February 2018 - Discuss - lists.centos.org

Memory vs. Display Card
by Rick 28 Oct '25

28 Oct '25

Since memory has become quite cheap lately I decided to move from 2 GB to 6. When I installed the memory every thing was fine until I went to run level 5. At that point the screen turned to garbage and the system froze. Is there a way to fix this so I can use the memory I bought? Do I need a new display card? Current hardware: Intel D975XBX2 Motherboard VGA compatible controller: ATI Technologies Inc RV505 [Radeon X1550 64-bit] -- http://www.spinics.net/lists/

13 19

SSD for Centos SWAP /tmp & /var/ partition
by Keith Roberts 03 Sep '25

03 Sep '25

Has anyone actually used a SSD in a Centos setup? My little experiment with a s/h WD drive for /tmp and SWAP partitions kicked the bucket on Wednesday, when the poor WD drive caught the click-of-death. It was a s/h drive to start with and lasted about 4 months. But that was without the /var/log/ partition being written to it, as I mounted that back onto /var/log from the original drive. So I had to install another (WD) drive, and repartion it and rebuild my RPM package database, from the backed-up Packages file. That seems to be all OK now. I'm wondering if it would be a good idea to use a new SSD for moving all the disk i/o to, that Linux likes to do so often. Plus putting SWAP onto a decent SSD should speed things up somewhat. Here's a short video of a laptop fitted with a SSD drive booting macOS, compared to a similar laptop booting from the standard HDD. The laptop with the SSD boots and loads some apps in 28 seconds. The other one takes twice as long. http://eshop.macsales.com/shop/SSD/OWC/Mercury_Extreme_Pro_6G/?utm_source=t… Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

33 96

/boot partition too small
by KM 02 Oct '19

02 Oct '19

First off - let me say I am not an administrator. I need to know if there is an easy way to increase my /boot partition. When I installed CentOS 6 after running 5, it was my oversight not to increase the /boot size. it's too small and I can't do yum updates. if it's not easy to actually increase it, is it safe to take a chunk in my root filesystem (like /new.boot or something) and just mount it as /boot from now on so it uses the space or is that not a good idea? I am sure I could easily copy the rpms/kernel stuff over to it and then unmounts the real /boot and mount this new area as /boot. Can you administrators let me know what you think of all this? Thanks in advance. KM

27 44

Re: [CentOS] BUG: soft lockup - CPU#0 stuck for 36s! [swapper/0:0]
by KM 25 Apr '18

25 Apr '18

All,This happens on all of our CentOS 7 VMs. but as stated in the email trail, the file softlockup_thresh does not exist. Should it be added? What is the best way to get rid of this behavior. Thanks in advance and sorry if I missed something along the way.KM From: correomm <correomm(a)gmail.com> To: CentOS mailing list <centos(a)centos.org> Sent: Thursday, August 18, 2016 1:55 PM Subject: Re: [CentOS] BUG: soft lockup - CPU#0 stuck for 36s! [swapper/0:0] Yes, I tried it, but does not exists: vmguest # cat /proc/sys/kernel/softlockup_thresh cat: /proc/sys/kernel/softlockup_thresh: No such file or directory On Thu, Aug 18, 2016 at 2:06 PM, Carlos A. Carnero Delgado < carloscarnero(a)gmail.com> wrote: > 2016-08-18 12:39 GMT-04:00 correomm <correomm(a)gmail.com>: > > > This bug is reported only on the VM's with CentOS 7 running on on VMware > > ESXi 5.1. > > The vSphere performance graph shows high CPU consume and disk activity > only > > on VM's with CentOS 7. Sometimes I can not connect remotely with ssh > > (timeout error). > > > > I'm also seeing those errors in several servers, running under 5.5. > Currently investigating if this > <https://kb.vmware.com/selfservice/microsites/search. > do?language=en_US&cmd=displayKC&externalId=1009996> > has anything to do (the resource overcommit bit). > > HTH, > Carlos. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos | | Virus-free. www.avg.com |

5 6

OpenVPN server and firewalld
by Kenneth Porter 24 Apr '18

24 Apr '18

How do I insert the iptables rule below using firewalld? I'm moving up from CentOS 6 to 7 on an office gateway and I'm trying to get OpenVPN working to allow home workers to access PCs at the office. I've got it all working but only by manually inserting an ACCEPT rule in the FORWARD iptables chain: iptables -I FORWARD 3 -i tun+ -j ACCEPT This rule was extracted from my iptables firewall under CentOS6. The 3 puts it after the accepts for established connections and loopback connections, but before any firewalld sub-chains. With this I can connect to an internal Windows 10 system with Remote Desktop. How can I inject this rule using firewalld, either as a direct rule or as some more firewalld-approved kind of rule?

5 7

USB audio on Centos-7
by Fred Smith 22 Apr '18

22 Apr '18

I'm using Centos-7 on my PC, with ASUS motherboard. internal audio has always worked fine EXCEPT that I can never get audio input (for recording) to work. I want to feed audio from a phono turntable and from a cassette deck. I use a phono preamp for the turntable, or directly connect the tape deck. but either nothing, or low level with horrible distortion. so, I gave up (after years of intermittent battles) and bought a Behringer UFO202, which looks like it should work fine with Linux. It allegedly uses a TI PCM2902 chipset, which many online postings claim works fine with various flavors of Linux. This device has a USB port, a pair of line in and line out jacks, a phono jack, a headphone volume control, and a switch to change the line in to phono in. I can use headphones plugged into the UFO202 to listen to audio playing on the computer, but I cannot for the life of me figure out how to feed audio into the UFO202 (via its line in RCA jacks) and have it come out speakers or phones connected to the computer. I've poked and proded at alsamixer, the mate sound tool, and pavucontrol. No useful results. Pavucontrol, in its input section, does show the device listed, and it shows activity on its level mater when there is audio input via the line in jacks on the UFO202. Disconnect the line input and the activity ceases. (Mate sound control also lists the device, but I don't even get an indication of any input at all, as I described above for pavucontrol.) but I simply cannot figure out how to get that audio to play in any audible way. I know that USB audio input works, because I have a Plantronics USB headset with microphone that I use often to converse online, and it works nicely. (and a possibly separate issue: how the heck does one point Audacity to a USB input? Can't find anything in its UI, and there's darn little help online that is actually helpful, in this regard.) Can you sense my frustration here? I'd appreciate any help that is actually helpful,... perhaps someone who reads this actually has one of these things and has made it work? thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- God made him who had no sin to be sin for us, so that in him we might become the righteousness of God." --------------------------- Corinthians 5:21 ---------------------------------

