Nethserver on Raspberry Pi

alefattorini · March 17, 2016, 3:11pm

Wow! You’re making @nrauso so happy!

mark_nl · March 17, 2016, 3:46pm

Mabey i’m missing some eth-tools -utils to get the by NS used ifup ifdown working;
Or just wait, IMO IFup IF down does not suite a modern distro (to put it polite).

Oh No
Nethserver packages are arch independent (noarch) containing basically 2/3 sections:

web-ui snippets (html, ccs, php, … and ohter web-stuf)
e-smit configuration layer: templates and scripts for configuration
and creation/population the configuration databases (perl, bash, …)
dependencies: actual packages used (ie samba or dovecot) and some
extra tools/libraries.

I was just curious if the e-smit configuration layer would work without huge adoptions. And it does !
On redsleeve i had to gather/(re)build just a few packages and do some dirty yum-repo configuration.
[root@nethpi ~]# ls /home/repo/7/local/arm/Packages/
lsm-0.195-1.el7.armv5tel.rpm
perl-Authen-PAM-0.16-21.el7.armv5tel.rpm
perl-Crypt-Cracklib-1.7-5.fc18.armv5tel.rpm
perl-Mail-RFC822-Address-0.3-1.el7.noarch.rpm
perl-Net-IPv4Addr-0.10-19.el7.noarch.rpm
perl-Text-Template-1.45-12.el7.noarch.rpm
python-simplejson-3.5.3-2.el7.armv5tel.rpm
shorewall-4.6.5.3-1.el7.noarch.rpm
shorewall-core-4.6.5.3-1.el7.noarch.rpm

the noarch and lsm (source files) come from NS repo’s,
python-simplejson, perl-Authen-PAM are built from fedora 22 source files
http://fr2.rpmfind.net/linux/fedora/linux/releases/22/Everything/source/SRPMS/

perl-Crypt-Cracklib is a hard nut to crack, and did not succeed (re)buidling…
found an arch- and perl-version compatible one in a obscure place on the internet:
http://armpkgs.fedoraproject.org/packages/perl-Crypt-Cracklib/1.7/5.fc18/armv5tel/

Duc does not (out of the box) compile for arm
CentOS is missing mdadm no problem compiling that, it dependency libreport is another story…
(although you could argue if softraid is really needed on a pi…)

Mabey some on more knowledgeable does succeed , i’m fairly new to the rhel family and don’t know how to set up a toolchain/crosscompiler for userspace packages.

Jim · March 17, 2016, 4:25pm

It’s really intersting,
It would be fantastic if you write a documentation on your experimentations

mark_nl · March 17, 2016, 5:22pm

It’s way too early for documenting this proof of concept, everything to reproduce is up there.
I admit, on point’s attentional vague: it does not lead to a proper installation.
(The notes are quite chaotic too Started organized going through just rattled on keyboard and forgot to take notes… )

Nevertheless it shows it is worth putting effort/time in this !

IMO we should try to resolve the basic (see list above) dependencies on CentOS 7.2 and go from there.

first severe hurdles:

perl-Crypt-Cracklib
mdadm & libreport

filippo_carletti · March 17, 2016, 5:29pm

We could try to avoid using perl-Crypt-Cracklib even on x86_64.
Software RAID is probably not useful on RPi.
I’ll try to work on duc in the coming days.

davidep · March 17, 2016, 7:39pm

We can ignore it, it is not used anymore! We can remove that dependency on the next ns7 release

mark_nl · March 17, 2016, 9:19pm

Apologies for hacking your post, got too exited it could work.
yes we tried!

jackyes · March 18, 2016, 7:16am

just a info:
The Rpi3 image has ben updated yesterday
http://mirror.centos.org/altarch/7/isos/armhfp/

alefattorini · March 18, 2016, 5:39pm

I love such kind of hacking

Jim · March 18, 2016, 7:59pm

After your end this hack… Can you look to install Ubuntu or Debian on my ipad?

