Difference between revisions of "Sme11BuildQueue"
Unnilennium (talk | contribs) (→Notes) |
|||
| (14 intermediate revisions by 2 users not shown) | |||
| Line 1,194: | Line 1,194: | ||
==Bare install test== | ==Bare install test== | ||
{{Warning box|WIP inspired from [[Sme10BuildQueue#Bare install test]]}} | {{Warning box|WIP inspired from [[Sme10BuildQueue#Bare install test]]}} | ||
| − | |||
| − | + | Install minimal iso for rocky 8 | |
| − | + | https://download.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-8-latest-x86_64-minimal.iso | |
| + | |||
| + | Configure network access during installation with option to restore. Configure only root user. | ||
| + | |||
| + | Install EPEL8 repo. | ||
dnf install epel-release | dnf install epel-release | ||
| − | + | Install remi 8 repos | |
dnf install <nowiki>https://rpms.remirepo.net/enterprise/remi-release-8.rpm</nowiki> | dnf install <nowiki>https://rpms.remirepo.net/enterprise/remi-release-8.rpm</nowiki> | ||
| − | + | Update, and install those package, as the might get handy (nb iptraf is now iptraf-ng) | |
dnf update -y | dnf update -y | ||
| − | dnf install mc htop iftop iptraf screen wget vim | + | dnf install mc htop iftop iptraf screen wget vim ppp traceroute setserial traceroute cyrus-sasl-md5 cyrus-sasl device-mapper-multipath dhcp-client fetchmail ftp iscsi-initiator-utils lm_sensors minicom mt-st sysfsutils tcpdump telnet wodim |
| − | * | + | * Disable SELinux |
SELinux is enabled by default. We want to disable it for there are a few services (e.g. httpd) that get blocked by SELinux. To check the status of SELinux you can enter the command: | SELinux is enabled by default. We want to disable it for there are a few services (e.g. httpd) that get blocked by SELinux. To check the status of SELinux you can enter the command: | ||
| Line 1,273: | Line 1,276: | ||
try installing SME11 packages, you might need to enable some repo using --enablerepo=smedev,epel,elrepo ... e.g. | try installing SME11 packages, you might need to enable some repo using --enablerepo=smedev,epel,elrepo ... e.g. | ||
| − | dnf module | + | dnf module switch-to php:remi-8.3 -y |
| − | dnf module | + | dnf module switch-to mariadb:10.5 -y |
| − | + | dnf module switch-to python36:3.6 -y | |
| − | dnf module | + | dnf module install php:remi-8.3 |
| − | dnf module install php:remi-8. | + | dnf install e-smith-manager smeserver-* --enablerepo=koji-sme11-os,epel,remi,remi-safe,of --exclude=smeserver-mariadb* --exclude=smeserver-horde |
| − | dnf install smeserver-* --enablerepo=koji-sme11,epel,remi,remi-safe,of --exclude=smeserver-mariadb* | + | {{Warning box|we will drop horde support, so we have no limitation in keeping php 8.1 which is obsolete, I suggest to go with 8.3 EOL 23 Nov 2026}} |
| − | + | et voilà, you have a non functional SME 11 over Rocky 8 minimal. | |
| − | + | ||
| + | Also remember that the legacy server manager (SM1) is not installed by the above, so, perhaps: | ||
| − | + | dnf install e-smith-manager | |
| − | <nowiki>##</nowiki> | + | If you then find you get an SM1 login but the login just celars the fields and does not login, then you can fix this with:<syntaxhighlight lang="shell"> |
| + | expand-template /etc/e-smith/web/common//cgi-bin/AuthTKT.cfg | ||
| + | </syntaxhighlight>'''<nowiki>##</nowiki> This is safer to be done directly on tty, not via ssh:''' | ||
| − | + | Get rid of Network-Manager NOW! | |
systemctl stop NetworkManager | systemctl stop NetworkManager | ||
systemctl disable NetworkManager | systemctl disable NetworkManager | ||
| Line 1,292: | Line 1,298: | ||
systemctl disable NetworkManager-wait-online.service | systemctl disable NetworkManager-wait-online.service | ||
systemctl start networking | systemctl start networking | ||
| + | dnf remove NetworkManager* --noautoremove | ||
then you could try, (you might have no network form there), unlink this to avoid root password locking | then you could try, (you might have no network form there), unlink this to avoid root password locking | ||
