CLONWiki - User contributions [en]

Linux Boot Server

2026-04-08T20:47:25Z

Boiarino: /* VTP CentOS boot */

'''Main boot server is clon01'''.

'''TO DO''' Check UBOOT commands to erase existing environment variables:

env default -a -f
env erase

== '''VTP CentOS boot''' ==

UBOOT (example for gem0vtp):

Zynq> printenv
autoload=no
baudrate=115200
bootcmd=run tftpboot
bootdelay=3
bootro=setenv bootargs ${bootargs} ro
bootrw=setenv bootargs ${bootargs} rw
devicetree_image=devicetree.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=ce:ba:f0:03:xx:xx
extargs=setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
initrd_high=0x20000000
kernel_image=uImage-4.4.0-xilinx-00004-g8d932a
kernel_load_address=0x2080000
load_devicetree=if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;
load_dhcp=if dhcp; then echo OK; else echo FAILED; reset; fi;
load_kernel=if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;
modeboot=sdboot
netmask=255.255.255.0
nfsargs=setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3
rootpath=/vol/diskless/CentOS7/armv7/root
rootserverip=129.57.167.152
serverip=129.57.167.4
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftp_boot_string=echo TFTPing Image to RAM
tftpboot=run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftpboot_rw=dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftppath=linux-install/CentOS7-armv7-Diskless

Environment size: 1603/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it by groups as shown, otherwise it may place some bull...):

setenv bootargs
setenv gatewayip
setenv ipaddr
setenv kernel_path
setenv nfsip
setenv nfsroot
setenv sdboot
setenv sdboot_no
setenv setboot
setenv tftpboot_no
setenv tt_string

setenv autoload 'no'
setenv baudrate '115200'
setenv bootcmd 'run tftpboot'
setenv bootdelay '3'
setenv bootro 'setenv bootargs ${bootargs} ro'
setenv bootrw 'setenv bootargs ${bootargs} rw'
setenv devicetree_image 'devicetree.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'ce:ba:f0:03:00:d1'
setenv extargs 'setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv initrd_high '0x20000000'
setenv kernel_image 'uImage-4.4.0-xilinx-00004-g8d932a'
setenv kernel_load_address '0x2080000'

setenv load_devicetree 'if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;'
setenv load_dhcp 'if dhcp; then echo OK; else echo FAILED; reset; fi;'
setenv load_kernel 'if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3'
setenv rootpath '/vol/diskless/CentOS7/armv7/root'
setenv rootserverip '129.57.167.152'
setenv serverip '129.57.167.4'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftp_boot_string 'echo TFTPing Image to RAM'

setenv tftpboot 'run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftpboot_rw 'dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftppath 'linux-install/CentOS7-armv7-Diskless'

After that, customize following:

ethaddr

'''tftpboot server settings'''

/tftpboot/linux-install/CentOS7-armv7-Diskless/uImage-4.4.0-xilinx-00004-g8d932a
uImage-4.4.0-xilinx-00003-gdf4da5
zynq-jlab-vtp.dtb_fixed_uio
devicetree.dtb -> zynq-jlab-vtp.dtb_fixed_uio

By default, root filesystem will be read-only. To make it 'rw', stop booting process on serial connection, type ''run tftpboot_rw'' and push <enter>. After that you can ssh as root and run ''yum'' etc.

== '''VTP Archlinux boot''' ==

Zynq> printenv
autoload=no
baudrate=115200
bootargs=console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
bootcmd=run $modeboot
bootdelay=3
devicetree_image=zynq-jlab-vtp.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=CE:BA:F0:03:00:02
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
gatewayip=129.57.68.100
initrd_high=0x20000000
ipaddr=129.57.68.38
kernel_image=uImage
kernel_load_address=0x2080000
kernel_path=linux-install/ArchLinux-armv71
modeboot=sdboot
netmask=255.255.255.0
nfsargs=vers=3,tcp,timeo=600,retrans=10
nfsip=129.57.167.152
nfsroot=/vol/diskless/ArchLinux/armv7-devel/root
sdboot=run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000
sdboot_no=if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi
serverip=129.57.167.4
setboot=setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftpboot_no=echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};

Environment size: 1828/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it line-by-line, otherwise it may place some bull...):

setenv autoload 'no'
setenv baudrate '115200'
setenv bootargs 'console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv bootcmd 'run $modeboot'
setenv bootdelay '3'
setenv devicetree_image 'zynq-jlab-vtp.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'CE:BA:F0:03:00:02'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv gatewayip '129.57.68.100'
setenv initrd_high '0x20000000'
setenv ipaddr '129.57.68.38'
setenv kernel_image 'uImage'
setenv kernel_load_address '0x2080000'
setenv kernel_path 'linux-install/ArchLinux-armv71'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'vers=3,tcp,timeo=600,retrans=10'
setenv nfsip '129.57.167.152'
setenv nfsroot '/vol/diskless/ArchLinux/armv7-devel/root'
setenv sdboot 'run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000'
setenv sdboot_no 'if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi'
setenv serverip '129.57.167.4'
setenv setboot 'setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftpboot_no 'echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};'

After that, customize following:
ethaddr
gatewayip
ipaddr
netmask

== '''Setting of the Linux server to be used for PXE and EFI boot of the VME controllers''' ==

Login to the server as root. Copy two files to the root directory and untar them:
cd /
cp /usr/downloads/tftpboot.tar.gz_clondaq15 tftpboot.tar.gz
cp /usr/downloads/diskless.tar.gz_clondaq15 diskless.tar.gz
gunzip tftpboot.tar.gz
gunzip diskless.tar.gz
tar xvf tftpboot.tar
tar xvf diskless.tar
rm tftpboot.tar diskless.tar

Make sure correct snapshot location in root area ''/diskless/CentOS7/x86_64/root/etc/sysconfig/readonly-root'':

CLIENTSTATE=192.168.10.1:/diskless/CentOS7/x86_64/snapshot

In ''/diskless/CentOS7/x86_64/root'' area, ''/etc/ssh/sshd_config'' must have following setting (to allow remote ssh):

#UsePAM yes

it will be propagated to the controller's snapshot area on the first boot when corresponding ''snapshot/<vme_controller_name>'' directory will be created. Not sure about other settings:

HostbasedAuthentication yes
#HostbasedAuthentication no

IgnoreRhosts no
#IgnoreRhosts yes

PasswordAuthentication yes
#PasswordAuthentication yes
PasswordAuthentication yes

#UsePrivilegeSeparation sandbox # Default for new installations.
UsePrivilegeSeparation sandbox # Default for new installations.

To add or remove VME controllers, modify following files:
/var/named/10.168.192.in-addr.arpa.db
/var/named/clontest.com
/etc/dhcp/dhcpd.conf

restart corresponding services:
systemctl restart dhcpd
systemctl restart named

and check services status:
systemctl status dhcpd
systemctl status named

To set gateway, add
net.ipv4.ip_forward=1
to ''/etc/sysctl.conf'' and execute
sysctl -p

Configure [[NFS]]

Configure [[DHCP server]]

Configure [[DNS server]] ('''NOTE:''' resolv.conf is different for local server !)

Configure [[Tftp]] and [[Tftpboot]]

Configure [[Iptables]]

Do not forget (is it for controllers ?):
chattr +i /etc/resolv.conf

yum install ypbind (????)

'''Configuring snapshot area'''

The list of files and directories which suppose to be in snapshot area (which has RW permissions) should be set in config file ''/diskless/.../snapshot/files'' for CentOS5, or in config file ''/diskless/../root/etc/statetab'' for CentOS7. In particular, ''/et'' has to be added there, and also directory ''/diskless/.../root/et'' should be created.

'''Reboot server, make sure everything is running as expected.'''

== '''Configuring in chroot''' ==

'''NOTE: using ''chroot'' method will allow to run ''yum'', but ''systemctl'' commands will not work. Instead of using ''chroot'', you may boot coontroller with ''rw'' option instead of ''ro''. For VME boot, it can be done by changing ''grub.cnf'', while for VTP boot you have to stop boot proocess using serial connection, and then type ''run tftpboot_rw''.'''

Since root area in VME controllers will be read-only, you cannot ssh to controllers as root and change anything there, only snapshot area can be modified. To make changes in root area, in particular to configure and run ''yum'', ''chroot' command should be used. Login to the boot server as root and do following:

mount -o bind /home /diskless/CentOS7/x86_64/root/home
mount -o bind /usr/local /diskless/CentOS7/x86_64/root/usr/local
mount -o bind /usr/clas12 /diskless/CentOS7/x86_64/root/usr/clas12
chroot /diskless/CentOS7/x86_64/root

After that you will see all root directories as if you login to VME controller, and modifications can be made.

'''Configure yum'''

Add ''multilib_policy=all'' to ''/etc/yum.conf''.

Add (and remove the rest ?) following to ''/etc/yum.repos.d/CentOS-Base.repo'':

[base]
name=CentOS-$releasever - Base
baseurl=http://archive.kernel.org/centos-vault/centos/$releasever/os/$basearch/

Clean yum database:

rm /var/lib/rpm/__db.*

Install following using yum:

yum install motif-devel tcl-devel tk-devel libXpm-devel apr-devel libXaw-devel ncurses-devel libconfig-devel

Install following for ''dbedit'':

yum install tix itcl itk

Install remaining tcl stuff from ''/usr/local/src'', mounted as ''/zzz'' above:

cd /zzz/mysqltcl-3.052
make install
ln -s /usr/lib/mysqltcl-3.052 /usr/lib64/tcl8.5/mysqltcl-3.052

'''NOTE''': Login from console may not work because of file ''/etc/securetty'' permissions, it must be 644.

'''NOTE''': THere is a service PAM, it may prevent login from console if some required services did not start. To work around, comment out some lines in ''/etc/pam.d/system-auth-ac'' file:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
#auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
#auth requisite pam_succeed_if.so uid >= 1000 quiet_success
#auth required pam_deny.so

#account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 1000 quiet
#account required pam_permit.so

password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
#password required pam_deny.so

session optional pam_keyinit.so revoke
#session required pam_limits.so
-session optional pam_systemd.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
#session required pam_unix.so

'''After Linux boot server is ready and operational, VME controllers can be booted. On the first boot, individual ''/diskless/.../snapshot/<controller name>'' directory will be created for each controller. For VME controller specific information see [[VME]]'''

Abaco XVB603

2026-04-08T14:57:58Z

Boiarino:

'''Initial setting:'''

Unplug ethernet cable.

For new controller, push and hold '''DEL''' to get BIOS.

In BIOS, go to '''Advanced->Network Stack Configuration''' and enable '''Network Stack''' and '''Ipv4 PXE Support'''.

In BIOS, go to '''Abaco->Network Boot Configuration''' and enable '''PXE ROM - ETH3''' and '''PXE ROM - ETH4'''.

In BIOS, go to '''Abaco->VMEbus Configuration''' and set '''Reserve VME Space''' to '''512 MBytes'''.

'''Save & Exit'''

Connect ethernet cable to the top port. Recycle power, it should boot (if not, in BIOS, go to '''Boot''' and set appropriate network port(s) in BOOT Option #1 (and #2)).

Abaco XVB603

2026-04-08T14:57:46Z

Boiarino:

'''Initial setting:'''

Unplug ethernet cable.

For new controller, push and hold '''DEL'' to get BIOS.

In BIOS, go to '''Advanced->Network Stack Configuration''' and enable '''Network Stack''' and '''Ipv4 PXE Support'''.

In BIOS, go to '''Abaco->Network Boot Configuration''' and enable '''PXE ROM - ETH3''' and '''PXE ROM - ETH4'''.

In BIOS, go to '''Abaco->VMEbus Configuration''' and set '''Reserve VME Space''' to '''512 MBytes'''.

'''Save & Exit'''

Connect ethernet cable to the top port. Recycle power, it should boot (if not, in BIOS, go to '''Boot''' and set appropriate network port(s) in BOOT Option #1 (and #2)).

Tftpboot

2026-04-01T19:18:43Z

Boiarino:

'''Tftpboot setting to boot diskless VME controllers'''

If ''/tftpboot'' directory does not exist yet, copy it from ''/usr/downloads'' (it come from Bryan Moffit in April 2025).

'''EFI boot'''

File ''/tftpboot/efi/boot/grub2/grub.cfg'' should have following contents (to use ''/diskless'' from file server, below set ''...root=nfs:129.57.167.16:/vol/diskless/...''):

function load_video {
insmod efi_gop
insmod efi_uga
insmod video_bochs
insmod video_cirrus
insmod all_video
}

load_video
set gfxpayload=keep
insmod gzio
set timeout=2
menuentry 'Diskless CentOS7 x86_64, any network device' --class redhat --class gnu-linux --class gnu --class os {
linuxefi linux-install/CentOS7-x86_64-Diskless/vmlinuz-3.10.0-1062.9.1.el7.x86_64 zram=1 ip=::::::dhcp root=nfs:192.168.10.1:/diskless/CentOS7/x86_64/root ro vga=0x305 module_blacklist=ipmi_si,ipmi_msghandler,ipmi_devintf,w83977f_wdt
initrdefi linux-install/CentOS7-x86_64-Diskless/initramfs-jvme-3.10.0-1062.9.1.el7.x86_64.img
}

that file will serve all EFI-bootable VME controllers, '''no need to set anything in ''/tftpboot'' area'''

'''PXE boot'''

In directory ''/tftpboot/pxelinux.cfg'', PXE-bootable controllers boot files are stored. For example:
C0A80A06 -> test6
test6

where ''C0A80A06'' is test6's IP address in hex format (192.168.10.6), and ''test6'' has following contents:
default CentOS7

label CentOS7
kernel CentOS7-x86_64-Diskless/vmlinuz-3.10.0-1062.9.1.el7.x86_64
append initrd=CentOS7-x86_64-Diskless/initramfs-jvme-3.10.0-1062.9.1.el7.x86_64.img ip=dhcp root=nfs:192.168.10.1:/diskless/CentOS7/x86_64/root,tcp ro

# label CentOS7
# kernel CentOS7-x86_64-Diskless/vmlinuz-3.10.0-1062.9.1.el7.x86_64
# append initrd=CentOS7-x86_64-Diskless/initramfs-jvme-3.10.0-1062.9.1.el7.x86_64.img ip=bootdev:dhcp root=nfs:192.168.10.1:/diskless/CentOS7/x86_64/root,tcp ro ifname=bootdev:00:20:38:0A:07:D7

It should be mentioned that in both cases VME controller's root directories will be mounted as 'read only'. All individual controller-specific directories will be placed in 'snapshot' area.

Tftpboot

2026-04-01T19:18:26Z

Boiarino:

Tftpboot

2026-04-01T19:18:11Z

Boiarino:

Raid

2026-03-25T14:48:59Z

Boiarino: /* perccli */

== storcli ==

On clondaq7, it is installed to ''/opt/MegaRAID/storcli''.

'''./storcli64 /c0/eall/sall show'''
CLI Version = 007.3405.0000.0000 May 15, 2025
Operating system = Linux 5.14.0-611.7.1.el9_7.x86_64
Controller = 0
Status = Success
Description = Show Drive Information Succeeded.

Drive Information :
=================

----------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------
9:0 10 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:1 18 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:2 14 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:3 20 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:4 23 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:5 32 Onln 0 7.276 TB SAS HDD N N 512B HUH728080AL5204 U -
9:6 28 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:7 25 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:8 11 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:9 13 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:10 31 GHS - 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:11 16 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:12 24 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:13 26 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:14 15 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:15 19 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:16 22 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:17 29 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:18 27 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:19 21 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:20 33 Onln - 7.276 TB SAS HDD N N 512B HUH728080AL5204 U -
9:21 34 UGood - 7.276 TB SAS HDD N N 512B HUH728080AL5204 D -
----------------------------------------------------------------------------

'''./storcli64 /c0/v0 start migrate type=r6 option=add drives=9:21'''

'''./storcli64 /c0/v0 show'''

== perccli ==

On clondaq6, it is installed in ''/opt/MegaRAID/perccli'' (from rpm inside ''/usr/downloads/PERCCLI_7.1910.00_A12_Linux.tar.gz'').

Commands similar to storcli, for example:

[root@clondaq6 perccli]# '''./perccli64 /c0/eall/sall show'''
CLI Version = 007.1910.0000.0000 Oct 08, 2021
Operating system = Linux 5.14.0-611.7.1.el9_7.x86_64
Controller = 0
Status = Success
Description = Show Drive Information Succeeded.

Drive Information :
=================

----------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------
32:0 0 Onln 0 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:1 1 Onln 0 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:2 2 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:3 3 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:4 4 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:5 5 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:6 6 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:7 7 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:8 8 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:9 9 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:10 10 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:11 11 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:12 12 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:13 13 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:14 14 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:15 15 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:16 16 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:17 17 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:18 18 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:19 19 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:20 20 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:21 21 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:22 22 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:23 23 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
----------------------------------------------------------------------------

EID=Enclosure Device ID|Slt=Slot No|DID=Device ID|DG=DriveGroup
DHS=Dedicated Hot Spare|UGood=Unconfigured Good|GHS=Global Hotspare
UBad=Unconfigured Bad|Sntze=Sanitize|Onln=Online|Offln=Offline|Intf=Interface
Med=Media Type|SED=Self Encryptive Drive|PI=Protection Info
SeSz=Sector Size|Sp=Spun|U=Up|D=Down|T=Transition|F=Foreign
UGUnsp=UGood Unsupported|UGShld=UGood shielded|HSPShld=Hotspare shielded
CFShld=Configured shielded|Cpybck=CopyBack|CBShld=Copyback Shielded
UBUnsp=UBad Unsupported|Rbld=Rebuild

Raid

2026-03-25T14:48:16Z

Boiarino: /* perccli */

== storcli ==

On clondaq7, it is installed to ''/opt/MegaRAID/storcli''.

'''./storcli64 /c0/eall/sall show'''
CLI Version = 007.3405.0000.0000 May 15, 2025
Operating system = Linux 5.14.0-611.7.1.el9_7.x86_64
Controller = 0
Status = Success
Description = Show Drive Information Succeeded.

Drive Information :
=================

----------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------
9:0 10 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:1 18 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:2 14 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:3 20 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:4 23 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:5 32 Onln 0 7.276 TB SAS HDD N N 512B HUH728080AL5204 U -
9:6 28 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:7 25 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:8 11 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:9 13 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:10 31 GHS - 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:11 16 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:12 24 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:13 26 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:14 15 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:15 19 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:16 22 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:17 29 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:18 27 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:19 21 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:20 33 Onln - 7.276 TB SAS HDD N N 512B HUH728080AL5204 U -
9:21 34 UGood - 7.276 TB SAS HDD N N 512B HUH728080AL5204 D -
----------------------------------------------------------------------------

'''./storcli64 /c0/v0 start migrate type=r6 option=add drives=9:21'''

'''./storcli64 /c0/v0 show'''

== perccli ==

Installed from rpm inside ''/usr/downloads/PERCCLI_7.1910.00_A12_Linux.tar.gz''.

On clondaq6, it is installed in ''/opt/MegaRAID/perccli''.

Commands similar to storcli, for example:

[root@clondaq6 perccli]# '''./perccli64 /c0/eall/sall show'''
CLI Version = 007.1910.0000.0000 Oct 08, 2021
Operating system = Linux 5.14.0-611.7.1.el9_7.x86_64
Controller = 0
Status = Success
Description = Show Drive Information Succeeded.

Drive Information :
=================

----------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------
32:0 0 Onln 0 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:1 1 Onln 0 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:2 2 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:3 3 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:4 4 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:5 5 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:6 6 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:7 7 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:8 8 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:9 9 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:10 10 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:11 11 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:12 12 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:13 13 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:14 14 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:15 15 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:16 16 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:17 17 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:18 18 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:19 19 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:20 20 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:21 21 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:22 22 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:23 23 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
----------------------------------------------------------------------------

EID=Enclosure Device ID|Slt=Slot No|DID=Device ID|DG=DriveGroup
DHS=Dedicated Hot Spare|UGood=Unconfigured Good|GHS=Global Hotspare
UBad=Unconfigured Bad|Sntze=Sanitize|Onln=Online|Offln=Offline|Intf=Interface
Med=Media Type|SED=Self Encryptive Drive|PI=Protection Info
SeSz=Sector Size|Sp=Spun|U=Up|D=Down|T=Transition|F=Foreign
UGUnsp=UGood Unsupported|UGShld=UGood shielded|HSPShld=Hotspare shielded
CFShld=Configured shielded|Cpybck=CopyBack|CBShld=Copyback Shielded
UBUnsp=UBad Unsupported|Rbld=Rebuild

Raid

2026-03-25T14:45:47Z

Boiarino: /* perccli */

== storcli ==

On clondaq7, it is installed to ''/opt/MegaRAID/storcli''.

'''./storcli64 /c0/eall/sall show'''
CLI Version = 007.3405.0000.0000 May 15, 2025
Operating system = Linux 5.14.0-611.7.1.el9_7.x86_64
Controller = 0
Status = Success
Description = Show Drive Information Succeeded.

Drive Information :
=================

----------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------
9:0 10 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:1 18 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:2 14 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:3 20 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:4 23 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:5 32 Onln 0 7.276 TB SAS HDD N N 512B HUH728080AL5204 U -
9:6 28 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:7 25 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:8 11 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:9 13 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:10 31 GHS - 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:11 16 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:12 24 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:13 26 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:14 15 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:15 19 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:16 22 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:17 29 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:18 27 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:19 21 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:20 33 Onln - 7.276 TB SAS HDD N N 512B HUH728080AL5204 U -
9:21 34 UGood - 7.276 TB SAS HDD N N 512B HUH728080AL5204 D -
----------------------------------------------------------------------------

'''./storcli64 /c0/v0 start migrate type=r6 option=add drives=9:21'''

'''./storcli64 /c0/v0 show'''

== perccli ==

On clondaq6, it is installed in ''/opt/MegaRAID/perccli''.

Commands similar to storcli, for example:

[root@clondaq6 perccli]# '''./perccli64 /c0/eall/sall show'''
CLI Version = 007.1910.0000.0000 Oct 08, 2021
Operating system = Linux 5.14.0-611.7.1.el9_7.x86_64
Controller = 0
Status = Success
Description = Show Drive Information Succeeded.

Drive Information :
=================

----------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------
32:0 0 Onln 0 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:1 1 Onln 0 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:2 2 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:3 3 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:4 4 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:5 5 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:6 6 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:7 7 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:8 8 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:9 9 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:10 10 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:11 11 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:12 12 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:13 13 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:14 14 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:15 15 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:16 16 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:17 17 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:18 18 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:19 19 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:20 20 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:21 21 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:22 22 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:23 23 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
----------------------------------------------------------------------------

EID=Enclosure Device ID|Slt=Slot No|DID=Device ID|DG=DriveGroup
DHS=Dedicated Hot Spare|UGood=Unconfigured Good|GHS=Global Hotspare
UBad=Unconfigured Bad|Sntze=Sanitize|Onln=Online|Offln=Offline|Intf=Interface
Med=Media Type|SED=Self Encryptive Drive|PI=Protection Info
SeSz=Sector Size|Sp=Spun|U=Up|D=Down|T=Transition|F=Foreign
UGUnsp=UGood Unsupported|UGShld=UGood shielded|HSPShld=Hotspare shielded
CFShld=Configured shielded|Cpybck=CopyBack|CBShld=Copyback Shielded
UBUnsp=UBad Unsupported|Rbld=Rebuild

Raid

2026-03-25T14:45:15Z

Boiarino:

== storcli ==

On clondaq7, it is installed to ''/opt/MegaRAID/storcli''.

'''./storcli64 /c0/eall/sall show'''
CLI Version = 007.3405.0000.0000 May 15, 2025
Operating system = Linux 5.14.0-611.7.1.el9_7.x86_64
Controller = 0
Status = Success
Description = Show Drive Information Succeeded.

Drive Information :
=================

----------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------
9:0 10 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:1 18 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:2 14 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:3 20 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:4 23 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:5 32 Onln 0 7.276 TB SAS HDD N N 512B HUH728080AL5204 U -
9:6 28 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:7 25 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:8 11 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:9 13 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:10 31 GHS - 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:11 16 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:12 24 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:13 26 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:14 15 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:15 19 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:16 22 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:17 29 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:18 27 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:19 21 Onln 0 7.276 TB SAS HDD N N 512B HUH721008AL5200 U -
9:20 33 Onln - 7.276 TB SAS HDD N N 512B HUH728080AL5204 U -
9:21 34 UGood - 7.276 TB SAS HDD N N 512B HUH728080AL5204 D -
----------------------------------------------------------------------------

'''./storcli64 /c0/v0 start migrate type=r6 option=add drives=9:21'''

'''./storcli64 /c0/v0 show'''

== perccli ==

On clondaq6, it is installed in ''/opt/MegaRAID/perccli''.

Commands similar to storcli, for example:

[root@clondaq6 perccli]# ./perccli64 /c0/eall/sall show
CLI Version = 007.1910.0000.0000 Oct 08, 2021
Operating system = Linux 5.14.0-611.7.1.el9_7.x86_64
Controller = 0
Status = Success
Description = Show Drive Information Succeeded.

Drive Information :
=================

----------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------
32:0 0 Onln 0 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:1 1 Onln 0 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:2 2 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:3 3 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:4 4 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:5 5 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:6 6 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:7 7 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:8 8 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:9 9 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:10 10 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:11 11 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:12 12 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:13 13 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:14 14 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:15 15 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:16 16 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:17 17 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:18 18 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:19 19 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:20 20 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:21 21 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:22 22 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
32:23 23 Onln 1 1.090 TB SAS HDD N N 512B HUC101212CSS600 U -
----------------------------------------------------------------------------

EID=Enclosure Device ID|Slt=Slot No|DID=Device ID|DG=DriveGroup
DHS=Dedicated Hot Spare|UGood=Unconfigured Good|GHS=Global Hotspare
UBad=Unconfigured Bad|Sntze=Sanitize|Onln=Online|Offln=Offline|Intf=Interface
Med=Media Type|SED=Self Encryptive Drive|PI=Protection Info
SeSz=Sector Size|Sp=Spun|U=Up|D=Down|T=Transition|F=Foreign
UGUnsp=UGood Unsupported|UGShld=UGood shielded|HSPShld=Hotspare shielded
CFShld=Configured shielded|Cpybck=CopyBack|CBShld=Copyback Shielded
UBUnsp=UBad Unsupported|Rbld=Rebuild

Tcl/Tk

2026-03-24T13:21:01Z

Boiarino: /* RHEL7 */

== RHEL9 ==

Install following using ''yum'':

yum install tcl-devel tk-devel tix-devel expect

Install the rest from local sources:

cd /usr/local/src/itcl4.2.3
#./configure
#make all
make install
ln -s /usr/lib/itcl4.2.3 /usr/lib64/tcl8.6/itcl4.2.3
cd /usr/local/src/itk4.1.0
#./configure
#make
make install
ln -s /usr/lib/itk4.1.0 /usr/lib64/tcl8.6/itk4.1.0
cd /usr/local/src/mysqltcl-3.052
#./configure --prefix=/usr --with-tcl=/usr/lib64 --with-mysql-lib=/usr/lib64/mysql
#make
make install
ln -s /usr/lib64/mysqltcl-3.052 /usr/lib64/tcl8.6/mysqltcl-3.052

== RHEL7 ==

Install following using ''yum'':

yum install tix itcl itk expect

Install the rest from local sources:

cd /usr/local/src/mysqltcl-3.052
./configure --prefix=/usr --with-tcl=/usr/lib64 --with-mysql-lib=/usr/lib64/mysql
make
make install
ln -s /usr/lib/mysqltcl-3.052 /usr/lib64/tcl8.5/mysqltcl-3.052

== General Info ==

Basic Tcl/Tk must be installed to satisfy CODA references. Following packages were downloaded to ''/usr/local/downloads'' from the web:
tcl8.4.13
tk8.4.13
tix-8.4.0
expect-5.43
blt2.4z
itcl
itk
<<< DO NOT DO IT !!! tcl-dp >>>
<<< DO NOT DO IT !!! tcl-debug >>>
mysqltcl

Installation instructions:

* tcl

cd /usr/local/src/tcl8.4.13/unix
./configure --prefix=/usr --enable-shared
gmake
gmake install

* tk

cd /usr/local/src/tk8.4.13/unix
./configure --prefix=/usr --enable-shared
gmake
gmake install

* tix

cd /usr/local/src/tix-8.4.0

In file Makefile.in:

1. Replace 'pkglibdir' by 'libdir' in 4 places in following fragment:

install-lib-binaries:
@mkdir -p $(DESTDIR)$(pkglibdir)
@list='$(lib_BINARIES)'; for p in $$list; do \
if test -f $$p; then \
echo " $(INSTALL_PROGRAM) $$p $(DESTDIR)$(libdir)/$$p"; \
$(INSTALL_PROGRAM) $$p $(DESTDIR)$(libdir)/$$p; \
echo " $(RANLIB) $(DESTDIR)$(libdir)/$$p"; \
$(RANLIB) $(DESTDIR)$(libdir)/$$p; \
....................................

to enforce libTix8.4.so installation into ${exec_prefix}/lib/,
not into ${exec_prefix}/lib/Tix8.4/

2. Add following fragment to enforce 'tixwish' building:

WISH_OBJS = tixAppInit.o
tixwish: $(WISH_OBJS) $(PKG_LIB_FILE)
${CC} ${CFLAGS} ${LDFLAGS} $(WISH_OBJS) -L./ -lTix8.4 -ltk8.4 -ltcl8.4 \
$(CC_SEARCH_FLAGS) -o tixwish

3. Add 'tixwish' target to the following line:

binaries: $(BINARIES) pkgIndex.tcl tixwish

4. Add 'tixwish' line in following fragment:

install-binaries: binaries install-lib-binaries install-bin-binaries
@mkdir -p $(DESTDIR)$(pkglibdir)
$(INSTALL_DATA) pkgIndex.tcl $(DESTDIR)$(pkglibdir)
$(INSTALL_PROGRAM) tixwish $(DESTDIR)$(bindir)
...........................................

./configure --prefix=/usr --enable-shared
gmake
gmake install
cp demos/bitmaps/about.xpm /usr/lib/Tix8.4/bitmaps/

* expect

cd /usr/local/src/expect-5.43
./configure --prefix=/usr --with-tcl=/usr/lib --with-tclinclude=/usr/local/src/tcl8.4.13/generic --enable-shared
gmake
gmake install

* blt

cd /usr/local/src/blt2.4z
./configure \--with-tcl=/usr/local/src/tcl8.4.13/unix \
--with-tk=/usr/local/src/tk8.4.13/unix \
--with-tclincls=/usr/local/src/tcl8.4.13/generic \
--with-tkincls=/usr/local/src/tk8.4.13/generic \
--prefix=/usr
gmake
gmake install

* symbolic links

cd /usr/bin
ln -s wish8.4 wish

* itcl

cd /usr/local/src/itcl3.3
./configure --with-tcl=/usr/local/src/tcl8.4.13/unix --prefix=/usr
gmake
gmake install
#test
clon10:itcl3.3> /usr/bin/tclsh8.4
% package require Itcl
3.3
% exit

* itk

cd /usr/local/src/itk3.3
./configure --with-tcl=/usr/local/src/tcl8.4.13/unix \
--with-tk=/usr/local/src/tk8.4.13/unix \
--with-itcl=/usr/local/src/itcl3.3 \
--prefix=/usr
gmake
gmake install
#test
clon10:src> /usr/bin/tclsh8.4
% package require Itk
3.3
% exit

<<< DO NOT DO IT !!! * tcl-dp

cd /usr/local/src/tcl-dp.4.0.b2/unix
./configure --with-tcl=/usr/local/src/tcl8.4.13/unix --prefix=/usr
in generic/dpInit.c:
/*sergey
if (TclHasSockets(interp) != TCL_OK) {
return TCL_ERROR;
}
*/
gmake
###gmake tests
cd ..
/usr/bin/wish teki.tcl
###'File | Install'. Select dp.tek, click 'Open', select 'Custom',
choose 'Solaris' (or whatever), root directory for code files '/usr/lib/tcl8.4'
cd /usr/lib/tcl8.4/dp4.0/library/
chmod 755 *
All DP scripts
should have "package require dp" as their first line which will
automatically load the DP module if it has not been loaded already.
#test
/usr/bin/tclsh8.4
% package require dp
4.0
% exit

<<< DO NOT DO IT !!! * tcl-debug

cd /usr/local/src/tcl-debug-2.0
./configure --prefix=/usr --enable-shared --with-tcl=/usr/local/src/tcl8.4.13/unix
gmake
gmake install

* mysqltcl

cd /usr/local/src/mysqltcl-3.05
./configure --with-tcl=/usr/local/src/tcl8.4.13/unix \
--with-tclinclude=/usr/local/src/tcl8.4.13/generic \
--with-mysql-include=/usr/include/mysql \
--with-mysql-lib=/usr/lib/mysql \
--prefix=/usr
gmake
gmake install
#test
clon10> /usr/bin/tclsh8.4
% package require mysqltcl
3.05
% exit

'''When everything is compiled on one machine of particular flavor, run following commands on other machines of the same flavor:'''

cd /usr/local/src/tcl8.4.13/unix
gmake install
cd /usr/local/src/tk8.4.13/unix
gmake install
cd /usr/local/src/tix-8.4.0
gmake install
cp demos/bitmaps/about.xpm /usr/lib/Tix8.4/bitmaps/
cd /usr/local/src/expect-5.43
gmake install
cd /usr/local/src/blt2.4z
gmake install
cd /usr/local/src/itcl3.3
gmake install
cd /usr/local/src/itk3.3
gmake install
cd /usr/local/src/mysqltcl-3.05
gmake install
cd /usr/bin
ln -s wish8.4 wish

== RHEL5 ==

Install following using ''yum'':

yum install tcl-devel tk-devel tix tix-devel expect expect-devel

Install the rest from local sources:

cd /usr/local/src/tix-8.4.0
cp demos/bitmaps/about.xpm /usr/lib/Tix8.4/bitmaps/
cp tixwish /usr/bin

cd /usr/local/src/blt2.4z
gmake install
./configure --prefix=/usr
gmake

cd /usr/local/src/itcl3.3
gmake install
./configure --prefix=/usr
gmake

cd /usr/local/src/itk3.3
gmake install
./configure --prefix=/usr
gmake

cd /usr/local/src/mysqltcl-3.05
gmake install
./configure --prefix=/usr
gmake

== RHEL6 ==

Install following using ''yum'':

yum install tcl-devel tk-devel tix tix-devel expect expect-devel

Install the rest from local sources:

##cd /usr/local/src/tix-8.4.0
##cp demos/bitmaps/about.xpm /usr/lib64/tcl8.5/Tix8.4.3/bitmaps/

cd /usr/local/src/itcl3.4
gmake install
ln -s /usr/lib/itcl3.4 /usr/lib64/tcl8.5/itcl3.4
./configure --prefix=/usr
gmake

cd /usr/local/src/itk3.3
gmake install
ln -s /usr/lib/itk3.3 /usr/lib64/tcl8.5/itk3.3
./configure --prefix=/usr
gmake

cd /usr/local/src/mysqltcl-3.05
gmake install
ln -s /usr/lib/mysqltcl-3.05 /usr/lib64/tcl8.5/mysqltcl-3.05
./configure --prefix=/usr
gmake

Tcl/Tk

2026-03-23T14:53:49Z

Boiarino: /* RHEL9 */

== RHEL9 ==

Install following using ''yum'':

yum install tcl-devel tk-devel tix-devel expect

Install the rest from local sources:

cd /usr/local/src/itcl4.2.3
#./configure
#make all
make install
ln -s /usr/lib/itcl4.2.3 /usr/lib64/tcl8.6/itcl4.2.3
cd /usr/local/src/itk4.1.0
#./configure
#make
make install
ln -s /usr/lib/itk4.1.0 /usr/lib64/tcl8.6/itk4.1.0
cd /usr/local/src/mysqltcl-3.052
#./configure --prefix=/usr --with-tcl=/usr/lib64 --with-mysql-lib=/usr/lib64/mysql
#make
make install
ln -s /usr/lib64/mysqltcl-3.052 /usr/lib64/tcl8.6/mysqltcl-3.052

== RHEL7 ==

Install following using ''yum'':

yum install tix itcl itk

Install the rest from local sources:

cd /usr/local/src/mysqltcl-3.052
./configure --prefix=/usr --with-tcl=/usr/lib64 --with-mysql-lib=/usr/lib64/mysql
make
make install
ln -s /usr/lib/mysqltcl-3.052 /usr/lib64/tcl8.5/mysqltcl-3.052

== General Info ==

Basic Tcl/Tk must be installed to satisfy CODA references. Following packages were downloaded to ''/usr/local/downloads'' from the web:
tcl8.4.13
tk8.4.13
tix-8.4.0
expect-5.43
blt2.4z
itcl
itk
<<< DO NOT DO IT !!! tcl-dp >>>
<<< DO NOT DO IT !!! tcl-debug >>>
mysqltcl

Installation instructions:

* tcl

cd /usr/local/src/tcl8.4.13/unix
./configure --prefix=/usr --enable-shared
gmake
gmake install

* tk

cd /usr/local/src/tk8.4.13/unix
./configure --prefix=/usr --enable-shared
gmake
gmake install

* tix

cd /usr/local/src/tix-8.4.0

In file Makefile.in:

1. Replace 'pkglibdir' by 'libdir' in 4 places in following fragment:

install-lib-binaries:
@mkdir -p $(DESTDIR)$(pkglibdir)
@list='$(lib_BINARIES)'; for p in $$list; do \
if test -f $$p; then \
echo " $(INSTALL_PROGRAM) $$p $(DESTDIR)$(libdir)/$$p"; \
$(INSTALL_PROGRAM) $$p $(DESTDIR)$(libdir)/$$p; \
echo " $(RANLIB) $(DESTDIR)$(libdir)/$$p"; \
$(RANLIB) $(DESTDIR)$(libdir)/$$p; \
....................................

to enforce libTix8.4.so installation into ${exec_prefix}/lib/,
not into ${exec_prefix}/lib/Tix8.4/

2. Add following fragment to enforce 'tixwish' building:

WISH_OBJS = tixAppInit.o
tixwish: $(WISH_OBJS) $(PKG_LIB_FILE)
${CC} ${CFLAGS} ${LDFLAGS} $(WISH_OBJS) -L./ -lTix8.4 -ltk8.4 -ltcl8.4 \
$(CC_SEARCH_FLAGS) -o tixwish

3. Add 'tixwish' target to the following line:

binaries: $(BINARIES) pkgIndex.tcl tixwish

4. Add 'tixwish' line in following fragment:

install-binaries: binaries install-lib-binaries install-bin-binaries
@mkdir -p $(DESTDIR)$(pkglibdir)
$(INSTALL_DATA) pkgIndex.tcl $(DESTDIR)$(pkglibdir)
$(INSTALL_PROGRAM) tixwish $(DESTDIR)$(bindir)
...........................................

./configure --prefix=/usr --enable-shared
gmake
gmake install
cp demos/bitmaps/about.xpm /usr/lib/Tix8.4/bitmaps/

* expect

cd /usr/local/src/expect-5.43
./configure --prefix=/usr --with-tcl=/usr/lib --with-tclinclude=/usr/local/src/tcl8.4.13/generic --enable-shared
gmake
gmake install

* blt

cd /usr/local/src/blt2.4z
./configure \--with-tcl=/usr/local/src/tcl8.4.13/unix \
--with-tk=/usr/local/src/tk8.4.13/unix \
--with-tclincls=/usr/local/src/tcl8.4.13/generic \
--with-tkincls=/usr/local/src/tk8.4.13/generic \
--prefix=/usr
gmake
gmake install

* symbolic links

cd /usr/bin
ln -s wish8.4 wish

* itcl

cd /usr/local/src/itcl3.3
./configure --with-tcl=/usr/local/src/tcl8.4.13/unix --prefix=/usr
gmake
gmake install
#test
clon10:itcl3.3> /usr/bin/tclsh8.4
% package require Itcl
3.3
% exit

* itk

cd /usr/local/src/itk3.3
./configure --with-tcl=/usr/local/src/tcl8.4.13/unix \
--with-tk=/usr/local/src/tk8.4.13/unix \
--with-itcl=/usr/local/src/itcl3.3 \
--prefix=/usr
gmake
gmake install
#test
clon10:src> /usr/bin/tclsh8.4
% package require Itk
3.3
% exit

<<< DO NOT DO IT !!! * tcl-dp

cd /usr/local/src/tcl-dp.4.0.b2/unix
./configure --with-tcl=/usr/local/src/tcl8.4.13/unix --prefix=/usr
in generic/dpInit.c:
/*sergey
if (TclHasSockets(interp) != TCL_OK) {
return TCL_ERROR;
}
*/
gmake
###gmake tests
cd ..
/usr/bin/wish teki.tcl
###'File | Install'. Select dp.tek, click 'Open', select 'Custom',
choose 'Solaris' (or whatever), root directory for code files '/usr/lib/tcl8.4'
cd /usr/lib/tcl8.4/dp4.0/library/
chmod 755 *
All DP scripts
should have "package require dp" as their first line which will
automatically load the DP module if it has not been loaded already.
#test
/usr/bin/tclsh8.4
% package require dp
4.0
% exit

<<< DO NOT DO IT !!! * tcl-debug

cd /usr/local/src/tcl-debug-2.0
./configure --prefix=/usr --enable-shared --with-tcl=/usr/local/src/tcl8.4.13/unix
gmake
gmake install

* mysqltcl

cd /usr/local/src/mysqltcl-3.05
./configure --with-tcl=/usr/local/src/tcl8.4.13/unix \
--with-tclinclude=/usr/local/src/tcl8.4.13/generic \
--with-mysql-include=/usr/include/mysql \
--with-mysql-lib=/usr/lib/mysql \
--prefix=/usr
gmake
gmake install
#test
clon10> /usr/bin/tclsh8.4
% package require mysqltcl
3.05
% exit

'''When everything is compiled on one machine of particular flavor, run following commands on other machines of the same flavor:'''

cd /usr/local/src/tcl8.4.13/unix
gmake install
cd /usr/local/src/tk8.4.13/unix
gmake install
cd /usr/local/src/tix-8.4.0
gmake install
cp demos/bitmaps/about.xpm /usr/lib/Tix8.4/bitmaps/
cd /usr/local/src/expect-5.43
gmake install
cd /usr/local/src/blt2.4z
gmake install
cd /usr/local/src/itcl3.3
gmake install
cd /usr/local/src/itk3.3
gmake install
cd /usr/local/src/mysqltcl-3.05
gmake install
cd /usr/bin
ln -s wish8.4 wish

== RHEL5 ==

Install following using ''yum'':

yum install tcl-devel tk-devel tix tix-devel expect expect-devel

Install the rest from local sources:

cd /usr/local/src/tix-8.4.0
cp demos/bitmaps/about.xpm /usr/lib/Tix8.4/bitmaps/
cp tixwish /usr/bin

cd /usr/local/src/blt2.4z
gmake install
./configure --prefix=/usr
gmake

cd /usr/local/src/itcl3.3
gmake install
./configure --prefix=/usr
gmake

cd /usr/local/src/itk3.3
gmake install
./configure --prefix=/usr
gmake

cd /usr/local/src/mysqltcl-3.05
gmake install
./configure --prefix=/usr
gmake

== RHEL6 ==

Install following using ''yum'':

yum install tcl-devel tk-devel tix tix-devel expect expect-devel

Install the rest from local sources:

##cd /usr/local/src/tix-8.4.0
##cp demos/bitmaps/about.xpm /usr/lib64/tcl8.5/Tix8.4.3/bitmaps/

cd /usr/local/src/itcl3.4
gmake install
ln -s /usr/lib/itcl3.4 /usr/lib64/tcl8.5/itcl3.4
./configure --prefix=/usr
gmake

cd /usr/local/src/itk3.3
gmake install
ln -s /usr/lib/itk3.3 /usr/lib64/tcl8.5/itk3.3
./configure --prefix=/usr
gmake

cd /usr/local/src/mysqltcl-3.05
gmake install
ln -s /usr/lib/mysqltcl-3.05 /usr/lib64/tcl8.5/mysqltcl-3.05
./configure --prefix=/usr
gmake

Nagios

2026-03-21T13:51:24Z

Boiarino: /* RHEL9 */

== RHEL9 ==

yum install nagios

systemctl start httpd
systemctl start nagios

Config file is ''/etc/nagios/nagios.cfg'' and underlyiong directories.

Access from web browser:

http://<machine_name>.jlab.org/nagios
default user/pass: nagiosadmin/nagiosadmin

== old stuff ==

Nagios is main monitoring tool for CLON cluster.

Download from web following files and place them to '/usr/local/downloads':

nagios-2.6.tar.gz
nagios-images_0.3.tar.gz
nagios-plugins-1.4.5.tar.gz
nagiosmib-1.0.0.tar.gz (?????????)

create user 'nagios', private group 'nagios'
mkdir /www/nagios2.6
chown nagios.nagios /www/nagios2.6

Add command file group and put appropriate users in (we assume that apache is running as user 'apache'):

/usr/sbin/groupadd nagcmd
/usr/sbin/usermod -G nagcmd apache
/usr/sbin/usermod -G nagcmd nagios
to check, see file /etc/group

Build and install:

cp /usr/local/downloads/nagios-2.6.tar.gz /usr/local/src
cd /usr/local/src
gunzip nagios-2.6.tar.gz
tar xvf nagios-2.6.tar
cd '/usr/local/src/nagios-2.6'
NO !!! su nagios
./configure --prefix=/www/nagios2.6 --with-cgiurl=/nagios/cgi-bin --with-htmurl=/nagios --with-nagios-user=nagios --with-nagios-group=nagios --with-command-group=nagcmd
??did on RHEL6: ./configure --prefix=/www/nagios-3.4.1 --with-cgiurl=/nagios/cgi-bin --with-htmurl=/nagios --with-nagios-user=nagios --with-nagios-group=nagcmd --with-command-group=nagcmd
make all
make install

Install init script /etc/init.d/nagios:

make install-init (as 'root' !!!)

Modify /etc/init.d/nagios script as following (bug ?):

###NagiosRunFile=${prefix}/var/nagios.lock
NagiosRunFile=${prefix}/var/run/nagios.pid

#to install sample /etc directory
make install-config

#???This installs and configures permissions on the
#???directory for holding the external command file
make install-commandmode

Install plugins and nrpe - see corresponding sections.

Fix apache configuration file:

add contents of /usr/local/src/nagios-2.6/sample-config/httpd.conf
to /www/apache2.2.3/conf/httpd.conf

Copy 'etc' directory from old Nagios (if any) to /www/nagios2.6. Go through files cgi.cfg, nagios.cfg and private/*
and fix pathes making them point to /www/nagios2.6.

Add several directories for output files:

mkdir /www/nagios2.6/var/log
mkdir /www/nagios2.6/var/run
mkdir /www/nagios2.6/var/rw (?????)

Install icons:

cd /usr/local/src/nagios-images-0.3/base
cp * /www/nagios2.6/share/images/logos

To check configuration run following commands:

/www/nagios2.6/bin/nagios -v /www/nagios2.6/etc/nagios.cfg

To start/stop (restart need to be fixed ..):

/etc/init.d/nagios start/stop

Add Nagios to services:

chkconfig --add nagios
chkconfig --level 3 nagios off
chkconfig --level 4 nagios off
chkconfig --list nagios

NOTE: following command was executed to let browser to disable host checks; it should be investigated ...

chown nagios:nagcmd /www/nagios2.6/var/log/nagios.cmd

'''ADDITIONAL INFO (COPIED FROM http://klickitat.ee.washington.edu/medg/software/nagios-install-notes.txt):'''

some notes on installing nagios - these are a supplement to the basic
nagios documentation that comes with the software:

Download and install the nagios and nagios-plugin packages. For whatever reason
www.nagios.org seems to be hosed now (7/23/2004), but look on google. There
is also sourceforge.nagios.net, which seems to be another nagios homepage.

