[SAC] [SECURITY] [DSA 2360-1] Two month advance notification for upcoming end-of-life for Debian oldstable (lenny)

OSL Team,

Looks like we got stuck upgrading the OSGeo Adhoc VM Debian version.
Details included below. Main person working on the upgrade is Hamish
<hamish_b@yahoo.com> if there are questions. A full backup of /etc is in
/root/

Does OSUOSL team have a recommended method for doing distro upgrades?

Thanks,
Alex
OSGeo System Administration Committee

-------- Original Message --------
Subject: Re: [SAC] [SECURITY] [DSA 2360-1] Two month advance
notification for upcoming end-of-life for Debian oldstable (lenny)
Date: Sat, 17 Dec 2011 18:02:33 -0800 (PST)
From: Hamish <hamish_b@yahoo.com>
Reply-To: System Administration Committee Discussion/OSGeo
<sac@lists.osgeo.org>
To: System Administration Committee Discussion/OSGeo <sac@lists.osgeo.org>

Hamish wrote:

I plan on upgrading the adhoc VM to Squeeze tomorrow,
starting at 00:00 UTC Sat 18 Dec. That's about 23 hours from
now.

Hi,

well, I got as far as upgrading the stuff which didn't need dist-upgrade,
then the kernel and udev, but upon rebooting directly after installing
udev it doesn't seem to want to come back up. :frowning:
maybe stuck on fsck wanting to press "c" to continue or something..?

manual edits (sync with earlier custom mods) of note were to bootmisc.sh
and hosts.deny.

some host level intervention on the non-virtual machine is requested to
see what the trouble is..

thanks,
Hamish
_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

On Sun Dec 18 03:12:35 2011, tech@wildintellect.com wrote:

OSL Team,

Looks like we got stuck upgrading the OSGeo Adhoc VM Debian version.
Details included below. Main person working on the upgrade is Hamish
<hamish_b@yahoo.com> if there are questions. A full backup of /etc is
in /root/

Does OSUOSL team have a recommended method for doing distro upgrades?

Looks like it is indeed hung up on fsck. I tried having it continue but
it rebooted and got stuck on the same fsck error. I'd recommend we just
give you console access to your VMs via our web manager. Can you please
register an account on http://ganeti.osuosl.org and let me know when you
do? The user/pass for the site is osuosl:FlyingManatees.

Thanks-

--
Lance Albertson
Systems Administrator / Architect
OSU Open Source Lab

On Wed, Dec 28, 2011 at 05:28:20PM +0000, Lance Albertson via RT wrote:

Looks like it is indeed hung up on fsck. I tried having it continue but
it rebooted and got stuck on the same fsck error. I'd recommend we just
give you console access to your VMs via our web manager. Can you please
register an account on http://ganeti.osuosl.org and let me know when you
do?

Did anybody already do so ? Otherwise I'd register on behalf of SAC and
see what I can do about the "adhoc" VM,

  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

On Wed, Dec 28, 2011 at 05:28:20PM +0000, Lance Albertson via RT wrote:

Looks like it is indeed hung up on fsck. I tried having it continue but
it rebooted and got stuck on the same fsck error. I'd recommend we just
give you console access to your VMs via our web manager. Can you please
register an account on http://ganeti.osuosl.org and let me know when you
do?

Did anybody already do so ? Otherwise I'd register on behalf of SAC and
see what I can do about the "adhoc" VM,

  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

On 12/28/2011 12:34 PM, Martin Spott via RT wrote:

On Wed, Dec 28, 2011 at 05:28:20PM +0000, Lance Albertson via RT wrote:

Looks like it is indeed hung up on fsck. I tried having it continue but
it rebooted and got stuck on the same fsck error. I'd recommend we just
give you console access to your VMs via our web manager. Can you please
register an account on http://ganeti.osuosl.org and let me know when you
do?

Did anybody already do so ? Otherwise I'd register on behalf of SAC and
see what I can do about the "adhoc" VM,

  Martin.

I just registered, but go ahead and also register an account for you too. Then let me know you're username and I'll contact Lance to have our accounts given access to the VMs. Anyone else want access, just follow the same procedure as I'm sure they can grant access to several of us.

Thanks,
Alex

On Wed Dec 28 20:34:08 2011, Martin.Spott@mgras.net wrote:

On Wed, Dec 28, 2011 at 05:28:20PM +0000, Lance Albertson via RT wrote:

> Looks like it is indeed hung up on fsck. I tried having it continue
> but it rebooted and got stuck on the same fsck error. I'd recommend
> we just give you console access to your VMs via our web manager. Can
> you please register an account on http://ganeti.osuosl.org and let
> me know when you do?