Edit: on IOS …

mark_nl · March 19, 2016, 9:21pm

Got a NS7 minimal setup running on Centos. Yeh coming close!!
Cheating on mdadm (Soft RAID); installed that with rpm –nodept, that’s not gona work

Installed NS from local repo’s with a modified nethserver-install script:

diff nethserver-install /usr/sbin/nethserver-install
99c103
< logexec "yum -y --disablerepo=* --enablerepo=extras,base,updates install epel-release deltarpm"
---
> logexec "yum -y --disablerepo=* --enablerepo=extras,base,updates install deltarpm"
101c105,106
< logexec "yum --disablerepo=* --enablerepo=nethserver-base,nethserver-updates,base,updates,epel,extras install @nethserver-iso $modules -y"
---
> NSarm="nethserver-base nethserver-firewall-base nethserver-lang-en nethserver-httpd-admin nethserver-dnsmasq nethserver-hosts nethserver-lsm nethserver-ntp nethserver-php"
> logexec "yum -y --disablerepo=* --enablerepo=local-base,local-ns-epel,base,updates,extras install $NSarm"

It seem to end in : Unit_nethserver-system-init.service_has_failed, missing systemd unit nethserver-config-network.service…
Manualy enabeling and stating the and it works!!
journalctl:

    Mar 19 16:50:12 nethpi.havak.lan polkitd[279]: Unregistered Authentication Agent for unix-process:7409:359868 (system bus name :1.19, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8) (disconnected from bus)
    Mar 19 16:53:00 nethpi.havak.lan polkitd[279]: Registered Authentication Agent for unix-process:7469:376644 (system bus name :1.20 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8)
    Mar 19 16:53:00 nethpi.havak.lan polkitd[279]: Unregistered Authentication Agent for unix-process:7469:376644 (system bus name :1.20, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8) (disconnected from bus)
...
    Mar 19 17:05:00 nethpi.havak.lan esmith::event[8868]: Event: firewall-adjust SUCCESS
    Mar 19 17:05:00 nethpi.havak.lan esmith::event[9296]: Event: runlevel-adjust
    Mar 19 17:05:01 nethpi.havak.lan systemd[1]: Reloading.
....
    Mar 19 17:05:06 nethpi.havak.lan kernel: IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
    Mar 19 17:05:06 nethpi.havak.lan NetworkManager[259]: <warn>  (pid 555) unhandled DHCP event for interface eth0
    Mar 19 17:05:06 nethpi.havak.lan esmith::event[9405]: expanding /etc/resolv.conf
    Mar 19 17:05:06 nethpi.havak.lan esmith::event[9405]: expanding /etc/dnsmasq.conf
    Mar 19 17:05:07 nethpi.havak.lan esmith::event[9405]: expanding /etc/hosts
    Mar 19 17:05:07 nethpi.havak.lan esmith::event[9405]: expanding /etc/modprobe.d/bonding.conf
    Mar 19 17:05:07 nethpi.havak.lan esmith::event[9405]: expanding /etc/sysconfig/network
    Mar 19 17:05:07 nethpi.havak.lan esmith::event[9405]: expanding /etc/ppp/pap-secrets
    Mar 19 17:05:07 nethpi.havak.lan esmith::event[9405]: expanding /etc/ppp/chap-secrets
    Mar 19 17:05:07 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [1.240414]
    Mar 19 17:05:07 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S20interface-rename SUCCESS [0.53959]
    Mar 19 17:05:07 nethpi.havak.lan ntpd[7850]: Deleting interface #5 eth0, fe80::ba27:ebff:fed9:d9db#123, interface stats: received=0, sent=0, dropped=0, active_time=52 secs
    Mar 19 17:05:07 nethpi.havak.lan ntpd[7850]: Deleting interface #3 eth0, 10.0.0.140#123, interface stats: received=24, sent=24, dropped=0, active_time=52 secs
    Mar 19 17:05:07 nethpi.havak.lan ntpd[7850]: 91.192.36.161 interface 10.0.0.140 -> (none)
    Mar 19 17:05:07 nethpi.havak.lan ntpd[7850]: 87.195.109.106 interface 10.0.0.140 -> (none)
    Mar 19 17:05:07 nethpi.havak.lan ntpd[7850]: 83.162.149.224 interface 10.0.0.140 -> (none)
    Mar 19 17:05:07 nethpi.havak.lan ntpd[7850]: 141.138.142.81 interface 10.0.0.140 -> (none)
    Mar 19 17:05:07 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S25interface-config-reset SUCCESS [0.097745]
    Mar 19 17:05:08 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S30interface-config-write SUCCESS [0.546775]
    Mar 19 17:05:08 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S40interface-config-write-pppoe SUCCESS [0.535977]
    Mar 19 17:05:09 nethpi.havak.lan systemd[1]: Starting LSB: Bring up/down networking...
    -- Subject: Unit network.service has begun start-up
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit network.service has begun starting up.
    Mar 19 17:05:09 nethpi.havak.lan NetworkManager[259]: <info>  ifcfg-rh: new connection /etc/sysconfig/network-scripts/ifcfg-eth0 (5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03,"System eth0")