Create a nagios user. Compile and install the packages as described in the
documentation. Redhat
has all necessary libraries already installed. I just went with the defaults
in the compilation. The default is for nagios to install itself in
/usr/local/nagios; everything should be owned by user nagios.

To enable the web interface, edit httpd.conf to add the Alias and
ScriptAlias directives as
described in the nagios documentation. This works for both apache 1.3 and
apache 2.0. Restart apache. At this point you should be able to go to
http://www.whatever/nagios/ and see the nagios page and access the
documentation. CGIs probably won't work.

You need to set up the config files; this is the real heart of installing
nagios and unfortunately is much easier to show than to describe. The first
step is to copy the *.cfg-sample files that should be in /usr/local/nagios/etc
to *.cfg. Then you need to edit these files to describe your setup.

Basically, hosts.cfg describes the hosts you want to monitor, services.cfg
describes the services you want to monitor on each host, checkcommands.cfg
is the check commands used by services.cfg to check the services; if you want
to check a service you probably have to add a command to do so; contacts.cfg
is the people who will be contacted in case of a problem, contactgroups
is the groups of people, hostgroups.cfg is the groups of hosts (rrsl-machines,
for example). nagios.cfg is the master config file. Probably you can get
by just by copying and pasting the stuff already in these files and tweaking
it.

To add a new machine you will need to edit hosts.cfg (add the machine),
hostgroups.cfg (put it in a hostgroup), services.cfg (add the services to
be checked on the machine).

To add a new administrator, you will need to edit contacts.cfg (add the new
person) and contactgroups.cfg (put them in a contact group or create one).

In misccommands.cfg I needed to change /usr/bin/mail to /bin/mail on redhat
-- but not on slackware! Otherwise it was not able to mail messages.

At this point you can check your config using the
'/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg' command,
which does a check of the configuration and will warn if there are errors.
Fix the errors and repeat until it is happy.

Now you need to enable authorization so that the cgi scripts will work. To
do this first create the
.htaccess file in the nagios/sbin directory as described in the
documentation - it must be world-readable.

Next create the htpasswd.users file in the nagios/etc directory as described in
the documentation - it must be world-readable! I added only one user: rrsl

At this point you should be able to start nagios using:
/usr/local/nagios/bin/nagios /usr/local/nagios/etc/nagios.cfg

After nagios is started you should be able to go to the web page and
use the cgis to display info. The final step is enabling the external command
cgis, which let you change the behavior of nagios from the web. To do this
you have to follow the steps in the documentation to enable external commands
This involves enabling external commands in the config file and specifying
an external commands file....

The permissions on the file seem to be a source of problems.
To enable external commands you have to first create a group containing
the nagios user and the user httpd runs as (apache for us). Then you create
the directory /usr/local/nagios/var/rw with permissions:
drwxrwsr-x 2 nagios nagioscmd 4096 Aug 3 13:55 rw

That's rwx permissions for the user and rws permissions for the group
chmod gu+rwx nagios.nagioscmd rw
chmod g+s rw
Then you have to restart both apache and nagios, or it doesn't work!

The documentation describes some other gotchas..

To run checks for services on remote machines, you need to set up ssh to
log in without a password. To do this run
$ ssh-keygen -t rsa
to create a public/private key pair. copy the public key into the
~/.ssh/authorized_keys file of the user nagios on the remote host. This file
must only be rw by nagios or ssh will not work. The directory .ssh must also
be only rwx by nagios. Then you should be able
to ssh to the remote host as nagios without giving a password.

Copy the plugins you want to run on the remote host to the remote host,
and then set up checks in checkcommands.cfg, and services.cfg. See the
check-host-radar command for an example. The plugins can be any kind of
program.

Many plugins were timing out after ten seconds when checking on heimdal and
umtanum. Although there claimed to be a command line option to change this,
in practice there was not. Therefore, I changed the source to set the timeout
to 30sec and recompiled the plugins. This appears to work. (7/26/04)

nagios comes with the file /etc/rc.d/init.d/nagios, which is a script for
starting nagios from rc.local or from the command line as root (or by
sudo). This seems to be the best way of starting or stopping the program.

sudo /etc/rc.d/init.d/nagios start
sudo /etc/rc.d/init.d/nagios stop
etc.

nagios has the ability to acknowledge a host condition, so if a host
is down, you can "acknowledge" through the web interface, and it will
stop sending email unless the host changes state. This is useful.
You can also disable notification for a service, which is handy

Adding a user to the web interface:

1) edit cgi.cfg to add the user to the actions that you want them to do
2) edit sbin/.htaccess to add the user to the list of ok users, eg:
require user rrsl radar
for users rrsl and radar being able to access the web interface
Keep in mind this file must be world readable...
3) issue htpasswd /usr/local/nagios/etc/htpasswd.users <new user> as root, to
create the new user and password
4) stop nagios
5) restart the web server
6 start nagios

It should work, you should be able to log in and do stuff.

Nagios

2026-03-21T13:42:45Z

Boiarino: /* RHEL9 */

== RHEL9 ==

yum install nagios

systemctl start httpd
systemctl start nagios

Config file is ''/etc/nagios/nagios.cfg'' and underlyiong directories.

== old stuff ==

Nagios is main monitoring tool for CLON cluster.

Download from web following files and place them to '/usr/local/downloads':

nagios-2.6.tar.gz
nagios-images_0.3.tar.gz
nagios-plugins-1.4.5.tar.gz
nagiosmib-1.0.0.tar.gz (?????????)

create user 'nagios', private group 'nagios'
mkdir /www/nagios2.6
chown nagios.nagios /www/nagios2.6

Add command file group and put appropriate users in (we assume that apache is running as user 'apache'):

/usr/sbin/groupadd nagcmd
/usr/sbin/usermod -G nagcmd apache
/usr/sbin/usermod -G nagcmd nagios
to check, see file /etc/group

Build and install:

cp /usr/local/downloads/nagios-2.6.tar.gz /usr/local/src
cd /usr/local/src
gunzip nagios-2.6.tar.gz
tar xvf nagios-2.6.tar
cd '/usr/local/src/nagios-2.6'
NO !!! su nagios
./configure --prefix=/www/nagios2.6 --with-cgiurl=/nagios/cgi-bin --with-htmurl=/nagios --with-nagios-user=nagios --with-nagios-group=nagios --with-command-group=nagcmd
??did on RHEL6: ./configure --prefix=/www/nagios-3.4.1 --with-cgiurl=/nagios/cgi-bin --with-htmurl=/nagios --with-nagios-user=nagios --with-nagios-group=nagcmd --with-command-group=nagcmd
make all
make install

Install init script /etc/init.d/nagios:

make install-init (as 'root' !!!)

Modify /etc/init.d/nagios script as following (bug ?):

###NagiosRunFile=${prefix}/var/nagios.lock
NagiosRunFile=${prefix}/var/run/nagios.pid

#to install sample /etc directory
make install-config

#???This installs and configures permissions on the
#???directory for holding the external command file
make install-commandmode

Install plugins and nrpe - see corresponding sections.

Fix apache configuration file:

add contents of /usr/local/src/nagios-2.6/sample-config/httpd.conf
to /www/apache2.2.3/conf/httpd.conf

Copy 'etc' directory from old Nagios (if any) to /www/nagios2.6. Go through files cgi.cfg, nagios.cfg and private/*
and fix pathes making them point to /www/nagios2.6.

Add several directories for output files:

mkdir /www/nagios2.6/var/log
mkdir /www/nagios2.6/var/run
mkdir /www/nagios2.6/var/rw (?????)

Install icons:

cd /usr/local/src/nagios-images-0.3/base
cp * /www/nagios2.6/share/images/logos

To check configuration run following commands:

/www/nagios2.6/bin/nagios -v /www/nagios2.6/etc/nagios.cfg

To start/stop (restart need to be fixed ..):

/etc/init.d/nagios start/stop

Add Nagios to services:

chkconfig --add nagios
chkconfig --level 3 nagios off
chkconfig --level 4 nagios off
chkconfig --list nagios

NOTE: following command was executed to let browser to disable host checks; it should be investigated ...

chown nagios:nagcmd /www/nagios2.6/var/log/nagios.cmd

'''ADDITIONAL INFO (COPIED FROM http://klickitat.ee.washington.edu/medg/software/nagios-install-notes.txt):'''

some notes on installing nagios - these are a supplement to the basic
nagios documentation that comes with the software:

Download and install the nagios and nagios-plugin packages. For whatever reason
www.nagios.org seems to be hosed now (7/23/2004), but look on google. There
is also sourceforge.nagios.net, which seems to be another nagios homepage.

Create a nagios user. Compile and install the packages as described in the
documentation. Redhat
has all necessary libraries already installed. I just went with the defaults
in the compilation. The default is for nagios to install itself in
/usr/local/nagios; everything should be owned by user nagios.

To enable the web interface, edit httpd.conf to add the Alias and
ScriptAlias directives as
described in the nagios documentation. This works for both apache 1.3 and
apache 2.0. Restart apache. At this point you should be able to go to
http://www.whatever/nagios/ and see the nagios page and access the
documentation. CGIs probably won't work.

You need to set up the config files; this is the real heart of installing
nagios and unfortunately is much easier to show than to describe. The first
step is to copy the *.cfg-sample files that should be in /usr/local/nagios/etc
to *.cfg. Then you need to edit these files to describe your setup.

Basically, hosts.cfg describes the hosts you want to monitor, services.cfg
describes the services you want to monitor on each host, checkcommands.cfg
is the check commands used by services.cfg to check the services; if you want
to check a service you probably have to add a command to do so; contacts.cfg
is the people who will be contacted in case of a problem, contactgroups
is the groups of people, hostgroups.cfg is the groups of hosts (rrsl-machines,
for example). nagios.cfg is the master config file. Probably you can get
by just by copying and pasting the stuff already in these files and tweaking
it.

To add a new machine you will need to edit hosts.cfg (add the machine),
hostgroups.cfg (put it in a hostgroup), services.cfg (add the services to
be checked on the machine).

To add a new administrator, you will need to edit contacts.cfg (add the new
person) and contactgroups.cfg (put them in a contact group or create one).

In misccommands.cfg I needed to change /usr/bin/mail to /bin/mail on redhat
-- but not on slackware! Otherwise it was not able to mail messages.

At this point you can check your config using the
'/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg' command,
which does a check of the configuration and will warn if there are errors.
Fix the errors and repeat until it is happy.

Now you need to enable authorization so that the cgi scripts will work. To
do this first create the
.htaccess file in the nagios/sbin directory as described in the
documentation - it must be world-readable.

Next create the htpasswd.users file in the nagios/etc directory as described in
the documentation - it must be world-readable! I added only one user: rrsl

At this point you should be able to start nagios using:
/usr/local/nagios/bin/nagios /usr/local/nagios/etc/nagios.cfg

After nagios is started you should be able to go to the web page and
use the cgis to display info. The final step is enabling the external command
cgis, which let you change the behavior of nagios from the web. To do this
you have to follow the steps in the documentation to enable external commands
This involves enabling external commands in the config file and specifying
an external commands file....

The permissions on the file seem to be a source of problems.
To enable external commands you have to first create a group containing
the nagios user and the user httpd runs as (apache for us). Then you create
the directory /usr/local/nagios/var/rw with permissions:
drwxrwsr-x 2 nagios nagioscmd 4096 Aug 3 13:55 rw

That's rwx permissions for the user and rws permissions for the group
chmod gu+rwx nagios.nagioscmd rw
chmod g+s rw
Then you have to restart both apache and nagios, or it doesn't work!

The documentation describes some other gotchas..

To run checks for services on remote machines, you need to set up ssh to
log in without a password. To do this run
$ ssh-keygen -t rsa
to create a public/private key pair. copy the public key into the
~/.ssh/authorized_keys file of the user nagios on the remote host. This file
must only be rw by nagios or ssh will not work. The directory .ssh must also
be only rwx by nagios. Then you should be able
to ssh to the remote host as nagios without giving a password.

Copy the plugins you want to run on the remote host to the remote host,
and then set up checks in checkcommands.cfg, and services.cfg. See the
check-host-radar command for an example. The plugins can be any kind of
program.

Many plugins were timing out after ten seconds when checking on heimdal and
umtanum. Although there claimed to be a command line option to change this,
in practice there was not. Therefore, I changed the source to set the timeout
to 30sec and recompiled the plugins. This appears to work. (7/26/04)

nagios comes with the file /etc/rc.d/init.d/nagios, which is a script for
starting nagios from rc.local or from the command line as root (or by
sudo). This seems to be the best way of starting or stopping the program.

sudo /etc/rc.d/init.d/nagios start
sudo /etc/rc.d/init.d/nagios stop
etc.

nagios has the ability to acknowledge a host condition, so if a host
is down, you can "acknowledge" through the web interface, and it will
stop sending email unless the host changes state. This is useful.
You can also disable notification for a service, which is handy

Adding a user to the web interface:

1) edit cgi.cfg to add the user to the actions that you want them to do
2) edit sbin/.htaccess to add the user to the list of ok users, eg:
require user rrsl radar
for users rrsl and radar being able to access the web interface
Keep in mind this file must be world readable...
3) issue htpasswd /usr/local/nagios/etc/htpasswd.users <new user> as root, to
create the new user and password
4) stop nagios
5) restart the web server
6 start nagios

It should work, you should be able to log in and do stuff.

Nagios

2026-03-21T13:39:33Z

Boiarino: /* RHEL9 */

== RHEL9 ==

yum install nagios

systemctl start httpd
systemctl start nagios

== old stuff ==

Nagios is main monitoring tool for CLON cluster.

Download from web following files and place them to '/usr/local/downloads':

nagios-2.6.tar.gz
nagios-images_0.3.tar.gz
nagios-plugins-1.4.5.tar.gz
nagiosmib-1.0.0.tar.gz (?????????)

create user 'nagios', private group 'nagios'
mkdir /www/nagios2.6
chown nagios.nagios /www/nagios2.6

Add command file group and put appropriate users in (we assume that apache is running as user 'apache'):

/usr/sbin/groupadd nagcmd
/usr/sbin/usermod -G nagcmd apache
/usr/sbin/usermod -G nagcmd nagios
to check, see file /etc/group

Build and install:

cp /usr/local/downloads/nagios-2.6.tar.gz /usr/local/src
cd /usr/local/src
gunzip nagios-2.6.tar.gz
tar xvf nagios-2.6.tar
cd '/usr/local/src/nagios-2.6'
NO !!! su nagios
./configure --prefix=/www/nagios2.6 --with-cgiurl=/nagios/cgi-bin --with-htmurl=/nagios --with-nagios-user=nagios --with-nagios-group=nagios --with-command-group=nagcmd
??did on RHEL6: ./configure --prefix=/www/nagios-3.4.1 --with-cgiurl=/nagios/cgi-bin --with-htmurl=/nagios --with-nagios-user=nagios --with-nagios-group=nagcmd --with-command-group=nagcmd
make all
make install

Install init script /etc/init.d/nagios:

make install-init (as 'root' !!!)

Modify /etc/init.d/nagios script as following (bug ?):

###NagiosRunFile=${prefix}/var/nagios.lock
NagiosRunFile=${prefix}/var/run/nagios.pid

#to install sample /etc directory
make install-config

#???This installs and configures permissions on the
#???directory for holding the external command file
make install-commandmode

Install plugins and nrpe - see corresponding sections.

Fix apache configuration file:

add contents of /usr/local/src/nagios-2.6/sample-config/httpd.conf
to /www/apache2.2.3/conf/httpd.conf

Copy 'etc' directory from old Nagios (if any) to /www/nagios2.6. Go through files cgi.cfg, nagios.cfg and private/*
and fix pathes making them point to /www/nagios2.6.

Add several directories for output files:

mkdir /www/nagios2.6/var/log
mkdir /www/nagios2.6/var/run
mkdir /www/nagios2.6/var/rw (?????)

Install icons:

cd /usr/local/src/nagios-images-0.3/base
cp * /www/nagios2.6/share/images/logos

To check configuration run following commands:

/www/nagios2.6/bin/nagios -v /www/nagios2.6/etc/nagios.cfg

To start/stop (restart need to be fixed ..):

/etc/init.d/nagios start/stop

Add Nagios to services:

chkconfig --add nagios
chkconfig --level 3 nagios off
chkconfig --level 4 nagios off
chkconfig --list nagios

NOTE: following command was executed to let browser to disable host checks; it should be investigated ...

chown nagios:nagcmd /www/nagios2.6/var/log/nagios.cmd

'''ADDITIONAL INFO (COPIED FROM http://klickitat.ee.washington.edu/medg/software/nagios-install-notes.txt):'''

some notes on installing nagios - these are a supplement to the basic
nagios documentation that comes with the software:

Download and install the nagios and nagios-plugin packages. For whatever reason
www.nagios.org seems to be hosed now (7/23/2004), but look on google. There
is also sourceforge.nagios.net, which seems to be another nagios homepage.

Create a nagios user. Compile and install the packages as described in the
documentation. Redhat
has all necessary libraries already installed. I just went with the defaults
in the compilation. The default is for nagios to install itself in
/usr/local/nagios; everything should be owned by user nagios.

To enable the web interface, edit httpd.conf to add the Alias and
ScriptAlias directives as
described in the nagios documentation. This works for both apache 1.3 and
apache 2.0. Restart apache. At this point you should be able to go to
http://www.whatever/nagios/ and see the nagios page and access the
documentation. CGIs probably won't work.

You need to set up the config files; this is the real heart of installing
nagios and unfortunately is much easier to show than to describe. The first
step is to copy the *.cfg-sample files that should be in /usr/local/nagios/etc
to *.cfg. Then you need to edit these files to describe your setup.

Basically, hosts.cfg describes the hosts you want to monitor, services.cfg
describes the services you want to monitor on each host, checkcommands.cfg
is the check commands used by services.cfg to check the services; if you want
to check a service you probably have to add a command to do so; contacts.cfg
is the people who will be contacted in case of a problem, contactgroups
is the groups of people, hostgroups.cfg is the groups of hosts (rrsl-machines,
for example). nagios.cfg is the master config file. Probably you can get
by just by copying and pasting the stuff already in these files and tweaking
it.

To add a new machine you will need to edit hosts.cfg (add the machine),
hostgroups.cfg (put it in a hostgroup), services.cfg (add the services to
be checked on the machine).

To add a new administrator, you will need to edit contacts.cfg (add the new
person) and contactgroups.cfg (put them in a contact group or create one).

In misccommands.cfg I needed to change /usr/bin/mail to /bin/mail on redhat
-- but not on slackware! Otherwise it was not able to mail messages.

At this point you can check your config using the
'/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg' command,
which does a check of the configuration and will warn if there are errors.
Fix the errors and repeat until it is happy.

Now you need to enable authorization so that the cgi scripts will work. To
do this first create the
.htaccess file in the nagios/sbin directory as described in the
documentation - it must be world-readable.

Next create the htpasswd.users file in the nagios/etc directory as described in
the documentation - it must be world-readable! I added only one user: rrsl

At this point you should be able to start nagios using:
/usr/local/nagios/bin/nagios /usr/local/nagios/etc/nagios.cfg

After nagios is started you should be able to go to the web page and
use the cgis to display info. The final step is enabling the external command
cgis, which let you change the behavior of nagios from the web. To do this
you have to follow the steps in the documentation to enable external commands
This involves enabling external commands in the config file and specifying
an external commands file....

The permissions on the file seem to be a source of problems.
To enable external commands you have to first create a group containing
the nagios user and the user httpd runs as (apache for us). Then you create
the directory /usr/local/nagios/var/rw with permissions:
drwxrwsr-x 2 nagios nagioscmd 4096 Aug 3 13:55 rw

That's rwx permissions for the user and rws permissions for the group
chmod gu+rwx nagios.nagioscmd rw
chmod g+s rw
Then you have to restart both apache and nagios, or it doesn't work!

The documentation describes some other gotchas..

To run checks for services on remote machines, you need to set up ssh to
log in without a password. To do this run
$ ssh-keygen -t rsa
to create a public/private key pair. copy the public key into the
~/.ssh/authorized_keys file of the user nagios on the remote host. This file
must only be rw by nagios or ssh will not work. The directory .ssh must also
be only rwx by nagios. Then you should be able
to ssh to the remote host as nagios without giving a password.

Copy the plugins you want to run on the remote host to the remote host,
and then set up checks in checkcommands.cfg, and services.cfg. See the
check-host-radar command for an example. The plugins can be any kind of
program.

Many plugins were timing out after ten seconds when checking on heimdal and
umtanum. Although there claimed to be a command line option to change this,
in practice there was not. Therefore, I changed the source to set the timeout
to 30sec and recompiled the plugins. This appears to work. (7/26/04)

nagios comes with the file /etc/rc.d/init.d/nagios, which is a script for
starting nagios from rc.local or from the command line as root (or by
sudo). This seems to be the best way of starting or stopping the program.

sudo /etc/rc.d/init.d/nagios start
sudo /etc/rc.d/init.d/nagios stop
etc.

nagios has the ability to acknowledge a host condition, so if a host
is down, you can "acknowledge" through the web interface, and it will
stop sending email unless the host changes state. This is useful.
You can also disable notification for a service, which is handy

Adding a user to the web interface:

1) edit cgi.cfg to add the user to the actions that you want them to do
2) edit sbin/.htaccess to add the user to the list of ok users, eg:
require user rrsl radar
for users rrsl and radar being able to access the web interface
Keep in mind this file must be world readable...
3) issue htpasswd /usr/local/nagios/etc/htpasswd.users <new user> as root, to
create the new user and password
4) stop nagios
5) restart the web server
6 start nagios

It should work, you should be able to log in and do stuff.

Nagios

2026-03-21T13:35:07Z

Boiarino:

== RHEL9 ==

yum install nagios

== old stuff ==

Nagios is main monitoring tool for CLON cluster.

Download from web following files and place them to '/usr/local/downloads':

nagios-2.6.tar.gz
nagios-images_0.3.tar.gz
nagios-plugins-1.4.5.tar.gz
nagiosmib-1.0.0.tar.gz (?????????)

create user 'nagios', private group 'nagios'
mkdir /www/nagios2.6
chown nagios.nagios /www/nagios2.6

Add command file group and put appropriate users in (we assume that apache is running as user 'apache'):

/usr/sbin/groupadd nagcmd
/usr/sbin/usermod -G nagcmd apache
/usr/sbin/usermod -G nagcmd nagios
to check, see file /etc/group

Build and install:

cp /usr/local/downloads/nagios-2.6.tar.gz /usr/local/src
cd /usr/local/src
gunzip nagios-2.6.tar.gz
tar xvf nagios-2.6.tar
cd '/usr/local/src/nagios-2.6'
NO !!! su nagios
./configure --prefix=/www/nagios2.6 --with-cgiurl=/nagios/cgi-bin --with-htmurl=/nagios --with-nagios-user=nagios --with-nagios-group=nagios --with-command-group=nagcmd
??did on RHEL6: ./configure --prefix=/www/nagios-3.4.1 --with-cgiurl=/nagios/cgi-bin --with-htmurl=/nagios --with-nagios-user=nagios --with-nagios-group=nagcmd --with-command-group=nagcmd
make all
make install

Install init script /etc/init.d/nagios:

make install-init (as 'root' !!!)

Modify /etc/init.d/nagios script as following (bug ?):

###NagiosRunFile=${prefix}/var/nagios.lock
NagiosRunFile=${prefix}/var/run/nagios.pid

#to install sample /etc directory
make install-config

#???This installs and configures permissions on the
#???directory for holding the external command file
make install-commandmode

Install plugins and nrpe - see corresponding sections.

Fix apache configuration file:

add contents of /usr/local/src/nagios-2.6/sample-config/httpd.conf
to /www/apache2.2.3/conf/httpd.conf

Copy 'etc' directory from old Nagios (if any) to /www/nagios2.6. Go through files cgi.cfg, nagios.cfg and private/*
and fix pathes making them point to /www/nagios2.6.

Add several directories for output files:

mkdir /www/nagios2.6/var/log
mkdir /www/nagios2.6/var/run
mkdir /www/nagios2.6/var/rw (?????)

Install icons:

cd /usr/local/src/nagios-images-0.3/base
cp * /www/nagios2.6/share/images/logos

To check configuration run following commands:

/www/nagios2.6/bin/nagios -v /www/nagios2.6/etc/nagios.cfg

To start/stop (restart need to be fixed ..):

/etc/init.d/nagios start/stop

Add Nagios to services:

chkconfig --add nagios
chkconfig --level 3 nagios off
chkconfig --level 4 nagios off
chkconfig --list nagios

NOTE: following command was executed to let browser to disable host checks; it should be investigated ...

chown nagios:nagcmd /www/nagios2.6/var/log/nagios.cmd

'''ADDITIONAL INFO (COPIED FROM http://klickitat.ee.washington.edu/medg/software/nagios-install-notes.txt):'''

some notes on installing nagios - these are a supplement to the basic
nagios documentation that comes with the software:

Download and install the nagios and nagios-plugin packages. For whatever reason
www.nagios.org seems to be hosed now (7/23/2004), but look on google. There
is also sourceforge.nagios.net, which seems to be another nagios homepage.

Create a nagios user. Compile and install the packages as described in the
documentation. Redhat
has all necessary libraries already installed. I just went with the defaults
in the compilation. The default is for nagios to install itself in
/usr/local/nagios; everything should be owned by user nagios.

To enable the web interface, edit httpd.conf to add the Alias and
ScriptAlias directives as
described in the nagios documentation. This works for both apache 1.3 and
apache 2.0. Restart apache. At this point you should be able to go to
http://www.whatever/nagios/ and see the nagios page and access the
documentation. CGIs probably won't work.

You need to set up the config files; this is the real heart of installing
nagios and unfortunately is much easier to show than to describe. The first
step is to copy the *.cfg-sample files that should be in /usr/local/nagios/etc
to *.cfg. Then you need to edit these files to describe your setup.

Basically, hosts.cfg describes the hosts you want to monitor, services.cfg
describes the services you want to monitor on each host, checkcommands.cfg
is the check commands used by services.cfg to check the services; if you want
to check a service you probably have to add a command to do so; contacts.cfg
is the people who will be contacted in case of a problem, contactgroups
is the groups of people, hostgroups.cfg is the groups of hosts (rrsl-machines,
for example). nagios.cfg is the master config file. Probably you can get
by just by copying and pasting the stuff already in these files and tweaking
it.

To add a new machine you will need to edit hosts.cfg (add the machine),
hostgroups.cfg (put it in a hostgroup), services.cfg (add the services to
be checked on the machine).

To add a new administrator, you will need to edit contacts.cfg (add the new
person) and contactgroups.cfg (put them in a contact group or create one).

In misccommands.cfg I needed to change /usr/bin/mail to /bin/mail on redhat
-- but not on slackware! Otherwise it was not able to mail messages.

At this point you can check your config using the
'/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg' command,
which does a check of the configuration and will warn if there are errors.
Fix the errors and repeat until it is happy.

Now you need to enable authorization so that the cgi scripts will work. To
do this first create the
.htaccess file in the nagios/sbin directory as described in the
documentation - it must be world-readable.

Next create the htpasswd.users file in the nagios/etc directory as described in
the documentation - it must be world-readable! I added only one user: rrsl

At this point you should be able to start nagios using:
/usr/local/nagios/bin/nagios /usr/local/nagios/etc/nagios.cfg

After nagios is started you should be able to go to the web page and
use the cgis to display info. The final step is enabling the external command
cgis, which let you change the behavior of nagios from the web. To do this
you have to follow the steps in the documentation to enable external commands
This involves enabling external commands in the config file and specifying
an external commands file....

The permissions on the file seem to be a source of problems.
To enable external commands you have to first create a group containing
the nagios user and the user httpd runs as (apache for us). Then you create
the directory /usr/local/nagios/var/rw with permissions:
drwxrwsr-x 2 nagios nagioscmd 4096 Aug 3 13:55 rw

That's rwx permissions for the user and rws permissions for the group
chmod gu+rwx nagios.nagioscmd rw
chmod g+s rw
Then you have to restart both apache and nagios, or it doesn't work!

The documentation describes some other gotchas..

To run checks for services on remote machines, you need to set up ssh to
log in without a password. To do this run
$ ssh-keygen -t rsa
to create a public/private key pair. copy the public key into the
~/.ssh/authorized_keys file of the user nagios on the remote host. This file
must only be rw by nagios or ssh will not work. The directory .ssh must also
be only rwx by nagios. Then you should be able
to ssh to the remote host as nagios without giving a password.

Copy the plugins you want to run on the remote host to the remote host,
and then set up checks in checkcommands.cfg, and services.cfg. See the
check-host-radar command for an example. The plugins can be any kind of
program.

Many plugins were timing out after ten seconds when checking on heimdal and
umtanum. Although there claimed to be a command line option to change this,
in practice there was not. Therefore, I changed the source to set the timeout
to 30sec and recompiled the plugins. This appears to work. (7/26/04)

nagios comes with the file /etc/rc.d/init.d/nagios, which is a script for
starting nagios from rc.local or from the command line as root (or by
sudo). This seems to be the best way of starting or stopping the program.

sudo /etc/rc.d/init.d/nagios start
sudo /etc/rc.d/init.d/nagios stop
etc.

nagios has the ability to acknowledge a host condition, so if a host
is down, you can "acknowledge" through the web interface, and it will
stop sending email unless the host changes state. This is useful.
You can also disable notification for a service, which is handy

Adding a user to the web interface:

1) edit cgi.cfg to add the user to the actions that you want them to do
2) edit sbin/.htaccess to add the user to the list of ok users, eg:
require user rrsl radar
for users rrsl and radar being able to access the web interface
Keep in mind this file must be world readable...
3) issue htpasswd /usr/local/nagios/etc/htpasswd.users <new user> as root, to
create the new user and password
4) stop nagios
5) restart the web server
6 start nagios

It should work, you should be able to log in and do stuff.

ROOT

2026-03-20T02:40:33Z

Boiarino: /* RHEL9 */

== RHEL9 ==

yum install libuuid-devel xrootd xrootd-devel xrootd-client-devel python3 python3-devel z3 z3-devel

yum install gcc-fortran imake xbae-devel libnsl libnsl2-devel glibc-devel freetype-devel libgfortran libX11-devel libXpm-devel libXt-devel motif-devel (for cernlib)

yum install boost boost-devel lz4 lz4-devel doxygen (for evio)

yum install libtirpc-devel

If Git does not work, download source to /usr/downloads manually and do following:

cd /apps/root
cp /usr/downloads/root_v6.24.08.source.tar.gz .
gunzip root_v6.24.08.source.tar.gz
tar xvf root_v6.24.08.source.tar
rm root_v6.24.08.source.tar.gz
mv root_v6.24.08 root_v6.24.08_source
mkdir 6.24.08
cd 6.24.08
cmake ../root-6.24.08_source -Dbuiltin_xrootd=OFF -Dclad=OFF
cmake --build . -- -j32

== RHEL7 ==

Installation from source (replace root_install with for example 6.24.06):

# The latest stable branch gets updated automatically on each release.
# You may update your local copy by issuing a `git pull` command from within `root_src/`.
git clone --branch latest-stable https://github.com/root-project/root.git root_src
mkdir root_build root_install && cd root_build
cmake -DCMAKE_INSTALL_PREFIX=../root_install ../root_src # && check cmake configuration output for warnings or errors
cmake --build . -- install -j4 # if you have 4 cores available for compilation
source ../root_install/bin/thisroot.sh # or thisroot.{fish,csh}

Installation (version 6.16.0 and GCC 8.3.0 in this example):

* cd /apps/root

* git clone http://github.com/root-project/root.git 6.16.0

* cd 6.16.0

* git checkout -b v6-16-00 v6-16-00

* cd build

* setenv CC /apps/gcc/8.3.0/bin/gcc

* setenv CXX /apps/gcc/8.3.0/bin/g++

* cmake /apps/root/6.16.0

* cmake --build . -- -j32

Everything is ready. Setup environment:

* source /apps/root/6.16.0/build/bin/thisroot.csh

Now it can be run:

* root

Linux Installation Procedure

2026-03-18T15:18:59Z

Boiarino: /* RHEL9 (64 bit) - for machine NOT under puppet control */

== Dell servers hardware trick(s) ==

* '''!!! if BIOS date/time is incorrect, it may prevent redhat subscription and installation to work correctly, set it to correct value !!! (it was not confirmed, problem may be different and was fixed at the same time as time was correctly set) '''

* if BIOS does not remember time setting after power unplugged, battery on motherboard may need to be replaced

* if looks dead, remove the power cords, then held in the on button for 30 seconds; then plug it back in and it may boots up fine - known Dell feature

== ARM (CentsOS7) ==

See [[yum]] for specifics.

yum install xauth wget bzip2 xterm expat-devel libX11-devel libXpm-devel motif-devel mariadb-devel

== RHEL9 (64 bit) - machine under puppet control ==

'''NOTE''': select installation type '''H''', then type '''B'''.

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

Root password will be set by puppet during installation, as well as most other needed settings.

Install useful pachages:
yum install ncdu mysql gfortran

'''NOTE''': graphic screen is disabled, run following command as root:
systemctl set-default graphical.target

== RHEL9 (64 bit) - for machine NOT under puppet control ==

'''NOTE''': select installation type '''D''' (not '''S''', otherwise it will not be level 2 server)

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

When installation complete, ssh as authorized user and do following:

sudo yum install emacs
cd /etc
sudo chmod a+rw shadow
sudo emacs shadow

Copy to /etc/shadow root and other needed passwords from another clon machine.

sudo chmod a-rw shadow

After that, type ''su'' to become superuser. All following settings can be done now without typing ''sudo'' every time. You still will not be able to ssh remotely as root - always ssh as authorized user and type ''su'' to become root.

Update /etc/passwd and /etc/group using another clon machine as example.

yum install expat-devel libXaw-devel mysql-devel motif-devel ncurses-devel apr-devel net-snmp-utils
yum install xorg-x11-utils # for xprop/xwininfo/etc creg stuff
yum install s-nail # for /usr/bin/mail
yum install ncdu gfortran
yum install libconfig-devel # recent addition for CODA libraries

To be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

update-crypto-policies --set LEGACY

and then probably reboot, not sure.

Somebody mentioned also adding ''RequiredRSASize 1024'' to a config file in ''/etc/ssh/ssh_config.d/'', but I did not do it.

Note: this changes all daemons and system settings and is a bit overkill if you only need to adjust the settings for ssh and sshd.

Exclude (only) sshd from the system-wide cryptographic policy. You opt-out by editing /etc/sysconfig/sshd and uncommenting the line # CRYPTO_POLICY= , (if necessary you can then adjust adjust /etc/ssh/sshd_config and add legacy crypto settings) and restart the ssh daemon.

For the ssh command line client on the RHEL 9 system: you're recommended to edit ˜/.ssh/config and override the modern/secure system wide ssh client defaults by adding a Host entry that adds support for suitable legacy encryption options for that particular host:

# ˜/.ssh/config

Host rhel6.example.com
KexAlgorithms +diffie-hellman-group14-sha1
MACs +hmac-sha1
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa

Prepare auto-mounting directories:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mv work work.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

== RHEL8 (64 bit) ==

'''NOTE:''' to boot from USB stick, insert USB stick, turn machine ON holding F2, and in BIOS Boot Configuration, set Enable Security Boot to OFF, save and exit, holding F2. When in BIOS again, in Boot Configuration make ''UEFI PHY USB ...'' first in boot sequence, local hard drive second, disable all other boot options, save and exit. Do NOT hold F2, Linux installation from USB stick will start. '''IMPORTANT:''' when asked about D/S options (very first question in installation process), '''REMOVE USB STICK BEFORE ANSWERING QUESTION ABOUT DESKTOP/SERVER''', otherwise it will be destroyed by following installation steps !!!

'''NOTE:''' to disable/enable puppet, do following as root:
puppet agent --disable "temporary"
puppet agent --enable

yum install emacs
yum install xorg-x11-fonts-misc

Move and create some directories in preparation for automounts:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

Add line '''+dir:/etc/auto.master.d''' to ''/etc/auto.master''

Create file ''/etc/auto.master.d/direct.autofs'' with the line '''/- /etc/auto.direct'''

Create file ''/etc/auto.direct'' with the following contents:

# machine-dependent system directories
/apps -rw,bg clonfs1:/vol/apps/RHEL8_x86_64
/usr/local -rw,bg clonfs1:/vol/local/RHEL8_x86_64
# machine-independent system directories
/home -rw,bg clonfs1:/vol/home
#/work -rw,bg clonfs1-old:/vol/work
/scratch -rw,bg clonfs1:/vol/scratch
# machine-independent clas directories
/usr/downloads -rw,bg clonfs1:/vol/downloads
/usr/clas -rw,bg clonfs1:/vol/clas
/usr/clas12 -rw,bg clonfs1:/vol/clas12
# Used for data storage before shipping to tape
#/logs -rw,bg clonfs1-old:/vol/logs

Restart autofs:

service autofs reload
service autofs restart

Remove from the end of the ''/etc/passwd'' line '''+::::::''', and add following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

Update ''/etc/shadow'', adding passwords for local accounts (copy it from another machine).

Add following to ''/etc/group'':

clon:x:383:clascron
onliners:x:9998:abbottd,avakian,baltzell,battagli,brooksw,bruhwel,boiarino,carman,chen,clasboot,clascron,clasrun,cole,cuevas,davidl,danagu,dugger,elton,epics,fklein,gilfoyle,giovanet,golovach,gurjyan,heddle,heyes,hovanes,jacobsg,jenkins,kliv,lcsmith,marki,mestayer,nerses,parkkj,pasyuk,primex,ripani,rossi,saw,staylor,sytnik,taiuti,taylorw,timmer,wooyoung

== RHEL7 (64 bit) ==

Installed using DVD provided by Computer Center, currently RHEL7.3. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation. On DELL servers, hold F2 after power on and go to 'Device Settings' to see mac address. Remember machine memory size as well, will needed when create partitions, find it in 'System BIOS -> Memory Settings'.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* Please enter the hostname of this system: <hostname> <enter>

* What type of system are you building? (D)esktop: <enter>

* Is this a CUE level 1 or CUE level 2 System build (1/2): 2 <enter>

* Please enter the System Admin's CUE username: boiarino <enter>

* Do you want to use the default partitioning scheme (y/n)? n <enter>

* Are you sure you want to use your own partitioning scheme (y/n)? y <enter>

Choose 'Standard Partition' scheme and create following partitions: /boot - 1GB, swap - double memory size, / - the rest of space.

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically.

After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

When machine reboots for the last time, ask Paul Letta to set usual hallb root password. From now on remote root access is possible. Alternatively, user ''boiarino'' can execute most of actions using ''sudo'',
like ''sudo emacs'' for protected files. ''sudo reboot'' etc.

Go to /boot/grub2 and modify file grub.cfg, Linux kernel boot options, adding options ''net.ifnames=0 biosdevname=0'', so your boot string has following section:

..... rhgb net.ifnames=0 biosdevname=0 quiet .....

so whole line looks something like this:

linux16 /vmlinuz-3.10.0-327.18.2.el7.x86_64 root=UUID=b5d1b5ad-e3f6-4db4-8972-aa9c1a91d116 ro vconsole.keymap=us crashkernel=auto vconsole.font=latarcyrheb-sun16 rhgb net.ifnames=0 biosdevname=0 quiet LANG=en_US.UTF-8

Reboot machine, ethernet ports must be named ''eth0'', ''eth1'' etc.

To update manually, use commands ''yum list updates'' and ''yum update''.

'''NOTE:''' add machine to the appropriate '''puppet''' group, it will do all following automatically (hopefully).

'''NOTE:''' on RHEL7.9, RPM EPEL REPO is not enabled by default, which prevents from installing nload, itcl, itk etc. To bring it back, it can be copied it from older machine, for example:

cd /etc/yum.repos.d
scp clondaq7:/etc/yum.repos.d/epel.repo .
cd /etc/pki/rpm-gpg
scp clondaq7:/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 .

Alternatively, following can be used to add repo's:

subscription-manager repos --enable <repo_id>

In particular, following have to be enabled to get nload, xpdf, python-alembic, tix, itcl, itk etc:

subscription-manager repos --enable JLab_EPEL_EPEL_7
subscription-manager repos --enable rhel-7-workstation-optional-rpms

Repo ID's can be obtained by:

subscription-manager repos --list

Installed repo's can be seen by:

yum repolist

'''Yum updates'''

Edit the ''/etc/yum.conf'' file and add the following line to force installation of the 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install xterm mesa-dri-drivers telnet rsh readline-devel net-snmp-utils tigervnc-server tigervnc xpdf nload mariadb-devel libxml2-devel glibc-devel qt-devel python-alembic openssl-devel apr-devel
yum install libconfig-devel # recent addition for CODA libraries

Fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

Do following to be able to compile and run 32-bit apps on 64-bit machine (for compatibility with 32bit applications):

yum install libXpm-devel libXaw-devel motif-devel glibc-devel ncurses-devel readline-devel

Modify file ''/etc/passwd'' adding following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

'''Note''': user-related lines must be removed, like

+boiarino::::::

as well as

+::::::

'''Note''': assumed that following line is in already:

+@ccc::::::

'''Note''': if following line exist, it must be placed in the end, or removed:

+::::::/bin/false

Modify file ''/etc/group'' adding following:

onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik,baltzell,carman
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Modify file ''/etc/shadow'' using an example from another RHEL7 clon machine (clonioc2 etc). Do ''chmod 600 shadow'' before editing and ''chmod 000 shadow'' after.

Make sure file ''/etc/ssh/sshd_config'' has following line uncommented (must be pushed in by CC security scripts):

##PermitUserEnvironment yes

NOT NEEDED, DONE IN THE END OF FILE ALREADY !!! Uncomment following in file ''/etc/ssh/ssh_config'':

##Host *
##ForwardX11 yes

Add line 'export NO_AT_BRIDGE=1' to the file '/etc/environment' to suppress annoying messages like '** (emacs:38714): WARNING **: Couldn't register with accessibility bus: Did not receive a reply.'

If big (>2GB) partition to be formated, do following (for example /dev/sdb):

parted /dev/sdb
(parted) print
(parted) mklabel gpt
(parted) print
mkpart primary 0GB 25855.2GB
(parted) print
(parted) quit

mkfs.xfs /dev/sdb1

then create /data and mount it using ''/etc/fstab'':

/dev/sdb1 /data xfs defaults 1 2

'''NOTE:''' sometimes machine can loose NIS connection, then ssh to it becomes intermittent; if it happens ssh as root (may have to try several times) and run command

ypwhich

to shows NIS server. If it returns nothing check file ''/etc/resolv.conf'', it must have following (as on July 2019):

search jlab.org acc.jlab.org
nameserver 129.57.90.255
nameserver 129.57.32.101

If file is empty or does not contain right info, fix it. After that run command

ypbind

It should fix a problem. Run ''ypwhich'' to make sure.

'''Display Setting:''' if machine is multi-head, goto ''Applications->System Tools->Settings->Devices->Displays'' and arrange displays.

Proceed to the [[Linux Customization on CLON Cluster]].

== RHEL6 (64 bit) ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* ...[D]esktop: [use 's' for server, 'd' for desktop] <enter>

* root password: enter root password

* admin user: boiarino

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically. After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

To make emacs work, install

yum install libotf

Edit the /etc/yum.conf file and add the following line to force installation of teh 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install openmotif-devel xinetd mysql-devel cmake libXpm-devel net-snmp-utils
yum install mesa-libGL-devel mesa-libGLU-devel mesa-libGLw-devel (for OpenGL, needed by ROOT)
yum install libXaw-devel (for xterm)
yum install expat-devel libgcj-devel (for evio/et)

yum install compat-libtermcap (for xterm)
ln -s /lib/libtermcap.so.2 /usr/lib/libtermcap.so
###ln -s /lib64/libtermcap.so.2 /usr/lib64/libtermcap.so

Install following fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

'''NOTE:''' Useful ''yum'' commands:

yum whatprovides libstdc++.so.5 - show which package contains libstdc++.so.5

== RHEL5 ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (email to helpdesk@jlab.org) because it is network-based installation.

Dialog:

* boot: <enter>

* ...[D]esktop: Server (it is ignored, will do Desktop anyway ...)

* root password: enter root password

* system user: <enter>

* manually partition disk: 100MB /boot, 2048 etc MB swap, the rest /.

'''CFENGINE''': there are procesess restoring some system config files (in particular ''/etc/ssh/sshd_config'') in according to the Computer Center - maintained templete. To shut them down: (1) comment out ''cfengine''-related stuff in root cronjobs; (2) do ''/etc/init.d/cfengine stop''; (3) do ''chkconfig cfengine off''. Ask CC (Sherman White, Paul Letta) to fix templete.

Run ''/usr/bin/system-config-authentication'' and set NIS servers list as ''clon00,clon10,nis1''.

Add following in the end of ''/etc/passwd'':
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:6005:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+@ccc::::::

Add following in the end of ''/etc/group'':
onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Create ''/etc/shadow'' files with entries for users clasrun, epics and nagios (copy from another machine).

Install updates: normally all updates should be installed by now, it can be done manually by commands
yum list updates
yum update

Configure [[SSH]].

Install missing packages:
yum install openmotif-devel xinetd mysql-devel cmake

Some additional packages on request (for EPICS):

yum install mc lapack lapack-devel blas blas-devel giflib-devel

Proceed to the [[Linux Customization on CLON Cluster]].

'''PROBLEMS''':

1. /usr/lib/libg2c.so link is missing

FIXED ??? 2. /usr/lib/libXm.so link is missing

3. Created /etc/shadow file for clasrun, epics and nagios

== RHEL4 ==

Get RHEL4 CDs from Paul Letta.

Connect terminal, keyboard and mouse.

Boot from CD1. Follow instructions. When asked, choose following options:

* Choose 'Manually partition with Disk Druid', set /boot to 100MB, then / to 40GB, then swap to 8192MB or at least double memory size. The rest of disk can be set as /space.

* Network: choose manually, type clonpc2.jlab.org; click 'EDIT', deactivate 'Configure using DHCP',
type IP address and netmask (255.255.255.0), click Ok.
Type Gateway (for example 129.57.167.99) and 3 DNS servers (129.57.167.5,129.57.167.14,129.57.32.100).

* Choose 'No firewall'

* Disable 'SELinux'

* Choose 'Customize software packages to be installed', click 'Everything'.

You will be asked to install CD2, CD3 and CD4, then CD1 again.
Then you will be asked to click 'Reboot'. First remove CD, then click 'Reboot'.
You will be asked few more questions. When asked to activate service, choose
'Tell me why I need to register ..' and click 'Next'. Choose 'I can not complete registration ..'
and click 'Next'. You will see 'System user' screen, click 'Use network login..'.
Choose 'Enable NIS support' and click 'Configure NIS'. Type NIS Domain: 'CCCHP' and NIS Server: clon00.jlab.org.
Finish installation process.

* fix files ''/etc/passwd'', ''/etc/shadow'' and ''/etc/group'' adding clasrun etc (see examples on another machines).

