November 2018 - Discuss - lists.centos.org

Memory vs. Display Card
by Rick 28 Oct '25

28 Oct '25

Since memory has become quite cheap lately I decided to move from 2 GB to 6. When I installed the memory every thing was fine until I went to run level 5. At that point the screen turned to garbage and the system froze. Is there a way to fix this so I can use the memory I bought? Do I need a new display card? Current hardware: Intel D975XBX2 Motherboard VGA compatible controller: ATI Technologies Inc RV505 [Radeon X1550 64-bit] -- http://www.spinics.net/lists/

13 19

SSD for Centos SWAP /tmp & /var/ partition
by Keith Roberts 03 Sep '25

03 Sep '25

Has anyone actually used a SSD in a Centos setup? My little experiment with a s/h WD drive for /tmp and SWAP partitions kicked the bucket on Wednesday, when the poor WD drive caught the click-of-death. It was a s/h drive to start with and lasted about 4 months. But that was without the /var/log/ partition being written to it, as I mounted that back onto /var/log from the original drive. So I had to install another (WD) drive, and repartion it and rebuild my RPM package database, from the backed-up Packages file. That seems to be all OK now. I'm wondering if it would be a good idea to use a new SSD for moving all the disk i/o to, that Linux likes to do so often. Plus putting SWAP onto a decent SSD should speed things up somewhat. Here's a short video of a laptop fitted with a SSD drive booting macOS, compared to a similar laptop booting from the standard HDD. The laptop with the SSD boots and loads some apps in 28 seconds. The other one takes twice as long. http://eshop.macsales.com/shop/SSD/OWC/Mercury_Extreme_Pro_6G/?utm_source=t… Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

33 96

Issues booting centos7 [dracut is failing to enable centos/root, centos/swap LVs]
by Yannis Milios 01 Feb '25

01 Feb '25

Hello, I'm having a strange problem booting a new centos7 installation. Below some background on this. [I have attached the tech details at the bottom of this message] I started a new CentOS7 installation on a VM, so far all good, o/s boots fine. Then I decided to increase VM disk size (initially was 10G) to 13G. Powered off the VM, increased the vhd via the hypervisor, booted from CentOS livecd, selected "recover my centos installation". Then I used the following sequence of commands to make the new vhd size "visible" to the o/s ... - ran fdisk /dev/sda and deleted partition 2. (This is the LVM partition where the o/s is stored. The first partition is /boot [xfs] partition *non lvm*.) - created a new partition with same starting sector as before deleting it, but a different ending sector (to reflect to the increased space). - set partition type to 8e (lvm), saved settings and exit. - ran pvresize and lvresize to make new space visible to the o/s.All good, I can see the space increase on 'lvdisplay centos/root'. - ran 'mount /dev/mapper/centos-root /mnt/root' to temporarily mount the o/s partition. - ran 'xfs_growfs /mnt/root' to resize the o/s fs to the new size. It was successful and I could actually chroot to the o/s and verify new disk size. - rebooted and tried to boot from hdd this time. Grub menu shows up and loads default kernel (3.10.0-862.9.1.el7.x86_64). - after initial kernel boot up process, booting continues to initrd and then it's where the problem starts... - looks like dracut has issues locating/enabling /dev/mapper/centos-root (lv) and as a result it cannot boot to the 'real' root fs (/). - while in dracut shell, I execute the following command sequence: 1. lvm lvchange -ay /dev/centos/root 2. lvm lvchange -ay /dev/centos/swap 3. ln -s /dev/mapper/centos-root /dev/root 4. exit ...and the o/s boots fine...so looks like the pv,vg,lv is detected properly while in initrd, but somehow dracut has difficulties enabling the root,swap LVs ? - While in o/s, I rebuild initrd by using: 'dracut -f -v -a lvm' Note, I have to use '-a lvm' as for some reason, if don't, the lvm utils (lvm,lvm_scan) are not being included to the initrd, not sure why this happens. After rebooting, same thing happens, I have to manually boot the system via dracut shell. I'm a bit stuck at this point, any clues what I'm doing wrong in here ? As I previously said, this is a new installation, so I could simply reinstall the whole thing, but I would rather try to find out some answer to why is this happening ... :-) [curiosity] Some additional details: ================== I've attached /run/initramfs/rdsosreport.txt file [generated while in inird] here: https://privatebin.net/?fdc4052c0c402884#gdB/QYR3IeR55SxUbjfrkZPQfJ7jMxiUxq… o/s ver=CentOS Linux release 7.5.1804 (Core) [root@localhost ~]# lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda 8:0 0 13G 0 disk ├─sda1 8:1 0 500M 0 part /boot └─sda2 8:2 0 12.5G 0 part ├─centos-root 253:0 0 11.5G 0 lvm / └─centos-swap 253:1 0 1G 0 lvm [SWAP] [root@localhost ~]# cat /etc/default/grub GRUB_TIMEOUT=5 GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)" GRUB_DEFAULT=saved GRUB_DISABLE_SUBMENU=true GRUB_TERMINAL_OUTPUT="console" GRUB_CMDLINE_LINUX="rd.lvm.lv=centos/root rd.lvm.lv=centos/swap rd.shell rhgb" GRUB_DISABLE_RECOVERY="true"

4 11

Centos 7 on Dell Latitude E6500
by Rainer Fügenstein 09 Oct '19

09 Oct '19

Hi, I tried to install Centos7 x86_64 minimal 1503-01 from an USB flash drive on my old Dell Latitude E6500 laptop. boots up in text mode, switches text resolution, writes: Started Show Plymouth Boot Screen Reached Target Paths Reached Target Basic System. then hangs for some time, eventually starting dracut emergency shell. log says: multipathd: sdb: spurious uevent, path already in pathvec multipathd: sda: spurious uevent, path already in pathvec interesting: sdb is the internal 240GB kingston SSD drive (existing ntfs bitlocker partition recognized as sdb1) sda is the write protected USB stick, recognised as CDROM drive. 4GB rom intel 45 express chipset mobile intel GMA 4500MHD graphics intel 5100AGN wifi what to try next? any additional infos I can give you? thnx in advance. -- Best regards, Rainer mailto:rfu@oudeis.org

6 7

/boot partition too small
by KM 02 Oct '19

02 Oct '19

First off - let me say I am not an administrator. I need to know if there is an easy way to increase my /boot partition. When I installed CentOS 6 after running 5, it was my oversight not to increase the /boot size. it's too small and I can't do yum updates. if it's not easy to actually increase it, is it safe to take a chunk in my root filesystem (like /new.boot or something) and just mount it as /boot from now on so it uses the space or is that not a good idea? I am sure I could easily copy the rpms/kernel stuff over to it and then unmounts the real /boot and mount this new area as /boot. Can you administrators let me know what you think of all this? Thanks in advance. KM

27 44

dmarc auth on incoming email
by Fred Smith 23 Jan '19

23 Jan '19

Just reading up on DMARC, toying with setting it up to auth against incoming emails. (but not configure my domain to use dmarc, or at least not yet) ran into an article about opendmarc, which is available on epel. but when I took a look at the opendmarc website and the git pages it doesn't appear to have been updated in several years. while I see that it is still available from epel, I wonder if anyone knows the project status? Is it still active? are there any other viable alternatives? thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- The eyes of the Lord are everywhere, keeping watch on the wicked and the good. ----------------------------- Proverbs 15:3 (niv) -----------------------------

2 1

rescue - UEFI revert to BIOS boot - how?
by lejeczek 08 Dec '18

08 Dec '18

hi guys I have a box on which UEFI boot has gone haywire and instead of boot it power the box down, that is before even going to grub2. (displays some error message) I if change to BIOS boot then I can start Centos' rescue - my question is: how can I rescue, re-build grub so it would boot from tradition BIOS? many thanks, L.

4 3

OT: good free email service ?
by Valeri Galtsev 02 Dec '18

02 Dec '18

Dear All, I know it is an oxymoron: good free ... service ;-) Still, can someone recommend good free email service? I definitely will not go with google, Microsoft, Apple. I don't have same strong feeling about yahoo as I have about above, but... Anyway, thanks in advance for all your advises. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

9 9

Php script not running
by Jerry Geis 30 Nov '18

30 Nov '18

Hi All, I have centos 7. Apache and php are installed. CGI runs fine - php does not seem to run. I have the /etc/httpd/conf.d/php.conf file php.conf # # Cause the PHP interpreter to handle files with a .php extension. # <FilesMatch \.php$> SetHandler application/x-httpd-php </FilesMatch> # # Allow php to handle Multiviews # AddType text/html .php # # Add index.php to the list of files that will be served as directory # indexes. # DirectoryIndex index.php # # Uncomment the following lines to allow PHP to pretty-print .phps # files as PHP source code: # #<FilesMatch \.phps$> # SetHandler application/x-httpd-php-source #</FilesMatch> # # Apache specific PHP configuration options # those can be override in each configured vhost # php_value session.save_handler "files" php_value session.save_path "/var/lib/php/session" I have: AddHandler cgi-script .cgi .php The result is 500 internal server error. everything seems like its setup - I have restarted httpd. These are the PHP that are loaded: rpm -qa | grep php php-common-5.4.16-45.el7.x86_64 php-5.4.16-45.el7.x86_64 php-fpm-5.4.16-45.el7.x86_64 php-cli-5.4.16-45.el7.x86_64 I do not see any reason in any of the httpd/log files just the 500 internal server error returned. If I do the file with the PHP info line <?php phpinfo(); ?> this displays correctly, but my other script does not run. I have checked the permissions on the script and it is executable and owned by the same user my CGI programs are owned that work. What might I be missing? Jerry

2 1

CentOS Dojo at FOSDEM, February 1, 2019
by Rich Bowen 30 Nov '18

30 Nov '18

The final schedule for the CentOS Dojo at FOSDEM is now live at https://wiki.centos.org/Newsletter and registration is open. We've got a whole day of content for you, covering technical topics, information about RHEL 8 (and what's coming in CentOS), and updates from our Special Interest Groups (SIGs). Registration is free, but we do need you to register, so that we can adequately plan. We'll see you in Brussels! If you're not going to be at FOSDEM, but are interested in hosting a Dojo in your home town, get in touch with us on the centos-promo mailing list - https://lists.centos.org/mailman/listinfo/centos-promo - with your proposal. -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

2 1

[OT] Where to buy S/MIME ??
by Alice Wonder 29 Nov '18

29 Nov '18

Hi, I'm getting increasingly paranoid. Something I said on a certain social media site several months ago was modified - then reported - then by account was banned until I agreed to delete it. Obviously since what I said was modified I didn't have any issue with deleting it but I want more than just DKIM sigs on my e-mail now. Anyway looking for S/MIME I can use to sign and/or encrypt but mostly sign. Not interested in GnuPG or self-signed S/MIME - I want something that can be trusted because someone else that is trusted actually vouched for me. The "free for personal" S/MIME from Comodo didn't work. Browser said it did but there was nothing to export for me to then import. I suspect it is because I used private browser window, I really don't like the idea of a private key stored in browser anyway. And it never asked for a password to encrypt the private key, nor let me specify key strength (only let me choose between medium and high - I assume high is 4096 but I don't know, it didn't say) Didn't like the "browser generated" process, even if it had worked and generated the final product I could export - I really didn't like the process and have serious questions about the wisdom of a private key without a pass phrase stored in an application that interacts with web sites. Anyway so used openssl to create private key (with aes-256 encryption and pass phrase) and then a CSR. But I can't find anyone who sells certs for S/MIME to send the CSR too. Globalsign but they wanted $89 - no one else. Found a few sites that offered to "send me a quote" that I think were intended for corporate accounts. Where do regular users who just want an inexpensive certificate usable for S/MIME from a CSR generated the traditional way go to buy a cert? -=- Off Topic 2 I'm going to strangle whoever it is at Google that thinks it is a good idea to put so many video results at the top of search results for this kind of thing. I'm really getting sick of how highly ranked videos now are in search engines.