    Mar 19 17:05:09 nethpi.havak.lan NetworkManager[259]: <warn>  ifcfg-rh: Ignoring connection /etc/sysconfig/network-scripts/ifcfg-eth0 (5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03,"System eth0") / device 'eth0' due to NM_CONTROLLED=no.
    Mar 19 17:05:09 nethpi.havak.lan NetworkManager[259]: <info>  (eth0): device state change: disconnected -> unmanaged (reason 'unmanaged') [30 10 3]
    Mar 19 17:05:09 nethpi.havak.lan NetworkManager[259]: <info>  ifcfg-rh: remove /etc/sysconfig/network-scripts/ifcfg-eth0 (0cb1274f-af94-4a51-a5bc-7608a1e37d63,"eth0")
    Mar 19 17:05:10 nethpi.havak.lan network[9461]: Bringing up loopback interface:  Could not load file '/etc/sysconfig/network-scripts/ifcfg-lo'
    Mar 19 17:05:10 nethpi.havak.lan network[9461]: Could not load file '/etc/sysconfig/network-scripts/ifcfg-lo'
    Mar 19 17:05:10 nethpi.havak.lan NetworkManager[259]: <info>  (eth0): link disconnected (calling deferred action)
    Mar 19 17:05:10 nethpi.havak.lan network[9461]: Could not load file '/etc/sysconfig/network-scripts/ifcfg-lo'
    Mar 19 17:05:11 nethpi.havak.lan network[9461]: Could not load file '/etc/sysconfig/network-scripts/ifcfg-lo'
    Mar 19 17:05:11 nethpi.havak.lan network[9461]: [  OK  ]
    Mar 19 17:05:11 nethpi.havak.lan kernel: smsc95xx 1-1.1:1.0 eth0: hardware isn't capable of remote wakeup
    Mar 19 17:05:11 nethpi.havak.lan NetworkManager[259]: <info>  (eth0): link connected
    Mar 19 17:05:13 nethpi.havak.lan kernel: smsc95xx 1-1.1:1.0 eth0: link up, 100Mbps, full-duplex, lpa 0xCDE1
    Mar 19 17:05:14 nethpi.havak.lan ntpd[7850]: Listen normally on 6 eth0 10.0.0.140 UDP 123
    Mar 19 17:05:14 nethpi.havak.lan ntpd[7850]: Listen normally on 7 eth0 fe80::ba27:ebff:fed9:d9db UDP 123
    Mar 19 17:05:14 nethpi.havak.lan ntpd[7850]: new interface(s) found: waking up resolver
    Mar 19 17:05:15 nethpi.havak.lan ntpd[7850]: 0.0.0.0 0618 08 no_sys_peer
    Mar 19 17:05:17 nethpi.havak.lan network[9461]: Bringing up interface eth0:  [  OK  ]
    Mar 19 17:05:18 nethpi.havak.lan systemd[1]: Started LSB: Bring up/down networking.
    -- Subject: Unit network.service has finished start-up
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit network.service has finished starting up.
    --
    -- The start-up result is done.
    Mar 19 17:05:18 nethpi.havak.lan esmith::event[9405]: Starting network (via systemctl):  [  OK  ]
    Mar 19 17:05:18 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S70network-start SUCCESS [9.149043]
    Mar 19 17:05:18 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S75interface-config-hostname SUCCESS [0.847882]
    Mar 19 17:05:19 nethpi.havak.lan esmith::event[9680]: Event: static-routes-save
    Mar 19 17:05:20 nethpi.havak.lan esmith::event[9680]: Action: /etc/e-smith/events/static-routes-save/S15network-route-down SUCCESS [0.536932]
    Mar 19 17:05:20 nethpi.havak.lan esmith::event[9680]: Action: /etc/e-smith/events/static-routes-save/S25interface-config-write SUCCESS [0.821938]
    Mar 19 17:05:21 nethpi.havak.lan esmith::event[9680]: Action: /etc/e-smith/events/static-routes-save/S30interface-config-write-pppoe SUCCESS [0.545303]
    Mar 19 17:05:21 nethpi.havak.lan esmith::event[9680]: Action: /etc/e-smith/events/static-routes-save/S35network-route-up SUCCESS [0.569951]
    Mar 19 17:05:21 nethpi.havak.lan esmith::event[9680]: Event: static-routes-save SUCCESS
    Mar 19 17:05:21 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S80static-routes-save SUCCESS [3.027681]
    Mar 19 17:05:22 nethpi.havak.lan systemd[1]: Reloading.
    Mar 19 17:05:22 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
    Mar 19 17:05:22 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:22 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:22 nethpi.havak.lan esmith::event[9405]: [INFO] service dnsmasq restart
    Mar 19 17:05:22 nethpi.havak.lan dnsmasq[7811]: exiting on receipt of SIGTERM
    Mar 19 17:05:22 nethpi.havak.lan systemd[1]: Stopping DNS caching server....
    -- Subject: Unit dnsmasq.service has begun shutting down
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit dnsmasq.service has begun shutting down.
    Mar 19 17:05:22 nethpi.havak.lan systemd[1]: Started DNS caching server..
    -- Subject: Unit dnsmasq.service has finished start-up
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit dnsmasq.service has finished starting up.
    --
    -- The start-up result is done.
    Mar 19 17:05:22 nethpi.havak.lan systemd[1]: Starting DNS caching server....
    -- Subject: Unit dnsmasq.service has begun start-up
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit dnsmasq.service has begun starting up.
    Mar 19 17:05:23 nethpi.havak.lan esmith::event[9405]: [INFO] dnsmasq restart
