PacketFence - BTS - PacketFence
View Issue Details
0001244PacketFencepackagingpublic2011-08-12 14:482011-10-24 20:24
maikel 
fgaudreault 
hightweakalways
closedfixed 
devel 
3.0.03.0.0 
0001244: CentOS / RHEL 6 support
So far i noticed PF doesnt really like php 5.3 yet. On a fresh centos 6 box, the repos can not be used to install the trunk or the 2.2.1 version

2.2.1 does work good on Gentoo and other distros. Noticed now with inline mode that can break the dependancies on other distros. It would be good in 3.0.0 to have an option to totally disable Iptables, though its a nice new feature.
No tags attached.
parent of 0001258closed obilodeau snort pidpath 
Issue History
2011-08-12 14:48maikelNew Issue
2011-08-12 14:54obilodeauNote Added: 0002131
2011-08-15 08:33fgaudreaultNote Added: 0002133
2011-08-15 08:34fgaudreaultPrioritynormal => low
2011-08-15 08:34fgaudreaultSeveritymajor => tweak
2011-08-15 10:34maikelNote Added: 0002134
2011-08-23 13:54obilodeauNote Added: 0002149
2011-08-23 14:34obilodeauNote Added: 0002150
2011-08-23 14:34obilodeauAssigned To => obilodeau
2011-08-23 14:34obilodeauPrioritylow => high
2011-08-23 14:34obilodeauStatusnew => assigned
2011-08-23 14:34obilodeauCategoryupgrade => packaging
2011-08-23 14:34obilodeauTarget Version => +1
2011-08-23 14:34obilodeauSummaryCentos6 support => CentOS / RHEL 6 support
2011-08-26 07:49maikelNote Added: 0002165
2011-08-26 08:09fgaudreaultNote Added: 0002166
2011-08-26 08:58maikelNote Added: 0002167
2011-08-26 09:09maikelNote Added: 0002168
2011-08-26 10:22maikelNote Added: 0002169
2011-08-26 11:48maikelNote Added: 0002170
2011-08-26 11:50fgaudreaultNote Added: 0002171
2011-09-12 16:03obilodeauNote Added: 0002198
2011-09-12 16:03obilodeauAssigned Toobilodeau => fgaudreault
2011-09-19 13:59obilodeauRelationship addedparent of 0001257
2011-09-19 13:59obilodeauRelationship addedparent of 0001258
2011-09-19 16:27obilodeauRelationship deletedparent of 0001257
2011-09-19 16:27obilodeauNote Added: 0002226
2011-09-20 08:27maikelNote Added: 0002227
2011-09-20 08:40maikelNote Edited: 0002227
2011-09-20 08:57fgaudreaultNote Added: 0002228
2011-09-21 15:03obilodeauStatusassigned => resolved
2011-09-21 15:03obilodeauFixed in Version => trunk
2011-09-21 15:03obilodeauResolutionopen => fixed
2011-09-21 22:07obilodeauFixed in Versiontrunk => 3.0.0
2011-09-21 22:15obilodeauNote Added: 0002247
2011-09-21 22:16obilodeauStatusresolved => closed
2011-10-24 20:24obilodeauTarget Version+1 => 3.0.0

Notes
(0002131)
obilodeau   
2011-08-12 14:54   
CentOS 6 support is in progress and, for now, we aim to have a CentOS 6 ready 3.0 release.

Can you be more specific about what breaks on other distro? I would argue that iptables is probably one of the pieces that we use that is guaranteed to be cross-distro. Have you pulled IPTables::ChainMgr from cpan?

Also, may I recommend filing a separate issue for the iptables distro specific problems?
(0002133)
fgaudreault   
2011-08-15 08:33   
See :
http://sourceforge.net/mailarchive/message.php?msg_id=27939321 [^]
(0002134)
maikel   
2011-08-15 10:34   
Will check that against Centos 6.0.
For centos 6 i tried the yum repo for 2.2.1

I will check the current Centos 6 repo for PF 3.0.0 Beta2
(0002149)
obilodeau   
2011-08-23 13:54   
Found some problems related to jpgraph today. I will be bumping jpgraph to 3.0.7 right now in trunk to fix them.
(0002150)
obilodeau   
2011-08-23 14:34   
jpgraph inclusion done
(0002165)
maikel   
2011-08-26 07:49   
currently on a clean centos6 install:
Error: Package: packetfence-3.0.0-0.20110812.el5.noarch (PacketFence-Devel)
           Requires: php-pear-Log
Error: Package: packetfence-freeradius2-3.0.0-0.20110812.el5.noarch (PacketFence-Devel)
           Requires: freeradius2
Error: Package: 1:snort-2.8.6-1.i386 (PacketFence-Devel)
           Requires: libpcap.so.0.9.4
Error: Package: perl-Net-Appliance-Session-1.36-1.el6.rf.noarch (rpmforge)
           Requires: perl(IO::Pty)
Error: Package: packetfence-3.0.0-0.20110812.el5.noarch (PacketFence-Devel)
           Requires: perl-Net-Write
Error: Package: packetfence-freeradius2-3.0.0-0.20110812.el5.noarch (PacketFence-Devel)
           Requires: freeradius2-perl

