, Aptos_MSFontService, monospace; font-size: 12pt; color: rgb(0, 0, 0);"> ipmitool -I lanplus -U XXX -P XXX -H <node> lan set <channel> cipher_privs aaaaaaaaaaaaaaa</div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> This might be useful for some of you.</div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div id="Signature" style="color: inherit; background-color: inherit;"> <div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Mit freundlichen Grüßen / Kind regards</div> <div><br> </div> <table style="box-sizing: border-box; border-collapse: collapse; border-spacing: 0px; color: inherit; background-color: inherit;"> <tbody> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 75, 149);"><b>Markus Hilger</b></span></p> </td> <td style="padding: 0cm; vertical-align: top; width: 1cm;"> <p style="margin: 0cm;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt;"></td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">HPC Engineer</span></p> </td> <td style="padding: 0cm; vertical-align: top; width: 1cm;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">MEGWARE Computer Vertrieb und Service GmbH</span></p> </td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">Tel: +49 3722 528-47</span></p> </td> <td style="padding: 0cm; vertical-align: top; width: 1cm;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">Nordstraße 19</span></p> </td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt;"> <span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"><a href="mailto:mar...@me..." target="_blank" title="mailto:mar...@me..." rel="noopener noreferrer" data-linkindex="0" data-auth="NotApplicable" style="color: rgb(61, 118, 174); margin: 0px;">mar...@me...</a></span></td> <td style="padding: 0cm; vertical-align: top; width: 1cm;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">09247 Chemnitz-Röhrsdorf, Germany</span></p> </td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: top; width: 140.35pt; height: 8.5pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"><a href="http://www.megware.com/" target="_blank" rel="noopener noreferrer" data-linkindex="1" data-auth="NotApplicable" style="color: rgb(61, 118, 174); margin-top: 0px; margin-bottom: 0px;">www.megware.com</a></span></p> </td> <td style="padding: 0cm; vertical-align: top; width: 1cm; height: 8.5pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: top; width: 636.45pt; height: 8.5pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">Geschäftsführer: André Singer, Dr. Axel Auweter</span></p> </td> </tr> <tr> <td style="border-right: 1pt solid rgb(0, 75, 149); padding: 0cm 5.4pt; vertical-align: bottom; width: 140.35pt;"> <p style="margin: 0cm;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm; vertical-align: bottom; width: 1cm;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);"> </span></p> </td> <td style="padding: 0cm 5.4pt; vertical-align: bottom; width: 636.45pt;"> <p style="margin: 0cm 0cm 3pt;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(61, 118, 174);">Amtsgericht: Chemnitz HRB 584</span></p> </td> </tr> </tbody> </table> <br> </div> <div id="appendonsend"></div> <hr style="display:inline-block;width:98%" tabindex="-1"> <div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Von:</b> Ryan Novosielski via xCAT-user <xca...@li...><br> <b>Gesendet:</b> Dienstag, 14. Mai 2024 17:06<br> <b>An:</b> xCAT Users Mailing list <xca...@li...><br> <b>Cc:</b> Ryan Novosielski <nov...@ru...><br> <b>Betreff:</b> Re: [xcat-user] 2.16.5 and rcons</font> <div> </div> </div> <div style="line-break:after-white-space">What has changed in later releases for RHEL-based OS is the behavior of ipmitool. I don’t know enough about the origins of the ipmitool that xCAT uses or how much it relies on the OS, but we have many systems that require -C 3 in order to connect on I believe both RHEL8 and RHEL9. <div><br id="x_lineBreakAtBeginningOfMessage"> <div> <div dir="auto" style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; line-break:after-white-space"> <div dir="auto" style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; line-break:after-white-space"> <div dir="auto" style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; line-break:after-white-space"> <div dir="auto" style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; line-break:after-white-space"> <div style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; line-break:after-white-space"> --<br> #BlackLivesMatter</div> <div style="color:rgb(0,0,0); letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; line-break:after-white-space"> ____<br> || \\UTGERS, |---------------------------*O*---------------------------<br> ||_// the State<span class="x_Apple-tab-span" style="white-space:pre"> </span> | Ryan Novosielski - nov...@ru...<br> || \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus<br> || \\ of NJ<span class="x_Apple-tab-span" style="white-space:pre"> </span> | Office of Advanced Research Computing - MSB A555B, Newark<br> `'</div> </div> </div> </div> </div> </div> <div><br> <blockquote type="cite"> <div>On May 14, 2024, at 07:51, Markus Hilger <mar...@me...> wrote:</div> <br class="x_Apple-interchange-newline"> <div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Hi,</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> this is really strange because the goconserver should be the very same for quite some time.