<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Consolas;
        panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
pre
        {mso-style-priority:99;
        mso-style-link:"HTML Vorformatiert Zchn";
        margin:0cm;
        font-size:10.0pt;
        font-family:"Courier New";}
span.HTMLVorformatiertZchn
        {mso-style-name:"HTML Vorformatiert Zchn";
        mso-style-priority:99;
        mso-style-link:"HTML Vorformatiert";
        font-family:Consolas;}
span.E-MailFormatvorlage21
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE-CH" link="blue" vlink="purple" style="word-wrap:break-word">
<div style="padding-bottom: 10px; padding-top: 5px;">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family: Calibri, Arial, Helvetica, sans-serif;">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">Dear David, dear Chris<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">Thanks for your input.&nbsp;</span><span lang="FR-CH" style="font-family:&quot;Segoe UI Emoji&quot;,sans-serif;mso-fareast-language:EN-US">&#128522;</span><span lang="FR-CH" style="mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">So, as I understand your comment («[…]&nbsp; I cannot remember finding any EPrints specific problems (i.e. where the code is broken, deprecated, etc.) but there were a few things that I needed
 to do differently to RHEL/Centos7 […]&nbsp;») it seems to be a normal «&nbsp;New&nbsp;» installation problem, concerning all the depencies of libs etc.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"><br>
Agree to you David, we’re not big fans of using RPMs in production environment. So actually we’re using the 3.3.16 sources with local changes on RHEL7 and MariaDB.<br>
Probably it’s just a setup of libs and transfering our code to the new RHEL8 server(s). Nothing RHEL8 specific therefore&nbsp;– except the Apache performance tuning?!<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Kind regards<br>
Jens<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p>&nbsp;</o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif">--
<br>
Jens Witzel<br>
Zentrale Informatik<br>
Universität Zürich<br>
Stampfenbachstrasse 73<br>
CH-8006 Zürich<br>
<br>
mail: &nbsp;</span><a href="mailto:jens.witzel@uzh.ch"><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif">jens.witzel@uzh.ch</span></a><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif"><br>
phone: +41 44 63 56777<br>
</span><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.zi.uzh.ch%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=ejQ%2FpKAB%2F2JXZapW5Q0uqO7OoQZg59yToOqQ%2FB3S3tA%3D&amp;reserved=0" originalSrc="http://www.zi.uzh.ch/" shash="y8u0nGJ6K//hxhdJfPie4IGUxatAySHk/Zk5pjiMXFjNtiG8L5ze34X7wiAc41oDwF2IljPUb6/0C69IwOG7uGZQlFoGNjS3uc8PfiboMqGVCYU2ALJaEEHZ+/Ryc52iDBddAHpKFPolnhUfXeO+IyJbcjJNSBWYVwQljGZc1Jk="><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif">http://www.zi.uzh.ch</span></a><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p>&nbsp;</o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="DE">Von:</span></b><span lang="DE"> eprints-tech-bounces@ecs.soton.ac.uk &lt;eprints-tech-bounces@ecs.soton.ac.uk&gt;
<b>Im Auftrag von </b>David R Newman via Eprints-tech<br>
<b>Gesendet:</b> Montag, 23. Mai 2022 11:43<br>
<b>An:</b> eprints-tech@ecs.soton.ac.uk; Christopher Gutteridge &lt;totl@soton.ac.uk&gt;<br>
<b>Betreff:</b> Re: [EP-tech] Shifting eprints 3.4.3 from RHEL7 to RHEL8<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p><span lang="FR-CH" style="font-size:13.5pt">Hi Chris,</span><span lang="FR-CH"><o:p></o:p></span></p>
<p><span lang="FR-CH" style="font-size:13.5pt">Yes, my EPrints SELinux module does seem to be forever expanding.&nbsp;