[PacketFence-Devel]
name=PacketFence Development Repository
baseurl=http://inverse.ca/downloads/PacketFence/RHEL6/devel/$basearch [^]
gpgcheck=0
enabled=0
(0002166)
fgaudreault   
2011-08-26 08:09   
Thanks for the report! In fact, some packages and spec modifications will need to be done to fully support CentOS 6, but that will keep track of it.

Couple comments :
- the freeradius under RHEL6 is packaged as freeradius, not freeradius2. So our configuration package will bail. We will need to fix the spec for RHEL6
- We will copy over the snort from snort.org to our repo, the newer version is now working fine on RHEL6
- perl-Net-Write should be available in the repo, but since the repository is still not created for yum to understand, install the package manually : http://www.packetfence.org/downloads/PacketFence/RHEL6/devel/i386/RPMS/perl-Net-Write-1.05-1.noarch.rpm [^]
- php-pear-Log is available in EPEL, so install the EPEL repo
- Now the net-appliance-session, I am not sure why you have an issue with perl IO. I checked in the spec file in rpmforge svn, and there is no required package.
(0002167)
maikel   
2011-08-26 08:58   
Indeed,

think in the admin manual epel needs to be added for RHEL6 and centos6

this line should become:
rpm --import http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt [^]

as -import doesnt work

So just the spec and snort are needed to successfully start to use RHEL6
(0002168)
maikel   
2011-08-26 09:09   
On centos6

Snort works with this rpm:
snort-2.9.1-1.F13.i386.rpm
daq-0.6.1-1.i386.rpm

All now is needed is the changed spec file, rest can be done in the admin manual i think
(0002169)
maikel   
2011-08-26 10:22   
Error: Package: packetfence-3.0.0-0.20110825.el5.noarch (/packetfence-3.0.0-0.20110825.el5.noarch)
           Requires: perl(IPTables::libiptc) = 0.14
 You could try using --skip-broken to work around the problem
(0002170)
maikel   
2011-08-26 11:48   
Also worthy to notice:
; This directive determines whether or not PHP will recognize code between
; <? and ?> tags as PHP source which should be processed as such. It's been
; recommended for several years that you not use the short tag "short cut" and
; instead to use the full <?php and ?> tag combination. With the wide spread use
; of XML and use of these tags by other languages, the server can become easily
; confused and end up parsing the wrong code in the wrong context. But because
; this short cut has been a feature for such a long time, it's currently still
; supported for backwards compatibility, but we recommend you don't use them.
; Default Value: On
; Development Value: Off
; Production Value: Off
; http://www.php.net/manual/en/ini.core.php#ini.short-open-tag [^]
short_open_tag = On

Per default on Centos this is set for Off
(0002171)
fgaudreault   
2011-08-26 11:50   
Yes the PHP issue was already stated here :
http://sourceforge.net/mailarchive/message.php?msg_id=27939321 [^]
(0002198)
obilodeau   
2011-09-12 16:03   
Please re-try CentOS6/RHEL6 support after tonight's build.

- We now routinely build for RHEL6
- Fixed several PHP issues (short tags, timezone)
- gettext dependency
- groupinstall on freeradius2 instead of freeradius. Same issue for packetfence-freeradius2 fixed too.
- IPTables::libiptc dependency correct for RHEL6

Documentation was *not* updated.
(0002226)
obilodeau   
2011-09-19 16:27   
0001257 no longer a blocker for RHEL6 support
(0002227)
maikel   
2011-09-20 08:27   
(edited on: 2011-09-20 08:40)
On a clean centos 6 repo, it now all works

Good to add to the Centos 6 document the adding of EPEL is needed

rpm -Uvh http://download.fedora.redhat.com/pub/epel/6/i386/epel-release-6-5.noarch.rpm [^]

(0002228)
fgaudreault   
2011-09-20 08:57   
It was already in the admin guide.
(0002247)
obilodeau   
2011-09-21 22:15   
fix released in 3.0