</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> goconserver-0.3.3-snap202011021058.x86_64.rpm</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> With site.consoleondemand set to yes the following happens:</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> goconserver reads /var/lib/goconserver/nodes.json and spawns the following command:</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; margin:0px; font-family:"Aptos Mono",Aptos_EmbeddedFont,Aptos_MSFontService,monospace; font-size:12pt"> /opt/xcat/share/xcat/cons/ipmi <node></div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> This will spawn:</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:"Aptos Mono",Aptos_EmbeddedFont,Aptos_MSFontService,monospace; font-size:12pt"> /opt/xcat/bin/ipmitool-xcat -I lanplus -U XXXXXX -P XXXXXX -H <node>.ipmi sol activate</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Can you please try to use the sol activate command manually and compare ipmitool-xcat vs. ipmitool?</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> We might want to use ipmitool directly instead of ipmitool-xcat in /opt/xcat/share/xcat/cons/ipmi.</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Please also try with explicit cipher settings -C 3 -C 17 etc.</div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_elementToProof" style="font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div id="x_Signature" style="color:inherit; font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; text-decoration:none; background-color:inherit"> <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">Mit freundlichen Grüßen / Kind regards</div> <div><br> </div> <table style="box-sizing:border-box; border-collapse:collapse; border-spacing:0px; color:inherit; background-color:inherit"> <tbody> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,75,149)"><b>Markus Hilger</b></span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <p style="margin:0cm"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"> </span></p> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"></td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">HPC Engineer</span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">MEGWARE Computer Vertrieb und Service GmbH</span></p> </td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Tel: +49 3722 528-47</span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Nordstraße 19</span></p> </td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt"> <span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"><a href="mailto:mar...@me..." target="_blank" title="mailto:mar...@me..." rel="noopener noreferrer" data-linkindex="0" data-auth="NotApplicable" id="OWA55ccd6c4-d277-7763-b816-d9757ed6afe8" class="x_OWAAutoLink" style="color:rgb(61,118,174); margin:0px">mar...@me...</a></span></td> <td style="padding:0cm; vertical-align:top; width:1cm"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">09247 Chemnitz-Röhrsdorf, Germany</span></p> </td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:top; width:140.35pt; height:8.5pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"><a href="http://www.megware.com/" target="_blank" rel="noopener noreferrer" data-linkindex="1" data-auth="NotApplicable" id="OWAe65ead4c-e488-eb9a-44c6-0c1d762dc38c" class="x_OWAAutoLink" style="color:rgb(61,118,174); margin-top:0px; margin-bottom:0px">www.megware.com</a></span></p> </td> <td style="padding:0cm; vertical-align:top; width:1cm; height:8.5pt"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:top; width:636.45pt; height:8.5pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Geschäftsführer: André Singer, Dr. Axel Auweter</span></p> </td> </tr> <tr> <td style="border-right-width:1pt; border-right-style:solid; border-right-color:rgb(0,75,149); padding:0cm 5.4pt; vertical-align:bottom; width:140.35pt"> <p style="margin:0cm"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span></p> </td> <td style="padding:0cm; vertical-align:bottom; width:1cm"> <div style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)"> </span><br class="x_webkit-block-placeholder"> </div> </td> <td style="padding:0cm 5.4pt; vertical-align:bottom; width:636.45pt"> <p style="margin:0cm 0cm 3pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt; color:rgb(61,118,174)">Amtsgericht: Chemnitz HRB 584</span></p> </td> </tr> </tbody> </table> <br> </div> <div id="x_appendonsend" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> </div> <hr tabindex="-1" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; text-decoration:none; display:inline-block; width:630.125px"> <span style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; float:none; display:inline!important"></span> <div id="x_divRplyFwdMsg" dir="ltr" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <font face="Calibri, sans-serif" style="font-size:11pt"><b>Von:</b><span class="x_Apple-converted-space"> </span>Calvin Sawyer <<a href="mailto:c.s...@qm...">c.s...@qm...</a>><br> <b>Gesendet:</b><span class="x_Apple-converted-space"> </span>Montag, 13. Mai 2024 10:01<br> <b>An:</b><span class="x_Apple-converted-space"> </span><a href="mailto:xca...@li...">xca...@li...</a><span class="x_Apple-converted-space"> </span><<a href="mailto:xca...@li...">xca...@li...</a>><br> <b>Betreff:</b><span class="x_Apple-converted-space"> </span>[xcat-user] 2.16.5 and rcons</font> <div> </div> </div> <div dir="ltr" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Hi</div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> We've just migrated to a fresh 2.16.5 in a Rocky9.3 VM using imports from the previous 2.16.3, which has been mostly successful. We can rinstall and perform most r-commands</div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Our test cluster which this xcat manages is comprised of older hardware and is meant to serve as a dress rehearsal for upgrading similarly in our production cluster with newer-gen hardware</div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> For the most part, 2.16.5 has been working fine with the notable exception of rcons. Both system types in the test cluster work fine with rcons under 2.16.3 user CentOS7, but under 2.16.5:</div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Flex