Discuss March 2017

discuss@lists.centos.org

125 participants
111 discussions

How to enable the svm cpu flag inside a vm?
by Leonard den Ottolander 03 Apr '17

03 Apr '17

Hello, I'm trying to get the Android Emulator to run inside a kvm vm on CentOS-6. Apparently the latest Android Emulators cannot run without hardware acceleration so I am trying to get the vm to see the svm cpu flag. Host: $ grep model\ name /proc/cpuinfo | sort -u model name : AMD Phenom(tm) II X4 965 Processor $ grep svm /proc/cpuinfo | sort -u flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm 3dnowext 3dnow constant_tsc rep_good nonstop_tsc extd_apicid pni monitor cx16 popcnt lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt npt lbrv svm_lock nrip_save $ cat /sys/module/kvm_amd/parameters/nested 1 I have tried copying the cpu options (Opteron_G3) in the host cpu configuration and setting the svm flag to either "model", "required" or "force" to no avail: $ ps waux | grep qemu qemu 7962 7.2 21.9 3722092 2680668 ? Rl 13:23 6:36 /usr/libexec/qemu-kvm -name C7-Android -S -M rhel6.6.0 -cpu Opteron_G3,+invtsc,+wdt,+skinit,+ibs,+osvw,+3dnowprefetch,+cr8legacy, +extapic,+cmp_legacy,+3dnow,+3dnowext,+pdpe1gb,+fxsr_opt,+mmxext,+ht, +vme -enable-kvm -m 3072 -realtime mlock=off -smp <snip> So the question is: How do I enable the svm flag in the guest? Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

4 7

Sendmail is considered deprecated
by Xinhuan Zheng 02 Apr '17

02 Apr '17

Hello, Today I searched redhat official portal and learned that Sendmail is considered deprecated. By default, CentOS 7 will use postfix as MTA. I need good advise on what it means to us. We are CentOS customers. We use that operating system for quite a few years. We rely on Sendmail for years for us to relay large quantity of emails to our customers for marketing purpose. We build our additional fallback servers as well for fallback relays. We build our customized configuration for Sendmail too. I really need help to figure out if we can continue using Sendmail (even deprecated) for future long term and what implication would be doing so. Thanks, - xinhuan

7 11

Best practices for docker setup on Centos 7?
by Rafał Radecki 31 Mar '17

31 Mar '17

Hi All. I am currently running docker 1.13 on Centos 7 boxes with devicemapper storage plugin. I would like to know what are your experiences in regard to: - storage plugins - kernel versions - stability I consider upgrade to docker 17.03.1 and would like to choose most stable combination of kernel/storage plugin. Thanks for all info! BR, Rafal.

2 1

firewalld management on a headless server
by Robert Moskowitz 31 Mar '17

31 Mar '17

Is there an Apache tool to manage firewalld on a headless server? I am looking forward to my next Centos project which is to replace my Juniper SSG5 firewall... And along that line, what overlap, if any between firewalld and Suricata? thank you

12 17

have udev to ignore/hide a scsi disk - but how?
by lejeczek 30 Mar '17

30 Mar '17

hi everyone I've been playing and trying to tell udev to ignore and not create symlinks in /dev but I fail. Hoping this is the one: ENV{ID_SERIAL}== I've tried: ENV{SYSTEMD_READY}:="0" OPTIONS+="last_rule" even ENV{UDISKS_IGNORE}="1" but udev tests would still show: ACTION=add and symlinks created. Would share an advice? many thanks, L.

1 0

Python 3.x on Centos 7
by Matt 29 Mar '17

29 Mar '17

Is there a way to install Python 3.x on Centos 7.x without breaking anything that depends on an older version of Python? This server is a minimal Centos 7 install that primarily runs a simple LAMP setup.

8 10

Re: [CentOS] RHEL 6.9 is out
by Richard 29 Mar '17

29 Mar '17

>> On Fri, Mar 24, 2017 at 1:11 PM, Johnny Hughes <johnny(a)centos.org> >> wrote: >> >> OK guys, the CR release has happened. >> > Date: Tuesday, March 28, 2017 16:23:32 -0700 > From: Kay Schenk <kay.schenk(a)gmail.com> > > Still only 6.8 on the mirror link you gave near as I can see. > And, since I'm still on 32-bit ( no time to move on right now), > will a 32-bit be included in 6.9? > My read, and poking, is that what was released is the CR repo, and that these will be released to production (as 6.9) "shortly". If you enable the CR repo on your 6.x machine I believe you'll see these updates, and can install them if you want to check things out. My experience is that there will likely be a few updates from the CR when the production set is released. If you go to: http://mirror.centos.org/centos/6.8/cr/<i386|x86_64>/Packages/ you'll see that there are packages for both 32- and 64-bit, so you should be getting 32-bit updates that will take you up to 6.9.