3 6

Anyone using GQRX in Centos-7, for SDR ?
by Fred Smith 22 Apr '18

22 Apr '18

I gave myself a toy, one of those cheap USB Software Define Radios, and would like to use it on my C7 box. Having wasted some time on it, I gave up and installed Ubuntu on a USB HD so I can boot that to play with SDR. The Ubuntu GQRX installation is well documented and went off without a hitch. but I just hate having to boot something else on my main box (partly because it also runs a mailserver for my personal domain, partly because, well, I just want my box running CentOS, not Ubuntu.) Searching through SDR info on line I see someone has documented installing all the bits for C6, but I suspect the process is different for C7. BTW, I installed the various bits I could find from, er, I think some came from li.nux.ro, some perhaps from epel, on C7, but couldn't get them to properly function. Worse, when the USB radio is unplugged from the system, it locks up hard. then a few days ago, I had been playing with it using the UBUNTU install, did a reboot and for kicks fired up the GQRX on Centos, and lo and behold it worked! I tried running it on Centos yesterday and it reverted to type, i.e., lock up hard. I suspect that Ubuntu is leaving some hardware in a state that allows it to work on a subsequent Centos boot (without poweroff), but no clue what. So, if anyone can point me to how to use it on C7, I'd greatly appreciate it. thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- Show me your ways, O LORD, teach me your paths; Guide me in your truth and teach me, for you are God my Savior, And my hope is in you all day long. -------------------------- Psalm 25:4-5 (NIV) --------------------------------

2 4

Does Huawei break the license of CentOS?
by Genghuang Wang 12 Apr '18

12 Apr '18

Hello, CentOS team and everyone who cares about CentOS, Huawei release an Euler OS, which is an distribution based on CentOS. http://developer.huawei.com/ict/en/site-euleros/euleros-introduction According to CentOS's statement, CentOS is distributed under the GPLv2 License. http://mirror.centos.org/centos/7.4.1708/os/x86_64/EULA The GPL license requires the modified version to be open-source AND release in the GPL license, as well. However, Huawei break the GPL license by close-source and replace the license with their proprietary one. How do I find it? Well, I download the so-called Euler OS from http://developer.huawei.com/ict/site-euleros/euleros/repo/yum/2.2/os/x86_64… And install it in the virtual machine. From the following path: /usr/share/euleros-release/EULA /usr/share/eula/eula/eula.en_US I find that it is NOT the GPL license, but Huawei's own license. So is Huawei breaking the license of CentOS?

3 8

/lib/firmware/microcode.dat update on CentOS 6
by Valeri Galtsev 05 Apr '18

05 Apr '18

Dear All, An update just brought on my CenOS 6 boxes updated microcode.dat files: /lib/firmware/microcode.dat Does anybody know off hand what (how critical) is that, as, if it is related to most famous these days trouble with CPU hardware, I will need to reboot relevant boxes to have new microcode loaded. But if it is not that critical, it can wait till next reboot. Thanks a lot and apologies for laziness (not looking into details of this particular update myself). Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

15 29

RADIUS
by hw 09 Mar '18

09 Mar '18

Hi, I´m trying to figure out how to practically use RADIUS to authenticate users. So far, I have only found documentation explaining that the idea is that users somehow magically need to authenticate against a RADIUS server via a device like a switch or a wireless access point before they are given or being denied access to a network. I understand that I have to refer to the documentation of the switch or access point to figure out how to set up RADIUS authentication with the particular device. But how is this achieved in practice? Let´s say I have a couple laptops and a couple phones and a couple computers which connect either to a switch or to a wireless access point. Both the switch and the access point support RADIUS, and I would set them up to talk to the RADIUS server and require every device that wants to connect to the network through them to authenticate first. I also have a couple thin clients and a couple computers which use PXE-boot, and the users of those would have to provide authentication before the machines could even boot. Then what? How do I make it so that the users are actually able to authenticate? Is there any documentation about this? Or am I not supposed to use RADIUS but something else?

10 55

Squid and HTTPS interception on CentOS 7 ?
by Nicolas Kovacs 08 Mar '18

08 Mar '18

Hi, I've been running Squid successfully on CentOS 7 (and before that on 6 and 5), and it's always been running nicely. I've been using it mostly as a transparent proxy filter in school networks. So far, I've only been able to filter HTTP. Do any of you do transparent HTTPS filtering ? Any suggestions, advice, caveats, do's and don'ts ? Cheers from the snowy South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

13 32

Going back to a minimal system : strange problem
by Nicolas Kovacs 02 Mar '18

02 Mar '18

Hi, Some time ago I wrote a little script elaguer.sh ("élaguer" means "to prune") which simply removes all packages that are *not* part of a minimal installation. First I created a list of packages that make up a minimal CentOS installation. On a fresh install, I would do something like this: # rpm -qa --queryformat '%{NAME}\n' | sort > minimal.txt Here's the resulting list of packages. I added a comment on top: https://github.com/kikinovak/centos-7-server-lan/blob/master/config/pkglist… And here's the script to prune the installation, e. g. remove everything that's not on the list. https://github.com/kikinovak/centos-7-server-lan/blob/master/elaguer.sh This script worked perfectly for some time. But now it seems like something has changed somewhere under the hood. Because when I run it now, the script fails at the final package removal stage. One curious detail: it seems like it tries now to remove 'yum' and 'systemd', so 'yum' exits with an error. But it didn't do that before, so my guess is either 'yum' behaves differently now, or package dependencies are calculated differently. Anyway, I'm a bit clueless here. Any suggestions? Cheers from the freezing South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 4

Mirror Problem
by Günther J. Niederwimmer 01 Mar '18

01 Mar '18

Hello, I have thousands of this messages on my servers ?? Is this a Problem on my site or is the infrastructure broken?? /etc/cron.hourly/0yum-hourly.cron: Could not get metalink https://mirrors.fedoraproject.org/metalink? repo=epel-7&arch=x86_64 error was 14: HTTPS Error 503 - Service Unavailable Thanks for a answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer

4 4

pid_max
by Jerry Geis 01 Mar '18

01 Mar '18

I have two systems both running CentOS 7.4 one shows pid_max as 32768 the other shows pid_max as 49152 Why might that be ? I would have thought they would be the same. I have not changed them. Thanks, Jerry

3 3

Best practices to manager multiples sysadmins working as root with multiple servers?
by marcos sr 28 Feb '18

28 Feb '18

Hello In my new company they have a lot of CentOS linux servers. I was wondering what is the best practice do manage access root to a multiples sysadmin in multiple servers. Pupper? Ldap? Proxy Server with ssh? Thanks for attention.