System x240 and NeXtScale nx360 M5 respond on C3 only, C17 is inoperative (and verified using ipmitool) with error:</div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="margin:0px 40px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Error: Unable to establish IPMI v2 / RMCP+ session<br> Error in open session response message : no matching cipher suite</div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> Testing on other hardware is complicated by many accepting both C3 and C17 (dell iDrac is one). More contemporary IMM2 allows both cipher suites as well</div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> This leads me to think that rcons is still somewhere hardwired to C3. We downloaded and patched IPMI.pm with the one from<span class="x_Apple-converted-space"> </span><a href="https://github.com/xcat2/xcat-core" id="LPlnk" class="x_x_OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">https://github.com/xcat2/xcat-core</a> but the issue persists.</div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> However, I also don't understand exactly which system or xcat-specific components are involved in operation of goconserver or establishing an rcons connection to track down where the cipher suite is set</div> <div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt"> <br> </div> <div id="x_x_Signature"> <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"><span style="background-color:rgb(255,255,255)">Cal Sawyer</span></div> <div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(34,34,34)"> <span style="background-color:rgb(255,255,255)">ITS Research Platforms Manager</span></div> <div style="font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(34,34,34)"> <span style="background-color:rgb(255,255,255)">Queen Mary University of London</span></div> </div> </div> <span style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; float:none; display:inline!important">_______________________________________________</span><br style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <span style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none; float:none; display:inline!important">xCAT-user mailing list</span><br style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <a href="mailto:xCA...@li..." style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">xCA...@li...</a><br style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; text-align:start; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; text-decoration:none"> <a href="https://lists.sourceforge.net/lists/listinfo/xcat-user" style="font-family:Menlo-Regular; font-size:11px; font-style:normal; font-variant-caps:normal; font-weight:400; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">https://lists.sourceforge.net/lists/listinfo/xcat-user</a></div> </blockquote> </div> <br> </div> </div> <span>_______________________________________________</span><br><span>xCAT-user mailing list</span><br><span>xCA...@li...</span><br><span>https://lists.sourceforge.net/lists/listinfo/xcat-user</span><br></div></blockquote></div></body></html> |
From: Markus H. <mar...@me...> - 2024-05-17 16:42:14
|
With the following command you can enable (a) / disable (X) certain ciphers: ipmitool -I lanplus -U XXX -P XXX -H <node> lan set <channel> cipher_privs aaaaaaaaaaaaaaa This might be useful for some of you. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<http://www.megware.com/> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: Ryan Novosielski via xCAT-user <xca...@li...> Gesendet: Dienstag, 14. Mai 2024 17:06 An: xCAT Users Mailing list <xca...@li...> Cc: Ryan Novosielski <nov...@ru...> Betreff: Re: [xcat-user] 2.16.5 and rcons What has changed in later releases for RHEL-based OS is the behavior of ipmitool. I don’t know enough about the origins of the ipmitool that xCAT uses or how much it relies on the OS, but we have many systems that require -C 3 in order to connect on I believe both RHEL8 and RHEL9. -- #BlackLivesMatter ____ || \\UTGERS, |---------------------------*O*--------------------------- ||_// the State | Ryan Novosielski - nov...@ru... || \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus || \\ of NJ | Office of Advanced Research Computing - MSB A555B, Newark `' On May 14, 2024, at 07:51, Markus Hilger <mar...@me...> wrote: Hi, this is really strange because the goconserver should be the very same for quite some time. goconserver-0.3.3-snap202011021058.x86_64.rpm With site.consoleondemand set to yes the following happens: goconserver reads /var/lib/goconserver/nodes.json and spawns the following command: /opt/xcat/share/xcat/cons/ipmi <node> This will spawn: /opt/xcat/bin/ipmitool-xcat -I lanplus -U XXXXXX -P XXXXXX -H <node>.ipmi sol activate Can you please try to use the sol activate command manually and compare ipmitool-xcat vs. ipmitool? We might want to use ipmitool directly instead of ipmitool-xcat in /opt/xcat/share/xcat/cons/ipmi. Please also try with explicit cipher settings -C 3 -C 17 etc. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<http://www.megware.com/> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: Calvin Sawyer <c.s...@qm...<mailto:c.s...@qm...>> Gesendet: Montag, 13. Mai 2024 10:01 An: xca...@li...<mailto:xca...@li...> <xca...@li...<mailto:xca...@li...