Arm-dev August 2018

arm-dev@lists.centos.org

17 participants
20 discussions

Security auditing service
by Robert Moskowitz 07 Aug '18

07 Aug '18

I had to reboot a server this morning. I was working on one box and bumped things I should not have... Then I noticed my name server was not coming up real fast like normal. So I get on the console and notice it is waiting for something to start. It waited 3 min before giving up and getting everything else going. So after it was up, I ssh in and checked the messages and found: Dec 31 19:00:29 onlo systemd: Starting Security Auditing Service... Dec 31 19:00:29 onlo auditd[499]: Started dispatcher: /sbin/audispd pid: 501 Dec 31 19:00:29 onlo audispd: No plugins found, exiting Dec 31 19:01:59 onlo systemd: auditd.service start operation timed out. Terminat ing. Dec 31 19:03:30 onlo systemd: auditd.service stop-final-sigterm timed out. Killi ng. Dec 31 19:03:30 onlo systemd: auditd.service: control process exited, code=kille d status=9 Dec 31 19:03:30 onlo systemd: Failed to start Security Auditing Service. Dec 31 19:03:30 onlo systemd: Unit auditd.service entered failed state. Dec 31 19:03:30 onlo systemd: auditd.service failed. Ignore the timestamp. This occurs before the network is up and chrony has not set the time. Cubies do not have a battery RTC. But I believe this is recent. I had gone a LONG time without updating and applied some 180 rpms updates (in careful batches). So this MAY be something new. systemctl -l status auditd Shows ● auditd.service - Security Auditing Service Loaded: loaded (/usr/lib/systemd/system/auditd.service; enabled; vendor prese t: enabled) Active: failed (Result: signal) since Wed 1969-12-31 19:03:30 EST; 48 years 7 months ago Docs: man:auditd(8) https://github.com/linux-audit/audit-documentation Process: 498 ExecStart=/sbin/auditd (code=killed, signal=KILL) Dec 31 19:00:29 onlo.htt-consult.com systemd[1]: Starting Security Auditing Serv ice... Dec 31 19:00:29 onlo.htt-consult.com auditd[499]: Started dispatcher: /sbin/audi spd pid: 501 Dec 31 19:01:59 onlo.htt-consult.com systemd[1]: auditd.service start operation timed out. Terminating. Dec 31 19:03:30 onlo.htt-consult.com systemd[1]: auditd.service stop-final-sigte rm timed out. Killing. Dec 31 19:03:30 onlo.htt-consult.com systemd[1]: auditd.service: control process exited, code=killed status=9 Dec 31 19:03:30 onlo.htt-consult.com systemd[1]: Failed to start Security Auditi ng Service. Dec 31 19:03:30 onlo.htt-consult.com systemd[1]: Unit auditd.service entered fai led state. Dec 31 19:03:30 onlo.htt-consult.com systemd[1]: auditd.service failed. So what may be going on? My web server, medon.htt-consult.com is practically identical and is not exhibiting this behavior. Dec 31 19:00:30 medon auditd[499]: Started dispatcher: /sbin/audispd pid: 501 Dec 31 19:00:30 medon auditd[499]: Init complete, auditd 2.8.1 listening for events (startup state enable)

2 2

Security Audit service failing
by Robert Moskowitz 07 Aug '18

07 Aug '18

This is on a Cubieboard2 I took the CentOS-Userland-7-armv7hl-generic-Minimal-1804-sda image, did yum install policycoreutils-python passwd hostnamectl set-hostname nevia.htt-consult.com adduser -c "Robert Moskowitz" -G wheel rgm passwd rgm timedatectl set-timezone America/Detroit vi /etc/ssh/sshd_config # change port number semanage port -a -t ssh_port_t -p tcp nnn systemctl restart sshd.service firewall-cmd --permanent --add-port=nnn/tcp firewall-cmd --permanent --remove-service=ssh firewall-cmd --reload Yum update poweroff power on, and on the console see messages: [ OK ] Started Tell Plymouth To Write Out Runtime Data. [ OK ] Started Import network configuration from initramfs. Starting Create Volatile Files and Directories... [ OK ] Started Create Volatile Files and Directories. Starting Security Auditing Service... [ *** ] A start job is running for Security...ting Service (3min 3s / 3min 8s) Then it takes off. I could scan the console capture if you need the messages immediately after it finally took off. But I have noticed this service failing to start on one of my other boxes, not not on the other two. So it revolves around something installed or not installed. But with this base of an install, perhaps you can figure out what the problem is? thanks

1 1

RPI / kernel config
by Stephan Guilloux 06 Aug '18

06 Aug '18

Hi all, Is there any way to know the compilation options used to build the kernel ? At least, on a x86_64, we have something like config-3.10.0-862.3.3.el7.x86_64 On raspberry, I did not find anything in /proc nor in /boot. Regards, Stephan.