2 1

Any alternatives for the horrible reposync
by Dennis Jacobfeuerborn 28 Feb '18

28 Feb '18

Hi, I'm currently trying to mirror a couple of yum repositories and the only tool that seems to be available for this is reposync. Unfortunately reposync for some inexplicable reason seems to use the yum config of the local system as a basis for its work which makes no sense and creates all kinds of problems where cache directories and metadata gets mixed up. Are there any alternatives? Some repos support rsync but not all of them so I'm looking for something that works for all repos. Regards, Dennis

5 6

Ubiquiti Model UAP-AC-PRO
by Gregory P. Ennis 27 Feb '18

27 Feb '18

Everyone, Have any of you installed ubiguiti wireless routers on your network? It looks like the setup requires the use of software; they have some packages that are ready made for Ubuntu and Debian, but not RedHat https://www.ubnt.com/download/unifi/unifi-ap-ac-pro Have any of you tried or succeeded in installation this on Centos 7.4? Greg Ennis

9 15

How to update modules in iniramfs fastly
by wuzhouhui 27 Feb '18

27 Feb '18

I know dracut can update modules in initramfs, but I think it is too slow. So I'm wondering what is the fastest way to update modules in initramfs of CentOS 7? Thanks!

4 6

Cloud image_index: is 1801-01 a release?
by Nicholas Timkovich 26 Feb '18

26 Feb '18

I load CentOS cloud images into our infrastructure for our users to use, and I have a script that looks at https://cloud.centos.org/centos/7/images/image-index, picking what has the highest revision, to find the new hotness. Up until the most recent image, they've all appeared in there; is this changing going forward? How can I automatically find the newest one and its revision tag? The untagged "latest" ones (linked to by the https://wiki.centos.org/Download page) don't appear in the sha256sums file, so I couldn't even compare sums. Can I petition for keeping the cloud image-index up-to-date? -- Nick Timkovich | Software Engineer | Computation Institute, University of Chicago | npt(a)uchicago.edu

1 0

lensfun-update-data on CentOS 7
by wwp 26 Feb '18

26 Feb '18

Hello there, did anybody have lensfun-update-data (*) to work on CentOS 7? Here I get, as root: $ lensfun-update-data Traceback (most recent call last): File "/bin/lensfun-update-data", line 118, in <module> read_location("http://lensfun.sourceforge.net/db/") File "/bin/lensfun-update-data", line 99, in read_location print("Reading {} \u2026".format(base_url + "versions.json")) UnicodeEncodeError: 'ascii' codec can't encode character '\u2026' in position 56: ordinal not in range(128) (*) 0.3.1 from EPEL. Regards, -- wwp

1 0

Re-enable grub boot in UEFI (Windows took over it)
by wwp 26 Feb '18

26 Feb '18

Hello there, Dell XPS-15-9560 laptop (SSD drive, UEFI, secure boot off).. Windows 10 pre-installed, CentOS7 installed in a separate partition and running for months w/o issue. Don't know what happened but at reboot yesterday (not even booted in Windows, just rebooted), grub has disappeared, booted in Windows by default, which apparently has taken over the UEFI boot. By booting from a USB drive w/ CentOS7 LiveGnome, I could use its grub command prompt to inspect the UEFI of the local SSD drive, see that the centos/ sub-directory and files are still there. /boot/efi/EFI/centos/: BOOT.CSV BOOTX64.CSV fonts grub.cfg grub.cfg.1501243846.rpmsave grub.cfg.1505469290.rpmsave grubenv grubx64.efi mmx64.efi shim.efi shimx64-centos.efi shimx64.efi maybe /boot/efi/EFI/Boot/ contents has been altered? /boot/efi/EFI/Boot/: bootx64.efi fbx64.efi I had a backup of the full efi partition (`dd`) but it's outdated and I feel it's a bad idea to restore the partition from it. Still from this "external" grub prompt, I could boot into my CentOS7 using: configfile (hd0,gpt1)/EFI/centos/grub.cfg At least I know how to get back to it :-). But now, how could I give the UEFI control back to grub? Is there a grub2 or grubby command I can run to make grub the default? I've read a lot and still cannot figure out exactly what to do or don't dare running commands that could make things worse. And I have the feeling the at next Windows boot, I may need to do it again.. Regards, -- wwp

3 9

Set LANG on CentOS 6 server
by Nicolas Kovacs 24 Feb '18

24 Feb '18

Hi, I'm having a weird problem on a CentOS 6 server. I installed the machine in french, so I have LANG=fr_FR.UTF8 defined. I'd like to define en_US.UTF8, because some output is better readable in english, like chkconfig --list. I replaced fr_FR.UTF8 in /etc/sysconfig/i18n and /boot/grub/grub.conf. Unfortunately, when I reboot the system, I still get this: # echo $LANG fr_FR.UTF-8 Any suggestions? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

Network broke for a while when libvirtd start
by wuzhouhui 24 Feb '18

24 Feb '18

When start service libvirtd by service libvirtd start the network will broke for a while and then reconnected. Following is /var/log/messages: Feb 24 13:28:51 node-0 kernel: lo: Dropping TSO features since no CSUM feature. Feb 24 13:28:51 node-0 kernel: lo: Disabled Privacy Extensions Feb 24 13:28:51 node-0 kernel: virbr0: Dropping TSO features since no CSUM feature. Feb 24 13:28:51 node-0 kernel: virbr0: Dropping TSO6 features since no CSUM feature. Feb 24 13:28:51 node-0 kernel: device virbr0-nic entered promiscuous mode Feb 24 13:28:51 node-0 kernel: virbr0: starting userspace STP failed, starting kernel STP Feb 24 13:28:51 node-0 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team Feb 24 13:28:51 node-0 kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) Feb 24 13:28:51 node-0 kernel: virbr0: topology change detected, propagating Feb 24 13:28:51 node-0 kernel: virbr0: port 1(virbr0-nic) entering forwarding state Feb 24 13:28:51 node-0 kernel: 8021q: adding VLAN 0 to HW filter on device virbr0 Feb 24 13:28:51 node-0 kernel: ixgbe 0000:02:00.0: eth2: detected SFP+: 3 Feb 24 13:28:52 node-0 kernel: ixgbe 0000:02:00.1: eth3: detected SFP+: 4 Feb 24 13:28:52 node-0 kernel: bonding: bond0: link status definitely down for interface eth2, disabling it Feb 24 13:28:52 node-0 kernel: virbr0: port 1(virbr0-nic) entering disabled state Feb 24 13:28:52 node-0 kernel: bonding: bond0: link status definitely down for interface eth3, disabling it Feb 24 13:28:53 node-0 kernel: ixgbe 0000:02:00.0: eth2: NIC Link is Up 10 Gbps, Flow Control: RX/TX Feb 24 13:28:53 node-0 kernel: bond0: link status definitely up for interface eth2, 10000 Mbps full duplex. Feb 24 13:28:53 node-0 kernel: ixgbe 0000:02:00.1: eth3: NIC Link is Up 10 Gbps, Flow Control: RX/TX Feb 24 13:28:53 node-0 kernel: bond0: link status definitely up for interface eth3, 10000 Mbps full duplex. OS: CentOS 6.5 libvirt: libvirt-daemon-1.2.5-1.mira1.x86_64 Does anyone know the reason?