8 12

Gnome_shell out of memory
by Jerry Geis 28 Nov '18

28 Nov '18

Hi All, I have a CentOS 7.5 box running. Its crashing after some time with NO memory. I have 4G in the box, and 4G swap. Nov 28 07:43:20 mediacontroller01 kernel: gnome-shell cpuset=/ mems_allowed=0 Nov 28 07:43:20 mediacontroller01 kernel: CPU: 2 PID: 1419 Comm: gnome-shell Tainted: G OE ------------ 3.10.0-862.3.3.el7.x86_64 #1 Nov 28 07:43:20 mediacontroller01 kernel: 763965 total pagecache pages Nov 28 07:43:20 mediacontroller01 kernel: 792 pages in swap cache Nov 28 07:43:20 mediacontroller01 kernel: Swap cache stats: add 1762910, delete 1762118, find 15701/18190 Nov 28 07:43:20 mediacontroller01 kernel: Free swap = 0kB Nov 28 07:43:20 mediacontroller01 kernel: Total swap = 4095996kB Nov 28 07:43:20 mediacontroller01 kernel: 1020385 pages RAM Nov 28 07:43:20 mediacontroller01 kernel: 0 pages HighMem/MovableOnly Nov 28 07:43:20 mediacontroller01 kernel: 78196 pages reserved Nov 28 07:43:20 mediacontroller01 kernel: Out of memory: Kill process 1419 (gnome-shell) score 25 or sacrifice child Nov 28 07:43:20 mediacontroller01 kernel: Killed process 1419 (gnome-shell) total-vm:9632020kB, anon-rss:179608kB, file-rss:924kB, shmem-rss:4504kB Nov 28 07:43:20 mediacontroller01 gnome-session-binary[1332]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 9 Nov 28 07:43:20 mediacontroller01 gnome-session: gnome-session-binary[1332]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 9 Nov 28 07:43:22 mediacontroller01 journal: JS WARNING: [resource:///org/gnome/shell/ui/main.js 315]: reference to undefined property "MetaStage" Nov 28 07:43:22 mediacontroller01 journal: JS WARNING: [resource:///org/gnome/shell/ui/layout.js 221]: reference to undefined property "MetaWindowGroup" Nov 28 07:43:22 mediacontroller01 journal: JS WARNING: [resource:///org/gnome/shell/ui/osdMonitorLabeler.js 59]: reference to undefined property "MetaDBusDisplayConfigSkeleton" Nov 28 07:43:22 mediacontroller01 journal: Failed to launch ibus-daemon: Failed to execute child process “ibus-daemon” (No such file or directory) Nov 28 07:43:23 mediacontroller01 journal: JS WARNING: [resource:///org/gnome/shell/ui/slider.js 38]: reference to undefined property "CallyActor" Nov 28 07:43:23 mediacontroller01 dbus[817]: [system] Activating via systemd: service name='org.freedesktop.GeoClue2' unit='geoclue.service' Nov 28 07:43:23 mediacontroller01 systemd: Cannot add dependency job for unit firewalld.service, ignoring: Unit is masked. Nov 28 07:43:23 mediacontroller01 systemd: Starting Location Lookup Service... Nov 28 07:43:23 mediacontroller01 dbus[817]: [system] Activating via systemd: service name='org.freedesktop.Avahi' unit='dbus-org.freedesktop.Avahi.service' Nov 28 07:43:23 mediacontroller01 dbus[817]: [system] Activation via systemd failed for unit 'dbus-org.freedesktop.Avahi.service': Unit not found. Nov 28 07:43:23 mediacontroller01 journal: Failed to connect to avahi service: Daemon not running Nov 28 07:43:23 mediacontroller01 dbus[817]: [system] Successfully activated service 'org.freedesktop.GeoClue2' Nov 28 07:43:23 mediacontroller01 systemd: Started Location Lookup Service. Nov 28 07:43:23 mediacontroller01 journal: No permission to trigger offline updates: Polkit.Error: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Action org.freedesktop.packagekit.trigger-offline-update is not registered Nov 28 07:43:23 mediacontroller01 org.gnome.Shell.desktop: Window manager warning: "XF86RFKill" is not a valid accelerator Nov 28 07:43:23 mediacontroller01 journal: Error looking up permission: GDBus.Error:org.freedesktop.portal.Error.NotFound: No entry for geolocation Nov 28 07:43:24 mediacontroller01 gnome-shell: GNOME Shell started at Wed Nov 28 2018 07:43:23 GMT-0500 (EST) Nov 28 07:44:19 mediacontroller01 journal: failed to commit changes to dconf: The connection is closed I have not ran into that before - What does one do ? Thanks Jerry

1 0

Tools/mechanisms for the management of access permissions in big filebased datasets
by Frank Thommen 28 Nov '18

28 Nov '18

Hello, we are currently managing access permissions through classical user-group-others permissions on a multi-petabyte directory tree with partially very deep and broad directories. Projects are represented by directory trees and mapped through GIDs. Lately we had lots of "singular" permission request (one single user needs access to a single dataset but should not be able to see all other datasets belonging to the same project). We realized, that the UGO model doesn't scale and is becoming more and more unmanageable. Can you recommend tools/mechanisms/technologies to overcome the drawbacks of the UGO model? We are thinking about some purely ACL based mechanism (but are open to other ideas). All filesystems in question are mounted via NFSv4 and the clients are (almost) completely CentOS 7.x hsots. Ideally the tool would have some web UI and some kind of (REST)API which allows us to modify permissions from our inhouse data management application (which does /not/ manage permissions, just the structure of the data). Additionally it should be able to visualize/report permissions in directory. I wasn't very successful in googling possible candidates, hence the question to the list. Cheers frank

4 4

CentOS 7 package not present in Red Hat EL 7 - qt-assistant
by Toralf Lund 28 Nov '18

28 Nov '18

I'm using CentOS 7 for development of software that is sometimes used on Red Hat Enterprise Linux 7. I conjunction with an update of one of the applications, I asked some Red Hat users to install the Qt 4 Assistant application via the qt-assistant package (which is used by a "help" function in our software.) It seemed like there was no such package in the Red Hat package set, however, and I also see no mention of it in "package manifests" like https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/ht…. Yet I can install the package from the "base" repository on my CentOS machine. Questions: Isn't CentOS base supposed to contain exactly the same packages as Red Hat Enterprise, except in some special cases that relate to distribution information, installation sources etc.? Does anyone know what's going on with the specific package I mention above? - Toralf

3 4

aarch64 boot up process/EFI
by Asya Dvorkin 28 Nov '18

28 Nov '18

Hello, I am not sure if this is the correct place to ask, but I do not have anyone else to go to. I'm working on building our own custom aarch64 RHEL distribution and using CentOS SRPMs to rebuild necessary packages. I am also utilizing kickstart. At this point, my kickstart installs all packages (by using a local repository with newly rebuild packages), but in the end I get an error "failed to write boot loader configuration". I noticed that i have /boot/efi/EFI/redhat directory on my newly "installed" server, while centos server has /boot/efi/EFI/centos directory. According to efibootmgr it is trying to boot \EFI\centos\shimaa64.efi, which doesn't exist (EFI\redhat\shimaa64.efi does). Those files are created by shim rpms and they are a total mess. I don't even know where to start or what to look for. `efibootmgr -v` shows 0000 in the beginning of BootOrder Boot0000* CentOS: HD (1,GPT,.......)/File(\EFI\centos\shimaa64.efi). Shim package has the following files/directories: $ rpm -qlp shim-aa64-12-1 /boot/efi/EFI/BOOT/BOOTAA64.EFI /boot/efi/EFI/BOOT/fbaa64.efi /boot/efi/EFI/redhat/BOOTAA64.CSV /boot/efi/EFI/redhat/mmaa64.efi /boot/efi/EFI/redhat/shim.efi /boot/efi/EFI/redhat/shimaa64-redhat.efi /boot/efi/EFI/redhat/shimaa64.efi I have been reading EFI documentation and I understand the concept (or rather I think I do), but not sure how to make it all work with shim RPMs and/or how to properly rebuild them. Would really appreciate any advice... Thank you! Asya

1 0

RHEL 8 Public Beta Released
by Yan Li 27 Nov '18

27 Nov '18

https://www.redhat.com/en/blog/powering-its-future-while-preserving-present… -- Yan Li

7 13

Re: [CentOS] NBDE, clevis and tang for non-root disk
by mark 27 Nov '18

27 Nov '18

Radu Radutiu wrote: > On Tue, Nov 27, 2018 at 3:14 PM mark <m.roth(a)5-cent.us> wrote: > >> What we do is to have the encryption key of the secondary filesystem in >> /etc/crypttab, which is, of course, 600. As it boots, it decrypts from >> that as it mounts the rest of the system. >> > Thanks, this is working as expected and it gave me the hint needed to > find the actual problem. The problem is that the initramfs image generated > by dracut -f does not include the /etc/crypttab from the OS (it only > contains the entry for the root device). Once I have manually added the > other volumes in the /etc/crypttab file from the initramfs image, clevis > is able to decrypt all volumes. Now the question is why the generated > iniramfs image has a different /etc/crypttab. How can I specify > /etc/crypttab for the initramfs so that > furhter kernel updates will not replace it with the wrong file? > Sorry, I think you misunderstood. The key for root is *not* in /etc/crypttab - that's only for the secondary ones. mark

2 1

C7 install, "failed to IDENTIFY"
by mark 27 Nov '18

27 Nov '18

The install from a USB key fails. It's showing ata2:0.0 failed to IDENTIFY. I've been searching online, and the only hint I have is that it might not understand the controller. New Dell Optiplex 7050. Haanyone run into this? mark

2 1

Re: [CentOS] NBDE, clevis and tang for non-root disk
by Radu Radutiu 27 Nov '18

27 Nov '18

On Tue, Nov 27, 2018 at 3:14 PM mark <m.roth(a)5-cent.us> wrote: > What we do is to have the encryption key of the secondary filesystem in > /etc/crypttab, which is, of course, 600. As it boots, it decrypts from > that as > it mounts the rest of the system. > > mark > Thanks, this is working as expected and it gave me the hint needed to find the actual problem. The problem is that the initramfs image generated by dracut -f does not include the /etc/crypttab from the OS (it only contains the entry for the root device). Once I have manually added the other volumes in the /etc/crypttab file from the initramfs image, clevis is able to decrypt all volumes. Now the question is why the generated iniramfs image has a different /etc/crypttab. How can I specify /etc/crypttab for the initramfs so that furhter kernel updates will not replace it with the wrong file? Radu

1 0

CentOS 7 bash perhaps off topic
by Jerry Geis 26 Nov '18

26 Nov '18

hi all, I have a small script that seems to be exiting and hitting the sleep 60... The smwebsocket just connects to the web socket provided and outputs the data. This works manually. the myprogram just opens a database and writes the line... My desire is to run the smwebsocket, connect to the websocket and output the data (line by line) when we get a line that matches Location take that line and output to the database. Seems simple. I desire this to keep the connection alive and just continue to read data and grep on the data etc... if smwebsocket does exit, sleep 60 and reconnect. However it seems to be exiting and running the sleep 60. Am I missing something ? while [ 1 ] do smwebsocket "$URL" | grep Location | while read line do myprogram -data "$line" done sleep 60 Reconnecting... done All the pieces work - just not the actual running. What am I missing? Jerry

3 3

kernel 3.10.0-957.el7.x86_64 + EFI on Dell server - problem
by lejeczek 26 Nov '18

26 Nov '18

hi guys I've one box where I just yesterday upgraded Centos. I wonder if that kernel upgrade process might somewhat troublesome. After that upgrade UEFI boot fails with: Failed to set MokListRT: Invalid Parameter Something has gone seriously wrong: import_mok_state() failed : Invalid Parameter Has anybody seen that? And maybe know to fix it? many thanks, L.

