Scientific Linux Fermi 5.2      x86_64  April 1, 2009

Please send bug reports to [email protected],[email protected]

Items marked with a "*" have changed since SLF 5.2 .

Please read the Release Notes for Scientific Linux.  It is located at
SL.releasenote

Also read the Upstream Vendor release notes . They are located in
Upstream.vendor.releasenote

All of the info in the SL.releasenote is valid unless this document
states otherwise.  This document only contains info that is specific
to the Fermi site.  Any reference to SL.releasenote is done to emphasis
that it contains important information.


----------------------------------------------------------------------------

This is based on the rebuilding of RPMS out of SRPMS's that form Scientific
Linux.  Please read this entire document before installing.

Table of contents

       INSTALLATION INFO
       ADDED compared to Scientific Linux 5.3
       UPDATED compared to  Scientific Linux 5.3
       Installer modifications
       /contrib
       /docs
       /notsupported
       MISC Notes
       HARDWARE SPECIFIC ISSUES
       SOFTWARE ISSUES/BUGS
       SUPPORT INFO
       vendor ERRATA

Each has a "---" line above and below it.
_____________________________________________________________________________
INSTALLATION INFO
_____________________________________________________________________________
Installation Locations

Via NETWORK:

 nfs:
       linux.fnal.gov:/export/linux/slf53/x86_64/
 ftp:
       linux.fnal.gov  /linux/slf53/x86_64
 http:
       linux1.fnal.gov  /linux/slf53/x86_64

And our easy to remember location

       ftp://linux.fnal.gov/downloads/slf53/

Default is http,  ftp is very very slow.

network install with floppy

 There is no floppy install as the kernel is too big to fit on a floppy.

network install with cdrom

 There is a boot.iso which is small iso image which includes all the
 drivers.  After download you can use cdrecord to create a cdr with this
 image on it.

   ftp://linux.fnal.gov/download/slf53/network.install.x86_64/boot.iso

There is a DVD image

  Download and then burn the dvd iso image from

    ftp://linux.fnal.gov/download/slf53/dvd.install.x86_64/

There cd images

  Download and then burn the cd iso image from

    ftp://linux.fnal.gov/download/slf53/cd.install.x86_64/

Installing a Xen Paravirtualized Guest

When installing a Xen Paravirtualized Guest, the location is

 http://linux1.fnal.gov/linux/slf53/x86_64/sites/Fermi


-----------------------------------------------------------------------------
ADDED compared to Scientific Linux 53 x86_64
-----------------------------------------------------------------------------
*Fermi-release
*Fermi-release-notes

*       Fermi-release-5.3-1.x86_64.rpm
*       Fermi-release-notes-5.3-1.noarch.rpm

      Made change so that /etc/redhat-release, /etc/issue and /etc/issue.net
      show Scientific Linux Fermi instead of just Scientific  Linux.

Clam Anti Virus

       Clam Anti-Virus.  Obtained from the DAG repository and rebuilt from
       src.rpm.  http://www.clamav.net
*       perl packages were added so that clamtk would work

*       clamav-0.94.2-1.rf.x86_64.rpm
*       clamav-db-0.94.2-1.rf.x86_64.rpm
*       clamav-devel-0.94.2-1.rf.x86_64.rpm
*       clamav-milter-0.94.2-1.rf.x86_64.rpm
*       clamd-0.94.2-1.rf.x86_64.rpm
*       clamtk-3.09-1.rf.x86_64.rpm
*       perl-Config-Tiny-2.12-1.rf.noarch.rpm
*       perl-ExtUtils-Depends-0.301-1.rf.noarch.rpm
*       perl-ExtUtils-PkgConfig-1.11-1.rf.noarch.rpm
*       perl-File-Find-Rule-0.30-1.rf.noarch.rpm
*       perl-gettext-1.05-1.rf.x86_64.rpm
*       perl-Glib-1.200-1.rf.x86_64.rpm
*       perl-Gtk2-1.183-1.rf.x86_64.rpm
*       perl-Number-Compare-0.01-1.2.rf.noarch.rpm
*       perl-Text-Glob-0.08-1.rf.noarch.rpm


flpr

       Installed by default.  This does NOT require ups/upd.
       The flpr binary will reside in /usr/local/bin/

               flpr-2.4-4f.9x.i386.rpm

Kerberos

       For SLF 5, we no longer need Fermi's kerberos.  We are only including
       packages for configuring krb5.conf, as well as some utilities.