'''NOTE''': if machine has multiple network ports, Linux may not assign them properly to specified IP names and addresses. If problem occures, open network GUI and delete all existing records. After that, click ''New'' and pick hadrware port you want to configure from the list of available ports (tricky part is to know which RJ-45 connector corresponds to which port ..). Configure and activate it, make sure it works. Repeat for other ports. Results will be stored in directory ''/etc/sysconfig/network-scripts'', file names will be ''ifcfg-eth0'', ''ifcfg-eth1'' etc. If modifying those files manually, restart network by ''/etc/init.d/network restart''. Finally, set routing, for example for ''clonmon'' command ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
Run following commands:
/sbin/route add -net 129.57.160.0 netmask 255.255.255.0 gw 129.57.160.5 dev eth1
/sbin/route add -net 129.57.68.0 netmask 255.255.255.0 gw 129.57.68.26 dev eth3
/sbin/route add -net 129.57.69.0 netmask 255.255.255.0 gw 129.57.69.206 dev dev5937
/sbin/route add -net 129.57.64.0 netmask 255.255.255.0 gw 129.57.64.57 dev eth0
Now ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 129.57.160.5 255.255.255.0 UG 0 0 0 eth1
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 129.57.68.26 255.255.255.0 UG 0 0 0 eth3
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 129.57.69.206 255.255.255.0 UG 0 0 0 dev5937
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 129.57.64.57 255.255.255.0 UG 0 0 0 eth0
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
In that example automount will do configured using ''clonmon-daq1'' interface, because default ''clonmon'' interface is on external subnet. To make that routing table permanent (retore it after reboot) I tried to add four files with following contents to the ''/etc/sysconfig/network-scripts'' directory:
route-eth1:
GATEWAY0=129.57.160.5
NETMASK0=255.255.255.0
ADDRESS0=129.57.160.0
route-eth3:
GATEWAY0=129.57.68.26
NETMASK0=255.255.255.0
ADDRESS0=129.57.68.0
route-dev5937:
GATEWAY0=129.57.69.206
NETMASK0=255.255.255.0
ADDRESS0=129.57.69.0
route-eth0:
GATEWAY0=129.57.64.57
NETMASK0=255.255.255.0
ADDRESS0=129.57.64.0
It did not worked. Then I added four ''/sbin/route add ..'' lines to ''/etc/rc.local'' script, and it worked.

From now on you can use remote 'ssh' connection.

* To configure your system to use the patch server, issue the following commands as root:
# mount jlabsite:/site /mnt
# /mnt/CC/linux/satellite-connect --patchall
The script will prompt you for an activation key, but if you don't know what this is, just hit ENTER and it will use a sensible default. Depending on how many patches need to be applied to your system to bring it up to the current level, this script may take a very long time to run. When it finishes, you should reboot your machine to make the new patches take effect.

To install updates later run ''up2date -uf'' as ''root''.

Configure [[SSH]].

* Proceed with [[Linux Customization on CLON Cluster]] if applicable.

To boot Linux in single user mode (no graphics), add ''single'' to the end of boot line during boot process.

== '''background info''' ==

'''Add startup script'''

Create script in ''/etc/init.d/'' directory (use existing scripts as example). Must have a line like
# chkconfig: - 91 09
which specifies start and stop order. Run commands
chkconfig --add <scriptname>
chkconfig --level 3 <scriptname> on
for every level you want that script to be executed (usualy 3 and/or 4 and/or 5). Check if it os done using command
chkconfig --list | grep <scriptname>

'''xxx'''

You can choose to download the RHEL operating system directly from the Red Hat Web site and not receive a media kit from HP containing the software. This scenario occurs when the media option AJR is deselected from the order. (The media kit option is always selected by default. )

It is necessary to register at the Red Hat Web site prior to download. Registration requires the activation code that each customer receives from HP when ordering either RHEL.

You can download RHEL for each available platform as four CD ISO images or one DVD ISO image.

Use the following procedure to download RHEL and create the installation media:

1.

Register and log in at the following Red Hat Web site:

www.redhat.com/rhn
2.

Click on channels and then select Red Hat Enterprise Linux ES (v.4 for 64–bit Intel Itanium).
3.

Select Downloads and then download the ISO images of install, compatibility and source disks

Files with ia64 in the name are for the Itanium platform.
4.

Create the CDs or a DVD from the ISO images.

IMPORTANT: Create the CDs or DVD using the contents of the ISO images. Do not create the CDs or DVD by burning the .iso files themselves to CD or DVD. For example, if you are using K3b to burn a CD, click Tools>CD>Burn CD Image, select the .iso image, then click Burn.

'''Bootup scripts''' for example for level 5 execution (multiuser with X):

cp <script-file> /etc/init.d/
chmod +x /etc/init.d/<script-file>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/S50<scriptfile>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/K50<scriptfile>

'''Changing hostname/IP address'''

Changing hostname on RHEL
1. Change the HOSTNAME line in /etc/sysconfig/network
2. Change the hostname (FQDN and alias) in /etc/hosts
3. Run '/bin/hostname new_hostname' for the hostname change to take effect immediately.
4. Run '/sbin/service syslog restart' for syslog to log using the new hostname.
A reboot is not required to change the system hostname.

IP address: You have to change the IP address entry in
/etc/sysconfig/network-scripts/ifcfg-eth0.

Linux Installation Procedure

2026-03-18T15:18:36Z

Boiarino: /* RHEL9 (64 bit) - machine under puppet control */

== Dell servers hardware trick(s) ==

* '''!!! if BIOS date/time is incorrect, it may prevent redhat subscription and installation to work correctly, set it to correct value !!! (it was not confirmed, problem may be different and was fixed at the same time as time was correctly set) '''

* if BIOS does not remember time setting after power unplugged, battery on motherboard may need to be replaced

* if looks dead, remove the power cords, then held in the on button for 30 seconds; then plug it back in and it may boots up fine - known Dell feature

== ARM (CentsOS7) ==

See [[yum]] for specifics.

yum install xauth wget bzip2 xterm expat-devel libX11-devel libXpm-devel motif-devel mariadb-devel

== RHEL9 (64 bit) - machine under puppet control ==

'''NOTE''': select installation type '''H''', then type '''B'''.

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

Root password will be set by puppet during installation, as well as most other needed settings.

Install useful pachages:
yum install ncdu mysql gfortran

'''NOTE''': graphic screen is disabled, run following command as root:
systemctl set-default graphical.target

== RHEL9 (64 bit) - for machine NOT under puppet control ==

'''NOTE''': select installation type '''D''' (not '''S''', otherwise it will not be level 2 server)

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

When installation complete, ssh as authorized user and do following:

sudo yum install emacs
cd /etc
sudo chmod a+rw shadow
sudo emacs shadow

Copy to /etc/shadow root and other needed passwords from another clon machine.

sudo chmod a-rw shadow

After that, type ''su'' to become superuser. All following settings can be done now without typing ''sudo'' every time. You still will not be able to ssh remotely as root - always ssh as authorized user and type ''su'' to become root.

Update /etc/passwd and /etc/group using another clon machine as example.

yum install expat-devel libXaw-devel mysql-devel motif-devel ncurses-devel apr-devel net-snmp-utils
yum install xorg-x11-utils # for xprop/xwininfo/etc creg stuff
yum install s-nail # for /usr/bin/mail
yum install ncdu
yum install libconfig-devel # recent addition for CODA libraries

To be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

update-crypto-policies --set LEGACY

and then probably reboot, not sure.

Somebody mentioned also adding ''RequiredRSASize 1024'' to a config file in ''/etc/ssh/ssh_config.d/'', but I did not do it.

Note: this changes all daemons and system settings and is a bit overkill if you only need to adjust the settings for ssh and sshd.

Exclude (only) sshd from the system-wide cryptographic policy. You opt-out by editing /etc/sysconfig/sshd and uncommenting the line # CRYPTO_POLICY= , (if necessary you can then adjust adjust /etc/ssh/sshd_config and add legacy crypto settings) and restart the ssh daemon.

For the ssh command line client on the RHEL 9 system: you're recommended to edit ˜/.ssh/config and override the modern/secure system wide ssh client defaults by adding a Host entry that adds support for suitable legacy encryption options for that particular host:

# ˜/.ssh/config

Host rhel6.example.com
KexAlgorithms +diffie-hellman-group14-sha1
MACs +hmac-sha1
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa

Prepare auto-mounting directories:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mv work work.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

== RHEL8 (64 bit) ==

'''NOTE:''' to boot from USB stick, insert USB stick, turn machine ON holding F2, and in BIOS Boot Configuration, set Enable Security Boot to OFF, save and exit, holding F2. When in BIOS again, in Boot Configuration make ''UEFI PHY USB ...'' first in boot sequence, local hard drive second, disable all other boot options, save and exit. Do NOT hold F2, Linux installation from USB stick will start. '''IMPORTANT:''' when asked about D/S options (very first question in installation process), '''REMOVE USB STICK BEFORE ANSWERING QUESTION ABOUT DESKTOP/SERVER''', otherwise it will be destroyed by following installation steps !!!

'''NOTE:''' to disable/enable puppet, do following as root:
puppet agent --disable "temporary"
puppet agent --enable

yum install emacs
yum install xorg-x11-fonts-misc

Move and create some directories in preparation for automounts:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

Add line '''+dir:/etc/auto.master.d''' to ''/etc/auto.master''

Create file ''/etc/auto.master.d/direct.autofs'' with the line '''/- /etc/auto.direct'''

Create file ''/etc/auto.direct'' with the following contents:

# machine-dependent system directories
/apps -rw,bg clonfs1:/vol/apps/RHEL8_x86_64
/usr/local -rw,bg clonfs1:/vol/local/RHEL8_x86_64
# machine-independent system directories
/home -rw,bg clonfs1:/vol/home
#/work -rw,bg clonfs1-old:/vol/work
/scratch -rw,bg clonfs1:/vol/scratch
# machine-independent clas directories
/usr/downloads -rw,bg clonfs1:/vol/downloads
/usr/clas -rw,bg clonfs1:/vol/clas
/usr/clas12 -rw,bg clonfs1:/vol/clas12
# Used for data storage before shipping to tape
#/logs -rw,bg clonfs1-old:/vol/logs

Restart autofs:

service autofs reload
service autofs restart

Remove from the end of the ''/etc/passwd'' line '''+::::::''', and add following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

Update ''/etc/shadow'', adding passwords for local accounts (copy it from another machine).

Add following to ''/etc/group'':

clon:x:383:clascron
onliners:x:9998:abbottd,avakian,baltzell,battagli,brooksw,bruhwel,boiarino,carman,chen,clasboot,clascron,clasrun,cole,cuevas,davidl,danagu,dugger,elton,epics,fklein,gilfoyle,giovanet,golovach,gurjyan,heddle,heyes,hovanes,jacobsg,jenkins,kliv,lcsmith,marki,mestayer,nerses,parkkj,pasyuk,primex,ripani,rossi,saw,staylor,sytnik,taiuti,taylorw,timmer,wooyoung

== RHEL7 (64 bit) ==

Installed using DVD provided by Computer Center, currently RHEL7.3. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation. On DELL servers, hold F2 after power on and go to 'Device Settings' to see mac address. Remember machine memory size as well, will needed when create partitions, find it in 'System BIOS -> Memory Settings'.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* Please enter the hostname of this system: <hostname> <enter>

* What type of system are you building? (D)esktop: <enter>

* Is this a CUE level 1 or CUE level 2 System build (1/2): 2 <enter>

* Please enter the System Admin's CUE username: boiarino <enter>

* Do you want to use the default partitioning scheme (y/n)? n <enter>

* Are you sure you want to use your own partitioning scheme (y/n)? y <enter>

Choose 'Standard Partition' scheme and create following partitions: /boot - 1GB, swap - double memory size, / - the rest of space.

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically.

After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

When machine reboots for the last time, ask Paul Letta to set usual hallb root password. From now on remote root access is possible. Alternatively, user ''boiarino'' can execute most of actions using ''sudo'',
like ''sudo emacs'' for protected files. ''sudo reboot'' etc.

Go to /boot/grub2 and modify file grub.cfg, Linux kernel boot options, adding options ''net.ifnames=0 biosdevname=0'', so your boot string has following section:

..... rhgb net.ifnames=0 biosdevname=0 quiet .....

so whole line looks something like this:

linux16 /vmlinuz-3.10.0-327.18.2.el7.x86_64 root=UUID=b5d1b5ad-e3f6-4db4-8972-aa9c1a91d116 ro vconsole.keymap=us crashkernel=auto vconsole.font=latarcyrheb-sun16 rhgb net.ifnames=0 biosdevname=0 quiet LANG=en_US.UTF-8

Reboot machine, ethernet ports must be named ''eth0'', ''eth1'' etc.

To update manually, use commands ''yum list updates'' and ''yum update''.

'''NOTE:''' add machine to the appropriate '''puppet''' group, it will do all following automatically (hopefully).

'''NOTE:''' on RHEL7.9, RPM EPEL REPO is not enabled by default, which prevents from installing nload, itcl, itk etc. To bring it back, it can be copied it from older machine, for example:

cd /etc/yum.repos.d
scp clondaq7:/etc/yum.repos.d/epel.repo .
cd /etc/pki/rpm-gpg
scp clondaq7:/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 .

Alternatively, following can be used to add repo's:

subscription-manager repos --enable <repo_id>

In particular, following have to be enabled to get nload, xpdf, python-alembic, tix, itcl, itk etc:

subscription-manager repos --enable JLab_EPEL_EPEL_7
subscription-manager repos --enable rhel-7-workstation-optional-rpms

Repo ID's can be obtained by:

subscription-manager repos --list

Installed repo's can be seen by:

yum repolist

'''Yum updates'''

Edit the ''/etc/yum.conf'' file and add the following line to force installation of the 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install xterm mesa-dri-drivers telnet rsh readline-devel net-snmp-utils tigervnc-server tigervnc xpdf nload mariadb-devel libxml2-devel glibc-devel qt-devel python-alembic openssl-devel apr-devel
yum install libconfig-devel # recent addition for CODA libraries

Fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

Do following to be able to compile and run 32-bit apps on 64-bit machine (for compatibility with 32bit applications):

yum install libXpm-devel libXaw-devel motif-devel glibc-devel ncurses-devel readline-devel

Modify file ''/etc/passwd'' adding following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

'''Note''': user-related lines must be removed, like

+boiarino::::::

as well as

+::::::

'''Note''': assumed that following line is in already:

+@ccc::::::

'''Note''': if following line exist, it must be placed in the end, or removed:

+::::::/bin/false

Modify file ''/etc/group'' adding following:

onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik,baltzell,carman
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Modify file ''/etc/shadow'' using an example from another RHEL7 clon machine (clonioc2 etc). Do ''chmod 600 shadow'' before editing and ''chmod 000 shadow'' after.

Make sure file ''/etc/ssh/sshd_config'' has following line uncommented (must be pushed in by CC security scripts):

##PermitUserEnvironment yes

NOT NEEDED, DONE IN THE END OF FILE ALREADY !!! Uncomment following in file ''/etc/ssh/ssh_config'':

##Host *
##ForwardX11 yes

Add line 'export NO_AT_BRIDGE=1' to the file '/etc/environment' to suppress annoying messages like '** (emacs:38714): WARNING **: Couldn't register with accessibility bus: Did not receive a reply.'

If big (>2GB) partition to be formated, do following (for example /dev/sdb):

parted /dev/sdb
(parted) print
(parted) mklabel gpt
(parted) print
mkpart primary 0GB 25855.2GB
(parted) print
(parted) quit

mkfs.xfs /dev/sdb1

then create /data and mount it using ''/etc/fstab'':

/dev/sdb1 /data xfs defaults 1 2

'''NOTE:''' sometimes machine can loose NIS connection, then ssh to it becomes intermittent; if it happens ssh as root (may have to try several times) and run command

ypwhich

to shows NIS server. If it returns nothing check file ''/etc/resolv.conf'', it must have following (as on July 2019):

search jlab.org acc.jlab.org
nameserver 129.57.90.255
nameserver 129.57.32.101

If file is empty or does not contain right info, fix it. After that run command

ypbind

It should fix a problem. Run ''ypwhich'' to make sure.

'''Display Setting:''' if machine is multi-head, goto ''Applications->System Tools->Settings->Devices->Displays'' and arrange displays.

Proceed to the [[Linux Customization on CLON Cluster]].

== RHEL6 (64 bit) ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* ...[D]esktop: [use 's' for server, 'd' for desktop] <enter>

* root password: enter root password

* admin user: boiarino

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically. After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

To make emacs work, install

yum install libotf

Edit the /etc/yum.conf file and add the following line to force installation of teh 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install openmotif-devel xinetd mysql-devel cmake libXpm-devel net-snmp-utils
yum install mesa-libGL-devel mesa-libGLU-devel mesa-libGLw-devel (for OpenGL, needed by ROOT)
yum install libXaw-devel (for xterm)
yum install expat-devel libgcj-devel (for evio/et)

yum install compat-libtermcap (for xterm)
ln -s /lib/libtermcap.so.2 /usr/lib/libtermcap.so
###ln -s /lib64/libtermcap.so.2 /usr/lib64/libtermcap.so

Install following fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

'''NOTE:''' Useful ''yum'' commands:

yum whatprovides libstdc++.so.5 - show which package contains libstdc++.so.5

== RHEL5 ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (email to helpdesk@jlab.org) because it is network-based installation.

Dialog:

* boot: <enter>

* ...[D]esktop: Server (it is ignored, will do Desktop anyway ...)

* root password: enter root password

* system user: <enter>

* manually partition disk: 100MB /boot, 2048 etc MB swap, the rest /.

'''CFENGINE''': there are procesess restoring some system config files (in particular ''/etc/ssh/sshd_config'') in according to the Computer Center - maintained templete. To shut them down: (1) comment out ''cfengine''-related stuff in root cronjobs; (2) do ''/etc/init.d/cfengine stop''; (3) do ''chkconfig cfengine off''. Ask CC (Sherman White, Paul Letta) to fix templete.

Run ''/usr/bin/system-config-authentication'' and set NIS servers list as ''clon00,clon10,nis1''.

Add following in the end of ''/etc/passwd'':
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:6005:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+@ccc::::::

Add following in the end of ''/etc/group'':
onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Create ''/etc/shadow'' files with entries for users clasrun, epics and nagios (copy from another machine).

Install updates: normally all updates should be installed by now, it can be done manually by commands
yum list updates
yum update

Configure [[SSH]].

Install missing packages:
yum install openmotif-devel xinetd mysql-devel cmake

Some additional packages on request (for EPICS):

yum install mc lapack lapack-devel blas blas-devel giflib-devel

Proceed to the [[Linux Customization on CLON Cluster]].

'''PROBLEMS''':

1. /usr/lib/libg2c.so link is missing

FIXED ??? 2. /usr/lib/libXm.so link is missing

3. Created /etc/shadow file for clasrun, epics and nagios

== RHEL4 ==

Get RHEL4 CDs from Paul Letta.

Connect terminal, keyboard and mouse.

Boot from CD1. Follow instructions. When asked, choose following options:

* Choose 'Manually partition with Disk Druid', set /boot to 100MB, then / to 40GB, then swap to 8192MB or at least double memory size. The rest of disk can be set as /space.

* Network: choose manually, type clonpc2.jlab.org; click 'EDIT', deactivate 'Configure using DHCP',
type IP address and netmask (255.255.255.0), click Ok.
Type Gateway (for example 129.57.167.99) and 3 DNS servers (129.57.167.5,129.57.167.14,129.57.32.100).

* Choose 'No firewall'

* Disable 'SELinux'

* Choose 'Customize software packages to be installed', click 'Everything'.

You will be asked to install CD2, CD3 and CD4, then CD1 again.
Then you will be asked to click 'Reboot'. First remove CD, then click 'Reboot'.
You will be asked few more questions. When asked to activate service, choose
'Tell me why I need to register ..' and click 'Next'. Choose 'I can not complete registration ..'
and click 'Next'. You will see 'System user' screen, click 'Use network login..'.
Choose 'Enable NIS support' and click 'Configure NIS'. Type NIS Domain: 'CCCHP' and NIS Server: clon00.jlab.org.
Finish installation process.

* fix files ''/etc/passwd'', ''/etc/shadow'' and ''/etc/group'' adding clasrun etc (see examples on another machines).

'''NOTE''': if machine has multiple network ports, Linux may not assign them properly to specified IP names and addresses. If problem occures, open network GUI and delete all existing records. After that, click ''New'' and pick hadrware port you want to configure from the list of available ports (tricky part is to know which RJ-45 connector corresponds to which port ..). Configure and activate it, make sure it works. Repeat for other ports. Results will be stored in directory ''/etc/sysconfig/network-scripts'', file names will be ''ifcfg-eth0'', ''ifcfg-eth1'' etc. If modifying those files manually, restart network by ''/etc/init.d/network restart''. Finally, set routing, for example for ''clonmon'' command ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
Run following commands:
/sbin/route add -net 129.57.160.0 netmask 255.255.255.0 gw 129.57.160.5 dev eth1
/sbin/route add -net 129.57.68.0 netmask 255.255.255.0 gw 129.57.68.26 dev eth3
/sbin/route add -net 129.57.69.0 netmask 255.255.255.0 gw 129.57.69.206 dev dev5937
/sbin/route add -net 129.57.64.0 netmask 255.255.255.0 gw 129.57.64.57 dev eth0
Now ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 129.57.160.5 255.255.255.0 UG 0 0 0 eth1
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 129.57.68.26 255.255.255.0 UG 0 0 0 eth3
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 129.57.69.206 255.255.255.0 UG 0 0 0 dev5937
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 129.57.64.57 255.255.255.0 UG 0 0 0 eth0
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
In that example automount will do configured using ''clonmon-daq1'' interface, because default ''clonmon'' interface is on external subnet. To make that routing table permanent (retore it after reboot) I tried to add four files with following contents to the ''/etc/sysconfig/network-scripts'' directory:
route-eth1:
GATEWAY0=129.57.160.5
NETMASK0=255.255.255.0
ADDRESS0=129.57.160.0
route-eth3:
GATEWAY0=129.57.68.26
NETMASK0=255.255.255.0
ADDRESS0=129.57.68.0
route-dev5937:
GATEWAY0=129.57.69.206
NETMASK0=255.255.255.0
ADDRESS0=129.57.69.0
route-eth0:
GATEWAY0=129.57.64.57
NETMASK0=255.255.255.0
ADDRESS0=129.57.64.0
It did not worked. Then I added four ''/sbin/route add ..'' lines to ''/etc/rc.local'' script, and it worked.

From now on you can use remote 'ssh' connection.

* To configure your system to use the patch server, issue the following commands as root:
# mount jlabsite:/site /mnt
# /mnt/CC/linux/satellite-connect --patchall
The script will prompt you for an activation key, but if you don't know what this is, just hit ENTER and it will use a sensible default. Depending on how many patches need to be applied to your system to bring it up to the current level, this script may take a very long time to run. When it finishes, you should reboot your machine to make the new patches take effect.

To install updates later run ''up2date -uf'' as ''root''.

Configure [[SSH]].

* Proceed with [[Linux Customization on CLON Cluster]] if applicable.

To boot Linux in single user mode (no graphics), add ''single'' to the end of boot line during boot process.

== '''background info''' ==

'''Add startup script'''

Create script in ''/etc/init.d/'' directory (use existing scripts as example). Must have a line like
# chkconfig: - 91 09
which specifies start and stop order. Run commands
chkconfig --add <scriptname>
chkconfig --level 3 <scriptname> on
for every level you want that script to be executed (usualy 3 and/or 4 and/or 5). Check if it os done using command
chkconfig --list | grep <scriptname>

'''xxx'''

You can choose to download the RHEL operating system directly from the Red Hat Web site and not receive a media kit from HP containing the software. This scenario occurs when the media option AJR is deselected from the order. (The media kit option is always selected by default. )

It is necessary to register at the Red Hat Web site prior to download. Registration requires the activation code that each customer receives from HP when ordering either RHEL.

You can download RHEL for each available platform as four CD ISO images or one DVD ISO image.

Use the following procedure to download RHEL and create the installation media:

1.

Register and log in at the following Red Hat Web site:

www.redhat.com/rhn
2.

Click on channels and then select Red Hat Enterprise Linux ES (v.4 for 64–bit Intel Itanium).
3.

Select Downloads and then download the ISO images of install, compatibility and source disks

Files with ia64 in the name are for the Itanium platform.
4.

Create the CDs or a DVD from the ISO images.

IMPORTANT: Create the CDs or DVD using the contents of the ISO images. Do not create the CDs or DVD by burning the .iso files themselves to CD or DVD. For example, if you are using K3b to burn a CD, click Tools>CD>Burn CD Image, select the .iso image, then click Burn.

'''Bootup scripts''' for example for level 5 execution (multiuser with X):

cp <script-file> /etc/init.d/
chmod +x /etc/init.d/<script-file>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/S50<scriptfile>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/K50<scriptfile>

'''Changing hostname/IP address'''

Changing hostname on RHEL
1. Change the HOSTNAME line in /etc/sysconfig/network
2. Change the hostname (FQDN and alias) in /etc/hosts
3. Run '/bin/hostname new_hostname' for the hostname change to take effect immediately.
4. Run '/sbin/service syslog restart' for syslog to log using the new hostname.
A reboot is not required to change the system hostname.

IP address: You have to change the IP address entry in
/etc/sysconfig/network-scripts/ifcfg-eth0.

Linux Boot Server

2026-03-15T16:59:13Z

Boiarino: /* Setting of the Linux server to be used for PXE and EFI boot of the VME controllers */

'''Main boot server is clon01'''.

'''TO DO''' Check UBOOT commands to erase existing environment variables:

env default -a -f
env erase

== '''VTP CentOS boot''' ==

UBOOT (example for gem0vtp):

Zynq> printenv
autoload=no
baudrate=115200
bootcmd=run tftpboot
bootdelay=3
bootro=setenv bootargs ${bootargs} ro
bootrw=setenv bootargs ${bootargs} rw
devicetree_image=devicetree.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=ce:ba:f0:03:xx:xx
extargs=setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
initrd_high=0x20000000
kernel_image=uImage-4.4.0-xilinx-00004-g8d932a
kernel_load_address=0x2080000
load_devicetree=if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;
load_dhcp=if dhcp; then echo OK; else echo FAILED; reset; fi;
load_kernel=if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;
modeboot=sdboot
netmask=255.255.255.0
nfsargs=setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3
rootpath=/vol/diskless/CentOS7/armv7/root
rootserverip=129.57.167.152
serverip=129.57.167.4
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftp_boot_string=echo TFTPing Image to RAM
tftpboot=run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftpboot_rw=dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftppath=linux-install/CentOS7-armv7-Diskless

Environment size: 1603/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it by groups as shown, otherwise it may place some bull...):

setenv bootargs
setenv gatewayip
setenv ipaddr
setenv kernel_path
setenv nfsip
setenv nfsroot
setenv sdboot
setenv sdboot_no
setenv setboot
setenv tftpboot_no

setenv autoload 'no'
setenv baudrate '115200'
setenv bootcmd 'run tftpboot'
setenv bootdelay '3'
setenv bootro 'setenv bootargs ${bootargs} ro'
setenv bootrw 'setenv bootargs ${bootargs} rw'
setenv devicetree_image 'devicetree.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'ce:ba:f0:03:00:d1'
setenv extargs 'setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv initrd_high '0x20000000'
setenv kernel_image 'uImage-4.4.0-xilinx-00004-g8d932a'
setenv kernel_load_address '0x2080000'

setenv load_devicetree 'if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;'
setenv load_dhcp 'if dhcp; then echo OK; else echo FAILED; reset; fi;'
setenv load_kernel 'if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3'
setenv rootpath '/vol/diskless/CentOS7/armv7/root'
setenv rootserverip '129.57.167.152'
setenv serverip '129.57.167.4'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftp_boot_string 'echo TFTPing Image to RAM'

setenv tftpboot 'run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftpboot_rw 'dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftppath 'linux-install/CentOS7-armv7-Diskless'

After that, customize following:

ethaddr

'''tftpboot server settings'''

/tftpboot/linux-install/CentOS7-armv7-Diskless/uImage-4.4.0-xilinx-00004-g8d932a
uImage-4.4.0-xilinx-00003-gdf4da5
zynq-jlab-vtp.dtb_fixed_uio
devicetree.dtb -> zynq-jlab-vtp.dtb_fixed_uio

By default, root filesystem will be read-only. To make it 'rw', stop booting process on serial connection, type ''run tftpboot_rw'' and push <enter>. After that you can ssh as root and run ''yum'' etc.

== '''VTP Archlinux boot''' ==

Zynq> printenv
autoload=no
baudrate=115200
bootargs=console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
bootcmd=run $modeboot
bootdelay=3
devicetree_image=zynq-jlab-vtp.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=CE:BA:F0:03:00:02
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
gatewayip=129.57.68.100
initrd_high=0x20000000
ipaddr=129.57.68.38
kernel_image=uImage
kernel_load_address=0x2080000
kernel_path=linux-install/ArchLinux-armv71
modeboot=sdboot
netmask=255.255.255.0
nfsargs=vers=3,tcp,timeo=600,retrans=10
nfsip=129.57.167.152
nfsroot=/vol/diskless/ArchLinux/armv7-devel/root
sdboot=run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000
sdboot_no=if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi
serverip=129.57.167.4
setboot=setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftpboot_no=echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};

Environment size: 1828/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it line-by-line, otherwise it may place some bull...):

setenv autoload 'no'
setenv baudrate '115200'
setenv bootargs 'console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv bootcmd 'run $modeboot'
setenv bootdelay '3'
setenv devicetree_image 'zynq-jlab-vtp.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'CE:BA:F0:03:00:02'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv gatewayip '129.57.68.100'
setenv initrd_high '0x20000000'
setenv ipaddr '129.57.68.38'
setenv kernel_image 'uImage'
setenv kernel_load_address '0x2080000'
setenv kernel_path 'linux-install/ArchLinux-armv71'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'vers=3,tcp,timeo=600,retrans=10'
setenv nfsip '129.57.167.152'
setenv nfsroot '/vol/diskless/ArchLinux/armv7-devel/root'
setenv sdboot 'run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000'
setenv sdboot_no 'if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi'
setenv serverip '129.57.167.4'
setenv setboot 'setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftpboot_no 'echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};'

After that, customize following:
ethaddr
gatewayip
ipaddr
netmask

== '''Setting of the Linux server to be used for PXE and EFI boot of the VME controllers''' ==

Login to the server as root. Copy two files to the root directory and untar them:
cd /
cp /usr/downloads/tftpboot.tar.gz_clondaq15 tftpboot.tar.gz
cp /usr/downloads/diskless.tar.gz_clondaq15 diskless.tar.gz
gunzip tftpboot.tar.gz
gunzip diskless.tar.gz
tar xvf tftpboot.tar
tar xvf diskless.tar
rm tftpboot.tar diskless.tar

Make sure correct snapshot location in root area ''/diskless/CentOS7/x86_64/root/etc/sysconfig/readonly-root'':

CLIENTSTATE=192.168.10.1:/diskless/CentOS7/x86_64/snapshot

In ''/diskless/CentOS7/x86_64/root'' area, ''/etc/ssh/sshd_config'' must have following setting (to allow remote ssh):

#UsePAM yes

it will be propagated to the controller's snapshot area on the first boot when corresponding ''snapshot/<vme_controller_name>'' directory will be created. Not sure about other settings:

HostbasedAuthentication yes
#HostbasedAuthentication no

IgnoreRhosts no
#IgnoreRhosts yes

PasswordAuthentication yes
#PasswordAuthentication yes
PasswordAuthentication yes

#UsePrivilegeSeparation sandbox # Default for new installations.
UsePrivilegeSeparation sandbox # Default for new installations.

To add or remove VME controllers, modify following files:
/var/named/10.168.192.in-addr.arpa.db
/var/named/clontest.com
/etc/dhcp/dhcpd.conf

restart corresponding services:
systemctl restart dhcpd
systemctl restart named

and check services status:
systemctl status dhcpd
systemctl status named

To set gateway, add
net.ipv4.ip_forward=1
to ''/etc/sysctl.conf'' and execute
sysctl -p

Configure [[NFS]]

Configure [[DHCP server]]

Configure [[DNS server]] ('''NOTE:''' resolv.conf is different for local server !)

Configure [[Tftp]] and [[Tftpboot]]

Configure [[Iptables]]

Do not forget (is it for controllers ?):
chattr +i /etc/resolv.conf

yum install ypbind (????)

'''Configuring snapshot area'''

The list of files and directories which suppose to be in snapshot area (which has RW permissions) should be set in config file ''/diskless/.../snapshot/files'' for CentOS5, or in config file ''/diskless/../root/etc/statetab'' for CentOS7. In particular, ''/et'' has to be added there, and also directory ''/diskless/.../root/et'' should be created.

'''Reboot server, make sure everything is running as expected.'''

== '''Configuring in chroot''' ==

'''NOTE: using ''chroot'' method will allow to run ''yum'', but ''systemctl'' commands will not work. Instead of using ''chroot'', you may boot coontroller with ''rw'' option instead of ''ro''. For VME boot, it can be done by changing ''grub.cnf'', while for VTP boot you have to stop boot proocess using serial connection, and then type ''run tftpboot_rw''.'''

Since root area in VME controllers will be read-only, you cannot ssh to controllers as root and change anything there, only snapshot area can be modified. To make changes in root area, in particular to configure and run ''yum'', ''chroot' command should be used. Login to the boot server as root and do following:

mount -o bind /home /diskless/CentOS7/x86_64/root/home
mount -o bind /usr/local /diskless/CentOS7/x86_64/root/usr/local
mount -o bind /usr/clas12 /diskless/CentOS7/x86_64/root/usr/clas12
chroot /diskless/CentOS7/x86_64/root

After that you will see all root directories as if you login to VME controller, and modifications can be made.

'''Configure yum'''

Add ''multilib_policy=all'' to ''/etc/yum.conf''.

Add (and remove the rest ?) following to ''/etc/yum.repos.d/CentOS-Base.repo'':

[base]
name=CentOS-$releasever - Base
baseurl=http://archive.kernel.org/centos-vault/centos/$releasever/os/$basearch/

Clean yum database:

rm /var/lib/rpm/__db.*

Install following using yum:

yum install motif-devel tcl-devel tk-devel libXpm-devel apr-devel libXaw-devel ncurses-devel libconfig-devel

Install following for ''dbedit'':

yum install tix itcl itk

Install remaining tcl stuff from ''/usr/local/src'', mounted as ''/zzz'' above:

cd /zzz/mysqltcl-3.052
make install
ln -s /usr/lib/mysqltcl-3.052 /usr/lib64/tcl8.5/mysqltcl-3.052

'''NOTE''': Login from console may not work because of file ''/etc/securetty'' permissions, it must be 644.

'''NOTE''': THere is a service PAM, it may prevent login from console if some required services did not start. To work around, comment out some lines in ''/etc/pam.d/system-auth-ac'' file:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
#auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
#auth requisite pam_succeed_if.so uid >= 1000 quiet_success
#auth required pam_deny.so

#account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 1000 quiet
#account required pam_permit.so

password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
#password required pam_deny.so

session optional pam_keyinit.so revoke
#session required pam_limits.so
-session optional pam_systemd.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
#session required pam_unix.so

'''After Linux boot server is ready and operational, VME controllers can be booted. On the first boot, individual ''/diskless/.../snapshot/<controller name>'' directory will be created for each controller. For VME controller specific information see [[VME]]'''

Linux Tricks

2026-03-05T16:20:26Z

Boiarino:

=== Color change when connected remotely ===

'''Problem:''' after opening vnc session to linux machine from macbook laptop, small window pops up asking about some color settings (create color profile etc), and keeps asking for password; none of passwords actually works, and it keeps asking again and again.

'''Fix:''' on linux machine, create file ''/etc/polkit-1/localauthority/50-local.d/45-allow-colord.pkla'' with permissions 644 and following contents:
[Allow Colord all Users]
Identity=unix-user:*
Action=org.freedesktop.color-manager.create-device;org.freedesktop.color-manager.create-profile;org.freedesktop.color-manager.delete-device;org.freedesktop.color-manager.delete-profile;org.freedesktop.color-manager.modify-device;org.freedesktop.color-manager.modify-profile
ResultAny=no
ResultInactive=no
ResultActive=yes

=== Enable systemd log persistency (remember all reboots, not only last one) ===

Run ''emacs /etc/systemd/journald.conf'', set

Storage=persistent

Do following:

mkdir /var/log/journal
systemd-tmpfiles --create --prefix /var/log/journal
systemctl restart systemd-journald

'''Also, see [[Gnome]] if using GNOME desktop.'''

Gnome

2026-03-05T16:19:12Z

Boiarino:

When switching workspaces, only first screen switches. To make all screens switched:

'''Using command line''' (DOES NOT WORK ON RHEL9...)

gsettings set org.gnome.shell.extensions.classic-overrides workspaces-only-on-primary false

Graphical tool "dconf-editor" can be used as well. Expand the path "org.gnome.shell.extensions.classic-overrides" and highlight the setting for "workspaces-only-on-primary". Turn off "Use default value" then click on False in the "Custom value" setting. Click the "Apply" button at the top.

To change the number of workspaces: "org.gnome.desktop.wm.preferences.num-workspaces". Set "Use default value" = OFF, than type the value you want.

'''Using GUI'''

yum install gnome-tweaks

Go to '''Applications->Utilities->Tweaks->Workspaces'''

Click '''Workspaces span displays'''

Gnome

2026-03-05T16:18:44Z

Boiarino:

When switching workspaces, only first screen switches. To make all screens switched:

'''DOES NOT WORK ON RHEL9'''

gsettings set org.gnome.shell.extensions.classic-overrides workspaces-only-on-primary false

Graphical tool "dconf-editor" can be used as well. Expand the path "org.gnome.shell.extensions.classic-overrides" and highlight the setting for "workspaces-only-on-primary". Turn off "Use default value" then click on False in the "Custom value" setting. Click the "Apply" button at the top.

To change the number of workspaces: "org.gnome.desktop.wm.preferences.num-workspaces". Set "Use default value" = OFF, than type the value you want.

'''Using GUI'''

yum install gnome-tweaks

Go to '''Applications->Utilities->Tweaks->Workspaces'''

Click '''Workspaces span displays'''

EtherLite32

2026-02-12T22:38:16Z

Boiarino:

The number of EtherLite32 terminal servers are installed to provide serial connections to ROCs, IOCs, network switches and other devices.

'''NOTE:''' if ''softioc_console'' in use, tsconnect command will not work, use following command to communicate to Etherlite ports:

'softioc_console -p' shows list of device names
'softioc_console <device_name>' connects to the device

To exit connection, do '^]' to jump to telnet prompt and type 'quit' to exit.

While in session, ^T will toggle auto restart ON/OFF. Normally it is ON. If OFF, then ^X will kill connection and do not restart it, then tsconnect method can be used.

To exit ''tsconnect'', type ~x.

== RHEL9 ==

Install Realport software:

su
cd /usr/local/src
cp /usr/downloads/40002086_AD.tgz .
tar -xzvf 40002086_AD.tgz
rm -f 40002086_AD.tgz
cd dgrp-1.9
./configure
make all
make install
make postinstall

At that point service should be started by legacy startup script ''/etc/rc.d/init.d/dgrp_daemon'', check it with command

systemctl status dgrp

'''NOTE:''' if after installation you see
[root@clondb2 ~]# insmod /lib/modules/5.14.0-611.13.1.el9_7.x86_64/misc/dgrp.ko
insmod: ERROR: could not insert module /lib/modules/5.14.0-611.13.1.el9_7.x86_64/misc/dgrp.ko: Key was rejected by service

then most likely SecureBoot is enabled in BIOS. It can be check by command:
[root@clondb2 dgrp-1.9]# mokutil --sb-state
SecureBoot enabled

In that case, reboot machine, goto BIOS and disable 'SecureBoot' in UEFI setup.

'''DID NOT DO IT''' Alternatively, you can generate keys and register module:

tail -c 100 $(modinfo -n dgrp) | od -c # This should now report "Module signature appended"; if not, do following:
cd /root
openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -days 36500 -subj "/CN=My_Own_MOK/"
mokutil --list-enrolled | grep "Subject.*CN"
mokutil --import MOK.der
reboot #have to watch screen and do something !!!???
mokutil --list-enrolled | grep "Subject.*CN"
/usr/src/kernels/$(uname -r)/scripts/sign-file sha256 ./MOK.priv ./MOK.der $(modinfo -n dgrp)
tail -c 100 $(modinfo -n dgrp) | od -c # This should now report "Module signature appended".

Wrap legacy startup scripts with modern one. Create systemd config file ''/etc/systemd/system/dgrp.service'' with following contents:

[Unit]
Description=Digi RealPort Daemon
After=network.target syslog.target
# Add After= to specify any services that must be running before dgrp starts

[Service]
Type=forking
# Use 'forking' because dgrp_daemon typically runs in the background as a daemon
ExecStart=/etc/rc.d/init.d/dgrp_daemon start
ExecStop=/etc/rc.d/init.d/dgrp_daemon stop
# Ensure the paths above are absolute paths to your dgrp start/stop scripts/executables
###sergey: who create that file ??? PIDFile=/var/run/dgrp_daemon.pid
# Specify the PID file location if the daemon creates one
Restart=on-failure
# Restarts the service if it fails

[Install]
WantedBy=multi-user.target
# This ensures the service is part of the normal multi-user boot process

Reload and restart:

systemctl daemon-reload
systemctl enable dgrp
systemctl start dgrp
systemctl status dgrp

Create file ''/etc/sudoers.d/onliners'' and add following line (if file and line exist, add to existing line):

%onliners ALL=NOPASSWD:/usr/bin/dinc,NOPASSWD:/usr/bin/ditty,NOPASSWD:/sbin/fuser,NOPASSWD:/usr/clas12/release/pro/epics/tools/caenhvReset/caenhvReset

With ''onliners'' in the sudo, command ''tsconnect'' will work without password for the user ''clasrun'' who is in ''onliners'' group. Command ''tsconnect'' is in ''$CODA/src/scripts/'' directory, and config file for ''tsconnect'' is ''$CLON_PARMS/tsconnect/tsconnect.conf''.

Now you can register Digi devices (Etherlite32 etc) using command ''dgrp_gui'', one by one. Alternatively, you can create file ''/etc/dgrp.backing.store'' by hands and restart service by command

systemctl restart dgrp

This is an example of the file ''/etc/dgrp.backing.store'' as it was in January 2026:

#
# Format:
#
# ID IP PortCount SpeedString IPPort Mode Owner Group Encrypt EncryptPort IPFamily TCPUserTimeout AuthMethod Password
#
# If any of the last 10 options should use the default, the
# string "default" appears instead.
#
01 etherlite11 32 auto default default default default never default default default none
02 etherlite13 32 auto default default default default never default default default none
03 etherlite3 32 auto default default default default never default default default none
04 etherlite12 32 auto default default default default never default default default none
05 etherlite2 32 auto default default default default never default default default none
06 etherlite5 32 auto default default default default never default default default none
07 etherlite14 32 auto default default default default never default default default none
08 etherlite15 32 auto default default default default never default default default none
09 etherlite4 32 auto default default default default never default default default none
0a etherlite9 32 auto default default default default never default default default none
0d etherlite10 32 auto default default default default never default default default none
0e etherlite17 32 auto default default default default never default default default none
11 rs422a 2 auto default default default default never default default default none
14 rs422e 2 auto default default default default never default default default none
15 rs422c 2 auto default default default default never default default default none

== RHEL7 ==

su
cd /usr/local/src
cp /usr/downloads/realport1.9-36_81000137_X.tgz .
tar xvfz realport1.9-36_81000137_X.tgz
cd dgrp-1.9
./configure
make all
make install
make postinstall

'''NOTE''': to fix compiling error on RHEL7, add following to the file ''driver/build/include/dgrp_net_ops.h'':

#define TTY_CLOSING (7)

* add following line to ''/etc/sudoers'':

%onliners ALL=NOPASSWD:/usr/bin/dinc,NOPASSWD:/usr/bin/ditty,NOPASSWD:/sbin/fuser

* Run ''/usr/bin/dgrp/config/dgrp_gui'' to add terminal servers to the list of active devices: click 'Add' and fill in 'RealPort ID'. 'IP Address or Name' and 'Number of Ports' fields, for example type '0d', 'etherlite10', '32'. Click 'Commit', 'Run it' and 'Exit'. New line with shows up, status must be 'Ready' if terminal server is active.

* Run ''/etc/init.d/dgrp_daemon status'' to see daemons running. To make it run on startup use ''chkconfig''.

'''NOTES FROM DIGI''':

* This package includes several support utilites:
ditty - an stty replacement.
dinc - a cu/tip replacement.

* There is a package of configuration tools provided that are, by default, located in the /usr/bin/dgrp/config directory. There are scripts for using the command line to add and remove products, as well as the RealPort Manager. This is essentially a graphical front end for the scripts and a visual tool for monitoring individual serial ports.

* The software package includes two startup scripts in either the ''/etc/rc.d/init.d'' or ''/etc/init.d'' directories named "dgrp_daemon" and "dgrp_ditty". These scripts will be executed at startup automatically if the "chkconfig" tool is present on the system during the post installation phase of the driver install. Otherwise, these scripts must be manually added to the system startup.

* To load and initialize the driver by hand, execute "dgrp_daemon start". To stop the driver daemons and unload the driver, execute "dgrp_daemon stop" followed by "rmmod dgrp".

'''NOTE''': if terminal server does not boot on power recycle, use command 'dgipserv' as described below.

'''NOTE''': 'tsconnect' and 'dflush' scripts from $CODA are used to access devices, config file is $CLON_PARMS/tsconnect/tsconnect.conf, command is 'tsconnect <dev>'.

== Solaris era info ==

'''Software'''

RealPort software must be installed to communicate with EtherLite terminal servers. Do following as 'root' (tar file contains files downloaded from http://www.digi.com):
cd /usr/local/src
cp ../downloads/EtherLite32.tar .
tar xvf EtherLite32.tar
rm EtherLite32.tar
cd EtherLite32
pkgadd -d realport_2.8.3.pkg
Last command will initiate following dialog and output (empty lines removed):
The following packages are available:
1 realport Digi RealPort Driver
(sparc/i386) 2.8.3
Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]:
Processing package instance <realport> from </usr/local/src/EtherLite32/realport_2.8.3.pkg>
Digi RealPort Driver(sparc/i386) 2.8.3
--------------------------------------------------------------------
Copyright (c) 1996-2005 Digi International Inc. All Rights Reserved.
This software contains proprietary and confidential information
of Digi International Inc. By accepting transfer of this copy,
Recipient agrees to retain this software in confidence, to prevent
disclosure to others, and to make no use of this software other
than that for which it was delivered. This is an unpublished
copyrighted work of Digi International Inc. Except as permitted
by federal law, 17 USC 117, copying is strictly prohibited.
--------------------------------------------------------------------
Using </> as the package base directory.
## Processing package information.
## Processing system information.
WARNING: setting mode of </dev/dpr> to default mode (755)
WARNING: setting mode of </dev/dty> to default mode (755)
WARNING: setting mode of </opt/realport> to default mode (755)
WARNING: setting mode of </opt/realport/amd64> to default mode (755)
WARNING: setting mode of </opt/realport/i386> to default mode (755)
WARNING: setting mode of </opt/realport/include> to default mode (755)
WARNING: setting mode of </opt/realport/sparc32> to default mode (755)
WARNING: setting mode of </opt/realport/sparc64> to default mode (755)
WARNING: setting mode of </opt/realport/utils> to default mode (755)
9 package pathnames are already properly installed.
## Verifying disk space requirements.
## Checking for conflicts with packages already installed.
## Checking for setuid/setgid programs.
This package contains scripts which will be executed with super-user
permission during the process of installing this package.
Do you want to continue with the installation of <realport> [y,n,?] y
Installing Digi RealPort Driver as <realport>
## Installing part 1 of 1.
/etc/rc2.d/S76realport <symbolic link>
/opt/realport/S76realport
/opt/realport/amd64/dgipserv
/opt/realport/amd64/digi_realport
/opt/realport/amd64/ditty
/opt/realport/amd64/dpa-rp
/opt/realport/amd64/ncx_debug
/opt/realport/amd64/ncx_devices_exist
/opt/realport/amd64/ncx_make_links
/opt/realport/amd64/ncx_mknod
/opt/realport/amd64/ncxd.Z
/opt/realport/dgipserv.1
/opt/realport/ditty
/opt/realport/dpa-rp
/opt/realport/drpadmin
/opt/realport/i386/dgipserv
/opt/realport/i386/digi_realport
/opt/realport/i386/ditty
/opt/realport/i386/dpa-rp
/opt/realport/i386/ncx_debug
/opt/realport/i386/ncx_devices_exist
/opt/realport/i386/ncx_make_links
/opt/realport/i386/ncx_mknod
/opt/realport/i386/ncxd.Z
/opt/realport/include/stdigi.h
/opt/realport/install_notes.txt
/opt/realport/ncxd
/opt/realport/release_notes.txt
/opt/realport/sparc32/dgipserv
/opt/realport/sparc32/digi_realport
/opt/realport/sparc32/ditty
/opt/realport/sparc32/dpa-rp
/opt/realport/sparc32/ncx_debug
/opt/realport/sparc32/ncx_devices_exist
/opt/realport/sparc32/ncx_make_links
/opt/realport/sparc32/ncx_mknod
/opt/realport/sparc32/ncxd.Z
/opt/realport/sparc64/dgipserv
/opt/realport/sparc64/digi_realport
/opt/realport/sparc64/ditty
/opt/realport/sparc64/dpa-rp
/opt/realport/sparc64/ncx_debug
/opt/realport/sparc64/ncx_devices_exist
/opt/realport/sparc64/ncx_make_links
/opt/realport/sparc64/ncx_mknod
/opt/realport/sparc64/ncxd.Z
/opt/realport/utils/dgipserv
/opt/realport/utils/ncx_debug
/opt/realport/utils/ncx_devices_exist
/opt/realport/utils/ncx_make_links
/opt/realport/utils/ncx_mknod
/opt/realport/utils/ncx_verify_conf
/usr/sbin/dgipserv <symbolic link>
/usr/sbin/ditty <symbolic link>
/usr/sbin/dpa-rp <symbolic link>
/usr/sbin/drpadmin <symbolic link>
/usr/share/man/man1/dgipserv.1
/usr/share/man/man1/ditty.1
/usr/share/man/man7/realport.7
[ verifying class <none> ]
## Executing postinstall script.
Using / as package base directory...
Unloading previous versions of drivers, if any.... Done
Loading new drivers...Nov 22 14:53:37 clon10 digi_realport: Digi RealPort Driver (Instance 0) Ver 2.8.3
Done
Run the drpadmin tool to add realport devices
Installation of <realport> was successful.

