Showing posts with label redhat. Show all posts
Showing posts with label redhat. Show all posts

Tuesday, March 11, 2014

Compiling OVALDI 5.10.1.6 on CentOS 6.5

Some time ago I wrote about compiling Ovaldi on CentOS 6. Now, I tried to compile it again, and I found out that some things changed. Most importantly, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is no need to compile old Xalan/Xerces libraries any more. But, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are still problems with RPM. To make cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 story short, I managed to compile it and create RPM. Here are cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 files:
  • patch you need to be able to compile ovaldi
  • SRPM file you can use to recompile ovaldi; it contains patch
  • RPM file if you don't want to compile it yourself (and you trust me ;))
Note that I didn't do any testing at all! So, it might happen that rpm based stuff doesn't work. If that's cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 case leave a comment and I'll take a look when I find time.

Wednesday, November 2, 2011

New developments in CentOS world...

Suddenly, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is a flurry of news about CentOS. First, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re was some lengthy discussion on CentOS user's mailing list about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 current state of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 6.1 release and about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 RedHat versus CentOS. Also, on a development mailing list cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is discussion about moving CR repository back to main repository. Finally, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re was a question on Slashdot about why would someone use RedHat when cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is CentOS. So, let me give you a digest of some of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 topics that were discussed.

RedHat Company vs. CentOS Project

Relationship between CentOS and RedHat often comes under discussion and suspicion. And with recent changes that RedHat made, some of which made harder for CentOS to follow RedHat, discussions become even more energetic.

It is true that it bacome hard for CentOS project to follow RedHat releases. The reason is that RedHat on purpose made this process more complicated than necessary. That's why people are bashing RedHat assuming that it is complicating things because of a CentOS. But, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is high probability that RedHat is doing this because of Oracle and Novel. Oracle is building it's own distribution based on RHEL and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n it is selling services for it. Both, Novel and Oracle, are selling services for RHEL too, and with lower prices than RedHat itself. And Novel and Oracle have much more resources on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir disposal than CentOS will ever have. So it seems logical that RadHat is not concerned with CentOS, but with Oracle and Novel. If it were concerned with CentOS than it would be a major tactical error.

Not only that, but CentOS developers are repeatedly stressing that CentOS without RHEL, and RedHat, wouldn't exist, and if you need, or can, that you should buy support from RedHat. This is not done by eicá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r Oracle nor Novell. It turnes out that buying RHEL service isn't so expensive, after all, as I'm going to discuss shortly a bit later.

Also, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is information that someone from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 core team said  that RedHat helped cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m, but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se claims are unverifiable, i.e. I can not find mails where this is written, or anything that could be used as a proof. But, one member of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 core team told on a mailing list that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y were contacted by RedHat to verify that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y (cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 CentOS team) are aware of Acceptable Use Policy (AUP). It is interesting to follow cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 tone of this particular discussion. It started as an information that RedHat contacted cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y asked CentOS if cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y are aware of new AUP. Quickly, this tread turns into bashing RedHat. Finally, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 developer in question responded himself. And cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 conclusion was that it was not hostile neicá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re was any threatening! The developer again explicitly states that CentOS tries to obey AUP as much as possible.

Finally, from some informal discussions that some users had it turns out that RedHat is looking at CentOS beneficially. But I somehow doubt that RedHat can or will help CentOS, at least not publicly. And may I say that whoever expects from RedHat to do so, isn't expecting cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 right thing to happen. Instead, those should expect CentOS project to change itself.

As a side note, I didn't know that Microsoft officially supports CentOS, but only as a virtual guest. This is quite interesting.

CentOS Project

It seems to me that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 main problem to CentOS is CentOS itself. First, for such a large project more people should be included in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 core development team. Second, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 lack of communication from core team is also very seriously hurting CentOS. At cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 time this post was written cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re was an announcement from Sempember, 1st that only 16 packages have to be built and 6.1 will be released. But it was two months ago, and in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 mean time cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re wasn't any announcement or status update. People that use CentOS are those that need some stability and predictability, and both of those seems to be missed by CentOS. All this makes people look for alternatives, and more frequently than not Debian and Ubuntu popup. I hope that I don't have to explain how this hurts RedHat in longer term.

