August 2017 - Dev - Clearlinux.Org

by Sven Hartrumpf

Hi all. Does Clear Linux support running binaries for the x32 ABI? If I look at the following line # CONFIG_X86_X32 is not set in https://github.com/clearlinux-pkgs/linux-lts/blob/master/config , it seems to be disabled. For many applications, x32 clearly outperforms i386 and x86-64, e.g. (for functional programming): https://lists.gnu.org/archive/html/chicken-users/2015-09/msg00000.html https://sympa.inria.fr/sympa/arc/bigloo/2016-12/msg00015.html In the long run, also compiling x32 binaries could be an important performance option for Clear Linux. Ciao Sven

2 years, 3 months

3
8
0 / 0

Documentation restructure

by Hutchinson, Ianeta

All, Today, a documentation restructure went live on Clearlinux.org (https://clearlinux.org/documentation/clear-linux/clear-linux.html). This change improves navigation throughout our docs and make contributing to CL docs easier. Content is now categorized into five sections: Get Started, Concepts, Guides, Tutorials, and Reference. Descriptions on the sections are as follows: Get Started: Information about installing Clear Linux. Concepts: Detailed technical information about features. Guides: Step-by-step instructions to complete common tasks. Tutorials: Step-by-step instructions to complete the installation and configuration of tools needed for a specific use case. Reference: Information providing additional context or details. With this restructure comes URL changes to many existing documents. To ensure continued access, redirects have been applied to all affected URLs and will remain until further notice. Cheers, Ianeta

3 years, 7 months

2
2
0 / 0

Use Clear Container in multi-tenant environment

by Jovi Zhangwei

Just one question about isolation of Clear Container. As we known, Clear Container use vm to provides underlying process isolation, it indeed makes container be more secure, but I'm thinking if this is enough for multi-tenant env, for example, image management, if client A pulls a image, then client B may see the image, actually this is not allowed in multi-tenant environment. I also have some concerns about the isolation of network and storage. So maybe what I'm looking for is an end to end isolation solution to use clear container in multi-tenant environment, includes the isolation of network, storage, image and process. :) Great thanks.

3 years, 7 months

5
8
0 / 0

[PATCH postgresql] Specify shell for postgres user

by William Douglas

Because the postgres user has a default shell of /usr/bin/nologin, the install ExecStart command will fail. Simply pass a shell of /bin/bash to allow execution. --- postgresql-install.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/postgresql-install.service b/postgresql-install.service index 7ac262c..e6b2150 100644 --- a/postgresql-install.service +++ b/postgresql-install.service @@ -13,4 +13,4 @@ ExecStartPre=/usr/bin/install -d -m 0700 -opostgres -gpostgres /var/lib/pgsql/da # running is suboptimal, we default to rejecting all connections until the # user explicitly sets this up # -ExecStart=/usr/bin/su postgres -c "/usr/bin/initdb -D /var/lib/pgsql/data --auth=reject" +ExecStart=/usr/bin/su postgres -s /bin/bash -c "/usr/bin/initdb -D /var/lib/pgsql/data --auth=reject" -- 2.14.1

3 years, 7 months

2
1
0 / 0

[PATCH clr-bundles] Move smartmonutils to storage-utils bundle

by William Douglas

--- bundles/os-clr-on-clr | 1 - bundles/storage-utils | 1 + 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/bundles/os-clr-on-clr b/bundles/os-clr-on-clr index b40ab29..12a1090 100644 --- a/bundles/os-clr-on-clr +++ b/bundles/os-clr-on-clr @@ -68,7 +68,6 @@ rpm rpm-common scons six -smartmontools urlgrabber xcb-proto-dev xf86driproto-dev diff --git a/bundles/storage-utils b/bundles/storage-utils index bb16ee4..b10c14c 100644 --- a/bundles/storage-utils +++ b/bundles/storage-utils @@ -25,6 +25,7 @@ samba-bin samba-config samba-data samba-doc +smartmontools sshfs usermode xfsprogs -- 2.14.1

3 years, 7 months

2
1
0 / 0

[PATCH clr-bundles] sysadmin-basic: Add lshw, stow tools.

