NetworkManager and YUM Update Issue

As been noted, the NetworkManager update in Fedora 9 and Fedora 10 prevents YUM from performing a regular update. Apparently due to a bug in the Fedora Update system. The following error may be seen:

Public key for NetworkManager-0.7.0.99-3.fc10.i386.rpm is not installed

The solution is coming soon, but for a temporary workaround YUM supports an exclude option:

yum --exclude=NetworkManager\* update

This should ignore NetworkManager related packages and continue on in the update process.

For more tips on YUM usage, run: yum --help.

Update to RPMFusion

The availability of RPMFusion for Fedora was previously announced a few days ago. However I never got a chance to actually perform the update.

For those who are not familiar with Fedora’s third-party software repositories (repo’s), the two most popular repo’s: Freshrpm and Livna were typically the place to find software not permitted in Fedora. While I used Freshrpms in FC3 and earlier, I did eventually write most of my newer guides using Livna. It was announced well over a year ago that these repo’s would be merging. Finally the wait is over.

Much like Fedora’s repo migration earlier this year, the entire process is entirely transparent to Livna and Freshrpms users who regularly use yum to update their systems. No instructions are necessary, basically, just run:

# yum -y update
# yum -y update

The first will pull the rpmfusion-free and rpmfusion-nonfree release repo setup files. The second will update all software from Livna (or Freshrpms) to pull updates from RPMFusion.

This is a huge improvement for anyone who has had to deal with explaining differences in repo’s and potential conflicts. As I have received emails already, I will be rewriting my Fedora 9 Installation Guide to reflect these changes soon.

Update: Nov 19: I updated my F9 Install Guide

Fedora 9 Update and Nvidia Update

It was announced in August that the Fedora Project suffered a security breach. As a result after a certain date, all software updates were disabled. As of recently, the updates were enabled with new signatures in place.

I recently updated my Fedora 9 32bit (i386) installation. The last time I updated my system was the last week of July, before the security announcement was made. The following are the steps I took to complete my update.

First I ran:

yum update

This listed very few updates, however I saw the following error:

--> Finished Dependency Resolution
kmod-nvidia-2.6.25.14-108.fc9.i686-173.14.12-3.lvn9.i686 from livna has depsolving problems
  --> Missing Dependency: kernel-uname-r = 2.6.25.14-108.fc9.i686 is needed by package kmod-nvidia-2.6.25.14-108.fc9.i686-173.14.12-3.lvn9.i686 (livna)
xine-lib-extras-nonfree-1.1.15-1.lvn9.i386 from livna has depsolving problems
  --> Missing Dependency: xine-lib(plugin-abi) = 1.24 is needed by package xine-lib-extras-nonfree-1.1.15-1.lvn9.i386 (livna)
Error: Missing Dependency: kernel-uname-r = 2.6.25.14-108.fc9.i686 is needed by package kmod-nvidia-2.6.25.14-108.fc9.i686-173.14.12-3.lvn9.i686 (livna)
Error: Missing Dependency: xine-lib(plugin-abi) = 1.24 is needed by package xine-lib-extras-nonfree-1.1.15-1.lvn9.i386 (livna)

To resolve it, I just did:

yum remove kmod-nvidia xine-lib-extras-nonfree

This removed:

Removing:
 kmod-nvidia                      i686   173.14.05-4.lvn9  installed   0.0
 xine-lib-extras-nonfree          i386   1.1.12-1.lvn9     installed   1.2 M
Removing for dependencies:
 amarok-extras-nonfree            i386   1.4.8-1.lvn9      installed   376
 kmod-nvidia-2.6.25.4-30.fc9.i686 i686   173.14.05-3.lvn9  installed   7.5 M
 kmod-nvidia-2.6.25.6-55.fc9.i686 i686   173.14.05-4.lvn9  installed   7.5 M
 xorg-x11-drv-nvidia              i386   173.14.05-1.lvn9  installed   7.0 M
 xorg-x11-drv-nvidia-libs         i386   173.14.05-1.lvn9  installed    17 M

I knew that a new repository would be configured, so instead of downloading any updates from the previous repository, I just ran the following:

yum update fedora-release

After that, I did the actual update (the “yes” option -y is recommended considering the amount of updates):

yum -y update

This listed, for me, 35 new packages, 443 updated packages and 2 packages to remove – for a total download size of: 991 MB !!!