Did anybody already do so ? Otherwise I'd register on behalf of SAC
and see what I can do about the "adhoc" VM,

I added you to the OSGeo group. You should have access to the console,
and VM power control. You also have the ability of adding more OSGeo
admins to the group so they have access.

The console can be flakey sometimes depending on which browser you use.
I normally recommend Chrome although the latest version of Chrome has
some issues we need to fix up. Firefox should work well but might be
slower.

Let me know if you have any questions.

--
Lance Albertson
Systems Administrator / Architect
OSU Open Source Lab

On Thu, Dec 29, 2011 at 12:51:03AM +0000, Lance Albertson via RT wrote:

Let me know if you have any questions.

I'm living on European mainland and need to have some sleep now :wink:
I'll get back tomorrow, many thanks so far,

  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

On Thu, Dec 29, 2011 at 12:51:03AM +0000, Lance Albertson via RT wrote:

Let me know if you have any questions.

I'm living on European mainland and need to have some sleep now :wink:
I'll get back tomorrow, many thanks so far,

  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

On 12/28/2011 04:55 PM, Martin Spott via RT wrote:

On Thu, Dec 29, 2011 at 12:51:03AM +0000, Lance Albertson via RT wrote:

Let me know if you have any questions.

I'm living on European mainland and need to have some sleep now :wink:
I'll get back tomorrow, many thanks so far,

  Martin.

Looks like I have the ability to add more users to admin over our cluster of servers. So just let me know what your username you register with and I'll add you (Martin, etc).

Thanks,
Alex

On 12/28/2011 04:55 PM, Martin Spott via RT wrote:

On Thu, Dec 29, 2011 at 12:51:03AM +0000, Lance Albertson via RT wrote:

Let me know if you have any questions.

I'm living on European mainland and need to have some sleep now :wink:
I'll get back tomorrow, many thanks so far,

  Martin.

Looks like I have the ability to add more users to admin over our
cluster of servers. So just let me know what your username you register
with and I'll add you (Martin, etc).

Thanks,
Alex

Hi Lance,

On Thu, Dec 29, 2011 at 12:51:03AM +0000, Lance Albertson via RT wrote:

On Wed Dec 28 20:34:08 2011, Martin.Spott@mgras.net wrote:

> Did anybody already do so ? Otherwise I'd register on behalf of SAC
> and see what I can do about the "adhoc" VM,

I added you to the OSGeo group.

I'm not quite sure whom you've finally "added to the OSGeo group".
I have now registered with Ganeti as "martin" (as in OSGeo LDAP),
waiting for input :slight_smile:

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

Hi Lance,

On Thu, Dec 29, 2011 at 12:51:03AM +0000, Lance Albertson via RT wrote:

On Wed Dec 28 20:34:08 2011, Martin.Spott@mgras.net wrote:

> Did anybody already do so ? Otherwise I'd register on behalf of SAC
> and see what I can do about the "adhoc" VM,

I added you to the OSGeo group.

I'm not quite sure whom you've finally "added to the OSGeo group".
I have now registered with Ganeti as "martin" (as in OSGeo LDAP),
waiting for input :slight_smile:

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

On 12/30/2011 09:19 AM, Martin Spott via RT wrote:

Hi Lance,

On Thu, Dec 29, 2011 at 12:51:03AM +0000, Lance Albertson via RT wrote:

On Wed Dec 28 20:34:08 2011, Martin.Spott@mgras.net wrote:

Did anybody already do so ? Otherwise I'd register on behalf of SAC
and see what I can do about the "adhoc" VM,

I added you to the OSGeo group.

I'm not quite sure whom you've finally "added to the OSGeo group".
I have now registered with Ganeti as "martin" (as in OSGeo LDAP),
waiting for input :slight_smile:

Cheers,
  Martin.

Martin,

He added me, because I registered with the site. I've now granted admin
permissions to the osgeo stuff to you too.

Thanks,
Alex

On 12/30/2011 09:19 AM, Martin Spott via RT wrote:

Hi Lance,

On Thu, Dec 29, 2011 at 12:51:03AM +0000, Lance Albertson via RT wrote:

On Wed Dec 28 20:34:08 2011, Martin.Spott@mgras.net wrote:

Did anybody already do so ? Otherwise I'd register on behalf of SAC
and see what I can do about the "adhoc" VM,

I added you to the OSGeo group.