unlink /etc/e-smith/events/post-install/S10init-passwords | unlink /etc/e-smith/events/post-install/S10init-passwords | ||
| − | signal-event post-install | + | /sbin/e-smith/signal-event post-install |
if you want to avoid the reboot and configure loop for the moment you can do | if you want to avoid the reboot and configure loop for the moment you can do | ||
passwd admin | passwd admin | ||
| Line 1,303: | Line 1,310: | ||
/sbin/e-smith/db configuration setprop bootstrap-console Restore disabled | /sbin/e-smith/db configuration setprop bootstrap-console Restore disabled | ||
then try to configure using console | then try to configure using console | ||
| − | console | + | /sbin/e-smith/console |
| + | To get better information from Server Manager 2 (this replaces the barfing dinosaur):<syntaxhighlight lang="shell"> | ||
| + | mkdir -p /etc/e-smith/templates-custom/usr/share/smanager/conf/srvmngr.conf/ | ||
| + | cat <<EOF > /etc/e-smith/templates-custom/usr/share/smanager/conf/srvmngr.conf/30Other | ||
| + | modules_dir => 'lib/SrvMngr/Controller', | ||
| + | webapp => 'smanager', | ||
| + | mode => 'development', | ||
| + | debug => 1, | ||
| + | \} | ||
| + | EOF | ||
| + | expand-template /usr/share/smanager/conf/srvmngr.conf | ||
| + | signal-event smanager-refresh | ||
| + | </syntaxhighlight> | ||
| + | |||
| + | |||
then to be sure to get sshd back | then to be sure to get sshd back | ||
/sbin/e-smith/db configuration setprop sshd status enabled PermitRootLogin yes access public | /sbin/e-smith/db configuration setprop sshd status enabled PermitRootLogin yes access public | ||
| Line 1,313: | Line 1,334: | ||
then you can | then you can | ||
signal-event post-upgrade; | signal-event post-upgrade; | ||
| − | signal-event | + | signal-event reboot; |
or maybe | or maybe | ||
signal-event bootstrap-console-save; | signal-event bootstrap-console-save; | ||
signal-event-reboot | signal-event-reboot | ||
| − | <nowiki>##</nowiki> end of the part better on tty than on sshd | + | '''<nowiki>##</nowiki> end of the part better on tty than on sshd''' |
you can also tidy a little | you can also tidy a little | ||
| Line 1,325: | Line 1,346: | ||
| − | you might need | + | you might need avoid using sme* repo except for koji builsdsystem one as long as they are not populated to do so: |
| + | <syntaxhighlight lang="shell"> | ||
| + | mkdir -p /etc/e-smith/templates-custom/etc/dnf/dnf.conf/ | ||
| + | echo "#rem custom"> /etc/e-smith/templates-custom/etc/dnf/dnf.conf/20main_reposdir | ||
| + | expand-template /etc/dnf/dnf.conf | ||
| + | </syntaxhighlight>also you might want to plan ahead and put the koji repo for when you will have deleted the custom template. | ||
vim /etc/yum.smerepos.d/koji.repo | vim /etc/yum.smerepos.d/koji.repo | ||
and paste: | and paste: | ||
| Line 1,335: | Line 1,361: | ||
gpgcheck=0 | gpgcheck=0 | ||
enablegroups=1 | enablegroups=1 | ||
| − | |||
| − | from there if you are lucky | + | |
| + | |||
| + | from there if you are lucky it worked and you can try to test , report as bug or even create a patch | ||
== Notes == | == Notes == | ||
Latest revision as of 15:44, 28 June 2024
This page lists all the packages that SME Server needs to build for SME 11. The starting point is the smeos directory from SME 10. For each package it should be checked if it is still needed, or can we use an upstream package if one is available. see bug https://bugs.koozali.org/show_bug.cgi?id=12424
Package Build Steps
things have changed between SME10 and SME11. we moved from cvs to git. We also need to change the name of a few old e-smith rpm to smeserver for better consistency, but without forgetting from where we are coming. git is available here : https://src.koozali.org
TODO; write how to checkout and start a build
TODO ; reference on how to configure a build environement.