>> Betreff: [xcat-user] 2.16.5 and rcons Hi We've just migrated to a fresh 2.16.5 in a Rocky9.3 VM using imports from the previous 2.16.3, which has been mostly successful. We can rinstall and perform most r-commands Our test cluster which this xcat manages is comprised of older hardware and is meant to serve as a dress rehearsal for upgrading similarly in our production cluster with newer-gen hardware For the most part, 2.16.5 has been working fine with the notable exception of rcons. Both system types in the test cluster work fine with rcons under 2.16.3 user CentOS7, but under 2.16.5: Flex System x240 and NeXtScale nx360 M5 respond on C3 only, C17 is inoperative (and verified using ipmitool) with error: Error: Unable to establish IPMI v2 / RMCP+ session Error in open session response message : no matching cipher suite Testing on other hardware is complicated by many accepting both C3 and C17 (dell iDrac is one). More contemporary IMM2 allows both cipher suites as well This leads me to think that rcons is still somewhere hardwired to C3. We downloaded and patched IPMI.pm with the one from https://github.com/xcat2/xcat-core but the issue persists. However, I also don't understand exactly which system or xcat-specific components are involved in operation of goconserver or establishing an rcons connection to track down where the cipher suite is set Cal Sawyer ITS Research Platforms Manager Queen Mary University of London _______________________________________________ xCAT-user mailing list xCA...@li...<mailto:xCA...@li...> https://lists.sourceforge.net/lists/listinfo/xcat-user |
From: Ryan N. <nov...@ru...> - 2024-05-14 16:39:04
|
What has changed in later releases for RHEL-based OS is the behavior of ipmitool. I don’t know enough about the origins of the ipmitool that xCAT uses or how much it relies on the OS, but we have many systems that require -C 3 in order to connect on I believe both RHEL8 and RHEL9. -- #BlackLivesMatter ____ || \\UTGERS, |---------------------------*O*--------------------------- ||_// the State | Ryan Novosielski - nov...@ru... || \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus || \\ of NJ | Office of Advanced Research Computing - MSB A555B, Newark `' On May 14, 2024, at 07:51, Markus Hilger <mar...@me...> wrote: Hi, this is really strange because the goconserver should be the very same for quite some time. goconserver-0.3.3-snap202011021058.x86_64.rpm With site.consoleondemand set to yes the following happens: goconserver reads /var/lib/goconserver/nodes.json and spawns the following command: /opt/xcat/share/xcat/cons/ipmi <node> This will spawn: /opt/xcat/bin/ipmitool-xcat -I lanplus -U XXXXXX -P XXXXXX -H <node>.ipmi sol activate Can you please try to use the sol activate command manually and compare ipmitool-xcat vs. ipmitool? We might want to use ipmitool directly instead of ipmitool-xcat in /opt/xcat/share/xcat/cons/ipmi. Please also try with explicit cipher settings -C 3 -C 17 etc. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<http://www.megware.com/> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: Calvin Sawyer <c.s...@qm...<mailto:c.s...@qm...>> Gesendet: Montag, 13. Mai 2024 10:01 An: xca...@li...<mailto:xca...@li...> <xca...@li...<mailto:xca...@li...>> Betreff: [xcat-user] 2.16.5 and rcons Hi We've just migrated to a fresh 2.16.5 in a Rocky9.3 VM using imports from the previous 2.16.3, which has been mostly successful. We can rinstall and perform most r-commands Our test cluster which this xcat manages is comprised of older hardware and is meant to serve as a dress rehearsal for upgrading similarly in our production cluster with newer-gen hardware For the most part, 2.16.5 has been working fine with the notable exception of rcons. Both system types in the test cluster work fine with rcons under 2.16.3 user CentOS7, but under 2.16.5: Flex System x240 and NeXtScale nx360 M5 respond on C3 only, C17 is inoperative (and verified using ipmitool) with error: Error: Unable to establish IPMI v2 / RMCP+ session Error in open session response message : no matching cipher suite Testing on other hardware is complicated by many accepting both C3 and C17 (dell iDrac is one). More contemporary IMM2 allows both cipher suites as well This leads me to think that rcons is still somewhere hardwired to C3. We downloaded and patched IPMI.pm with the one from https://github.com/xcat2/xcat-core but the issue persists. However, I also don't understand exactly which system or xcat-specific components are involved in operation of goconserver or establishing an rcons connection to track down where the cipher suite is set Cal Sawyer ITS Research Platforms Manager Queen Mary University of London _______________________________________________ xCAT-user mailing list xCA...@li...<mailto:xCA...@li...> https://lists.sourceforge.net/lists/listinfo/xcat-user |
From: Markus H. <mar...@me...> - 2024-05-14 11:52:08
|
Hi, this is really strange because the goconserver should be the very same for quite some time. goconserver-0.3.3-snap202011021058.x86_64.rpm With site.consoleondemand set to yes the following happens: goconserver reads /var/lib/goconserver/nodes.json and spawns the following command: /opt/xcat/share/xcat/cons/ipmi <node> This will spawn: /opt/xcat/bin/ipmitool-xcat -I lanplus -U XXXXXX -P XXXXXX -H <node>.ipmi sol activate Can you please try to use the sol activate command manually and compare ipmitool-xcat vs. ipmitool? We might want to use ipmitool directly instead of ipmitool-xcat in /opt/xcat/share/xcat/cons/ipmi. Please also try with explicit cipher settings -C 3 -C 17 etc. Mit freundlichen Grüßen / Kind regards Markus Hilger HPC Engineer MEGWARE Computer Vertrieb und Service GmbH Tel: +49 3722 528-47 Nordstraße 19 mar...@me...<mailto:mar...@me...> 09247 Chemnitz-Röhrsdorf, Germany www.megware.com<http://www.megware.com/> Geschäftsführer: André Singer, Dr. Axel Auweter Amtsgericht: Chemnitz HRB 584 ________________________________ Von: Calvin Sawyer <c.s...@qm...> Gesendet: Montag, 13. Mai 2024 10:01 An: xca...@li... <xca...@li...