6 9

rpmbuild errors
by Alessandro Baggi 26 Nov '18

26 Nov '18

Hi list, I need a more updated version of bacula because I need to backup a debian workstation. So I decided to build my own bacula package base on bacula 9.2.0. I'm new to rpmbuild and I created my bacula.spec file but when running rpmbuild -ba bacula.spec I got error about check-rpaths like: ERROR 0001: file '/usr/sbin/bregex' contains a standard rpath '/usr/lib64' in [/usr/lib64] Running rpmbuild as suggested, adding QA_RPATHS=$[ 0x0001|0x0010 ] works without problem but I don't understand what is wrong with my spec files. Another issue that I found is when installing this rpm. It reports that my bacula package requires libbaccats-9.2.0.so()(64bit) but this file is inside rpm so to solve this I must add to my spec file: Provides: libbaccats-9.2.0.so()(64bit) That permit to install my new rpm. How I can solve this 2 issues? Thanks in advance.

1 0

NBDE, clevis and tang for non-root disk
by Radu Radutiu 26 Nov '18

26 Nov '18

Hi, Has anybody managed to get network disk bound disk encryption to work with a non-root disk? It works fine for the root device, but the moment I add another volume to /etc/crypttab the system will no longer boot automatically. A tcpdump on the tang server shows no traffic while the system is stuck at the LUKS password prompt. The second encrypted volume is set up in the same way as the root device and I can unlock the volume using clevis-luks-unlock -d /dev/vda3. I've seen in https://rhelblog.redhat.com/2018/04/13/an-easier-way-to-manage-disk-decrypt… that clevis-luks-askpass.path needs to be enabled but it doesn't make a difference. Any ideas on what 's wrong or how to debug this? Best regards, Radu

1 0

digital signature equipment
by Gregory P. Ennis 26 Nov '18

26 Nov '18

Everyone, I apologize if this is off topic for this list!!!!! I have an application that I need to acquire, store and merge to a pdf file a digital signature from a client. What favorite equipment do some of you use to do this. I contacted the topaz systems support team, and they advised me their equipment produced a proprietary file type, and required me to sign a non-disclosure agreement to do what I was asking to do. I indicated I was willing to proceed, but I have not been able to get them to communicate in follow up. .... probably related to the holidays. I will be using Centos 7.5 Desktop units to acquire the images and send the images to a Centos 7.5 server that will do the storage, and merging work. I have been able to use pdftk to merge previously obtained signatures, but I have not been able to find a piece of equipment that I can use to acquire signatures on the fly and merge them easily to a pdf form file. Any suggestions would be appreciated!!!! Greg Ennis

2 6

Panic / EL6 / KVM / kernel-2.6.32-754.2.1.el6.x86_64
by Leon Fauster 23 Nov '18

23 Nov '18

Since the update from kernel-2.6.32-754.2.1.el6.x86_64 to kernel-2.6.32-754.3.5.el6.x86_64 I can not boot my KVM guests anymore!? The workstation panics immediately! I would not have expected this behavior now (last phase of OS). It was very robust until now (Optiplex Workstation). I see some KVM related lines in the changelog.diff. Before swimming upstream: Does some one have problems related to KVM with kernel-2.6.32-754.3.5.el6.x86_64 ?? -- LF

5 15

Video from the CentOS Dojo at CERN now available
by Rich Bowen 23 Nov '18

23 Nov '18

The videos from the recent #CentOSDojo at #CERN are now available on the CentOS YouTube channel. If you have time for only one, be sure to watch the first video, which talks about the challenges that CERN has with the enormous amount of data they produce every day in the LHC. Also recommended, Fabian's discussion of the coming (and already in place!) changes to the CentOS Git infrastructure. https://www.youtube.com/watch?v=fs8knVCqEj4&list=PLuRtbOXpVDjBVqThWSByt… -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

6 5

Re: [CentOS] CentOS 7 + GNOME : all icon themes broken after update from CR
by Lamar Owen 23 Nov '18

23 Nov '18

I did the update from CR, and have some pretty serious issues. Until I blew away (by mv to a different name) the .local and .config directory trees, I couldn't log in to GNOME at all. After doing that, I can log in, but if I do any actual work, GNOME crashes, and abrt-cli from root in vc 2 tells me that gnome-shell got a SIGSEGV. I figure all of the updates aren't in CR yet, so I'm going to pull out my backup machine and work with it until I see if CR gets more updates. Good thing I've got vacation scheduled for next week!I did quite a few other things in trying to troubleshoot, including attempting a yum distro-sync without CR enabled, which had helped me rollback once before, but not this time. Once I get my backup machine set up I can post better details.

4 5

CentOS 7 + GNOME : all icon themes broken after update from CR
by Nicolas Kovacs 22 Nov '18

22 Nov '18

Hi, I just upgraded one of my CentOS 7 + GNOME desktops from the CR repo. After the upgrade, it seems like all of the icon themes are broken. Missing icons everywhere. Any idea what's going on here ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

8 10

Re: [CentOS] Upping my game on web work
by mark 22 Nov '18

22 Nov '18

Frank Cox wrote: > On Wed, 21 Nov 2018 09:02:38 -0500 > Robert Moskowitz wrote: > >> What 'simple' web support tools do we have here? > > Libreoffice can create a html page from a word processor document. > > I've done that a few times where I do the basic layout with libreoffice > and then hand-edit the html to fine tune it. But my web pages aren't > usually anything exceptionally fancy. > No word processor produces anything but absolute 100% pure crap HTML. Every single line has every possible option, and a few extras. The one HTML editor I ever tried, Quanta, had the lovely habit of, once you hit ?display", when you went back to editing, it has left justified *every* *line*. I hate to suggest it, but something like WordPress might be what you want, if that's not overkill. mark "my web pages proudly built in vi"

7 7

XPS 13 9370 / CentOS compat
by Leon Fauster 22 Nov '18

22 Nov '18

Anyone with some Dell laptop XPS 13 9370 (2018) experience here? Especially with that "Killer 1435 (802.11ac 2x2 und Bluetooth)" device? Supported by the stock kernel (EL7)? -- Thanks, LF

8 10

Upping my game on web work
by Robert Moskowitz 21 Nov '18

21 Nov '18

Until now, I have been satisfied with hand coding my html for simple, but effective web pages (see http://www.htt-consult.com/) But I want to offer one of our small synagogues some web pages and need a few tools for them to use to compose their pages and upload content. What 'simple' web support tools do we have here? Of course I will be doing this on armhfp,,,

3 3

CentOS-announce Digest, Vol 165, Issue 2
by centos-announce-request＠centos.org 21 Nov '18

21 Nov '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:3531 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 2. CESA-2018:3522 Important CentOS 6 spice-server Security Update (Johnny Hughes) 3. CESA-2018:3409 Important CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 20 Nov 2018 14:48:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3531 Important CentOS 6 thunderbird Security Update Message-ID: <20181120144858.GA35009(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3531 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3531 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e8ca4520a8c9465a5ea45678f9f94541f76cd486996f53381b6f5a40ac49ceff thunderbird-60.3.0-1.el6.centos.i686.rpm x86_64: 7e4d7511d7534b096278bf20515e47acbe1b5e7bc5c647559668da5b28b87c40 thunderbird-60.3.0-1.el6.centos.x86_64.rpm Source: 6c3bea61f9577cd7952f0046bb92024a0d93561b510511c2305bc0336bd5ff25 thunderbird-60.3.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 20 Nov 2018 14:49:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3522 Important CentOS 6 spice-server Security Update Message-ID: <20181120144917.GA35087(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3522 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3522 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 34166c0a9ec75da17ee7676323117a9a4f2b11dc9f61e4979bcd6e8ee49cfcc4 spice-server-0.12.4-16.el6_10.2.x86_64.rpm c7d8c665b36bc89797a4ea82e6b7ce4b957e296bd37fa961eb14683f40fdd92a spice-server-devel-0.12.4-16.el6_10.2.x86_64.rpm Source: 6c4e1aaf0c23f731463ed4582c7661ca30adf28d6490dad69c1b13764727e12c spice-server-0.12.4-16.el6_10.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 20 Nov 2018 15:18:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3409 Important CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20181120151846.GA43991(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3409 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3409 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b6246185d793e0f0a42f5d53838c740f906708d992cdaeac4c700de5fa10e3f6 java-1.7.0-openjdk-1.7.0.201-2.6.16.0.el6_10.i686.rpm 413a7c49ed974cc7cf020b2759645d480fb3a14a8da7198c623204fda989ea03 java-1.7.0-openjdk-demo-1.7.0.201-2.6.16.0.el6_10.i686.rpm 6726b3f1146762b596934818220f0ef2e9185a2c42556a07527695fa88d4329a java-1.7.0-openjdk-devel-1.7.0.201-2.6.16.0.el6_10.i686.rpm e719764f71d46826096cea0f744791b6fd296f934d3f1fabdcc3f18eb270c6a7 java-1.7.0-openjdk-javadoc-1.7.0.201-2.6.16.0.el6_10.noarch.rpm c9bdf2fbc9798a8118d8357603531b726ec9bb63283fa92c64747b64b8047e2c java-1.7.0-openjdk-src-1.7.0.201-2.6.16.0.el6_10.i686.rpm x86_64: 00e8a4fb1210afba25b79ca53d85f5e36fe6e7233836fb9f33ba5e2a7ccb115f java-1.7.0-openjdk-1.7.0.201-2.6.16.0.el6_10.x86_64.rpm a20119fb9bfcf2dd2b990067a5614d77b455f6f51841ceda1af074893ebe4133 java-1.7.0-openjdk-demo-1.7.0.201-2.6.16.0.el6_10.x86_64.rpm bd9a6ad13ad1e425c4795ca0fc6ac9bdeec2086f19d696e1fd06e5fe7bcebd1d java-1.7.0-openjdk-devel-1.7.0.201-2.6.16.0.el6_10.x86_64.rpm e719764f71d46826096cea0f744791b6fd296f934d3f1fabdcc3f18eb270c6a7 java-1.7.0-openjdk-javadoc-1.7.0.201-2.6.16.0.el6_10.noarch.rpm 0472f02ed427c4048c22da0e17a5f7b4d4871237943fb48493cabaf22d7cb03e java-1.7.0-openjdk-src-1.7.0.201-2.6.16.0.el6_10.x86_64.rpm Source: 24b4bf32ae4213ac03e5f5952591b62172cd5f1b7c96fbf15af2407bbc8cd62a java-1.7.0-openjdk-1.7.0.201-2.6.16.0.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 165, Issue 2 ***********************************************

1 0

"Details" on Software Updates app not working
by Kay Schenk 20 Nov '18

20 Nov '18

... and causing me great concern at the moment. I've got a notification of 673 Software updates at the moment. I didn't see anything on this list that indicated that kind of update. Unfortunately, the "Details" option which would normally show me what repo is providing the updates, does not seem to provide any information. Anyone else having this problem? Not happy... :( -- ------------------------------------------ MzK "Less is MORE."

