Discuss July 2017

discuss@lists.centos.org

108 participants
98 discussions

27 Oct '17

I am a bit of a noob with Linux and Centos but would like to be able to access an old external USB disk formatted JFS by OS/2. I have seen there is a kmod-jfs package on elrepo that ought to work with Centos 6 but am unsure how to install kmods without hosing my existing system... If anyone would like to be so kind to give me a short how-to, I would be very grateful. Thank you.

4 13

NFS mount on Centos 7 crashing
by Nikolaos Milas 20 Oct '17

20 Oct '17

Hello, We have a VM (under KVM - a VPS service by our ISP) running CentOS 7. On it we have 2 NFS mounts, one for backup and one as a live file system (where there are two user homes as well): ----------------------------------------------------------------------------------------------------------------------- # cat /etc/fstab /dev/mapper/centos-root / xfs defaults 0 0 UUID=7a3ae70a-8ef3-463b-8f5b-be4e2e7be894 /boot xfs defaults 0 0 /dev/mapper/centos-swap swap swap defaults 0 0 10.201.40.34:/data/col1/noc-bkups-1 /mnt/dd2500-1 nfs auto,noatime,nolock,bg,nfsvers=3,intr,tcp,actimeo=1800 0 0 10.201.40.34:/data/col1/hesperia-mount /hesperiamount nfs auto,noatime,nolock,bg,nfsvers=3,intr,tcp,actimeo=1800 0 0 ----------------------------------------------------------------------------------------------------------------------- This setup has been working fine for over a year, even under significant load, without issues. However, yesterday, the "live" NFS mount (/hesperiamount) has started crashing. When bootingeverything is fine, but very soonafter boot we noticed that we lose communication to the mount, although the remote storage system is accessible(without reporting any errors) and no network issues have occurred. We found that dmesg reports failures with call traces (2 examples): https://pastebin.com/GVSDbxFr https://pastebin.com/WujKQuHG This happens repeatedly/consistently (after several reboots) so we have been forced to replace the NFS mount with a local mount (on a new local virtual hard disk), to restore normal system operation. So the fstab has now become: ------------------------------------------------------------------------------------------------------------------- # cat /etc/fstab /dev/mapper/centos-root / xfs defaults 0 0 UUID=7a3ae70a-8ef3-463b-8f5b-be4e2e7be894 /boot xfs defaults 0 0 /dev/mapper/centos-swap swap swap defaults 0 0 /dev/mapper/vg2-lv1 /hesperiamount xfs defaults 0 0 10.201.40.34:/data/col1/noc-bkups-1 /mnt/dd2500-1 nfs auto,noatime,nolock,bg,nfsvers=3,intr,tcp,actimeo=1800 0 0 # 10.201.40.34:/data/col1/hesperia-mount /hesperiamount nfs auto,noatime,nolock,bg,nfsvers=3,intr,tcp,actimeo=1800 0 0 ------------------------------------------------------------------------------------------------------------------- Note that when I later mounted manually the same NFS share on the same box (in order to copy data from it using rsync), it did not crash (but it only had reads and no writes in this scenario). The share was manually mounted with the following command: # mount -vv -o auto,noatime,nolock,bg,nfsvers=3,intr,tcp,actimeo=1800 -t nfs 10.201.40.34:/data/col1/hesperia-mount /hesperiamount2 Questions: * Is this a known issue/bug? * Have we possibly made any NFS misconfigurations (which however have not caused any errors for about a year now)? * What could we do to prevent the error from occurring again? Please advise. Thanks, Nick

3 12

Update of cloud-init in CentOS 7 Extras
by Pierre Riteau 14 Sep '17

14 Sep '17

Hello, The version of cloud-init packaged in CentOS 7 Extras is rather old (0.7.5, which was released in 2014). It is missing some functionality that we would like to use, as well as important bug fixes. Before I tackle rebuilding the package myself, I would like to know if there is a plan to update extras to a newer cloud-init version, or if has anyone has already updated cloud-init and would be happy to share the spec? Many thanks, Pierre Riteau Chameleon Lead DevOps Engineer

2 4

system slowdown
by Larry Martell 13 Sep '17

13 Sep '17

I have a CentOS 6 system that has suddenly starting significantly slowing down. It runs a django app with an Apache server and MySQL server. There is plenty of disk space and no process seems to be hogging the memory or CPU. But operations that used to take 5 minutes are now taking hours and hours. Coinciding with this slow down I see these messages in /var/log/messages (this is hand typed, as I can't copy/paste or send email from this system, although for a change I do have remote access via 2 VPN hops): kernel: BUG: soft lockup - CPU#5 stuck for 67s! [khungtaskd] kernel: BUG: soft lockup - CPU#7 stuck for 67s! [khugepaged] These messages started appearing today around 7 AM, which is when users started reporting the slowdown. They are still occurring periodically and the system is still slow. Are these messages caused by the slowdown or are they the reason for it? Are they useful in tracking down the problem?

