<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Vorformatiert Zchn";
margin:0cm;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLVorformatiertZchn
{mso-style-name:"HTML Vorformatiert Zchn";
mso-style-priority:99;
mso-style-link:"HTML Vorformatiert";
font-family:Consolas;}
span.E-MailFormatvorlage21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE-CH" link="blue" vlink="purple" style="word-wrap:break-word">
<div style="padding-bottom: 10px; padding-top: 5px;">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family: Calibri, Arial, Helvetica, sans-serif;">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">Dear David, dear Chris<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">Thanks for your input. </span><span lang="FR-CH" style="font-family:"Segoe UI Emoji",sans-serif;mso-fareast-language:EN-US">😊</span><span lang="FR-CH" style="mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">So, as I understand your comment («[…] I cannot remember finding any EPrints specific problems (i.e. where the code is broken, deprecated, etc.) but there were a few things that I needed
to do differently to RHEL/Centos7 […] ») it seems to be a normal « New » installation problem, concerning all the depencies of libs etc.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"><br>
Agree to you David, we’re not big fans of using RPMs in production environment. So actually we’re using the 3.3.16 sources with local changes on RHEL7 and MariaDB.<br>
Probably it’s just a setup of libs and transfering our code to the new RHEL8 server(s). Nothing RHEL8 specific therefore – except the Apache performance tuning?!<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Kind regards<br>
Jens<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">--
<br>
Jens Witzel<br>
Zentrale Informatik<br>
Universität Zürich<br>
Stampfenbachstrasse 73<br>
CH-8006 Zürich<br>
<br>
mail: </span><a href="mailto:jens.witzel@uzh.ch"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">jens.witzel@uzh.ch</span></a><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><br>
phone: +41 44 63 56777<br>
</span><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.zi.uzh.ch%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ejQ%2FpKAB%2F2JXZapW5Q0uqO7OoQZg59yToOqQ%2FB3S3tA%3D&reserved=0" originalSrc="http://www.zi.uzh.ch/" shash="y8u0nGJ6K//hxhdJfPie4IGUxatAySHk/Zk5pjiMXFjNtiG8L5ze34X7wiAc41oDwF2IljPUb6/0C69IwOG7uGZQlFoGNjS3uc8PfiboMqGVCYU2ALJaEEHZ+/Ryc52iDBddAHpKFPolnhUfXeO+IyJbcjJNSBWYVwQljGZc1Jk="><span style="font-size:10.0pt;font-family:"Arial",sans-serif">http://www.zi.uzh.ch</span></a><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="DE">Von:</span></b><span lang="DE"> eprints-tech-bounces@ecs.soton.ac.uk <eprints-tech-bounces@ecs.soton.ac.uk>
<b>Im Auftrag von </b>David R Newman via Eprints-tech<br>
<b>Gesendet:</b> Montag, 23. Mai 2022 11:43<br>
<b>An:</b> eprints-tech@ecs.soton.ac.uk; Christopher Gutteridge <totl@soton.ac.uk><br>
<b>Betreff:</b> Re: [EP-tech] Shifting eprints 3.4.3 from RHEL7 to RHEL8<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p><span lang="FR-CH" style="font-size:13.5pt">Hi Chris,</span><span lang="FR-CH"><o:p></o:p></span></p>
<p><span lang="FR-CH" style="font-size:13.5pt">Yes, my EPrints SELinux module does seem to be forever expanding.
</span><span style="font-size:13.5pt">A lot of that is down more to monitoring (i.e. NRPE) and other stuff I want to do. I am happy to share if anyone is interested. One of the odd things I have at the moment is that Apache keeps saying it needs self:capability
for net_admin. I am not sure why Apache needs to be able to touch network configuration.</span><o:p></o:p></p>
<p><span style="font-size:13.5pt">I have written some Ansible playbooks for automation but those are mainly to apply improvements/fixes on top of the initial Rocky Linux 8 image template, which already has EPrints installed. I then use this image template to
build new EPrints VMs.</span><o:p></o:p></p>
<p><span style="font-size:13.5pt">Although I still maintain and produce the EPrints RPM and Deb packages for new versions of EPrints 3.4, I am not a big fan of using them to upgrade production repositories. EPrints is not really the sort of software, (because
it can be extensively configured), which can be upgraded without there likely being issues.
