Discuss October 2014

discuss@lists.centos.org

199 participants
222 discussions

Upgrading to CentOS-7 on a new partition
by Timothy Murphy 28 Oct '14

28 Oct '14

I would like to upgrade a CentOS-6.5 home server to CentOS-7 on a new partition. What is the simplest way to achieve this? I would like to be able to boot into either version of CentOS until I am sure the new version is running OK. Incidentally, I think most people today must have enough space on their hard drive to install a new OS on a new partition - it is surprising that this option never seems to be mentioned in upgrade documentation. -- Timothy Murphy e-mail: gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin 2, Ireland

4 10

tinydns exceeds "holdoff time" on startup under CentOS 7
by Boris Epstein 27 Oct '14

27 Oct '14

Hello listmates, Somehow or other my DNS services that are part of the ndjbdns-1.06-1.el7.x86_64 package would not start properly at startup. When I then start them up using systemctl: systemctl start dnscache systemctl start tinydns they start just fine. >From the log I got the following for tinydns: Oct 24 15:01:43 ns99 tinydns[1867]: tinydns: version 1.06: starting: Oct-24 2014 15:01:43 EDT Oct 24 15:01:43 ns99 tinydns[1867]: tinydns: DEBUG_LEVEL set to `1' Oct 24 15:01:43 ns99 tinydns[1867]: tinydns: DATALIMIT set to `300000' bytes Oct 24 15:01:43 ns99 tinydns[1867]: tinydns: could not bind UDP socket Oct 24 15:01:43 ns99 systemd[1]: tinydns.service holdoff time over, scheduling restart. Any idea why that would happen? Any idea how to increase the holdoff time in the configuration? The config for the service looks as follows: [root@ns99 etc]# more /usr/lib/systemd/system/tinydns.service [Unit] Description=A DNS server daemon Documentation=man:tinydns(8) Requires=network.target After=network.target [Service] Restart=always PIDFile=/var/run/tinydns.pid ExecStart=/usr/sbin/tinydns [Install] WantedBy=multi-user.target [root@ns99 etc]# I can't possibly spot anything wrong there. Any help much appreciated. Cheers, Boris.

2 3

Re: [CentOS] And now for something completely different. Win7 on KVM
by James B. Byrne 27 Oct '14

27 Oct '14

On Mon, October 27, 2014 03:57, Patrick Bervoets wrote: > > Op 23-10-14 om 18:00 schreef James B. Byrne: >> At the moment none I guess. The message is that the client cannot find a >> driver. I have virtio-win-0.1-74.iso and virtio-win-0.1-81.iso on the >> hypervisor host. How do I get the driver from there into the guest? Does >> the >> client have access to the hypervisor's file-systems? Do I mount the ISO as >> a >> cd-rom in the guest? How is that done? In virt-manager? Is there a >> document >> somewhere that I can get an idea on how this is supposed to work? >> > > James, > > I don't know if help is still needed. Trust me. I am always in need of help. > > You can mount the iso via virt-manager if you have (or create) a > virt-storage-pool. > > If you can reboot the client you could edit > /etc/libvirt/qemu/virtclientname.xml and add > <disk type='file' device='cdrom'> > <driver name='qemu' type='raw'/> > <source file='/opt/isos/virtio-win-0.1-81.iso'/> > <target dev='hdc' bus='ide'/> > <readonly/> > <address type='drive' controller='0' bus='1' target='0' unit='0'/> > to <devices> > > (if your client already has more than 2 drives attached, change target dev hdc > to hdd or ...) > > You can switch your storages to virtio too, I did it in the past but fail to > find my notes. They are already virtio. > > I think that the steps on this page are correct: > http://setdosa.blogspot.be/2013/09/moving-your-windows-guest-from-ide-to.ht… > > And, of course, work on a snapshot or at least have a copy of your client. > > If you need help to change the driver in Windows I suggest we take this > off-list since some are very allergic to Microsoft. > At the moment all I am looking for is how to use the CentOS tools to mount a guest system. So I think that probably falls in the scope of this list. If (when) I get into trouble on the Win side of things then I will take you up on your kind offer. Per your suggestion I used virt-manager to open the guest and added a hardware device. I selected the option "Select managed or other existing storage", browsed for the virtio-win.iso and set the Device type to IDE CDROM with storage type 'raw'. I started the guest and the new CDROM shows in the hardware list. I will see how it goes from there. Thanks again, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 2

Re: [CentOS] And now for something completely different. Win7 on KVM
by James B. Byrne 27 Oct '14