Copy several files to ''/opt/realport'':
cp dflush /opt/realport
cp dinc /opt/realport

'''NOTE''': 'dinc' was copied from old CDsts driver, it seems digi does not have it any more, but we found it useful: 'tsconnect' will use it. '''IMPORTANT''': make sure that 'dinc' is '-rwsr-xr-x', it can be set by 'chmod 4755 dinc'; otherwise 'Permission denied' message will be generated by ''tsconnect'' (something related to the ''uucp'').

To configure EtherLite devices, run 'drpadmin' command and specify devices one by one, for example:
clon10:EtherLite32> /opt/realport/drpadmin
Please select an option (a)dd (d)elete (s)how (r)eset (q)uit : a
Enter the IP address or network name of the unit: 129.57.167.208
Enter the number of ports: 32
Enter the tty device ID (only 2 chars allowed) : 0
Would you like this RealPort session to be encrypted?
NOTE: Not all RealPort products support encrypted RealPort sessions.
Please check your RealPort product's firmware release notes
or product literature before selecting "always".
If in doubt, select "never".
(always/never) : (never):
The following device will be configured,
0 129.57.167.208 32 0 secure (never)
Is this correct (y to add or x to abort) ? y
Please select an option (a)dd (d)elete (s)how (r)eset (q)uit : q
clon10:EtherLite32>

Results will be saved in ''/opt/realport/drp.conf'' file. After all devices configured this file will contains something like following:
clon10:realport> more drp.conf
0 129.57.167.208 32 0 771 never 1027
1 129.57.167.215 2 1 771 never 1027
2 129.57.167.209 32 2 771 never 1027
3 129.57.167.216 2 3 771 never 1027
4 129.57.167.217 2 4 771 never 1027
5 129.57.167.218 2 5 771 never 1027
6 129.57.167.219 2 6 771 never 1027
7 129.57.160.20 2 7 771 never 1027
8 129.57.167.210 32 8 771 never 1027
9 129.57.167.211 32 9 771 never 1027
10 129.57.160.50 2 a 771 never 1027
11 129.57.68.95 32 b 771 never 1027
12 129.57.167.212 32 c 771 never 1027
13 129.57.167.220 32 d 771 never 1027
14 129.57.167.228 32 e 771 never 1027
15 129.57.167.229 32 f 771 never 1027
16 129.57.167.204 32 10 771 never 1027
17 129.57.86.201 32 11 771 never 1027

If adding new device, repeat the procedure on clon00, clon10 and clon20.

Now copy our clon script into some directory included into PATH, for example:
cp tsconnect /usr/local/bin

Copy ''tsconnect.conf'' from previous location to ''/opt/realport''.

Include command ''/opt/realport/dflush'' into ''sudoers'' file.

Now everything should be ready. Try to type something like
tsconnect croctest1
and see if communication established. To end session, type '~' and 'x'.

'''Booting EtherLite devices'''

EtherLite terminal server is using [[Bootp]]. Process controlled by ''/etc/bootptab'' file, example is here:

# @(#) $Header: /users/hpnp/odyssey/repository/examples/bootptab,v 1.2 1997/06/26 21:23:33 hpnp Exp $
# Example /etc/bootptab: database for bootp server (/etc/bootpd).
# Blank lines and lines beginning with '#' are ignored.
#
# Legend:
#
# first field -- hostname
# (may be full domain name)
#
# hd -- home directory
# bf -- bootfile
# cs -- cookie servers
# ds -- domain name servers
# gw -- gateways
# ha -- hardware address
# ht -- hardware type
# im -- impress servers
# ip -- host IP address
# lg -- log servers
# lp -- LPR servers
# ns -- IEN-116 name servers
# rl -- resource location protocol servers
# sm -- subnet mask
# tc -- template host (points to similar host entry)
# to -- time offset (seconds)
# ts -- time servers
#
# Be careful about including backslashes where they're needed. Weird (bad)
# things can happen when a backslash is omitted where one is intended.
#
#peripheral1:\
# :hn:ht=ether:vm=rfc1048:\
# :ha=08000903212F:\
# :ip=190.40.101.22:\
# :sm=255.255.255.0:\
# :gw=190.40.101.1:\
# :lg=190.40.101.3:\
# :T144="hpnp/peripheral1.cfg":
########## Etherlite 32 RS232, Forward Carriage 1st Level, etherlite1
els0:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e7008569:ip=129.57.167.208:
### bf=el32_realport.bin:
########## Etherlite 2 RS422 (EIA422), Forward Carriage 2nd Level, rs422a (reset1)
els1:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e721288b:ip=129.57.167.215:
### bf=el2_realport.bin:
########## Etherlite 32 RS232, Space Frame 1st Level South, etherlite2
els2:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e7213b9f:ip=129.57.167.209:
### bf=el32_realport.bin:
########## Etherlite 2 RS422 (EIA422), South Claim Shelf, rs422b (reset3)
els3:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e72141bd:ip=129.57.167.216:
### bf=el2_realport.bin:
########## Etherlite 2 RS422 (EIA422), Space Frame 1st Level South, rs422c (reset5)
els4:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e72141b9:ip=129.57.167.217:
### bf=el2_realport.bin:
########## Etherlite 2 RS422 (EIA422), Space Frame 1st Level North, rs422d (reset2)
els5:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e72141ae:ip=129.57.167.218:
### bf=el2_realport.bin:
########## Etherlite 2 RS422 (EIA422), Space Frame 2nd Level North (behind dc11), rs422e (reset4)
els6:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e72141c4:ip=129.57.167.219:
### bf=el2_realport.bin:
########## Etherlite 2 RS422 (EIA422), Hall B Gas Shed, rs422f (reset6)
els7:sm=255.255.255.0:gw=129.57.160.1:ht=ether:ha=00a0e72141b1:ip=129.57.160.20:
### bf=el2_realport.bin:
########## Etherlite 32 RS232, Space Frame 1st Level North, etherlite3
els8:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e7214019:ip=129.57.167.210:
### bf=el32_realport.bin:
########## Etherlite 32 RS232, South Claim Shellf, etherlite4
els9:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e7214003:ip=129.57.167.211:
### bf=el32_realport.bin:
########## Etherlite 2 RS232, Hall B Gas Shed (2-port !), etherlite8 (clasgas)
elsa:sm=255.255.255.0:gw=129.57.160.1:ht=ether:ha=00a0e7214e24:ip=129.57.160.50:
### bf=el2_realport.bin:
########## Etherlite 32 RS232, Counting Room, etherlite9
elsb:sm=255.255.255.0:gw=129.57.68.100:ht=ethernet:ha=00a0e72331b2:ip=129.57.68.95:
### bf=el32_realport.bin:
########## Etherlite 32 RS232, Forward Carriage 1st Level, etherlite5
elsc:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e721402e:ip=129.57.167.212:
### bf=el32_realport.bin:
########## Etherlite 32 RS232, Pie Tower, etherlite10
elsd:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e721401a:ip=129.57.167.220:
### bf=el32_realport.bin:
########## Etherlite 32 RS232, Forward Carriage, 2nd Level, etherlite11
else:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e723764c:ip=129.57.167.228:
### bf=el32_realport.bin:
########## Etherlite 32 RS232, ... , etherlite12
elsf:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e7237a08:ip=129.57.167.229:
### bf=el32_realport.bin:
########## Etherlite 32 RS232, ... , etherlite13
elsg:sm=255.255.255.0:gw=129.57.167.99:ht=ether:ha=00a0e7237a8f:ip=129.57.167.204:
### bf=el32_realport.bin:
#

Every terminal server has two lines in ''/etc/bootptab'' file. Normally on power recycle terminal server will obtain IP address and related information from ''/etc/bootptab'' file. Terminal server remember firmware, so only first line must be uncommented. If want to upgrade firmware, new firmware file must be placed in ''/tftpboot'', backslash have to be placed at the end of the first line, and second line must be uncommented.

'''Wiring''' (old info, maybe uncorrect, see [[Wiring]] for recent info)

The terminal server cables are cat 5 cables with 4 twisted pairs of conductors. Each conductor is fed into an RJ45 connector, which is numbered from right to left, looking at the front of the plug with the tab down. Using Hall B's convention, this table describes which wire colors should be fed to which RJ45 conductors at either end of the connection. The wiring will be different at the terminal server and the device. This wiring scheme will allow a connection to be made directly to a Motorola computer with an RJ45 console connector. For devices with a DSUB connector, there are converters available at the lab, and they rely on this wiring configuration as well.
|Server Wire Color|RJ45 Pin|Device Wire Color|Signal (Server end)|
|Brown | 1 | Orange | RTS |
|Blue | 2 | Orange Stripe | DSR |
|Brown Stripe | 3 | Blue | DCD |
|Blue Stripe | 4 | Blue Stripe | !RxD |
|Green | 5 | Green | !TxD |
|Green Stripe | 6 | Green Stripe | SG |
|Orange | 7 | Brown | DTR |
|Orange Stripe | 8 | Brown Stripe | CTS |

'''Other information'''

* To assign IP address to device using 'bootp' (have to disable bootp server first by ''svcadm disable network/bootps/udp'', do not forget to enable it afterwards):
dgipserv -store 00:a0:e7:00:85:69 129.57.167.208
dgipserv -store 00:a0:e7:23:31:b2 129.57.68.95
dgipserv -store 00:a0:e7:23:10:79 129.57.167.251
After running 'dgipserv' command recycle power on terminal server and watch messages, it should set everything and ask you to wait
certain time before terminal server will become active.

* It is possible to 'rlogin' to terminal server, for example:

rlogin 129.57.167.208
EL-32 Terminal Server
?
? ver
Product: EL-32
FW Ver: V6.6
Ethernet: 00:A0:E7:00:85:69
IP: 129.57.167.208
GW IP: 129.57.167.99
SN Mask: 255.255.255.0
Lease: 0xFFFFFFFF
Boot Host: 129.57.167.5
Bootfile: el32.prm
ICMP error (303) getting Bootfile: destination unreachable
?

rlogin 129.57.68.95
? ver
Product: EL-32
FW Ver: V7.9
Ethernet: 00:A0:E7:23:31:B2
IP: 129.57.68.95
GW IP: 129.57.68.100
SN Mask: 255.255.255.0
Lease: 0xFFFFFFFF
Boot Host: 129.57.68.21
Bootfile: el32.prm
TFTP error (2) getting Bootfile: Access violation
?

after boot from clon00
? ver
Product: EL-32
FW Ver: V7.9
Ethernet: 00:A0:E7:23:31:B2
IP: 129.57.68.95
GW IP: 129.57.68.100
SN Mask: 255.255.255.0
Lease: 0xFFFFFFFF
Boot Host: 129.57.68.1
Bootfile: el32.prm
ICMP error (303) getting Bootfile: destination unreachable
? sockets
remote local
remote ip port port state sRTT sMDEV max rtt
--------------- ----- ----- ------------ ------- ------- -------
129.57.167.3 01015 00513 ESTABLISHED 00000ms 00160ms 00112ms
0.0.0.0 00000 10001 LISTEN 00000ms 02880ms 00000ms
?

* boot messages on clon00/clon10 reboot:
...........
Copyright 1983-2003 Sun Microsystems, Inc. All rights reserved.
Digi EtherLite(R)/SCSI Terminal Server(TM) Module Driver R3.015
for 64-bit Solaris 7 and 8 (SPARC) configured.
Digi EL-32 (els0) at IP address 129.57.167.208
Digi EL-2.2 (els1) at IP address 129.57.167.215
Digi EL-32 (els2) at IP address 129.57.167.209
Digi EL-2.2 (els3) at IP address 129.57.167.216
Digi EL-2.2 (els4) at IP address 129.57.167.217
Digi EL-2.2 (els5) at IP address 129.57.167.218
Digi EL-2.2 (els6) at IP address 129.57.167.219
Digi EL-2.2 (els7) at IP address 129.57.160.20
Digi EL-32 (els8) at IP address 129.57.167.210
Digi EL-32 (els9) at IP address 129.57.167.211
Digi EL-2 (elsa) at IP address 129.57.160.50
Digi EL-32 (elsb) at IP address 129.57.68.95
Digi EL-32 (elsc) at IP address 129.57.167.212
VxVM sysboot INFO V-5-2-3244 Starting restore daemon...
VxVM sysboot INFO V-5-2-3445 starting in boot mode...
NOTICE: VxVM vxdmp V-5-0-34 added disk array DISKS, datype = Disk
NOTICE: VxVM vxdmp V-5-0-34 added disk array 508002000005e930, datype = SENA
...........

Linux Installation Procedure

2026-02-12T02:56:39Z

Boiarino: /* Dell servers hardware trick(s) */

== Dell servers hardware trick(s) ==

* '''!!! if BIOS date/time is incorrect, it may prevent redhat subscription and installation to work correctly, set it to correct value !!! (it was not confirmed, problem may be different and was fixed at the same time as time was correctly set) '''

* if BIOS does not remember time setting after power unplugged, battery on motherboard may need to be replaced

* if looks dead, remove the power cords, then held in the on button for 30 seconds; then plug it back in and it may boots up fine - known Dell feature

== ARM (CentsOS7) ==

See [[yum]] for specifics.

yum install xauth wget bzip2 xterm expat-devel libX11-devel libXpm-devel motif-devel mariadb-devel

== RHEL9 (64 bit) - machine under puppet control ==

'''NOTE''': select installation type '''H''', then type '''B'''.

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

Root password will be set by puppet during installation, as well as most other needed settings.

Install useful pachages:
yum install ncdu mysql

'''NOTE''': graphic screen is disabled, run following command as root:
systemctl set-default graphical.target

== RHEL9 (64 bit) - for machine NOT under puppet control ==

'''NOTE''': select installation type '''D''' (not '''S''', otherwise it will not be level 2 server)

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

When installation complete, ssh as authorized user and do following:

sudo yum install emacs
cd /etc
sudo chmod a+rw shadow
sudo emacs shadow

Copy to /etc/shadow root and other needed passwords from another clon machine.

sudo chmod a-rw shadow

After that, type ''su'' to become superuser. All following settings can be done now without typing ''sudo'' every time. You still will not be able to ssh remotely as root - always ssh as authorized user and type ''su'' to become root.

Update /etc/passwd and /etc/group using another clon machine as example.

yum install expat-devel libXaw-devel mysql-devel motif-devel ncurses-devel apr-devel net-snmp-utils
yum install xorg-x11-utils # for xprop/xwininfo/etc creg stuff
yum install s-nail # for /usr/bin/mail
yum install ncdu
yum install libconfig-devel # recent addition for CODA libraries

To be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

update-crypto-policies --set LEGACY

and then probably reboot, not sure.

Somebody mentioned also adding ''RequiredRSASize 1024'' to a config file in ''/etc/ssh/ssh_config.d/'', but I did not do it.

Note: this changes all daemons and system settings and is a bit overkill if you only need to adjust the settings for ssh and sshd.

Exclude (only) sshd from the system-wide cryptographic policy. You opt-out by editing /etc/sysconfig/sshd and uncommenting the line # CRYPTO_POLICY= , (if necessary you can then adjust adjust /etc/ssh/sshd_config and add legacy crypto settings) and restart the ssh daemon.

For the ssh command line client on the RHEL 9 system: you're recommended to edit ˜/.ssh/config and override the modern/secure system wide ssh client defaults by adding a Host entry that adds support for suitable legacy encryption options for that particular host:

# ˜/.ssh/config

Host rhel6.example.com
KexAlgorithms +diffie-hellman-group14-sha1
MACs +hmac-sha1
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa

Prepare auto-mounting directories:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mv work work.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

== RHEL8 (64 bit) ==

'''NOTE:''' to boot from USB stick, insert USB stick, turn machine ON holding F2, and in BIOS Boot Configuration, set Enable Security Boot to OFF, save and exit, holding F2. When in BIOS again, in Boot Configuration make ''UEFI PHY USB ...'' first in boot sequence, local hard drive second, disable all other boot options, save and exit. Do NOT hold F2, Linux installation from USB stick will start. '''IMPORTANT:''' when asked about D/S options (very first question in installation process), '''REMOVE USB STICK BEFORE ANSWERING QUESTION ABOUT DESKTOP/SERVER''', otherwise it will be destroyed by following installation steps !!!

'''NOTE:''' to disable/enable puppet, do following as root:
puppet agent --disable "temporary"
puppet agent --enable

yum install emacs
yum install xorg-x11-fonts-misc

Move and create some directories in preparation for automounts:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

Add line '''+dir:/etc/auto.master.d''' to ''/etc/auto.master''

Create file ''/etc/auto.master.d/direct.autofs'' with the line '''/- /etc/auto.direct'''

Create file ''/etc/auto.direct'' with the following contents:

# machine-dependent system directories
/apps -rw,bg clonfs1:/vol/apps/RHEL8_x86_64
/usr/local -rw,bg clonfs1:/vol/local/RHEL8_x86_64
# machine-independent system directories
/home -rw,bg clonfs1:/vol/home
#/work -rw,bg clonfs1-old:/vol/work
/scratch -rw,bg clonfs1:/vol/scratch
# machine-independent clas directories
/usr/downloads -rw,bg clonfs1:/vol/downloads
/usr/clas -rw,bg clonfs1:/vol/clas
/usr/clas12 -rw,bg clonfs1:/vol/clas12
# Used for data storage before shipping to tape
#/logs -rw,bg clonfs1-old:/vol/logs

Restart autofs:

service autofs reload
service autofs restart

Remove from the end of the ''/etc/passwd'' line '''+::::::''', and add following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

Update ''/etc/shadow'', adding passwords for local accounts (copy it from another machine).

Add following to ''/etc/group'':

clon:x:383:clascron
onliners:x:9998:abbottd,avakian,baltzell,battagli,brooksw,bruhwel,boiarino,carman,chen,clasboot,clascron,clasrun,cole,cuevas,davidl,danagu,dugger,elton,epics,fklein,gilfoyle,giovanet,golovach,gurjyan,heddle,heyes,hovanes,jacobsg,jenkins,kliv,lcsmith,marki,mestayer,nerses,parkkj,pasyuk,primex,ripani,rossi,saw,staylor,sytnik,taiuti,taylorw,timmer,wooyoung

== RHEL7 (64 bit) ==

Installed using DVD provided by Computer Center, currently RHEL7.3. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation. On DELL servers, hold F2 after power on and go to 'Device Settings' to see mac address. Remember machine memory size as well, will needed when create partitions, find it in 'System BIOS -> Memory Settings'.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* Please enter the hostname of this system: <hostname> <enter>

* What type of system are you building? (D)esktop: <enter>

* Is this a CUE level 1 or CUE level 2 System build (1/2): 2 <enter>

* Please enter the System Admin's CUE username: boiarino <enter>

* Do you want to use the default partitioning scheme (y/n)? n <enter>

* Are you sure you want to use your own partitioning scheme (y/n)? y <enter>

Choose 'Standard Partition' scheme and create following partitions: /boot - 1GB, swap - double memory size, / - the rest of space.

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically.

After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

When machine reboots for the last time, ask Paul Letta to set usual hallb root password. From now on remote root access is possible. Alternatively, user ''boiarino'' can execute most of actions using ''sudo'',
like ''sudo emacs'' for protected files. ''sudo reboot'' etc.

Go to /boot/grub2 and modify file grub.cfg, Linux kernel boot options, adding options ''net.ifnames=0 biosdevname=0'', so your boot string has following section:

..... rhgb net.ifnames=0 biosdevname=0 quiet .....

so whole line looks something like this:

linux16 /vmlinuz-3.10.0-327.18.2.el7.x86_64 root=UUID=b5d1b5ad-e3f6-4db4-8972-aa9c1a91d116 ro vconsole.keymap=us crashkernel=auto vconsole.font=latarcyrheb-sun16 rhgb net.ifnames=0 biosdevname=0 quiet LANG=en_US.UTF-8

Reboot machine, ethernet ports must be named ''eth0'', ''eth1'' etc.

To update manually, use commands ''yum list updates'' and ''yum update''.

'''NOTE:''' add machine to the appropriate '''puppet''' group, it will do all following automatically (hopefully).

'''NOTE:''' on RHEL7.9, RPM EPEL REPO is not enabled by default, which prevents from installing nload, itcl, itk etc. To bring it back, it can be copied it from older machine, for example:

cd /etc/yum.repos.d
scp clondaq7:/etc/yum.repos.d/epel.repo .
cd /etc/pki/rpm-gpg
scp clondaq7:/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 .

Alternatively, following can be used to add repo's:

subscription-manager repos --enable <repo_id>

In particular, following have to be enabled to get nload, xpdf, python-alembic, tix, itcl, itk etc:

subscription-manager repos --enable JLab_EPEL_EPEL_7
subscription-manager repos --enable rhel-7-workstation-optional-rpms

Repo ID's can be obtained by:

subscription-manager repos --list

Installed repo's can be seen by:

yum repolist

'''Yum updates'''

Edit the ''/etc/yum.conf'' file and add the following line to force installation of the 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install xterm mesa-dri-drivers telnet rsh readline-devel net-snmp-utils tigervnc-server tigervnc xpdf nload mariadb-devel libxml2-devel glibc-devel qt-devel python-alembic openssl-devel apr-devel
yum install libconfig-devel # recent addition for CODA libraries

Fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

Do following to be able to compile and run 32-bit apps on 64-bit machine (for compatibility with 32bit applications):

yum install libXpm-devel libXaw-devel motif-devel glibc-devel ncurses-devel readline-devel

Modify file ''/etc/passwd'' adding following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

'''Note''': user-related lines must be removed, like

+boiarino::::::

as well as

+::::::

'''Note''': assumed that following line is in already:

+@ccc::::::

'''Note''': if following line exist, it must be placed in the end, or removed:

+::::::/bin/false

Modify file ''/etc/group'' adding following:

onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik,baltzell,carman
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Modify file ''/etc/shadow'' using an example from another RHEL7 clon machine (clonioc2 etc). Do ''chmod 600 shadow'' before editing and ''chmod 000 shadow'' after.

Make sure file ''/etc/ssh/sshd_config'' has following line uncommented (must be pushed in by CC security scripts):

##PermitUserEnvironment yes

NOT NEEDED, DONE IN THE END OF FILE ALREADY !!! Uncomment following in file ''/etc/ssh/ssh_config'':

##Host *
##ForwardX11 yes

Add line 'export NO_AT_BRIDGE=1' to the file '/etc/environment' to suppress annoying messages like '** (emacs:38714): WARNING **: Couldn't register with accessibility bus: Did not receive a reply.'

If big (>2GB) partition to be formated, do following (for example /dev/sdb):

parted /dev/sdb
(parted) print
(parted) mklabel gpt
(parted) print
mkpart primary 0GB 25855.2GB
(parted) print
(parted) quit

mkfs.xfs /dev/sdb1

then create /data and mount it using ''/etc/fstab'':

/dev/sdb1 /data xfs defaults 1 2

'''NOTE:''' sometimes machine can loose NIS connection, then ssh to it becomes intermittent; if it happens ssh as root (may have to try several times) and run command

ypwhich

to shows NIS server. If it returns nothing check file ''/etc/resolv.conf'', it must have following (as on July 2019):

search jlab.org acc.jlab.org
nameserver 129.57.90.255
nameserver 129.57.32.101

If file is empty or does not contain right info, fix it. After that run command

ypbind

It should fix a problem. Run ''ypwhich'' to make sure.

'''Display Setting:''' if machine is multi-head, goto ''Applications->System Tools->Settings->Devices->Displays'' and arrange displays.

Proceed to the [[Linux Customization on CLON Cluster]].

== RHEL6 (64 bit) ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* ...[D]esktop: [use 's' for server, 'd' for desktop] <enter>

* root password: enter root password

* admin user: boiarino

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically. After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

To make emacs work, install

yum install libotf

Edit the /etc/yum.conf file and add the following line to force installation of teh 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install openmotif-devel xinetd mysql-devel cmake libXpm-devel net-snmp-utils
yum install mesa-libGL-devel mesa-libGLU-devel mesa-libGLw-devel (for OpenGL, needed by ROOT)
yum install libXaw-devel (for xterm)
yum install expat-devel libgcj-devel (for evio/et)

yum install compat-libtermcap (for xterm)
ln -s /lib/libtermcap.so.2 /usr/lib/libtermcap.so
###ln -s /lib64/libtermcap.so.2 /usr/lib64/libtermcap.so

Install following fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

'''NOTE:''' Useful ''yum'' commands:

yum whatprovides libstdc++.so.5 - show which package contains libstdc++.so.5

== RHEL5 ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (email to helpdesk@jlab.org) because it is network-based installation.

Dialog:

* boot: <enter>

* ...[D]esktop: Server (it is ignored, will do Desktop anyway ...)

* root password: enter root password

* system user: <enter>

* manually partition disk: 100MB /boot, 2048 etc MB swap, the rest /.

'''CFENGINE''': there are procesess restoring some system config files (in particular ''/etc/ssh/sshd_config'') in according to the Computer Center - maintained templete. To shut them down: (1) comment out ''cfengine''-related stuff in root cronjobs; (2) do ''/etc/init.d/cfengine stop''; (3) do ''chkconfig cfengine off''. Ask CC (Sherman White, Paul Letta) to fix templete.

Run ''/usr/bin/system-config-authentication'' and set NIS servers list as ''clon00,clon10,nis1''.

Add following in the end of ''/etc/passwd'':
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:6005:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+@ccc::::::

Add following in the end of ''/etc/group'':
onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Create ''/etc/shadow'' files with entries for users clasrun, epics and nagios (copy from another machine).

Install updates: normally all updates should be installed by now, it can be done manually by commands
yum list updates
yum update

Configure [[SSH]].

Install missing packages:
yum install openmotif-devel xinetd mysql-devel cmake

Some additional packages on request (for EPICS):

yum install mc lapack lapack-devel blas blas-devel giflib-devel

Proceed to the [[Linux Customization on CLON Cluster]].

'''PROBLEMS''':

1. /usr/lib/libg2c.so link is missing

FIXED ??? 2. /usr/lib/libXm.so link is missing

3. Created /etc/shadow file for clasrun, epics and nagios

== RHEL4 ==

Get RHEL4 CDs from Paul Letta.

Connect terminal, keyboard and mouse.

Boot from CD1. Follow instructions. When asked, choose following options:

* Choose 'Manually partition with Disk Druid', set /boot to 100MB, then / to 40GB, then swap to 8192MB or at least double memory size. The rest of disk can be set as /space.

* Network: choose manually, type clonpc2.jlab.org; click 'EDIT', deactivate 'Configure using DHCP',
type IP address and netmask (255.255.255.0), click Ok.
Type Gateway (for example 129.57.167.99) and 3 DNS servers (129.57.167.5,129.57.167.14,129.57.32.100).

* Choose 'No firewall'

* Disable 'SELinux'

* Choose 'Customize software packages to be installed', click 'Everything'.

You will be asked to install CD2, CD3 and CD4, then CD1 again.
Then you will be asked to click 'Reboot'. First remove CD, then click 'Reboot'.
You will be asked few more questions. When asked to activate service, choose
'Tell me why I need to register ..' and click 'Next'. Choose 'I can not complete registration ..'
and click 'Next'. You will see 'System user' screen, click 'Use network login..'.
Choose 'Enable NIS support' and click 'Configure NIS'. Type NIS Domain: 'CCCHP' and NIS Server: clon00.jlab.org.
Finish installation process.

* fix files ''/etc/passwd'', ''/etc/shadow'' and ''/etc/group'' adding clasrun etc (see examples on another machines).

'''NOTE''': if machine has multiple network ports, Linux may not assign them properly to specified IP names and addresses. If problem occures, open network GUI and delete all existing records. After that, click ''New'' and pick hadrware port you want to configure from the list of available ports (tricky part is to know which RJ-45 connector corresponds to which port ..). Configure and activate it, make sure it works. Repeat for other ports. Results will be stored in directory ''/etc/sysconfig/network-scripts'', file names will be ''ifcfg-eth0'', ''ifcfg-eth1'' etc. If modifying those files manually, restart network by ''/etc/init.d/network restart''. Finally, set routing, for example for ''clonmon'' command ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
Run following commands:
/sbin/route add -net 129.57.160.0 netmask 255.255.255.0 gw 129.57.160.5 dev eth1
/sbin/route add -net 129.57.68.0 netmask 255.255.255.0 gw 129.57.68.26 dev eth3
/sbin/route add -net 129.57.69.0 netmask 255.255.255.0 gw 129.57.69.206 dev dev5937
/sbin/route add -net 129.57.64.0 netmask 255.255.255.0 gw 129.57.64.57 dev eth0
Now ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 129.57.160.5 255.255.255.0 UG 0 0 0 eth1
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 129.57.68.26 255.255.255.0 UG 0 0 0 eth3
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 129.57.69.206 255.255.255.0 UG 0 0 0 dev5937
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 129.57.64.57 255.255.255.0 UG 0 0 0 eth0
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
In that example automount will do configured using ''clonmon-daq1'' interface, because default ''clonmon'' interface is on external subnet. To make that routing table permanent (retore it after reboot) I tried to add four files with following contents to the ''/etc/sysconfig/network-scripts'' directory:
route-eth1:
GATEWAY0=129.57.160.5
NETMASK0=255.255.255.0
ADDRESS0=129.57.160.0
route-eth3:
GATEWAY0=129.57.68.26
NETMASK0=255.255.255.0
ADDRESS0=129.57.68.0
route-dev5937:
GATEWAY0=129.57.69.206
NETMASK0=255.255.255.0
ADDRESS0=129.57.69.0
route-eth0:
GATEWAY0=129.57.64.57
NETMASK0=255.255.255.0
ADDRESS0=129.57.64.0
It did not worked. Then I added four ''/sbin/route add ..'' lines to ''/etc/rc.local'' script, and it worked.

From now on you can use remote 'ssh' connection.

* To configure your system to use the patch server, issue the following commands as root:
# mount jlabsite:/site /mnt
# /mnt/CC/linux/satellite-connect --patchall
The script will prompt you for an activation key, but if you don't know what this is, just hit ENTER and it will use a sensible default. Depending on how many patches need to be applied to your system to bring it up to the current level, this script may take a very long time to run. When it finishes, you should reboot your machine to make the new patches take effect.

To install updates later run ''up2date -uf'' as ''root''.

Configure [[SSH]].

* Proceed with [[Linux Customization on CLON Cluster]] if applicable.

To boot Linux in single user mode (no graphics), add ''single'' to the end of boot line during boot process.

== '''background info''' ==

'''Add startup script'''

Create script in ''/etc/init.d/'' directory (use existing scripts as example). Must have a line like
# chkconfig: - 91 09
which specifies start and stop order. Run commands
chkconfig --add <scriptname>
chkconfig --level 3 <scriptname> on
for every level you want that script to be executed (usualy 3 and/or 4 and/or 5). Check if it os done using command
chkconfig --list | grep <scriptname>

'''xxx'''

You can choose to download the RHEL operating system directly from the Red Hat Web site and not receive a media kit from HP containing the software. This scenario occurs when the media option AJR is deselected from the order. (The media kit option is always selected by default. )

It is necessary to register at the Red Hat Web site prior to download. Registration requires the activation code that each customer receives from HP when ordering either RHEL.

You can download RHEL for each available platform as four CD ISO images or one DVD ISO image.

Use the following procedure to download RHEL and create the installation media:

1.

Register and log in at the following Red Hat Web site:

www.redhat.com/rhn
2.

Click on channels and then select Red Hat Enterprise Linux ES (v.4 for 64–bit Intel Itanium).
3.

Select Downloads and then download the ISO images of install, compatibility and source disks

Files with ia64 in the name are for the Itanium platform.
4.

Create the CDs or a DVD from the ISO images.

IMPORTANT: Create the CDs or DVD using the contents of the ISO images. Do not create the CDs or DVD by burning the .iso files themselves to CD or DVD. For example, if you are using K3b to burn a CD, click Tools>CD>Burn CD Image, select the .iso image, then click Burn.

'''Bootup scripts''' for example for level 5 execution (multiuser with X):

cp <script-file> /etc/init.d/
chmod +x /etc/init.d/<script-file>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/S50<scriptfile>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/K50<scriptfile>

'''Changing hostname/IP address'''

Changing hostname on RHEL
1. Change the HOSTNAME line in /etc/sysconfig/network
2. Change the hostname (FQDN and alias) in /etc/hosts
3. Run '/bin/hostname new_hostname' for the hostname change to take effect immediately.
4. Run '/sbin/service syslog restart' for syslog to log using the new hostname.
A reboot is not required to change the system hostname.

IP address: You have to change the IP address entry in
/etc/sysconfig/network-scripts/ifcfg-eth0.

Linux Installation Procedure

2026-02-11T05:41:31Z

Boiarino: /* RHEL9 (64 bit) */

== Dell servers hardware trick(s) ==

* '''!!! if BIOS date/time is incorrect, it may prevent redhat subscription and installation to work correctly, set it to correct value !!!'''

* if BIOS does not remember time setting after power unplugged, battery on motherboard may need to be replaced

* if looks dead, remove the power cords, then held in the on button for 30 seconds; then plug it back in and it may boots up fine - known Dell feature

== ARM (CentsOS7) ==

See [[yum]] for specifics.

yum install xauth wget bzip2 xterm expat-devel libX11-devel libXpm-devel motif-devel mariadb-devel

== RHEL9 (64 bit) - machine under puppet control ==

'''NOTE''': select installation type '''H''', then type '''B'''.

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

Root password will be set by puppet during installation, as well as most other needed settings.

Install useful pachages:
yum install ncdu mysql

'''NOTE''': graphic screen is disabled, run following command as root:
systemctl set-default graphical.target

== RHEL9 (64 bit) - for machine NOT under puppet control ==

'''NOTE''': select installation type '''D''' (not '''S''', otherwise it will not be level 2 server)

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

When installation complete, ssh as authorized user and do following:

sudo yum install emacs
cd /etc
sudo chmod a+rw shadow
sudo emacs shadow

Copy to /etc/shadow root and other needed passwords from another clon machine.

sudo chmod a-rw shadow

After that, type ''su'' to become superuser. All following settings can be done now without typing ''sudo'' every time. You still will not be able to ssh remotely as root - always ssh as authorized user and type ''su'' to become root.

Update /etc/passwd and /etc/group using another clon machine as example.

yum install expat-devel libXaw-devel mysql-devel motif-devel ncurses-devel apr-devel net-snmp-utils
yum install xorg-x11-utils # for xprop/xwininfo/etc creg stuff
yum install s-nail # for /usr/bin/mail
yum install ncdu
yum install libconfig-devel # recent addition for CODA libraries

To be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

update-crypto-policies --set LEGACY

and then probably reboot, not sure.

Somebody mentioned also adding ''RequiredRSASize 1024'' to a config file in ''/etc/ssh/ssh_config.d/'', but I did not do it.

Note: this changes all daemons and system settings and is a bit overkill if you only need to adjust the settings for ssh and sshd.

Exclude (only) sshd from the system-wide cryptographic policy. You opt-out by editing /etc/sysconfig/sshd and uncommenting the line # CRYPTO_POLICY= , (if necessary you can then adjust adjust /etc/ssh/sshd_config and add legacy crypto settings) and restart the ssh daemon.

For the ssh command line client on the RHEL 9 system: you're recommended to edit ˜/.ssh/config and override the modern/secure system wide ssh client defaults by adding a Host entry that adds support for suitable legacy encryption options for that particular host:

# ˜/.ssh/config

Host rhel6.example.com
KexAlgorithms +diffie-hellman-group14-sha1
MACs +hmac-sha1
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa

Prepare auto-mounting directories:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mv work work.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

== RHEL8 (64 bit) ==

'''NOTE:''' to boot from USB stick, insert USB stick, turn machine ON holding F2, and in BIOS Boot Configuration, set Enable Security Boot to OFF, save and exit, holding F2. When in BIOS again, in Boot Configuration make ''UEFI PHY USB ...'' first in boot sequence, local hard drive second, disable all other boot options, save and exit. Do NOT hold F2, Linux installation from USB stick will start. '''IMPORTANT:''' when asked about D/S options (very first question in installation process), '''REMOVE USB STICK BEFORE ANSWERING QUESTION ABOUT DESKTOP/SERVER''', otherwise it will be destroyed by following installation steps !!!

'''NOTE:''' to disable/enable puppet, do following as root:
puppet agent --disable "temporary"
puppet agent --enable

yum install emacs
yum install xorg-x11-fonts-misc

Move and create some directories in preparation for automounts:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

Add line '''+dir:/etc/auto.master.d''' to ''/etc/auto.master''

Create file ''/etc/auto.master.d/direct.autofs'' with the line '''/- /etc/auto.direct'''

Create file ''/etc/auto.direct'' with the following contents:

# machine-dependent system directories
/apps -rw,bg clonfs1:/vol/apps/RHEL8_x86_64
/usr/local -rw,bg clonfs1:/vol/local/RHEL8_x86_64
# machine-independent system directories
/home -rw,bg clonfs1:/vol/home
#/work -rw,bg clonfs1-old:/vol/work
/scratch -rw,bg clonfs1:/vol/scratch
# machine-independent clas directories
/usr/downloads -rw,bg clonfs1:/vol/downloads
/usr/clas -rw,bg clonfs1:/vol/clas
/usr/clas12 -rw,bg clonfs1:/vol/clas12
# Used for data storage before shipping to tape
#/logs -rw,bg clonfs1-old:/vol/logs

Restart autofs:

service autofs reload
service autofs restart

Remove from the end of the ''/etc/passwd'' line '''+::::::''', and add following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

Update ''/etc/shadow'', adding passwords for local accounts (copy it from another machine).

Add following to ''/etc/group'':

clon:x:383:clascron
onliners:x:9998:abbottd,avakian,baltzell,battagli,brooksw,bruhwel,boiarino,carman,chen,clasboot,clascron,clasrun,cole,cuevas,davidl,danagu,dugger,elton,epics,fklein,gilfoyle,giovanet,golovach,gurjyan,heddle,heyes,hovanes,jacobsg,jenkins,kliv,lcsmith,marki,mestayer,nerses,parkkj,pasyuk,primex,ripani,rossi,saw,staylor,sytnik,taiuti,taylorw,timmer,wooyoung

== RHEL7 (64 bit) ==

Installed using DVD provided by Computer Center, currently RHEL7.3. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation. On DELL servers, hold F2 after power on and go to 'Device Settings' to see mac address. Remember machine memory size as well, will needed when create partitions, find it in 'System BIOS -> Memory Settings'.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* Please enter the hostname of this system: <hostname> <enter>

* What type of system are you building? (D)esktop: <enter>

* Is this a CUE level 1 or CUE level 2 System build (1/2): 2 <enter>

* Please enter the System Admin's CUE username: boiarino <enter>

* Do you want to use the default partitioning scheme (y/n)? n <enter>

* Are you sure you want to use your own partitioning scheme (y/n)? y <enter>

Choose 'Standard Partition' scheme and create following partitions: /boot - 1GB, swap - double memory size, / - the rest of space.

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically.

After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

When machine reboots for the last time, ask Paul Letta to set usual hallb root password. From now on remote root access is possible. Alternatively, user ''boiarino'' can execute most of actions using ''sudo'',
like ''sudo emacs'' for protected files. ''sudo reboot'' etc.

Go to /boot/grub2 and modify file grub.cfg, Linux kernel boot options, adding options ''net.ifnames=0 biosdevname=0'', so your boot string has following section:

..... rhgb net.ifnames=0 biosdevname=0 quiet .....

so whole line looks something like this:

linux16 /vmlinuz-3.10.0-327.18.2.el7.x86_64 root=UUID=b5d1b5ad-e3f6-4db4-8972-aa9c1a91d116 ro vconsole.keymap=us crashkernel=auto vconsole.font=latarcyrheb-sun16 rhgb net.ifnames=0 biosdevname=0 quiet LANG=en_US.UTF-8

Reboot machine, ethernet ports must be named ''eth0'', ''eth1'' etc.

To update manually, use commands ''yum list updates'' and ''yum update''.

'''NOTE:''' add machine to the appropriate '''puppet''' group, it will do all following automatically (hopefully).

'''NOTE:''' on RHEL7.9, RPM EPEL REPO is not enabled by default, which prevents from installing nload, itcl, itk etc. To bring it back, it can be copied it from older machine, for example:

cd /etc/yum.repos.d
scp clondaq7:/etc/yum.repos.d/epel.repo .
cd /etc/pki/rpm-gpg
scp clondaq7:/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 .

Alternatively, following can be used to add repo's:

subscription-manager repos --enable <repo_id>

In particular, following have to be enabled to get nload, xpdf, python-alembic, tix, itcl, itk etc:

subscription-manager repos --enable JLab_EPEL_EPEL_7
subscription-manager repos --enable rhel-7-workstation-optional-rpms

Repo ID's can be obtained by:

subscription-manager repos --list

Installed repo's can be seen by:

yum repolist

'''Yum updates'''

Edit the ''/etc/yum.conf'' file and add the following line to force installation of the 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install xterm mesa-dri-drivers telnet rsh readline-devel net-snmp-utils tigervnc-server tigervnc xpdf nload mariadb-devel libxml2-devel glibc-devel qt-devel python-alembic openssl-devel apr-devel
yum install libconfig-devel # recent addition for CODA libraries

Fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

Do following to be able to compile and run 32-bit apps on 64-bit machine (for compatibility with 32bit applications):

yum install libXpm-devel libXaw-devel motif-devel glibc-devel ncurses-devel readline-devel

Modify file ''/etc/passwd'' adding following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

'''Note''': user-related lines must be removed, like

+boiarino::::::

as well as

+::::::

'''Note''': assumed that following line is in already:

+@ccc::::::

'''Note''': if following line exist, it must be placed in the end, or removed:

+::::::/bin/false

Modify file ''/etc/group'' adding following:

onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik,baltzell,carman
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Modify file ''/etc/shadow'' using an example from another RHEL7 clon machine (clonioc2 etc). Do ''chmod 600 shadow'' before editing and ''chmod 000 shadow'' after.

Make sure file ''/etc/ssh/sshd_config'' has following line uncommented (must be pushed in by CC security scripts):

##PermitUserEnvironment yes

NOT NEEDED, DONE IN THE END OF FILE ALREADY !!! Uncomment following in file ''/etc/ssh/ssh_config'':

##Host *
##ForwardX11 yes

Add line 'export NO_AT_BRIDGE=1' to the file '/etc/environment' to suppress annoying messages like '** (emacs:38714): WARNING **: Couldn't register with accessibility bus: Did not receive a reply.'

If big (>2GB) partition to be formated, do following (for example /dev/sdb):

parted /dev/sdb
(parted) print
(parted) mklabel gpt
(parted) print
mkpart primary 0GB 25855.2GB
(parted) print
(parted) quit

mkfs.xfs /dev/sdb1

then create /data and mount it using ''/etc/fstab'':

/dev/sdb1 /data xfs defaults 1 2

'''NOTE:''' sometimes machine can loose NIS connection, then ssh to it becomes intermittent; if it happens ssh as root (may have to try several times) and run command

ypwhich

to shows NIS server. If it returns nothing check file ''/etc/resolv.conf'', it must have following (as on July 2019):

search jlab.org acc.jlab.org
nameserver 129.57.90.255
nameserver 129.57.32.101

If file is empty or does not contain right info, fix it. After that run command

ypbind

It should fix a problem. Run ''ypwhich'' to make sure.

'''Display Setting:''' if machine is multi-head, goto ''Applications->System Tools->Settings->Devices->Displays'' and arrange displays.

Proceed to the [[Linux Customization on CLON Cluster]].

== RHEL6 (64 bit) ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* ...[D]esktop: [use 's' for server, 'd' for desktop] <enter>

* root password: enter root password

* admin user: boiarino

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically. After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

To make emacs work, install

yum install libotf

Edit the /etc/yum.conf file and add the following line to force installation of teh 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install openmotif-devel xinetd mysql-devel cmake libXpm-devel net-snmp-utils
yum install mesa-libGL-devel mesa-libGLU-devel mesa-libGLw-devel (for OpenGL, needed by ROOT)
yum install libXaw-devel (for xterm)
yum install expat-devel libgcj-devel (for evio/et)

yum install compat-libtermcap (for xterm)
ln -s /lib/libtermcap.so.2 /usr/lib/libtermcap.so
###ln -s /lib64/libtermcap.so.2 /usr/lib64/libtermcap.so

Install following fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

'''NOTE:''' Useful ''yum'' commands:

yum whatprovides libstdc++.so.5 - show which package contains libstdc++.so.5

== RHEL5 ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (email to helpdesk@jlab.org) because it is network-based installation.

Dialog:

* boot: <enter>

* ...[D]esktop: Server (it is ignored, will do Desktop anyway ...)

* root password: enter root password

* system user: <enter>

* manually partition disk: 100MB /boot, 2048 etc MB swap, the rest /.

'''CFENGINE''': there are procesess restoring some system config files (in particular ''/etc/ssh/sshd_config'') in according to the Computer Center - maintained templete. To shut them down: (1) comment out ''cfengine''-related stuff in root cronjobs; (2) do ''/etc/init.d/cfengine stop''; (3) do ''chkconfig cfengine off''. Ask CC (Sherman White, Paul Letta) to fix templete.

Run ''/usr/bin/system-config-authentication'' and set NIS servers list as ''clon00,clon10,nis1''.

Add following in the end of ''/etc/passwd'':
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:6005:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+@ccc::::::

Add following in the end of ''/etc/group'':
onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Create ''/etc/shadow'' files with entries for users clasrun, epics and nagios (copy from another machine).

