
Chapter 7. Installing RHEL 6 on the cloner 129
You are now ready to use yum to install or upgrade an RPM package. To install a package,
run yum install <packagename>. The yum command will conveniently install the packages
specified and automatically resolve dependencies for you. Note that you should not specify
the package version on the command line, only the package name.
7.2.4 Turning off unneeded services
There are a number of services that are started in a RHEL 6 minimum system. To keep the
cloner as efficient as possible, some of these services can be turned off by performing the
following steps:
1. Turn off the following services with the chkconfig command:
# chkconfig iptables off
# chkconfig ip6tables off
# chkconfig auditd off
# chkconfig abrtd off
# chkconfig atd off
# chkconfig mdmonitor off
2. You may choose to leave these services on, or turn others off. You can review which
services are now configured to start in run level 3 by running the following chkconfig
command:
# chkconfig --list | grep 3:on
abrtd 0:off 1:off 2:off 3:on 4:off 5:on 6:off
cpi 0:off 1:on 2:on 3:on 4:on 5:on 6:off
cpuplugd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off
dumpconf 0:on 1:on 2:on 3:on 4:on 5:on 6:on
lvm2-monitor 0:off 1:on 2:on 3:on 4:on 5:on 6:off
messagebus 0:off 1:off 2:on 3:on 4:on 5:on 6:off
mon_statd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
netfs 0:off 1:off 2:off 3:on 4:on 5:on 6:off
network 0:off 1:off 2:on 3:on 4:on 5:on 6:off
postfix 0:off 1:off 2:on 3:on 4:on 5:on 6:off
rhnsd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Note: Red Hat signs each RPM with a private GPG key, which is compared to your public
key every time a package is installed. This method ensures that the RPM is a genuine,
unaltered package. When installing an RPM, if you ever see a message similar to Header
V3 DSA signature: NOKEY, key ID 897da07a, then either the correct GPG key has not
been imported, or the package itself has been altered.
Note: You should only disable the iptables service if you are on a trusted network.
Otherwise, you will need to configure iptables to allow network traffic for the VNC server
and NFS, as well as any other services that require network access.
For more information about configuring iptables for NFS traffic, see the article located
at the following address:
http://www.redhat.com/magazine/010aug05/departments/tips_tricks/
Also, turning on and tuning a firewall is briefly discussed in 11.1.3, “Turning on a
firewall” on page 183.
Komentarze do niniejszej Instrukcji