After the download completed, and before the actual installation/update occurred, I saw the following (which is what is expected):

warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 6df2196f
Importing GPG key 0x6DF2196F "Fedora (8 and 9) " from /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-8-and-9-i386
Is this ok [y/N]: y

After all the updates were installed, I fixed the xine-lib-extra-nonfree update issue (basically adding what I had previously removed). The following ran with no problems:

yum install xine-lib-extras-nonfree amarok-extras-nonfree

NVIDIA Driver Issue

When trying to update/install the Nvidia binary driver using yum:

yum install kmod-nvidia

The same error from above persisted:

--> Finished Dependency Resolution
kmod-nvidia-2.6.25.14-108.fc9.i686-173.14.12-3.lvn9.i686 from livna has depsolving problems
  --> Missing Dependency: kernel-uname-r = 2.6.25.14-108.fc9.i686 is needed by package kmod-nvidia-2.6.25.14-108.fc9.i686-173.14.12-3.lvn9.i686 (livna)
Error: Missing Dependency: kernel-uname-r = 2.6.25.14-108.fc9.i686 is needed by package kmod-nvidia-2.6.25.14-108.fc9.i686-173.14.12-3.lvn9.i686 (livna)

Apparently, this problem is due to Livna build system being down. The following is the recommended alternate solution:

yum install akmod-nvidia

Then you just need to reboot and you are done!!! (This is already required due to the new kernel).

However I ran the following to test the akmod system. This is OPTIONAL as the following will automatically happen after rebooting:
First Identify the newest installed kernel:

[mirandam@charon ~]$ rpm -q kernel
kernel-2.6.25.6-55.fc9.i686
kernel-2.6.26.3-29.fc9.i686

Create the proper matching kmod files for that kernel:

[mirandam@charon ~]$ sudo /usr/sbin/akmods --kernels 2.6.26.3-29.fc9.i686
Checking kmods exist for 2.6.26.3-29.fc9.i686              [WARNING]
Building and installing nvidia-kmod                        [  OK  ]

Then I was done. Every step worked for me to bring my Fedora 9 system up to date. I rebooted and the akmod detected I had already created the necessary kmod files.

I should have done all of this earlier. For more help and issues, please read:
https://fedoraproject.org/wiki/Enabling_new_signing_key

I am glad that issue has been resolved.

SELinux Preventing SSH Passwordless Login

Since upgrading to Fedora 9, I am trying much harder to work with SELinux. For the most part it is pretty easy.

I am using passwordless SSH logins between my CentOS 5.1 server and my Fedora 9 desktop. Since my Fedora 8 never used SELinux, all my file contexts were “wrong” when I mounted my /home partition. I noticed the following error when I tried to ssh from my server to Fedora (I read /var/log/messages):

setroubleshoot: SELinux is preventing access to files with the label, file_t.
For complete SELinux messages. run sealert -l f414b4c3-ed13-4b83-8a67-3df599e16723

Realizing this is a file context issue, I am pretty sure that a “relabel” (touch /.autorelabel; reboot) would fix this. However I don’t want to reboot at the moment. I ran the above recommendation (I am shortening the output here):

[mirandam@charon ~]$ sealert -l f414b4c3-ed13-4b83-8a67-3df599e16723

Summary:
SELinux is preventing access to files with the label, file_t.

Allowing Access:
You can execute the following command as root to relabel your computer system:
touch /.autorelabel; reboot

Additional Information:
Source Context                system_u:system_r:sshd_t:s0-s0:c0.c1023
Target Context                system_u:object_r:file_t:s0
Target Objects                /home/mirandam/.ssh/authorized_keys [ file ]

Raw Audit Messages
host=charon.lunar type=AVC msg=audit(1213619507.698:11): avc:  denied  { getattr } for  pid=2396
 comm=sshd path=/home/mirandam/.ssh/authorized_keys dev=sda13 ino=2950756 
scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file

Simple fix (without reboot):

[mirandam@charon ~]$ /sbin/restorecon -v ~/.ssh/authorized_keys

While this was not a serious problem (I was still able to login to SSH by using password), the above steps of reading the logs and following recommendations should remedy most SELinux issues. If you are logged into your desktop console directly (e.g. GNOME) – I was not, the SELinux Troubleshooter would help with all of the above with graphical tools.

Fedora 9 Review

After spending a good deal of time configuring Fedora 9 I thought I would take this opportunity to provide my thoughts and feedback. The following is my Review of Fedora 9 (F9).

“Sulphur” smells only just a little.