And while I'm at alternatives, it was racá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r interesting to find out that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is also additional alternative to CentOS and Scientific Linux based on RHEL, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 distribution neatly named PUIAS.

RHEL Pricing model
Part of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 discussion were concerned about licensing models. Someone wrongly calculated that you have to pay for a RHEL license $2000/year for 2 sockets (two places for CPU). But cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n it turned out that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are cheaper options, namely, buy only OS without support services. In that case you are paying $50 for a workstation per year, and 350$ for a server per year. These options are actually very attractive for people that use CentOS for a simple reason that in both cases you don't have support, BUT you do have latest security updates.

Also, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is an option of paying $2000/year for virtualization platform with unlimited number of guests. Furcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rmore, this options covers RHEL licences in all guests. Obviously, in case you plan to virtualize some ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r OS, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n you'll have to buy licenses for that OS separately.

CR Repository

Apparently, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are also discussion to change how transitions between point releases is done. CR (or Continuous Repository) has been introduced with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 idea that security updates are faster released. Even though some are happy with CR, while ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rs are not, it seems that it isn't good enough (TM) solution. First, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are many older installations that don't have installed CR repository. They do have installed updates repository, and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y require manual install. This is definitely problematic. Second, constantly some question or something like that pops out in some mailing list. The new idea is that point releases are fixed (e.g. 6.1) while generic release (e.g. 6) is a moving target. All in all, it seems that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 change is inevitable but we'll see what exactly is going to happen.

Monday, October 31, 2011

Testing ovaldi on CentOS 6...

In cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 previous post I described how to compile ovaldi tool for CentOS. In cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 mean time I tested that installation and found few more bugs in rpm handling code:
  • query format was wrong, i.e. cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 tag used was %{SIGGPG:pgpsig} but actually it should be %{SIGPGP:pgpsig}. I tested this on CentOS 6 and Fedora 15 and on both cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 second form is right. The first form returns (none).
  • After obtaining signature key from rpm, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 code wrongly calculated starting offset  of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 key, so you ended up with space before and last digit cutt of. (NOTE: This has been fixed in Ovaldi 5.10.1.1 so I removed that part from my patch!)
Both of those I corrected and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 changes are included in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 provided patch. If you downloaded that patch (or binaries) before this post was published, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n download cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m again.

Since I had problems with rpm I extracted problematic part of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 code into separate program and used it to test its functionality. You can obtain cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 test program here. If you compile it and start it, you'll note that it functions exactly as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following rpm query command:
rpm -q --qf '%{SIGPGP:pgpsig}'
To compile it, use cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following command:
gcc -o rpmq rpmq.c -lrpm
On Fedora you'll also need -lpopt option added on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 end.

Oval definitions for RedHat's security advisories can be found on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following address. I downloaded rhsa.tar.bz2 which includes all cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 advisories, unpacked it and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n modified OVAL description com.redhat.rhsa-20111409.xml. This particular description checks for a vulnerable openssl. To see if cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 check will detect vulnerability I downgraded openssl to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 original version shipped with CentOS, i.e. openssl-1.0.0-4.el6.x86_64. Furcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rmore, I also had to heavily modify aforementioned OVAL description because CentOS doesn't have packages like RedHat, nor it is using cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same signing key. So, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 version I ended up can be obtained here (hope RedHat won't be mad on me for this! :))

Running that description within ovaldi on a vulnerable system produces cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following output:
$ ovaldi -m -o org.centos.cesa-20111409.xml

----------------------------------------------------
OVAL Definition Interpreter
Version: 5.10 Build: 1
Build date: Oct 30 2011 21:40:11
Copyright (c) 2002-2011 - The MITRE Corporation
----------------------------------------------------

Start Time: Mon Oct 31 00:14:16 2011

 ** parsing org.centos.cesa-20111409.xml file.
    - validating xml schema.
 ** checking schema version
     - Schema version - 5.3
 ** skipping Schematron validation
 ** creating a new OVAL System Characteristics file.
 ** gacá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ring data for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 OVAL definitions.
      Collecting object:  FINISHED                         
 ** saving data model to system-characteristics.xml.
 ** running cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 OVAL Definition analysis.
      Analyzing definition:  FINISHED                      
 ** applying directives to OVAL results.
 ** OVAL definition results.