27 Oct '14

On Thu, October 23, 2014 02:58, Patrick Bervoets wrote: > > James, > > on the client, which driver do you use? Mine is 'Red Hat VirtIO Ethernet > Adapter' 61.65.104.7400 20/11/2013. I got it from virtio-win-0.1-74.iso > At the moment none I guess. The message is that the client cannot find a driver. I have virtio-win-0.1-74.iso and virtio-win-0.1-81.iso on the hypervisor host. How do I get the driver from there into the guest? Does the client have access to the hypervisor's file-systems? Do I mount the ISO as a cd-rom in the guest? How is that done? In virt-manager? Is there a document somewhere that I can get an idea on how this is supposed to work? Bear in mind that other than the occasional configuration and diagnostic issue I have very, very little experience with MS-Win since XPsp3 and none at all in running it as a guest on KVM. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Filesystem writes unexpectedly slow (CentOS 6.4)
by Joakim Ziegler 26 Oct '14

26 Oct '14

On 16/10/14, 15:35, m.roth(a)5-cent.us wrote: > I missed the beginning of this thread - how is the filesystem mounted? > For ext4, we finally found that it worked well... *if* it was mounted > nobarrier. That made the detar of a compressed tar file go from > literally 7 minutes to about 30-46 seconds. That is interesting. I have barriers enabled, I will try disabling them (I have battery backup on the RAID controller, so it should be ok). Then again, I have barriers enabled on the other, very similar box too, and I hit 2GB/sec there, so I don't think that's the main factor. Still, will test. Thanks. -- Joakim Ziegler - Supervisor de postproducción - Terminal joakim(a)terminalmx.com - 044 55 2971 8514 - 5264 0864

2 1

Centos 6.5 - Fping - SE Linux - Missing type enforcement (TE) allow rule
by admin 26 Oct '14

26 Oct '14

Hi gents, I seem to have a small issue with fping and Observium(a monitoring solution). The particular VPS I'm using does have SELinux enabled and it seems to be causing issues when the httpd process is attempting to use Fping? Here is what I know so far : Output from "audit2why -a" : --------------- type=AVC msg=audit(1414265994.125:6744): avc: denied { create } for pid=8968 comm="fping" scontext=unconfined_u:system_r:httpd_t:s0 Was caused by: Missing type enforcement (TE) allow rule. You can use audit2allow to generate a loadable module to allow this access. --------------- Which does seem to confirm that something is wrong between httpd and fping. I then ran "audit2allow -M fping-httpd < audit2allow" which did create both the .te and .pp files. The issue is that inside the .te file, I have a warning saying that the rules already exists! Which does make sense since I had to allow those particular function for the Mysql connection to function properly. --------------- .te file : "module fping-httpd 1.0; require { type httpd_t; class capability net_raw; class rawip_socket create; } #============= httpd_t ============== #!!!! This avc is allowed in the current policy allow httpd_t self:capability net_raw; allow httpd_t self:rawip_socket create; " --------------- Is the "Missing type enforcement" related to all of this? I really don't want to disable SELinux and would rather learn to actually use it properly. Thank you!

3 3

Re: [CentOS] And now for something completely different. Win7 on KVM
by James B. Byrne 26 Oct '14

26 Oct '14

On Fri, October 24, 2014 16:09, Nathan Duehr wrote: >> On Oct 22, 2014, at 15:15, James B. Byrne <byrnejb(a)harte-lyne.ca> wrote: >> >> >> As you can probably guess by now I am working my way down through my >> outstanding issue list trying to get as many deferred items closed out as I >> can before the next security storm hits. > > They stopped? :-) > I am in the eye of the hurricane more likely. But I will take whatever calm I can find. For however long it lasts. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

C7 : Firewalld
by Always Learning 25 Oct '14

25 Oct '14

Being a fan of IPtables and dreading the eventual transition to Centos 7, I wondered if in C7's firewalld an interface can be assigned to a single zone or to multiple zones such as 'private' and 'trusted'. For example interface em1 having both trusted and public zones assigned to it. If multiple zones per interface are permitted presumably one can segregate traffic by IP range ? -- Thank you. Paul. England, EU.

4 3

Re: [CentOS] [exim] Some feature
by Always Learning 25 Oct '14

25 Oct '14

On Fri, 2014-10-24 at 13:35 +0400, Фадеев Виталий Львович wrote: > Yes. Its worked if i send email to fvl+test(a)domain.com from fvl(a)domain.com account, but doesnt work if a i send to another user like realuser+test(a)domain.com . > In logs "Unknown user" What is your Exim configuration syntax for delivering emails to (a) fvl(a)domain.com (b) fvl+test(a)domain.com (c) realuser(a)domain.com ? What specific configuration are you using for email delivery ? -- Regards, Paul. England, EU.

1 0

Q. LUKS or ecryptfs-utils ?
by James B. Byrne 25 Oct '14

25 Oct '14

I am now investigating encrypting our IMAP user spool files. Does anyone have experience with handling encrypted data stores using either or both of the subject methods and would care tio share their observations? Which is the preferred method (I know: it depends, but on what?)? What administrative pain does each cause? Our IMAP host is a KVM guest so spinning up a duplicate and simply copying the data to an encrypted device or filesystem is not a very big deal. We can live with manually mounting the file system and providing a pass-phrase at boot. we are also looking into a semi-auto USB based solution to that issue. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 6

← Newer
1
2
3
4
5
6
7
8
9
...
23
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2014