Discuss April 2015

discuss@lists.centos.org

168 participants
185 discussions

Installing HomeBank on CentOS 7.1
by Jatin 04 Apr '15

04 Apr '15

Hi I have recently installed CentOS 7.1 on my laptop. Earlier i was using Ubuntu 14.04. I have managed to successfully install all the apps that i was using in ubuntu in CentOS 7.1 except for the app named as: HomeBank http://homebank.free.fr/ Here is the information about my system: [jatin@localhost ~]$ cat /etc/*release CentOS Linux release 7.1.1503 (Core) NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7" CentOS Linux release 7.1.1503 (Core) CentOS Linux release 7.1.1503 (Core) Here is the repo list that i have enabled and using so far: [jatin@localhost ~]$ yum repolist Loaded plugins: fastestmirror, langpacks Determining fastest mirrors * base: centos.excellmedia.net * epel: mirror01.idc.hinet.net * extras: centos.excellmedia.net * nux-dextop: li.nux.ro * updates: mirrors.fibo.vn adobe-linux-x86_64 2/2 repo id repo name status adobe-linux-x86_64 Adobe Systems Incorporated 2 base/7/x86_64 CentOS-7 - Base 8,652 epel/x86_64 Extra Packages for Enterprise Linux 7 - x86_64 7,602 extras/7/x86_64 CentOS-7 - Extras 79 nux-dextop/x86_64 Nux.Ro RPMs for general desktop use 1,919 updates/7/x86_64 CentOS-7 - Updates 300 Appreciate any help in this regard. Thanks Jatin

5 6

Explanation please?
by James B. Byrne 04 Apr '15

04 Apr '15

I am seeing log file entries like this: IN=eth0 OUT=eth1 SRC=109.74.193.253 DST=x.y.z.34 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=49692 PROTO=ICMP TYPE=3 CODE=3 [SRC=x.y.z.34 DST=109.74.193.253 LEN=94 TOS=0x00 PREC=0x00 TTL=53 ID=41330 PROTO=UDP SPT=34679 DPT=53 LEN=74 ] This is found on our gateway host. eth0 is the WAN i/f, eth1 is the LAN i/f. Our netblock is x.y.z.0/24. Can somebody tell me what this record is? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

unsetting/erasing an iptables mark
by Boris Epstein 04 Apr '15

04 Apr '15

Hello all, iptables provides a way to mark/tag packets for future identification/accounting, etc. A brief discussion of it is offered here: https://wiki.archlinux.org/index.php/Advanced_traffic_control Here is a more detailed description of the issue I am working on: http://lists.centos.org/pipermail/centos/2015-April/151245.html Getting to the crux of the issue as it stands now. I need to get rid of the mark on the packets after they have been processed by tc and sent on. That can be done by a VM down the line, too. Basic logic of the process should be: "anything that comes with a mark, erase that mark, send it on". Effectively, going off this syntax: iptables -A FORWARD -t mangle -i eth0 -j MARK --set-mark 6 I would need to be able to come up with something like --erase-mark or functional equivalent thereof. Any suggestions much appreciated. Cheers, Boris.

1 0

vncserver on CentOS 7
by Jerry Geis 04 Apr '15

04 Apr '15

I am trying to setup a centos 7.1 vncserver I cannot believe they went from a relatively easy process in 6 to the "crazyness" that is 7. I did the following: yum install tigervnc-server cp /lib/systemd/system/vncserver@.service /etc/systemd/system systemctl daemon-reload edit /etc/systemd.system/vncserver@.service and replace <USER> with myuser su - myuser run vncpassword to set password systemctl enable vncserver@. Says its enabled: systemctl list-unit-files | grep vnc vncserver@.service enabled using another machine to connect gives error about nothing there. netstat -tuln | grep 5900 gives nothing. What did I miss? Thanks, Jerry

5 7

Re: [CentOS] OT: Recommended anti-virus for Windows
by Always Learning 03 Apr '15

