This is the release of Scientific Linux 7 with Fermilab customizations.

The Scientific Linux 7 Fermilab Context is a combination of Scientific Linux 7 and a Fermilab specific repo. The resultant install will look like Scientific Linux as there are minimal Fermilab customizations.

Note
 Scientific Linux 7 has IPv6 enabled by default.

See below for the included Fermilab customizations.

Important
 Scientific Linux 7 includes MAJOR CHANGES. You should read and familiarize yourself with the release notes found at http://ftp.scientificlinux.org/linux/scientific/7/x86_64/release-notes/
Note
 As with the latest releases of SLF 6, yum-conf-sl7x is installed by default. This means your system will be updated to the latest release of SL 7 automatically.
For example, SL 7.1 systems with yum-conf-sl7x installed will automatically update to SL 7.2 during a yum update operation. If this is not behavior you desire, the yum-conf-sl7x rpm should be removed from your system.

View online at: http://ftp.scientificlinux.org/linux/scientific/7x/contexts/fermilab/docs/

Add Context To Scientific Linux

You can add the Scientific Linux 7 Fermilab Context to a Scientific Linux 7 system with the following commands:

yum install yum-conf-repos
yum install yum-conf-context-fermilab
sleep 2
yum upgrade

Media

There are 2 choices for netinstall media.

  • The Scientific Linux netinstall media: 

    http://ftp.scientificlinux.org/linux/scientific/7/iso/
    NOTE: Unless you select the Fermilab Context, you will receive SL 7.

  • or a customized media that automatically enables the "fermilab" context 

    http://ftp.scientificlinux.org/linux/scientific/7/contexts/fermilab/images/boot.iso
Note
 The Scientific Linux netinstall media has been modified to allow for selection of a context during install.
See http://ftp.scientificlinux.org/linux/scientific/7x/contexts/ for more information.
Note
 This media uses DHCP for networking by default.

Adding the Fermilab Context to Other Releases

You can add the Scientific Linux 7 Fermilab Context to other releases with the following commands:

yum install http://ftp.scientificlinux.org/linux/scientific/7x/contexts/fermilab/x86_64/yum-conf-context-fermilab-1.0-6.el7.noarch.rpm
sleep 2
yum upgrade

Limitations

Missing behaviors/packages

These packages are known not to be included in this release.

  • None

Noteworthy Changes

Name Changes

The "zz_" rpms have new names to hopefully clarify their intented purpose and create simple queries.

Old Name

New Name

krb5-fermi-krb5.conf

fermilab-conf_kerberos

ocsinventory-fermi

fermilab-util_ocsinventory

rgang

fermilab-util_rgang

zz_auto_update_kernel

SL_yum-cron_no_default_excludes

zz_apache_no_browsable_directory

fermilab-conf_apache-no-browsable-directory

zz_apache_use_clogger

fermilab-conf_apache-use-syslog

zz_fermi_ssh_config

fermilab-conf_ssh-client

zz_fermi_sshd_config

fermilab-conf_ssh-server

zz_gdm_doe_banner

fermilab-conf_doe-banner-login-screen

zz_gdm_no_user_list

SL_gdm_no_user_list

zz_ntp_configure

fermilab-conf_timesync

zz_postfix_fermi_gateway

fermilab-conf_email-gateway

zz_screenlock_kde

fermilab-conf_screenlock

zz_tcp_wrappers_change

fermilab-conf_tcp-wrappers

zz_use_clogger

fermilab-conf_system-logger

New Packages

The following packages are new additions to the SL7 Fermilab Context list:

  • cigetcert: A utility for getting X.509 certificates from CILogon.

  • fermilab-base_kerberos : Will ensure the packages necessary for the traditional use of the FNAL kerberos realm are installed.

  • fermilab-base_on-site : Will ensure the packages necessary for use of the FNAL network are installed.

  • fermilab-conf_doe-banner-console : Provides the baseline MOTD file. This was previously packaged with zz_tcp_wrappers_change.

  • fermilab-conf_kerberos-local-passwords : Permits users to login locally with their KERBEROS or a local password.