> Betreff: [xcat-user] 2.16.5 and rcons Hi We've just migrated to a fresh 2.16.5 in a Rocky9.3 VM using imports from the previous 2.16.3, which has been mostly successful. We can rinstall and perform most r-commands Our test cluster which this xcat manages is comprised of older hardware and is meant to serve as a dress rehearsal for upgrading similarly in our production cluster with newer-gen hardware For the most part, 2.16.5 has been working fine with the notable exception of rcons. Both system types in the test cluster work fine with rcons under 2.16.3 user CentOS7, but under 2.16.5: Flex System x240 and NeXtScale nx360 M5 respond on C3 only, C17 is inoperative (and verified using ipmitool) with error: Error: Unable to establish IPMI v2 / RMCP+ session Error in open session response message : no matching cipher suite Testing on other hardware is complicated by many accepting both C3 and C17 (dell iDrac is one). More contemporary IMM2 allows both cipher suites as well This leads me to think that rcons is still somewhere hardwired to C3. We downloaded and patched IPMI.pm with the one from https://github.com/xcat2/xcat-core but the issue persists. However, I also don't understand exactly which system or xcat-specific components are involved in operation of goconserver or establishing an rcons connection to track down where the cipher suite is set Cal Sawyer ITS Research Platforms Manager Queen Mary University of London |
From: Jarrod J. <jjo...@le...> - 2024-05-14 11:51:33
|
It could use some work admittedly, but currently https://hpc.lenovo.com/ ________________________________ From: Imam Toufique <tec...@gm...> Sent: Monday, May 13, 2024 10:06 PM To: xCAT Users Mailing list <xca...@li...> Subject: Re: [xcat-user] [External] Re: xCAT Consortium update Are there any confluent documentation so someone can follow through to get it installed for testing? thanks. On Mon, May 13, 2024 at 6:58 PM Jarrod Johnson <jjo...@le...<mailto:jjo...@le...>> wrote: > Confluent and xCAT have diverged to a point they're now *very* different tools This is true, and one reason why I was relieved we wouldn't try to call such an effort 'xCAT 3'. On the other hand, they are very similar in a lot of respects. My original goal back in 2013 with confluent was 'maybe replace xcatd one day'. I was hoping that the things that do change might be slightly annoying as a learning curve and migration, but ultimately at least as convenient if not easier to learn/understand/debug for those coming in cold. Particularly the OS image stuff both represents a pain for migration, but also something that for people coming in cold is a bit easier to follow/tweak/maintain. However, I would want to preserve and enhance coexistence, even on the same management server. If ultimately the community gravitates toward xCAT 2 codebase, then that's fine, it's just not a direction I'm able to personally facilitate. > Nor that moving existing xCAT users and installations to a new system down the line will be a very easy transition path. Early days for me to venture much of an actionable opinion, but my guess is that we will have the current 'xcatd' as a package for people to install, largely to facilitate supporting existing OS profiles, particularly xCAT dialect of diskless. xCAT OS images would manifest as stub profiles in 'native confluent' and serviced largely by existing xCATd. I think 99% of the transition path for users will be the OS images, and I'm hoping that for the scope of currently supported major versions of OSes, this will work. Would have to go to a 'confluent' style when RHEL10 and clones come out, or other OS platforms that xCAT didn't support, but hoping that the learning curve and effort isn't too bad against the broader backdrop of migrating such an image to a major distribution release. confluent handling of DHCP feature with either some accommodations for xCAT use of DHCP or injecting some of the confluent logic into runtime of xCAT images. Note this coexistence applies to other OS deployment options, so we have to be careful not to step on toes that xCAT traditionally has been willing to step on. I suppose I should also confess that the out of the box confluent SSH strategy is a bit different, though I think 'adding on' xCAT style approach is easy to provide, though it may not be a very discouraged option versus adding confluent style SSH configuration to xCAT managed OSes (some security sensibilities are very opposed to the xCAT strategy) > trying to fix the existing xCAT issues and supporting newer distributions over time. At least for me, this is a bit tricky. xCAT is a bit of a peculiar codebase (in large part my fault, I'm sure a lot of xCAT developers have cursed my name) and even trying to follow some of the code I myself wrote some time ago has been a challenge at times. Beyond that, the population of people comfortable dealing in perl is a tad more limited so this can be a challenge. I may be incorrect, but my feeling is that the manpower possibly available is more limited when it comes to the xCAT 2 codebase (e.g. I know at least a few people that are unlikely to be of practical help with it but could help with something stemming from the current confluent codebase, myself included). There are some fragile bits that aren't great on their best days that have some even bigger challenges in the wider ecosystem coming. Some of the xCAT issues are pretty core and I struggle to imagine how to improve them within reason. Some have mitigations that aimed to alleviate the problems best we could figure out at the time, and I at least haven't had bright ideas on clean approaches, though I'll admit to not having considered it other than trying to avoid them in confluent. > Adding I'm a bit concerned that adding configuration management tooling into the mix I would like some clarification on that. We do have hooks to allow, for example, ansible, but confluent doesn't require or currently ship any ansible dependent options as of yet, and I'm also uncomfortable with mandating any particular configuration management in the core functionality even as we do better job supporting chosen configuration management tooling. I do want to support people to the extent they desire things like ansible and salt, but I don't want to be opinionated and demand any of them either. Currently the OS management capability mimics xCAT scope pretty closely, getting networking, basic node configuration, and ssh going, with exceptionally light 'post-deploy' capabilities, largely about fixing up those same basic features. In short, my hope is that we can provide something that minimizes the admitted pain of migration while catering to a lot of the use cases that people care about (and will be interested to see where people feel those gaps are today). Anyway, hope this was useful, sorry if I rambled on a bit. ________________________________ From: Kilian Cavalotti <kil...