Installation Media

The first thing I was happy to see was that the team finally decided to offer Fedora 9 in multi-CD installations in addition to the DVD installation. This has been missing since Fedora 7. I’m glad someone realized that Live image installation is NOT the same. I chose the DVD installation.

Installation

Note: For the first time I simultaneously installed Fedora on both a Laptop and Desktop. Additionally I used both 32-bit and 64-bit versions for installation.

As always the Fedora installer always seems to slowly lose features. Although in this case some very useful features got added. This release saw the addition of partition-resizing in the installer as well as encrypting your file system. While I do not think that majority of users require the encryption, the re-sizing ability is welcome as it accepts the possibility that many people wish to dual-boot or are not yet ready to abandon Windows. Unfortunately, I did not trust the Fedora installer to re-size my (pre-setup out) partitions.

For Package Selection I was fairly pleased with the default set of packages. I find that with each release there are less changes I need to do. Although I would still prefer if KDE, thunderbird, and k3b were installed by default. Oddly my install later added up to be a whopping 4.8GB! Almost 1GB bigger than I recall the similar installations for either F8 or F7! Not sure what was added!

The First Boot did see some minor changes. The security settings for both the Firewall and SE-Linux (Security Enhanced Linux) were removed. I would guess that many people possibly just disabled them upfront instead of actually learning to use them. I guess this is probably a smart move for Fedora.

Software: Fedora Desktop

After the First Boot configurations were set I made it to the login screen. This is where I will use the phrase: “Familiarity Be Damned!”. I follow the Fedora defaults of using Gnome but this release really had some major changes in software components.

The new verion of GDM (which manages logins) requires you to double-click your name and has this annoying animation after selection. There is an option at the bottom for selecting alternative desktops (e.g. KDE). Overall the login screen seemed incredibly clunky and unpolished. I felt it was a minor detraction, since technically I did not see any major functionality lost.

After logging into Gnome, my first reaction was that nothing major had changed. Which from the perspective of the GUI seemed to be true. I did notice 2 new applets on the top-right. The first was PackageKit and the second was NetworkManager.

PackageKit seemed to give a pretty simple interface for accepting new updates. I liked it for the most part, it reminded of a similar feature in Ubuntu. Although, if one saw over a 100 I doubt there would be much usefulness in “Reviewing” an update before install. Overall positive improvement.

NetworkManager which I was believe was available in FC5 is finally enabled by default in Fedora 9. The previous network service is disabled. This is a potentially problematic issue. Some setup’s (like my desktop) may find NetworkManager a nuisance. I ended up disabling NetworkManager in Fedora and concluded that this option was still too beta-quality. That is until I tested the same on my laptop. I enabled the WiFi and clicked on the applet which showed my WPA2-PSK access point. I entered my pass phrase and I was connected! No configuring, no tweaking, no firmware-ing, no ‘yum-ing’. My Intel Pro ABG3945 Wireless worked out of the box! So, I can only conclude that NetworkManager, while not perfect for all configurations, is definitely worthwhile for some.

Firefox 3 – While I did not go through all the new applications, I am not very impressed with Firefox 3 (not Fedora’s fault). The interface seems a little annoying and only 2 of my 10 extensions work, which makes surfing a little difficult in Fedora 9.

Otherwise the GNOME setup seemed satisfactory. The only other quirk I had was that point-and-click NTFS partition mounting did not work for me like it did in Fedora 8. As usual I just prefer to have all my NTFS partitions fixed and mounted at boot. Also occasionally after I login I find that my time is several hours off? I do have NTP running. This causes a nuisance for dual-booting.

Software: Java

Fedora 9 ships with OpenJDK instead of IcedTea that was shipped in Fedora 8. I want to believe that the development is moving closer to be functionally same as the popular Sun Java, but I am confused. OpenJDK is version 1.6 while IcedTea was 1.7? Okay, no biggie. What was the biggest disappointment was the OpenJDK web-browser plugin did NOT work on the popular Java Test Page. Why does this bother me? Because IcedTea in Fedora 8 worked like a charm.

Software: KDE 4

Although I was initially excited about trying KDE4, that excitement quickly faded after using KDE for a few minutes – “Familiarity Be Damned!” Simply put, it is missing too many features and there are enough changes to frustrate you. While again, I do not blame the Fedora developers for including this, it does add to the feeling that many software components in Fedora 9 may seem incredibly unfamiliar or just NOT ready.

System Issues

While there may be many software updates at the system level, I did not notice anything new that would significantly change the user experience. I would say on a very positive note that sound seemed quite issue-free. The PulseAudio (first included in Fedora 8 ) worked great for me. While not a big deal, the doc writers should have made sure to add libflashsupport in the Release Notes to get sound in Flash working.