  • fermilab-util_k5push : Provides /usr/bin/k5push . This was previously part of krb5-fermi-addons

  • fermilab-util_kcron : Get kerberos ticket for cron usage. This was previously part of krb5-fermi-addons

  • fermilab-util_kx509 : Get an X.509 certificate for Fermilab using CILogon.

  • fermilab-util_makehostkeys : Provides /usr/sbin/makehostkeys . This was previously part of krb5-fermi-krb5.conf. The provided script is not the utility from SLF6.

  • yum-conf-context-fermilab : Provides a yum-repo pointing to the Fermilab customizations.

Repo Changes

Scientific Linux 7 Fermilab Context uses the Scientific Linux repos.

Security Errata

Note
 Unlike with SLF5 and SLF6, when security errata is published for Scientific Linux 7 it is also published to Scientific Linux 7 Fermilab Context.
For Scientific Linux errata announcements see the scientific-linux-errata list.

The pre-publication to SLF rolling will not happen.

Fastbug Errata

Unlike SLF 5 and SLF 6, the Fastbugs repo is enabled by default

External Repos

Unlike with SLF 5 and SLF 6, any external repos you install such as EPEL or ELRepo - will have their yum repos enabled by default.

Discontinued Packages

The following packages are not present in the SL7 Fermilab Context:

  • clamav : This published in EPEL7.

  • drbd83 : The DRBD tools are published within ELRepo.

  • flpr : Fermilab lpr. Managed Print Services made this obsolete.

  • heartbeat : High Availability tool. TUV suggests corosync.

  • krb5-fermi-getcert : The KCA server is scheduled for retirement. This package will soon be obsolete.

  • openafs-thiscell-FNAL : This OpenAFS config file is no longer needed. OpenAFS is able to determine this information automatically. The OpenAFS Cell at FNAL is scheduled for retirement.

  • pidgin-sipe : This published in EPEL7.

  • purple-sipe : This published in EPEL7.

  • slf-bookmarks : Fermilab firefox bookmarks are not required.

  • slf-release : This is no longer required. The sl-release RPM fulfills this function together with yum-conf-context-fermilab.

  • slf-logos : Fermilab specific artwork is not required.

  • tetex-natbib : laTex macros. No reported users of this package.

  • tetex-revtex : laTex macros. No reported users of this package.

  • upsupdbootstrap-* : Initial UPS/UPD setup. No package owner.

  • yum-autoupdate : For SL7 we utilize yum-cron instead. Please read http://ftp.scientificlinux.org/linux/scientific/7/x86_64/release-notes/#_sl_provides_automatic_updates

  • yum-conf-fermi-internal : This is no longer required.

  • yum-conf-fermi-other : Replaced by yum-conf-context-fermilab.

  • yum-conf-slf7x : This is replaced by yum-conf-sl7x

  • zz_alpine_user_domain : Alters the sendfrom domain to @fnal.gov. Alpine is not an officially supported email client. Users may still make the alterations to their alpine config manually.

  • zz_cacerts_for_slf : With the planned retirement of the KCA server this package is no longer necessary.

  • zz_disable_avahi : Disabling the Avahi service is not required though the default firewall will render it useless. Avahi is typically found on Workstations. ENHC0001980

  • zz_enable_firewall_fnal : The default firewall provided by SL7 is suitable for use at Fermilab. ENHC0001981

  • zz_lang_colate : Sets LANG=C by default. ENHC0002521

  • zz_local_dns_cache : Users who need to run their own DNS caching server are better served by building their own configs tailored to their needs.

  • zz_postfix_accept : Configured postfix to recieve email. Users are expected to recieve email at email.fnal.gov so this rpm is no longer necessary.

  • zz_sendmail_accept : Configures sendmail to recieve email. Sendmail is not packaged with SL7. Postfix is the provided replacement.

  • zz_sendmail_fermi_gateway : Configures sendmail to route email through approved servers. Sendmail is not packaged with SL7 Postfix is the provided replacement.