4 3

CentOS-announce Digest, Vol 145, Issue 9
by centos-announce-request＠centos.org 29 Mar '17

29 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2017:0839 CentOS 5 tzdata BugFix Update (Johnny Hughes) 2. CEBA-2017:0823 CentOS 7 selinux-policy BugFix Update (Johnny Hughes) 3. CESA-2017:0837 Important CentOS 7 icoutils Security Update (Johnny Hughes) 4. CEBA-2017:0839 CentOS 7 tzdata BugFix Update (Johnny Hughes) 5. CESA-2017:0838 Moderate CentOS 7 openjpeg Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 27 Mar 2017 13:17:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0839 CentOS 5 tzdata BugFix Update Message-ID: <20170327131719.GA16003(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0839 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d58328c545b0e860954c77bdb60b158a471c341b83354a5ec8724f093158282f tzdata-2017b-1.el5.i386.rpm 22a70cf9924e673ceb03b4adf663fda03103b172288bc174b5da09397770b86c tzdata-java-2017b-1.el5.i386.rpm x86_64: fbc86ab21cb3abf327e40e822816ab73feff09d22d96816a793eae4eac4e6328 tzdata-2017b-1.el5.x86_64.rpm 42e9feddb7a0f81ab91ad7a894b753f4c8f38bd64d0530e6f6722c2f78a39208 tzdata-java-2017b-1.el5.x86_64.rpm Source: 48e3fa1fae0375ad65516800a7bfc0cf099422c2c9e948db2463e60611f442a1 tzdata-2017b-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 29 Mar 2017 10:57:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0823 CentOS 7 selinux-policy BugFix Update Message-ID: <20170329105748.GA19600(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0823 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0823.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b7655ac40262e437f9150ab7b23cb0caba2c5a914083d7d89aca0093e15ea30f selinux-policy-3.13.1-102.el7_3.16.noarch.rpm dccc0451d8e822c0e6b1f45f8437fc27005270f86ace45114ca01b339bf39f76 selinux-policy-devel-3.13.1-102.el7_3.16.noarch.rpm 357e9d0c2cc9894ce512dfd37071297626604b2c6f424f156cfae51a0ffdeb47 selinux-policy-doc-3.13.1-102.el7_3.16.noarch.rpm c50eb3168371899ae5d39e5088733f59fed60836c884a59339089afa73bc8b2d selinux-policy-minimum-3.13.1-102.el7_3.16.noarch.rpm 9da71a2db1b9ae05910c8a448c2e649c1b991c10a22f9e15b48b3814ff61f2f6 selinux-policy-mls-3.13.1-102.el7_3.16.noarch.rpm afcfda72700317168719f55f95233ae3733d003df50029256ac8e701b5b04491 selinux-policy-sandbox-3.13.1-102.el7_3.16.noarch.rpm 35b53b8646de10c01263b008b4e1f5a16c22a2068cf48f46aa238b551cbaab93 selinux-policy-targeted-3.13.1-102.el7_3.16.noarch.rpm Source: 8b974ed11551356b4f906ad5e0940dc2e74d57171105622ab88ab3c8b7c23263 selinux-policy-3.13.1-102.el7_3.16.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 29 Mar 2017 10:58:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0837 Important CentOS 7 icoutils Security Update Message-ID: <20170329105802.GA19664(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0837 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0837.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0f76b00e410e81cde0b6b4be09548c1bb87acfcb09aa6707e20e63339d768d36 icoutils-0.31.3-1.el7_3.x86_64.rpm Source: 50e48f018d8550d885c50e15e6f07033da72f30d497b9f183843ca8d21dd4c63 icoutils-0.31.3-1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 29 Mar 2017 10:58:34 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0839 CentOS 7 tzdata BugFix Update Message-ID: <20170329105834.GA19742(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0839 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ef2ac10ca81fa29dc5c72043e7252fcddbee257c98a53cf64a25c253e38c191e tzdata-2017b-1.el7.noarch.rpm 8837c0389dc7788ce52a92338a7d72e83148bf7680a9a20a7223b5067ae89d34 tzdata-java-2017b-1.el7.noarch.rpm Source: e73813d365d3de442ae2e7fbf456c7494ed6b415b41f6ecd0831fb4c950250f1 tzdata-2017b-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 29 Mar 2017 10:58:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0838 Moderate CentOS 7 openjpeg Security Update Message-ID: <20170329105856.GA19816(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0838 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0838.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 57a8fc263d03f7068f90fad0af9773efa9cf500409b53f48edeb7d0c3c6511a7 openjpeg-1.5.1-16.el7_3.x86_64.rpm 9cceb4fcf9673742e58eb15e268006095d383559a9e940b68b763f5ec3aa3370 openjpeg-devel-1.5.1-16.el7_3.i686.rpm b9a6b4f0f4cc33ba18812f76e951854567e6fe8e7c9207a735f5e225713ffc4c openjpeg-devel-1.5.1-16.el7_3.x86_64.rpm 09096384201d44cdfc09368f80de68eaa47c55620d0aeba86234375264e44281 openjpeg-libs-1.5.1-16.el7_3.i686.rpm cba929afdd67e4932f76e1efd5dbf946405be2878039b2ff898113053be52ec8 openjpeg-libs-1.5.1-16.el7_3.x86_64.rpm Source: ae0181b3ce23493cc653e78af26486a4eccdf278d1b5fc099bb96df36d94685a openjpeg-1.5.1-16.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 145, Issue 9 ***********************************************