2 2

selinux, sendmail, and disable_ipv6
by mark 20 Nov '18

20 Nov '18

Just started seeing this on one server: python: SELinux is preventing sendmail from read access on the file disable_ipv6. It recommends a local policy. Now, searching, I see someone filed a bug for CentOS last year, 0012914, and they wound up creating a policy. Cmts? Note, btw, that the system has two IPv6 addresses - my manager has fallen for slack. Both valid. mark

1 0

Grettings!
by Glenio Cortes Himmen 20 Nov '18

20 Nov '18

Dear colleagues, I signed up for this list to learn more about CentOS and the language. I ask you to understand me and help me to better understand the language and the system. For most phrases I'm using Google Translate but I've been struggling to read and understand without it. Whats is CDE? This word was written in "Red Hat is Planning To Deprecate KDE on RHEL By 2024". -- Glênio Côrtes Himmen glenio.himmen(a)gmail.com https://www.curriculum.com.br/ucn/p205993-734

4 3

NetworkManager and /etc/resolv.conf
by Alice Wonder 19 Nov '18

19 Nov '18

CentOS 7.5 image running on linode. unbound running on localhost. Have to use a cron job once a minute to keep /etc/resolv.conf using the localhost for name resolution - whenever NetworkManager gets restarted (usually only a system boot) it gets over-written. It seems every distro has a different way of preventing NetworkManager from replacing that file. I found instructions for Fedora that said create /etc/NetworkManager/conf.d/no-dns.conf containing [main] dns=none That doesn't seem to have any effect. Poking around, I find a file on boot seems to be created called /var/run/NetworkManager/resolv.conf It has most of the contents of what ends up in /etc/resolv.conf - except w/o the last line, which just reads rotate in generated /etc/resolv.conf. It says it's generated by NetworkManager (both /etc/resolv.conf and the one in /var/run/NetworkManager) but neither are specific enough to indicate what is causing them to be created so I can turn it off. Anyone know how to tell NetworkManager to just not create that file? Using a cron job to overwrite it once a minute works but there must be a proper way. I really wish KISS was a design goal when designing system configuration.

5 7

touchpad problem
by Fred Smith 18 Nov '18

18 Nov '18

Hi all! I have a new-to-me (i.e., used) laptop and am having a problem making the touchpad behave. It is an old HP Elitebook 8530p, and I THINK it has a synaptics touchpad. But I don't remember how to get more specifics than that on Linux, lspci, lsusb and lshw don't tell me anything helpful. lsmod doesn't list anything containing "syn" or "synaptics". Anyway, I've installed C7 on the laptop and pretty much everything works just as I expect it to, but even though I configure the touchpad for two-finger-scrolling, it simply won't do it. It also won't do edge-scrolling, and it has a mark along the right side of the pad that seemingly implies it should do edge-scrolling. If I could figure out which synaptics touchpad it is I might be able to find out if it does or does not support two-finger scrolling (like both my netbooks do). Can any of you remind me how to find out the Synaptics model it is, and/or figure out if it would be expected (or not) to support two- finger scrolling? Any advice will be appreciated, thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

2 4

sssd ldap_user_search_base filters with '#' characters in names
by James Pearson 16 Nov '18

16 Nov '18

I'm trying to craft an ldap search filter for use with ldap_user_search_base in sssd.conf which is using Actice Directory (AD) as the back end on CentOS 7 clients The filter looks for users that are memberOf a particular group - however, the group name start with a '#' character - i.e. in AD, the group name is listed as something like '#ABC XYZ' But when I set ldap_user_search_base to something like: ldap_user_search_base = OU=Users,DC=Example,DC=com?subtree?(memberOf=CN=#ABC XYZ,OU=Groups,DC=Example,DC=com) then 'getent passwd user' fails to return anything (for 'user' that is in that group) However, when using the above syntax with a group name that doesn't start with a '#' character, then things work as expected When I use ldapsearch, it reports that the user is a memberOf: memberOf: CN=\#ABC XYZ,OU=Groups,DC=Example,DC=com But using the '\' in sssd.conf for the search filter cause sssd to error with 'Invalid search filter' in the logs Escaping the Escape ('\\') also gives 'Invalid search filter' Does anyone know how to 'escape' special characters in search filters in sssd.conf ? Thanks James Pearson

1 1

Continuous Release (CR) Repository has been released for CentOS Linux 7.6.1810 for X86_64, i386, armhfp, aarch64, power9, ppc64le
by Johnny Hughes 16 Nov '18

16 Nov '18

We have pushed the CR repository for CentOS Linux 7.6.1810 for following architectures: x86_64 i386 armhfp aarch64 power9 ppc64le We are currently still working on the ppc64 / ppc architecture as we are having issues with some of the 32bit ppc mulitlib builds. CR is basically the packages that will update your install from CentOS Linux 7.5.1804 to 7.6.1810, minus the centos-release rpm and the anaconda rpms. What we will do now is take these packages and create the new install tree and install media, then test those and finally release them as the official CentOS 7.6.1810 release. This process typically takes about 2 weeks from the CR release .. at which time CentOS Linux 7.6.1810 becomes the default release. If you would like to try this release early, see the CR information on the CentOS wiki: https://wiki.centos.org/AdditionalResources/Repositories/CR We are also working on the Release Notes for CentOS Linux 7.6.1810 on the wiki .. you can see those here: https://wiki.centos.org/Manuals/ReleaseNotes/CentOS7.1810 Thank You, Johnny Hughes

1 0

Where is centos6.x kernel git repo
by wuzhouhui 16 Nov '18

16 Nov '18

Hi, I following the steps described in https://wiki.centos.org/Sources to get centos7.x kernel repo. But I'm wondering how to get centos6.x kernel repo. Because when checkout branch 'c6' and found that there is nothing. Thanks

2 1

where to download kernel-3.10.0-693.17.6.el7 and kernel-devel-3.10.0-693.17.6.el7
by qw 16 Nov '18

16 Nov '18

Hi, I check the following link : http://vault.centos.org/7.4.1708/updates/x86_64/Packages/, and can't find kernel-3.10.0-693.17.6.el7 and kernel-devel-3.10.0-693.17.6.el7 rpm files. Where can I download the kernel from CentOS website? Thanks! Regards Andrew

3 2

CONFIG_RTC_SYSTOHC not set for CentOS kernels
by Anand Buddhdev 15 Nov '18

15 Nov '18

Hi folks, RHEL 7 documentation says that if either ntp or chrony is running on a system, then it will enable the kernel feature to sync system time to the hardware clock every 11 minutes. This needs the CONFIG_RTC_SYSTOHC option to be set. However, it looks like this option is not set for CentOS kernels: # fgrep CONFIG_RTC_SYSTOHC /boot/config-3.10.0-862.14.4.el7.x86_64 # CONFIG_RTC_SYSTOHC is not set This explains why on some of our servers, the hardware clock is out of sync with the system time. Does anyone know why this option is not enabled for CentOS kernels? Regards, Anand

3 3

'date' format differences between CentOS 6 and 7 using the en_GB locale ?
by James Pearson 15 Nov '18

15 Nov '18

Just noticed that the output of 'date' is different between CentOS 6 and 7 when using the 'en_GB' locale - e.g.: CentOS 6: % LANG=en_GB date Thu Nov 15 11:42:46 GMT 2018 % LANG=en_US date Thu Nov 15 11:42:56 GMT 2018 CentOS 7: % LANG=en_GB date Thu 15 Nov 11:43:07 GMT 2018 % LANG=en_US date Thu Nov 15 11:43:11 GMT 2018 i.e. with LANG=en_GB on CentOS 7, the day and month are swapped when compared with CentOS 6 Any one know why the en_GB locale has changed between CentOS 6 and 7 ? Thanks James Pearson

2 2

CentOS Dojo @ FOSDEM
by Rich Bowen 14 Nov '18

14 Nov '18

We're delighted to announce the schedule, and registration, for the upcoming CentOS Dojo in Brussels, on February 1, 2019, the day before FOSDEM starts. Details are here: https://wiki.centos.org/Events/Dojo/Brussels2019 The schedule is still marked "Tentative" since I have not received confirmation from all of the speakers yet, but we're almost there. Registration is FREE, but we do ask that you register anyways, since it helps us with venue planning and catering. See you in Brussels! -- Rich Bowen - rbowen(a)redhat.com http://centos.org/ - @CentOSProject 859 351 9166

4 4

merging signatures to a pdf file
by Gregory P. Ennis 13 Nov '18

13 Nov '18

Everyone, I am working on a module with the use of pdktk that merges *.fdf data files with a *.pdf file for a filled out pdf form. I have the need to add a signature to the pdf form. Do any of you know of a way to make this happen? Thanks much!!! Greg Ennis

2 2

error creating output file /var/lib/logrotate/logrotate.status.tmp: File exists
by Carlos Lopez 13 Nov '18

13 Nov '18

Hi all, I have configured a specific logrotate task to rotate certain logs every hour and everytime this logrotate's task runs, I am receiving an email like this: Auto-Submitted: auto-generated Precedence: bulk X-Cron-Env: <LANG=en_US.UTF-8> X-Cron-Env: <LC_ALL=en_US.UTF-8> X-Cron-Env: <XDG_SESSION_ID=4502> X-Cron-Env: <XDG_RUNTIME_DIR=/run/user/0> X-Cron-Env: <SHELL=/bin/sh> X-Cron-Env: <HOME=/root> X-Cron-Env: <PATH=/usr/bin:/bin> X-Cron-Env: <LOGNAME=root> X-Cron-Env: <USER=root> Date: Tue, 13 Nov 2018 11:00:04 +0000 (UTC) Status: R error: error creating output file /var/lib/logrotate/logrotate.status.tmp: File exists In Redhat's bugzilla I have seen some reported bugs with the same behavior and apparently is solved with an update. But this CentOS 7 host is fully patched and error persists ... Any idea? Regards, C. L. Martinez