</span><span lang="FR-CH" style="font-size:13.5pt">This is because you cannot account for every configuration scenario. So even if vanilla EPrints is tested and upgrades nicely, that may not be the case for your repository. An initial install using a standalone
RPM, is easier than installing from source and at least does not leave you at risk of upgrading through the package manager without realising. However, upgrading in place is quite difficult. I would always advise upgrading a pre-production instance of your
EPrints repository to make sure you won't have any issues or at least have a plan if you do, before upgrading your production repository.</span><span lang="FR-CH"><o:p></o:p></span></p>
<p><span lang="FR-CH" style="font-size:13.5pt">Regards</span><span lang="FR-CH"><o:p></o:p></span></p>
<p><span lang="FR-CH" style="font-size:13.5pt">David Newman</span><span lang="FR-CH"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="FR-CH">On 23/05/2022 9:37 am, Christopher Gutteridge via Eprints-tech wrote:<o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p><span lang="FR-CH">Oh, I've recently done a puppet setup for EPrints on RHEL8. That's a server automation tool.
</span>It included all the faff for SELinux.<o:p></o:p></p>
<p>The interesting bits are in manifests/ and templates/<o:p></o:p></p>
<p><span lang="FR-CH">manifests/init.pp sets up the server, and repository.pp is a pattern to set up each repository, with the config from a git repository.<o:p></o:p></span></p>
<p>the EPrints RPM and the default flavour are bundled as they were a pain in the upgrade.<o:p></o:p></p>
<p><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span lang="FR-CH">On 23/05/2022 09:08, Jens Witzel via Eprints-tech wrote:<o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div style="border:solid #8D3970 1.0pt;padding:9.0pt 9.0pt 9.0pt 9.0pt">
<p class="MsoNormal" style="line-height:16.5pt;background:#F7F9FA"><strong><span lang="FR-CH" style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:#8D3970">CAUTION:</span></strong><span lang="FR-CH" style="font-size:10.5pt;color:#8D3970"> This e-mail
originated outside the University of Southampton. <o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">Dear EP-Tech Group</span><span lang="FR-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"> </span><span lang="FR-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">Does anyone here have experience with the transition from RHEL7 to RHEL8 and the consequences of the new security policy in combination with Eprints3.4?
</span><span style="mso-fareast-language:EN-US">What pitfalls are to be expected?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Every hint is welcome<br>
Thanks<br>
Jens</span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">--
<br>
Jens Witzel<br>
Zentrale Informatik<br>
Universität Zürich<br>
Stampfenbachstrasse 73<br>
CH-8006 Zürich<br>
<br>
mail: </span><a href="mailto:jens.witzel@uzh.ch"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">jens.witzel@uzh.ch</span></a><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><br>
phone: +41 44 63 56777<br>