       krb5-fermi-config-2.8-1.noarch.rpm
       krb5-getcert-1.9-5.slf5.noarch.rpm

OpenAFS

       See SL.releasenote

*       Here is the procedure for installing openafs, using yum
*         yum install openafs-client kernel-module-openafs-`uname -r`
*         yum install openafs-krb5 openafs-thiscell
*
*       openafs-thiscell-FNAL now changes CellAlias so that
*       /afs/fnal is really /afs/fnal.gov
*
*       openafs-thiscell-FNAL-6.noarch.rpm

redhat-logos-1.1.25-1.LTS.6.noarch.rpm

       This version of redhat-logo's has all of the generic changes
       that were made with Scientific Linux as well as changes to make
       it look like SLF.

       redhat-logos-4.9.16-1.SLF.4.noarch.rpm

SLIP
       Scientific Linux Inventory Project client

         ocsinventory-client-0.9.9-9.noarch.rpm

upsupdbootstrap

       Not installed by default.
       Links from /usr/local/bin are NOT made anymore.

               upsupdbootstrap-5.0-0.i386.rpm
               upsupdbootstrap-fnal-5.0-0.i386.rpm
                       conflicts with upsupdbootstrap-local
                       Installs ups/upd to /fnal/ups
               upsupdbootstrap-local-5.0-0.i386.rpm
                       conflicts with upsupdbootstrap-fnal
                       Installs ups/upd to /local/ups

yum-conf

       Modified to give Fermi's rpm's a priority, as well as point to
       Fermi's linux distribution servers instead of scientific linux's.

*       yum-conf-53-1.SLF.noarch.rpm

yum-conf-5x

       Will keep you at 5x which is the current stable 5x release.  So when
       we release the next 5 release yum will automatically yum install it
       except for the kernel.

       yum-conf-5x-2-4.SLF.noarch.rpm

               yum install yum-conf-5x

yum-autoupdate-1-1.SLF.noarch.rpm

       yum-autoupdate has the nightly yum cron job in it.
       The nightly cron job has been modified to check the add-ons directory.

zz_dhcp_resolv-3.0.5-1.noarch.rpm

       This rpm fixes that so that when your network starts, as it checks
       your resolv.conf, if you have dhcp.fnal.gov, but not fnal.gov it will
       put it in, so that you will have "search fnal.gov dhcp.fnal.gov" in
       your /etc/resolv.conf file.

zz_lang_collate-1.0-4.noarch.rpm

       Changes LANG so that sorting is done the same as 6.1 and
       earlier.  (ABCabc instead of AaBbCc).
       Can speed up programs that sort.

zz_local_dns_cache-1.0-3.noarch.rpm

       This rpm will change your machine to use a local dns cache before
       looking for the standard dns servers

zz_logwatch_df-1.1-2.noarch.rpm

       By default logwatch does a df -h when looking at disk usage.
       This can be unwanted if you have alot of NFS mounted disks.
       This rpm changes that command to be df -lP -h, which looks at
       local disks only, and the output is in the POSIX output format.

zz_ntp_configure-4.2.0-6.noarch.rpm

       Configure ntp for Fermi site network.
       Startup script now pokes hole in the firewall for itself
       One can manually change the script by editing the file
       /etc/sysconfig/ntpd.fermi

zz_pine_user_domain-1.0-2.noarch.rpm

       By default when a user sends mail from pine their email address
       is [email protected].  This rpm changes it so that the
       default is [email protected] by modifying the /etc/pine.conf config file.

zz_sendmail_fermi_gateway-2.0-1.noarch.rpm

       This rpm is designed to send outbound sendmail e-mail through
       the fermilab e-mail gateway(smtp.fnal.gov).