@gm...<mailto:kil...@gm...>> Sent: Monday, May 13, 2024 4:37 PM To: xCAT Users Mailing list <xca...@li...<mailto:xca...@li...>> Subject: [External] Re: [xcat-user] xCAT Consortium update On Fri, May 10, 2024 at 11:52 AM Laurence Horrocks-Barlow via xCAT-user <xca...@li...<mailto:xca...@li...>> wrote: > The future > The consortium is finalising: > - Its decision to rebase Confluent as it’s start for the next cluster management and administration tooling. > - What features to port over from xCAT? > - Which configuration management tooling should be included as a base? > - Any Confluent rebase will likely be renamed to respect existing product name and intellectual properties. (Yes we’re looking for names!) I know that ship has probably sailed already, and I don't want to challenge or question things that have already been decided, but Confluent and xCAT have diverged to a point they're now *very* different tools. I'm not sure that bringing features over from xCAT to Confluent will be less work or be more achievable with a limited team of volunteers than trying to fix the existing xCAT issues and supporting newer distributions over time. Nor that moving existing xCAT users and installations to a new system down the line will be a very easy transition path. Adding I'm a bit concerned that adding configuration management tooling into the mix and renaming it all doesn't really look like it's going in the direction of a xCAT project continuation, I'm afraid. :\ Cheers, -- Kilian _______________________________________________ xCAT-user mailing list xCA...@li...<mailto:xCA...@li...> https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fxcat-user&data=05%7C02%7Cjjohnson2%40lenovo.com%7Cf925cd1a48a243e1dbc908dc738cb044%7C5c7d0b28bdf8410caa934df372b16203%7C0%7C0%7C638512295321123041%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=QgdDAk%2FvVZP1KcNaRgAUG70rkpH7v9WS%2BmQvTJQZzSI%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/xcat-user> _______________________________________________ xCAT-user mailing list xCA...@li...<mailto:xCA...@li...> https://lists.sourceforge.net/lists/listinfo/xcat-user -- Regards, Imam Toufique 213-700-5485 |
From: Imam T. <tec...@gm...> - 2024-05-14 02:06:19
|
Are there any confluent documentation so someone can follow through to get it installed for testing? thanks. On Mon, May 13, 2024 at 6:58 PM Jarrod Johnson <jjo...@le...> wrote: > > > Confluent and xCAT have diverged to a point they're now *very* different > tools > > This is true, and one reason why I was relieved we wouldn't try to call > such an effort 'xCAT 3'. On the other hand, they are very similar in a lot > of respects. My original goal back in 2013 with confluent was 'maybe > replace xcatd one day'. I was hoping that the things that do change might > be slightly annoying as a learning curve and migration, but ultimately at > least as convenient if not easier to learn/understand/debug for those > coming in cold. Particularly the OS image stuff both represents a pain for > migration, but also something that for people coming in cold is a bit > easier to follow/tweak/maintain. However, I would want to preserve and > enhance coexistence, even on the same management server. If ultimately the > community gravitates toward xCAT 2 codebase, then that's fine, it's just > not a direction I'm able to personally facilitate. > > > Nor that moving existing xCAT users and installations to a new system > down the line will be a very easy transition path. > > Early days for me to venture much of an actionable opinion, but my guess > is that we will have the current 'xcatd' as a package for people to > install, largely to facilitate supporting existing OS profiles, > particularly xCAT dialect of diskless. xCAT OS images would manifest as > stub profiles in 'native confluent' and serviced largely by existing > xCATd. I think 99% of the transition path for users will be the OS images, > and I'm hoping that for the scope of currently supported major versions of > OSes, this will work. Would have to go to a 'confluent' style when RHEL10 > and clones come out, or other OS platforms that xCAT didn't support, but > hoping that the learning curve and effort isn't too bad against the broader > backdrop of migrating such an image to a major distribution release. > confluent handling of DHCP feature with either some accommodations for xCAT > use of DHCP or injecting some of the confluent logic into runtime of xCAT > images. Note this coexistence applies to other OS deployment options, so we > have to be careful not to step on toes that xCAT traditionally has been > willing to step on. > > I suppose I should also confess that the out of the box confluent SSH > strategy is a bit different, though I think 'adding on' xCAT style approach > is easy to provide, though it may not be a very discouraged option versus > adding confluent style SSH configuration to xCAT managed OSes (some > security sensibilities