Discuss April 2017

discuss@lists.centos.org

114 participants
89 discussions

27 Oct '17

I am a bit of a noob with Linux and Centos but would like to be able to access an old external USB disk formatted JFS by OS/2. I have seen there is a kmod-jfs package on elrepo that ought to work with Centos 6 but am unsure how to install kmods without hosing my existing system... If anyone would like to be so kind to give me a short how-to, I would be very grateful. Thank you.

4 13

Simple OCSP server ??
by Alice Wonder 05 Sep '17

05 Sep '17

Hello list, I'm contemplating running my own CA to implement the new proposed ISP for validation of S/MIME certificates via DANE. I already use self-signed for my MX servers (with 3 1 1 dane records on TCP port 25) but I don't want to use self-signed for S/MIME for user specific x.509 certs because A) That's potentially a lot of DNS records B) That requires a hash of the e-mail addresses in DNS Instead, I will be using a wildcard in DNS with an intermediary that signs the user x.509 certificates. Using an intermediary to sign their certificates though means I can't just revoke their certificates by removing the DNS certificate, I'll need to provide an OCSP server for when one of their private keys gets compromised. I found https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.… but it looks like that is intended for enterprise, more complex than I need. Anyone know of a good simple script for providing OCSP ?? -=- Not relevant to question but just important for me to note, I will *not* be asking people to install my root certificate in their e-mail clients. I think it is a bad practice to get users in the habit of installing root certificates. I think the PKI system has way way way to many root certificates as it is. I want a world where DANE validates most certificates, and only a few root certificates are needed for things like banks where EV certificates are a must. DANE as a way to validate S/MIME I think will be a godsend to e-mail security, I hope clients implement it.

2 5

ipa rpm conflicts
by lejeczek 04 Aug '17

04 Aug '17

does anybody see this: unning transaction Warning: RPMDB altered outside of yum. ** Found 8 pre-existing rpmdb problem(s), 'yum check' output follows: ipa-admintools-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-admintools: ipa-admintools-4.4.0-14.el7.centos.noarch ipa-client-4.4.0-14.el7.centos.x86_64 has installed conflicts freeipa-client: ipa-client-4.4.0-14.el7.centos.x86_64 ipa-client-common-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-client-common: ipa-client-common-4.4.0-14.el7.centos.noarch ipa-common-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-common: ipa-common-4.4.0-14.el7.centos.noarch ipa-python-compat-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-python-compat: ipa-python-compat-4.4.0-14.el7.centos.noarch ipa-server-4.4.0-14.el7.centos.x86_64 has installed conflicts freeipa-server: ipa-server-4.4.0-14.el7.centos.x86_64 ipa-server-common-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-server-common: ipa-server-common-4.4.0-14.el7.centos.noarch ipa-server-dns-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-server-dns: ipa-server-dns-4.4.0-14.el7.centos.noarch this in .rpm I guess and started appearing after upg to 7.3. *freeipa* is naming convention Fedora uses, right? Some remnants rebase did not take care of? regards, L.

4 3

Installing support for Chinese text in Centos 7
by H 18 Jul '17

18 Jul '17

I have just done a minimal installation of Centos7 followed by X Windows and the Mate desktop on a workstation. Although the default language is English, I would like to be able to write Chinese text in various applications. I seem to remember this was very easy to do in Centos 6 and Gnome: possibly only requiring only a simple 'yum groupinstall "Chinese Support"' after which I could use iBus to switch between languages. This does not seem to work in Centos 7. Suggestions? Thank you.

4 14

Getting to Mate or Xfce
by Beartooth 25 May '17

25 May '17

My wife bought a new Thinkpad, on which we had the shop install CentOS 7 (I *think* it's 7.3.) Alas!, I didn't think to specify NOT Gnome, in thunder. So of course I got it. I've tried several times to force myself to accommodate Gnome3, always with no joy. How do I get Mate or Xfce instead? Related problem: when I become root and tell it "yum update," it figures out a list of umpteen hundred rpms to update, but then runs through attempts at mirrors and keeps failing till it runs out. It failed to connect to my wireless router (or even to find it, afaict). So I plugged it into the router with an ethernet cable. No joy.