</span><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.zi.uzh.ch%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ejQ%2FpKAB%2F2JXZapW5Q0uqO7OoQZg59yToOqQ%2FB3S3tA%3D&reserved=0" originalSrc="http://www.zi.uzh.ch/" shash="y8u0nGJ6K//hxhdJfPie4IGUxatAySHk/Zk5pjiMXFjNtiG8L5ze34X7wiAc41oDwF2IljPUb6/0C69IwOG7uGZQlFoGNjS3uc8PfiboMqGVCYU2ALJaEEHZ+/Ryc52iDBddAHpKFPolnhUfXeO+IyJbcjJNSBWYVwQljGZc1Jk=" title="Unmangled Microsoft
Safelink"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">http://www.zi.uzh.ch</span></a><o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<pre><span lang="FR-CH">*** Options: </span><a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech"><span lang="FR-CH">http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech</span></a><span lang="FR-CH"><o:p></o:p></span></pre>
<pre>*** Archive: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=yOl4wuOBFG8MgWSCXsedryXLipz1a6bhohucdFpWV%2Fc%3D&reserved=0" originalSrc="http://www.eprints.org/tech.php/" shash="yLMIk5lMErP1pEs6wQJCmfQDSsXVltpAJrOe/DyeuGZRnSqP5O6o5/6/Ewr42YqIIlUglqJEILTP8WGN8slSz8jOerba8CLcRlCIlIzhS+mDzp9JMyEtFacTZnAqvZIG5naO71JOXB6brY+NikkmwVW7mIUwUriK1fh2oVzo1EM=">http://www.eprints.org/tech.php/</a><o:p></o:p></pre>
<pre><span lang="FR-CH">*** EPrints community wiki: </span><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=PG6a08LIlhrerQhdRG8PxQfkv2OntXQlz3kfE5JFlDw%3D&reserved=0" originalSrc="http://wiki.eprints.org/" shash="c4Wei9LMKE4C0YQFdniJx3+BHZW5uNoDoc1CmFwujNAnNZkAJfRGCmYl2/AEsVslv7eRL8XPE9Fnz2/jVAGX4vqc0vrR1CXV1HFQ/wH1wsO8XohQk75fwAkpm5GxQ4vk46tOiworA1FawXRld8YrlyFohXqFDklTPwoXK7oZyKk="><span lang="FR-CH">http://wiki.eprints.org/</span></a><span lang="FR-CH"><o:p></o:p></span></pre>
</blockquote>
<pre>-- <o:p></o:p></pre>
<pre>Christopher Gutteridge <a href="mailto:totl@soton.ac.uk"><totl@soton.ac.uk></a> <o:p></o:p></pre>
<pre>You should read our team blog at <a href="http://blog.soton.ac.uk/webteam/">http://blog.soton.ac.uk/webteam/</a><o:p></o:p></pre>
<pre>(I live near Highfield Campus, so in person, outdoor and socially distanced meetings are an option)<o:p></o:p></pre>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<pre>*** Options: <a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech">http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech</a><o:p></o:p></pre>
<pre>*** Archive: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=yOl4wuOBFG8MgWSCXsedryXLipz1a6bhohucdFpWV%2Fc%3D&reserved=0" originalSrc="http://www.eprints.org/tech.php/" shash="yLMIk5lMErP1pEs6wQJCmfQDSsXVltpAJrOe/DyeuGZRnSqP5O6o5/6/Ewr42YqIIlUglqJEILTP8WGN8slSz8jOerba8CLcRlCIlIzhS+mDzp9JMyEtFacTZnAqvZIG5naO71JOXB6brY+NikkmwVW7mIUwUriK1fh2oVzo1EM=">http://www.eprints.org/tech.php/</a><o:p></o:p></pre>
<pre><span lang="FR-CH">*** EPrints community wiki: </span><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=PG6a08LIlhrerQhdRG8PxQfkv2OntXQlz3kfE5JFlDw%3D&reserved=0" originalSrc="http://wiki.eprints.org/" shash="c4Wei9LMKE4C0YQFdniJx3+BHZW5uNoDoc1CmFwujNAnNZkAJfRGCmYl2/AEsVslv7eRL8XPE9Fnz2/jVAGX4vqc0vrR1CXV1HFQ/wH1wsO8XohQk75fwAkpm5GxQ4vk46tOiworA1FawXRld8YrlyFohXqFDklTPwoXK7oZyKk="><span lang="FR-CH">http://wiki.eprints.org/</span></a><span lang="FR-CH"><o:p></o:p></span></pre>
</blockquote>
</div>
</div>
</body>
</html>