    OVAL Id                                 Result
    -------------------------------------------------------
    oval:org.centos.cesa:def:20111409        true          
    -------------------------------------------------------


 ** finished evaluating OVAL definitions.

 ** saving OVAL results to results.xml.
 ** running OVAL Results xsl: /opt/oval/share/ovaldi/xml/results_to_html.xsl.

----------------------------------------------------

Basically, it detects that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 vulnerability present (clearly indicated by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 result field which I set to bold to be more visible!). After performing an update to CentOS and running test again produces negative results, as expected, i.e.
$ ovaldi -m -o org.centos.cesa-20111409.xml

----------------------------------------------------
OVAL Definition Interpreter
Version: 5.10 Build: 1
Build date: Oct 30 2011 21:40:11
Copyright (c) 2002-2011 - The MITRE Corporation
----------------------------------------------------

Start Time: Mon Oct 31 00:16:55 2011

 ** parsing org.centos.cesa-20111409.xml file.
    - validating xml schema.
 ** checking schema version
     - Schema version - 5.3
 ** skipping Schematron validation
 ** creating a new OVAL System Characteristics file.
 ** gacá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ring data for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 OVAL definitions.
      Collecting object:  FINISHED                         
 ** saving data model to system-characteristics.xml.
 ** running cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 OVAL Definition analysis.
      Analyzing definition:  FINISHED                      
 ** applying directives to OVAL results.
 ** OVAL definition results.

    OVAL Id                                 Result
    -------------------------------------------------------
    oval:org.centos.cesa:def:20111409        false         
    -------------------------------------------------------


 ** finished evaluating OVAL definitions.

 ** saving OVAL results to results.xml.
 ** running OVAL Results xsl: /opt/oval/share/ovaldi/xml/results_to_html.xsl.

----------------------------------------------------
This time ovaldi produced cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following files ovladi.log, results.xml, results.html and system-characteristics.xml.

With this I'm now pretty sure that ovaldi works on centos. Still, more extensive testing is absolutely necessary, but for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 time being this, I think, is a great step forward.

So, here are some conclusions from this exercise:
  • CentOS doesn't have assigned CPE values past version 5. So, some procedure has to be initiated in that respect.
  • RedHat's oval descriptions can not be used for two reasons. First, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 legality is questionable, and second, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 change is not straightforward.
  • Editing of OVAL XML description files is very hard and error prone. Furcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rmore, ovaldi itself is not very helpful. For example, if you don't get IDs and references right, it will complain but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 diagnostic information is basically useless.
Just as a note, when I had a problem that some test, or object or something else, is referenced but not defined, I used cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following quick hack to find cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 offending ID:
for i in `grep _ref org.centos.cesa-20111409.xml | cut -f2 -d\"`do grep -q id=\"$i org.centos.cesa-20111409.xml || echo $i ; done
Which printed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 offending ID.

That concludes this post. In some future post I'll describe in more detail cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 structure of OVAL description, and in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 mean time you can find some old information on my homepage.

Sunday, October 30, 2011

Compiling OVALDI for CentOS 6


I described in one earlier post cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 purpose of OVAL and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 benefits it gives to a user. Here I'm going to describe how to setup OVAL interpreter on CentOS 6. The problem is that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is no prepackaged Oval interpreter for CentOS 6. Actually, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is but it's only for 32 bit version of CentOS 4 and 5, an it is an older version, not cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 latest one. So, here I'm going to describe how to build it from source. The build process consists of building XML processor Xalan, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n XSLT processor Xerces and finally in building interpreter itself. There are certain prerequisites you need to have in order for Oval to build, I'll mention those also.