    Mar 19 17:05:23 nethpi.havak.lan dnsmasq[9704]: started, version 2.66 cachesize 4000
    Mar 19 17:05:23 nethpi.havak.lan dnsmasq[9704]: compile time options: IPv6 GNU-getopt DBus no-i18n IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset auth
    Mar 19 17:05:23 nethpi.havak.lan dnsmasq-tftp[9704]: TFTP root is /var/lib/tftpboot
    Mar 19 17:05:23 nethpi.havak.lan dnsmasq[9704]: using nameserver 10.0.1.200#53
    Mar 19 17:05:23 nethpi.havak.lan dnsmasq[9704]: using nameserver 10.0.0.100#53
    Mar 19 17:05:23 nethpi.havak.lan dnsmasq[9704]: read /etc/hosts - 2 addresses
    Mar 19 17:05:23 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [1.031198]
    Mar 19 17:05:23 nethpi.havak.lan esmith::event[9705]: Event: nethserver-firewall-base-save interface-update
    Mar 19 17:05:24 nethpi.havak.lan esmith::event[9705]: Action: /etc/e-smith/events/nethserver-firewall-base-save/S02providers-cleanup SUCCESS [0.667307]
    Mar 19 17:05:24 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/rules
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/stoppedrules
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/zones
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/tunnels
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/providers
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/masq
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/shorewall.conf
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/rtrules
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/tcpri
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/policy
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/nat
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/tcinterfaces
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/tcrules
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/maclist
    Mar 19 17:05:25 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/actions
    Mar 19 17:05:26 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/hosts
    Mar 19 17:05:26 nethpi.havak.lan esmith::event[9705]: expanding /etc/shorewall/interfaces
    Mar 19 17:05:26 nethpi.havak.lan esmith::event[9705]: expanding /etc/lsm/lsm.conf
    Mar 19 17:05:26 nethpi.havak.lan esmith::event[9705]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [1.869599]
    Mar 19 17:05:26 nethpi.havak.lan systemd[1]: Reloading.
    Mar 19 17:05:26 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
    Mar 19 17:05:27 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:27 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:33 nethpi.havak.lan logger[10110]: Shorewall restarted
    Mar 19 17:05:33 nethpi.havak.lan esmith::event[9705]: [NOTICE] Shorewall restart
    Mar 19 17:05:33 nethpi.havak.lan esmith::event[9705]: Action: /etc/e-smith/events/nethserver-firewall-base-save/S89nethserver-shorewall-restart SUCCESS [7.794879]
    Mar 19 17:05:34 nethpi.havak.lan systemd[1]: Reloading.
    Mar 19 17:05:34 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
    Mar 19 17:05:34 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:34 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:34 nethpi.havak.lan esmith::event[9705]: [INFO] lsm is disabled: skipped
    Mar 19 17:05:34 nethpi.havak.lan esmith::event[9705]: [INFO]
    Mar 19 17:05:34 nethpi.havak.lan esmith::event[9705]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.939555]
    Mar 19 17:05:34 nethpi.havak.lan esmith::event[9705]: Event: nethserver-firewall-base-save SUCCESS
    Mar 19 17:05:34 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S90firewall-adjust SUCCESS [11.928716]
    Mar 19 17:05:35 nethpi.havak.lan esmith::event[10129]: Event: trusted-networks-modify
    Mar 19 17:05:35 nethpi.havak.lan esmith::event[10129]: Action: /etc/e-smith/events/trusted-networks-modify/S10legacy-call-network-create SUCCESS [0.013976]
    Mar 19 17:05:36 nethpi.havak.lan esmith::event[10131]: Event: nethserver-firewall-base-save trusted-networks-modify
    Mar 19 17:05:36 nethpi.havak.lan esmith::event[10131]: Action: /etc/e-smith/events/nethserver-firewall-base-save/S02providers-cleanup SUCCESS [0.668346]
    Mar 19 17:05:37 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/rules
    Mar 19 17:05:37 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/stoppedrules
    Mar 19 17:05:37 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/zones
    Mar 19 17:05:37 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/tunnels
    Mar 19 17:05:37 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/providers
    Mar 19 17:05:37 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/masq