2 2

a few simple questions about upgrading an "official" centos 7 release
by Robert P. J. Day 24 Feb '18

24 Feb '18

again, some fairly trivial(?) questions about working with centos 7.4, given my time immersed in fedora so i want to make sure i'm not carrying over any bad habits. first, is there anything untoward in updating an installed version of centos 7.4 with a simple "yum update"? i'm well aware of keeping in mind the goal of stability with centos, so am unsure what the philosophy is of pulling in new updates as cavalierly as i do with fedora. currently, "yum list updates" shows me 206 possible updates; should i have any concern about updating packages coming from the standard centos repos? next, are there any issues replacing yum wihth dnf? i found this piece: https://www.vultr.com/docs/use-dnf-to-manage-software-packages-on-centos-7 which suggests it shouldn't be a problem. thoughts? finally, any concerns i should have about upgrading the kernel from 3.10 to 4.14 or 4.15, as explained in a number of places like this: https://www.tecmint.com/install-upgrade-kernel-version-in-centos-7/ i simply prefer to run a current kernel but i can resist the temptation if upgrading that on a centos 7.4 system would introduce more problems than are worth it. thoughts? rday

5 7

what is the centos/elrepo policy toward LTS kernels?
by Robert P. J. Day 23 Feb '18

23 Feb '18

i'm sure there's a simple answer to this -- i already understand that newer kernels than the ones shipped with the official release aren't officially supported but there is the elrepo kernel repository here: http://elrepo.org/linux/kernel/el7/x86_64/RPMS/ with a mixture of long-term (lt) and mainline (ml) kernels. i assume that the mainline kernels pretty closely track the latest kernel release but that's not the one i'm interested in. if i was interested in the additional longevity of the LTS kernels, i can see that 4.4 is available. but the most recent LTS kernel was 4.14, was it not? so why is a 4.14 "lt" kernel not available in that repository? i am obviously unclear on the policy used to determine which kernel versions end up in that repository. rday -- ======================================================================== Robert P. J. Day Ottawa, Ontario, CANADA http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

3 3

Ubiquiti Model UAP-AC-PRO
by Paul Schoonderwoerd 23 Feb '18

23 Feb '18

>Everyone, > >Have any of you installed ubiguiti wireless routers on your network? > >It looks like the setup requires the use of software; they have some >packages that are ready made for Ubuntu and Debian, but not RedHat > >https://www.ubnt.com/download/unifi/unifi-ap-ac-pro[1] _>_ >Have any of you tried or succeeded in installation this on Centos 7.4? > >Greg Ennis To install just the one access point, just download their app on your phone and configure it. Very easy. For a full Ubiquity network you can install the software on a Linux machine or buy the Cloud key, same software running on a small RaspberryPi like box (needs POE connection). Makes managing the components much much easier. Paul Schoonderwoerd Pollux IT -------- [1] https://www.ubnt.com/download/unifi/unifi-ap-ac-pro

1 0

Cisco AnyConnect Mobility Client for 32- bit CentOS 6
by H 22 Feb '18

22 Feb '18

I have the above installed on a couple of 64-bit systems, both CentOS 6 and CentOS 7, where the client works fine. Now, however, I have installed the 32-bit version of CentOS 6 on a netbook but I cannot get the Cisco website installer to recognize the computer/operating system, not even displaying any error message. Does anyone have the client running on a 32-bit system? I have been told it should run on a 32-bit system and did have it running on the same netbook while it was still running Vista Home edition, another 32-bit operating system.

3 4

CentOS 7 1708 won't boot after grub2 update
by Sorin Srbu 22 Feb '18

22 Feb '18

Hi all, This is the third fresh install of CentOS 7 1708 the last two months that won't boot after a regular "yum update" just after the fresh install has finished. I've never had this problem before, it has just worked. The installs are on OEM's that have previously run CentOS 6.9 x64. Am I missing something here? -- BW, Sorin ----------------------------------------------------------- # Sorin Srbu, Sysadmin # Uppsala University # Dept of Medicinal Chemistry # Div of Org Pharm Chem # Box 574 # SE-75123 Uppsala # Sweden # # Phone: +46 (0)18-4714482 # Visit: BMC, Husargatan 3, B5:404b # Web: http://www.orgfarm.uu.se ----------------------------------------------------------- # O< ASCII ribbon campaign - Against html E-mail # http://tinyurl.com/ascii-ribbon-campaign # # This message was not sent from an iProduct! # # Please consider the environment before printing this email. # Join the campaign at http://thinkBeforePrinting.org # # MotD follows: Do not disturb -- I'm disturbed enough already.

5 12

Problem with ssh disconnecting
by H 22 Feb '18

22 Feb '18

Running CentOS 7 on workstation and having a problem with ssh disconnects. My ssh_config contains: Host * TCPKeepAlive yes ServerAliveInterval 30 ServerAliveCountMax 300 and sshd_config on the server contains: TCPKeepAlive yes ClientAliveInterval 60 ClientAliveCountMax 300 Have I missed any setting needed to prevent these random disconnects? I don't think there is anything wrong with the network card, the driver, or the cable, since if I am on a VPN connection via another server, the VPN and any ssh connection stay up indefinitely. Thanks.

6 11

A question about smb.conf between C6 and c7
by m.roth＠5-cent.us 21 Feb '18

21 Feb '18

Are there any? Will a C 6 conf work under C 7? A pointer to a README would be appreciated on configuration differences, if any. Thanks in advance. mark

1 0

Adding new automount entries to a map served via sssd from AD
by James Pearson 21 Feb '18

21 Feb '18

I've been experimenting with setting up a CentOS 7 client using automount maps from Active Directory via sssd I've followed the instructions given at: https://ovalousek.wordpress.com/2015/08/03/autofs/ and all works fine However, I can't seem to make the client 'see' new map entries added to the map on the AD server - I've tries reducing various timeout settings in /etc/sssd/sssd.conf to see if that helps - e.g. entry_cache_timeout = 60 entry_cache_autofs_timeout = 15 but map entries don't appear at all - unless I run 'sss_cache -A' to invalidate the sssd autofs map caches Does anyone know how to make new map entries appear automagically ? Thanks James Pearson

1 1

is the centos wiki "Additional Resources/Repositories" page reasonably up to date?
by Robert P. J. Day 21 Feb '18