Now to SELinux – the super security tool everybody loves to hate and nobody has the patience to learn. For the first time I found running Fedora with SELinux set to Enforcing has NOT caused a single problem. All plugins, drivers, 3rd party and proprietary apps ran without issue. This was 3 different hardware installs! First time ever! It only took 4 years!!! Well, I’ll wait till a SELinux policy update renders my system useless. But overall, I was quite pleased.

Fedora included Upstart which is Ubuntu’s new startup system. While I know that this opens the door to many optimizations during startup, I did not notice any major changes. I think this will be gradually improved over time.

Hardware Support – Laptop

While I do not have much new hardware on my desktop, I do have a Thinkpad Laptop. I was shocked that almost every single feature worked out of the box for my laptop: video resolution, sound, touchpad/pointer, SD card, wireless, battery, volume, brightness and hibernate. While my mute button still does not work correctly and the suspend is a little buggy, I have not really debugged them. Even so, the amount of time in the past I would have to configure all of the previously mentioned options was days of tweaking, researching and kernel compiling. I was really pleased with how well Fedora 9 – 64-bit worked on my laptop.

System Issues – Xorg X-server

Unfortunately the release of of Xorg 1.5/7.4 was not ready in time for the release of Fedora 9 so a development version 1.4.9999999999999 was shipped (not sure how many 9’s). While there is nothing technically wrong with this, the Nvidia binary driver (must have for 3-D and compiz effects) will not work correctly with this release. Since no one knows the Nvidia’s release schedule or the internal working of their hardware, basically you cannot do 3-D or effects in Fedora 9 if you are an Nvidia user (like myself). I wish the Xorg release was ready. I’m eagerly waiting to fix the last remaining quirk on my Fedora 9. Annoying, but people should have patience.

Conclusion

I’m not a big fan of shipping development versions of software, but in the open source world – everything is development software. Overall I am not super thrilled with Fedora 9 on the desktop but the drastic improvements on the laptop front are well worth it. Obviously I don’t plan on using Fedora as a server.

I don’t think I will ever agree with some of the default decisions (e.g. NetworkManager over network) but nothing seemed too difficult to resolve. I think this release was definitely moving in the right direction. Much better than Fedora 8. I feel Fedora is trying real hard to catch up to Ubuntu’s polished quality.

I personally would recommend that people wait for at least the update to Xorg. This seems to be a big road block for many. I do not think that there was a major lack in quality in the distribution as a whole (like in many past releases). I just think that many of the components shipped in Fedora 9 just need a little catch up time.

Glad I tried multiple different installs, it broadened my perspective. Maybe Fedora 9 “Sulphur” will do the same for you? Happy installing!

Fedora 9 Released

Can you feel the burn of “Sulphur” ?

After an unfortunate 2 week delay the Fedora project just announced the release of Fedora 9. Fedora has always been known to be the latest and greatest and this release is no different, rough edges and all. A great deal of hard work has been done to put this all together.

The highlights from the Release Summary:

Desktop

  • GNOME 2.22 – many added functions, improvements
  • KDE 4.0.3 – the highly anticipated KDE4!
  • XFCE 4.4.2 – now in it’s own LiveSpin as well, just like KDE and GNOME
  • Online Desktop – providing a desktop experience designed around online services

Administration/Hardware/System

  • Network Manager – major improvements for wireless network management, mobile broadband, GSM, CDMA as well as Ad-Hoc networking
  • Bluetooth – devices and tools now have better graphical and system integration
  • Laptops – users benefit from the “quirks” feature in HAL, including better suspend/resume and multimedia keyboard support
  • PackageKit – An easy to use tool for updating.
  • YUM – performance improvements.
  • Xorg 7.4/X Server 1.5 (almost) – Major updates to X including faster startup and shutdown (unfortunately not quite complete but should be updated soon)
  • Upstart – Originally from Ubuntu, this will eventually replace the old init system leading to faster bootup time

Graphics/Multimedia

  • GNOME Cheese – a webcam photo and video creation utility
  • PulseAudio – updated and now default

Java

  • OpenJDK – A switch from IcedTea. Closer alignment with Sun Open Source Java

SoftwareUpdates

  • Firefox 3.0 (almost) – Not quite complete but massive improvements over Firefox 2
  • Eclipse 3.3.1
  • Perl 5.10 – many improvements
  • OpenOffice 2.4 – many new features
  • Kernel 2.6.25

Installer (Anaconda)

  • More flexibility in installation
  • Partition Resizing – A very welcome option to allow resizing EXT2/EXT3/NTFS partitions before installation (esp when dual booting with that other OS)
  • Rescue Mode – improved now with FirstAidKit

You can download Fedora 9 using the standard mirrors or using the Torrent (recommended).