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/shorewall.conf
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/rtrules
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/tcpri
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/policy
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/nat
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/tcinterfaces
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/tcrules
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/maclist
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/actions
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/hosts
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/shorewall/interfaces
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: expanding /etc/lsm/lsm.conf
    Mar 19 17:05:38 nethpi.havak.lan esmith::event[10131]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [1.831982]
    Mar 19 17:05:39 nethpi.havak.lan systemd[1]: Reloading.
    Mar 19 17:05:39 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
    Mar 19 17:05:39 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:39 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:46 nethpi.havak.lan logger[10537]: Shorewall restarted
    Mar 19 17:05:46 nethpi.havak.lan esmith::event[10131]: [NOTICE] Shorewall restart
    Mar 19 17:05:46 nethpi.havak.lan esmith::event[10131]: Action: /etc/e-smith/events/nethserver-firewall-base-save/S89nethserver-shorewall-restart SUCCESS [7.713857]
    Mar 19 17:05:46 nethpi.havak.lan systemd[1]: Reloading.
    Mar 19 17:05:47 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
    Mar 19 17:05:47 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:47 nethpi.havak.lan systemd[1]: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway.
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[10131]: [INFO] lsm is disabled: skipped
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[10131]: [INFO]
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[10131]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.94275]
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[10131]: Event: nethserver-firewall-base-save SUCCESS
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[10129]: Action: /etc/e-smith/events/trusted-networks-modify/S94firewall-adjust SUCCESS [11.820246]
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[10129]: Event: trusted-networks-modify SUCCESS
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[9405]: Action: /etc/e-smith/events/interface-update/S95trusted-networks-modify SUCCESS [12.373761]
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[9405]: Event: interface-update SUCCESS
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[7702]: Action: /etc/e-smith/events/system-init/S95nethserver-base-interface-update SUCCESS [43.206686]
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[7702]: Action: /etc/e-smith/events/system-init/S98nethserver-system-init-clear SUCCESS [0.284423]
    Mar 19 17:05:47 nethpi.havak.lan esmith::event[7702]: Event: system-init FAILED
    Mar 19 17:05:47 nethpi.havak.lan systemd[1]: nethserver-system-init.service: main process exited, code=exited, status=1/FAILURE
    Mar 19 17:05:47 nethpi.havak.lan systemd[1]: Failed to start Initialize NethServer configuration.
    -- Subject: Unit nethserver-system-init.service has failed
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nethserver-system-init.service has failed.
    --
    -- The result is failed.
    Mar 19 17:05:47 nethpi.havak.lan systemd[1]: Unit nethserver-system-init.service entered failed state.
    Mar 19 17:05:47 nethpi.havak.lan systemd[1]: nethserver-system-init.service failed.
    Mar 19 17:05:47 nethpi.havak.lan polkitd[279]: Unregistered Authentication Agent for unix-process:7697:440156 (system bus name :1.23, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8) (disconnected from bus)
    Mar 19 17:07:05 nethpi.havak.lan polkitd[279]: Registered Authentication Agent for unix-process:10571:461137 (system bus name :1.34 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8)
    Mar 19 17:07:05 nethpi.havak.lan systemd[1]: Started Initialize NethServer configuration.
    -- Subject: Unit nethserver-system-init.service has finished start-up
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nethserver-system-init.service has finished starting up.
    --
    -- The start-up result is done.
    Mar 19 17:07:05 nethpi.havak.lan polkitd[279]: Unregistered Authentication Agent for unix-process:10571:461137 (system bus name :1.34, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.utf8) (disconnected from bus)