I'll assume that you created working directory for this purpose and that you run all cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following commands within that directory. When necessary, I'll reference that directory as $WORKDIR and when you see that string replace it with full path of your working directory. Also, I'm going to install oval interpreter into directory /opt/oval. The reason I'm not placing it into some of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "system" directories like /usr/bin, /usr/lib and similar is to avoid clash with versions of xalan and xerces shipped with distribution itself.

In case you trust me enough, here is archive of final content of directory /opt/oval, so you can unpack it and skip to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Running ovaldi section.

Installing prerequisites

Xerces
Download version 2.8.0, or whatever is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 latest version of Xalan 2. Don't use Xalan 3 because API was changed with respect to version 2 and OVAL won't work with it! In cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following text, I'll reference version 2.8.0 and if cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is a newer one replace version numbers as necessary.

After downloading some package it is a good practice to check MD5 sum (or SHA1). In this case md5 sum will give cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following output:
$ md5sum xerces-c-src_2_8_0.tar.gz
5daf514b73f3e0de9e3fce704387c0d2  xerces-c-src_2_8_0.tar.gz
which matches cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 one given on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 dowload page.

Now, unpack cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 archive using cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following command:
$ tar xzf xerces-c-src_2_8_0.tar.gz
and you'll get directory xerces-c-src_2_8_0/. Go into that directory and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n into src/xercesc subdirectory. Before configuring distribution set cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 environment variable XERCESCROOT to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 top level directory of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 unpacked archive, i.e.
export XERCESCROOT=$WORKDIR/xerces-c-src_2_8_0
now, start configuration process:
./runConfigure -p linux -c gcc -x c++ -b 64 -P /opt/oval
In that command option p specifies platform on which you are performing build process, option c specifies compiler to use, x specifies c++ compiler, option b determines bit width of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 platform (32 or 64 bit) and option P specifies installation directory. All cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r options have appropriate default values. Note that you must specify c++ instead of g++! If you specify g++, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n while building Xalan, you'll get cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following errors:
$XERCESCROOT/lib/libxerces-c.so: undefined reference to `stricmp(char const*, char const*)'
$XERCESCROOT/lib/libxerces-c.so: undefined reference to `strnicmp(char const*, char const*, unsigned int)'
The problem is that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 configuration process misidentified that GNU's compiler is used that doesn't have stricmp and strnicmp functions and it didn't include replacement functions!

If everything went without an error, start build process by issuing make command:
make
and finally, install xerces (you should switch to root user to run cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following command):
make install

Xalan
Go to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 download page and take most recent version of Xalan. I was using 1.10 which was cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 latest one at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 time this post was written. So, after download it, and checking signature(!), unpack it with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following command:
tar xzf Xalan-C_1_10_0-src.tar.gz
This will create new directory, xml-xalan/. Before building Xalan, you should apply a patch to it. The problem is that gcc developers made some changes to header files (removed unnecessary includes) in recent version available on CentOS and that means that some prerequisite includes have to be explicitly specified. The problem is manifested with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following error messages:
home/zavod/sgros/work/xml-xalan/c/src/xalanc/XalanDOM/XalanDOMString.cpp: In member function ‘xalanc_1_10::XalanDOMString& xalanc_1_10::XalanDOMString::assign(const xalanc_1_10::XalanDOMString&, xalanc_1_10::XalanDOMString::size_type, xalanc_1_10::XalanDOMString::size_type)’:
/home/zavod/sgros/work/xml-xalan/c/src/xalanc/XalanDOM/XalanDOMString.cpp:251: error: ‘memmove’ was not declared in this scope
/home/zavod/sgros/work/xml-xalan/c/src/xalanc/XalanDOM/XalanDOMString.cpp: In static member function ‘static xalanc_1_10::XalanDOMString::size_type xalanc_1_10::XalanDOMString::length(const char*)’:
/home/zavod/sgros/work/xml-xalan/c/src/xalanc/XalanDOM/XalanDOMString.cpp:780: error: ‘strlen’ was not declared in this scope
So, download cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 patch and enter into xml-xalan directory. Then, run cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following command:
$ patch -p1 < ../xml-xalan.gcc-4.4.patch
patching file c/src/xalanc/TestXPath/TestXPath.cpp
patching file c/src/xalanc/XalanDOM/XalanDOMString.cpp
patching file c/src/xalanc/XalanExe/XalanExe.cpp
patching file c/src/xalanc/XMLSupport/FormatterToHTML.cpp
patching file c/src/xalanc/XSLT/ElemNumber.cpp
this assumes that you've downloaded patch into cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same place where you downloaded Xalan itself (i.e. $WORKDIR).