Required dependencies
created from the work on SME10, and updated.
you can use http://pkgs.org to fill the blank, reference where the rpm can be found (EPEL8,ROCKY8,REMI8,OPENFUSION8,RPMFUSION8,smedev,smetest) and the status (Build OK, NEED COPY,NOTABUG,WONTFIX,FIXED).
fill bug before building a new package : https://bugs.contribs.org/enter_bug.cgi?product=SME%20Server%2011.X&component=build
| Package Requiring | Required Package | Possible sources | status | Reference |
|---|---|---|---|---|
| dar | par2cmdline | epel | par2cmdline-0.8.0-3.el8.x86_64.rpm | |
| smeserver-apache | mod_authnz_external | epel | mod_authnz_external-3.3.3-3.el8.x86_64.rpm | |
| smeserver-base | pv | epel | pv-1.6.6-7.el8.x86_64.rpm | |
| smeserver-email | perl(Net::Server::Fork) | Rocky Linux AppStream | perl-Net-Server-2.009-3.el8.noarch.rpm | |
| smeserver-email | perl(Net::Server) >= 0.85 | Rocky Linux AppStream | perl-Net-Server-2.009-3.el8.noarch.rpm | |
| smeserver-grub | grub2 | Rocky Linux BaseOS | grub2-pc-2.02-150.el8.rocky.0.1.x86_64.rpm | |
| smeserver-horde | php-pear(HTTP) | none | ||
| smeserver-horde | php-pear(Date) | epel / remi | php-pear-Date-1.4.7-22.el8.noarch.rpm
php-pear-Date-1.4.7-20.el8.remi.noarch.rpm | |
| smeserver-horde | php-pear(Services_Weather) | none | ||
| smeserver-horde | php-pear(File) | none | ||
| smeserver-horde | php-pear(Log) | remi | php-pear-Log-1.14.1-1.el8.remi.noarch.rpm | |
| smeserver-horde | php-pear(HTTP_Request) | epel / remi | php-pear-HTTP-Request-1.4.4-18.el8.noarch.rpm
php-pear-HTTP-Request-1.4.4-16.el8.remi.noarch.rpm | |
| smeserver-ldap | libdb4-utils | raven third party...
https://pkgs.dyn.su/el8/base/SRPMS/libdb4-4.8.30-30.el8.src.rpm | ||
| smeserver-devtools | perl-Pod-Tests | epel | perl-Pod-Tests-1.20-6.el8.noarch.rpm | |
| smeserver-lib | perl(Authen::PAM) | epel | perl-Authen-PAM-0.16-37.el8.x86_64.rpm | |
| smeserver-lib
perl-Mojolicious |
perl(Taint::Util) | epel | perl-Taint-Util-0.08-22.el8.x86_64.rpm | |
| smeserver-mysql | mariadb-server | Rocky Linux AppStream / mariadb | mariadb-server-10.5.22-1.module | |
| smeserver-nutUPS | nut | epel | nut-2.8.0-3.el8.x86_64.rpm | |
| smeserver-nutUPS | nut-client | epel | ||
| smeserver-proftpd | proftpd | epel | proftpd-1.3.6e-6.el8.x86_64.rpm | |
| smeserver-radiusd | radiusclient-ng >= 0.5.6 | none, should migrate to freeradius-client . radius | ||
| mbuffer | libmhash.so.2()(64bit) | epel | mhash-devel-0.9.9.9-20.el8.x86_64.rpm | |
| smeserver-lib | perl(Text::Template) | Rocky Linux AppStream | perl-Text-Template-1.51-1.el8.noarch.rpm (also module 1.58 and 1.47) | |
| qpsmtpd | perl(Net::IP) | epel | perl-Net-IP-1.26-20.el8.noarch.rpm | |
| smeserver-qpsmtpd | perl-MIME-tools | epel | perl-MIME-tools-5.509-9.el8.noarch.rpm | |
| smeserver-qpsmtpd | perl-File-MMagic | Rocky Linux Devel | perl-File-MMagic-1.30-16.el8.noarch.rpm | |
| smeserver-qpsmtpd | perl-Convert-TNEF | epel | perl-Convert-TNEF-0.18-17.el8.noarch.rpm | |
| smeserver-spamassassin | perl-razor-agents | epel | add dep back to spec | perl-Razor-Agent-2.86-1.el8.x86_64.rpm |
| smeserver-spamassassin | pyzor | epel | pyzor-1.0.0-28.20200530gitf46159b.el8.noarch.rpm | |
| smeserver-horde | php-pear-Log | remi | php-pear-Log-1.14.1-1.el8.remi.noarch.rpm | |
| smeserver-horde | php-pecl-geoip | remi-modular | wait | is required by remi for php-horde-imp, php-horde-kronolith, php-horde-nag, php-horde-turba : available by modular only |
| smeserver-horde | php-imap | remi-modular | wait | is required by remi for php-horde-ingo, php-horde-mnemo : available by modular only |
| smeserver-horde | php-channel-horde
php-channel(pear.horde.org) |
remi | wait | remi php-channel-horde |
| smeserver-horde | php-horde-Horde-Role | remi | wait | remi php-horde-Horde-Role |
RPM's from smeos directory
before attempting to buidl check if they are available and put them rather in the table above with source to copy from, with at least the version number we had on SME10.