Missing Rebuild (beside mdam) Packages are:

lsm.armv7hl                       0.195-1.el7.centos          @local-ns-epel
perl-Authen-PAM.armv7hl           0.16-16.el7.centos          @local-ns-epel
perl-Crypt-Cracklib.armv7hl       1.7-5.el7.centos            @local-ns-epel
python-simplejson.armv7hl         3.3.3-1.el7.centos          @local-ns-epel

Msiing Not rebuild Packages are:

shorewall.noarch                  4.6.5.3-1.el7               @local-ns-epel
shorewall-core.noarch             4.6.5.3-1.el7               @local-ns-epel
perl-IO-Multiplex.noarch          1.13-6.el7                  @local-ns-epel
perl-Net-IPv4Addr.noarch          0.10-19.el7                 @local-ns-epel
perl-Net-Server.noarch            2.007-2.el7                 @local-ns-epel
perl-Text-Template.noarch         1.45-12.el7                 @local-ns-epel

I need help (leads) to debug this…

mark_nl · March 20, 2016, 10:49pm

Got it! Nethserver-init tries to enable the non-existing epel repo.

I wrecked my x86 development environment trying to setup a mock cross-complier chroot.
At the moment unable to make a new rpm nethserver-install for arm, but confident to get a nice result.
Where do we go from here?
Using this repo tree on the local network, but really no idea how to share this with you…

Give me your thoughts

alefattorini · March 21, 2016, 9:06am

That’s great! @nrauso do you have any hardware to test @mark_nl’s work?

giacomo · March 21, 2016, 1:44pm

Can you show us the mock configuration file?
Maybe we can create a new arch directory inside packages.nethserver.org where we can share all the RPMs.

Maybe you should try to disable NetworkManager.

Sadly I don’t have the hardware (no the time ) to try it.

mark_nl · March 21, 2016, 10:17pm

Just set up a new vm for building thing’s and am able to rebuild NS packages again; In the future I might ask for some leads on mock - cross compiling.

IMO development for arm should be 100% community driven; with a (lot of) support from the nethsever dev team’s knowledge.

That being said, support for a development repo infrastructure would be great.
I’m just an enthusiastic amateur , to kick this off help from the community is really needed;
sharing the results so far could be inspiring.

mark_nl · March 21, 2016, 10:22pm

And this looks promising:
http://armv7.dev.centos.org/repodir/epel-pass-1/

alefattorini · March 22, 2016, 4:36pm

I think that @ctek would be our man for this

Thanks @mark_nl for all the effort and time you have spent on NethServer, your commitment is admirable! An example for every new guy who land on community.

Ctek · March 22, 2016, 6:16pm

I’m in for this if somebody is willing to contribute, a DevRepo can be setup.
Any other members on this ?

What Distro / SW platform do you suggest ?
If anyone has set up something like this just let me know so we can bring it up.

mark_nl · March 22, 2016, 7:34pm

Great! And Thanx in advance!!
I’m building/testing on a RPI2 running on CentOS 7.1503;
it hanging in there on it fingernails (as expected…).

Have to iron out some issues with the initial installation;
did some naughty things to satisfy dependencies …

Apart from that that charming little PI keeps on amassing me.

Give me a couple of day’s and it should be possible to have tar ball with an initial repo.
Let’s hope we can get other members moved by this .

mark_nl · March 23, 2016, 12:14am

Just a teaser…