1 0

Firefox Video Capability
by Chris Olson 13 Nov '18

13 Nov '18

One of our summer interns has stayed on during the school year to work some weekends on special projects. This past weekend, her assignment was to trouble shoot problems with Firefox when trying to view various on-line training videos. At some web sites, the video associated with the page will not play and we get the messages shown below. The Download statement is actually a link and was used to download this rpm file: adobe-release-x86_64-1.0-1.noarch.rpm. "Cannot Play Video" "The latest version of Adobe Flash is required to play this video." "Download the free Flash player here." The intern did not install this rpm because doing so outside of yum did not seem like a good idea. We also do not really know how the Adobe Flash utility is called up by Firefox and whether or not the installation would solve the problem or possibly cause other problems. This problem is not happening on our Windows 7 machines, but not everyone here has a Microsoft machine to use. On Windows, the Firefox occasionally updates itself when launched so that might explain the difference. The training videos always do play on Windows 7 systems when the web pages are brought up. We also noticed that on Windows 7 there are no Firefox related processes remaining after closing all Firefox browsers. This is not the case on our CentOS 6 systems as indicated in the output below. Is this video viewing issue a common problem, and if it is, can someone provide some direction to correct it. Thanks. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [user@computer ~]$ ps -elf | grep firefox 0 S user 3872 1 0 80 0 - 68607 poll_s Nov08 ? 00:00:00 /usr/lib64/firefox/bundled/libexec/at-spi-bus-launcher 0 S user 8178 8149 0 80 0 - 25832 pipe_w 19:42 pts/2 00:00:00 grep firefox [user@computer ~]$

2 1

[infra outage] : unexpected DC issue
by Fabian Arrotin 13 Nov '18

13 Nov '18

Due to a DC outage where some nodes are hosted, the following (public) services provided by the CentOS Infra are currently down/unreachable : - https://bugs.centos.org - https://fr.centos.org After contact with the DC, they're trying to restore services as fast as possible, but seems related to power outage. More info when services will be back online, or that we'll have received status update. -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

1 0

centos 7.5 crashed, kernel BUG at net/core/skbuff.c:3668!
by wuzhouhui 13 Nov '18

13 Nov '18

... [ 176.025679] random: crng init done [ 411.168635] netem: version 1.3 [ 456.059840] ------------[ cut here ]------------ [ 456.059849] WARNING: CPU: 4 PID: 1918 at net/ipv4/tcp_output.c:1048 tcp_set_skb_tso_segs+0xeb/0x100 [ 456.059851] Modules linked in: sch_netem cirrus ttm drm_kms_helper crc32_pclmul syscopyarea ghash_clmulni_intel sysfillrect sysimgblt fb_sys_fops aesni_intel lrw ppdev gf128mul drm glue_helper ablk_helper cryptd parport_pc parport i2c_piix4 virtio_balloon i2c_core joydev pcspkr ip_tables ext4 mbcache jbd2 ata_generic pata_acpi ata_piix virtio_console virtio_net virtio_blk floppy crct10dif_pclmul virtio_pci crct10dif_common libata serio_raw virtio_ring crc32c_intel virtio [ 456.059886] CPU: 4 PID: 1918 Comm: sshd Kdump: loaded Not tainted 3.10.0-862.14.4.el7.x86_64 #1 [ 456.059887] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2007 [ 456.059890] Call Trace: [ 456.059896] [<ffffffffae913754>] dump_stack+0x19/0x1b [ 456.059901] [<ffffffffae2945d8>] __warn+0xd8/0x100 [ 456.059905] [<ffffffffae29471d>] warn_slowpath_null+0x1d/0x20 [ 456.059908] [<ffffffffae8535eb>] tcp_set_skb_tso_segs+0xeb/0x100 [ 456.059911] [<ffffffffae853637>] tcp_init_tso_segs+0x37/0x50 [ 456.059915] [<ffffffffae8552c1>] tcp_write_xmit+0x1f1/0xd00 [ 456.059918] [<ffffffffae85604e>] __tcp_push_pending_frames+0x2e/0xc0 [ 456.059922] [<ffffffffae8442fc>] tcp_push+0xec/0x120 [ 456.059925] [<ffffffffae847ce2>] tcp_sendmsg+0xd2/0xc80 [ 456.059930] [<ffffffffae8739b9>] inet_sendmsg+0x69/0xb0 [ 456.059935] [<ffffffffae7d084d>] sock_aio_write+0x15d/0x180 [ 456.059940] [<ffffffffae434c11>] ? set_fd_set+0x21/0x30 [ 456.059944] [<ffffffffae41e763>] do_sync_write+0x93/0xe0 [ 456.059948] [<ffffffffae41f345>] vfs_write+0x1c5/0x1f0 [ 456.059953] [<ffffffffae2fc0f0>] ? get_monotonic_boottime+0x50/0x100 [ 456.059956] [<ffffffffae42006f>] SyS_write+0x7f/0xf0 [ 456.059961] [<ffffffffae92579b>] system_call_fastpath+0x22/0x27 [ 456.059963] ---[ end trace 77e1915bd237f005 ]--- [ 728.963668] ------------[ cut here ]------------ [ 728.964320] kernel BUG at net/core/skbuff.c:3668! [ 728.964933] invalid opcode: 0000 [#1] SMP [ 728.965501] Modules linked in: sch_netem cirrus ttm drm_kms_helper crc32_pclmul syscopyarea ghash_clmulni_intel sysfillrect sysimgblt fb_sys_fops aesni_intel lrw ppdev gf128mul drm glue_helper ablk_helper cryptd parport_pc parport i2c_piix4 virtio_balloon i2c_core joydev pcspkr ip_tables ext4 mbcache jbd2 ata_generic pata_acpi ata_piix virtio_console virtio_net virtio_blk floppy crct10dif_pclmul virtio_pci crct10dif_common libata serio_raw virtio_ring crc32c_intel virtio [ 728.971540] CPU: 3 PID: 0 Comm: swapper/3 Kdump: loaded Tainted: G W ------------ 3.10.0-862.14.4.el7.x86_64 #1 [ 728.972981] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2007 [ 728.973723] task: ffff94153bb1cf10 ti: ffff94153bb30000 task.ti: ffff94153bb30000 [ 728.974689] RIP: 0010:[<ffffffffae7df554>] [<ffffffffae7df554>] __skb_to_sgvec+0x1e4/0x280 [ 728.975792] RSP: 0018:ffff941655183cf8 EFLAGS: 00010202 [ 728.976494] RAX: ffff94163c68c700 RBX: 00000000000005a8 RCX: ffff941648bd4ac0 [ 728.977407] RDX: 0000000000000001 RSI: 00000000000005a8 RDI: 00000000000002c0 [ 728.978322] RBP: ffff941655183d38 R08: ffff941653416cf8 R09: fffffe544a34ae00 [ 728.979241] R10: ffff941648bd4800 R11: 000000000000000a R12: 00000000000005ea [ 728.980160] R13: 00000000000005ea R14: 0000000000000000 R15: 0000000000000002 [ 728.981076] FS: 0000000000000000(0000) GS:ffff941655180000(0000) knlGS:0000000000000000 [ 728.982109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.982849] CR2: 00007f7ed4008000 CR3: 0000000289e1a000 CR4: 00000000001406e0 [ 728.983778] Call Trace: [ 728.984107] <IRQ> [ 728.984368] [<ffffffffae7df612>] skb_to_sgvec+0x12/0x30 [ 728.985098] [<ffffffffc00fa4bf>] start_xmit+0x19f/0x500 [virtio_net] [ 728.985925] [<ffffffffae7f02e6>] dev_hard_start_xmit+0x246/0x3b0 [ 728.986741] [<ffffffffae81bc0a>] sch_direct_xmit+0x11a/0x250 [ 728.987489] [<ffffffffae81bdce>] __qdisc_run+0x8e/0x360 [ 728.988182] [<ffffffffae7ef3e6>] net_tx_action+0x1d6/0x240 [ 728.988924] [<ffffffffae29dba5>] __do_softirq+0xf5/0x280 [ 728.989634] [<ffffffffae928cec>] call_softirq+0x1c/0x30 [ 728.990322] [<ffffffffae22e625>] do_softirq+0x65/0xa0 [ 728.990994] [<ffffffffae29df25>] irq_exit+0x105/0x110 [ 728.991680] [<ffffffffae92a088>] smp_apic_timer_interrupt+0x48/0x60 [ 728.992504] [<ffffffffae9267b2>] apic_timer_interrupt+0x162/0x170 [ 728.993298] <EOI> [ 728.993566] [<ffffffffae91ad90>] ? __cpuidle_text_start+0x8/0x8 [ 728.994377] [<ffffffffae91af96>] ? native_safe_halt+0x6/0x10 [ 728.995161] [<ffffffffae91adae>] default_idle+0x1e/0xc0 [ 728.995869] [<ffffffffae2366e3>] arch_cpu_idle+0x23/0xb0 [ 728.996568] [<ffffffffae2f5dea>] cpu_startup_entry+0x14a/0x1e0 [ 728.997330] [<ffffffffae2571b7>] start_secondary+0x1f7/0x270 [ 728.998077] [<ffffffffae2000d5>] start_cpu+0x5/0x14 [ 728.998721] Code: 89 45 c8 e8 3f fe ff ff 44 8b 4d d0 41 01 c7 44 29 cb 74 41 44 8b 55 c4 4c 8b 45 c8 45 01 cd 4d 8b 36 4d 85 f6 75 90 85 db 74 2a <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 48 c7 c7 00 00 00 80 48 2b [ 729.003191] RIP [<ffffffffae7df554>] __skb_to_sgvec+0x1e4/0x280 [ 729.005068] RSP <ffff941655183cf8> Any advice?

1 0

Drop/Terminate data to/from source using firewalld rich rules
by Mike 12 Nov '18

12 Nov '18

I need to be able to temporarily cut off the source of network slowdowns. What I used to do: Router with 2 x NICs running slackware 14. Execute iptraf-ng, choose IP Network Monitor and sort by Byte Count. The sorted screen always seemed a bit confusing but I could usually pluck a couple of IP addresses with racing byte counts and cut all traffic to them using an iptables rule. Then if I wanted to identify the computer or device, I’d go into the dhcpd.leases file and look for the ip address and the corresponding device hostname. It was a bit of a pain, but it worked. Now: Router with 2 x NIC’s running CentOS 7. Using systemd and firewalld with 2 zones: external (internet-facing) and internal (LAN-facing). Now when I try the same thing using firewall-cmd rich rules, it won’t work. Example: [root@hello ~]# firewall-cmd --zone=external --list-rich-rules rule family="ipv4" source address="10.10.1.73/24" drop rule family="ipv4" source address="40.97.126.210" drop rule family="ipv4" source address="10.10.1.73/32" drop rule family="ipv4" source address="40.97.126.210/32" drop and [root@hello ~]# firewall-cmd --zone=internal --list-rich-rules rule family="ipv4" source address="10.10.1.73/24" drop rule family="ipv4" source address="40.97.126.210" drop rule family="ipv4" source address="10.10.1.73/32" drop It didn’t work. The traffic continued to burst away for another hour before stopping. The address (40.97.126.210) belongs to Microsoft so I’m not concerned about publishing it. What am I doing wrong with firewalld rich rules and how do I properly drop/terminate traffic to/from a specific source on the LAN? Current command - ADD rich rule to drop any traffic in zone "internal" from source ip address 10.10.1.125: firewall-cmd --permanent --zone=internal --add-rich-rule='rule family=ipv4 source address=10.10.1.125/24 drop' firewall-cmd --reload REMOVE the same rich rule above: firewall-cmd --permanent --zone=internal --remove-rich-rule='rule family=ipv4 source address=10.10.1.125/24 drop' firewall-cmd --reload Thank you for reading.