Install updates: normally all updates should be installed by now, it can be done manually by commands
yum list updates
yum update

Configure [[SSH]].

Install missing packages:
yum install openmotif-devel xinetd mysql-devel cmake

Some additional packages on request (for EPICS):

yum install mc lapack lapack-devel blas blas-devel giflib-devel

Proceed to the [[Linux Customization on CLON Cluster]].

'''PROBLEMS''':

1. /usr/lib/libg2c.so link is missing

FIXED ??? 2. /usr/lib/libXm.so link is missing

3. Created /etc/shadow file for clasrun, epics and nagios

== RHEL4 ==

Get RHEL4 CDs from Paul Letta.

Connect terminal, keyboard and mouse.

Boot from CD1. Follow instructions. When asked, choose following options:

* Choose 'Manually partition with Disk Druid', set /boot to 100MB, then / to 40GB, then swap to 8192MB or at least double memory size. The rest of disk can be set as /space.

* Network: choose manually, type clonpc2.jlab.org; click 'EDIT', deactivate 'Configure using DHCP',
type IP address and netmask (255.255.255.0), click Ok.
Type Gateway (for example 129.57.167.99) and 3 DNS servers (129.57.167.5,129.57.167.14,129.57.32.100).

* Choose 'No firewall'

* Disable 'SELinux'

* Choose 'Customize software packages to be installed', click 'Everything'.

You will be asked to install CD2, CD3 and CD4, then CD1 again.
Then you will be asked to click 'Reboot'. First remove CD, then click 'Reboot'.
You will be asked few more questions. When asked to activate service, choose
'Tell me why I need to register ..' and click 'Next'. Choose 'I can not complete registration ..'
and click 'Next'. You will see 'System user' screen, click 'Use network login..'.
Choose 'Enable NIS support' and click 'Configure NIS'. Type NIS Domain: 'CCCHP' and NIS Server: clon00.jlab.org.
Finish installation process.

* fix files ''/etc/passwd'', ''/etc/shadow'' and ''/etc/group'' adding clasrun etc (see examples on another machines).

'''NOTE''': if machine has multiple network ports, Linux may not assign them properly to specified IP names and addresses. If problem occures, open network GUI and delete all existing records. After that, click ''New'' and pick hadrware port you want to configure from the list of available ports (tricky part is to know which RJ-45 connector corresponds to which port ..). Configure and activate it, make sure it works. Repeat for other ports. Results will be stored in directory ''/etc/sysconfig/network-scripts'', file names will be ''ifcfg-eth0'', ''ifcfg-eth1'' etc. If modifying those files manually, restart network by ''/etc/init.d/network restart''. Finally, set routing, for example for ''clonmon'' command ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
Run following commands:
/sbin/route add -net 129.57.160.0 netmask 255.255.255.0 gw 129.57.160.5 dev eth1
/sbin/route add -net 129.57.68.0 netmask 255.255.255.0 gw 129.57.68.26 dev eth3
/sbin/route add -net 129.57.69.0 netmask 255.255.255.0 gw 129.57.69.206 dev dev5937
/sbin/route add -net 129.57.64.0 netmask 255.255.255.0 gw 129.57.64.57 dev eth0
Now ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 129.57.160.5 255.255.255.0 UG 0 0 0 eth1
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 129.57.68.26 255.255.255.0 UG 0 0 0 eth3
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 129.57.69.206 255.255.255.0 UG 0 0 0 dev5937
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 129.57.64.57 255.255.255.0 UG 0 0 0 eth0
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
In that example automount will do configured using ''clonmon-daq1'' interface, because default ''clonmon'' interface is on external subnet. To make that routing table permanent (retore it after reboot) I tried to add four files with following contents to the ''/etc/sysconfig/network-scripts'' directory:
route-eth1:
GATEWAY0=129.57.160.5
NETMASK0=255.255.255.0
ADDRESS0=129.57.160.0
route-eth3:
GATEWAY0=129.57.68.26
NETMASK0=255.255.255.0
ADDRESS0=129.57.68.0
route-dev5937:
GATEWAY0=129.57.69.206
NETMASK0=255.255.255.0
ADDRESS0=129.57.69.0
route-eth0:
GATEWAY0=129.57.64.57
NETMASK0=255.255.255.0
ADDRESS0=129.57.64.0
It did not worked. Then I added four ''/sbin/route add ..'' lines to ''/etc/rc.local'' script, and it worked.

From now on you can use remote 'ssh' connection.

* To configure your system to use the patch server, issue the following commands as root:
# mount jlabsite:/site /mnt
# /mnt/CC/linux/satellite-connect --patchall
The script will prompt you for an activation key, but if you don't know what this is, just hit ENTER and it will use a sensible default. Depending on how many patches need to be applied to your system to bring it up to the current level, this script may take a very long time to run. When it finishes, you should reboot your machine to make the new patches take effect.

To install updates later run ''up2date -uf'' as ''root''.

Configure [[SSH]].

* Proceed with [[Linux Customization on CLON Cluster]] if applicable.

To boot Linux in single user mode (no graphics), add ''single'' to the end of boot line during boot process.

== '''background info''' ==

'''Add startup script'''

Create script in ''/etc/init.d/'' directory (use existing scripts as example). Must have a line like
# chkconfig: - 91 09
which specifies start and stop order. Run commands
chkconfig --add <scriptname>
chkconfig --level 3 <scriptname> on
for every level you want that script to be executed (usualy 3 and/or 4 and/or 5). Check if it os done using command
chkconfig --list | grep <scriptname>

'''xxx'''

You can choose to download the RHEL operating system directly from the Red Hat Web site and not receive a media kit from HP containing the software. This scenario occurs when the media option AJR is deselected from the order. (The media kit option is always selected by default. )

It is necessary to register at the Red Hat Web site prior to download. Registration requires the activation code that each customer receives from HP when ordering either RHEL.

You can download RHEL for each available platform as four CD ISO images or one DVD ISO image.

Use the following procedure to download RHEL and create the installation media:

1.

Register and log in at the following Red Hat Web site:

www.redhat.com/rhn
2.

Click on channels and then select Red Hat Enterprise Linux ES (v.4 for 64–bit Intel Itanium).
3.

Select Downloads and then download the ISO images of install, compatibility and source disks

Files with ia64 in the name are for the Itanium platform.
4.

Create the CDs or a DVD from the ISO images.

IMPORTANT: Create the CDs or DVD using the contents of the ISO images. Do not create the CDs or DVD by burning the .iso files themselves to CD or DVD. For example, if you are using K3b to burn a CD, click Tools>CD>Burn CD Image, select the .iso image, then click Burn.

'''Bootup scripts''' for example for level 5 execution (multiuser with X):

cp <script-file> /etc/init.d/
chmod +x /etc/init.d/<script-file>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/S50<scriptfile>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/K50<scriptfile>

'''Changing hostname/IP address'''

Changing hostname on RHEL
1. Change the HOSTNAME line in /etc/sysconfig/network
2. Change the hostname (FQDN and alias) in /etc/hosts
3. Run '/bin/hostname new_hostname' for the hostname change to take effect immediately.
4. Run '/sbin/service syslog restart' for syslog to log using the new hostname.
A reboot is not required to change the system hostname.

IP address: You have to change the IP address entry in
/etc/sysconfig/network-scripts/ifcfg-eth0.

Linux Installation Procedure

2026-02-10T22:33:13Z

Boiarino:

== Dell servers hardware trick(s) ==

* '''!!! if BIOS date/time is incorrect, it may prevent redhat subscription and installation to work correctly, set it to correct value !!!'''

* if BIOS does not remember time setting after power unplugged, battery on motherboard may need to be replaced

* if looks dead, remove the power cords, then held in the on button for 30 seconds; then plug it back in and it may boots up fine - known Dell feature

== ARM (CentsOS7) ==

See [[yum]] for specifics.

yum install xauth wget bzip2 xterm expat-devel libX11-devel libXpm-devel motif-devel mariadb-devel

== RHEL9 (64 bit) ==

'''NOTE''': select installation type '''H''', then type '''B'''.

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

Set root password (see instractions below), if you want to become superuser by typing just ''su''. If becoming superuser by typing ''sudo su'' is good enough, do nothing (in that case graphics will not work in superuser mode).

Install useful pachages:
yum install ncdu mysql

'''NOTE''': graphic screen is disabled, run following command as root:
systemctl set-default graphical.target

== RHEL9 (64 bit) - for machine NOT under puppet control ==

'''NOTE''': select installation type '''D''' (not '''S''', otherwise it will not be level 2 server)

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

When installation complete, ssh as authorized user and do following:

sudo yum install emacs
cd /etc
sudo chmod a+rw shadow
sudo emacs shadow

Copy to /etc/shadow root and other needed passwords from another clon machine.

sudo chmod a-rw shadow

After that, type ''su'' to become superuser. All following settings can be done now without typing ''sudo'' every time. You still will not be able to ssh remotely as root - always ssh as authorized user and type ''su'' to become root.

Update /etc/passwd and /etc/group using another clon machine as example.

yum install expat-devel libXaw-devel mysql-devel motif-devel ncurses-devel apr-devel net-snmp-utils
yum install xorg-x11-utils # for xprop/xwininfo/etc creg stuff
yum install s-nail # for /usr/bin/mail
yum install ncdu
yum install libconfig-devel # recent addition for CODA libraries

To be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

update-crypto-policies --set LEGACY

and then probably reboot, not sure.

Somebody mentioned also adding ''RequiredRSASize 1024'' to a config file in ''/etc/ssh/ssh_config.d/'', but I did not do it.

Note: this changes all daemons and system settings and is a bit overkill if you only need to adjust the settings for ssh and sshd.

Exclude (only) sshd from the system-wide cryptographic policy. You opt-out by editing /etc/sysconfig/sshd and uncommenting the line # CRYPTO_POLICY= , (if necessary you can then adjust adjust /etc/ssh/sshd_config and add legacy crypto settings) and restart the ssh daemon.

For the ssh command line client on the RHEL 9 system: you're recommended to edit ˜/.ssh/config and override the modern/secure system wide ssh client defaults by adding a Host entry that adds support for suitable legacy encryption options for that particular host:

# ˜/.ssh/config

Host rhel6.example.com
KexAlgorithms +diffie-hellman-group14-sha1
MACs +hmac-sha1
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa

Prepare auto-mounting directories:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mv work work.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

== RHEL8 (64 bit) ==

'''NOTE:''' to boot from USB stick, insert USB stick, turn machine ON holding F2, and in BIOS Boot Configuration, set Enable Security Boot to OFF, save and exit, holding F2. When in BIOS again, in Boot Configuration make ''UEFI PHY USB ...'' first in boot sequence, local hard drive second, disable all other boot options, save and exit. Do NOT hold F2, Linux installation from USB stick will start. '''IMPORTANT:''' when asked about D/S options (very first question in installation process), '''REMOVE USB STICK BEFORE ANSWERING QUESTION ABOUT DESKTOP/SERVER''', otherwise it will be destroyed by following installation steps !!!

'''NOTE:''' to disable/enable puppet, do following as root:
puppet agent --disable "temporary"
puppet agent --enable

yum install emacs
yum install xorg-x11-fonts-misc

Move and create some directories in preparation for automounts:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

Add line '''+dir:/etc/auto.master.d''' to ''/etc/auto.master''

Create file ''/etc/auto.master.d/direct.autofs'' with the line '''/- /etc/auto.direct'''

Create file ''/etc/auto.direct'' with the following contents:

# machine-dependent system directories
/apps -rw,bg clonfs1:/vol/apps/RHEL8_x86_64
/usr/local -rw,bg clonfs1:/vol/local/RHEL8_x86_64
# machine-independent system directories
/home -rw,bg clonfs1:/vol/home
#/work -rw,bg clonfs1-old:/vol/work
/scratch -rw,bg clonfs1:/vol/scratch
# machine-independent clas directories
/usr/downloads -rw,bg clonfs1:/vol/downloads
/usr/clas -rw,bg clonfs1:/vol/clas
/usr/clas12 -rw,bg clonfs1:/vol/clas12
# Used for data storage before shipping to tape
#/logs -rw,bg clonfs1-old:/vol/logs

Restart autofs:

service autofs reload
service autofs restart

Remove from the end of the ''/etc/passwd'' line '''+::::::''', and add following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

Update ''/etc/shadow'', adding passwords for local accounts (copy it from another machine).

Add following to ''/etc/group'':

clon:x:383:clascron
onliners:x:9998:abbottd,avakian,baltzell,battagli,brooksw,bruhwel,boiarino,carman,chen,clasboot,clascron,clasrun,cole,cuevas,davidl,danagu,dugger,elton,epics,fklein,gilfoyle,giovanet,golovach,gurjyan,heddle,heyes,hovanes,jacobsg,jenkins,kliv,lcsmith,marki,mestayer,nerses,parkkj,pasyuk,primex,ripani,rossi,saw,staylor,sytnik,taiuti,taylorw,timmer,wooyoung

== RHEL7 (64 bit) ==

Installed using DVD provided by Computer Center, currently RHEL7.3. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation. On DELL servers, hold F2 after power on and go to 'Device Settings' to see mac address. Remember machine memory size as well, will needed when create partitions, find it in 'System BIOS -> Memory Settings'.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* Please enter the hostname of this system: <hostname> <enter>

* What type of system are you building? (D)esktop: <enter>

* Is this a CUE level 1 or CUE level 2 System build (1/2): 2 <enter>

* Please enter the System Admin's CUE username: boiarino <enter>

* Do you want to use the default partitioning scheme (y/n)? n <enter>

* Are you sure you want to use your own partitioning scheme (y/n)? y <enter>

Choose 'Standard Partition' scheme and create following partitions: /boot - 1GB, swap - double memory size, / - the rest of space.

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically.

After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

When machine reboots for the last time, ask Paul Letta to set usual hallb root password. From now on remote root access is possible. Alternatively, user ''boiarino'' can execute most of actions using ''sudo'',
like ''sudo emacs'' for protected files. ''sudo reboot'' etc.

Go to /boot/grub2 and modify file grub.cfg, Linux kernel boot options, adding options ''net.ifnames=0 biosdevname=0'', so your boot string has following section:

..... rhgb net.ifnames=0 biosdevname=0 quiet .....

so whole line looks something like this:

linux16 /vmlinuz-3.10.0-327.18.2.el7.x86_64 root=UUID=b5d1b5ad-e3f6-4db4-8972-aa9c1a91d116 ro vconsole.keymap=us crashkernel=auto vconsole.font=latarcyrheb-sun16 rhgb net.ifnames=0 biosdevname=0 quiet LANG=en_US.UTF-8

Reboot machine, ethernet ports must be named ''eth0'', ''eth1'' etc.

To update manually, use commands ''yum list updates'' and ''yum update''.

'''NOTE:''' add machine to the appropriate '''puppet''' group, it will do all following automatically (hopefully).

'''NOTE:''' on RHEL7.9, RPM EPEL REPO is not enabled by default, which prevents from installing nload, itcl, itk etc. To bring it back, it can be copied it from older machine, for example:

cd /etc/yum.repos.d
scp clondaq7:/etc/yum.repos.d/epel.repo .
cd /etc/pki/rpm-gpg
scp clondaq7:/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 .

Alternatively, following can be used to add repo's:

subscription-manager repos --enable <repo_id>

In particular, following have to be enabled to get nload, xpdf, python-alembic, tix, itcl, itk etc:

subscription-manager repos --enable JLab_EPEL_EPEL_7
subscription-manager repos --enable rhel-7-workstation-optional-rpms

Repo ID's can be obtained by:

subscription-manager repos --list

Installed repo's can be seen by:

yum repolist

'''Yum updates'''

Edit the ''/etc/yum.conf'' file and add the following line to force installation of the 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install xterm mesa-dri-drivers telnet rsh readline-devel net-snmp-utils tigervnc-server tigervnc xpdf nload mariadb-devel libxml2-devel glibc-devel qt-devel python-alembic openssl-devel apr-devel
yum install libconfig-devel # recent addition for CODA libraries

Fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

Do following to be able to compile and run 32-bit apps on 64-bit machine (for compatibility with 32bit applications):

yum install libXpm-devel libXaw-devel motif-devel glibc-devel ncurses-devel readline-devel

Modify file ''/etc/passwd'' adding following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

'''Note''': user-related lines must be removed, like

+boiarino::::::

as well as

+::::::

'''Note''': assumed that following line is in already:

+@ccc::::::

'''Note''': if following line exist, it must be placed in the end, or removed:

+::::::/bin/false

Modify file ''/etc/group'' adding following:

onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik,baltzell,carman
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Modify file ''/etc/shadow'' using an example from another RHEL7 clon machine (clonioc2 etc). Do ''chmod 600 shadow'' before editing and ''chmod 000 shadow'' after.

Make sure file ''/etc/ssh/sshd_config'' has following line uncommented (must be pushed in by CC security scripts):

##PermitUserEnvironment yes

NOT NEEDED, DONE IN THE END OF FILE ALREADY !!! Uncomment following in file ''/etc/ssh/ssh_config'':

##Host *
##ForwardX11 yes

Add line 'export NO_AT_BRIDGE=1' to the file '/etc/environment' to suppress annoying messages like '** (emacs:38714): WARNING **: Couldn't register with accessibility bus: Did not receive a reply.'

If big (>2GB) partition to be formated, do following (for example /dev/sdb):

parted /dev/sdb
(parted) print
(parted) mklabel gpt
(parted) print
mkpart primary 0GB 25855.2GB
(parted) print
(parted) quit

mkfs.xfs /dev/sdb1

then create /data and mount it using ''/etc/fstab'':

/dev/sdb1 /data xfs defaults 1 2

'''NOTE:''' sometimes machine can loose NIS connection, then ssh to it becomes intermittent; if it happens ssh as root (may have to try several times) and run command

ypwhich

to shows NIS server. If it returns nothing check file ''/etc/resolv.conf'', it must have following (as on July 2019):

search jlab.org acc.jlab.org
nameserver 129.57.90.255
nameserver 129.57.32.101

If file is empty or does not contain right info, fix it. After that run command

ypbind

It should fix a problem. Run ''ypwhich'' to make sure.

'''Display Setting:''' if machine is multi-head, goto ''Applications->System Tools->Settings->Devices->Displays'' and arrange displays.

Proceed to the [[Linux Customization on CLON Cluster]].

== RHEL6 (64 bit) ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* ...[D]esktop: [use 's' for server, 'd' for desktop] <enter>

* root password: enter root password

* admin user: boiarino

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically. After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

To make emacs work, install

yum install libotf

Edit the /etc/yum.conf file and add the following line to force installation of teh 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install openmotif-devel xinetd mysql-devel cmake libXpm-devel net-snmp-utils
yum install mesa-libGL-devel mesa-libGLU-devel mesa-libGLw-devel (for OpenGL, needed by ROOT)
yum install libXaw-devel (for xterm)
yum install expat-devel libgcj-devel (for evio/et)

yum install compat-libtermcap (for xterm)
ln -s /lib/libtermcap.so.2 /usr/lib/libtermcap.so
###ln -s /lib64/libtermcap.so.2 /usr/lib64/libtermcap.so

Install following fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

'''NOTE:''' Useful ''yum'' commands:

yum whatprovides libstdc++.so.5 - show which package contains libstdc++.so.5

== RHEL5 ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (email to helpdesk@jlab.org) because it is network-based installation.

Dialog:

* boot: <enter>

* ...[D]esktop: Server (it is ignored, will do Desktop anyway ...)

* root password: enter root password

* system user: <enter>

* manually partition disk: 100MB /boot, 2048 etc MB swap, the rest /.

'''CFENGINE''': there are procesess restoring some system config files (in particular ''/etc/ssh/sshd_config'') in according to the Computer Center - maintained templete. To shut them down: (1) comment out ''cfengine''-related stuff in root cronjobs; (2) do ''/etc/init.d/cfengine stop''; (3) do ''chkconfig cfengine off''. Ask CC (Sherman White, Paul Letta) to fix templete.

Run ''/usr/bin/system-config-authentication'' and set NIS servers list as ''clon00,clon10,nis1''.

Add following in the end of ''/etc/passwd'':
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:6005:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+@ccc::::::

Add following in the end of ''/etc/group'':
onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Create ''/etc/shadow'' files with entries for users clasrun, epics and nagios (copy from another machine).

Install updates: normally all updates should be installed by now, it can be done manually by commands
yum list updates
yum update

Configure [[SSH]].

Install missing packages:
yum install openmotif-devel xinetd mysql-devel cmake

Some additional packages on request (for EPICS):

yum install mc lapack lapack-devel blas blas-devel giflib-devel

Proceed to the [[Linux Customization on CLON Cluster]].

'''PROBLEMS''':

1. /usr/lib/libg2c.so link is missing

FIXED ??? 2. /usr/lib/libXm.so link is missing

3. Created /etc/shadow file for clasrun, epics and nagios

== RHEL4 ==

Get RHEL4 CDs from Paul Letta.

Connect terminal, keyboard and mouse.

Boot from CD1. Follow instructions. When asked, choose following options:

* Choose 'Manually partition with Disk Druid', set /boot to 100MB, then / to 40GB, then swap to 8192MB or at least double memory size. The rest of disk can be set as /space.

* Network: choose manually, type clonpc2.jlab.org; click 'EDIT', deactivate 'Configure using DHCP',
type IP address and netmask (255.255.255.0), click Ok.
Type Gateway (for example 129.57.167.99) and 3 DNS servers (129.57.167.5,129.57.167.14,129.57.32.100).

* Choose 'No firewall'

* Disable 'SELinux'

* Choose 'Customize software packages to be installed', click 'Everything'.

You will be asked to install CD2, CD3 and CD4, then CD1 again.
Then you will be asked to click 'Reboot'. First remove CD, then click 'Reboot'.
You will be asked few more questions. When asked to activate service, choose
'Tell me why I need to register ..' and click 'Next'. Choose 'I can not complete registration ..'
and click 'Next'. You will see 'System user' screen, click 'Use network login..'.
Choose 'Enable NIS support' and click 'Configure NIS'. Type NIS Domain: 'CCCHP' and NIS Server: clon00.jlab.org.
Finish installation process.

* fix files ''/etc/passwd'', ''/etc/shadow'' and ''/etc/group'' adding clasrun etc (see examples on another machines).

'''NOTE''': if machine has multiple network ports, Linux may not assign them properly to specified IP names and addresses. If problem occures, open network GUI and delete all existing records. After that, click ''New'' and pick hadrware port you want to configure from the list of available ports (tricky part is to know which RJ-45 connector corresponds to which port ..). Configure and activate it, make sure it works. Repeat for other ports. Results will be stored in directory ''/etc/sysconfig/network-scripts'', file names will be ''ifcfg-eth0'', ''ifcfg-eth1'' etc. If modifying those files manually, restart network by ''/etc/init.d/network restart''. Finally, set routing, for example for ''clonmon'' command ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
Run following commands:
/sbin/route add -net 129.57.160.0 netmask 255.255.255.0 gw 129.57.160.5 dev eth1
/sbin/route add -net 129.57.68.0 netmask 255.255.255.0 gw 129.57.68.26 dev eth3
/sbin/route add -net 129.57.69.0 netmask 255.255.255.0 gw 129.57.69.206 dev dev5937
/sbin/route add -net 129.57.64.0 netmask 255.255.255.0 gw 129.57.64.57 dev eth0
Now ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 129.57.160.5 255.255.255.0 UG 0 0 0 eth1
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 129.57.68.26 255.255.255.0 UG 0 0 0 eth3
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 129.57.69.206 255.255.255.0 UG 0 0 0 dev5937
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 129.57.64.57 255.255.255.0 UG 0 0 0 eth0
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
In that example automount will do configured using ''clonmon-daq1'' interface, because default ''clonmon'' interface is on external subnet. To make that routing table permanent (retore it after reboot) I tried to add four files with following contents to the ''/etc/sysconfig/network-scripts'' directory:
route-eth1:
GATEWAY0=129.57.160.5
NETMASK0=255.255.255.0
ADDRESS0=129.57.160.0
route-eth3:
GATEWAY0=129.57.68.26
NETMASK0=255.255.255.0
ADDRESS0=129.57.68.0
route-dev5937:
GATEWAY0=129.57.69.206
NETMASK0=255.255.255.0
ADDRESS0=129.57.69.0
route-eth0:
GATEWAY0=129.57.64.57
NETMASK0=255.255.255.0
ADDRESS0=129.57.64.0
It did not worked. Then I added four ''/sbin/route add ..'' lines to ''/etc/rc.local'' script, and it worked.

From now on you can use remote 'ssh' connection.

* To configure your system to use the patch server, issue the following commands as root:
# mount jlabsite:/site /mnt
# /mnt/CC/linux/satellite-connect --patchall
The script will prompt you for an activation key, but if you don't know what this is, just hit ENTER and it will use a sensible default. Depending on how many patches need to be applied to your system to bring it up to the current level, this script may take a very long time to run. When it finishes, you should reboot your machine to make the new patches take effect.

To install updates later run ''up2date -uf'' as ''root''.

Configure [[SSH]].

* Proceed with [[Linux Customization on CLON Cluster]] if applicable.

To boot Linux in single user mode (no graphics), add ''single'' to the end of boot line during boot process.

== '''background info''' ==

'''Add startup script'''

Create script in ''/etc/init.d/'' directory (use existing scripts as example). Must have a line like
# chkconfig: - 91 09
which specifies start and stop order. Run commands
chkconfig --add <scriptname>
chkconfig --level 3 <scriptname> on
for every level you want that script to be executed (usualy 3 and/or 4 and/or 5). Check if it os done using command
chkconfig --list | grep <scriptname>

'''xxx'''

You can choose to download the RHEL operating system directly from the Red Hat Web site and not receive a media kit from HP containing the software. This scenario occurs when the media option AJR is deselected from the order. (The media kit option is always selected by default. )

It is necessary to register at the Red Hat Web site prior to download. Registration requires the activation code that each customer receives from HP when ordering either RHEL.

You can download RHEL for each available platform as four CD ISO images or one DVD ISO image.

Use the following procedure to download RHEL and create the installation media:

1.

Register and log in at the following Red Hat Web site:

www.redhat.com/rhn
2.

Click on channels and then select Red Hat Enterprise Linux ES (v.4 for 64–bit Intel Itanium).
3.

Select Downloads and then download the ISO images of install, compatibility and source disks

Files with ia64 in the name are for the Itanium platform.
4.

Create the CDs or a DVD from the ISO images.

IMPORTANT: Create the CDs or DVD using the contents of the ISO images. Do not create the CDs or DVD by burning the .iso files themselves to CD or DVD. For example, if you are using K3b to burn a CD, click Tools>CD>Burn CD Image, select the .iso image, then click Burn.

'''Bootup scripts''' for example for level 5 execution (multiuser with X):

cp <script-file> /etc/init.d/
chmod +x /etc/init.d/<script-file>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/S50<scriptfile>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/K50<scriptfile>

'''Changing hostname/IP address'''

Changing hostname on RHEL
1. Change the HOSTNAME line in /etc/sysconfig/network
2. Change the hostname (FQDN and alias) in /etc/hosts
3. Run '/bin/hostname new_hostname' for the hostname change to take effect immediately.
4. Run '/sbin/service syslog restart' for syslog to log using the new hostname.
A reboot is not required to change the system hostname.

IP address: You have to change the IP address entry in
/etc/sysconfig/network-scripts/ifcfg-eth0.

Linux Installation Procedure

2026-02-10T22:32:09Z

Boiarino:

== Dell servers hardware trick(s) ==

* '''!!! if BIOS date/time is incorrect, it may prevent redhat subscription and installation to work correctly. If BIOS does not remember time setting after power unplugged, on-board battery may need to be replaced'''

* if looks dead, remove the power cords, then held in the on button for 30 seconds; then plug it back in and it may boots up fine - known Dell feature

== ARM (CentsOS7) ==

See [[yum]] for specifics.

yum install xauth wget bzip2 xterm expat-devel libX11-devel libXpm-devel motif-devel mariadb-devel

== RHEL9 (64 bit) ==

'''NOTE''': select installation type '''H''', then type '''B'''.

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

Set root password (see instractions below), if you want to become superuser by typing just ''su''. If becoming superuser by typing ''sudo su'' is good enough, do nothing (in that case graphics will not work in superuser mode).

Install useful pachages:
yum install ncdu mysql

'''NOTE''': graphic screen is disabled, run following command as root:
systemctl set-default graphical.target

== RHEL9 (64 bit) - for machine NOT under puppet control ==

'''NOTE''': select installation type '''D''' (not '''S''', otherwise it will not be level 2 server)

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

When installation complete, ssh as authorized user and do following:

sudo yum install emacs
cd /etc
sudo chmod a+rw shadow
sudo emacs shadow

Copy to /etc/shadow root and other needed passwords from another clon machine.

sudo chmod a-rw shadow

After that, type ''su'' to become superuser. All following settings can be done now without typing ''sudo'' every time. You still will not be able to ssh remotely as root - always ssh as authorized user and type ''su'' to become root.

Update /etc/passwd and /etc/group using another clon machine as example.

yum install expat-devel libXaw-devel mysql-devel motif-devel ncurses-devel apr-devel net-snmp-utils
yum install xorg-x11-utils # for xprop/xwininfo/etc creg stuff
yum install s-nail # for /usr/bin/mail
yum install ncdu
yum install libconfig-devel # recent addition for CODA libraries

To be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

update-crypto-policies --set LEGACY

and then probably reboot, not sure.

Somebody mentioned also adding ''RequiredRSASize 1024'' to a config file in ''/etc/ssh/ssh_config.d/'', but I did not do it.

Note: this changes all daemons and system settings and is a bit overkill if you only need to adjust the settings for ssh and sshd.

Exclude (only) sshd from the system-wide cryptographic policy. You opt-out by editing /etc/sysconfig/sshd and uncommenting the line # CRYPTO_POLICY= , (if necessary you can then adjust adjust /etc/ssh/sshd_config and add legacy crypto settings) and restart the ssh daemon.

For the ssh command line client on the RHEL 9 system: you're recommended to edit ˜/.ssh/config and override the modern/secure system wide ssh client defaults by adding a Host entry that adds support for suitable legacy encryption options for that particular host:

# ˜/.ssh/config

Host rhel6.example.com
KexAlgorithms +diffie-hellman-group14-sha1
MACs +hmac-sha1
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa

Prepare auto-mounting directories:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mv work work.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

== RHEL8 (64 bit) ==

'''NOTE:''' to boot from USB stick, insert USB stick, turn machine ON holding F2, and in BIOS Boot Configuration, set Enable Security Boot to OFF, save and exit, holding F2. When in BIOS again, in Boot Configuration make ''UEFI PHY USB ...'' first in boot sequence, local hard drive second, disable all other boot options, save and exit. Do NOT hold F2, Linux installation from USB stick will start. '''IMPORTANT:''' when asked about D/S options (very first question in installation process), '''REMOVE USB STICK BEFORE ANSWERING QUESTION ABOUT DESKTOP/SERVER''', otherwise it will be destroyed by following installation steps !!!

'''NOTE:''' to disable/enable puppet, do following as root:
puppet agent --disable "temporary"
puppet agent --enable

yum install emacs
yum install xorg-x11-fonts-misc

Move and create some directories in preparation for automounts:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

Add line '''+dir:/etc/auto.master.d''' to ''/etc/auto.master''

Create file ''/etc/auto.master.d/direct.autofs'' with the line '''/- /etc/auto.direct'''

Create file ''/etc/auto.direct'' with the following contents:

# machine-dependent system directories
/apps -rw,bg clonfs1:/vol/apps/RHEL8_x86_64
/usr/local -rw,bg clonfs1:/vol/local/RHEL8_x86_64
# machine-independent system directories
/home -rw,bg clonfs1:/vol/home
#/work -rw,bg clonfs1-old:/vol/work
/scratch -rw,bg clonfs1:/vol/scratch
# machine-independent clas directories
/usr/downloads -rw,bg clonfs1:/vol/downloads
/usr/clas -rw,bg clonfs1:/vol/clas
/usr/clas12 -rw,bg clonfs1:/vol/clas12
# Used for data storage before shipping to tape
#/logs -rw,bg clonfs1-old:/vol/logs

Restart autofs:

service autofs reload
service autofs restart

Remove from the end of the ''/etc/passwd'' line '''+::::::''', and add following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

Update ''/etc/shadow'', adding passwords for local accounts (copy it from another machine).

Add following to ''/etc/group'':

clon:x:383:clascron
onliners:x:9998:abbottd,avakian,baltzell,battagli,brooksw,bruhwel,boiarino,carman,chen,clasboot,clascron,clasrun,cole,cuevas,davidl,danagu,dugger,elton,epics,fklein,gilfoyle,giovanet,golovach,gurjyan,heddle,heyes,hovanes,jacobsg,jenkins,kliv,lcsmith,marki,mestayer,nerses,parkkj,pasyuk,primex,ripani,rossi,saw,staylor,sytnik,taiuti,taylorw,timmer,wooyoung

== RHEL7 (64 bit) ==

Installed using DVD provided by Computer Center, currently RHEL7.3. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation. On DELL servers, hold F2 after power on and go to 'Device Settings' to see mac address. Remember machine memory size as well, will needed when create partitions, find it in 'System BIOS -> Memory Settings'.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* Please enter the hostname of this system: <hostname> <enter>

* What type of system are you building? (D)esktop: <enter>

* Is this a CUE level 1 or CUE level 2 System build (1/2): 2 <enter>

* Please enter the System Admin's CUE username: boiarino <enter>

* Do you want to use the default partitioning scheme (y/n)? n <enter>

* Are you sure you want to use your own partitioning scheme (y/n)? y <enter>

Choose 'Standard Partition' scheme and create following partitions: /boot - 1GB, swap - double memory size, / - the rest of space.

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically.

After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

When machine reboots for the last time, ask Paul Letta to set usual hallb root password. From now on remote root access is possible. Alternatively, user ''boiarino'' can execute most of actions using ''sudo'',
like ''sudo emacs'' for protected files. ''sudo reboot'' etc.

Go to /boot/grub2 and modify file grub.cfg, Linux kernel boot options, adding options ''net.ifnames=0 biosdevname=0'', so your boot string has following section:

..... rhgb net.ifnames=0 biosdevname=0 quiet .....

so whole line looks something like this:

linux16 /vmlinuz-3.10.0-327.18.2.el7.x86_64 root=UUID=b5d1b5ad-e3f6-4db4-8972-aa9c1a91d116 ro vconsole.keymap=us crashkernel=auto vconsole.font=latarcyrheb-sun16 rhgb net.ifnames=0 biosdevname=0 quiet LANG=en_US.UTF-8

Reboot machine, ethernet ports must be named ''eth0'', ''eth1'' etc.

To update manually, use commands ''yum list updates'' and ''yum update''.

'''NOTE:''' add machine to the appropriate '''puppet''' group, it will do all following automatically (hopefully).

'''NOTE:''' on RHEL7.9, RPM EPEL REPO is not enabled by default, which prevents from installing nload, itcl, itk etc. To bring it back, it can be copied it from older machine, for example:

cd /etc/yum.repos.d
scp clondaq7:/etc/yum.repos.d/epel.repo .
cd /etc/pki/rpm-gpg
scp clondaq7:/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 .

Alternatively, following can be used to add repo's:

subscription-manager repos --enable <repo_id>

In particular, following have to be enabled to get nload, xpdf, python-alembic, tix, itcl, itk etc:

subscription-manager repos --enable JLab_EPEL_EPEL_7
subscription-manager repos --enable rhel-7-workstation-optional-rpms

Repo ID's can be obtained by:

subscription-manager repos --list

Installed repo's can be seen by:

yum repolist

'''Yum updates'''

Edit the ''/etc/yum.conf'' file and add the following line to force installation of the 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install xterm mesa-dri-drivers telnet rsh readline-devel net-snmp-utils tigervnc-server tigervnc xpdf nload mariadb-devel libxml2-devel glibc-devel qt-devel python-alembic openssl-devel apr-devel
yum install libconfig-devel # recent addition for CODA libraries

Fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

Do following to be able to compile and run 32-bit apps on 64-bit machine (for compatibility with 32bit applications):

yum install libXpm-devel libXaw-devel motif-devel glibc-devel ncurses-devel readline-devel

Modify file ''/etc/passwd'' adding following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

'''Note''': user-related lines must be removed, like

+boiarino::::::

as well as

+::::::

'''Note''': assumed that following line is in already:

+@ccc::::::

'''Note''': if following line exist, it must be placed in the end, or removed:

+::::::/bin/false

Modify file ''/etc/group'' adding following:

onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik,baltzell,carman
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Modify file ''/etc/shadow'' using an example from another RHEL7 clon machine (clonioc2 etc). Do ''chmod 600 shadow'' before editing and ''chmod 000 shadow'' after.

Make sure file ''/etc/ssh/sshd_config'' has following line uncommented (must be pushed in by CC security scripts):

##PermitUserEnvironment yes

NOT NEEDED, DONE IN THE END OF FILE ALREADY !!! Uncomment following in file ''/etc/ssh/ssh_config'':

##Host *
##ForwardX11 yes

Add line 'export NO_AT_BRIDGE=1' to the file '/etc/environment' to suppress annoying messages like '** (emacs:38714): WARNING **: Couldn't register with accessibility bus: Did not receive a reply.'

If big (>2GB) partition to be formated, do following (for example /dev/sdb):

parted /dev/sdb
(parted) print
(parted) mklabel gpt
(parted) print
mkpart primary 0GB 25855.2GB
(parted) print
(parted) quit

mkfs.xfs /dev/sdb1

then create /data and mount it using ''/etc/fstab'':

/dev/sdb1 /data xfs defaults 1 2

'''NOTE:''' sometimes machine can loose NIS connection, then ssh to it becomes intermittent; if it happens ssh as root (may have to try several times) and run command

ypwhich

to shows NIS server. If it returns nothing check file ''/etc/resolv.conf'', it must have following (as on July 2019):

search jlab.org acc.jlab.org
nameserver 129.57.90.255
nameserver 129.57.32.101

If file is empty or does not contain right info, fix it. After that run command

ypbind

It should fix a problem. Run ''ypwhich'' to make sure.

'''Display Setting:''' if machine is multi-head, goto ''Applications->System Tools->Settings->Devices->Displays'' and arrange displays.

Proceed to the [[Linux Customization on CLON Cluster]].

== RHEL6 (64 bit) ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* ...[D]esktop: [use 's' for server, 'd' for desktop] <enter>

* root password: enter root password

* admin user: boiarino

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically. After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

To make emacs work, install

yum install libotf

Edit the /etc/yum.conf file and add the following line to force installation of teh 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install openmotif-devel xinetd mysql-devel cmake libXpm-devel net-snmp-utils
yum install mesa-libGL-devel mesa-libGLU-devel mesa-libGLw-devel (for OpenGL, needed by ROOT)
yum install libXaw-devel (for xterm)
yum install expat-devel libgcj-devel (for evio/et)

yum install compat-libtermcap (for xterm)
ln -s /lib/libtermcap.so.2 /usr/lib/libtermcap.so
###ln -s /lib64/libtermcap.so.2 /usr/lib64/libtermcap.so

Install following fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

'''NOTE:''' Useful ''yum'' commands:

yum whatprovides libstdc++.so.5 - show which package contains libstdc++.so.5

== RHEL5 ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (email to helpdesk@jlab.org) because it is network-based installation.

Dialog:

* boot: <enter>

* ...[D]esktop: Server (it is ignored, will do Desktop anyway ...)

* root password: enter root password

* system user: <enter>

* manually partition disk: 100MB /boot, 2048 etc MB swap, the rest /.

'''CFENGINE''': there are procesess restoring some system config files (in particular ''/etc/ssh/sshd_config'') in according to the Computer Center - maintained templete. To shut them down: (1) comment out ''cfengine''-related stuff in root cronjobs; (2) do ''/etc/init.d/cfengine stop''; (3) do ''chkconfig cfengine off''. Ask CC (Sherman White, Paul Letta) to fix templete.

Run ''/usr/bin/system-config-authentication'' and set NIS servers list as ''clon00,clon10,nis1''.

Add following in the end of ''/etc/passwd'':
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:6005:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+@ccc::::::

Add following in the end of ''/etc/group'':
onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Create ''/etc/shadow'' files with entries for users clasrun, epics and nagios (copy from another machine).

Install updates: normally all updates should be installed by now, it can be done manually by commands
yum list updates
yum update

Configure [[SSH]].

Install missing packages:
yum install openmotif-devel xinetd mysql-devel cmake

Some additional packages on request (for EPICS):

yum install mc lapack lapack-devel blas blas-devel giflib-devel

Proceed to the [[Linux Customization on CLON Cluster]].

'''PROBLEMS''':

1. /usr/lib/libg2c.so link is missing

FIXED ??? 2. /usr/lib/libXm.so link is missing

3. Created /etc/shadow file for clasrun, epics and nagios

== RHEL4 ==

Get RHEL4 CDs from Paul Letta.

Connect terminal, keyboard and mouse.

Boot from CD1. Follow instructions. When asked, choose following options:

* Choose 'Manually partition with Disk Druid', set /boot to 100MB, then / to 40GB, then swap to 8192MB or at least double memory size. The rest of disk can be set as /space.

* Network: choose manually, type clonpc2.jlab.org; click 'EDIT', deactivate 'Configure using DHCP',
type IP address and netmask (255.255.255.0), click Ok.
Type Gateway (for example 129.57.167.99) and 3 DNS servers (129.57.167.5,129.57.167.14,129.57.32.100).

* Choose 'No firewall'

* Disable 'SELinux'

* Choose 'Customize software packages to be installed', click 'Everything'.

You will be asked to install CD2, CD3 and CD4, then CD1 again.
Then you will be asked to click 'Reboot'. First remove CD, then click 'Reboot'.
You will be asked few more questions. When asked to activate service, choose
'Tell me why I need to register ..' and click 'Next'. Choose 'I can not complete registration ..'
and click 'Next'. You will see 'System user' screen, click 'Use network login..'.
Choose 'Enable NIS support' and click 'Configure NIS'. Type NIS Domain: 'CCCHP' and NIS Server: clon00.jlab.org.
Finish installation process.

* fix files ''/etc/passwd'', ''/etc/shadow'' and ''/etc/group'' adding clasrun etc (see examples on another machines).

'''NOTE''': if machine has multiple network ports, Linux may not assign them properly to specified IP names and addresses. If problem occures, open network GUI and delete all existing records. After that, click ''New'' and pick hadrware port you want to configure from the list of available ports (tricky part is to know which RJ-45 connector corresponds to which port ..). Configure and activate it, make sure it works. Repeat for other ports. Results will be stored in directory ''/etc/sysconfig/network-scripts'', file names will be ''ifcfg-eth0'', ''ifcfg-eth1'' etc. If modifying those files manually, restart network by ''/etc/init.d/network restart''. Finally, set routing, for example for ''clonmon'' command ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
Run following commands:
/sbin/route add -net 129.57.160.0 netmask 255.255.255.0 gw 129.57.160.5 dev eth1
/sbin/route add -net 129.57.68.0 netmask 255.255.255.0 gw 129.57.68.26 dev eth3
/sbin/route add -net 129.57.69.0 netmask 255.255.255.0 gw 129.57.69.206 dev dev5937
/sbin/route add -net 129.57.64.0 netmask 255.255.255.0 gw 129.57.64.57 dev eth0
Now ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 129.57.160.5 255.255.255.0 UG 0 0 0 eth1
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 129.57.68.26 255.255.255.0 UG 0 0 0 eth3
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 129.57.69.206 255.255.255.0 UG 0 0 0 dev5937
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 129.57.64.57 255.255.255.0 UG 0 0 0 eth0
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
In that example automount will do configured using ''clonmon-daq1'' interface, because default ''clonmon'' interface is on external subnet. To make that routing table permanent (retore it after reboot) I tried to add four files with following contents to the ''/etc/sysconfig/network-scripts'' directory:
route-eth1:
GATEWAY0=129.57.160.5
NETMASK0=255.255.255.0
ADDRESS0=129.57.160.0
route-eth3:
GATEWAY0=129.57.68.26
NETMASK0=255.255.255.0
ADDRESS0=129.57.68.0
route-dev5937:
GATEWAY0=129.57.69.206
NETMASK0=255.255.255.0
ADDRESS0=129.57.69.0
route-eth0:
GATEWAY0=129.57.64.57
NETMASK0=255.255.255.0
ADDRESS0=129.57.64.0
It did not worked. Then I added four ''/sbin/route add ..'' lines to ''/etc/rc.local'' script, and it worked.

From now on you can use remote 'ssh' connection.

* To configure your system to use the patch server, issue the following commands as root:
# mount jlabsite:/site /mnt
# /mnt/CC/linux/satellite-connect --patchall
The script will prompt you for an activation key, but if you don't know what this is, just hit ENTER and it will use a sensible default. Depending on how many patches need to be applied to your system to bring it up to the current level, this script may take a very long time to run. When it finishes, you should reboot your machine to make the new patches take effect.

To install updates later run ''up2date -uf'' as ''root''.

Configure [[SSH]].

* Proceed with [[Linux Customization on CLON Cluster]] if applicable.

To boot Linux in single user mode (no graphics), add ''single'' to the end of boot line during boot process.

== '''background info''' ==

'''Add startup script'''

Create script in ''/etc/init.d/'' directory (use existing scripts as example). Must have a line like
# chkconfig: - 91 09
which specifies start and stop order. Run commands
chkconfig --add <scriptname>
chkconfig --level 3 <scriptname> on
for every level you want that script to be executed (usualy 3 and/or 4 and/or 5). Check if it os done using command
chkconfig --list | grep <scriptname>

'''xxx'''

You can choose to download the RHEL operating system directly from the Red Hat Web site and not receive a media kit from HP containing the software. This scenario occurs when the media option AJR is deselected from the order. (The media kit option is always selected by default. )

It is necessary to register at the Red Hat Web site prior to download. Registration requires the activation code that each customer receives from HP when ordering either RHEL.

You can download RHEL for each available platform as four CD ISO images or one DVD ISO image.

Use the following procedure to download RHEL and create the installation media:

1.

Register and log in at the following Red Hat Web site:

www.redhat.com/rhn
2.

Click on channels and then select Red Hat Enterprise Linux ES (v.4 for 64–bit Intel Itanium).
3.

Select Downloads and then download the ISO images of install, compatibility and source disks

Files with ia64 in the name are for the Itanium platform.
4.

Create the CDs or a DVD from the ISO images.

IMPORTANT: Create the CDs or DVD using the contents of the ISO images. Do not create the CDs or DVD by burning the .iso files themselves to CD or DVD. For example, if you are using K3b to burn a CD, click Tools>CD>Burn CD Image, select the .iso image, then click Burn.

'''Bootup scripts''' for example for level 5 execution (multiuser with X):

cp <script-file> /etc/init.d/
chmod +x /etc/init.d/<script-file>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/S50<scriptfile>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/K50<scriptfile>

'''Changing hostname/IP address'''

Changing hostname on RHEL
1. Change the HOSTNAME line in /etc/sysconfig/network
2. Change the hostname (FQDN and alias) in /etc/hosts
3. Run '/bin/hostname new_hostname' for the hostname change to take effect immediately.
4. Run '/sbin/service syslog restart' for syslog to log using the new hostname.
A reboot is not required to change the system hostname.

IP address: You have to change the IP address entry in
/etc/sysconfig/network-scripts/ifcfg-eth0.

Linux Installation Procedure

2026-02-10T22:31:31Z

Boiarino: /* Dell servers hardware trick(s) */

== Dell servers hardware trick(s) ==

* '''!!! if BIOS date/time is incorrect, it may prevent redhat subscription to work. If BIOS does not remember time setting after power unplugged, on-board battery may need to be replaced'''

* if looks dead, remove the power cords, then held in the on button for 30 seconds; then plug it back in and it may boots up fine - known Dell feature

== ARM (CentsOS7) ==

See [[yum]] for specifics.

yum install xauth wget bzip2 xterm expat-devel libX11-devel libXpm-devel motif-devel mariadb-devel

== RHEL9 (64 bit) ==

'''NOTE''': select installation type '''H''', then type '''B'''.