if you need to build check if a newer version is available. Sometime we might need to stick to an old version so document here when uping version in reference.
koji build dist-sme11-os git+https://src.koozali.org/smeserver/PACKAGE.git?#GITTAG
where PACKAGE is listed under, and GITTAG should be found in https://src.koozali.org
Packages in git, but we will use upstream
| Package | Builder | status | Reference |
|---|---|---|---|
| dar | X | epel: dar-2.7.6-2.el8.x86_64.rpm | |
| geoipupdate | X | Rocky Linux AppStream : geoipupdate-2.5.0-3.el8.x86_64.rpm
unless we see we have a local patch to use older app | |
| maildrop-2.8.4 | X | epel maildrop-3.0.8-1.el8.x86_64.rpm | |
| mbuffer | X | epel mbuffer-20190725-1.el8.x86_64.rpm | |
| mod_perl | X | epel mod_perl-2.0.12-1.el8.x86_64.rpm | |
| oidentd >= 2.0.6 | X | epel oidentd-2.5.0-1.el8.x86_64.rpm | |
| perl-Crypt-Cracklib | X | epel perl-Crypt-Cracklib-1.7-24.el8.x86_64.rpm | |
| perl-Data-Validate-Domain | X | epel perl-Data-Validate-Domain-0.15-7.el8.noarch.rpm
openfusion perl-Data-Validate-Domain-0.14-1.of.el8.noarch.rpm | |
| perl-IO-Socket-SSL | X | Rocky Linux AppStream perl-IO-Socket-SSL-2.066-4.module | |
| perl-Mail-RFC822-Address | X | epel perl-Mail-RFC822-Address-0.3-36.el8.noarch.rpm | |
| perl-Net-IMAP-Simple-1.1916 | X | openfusion perl-Net-IMAP-Simple-1.2212-1.of.el8.noarch.rpm | |
| https://src.koozali.org/smeserver/perl-Mojolicious | X | epel 8 perl-Mojolicious-8.42-1.el8.noarch.rpm | |
| perl-RPM2 | X | epel perl-RPM2-1.4-10.el8.x86_64.rpm | |
| ppp | X | Rocky Linux BaseOS ppp-2.4.7-26.el8_1.x86_64.rpm |
Packages to obsolete from git / not to build
| Package | Builder | status | Reference |
|---|---|---|---|
| cvm | to drop! | ||
| pam_abl | need git | https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/source/tree/Packages/p/pam_abl-0.6.0-25.fc40.src.rpm https://github.com/deksai/pam_abl https://github.com/deksai/pam_abl/archive/refs/tags/v0.9.0.tar.gz
not installed on SME10 | |
| rssh | to drop | unmaintianed and unsecure http://www.pizzashack.org/rssh/
need to import - EL7: https://rhel.pkgs.org/7/epel-x86_64/rssh-2.3.4-16.el7.x86_64.rpm.html | |
| smeserver-cvm-unix-local | to drop! | ||
| smeserver-dynamicdns-dyndns | to drop? | ||
| smeserver-dynamicdns-dyndns.org | to drop? | ||
| smeserver-dynamicdns-tzo | to drop? | ||
| smeserver-dynamicdns-yi | to drop? | ||
| whiptail | usage drop, references needs to be removed | ||
| wv-1.2.7 | cc1: some warnings being treated as errors
make[2]: warning: 'password' may be used uninitialized in this function [-Wmaybe-uninitialized] => not installed on SME10 ; was needed by e-smith-horde, but not anymore new version and last version (2009) https://sourceforge.net/projects/wvware/files/wv2-0.4.2.tar.bz2/download |
Bare install test
Install minimal iso for rocky 8
https://download.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-8-latest-x86_64-minimal.iso
Configure network access during installation with option to restore. Configure only root user.
