hashwagon's questions

在“输入服务器名称”并$servselect在下面的脚本中设置变量后，在选择“Hello”和“Goodbye”选项后，该变量将丢失。这需要再次完成“输入服务器名称”提示。有没有办法在脚本完全退出之前维护该变量？任何建议将不胜感激。

#!/bin/bash
#
while true; do
    read -p "Enter server name: " servselect
    servselect=${servselect:-servselect}
    echo $servselect has been selected!

    printf '%s\n' \
        "" \
        "[A] Hello" \
        "[B] Goodbye" \
        "[Q] Quit" \
        ""
        read -n1 -p 'Enter response here:' response
        case $response in
            [Aa]* )
                printf '%s\n' \
                    "" \
                    "Hello, $servselect" \
                    ""
                    ;;
            [Bb]* )
                printf '%s\n' \
                    "" \
                    "Goodbye, $servselect" \
                    ""
                    ;;
            [Qq]* )
                printf '%s\n' \
                    "" \
                    "Quitting..." \
                    ""
                    break
                    ;;
            * )
                printf '%s\n' \
                    "" \
                    "Please choose A, B, or Q" \
                    ""
                    ;;
        esac
done

kickstart 安装中的 chown 命令问题

我正在尝试在文件中的部分chown myuser:myuser末尾运行 a 。chown 之前的一切都运行成功。%postks.cfg

ks.cfg

#Generated by Kickstart Configurator
#platform=AMD64 or Intel EM64T

#System language
lang en_US
#Language modules to install
langsupport en_US
#System keyboard
keyboard us
#System mouse
mouse
#System timezone
timezone America/Denver
#Root password
rootpw --disabled
#Initial user
user myuser --fullname "" --iscrypted --password ##############################/
#Reboot after installation
reboot
#Use text mode install
text
#Install OS instead of upgrade
install
#Use hard drive installation media
# harddrive --dir=/ks.cfg --partition=4005-3596
cdrom 
#System authorization infomation
auth  --useshadow  --enablemd5
#Network information
network --bootproto=dhcp --device=eth0
#Firewall configuration
firewall --disabled
#Do not configure the X Window System
skipx

%packages
@ ubuntu-server
openssh-server
build-essential

%post --log=/root/ks-post.log
exec < /dev/tty6 > /dev/tty6 2> /dev/tty6
chvt 6
#mount the cd (ISO in my case) to copy files from it
#since this is chrooted environment
mount /dev/cdrom /mnt
# Make directories
echo "***Making Directories***"
mkdir -p /home/myuser/bcfiles
mkdir -p /home/myuser/bin
# Copy bcsetup files
echo "***Copying bcsetup Files***"
cp -r /mnt/postfiles/bcsetup /home/myuser/bin
cp -r /mnt/postfiles/bcsetup-dev /home/myuser/bin
# Copy bcfiles directory
echo "***Copying bcfiles Directory***"
cp -r /mnt/postfiles/bcfiles /home/myuser/
# Copy myuser Profile Configuration Files
echo "***Copying myuser Profile Configuration Files***"
cp -r /mnt/postfiles/.bash_logout /home/myuser/
cp -r /mnt/postfiles/.bashrc /home/myuser/
cp -r /mnt/postfiles/.profile /home/myuser/
# Applying permissions
echo "***Applying Permissions***"
chown myuser /home/myuser/.bashrc

ks.cfg 使用 --nochroot 进行测试

%post --nochroot --log=/root/ks-post.log
# Make directories
echo "***Making Directories***"
mkdir -p /target/home/myuser/bcfiles
mkdir -p /target/home/myuser/bin
# Copy bcsetup files
echo "***Copying bcsetup Files***"
cp -r /cdrom/postfiles/bcsetup /target/home/myuser/bin
cp -r /cdrom/postfiles/bcsetup-dev /target/home/myuser/bin
# Copy bcfiles directory
echo "***Copying bcfiles Directory***"
cp -r /cdrom/postfiles/bcfiles /target/home/myuser/
# Copy myuser Profile Configuration Files
echo "***Copying myuser Profile Configuration Files***"
cp -r /cdrom/postfiles/.bash_logout /target/home/myuser/
cp -r /cdrom/postfiles/.bashrc /target/home/myuser/
cp -r /cdrom/postfiles/.profile /target/home/myuser/
# Applying permissions
echo "***Applying Permissions***"
chown myuser:myuser -R /target/home/myuser/

安装后cat /var/log/installer/syslog | grep kickseed显示：

kickseed: chown: unknown user myuser:myuser

事后诸葛亮

到目前为止，我已经尝试了几种不同的路线。如果我--nochroot从%post. 我已经看到其他 ks.cfg 配置使用chown myuser.myuser它也没有工作。还尝试chown在/home/myuser/.

任何建议将不胜感激。

更新

/etc/passwd和/etc/group两个列表myuser。输出groups myuser：myuser : myuser adm cdrom sudo dip plugdev lpadmin sambashare

想法

在这个时间点上，我正在考虑将脚本/home/myuser/bin移到/usr/local/bin我不需要依赖的地方chown。

我继承了一个 Centos 6.5 系统，它在运行rsync. rsync 正在同步到安装为/storage. 命令是：

rsync -aAXv /* /storage/backup/ --exclude={/dev/*,/proc/*,/sys/*,/tmp/*,/run/*,/mnt/*,/media/*,/lost+found,/storage/*}

# Error concern 1, # Error concern 2, # Error concern 3下面的输出中指出了三种不同类型的错误：

rsync -aAXv /* /storage/backup/ --exclude={/dev/*,/proc/*,/sys/*,/tmp/*,/run/*,/mnt/*,/media/*,/lost+found,/storage/*}
sending incremental file list
etc/cron.d/
root/
root/.bash_history
root/.viminfo
selinux/booleans/abrt_anon_write
selinux/booleans/abrt_handle_event
selinux/booleans/allow_console_login

[...]