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

Set root password (see instractions below), if you want to become superuser by typing just ''su''. If becoming superuser by typing ''sudo su'' is good enough, do nothing (in that case graphics will not work in superuser mode).

Install useful pachages:
yum install ncdu mysql

'''NOTE''': graphic screen is disabled, run following command as root:
systemctl set-default graphical.target

== RHEL9 (64 bit) - for machine NOT under puppet control ==

'''NOTE''': select installation type '''D''' (not '''S''', otherwise it will not be level 2 server)

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

When installation complete, ssh as authorized user and do following:

sudo yum install emacs
cd /etc
sudo chmod a+rw shadow
sudo emacs shadow

Copy to /etc/shadow root and other needed passwords from another clon machine.

sudo chmod a-rw shadow

After that, type ''su'' to become superuser. All following settings can be done now without typing ''sudo'' every time. You still will not be able to ssh remotely as root - always ssh as authorized user and type ''su'' to become root.

Update /etc/passwd and /etc/group using another clon machine as example.

yum install expat-devel libXaw-devel mysql-devel motif-devel ncurses-devel apr-devel net-snmp-utils
yum install xorg-x11-utils # for xprop/xwininfo/etc creg stuff
yum install s-nail # for /usr/bin/mail
yum install ncdu
yum install libconfig-devel # recent addition for CODA libraries

To be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

update-crypto-policies --set LEGACY

and then probably reboot, not sure.

Somebody mentioned also adding ''RequiredRSASize 1024'' to a config file in ''/etc/ssh/ssh_config.d/'', but I did not do it.

Note: this changes all daemons and system settings and is a bit overkill if you only need to adjust the settings for ssh and sshd.

Exclude (only) sshd from the system-wide cryptographic policy. You opt-out by editing /etc/sysconfig/sshd and uncommenting the line # CRYPTO_POLICY= , (if necessary you can then adjust adjust /etc/ssh/sshd_config and add legacy crypto settings) and restart the ssh daemon.

For the ssh command line client on the RHEL 9 system: you're recommended to edit ˜/.ssh/config and override the modern/secure system wide ssh client defaults by adding a Host entry that adds support for suitable legacy encryption options for that particular host:

# ˜/.ssh/config

Host rhel6.example.com
KexAlgorithms +diffie-hellman-group14-sha1
MACs +hmac-sha1
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa

Prepare auto-mounting directories:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mv work work.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

== RHEL8 (64 bit) ==

'''NOTE:''' to boot from USB stick, insert USB stick, turn machine ON holding F2, and in BIOS Boot Configuration, set Enable Security Boot to OFF, save and exit, holding F2. When in BIOS again, in Boot Configuration make ''UEFI PHY USB ...'' first in boot sequence, local hard drive second, disable all other boot options, save and exit. Do NOT hold F2, Linux installation from USB stick will start. '''IMPORTANT:''' when asked about D/S options (very first question in installation process), '''REMOVE USB STICK BEFORE ANSWERING QUESTION ABOUT DESKTOP/SERVER''', otherwise it will be destroyed by following installation steps !!!

'''NOTE:''' to disable/enable puppet, do following as root:
puppet agent --disable "temporary"
puppet agent --enable

yum install emacs
yum install xorg-x11-fonts-misc

Move and create some directories in preparation for automounts:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

Add line '''+dir:/etc/auto.master.d''' to ''/etc/auto.master''

Create file ''/etc/auto.master.d/direct.autofs'' with the line '''/- /etc/auto.direct'''

Create file ''/etc/auto.direct'' with the following contents:

# machine-dependent system directories
/apps -rw,bg clonfs1:/vol/apps/RHEL8_x86_64
/usr/local -rw,bg clonfs1:/vol/local/RHEL8_x86_64
# machine-independent system directories
/home -rw,bg clonfs1:/vol/home
#/work -rw,bg clonfs1-old:/vol/work
/scratch -rw,bg clonfs1:/vol/scratch
# machine-independent clas directories
/usr/downloads -rw,bg clonfs1:/vol/downloads
/usr/clas -rw,bg clonfs1:/vol/clas
/usr/clas12 -rw,bg clonfs1:/vol/clas12
# Used for data storage before shipping to tape
#/logs -rw,bg clonfs1-old:/vol/logs

Restart autofs:

service autofs reload
service autofs restart

Remove from the end of the ''/etc/passwd'' line '''+::::::''', and add following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

Update ''/etc/shadow'', adding passwords for local accounts (copy it from another machine).

Add following to ''/etc/group'':

clon:x:383:clascron
onliners:x:9998:abbottd,avakian,baltzell,battagli,brooksw,bruhwel,boiarino,carman,chen,clasboot,clascron,clasrun,cole,cuevas,davidl,danagu,dugger,elton,epics,fklein,gilfoyle,giovanet,golovach,gurjyan,heddle,heyes,hovanes,jacobsg,jenkins,kliv,lcsmith,marki,mestayer,nerses,parkkj,pasyuk,primex,ripani,rossi,saw,staylor,sytnik,taiuti,taylorw,timmer,wooyoung

== RHEL7 (64 bit) ==

Installed using DVD provided by Computer Center, currently RHEL7.3. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation. On DELL servers, hold F2 after power on and go to 'Device Settings' to see mac address. Remember machine memory size as well, will needed when create partitions, find it in 'System BIOS -> Memory Settings'.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* Please enter the hostname of this system: <hostname> <enter>

* What type of system are you building? (D)esktop: <enter>

* Is this a CUE level 1 or CUE level 2 System build (1/2): 2 <enter>

* Please enter the System Admin's CUE username: boiarino <enter>

* Do you want to use the default partitioning scheme (y/n)? n <enter>

* Are you sure you want to use your own partitioning scheme (y/n)? y <enter>

Choose 'Standard Partition' scheme and create following partitions: /boot - 1GB, swap - double memory size, / - the rest of space.

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically.

After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

When machine reboots for the last time, ask Paul Letta to set usual hallb root password. From now on remote root access is possible. Alternatively, user ''boiarino'' can execute most of actions using ''sudo'',
like ''sudo emacs'' for protected files. ''sudo reboot'' etc.

Go to /boot/grub2 and modify file grub.cfg, Linux kernel boot options, adding options ''net.ifnames=0 biosdevname=0'', so your boot string has following section:

..... rhgb net.ifnames=0 biosdevname=0 quiet .....

so whole line looks something like this:

linux16 /vmlinuz-3.10.0-327.18.2.el7.x86_64 root=UUID=b5d1b5ad-e3f6-4db4-8972-aa9c1a91d116 ro vconsole.keymap=us crashkernel=auto vconsole.font=latarcyrheb-sun16 rhgb net.ifnames=0 biosdevname=0 quiet LANG=en_US.UTF-8

Reboot machine, ethernet ports must be named ''eth0'', ''eth1'' etc.

To update manually, use commands ''yum list updates'' and ''yum update''.

'''NOTE:''' add machine to the appropriate '''puppet''' group, it will do all following automatically (hopefully).

'''NOTE:''' on RHEL7.9, RPM EPEL REPO is not enabled by default, which prevents from installing nload, itcl, itk etc. To bring it back, it can be copied it from older machine, for example:

cd /etc/yum.repos.d
scp clondaq7:/etc/yum.repos.d/epel.repo .
cd /etc/pki/rpm-gpg
scp clondaq7:/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 .

Alternatively, following can be used to add repo's:

subscription-manager repos --enable <repo_id>

In particular, following have to be enabled to get nload, xpdf, python-alembic, tix, itcl, itk etc:

subscription-manager repos --enable JLab_EPEL_EPEL_7
subscription-manager repos --enable rhel-7-workstation-optional-rpms

Repo ID's can be obtained by:

subscription-manager repos --list

Installed repo's can be seen by:

yum repolist

'''Yum updates'''

Edit the ''/etc/yum.conf'' file and add the following line to force installation of the 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install xterm mesa-dri-drivers telnet rsh readline-devel net-snmp-utils tigervnc-server tigervnc xpdf nload mariadb-devel libxml2-devel glibc-devel qt-devel python-alembic openssl-devel apr-devel
yum install libconfig-devel # recent addition for CODA libraries

Fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

Do following to be able to compile and run 32-bit apps on 64-bit machine (for compatibility with 32bit applications):

yum install libXpm-devel libXaw-devel motif-devel glibc-devel ncurses-devel readline-devel

Modify file ''/etc/passwd'' adding following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

'''Note''': user-related lines must be removed, like

+boiarino::::::

as well as

+::::::

'''Note''': assumed that following line is in already:

+@ccc::::::

'''Note''': if following line exist, it must be placed in the end, or removed:

+::::::/bin/false

Modify file ''/etc/group'' adding following:

onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik,baltzell,carman
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Modify file ''/etc/shadow'' using an example from another RHEL7 clon machine (clonioc2 etc). Do ''chmod 600 shadow'' before editing and ''chmod 000 shadow'' after.

Make sure file ''/etc/ssh/sshd_config'' has following line uncommented (must be pushed in by CC security scripts):

##PermitUserEnvironment yes

NOT NEEDED, DONE IN THE END OF FILE ALREADY !!! Uncomment following in file ''/etc/ssh/ssh_config'':

##Host *
##ForwardX11 yes

Add line 'export NO_AT_BRIDGE=1' to the file '/etc/environment' to suppress annoying messages like '** (emacs:38714): WARNING **: Couldn't register with accessibility bus: Did not receive a reply.'

If big (>2GB) partition to be formated, do following (for example /dev/sdb):

parted /dev/sdb
(parted) print
(parted) mklabel gpt
(parted) print
mkpart primary 0GB 25855.2GB
(parted) print
(parted) quit

mkfs.xfs /dev/sdb1

then create /data and mount it using ''/etc/fstab'':

/dev/sdb1 /data xfs defaults 1 2

'''NOTE:''' sometimes machine can loose NIS connection, then ssh to it becomes intermittent; if it happens ssh as root (may have to try several times) and run command

ypwhich

to shows NIS server. If it returns nothing check file ''/etc/resolv.conf'', it must have following (as on July 2019):

search jlab.org acc.jlab.org
nameserver 129.57.90.255
nameserver 129.57.32.101

If file is empty or does not contain right info, fix it. After that run command

ypbind

It should fix a problem. Run ''ypwhich'' to make sure.

'''Display Setting:''' if machine is multi-head, goto ''Applications->System Tools->Settings->Devices->Displays'' and arrange displays.

Proceed to the [[Linux Customization on CLON Cluster]].

== RHEL6 (64 bit) ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* ...[D]esktop: [use 's' for server, 'd' for desktop] <enter>

* root password: enter root password

* admin user: boiarino

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically. After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

To make emacs work, install

yum install libotf

Edit the /etc/yum.conf file and add the following line to force installation of teh 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install openmotif-devel xinetd mysql-devel cmake libXpm-devel net-snmp-utils
yum install mesa-libGL-devel mesa-libGLU-devel mesa-libGLw-devel (for OpenGL, needed by ROOT)
yum install libXaw-devel (for xterm)
yum install expat-devel libgcj-devel (for evio/et)

yum install compat-libtermcap (for xterm)
ln -s /lib/libtermcap.so.2 /usr/lib/libtermcap.so
###ln -s /lib64/libtermcap.so.2 /usr/lib64/libtermcap.so

Install following fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

'''NOTE:''' Useful ''yum'' commands:

yum whatprovides libstdc++.so.5 - show which package contains libstdc++.so.5

== RHEL5 ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (email to helpdesk@jlab.org) because it is network-based installation.

Dialog:

* boot: <enter>

* ...[D]esktop: Server (it is ignored, will do Desktop anyway ...)

* root password: enter root password

* system user: <enter>

* manually partition disk: 100MB /boot, 2048 etc MB swap, the rest /.

'''CFENGINE''': there are procesess restoring some system config files (in particular ''/etc/ssh/sshd_config'') in according to the Computer Center - maintained templete. To shut them down: (1) comment out ''cfengine''-related stuff in root cronjobs; (2) do ''/etc/init.d/cfengine stop''; (3) do ''chkconfig cfengine off''. Ask CC (Sherman White, Paul Letta) to fix templete.

Run ''/usr/bin/system-config-authentication'' and set NIS servers list as ''clon00,clon10,nis1''.

Add following in the end of ''/etc/passwd'':
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:6005:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+@ccc::::::

Add following in the end of ''/etc/group'':
onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Create ''/etc/shadow'' files with entries for users clasrun, epics and nagios (copy from another machine).

Install updates: normally all updates should be installed by now, it can be done manually by commands
yum list updates
yum update

Configure [[SSH]].

Install missing packages:
yum install openmotif-devel xinetd mysql-devel cmake

Some additional packages on request (for EPICS):

yum install mc lapack lapack-devel blas blas-devel giflib-devel

Proceed to the [[Linux Customization on CLON Cluster]].

'''PROBLEMS''':

1. /usr/lib/libg2c.so link is missing

FIXED ??? 2. /usr/lib/libXm.so link is missing

3. Created /etc/shadow file for clasrun, epics and nagios

== RHEL4 ==

Get RHEL4 CDs from Paul Letta.

Connect terminal, keyboard and mouse.

Boot from CD1. Follow instructions. When asked, choose following options:

* Choose 'Manually partition with Disk Druid', set /boot to 100MB, then / to 40GB, then swap to 8192MB or at least double memory size. The rest of disk can be set as /space.

* Network: choose manually, type clonpc2.jlab.org; click 'EDIT', deactivate 'Configure using DHCP',
type IP address and netmask (255.255.255.0), click Ok.
Type Gateway (for example 129.57.167.99) and 3 DNS servers (129.57.167.5,129.57.167.14,129.57.32.100).

* Choose 'No firewall'

* Disable 'SELinux'

* Choose 'Customize software packages to be installed', click 'Everything'.

You will be asked to install CD2, CD3 and CD4, then CD1 again.
Then you will be asked to click 'Reboot'. First remove CD, then click 'Reboot'.
You will be asked few more questions. When asked to activate service, choose
'Tell me why I need to register ..' and click 'Next'. Choose 'I can not complete registration ..'
and click 'Next'. You will see 'System user' screen, click 'Use network login..'.
Choose 'Enable NIS support' and click 'Configure NIS'. Type NIS Domain: 'CCCHP' and NIS Server: clon00.jlab.org.
Finish installation process.

* fix files ''/etc/passwd'', ''/etc/shadow'' and ''/etc/group'' adding clasrun etc (see examples on another machines).

'''NOTE''': if machine has multiple network ports, Linux may not assign them properly to specified IP names and addresses. If problem occures, open network GUI and delete all existing records. After that, click ''New'' and pick hadrware port you want to configure from the list of available ports (tricky part is to know which RJ-45 connector corresponds to which port ..). Configure and activate it, make sure it works. Repeat for other ports. Results will be stored in directory ''/etc/sysconfig/network-scripts'', file names will be ''ifcfg-eth0'', ''ifcfg-eth1'' etc. If modifying those files manually, restart network by ''/etc/init.d/network restart''. Finally, set routing, for example for ''clonmon'' command ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
Run following commands:
/sbin/route add -net 129.57.160.0 netmask 255.255.255.0 gw 129.57.160.5 dev eth1
/sbin/route add -net 129.57.68.0 netmask 255.255.255.0 gw 129.57.68.26 dev eth3
/sbin/route add -net 129.57.69.0 netmask 255.255.255.0 gw 129.57.69.206 dev dev5937
/sbin/route add -net 129.57.64.0 netmask 255.255.255.0 gw 129.57.64.57 dev eth0
Now ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 129.57.160.5 255.255.255.0 UG 0 0 0 eth1
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 129.57.68.26 255.255.255.0 UG 0 0 0 eth3
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 129.57.69.206 255.255.255.0 UG 0 0 0 dev5937
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 129.57.64.57 255.255.255.0 UG 0 0 0 eth0
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
In that example automount will do configured using ''clonmon-daq1'' interface, because default ''clonmon'' interface is on external subnet. To make that routing table permanent (retore it after reboot) I tried to add four files with following contents to the ''/etc/sysconfig/network-scripts'' directory:
route-eth1:
GATEWAY0=129.57.160.5
NETMASK0=255.255.255.0
ADDRESS0=129.57.160.0
route-eth3:
GATEWAY0=129.57.68.26
NETMASK0=255.255.255.0
ADDRESS0=129.57.68.0
route-dev5937:
GATEWAY0=129.57.69.206
NETMASK0=255.255.255.0
ADDRESS0=129.57.69.0
route-eth0:
GATEWAY0=129.57.64.57
NETMASK0=255.255.255.0
ADDRESS0=129.57.64.0
It did not worked. Then I added four ''/sbin/route add ..'' lines to ''/etc/rc.local'' script, and it worked.

From now on you can use remote 'ssh' connection.

* To configure your system to use the patch server, issue the following commands as root:
# mount jlabsite:/site /mnt
# /mnt/CC/linux/satellite-connect --patchall
The script will prompt you for an activation key, but if you don't know what this is, just hit ENTER and it will use a sensible default. Depending on how many patches need to be applied to your system to bring it up to the current level, this script may take a very long time to run. When it finishes, you should reboot your machine to make the new patches take effect.

To install updates later run ''up2date -uf'' as ''root''.

Configure [[SSH]].

* Proceed with [[Linux Customization on CLON Cluster]] if applicable.

To boot Linux in single user mode (no graphics), add ''single'' to the end of boot line during boot process.

== '''background info''' ==

'''Add startup script'''

Create script in ''/etc/init.d/'' directory (use existing scripts as example). Must have a line like
# chkconfig: - 91 09
which specifies start and stop order. Run commands
chkconfig --add <scriptname>
chkconfig --level 3 <scriptname> on
for every level you want that script to be executed (usualy 3 and/or 4 and/or 5). Check if it os done using command
chkconfig --list | grep <scriptname>

'''xxx'''

You can choose to download the RHEL operating system directly from the Red Hat Web site and not receive a media kit from HP containing the software. This scenario occurs when the media option AJR is deselected from the order. (The media kit option is always selected by default. )

It is necessary to register at the Red Hat Web site prior to download. Registration requires the activation code that each customer receives from HP when ordering either RHEL.

You can download RHEL for each available platform as four CD ISO images or one DVD ISO image.

Use the following procedure to download RHEL and create the installation media:

1.

Register and log in at the following Red Hat Web site:

www.redhat.com/rhn
2.

Click on channels and then select Red Hat Enterprise Linux ES (v.4 for 64–bit Intel Itanium).
3.

Select Downloads and then download the ISO images of install, compatibility and source disks

Files with ia64 in the name are for the Itanium platform.
4.

Create the CDs or a DVD from the ISO images.

IMPORTANT: Create the CDs or DVD using the contents of the ISO images. Do not create the CDs or DVD by burning the .iso files themselves to CD or DVD. For example, if you are using K3b to burn a CD, click Tools>CD>Burn CD Image, select the .iso image, then click Burn.

'''Bootup scripts''' for example for level 5 execution (multiuser with X):

cp <script-file> /etc/init.d/
chmod +x /etc/init.d/<script-file>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/S50<scriptfile>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/K50<scriptfile>

'''Changing hostname/IP address'''

Changing hostname on RHEL
1. Change the HOSTNAME line in /etc/sysconfig/network
2. Change the hostname (FQDN and alias) in /etc/hosts
3. Run '/bin/hostname new_hostname' for the hostname change to take effect immediately.
4. Run '/sbin/service syslog restart' for syslog to log using the new hostname.
A reboot is not required to change the system hostname.

IP address: You have to change the IP address entry in
/etc/sysconfig/network-scripts/ifcfg-eth0.

Linux Installation Procedure

2026-02-10T19:56:03Z

Boiarino: /* Dell servers hardware trick(s) */

== Dell servers hardware trick(s) ==

* if looks dead, remove the power cords, then held in the on button for 30 seconds; then plug it back in and it may boots up fine - known Dell feature

* if BIOS date/time is incorrect, it may prevent redhat subscription to work. If BIOS does not remember time setting after power unplugged, on-board battery may need to be replaced

== ARM (CentsOS7) ==

See [[yum]] for specifics.

yum install xauth wget bzip2 xterm expat-devel libX11-devel libXpm-devel motif-devel mariadb-devel

== RHEL9 (64 bit) ==

'''NOTE''': select installation type '''H''', then type '''B'''.

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

Set root password (see instractions below), if you want to become superuser by typing just ''su''. If becoming superuser by typing ''sudo su'' is good enough, do nothing (in that case graphics will not work in superuser mode).

Install useful pachages:
yum install ncdu mysql

'''NOTE''': graphic screen is disabled, run following command as root:
systemctl set-default graphical.target

== RHEL9 (64 bit) - for machine NOT under puppet control ==

'''NOTE''': select installation type '''D''' (not '''S''', otherwise it will not be level 2 server)

'''NOTE''': during custom disk partitioning, select 'Standard' for every partition, if you want it to be standard, or 'Raid' if applicable

When installation complete, ssh as authorized user and do following:

sudo yum install emacs
cd /etc
sudo chmod a+rw shadow
sudo emacs shadow

Copy to /etc/shadow root and other needed passwords from another clon machine.

sudo chmod a-rw shadow

After that, type ''su'' to become superuser. All following settings can be done now without typing ''sudo'' every time. You still will not be able to ssh remotely as root - always ssh as authorized user and type ''su'' to become root.

Update /etc/passwd and /etc/group using another clon machine as example.

yum install expat-devel libXaw-devel mysql-devel motif-devel ncurses-devel apr-devel net-snmp-utils
yum install xorg-x11-utils # for xprop/xwininfo/etc creg stuff
yum install s-nail # for /usr/bin/mail
yum install ncdu
yum install libconfig-devel # recent addition for CODA libraries

To be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

update-crypto-policies --set LEGACY

and then probably reboot, not sure.

Somebody mentioned also adding ''RequiredRSASize 1024'' to a config file in ''/etc/ssh/ssh_config.d/'', but I did not do it.

Note: this changes all daemons and system settings and is a bit overkill if you only need to adjust the settings for ssh and sshd.

Exclude (only) sshd from the system-wide cryptographic policy. You opt-out by editing /etc/sysconfig/sshd and uncommenting the line # CRYPTO_POLICY= , (if necessary you can then adjust adjust /etc/ssh/sshd_config and add legacy crypto settings) and restart the ssh daemon.

For the ssh command line client on the RHEL 9 system: you're recommended to edit ˜/.ssh/config and override the modern/secure system wide ssh client defaults by adding a Host entry that adds support for suitable legacy encryption options for that particular host:

# ˜/.ssh/config

Host rhel6.example.com
KexAlgorithms +diffie-hellman-group14-sha1
MACs +hmac-sha1
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa

Prepare auto-mounting directories:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mv work work.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

== RHEL8 (64 bit) ==

'''NOTE:''' to boot from USB stick, insert USB stick, turn machine ON holding F2, and in BIOS Boot Configuration, set Enable Security Boot to OFF, save and exit, holding F2. When in BIOS again, in Boot Configuration make ''UEFI PHY USB ...'' first in boot sequence, local hard drive second, disable all other boot options, save and exit. Do NOT hold F2, Linux installation from USB stick will start. '''IMPORTANT:''' when asked about D/S options (very first question in installation process), '''REMOVE USB STICK BEFORE ANSWERING QUESTION ABOUT DESKTOP/SERVER''', otherwise it will be destroyed by following installation steps !!!

'''NOTE:''' to disable/enable puppet, do following as root:
puppet agent --disable "temporary"
puppet agent --enable

yum install emacs
yum install xorg-x11-fonts-misc

Move and create some directories in preparation for automounts:

cd /
mv apps apps.orig
mv home home.orig
mv scratch scratch.orig
mkdir apps
mkdir home
mkdir scratch
mkdir work
mkdir logs
cd /usr
mv local local.orig
mkdir local
mkdir clas
mkdir clas12
mkdir downloads
cd

Add line '''+dir:/etc/auto.master.d''' to ''/etc/auto.master''

Create file ''/etc/auto.master.d/direct.autofs'' with the line '''/- /etc/auto.direct'''

Create file ''/etc/auto.direct'' with the following contents:

# machine-dependent system directories
/apps -rw,bg clonfs1:/vol/apps/RHEL8_x86_64
/usr/local -rw,bg clonfs1:/vol/local/RHEL8_x86_64
# machine-independent system directories
/home -rw,bg clonfs1:/vol/home
#/work -rw,bg clonfs1-old:/vol/work
/scratch -rw,bg clonfs1:/vol/scratch
# machine-independent clas directories
/usr/downloads -rw,bg clonfs1:/vol/downloads
/usr/clas -rw,bg clonfs1:/vol/clas
/usr/clas12 -rw,bg clonfs1:/vol/clas12
# Used for data storage before shipping to tape
#/logs -rw,bg clonfs1-old:/vol/logs

Restart autofs:

service autofs reload
service autofs restart

Remove from the end of the ''/etc/passwd'' line '''+::::::''', and add following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

Update ''/etc/shadow'', adding passwords for local accounts (copy it from another machine).

Add following to ''/etc/group'':

clon:x:383:clascron
onliners:x:9998:abbottd,avakian,baltzell,battagli,brooksw,bruhwel,boiarino,carman,chen,clasboot,clascron,clasrun,cole,cuevas,davidl,danagu,dugger,elton,epics,fklein,gilfoyle,giovanet,golovach,gurjyan,heddle,heyes,hovanes,jacobsg,jenkins,kliv,lcsmith,marki,mestayer,nerses,parkkj,pasyuk,primex,ripani,rossi,saw,staylor,sytnik,taiuti,taylorw,timmer,wooyoung

== RHEL7 (64 bit) ==

Installed using DVD provided by Computer Center, currently RHEL7.3. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation. On DELL servers, hold F2 after power on and go to 'Device Settings' to see mac address. Remember machine memory size as well, will needed when create partitions, find it in 'System BIOS -> Memory Settings'.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* Please enter the hostname of this system: <hostname> <enter>

* What type of system are you building? (D)esktop: <enter>

* Is this a CUE level 1 or CUE level 2 System build (1/2): 2 <enter>

* Please enter the System Admin's CUE username: boiarino <enter>

* Do you want to use the default partitioning scheme (y/n)? n <enter>

* Are you sure you want to use your own partitioning scheme (y/n)? y <enter>

Choose 'Standard Partition' scheme and create following partitions: /boot - 1GB, swap - double memory size, / - the rest of space.

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically.

After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

When machine reboots for the last time, ask Paul Letta to set usual hallb root password. From now on remote root access is possible. Alternatively, user ''boiarino'' can execute most of actions using ''sudo'',
like ''sudo emacs'' for protected files. ''sudo reboot'' etc.

Go to /boot/grub2 and modify file grub.cfg, Linux kernel boot options, adding options ''net.ifnames=0 biosdevname=0'', so your boot string has following section:

..... rhgb net.ifnames=0 biosdevname=0 quiet .....

so whole line looks something like this:

linux16 /vmlinuz-3.10.0-327.18.2.el7.x86_64 root=UUID=b5d1b5ad-e3f6-4db4-8972-aa9c1a91d116 ro vconsole.keymap=us crashkernel=auto vconsole.font=latarcyrheb-sun16 rhgb net.ifnames=0 biosdevname=0 quiet LANG=en_US.UTF-8

Reboot machine, ethernet ports must be named ''eth0'', ''eth1'' etc.

To update manually, use commands ''yum list updates'' and ''yum update''.

'''NOTE:''' add machine to the appropriate '''puppet''' group, it will do all following automatically (hopefully).

'''NOTE:''' on RHEL7.9, RPM EPEL REPO is not enabled by default, which prevents from installing nload, itcl, itk etc. To bring it back, it can be copied it from older machine, for example:

cd /etc/yum.repos.d
scp clondaq7:/etc/yum.repos.d/epel.repo .
cd /etc/pki/rpm-gpg
scp clondaq7:/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 .

Alternatively, following can be used to add repo's:

subscription-manager repos --enable <repo_id>

In particular, following have to be enabled to get nload, xpdf, python-alembic, tix, itcl, itk etc:

subscription-manager repos --enable JLab_EPEL_EPEL_7
subscription-manager repos --enable rhel-7-workstation-optional-rpms

Repo ID's can be obtained by:

subscription-manager repos --list

Installed repo's can be seen by:

yum repolist

'''Yum updates'''

Edit the ''/etc/yum.conf'' file and add the following line to force installation of the 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install xterm mesa-dri-drivers telnet rsh readline-devel net-snmp-utils tigervnc-server tigervnc xpdf nload mariadb-devel libxml2-devel glibc-devel qt-devel python-alembic openssl-devel apr-devel
yum install libconfig-devel # recent addition for CODA libraries

Fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

Do following to be able to compile and run 32-bit apps on 64-bit machine (for compatibility with 32bit applications):

yum install libXpm-devel libXaw-devel motif-devel glibc-devel ncurses-devel readline-devel

Modify file ''/etc/passwd'' adding following:

hpsrun:x:8796:9998:hpsrun Account:/home/hpsrun:/bin/tcsh
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clasioc:x:6008:9998:CLAS IOCs:/home/clasioc:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:3888:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+sshd::::::
+::::::/bin/false

'''Note''': user-related lines must be removed, like

+boiarino::::::

as well as

+::::::

'''Note''': assumed that following line is in already:

+@ccc::::::

'''Note''': if following line exist, it must be placed in the end, or removed:

+::::::/bin/false

Modify file ''/etc/group'' adding following:

onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik,baltzell,carman
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Modify file ''/etc/shadow'' using an example from another RHEL7 clon machine (clonioc2 etc). Do ''chmod 600 shadow'' before editing and ''chmod 000 shadow'' after.

Make sure file ''/etc/ssh/sshd_config'' has following line uncommented (must be pushed in by CC security scripts):

##PermitUserEnvironment yes

NOT NEEDED, DONE IN THE END OF FILE ALREADY !!! Uncomment following in file ''/etc/ssh/ssh_config'':

##Host *
##ForwardX11 yes

Add line 'export NO_AT_BRIDGE=1' to the file '/etc/environment' to suppress annoying messages like '** (emacs:38714): WARNING **: Couldn't register with accessibility bus: Did not receive a reply.'

If big (>2GB) partition to be formated, do following (for example /dev/sdb):

parted /dev/sdb
(parted) print
(parted) mklabel gpt
(parted) print
mkpart primary 0GB 25855.2GB
(parted) print
(parted) quit

mkfs.xfs /dev/sdb1

then create /data and mount it using ''/etc/fstab'':

/dev/sdb1 /data xfs defaults 1 2

'''NOTE:''' sometimes machine can loose NIS connection, then ssh to it becomes intermittent; if it happens ssh as root (may have to try several times) and run command

ypwhich

to shows NIS server. If it returns nothing check file ''/etc/resolv.conf'', it must have following (as on July 2019):

search jlab.org acc.jlab.org
nameserver 129.57.90.255
nameserver 129.57.32.101

If file is empty or does not contain right info, fix it. After that run command

ypbind

It should fix a problem. Run ''ypwhich'' to make sure.

'''Display Setting:''' if machine is multi-head, goto ''Applications->System Tools->Settings->Devices->Displays'' and arrange displays.

Proceed to the [[Linux Customization on CLON Cluster]].

== RHEL6 (64 bit) ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (using jnet.jlab.org as 'boiarino') because it is network-based installation.

'''NOTE: all disks will be reformatted in a process, all information will be lost !'''

Dialog:

* boot: <enter>

* ...[D]esktop: [use 's' for server, 'd' for desktop] <enter>

* root password: enter root password

* admin user: boiarino

Installation will proceed. When prompted, remove installation disk and reboot machine if not done automatically. After reboot patching process will be started and it will take a while, do not interrupt it, otherwise system will not be installed correctly.

To make emacs work, install

yum install libotf

Edit the /etc/yum.conf file and add the following line to force installation of teh 32bit and 64bit libraries:

multilib_policy=all

Install following packages:

yum install openmotif-devel xinetd mysql-devel cmake libXpm-devel net-snmp-utils
yum install mesa-libGL-devel mesa-libGLU-devel mesa-libGLw-devel (for OpenGL, needed by ROOT)
yum install libXaw-devel (for xterm)
yum install expat-devel libgcj-devel (for evio/et)

yum install compat-libtermcap (for xterm)
ln -s /lib/libtermcap.so.2 /usr/lib/libtermcap.so
###ln -s /lib64/libtermcap.so.2 /usr/lib64/libtermcap.so

Install following fonts for EPICS EDMs:

yum install xorg-x11-fonts-75dpi xorg-x11-fonts-ISO8859-1-75dpi bitmap-miscfixed-fonts
yum install bitmap-console-fonts bitmap-fixed-fonts bitmap-lucida-typewriter-fonts
ln -s /usr/share/X11/fonts/100dpi /etc/X11/fontpath.d/xorg-x11-fonts-100dpi:pri=60
ln -s /usr/share/X11/fonts/75dpi /etc/X11/fontpath.d/xorg-x11-fonts-75dpi:pri=50
ln -s /usr/share/X11/fonts/misc /etc/X11/fontpath.d/xorg-x11-fonts-misc:pri=40
ln -s /usr/share/fonts/bitmap /etc/X11/fontpath.d/bitmap-fonts

'''NOTE:''' Useful ''yum'' commands:

yum whatprovides libstdc++.so.5 - show which package contains libstdc++.so.5

== RHEL5 ==

Installed using CD provided by Computer Center. Requires MAC address to be registered with Computer Center (email to helpdesk@jlab.org) because it is network-based installation.

Dialog:

* boot: <enter>

* ...[D]esktop: Server (it is ignored, will do Desktop anyway ...)

* root password: enter root password

* system user: <enter>

* manually partition disk: 100MB /boot, 2048 etc MB swap, the rest /.

'''CFENGINE''': there are procesess restoring some system config files (in particular ''/etc/ssh/sshd_config'') in according to the Computer Center - maintained templete. To shut them down: (1) comment out ''cfengine''-related stuff in root cronjobs; (2) do ''/etc/init.d/cfengine stop''; (3) do ''chkconfig cfengine off''. Ask CC (Sherman White, Paul Letta) to fix templete.

Run ''/usr/bin/system-config-authentication'' and set NIS servers list as ''clon00,clon10,nis1''.

Add following in the end of ''/etc/passwd'':
clasrun:x:2508:9998:Online DAQ:/home/clasrun:/bin/tcsh
clas12run:x:6007:146:clas12run Account:/home/clas12run:/bin/tcsh
clascron:x:6005:146:CLAS Cron Jobs:/home/clascron:/bin/tcsh
clasboot:x:6000:146:Boot Scripts Only:/home/clasboot:/bin/tcsh
clasmail:x:6003:146:CLAS Automated Mail:/home/clasmail:/bin/tcsh
epics:x:5001:146:EPICS Account:/home/epics:/bin/tcsh
nagios:x:6246:9997:Nagios:/home/nagios:/bin/tcsh
+@clon_cluster::::::
+@ccc::::::

Add following in the end of ''/etc/group'':
onliners::9998:heyes,hujl,rwm,timmer,wolin,taylorw,cuevas,abbottd,abulafia,anciant,anghi,aswin,auger,avakian,banta,barrow,battagli,bjlee,bogdan,brooksw,bruhwel,boiarino,buckle,burchesk,burin,bzh,cetina,chen,cole,cords,corvi,costy,davidl,costy,davidl,dcarter,dcurry,dennisl,deppman,dhlee,doughty,drago,dytman,dugger,dugger,elton,fedro,ficenec,fklein,france,freyberg,gholden,gilfoyle,golovach,gurjyan,haddock,heddle,jenkins,jhardie,jmorris,kellyk,klusman,kmkim,kossov,lcsmith,longhi,manak,marchand,marki,mastersj,mjohnson,mosbackr,mueller,muguira,murphyl,necaise,odonnell,opper,parkkj,pasyuk,phkim,piot,riccardi,richardt,ripani,rossi,saw,sergpozd,serov,sholt,staylor,taiuti,tang,tedeschi,vineyard,vlassov,vvsap,weygand,wooyoung,burchesk,clasrun,giovanet,clasboot,clascoda,clasroot,clasmail,clascron,trigger,epics,southern,carstens,ccutter,danagu,heyes,huertas,jacobsg,kliv,lachniet,mestayer,primex,hovanes,nerses,sytnik
clon::383:clascoda,clascron,clasmail
nagios::9997:nagios

Create ''/etc/shadow'' files with entries for users clasrun, epics and nagios (copy from another machine).

Install updates: normally all updates should be installed by now, it can be done manually by commands
yum list updates
yum update

Configure [[SSH]].

Install missing packages:
yum install openmotif-devel xinetd mysql-devel cmake

Some additional packages on request (for EPICS):

yum install mc lapack lapack-devel blas blas-devel giflib-devel

Proceed to the [[Linux Customization on CLON Cluster]].

'''PROBLEMS''':

1. /usr/lib/libg2c.so link is missing

FIXED ??? 2. /usr/lib/libXm.so link is missing

3. Created /etc/shadow file for clasrun, epics and nagios

== RHEL4 ==

Get RHEL4 CDs from Paul Letta.

Connect terminal, keyboard and mouse.

Boot from CD1. Follow instructions. When asked, choose following options:

* Choose 'Manually partition with Disk Druid', set /boot to 100MB, then / to 40GB, then swap to 8192MB or at least double memory size. The rest of disk can be set as /space.

* Network: choose manually, type clonpc2.jlab.org; click 'EDIT', deactivate 'Configure using DHCP',
type IP address and netmask (255.255.255.0), click Ok.
Type Gateway (for example 129.57.167.99) and 3 DNS servers (129.57.167.5,129.57.167.14,129.57.32.100).

* Choose 'No firewall'

* Disable 'SELinux'

* Choose 'Customize software packages to be installed', click 'Everything'.

You will be asked to install CD2, CD3 and CD4, then CD1 again.
Then you will be asked to click 'Reboot'. First remove CD, then click 'Reboot'.
You will be asked few more questions. When asked to activate service, choose
'Tell me why I need to register ..' and click 'Next'. Choose 'I can not complete registration ..'
and click 'Next'. You will see 'System user' screen, click 'Use network login..'.
Choose 'Enable NIS support' and click 'Configure NIS'. Type NIS Domain: 'CCCHP' and NIS Server: clon00.jlab.org.
Finish installation process.

* fix files ''/etc/passwd'', ''/etc/shadow'' and ''/etc/group'' adding clasrun etc (see examples on another machines).

'''NOTE''': if machine has multiple network ports, Linux may not assign them properly to specified IP names and addresses. If problem occures, open network GUI and delete all existing records. After that, click ''New'' and pick hadrware port you want to configure from the list of available ports (tricky part is to know which RJ-45 connector corresponds to which port ..). Configure and activate it, make sure it works. Repeat for other ports. Results will be stored in directory ''/etc/sysconfig/network-scripts'', file names will be ''ifcfg-eth0'', ''ifcfg-eth1'' etc. If modifying those files manually, restart network by ''/etc/init.d/network restart''. Finally, set routing, for example for ''clonmon'' command ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
Run following commands:
/sbin/route add -net 129.57.160.0 netmask 255.255.255.0 gw 129.57.160.5 dev eth1
/sbin/route add -net 129.57.68.0 netmask 255.255.255.0 gw 129.57.68.26 dev eth3
/sbin/route add -net 129.57.69.0 netmask 255.255.255.0 gw 129.57.69.206 dev dev5937
/sbin/route add -net 129.57.64.0 netmask 255.255.255.0 gw 129.57.64.57 dev eth0
Now ''route -n'' shows following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
129.57.160.0 129.57.160.5 255.255.255.0 UG 0 0 0 eth1
129.57.160.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
129.57.68.0 129.57.68.26 255.255.255.0 UG 0 0 0 eth3
129.57.68.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
129.57.69.0 129.57.69.206 255.255.255.0 UG 0 0 0 dev5937
129.57.69.0 0.0.0.0 255.255.255.0 U 0 0 0 dev5937
129.57.64.0 129.57.64.57 255.255.255.0 UG 0 0 0 eth0
129.57.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3
0.0.0.0 129.57.68.100 0.0.0.0 UG 0 0 0 eth3
In that example automount will do configured using ''clonmon-daq1'' interface, because default ''clonmon'' interface is on external subnet. To make that routing table permanent (retore it after reboot) I tried to add four files with following contents to the ''/etc/sysconfig/network-scripts'' directory:
route-eth1:
GATEWAY0=129.57.160.5
NETMASK0=255.255.255.0
ADDRESS0=129.57.160.0
route-eth3:
GATEWAY0=129.57.68.26
NETMASK0=255.255.255.0
ADDRESS0=129.57.68.0
route-dev5937:
GATEWAY0=129.57.69.206
NETMASK0=255.255.255.0
ADDRESS0=129.57.69.0
route-eth0:
GATEWAY0=129.57.64.57
NETMASK0=255.255.255.0
ADDRESS0=129.57.64.0
It did not worked. Then I added four ''/sbin/route add ..'' lines to ''/etc/rc.local'' script, and it worked.

From now on you can use remote 'ssh' connection.

* To configure your system to use the patch server, issue the following commands as root:
# mount jlabsite:/site /mnt
# /mnt/CC/linux/satellite-connect --patchall
The script will prompt you for an activation key, but if you don't know what this is, just hit ENTER and it will use a sensible default. Depending on how many patches need to be applied to your system to bring it up to the current level, this script may take a very long time to run. When it finishes, you should reboot your machine to make the new patches take effect.

To install updates later run ''up2date -uf'' as ''root''.

Configure [[SSH]].

* Proceed with [[Linux Customization on CLON Cluster]] if applicable.

To boot Linux in single user mode (no graphics), add ''single'' to the end of boot line during boot process.

== '''background info''' ==

'''Add startup script'''

Create script in ''/etc/init.d/'' directory (use existing scripts as example). Must have a line like
# chkconfig: - 91 09
which specifies start and stop order. Run commands
chkconfig --add <scriptname>
chkconfig --level 3 <scriptname> on
for every level you want that script to be executed (usualy 3 and/or 4 and/or 5). Check if it os done using command
chkconfig --list | grep <scriptname>

'''xxx'''

You can choose to download the RHEL operating system directly from the Red Hat Web site and not receive a media kit from HP containing the software. This scenario occurs when the media option AJR is deselected from the order. (The media kit option is always selected by default. )

It is necessary to register at the Red Hat Web site prior to download. Registration requires the activation code that each customer receives from HP when ordering either RHEL.

You can download RHEL for each available platform as four CD ISO images or one DVD ISO image.

Use the following procedure to download RHEL and create the installation media:

1.

Register and log in at the following Red Hat Web site:

www.redhat.com/rhn
2.

Click on channels and then select Red Hat Enterprise Linux ES (v.4 for 64–bit Intel Itanium).
3.

Select Downloads and then download the ISO images of install, compatibility and source disks

Files with ia64 in the name are for the Itanium platform.
4.

Create the CDs or a DVD from the ISO images.

IMPORTANT: Create the CDs or DVD using the contents of the ISO images. Do not create the CDs or DVD by burning the .iso files themselves to CD or DVD. For example, if you are using K3b to burn a CD, click Tools>CD>Burn CD Image, select the .iso image, then click Burn.

'''Bootup scripts''' for example for level 5 execution (multiuser with X):

cp <script-file> /etc/init.d/
chmod +x /etc/init.d/<script-file>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/S50<scriptfile>
ln -s /etc/init.d/<scriptfile> /etc/rc.d/rc5.d/K50<scriptfile>

'''Changing hostname/IP address'''

Changing hostname on RHEL
1. Change the HOSTNAME line in /etc/sysconfig/network
2. Change the hostname (FQDN and alias) in /etc/hosts
3. Run '/bin/hostname new_hostname' for the hostname change to take effect immediately.
4. Run '/sbin/service syslog restart' for syslog to log using the new hostname.
A reboot is not required to change the system hostname.

IP address: You have to change the IP address entry in
/etc/sysconfig/network-scripts/ifcfg-eth0.

Move2silo

2026-02-09T18:35:42Z

Boiarino:

'''RHEL9'''

NOTE: package installed from ''yum'', presumably by ''puppet'', and presumably by command ''yum install jasmine-client'' (''jasmine-client-54.10.5-1'', or whatever newer vertion is)

CLAS12(rg-l) data:

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/clas12/rg-l/data -jvm:-Dfile.transfer.client.displayrates=true
##0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/clas12/rg-l/data -jvm:-Dfile.transfer.client.displayrates=true -delete written

PRAD test setup data:

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/hallb/prad2/data -jvm:-Dfile.transfer.client.displayrates=true -delete written

uRwell test setup data (clondaq11):

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/uRwell /data/uRwell /mss/clas12/detectors/uRwell/2026_EEL -jvm:-Dfile.transfer.client.displayrates=true -delete written

'''NOTE:''' log files can be found in ''/tmp/clascron/jmigrate'' subdirectories

'''NOTE:''' add flag ''-cache'' if want files to be stored in cache

'''RHEL7'''

NOTE: ''jasmine'' software installed by Chris Larrieu to the area ''/usr/local/scicomp'' mounted on all RHEL7 machines

Data moving process initiated by cronjob, running from 'clascron' account, for example for HPS experiment on clondaq5:

0,10,20,30,40,50 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/stage5 /data/stage5 /mss/hallb/hps/physrun2019/data -jvm:-Dfile.transfer.client.displayrates=true

and for CLAS12 run group A on clondaq6:

0,10,20,30,40,50 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/stage6 /data/stage6 /mss/clas12/rg-a/data -jvm:-Dfile.transfer.client.displayrates=true

Cronjob files for different run periods can be found in ''~clascron/backup/'' directory.

'''OLD'''

In auto.master make sure the auto.direct is mounted without timeout:

/- /etc/auto.direct --timeout 0

If changed, restart autofs (on RHEL7 do 'service autofs restart'). To forcibly unmount do 'umount -lf /xxx/yyy'.

Following have to be in auto.direct:

/lustre/scicomp/jasmine/fairy2 -fstype=nfs,rw,async,vers=3 scidaqgw10b:/lustre/scicomp/jasmine/fairy2

Following cronjob have to be running as user 'clascron' on machine moving data to tape:

# Scan for to-tape files every 15 minutes
10,25,40,55 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/totape /data/totape /mss/clas12/er-a/data -jvm:-Dfile.transfer.client.displayrates=true
# access occasionally to keep it visible
* * * * * /bin/csh -c "(ls -al /lustre/scicomp/jasmine/fairy2/) >>&! /usr/logs/disks/clondaq6_lustre"
* * * * * /bin/csh -c "(sleep 48; rm -f /usr/logs/disks/clondaq6_lustre) >>&! /dev/null"

Log files are in
/usr/local/scicomp/jasmine/log/jmigrate/data-totape/.

If job stuck, remove the lock file:

rm /tmp/jmigrate-data-totape.lock

Useful command to check process status:

ps auxf | grep java

If see something like

clascron 128847 0.0 1.0 7307240 662088 ? D Dec14 0:00 \_ java -DJMirror.minFileModif.........

job marked as 'D' is in uninterruptable state and cannot not be kiiled by 'kill -9'. Other stuck jobs can be killed, they became <defunct>.

To see files on tape, ssh to ifarm65 and type:

ls -ltrh /mss/clas12/er-a/data/ | tail

To see files still in cache:

ls -ltrh /cache/mss/clas12/er-a/data/ | tail

To retrieve from the tape :
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y #copy to the current directory
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y /path/to/dir #copy to the directory with path
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y /mss/clas12/er-a/data/clas_00XXXX.evio.Z /path/to/dir # copy two files

Mover's status can be checked at https://scicomp.jlab.org/scicomp/moverStatus

Job's schedule can be checked at https://scicomp.jlab.org/scicomp/tapeJob/scheduled

'''NOTE''': problems were observed in Dec 2017 moving data with NFS-mounted scidaqgw10b or scidaqgw10f. To fix stuched job, jcancel have to be issued on movers side. When NFS mount was removed and process started to use network socket, everything works.