2 3

Simple OCSP server ??
by Alice Wonder 05 Sep '17

05 Sep '17

Hello list, I'm contemplating running my own CA to implement the new proposed ISP for validation of S/MIME certificates via DANE. I already use self-signed for my MX servers (with 3 1 1 dane records on TCP port 25) but I don't want to use self-signed for S/MIME for user specific x.509 certs because A) That's potentially a lot of DNS records B) That requires a hash of the e-mail addresses in DNS Instead, I will be using a wildcard in DNS with an intermediary that signs the user x.509 certificates. Using an intermediary to sign their certificates though means I can't just revoke their certificates by removing the DNS certificate, I'll need to provide an OCSP server for when one of their private keys gets compromised. I found https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.… but it looks like that is intended for enterprise, more complex than I need. Anyone know of a good simple script for providing OCSP ?? -=- Not relevant to question but just important for me to note, I will *not* be asking people to install my root certificate in their e-mail clients. I think it is a bad practice to get users in the habit of installing root certificates. I think the PKI system has way way way to many root certificates as it is. I want a world where DANE validates most certificates, and only a few root certificates are needed for things like banks where EV certificates are a must. DANE as a way to validate S/MIME I think will be a godsend to e-mail security, I hope clients implement it.

2 5

rsyslog stops logging on service reload?
by John Jasen 18 Aug '17

18 Aug '17

I have multiple servers running stock CentOS 7 rsyslog 7.4.7-16.el7, which are configured to log locally and over TCP to a remote logserver, also running stock CentOS 7 rsyslog. The remote server uses imptcp to receive, and pretty basic rules to parse and commit to disk. I have several systems that log prolifically, but periodically, they stop soon after the remote log server HUPs (daily logrotate). Very soon after they stop logging (completely, even to local files), the services on these systems block, and our monitoring system starts alerting. Restarting rsyslog on the clients proves ineffectual. The situation may clear itself without intervention after 90 minutes to several hours. However, this does not happen on all client systems in a similar situation (CentOS 7, large volume of constant log data); nor does it happen daily. Any ideas as to what's going on? Thanks in advance.

2 2

fcitx-anthy request (for Japanese users)
by Scott Robbins 18 Aug '17

18 Aug '17

Apropos of the discussion this week with the person trying to get Chinese input going on CentOS, I filed a request for enhancement with Fedora's EPEL to add fcitx-anthy as a package. Currently, I'm able to get it working with the Fedora 20 rpm, but it would be nice to not have to search for it. It's been assigned (I'm not sure how meaningful that is, depending upon the assignee's free time), but anyone who would like to add their support to the request can view the bug at https://bugzilla.redhat.com/show_bug.cgi?id=1471924 -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

2 17

What RH-like on a Dell XPS 15 (9590)?
by wwp 05 Aug '17

05 Aug '17

Hello there, I've just got a Dell XPS 15 (9590) at work and need to set up a stable GNU/Linux system on it. I thought of CentOS7, but.. obviously its kernel can't run on this hardware. What would you recommend? Waiting for CentOS8 is not an option unless it's a question of few weeks. Are there respins of the CentOS7 DVDs w/ more top-recent kernels? I'm know of Fedora 26 or course, and not willing to switch to Ubuntu 16.10 at all. Regards, -- wwp

18 54

CentOS users: please try and provide feedback on Fedora Boltron
by Matthew Miller 05 Aug '17

05 Aug '17

Please take a look at http://www.itworld.com/article/3211046/linux/red-hats-boltron-snaps-togethe… and https://fedoramagazine.org/announcing-boltron/ which has a walkthrough questionnaire at the bottom. Your feedback very appreciated. -- Matthew Miller <mattdm(a)fedoraproject.org> Fedora Project Leader

11 46

ipa rpm conflicts
by lejeczek 04 Aug '17

04 Aug '17

does anybody see this: unning transaction Warning: RPMDB altered outside of yum. ** Found 8 pre-existing rpmdb problem(s), 'yum check' output follows: ipa-admintools-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-admintools: ipa-admintools-4.4.0-14.el7.centos.noarch ipa-client-4.4.0-14.el7.centos.x86_64 has installed conflicts freeipa-client: ipa-client-4.4.0-14.el7.centos.x86_64 ipa-client-common-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-client-common: ipa-client-common-4.4.0-14.el7.centos.noarch ipa-common-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-common: ipa-common-4.4.0-14.el7.centos.noarch ipa-python-compat-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-python-compat: ipa-python-compat-4.4.0-14.el7.centos.noarch ipa-server-4.4.0-14.el7.centos.x86_64 has installed conflicts freeipa-server: ipa-server-4.4.0-14.el7.centos.x86_64 ipa-server-common-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-server-common: ipa-server-common-4.4.0-14.el7.centos.noarch ipa-server-dns-4.4.0-14.el7.centos.noarch has installed conflicts freeipa-server-dns: ipa-server-dns-4.4.0-14.el7.centos.noarch this in .rpm I guess and started appearing after upg to 7.3. *freeipa* is naming convention Fedora uses, right? Some remnants rebase did not take care of? regards, L.

4 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2017