by Simental Magana, Marcos

* lshw is a small tool to provide detailed information on the hardware configuration of the machine. * GNU Stow is a symlink farm manager useful for keeping track of system-wide and per-user installations of software built from source. Signed-off-by: Simental Magana, Marcos <marcos.simental.magana(a)intel.com> --- bundles/sysadmin-basic | 2 ++ 1 file changed, 2 insertions(+) diff --git a/bundles/sysadmin-basic b/bundles/sysadmin-basic index b43a021..2fea12f 100644 --- a/bundles/sysadmin-basic +++ b/bundles/sysadmin-basic @@ -42,6 +42,7 @@ glibc-bin libcap-bin linux-dev lsacpi +lshw lsof man-db man-pages @@ -67,6 +68,7 @@ shadow-doc shadow-locale sharutils socat +stow strace sudo systemd -- 2.14.1

3 years, 7 months

2
1
0 / 0

[PATCH clr-bundles] Add qt-basic bundle

by William Douglas

In order to enable building and running programs using QT add a bundle with the QT runtime and development files. This includes c-basic as the default way to build QT programs. --- bundles/qt-basic | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 bundles/qt-basic diff --git a/bundles/qt-basic b/bundles/qt-basic new file mode 100644 index 0000000..9cc56ad --- /dev/null +++ b/bundles/qt-basic @@ -0,0 +1,8 @@ +# [TITLE]: qt-basic +# [DESCRIPTION]: Build and run programs that use the QT runtime +# [STATUS]: WIP +# [CAPABILITIES]: +# [MAINTAINER]: William Douglas <william.douglas(a)intel.com> +include(c-basic) +qt-everywhere-opensource-src +qt-everywhere-opensource-src-dev -- 2.14.1

3 years, 7 months

4
3
0 / 0

[PATCH clr-bundles] desktop: add thermal_daemon package.

by Simental Magana, Marcos

Signed-off-by: Simental Magana, Marcos <marcos.simental.magana(a)intel.com> --- bundles/desktop | 3 +++ 1 file changed, 3 insertions(+) diff --git a/bundles/desktop b/bundles/desktop index b3b538c..148bbb3 100644 --- a/bundles/desktop +++ b/bundles/desktop @@ -109,6 +109,9 @@ gnome-tweak-tool gvfs nautilus +# nice to have when using desktop +thermal_daemon + # x.org bits mesa xf86-input-libinput -- 2.14.1

3 years, 7 months

2
2
0 / 0

Isolation of Clear Container in multi-tenant environment

by Jovi Zhangwei

Hi folks, Just one question about isolation of Clear Container. As we known, Clear Container use vm to provides underlay process isolation, it indeed makes container be more secure, but I'm thinking if this is enough for multi-tenant env, for example, image management, if client A pulls a image, then client B may see the image, actually this is not allowed in multi-tenant environment. I also have some concerns about the isolation of network and storage. So maybe what I'm looking for is an end to end isolation solution to use clear container in multi-tenant environment, includes the isolation of network, storage, image and process. :) Great thanks.

3 years, 8 months

1
0
0 / 0

[CLR-BUNDLES] kvm-host: replace clr-ovmf-bin by edk2 package

by Josue David Hernandez Gutierrez

Edk2 spec use the source code to build the ovmf binary, has secure boot options enabled and also include the current ovmf optimizations used in clr-ovmf-bin Signed-off-by: Josue David Hernandez Gutierrez <josue.d.hernandez.gutierrez(a)intel.com> --- Sorry but I pushed this changed before send the patch if somebody is not agree with this change please let know to revert it. regarding edk2 name this how ovmf repo is called on upstream that is the reason for use this name instead clr-ovmf. bundles/kvm-host | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bundles/kvm-host b/bundles/kvm-host index f3a88b4..d7c3215 100644 --- a/bundles/kvm-host +++ b/bundles/kvm-host @@ -12,5 +12,5 @@ nftables ebtables bndl-kvm-host dnsmasq -clr-ovmf-bin +edk2 dmidecode -- 2.4.11

3 years, 8 months

3
2
0 / 0

2021

2020

2019

2018

2017

2016

2015

Dev August 2017