Move2silo

2026-02-06T20:14:26Z

Boiarino:

'''RHEL9'''

NOTE: package installed from ''yum'', presumably by ''puppet'', and presumably by command ''yum install jasmine-client'' (''jasmine-client-54.10.5-1'', or whatever newer vertion is)

CLAS12(rg-l) data:

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/clas12/rg-l/data -jvm:-Dfile.transfer.client.displayrates=true
##0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/clas12/rg-l/data -jvm:-Dfile.transfer.client.displayrates=true -delete written

PRAD test setup data:

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/hallb/prad2/data -jvm:-Dfile.transfer.client.displayrates=true -delete written

uRwell test setup data (clondaq11):

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/uRwell /data/uRwell /mss/clas12/detectors/uRwell/2026_EEL -jvm:-Dfile.transfer.client.displayrates=true -delete written

'''NOTE:''' log files can be found in ''/tmp/clascron/jmigrate'' subdirectories

'''RHEL7'''

NOTE: ''jasmine'' software installed by Chris Larrieu to the area ''/usr/local/scicomp'' mounted on all RHEL7 machines

Data moving process initiated by cronjob, running from 'clascron' account, for example for HPS experiment on clondaq5:

0,10,20,30,40,50 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/stage5 /data/stage5 /mss/hallb/hps/physrun2019/data -jvm:-Dfile.transfer.client.displayrates=true

and for CLAS12 run group A on clondaq6:

0,10,20,30,40,50 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/stage6 /data/stage6 /mss/clas12/rg-a/data -jvm:-Dfile.transfer.client.displayrates=true

Cronjob files for different run periods can be found in ''~clascron/backup/'' directory.

'''OLD'''

In auto.master make sure the auto.direct is mounted without timeout:

/- /etc/auto.direct --timeout 0

If changed, restart autofs (on RHEL7 do 'service autofs restart'). To forcibly unmount do 'umount -lf /xxx/yyy'.

Following have to be in auto.direct:

/lustre/scicomp/jasmine/fairy2 -fstype=nfs,rw,async,vers=3 scidaqgw10b:/lustre/scicomp/jasmine/fairy2

Following cronjob have to be running as user 'clascron' on machine moving data to tape:

# Scan for to-tape files every 15 minutes
10,25,40,55 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/totape /data/totape /mss/clas12/er-a/data -jvm:-Dfile.transfer.client.displayrates=true
# access occasionally to keep it visible
* * * * * /bin/csh -c "(ls -al /lustre/scicomp/jasmine/fairy2/) >>&! /usr/logs/disks/clondaq6_lustre"
* * * * * /bin/csh -c "(sleep 48; rm -f /usr/logs/disks/clondaq6_lustre) >>&! /dev/null"

Log files are in
/usr/local/scicomp/jasmine/log/jmigrate/data-totape/.

If job stuck, remove the lock file:

rm /tmp/jmigrate-data-totape.lock

Useful command to check process status:

ps auxf | grep java

If see something like

clascron 128847 0.0 1.0 7307240 662088 ? D Dec14 0:00 \_ java -DJMirror.minFileModif.........

job marked as 'D' is in uninterruptable state and cannot not be kiiled by 'kill -9'. Other stuck jobs can be killed, they became <defunct>.

To see files on tape, ssh to ifarm65 and type:

ls -ltrh /mss/clas12/er-a/data/ | tail

To see files still in cache:

ls -ltrh /cache/mss/clas12/er-a/data/ | tail

To retrieve from the tape :
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y #copy to the current directory
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y /path/to/dir #copy to the directory with path
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y /mss/clas12/er-a/data/clas_00XXXX.evio.Z /path/to/dir # copy two files

Mover's status can be checked at https://scicomp.jlab.org/scicomp/moverStatus

Job's schedule can be checked at https://scicomp.jlab.org/scicomp/tapeJob/scheduled

'''NOTE''': problems were observed in Dec 2017 moving data with NFS-mounted scidaqgw10b or scidaqgw10f. To fix stuched job, jcancel have to be issued on movers side. When NFS mount was removed and process started to use network socket, everything works.

CLON Standard Procedures

2026-02-06T19:18:24Z

Boiarino: /* SRS/Maroc/VMM3 test setup in EEL/125 */

'''Contacts:'''

* Computer Center 24/7 phone: 876-1794
* Sergey Boyarinov: USA cell: 757-232-6221 by Verizon

=== MPD test in the Hall ===

ssh clasrun@clondaq9
runcontrol -rocs
Config: TEST3
Download: sergey/test3.trg (random 15Hz) or whatever

=== MPD test in EEL ===

'''NOTE:''' controller test33 is in crate svt3, so to reboot it, command ''roc_reboot svt3'' should be used

ssh clasrun@clonfarm21
setenv EXPID clasdev
runcontrol -rocs
Config: test33_clonfarm21
Download: sergey/random.trg

=== ALERT in the hall ===

ssh clasrun@clondaq7 (or vncviewer -Shared clondaq7:5901)
killcoda
runcontrol -rocs
Configure: ALERT_CTOF_CND_TS
Download: alert_cosmics.trg

Data will be written to directories ''clondaq7:/data/stage_in/alert_xxxxxx''

Configuring ATOF: reference to Benjamin Raydo <braydo@jlab.org>.

Config file for AHDC (Dream-based electronics) is ''$CLON_PARMS/mvt/alert1.cnf''. It is symbolic link, set by pedestal measurement procedure, reference to Rafayel Paremuzyan <rafopar@jlab.org>.

AHDC pedestal run procedure ('''as clasrun !!!'''):
ssh clasrun@alert1
(make sure coda components, like coda_roc_gef, are not running on alert1)
cd /home/clasrun/mvt/CodaScripts/
(adjust alert1c.cnf if needed)
./Alert MvtRunBatchCol PEDRUNTST alert1c 1000 DEBUG
(may need to delete lock file)

=== Wolfram test setup in TEDF/1546 ===

Just daq testing with random pulser:
ssh clasrun@pcal0
runcontrol -rocs
Configure: pcal0
Download: sergey/random.trg

Production:
ssh clasrun@clonpc27
runcontrol -rocs
Configure: WOLFRAM_POWDER
Download: PCAL0/wolfram.trg

=== Sampa test setup in EEL/125 ===

ssh clasrun@clonpc11
runcontrol -rocs
Configure: clonpc11_svt3
Download: sergey/svt3.trg

=== VMM test setup in 12/B108 ===

ssh clasrun@clondaq8
runcontrol -rocs
Configure: clondaq8
Download: sergey/dummy.trg

See [[VMM3]] for details.

=== SRS/Maroc/VMM3 test setup in EEL/125 ===

vncviewer clonsl3:3 (pass 'hpshodo')
ssh clasrun@clondaq11
runcontrol -rocs
Configure: urwell_maroc
Download: uRwellTestProto/test3_urwell_Random.trg

=== Streaming test setup in Hall B Counting Room ===

ssh clondaq1
runcontrol -rocs

Configure(test setup): TEST0 (test0 only), TEST0_TEST2 (test0 master + test2 slave)
Download: STREAMING/test0_test2.trg, STREAMING/test0_dcrb.trg

Configure(hallb): DC2(dc21,dc22,dc23 standalone)
Download: STREAMING/subway.trg

=== BDX test setup in EEL/125 ===

'''Triggered daq:'''

ssh clasrun@clondaq5
runcontrol -rocs
Configure: BDX0 (without writing to the disk), BDX0_ER (with writing)
Download: BDX/bdx0_random.trg (internal random pulser)
BDX/bdx0_generator.trg (external pulser)
BDX/bdx0_scintillator.trg (two scintillators coincidence)

'''Streaming daq:''' (release 1.4.0_streaming)

ssh clasrun@clondaq10 (will be clondaq5 in future)
runcontrol -rocs
Configure: sro_dbx0_clondaq10
Download: BDX/bdx0_streaming.trg

'''Serial connection to bdx0vtp:'''

ssh root@clonxt14
xminicom -D /dev/ttyUSB0

=== PRAD test setup in ESB ===

ssh clasrun@clondaq13
runcontrol -rocs
Configure: prad0, prad0_er
Download: PRAD/prad0.trg
(data will be recorded to local disk to directory /data)

=== PETIROC test setup ===

ssh clasrun@clondaq11
runcontrol -rocs
Configure: clondaq11

=== TEST1 setup (new controller, release 2.0.0) ===

ssh clasrun@clondaq15
ssh test7
runcontrol -rocs
coda config: test1
trigger file: $CLON_PARMS/trigger/test/test1.trg
data files will be written to directory /work/test1/, file names 'test1_002....'

Move2silo

2026-02-06T16:28:05Z

Boiarino:

'''RHEL9'''

NOTE: package installed from ''yum'', presumably by ''puppet'', and presumably by command ''yum install jasmine-client'' (''jasmine-client-54.10.5-1'', or whatever newer vertion is)

CLAS12(rg-l) data:

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/clas12/rg-l/data -jvm:-Dfile.transfer.client.displayrates=true
##0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/clas12/rg-l/data -jvm:-Dfile.transfer.client.displayrates=true -delete written

PRAD test setup data:

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/hallb/prad2/data -jvm:-Dfile.transfer.client.displayrates=true -delete written

uRwell test setup data (clondaq11):

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/uRwell /data/uRwell /mss/clas12/detectors/uRwell/2026_EEL -jvm:-Dfile.transfer.client.displayrates=true -delete written

'''RHEL7'''

NOTE: ''jasmine'' software installed by Chris Larrieu to the area ''/usr/local/scicomp'' mounted on all RHEL7 machines

Data moving process initiated by cronjob, running from 'clascron' account, for example for HPS experiment on clondaq5:

0,10,20,30,40,50 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/stage5 /data/stage5 /mss/hallb/hps/physrun2019/data -jvm:-Dfile.transfer.client.displayrates=true

and for CLAS12 run group A on clondaq6:

0,10,20,30,40,50 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/stage6 /data/stage6 /mss/clas12/rg-a/data -jvm:-Dfile.transfer.client.displayrates=true

Cronjob files for different run periods can be found in ''~clascron/backup/'' directory.

'''OLD'''

In auto.master make sure the auto.direct is mounted without timeout:

/- /etc/auto.direct --timeout 0

If changed, restart autofs (on RHEL7 do 'service autofs restart'). To forcibly unmount do 'umount -lf /xxx/yyy'.

Following have to be in auto.direct:

/lustre/scicomp/jasmine/fairy2 -fstype=nfs,rw,async,vers=3 scidaqgw10b:/lustre/scicomp/jasmine/fairy2

Following cronjob have to be running as user 'clascron' on machine moving data to tape:

# Scan for to-tape files every 15 minutes
10,25,40,55 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/totape /data/totape /mss/clas12/er-a/data -jvm:-Dfile.transfer.client.displayrates=true
# access occasionally to keep it visible
* * * * * /bin/csh -c "(ls -al /lustre/scicomp/jasmine/fairy2/) >>&! /usr/logs/disks/clondaq6_lustre"
* * * * * /bin/csh -c "(sleep 48; rm -f /usr/logs/disks/clondaq6_lustre) >>&! /dev/null"

Log files are in
/usr/local/scicomp/jasmine/log/jmigrate/data-totape/.

If job stuck, remove the lock file:

rm /tmp/jmigrate-data-totape.lock

Useful command to check process status:

ps auxf | grep java

If see something like

clascron 128847 0.0 1.0 7307240 662088 ? D Dec14 0:00 \_ java -DJMirror.minFileModif.........

job marked as 'D' is in uninterruptable state and cannot not be kiiled by 'kill -9'. Other stuck jobs can be killed, they became <defunct>.

To see files on tape, ssh to ifarm65 and type:

ls -ltrh /mss/clas12/er-a/data/ | tail

To see files still in cache:

ls -ltrh /cache/mss/clas12/er-a/data/ | tail

To retrieve from the tape :
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y #copy to the current directory
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y /path/to/dir #copy to the directory with path
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y /mss/clas12/er-a/data/clas_00XXXX.evio.Z /path/to/dir # copy two files

Mover's status can be checked at https://scicomp.jlab.org/scicomp/moverStatus

Job's schedule can be checked at https://scicomp.jlab.org/scicomp/tapeJob/scheduled

'''NOTE''': problems were observed in Dec 2017 moving data with NFS-mounted scidaqgw10b or scidaqgw10f. To fix stuched job, jcancel have to be issued on movers side. When NFS mount was removed and process started to use network socket, everything works.

Move2silo

2026-02-06T16:18:09Z

Boiarino:

'''RHEL9'''

NOTE: package installed from ''yum'', presumably by ''puppet'', and presumably by command ''yum install jasmine-client'' (''jasmine-client-54.10.5-1'', or whatever newer vertion is)

CLAS12(rg-l) data:

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/clas12/rg-l/data -jvm:-Dfile.transfer.client.displayrates=true
##0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/clas12/rg-l/data -jvm:-Dfile.transfer.client.displayrates=true -delete written

PRAD test setup data:

MAILTO=""
# Scan for to-tape files every 10 minutes
0,10,20,30,40,50 * * * * /usr/bin/jmigrate /data/stage2 /data/stage2 /mss/hallb/prad2/data -jvm:-Dfile.transfer.client.displayrates=true -delete written

'''RHEL7'''

NOTE: ''jasmine'' software installed by Chris Larrieu to the area ''/usr/local/scicomp'' mounted on all RHEL7 machines

Data moving process initiated by cronjob, running from 'clascron' account, for example for HPS experiment on clondaq5:

0,10,20,30,40,50 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/stage5 /data/stage5 /mss/hallb/hps/physrun2019/data -jvm:-Dfile.transfer.client.displayrates=true

and for CLAS12 run group A on clondaq6:

0,10,20,30,40,50 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/stage6 /data/stage6 /mss/clas12/rg-a/data -jvm:-Dfile.transfer.client.displayrates=true

Cronjob files for different run periods can be found in ''~clascron/backup/'' directory.

'''OLD'''

In auto.master make sure the auto.direct is mounted without timeout:

/- /etc/auto.direct --timeout 0

If changed, restart autofs (on RHEL7 do 'service autofs restart'). To forcibly unmount do 'umount -lf /xxx/yyy'.

Following have to be in auto.direct:

/lustre/scicomp/jasmine/fairy2 -fstype=nfs,rw,async,vers=3 scidaqgw10b:/lustre/scicomp/jasmine/fairy2

Following cronjob have to be running as user 'clascron' on machine moving data to tape:

# Scan for to-tape files every 15 minutes
10,25,40,55 * * * * /usr/local/scicomp/jasmine/bin/jmigrate /data/totape /data/totape /mss/clas12/er-a/data -jvm:-Dfile.transfer.client.displayrates=true
# access occasionally to keep it visible
* * * * * /bin/csh -c "(ls -al /lustre/scicomp/jasmine/fairy2/) >>&! /usr/logs/disks/clondaq6_lustre"
* * * * * /bin/csh -c "(sleep 48; rm -f /usr/logs/disks/clondaq6_lustre) >>&! /dev/null"

Log files are in
/usr/local/scicomp/jasmine/log/jmigrate/data-totape/.

If job stuck, remove the lock file:

rm /tmp/jmigrate-data-totape.lock

Useful command to check process status:

ps auxf | grep java

If see something like

clascron 128847 0.0 1.0 7307240 662088 ? D Dec14 0:00 \_ java -DJMirror.minFileModif.........

job marked as 'D' is in uninterruptable state and cannot not be kiiled by 'kill -9'. Other stuck jobs can be killed, they became <defunct>.

To see files on tape, ssh to ifarm65 and type:

ls -ltrh /mss/clas12/er-a/data/ | tail

To see files still in cache:

ls -ltrh /cache/mss/clas12/er-a/data/ | tail

To retrieve from the tape :
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y #copy to the current directory
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y /path/to/dir #copy to the directory with path
jget /mss/clas12/er-a/data/clas_00XXXX.evio.Y /mss/clas12/er-a/data/clas_00XXXX.evio.Z /path/to/dir # copy two files

Mover's status can be checked at https://scicomp.jlab.org/scicomp/moverStatus

Job's schedule can be checked at https://scicomp.jlab.org/scicomp/tapeJob/scheduled

'''NOTE''': problems were observed in Dec 2017 moving data with NFS-mounted scidaqgw10b or scidaqgw10f. To fix stuched job, jcancel have to be issued on movers side. When NFS mount was removed and process started to use network socket, everything works.

Network

2026-02-04T16:54:28Z

Boiarino:

== Display traffic ==

nload -i 10000000 -o 10000000 p6p1

netstat -anp | grep <port>

'''NOTE:''' when setting secondary ports in ''nmtui'' as ''manual'', always specify jlab default 'DNS servers' and 'Search domains', just in case !!! It looks like it prevents ''/etc/resolv.conf'' from being overwritten under certain circumstances, for example:

┌───────────────────────────┤ Edit Connection ├───────────────────────────┐
│ │
│ Profile name enp161s0np0_____________________________ │
│ Device enp161s0np0 (94:6D:AE:EF:87:68)_________ │
│ │
│ ═ ETHERNET <Show> │
│ ═ 802.1X SECURITY <Show> │
│ │
│ ╤ IPv4 CONFIGURATION <Manual> <Hide> │
│ │ Addresses 129.57.69.10/24__________ <Remove> │
│ │ <Add...> │
│ │ Gateway 129.57.69.1______________ │
│ │ DNS servers 129.57.90.255____________ <Remove> │
│ │ 129.57.32.101____________ <Remove> │
│ │ <Add...> │
│ │ Search domains jlab.org_________________ <Remove> │
│ │ acc.jlab.org_____________ <Remove> │
│ │ <Add...> │
│ │ │
│ │ Routing (No custom routes) <Edit...> │
│ │ [ ] Never use this network for default route │
│ │ [X] Ignore automatically obtained routes │
│ │ [X] Ignore automatically obtained DNS parameters │
│ │ │
│ │ [ ] Require IPv4 addressing for this connection │
│ └ │
│ │
│ ═ IPv6 CONFIGURATION <Automatic> <Show> │
│ │
│ [X] Automatically connect │
│ [X] Available to all users │
│ │
│ <Cancel> <OK> │
│

'''NOTE:''' after changing network,you may need to reboot machine to update ''nmtui''.

'''NOTE:''' New links will shows up as ''Wired connection ..'', so run ''nmtui'', and in every new connection change ''Profile name'' from ''Wired connection ..'' to the actual device name, like ''enp0s29u1u6'', to avoid confusion while setting bond later.

== Local network configuring using nmtui - example ==

┌───────────────────────────┤ Edit Connection ├───────────────────────────┐
│ │
│ Profile name localport1______________________________ │
│ Device E8:EA:6A:40:2F:50 (enp0s20u6)___________ │
│ │
│ ═ ETHERNET <Show> │
│ │
│ ╤ IPv4 CONFIGURATION <Manual> <Hide> │
│ │ Addresses 192.168.0.11_____________ <Remove> │
│ │ <Add...> │
│ │ Gateway _________________________ │
│ │ DNS servers <Add...> │
│ │ Search domains <Add...> │
│ │ │
│ │ Routing (No custom routes) <Edit...> │
│ │ [X] Never use this network for default route │
│ │ [X] Ignore automatically obtained routes │
│ │ [X] Ignore automatically obtained DNS parameters │
│ │ │
│ │ [X] Require IPv4 addressing for this connection │
│ └ │
│ │
│ ═ IPv6 CONFIGURATION <Automatic> <Show> │
│ │
│ [X] Automatically connect │
│ [X] Available to all users │
│ │
│ <Cancel> <OK> │

== Bond two network ports together, links to the switch (example for clonfarm21) ==

nmcli connection add type bond con-name enp_bond ifname enp_bond bond.options mode=802.3ad
nmcli connection add type ethernet ifname ens7np0 master enp_bond
nmcli connection add type ethernet ifname ens2np0 master enp_bond
nmcli connection show

Last command will show follwoing:

NAME UUID TYPE DEVICE
enp_bond 969dc408-bb43-49e0-8c29-62965f70f4c7 bond enp_bond
ens10f0 f333ab08-b67a-41c9-9108-7658af3435d0 ethernet ens10f0
ens2np0 85e7f4bd-5daf-3095-b207-bdcaf14d903c ethernet ens2np0
ens7np0 5abd79b1-22e9-4210-9262-fc2dbbda51f7 ethernet ens7np0
lo bcf93a26-5114-45c5-b586-9288dfefbb33 loopback lo
bond-slave-ens2np0 7961787a-f51f-459d-9bf8-0add8a528679 ethernet --
bond-slave-ens7np0 aa376ad3-fd9f-44a2-8154-04685ce2da72 ethernet --
ens10f1 0c14d2dd-c3bc-4d3d-8c7d-04cded521498 ethernet --
usb0 4fef7067-fb03-4115-ac62-c95a91979384 ethernet --

Now, set bond method to 'manual', and set IP address:

nmcli connection modify enp_bond ipv4.method manual ipv4.address 129.57.69.11/24

Set [[Routing]] if needed.

Run 'nmtui', you can actually do there everything what was done above. In addition, set mode '''Broadcast''' (IT IS IMPORTANT !), and MII=100/0/0.

Finally, disactivate both ens2np0 and ens7np0, and activate enp_bond; using 'nmtui', or command 'nmcli connection down/up <connection>'.

'''NOTE''': in our case, enp_bond inheritate mac from ens2np0, but IP from ens7np0; only ens7np0 was registered on jnet.

'''NOTE''': to change hash policy to ''layer3+4'', do following

echo 1 > /sys/class/net/enp_bond/bonding/xmit_hash_policy
cat /sys/class/net/enp_bond/bonding/xmit_hash_policy

'''NOTE''': to change frame size (default mtu=1500), do following

nmcli connection modify enp_bond 802-3-ethernet.mtu 9000

to check result (and other setting):

more /etc/NetworkManager/system-connections/enp_bond.nmconnection

It can be done temporary, for example for interface ''ens2np0'':

ip link set dev ens2np0 mtu 9000

To apply changes, restart NetworkManager:

systemctl restart NetworkManager

or bring the connection down and up:

nmcli connection down ens2np0
nmcli connection up ens2np0

To delete bond, run following command:

nmcli connection delete enp_bond

== Bond four network ports together, links to Maroc electronics (example for clondaq9) ==

nmcli connection add type bond con-name enp_bond ifname enp_bond bond.options mode=broadcast
nmcli connection add type ethernet ifname enp0s20u5 master enp_bond
nmcli connection add type ethernet ifname enp0s20u6 master enp_bond
nmcli connection add type ethernet ifname enp0s29u1u5 master enp_bond
nmcli connection add type ethernet ifname enp0s29u1u6 master enp_bond
nmcli connection show
nmcli connection modify enp_bond ipv4.method manual ipv4.address 192.168.0.2/24

Deactivate individual ports and activate bond:

nmcli connection down enp0s20u5
nmcli connection down enp0s20u6
nmcli connection down enp0s29u1u5
nmcli connection down enp0s29u1u6
nmcli connection up enp_bond

Run ''nmtui'' and fix remaining details - screen should looks like this:
┌────────────────────────────┤ Edit Connection ├────────────────────────────┐
│ │
│ Profile name enp_bond________________________________ │
│ Device enp_bond________________________________ │
│ │
│ ╤ BOND <Hide> │
│ │ Slaves │
│ │ ┌─────────────────────────────────────────────────┐ │
│ │ │ bond-slave-enp0s29u1u6 ↑ │ <Add> │
│ │ │ bond-slave-enp0s29u1u5 ▒ │ │
│ │ │ bond-slave-enp0s20u6 ▒ │ <Edit...> │
│ │ │ bond-slave-enp0s20u5 ▒ │ │
│ │ │ ▒ │ <Delete> │
│ │ │ ↓ │ │
│ │ └─────────────────────────────────────────────────┘ │
│ │ Mode <Broadcast> │
│ │ Link monitoring <MII (recommended)> │
│ │ Monitoring frequency 100_______ ms │
│ │ Link up delay 0_________ ms │
│ │ Link down delay 0_________ ms │
│ │ Cloned MAC address ________________________________________ │
│ └ │
│ │
│ ╤ IPv4 CONFIGURATION <Manual> <Hide> │
│ │ Addresses 192.168.0.2/24___________ <Remove> │
│ │ <Add...> │
│ │ Gateway _________________________ │
│ │ DNS servers <Add...> │
│ │ Search domains <Add...> │
│ │ │
│ │ Routing (No custom routes) <Edit...> │
│ │ [X] Never use this network for default route │
│ │ [X] Ignore automatically obtained routes │
│ │ [X] Ignore automatically obtained DNS parameters │
│ │ │
│ │ [X] Require IPv4 addressing for this connection │
│ └ │
│ │
│ ═ IPv6 CONFIGURATION <Automatic> <Show> │
│ │
│ [X] Automatically connect │
│ [X] Available to all users │
│ │
│ <Cancel> <OK> │
│ │

Linux Boot Server

2026-02-03T21:40:18Z

Boiarino: /* VTP CentOS boot */

'''Main boot server is clon01'''.

'''TO DO''' Check UBOOT commands to erase existing environment variables:

env default -a -f
env erase

== '''VTP CentOS boot''' ==

UBOOT (example for gem0vtp):

Zynq> printenv
autoload=no
baudrate=115200
bootcmd=run tftpboot
bootdelay=3
bootro=setenv bootargs ${bootargs} ro
bootrw=setenv bootargs ${bootargs} rw
devicetree_image=devicetree.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=ce:ba:f0:03:xx:xx
extargs=setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
initrd_high=0x20000000
kernel_image=uImage-4.4.0-xilinx-00004-g8d932a
kernel_load_address=0x2080000
load_devicetree=if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;
load_dhcp=if dhcp; then echo OK; else echo FAILED; reset; fi;
load_kernel=if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;
modeboot=sdboot
netmask=255.255.255.0
nfsargs=setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3
rootpath=/vol/diskless/CentOS7/armv7/root
rootserverip=129.57.167.152
serverip=129.57.167.4
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftp_boot_string=echo TFTPing Image to RAM
tftpboot=run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftpboot_rw=dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftppath=linux-install/CentOS7-armv7-Diskless

Environment size: 1603/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it by groups as shown, otherwise it may place some bull...):

setenv bootargs
setenv gatewayip
setenv ipaddr
setenv kernel_path
setenv nfsip
setenv nfsroot
setenv sdboot
setenv sdboot_no
setenv setboot
setenv tftpboot_no

setenv autoload 'no'
setenv baudrate '115200'
setenv bootcmd 'run tftpboot'
setenv bootdelay '3'
setenv bootro 'setenv bootargs ${bootargs} ro'
setenv bootrw 'setenv bootargs ${bootargs} rw'
setenv devicetree_image 'devicetree.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'ce:ba:f0:03:00:d1'
setenv extargs 'setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv initrd_high '0x20000000'
setenv kernel_image 'uImage-4.4.0-xilinx-00004-g8d932a'
setenv kernel_load_address '0x2080000'

setenv load_devicetree 'if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;'
setenv load_dhcp 'if dhcp; then echo OK; else echo FAILED; reset; fi;'
setenv load_kernel 'if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3'
setenv rootpath '/vol/diskless/CentOS7/armv7/root'
setenv rootserverip '129.57.167.152'
setenv serverip '129.57.167.4'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftp_boot_string 'echo TFTPing Image to RAM'

setenv tftpboot 'run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftpboot_rw 'dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftppath 'linux-install/CentOS7-armv7-Diskless'

After that, customize following:

ethaddr

'''tftpboot server settings'''

/tftpboot/linux-install/CentOS7-armv7-Diskless/uImage-4.4.0-xilinx-00004-g8d932a
uImage-4.4.0-xilinx-00003-gdf4da5
zynq-jlab-vtp.dtb_fixed_uio
devicetree.dtb -> zynq-jlab-vtp.dtb_fixed_uio

By default, root filesystem will be read-only. To make it 'rw', stop booting process on serial connection, type ''run tftpboot_rw'' and push <enter>. After that you can ssh as root and run ''yum'' etc.

== '''VTP Archlinux boot''' ==

Zynq> printenv
autoload=no
baudrate=115200
bootargs=console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
bootcmd=run $modeboot
bootdelay=3
devicetree_image=zynq-jlab-vtp.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=CE:BA:F0:03:00:02
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
gatewayip=129.57.68.100
initrd_high=0x20000000
ipaddr=129.57.68.38
kernel_image=uImage
kernel_load_address=0x2080000
kernel_path=linux-install/ArchLinux-armv71
modeboot=sdboot
netmask=255.255.255.0
nfsargs=vers=3,tcp,timeo=600,retrans=10
nfsip=129.57.167.152
nfsroot=/vol/diskless/ArchLinux/armv7-devel/root
sdboot=run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000
sdboot_no=if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi
serverip=129.57.167.4
setboot=setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftpboot_no=echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};

Environment size: 1828/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it line-by-line, otherwise it may place some bull...):

setenv autoload 'no'
setenv baudrate '115200'
setenv bootargs 'console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv bootcmd 'run $modeboot'
setenv bootdelay '3'
setenv devicetree_image 'zynq-jlab-vtp.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'CE:BA:F0:03:00:02'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv gatewayip '129.57.68.100'
setenv initrd_high '0x20000000'
setenv ipaddr '129.57.68.38'
setenv kernel_image 'uImage'
setenv kernel_load_address '0x2080000'
setenv kernel_path 'linux-install/ArchLinux-armv71'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'vers=3,tcp,timeo=600,retrans=10'
setenv nfsip '129.57.167.152'
setenv nfsroot '/vol/diskless/ArchLinux/armv7-devel/root'
setenv sdboot 'run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000'
setenv sdboot_no 'if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi'
setenv serverip '129.57.167.4'
setenv setboot 'setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftpboot_no 'echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};'

After that, customize following:
ethaddr
gatewayip
ipaddr
netmask

== '''Setting of the Linux server to be used for PXE and EFI boot of the VME controllers''' ==

Login to the server as root. Copy two files to the root directory and untar them:
cd /
cp /usr/downloads/tftpboot.tar.gz_clondaq15 tftpboot.tar.gz
cp /usr/downloads/diskless.tar.gz_clondaq15 diskless.tar.gz
gunzip tftpboot.tar.gz
gunzip diskless.tar.gz
tar xvf tftpboot.tar
tar xvf diskless.tar
rm tftpboot.tar diskless.tar

Make sure correct snapshot location in root area ''/diskless/CentOS7/x86_64/root/etc/sysconfig/readonly-root'':

CLIENTSTATE=192.168.10.1:/diskless/CentOS7/x86_64/snapshot

In ''/diskless/CentOS7/x86_64/root'' area, ''/etc/ssh/sshd_config'' must have following setting (to allow remote ssh):

#UsePAM yes

it will be propagated to the controller's snapshot area on the first boot when corresponding ''snapshot/<vme_controller_name>'' directory will be created. Not sure about other settings:

HostbasedAuthentication yes
#HostbasedAuthentication no

IgnoreRhosts no
#IgnoreRhosts yes

PasswordAuthentication yes
#PasswordAuthentication yes
PasswordAuthentication yes

#UsePrivilegeSeparation sandbox # Default for new installations.
UsePrivilegeSeparation sandbox # Default for new installations.

To add or remove VME controllers, modify following files:
/var/named/10.168.192.in-addr.arpa.db
/var/named/clontest.com
/etc/dhcp/dhcpd.conf

restart corresponding services:
systemctl restart dhcpd
systemctl restart named

and check services status:
systemctl status dhcpd
systemctl status named

To set gateway, add
net.ipv4.ip_forward=1
to ''/etc/sysctl.conf'' and execute
sysctl -p

Configure [[NFS]]

Configure [[DHCP server]]

Configure [[DNS server]] ('''NOTE:''' resolv.conf is different for local server !)

Configure [[Tftp]] and [[Tftpboot]]

Configure [[Iptables]]

Do not forget (is it for controllers ?):
chattr +i /etc/resolv.conf

yum install ypbind (????)

'''Configuring snapshot area'''

The list of files and directories which suppose to be in snapshot area (which has RW permissions) should be set in config file ''/diskless/.../snapshot/files''. In particular, ''/et'' has to be added there, and also directory ''/diskless/.../root/et'' should be created.

'''Reboot server, make sure everything is running as expected.'''

== '''Configuring in chroot''' ==

'''NOTE: using ''chroot'' method will allow to run ''yum'', but ''systemctl'' commands will not work. Instead of using ''chroot'', you may boot coontroller with ''rw'' option instead of ''ro''. For VME boot, it can be done by changing ''grub.cnf'', while for VTP boot you have to stop boot proocess using serial connection, and then type ''run tftpboot_rw''.'''

Since root area in VME controllers will be read-only, you cannot ssh to controllers as root and change anything there, only snapshot area can be modified. To make changes in root area, in particular to configure and run ''yum'', ''chroot' command should be used. Login to the boot server as root and do following:

mount -o bind /home /diskless/CentOS7/x86_64/root/home
mount -o bind /usr/local /diskless/CentOS7/x86_64/root/usr/local
mount -o bind /usr/clas12 /diskless/CentOS7/x86_64/root/usr/clas12
chroot /diskless/CentOS7/x86_64/root

After that you will see all root directories as if you login to VME controller, and modifications can be made.

'''Configure yum'''

Add ''multilib_policy=all'' to ''/etc/yum.conf''.

Add (and remove the rest ?) following to ''/etc/yum.repos.d/CentOS-Base.repo'':

[base]
name=CentOS-$releasever - Base
baseurl=http://archive.kernel.org/centos-vault/centos/$releasever/os/$basearch/

Clean yum database:

rm /var/lib/rpm/__db.*

Install following using yum:

yum install motif-devel tcl-devel tk-devel libXpm-devel apr-devel libXaw-devel ncurses-devel libconfig-devel

Install following for ''dbedit'':

yum install tix itcl itk

Install remaining tcl stuff from ''/usr/local/src'', mounted as ''/zzz'' above:

cd /zzz/mysqltcl-3.052
make install
ln -s /usr/lib/mysqltcl-3.052 /usr/lib64/tcl8.5/mysqltcl-3.052

'''NOTE''': Login from console may not work because of file ''/etc/securetty'' permissions, it must be 644.

'''NOTE''': THere is a service PAM, it may prevent login from console if some required services did not start. To work around, comment out some lines in ''/etc/pam.d/system-auth-ac'' file:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
#auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
#auth requisite pam_succeed_if.so uid >= 1000 quiet_success
#auth required pam_deny.so

#account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 1000 quiet
#account required pam_permit.so

password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
#password required pam_deny.so

session optional pam_keyinit.so revoke
#session required pam_limits.so
-session optional pam_systemd.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
#session required pam_unix.so

'''After Linux boot server is ready and operational, VME controllers can be booted. On the first boot, individual ''/diskless/.../snapshot/<controller name>'' directory will be created for each controller. For VME controller specific information see [[VME]]'''

Linux Boot Server

2026-02-03T21:39:04Z

Boiarino: /* Configuring in chroot */

'''Main boot server is clon01'''.

'''TO DO''' Check UBOOT commands to erase existing environment variables:

env default -a -f
env erase

== '''VTP CentOS boot''' ==

UBOOT (example for gem0vtp; '''NOTE: for copy-paste, lines with '$' and '{' and similar have to be in single quote brackets !'''):

Zynq> printenv
autoload=no
baudrate=115200
bootcmd=run tftpboot
bootdelay=3
bootro=setenv bootargs ${bootargs} ro
bootrw=setenv bootargs ${bootargs} rw
devicetree_image=devicetree.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=ce:ba:f0:03:xx:xx
extargs=setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
initrd_high=0x20000000
kernel_image=uImage-4.4.0-xilinx-00004-g8d932a
kernel_load_address=0x2080000
load_devicetree=if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;
load_dhcp=if dhcp; then echo OK; else echo FAILED; reset; fi;
load_kernel=if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;
modeboot=sdboot
netmask=255.255.255.0
nfsargs=setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3
rootpath=/vol/diskless/CentOS7/armv7/root
rootserverip=129.57.167.152
serverip=129.57.167.4
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftp_boot_string=echo TFTPing Image to RAM
tftpboot=run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftpboot_rw=dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftppath=linux-install/CentOS7-armv7-Diskless

Environment size: 1603/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it by groups as shown, otherwise it may place some bull...):

setenv bootargs
setenv gatewayip
setenv ipaddr
setenv kernel_path
setenv nfsip
setenv nfsroot
setenv sdboot
setenv sdboot_no
setenv setboot
setenv tftpboot_no

setenv autoload 'no'
setenv baudrate '115200'
setenv bootcmd 'run tftpboot'
setenv bootdelay '3'
setenv bootro 'setenv bootargs ${bootargs} ro'
setenv bootrw 'setenv bootargs ${bootargs} rw'
setenv devicetree_image 'devicetree.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'ce:ba:f0:03:00:d1'
setenv extargs 'setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv initrd_high '0x20000000'
setenv kernel_image 'uImage-4.4.0-xilinx-00004-g8d932a'
setenv kernel_load_address '0x2080000'

setenv load_devicetree 'if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;'
setenv load_dhcp 'if dhcp; then echo OK; else echo FAILED; reset; fi;'
setenv load_kernel 'if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3'
setenv rootpath '/vol/diskless/CentOS7/armv7/root'
setenv rootserverip '129.57.167.152'
setenv serverip '129.57.167.4'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftp_boot_string 'echo TFTPing Image to RAM'

setenv tftpboot 'run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftpboot_rw 'dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftppath 'linux-install/CentOS7-armv7-Diskless'

After that, customize following:

ethaddr

'''tftpboot server settings'''

/tftpboot/linux-install/CentOS7-armv7-Diskless/uImage-4.4.0-xilinx-00004-g8d932a
uImage-4.4.0-xilinx-00003-gdf4da5
zynq-jlab-vtp.dtb_fixed_uio
devicetree.dtb -> zynq-jlab-vtp.dtb_fixed_uio

By default, root filesystem will be read-only. To make it 'rw', stop booting process on serial connection, type ''run tftpboot_rw'' and push <enter>. After that you can ssh as root and run ''yum'' etc.

== '''VTP Archlinux boot''' ==

Zynq> printenv
autoload=no
baudrate=115200
bootargs=console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
bootcmd=run $modeboot
bootdelay=3
devicetree_image=zynq-jlab-vtp.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=CE:BA:F0:03:00:02
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
gatewayip=129.57.68.100
initrd_high=0x20000000
ipaddr=129.57.68.38
kernel_image=uImage
kernel_load_address=0x2080000
kernel_path=linux-install/ArchLinux-armv71
modeboot=sdboot
netmask=255.255.255.0
nfsargs=vers=3,tcp,timeo=600,retrans=10
nfsip=129.57.167.152
nfsroot=/vol/diskless/ArchLinux/armv7-devel/root
sdboot=run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000
sdboot_no=if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi
serverip=129.57.167.4
setboot=setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftpboot_no=echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};

Environment size: 1828/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it line-by-line, otherwise it may place some bull...):

setenv autoload 'no'
setenv baudrate '115200'
setenv bootargs 'console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv bootcmd 'run $modeboot'
setenv bootdelay '3'
setenv devicetree_image 'zynq-jlab-vtp.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'CE:BA:F0:03:00:02'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv gatewayip '129.57.68.100'
setenv initrd_high '0x20000000'
setenv ipaddr '129.57.68.38'
setenv kernel_image 'uImage'
setenv kernel_load_address '0x2080000'
setenv kernel_path 'linux-install/ArchLinux-armv71'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'vers=3,tcp,timeo=600,retrans=10'
setenv nfsip '129.57.167.152'
setenv nfsroot '/vol/diskless/ArchLinux/armv7-devel/root'
setenv sdboot 'run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000'
setenv sdboot_no 'if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi'
setenv serverip '129.57.167.4'
setenv setboot 'setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftpboot_no 'echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};'

After that, customize following:
ethaddr
gatewayip
ipaddr
netmask

== '''Setting of the Linux server to be used for PXE and EFI boot of the VME controllers''' ==

Login to the server as root. Copy two files to the root directory and untar them:
cd /
cp /usr/downloads/tftpboot.tar.gz_clondaq15 tftpboot.tar.gz
cp /usr/downloads/diskless.tar.gz_clondaq15 diskless.tar.gz
gunzip tftpboot.tar.gz
gunzip diskless.tar.gz
tar xvf tftpboot.tar
tar xvf diskless.tar
rm tftpboot.tar diskless.tar

Make sure correct snapshot location in root area ''/diskless/CentOS7/x86_64/root/etc/sysconfig/readonly-root'':

CLIENTSTATE=192.168.10.1:/diskless/CentOS7/x86_64/snapshot

In ''/diskless/CentOS7/x86_64/root'' area, ''/etc/ssh/sshd_config'' must have following setting (to allow remote ssh):

#UsePAM yes

it will be propagated to the controller's snapshot area on the first boot when corresponding ''snapshot/<vme_controller_name>'' directory will be created. Not sure about other settings:

HostbasedAuthentication yes
#HostbasedAuthentication no

IgnoreRhosts no
#IgnoreRhosts yes

PasswordAuthentication yes
#PasswordAuthentication yes
PasswordAuthentication yes

#UsePrivilegeSeparation sandbox # Default for new installations.
UsePrivilegeSeparation sandbox # Default for new installations.

To add or remove VME controllers, modify following files:
/var/named/10.168.192.in-addr.arpa.db
/var/named/clontest.com
/etc/dhcp/dhcpd.conf

restart corresponding services:
systemctl restart dhcpd
systemctl restart named

and check services status:
systemctl status dhcpd
systemctl status named

To set gateway, add
net.ipv4.ip_forward=1
to ''/etc/sysctl.conf'' and execute
sysctl -p

Configure [[NFS]]

Configure [[DHCP server]]

Configure [[DNS server]] ('''NOTE:''' resolv.conf is different for local server !)

Configure [[Tftp]] and [[Tftpboot]]

Configure [[Iptables]]

Do not forget (is it for controllers ?):
chattr +i /etc/resolv.conf

yum install ypbind (????)

'''Configuring snapshot area'''

The list of files and directories which suppose to be in snapshot area (which has RW permissions) should be set in config file ''/diskless/.../snapshot/files''. In particular, ''/et'' has to be added there, and also directory ''/diskless/.../root/et'' should be created.

'''Reboot server, make sure everything is running as expected.'''

== '''Configuring in chroot''' ==

'''NOTE: using ''chroot'' method will allow to run ''yum'', but ''systemctl'' commands will not work. Instead of using ''chroot'', you may boot coontroller with ''rw'' option instead of ''ro''. For VME boot, it can be done by changing ''grub.cnf'', while for VTP boot you have to stop boot proocess using serial connection, and then type ''run tftpboot_rw''.'''

Since root area in VME controllers will be read-only, you cannot ssh to controllers as root and change anything there, only snapshot area can be modified. To make changes in root area, in particular to configure and run ''yum'', ''chroot' command should be used. Login to the boot server as root and do following:

mount -o bind /home /diskless/CentOS7/x86_64/root/home
mount -o bind /usr/local /diskless/CentOS7/x86_64/root/usr/local
mount -o bind /usr/clas12 /diskless/CentOS7/x86_64/root/usr/clas12
chroot /diskless/CentOS7/x86_64/root

After that you will see all root directories as if you login to VME controller, and modifications can be made.

'''Configure yum'''

Add ''multilib_policy=all'' to ''/etc/yum.conf''.

Add (and remove the rest ?) following to ''/etc/yum.repos.d/CentOS-Base.repo'':

[base]
name=CentOS-$releasever - Base
baseurl=http://archive.kernel.org/centos-vault/centos/$releasever/os/$basearch/

Clean yum database:

rm /var/lib/rpm/__db.*

Install following using yum:

yum install motif-devel tcl-devel tk-devel libXpm-devel apr-devel libXaw-devel ncurses-devel libconfig-devel

Install following for ''dbedit'':

yum install tix itcl itk

Install remaining tcl stuff from ''/usr/local/src'', mounted as ''/zzz'' above:

cd /zzz/mysqltcl-3.052
make install
ln -s /usr/lib/mysqltcl-3.052 /usr/lib64/tcl8.5/mysqltcl-3.052

'''NOTE''': Login from console may not work because of file ''/etc/securetty'' permissions, it must be 644.

'''NOTE''': THere is a service PAM, it may prevent login from console if some required services did not start. To work around, comment out some lines in ''/etc/pam.d/system-auth-ac'' file:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
#auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
#auth requisite pam_succeed_if.so uid >= 1000 quiet_success
#auth required pam_deny.so

#account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 1000 quiet
#account required pam_permit.so

password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
#password required pam_deny.so

session optional pam_keyinit.so revoke
#session required pam_limits.so
-session optional pam_systemd.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
#session required pam_unix.so

'''After Linux boot server is ready and operational, VME controllers can be booted. On the first boot, individual ''/diskless/.../snapshot/<controller name>'' directory will be created for each controller. For VME controller specific information see [[VME]]'''

Linux Boot Server

2026-02-03T21:37:51Z

Boiarino: /* Configuring in chroot */

'''Main boot server is clon01'''.

'''TO DO''' Check UBOOT commands to erase existing environment variables:

env default -a -f
env erase

== '''VTP CentOS boot''' ==

UBOOT (example for gem0vtp; '''NOTE: for copy-paste, lines with '$' and '{' and similar have to be in single quote brackets !'''):

Zynq> printenv
autoload=no
baudrate=115200
bootcmd=run tftpboot
bootdelay=3
bootro=setenv bootargs ${bootargs} ro
bootrw=setenv bootargs ${bootargs} rw
devicetree_image=devicetree.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=ce:ba:f0:03:xx:xx
extargs=setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
initrd_high=0x20000000
kernel_image=uImage-4.4.0-xilinx-00004-g8d932a
kernel_load_address=0x2080000
load_devicetree=if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;
load_dhcp=if dhcp; then echo OK; else echo FAILED; reset; fi;
load_kernel=if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;
modeboot=sdboot
netmask=255.255.255.0
nfsargs=setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3
rootpath=/vol/diskless/CentOS7/armv7/root
rootserverip=129.57.167.152
serverip=129.57.167.4
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftp_boot_string=echo TFTPing Image to RAM
tftpboot=run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftpboot_rw=dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftppath=linux-install/CentOS7-armv7-Diskless

Environment size: 1603/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it by groups as shown, otherwise it may place some bull...):

setenv bootargs
setenv gatewayip
setenv ipaddr
setenv kernel_path
setenv nfsip
setenv nfsroot
setenv sdboot
setenv sdboot_no
setenv setboot
setenv tftpboot_no

setenv autoload 'no'
setenv baudrate '115200'
setenv bootcmd 'run tftpboot'
setenv bootdelay '3'
setenv bootro 'setenv bootargs ${bootargs} ro'
setenv bootrw 'setenv bootargs ${bootargs} rw'
setenv devicetree_image 'devicetree.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'ce:ba:f0:03:00:d1'
setenv extargs 'setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv initrd_high '0x20000000'
setenv kernel_image 'uImage-4.4.0-xilinx-00004-g8d932a'
setenv kernel_load_address '0x2080000'

setenv load_devicetree 'if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;'
setenv load_dhcp 'if dhcp; then echo OK; else echo FAILED; reset; fi;'
setenv load_kernel 'if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3'
setenv rootpath '/vol/diskless/CentOS7/armv7/root'
setenv rootserverip '129.57.167.152'
setenv serverip '129.57.167.4'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftp_boot_string 'echo TFTPing Image to RAM'

setenv tftpboot 'run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftpboot_rw 'dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftppath 'linux-install/CentOS7-armv7-Diskless'

After that, customize following:

ethaddr

'''tftpboot server settings'''

/tftpboot/linux-install/CentOS7-armv7-Diskless/uImage-4.4.0-xilinx-00004-g8d932a
uImage-4.4.0-xilinx-00003-gdf4da5
zynq-jlab-vtp.dtb_fixed_uio
devicetree.dtb -> zynq-jlab-vtp.dtb_fixed_uio

By default, root filesystem will be read-only. To make it 'rw', stop booting process on serial connection, type ''run tftpboot_rw'' and push <enter>. After that you can ssh as root and run ''yum'' etc.