21 Feb '18

(apologies for what will be some upcoming trivial questions, but i'm jumping back into centos after years and years of living with fedora, so i'm feeling fairly comfortable, just the occasional centos-specific question.) is the wiki repos page fairly up to date? https://wiki.centos.org/AdditionalResources/Repositories i ask since i note that its last edit was 2017-06-25, and things might have changed in the last several months. rday

1 0

are there reference lists/cheat sheets for categorized commands?
by Robert P. J. Day 21 Feb '18

21 Feb '18

prepping to teach a 5-day CompTIA linux+ course next week with CompTIA-supplied courseware and, given that it was my choice, i chose to set up the classroom with centos 7.4 on all the student systems since i assume most students are there to learn sysadmin and that's the most likely platform they'll have when they get back to work. also, most students are taking this course to prep for the subsequent LPI exams to get their certification, which plays into my question. while the C/W is not bad, it's awfully verbose, and it would be handy if there were concise cheat sheets of commands/files related to the standard sysadmin they'll be expected to answer questions on. as an example, regarding user/group management, i'm collecting all of the relevant commands that they need to know about, in the sense of, "if you understand these commands, you should be fine." regarding user/group admin, my tentative list of commands would be: * user{add,mod,del} * group(add,mod,del} * passwd, gpasswd * chage, chsh, chfn * pwck, grpck * pwconv, pwunconv not sure what i'm missing here, i just typed those off the top of my head. rather than scatter all of that over an entire chapter, are there any official centos/rhel reference sheets like that? if not, i can just write my own and post them at my wiki. thanks for any pointers. rday -- ======================================================================== Robert P. J. Day Ottawa, Ontario, CANADA http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

2 1

OpenShift Origin Install
by Antonio da Silva Martins Junior 20 Feb '18

20 Feb '18

Hi, I'm trying to install OpenShift Origin on a CentOS 7 host (just for initial testing), and I'm trying to follow the instructions from here: https://wiki.centos.org/SpecialInterestGroup/PaaS/OpenShift-Quickstart On that page we need to run: "atomic-openshift-installer install" to configure OpenShift... after run the script it throws this errors: Failure summary: 1. Hosts: c7-oc-master Play: OpenShift Health Checks Task: Run health checks (install) - EL Message: One or more checks failed Details: check "docker_image_availability": One or more required container images are not available: openshift3/ose-deployer:v3.7.0, openshift3/ose-docker-registry:v3.7.0, openshift3/ose-haproxy-router:v3.7.0, openshift3/ose-pod:v3.7.0, openshift3/registry-console:v3.7 Checked with: skopeo inspect [--tls-verify=false] [--creds=<user>:<pass>] docker://<registry>/<image> Default registries searched: registry.access.redhat.com check "package_availability": Cannot install all of the necessary packages. Unavailable: atomic-openshift atomic-openshift-clients atomic-openshift-master atomic-openshift-node atomic-openshift-sdn-ovs You may need to enable one or more yum repositories to make this content available. My problem is with the "atomic-openshift" packages it can't find... they are necessary? I can't find it anywhere! Thanks, Antonio. -- *Antonio da Silva Martins Jr. * *Analista de Suporte* NPD - Núcleo de Processamento de Dados UEM - Universidade Estadual de Maringá email: *asmartins(a)uem.br* <asmartins(a)uem.br> / asmartins.uem(a)gmail.com fone: +55 (44) 3011-4015 / 3011-4411 inoc-dba: 263076*100 "Real Programmers don’t need comments — the code is obvious."

2 2

CentOS-announce Digest, Vol 156, Issue 2
by centos-announce-request＠centos.org 20 Feb '18

20 Feb '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. [Infra] - planned outage : bugs.centos.org (Bug Tracker) (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Mon, 19 Feb 2018 14:30:21 +0100 From: Fabian Arrotin <arrfab(a)centos.org> To: "The CentOS developers mailing list." <centos-devel(a)centos.org>, centos-announce(a)centos.org Subject: [CentOS-announce] [Infra] - planned outage : bugs.centos.org (Bug Tracker) Message-ID: <efbf1d79-d56f-dc27-0f69-b97fac07c989(a)centos.org> Content-Type: text/plain; charset="utf-8" This notification to let you know that we'll migrate our https://bugs.centos.org bug tracker service to a different node, and also updated to a new version of MantisBT (version 2.x) This migration will give us more possibilities, including soon trying to get SSO working even on our bug tracker (that part still need to be done though) Migration is scheduled for """"Tuesday February 20th, 8:00 am UTC time"""". You can convert to local time with $(date -d '2018-2-20 8:00 UTC') The expected "downtime" is estimated to ~10 minutes , time needed to update/propagate updated dns A/AAAA records + last mysql dump/restore on the new node. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

1 0

Pulse Secure/Juniper Networks Network Connect (CentOS 7)
by Toralf Lund 19 Feb '18

19 Feb '18

Hi, Is anyone here using the "Network Connect" VPN software from Pulse Secure (which was previously known as Juniper Networks Network Connect)? I've used this successfully in the past to connect to the machines at work from home. That was with CentOS 6, though, on CentOS 7 I can't seem to get it to work. The software actually starts, and it also successfully sets up a "tun" type network device with an IP address, but I can't reach anything across the connection. In fact, even resources outside VPN/the company network become unreachable. Does anyone have any idea what may be wrong? Output from /sbin/ifconfig as well as /sbin/route from a typical session are included below. Thanks. - Toralf -- enp0s31f6: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 ether c8:5b:76:f7:d1:9c txqueuelen 1000 (Ethernet) RX packets 6523788 bytes 5286956088 (4.9 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1417201 bytes 209955717 (200.2 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 16 memory 0xf1200000-f1220000 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1 (Local Loopback) RX packets 487991 bytes 165475903 (157.8 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 487991 bytes 165475903 (157.8 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1400 inet 10.30.250.90 netmask 255.255.255.255 destination 10.30.250.90 inet6 fe80::1ddf:c174:c72c:81e prefixlen 64 scopeid 0x20<link> unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1 bytes 48 (48.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.130.123 netmask 255.255.255.0 broadcast 192.168.130.255 inet6 fe80::ed8f:66bd:4f45:f3e4 prefixlen 64 scopeid 0x20<link> ether 14:ab:c5:06:57:c0 txqueuelen 1000 (Ethernet) RX packets 34172 bytes 33693984 (32.1 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 24197 bytes 5277607 (5.0 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default osl-97214 0.0.0.0 UG 1 0 0 tun0 default Zhone.Home 0.0.0.0 UG 600 0 0 wlan0 192.168.130.0 0.0.0.0 255.255.255.0 U 600 0 0 wlan0 Zhone.Home 0.0.0.0 255.255.255.255 UH 1 0 0 wlan0 remote.pgs.com Zhone.Home 255.255.255.255 UGH 1 0 0 wlan0