1 1

off-topic question about RDP to Win-10
by Fred Smith 12 Nov '18

12 Nov '18

I have a win10 VM in virtualbox on my Linux (C7) desktop. I CAN connect to it with rdesktop 1.8.3 (now rather old, but it's the latest release), but cannot connect with remmina or krdc. Both of them just hang for a while then say they can't connect. Curiously, they all will connect to the win10 box in my office. They don't show any other useful information, and I don't know where to go to figure this out. Anyone out there have any ideas they can share? thanks in advance! Fred -- ------------------------------------------------------------------------------- .---- Fred Smith / ( /__ ,__. __ __ / __ : / / / / /__) / / /__) .+' Home: fredex(a)fcshome.stoneham.ma.us / / (__ (___ (__(_ (___ / :__ 781-438-5471 -------------------------------- Jude 1:24,25 ---------------------------------

3 4

Multiple grub2 Users with Passwords
by Dr. Zenzic 11 Nov '18

11 Nov '18

Hello All, I am trying to set multiple users with passwords for modifying grub2 menu entries at boot. I know I can set a "root" user grub2 password with grub2-setpassword. I have also been able to make a grub2 user password using the grub2-mkpasswd-pbkdf2 command and adding set superusers="user1" to the /etc/grub.d/40_custom file. However, I have multiple user administrators that will possibly need access to grub at boot (i.e. to boot to single user mode to fix a broken configuration file). I've tried generating two different passwords with grub2-mkpasswd-pbkdf2 and adding: set superusers="user1, user2" password_pbkdf2 user1 grub.pbkdf2.sha512.1000./hash1/ password_pbkdf2 user2 grub.pbkdf2.sha512.1000./hash2/ with no success. The first user account worked but not the second. Does anyone know the correct syntax to add multiple grub2 user accounts with different passwords in 40_custom? All tutorials I've found online explain a single user but not multiple.

1 1

Evolution: always a 90-second delay
by Yves Bellefeuille 11 Nov '18

11 Nov '18

I'm trying to use Evolution on the latest CentOS 7. Whenever I try to receive or send mail, there's always a 90-second delay before the connection works. Since the delay is always exactly 90 seconds, I think I may be waiting for something to time out. Perhaps this is a clue. My address is user(a)example.com. I have to log in to pop.example.com or imap.example.com as user, not as user(a)example.com. Evolution seems to always try to connect as user(a)pop.example.com or user(a)imap.example.com. I can't get it to try to connect as user. Perhaps it tries to log in incorrectly and gives up after 90 seconds, and then tries to log in correctly. I want to use Evolution because I want my mail client to use maildir rather then mbox. I used to use kmail, but that's no longer possible with CentOS 7. -- Yves Bellefeuille <yan(a)storm.ca>

5 4

CentOS 6: Logrotate / selinux problem
by Robert Heller 11 Nov '18

11 Nov '18

Ever since a recent power failure I have been getting a Logrotate error. My machine is on a UPS -- it shutdown cleanly, but I suspect that its BIOS/RTC battery is dead, since the machine came up thinking it was 1982 :-(. I reset the clock and everything is fine, *except* I had to delete Logrotate's state files (which had bad dates). But now Logrotate is raising the error: error: error creating unique temp file: Permission denied and audit.log contains these messages: type=AVC msg=audit(1541925899.209:28416): avc: denied { create } for pid=5281 comm="logrotate" name="logrotate_temp.bPbOYF" scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1541925899.209:28416): arch=c000003e syscall=2 success=no exit=-13 a0=7ffdd2d613d0 a1=c2 a2=180 a3=0 items=0 ppid=5279 pid=5281 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1865 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) It is (obviously) a selinux problem, but I don't know what file or directory needs to be fixed. How to I find that out? I turned on verbose in /etc/cron.daily/logrotate: #!/bin/sh /usr/sbin/logrotate -v /etc/logrotate.conf EXITVALUE=$? if [ $EXITVALUE != 0 ]; then /usr/bin/logger -t logrotate "ALERT exited abnormally with [$EXITVALUE]" fi and am getting this (typical) message from logrotate daily: reading config file /etc/logrotate.conf including /etc/logrotate.d reading config file apcupsd reading config info for /var/log/apcupsd.events reading config file ConsoleKit reading config info for /var/log/ConsoleKit/history reading config file cups reading config info for /var/log/cups/*_log reading config file cyrus-imapd reading config info for /var/log/imapd.log /var/log/auth.log reading config file dracut reading config info for /var/log/dracut.log reading config file httpd reading config info for /var/log/httpd/*log reading config file iscsiuiolog reading config info for /var/log/iscsiuio.log reading config file libvirtd reading config info for /var/log/libvirt/libvirtd.log reading config file libvirtd.lxc reading config info for /var/log/libvirt/lxc/*.log reading config file libvirtd.qemu reading config info for /var/log/libvirt/qemu/*.log reading config file mcelog reading config info for /var/log/mcelog reading config file mysqld reading config file named reading config info for /var/named/data/named.run reading config file numad reading config info for /var/log/numad.log reading config file ppp reading config info for /var/log/ppp/connect-errors reading config file psacct reading config info for /var/account/pacct reading config file sa-update reading config info for /var/log/sa-update.log reading config file sssd reading config info for /var/log/sssd/*.log reading config file syslog reading config info for /var/log/cron /var/log/maillog /var/log/messages /var/log/secure /var/log/spooler reading config file wpa_supplicant reading config info for /var/log/wpa_supplicant.log reading config file yum reading config info for /var/log/yum.log reading config info for /var/log/wtmp reading config info for /var/log/btmp Handling 22 logs rotating pattern: /var/log/apcupsd.events weekly (4 rotations) empty log files are not rotated, old logs are removed considering log /var/log/apcupsd.events log does not need rotating rotating pattern: /var/log/ConsoleKit/history monthly (6 rotations) empty log files are not rotated, old logs are removed considering log /var/log/ConsoleKit/history log does not need rotating rotating pattern: /var/log/cups/*_log weekly (4 rotations) empty log files are not rotated, old logs are removed considering log /var/log/cups/access_log log needs rotating considering log /var/log/cups/error_log log needs rotating considering log /var/log/cups/page_log log needs rotating rotating log /var/log/cups/access_log, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' rotating log /var/log/cups/error_log, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' rotating log /var/log/cups/page_log, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' fscreate context set to system_u:object_r:cupsd_log_t:s0 renaming /var/log/cups/access_log to /var/log/cups/access_log-20181111 creating new /var/log/cups/access_log mode = 0600 uid = 0 gid = 7 fscreate context set to system_u:object_r:cupsd_log_t:s0 renaming /var/log/cups/error_log to /var/log/cups/error_log-20181111 creating new /var/log/cups/error_log mode = 0600 uid = 0 gid = 7 fscreate context set to unconfined_u:object_r:cupsd_log_t:s0 renaming /var/log/cups/page_log to /var/log/cups/page_log-20181111 creating new /var/log/cups/page_log mode = 0600 uid = 0 gid = 7 removing old log /var/log/cups/access_log-19821102 removing old log /var/log/cups/error_log-19821102 removing old log /var/log/cups/page_log-19821102 rotating pattern: /var/log/imapd.log /var/log/auth.log weekly (4 rotations) empty log files are rotated, old logs are removed considering log /var/log/imapd.log log /var/log/imapd.log does not exist -- skipping considering log /var/log/auth.log log /var/log/auth.log does not exist -- skipping not running postrotate script, since no logs were rotated rotating pattern: /var/log/dracut.log 1048576 bytes (4 rotations) empty log files are not rotated, old logs are removed considering log /var/log/dracut.log log does not need rotating rotating pattern: /var/log/httpd/*log weekly (4 rotations) empty log files are not rotated, old logs are removed considering log /var/log/httpd/access_log log needs rotating considering log /var/log/httpd/error_log log needs rotating considering log /var/log/httpd/ssl_access_log log does not need rotating considering log /var/log/httpd/ssl_error_log log does not need rotating considering log /var/log/httpd/ssl_request_log log does not need rotating considering log /var/log/httpd/suexec.log log does not need rotating rotating log /var/log/httpd/access_log, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' rotating log /var/log/httpd/error_log, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' fscreate context set to unconfined_u:object_r:httpd_log_t:s0 renaming /var/log/httpd/access_log to /var/log/httpd/access_log-20181111 creating new /var/log/httpd/access_log mode = 0644 uid = 0 gid = 0 fscreate context set to unconfined_u:object_r:httpd_log_t:s0 renaming /var/log/httpd/error_log to /var/log/httpd/error_log-20181111 creating new /var/log/httpd/error_log mode = 0644 uid = 0 gid = 0 running postrotate script removing old log /var/log/httpd/access_log-20181007 removing old log /var/log/httpd/error_log-20181021 rotating pattern: /var/log/iscsiuio.log weekly (4 rotations) empty log files are not rotated, old logs are removed considering log /var/log/iscsiuio.log log /var/log/iscsiuio.log does not exist -- skipping not running postrotate script, since no logs were rotated rotating pattern: /var/log/libvirt/libvirtd.log weekly (4 rotations) empty log files are rotated, only log files >= 102400 bytes are rotated, old logs are removed considering log /var/log/libvirt/libvirtd.log log does not need rotating rotating pattern: /var/log/libvirt/lxc/*.log weekly (4 rotations) empty log files are rotated, only log files >= 102400 bytes are rotated, old logs are removed considering log /var/log/libvirt/lxc/*.log log /var/log/libvirt/lxc/*.log does not exist -- skipping rotating pattern: /var/log/libvirt/qemu/*.log weekly (4 rotations) empty log files are rotated, only log files >= 102400 bytes are rotated, old logs are removed considering log /var/log/libvirt/qemu/c532guest.log log does not need rotating considering log /var/log/libvirt/qemu/c632guest.log log does not need rotating considering log /var/log/libvirt/qemu/c664guest.log log does not need rotating considering log /var/log/libvirt/qemu/c764guest.log log does not need rotating considering log /var/log/libvirt/qemu/C764guest.log log does not need rotating considering log /var/log/libvirt/qemu/msbuilder.log log does not need rotating considering log /var/log/libvirt/qemu/testsvn.log log does not need rotating considering log /var/log/libvirt/qemu/ub120432.log log does not need rotating considering log /var/log/libvirt/qemu/ub120464.log log does not need rotating rotating pattern: /var/log/mcelog 2097152 bytes (99 rotations) empty log files are not rotated, old logs are removed considering log /var/log/mcelog log /var/log/mcelog does not exist -- skipping not running postrotate script, since no logs were rotated rotating pattern: /var/named/data/named.run weekly (4 rotations) empty log files are rotated, old logs are removed considering log /var/named/data/named.run log needs rotating rotating log /var/named/data/named.run, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' fscreate context set to unconfined_u:object_r:named_cache_t:s0 renaming /var/named/data/named.run to /var/named/data/named.run-20181111 creating new /var/named/data/named.run mode = 0644 uid = 25 gid = 25 running postrotate script removing old log /var/named/data/named.run-20181021 rotating pattern: /var/log/numad.log 1048576 bytes (5 rotations) empty log files are rotated, old logs are removed considering log /var/log/numad.log log /var/log/numad.log does not exist -- skipping rotating pattern: /var/log/ppp/connect-errors after 1 days (5 rotations) empty log files are not rotated, old logs are removed considering log /var/log/ppp/connect-errors log /var/log/ppp/connect-errors does not exist -- skipping rotating pattern: /var/account/pacct after 1 days (31 rotations) empty log files are not rotated, old logs are removed considering log /var/account/pacct log does not need rotating not running postrotate script, since no logs were rotated rotating pattern: /var/log/sa-update.log monthly (4 rotations) empty log files are not rotated, old logs are removed considering log /var/log/sa-update.log log does not need rotating rotating pattern: /var/log/sssd/*.log weekly (2 rotations) empty log files are not rotated, old logs are removed considering log /var/log/sssd/*.log log /var/log/sssd/*.log does not exist -- skipping not running postrotate script, since no logs were rotated rotating pattern: /var/log/cron /var/log/maillog /var/log/messages /var/log/secure /var/log/spooler weekly (4 rotations) empty log files are rotated, old logs are removed considering log /var/log/cron log needs rotating considering log /var/log/maillog log needs rotating considering log /var/log/messages log needs rotating considering log /var/log/secure log needs rotating considering log /var/log/spooler log needs rotating rotating log /var/log/cron, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' rotating log /var/log/maillog, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' rotating log /var/log/messages, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' rotating log /var/log/secure, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' rotating log /var/log/spooler, log->rotateCount is 4 dateext suffix '-20181111' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' fscreate context set to system_u:object_r:var_log_t:s0 renaming /var/log/cron to /var/log/cron-20181111 creating new /var/log/cron mode = 0600 uid = 0 gid = 0 fscreate context set to system_u:object_r:var_log_t:s0 renaming /var/log/maillog to /var/log/maillog-20181111 creating new /var/log/maillog mode = 0600 uid = 0 gid = 0 fscreate context set to system_u:object_r:var_log_t:s0 renaming /var/log/messages to /var/log/messages-20181111 creating new /var/log/messages mode = 0600 uid = 0 gid = 0 fscreate context set to system_u:object_r:var_log_t:s0 renaming /var/log/secure to /var/log/secure-20181111 creating new /var/log/secure mode = 0600 uid = 0 gid = 0 fscreate context set to system_u:object_r:var_log_t:s0 renaming /var/log/spooler to /var/log/spooler-20181111 creating new /var/log/spooler mode = 0600 uid = 0 gid = 0 running postrotate script removing old log /var/log/cron-20181021 removing old log /var/log/maillog-20181021 removing old log /var/log/messages-20181021 removing old log /var/log/secure-20181021 removing old log /var/log/spooler-20181021 rotating pattern: /var/log/wpa_supplicant.log 30720 bytes (4 rotations) empty log files are not rotated, old logs are removed considering log /var/log/wpa_supplicant.log log does not need rotating not running postrotate script, since no logs were rotated rotating pattern: /var/log/yum.log yearly (4 rotations) empty log files are not rotated, old logs are removed considering log /var/log/yum.log log does not need rotating rotating pattern: /var/log/wtmp monthly (1 rotations) empty log files are rotated, only log files >= 1048576 bytes are rotated, old logs are removed considering log /var/log/wtmp log does not need rotating rotating pattern: /var/log/btmp monthly (1 rotations) empty log files are rotated, old logs are removed considering log /var/log/btmp log does not need rotating set default create context error: error creating unique temp file: Permission denied /var/lib/logrotate.status contains: logrotate state -- version 2 "/var/log/btmp" 2018-11-6 "/var/log/ConsoleKit/history" 2018-11-6 "/var/log/libvirt/qemu/c664guest.log" 2018-11-6 "/var/log/httpd/access_log" 2018-11-4 "/var/log/spooler" 2018-11-6 "/var/log/sssd/*.log" 2018-11-4 "/var/log/mcelog" 2018-11-4 "/var/log/libvirt/qemu/testsvn.log" 2018-11-6 "/var/log/iscsiuio.log" 2018-11-4 "/var/log/libvirt/qemu/c532guest.log" 2018-11-6 "/var/log/wtmp" 2018-11-6 "/var/log/auth.log" 2018-11-4 "/var/log/yum.log" 2018-11-4 "/var/log/ppp/connect-errors" 2018-11-4 "/var/log/httpd/ssl_error_log" 2018-11-4 "/var/log/secure" 2018-11-6 "/var/log/messages" 2018-11-6 "/var/log/libvirt/qemu/c764guest.log" 2018-11-6 "/var/log/httpd/ssl_request_log" 2018-11-4 "/var/log/httpd/suexec.log" 2018-11-4 "/var/log/libvirt/qemu/ub120432.log" 2018-11-6 "/var/log/cron" 2018-11-6 "/var/account/pacct" 2018-11-4 "/var/log/httpd/error_log" 2018-11-6 "/var/log/libvirt/libvirtd.log" 2018-11-6 "/var/log/dracut.log" 2018-11-4 "/var/log/imapd.log" 2018-11-4 "/var/log/sa-update.log" 2018-11-4 "/var/log/libvirt/qemu/c632guest.log" 2018-11-6 "/var/log/cups/page_log" 2018-11-4 "/var/log/libvirt/qemu/msbuilder.log" 2018-11-6 "/var/log/cups/error_log" 2018-11-4 "/var/named/data/named.run" 2018-11-6 "/var/log/maillog" 2018-11-6 "/var/log/numad.log" 2018-11-4 "/var/log/wpa_supplicant.log" 2018-11-4 "/var/log/libvirt/lxc/*.log" 2018-11-4 "/var/log/httpd/ssl_access_log" 2018-11-4 "/var/log/cups/access_log" 2018-11-4 "/var/log/libvirt/qemu/ub120464.log" 2018-11-6 "/var/log/libvirt/qemu/C764guest.log" 2018-11-6 "/var/log/apcupsd.events" 2018-11-4 -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