== '''VTP Archlinux boot''' ==

Zynq> printenv
autoload=no
baudrate=115200
bootargs=console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
bootcmd=run $modeboot
bootdelay=3
devicetree_image=zynq-jlab-vtp.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=CE:BA:F0:03:00:02
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
gatewayip=129.57.68.100
initrd_high=0x20000000
ipaddr=129.57.68.38
kernel_image=uImage
kernel_load_address=0x2080000
kernel_path=linux-install/ArchLinux-armv71
modeboot=sdboot
netmask=255.255.255.0
nfsargs=vers=3,tcp,timeo=600,retrans=10
nfsip=129.57.167.152
nfsroot=/vol/diskless/ArchLinux/armv7-devel/root
sdboot=run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000
sdboot_no=if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi
serverip=129.57.167.4
setboot=setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftpboot_no=echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};

Environment size: 1828/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it line-by-line, otherwise it may place some bull...):

setenv autoload 'no'
setenv baudrate '115200'
setenv bootargs 'console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv bootcmd 'run $modeboot'
setenv bootdelay '3'
setenv devicetree_image 'zynq-jlab-vtp.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'CE:BA:F0:03:00:02'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv gatewayip '129.57.68.100'
setenv initrd_high '0x20000000'
setenv ipaddr '129.57.68.38'
setenv kernel_image 'uImage'
setenv kernel_load_address '0x2080000'
setenv kernel_path 'linux-install/ArchLinux-armv71'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'vers=3,tcp,timeo=600,retrans=10'
setenv nfsip '129.57.167.152'
setenv nfsroot '/vol/diskless/ArchLinux/armv7-devel/root'
setenv sdboot 'run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000'
setenv sdboot_no 'if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi'
setenv serverip '129.57.167.4'
setenv setboot 'setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftpboot_no 'echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};'

After that, customize following:
ethaddr
gatewayip
ipaddr
netmask

== '''Setting of the Linux server to be used for PXE and EFI boot of the VME controllers''' ==

Login to the server as root. Copy two files to the root directory and untar them:
cd /
cp /usr/downloads/tftpboot.tar.gz_clondaq15 tftpboot.tar.gz
cp /usr/downloads/diskless.tar.gz_clondaq15 diskless.tar.gz
gunzip tftpboot.tar.gz
gunzip diskless.tar.gz
tar xvf tftpboot.tar
tar xvf diskless.tar
rm tftpboot.tar diskless.tar

Make sure correct snapshot location in root area ''/diskless/CentOS7/x86_64/root/etc/sysconfig/readonly-root'':

CLIENTSTATE=192.168.10.1:/diskless/CentOS7/x86_64/snapshot

In ''/diskless/CentOS7/x86_64/root'' area, ''/etc/ssh/sshd_config'' must have following setting (to allow remote ssh):

#UsePAM yes

it will be propagated to the controller's snapshot area on the first boot when corresponding ''snapshot/<vme_controller_name>'' directory will be created. Not sure about other settings:

HostbasedAuthentication yes
#HostbasedAuthentication no

IgnoreRhosts no
#IgnoreRhosts yes

PasswordAuthentication yes
#PasswordAuthentication yes
PasswordAuthentication yes

#UsePrivilegeSeparation sandbox # Default for new installations.
UsePrivilegeSeparation sandbox # Default for new installations.

To add or remove VME controllers, modify following files:
/var/named/10.168.192.in-addr.arpa.db
/var/named/clontest.com
/etc/dhcp/dhcpd.conf

restart corresponding services:
systemctl restart dhcpd
systemctl restart named

and check services status:
systemctl status dhcpd
systemctl status named

To set gateway, add
net.ipv4.ip_forward=1
to ''/etc/sysctl.conf'' and execute
sysctl -p

Configure [[NFS]]

Configure [[DHCP server]]

Configure [[DNS server]] ('''NOTE:''' resolv.conf is different for local server !)

Configure [[Tftp]] and [[Tftpboot]]

Configure [[Iptables]]

Do not forget (is it for controllers ?):
chattr +i /etc/resolv.conf

yum install ypbind (????)

'''Configuring snapshot area'''

The list of files and directories which suppose to be in snapshot area (which has RW permissions) should be set in config file ''/diskless/.../snapshot/files''. In particular, ''/et'' has to be added there, and also directory ''/diskless/.../root/et'' should be created.

'''Reboot server, make sure everything is running as expected.'''

== '''Configuring in chroot''' ==

'''NOTE:''' using ''chroot'' method will allow to run ''yum'', but ''systemctl'' commands will not work. Instead of using ''chroot'', you may boot coontroller with ''rw'' option instead of ''ro''. For VME boot, it can be done by changing ''grub.cnf'', while for VTP boot you have to stop boot proocess using serial connection, and then type ''run tftpboot_rw''.

Since root area in VME controllers will be read-only, you cannot ssh to controllers as root and change anything there, only snapshot area can be modified. To make changes in root area, in particular to configure and run ''yum'', ''chroot' command should be used. Login to the boot server as root and do following:

mount -o bind /home /diskless/CentOS7/x86_64/root/home
mount -o bind /usr/local /diskless/CentOS7/x86_64/root/usr/local
mount -o bind /usr/clas12 /diskless/CentOS7/x86_64/root/usr/clas12
chroot /diskless/CentOS7/x86_64/root

After that you will see all root directories as if you login to VME controller, and modifications can be made.

'''Configure yum'''

Add ''multilib_policy=all'' to ''/etc/yum.conf''.

Add (and remove the rest ?) following to ''/etc/yum.repos.d/CentOS-Base.repo'':

[base]
name=CentOS-$releasever - Base
baseurl=http://archive.kernel.org/centos-vault/centos/$releasever/os/$basearch/

Clean yum database:

rm /var/lib/rpm/__db.*

Install following using yum:

yum install motif-devel tcl-devel tk-devel libXpm-devel apr-devel libXaw-devel ncurses-devel libconfig-devel

Install following for ''dbedit'':

yum install tix itcl itk

Install remaining tcl stuff from ''/usr/local/src'', mounted as ''/zzz'' above:

cd /zzz/mysqltcl-3.052
make install
ln -s /usr/lib/mysqltcl-3.052 /usr/lib64/tcl8.5/mysqltcl-3.052

'''NOTE''': Login from console may not work because of file ''/etc/securetty'' permissions, it must be 644.

'''NOTE''': THere is a service PAM, it may prevent login from console if some required services did not start. To work around, comment out some lines in ''/etc/pam.d/system-auth-ac'' file:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
#auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
#auth requisite pam_succeed_if.so uid >= 1000 quiet_success
#auth required pam_deny.so

#account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 1000 quiet
#account required pam_permit.so

password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
#password required pam_deny.so

session optional pam_keyinit.so revoke
#session required pam_limits.so
-session optional pam_systemd.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
#session required pam_unix.so

'''After Linux boot server is ready and operational, VME controllers can be booted. On the first boot, individual ''/diskless/.../snapshot/<controller name>'' directory will be created for each controller. For VME controller specific information see [[VME]]'''

Linux Boot Server

2026-02-03T21:35:47Z

Boiarino: /* Configuring in chroot */

'''Main boot server is clon01'''.

'''TO DO''' Check UBOOT commands to erase existing environment variables:

env default -a -f
env erase

== '''VTP CentOS boot''' ==

UBOOT (example for gem0vtp; '''NOTE: for copy-paste, lines with '$' and '{' and similar have to be in single quote brackets !'''):

Zynq> printenv
autoload=no
baudrate=115200
bootcmd=run tftpboot
bootdelay=3
bootro=setenv bootargs ${bootargs} ro
bootrw=setenv bootargs ${bootargs} rw
devicetree_image=devicetree.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=ce:ba:f0:03:xx:xx
extargs=setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
initrd_high=0x20000000
kernel_image=uImage-4.4.0-xilinx-00004-g8d932a
kernel_load_address=0x2080000
load_devicetree=if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;
load_dhcp=if dhcp; then echo OK; else echo FAILED; reset; fi;
load_kernel=if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;
modeboot=sdboot
netmask=255.255.255.0
nfsargs=setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3
rootpath=/vol/diskless/CentOS7/armv7/root
rootserverip=129.57.167.152
serverip=129.57.167.4
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftp_boot_string=echo TFTPing Image to RAM
tftpboot=run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftpboot_rw=dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}
tftppath=linux-install/CentOS7-armv7-Diskless

Environment size: 1603/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it by groups as shown, otherwise it may place some bull...):

setenv bootargs
setenv gatewayip
setenv ipaddr
setenv kernel_path
setenv nfsip
setenv nfsroot
setenv sdboot
setenv sdboot_no
setenv setboot
setenv tftpboot_no

setenv autoload 'no'
setenv baudrate '115200'
setenv bootcmd 'run tftpboot'
setenv bootdelay '3'
setenv bootro 'setenv bootargs ${bootargs} ro'
setenv bootrw 'setenv bootargs ${bootargs} rw'
setenv devicetree_image 'devicetree.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'ce:ba:f0:03:00:d1'
setenv extargs 'setenv bootargs ${bootargs} console=ttyPS0,115200 ip=:::::eth0:dhcp uio_pdrv_genirq.of_id=my-uio rootwait cma=384MB'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv initrd_high '0x20000000'
setenv kernel_image 'uImage-4.4.0-xilinx-00004-g8d932a'
setenv kernel_load_address '0x2080000'

setenv load_devicetree 'if tftpboot ${devicetree_load_address} ${tftppath}/${devicetree_image}; then echo OK; else echo FAILED; reset; fi;'
setenv load_dhcp 'if dhcp; then echo OK; else echo FAILED; reset; fi;'
setenv load_kernel 'if tftpboot ${kernel_load_address} ${tftppath}/${kernel_image}; then echo OK; else echo FAILED; reset; fi;'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'setenv bootargs nfsroot=${rootserverip}:${rootpath},vers=3'
setenv rootpath '/vol/diskless/CentOS7/armv7/root'
setenv rootserverip '129.57.167.152'
setenv serverip '129.57.167.4'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftp_boot_string 'echo TFTPing Image to RAM'

setenv tftpboot 'run load_dhcp tftp_boot_string nfsargs extargs bootro load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftpboot_rw 'dhcp && run tftp_boot_string nfsargs extargs bootrw load_kernel load_devicetree && bootm ${kernel_load_address} - ${devicetree_load_address}'
setenv tftppath 'linux-install/CentOS7-armv7-Diskless'

After that, customize following:

ethaddr

'''tftpboot server settings'''

/tftpboot/linux-install/CentOS7-armv7-Diskless/uImage-4.4.0-xilinx-00004-g8d932a
uImage-4.4.0-xilinx-00003-gdf4da5
zynq-jlab-vtp.dtb_fixed_uio
devicetree.dtb -> zynq-jlab-vtp.dtb_fixed_uio

By default, root filesystem will be read-only. To make it 'rw', stop booting process on serial connection, type ''run tftpboot_rw'' and push <enter>. After that you can ssh as root and run ''yum'' etc.

== '''VTP Archlinux boot''' ==

Zynq> printenv
autoload=no
baudrate=115200
bootargs=console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
bootcmd=run $modeboot
bootdelay=3
devicetree_image=zynq-jlab-vtp.dtb
devicetree_load_address=0x2000000
ethact=ethernet@e000b000
ethaddr=CE:BA:F0:03:00:02
fdt_high=0x20000000
fdtcontroladdr=3ffa9e30
gatewayip=129.57.68.100
initrd_high=0x20000000
ipaddr=129.57.68.38
kernel_image=uImage
kernel_load_address=0x2080000
kernel_path=linux-install/ArchLinux-armv71
modeboot=sdboot
netmask=255.255.255.0
nfsargs=vers=3,tcp,timeo=600,retrans=10
nfsip=129.57.167.152
nfsroot=/vol/diskless/ArchLinux/armv7-devel/root
sdboot=run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000
sdboot_no=if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi
serverip=129.57.167.4
setboot=setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait
stderr=serial@e0000000
stdin=serial@e0000000
stdout=serial@e0000000
tftpboot_no=echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};

Environment size: 1828/131068 bytes
Zynq>

Copy-Paste following on uboot prompt to program above settings (do it line-by-line, otherwise it may place some bull...):

setenv autoload 'no'
setenv baudrate '115200'
setenv bootargs 'console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv bootcmd 'run $modeboot'
setenv bootdelay '3'
setenv devicetree_image 'zynq-jlab-vtp.dtb'
setenv devicetree_load_address '0x2000000'
setenv ethact 'ethernet@e000b000'
setenv ethaddr 'CE:BA:F0:03:00:02'
setenv fdt_high '0x20000000'
setenv fdtcontroladdr '3ffa9e30'
setenv gatewayip '129.57.68.100'
setenv initrd_high '0x20000000'
setenv ipaddr '129.57.68.38'
setenv kernel_image 'uImage'
setenv kernel_load_address '0x2080000'
setenv kernel_path 'linux-install/ArchLinux-armv71'
setenv modeboot 'sdboot'
setenv netmask '255.255.255.0'
setenv nfsargs 'vers=3,tcp,timeo=600,retrans=10'
setenv nfsip '129.57.167.152'
setenv nfsroot '/vol/diskless/ArchLinux/armv7-devel/root'
setenv sdboot 'run setboot; echo Copying Linux from TFTP server to RAM...; echo Download Kernel; if tftpboot 0x2080000 linux-install/ArchLinux-armv71/uImage; then echo OK; else echo FAILED; reset; fi; echo Download DeviceTree; if tftpboot 0x2000000 linux-install/ArchLinux-armv71/zynq-jlab-vtp.dtb; then echo OK; else echo FAILED; reset; fi; echo Boot system; bootm 0x2080000 - 0x2000000'
setenv sdboot_no 'if mmcinfo; then echo Copying Linux from SD to RAM... && load mmc 0 ${kernel_load_address} ${kernel_image} && load mmc 0 ${devicetree_load_address} ${devicetree_image} && bootm ${kernel_load_address} - ${devicetree_load_address}; fi'
setenv serverip '129.57.167.4'
setenv setboot 'setenv bootargs console=ttyPS0,115200 ip=:::::eth0:dhcp nfsroot=${nfsip}:${nfsroot},${nfsargs} uio_pdrv_genirq.of_id=my-uio ro rootwait'
setenv stderr 'serial@e0000000'
setenv stdin 'serial@e0000000'
setenv stdout 'serial@e0000000'
setenv tftpboot_no 'echo Copying Linux from tftp server to RAM... &&tftpboot ${kernel_load_address} linux_vtp/${kernel_image} &&tftpboot ${devicetree_load_address} linux_vtp/${devicetree_image} &&bootm ${kernel_load_address} - ${devicetree_load_address};'

After that, customize following:
ethaddr
gatewayip
ipaddr
netmask

== '''Setting of the Linux server to be used for PXE and EFI boot of the VME controllers''' ==

Login to the server as root. Copy two files to the root directory and untar them:
cd /
cp /usr/downloads/tftpboot.tar.gz_clondaq15 tftpboot.tar.gz
cp /usr/downloads/diskless.tar.gz_clondaq15 diskless.tar.gz
gunzip tftpboot.tar.gz
gunzip diskless.tar.gz
tar xvf tftpboot.tar
tar xvf diskless.tar
rm tftpboot.tar diskless.tar

Make sure correct snapshot location in root area ''/diskless/CentOS7/x86_64/root/etc/sysconfig/readonly-root'':

CLIENTSTATE=192.168.10.1:/diskless/CentOS7/x86_64/snapshot

In ''/diskless/CentOS7/x86_64/root'' area, ''/etc/ssh/sshd_config'' must have following setting (to allow remote ssh):

#UsePAM yes

it will be propagated to the controller's snapshot area on the first boot when corresponding ''snapshot/<vme_controller_name>'' directory will be created. Not sure about other settings:

HostbasedAuthentication yes
#HostbasedAuthentication no

IgnoreRhosts no
#IgnoreRhosts yes

PasswordAuthentication yes
#PasswordAuthentication yes
PasswordAuthentication yes

#UsePrivilegeSeparation sandbox # Default for new installations.
UsePrivilegeSeparation sandbox # Default for new installations.

To add or remove VME controllers, modify following files:
/var/named/10.168.192.in-addr.arpa.db
/var/named/clontest.com
/etc/dhcp/dhcpd.conf

restart corresponding services:
systemctl restart dhcpd
systemctl restart named

and check services status:
systemctl status dhcpd
systemctl status named

To set gateway, add
net.ipv4.ip_forward=1
to ''/etc/sysctl.conf'' and execute
sysctl -p

Configure [[NFS]]

Configure [[DHCP server]]

Configure [[DNS server]] ('''NOTE:''' resolv.conf is different for local server !)

Configure [[Tftp]] and [[Tftpboot]]

Configure [[Iptables]]

Do not forget (is it for controllers ?):
chattr +i /etc/resolv.conf

yum install ypbind (????)

'''Configuring snapshot area'''

The list of files and directories which suppose to be in snapshot area (which has RW permissions) should be set in config file ''/diskless/.../snapshot/files''. In particular, ''/et'' has to be added there, and also directory ''/diskless/.../root/et'' should be created.

'''Reboot server, make sure everything is running as expected.'''

== '''Configuring in chroot''' ==

'''NOTE:''' using ''chroot'' method will allow to run ''yum'', but ''systemctl'' commands will not work. Instead of using ''chroot'', you may boot coontroller with ''rw'' option instead of ''ro''. For VME boot, it can be done by changing ''grub.cnf'', while for VTP boot you have to stop boot proocess using serial connection, and then type ''run ftp....

Since root area in VME controllers will be read-only, you cannot ssh to controllers as root and change anything there, only snapshot area can be modified. To make changes in root area, in particular to configure and run ''yum'', ''chroot' command should be used. Login to the boot server as root and do following:

mount -o bind /home /diskless/CentOS7/x86_64/root/home
mount -o bind /usr/local /diskless/CentOS7/x86_64/root/usr/local
mount -o bind /usr/clas12 /diskless/CentOS7/x86_64/root/usr/clas12
chroot /diskless/CentOS7/x86_64/root

After that you will see all root directories as if you login to VME controller, and modifications can be made.

'''Configure yum'''

Add ''multilib_policy=all'' to ''/etc/yum.conf''.

Add (and remove the rest ?) following to ''/etc/yum.repos.d/CentOS-Base.repo'':

[base]
name=CentOS-$releasever - Base
baseurl=http://archive.kernel.org/centos-vault/centos/$releasever/os/$basearch/

Clean yum database:

rm /var/lib/rpm/__db.*

Install following using yum:

yum install motif-devel tcl-devel tk-devel libXpm-devel apr-devel libXaw-devel ncurses-devel libconfig-devel

Install following for ''dbedit'':

yum install tix itcl itk

Install remaining tcl stuff from ''/usr/local/src'', mounted as ''/zzz'' above:

cd /zzz/mysqltcl-3.052
make install
ln -s /usr/lib/mysqltcl-3.052 /usr/lib64/tcl8.5/mysqltcl-3.052

'''NOTE''': Login from console may not work because of file ''/etc/securetty'' permissions, it must be 644.

'''NOTE''': THere is a service PAM, it may prevent login from console if some required services did not start. To work around, comment out some lines in ''/etc/pam.d/system-auth-ac'' file:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
#auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
#auth requisite pam_succeed_if.so uid >= 1000 quiet_success
#auth required pam_deny.so

#account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 1000 quiet
#account required pam_permit.so

password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
#password required pam_deny.so

session optional pam_keyinit.so revoke
#session required pam_limits.so
-session optional pam_systemd.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
#session required pam_unix.so

'''After Linux boot server is ready and operational, VME controllers can be booted. On the first boot, individual ''/diskless/.../snapshot/<controller name>'' directory will be created for each controller. For VME controller specific information see [[VME]]'''

Systemd

2026-02-03T21:29:32Z

Boiarino:

=== Creating service in systemd (RHEL7 and up) ===

'''NOTE:''' on Centos5 for DiagGuiServer, described below, placing startup into ''rc.local'' works better - no extra environment settings from clasrun user is required, probably because of rc.local executed AFTER all systemd services, have to understand. Example of the working ''/etc/rc.d/rc.local'':

touch /var/lock/subsys/local

rm -f /var/log/DiagGuiServer.log
touch /var/log/DiagGuiServer.log
chmod 777 /var/log/DiagGuiServer.log
su clasrun -c "DiagGuiServer init >> /var/log/DiagGuiServer.log &"

'''NOTES:'''

systemctl list-units | grep -o '.*\.mount'

== DiagGuiServer example (VME) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Unit]
Description=DiagGuiServer
#After=network.target
#Requires=autofs.service
#Requires=nfs-utils.service nfs-lock.service autofs.service
#Requires=autofs.service
#After=network.target apps.mount home.mount usr-clas12.mount usr-local.mount
#After=-.mount
#RequiresMountsFor=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin
#Wants=remote-fs.target
#After=remote-fs.target
#ConditionPathExists=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin

[Service]
Type=simple
User=clasrun
Group=onliners
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin/DiagGuiServer init
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

'''NOTE:''' various commented out settings in [Unit] section were tried to make sure DiagGuiServer service run after everything else is ready (in particular automounts), but nothing really worked; solution was to allow restart on failure in section [Service], so after a couple of failures service DiagGuiServer finally starts.

Create directory ''/etc/systemd/system/DiagGuiServer.service.d/''

Create file ''/etc/systemd/system/DiagGuiServer.service.d/override.conf'' with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/lib:/usr/local/lib:/usr/local/activemq/lib:/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/lib"
Environment="IPC_HOST=clon00"
Environment="MYSQL_HOST=clondb1"
Environment="EXPID=clasrun"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"

Following commands can be used to control service:

systemctl daemon-reload
systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

In case of problems, useful command:

journalctl -u DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

== DiagGui example (VTP) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Service]
##
## see /etc/systemd/system/DiagGuiServer.service.d/override.conf
##Environment="LD_LIBRARY_PATH=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib" "SESSION=clasprod" "EXPID=clasrun" "IPC_HOST=clon00" "CLON_PARMS=/usr/clas12/release/2.0.0/parms" "MYSQL_HOST=clondb1"
##
User=clasrun
Group=onliners
Type=simple
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/bin/vtpserver
Restart=no

[Install]
WantedBy=multi-user.target

Create directory /etc/systemd/system/DiagGuiServer.service.d/.

Create file /etc/systemd/system/DiagGuiServer.service.d/override.conf with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib"
Environment="SESSION=clasprod"
Environment="EXPID=clasrun"
Environment="IPC_HOST=clon00"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"
Environment="MYSQL_HOST=clondb1"

Following commands can be used to control service:

systemctl daemon-reload
systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

In case of problems, useful command:

journalctl -u DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

Systemd

2026-02-03T16:08:18Z

Boiarino: /* DiagGui example (VTP) */

Systemd

2026-02-03T15:30:24Z

Boiarino: /* DiagGui example (VTP) */

=== Creating service in systemd (RHEL7 and up) ===

'''NOTE:''' on Centos5 for DiagGuiServer, described below, placing startup into ''rc.local'' works better - no extra environment settings from clasrun user is required, probably because of rc.local executed AFTER all systemd services, have to understand. Example of the working ''/etc/rc.d/rc.local'':

touch /var/lock/subsys/local

rm -f /var/log/DiagGuiServer.log
touch /var/log/DiagGuiServer.log
chmod 777 /var/log/DiagGuiServer.log
su clasrun -c "DiagGuiServer init >> /var/log/DiagGuiServer.log &"

'''NOTES:'''

systemctl list-units | grep -o '.*\.mount'

== DiagGuiServer example (VME) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Unit]
Description=DiagGuiServer
#After=network.target
#Requires=autofs.service
#Requires=nfs-utils.service nfs-lock.service autofs.service
#Requires=autofs.service
#After=network.target apps.mount home.mount usr-clas12.mount usr-local.mount
#After=-.mount
#RequiresMountsFor=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin
#Wants=remote-fs.target
#After=remote-fs.target
#ConditionPathExists=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin

[Service]
Type=simple
User=clasrun
Group=onliners
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin/DiagGuiServer init
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

'''NOTE:''' various commented out settings in [Unit] section were tried to make sure DiagGuiServer service run after everything else is ready (in particular automounts), but nothing really worked; solution was to allow restart on failure in section [Service], so after a couple of failures service DiagGuiServer finally starts.

Create directory ''/etc/systemd/system/DiagGuiServer.service.d/''

Create file ''/etc/systemd/system/DiagGuiServer.service.d/override.conf'' with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/lib:/usr/local/lib:/usr/local/activemq/lib:/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/lib"
Environment="IPC_HOST=clon00"
Environment="MYSQL_HOST=clondb1"
Environment="EXPID=clasrun"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"

Following commands can be used to control service:

systemctl daemon-reload
systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

In case of problems, useful command:

journalctl -u DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

== DiagGui example (VTP) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Service]
##
## see /etc/systemd/system/DiagGuiServer.service.d/override.conf
##Environment="LD_LIBRARY_PATH=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib" "SESSION=clasprod" "EXPID=clasrun" "IPC_HOST=clon00" "CLON_PARMS=/usr/clas12/release/2.0.0/parms" "MYSQL_HOST=clondb1"
##
User=clasrun
Group=onliners
Type=simple
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/bin/vtpserver
Restart=no

[Install]
WantedBy=multi-user.target

Create directory /etc/systemd/system/DiagGuiServer.service.d/.

Create file /etc/systemd/system/DiagGuiServer.service.d/override.conf with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib"
Environment="SESSION=clasprod"
Environment="EXPID=clasrun"
Environment="IPC_HOST=clon00"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"
Environment="MYSQL_HOST=clondb1"

Following commands can be used to control service:

systemctl daemon-reload
systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

In case of problems, useful command:

journalctl -u DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

Systemd

2026-02-03T15:29:24Z

Boiarino: /* DiagGui example (VTP) */

=== Creating service in systemd (RHEL7 and up) ===

'''NOTE:''' on Centos5 for DiagGuiServer, described below, placing startup into ''rc.local'' works better - no extra environment settings from clasrun user is required, probably because of rc.local executed AFTER all systemd services, have to understand. Example of the working ''/etc/rc.d/rc.local'':

touch /var/lock/subsys/local

rm -f /var/log/DiagGuiServer.log
touch /var/log/DiagGuiServer.log
chmod 777 /var/log/DiagGuiServer.log
su clasrun -c "DiagGuiServer init >> /var/log/DiagGuiServer.log &"

'''NOTES:'''

systemctl list-units | grep -o '.*\.mount'

== DiagGuiServer example (VME) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Unit]
Description=DiagGuiServer
#After=network.target
#Requires=autofs.service
#Requires=nfs-utils.service nfs-lock.service autofs.service
#Requires=autofs.service
#After=network.target apps.mount home.mount usr-clas12.mount usr-local.mount
#After=-.mount
#RequiresMountsFor=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin
#Wants=remote-fs.target
#After=remote-fs.target
#ConditionPathExists=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin

[Service]
Type=simple
User=clasrun
Group=onliners
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin/DiagGuiServer init
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

'''NOTE:''' various commented out settings in [Unit] section were tried to make sure DiagGuiServer service run after everything else is ready (in particular automounts), but nothing really worked; solution was to allow restart on failure in section [Service], so after a couple of failures service DiagGuiServer finally starts.

Create directory ''/etc/systemd/system/DiagGuiServer.service.d/''

Create file ''/etc/systemd/system/DiagGuiServer.service.d/override.conf'' with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/lib:/usr/local/lib:/usr/local/activemq/lib:/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/lib"
Environment="IPC_HOST=clon00"
Environment="MYSQL_HOST=clondb1"
Environment="EXPID=clasrun"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"

Following commands can be used to control service:

systemctl daemon-reload
systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

In case of problems, useful command:

journalctl -u DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

== DiagGui example (VTP) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Service]
##
## see /etc/systemd/system/DiagGuiServer.service.d/override.conf
##Environment="LD_LIBRARY_PATH=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib" "SESSION=clasprod" "EXPID=clasrun" "IPC_HOST=clon00" "CLON_PARMS=/usr/clas12/release/2.0.0/parms" "MYSQL_HOST=clondb1"
##
User=clasrun
Group=onliners
Type=simple
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/bin/vtpserver
Restart=no

[Install]
WantedBy=multi-user.target

Create directory /etc/systemd/system/DiagGuiServer.service.d/.

Create file /etc/systemd/system/DiagGuiServer.service.d/override.conf with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib"
Environment="SESSION=clasprod"
Environment="EXPID=clasrun"
Environment="IPC_HOST=clon00"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"
Environment="MYSQL_HOST=clondb1"

Systemd

2026-02-03T15:23:50Z

Boiarino: /* DiagGuiServer example (VME) */

=== Creating service in systemd (RHEL7 and up) ===

'''NOTE:''' on Centos5 for DiagGuiServer, described below, placing startup into ''rc.local'' works better - no extra environment settings from clasrun user is required, probably because of rc.local executed AFTER all systemd services, have to understand. Example of the working ''/etc/rc.d/rc.local'':

touch /var/lock/subsys/local

rm -f /var/log/DiagGuiServer.log
touch /var/log/DiagGuiServer.log
chmod 777 /var/log/DiagGuiServer.log
su clasrun -c "DiagGuiServer init >> /var/log/DiagGuiServer.log &"

'''NOTES:'''

systemctl list-units | grep -o '.*\.mount'

== DiagGuiServer example (VME) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Unit]
Description=DiagGuiServer
#After=network.target
#Requires=autofs.service
#Requires=nfs-utils.service nfs-lock.service autofs.service
#Requires=autofs.service
#After=network.target apps.mount home.mount usr-clas12.mount usr-local.mount
#After=-.mount
#RequiresMountsFor=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin
#Wants=remote-fs.target
#After=remote-fs.target
#ConditionPathExists=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin

[Service]
Type=simple
User=clasrun
Group=onliners
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin/DiagGuiServer init
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

'''NOTE:''' various commented out settings in [Unit] section were tried to make sure DiagGuiServer service run after everything else is ready (in particular automounts), but nothing really worked; solution was to allow restart on failure in section [Service], so after a couple of failures service DiagGuiServer finally starts.

Create directory ''/etc/systemd/system/DiagGuiServer.service.d/''

Create file ''/etc/systemd/system/DiagGuiServer.service.d/override.conf'' with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/lib:/usr/local/lib:/usr/local/activemq/lib:/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/lib"
Environment="IPC_HOST=clon00"
Environment="MYSQL_HOST=clondb1"
Environment="EXPID=clasrun"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"

Following commands can be used to control service:

systemctl daemon-reload
systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

In case of problems, useful command:

journalctl -u DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

== DiagGui example (VTP) ==

Create file ''/usr/lib/systemd/system/DiagGui.service'' with following contents:

[Unit]
Description=DiagGui Service
Wants=remote-fs.target
After=remote-fs.target

[Service]
Environment="LD_LIBRARY_PATH=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib" "SESSION=clasprod" "EXPID=clasrun" "IPC_HOST=clon00" "CLON_PARMS=/usr/clas12/release/2.0.0/parms" "MYSQL_HOST=clondb1"
User=clasrun
Type=simple
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/bin/vtpserver
Restart=no

[Install]
WantedBy=multi-user.target

Systemd

2026-02-03T15:15:03Z

Boiarino: /* DiagGuiServer example (VME) */

=== Creating service in systemd (RHEL7 and up) ===

'''NOTE:''' on Centos5 for DiagGuiServer, described below, placing startup into ''rc.local'' works better - no extra environment settings from clasrun user is required, probably because of rc.local executed AFTER all systemd services, have to understand. Example of the working ''/etc/rc.d/rc.local'':

touch /var/lock/subsys/local

rm -f /var/log/DiagGuiServer.log
touch /var/log/DiagGuiServer.log
chmod 777 /var/log/DiagGuiServer.log
su clasrun -c "DiagGuiServer init >> /var/log/DiagGuiServer.log &"

'''NOTES:'''

systemctl list-units | grep -o '.*\.mount'

== DiagGuiServer example (VME) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Unit]
Description=DiagGuiServer
#After=network.target
#Requires=autofs.service
#Requires=nfs-utils.service nfs-lock.service autofs.service
#Requires=autofs.service
#After=network.target apps.mount home.mount usr-clas12.mount usr-local.mount
#After=-.mount
#RequiresMountsFor=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin
#Wants=remote-fs.target
#After=remote-fs.target
#ConditionPathExists=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin

[Service]
Type=simple
User=clasrun
Group=onliners
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin/DiagGuiServer init
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

'''NOTE:''' various commented out settings in [Unit] section were tried to make sure DiagGuiServer service run after everything else is ready (in particular automounts), but nothing really worked; solution was to allow restart on failure in section [Service], so after a couple of failures service DiagGuiServer finally starts.

Create directory ''/etc/systemd/system/DiagGuiServer.service.d/''

Create file ''/etc/systemd/system/DiagGuiServer.service.d/override.conf'' with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/lib:/usr/local/lib:/usr/local/activemq/lib:/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/lib"
Environment="IPC_HOST=clon00"
Environment="MYSQL_HOST=clondb1"
Environment="EXPID=clasrun"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"

Following commands can be used to control service:

systemctl daemon-reload
systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

== DiagGui example (VTP) ==

Create file ''/usr/lib/systemd/system/DiagGui.service'' with following contents:

[Unit]
Description=DiagGui Service
Wants=remote-fs.target
After=remote-fs.target

[Service]
Environment="LD_LIBRARY_PATH=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib" "SESSION=clasprod" "EXPID=clasrun" "IPC_HOST=clon00" "CLON_PARMS=/usr/clas12/release/2.0.0/parms" "MYSQL_HOST=clondb1"
User=clasrun
Type=simple
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/bin/vtpserver
Restart=no

[Install]
WantedBy=multi-user.target

Clon01

2026-02-02T22:12:37Z

Boiarino: /* clon01 is the main boot server for VME, VTP and VxWorks controllers */

== '''clon01''' is the main boot server for VME, VTP and VxWorks controllers ==

Install [[Tftp]] and [[Tftpboot]] software.

Install [[VxWorks]] boot software.

Since we are customizing ''/etc/auto.direct'', we have to disable puppet:

systemctl stop puppet
systemctl disable puppet

Create directory for automounts:

mkdir /mnt/admin

Add following section to the end of the ''/etc/auto.direct'':

# clonfs mounts
/mnt/admin/clonfs1 -rw,bg clonfs1:/
/mnt/admin/clonfs1a-old -rw,bg clonfs1a-old:/
/mnt/admin/clonfs1a-old-home -rw,bg clonfs1a-old:/vol/home
#
/mnt/admin/clonfs1-apps -rw,bg clonfs1:/vol/apps
/mnt/admin/clonfs1-archives -rw,bg clonfs1:/vol/archives
/mnt/admin/clonfs1-clas -rw,bg clonfs1:/vol/clas
/mnt/admin/clonfs1-clas12 -rw,bg clonfs1:/vol/clas12
/mnt/admin/clonfs1-clonweb -rw,bg clonfs1:/vol/clonweb
/mnt/admin/clonfs1-clonwiki -rw,bg clonfs1:/vol/clonwiki
/mnt/admin/clonfs1-diskless -rw,bg clonfs1:/vol/diskless
/mnt/admin/clonfs1-downloads -rw,bg clonfs1:/vol/downloads
/mnt/admin/clonfs1-home -rw,bg clonfs1:/vol/home
/mnt/admin/clonfs1-local -rw,bg clonfs1:/vol/local
/mnt/admin/clonfs1-logs -rw,bg clonfs1:/vol/logs
/mnt/admin/clonfs1-mysql -rw,bg clonfs1:/vol/mysql
/mnt/admin/clonfs1-scratch -rw,bg clonfs1:/vol/scratch

Reload autofs:

systemctl reload autofs

Make useful symlink:

cd /
ln -s /mnt/admin/clonfs1-diskless diskless

== old ==

SUN Ultra 24 Workstation: JLAB inventory number: F424093, SysSN: 0906FMB01R.

old: SUN Blade 2000, 2x900MHz Ultra SPARC-IIIi, 2GB RAM. Primary use - EPICS applications.

After Solaris installation and customization, start cronjobs from epics account. File is ''~epics/cron/crontab.txt'' so cronjobs can be started by command
crontab crontab.txt
Up-to-date cron job file is located in ''/var/spool/cron/crontabs/epics'', so if ''/var'' directory was saved before Solaris reinstalling you can check it out.

Establish passwordless connection with machine ''devsrv.acc.jlab.org'': login to ''clon01'' as ''epics'' and type
ssh devsrv.acc.jlab.org
Exit and ssh again, this time it should not ask for password.

== old info - not valid ==

Data Mover (move2silo, EPICS)

SUN Blade 2000, 2x900MHz Ultra SPARC-IIIi, 2GB RAM ---+ CLON01

This is *Sun Blade 2000* dual CPU (SPARC IIIi) server which primary use in the *CLAS DAQ is Data Mover*. The secondary use of it is *EPICS* visualisation workstation.

This server runs also
* VERITAS Cluster Server
* NIS Slave Server
* INGRES Server
* CLON Printer Server (for CLONHP and CLONHP2 printers)

---++ Data Mover
Location: /usr/local/system/raid

Program: move2silo

Logs: logs/

To start it manually: <pre>
[root@clon01]$ cd /ssa
[root@clon01]$ mv presilo1 gopresilo
[root@clon01]$ move2silo >& /dev/null &
</pre>

To move Data Mover to *CLON10* edit file */usr/local/system/raid/checkraid* uncommenting corresponding line:

<pre>
...
# for CLON10
# /usr/local/system/raid/move2silo >& /usr/local/system/raid/log &

# for CLON01
rsh clon01 /usr/local/system/raid/move2silo ">&" /usr/local/system/raid/log "&"
...
</pre>

---++ Memory Monitoring Tool *CEDIAG*

location: /opt/SUNWcest/bin/cediag

<pre>
[root@clon01 ~]$ cediag
cediag: Revision: 1.78 @ 2005/02/11 15:54:29 UTC
cediag: Analysed System: SunOS 5.8 with KUP 117350-06 (MPR active)
cediag: Pages Retired: 0 (0.00%)
cediag: findings: 0 datapath fault message(s) found
cediag: findings: 0 UE(s) found - there is no rule#3 match
cediag: findings: 0 DIMMs with a failure pattern matching rule#4
cediag: findings: 0 DIMMs with a failure pattern matching rule#5
</pre>

Systemd

2026-02-02T22:10:41Z

Boiarino: /* Creating service in systemd (RHEL7 and up) */

=== Creating service in systemd (RHEL7 and up) ===

'''NOTE:''' on Centos5 for DiagGuiServer, described below, placing startup into ''rc.local'' works better - no extra environment settings from clasrun user is required, probably because of rc.local executed AFTER all systemd services, have to understand. Example of the working ''/etc/rc.d/rc.local'':

touch /var/lock/subsys/local

rm -f /var/log/DiagGuiServer.log
touch /var/log/DiagGuiServer.log
chmod 777 /var/log/DiagGuiServer.log
su clasrun -c "DiagGuiServer init >> /var/log/DiagGuiServer.log &"

'''NOTES:'''

systemctl list-units | grep -o '.*\.mount'

== DiagGuiServer example (VME) ==

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Unit]
Description=DiagGuiServer
#After=network.target
#Requires=autofs.service
#Requires=nfs-utils.service nfs-lock.service autofs.service
#Requires=autofs.service
#After=network.target apps.mount home.mount usr-clas12.mount usr-local.mount
#After=-.mount
#RequiresMountsFor=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin
#Wants=remote-fs.target
#After=remote-fs.target
#ConditionPathExists=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin

[Service]
Type=simple
User=clasrun
Group=onliners
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin/DiagGuiServer init
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

'''NOTE:''' various commented out settings in [Unit] section were tried to make sure DiagGuiServer service run after everything else is ready (in particular automounts), but nothing really worked; solution was to allow restart on failure in section [Service], so after a couple of failures service DiagGuiServer finally starts.

Create directory ''/etc/systemd/system/DiagGuiServer.service.d/''

Create file ''/etc/systemd/system/DiagGuiServer.service.d/override.conf'' with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/lib:/usr/local/lib:/usr/local/activemq/lib:/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/lib"
Environment="IPC_HOST=clon00"
Environment="MYSQL_HOST=clondb1"
Environment="EXPID=clasrun"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"

Following commands can be used to control service:

systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

== DiagGui example (VTP) ==

Create file ''/usr/lib/systemd/system/DiagGui.service'' with following contents:

[Unit]
Description=DiagGui Service
Wants=remote-fs.target
After=remote-fs.target

[Service]
Environment="LD_LIBRARY_PATH=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/lib:/usr/local/activemq/lib" "SESSION=clasprod" "EXPID=clasrun" "IPC_HOST=clon00" "CLON_PARMS=/usr/clas12/release/2.0.0/parms" "MYSQL_HOST=clondb1"
User=clasrun
Type=simple
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_armv7l_RHEL7/bin/vtpserver
Restart=no

[Install]
WantedBy=multi-user.target

Systemd

2026-02-02T22:07:16Z

Boiarino: /* Creating service in systemd (RHEL7 and up) */

=== Creating service in systemd (RHEL7 and up) ===

'''NOTE:''' on Centos5 for DiagGuiServer, described below, placing startup into ''rc.local'' works better - no extra environment settings from clasrun user is required, probably because of rc.local executed AFTER all systemd services, have to understand. Example of the working ''/etc/rc.d/rc.local'':

touch /var/lock/subsys/local

rm -f /var/log/DiagGuiServer.log
touch /var/log/DiagGuiServer.log
chmod 777 /var/log/DiagGuiServer.log
su clasrun -c "DiagGuiServer init >> /var/log/DiagGuiServer.log &"

'''NOTES:'''

systemctl list-units | grep -o '.*\.mount'

'''DiagGuiServer example (VME)'''

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Unit]
Description=DiagGuiServer
#After=network.target
#Requires=autofs.service
#Requires=nfs-utils.service nfs-lock.service autofs.service
#Requires=autofs.service
#After=network.target apps.mount home.mount usr-clas12.mount usr-local.mount
#After=-.mount
#RequiresMountsFor=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin
#Wants=remote-fs.target
#After=remote-fs.target
#ConditionPathExists=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin

[Service]
Type=simple
User=clasrun
Group=onliners
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin/DiagGuiServer init
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

'''NOTE:''' various commented out settings in [Unit] section were tried to make sure DiagGuiServer service run after everything else is ready (in particular automounts), but nothing really worked; solution was to allow restart on failure in section [Service], so after a couple of failures service DiagGuiServer finally starts.

Create directory ''/etc/systemd/system/DiagGuiServer.service.d/''

Create file ''/etc/systemd/system/DiagGuiServer.service.d/override.conf'' with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/lib:/usr/local/lib:/usr/local/activemq/lib:/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/lib"
Environment="IPC_HOST=clon00"
Environment="MYSQL_HOST=clondb1"
Environment="EXPID=clasrun"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"

Following commands can be used to control service:

systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/multi-user.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

'''DiagGui example (VTP)'''

Create file ''/usr/lib/systemd/system/DiagGui.service'' with following contents:

[Unit]
Description=DiagGui Service
Wants=remote-fs.target
After=remote-fs.target

[Service]
Environment="LD_LIBRARY_PATH=/usr/clas12/release/1.4.0/coda/Linux_armv7l/lib:/usr/local/activemq/lib" "SESSION=clasprod" "EXPID=clasrun" "IPC_HOST=clon00" "CLON_PARMS=/usr/clas12/release/1.4.0/parms" "MYSQL_HOST=clondb1"
User=clasrun
Type=simple
ExecStart=/usr/clas12/release/1.4.0/coda/Linux_armv7l/bin/vtpserver
Restart=no

[Install]
WantedBy=multi-user.target

Systemd

2026-02-02T21:45:03Z

Boiarino: /* Creating service in systemd (RHEL7 and up) */

=== Creating service in systemd (RHEL7 and up) ===

'''NOTE:''' on Centos5 for DiagGuiServer, described below, placing startup into ''rc.local'' works better - no extra environment settings from clasrun user is required, probably because of rc.local executed AFTER all systemd services, have to understand. Example of the working ''/etc/rc.d/rc.local'':

touch /var/lock/subsys/local

rm -f /var/log/DiagGuiServer.log
touch /var/log/DiagGuiServer.log
chmod 777 /var/log/DiagGuiServer.log
su clasrun -c "DiagGuiServer init >> /var/log/DiagGuiServer.log &"

'''NOTES:'''

systemctl list-units | grep -o '.*\.mount'

'''DiagGuiServer example (VME)'''

Create file ''/usr/lib/systemd/system/DiagGuiServer.service'' with following contents:

[Unit]
Description=DiagGuiServer
#After=network.target
#Requires=autofs.service
#Requires=nfs-utils.service nfs-lock.service autofs.service
#Requires=autofs.service
#After=network.target apps.mount home.mount usr-clas12.mount usr-local.mount
#After=-.mount
#RequiresMountsFor=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin
#Wants=remote-fs.target
#After=remote-fs.target
#ConditionPathExists=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin

[Service]
Type=simple
User=clasrun
Group=onliners
ExecStart=/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/bin/DiagGuiServer init
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

'''NOTE:''' various commented out settings in [Unit] section were tried to make sure DiagGuiServer service run after everything else is ready (in particular automounts), but nothing really worked; solution was to allow restart on failure in section [Service], so after a couple of failures service DiagGuiServer finally starts.

Create directory ''/etc/systemd/system/DiagGuiServer.service.d/''

Create file ''/etc/systemd/system/DiagGuiServer.service.d/override.conf'' with following contents:

[Service]
Environment="LD_LIBRARY_PATH=/apps/gcc/11.5.0/lib:/apps/gcc/11.5.0/lib64:/usr/lib:/usr/local/lib:/usr/local/activemq/lib:/usr/clas12/release/2.0.0/coda/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/Linux_x86_64_RHEL7_vme/lib:/usr/clas12/release/2.0.0/clon/lib"
Environment="IPC_HOST=clon00"
Environment="MYSQL_HOST=clondb1"
Environment="EXPID=clasrun"
Environment="CLON_PARMS=/usr/clas12/release/2.0.0/parms"

Following commands can be used to control service:

systemctl start DiagGuiServer
systemctl stop DiagGuiServer
systemctl status DiagGuiServer

To start service at boot time, execute command:

systemctl enable DiagGuiServer

following message should come up on screen:

Created symlink from /etc/systemd/system/default.target.wants/DiagGuiServer.service to /usr/lib/systemd/system/DiagGuiServer.service.

'''DiagGui example (VTP)'''

Create file ''/usr/lib/systemd/system/DiagGui.service'' with following contents:

[Unit]
Description=DiagGui Service
Wants=remote-fs.target
After=remote-fs.target

[Service]
Environment="LD_LIBRARY_PATH=/usr/clas12/release/1.4.0/coda/Linux_armv7l/lib:/usr/local/activemq/lib" "SESSION=clasprod" "EXPID=clasrun" "IPC_HOST=clon00" "CLON_PARMS=/usr/clas12/release/1.4.0/parms" "MYSQL_HOST=clondb1"
User=clasrun
Type=simple
ExecStart=/usr/clas12/release/1.4.0/coda/Linux_armv7l/bin/vtpserver
Restart=no

[Install]
WantedBy=multi-user.target