</span><span style="font-size:13.5pt">A lot of that is down more to monitoring (i.e. NRPE) and other stuff I want to do.&nbsp; I am happy to share if anyone is interested.&nbsp; One of the odd things I have at the moment is that Apache keeps saying it needs self:capability
 for net_admin.&nbsp; I am not sure why Apache needs to be able to touch network configuration.</span><o:p></o:p></p>
<p><span style="font-size:13.5pt">I have written some Ansible playbooks for automation but those are mainly to apply improvements/fixes on top of the initial Rocky Linux 8 image template, which already has EPrints installed. I then use this image template to
 build new EPrints VMs.</span><o:p></o:p></p>
<p><span style="font-size:13.5pt">Although I still maintain and produce the EPrints RPM and Deb packages for new versions of EPrints 3.4, I am not a big fan of using them to upgrade production repositories.&nbsp; EPrints is not really the sort of software, (because
 it can be extensively configured), which can be upgraded without there likely being issues.&nbsp;
</span><span lang="FR-CH" style="font-size:13.5pt">This is because you cannot account for every configuration scenario.&nbsp; So even if vanilla EPrints is tested and upgrades nicely, that may not be the case for your repository.&nbsp; An initial install using a standalone
 RPM, is easier than installing from source and at least does not leave you at risk of upgrading through the package manager without realising.&nbsp; However, upgrading in place is quite difficult.&nbsp; I would always advise upgrading a pre-production instance of your
 EPrints repository to make sure you won't have any issues or at least have a plan if you do, before upgrading your production repository.</span><span lang="FR-CH"><o:p></o:p></span></p>
<p><span lang="FR-CH" style="font-size:13.5pt">Regards</span><span lang="FR-CH"><o:p></o:p></span></p>
<p><span lang="FR-CH" style="font-size:13.5pt">David Newman</span><span lang="FR-CH"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="FR-CH">On 23/05/2022 9:37 am, Christopher Gutteridge via Eprints-tech wrote:<o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p><span lang="FR-CH">Oh, I've recently done a puppet setup for EPrints on RHEL8. That's a server automation tool.
</span>It included all the faff for SELinux.<o:p></o:p></p>
<p>The interesting bits are in manifests/ and templates/<o:p></o:p></p>
<p><span lang="FR-CH">manifests/init.pp sets up the server, and repository.pp is a pattern to set up each repository, with the config from a git repository.<o:p></o:p></span></p>
<p>the EPrints RPM and the default flavour are bundled as they were a pain in the upgrade.<o:p></o:p></p>
<p><o:p>&nbsp;</o:p></p>
<div>
<p class="MsoNormal"><span lang="FR-CH">On 23/05/2022 09:08, Jens Witzel via Eprints-tech wrote:<o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div style="border:solid #8D3970 1.0pt;padding:9.0pt 9.0pt 9.0pt 9.0pt">
<p class="MsoNormal" style="line-height:16.5pt;background:#F7F9FA"><strong><span lang="FR-CH" style="font-size:10.5pt;font-family:&quot;Calibri&quot;,sans-serif;color:#8D3970">CAUTION:</span></strong><span lang="FR-CH" style="font-size:10.5pt;color:#8D3970"> This e-mail
 originated outside the University of Southampton. <o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">Dear EP-Tech Group</span><span lang="FR-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">&nbsp;</span><span lang="FR-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CH" style="mso-fareast-language:EN-US">Does anyone here have experience with the transition from RHEL7 to RHEL8 and the consequences of the new security policy in combination with Eprints3.4?