03 Apr '15

On Fri, 2015-04-03 at 10:17 +0300, Александр Кириллов wrote: > Paul, world's a big place. We just see many things differently. > The West pretends the rules invented by the West are universal. They are > not. Hi Александр (Aleksandr, Alexander), Agreed. The West is far from perfect and has a terrible history of supporting corrupt and brutal regimes as well as subverting some democratically elected governments that were not pro-USA. Any intelligent service would love to get internal access to as many computers as possible. Kasperski (from the largest country in the world) is a potential weakness. So too are the USA anti-virus Windoze packages which ignore penetrations by Uncle Sam (special 'virus' signatures accepted). Conversely non-Windoze machines running Linux, BSDs etc. are inherently more safe. It is good that many people from different countries, different religions, different customs and different daylight hours can peacefully unite in their collective use and enjoyment of Centos. > Je ne suis pas Charlie. Pourquoi ? Did those people, the attackers and their victims, really need to die ? We have only 1 life. Best regards, Paul.

1 1

OT: Recommended anti-virus for Windows
by J Martin Rushton 03 Apr '15

03 Apr '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry to mention the "opposition" here, but I have a family member's laptop to protect, and I'm not allowed to upgrade it to Linux. What's the current best recommendation? Thanks, MArtin -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJVHbCMAAoJEAF3yXsqtyBl4I8P/AsvH+cyGcG9PDtL8I091WJc jaAhT8Z77G8LBTNaCUi1NXaR3zYsxZ1LltS8MyyqpA+TZ5TkwGRI5V0g2h5owrXv vmFNHW4DQcnB5D4s5+B50lnjyIWgtLG0BKUwCgLik++U11umHd5sCTqXTaHzlyP8 Ndz2RAVEm9A8T3My7fKeVF+/c2pt6rKaRoifeTiH+IUnmvuFHPHuQEpLuOx0qKLH BCHyg7ZJcpwQEocYMhZu7JkZ/zg5/eCb+0HIq5qOCkeRj64ax0QOMzlvcScBRQDp tBzXIAXnFGMNmgE8tvD9Xh2Gi/OKx/bbqRdo8mMzUGUlWSErSt2UMPkpN3Vm3S2C wQhSqMoNnxWCypofazmIXH+TKn1/ipUhZXF3GcZsBYDfIb95kvdBrJm//QioI8Fy BFGc5Cj9DjXNxIbCfvQuyrG1RDdwHKjt/AMmoB0RXpSwhxRfS2749gyrkGXRUSSd IFRpX8Ds0quxx8D9YY96FYX4VbPFhFKIm64OigjLOenedek4A0TpUg7tF5HpyDA7 SXl/l9wFbqAOIKR+VYHIix9UPqxUkU/6fio1D/RhD+8gulY9Tj4Bx5vjpVkJm4wY +Dj0VZ6LyhhkkOTypvENrY2imyxJ+MQ/xKiBQCcvGJIkNcxKr3Xd9D6cFkkkZWR7 bAaC26I/cC4witLZSC2k =1XHp -----END PGP SIGNATURE-----

8 9

Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64
by James B. Byrne 03 Apr '15

03 Apr '15

On Thu, April 2, 2015 15:25, Jim Perrin wrote: > > > On 04/02/2015 01:28 PM, Phelps, Matthew wrote: > >> >> Soliciting our feedback *before* changing everything regarding >> release names would have been nice. > > We did. > > http://lists.centos.org/pipermail/centos-devel/2015-February/012873.html > > You mean this? On: Sun Feb 22 23:19:42 UTC 2015 Karanbir Singh mail-lists at karan.org wrote: >> We have also decided to split the /etc/redhat-release link >> to /etc/centos-release and use that as a way to better >> indicate what codebase the running CentOS Linux instance >> was derived from. >> >> Examples of what these files will look like in say March 2015 >> ( if .1 is released upstream by then ): >> >> ------------------- >> /etc/centos-release: >> CentOS Linux release 7.1.1503 (Core) >> >> /etc/redhat-release >> Derived from Red Hat Enterprise Linux 7.1 (Source) Hmmmmm. I wonder how the proposed 7.1.1503 became 7.1503 in practice. Bait and switch? Personally I do not care one way or the other what RH tells Centos to call itself. The priests can decide and the faithful can either put up with it or change pews. But I find it somewhat distressing to view otherwise intelligent people for whom I have a great deal of personal regard debase themselves with patently inadequate, and frequently deliberately misleading, justifications for unpopular decisions. BTW. What happens if a bad ISO gets spun, released and then is replaced in the same month? Does it become: 7.1504_a?; 7.1504b?; 7.1504_1?; 7.150403? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Community voice (was [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64)
by Tim Bell 03 Apr '15