1 0

Is CentOS Linux protected against the Meltdown and Spectre security flaws?
by Turritopsis Dohrnii Teo En Ming 19 Feb '18

19 Feb '18

What are the patches that I can download and install to be protected against the Meltdown and Spectre security vulnerabilities? ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ [2] http://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END SIGNATURE===

3 2

Install CentOS 7 on MBR hard disk
by Yves Bellefeuille 17 Feb '18

17 Feb '18

I have a UEFI system, but I want to install CentOS on a MBR (not GPT) hard disk. The installation program keeps telling me that I must create an "EFI system partition on a GPT disk mounted at /boot/efi". I can't find a way to work around this. Is there a solution? -- Yves Bellefeuille <yan(a)storm.ca>

6 17

iptables routing question when using multiple IP addresses
by Ken Gramm 16 Feb '18

16 Feb '18

I've been searching around for a couple of days, and I just can't seem to find the answer I'm looking for. I have a 6.x box that I use as my gateway firewall. It has three NICs; 1 external, 1 internal, 1 for a guest network. I have various inbound traffic routed to separate internal machines based on the application (ie. http, smtp, ftp, etc....). All works well, but I'd like to add a second IP address to the external NIC and then route a second https stream to a different internal machine. So https traffic on one IP address goes to one internal machine and https traffic on a second IP address goes to a different internal machine. Seems like it should be an everyday configuration, but I can't find any clear examples on how to do it. Could someone please point me in the right direction? Thanks, Ken Gramm

2 1

Percentage of CentOS coded in each language
by Blake Hudson 16 Feb '18

16 Feb '18

Had a curious question about how much of Linux (as a usable distribution, not just the kernel) is coded in each language. I can find some older or vague references without citation that Linux is largely coded in C and C++, with a fraction of a percent coded in other languages. While the source is available, I'm not sure how would one go about determining the percentage of CentOS coded in each language (either by lines of source code or by RPM package). Anyone have any suggestions for determining this info? Someone already have the answer? Thanks, --B

3 2

CentOs7 and devtoolset-7 and libgcc_s.so.1 library question
by ToD In 16 Feb '18

16 Feb '18

I'm looking for the library from subject. It is present in system gcc (4.8.5) but I cannot see it in devtoolset-7. Could You please tell me why is it so?

1 0

CentOS7 1801-01 cloud images
by Pierre Riteau 15 Feb '18

15 Feb '18

Hello, There is a new cloud image versioned as 1801-01 available at https://cloud.centos.org/centos/7/images/ However, it is missing from the image-index file. I noticed the Azure version is also absent. Was there a problem with the image build process? Should this image be used? Thanks, Pierre Riteau Chameleon Lead DevOps Engineer https://www.chameleoncloud.org

2 1

FOSDEM Dojo update, videos
by Rich Bowen 14 Feb '18

14 Feb '18

A big thank you to everyone who attended the CentOS Dojo in Brussels a week ago. We had about 75 people in attendance (101 registered) and we had two tracks of great presentations. If you did not make it to the event, you can still catch all of the presentations on our YouTube channel, at https://www.youtube.com/user/TheCentOSProject/playlists Unfortunately, you miss out on the great hallway track, but there's always next year! Meanwhile, keep a lookout for upcoming events - http://wiki.centos.org/Events - and try to attend a dojo near you in the coming months. And if you'd like to host or help organize a dojo, please get in touch with me, or with the centos-promo mailing list - centos-promo(a)centos.org - with your suggestions, and we'll try to make it happen. --Rich -- Rich Bowen - rbowen(a)redhat.com @RDOcommunity // @CentOSProject // @rbowen

2 2

kmod c74 broken: howto report it
by Stijn De Weirdt 14 Feb '18

14 Feb '18

hi all, latest kmod update 20-15.el7_4.6 is broken on our systems, while previous 20-15.el7_4.4 was working fine (and downgrading fixes the issue). the issue is with modules from mellanox kmod rpms that are symlinked in the weak-updates dir. the config files in /etc/depmod.d look ok (and do work with previous version): dist.conf has weak-updates after built-in, and mellanox kmod rpms ship a config that overrides it for all modules. anyhow, before i try to get this upstream, how do i report this with centos team (to make sure the centos kmod rpm was correctly build). (i have already asked here before how to properly report it, but can't find my previous mail ;) stijn

3 4

Re: [CentOS] CentOS 6: Yum downloadonly changes local source repositories (and CentOS 7)
by Danny Smit 14 Feb '18

14 Feb '18

For what its worth, I managed to get around the problem with a small patch on yum itself: --- ORIG/usr/lib/python2.6/site-packages/yum/yumRepo.py 2017-03-22 05:32:26.000000000 +0000 +++ NEW/usr/lib/python2.6/site-packages/yum/yumRepo.py 2018-02-14 09:14:04.879902463 +0000 @@ -863,6 +863,7 @@ class YumRepository(Repository, config.R text=text, cache=cache, size=package.size, + copy_local=1, ) def getHeader(self, package, checkfunc = None, reget = 'simple', Although newer versions of yum do not rename the local package anymore, it still does not copy/download the package into the desired "downloaddir". I will try to report that upstream. Regards, Danny On Tue, Feb 13, 2018 at 6:05 PM, Danny Smit <danny.smit.0(a)gmail.com> wrote: > Hi All, > > I'm trying to use yum with the downloadonly option to collect a set of > packages including dependencies. I noticed that even on CentOS 6 the > downloadonly option is currently a default feature of the core of yum > itself, which is nice. > > However something strange occurs when one of the repositories to > download from is a local repository, like: > > [custom-repo] > name=My custom repo > baseurl=file:///repositories/mycustomrepo/ > > I added such a repo to my yum configuration and then executed: > > yum install -y --downloadonly --downloaddir=downloads custom_package > > When executing the above the package in question is suddenly renamed from: > > /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6.x86_64.rpm > > to > > /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6 > > Note that the architecture part and file extension are removed with > the file in the local repo, where I wouldn't expect yum to even try to > change something there. > Also nothing is downloaded into the downloads dir as specified. > > Strangely when it concerns a package that comes from a repository that > is configured as an http URL, the download option works flawlessly. > > Has anyone else seen this behavior? Is it a bug? Or is there a way around this? > Actually I would even prefer not having to run yum as root for this, > unfortunately yum to require write access to lock files in /var/. > > Platform: CentOS 6.9 (also not working with CentOS 7, then it keeps > the file intact, but doesn't download either) > Yum: 3.2.29-81.el6.centos > > Kind regards, > Danny

1 0

selinux policy with rsyslog and tls/certs
by John Ratliff 13 Feb '18

13 Feb '18

I've setup my rsyslog server to forward traffic to another rsyslog server on my network. It's using gTLS to encrypt the messages in transit. selinux is not allowing rsyslogd to read the certificates. They are world readable, so I don't think that is the problem. When I turn selinux mode to permissive, it works fine. What context should the ssl certificates be in for rsyslog to be able to read them? thanks.