1 0

Load html file into elinks from desktop
by Frank Cox 10 Nov '18

10 Nov '18

With a html file on my (Mate) desktop I would like to be able to right-click on it and select "open with" and have it load into elinks. But I haven't yet figured out the magic command line that I need for this to happen. gnome-terminal --command="elinks %s" That loads elinks but doesn't load the html file into it. gnome-terminal --command="cat %s | elinks" doesn't work either. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

2 1

last failed login...
by Fred Smith 10 Nov '18

10 Nov '18

Hi all! I just (well, a few days ago) installed C7 on a new-to-me (used) laptop, and notice something I've not noticed before, either on my personal desktop, or other C7 machines I use: every time I log in, it gives me a message something like "last failed login <timestamp>", where the date and time it gives are RIGHT NOW, just at the time I'm logging in (which succeeds). Anybody know why that would be happening? BTW, using the Mate desktop, but did not change the DM, so I think it is still GDM. Thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- The Lord detests the way of the wicked but he loves those who pursue righteousness. ----------------------------- Proverbs 15:9 (niv) -----------------------------

1 0

Red Hat is Planning To Deprecate KDE on RHEL By 2024
by Frank Cox 10 Nov '18

10 Nov '18

https://www.theregister.co.uk/2018/11/02/rhel_deprecates_kde/ That's still several years in the future, of course. I use Mate on all of my machines rather than Gnome or KDE and I'm sure many of you fine folks do the same. But it's interesting nonetheless. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

25 37

Fresh install C7 nvidia
by Jerry Geis 10 Nov '18

10 Nov '18

I am install C7.5 on a nvidia unit and nvidia-detect tells me to use kmod-nvidia-390xx so I do the yum install and and after a long time I see this -> Processing Dependency: kernel(__drm_atomic_helper_crtc_duplicate_state) = 0xa5f3a170 for package: kmod-nvidia-390xx-390.87-2.el7_6.elrepo.x86_64 --> Processing Dependency: kernel(__drm_atomic_helper_crtc_destroy_state) = 0x00a9c70b for package: kmod-nvidia-390xx-390.87-2.el7_6.elrepo.x86_64 --> Processing Dependency: kernel(__check_object_size) = 0x88db9f48 for package: kmod-nvidia-390xx-390.87-2.el7_6.elrepo.x86_64 --> Processing Dependency: kernel(___ratelimit) = 0x155f4108 for package: kmod-nvidia-390xx-390.87-2.el7_6.elrepo.x86_64 --> Processing Dependency: kernel >= 3.10.0-957.el7 for package: kmod-nvidia-390xx-390.87-2.el7_6.elrepo.x86_64 ---> Package nvidia-x11-drv-390xx.x86_64 0:390.87-1.el7_5.elrepo will be installed Packages skipped because of dependency problems: kmod-nvidia-390xx-390.87-2.el7_6.elrepo.x86_64 from elrepo nvidia-x11-drv-390xx-390.87-1.el7_5.elrepo.x86_64 from elrepo I have also tried --skip-broken and get the same result as above. have I missed something ? This has always working in the past. Thanks, Jerry

4 3

Yum through a proxy
by Vic Chester 09 Nov '18

09 Nov '18

I have configured yum to use a proxy via the yum.conf file by adding: proxy=http://myproxy.com:8080/ What I noticed when running yum check-up date is that some requests are going through the proxy while the system seems to be trying to resolve the domains of other hosts in the repo and trying to establish direct connections to them instead of going through the proxy. Can anyone explain this behavior?

3 3

CentOS-announce Digest, Vol 165, Issue 1
by centos-announce-request＠centos.org 09 Nov '18

09 Nov '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:3406 Critical CentOS 6 python-paramiko Security Update (Johnny Hughes) 2. CEBA-2018:3454 CentOS 6 tzdata BugFix Update (Johnny Hughes) 3. CESA-2018:3403 Important CentOS 6 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 5 Nov 2018 18:49:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3406 Critical CentOS 6 python-paramiko Security Update Message-ID: <20181105184955.GA23857(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3406 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:3406 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ba22dc027fdb5a2399c658d74ec55e6efe08225d65e9aaf3ff5837319c0a67eb python-paramiko-1.7.5-5.el6_10.noarch.rpm x86_64: ba22dc027fdb5a2399c658d74ec55e6efe08225d65e9aaf3ff5837319c0a67eb python-paramiko-1.7.5-5.el6_10.noarch.rpm Source: f0e20741d17d1c06461711205d12b0edf44e5011cf15c7173dcb305a4c49e46d python-paramiko-1.7.5-5.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 5 Nov 2018 18:51:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:3454 CentOS 6 tzdata BugFix Update Message-ID: <20181105185117.GA24083(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:3454 Upstream details at : https://access.redhat.com/errata/RHBA-2018:3454 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 687d4198ba7ddcc02ab3e32b7a757e82474c862a77b6f877fe433aedb42f665d tzdata-2018g-1.el6.noarch.rpm 4673a5ff13fc83c51d537c997c7161affb1a94445798c2976d133309cbb70418 tzdata-java-2018g-1.el6.noarch.rpm x86_64: 687d4198ba7ddcc02ab3e32b7a757e82474c862a77b6f877fe433aedb42f665d tzdata-2018g-1.el6.noarch.rpm 4673a5ff13fc83c51d537c997c7161affb1a94445798c2976d133309cbb70418 tzdata-java-2018g-1.el6.noarch.rpm Source: a38862e075a0669152f341ff55a6675b8f1476fdd876d51b408b10011e99f8e8 tzdata-2018g-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 5 Nov 2018 18:57:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3403 Important CentOS 6 thunderbird Security Update Message-ID: <20181105185741.GA24387(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3403 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3403 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8df523679c35149a2785c6056419e4087d991acf7a5415761d5353b5d7612840 thunderbird-60.2.1-5.el6.centos.i686.rpm x86_64: 4ba750dbed745049285ca8c7345b4bc8366efd5bda230f8d09a1604e2544c2b3 thunderbird-60.2.1-5.el6.centos.x86_64.rpm Source: fa1c647433cdb857e464a18c595ad567662feb698ff9beb544e3e8b9bca32773 thunderbird-60.2.1-5.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 165, Issue 1 ***********************************************