03 Apr '15

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Karanbir Singh > Sent: 03 April 2015 01:00 > To: centos(a)centos.org > Subject: Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on > x86_64 > > On 02/04/15 21:35, Phelps, Matthew wrote: > > > See my reply earlier. The description of the centos-devel list says > > "this is strictly about development." > > > Matt, come join the contributor base - be a commnuity communication liason ( > or, I am sure we can find a title to quantify this ). > > stretching this a bit futher : lets see if we can find 10 people who might be > considered 'community beacons', who could / would act as commnuity comms > and liason to make sure we are driving in the right directions and communicating > things in the most impactful manner. > > I am willing to lobby the board to then allow this group to spectate and > feedback into Board Meetings ( we meet once a month ). > Limiting the influence of the community to spectate and feedback seems less than I would expect. If community involvement in governance is to be improved, it needs to be seen to make a difference. OpenStack has ambassadors (https://wiki.openstack.org/wiki/Community/AmbassadorProgram) and elections to the 1/3 of the board from the community. This is probably too heavy for CentOS but some form of community representation with a genuine voice in governance would seem reasonable for an open source project. However, with the board rules as defined in http://www.centos.org/about/governance/joining-the-project/, it is difficult for someone who is a user of CentOS as opposed to a developer to meet the merit criteria. The current CentOS board membership would benefit from more diversity and different outlooks to help identify changes which need further community input such as this one. > One data point I want to drop in here is that less than 0.1 % of the CentOS user > base has any contact with the project ( wherein I imply, lists + forums + irc + > bugs + wiki ), so we might need to spread the net wide to find a reasonable > representation. > > thoughts ? > The challenge here is to find the appropriate people to help since many will be paid for delivering value to their companies rather than being paid to work on CentOS. Given their limited time, I do not feel that requiring operators to follow a development list is the right solution to encourage more interaction. Tim > > -- > Karanbir Singh > +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh > GnuPG Key : http://www.karan.org/publickey.asc > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

5 4

Re: [CentOS] OT: Recommended anti-virus for Windows
by James B. Byrne 03 Apr '15

03 Apr '15

On Thu, April 2, 2015 17:11, J Martin Rushton wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Sorry to mention the "opposition" here, but I have a family member's > laptop to protect, and I'm not allowed to upgrade it to Linux. What's > the current best recommendation? > Thanks, We (Harte & Lyne Limited) formerly used F-Prot out of Iceland for the remaining MS based desktops. We are presently switching to ClamAV for Windows (http://www.clamav.net/download.html). Norton is better than nothing; but nowhere near adequate. The rest of the AV field I have no basis for evaluating. MicroSoft's SE has sort of dropped out of the AV race. See: http://www.howtogeek.com/173291/goodbye-microsoft-security-essentials-micro… -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

iptables marking and NAT issue
by Boris Epstein 03 Apr '15

03 Apr '15

Hello all, It appears that, for some reason I have thus far failed to understand when you use marking in iptables you then run into troubles if you attempt to do NAT (MAQUERADE). Let me describe this in more detail. We are attempting to use a network test environment named ATCD running it on a CentOS VM under VirtualBox. For more into on ATCD see: https://github.com/facebook/augmented-traffic-control The networking inside the VirtualBox environment is private so at some point before you get out of it you've got to have a NAT router - not necessarily on the same VM where the ATCD runs - which also is a router. Be that as it may, ATCD uses a combination of iptables marking and tc to degrade/control network transmission quality in accordance with your settings. And it seems to work just fine up until you reach the NATing router - at which point the transmission drops to very slow if not non-existent. An old article here makes a passing reference to a conflict between iptables marking and MASQ (NAT): http://tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.netfilter.html Unfortunately, the link to another text supposedly detailing how to deal with this is dead. Has anybody encountered this? Any tips on how to fix this issue? Thanks. Boris.

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2015