zz_tcp_wrappers_change-3.0-3.noarch.rpm

       Disable all offsite access to common network services.  Also
       puts in the "DOE required login banners".  If it determines that
       you have already modified /etc/hosts.allow or host.deny it leaves
       them alone.
       Change to add perl to requires as %post uses perl

zz_tex_tweaks-1.0-1.noarch.rpm

       Changes the default paper size to 8.5 x 11 vs A3

---------------------------------------------------------------------------
UPDATED compared to Scientific Linux 50 x86_64
----------------------------------------------------------------------------
OpenSSH

       This is the openssh from S.L. 5.x with some patches and modifications.

       The client does kerberos with both fermi's old openssh(old gssapi),
       as well as generic new openssh's(new gssapi)

       The server only does the kerberos with the newer versions of openssh

       It does 'kerberos only' by default

       It does not do cryptocard.

       openssh-server is not installed by default.

               openssh-4.3p2-41.slf5.x86_64.rpm
               openssh-askpass-4.3p2-41.slf5.x86_64.rpm
               openssh-clients-4.3p2-41.slf5.x86_64.rpm
               openssh-server-4.3p2-41.slf5.x86_64.rpm

pam_krb5

       This is a modified version of the pam_krb5 that comes with SL5.
       This pam module has the ability to do cryptocard authentication.

*       pam_krb5-2.2.11-6.slf5.i386.rpm
*       pam_krb5-2.2.11-6.slf5.x86_64.rpm

----------------------------------------------------------------------------
Installer modifications
---------------------------------------------------------------------------
Anaconda (installer)


    Changes to "defaults" from vendor installer.

       Firewall is on by default.
       The zz_ntp_configure-4.2.0-6 rpm pokes a hole for inbound ntp.

       US/Central is default timezone.  vendor default was New York.

       Kerberos is on by default with a realm of FNAL.GOV .  vendor default
       was off.

       Default install is via http.  If one wishes to use nfs then type
       nfs at the isolinux prompt.  If one wshes to use ftp then type ftp
       at the isolinux prompt.

       Support for "sites" was added.

       Support for workgroups was added

       Workgroup maintainers can now check their workgroups in an out of cvs

       Fixed the kernel-module bug that was in SLF 5.0

---------------------------------------------------------------------------
/contrib/
---------------------------------------------------------------------------
The packages in this section have been contributed by various people.  They
are presented AS IS and there is no guarantee of them working.  These packages
are NOT supported by us.  They will only get security updates if the
contributor provides them.  If you have questions about them then ask the
contributor.

To use with yum:
For one time only (prefered method)
 yum --enablerepo=Fermi-contrib install <package>

To enable for all yum updates/install (including autoyum)

 edit the file /etc/yum.repos.d/fermi-contrib.repo
 and change the line
       enabled=0
 to
       enabled=1

See README's in the RPMS/ directorys for specific package info.

/sites/Fermi/contrib/RPMS/

---------------------------------------------------------------------------
KNOWN LIMITATIONS/BUGS
---------------------------------------------------------------------------
The estimated time to install is not even close.

After you have picked a workgroup on the workgroup selection page and moved
to the next , you cannot go back to that page.  The installer will die.

---------------------------------------------------------------------------
MISC NOTES
---------------------------------------------------------------------------
If you select "linux text" or you might want to type
  "linux text noipv6"
  because the install trys to do ipv6 and since there is no support
  at FNAL for ipv6 it takes a long time to timeout

kickstart users might want to add the "noipv6" option to their ks.cfg file
---------------------------------------------------------------------------
SUPPORT INFO
---------------------------------------------------------------------------
Fermi site users should start with the "Fermi" specific support areas and
use the Scientific Linux next.

Scientific Linux Fermi web pages

       https://fermilinux.fnal.gov/

Fermi Linux Community support mailing list

 [email protected]

       Which is archived at

               http://listserv.fnal.gov/archives/linux-users.html

Scientific Linux web page

       http://www.scientificlinux.org
----------------------------------------------------------------------------
SECURITY ERRATA included which was released after SL5.3
----------------------------------------------------------------------------