6 6

CentOS 6.8 and samba
by isdtor 23 May '17

23 May '17

Other than the original 6.8 release version 3.6.23-33, samba has not been functioning correctly for me under 6.8. The symptoms are that about 6-7 days after starting the server, users start complaining that they can no longer open documents on their share. Upon inspection, I find several, sometimes nearly a dozen smb processes owned by a single user, on top of those run under root. Stopping the service does not stop these processes. They are only killable with SIGKILL, and after that, a service restart does not result in a functioning service, i.e. connections are refused, which can be verified easily with smbclient. The only cure is a server reboot. And it is not the same user id every time it happens. Useful logs of any type are not available. I have tested -35 and -36, both show the same behaviour. This is a production server and I have no time for tinkering; downgrading to -33 and blocking samba updates is the only workaround for now.

6 12

From Networkmanager to self managed configuration files
by Andreas Benzler 17 May '17

17 May '17

I don't know who is intereseted in, http://www.centos.cms4all.org/index.php/2017/03/07/centos-7-the-journey-for… Can be a bug, because the isn't nessesery. Sincerely AndyBe

9 33

kickstart: dracut-initqueue fails due to unresolvable hostname even though network config looks perfectly ok
by Frank Thommen 16 May '17

16 May '17

Hi, kickstarting fails due to problems with host resolution, even though the network seems to be properly configured through DHCP. eno1 and eno2 are both attached to the network, but only eno1 gets an IP via DHCP. Still `curl` cannot resolve the mirror host and the kickstart host during dracut-initqueue: rdsosreport.txt ------------------------------------------------ [...] [ 14.780428] localhost kernel: IPv6: ADDRCONF(NETDEV_UP): eno1: link is not ready [ 19.977052] localhost kernel: tg3 0000:0b:00.0 eno1: Link is up at 1000 Mbps, full duplex [ 19.977118] localhost kernel: tg3 0000:0b:00.0 eno1: Flow control is off for TX and off for RX [ 19.978880] localhost kernel: tg3 0000:0b:00.0 eno1: EEE is disabled [ 19.980693] localhost kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eno1: link becomes ready [ 19.829468] localhost dracut-initqueue[992]: dhcp: PREINIT eno1 up [ 19.853734] localhost dhclient[1393]: DHCPDISCOVER on eno1 to 255.255.255.255 port 67 interval 6 (xid=0x4df19201) [ 26.030151] localhost dhclient[1393]: DHCPDISCOVER on eno1 to 255.255.255.255 port 67 interval 13 (xid=0x4df19201) [ 26.033472] localhost dhclient[1393]: DHCPREQUEST on eno1 to 255.255.255.255 port 67 (xid=0x4df19201) [ 26.033668] localhost dhclient[1393]: DHCPOFFER from 10.128.196.98 [ 26.038851] localhost dhclient[1393]: DHCPACK from 10.128.196.98 (xid=0x4df19201) [ 26.067534] localhost dracut-initqueue[992]: dhcp: BOND setting eno1 [ 28.082735] localhost dhclient[1393]: bound to 10.128.196.20 -- renewal in 21301 seconds. [ 28.456131] localhost kernel: tg3 0000:0b:00.1: irq 153 for MSI/MSI-X [ 28.456149] localhost kernel: tg3 0000:0b:00.1: irq 154 for MSI/MSI-X [ 28.456165] localhost kernel: tg3 0000:0b:00.1: irq 155 for MSI/MSI-X [ 28.456180] localhost kernel: tg3 0000:0b:00.1: irq 156 for MSI/MSI-X [ 28.456196] localhost kernel: tg3 0000:0b:00.1: irq 157 for MSI/MSI-X [ 28.570450] localhost kernel: IPv6: ADDRCONF(NETDEV_UP): eno2: link is not ready [ 34.024621] localhost kernel: tg3 0000:0b:00.1 eno2: Link is up at 1000 Mbps, full duplex [ 34.026347] localhost kernel: tg3 0000:0b:00.1 eno2: Flow control is off for TX and off for RX [ 34.028069] localhost kernel: tg3 0000:0b:00.1 eno2: EEE is disabled [ 34.029776] localhost kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eno2: link becomes ready [ 33.803606] localhost dracut-initqueue[992]: dhcp: PREINIT eno2 up [ 33.827664] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 7 (xid=0x1e8bdc4b) [ 41.000199] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 15 (xid=0x1e8bdc4b) [ 55.588353] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 18 (xid=0x1e8bdc4b) [ 74.172423] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 12 (xid=0x1e8bdc4b) [ 86.446514] localhost dhclient[1570]: DHCPDISCOVER on eno2 to 255.255.255.255 port 67 interval 9 (xid=0x1e8bdc4b) [ 95.253443] localhost dhclient[1570]: No DHCPOFFERS received. [ 95.253648] localhost dhclient[1570]: No working leases in persistent database - sleeping. [ 95.282175] localhost dracut-initqueue[992]: dhcp: FAIL [ 95.353255] localhost dracut-initqueue[992]: RTNETLINK answers: File exists [ 102.502688] localhost dracut-initqueue[992]: Warning: can't find installer mainimage path in .treeinfo [ 102.517568] localhost dracut-initqueue[992]: % Total % Received % Xferd Average Speed Time Time Time Current [ 102.525942] localhost dracut-initqueue[992]: Dload Upload Total Spent Left Speed [ 102.534277] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 1 seconds. 3 retries left. [ 103.527190] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 2 seconds. 2 retries left. [ 105.533677] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 4 seconds. 1 retries left. [ 109.542329] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: our.centos.mirror; Unknown error [ 109.551613] localhost dracut-initqueue[992]: Warning: Downloading 'http://our.centos.mirror/7.2.1511/os/x86_64/LiveOS/squashfs.img' failed! [ 109.615143] localhost dracut-initqueue[992]: % Total % Received % Xferd Average Speed Time Time Time Current [ 109.624698] localhost dracut-initqueue[992]: Dload Upload Total Spent Left Speed [ 109.625018] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 1 seconds. 3 retries left. [ 110.624800] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 2 seconds. 2 retries left. [ 112.631351] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: timeout Will retry in 4 seconds. 1 retries left. [ 116.639935] localhost dracut-initqueue[992]: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: our.kickstart.server; Unknown error [ 116.650727] localhost dracut-initqueue[992]: Warning: failed to fetch kickstart from http://our.kickstart.server/ks.cgi [ 242.126427] our.client dracut-initqueue[992]: Warning: dracut-initqueue timeout - starting timeout scripts [... 120 times this warning ...] [ 304.648460] our.client systemd[1]: Received SIGRTMIN+20 from PID 991 (plymouthd). [ 304.650862] our.client dracut-initqueue[992]: Warning: /dev/root does not exist [ 304.659840] our.client systemd[1]: Starting Dracut Emergency Shell... [ 304.684459] our.client systemd[1]: Received SIGRTMIN+21 from PID 991 (plymouthd). [... exiting to emergency shell ...] dropped to the emergency shell, the network config looks absolutely ok: $ ip route default via 10.128.196.97 dev eno1 10.128.196.0/24 dev eno1 proto kernel scope link src 10.128.196.20 169.254.95.0/24 dev enp0s20u1u5 proto kernel scope link src 169.254.95.120 $ `ip a` shows the correct IP address for eno1 and /etc/resolv.conf has all required nameservers. From the emergency shell both hostnames (our.centos.mirror and our.kickstart.server) are perfectly resolvable and accessible. The used PXE config is: LABEL CentOS-7 kernel centos-7.2/vmlinuz append initrd=centos-7.2/initrd.img ip=dhcp inst.repo=http://our.centos.mirror/7.2.1511/os/x86_64 inst.ks.sendmac inst.ks=http://our.kickstart.server/ks.cgi Any idea, why curl cannot resolve the two hostnames or how I can debug this further? Cheers frank

