Discuss July 2022

discuss@lists.centos.org

13 participants
9 discussions

Installing mdadm and C7 on new computer
by H 19 Oct '22

19 Oct '22

I have a new computer with 2 x 2TB SSDs where I wanted to install C7 and use mdadm for RAID1 configuration and encrypting the /home partition. On the net I found https://tuxfixer.com/centos-7-installation-with-lvm-raid-1-mirroring/ which I adopted slightly with respect to partition sizes, using RAID1 for /boot and /root as well and added the /home partition with RAID1 and chose to have /home encrypted. Is there an "official/recommended/suggested" page for installing C7 and using mdadm for RAID1 in combination with LUKS encryption? As far as I can tell things seem right but would like to check before proceeding to install lots of other software. Thanks.

3 7

OT:: Multiple PHP versions
by TE Dukes 22 Aug '22

22 Aug '22

Hello, Been trying to get multiple versions of PHP on a CentOS 7 machine, off and on for the past couple months. I have followed 5 or 6 different howtos but none work. They are very similar and they seems to be done on a fresh install as most do an apache install is the steps. I setup two virtualhosts one for PHP5.6 and one for PHP 7.4. When I create a file with phpinfo, it reports back 5.6.xxx on both sites. So, I'm wondering if I need to remove the existing PHP version that is included with CentOS? Any suggestions or a better way to do this? TIA

6 13

Missing devel packages?
by Jean-Paul Chaput 27 Jul '22

27 Jul '22

Hello CentOS, After performing an update on July 23, on 9 stream, I did notice problems with egl-wayland. In the AppStream repository, the package: * egl-wayland-1.1.9-2.el9.x86_64.rpm is present, but it's "-devel" counterpart seems missing. So, if you have an older version of egl-wayland-devel installed, it complains that it cannot upgrade "egl-wayland". Same problem seems also to occurs with: * python3-greenlet-1.1.2-3.el9.x86_64.rpm Did I make a mistake or those "-devel" packages are really missing? Best, -- .-. J e a n - P a u l C h a p u t / Administrateur Systeme /v\ Jean-Paul.Chaput(a)lip6.fr /(___)\ work: (33) 01.44.27.53.99 ^^ ^^ cell: 06.66.25.35.55 home: 09.65.29.83.38 S U Sorbonne Université (former UPMC) L I P 6 Laboratoire d'Informatique de Paris VI C I A N Circuits Intégrés Analogiques & Numériques

1 0

bash script input password automatically.
by Kaushal Shriyan 26 Jul '22

26 Jul '22

Hi, I have the below commands to generate keystore.pkcs12 and keystore.jks files on CentOS Linux release 7.9.2009 (Core) openssl pkcs12 -export -clcerts -in fullchain1.pem -inkey privkey1.pem -out keystore.pkcs12 -name javasso keytool -importkeystore -srckeystore keystore.pkcs12 -srcstoretype pkcs12 -destkeystore keystore.jks -deststoretype jks -alias javasso I have created a small shell script to generate both keystore.pkcs12 and keystore.jks files. It prompts for a password. Is there a way to key in a password without prompt or non-interactive way? For example password is stored in a file and the bash script will source it instead of manually typing the password. Please suggest. Thanks in advance. Best Regards, Kaushal

3 2

selinux / duplicate subject to a custom named one
by Leon Fauster 22 Jul '22

22 Jul '22

Hey everyone, I wonder if I could copy an selinux subject (processes / httpd) to a local named one. So that it gets the same configuration as the source e.g.: httpd_exec_t -> httpd_microservice_exec_t The problem here: Some http microservices written in golang do get the same label as apache httpd (this is intentional for having a confined service): # ls -laZ /usr/libexec/myservice -rwxr-xr-x. 1 root root system_u:object_r:httpd_exec_t:s0 5168952 22. Jul 17:11 /usr/libexec/myservice Unfortunately, these webservices need access to /proc (e.g. for enumerating the sending queue via /proc/sys/net/core/somaxconn). Instead installing a module that allows this for all "httpd_t" allow httpd_t sysctl_net_t:file read; I would like to have a custom configuration thats a duplication of the http_t one. The module would then only allow read access for applications that really need it. Is that possible? Any other straight approach available? -- Thanks Leon

1 0

how to wild-card autofs mount - ?
by lejeczek 15 Jul '22

15 Jul '22

Hi guys. any autofs wizadm reading this and can tell how to "wild-card" this: /home/e23/U: -fstype=nfs4,acl 10.3.3.1:/USER-HOME/e23 I tried $USER in obvious place but it did not mount. many thanks, L.

