27.12.2012 Views

The Virtualization Cookbook for SLES 10 SP2 - z/VM - IBM

The Virtualization Cookbook for SLES 10 SP2 - z/VM - IBM

The Virtualization Cookbook for SLES 10 SP2 - z/VM - IBM

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

7.2.3 Configuring yum<br />

You will now configure yum so it can install RPMs from local install tree. To do so, per<strong>for</strong>m the<br />

following steps:<br />

► Create a file named rhel6.repo in the /etc/yum.repos.d directory:<br />

# cd /etc/yum.repos.d<br />

# vi rhel6.repo<br />

[RHEL6]<br />

name=Red Hat Enterprise Linux 6<br />

baseurl=file:///nfs/rhel6/Server<br />

► Import the RPM key which is included in the RHEL 6 DVD root directory:<br />

# cd /nfs/rhel6<br />

# rpm --import RPM-GPG-KEY-redhat-release<br />

Note: Red Hat signs each RPM with a private GPG key, which is compared to your public<br />

key each time a package is installed. This method ensures that the RPM is a genuine,<br />

unaltered package. When installing an RPM, if you ever see a message similar to:<br />

Header V3 DSA signature: NOKEY, key ID 897da07a<br />

Either the correct GPG key has not been imported, or the package itself has been altered.<br />

You are now ready to use yum to install or upgrade an RPM package. To install a package,<br />

use yum install . Yum will conveniently install the packages specified and<br />

automatically resolve dependencies <strong>for</strong> you. Note that you should not specify the package<br />

version on the command line, only the package name.<br />

7.2.4 Turning off unneeded services<br />

<strong>The</strong>re are a number of services which are started in a RHEL 6 minimum system. In order to<br />

keep the cloner as lean as possible, some of these can be turned off: To do so, per<strong>for</strong>m the<br />

following steps:<br />

► Turn off the following services with the chkconfig command:<br />

# chkconfig iptables off<br />

# chkconfig ip6tables off<br />

# chkconfig auditd off<br />

# chkconfig abrtd off<br />

# chkconfig atd off<br />

# chkconfig mdmonitor off<br />

Note: You should only disable the iptables service if you are on a trusted network.<br />

Otherwise, you will need to configure iptables to allow network traffic <strong>for</strong> the VNC server<br />

and NFS, as well as any other services that require network access.<br />

For more in<strong>for</strong>mation on configuring iptables <strong>for</strong> NFS traffic, see the article located at:<br />

http://www.redhat.com/magazine/0<strong>10</strong>aug05/departments/tips_tricks/<br />

Also, turning on and tuning a firewall is briefly discussed in section 11.1.3, “Turning on a<br />

firewall” on page 171.<br />

► You may choose to leave these services on, or turn others off. You can review which<br />

services are now configured to start in run level 3 with the following chkconfig command:<br />

Chapter 7. Installing RHEL 6 on the cloner 121

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!