This is a fairly quiet week with the biggest changes being focussed on improving support for nvidia cards on Ubuntu Jammy. Unusually, a new feature has been added for SL7, this should help some sites with their transition to a newer platform. Here are the details of the notable changes…

auditd

The LCFG auditd component has been updated to the latest version on SL7. This enables support for the newer resources that allow watching of arbitrary files. As well as being useful for security monitoring, this is handy when you need to discover exactly what management scripts are being run and what data is being accessed.

For example, they can be used like this to monitor the execution of any scripts in a directory (or its sub-directories):

!auditd.watch_files        mADD(netdir)
auditd.watch_path_netdir   /usr/lib/net
auditd.watch_perms_netdir  rx
auditd.watch_key_netdir    netinf

Multiple watch rules may use the same key name. The key makes it easy to search the auditd logs for related events, like this:

ausearch --start yesterday --key netinf --interpret

Kernel

The Ubuntu INF_TEST kernel version has been updated to 5.15.0-84.93.

On Ubuntu Jammy there is new support for the 6.2.0 HWE kernel, this is not yet the standard version, it may be enabled by defining the KERNEL_SERIES_6020 package option. If you are interested in using a newer HWE kernel on Jammy please test this and let us know how it goes.

The 6.2.0 kernel may be tested like this:

!profile.pkgcppopts mADD(-DED_KERNEL_HWE)
!profile.pkgcppopts mADD(-DKERNEL_SERIES_6020)

nvidia support

On Ubuntu Jammy the 535 series driver has been updated to the latest release – 535.104.12 – and new support has been added for the legacy 470 series driver for older hardware. There are new lcfg/options/video_nvidia_470.h and lcfg/options/video_nvidia_470.h headers which make it easier to use the correct driver version. As these packages provide pre-built binaries for the kernel modules, dkms is no longer included on Jammy.

To ensure all dependencies are satisfied, even on very minimalist installations, the LCFG_OPTIONS_LIBGL and LCFG_OPTIONS_LIBEGL package options are now enabled.

XRDP

The standard window-manager startup script for XRDP sessions – startwm-lcfg.sh – has been improved to fix a problem with cleaning up old log files (see bug#1336 for details).

Software

There are two new package options for Ubuntu: LCFG_OPTIONS_DCONF_SETTINGS and LCFG_OPTIONS_LIBEGL. The LCFG_OPTIONS_DCONF_SETTINGS option has been extracted so that we can easily replace the dbus-user-session package (which doesn’t work for AFS home directories) with dbus-x11.

There are also some new dependencies for the LCFG_OPTIONS_LIBGL option that were introduced in version 23.0.4

Changes to headers and package lists

Members of the Informatics Computing team can browse all the changes to the headers and package lists.

Weekly Changes – 02/10/2023 / LCFG Project by blogadmin is licensed under a Creative Commons Attribution CC BY 3.0