Please user the Fedora-List mailing list or any of the forums for help. I have published my Personal Fedora 9 Installation Guide which should provide people with some hints for people eager to try it out. Lots more to do!

Fedora 9 as I have examined for a few weeks now is definitely far more polished than the past releases. I am sure people will like it! A more thorough examination to follow. Till then …

… I hope you like the smell of Sulphur.

Download Older Versions of Fedora

A frequently asked question is: Where can I find a specific older version of Fedora? The correct answer is: If you CANNOT find it on the official Fedora Mirror List, then chances are it is too old and not supported.

Unless you need an older version for some very specific task, I strongly recommend that you use a recent version of Fedora.

To find an older version, start by going through the mirrors to see if you can find a site that is physically closer to you (for faster downloads). If you cannot find the version on a mirror, try downloading from Redhat’s site (below).

Some things to note:

  • If a DVD image is not available try to generate your own DVD from CD’s.
  • The SRPM ISO images are for source code and not useful for running and/or installing.
  • The follow links could be removed at any point in the future.
  • The rescue-CD is not needed for installing/running but maybe helpful to boot or fix an existing installation.
  • Since you need to download each ISO individually, make sure to verify the MD5SUM or SHA1SUM.

Download Links:

Fedora Version Architecture Install CD’s Rescue-CD DVD
Fedora Core 1 i386 3
x86_64 3
Fedora Core 2 i386 4 yes yes
x86_64 4 yes
Fedora Core 3 i386 4 yes yes
x86_64 4 yes
Fedora Core 4 i386 4 yes yes
x86_64 5 yes yes
ppc 5 yes
Fedora Core 5 i386 5 yes yes
x86_64 5 yes yes
ppc 5 yes yes
Fedora Core 6 i386 5 yes yes
x86_64 6 yes yes
ppc 6 yes yes

Fedora 7 and newer no longer use “Core” as part of the release name.

Fedora Version Architecture Media Type
Fedora 7 i386 DVD + Rescue CD
i386 Live CD
x86_64 DVD + Rescue CD
x86_64 Live DVD
ppc DVD + Rescue CD
Fedora 8 i386 DVD + Rescue CD
i686 Live CD
x86_64 DVD + Rescue CD
x86_64 Live DVD
ppc DVD + Rescue CD
ppc Live CD
Fedora 9 i386 DVD, 6-CD Set
i686 Live CDs (Gnome, KDE)
x86_64 DVD, 7-CD Set
x86_64 Live CDs (Gnome, KDE)
ppc DVD, 7-CD Set
Fedora 10 i386 DVD, 6-CD Set
i686 Live CDs (Gnome, KDE)
x86_64 DVD, 6-CD Set
x86_64 Live CDs (Gnome, KDE)
ppc DVD, 7-CD Set
Fedora 11 i386 DVD, 6-CD Set
i686 Live CDs (Gnome, KDE)
x86_64 DVD, 6-CD Set
x86_64 Live CDs (Gnome, KDE)
ppc DVD, 7-CD Set
Fedora 12 i386 DVD, 5-CD Set
i686 Live CDs (Gnome, KDE)
x86_64 DVD, 5-CD Set
x86_64 Live CDs (Gnome, KDE)
ppc DVD, 6-CD Set
Fedora 13 i386 DVD, 5-CD Set
i686 Live CDs (Gnome, KDE)
x86_64 DVD, 5-CD Set
x86_64 Live CDs (Gnome, KDE)
Fedora 14 i386 DVD, 5-CD Set
i686 Live CDs (Gnome, KDE)
x86_64 DVD, 5-CD Set
x86_64 Live CDs (Gnome, KDE)

Related:
Fedora Public Mirror List
How to download Fedora

Older versions of CentOS can be found here: http://vault.centos.org/

UPDATE: 10/04/2008 – Updated all links to archives.fedoraproject.org
UPDATE: 03/31/2009 – Updated for Fedora 7 and later. No installation CD sets are available.
UPDATE: 02/22/2010 – Added Fedora 9 and 10.
UPDATE: 03/23/2012 – Added Fedora 11-14.