3 5

Re: [Arm-dev] Cubieboard5 performance
by Patrick Laimbock 06 Aug '18

06 Aug '18

Hi Bob, Pablo, -----Original message----- > >> Finally, the main thing about that board (about that SoC actually), > >> is that SATA is not native, it is an integrated SATA-USB, so > >> performance may be an issue. > >> > > > > Ouch. this is for a mail server that has extensive disk I/O. So > > forget this board. > > > >> Personally I love the BananaPi M2Ultra, 2G RAM, 4 Cores and native > >> SATA. The only problem is that SATA support is not integrated yet in > >> any kernel, so it needs external patches. > > Of course if there is a quad core 64-bit ARM with sata under $100 that > > runs at 5V; that would do nicely! It costs more than $100 and I'm not sure if it's 5V or 12V but the new LattePanda boards might be interesting: https://www.kickstarter.com/projects/139108638/lattepanda-alpha-soul-of-a-m… BR, Patrick

2 1

What is ifcfg-link?
by Robert Moskowitz 03 Aug '18

03 Aug '18

I went looking for /etc/sysconfig/network-scripts/ifcfg-eth0 to set it up for static addressing. Instead I found ifcfg-link What is this? In the past I was usin nmcli: ifname=eth0 nmcli con delete $ifname nmcli con add type ethernet con-name $ifname ifname $ifname ip4 $your_ipv4_address/$your_ipv4_prefix gw4 $your_ipv4_gateway nmcli con mod $ifname ipv4.dns "$your_ipv4_dns1 $your_ipv4_dns2" # optionally set your MAC address # your_mac= # nmcli con mod $ifname mac "$your_mac" nmcli con up $ifname (that con add above is line wrapping in this email) ip a shows eth0; do I just use my nmcli script as I did for the 1611 image? thanks

1 3

Machiatobin network interfaces
by Skorpeo Skorpeo 03 Aug '18

03 Aug '18

Hi, I was able to install centos on the machiatobin using the iso via efi. However no network interfaces show up, I also tried to plug in a usb wifi adapter, it is recognized in dmesg but still no network interface with command ip a (only shows loopback device) or cat /proc/net/dev. Any pointers greatly appreciated. I also tried going into bios and selecting ACPI setting in the device manager menu but no change... Also, as an aside, to be able to install using the iso I had to add kernel parameter console=ttyS0,115200n8 on boot as per this post: http://macchiatobin.net/forums/topic/feedback-on-uefi-boot-with-mini-iso/. Wasn't sure if it would be helpful to document that. Incidentally, that poster also saw no network interfaces. Thanks much.

2 1

update-boot?
by Robert Moskowitz 02 Aug '18

02 Aug '18

The wiki says: Before centos-userland-release-7-5.1804, in order to activate the new kernel and edit /boot/extlinux/extlinux.conf, you had to run /usr/bin/update-boot. This is no longer valid and it is done automatically by grubby. But I just happened to look at /boot/grub/grub.conf default=0 timeout=5 splashimage=(hd0,1)/grub/splash.xpm.gz hiddenmenu title CentOS-Userland-7-armv7hl-generic-GNOME-1804 (4.14.28-201.el7.centos.armv7hl) root (hd0,1) kernel /vmlinuz-4.14.28-201.el7.centos.armv7hl ro root=UUID=be2c9311-e289-4cab-b878-89b522144d70 initrd /initramfs-4.14.28-201.el7.centos.armv7hl.img And I did the yum update that installed the 4.14.52 kernel. Should I run update-boot? /boot/klist.txt has: 4.14.28-201.el7.centos.armv7hl 4.14.52-201.el7.armv7hl

2 4

Request for the Xfce desktop
by Robert Moskowitz 01 Aug '18

01 Aug '18

I am a proponent of Xfce, especially for armv7 boards. I got introduced to Xfce with Fedora-arm 19 (or was it 18 or even 17?). I did the Gnome image install, dropped to runlevel 3, installed vncserver, and do get the gnome desktop with my notebook taking most of the performance hit. But having at least the option of installing the minimal image then doing a group install "Xfce Desktop" would be great. BTW, I did 'yum list >y.lst' and 'grep -i xfce y.lst' and came up empty handed. Is Xfce even built for arm? thanks

4 7

Extending partition on SD card on Rpi-3
by vamsi krishna 01 Aug '18

01 Aug '18

Hi Team, Being new to the Linux world, I have installed Centos for R Pi3 on a 16gb microSD card, and partitions are done by default, leaving less space for root file system. Here is what I get. This is the second time I am running into this issue. Can anyone help me with the steps to increase the size for /dev/root to 6G please. Operating System: CentOS Linux 7 (Core) CPE OS Name: cpe:/o:centos:centos:7 Kernel: Linux 4.14.27-v7.1.el7 Architecture: arm [root@rpi ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/root 1.4G 999M 347M 75% / devtmpfs 460M 0 460M 0% /dev tmpfs 464M 0 464M 0% /dev/shm tmpfs 464M 12M 452M 3% /run tmpfs 464M 0 464M 0% /sys/fs/cgroup /dev/mmcblk0p1 667M 43M 625M 7% /boot tmpfs 93M 0 93M 0% /run/user/0 Any help is highly appreciated. -- Have a nice day. Thanks and regards, Vamsi, Skype @ kvamsi.k143 +91-9704433304.

4 5

More on How to install CentOS Userland armv7hl
by Robert Moskowitz 01 Aug '18

01 Aug '18

One change, perhaps, on the dd of the image. is it possible for the progress to be reported in MB, rather than bytes? It would be more valuable to humans (kind of like the -h option in some commands). thanks

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

Arm-dev August 2018