1 0

Mixed bonding and vlan on plain adapter possible?
by Gianluca Cecchi 29 Mar '17

29 Mar '17

Hello, I have a CentOS 7.3 + updates server where my configuration arises from the need to connect via iSCSI to a Dell PS Series storage array and Dell not supporting bonding. So that I need to use 2 nics on the same vlan to connect to iSCSI portal IP and then use multipath. Also, the iSCSI lan is on a dedicated vlan I have only these 2 x 10Gbit adapters and I also need to put other vlans on them through bonding. I plan to use active-backup as bonding mode. My first tests were only with iSCSI in place to verify connection is ok I followed these Dell guidelines, for both multipath and sysctl configs for network adapters: http://en.community.dell.com/techcenter/extras/m/white_papers/20442422 iSCSI vlan is 100 so that the configured devices are p1p1.100 and p1p2.100 and my sysctl config is: net.ipv4.conf.p1p1/100.arp_announce=2 net.ipv4.conf.p1p2/100.arp_announce=2 net.ipv4.conf.p1p1/100.arp_ignore=1 net.ipv4.conf.p1p2/100.arp_ignore=1 # net.ipv4.conf.p1p1/100.rp_filter=2 net.ipv4.conf.p1p2/100.rp_filter=2 So far so good and my lun is viewed this way through multipath [root@ov300 etc]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-3 EQLOGIC ,100E-00 size=1.0T features='0' hwhandler='0' wp=rw `-+- policy='round-robin 0' prio=0 status=active |- 7:0:0:0 sde 8:64 active undef running `- 8:0:0:0 sdf 8:80 active undef running I tried a test workload and both paths are used in a balanced way. Now I temporarily stop the iSCSI layer and ifdown the p1p1.100 and p1p2.100 devices and put in place bonding on plain p1p1 and p1p2 interfaces and then vlans over it and bridges (they are for VMs) [root@ov300 ~]# cat /proc/net/bonding/bond1 Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011) Bonding Mode: fault-tolerance (active-backup) Primary Slave: None Currently Active Slave: p1p1 MII Status: up MII Polling Interval (ms): 100 Up Delay (ms): 0 Down Delay (ms): 0 Slave Interface: p1p1 MII Status: up Speed: 10000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: a0:36:9f:2e:4d:80 Slave queue ID: 0 Slave Interface: p1p2 MII Status: up Speed: 10000 Mbps Duplex: full Link Failure Count: 1 Permanent HW addr: a0:36:9f:2e:4d:82 Slave queue ID: 0 [root@ov300 ~]# - ifcfg-bond1.65 DEVICE=bond1.65 VLAN=yes BRIDGE=vlan65 ONBOOT=yes MTU=1500 DEFROUTE=no NM_CONTROLLED=no IPV6INIT=no - ifcfg-vlan65 DEVICE=vlan65 TYPE=Bridge DELAY=0 STP=off ONBOOT=yes MTU=1500 DEFROUTE=no NM_CONTROLLED=no IPV6INIT=no [root@ov300 network-scripts]# brctl show vlan65 bridge name bridge id STP enabled interfaces vlan65 8000.a0369f2e4d80 no bond1.65 [root@ov300 network-scripts]# The same for vlans 162, while for vlan 187 I only have the bond1.187 without a bridge on top of it At the end I try to re-start the iSCSI components, but it seems now I have iSCSI connection interrupted and not stable. During this phase the command [root@ov300 network-scripts]# iscsiadm -m session -P1 has in its output for the 2 interfaces Iface Netdev: p1p2.100 SID: 5 iSCSI Connection State: TRANSPORT WAIT iSCSI Session State: FAILED Internal iscsid Session State: REOPEN ... SID: 6 iSCSI Connection State: TRANSPORT WAIT iSCSI Session State: FREE Internal iscsid Session State: REOPEN and then Iface Netdev: p1p2.100 SID: 5 iSCSI Connection State: TRANSPORT WAIT iSCSI Session State: FREE Internal iscsid Session State: REOPEN ... Iface Netdev: p1p1.100 SID: 6 iSCSI Connection State: LOGGED IN iSCSI Session State: LOGGED_IN Internal iscsid Session State: NO CHANGE and from multipath point of view a sequence of these: [root@ov300 network-scripts]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-2 EQLOGIC ,100E-00 size=1.0T features='0' hwhandler='0' wp=rw `-+- policy='round-robin 0' prio=0 status=active |- 14:0:0:0 sde 8:64 active undef running `- 13:0:0:0 sdf 8:80 failed faulty running [root@ov300 network-scripts]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-2 EQLOGIC ,100E-00 size=1.0T features='0' hwhandler='0' wp=rw `-+- policy='round-robin 0' prio=0 status=active |- 14:0:0:0 sde 8:64 active undef running `- 13:0:0:0 sdf 8:80 failed faulty running [root@ov300 network-scripts]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-2 EQLOGIC ,100E-00 size=1.0T features='0' hwhandler='0' wp=rw `-+- policy='round-robin 0' prio=0 status=active |- 14:0:0:0 sde 8:64 active undef running `- 13:0:0:0 sdf 8:80 failed undef running Should my config work or do you see any physical/network intrinsic problems in it? >From first tests it seems the more problematic adapter in iSCSI connection is the one that at the time was the active slave in the active-backup bond..... but I only did preliminary tests Tomorrow I'm going to run further tests and verify better and deeper, but any comment/suggestion would be appreciated in advance. Thanks Gianluca