1 0

A newbie question about searching an installed packet
by Pierre Malard 08 Nov '18

08 Nov '18

Hi, I’m french and literally one. So I’m not really easy with Sheakespeare language. So, accept my apologies. As write in subject, I’m a newbie about CentOS an all RedHat declines. I wrote a Shell script for ours Debians (all sort of Debian like) which verify which packets are present before running. I thought I had found an equivalent with « yum list installed | grep <packet> » command but I have sometime alerts about a lock because an other instance of « yum » is running. I don’t understand why a simple « yum list » impose that! I suppose, like with « aptitude search », it is an understanding scorie. I’m sure there is an other way to do what I want to do: just verify if a packet is, or not, installed. Help? Thanks -- Pierre Malard « On ne peut pas pousser à fond l'éducation politique et l'éducation tout court de masses sans l'accompagner d'un développement économique, culturel et social parallèle. » Romain Gary - "Les racines du ciel" |\ _,,,---,,_ /,`.-'`' -. ;-;;,_ |,4- ) )-,_. ,\ ( `'-' '---''(_/--' `-'\_) πr perl -e '$_=q#: 3|\ 5_,3-3,2_: 3/,`.'"'"'`'"'"' 5-. ;-;;,_: |,A- ) )-,_. ,\ ( `'"'"'-'"'"': '"'"'-3'"'"'2(_/--'"'"' `-'"'"'\_): 24πr::#;y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print' - --> Ce message n’engage que son auteur <--

2 2

Desktop files change?
by david allan finch 08 Nov '18

08 Nov '18

Hi, Does anyone know if they changed the way that desktop files for apps work? It seams that inside your start script you can no longer change your scripts directory. Does it now call some form of restricted shell? Anyone know where you can track these changes? Thanks -- / The whole history of this invention has been a struggle /\|/\ against time - Charles Babbage 1837 on the Analytical Engine | K | All Hail Discordia - Burn all Orange Books! \___/ david.allan at finch.org - http://www.ironfort.co.uk

1 1

command in kickstart file to write disklabel?
by Valeri Galtsev 08 Nov '18

08 Nov '18

Dear All, At some point after release of CentOS 7 (though this thing might have started before, it is just when _I_ noticed it) I discovered that if I stick into machine drive without disk label, and then do kickstart installation, the command in kickstart file clearpart --initlabel does not work. Even worse: if I just use GUI installer the drive is not listed between available disks. If I switch in the same installer to some virtual console Ctrl + Alt + F2 I can see that the kernel installer run under definitely sees the drive: /dev/sda is present. It must be an issue beaten to death, but somehow my search ability fails on this particular one (I am not "googling" but "duckduckgo-ing", though this shouldn't matter the problem as usually must be myself). Can someone suggest something? I know it is trivial to just create disklabel before sticking drive in machine, but once I'm using kickstart, any need in separate manual steps feels really lame. Thanks a lot for all your help in advance! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

1 0

Yum and proxy settings
by Vic Chester 08 Nov '18

08 Nov '18

I have configured yum to use a proxy via the yum.conf file by adding: proxy=http://myproxy.com:8080/ What I noticed when running yum check-up date is that some requests are going through the proxy while the system seems to be trying to resolve the domains of other hosts in the repo and trying to establish direct connections to them instead of going through the proxy. Can anyone explain this behavior?

1 0

CentOS Dojo at FOSDEM - Registration now open
by Rich Bowen 07 Nov '18

07 Nov '18

We are pleased to announce the (tentative) schedule of talks for the upcoming CentOS Dojo in Brussels, which will be held on the day before FOSDEM - February 1, 2019 - at the Grand Place Marriott. Details, and the schedule, are now available at https://wiki.centos.org/Events/Dojo/Brussels2019 (Schedule subject to change). Registration is free, but we need to know how many people are coming, for catering and space purposes. You can register today at: https://www.eventbrite.com/e/centos-dojo-at-fosdem-tickets-52306704762 See you in Brussels! -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

OL 7.6 is out
by Rainer Traut 07 Nov '18

07 Nov '18

Hi there, just fyi, Oracle Linux 7.6 is out. The release is available in the repos. Rainer

1 0

Centos 6.9 Ipset broken after installing xtables-addon
by George Travan 07 Nov '18

07 Nov '18

I have managed to break my system by installing xtables-addons-1.37. Now ipset does not work. "Kernel error received: Invalid argument" I built the addon from source on my centos 6.9 system as per instructions for centos 6. It looks to me that xtables-addons has built and installed a ipset-4 extension due to my kernel: 2.6.32-754.6.3.el6.x86_64 I already had ipset v6.11 installed and now both do not work. The README indicated that I need a kernel > 2.6.35 which I presume is the problem. This now has become a major problem for me as I rely on ipset. Anyone suggest what I might do to fix this problem? Thanks, /Geo

1 0

polkit-gnome-0.106 with CentOS 7.5 ???
by Kay Schenk 04 Nov '18

04 Nov '18

What can anyone tell me about the polkit-gnome package that came with CentOS 7.5? Looking at the Fedora pack for the same, it seems like I'm missing pieces of this package. Re: https://rpmfind.net/linux/RPM/epel/7/x86_64/Packages/p/polkit-gnome-0.106-0… I start my gui session with startx instead of GDM. I am having a lot of authentication issues at the moment. I am somewhat familiar with dealing with polkit but mostly things are not working well at all. On an older version of openSUSE I once used with systemd, I started up a kde-polkit-integration app as part of my X session init, in a local .xinit file. Should I do the same with the supplied polkit-gnome provided? Any insights much appreciated. Thanks. ------------------------------------------ MzK "Less is MORE."

1 0

reading old dump backups from 2009
by Nataraj 04 Nov '18

04 Nov '18

I have and old dump format backup done under fedora 7 which is stored on disk and has an sha256sum file that indicates there are no data errors in the backup file. When I try to read the file with restore under CentOS 6, I get the following error: cat /etc/redhat-release CentOS release 6.10 (Final) restore tvf u1_l0_04-29-09_md1.dump Verify tape and initialize maps Input is from a local file/pipe Checksum error 20311110402, inode 0 file (null) restore: Tape is not a dump tape I have another copy of the backup on another disk with the same checksum and it gets the same error as well. Here's a log file from when the backup was done back in 2009: DUMP: Date of this level 0 dump: Wed Apr 29 09:24:36 2009 DUMP: Dumping /dev/md1 (/u1) to u1_l0_04-29-09_md1.dump DUMP: Label: /u1 DUMP: Writing 10 Kilobyte records DUMP: Compressing output at compression level 2 (bzlib) DUMP: mapping (Pass I) [regular files] DUMP: mapping (Pass II) [directories] DUMP: estimated 95176885 blocks. DUMP: writing QFA positions to u1_l0_04-29-09_md1.qindex DUMP: Volume 1 started with block 1 at: Wed Apr 29 09:25:05 2009 DUMP: dumping (Pass III) [directories] DUMP: dumping (Pass IV) [regular files] DUMP: 0.96% done at 3032 kB/s, finished in 8:38 . . . DUMP: 100.00% done at 4075 kB/s, finished in 0:00 DUMP: Closing u1_l0_04-29-09_md1.dump DUMP: Volume 1 completed at: Wed Apr 29 16:00:09 2009 DUMP: Volume 1 took 6:35:04 DUMP: Volume 1 transfer rate: 2146 kB/s DUMP: Volume 1 96607840kB uncompressed, 50878096kB compressed, 1.899:1 DUMP: 96607840 blocks (94343.59MB) on 1 volume(s) DUMP: finished in 23704 seconds, throughput 4075 kBytes/sec DUMP: Date of this level 0 dump: Wed Apr 29 09:24:36 2009 DUMP: Date this dump completed: Wed Apr 29 16:00:09 2009 DUMP: Average transfer rate: 2146 kB/s DUMP: Wrote 96607840kB uncompressed, 50878096kB compressed, 1.899:1 DUMP: DUMP IS DONE Have there been any changes to the format of dump files and if so, is there a version available that can read this older backup? Any other suggestions on how to read this backup would be helpful. Thank You, Nataraj

5 7

inquiry about limitation of file system
by yf chu 04 Nov '18

04 Nov '18

I have a website with millions of pages. We often deploy our websites on centos with Nginx and Apache Http Server as HTTP Web Server. I am very worried about the performance of web server if the amount of pages is very very large. I wonder whether the performance will be affected if there are too many files and directories on the server. Besides, our bugdet is limited. We do not want to deploy too many Servers and use other file system such as GFS. So I want to know the limitation of centos file system and how should I handle this issue.

7 8

fingerprint reader on C-7 ???
by Fred Smith 03 Nov '18

03 Nov '18

Hi all! I just got a new (to me) used laptop (HP EliteBook 8530p) and find that it has a fingerprint reader. Wondering if it could be made to work for me (Centos-7) I did a lot of googling (well, actually duck-duck-go-ing) and found a ton of hits on either setting it up in Windoze, or others wondering if it can be used in Linux. Some info on setting it up in Ubuntu, and a couple of pages on setting it up in Fedora, pages that were ten years old, or so. Found an academic paper on a group that wrote portable tools in Java that allegedly enable it in a cross-platfor manner, but not the software itself. Does anyone here have any better information on if it is possible, and if so, how? thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- The eyes of the Lord are everywhere, keeping watch on the wicked and the good. ----------------------------- Proverbs 15:3 (niv) -----------------------------

2 1

PostgreSQL port accessible even though it should be blocked by firewall
by Frank Thommen 01 Nov '18

01 Nov '18

Hi, this puzzles me: On one of our developer workstations, all ports with the exception of SSH are closed: $ firewall-cmd --list-all public (active) target: default icmp-block-inversion: no interfaces: eno1 sources: services: ssh dhcpv6-client ports: 22/tcp protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: $ but still port 5432/tcp (PostgreSQL) is open: $ nmap -P0 devel-host Starting Nmap 6.40 ( http://nmap.org ) at 2018-10-29 19:46 CET Nmap scan report for devel-host (xxx.xxx.xxx.xxx) Host is up (0.94s latency). rDNS record for xxx.xxx.xxx.xxx: devel-host.our.domain Not shown: 998 filtered ports PORT STATE SERVICE 22/tcp open ssh 5432/tcp open postgresql Nmap done: 1 IP address (1 host up) scanned in 57.26 seconds $ PostgreSQL is running in a docker container: $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 6f11fc41d2f0 postgres "docker-entrypoint..." 4 days ago Up 4 days 0.0.0.0:5432->5432/tcp postgres $ The various docker interfaces and virtual bridges are not assigned to any specific zone. Why is port 5432/tcp open? frank

5 7

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2018