1 1

Two MACs for one IP
by m.roth＠5-cent.us 13 Feb '18

13 Feb '18

The reason I want to assign one IP to two MAC addresses is that I have one (and only one) user for whom I have to spoof the MAC address (it's a case of stupid software licensing). But... his system is encrypted. Now, we're using clevis to allow reboots without someone being at the keyboard to type in the password. Those of you who've looked at clevis see where this is going: clevis uses the *real* firmware MAC address to get the key from the latchset server... while currently, the dhcpd *only* knows the spoofed MAC address. After the system's unlocked, it boots, and comes up with the spoofed MAC address. It *appears* I can do this, but I thought I'd ask here if there were any issues that dhcpd itself would have if I do. mark

1 0

CentOS 6: Yum downloadonly changes local source repositories
by Danny Smit 13 Feb '18

13 Feb '18

Hi All, I'm trying to use yum with the downloadonly option to collect a set of packages including dependencies. I noticed that even on CentOS 6 the downloadonly option is currently a default feature of the core of yum itself, which is nice. However something strange occurs when one of the repositories to download from is a local repository, like: [custom-repo] name=My custom repo baseurl=file:///repositories/mycustomrepo/ I added such a repo to my yum configuration and then executed: yum install -y --downloadonly --downloaddir=downloads custom_package When executing the above the package in question is suddenly renamed from: /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6.x86_64.rpm to /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6 Note that the architecture part and file extension are removed with the file in the local repo, where I wouldn't expect yum to even try to change something there. Also nothing is downloaded into the downloads dir as specified. Strangely when it concerns a package that comes from a repository that is configured as an http URL, the download option works flawlessly. Has anyone else seen this behavior? Is it a bug? Or is there a way around this? Actually I would even prefer not having to run yum as root for this, unfortunately yum to require write access to lock files in /var/. Platform: CentOS 6.9 (also not working with CentOS 7, then it keeps the file intact, but doesn't download either) Yum: 3.2.29-81.el6.centos Kind regards, Danny

1 0

Unbound question: forward-zone and stub-zone
by C. L. Martinez 13 Feb '18

13 Feb '18

Hi all, I have a strange case with unbound ... I have defined a stub-zone to query to a secondary DNS server: stub-zone: name: "mydomain.org" stub-addr: 172.22.54.4 stub-zone: name: "54.22.172.in-addr.arpa." stub-addr: 172.22.54.4 ... but it doesn't works: any hostname or IP address is resolved. But if I use "forward": forward-zone: name: "mydomain.org" forward-addr: 172.22.54.4 forward-zone: name: "54.22.172.in-addr.arpa." forward-addr: 172.22.54.4 all works ok. Then, which is the real difference between stub and forward zones? According to unbound's man page, stub-zone is used for authority servers, which is my case. But forward zones are valid for not authority servers. On the other side: "unbound performs the recursive processing itself for stub zones." ¿¿¿??? How?? Why?? If I use a stub-zone, it is because I have an authority server with recursion for its SOA domain ... I don't understand ... What is the correct configuration? -- Greetings, C. L. Martinez

1 0

Not able to sync mirror of Centos7 due to CRC checksum errors
by Soham Chakraborty 13 Feb '18

13 Feb '18

Hi, yesterday I was trying to create local mirror of CentOS7 using katello/pulp. I was receiving CRC checksum errors while attempting to sync the mirror. The particular error in question was: Feb 12 07:46:34 bazinga pulp: pulp_rpm.plugins.importers.yum.sync:INFO: [e2cd9930] Generating metadata databases. Feb 12 07:47:06 bazinga pulp: pulp_rpm.plugins.importers.yum.sync:ERROR: [e2cd9930] (23897-68256) CRC check failed 0x0 != 0xd61ac297L The full logs are available here: https://paste.fedoraproject.org/paste/lPnjaCFD6c~e22FtTedEKA I was under the impression that maybe somethinig is broken with katello/pulp and didn't pursue it further. Today, I attempted to sync it again with standalone pulp server (without katello/foreman/candlepin bits) and it failed again with same error. I tried a different mirror location as well, but received the same CRC check error: https://paste.fedoraproject.org/paste/O1ocILrTMEWkKDohOmXcaQ Then to test whether this is a problem with pulp or the upstream mirror, I decided to try to sync the CentOS6 repository from the same mirror and so far it is working. Can someone please tell me whether there could be any repodata corruption on the upstream repositories (as unlikely as it sounds)? Or anything which could prevent me from syncing the mirrors for internal consumption? Pulp installation is default as per https://docs.pulpproject.org/en/2.14/user-guide/installation/f23-.html Any thoughts? I am testing this on the 'generic/centos7' vagrant box. Thanks, -- Soham Chakraborty, Systems Administrator - EIS Pythian - Love your data chakraborty(a)pythian.com -- --

1 0

A question about NBD kernel module...
by Raghuram Devarakonda 12 Feb '18

12 Feb '18

Hi, I would like to mount a device using NBD protocol on CentOS 7 but it looks like the module is not available by default in the kernel. Is there a way I can install it (like from a rpm somewhere)? I found instructions to build such a module but want to make sure that it is not already available in some repo before I go ahead with building. Any help is greatly appreciated. Thanks, Raghu