1 0

Nodejs010 Packages giving unresolved dependency error when building the nodejs packages
by Maheshwari, Shagun 29 Mar '17

29 Mar '17

Hi, I am trying to built an ISO with nodejs010 packages but when I run the command "repoclosure -a x86_64 -r <local-repository-name>" to check its further dependencies, it is giving unresolved dependencies error. Example: package: nodejs010-node-gyp-3.2.0-2.el7.centos.noarch from Harman (it's a local repo name) unresolved deps: npm(minimatch) < 0:4 npm(minimatch) >= 0:3 nodejs(engine) >= 0:0.8.0 In ISO we have nodejs010-nodejs-minimatch-3.0.2-1.el7 but it is giving error that npm(minimatch) < 0.4 or npm(minimatch) >= 0:3 and on mirror.centos.org latest version of this package is 3.0.2-1. It was an example, there are many errors like this. So, Please find the attached nodejs-unresolved-dep-erre.log file. I have also attached the list of nodejs's RPMs which I want to include in my ISO. Steps to reproduce this issue: 1. Built all nodejs packages using mock Mock -r centos-7-x86_64 rebuild -define 'scl nodejs010' nodejs010-x.x.x.src.rpm 2. Copy all nodejs rpms in a folder 3. Make a local repository in /etc/yum.repos.d/ folder e.g. 1. cd /etc/yum.repos.d/ 2. mkdir dep.repo 3. copy following lines in dep.repo file: [harman] name=harman baseurl=file:///path of the folder where you have copied your nodejs rpms/ enabled=1 4. Run the following command in that folder where you have copied your rpms: createrepo . 5. Then run repoclosure -a x86_64 -r harman But when I download all nodejs rpms from http://mirror.centos.org/centos-7/7.3.1611/sclo/x86_64/rh/nodejs010/ site and repeat the same steps then it is not giving any unresolved dependency errors. Why it is happening ? or There is any problem with our rpm building process ? Please response and help. Regards, Shagun Maheshwari

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2017