# Error concern 1: There are probably 80 or more of these mkstemp errors, but I've shortened it:

rsync: mkstemp "/storage/backup/selinux/class/x_pointer/perms/.setfocus.0C5BYW" failed: Permission denied (13)
rsync: mkstemp "/storage/backup/selinux/class/x_pointer/perms/.use.iRMquA" failed: Permission denied (13)
rsync: mkstemp "/storage/backup/selinux/class/x_pointer/perms/.write.rHXg0d" failed: Permission denied (13)
rsync: mkstemp "/storage/backup/selinux/class/x_property/.index.Zwc8vR" failed: Permission denied (13)
rsync: mkstemp "/storage/backup/selinux/class/x_property/perms/.append.tTK01u" failed: Permission denied (13)
rsync: mkstemp "/storage/backup/selinux/class/x_property/perms/.create.KGNUx8" failed: Permission denied (13)
rsync: mkstemp "/storage/backup/selinux/class/x_property/perms/.destroy.IiUP3L" failed: Permission denied (13)

[...]

# Error concern 2:

tmp/
rsync: rsync_xal_clear: lremovexattr("storage","security.selinux") failed: Permission denied (13)
var/cache/man/whatis    

[...]

# Error concern 3:

var/run/utmp
rsync: set_acl: sys_acl_set_file(var/run/cups/certs/0, ACL_TYPE_ACCESS): Operation not supported (95)
var/run/postgresql/.s.PGSQL.5432.lock

[...]

# Finishing output:

sent 4288406721 bytes  received 52199 bytes  86635533.74 bytes/sec
total size is 22337384552  speedup is 5.21
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1039) [sender=3.0.6]

笔记

rsync 似乎运行正常，直到它遇到/selinux带有隐藏文件的目录的特定部分。当 SELinux 设置为 permissive 时，setenforce 0不会发生这些错误。虽然# Error concern 2并且# Error concern 3仍然发生。

/selinux目录和目录的SELinux上下文/storage如下：

drwxr-xr-x. root root system_u:object_r:security_t:s0  selinux
drwxr-xr-x. root root system_u:object_r:file_t:s0      storage
# /storage/backup directory
drwxr-xr-x. root root unconfined_u:object_r:public_content_t:s0 backup

到目前为止# Error concern 2，# Error concern 3我没有线索。

如果我遗漏了什么，请告诉我。我对 CentOS 6.5 的了解不如对 7 的熟悉，因为我不知道为什么会有/selinux一个/. 我有一个 CentOS 7.2 服务器，它正在对附加的存储驱动器执行相同的 rsync，没有问题。任何帮助或建议将不胜感激。

更新 1

我将 SELinux 上下文更改/storage/backup为public_content_rw_tvia：

semanage fcontext -a -t public_content_rw_t "/storage/backup(/.*)?"
restorecon -Rv /storage/backup

我将很快再次运行 rsync 并报告这是否有任何改变。

更新 2

在使用新的安全上下文之后，我再次运行了 rsync，并且得到了相同的错误结果。我想知道 rsyncing/selinux目录是否真的值得，因为系统/etc/selinux无论如何都应该备份，如果系统需要重新标记自己，它将拥有所有上下文。任何人都可以插话吗？

更新 3

我倾向于不备份/selinux目录。显示了 CentOS 6.5 和 CentOS 7.2 之间的sestatus这些差异：

CentOS 6.5
SELinux status:                    enabled
SELinuxfs mount:                   /selinux
Current mode:                      enforcing

CentOS 7.2
SELinux status:                    enabled
SELinuxfs mount:                   /sys/fs/selinux
SELinux root directory:            /etc/selinux
Loaded policy name:                targeted
Current mode:                      enforcing

根据我从中收集到的信息，该/selinux目录被用作 SElinux 文件系统的挂载点吗？我想知道这是否是错误的原因。

我按照以下步骤获取了 EPEL GPG 密钥，我正在尝试验证它是否正常工作。这是在新安装的 RHEL7 系统上。

回购：https ://dl.fedoraproject.org/pub/epel/7/x86_64/

# cd /etc/pki/rpm-gpg/
# wget https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7
# cd /etc/yum.repos.d

编辑：/etc/yum.repos.d/dl.fedoraproject.org_pub_epel_7_x86_64_.repo

gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7

我使用该python-pip软件包进行了测试安装，它显示它正在使用我的 EPEL 存储库进行安装：

Installing:
python-pip       noarch       7.1.0-1.el7      dl.fedoraproject.org_pub_epel_7_x86_64_         1.5 M

Transaction Summary

Install  1 Package

Total download size: 1.5 M
Installed size: 6.6 M
Is this ok [y/d/N]: y
Downloading packages:
python-pip-7.1.0-1.el7.noarch.rpm                    1.5 MB  00:00:01
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : python-pip-7.1.0-1.el7.noarch                        1/1
Verifying  : python-pip-7.1.0-1.el7.noarch                        1/1

Installed:
python-pip.noarch 0:7.1.0-1.el7

Complete!

这就是我所得到的。我被引导相信它会提示确认密钥，例如Retreiving key from file:///..etc..., Importing GPG key 0x35..... 它从未提及有关 GPG 密钥/签名的任何内容，因此我不确定它是否有效。对此的任何帮助都会很棒。

谢谢