Install EPEL8 repo.
dnf install epel-release
Install remi 8 repos
dnf install https://rpms.remirepo.net/enterprise/remi-release-8.rpm
Update, and install those package, as the might get handy (nb iptraf is now iptraf-ng)
dnf update -y dnf install mc htop iftop iptraf screen wget vim ppp traceroute setserial traceroute cyrus-sasl-md5 cyrus-sasl device-mapper-multipath dhcp-client fetchmail ftp iscsi-initiator-utils lm_sensors minicom mt-st sysfsutils tcpdump telnet wodim
- Disable SELinux
SELinux is enabled by default. We want to disable it for there are a few services (e.g. httpd) that get blocked by SELinux. To check the status of SELinux you can enter the command:
getenforce
SELinux uses policies that conflict with some of the SME Server services ports like https. One can adjust the allowed ports, or remove the SELinux policies and disable SELinux by the following commands:
setenforce 0 sed -i -e 's/SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config dnf remove selinux-policy-targeted
- SSH
SSH is present and is enabled by default at this stage. To check issue:
systemctl status sshd
You may have a slow login to ssh, if needed :
vi /etc/ssh/sshd_config
You have to restart the ssh service , You might also want to wget your public keys in /root/.ssh/authorized_keys
systemctl restart sshd
update packages
dnf update
install SME11 repo
vim /etc/yum.repos.d/smeserver11.repo
and paste
[smedev] enabled=0 MirrorList=http://mirrorlist.contribs.org/mirrorlist/smedev-11 name=SME Server - dev gpgcheck=1 enablegroups=1 [smetest] enabled=0 MirrorList=http://mirrorlist.contribs.org/mirrorlist/smetest-11 name=SME Server - dev gpgcheck=1 enablegroups=1 [smeos] enabled=0 MirrorList=http://mirrorlist.contribs.org/mirrorlist/smeos-11 name=SME Server - dev gpgcheck=1 enablegroups=1 [smeupdates] enabled=0 MirrorList=http://mirrorlist.contribs.org/mirrorlist/smeupdates-11 name=SME Server - dev gpgcheck=1 enablegroups=1 [koji-sme11-os] enabled=1 name=sme11-os baseurl=http://koji.koozali.org/kojifiles/repos/dist-sme11-build/latest/x86_64/ gpgcheck=0 enablegroups=1
install SME10 key
wget http://mirror.koozali.org/releases/10/smeos/x86_64/RPM-GPG-KEY-koozali rpm --import RPM-GPG-KEY-koozali
install openfusion 8
dnf install http://repo.openfusion.net/centos8-x86_64/openfusion-release-0.8-2.of.el8.noarch.rpm
then
dnf --enablerepo=* clean all
try installing SME11 packages, you might need to enable some repo using --enablerepo=smedev,epel,elrepo ... e.g.
dnf module switch-to php:remi-8.3 -y dnf module switch-to mariadb:10.5 -y dnf module switch-to python36:3.6 -y dnf module install php:remi-8.3 dnf install e-smith-manager smeserver-* --enablerepo=koji-sme11-os,epel,remi,remi-safe,of --exclude=smeserver-mariadb* --exclude=smeserver-horde
et voilà, you have a non functional SME 11 over Rocky 8 minimal.