3 5

SCSI drives and Centos 7
by Gregory P. Ennis 14 May '17

14 May '17

Everyone, about 4 years ago, I tried to install CentOS 6 on a Supermicro server with SCSI drives using a LSI raid system. I could never figure out or find a way to make the installation disc of Centos 6 identify the SCSI drives. The installation disc for Centos 5 identified the SCSI drives without a problem. I finally gave up on Centos 6 and installed Centos 5 and the system has worked very well for the last 4 years Now that Centos 5 has been retired, I would like to install Centos 7 on this server. Does the install disc for Centos 7 have the same issues with SCSI drives as Centos 6? Has anyone used Centos 7 on SCSI drives, or am I going to need to get an upgrade of the server? The server is working great. Greg Ennis -- Gregory P. Ennis, M.D., M.R.O. Medical Director EcCare Health Centers www.EcCare.com 972-659-1234

7 13

Firefox for CentOS
by Johnny Hughes 03 May '17

03 May '17

I am currently building the latest Firefox updates and I have noticed that they have upgraded the CentOS-7 Firefox from the ESR tree (45.8) to the mainline tree (Currently firefox-52.0). They have left EL5 and EL6 at the ESR level (45.8.0-2). EL7: https://rhn.redhat.com/errata/RHSA-2017-0461.html EL5 and EL6: https://rhn.redhat.com/errata/RHSA-2017-0459.html As stated above, I am currently building and testing these, so they are not yet released .. just preparing people for the changes. Thanks, Johnny Hughes

7 19

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2017