are very opposed to the xCAT strategy) > > > trying to fix the existing xCAT issues and supporting newer > distributions over time. > > At least for me, this is a bit tricky. xCAT is a bit of a peculiar > codebase (in large part my fault, I'm sure a lot of xCAT developers have > cursed my name) and even trying to follow some of the code I myself wrote > some time ago has been a challenge at times. Beyond that, the population of > people comfortable dealing in perl is a tad more limited so this can be a > challenge. I may be incorrect, but my feeling is that the manpower possibly > available is more limited when it comes to the xCAT 2 codebase (e.g. I know > at least a few people that are unlikely to be of practical help with it but > could help with something stemming from the current confluent codebase, > myself included). There are some fragile bits that aren't great on their > best days that have some even bigger challenges in the wider ecosystem > coming. Some of the xCAT issues are pretty core and I struggle to imagine > how to improve them within reason. Some have mitigations that aimed to > alleviate the problems best we could figure out at the time, and I at least > haven't had bright ideas on clean approaches, though I'll admit to not > having considered it other than trying to avoid them in confluent. > > > Adding I'm a bit concerned that adding configuration management tooling > into the mix > > I would like some clarification on that. We do have hooks to allow, for > example, ansible, but confluent doesn't require or currently ship any > ansible dependent options as of yet, and I'm also uncomfortable with > mandating any particular configuration management in the core functionality > even as we do better job supporting chosen configuration management > tooling. I do want to support people to the extent they desire things like > ansible and salt, but I don't want to be opinionated and demand any of them > either. Currently the OS management capability mimics xCAT scope pretty > closely, getting networking, basic node configuration, and ssh going, with > exceptionally light 'post-deploy' capabilities, largely about fixing up > those same basic features. > > In short, my hope is that we can provide something that minimizes the > admitted pain of migration while catering to a lot of the use cases that > people care about (and will be interested to see where people feel those > gaps are today). > > Anyway, hope this was useful, sorry if I rambled on a bit. > ------------------------------ > *From:* Kilian Cavalotti <kil...@gm...> > *Sent:* Monday, May 13, 2024 4:37 PM > *To:* xCAT Users Mailing list <xca...@li...> > *Subject:* [External] Re: [xcat-user] xCAT Consortium update > > On Fri, May 10, 2024 at 11:52 AM Laurence Horrocks-Barlow via > xCAT-user <xca...@li...> wrote: > > The future > > The consortium is finalising: > > - Its decision to rebase Confluent as it’s start for the next cluster > management and administration tooling. > > - What features to port over from xCAT? > > - Which configuration management tooling should be included as a base? > > - Any Confluent rebase will likely be renamed to respect existing > product name and intellectual properties. (Yes we’re looking for names!) > > I know that ship has probably sailed already, and I don't want to > challenge or question things that have already been decided, but > Confluent and xCAT have diverged to a point they're now *very* > different tools. I'm not sure that bringing features over from xCAT to > Confluent will be less work or be more achievable with a limited team > of volunteers than trying to fix the existing xCAT issues and > supporting newer distributions over time. Nor that moving existing > xCAT users and installations to a new system down the line will be a > very easy transition path. > > Adding I'm a bit concerned that adding configuration management > tooling into the mix and renaming it all doesn't really look like it's > going in the direction of a xCAT project continuation, I'm afraid. :\ > > Cheers, > -- > Kilian > > > _______________________________________________ > xCAT-user mailing list > xCA...@li... > > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fxcat-user&data=05%7C02%7Cjjohnson2%40lenovo.com%7Cf925cd1a48a243e1dbc908dc738cb044%7C5c7d0b28bdf8410caa934df372b16203%7C0%7C0%7C638512295321123041%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=QgdDAk%2FvVZP1KcNaRgAUG70rkpH7v9WS%2BmQvTJQZzSI%3D&reserved=0 > <https://lists.sourceforge.net/lists/listinfo/xcat-user> > _______________________________________________ > xCAT-user mailing list > xCA...@li... > https://lists.sourceforge.net/lists/listinfo/xcat-user > -- Regards, *Imam Toufique* *213-700-5485* |
From: Jarrod J. <jjo...@le...> - 2024-05-14 01:57:49
|
> Confluent and xCAT have diverged to a point they're now *very* different tools This is true, and one reason why I was relieved we wouldn't try to call such an effort 'xCAT 3'. On the other hand, they are very similar in a lot of respects. My original goal back in 2013 with confluent was 'maybe replace xcatd one day'. I was hoping that the things that do change might be slightly annoying as a learning curve and migration, but ultimately at least as convenient if not easier to learn/understand/debug for those coming in cold. Particularly the OS image stuff both represents a pain for migration, but also something that for people coming in cold is a bit easier to follow/tweak/maintain. However, I would want to preserve and enhance coexistence, even on the same management server. If ultimately the community gravitates toward xCAT 2 codebase, then that's fine, it's just not a direction I'm able to personally facilitate. > Nor that moving existing xCAT users and installations to a new system down the line will