Discuss November 2021

discuss@lists.centos.org

51 participants
31 discussions

UID/GID migration vom C6 to C8
by Thomas 15 Nov '21

15 Nov '21

Hello. We have to migrate an old Centos 6 to Centos 8. C6 has UID/GID starting at number 500. I the Users should possibily keep the existing UID/GID as on the old system. I changed on the Centos 8 system, in /etc/login.defs, the lines UID_MIN/SYS_UID_MAX and GID_MIN/SYS_GID_MAX: # # Min/max values for automatic uid selection in useradd # UID_MIN 500 UID_MAX 60000 # System accounts SYS_UID_MIN 201 SYS_UID_MAX 499 # # Min/max values for automatic gid selection in groupadd # GID_MIN 500 GID_MAX 60000 # System accounts SYS_GID_MIN 201 SYS_GID_MAX 499 and extracted all users and groups with UID/GID greater than 499 from the old system and inserted in the corresponding files (passwd/groups/shadows) on the new system. So wanted to ask if this is a valid thing to do? Especially regarding security of the new system. Can it create problems in the future (updates etc.)? It is a simple LAMP server. Thanks, Thomas

3 2

CentOS 9-stream modules?
by Chris Adams 15 Nov '21

15 Nov '21

I started looking at 9-stream a bit... and I notice there are no package modules. All the things that were modules in 8/8-stream appear to have been folded back into the base OS, with no variants included (like different versions of MariaDB and php for example). Is this expected to be the way forward, or are modules just still to be filled out? -- Chris Adams <linux(a)cmadams.net>

3 3

RADVd and DHCPv6?
by Walter H. 14 Nov '21

14 Nov '21

Hello, these are my settings in radvd.conf interface br0 { AdvSendAdvert on; AdvManagedFlag on; AdvOtherConfigFlag on; MinRtrAdvInterval 5; MaxRtrAdvInterval 15; route fe80::1/64 { AdvRouteLifetime infinity; AdvRoutePreference high; }; }; in general I use stateful DHCPv6 (AdvManagedFlag on), but is there a way to have some devices (Android) get their IPv6 by SLAAC? Thanks, Walter

1 0

Install OpenSSL 1.1.1 on CentOS Linux release 7.9.2009 (Core).
by Kaushal Shriyan 13 Nov '21

13 Nov '21

Hi, I have downloaded Python 3.10.0 on CentOS Linux release 7.9.2009 (Core). I have the below openssl and mariadb package installed on CentOS 7.9 # rpm -qa | grep openssl openssl-libs-1.0.2k-22.el7_9.x86_64 openssl-devel-1.0.2k-22.el7_9.x86_64 openssl-1.0.2k-22.el7_9.x86_64 #rpm -qa | grep mariadb mariadb-libs-5.5.68-1.el7.x86_64 mariadb-5.5.68-1.el7.x86_64 mariadb-server-5.5.68-1.el7.x86_64 mariadb-devel-5.5.68-1.el7.x86_64 # #mysql -p Enter password: Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 2 Server version: 5.5.68-MariaDB MariaDB Server Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> Bye # #wget https://www.python.org/ftp/python/3.10.0/Python-3.10.0.tgz #tar xzf Python-3.10.0.tgz #cd Python-3.10.0 #./configure --enable-optimizations #make altinstall # python3.10 Python 3.10.0 (default, Nov 6 2021, 14:56:25) [GCC 4.8.5 20150623 (Red Hat 4.8.5-44)] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import mysql.connector Traceback (most recent call last): File "<stdin>", line 1, in <module> ModuleNotFoundError: No module named 'mysql' >>> #cat demo_mysql_test.py import mysql.connector # python3.10 demo_mysql_test.py Traceback (most recent call last): File "/root/demo_mysql_test.py", line 1, in <module> import mysql.connector ModuleNotFoundError: No module named 'mysql' # # pip3.10 install mysql-connector-python WARNING: pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/mysql-connector-python/ WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/mysql-connector-python/ WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/mysql-connector-python/ WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/mysql-connector-python/ WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/mysql-connector-python/ Could not fetch URL https://pypi.org/simple/mysql-connector-python/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host=' pypi.org', port=443): Max retries exceeded with url: /simple/mysql-connector-python/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping ERROR: Could not find a version that satisfies the requirement mysql-connector-python (from versions: none) ERROR: No matching distribution found for mysql-connector-python WARNING: You are using pip version 21.2.3; however, version 21.3.1 is available. You should consider upgrading via the '/usr/local/bin/python3.10 -m pip install --upgrade pip' command. As of Python 3.10, OpenSSL 1.1.1 or newer is required: https://www.python.org/dev/peps/pep-0644/ Please guide me in installing OpenSSL version 1.1.1 Thanks in advance and I look forward to hearing from you. Best Regards, Kaushal