Now, enter into subdirectory named c/. Before configuring cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 build process, define cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 variable XALANCROOT. You should set it to $WORKDIR/xml-xalan/c with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following command:
export XALANCROOT=$WORKDIR/xml-xalan/c
Also, note that Xalan depends on Xerces and to be able for Xalan to find Xerces you need to set cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 environment variable XERCESROOT, or Xerces has to be in some system directory that is searched by default (e.g. /usr/include and similar directories).  If you followed this post withouth interruption, you probably have it defined already. Now, initiate configure process using runConfigure command:
./runConfigure -p linux -c gcc -x c++ -b 64 -P /opt/oval
cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 options used are same as for Xerces. Initiate build process using make, and after build finishes, install it using 'make install' command switching before to root user.

Necessary development packages
As a final prerequisite you should check that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following development packages are installed. The simplest way to do that is to initiate install process and yum will react appropriately: pcre-devel, libgcrypt-devel, rpm-devel, openldap-devel, libblkid-devel, and libselinux-devel.

Building and installing Ovaldi
Go now to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 download page of Ovaldi and download cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 latest version. Version 5.10.1.1 is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 latest one at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 time of writing this post. So download it and upack it. This will create directory ovaldi-5.10.1.1-src. Also, download cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following patch. Note that this patch is made so that ovaldi can be compiled on CentOS 6 and it is not applicable for ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r distributions, neicá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r it will allow ovaldi to be compiled on ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r platforms (though, very unlikely it might :)).

Now, enter ovaldi-5.10.1.1-src directory and apply patch:
patch -p1 < ../ovaldi-5.10.1.1-centos6.patch
Three changes are in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 patch file. The first one is addition of /opt/oval/include and /opt/oval/lib directories in main Makefile. The second are some changes to RPM part of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 code since API has changed in recent versions of RPM. More specifically, I introduced compatibility switch (-D_RPM_4_4_COMPAT) and also replaced int_32 with int32_t types.

Third change resolves cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following error message already reported on some forums:
Error running rpm query in child process: blah: -q: unknown option
There is also additional patch that isn't always necessary, and that's why I separated it. Namely, I placed ovaldi in /opt/oval directory, while ovaldi expects by default its shared files to be within /usr/share/oval. So, this patch changes this:
patch -p1 < ../ovaldi-5.10.1.1-sharepath.patch
Since for some unknown reason (I didn't have will/time to investigate furcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r) linker can not find libxalanMsg.so.110 library, even though it has appropriate path in -L option, define LD_LIBRARY_PATH using cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following command prior to comilation:
export LD_LIBRARY_PATH=/opt/oval/lib/
Finally, enter project/linux subdirectory and initiate build process:
make
When cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 build process is over, copy ovaldi binary (you'll find it in project/linux/Release subdirectory) to /opt/oval/bin directory. Also, create directory /opt/oval/share/ovaldi and move cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re directory xml (you'll find it directly beneath ovaldi-5.10.1.1-src directory).

Running ovaldi
Finally, we are ready to run ovaldi interpreter. Before running ovaldi you should define LD_LIBRARY_PATH and optinally PATH variable. In ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r words, before running ovaldi execute once cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se commands:
export LD_LIBRARY_PATH=/opt/oval/lib
export PATH=/opt/oval/bin:$PATH
Then, try to run ovaldi, you should get help message.