be a very easy transition path. Early days for me to venture much of an actionable opinion, but my guess is that we will have the current 'xcatd' as a package for people to install, largely to facilitate supporting existing OS profiles, particularly xCAT dialect of diskless. xCAT OS images would manifest as stub profiles in 'native confluent' and serviced largely by existing xCATd. I think 99% of the transition path for users will be the OS images, and I'm hoping that for the scope of currently supported major versions of OSes, this will work. Would have to go to a 'confluent' style when RHEL10 and clones come out, or other OS platforms that xCAT didn't support, but hoping that the learning curve and effort isn't too bad against the broader backdrop of migrating such an image to a major distribution release. confluent handling of DHCP feature with either some accommodations for xCAT use of DHCP or injecting some of the confluent logic into runtime of xCAT images. Note this coexistence applies to other OS deployment options, so we have to be careful not to step on toes that xCAT traditionally has been willing to step on. I suppose I should also confess that the out of the box confluent SSH strategy is a bit different, though I think 'adding on' xCAT style approach is easy to provide, though it may not be a very discouraged option versus adding confluent style SSH configuration to xCAT managed OSes (some security sensibilities are very opposed to the xCAT strategy) > trying to fix the existing xCAT issues and supporting newer distributions over time. At least for me, this is a bit tricky. xCAT is a bit of a peculiar codebase (in large part my fault, I'm sure a lot of xCAT developers have cursed my name) and even trying to follow some of the code I myself wrote some time ago has been a challenge at times. Beyond that, the population of people comfortable dealing in perl is a tad more limited so this can be a challenge. I may be incorrect, but my feeling is that the manpower possibly available is more limited when it comes to the xCAT 2 codebase (e.g. I know at least a few people that are unlikely to be of practical help with it but could help with something stemming from the current confluent codebase, myself included). There are some fragile bits that aren't great on their best days that have some even bigger challenges in the wider ecosystem coming. Some of the xCAT issues are pretty core and I struggle to imagine how to improve them within reason. Some have mitigations that aimed to alleviate the problems best we could figure out at the time, and I at least haven't had bright ideas on clean approaches, though I'll admit to not having considered it other than trying to avoid them in confluent. > Adding I'm a bit concerned that adding configuration management tooling into the mix I would like some clarification on that. We do have hooks to allow, for example, ansible, but confluent doesn't require or currently ship any ansible dependent options as of yet, and I'm also uncomfortable with mandating any particular configuration management in the core functionality even as we do better job supporting chosen configuration management tooling. I do want to support people to the extent they desire things like ansible and salt, but I don't want to be opinionated and demand any of them either. Currently the OS management capability mimics xCAT scope pretty closely, getting networking, basic node configuration, and ssh going, with exceptionally light 'post-deploy' capabilities, largely about fixing up those same basic features. In short, my hope is that we can provide something that minimizes the admitted pain of migration while catering to a lot of the use cases that people care about (and will be interested to see where people feel those gaps are today). Anyway, hope this was useful, sorry if I rambled on a bit. ________________________________ From: Kilian Cavalotti <kil...@gm...> Sent: Monday, May 13, 2024 4:37 PM To: xCAT Users Mailing list <xca...@li...> Subject: [External] Re: [xcat-user] xCAT Consortium update On Fri, May 10, 2024 at 11:52 AM Laurence Horrocks-Barlow via xCAT-user <xca...@li...> wrote: > The future > The consortium is finalising: > - Its decision to rebase Confluent as it’s start for the next cluster management and administration tooling. > - What features to port over from xCAT? > - Which configuration management tooling should be included as a base? > - Any Confluent rebase will likely be renamed to respect existing product name and intellectual properties. (Yes we’re looking for names!) I know that ship has probably sailed already, and I don't want to challenge or question things that have already been decided, but Confluent and xCAT have diverged to a point they're now *very* different tools. I'm not sure that bringing features over from xCAT to Confluent will be less work or be more achievable with a limited team of volunteers than trying to fix the existing xCAT issues and supporting newer distributions over time. Nor that moving existing xCAT users and installations to a new system down the line will be a very easy transition path. Adding I'm a bit concerned that adding configuration management tooling into the mix and renaming it all doesn't really look like it's going in the direction of a xCAT project continuation, I'm afraid. :\ Cheers, -- Kilian _______________________________________________ xCAT-user mailing list xCA...@li... https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fxcat-user&data=05%7C02%7Cjjohnson2%40lenovo.com%7Cf925cd1a48a243e1dbc908dc738cb044%7C5c7d0b28bdf8410caa934df372b16203%7C0%7C0%7C638512295321123041%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=QgdDAk%2FvVZP1KcNaRgAUG70rkpH7v9WS%2BmQvTJQZzSI%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/xcat-user> |