</span><span style="mso-fareast-language:EN-US">What pitfalls are to be expected?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">&nbsp;</span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Every hint is welcome<br>
Thanks<br>
Jens</span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">&nbsp;</span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif">--
<br>
Jens Witzel<br>
Zentrale Informatik<br>
Universität Zürich<br>
Stampfenbachstrasse 73<br>
CH-8006 Zürich<br>
<br>
mail: &nbsp;</span><a href="mailto:jens.witzel@uzh.ch"><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif">jens.witzel@uzh.ch</span></a><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif"><br>
phone: +41 44 63 56777<br>
</span><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.zi.uzh.ch%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=ejQ%2FpKAB%2F2JXZapW5Q0uqO7OoQZg59yToOqQ%2FB3S3tA%3D&amp;reserved=0" originalSrc="http://www.zi.uzh.ch/" shash="y8u0nGJ6K//hxhdJfPie4IGUxatAySHk/Zk5pjiMXFjNtiG8L5ze34X7wiAc41oDwF2IljPUb6/0C69IwOG7uGZQlFoGNjS3uc8PfiboMqGVCYU2ALJaEEHZ+/Ryc52iDBddAHpKFPolnhUfXeO+IyJbcjJNSBWYVwQljGZc1Jk=" title="Unmangled Microsoft
                    Safelink"><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif">http://www.zi.uzh.ch</span></a><o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<pre><span lang="FR-CH">*** Options: </span><a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech"><span lang="FR-CH">http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech</span></a><span lang="FR-CH"><o:p></o:p></span></pre>
<pre>*** Archive: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=yOl4wuOBFG8MgWSCXsedryXLipz1a6bhohucdFpWV%2Fc%3D&amp;reserved=0" originalSrc="http://www.eprints.org/tech.php/" shash="yLMIk5lMErP1pEs6wQJCmfQDSsXVltpAJrOe/DyeuGZRnSqP5O6o5/6/Ewr42YqIIlUglqJEILTP8WGN8slSz8jOerba8CLcRlCIlIzhS+mDzp9JMyEtFacTZnAqvZIG5naO71JOXB6brY+NikkmwVW7mIUwUriK1fh2oVzo1EM=">http://www.eprints.org/tech.php/</a><o:p></o:p></pre>
<pre><span lang="FR-CH">*** EPrints community wiki: </span><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=PG6a08LIlhrerQhdRG8PxQfkv2OntXQlz3kfE5JFlDw%3D&amp;reserved=0" originalSrc="http://wiki.eprints.org/" shash="c4Wei9LMKE4C0YQFdniJx3+BHZW5uNoDoc1CmFwujNAnNZkAJfRGCmYl2/AEsVslv7eRL8XPE9Fnz2/jVAGX4vqc0vrR1CXV1HFQ/wH1wsO8XohQk75fwAkpm5GxQ4vk46tOiworA1FawXRld8YrlyFohXqFDklTPwoXK7oZyKk="><span lang="FR-CH">http://wiki.eprints.org/</span></a><span lang="FR-CH"><o:p></o:p></span></pre>
</blockquote>
<pre>-- <o:p></o:p></pre>
<pre>Christopher Gutteridge <a href="mailto:totl@soton.ac.uk">&lt;totl@soton.ac.uk&gt;</a> <o:p></o:p></pre>
<pre>You should read our team blog at <a href="http://blog.soton.ac.uk/webteam/">http://blog.soton.ac.uk/webteam/</a><o:p></o:p></pre>
<pre>(I live near Highfield Campus, so in person, outdoor and socially distanced meetings are an option)<o:p></o:p></pre>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<pre>*** Options: <a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech">http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech</a><o:p></o:p></pre>
<pre>*** Archive: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=yOl4wuOBFG8MgWSCXsedryXLipz1a6bhohucdFpWV%2Fc%3D&amp;reserved=0" originalSrc="http://www.eprints.org/tech.php/" shash="yLMIk5lMErP1pEs6wQJCmfQDSsXVltpAJrOe/DyeuGZRnSqP5O6o5/6/Ewr42YqIIlUglqJEILTP8WGN8slSz8jOerba8CLcRlCIlIzhS+mDzp9JMyEtFacTZnAqvZIG5naO71JOXB6brY+NikkmwVW7mIUwUriK1fh2oVzo1EM=">http://www.eprints.org/tech.php/</a><o:p></o:p></pre>
<pre><span lang="FR-CH">*** EPrints community wiki: </span><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C225508094e0e46615a0e08da3cc7527e%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637889124325011556%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=PG6a08LIlhrerQhdRG8PxQfkv2OntXQlz3kfE5JFlDw%3D&amp;reserved=0" originalSrc="http://wiki.eprints.org/" shash="c4Wei9LMKE4C0YQFdniJx3+BHZW5uNoDoc1CmFwujNAnNZkAJfRGCmYl2/AEsVslv7eRL8XPE9Fnz2/jVAGX4vqc0vrR1CXV1HFQ/wH1wsO8XohQk75fwAkpm5GxQ4vk46tOiworA1FawXRld8YrlyFohXqFDklTPwoXK7oZyKk="><span lang="FR-CH">http://wiki.eprints.org/</span></a><span lang="FR-CH"><o:p></o:p></span></pre>
</blockquote>
</div>
</div>
</body>
</html>