2 1

Special characters in bash strings
by H 11 Jul '22

11 Jul '22

I have run into a bash variable string problem that I think I have nailed down to the variable string containing a tilde (~). Not sure if my conclusion is correct and could use some help. To make a long(er) story short, an associative array variable was created: p[work_path]="~/projects/test/" and referenced in the following format in the shell script: "${p[work_path]}" To my consternation this worked fine in some places but not in others. I tried to use the above construct when piping output, as part of a file reference when calling psql from the command line and when referencing an xslt file with xsltproc. In some places it worked, in others it did not but when I substituted the variable reference above with the path in clear text itself it then worked. It looks like there are some nuances on variable substitution that I have yet to learn, perhaps tied to the use of the tilde since using the variable p[work_path]="/home/user/projects/test/" seemed to work in all places. Pointers welcome!

4 5

PHP 7.4 from the Appstream repo
by Valere Binet 09 Jul '22

09 Jul '22

Hi, Tenable is complaining that our CentOS Stream release 8 system is vulnerable because it has php 7.2.24-1.module_el8.2... and it should have php 7.4.19-1.module_el8.5 On the mirror, I can see the PHP 7.4.19-1 and 7.4.19-2 in <mirror>/centos/8-stream/Appstream/x86_64/os/packages However, dnf list is stuck at 7.2.24-1 dnf clean all didn't help. How do I get my systems to "see" the 7.4 packages? The remi repo is not a good option for my company, we'd rather use the Appstream package since it is there. Are there reasons not to upgrade? If yes, does RedHat plan to apply the security updates to 7.2? Thank you in advance for any feedback Valère Binet

3 3

Re: [CentOS] Special characters in bash strings
by H 08 Jul '22

08 Jul '22

On 07/06/2022 11:27 PM, Chris Schanzle wrote: > Agree with Gordon's other response having specific examples of where it worked and didn't work would help us help you, but these things can get messy quickly. > > Since you quoted the tilde path, it is not expanded when assigned to your array. Take out the quotes to have it expanded at the time of assignment. If instead you want it expanded later, use eval. > > x="~/.bashrc" > $ echo "$x" $x; ls -l $x > ~/.bashrc ~/.bashrc > ls: cannot access '~/.bashrc': No such file or directory > > $ eval ls -l $x > -rw-r--r-- 1 schanzle mygroup 8720 Mar 4 15:46 /home/schanzle/.bashrc > > $ (ls -l $x) > ls: cannot access '~/.bashrc': No such file or directory > > $ bash -c "ls -l $x" > -rw-r--r-- 1 schanzle mygroup 8720 Mar 4 15:46 /home/schanzle/.bashrc > > > # no quotes = expansion at assignment > $ x=~/.bashrc > $ echo "$x" $x; ls -l $x > /home/schanzle/.bashrc /home/schanzle/.bashrc > -rw-r--r-- 1 schanzle mygroup 8720 Mar 4 15:46 /home/schanzle/.bashrc > > > Hope that helps, > Chris > > On 7/6/22 9:41 PM, H wrote: >> I have run into a bash variable string problem that I think I have nailed down to the variable string containing a tilde (~). Not sure if my conclusion is correct and could use some help. >> >> To make a long(er) story short, an associative array variable was created: >> >> p[work_path]="~/projects/test/" >> >> and referenced in the following format in the shell script: >> >> "${p[work_path]}" >> >> To my consternation this worked fine in some places but not in others. I tried to use the above construct when piping output, as part of a file reference when calling psql from the command line and when referencing an xslt file with xsltproc. >> >> In some places it worked, in others it did not but when I substituted the variable reference above with the path in clear text itself it then worked. >> >> It looks like there are some nuances on variable substitution that I have yet to learn, perhaps tied to the use of the tilde since using the variable p[work_path]="/home/user/projects/test/" seemed to work in all places. >> >> Pointers welcome! >> >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> https://lists.centos.org/mailman/listinfo/centos Thank you, I read up on bash expansion of tilde and realized substituting $HOME for ~ would be the best and would avoid any other unforeseen complications. Once I had done that the script worked.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2022