Posts

Host key verification failed : Ubuntu 16.04 LTS

Image
Clash Royale CLAN TAG #URR8PPP up vote 0 down vote favorite am setting-up a Beowulf cluster with Ubuntu 16.04 LTS as the OS. I was able to follow the steps described in https://www.youtube.com/watch?v=gvR1eQyxS9I very closely until the code compilation stage wherein I get the following error : *cdil@master:/nfs$ mpirun --hostfile machinefile -np 28 ./mpi_hello Host key verification failed. ORTE was unable to reliably start one or more daemons. This usually is caused by: not finding the required libraries and/or binaries on one or more nodes. Please check your PATH and LD_LIBRARY_PATH settings, or configure OMPI with --enable-orterun-prefix-by-default lack of authority to execute on one or more specified nodes. Please verify your allocation and authorities. the inability to write startup files into /tmp (--tmpdir/orte_tmpdir_base). Please check with your sys admin to determine the correct location to use. compilation of the orted with dynamic libraries when static are requi...

Sanest/safest way to allow root-owned/run script to access file in /root under selinux

Image
Clash Royale CLAN TAG #URR8PPP up vote 0 down vote favorite I have an autofs program-based map which I wrote, which auto-mounts CIFS shares, taking credentials from a file which is located within the ~/.smb folder of any given user. There can be multiple credential files, where each filename matches the domain name of the target CIFS server. Autofs mounts are run by automounter(8) , which is defined as a systemd service in my Centos 7 build. Automounter runs as root, the autofs map script is owned by root and is set to 0700 permissions, and there is a credential file living under /root/.smb with 0600 perms. By rights, I'd have thought that automounter should be able to read the credentials file. That is, until SELinux gets in the way; whereupon it logs in audit.log (linebreaks added for readability): type=AVC msg=audit(1508458225.901:143): avc: denied read for pid=4786 comm="auto.smb-user" name="mydomain.credentials" dev="sda1" ino...