This concludes this post. In cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 next one I'm going to try to run ovaldi using RedHat's provided files. Until I do this note that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 patches I provided may turn to have errors that would prevent ovaldi from correctly functioning.

Thursday, September 29, 2011

Why I think it is in RedHat's interest to help CentOS...

Today I was asked if cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are any security implications in selecting particular licensing model from Microsoft. Basically, I know nothing about that particular subject, and as far as I can remember from some previous experiences, this is something that requires specialization in itself. To cut cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 story short, I don't intend to waste my time in studying Microsoft's licensing models! So, in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 end I basically said that any option is valid from my perspective as long as we have access to security updates. No more no less...

But since everything was about selecting cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 least expensive solution, I mentioned that it might be beneficial to introduce LibreOffice (OpenOffice) instead of Microsoft Office and/or Linux on certain workstations because people don't use all cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 functionality of Windows and especially Microsoft Office. It is true that LibreOffice isn't quite a match to Microsoft Office, but for people that only write a single page of something and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n send this to a printer it is to much to pay for a whole office suite! Or, those that access remote machines and do cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir work cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re it is also to much to maintain cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 whole workstation with a full productivity suite on it. My idea was, unsurprisingly, rejected because of a slew of problems, like compatibility between different office suites, support for equivalent functionality of Outlook, potential problems with user support, etc. Those might or might not be cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 problems, but in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 end, I was asked what distribution I would recommend if cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re would be (partial) migration?

I said, without almost any thinking, latest version of Ubuntu LTS! Let me first clarify that I'm actually die hard user of Fedora, and also CentOS, and I use cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m as much as I can. But, I also stand firmly on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ground and I'm aware of problems associated with that route. First, you'll probably ask why I didn't recommend RHEL? Well, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 reason is simple, it costs, and price cut wouldn't be large enough to justify such transition. Scientific Linux, as I already blogged about, has a problem with a name. If I'm going to say "Use Scientific Linux!" probably I would be rejected with a comment something in a line with "Wow, we are not scientific institution!". And for CentOS, well, no timely security updates! Period. Ok, to be honest, I do install CentOS on servers in a good hope that things will become better, but it is on a small scale and I'm usually directly in charge of those servers. Note that I didn't mention Fedora as an alternative. Well, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 reasons are bitten to death by now, so I won't go into that.

So this leaves me with Ubuntu or Debian. The clear winner is definitely Ubuntu, more specifically, Ubuntu LTS. The reasons in favor are strong. First, quite user friendly, second, long time support (LTS!), third advanced almost like Fedora, but without Fedora's short support timeframe. Finally, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is possibility of obtaining support contract.

And what's cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 conclusion? The conclusion is that Ubuntu slowly and certainly is introduced into business environments which might or might not pose a threat to RHEL... decide for yourself...

Tuesday, September 27, 2011

CentOS... something is happening!

I just noticed that RPM packages from RHEL 6.1 appeared on mirrors. Actually, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y announced it few days earlier but that was sooner that I was expecting. :)

There is a small catch. In order for yum to be able to catch those packages you'll have to add new repository. Namely, CentOS team decided to go with a mechanism cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y call Continuous updates. In that way cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y'll try to be faster, but, time will tell if it will work or not.

The quickest way to do that is to run cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following command:

rpm -ivh ftp://ftp.funet.fi/pub/mirrors/centos.org/6/cr/i386/RPMS/centos-release-cr-6-0.el6.centos.i686.rpm

or for 64-bit systems:

rpm -ivh ftp://ftp.funet.fi/pub/mirrors/centos.org/6/cr/x86_64/RPMS/centos-release-cr-6-0.el6.centos.x86_64.rpm

This will install necessary data for yum. Then, just run 'yum update' and that's it!

Still, we'll have to wait a bit more for 6.1, and especially for FreeIPA 2 that I'm waiting for!

About Me

scientist, consultant, security specialist, networking guy, system administrator, philosopher ;)

Blog Archive