6 9

Gnome unlocks all desktop sessions
by Pete Huckelba 09 Nov '21

09 Nov '21

All, I am trying to figure out the logic of why Gnome is unlocking all of my desktop sessions. In my office I am logged into a CentOS 7 Gnome desktop, X :0. I then lock the screen and go home. Once home, I log into my work computer and start a new vncserver on :1. If I lock and then unlock :1, ALL desktop sessions are unlocked, including :0. This can be observed with a laptop and watching :0 unlock when unlocking VNC session :1, or by launching multiple VNC servers. In one test I created vnc sessions on :1, :2, :3, :4, I connected to each and locked each desktop. I then unlocked one session and noticed all sessions unlocked at the same time. While the unlocking of VNC :1-:4 is quirky, at least it is still protected by the authentication provided by VNC; the unlocking of :0 is the trouble. Can anyone provide clarity or a work around to this? -Pete tigervnc-server.x86_64 1.8.0-22.el7

1 0

Firewall question
by Jerry Geis 09 Nov '21

09 Nov '21

Hi - When updating my CentOS 7 - firewalld why does the virt-manager loose connections to all GUI's ? I just close the virt-manager main window - select the virt-manager from gnome side panel and re-run - and then they all come back after you click on them - but why is the connection to the GUI lost ? Can I prevent that somehow ? Thanks, Jerry

1 0

your thoughts on dnf-makecache
by Götz Reinicke 09 Nov '21

09 Nov '21

Hi, From time to time I see different errors for dnf-makecache in the logs. e.g. „Errors during downloading metadata“, „Couldn't connect to server for“, „Timeout was reached“, „Couldn't resolve host name " or „Operation too slow“. In all cases, a restart of the service solves the „problem“ and in other cases the next run dose it. Beside having the errors, our current service monitoring triggers in most cases a warning message, and depending on the solution recovers too, which makes me wonder what would be the best practice for such situation. a) do I need dnf-makecache? Will it speed up things so much and makes package management much more easy, so having some errors is o.k.? b) adjust the config for dnf-makecache, so it will trigger less errors? c) adjust our monitoring to ignore some errors or be more soft with triggering warnings? C is the least preferred option right now. What do you think, how do you handle dnf-makecache? Thanks for feedback and suggestions. Götz

2 2

systemd does not generate both StandardOutput and StandardError files in /var/log/ directory
by Kaushal Shriyan 09 Nov '21

09 Nov '21

Hi, I am running CentOS Linux release 7.9.2009 (Core). I have created a systemd service for a java service. I want to capture both stdout and stderr to files under /var/log directory. # cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) # # rpm -qa | grep systemd systemd-sysv-219-78.el7_9.3.x86_64 systemd-libs-219-78.el7_9.3.x86_64 systemd-219-78.el7_9.3.x86_64 # cat /etc/systemd/system/smartresponse.service [Unit] Description=Smart Response Service [Service] WorkingDirectory=/opt/demo ExecStart=/bin/java -jar old2-wsb-smart-response-0.0.2-SNAPSHOT.jar Type=simple Restart=on-failure RestartSec=10 StandardOutput=file:/var/log/smartresponseserviceoutput.log StandardError=file:/var/log/smartresponseserviceerror.log [Install] WantedBy=multi-user.target # The files /var/log/smartresponseserviceoutput.log and /var/log/smartresponseserviceoutput.log are not created. Please guide. Thanks in advance. Best Regards, Kaushal

2 2

vice.com and firefox
by mark 05 Nov '21

05 Nov '21

Ok, last month, anyway, version of firefox. (Yeah, I know, time to update). 100% of the time, any link, anywhere, to vice.com gives me "network protocol violation". Anyone else seen this? mark

3 3

centos 7 mbr to gpt without loosing data
by Ralf Prengel 05 Nov '21

05 Nov '21

Hallo, has anyone a working tutoring how to migrate a centos 7 system from mbr to gpt without loosing data. My problem: A disk is used for docker images and niow this disk must be resized from 1,8 TB to 2,2 TB space. Three years ago when the system was installed no one thougt about this size limit. The system ist a centos 7 VM running on ESX 6.7. I found some tutorials but no one worked here. Thanka for a hint. Ralf

2 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2021