[Beowulf] Security issues

[Alan Ward]

It is much the same in the Debian world. As has been pointed out today, there are some differences between Ubuntu and Debian as to package versions (different kernel versions) and artwork packages, but you can often use packages from a Debian repository with a Ubuntu installation. Perhaps also the other way 'round, though I have not experimented with that.

Perhaps an alternative way to go for a cluster install disk would be a bog standard Debian/Ubuntu/Kubuntu/Xubuntu boot iso image, with a customized install script that pulls in a suplementary set of packages over the network and does some extra configuration (NFS server, PXE server etc).

My point was that it may be easier to modify a Debian (or Ubuntu server) edition than Kubuntu since Kubuntu is more desktop-oriented. 

PS: Kubuntu is what I use on my eeePC ;-)

-Alan


-----Original Message-----
From: beowulf-bounces at beowulf.org on behalf of Robert G. Brown
Sent: Fri 10/24/2008 2:40 PM
To: Jon Aquilina
Cc: beowulf at beowulf.org
Subject: Re: [Beowulf] Security issues
 
On Fri, 24 Oct 2008, Jon Aquilina wrote:

> true but if there is something that isnt in there i would be more then
> willing to add it to the repo.

But what is the ADVANTAGE of reducing the number of packages in a
warehouse from which one pulls packages, when the filled warehouse
already exists and is free?

I don't know about Debian so much, but with RPM repos one can set up the
primary full-distro repo, and create as many "local" repos as one wishes
on the side (or link in to e.g. livna -- other repos other humans
maintain and that you trust).  I can only presume that Debianish distros
can do the same.

So create a "cluster distro" as an OVERLAY on TOP of an existing distro.
That way you do far, far less work.  All the distro packages are there
if you need them.  Most of the cluster packages you might need are
already there.  If you need to rebuild them, augment them with
non-distro packages, or e.g. add some custom kernels, build the
replacement/augmentations, package them, pop them in an overlay.  Yum
will (if told to nicely) use them instead of the ones in the regular
distro.

Don't forget, of course, that then YOU are responsible for maintaining
the update stream of any packages you replace -- if the upstream version
is patched, you'd better (re-re-)patch your augmented version.

This keeps the amount of work to the theoretical minimum required to
achieve your goals, costs you "nothing" (what does disk cost per GB
these days -- $0.20 or thereabouts? -- so keeping a full distro costs
you a few dollars, literally), and makes it extremely easy to track
updates and upgrades without YOU doing a ton of work.

     rgb

>
> On Fri, Oct 24, 2008 at 1:49 PM, Carsten Aulbert <carsten.aulbert at aei.mpg.de
>> wrote:
>
>> Hi Jon
>>
>> Jon Aquilina wrote:
>>> but why waste time sifting through all 26,000+ pkgs in the repos when u
>>> can have a distro with repos focused on clustering pkgs?
>>
>> Because you might/will save time later when you hit user requests which
>> want packages which are not pre-packaged in your cluster distro.
>>
>> Cheers
>>
>> Carsten
>> _______________________________________________
>> Beowulf mailing list, Beowulf at beowulf.org
>> To change your subscription (digest mode or unsubscribe) visit
>> http://www.beowulf.org/mailman/listinfo/beowulf
>>
>
>
>
>

-- 
Robert G. Brown                            Phone(cell): 1-919-280-8443
Duke University Physics Dept, Box 90305
Durham, N.C. 27708-0305
Web: http://www.phy.duke.edu/~rgb
Book of Lilith Website: http://www.phy.duke.edu/~rgb/Lilith/Lilith.php
Lulu Bookstore: http://stores.lulu.com/store.php?fAcctID=877977
_______________________________________________
Beowulf mailing list, Beowulf at beowulf.org
To change your subscription (digest mode or unsubscribe) visit http://www.beowulf.org/mailman/listinfo/beowulf


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.beowulf.org/pipermail/beowulf/attachments/20081024/c61ae6e9/attachment.html>