Also remember that the legacy server manager (SM1) is not installed by the above, so, perhaps:
dnf install e-smith-manager
If you then find you get an SM1 login but the login just celars the fields and does not login, then you can fix this with:
expand-template /etc/e-smith/web/common//cgi-bin/AuthTKT.cfg
## This is safer to be done directly on tty, not via ssh:
Get rid of Network-Manager NOW!
systemctl stop NetworkManager systemctl disable NetworkManager systemctl stop NetworkManager-wait-online.service systemctl disable NetworkManager-wait-online.service systemctl start networking dnf remove NetworkManager* --noautoremove
then you could try, (you might have no network form there), unlink this to avoid root password locking
unlink /etc/e-smith/events/post-install/S10init-passwords /sbin/e-smith/signal-event post-install
if you want to avoid the reboot and configure loop for the moment you can do
passwd admin /usr/bin/systemctl restart rsyslog /sbin/e-smith/db accounts setprop admin PasswordSet yes /sbin/e-smith/db configuration set PasswordSet yes /sbin/e-smith/db configuration setprop bootstrap-console Restore disabled
then try to configure using console
/sbin/e-smith/console
To get better information from Server Manager 2 (this replaces the barfing dinosaur):
mkdir -p /etc/e-smith/templates-custom/usr/share/smanager/conf/srvmngr.conf/
cat <<EOF > /etc/e-smith/templates-custom/usr/share/smanager/conf/srvmngr.conf/30Other
modules_dir => 'lib/SrvMngr/Controller',
webapp => 'smanager',
mode => 'development',
debug => 1,
\}
EOF
expand-template /usr/share/smanager/conf/srvmngr.conf
signal-event smanager-refresh
then to be sure to get sshd back
/sbin/e-smith/db configuration setprop sshd status enabled PermitRootLogin yes access public # add PasswordAuthentication yes to enable password login /sbin/e-smith/expand-template /etc/ssh/ssh_config /sbin/e-smith/expand-template /etc/ssh/sshd_config /usr/bin/systemctl restart sshd.service /sbin/e-smith/signal-event remoteaccess-update
then you can
signal-event post-upgrade; signal-event reboot;
or maybe
signal-event bootstrap-console-save; signal-event-reboot
## end of the part better on tty than on sshd
you can also tidy a little
dnf remove NetworkManager* --noautoremove
you might need avoid using sme* repo except for koji builsdsystem one as long as they are not populated to do so:
mkdir -p /etc/e-smith/templates-custom/etc/dnf/dnf.conf/
echo "#rem custom"> /etc/e-smith/templates-custom/etc/dnf/dnf.conf/20main_reposdir
expand-template /etc/dnf/dnf.conf
also you might want to plan ahead and put the koji repo for when you will have deleted the custom template.
vim /etc/yum.smerepos.d/koji.repo
and paste:
[koji-sme11-os] enabled=1 name=sme11-os baseurl=http://koji.koozali.org/kojifiles/repos/dist-sme11-build/latest/x86_64/ gpgcheck=0 enablegroups=1
from there if you are lucky it worked and you can try to test , report as bug or even create a patch
Notes
we will have horde 6 in remi Horde 6 requires PHP 8.1 or PHP 8.2 versions. Support for PHP 8.3 is in development. https://wiki.horde.org/Doc/Dev/H6/Installation/PHP?referrer=Doc%2FDev%2FH6%2FInstallation
Horde 6 has been tested with MariaDB 10.8 and MariaDB 10.9 - any MariaDB of the 10.x series should work.
* ensure mariadb uses "innodb" as its default engine
* ensure the PHP server can reach the database hostname and port
* use utf8mb4 as default charset.
* create a database schema. This documentation assumes the db name is "horde"
https://wiki.horde.org/Doc/Dev/H6/Installation?version=10
References
- https://dnf.readthedocs.io/en/latest/modularity.htm
- https://docs.fedoraproject.org/en-US/modularity/using-modules/
- https://dnf.readthedocs.io/en/latest/cli_vs_yum.html
- https://man7.org/linux/man-pages/man5/dnf.conf.5.html
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/considerations_in_adopting_rhel_8/software-management_considerations-in-adopting-rhel-8
- https://fedoraproject.org/wiki/Features/YumMetalinks
- https://www.tecmint.com/reset-forgotten-root-password-in-rocky-linux-almalinux/