I'm not quite sure whom you've finally "added to the OSGeo group".
I have now registered with Ganeti as "martin" (as in OSGeo LDAP),
waiting for input :slight_smile:

Cheers,
  Martin.

Martin,

He added me, because I registered with the site. I've now granted admin
permissions to the osgeo stuff to you too.

Thanks,
Alex

On Fri, Dec 30, 2011 at 10:07:25AM -0800, Alex Mandel wrote:

He added me, because I registered with the site. I've now granted admin
permissions to the osgeo stuff to you too.

Unfortunately my action was delayed because I was unable to reach the
Ganeti interface for a while. Now I'm almost there and the question
arises wether these VM's actually have a root PW ?

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

Hi, I'm running out of ideas - about how to get along with the web
management.

This tool is somehow running a VNC viewer in a browser. I've tried the
most recent Firefox on FreeBSD - but I didn't get a VNC viewer to run
at all.

I've tried Firefox on Win2008 server and partially managed to interact
with the VM, but getting the VM into accepting my keystrokes was really
difficult. I was unable to enter a "/" character into the GRUB boot
loader command line - and actually I spent most of the time for
fiddling with the VM (rebooting, re-connecting the VNC console and the
such) in order to get _any_ keystrokes pushed to the VM, with very
limited success. In most of the sessions the VM simply stopped getting
keystrokes submitted.
Now I tried the distro-installed Firefox on Debian Squeeze and it
doesn't get a connect to the VNC server at all. Whenever I click the
"Connect" button I'm getting a noVNC splash screen titled by a red bar
with "Connect timeout".

I wish we had a solid XEN server together with an SSH login to the Dom0
and xm/xe tools to manage the VM's .... as long as we don't have a
working access to the VM's console there's little I can do about it.

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

On 01/03/2012 11:43 AM, Martin Spott wrote:

Hi, I'm running out of ideas - about how to get along with the web
management.

This tool is somehow running a VNC viewer in a browser. I've tried the
most recent Firefox on FreeBSD - but I didn't get a VNC viewer to run
at all.

I've tried Firefox on Win2008 server and partially managed to interact
with the VM, but getting the VM into accepting my keystrokes was really
difficult. I was unable to enter a "/" character into the GRUB boot
loader command line - and actually I spent most of the time for
fiddling with the VM (rebooting, re-connecting the VNC console and the
such) in order to get _any_ keystrokes pushed to the VM, with very
limited success. In most of the sessions the VM simply stopped getting
keystrokes submitted.
Now I tried the distro-installed Firefox on Debian Squeeze and it
doesn't get a connect to the VNC server at all. Whenever I click the
"Connect" button I'm getting a noVNC splash screen titled by a red bar
with "Connect timeout".

I wish we had a solid XEN server together with an SSH login to the Dom0
and xm/xe tools to manage the VM's .... as long as we don't have a
working access to the VM's console there's little I can do about it.

Cheers,
  Martin.

It works fine for me - Ubuntu PPA Firefox 9. Can you try Chromium
browser (They hinted it might be working better) or just latest firefox
fox direct executable. I wonder if the lag from North America to Europe
is too much.

Last time I looked at the machine in question it was sitting at a prompt
with a message about fsck. You'll need to talk with Lance (Ramareth)
about any connection issues you're having.

Did you figure out the root password (I honestly can't recall if we had one)

Thanks,
Alex

On Tue, Jan 03, 2012 at 12:07:57PM -0800, Alex Mandel wrote:

It works fine for me - Ubuntu PPA Firefox 9. Can you try Chromium
browser (They hinted it might be working better) or just latest firefox
fox direct executable. I wonder if the lag from North America to Europe
is too much.

I don't think it's the latency, that's just approx. 150 ms

I have gone through the pains of setting up another browser (and now
Google Chrome is, without asking, polling dozends of sites I never
wanted to see) and allowed masqueraded HTTP(S) internet access from the
workstation, but the result still looks the same: I'm getting a
"Connection timeout" when trying to read the console of almost any of
the OSGeo VM's (I did not try all of them, but at least some which are
known to be running).

I _do_ get the noVNC console from my spare netbook running latest
Firefox on WinXP on an almost direct internet connection, but I have to
move the mouse all the time in order to get the screen refreshed and
I'm still unable to enter the "/" character into the GRUB command line
because of some apparent keyboard mismatches.

Lance, may we/I get at least some sort of direct access for maintaining
VM's on this host ?

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

Lance, may we/I get at least some sort of direct access for maintaining
VM's on this host ?

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

Lance, may we/I get at least some sort of direct access for maintaining
VM's on this host ?

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------