2 1

libsmbclient conflict problem
by me＠tdiehl.org 12 Feb '18

12 Feb '18

Hi, I have a c-6 machine that I noticed the following on: (bugs pts10) # package-cleanup --problems Loaded plugins: fastestmirror, priorities, refresh-packagekit Package system-config-printer-libs-1.1.16-26.el6.x86_64 requires libsmbclient.so.0()(64bit) Package kdebase-runtime-libs-4.3.4-9.el6.x86_64 requires libsmbclient.so.0()(64bit) So then I ran: (bugs pts10) # yum install libsmbclient Loaded plugins: changelog, fastestmirror, priorities, refresh-packagekit Setting up Install Process Loading mirror speeds from cached hostfile * base: yumrepo * extras: yumrepo * fasttrack: yumrepo * remi: mirror.team-cymru.org * remi-php56: mirror.team-cymru.org * updates: yumrepo 138 packages excluded due to repository priority protections Resolving Dependencies --> Running transaction check ---> Package libsmbclient.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-winbind-clients = 3.6.23-46el6_9 for package: libsmbclient-3.6.23-46el6_9.x86_64 --> Processing Dependency: libwbclient.so.0()(64bit) for package: libsmbclient-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-winbind-clients.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-winbind = 3.6.23-46el6_9 for package: samba-winbind-clients-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-winbind.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-common = 3.6.23-46el6_9 for package: samba-winbind-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-common.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Conflict: samba4-common-4.2.10-12.el6_9.x86_64 conflicts samba-common < 3.9.9 --> Processing Conflict: samba4-winbind-4.2.10-12.el6_9.x86_64 conflicts samba-winbind < 3.9.9 --> Processing Conflict: samba4-winbind-clients-4.2.10-12.el6_9.x86_64 conflicts samba-winbind-clients < 3.9.9 --> Finished Dependency Resolution --> Finding unneeded leftover dependencies Found and removing 0 unneeded dependencies Error: samba4-winbind conflicts with samba-winbind-3.6.23-46el6_9.x86_64 Error: samba4-winbind-clients conflicts with samba-winbind-clients-3.6.23-46el6_9.x86_64 Error: samba4-common conflicts with samba-common-3.6.23-46el6_9.x86_64 You could try using --skip-broken to work around the problem ** Found 2 pre-existing rpmdb problem(s), 'yum check' output follows: kdebase-runtime-libs-4.3.4-9.el6.x86_64 has missing requires of libsmbclient.so.0()(64bit) system-config-printer-libs-1.1.16-26.el6.x86_64 has missing requires of libsmbclient.so.0()(64bit) (bugs pts10) # I have the following samba packages installed: (bugs pts10) # rpm -qa samba4\* samba4-winbind-clients-4.2.10-12.el6_9.x86_64 samba4-4.2.10-12.el6_9.x86_64 samba4-client-4.2.10-12.el6_9.x86_64 samba4-common-4.2.10-12.el6_9.x86_64 samba4-winbind-4.2.10-12.el6_9.x86_64 samba4-libs-4.2.10-12.el6_9.x86_64 (bugs pts10) Can someone tell me what what I need to do to resolve the above conflicts? There does not seem to be a later version of libsmbclient available. Regards, -- Tom me(a)tdiehl.org

3 5

Meltdown and Spectre
by isdtor 12 Feb '18

12 Feb '18

Does anyone know if Red Hat are working on backporting improved mitigation techniques and features from newer, 4.14.14+ kernels? $ grep . /sys/devices/system/cpu/vulnerabilities/* /sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI /sys/devices/system/cpu/vulnerabilities/spectre_v1:Vulnerable /sys/devices/system/cpu/vulnerabilities/spectre_v2:Vulnerable: Minimal generic ASM retpoline $

2 1

CentOS 7 Cloud 16.0.4 Nova Security Update
by Henry Spanka 10 Feb '18

10 Feb '18

Hello, A security issue has been found in Nova 16.0.3 and a fix has been released in December, however I haven’t seen Nova 16.0.4 in the Cloud repositories yet. Is someone working on updating the nova packages? The issue allows users to consume all resources on a host which leads to a denial of service. See: https://docs.openstack.org/releasenotes/nova/pike.html <https://docs.openstack.org/releasenotes/nova/pike.html> Vulnerability ID: OSSA-2017-006 ----------------------------------------------------------------------------------------- Mit freundlichen Grüßen / With best regards Henry Spanka — myVirtualserver — Development Team GPG: 8BA3 14FE 3973 9E17 1D9E ADAE CEAB DAB5 5B47 0BC8

1 0

Issues with NVidia video driver and CentOS
by Felipe Westfields 09 Feb '18

09 Feb '18

I'm having issues with a quad video card on CentOS. We have several systems on CentOS 6.8 and CentOS 6.9. The installed hardware is: Video card - Nvidia NVS quadro 440 PC - Dell OptiPlex 9020 Whenever you update the kernel, it kills the graphical interface. The system appears to lock up and freeze during a reboot, but you can still get into it with SSH, or, if you're at the console, control-alt-F2 gets you to a command prompt. If you exclude the kernel update when applying yum update, it is usually fine. If the kernel update is applied, and you roll back the update, that sometimes gets you back into the graphical console, but more likely than not, it won't. Not sure where to go with this. Any suggestions? FW

6 12

Adjust type of rw in submit_bio from int to unsigned long
by wuzhouhui 09 Feb '18

09 Feb '18

Hi, I am a developer who worked on CentOS. Recently I am working on porting one of my block drivers from CentOS 6.x to CentOS 7.x. In newest kernel (kernel-3.10.0-693.17.1.el7) I found there is an issue in submit_bio()'s first argument: void submit_bio(int rw, struct bio *bio) The type of bi_rw of struct bio is unsigned long, and the number of enum rq_flags_bits also exceeds 32, so we should better using unsigned long for rw in submit_bio(), like: void submit_bio(unsigned long rw, struct bio *bio)

1 1

OT: configuring xming to know putty's not in a std. location
by m.roth＠5-cent.us 08 Feb '18

08 Feb '18

Is there some way to do this? I've got the current putty (actually, putty-cac), pageant, and plink in my user's Downlods directory - neither he nor I have admin authority on his laptop, and Desktop support's teleworking today - but I can't seem to find a way to configure xming to look there for putty. Or is it start putty, *then* start xming? mark

5 5

OT - pushing database updates to web browser
by Gary Stainburn 07 Feb '18

07 Feb '18

This is O/T apart from the fact that the server is Centos running Apache / Postgresql. I want to develop a real time (ish) dashboard type web page showring extracts of the contents of a table. I would like any changes that occur to be pushed to the web clients rather than have the clients poll the database. Based on the fact that I have not managed to come up with a successful Google search phrase I think this may not be possible, but just in case I thought I'd ask here. If it's not possible, can anyone suggest the most efficient / responsive polling techniques?

3 3

/dev/md1 => 93% Used. Warning. Disk Filling up. - what would be safe to delete in /boot ?
by Alexander Farber 07 Feb '18

07 Feb '18

Hello CentOS users, in the recent time I keep getting the logwatch warnings from my 2 dedicated servers running CentOS 7.4.1708. I guess because of the numerous kernel updates (because of Spectre+Meltdown) in the near past? Could someone please suggest me, which files in my /boot partition would be safe to delete? I would like to avoid the situation of having to boot the rescue partiton etc. remotely... and at the same time I am not proficient with grub or whatever my provider has configured my dedicated hosts to use... # ls -al /boot total 427877 dr-xr-xr-x. 6 root root 6144 28. Jan 10:33 . dr-xr-xr-x 18 root root 4096 7. Feb 03:34 .. -rw-r--r-- 1 root root 140899 5. Dez 01:04 config-3.10.0-693.11.1.el7.x86_64 -rw-r--r-- 1 root root 140915 4. Jan 02:19 config-3.10.0-693.11.6.el7.x86_64 -rw-r--r-- 1 root root 140915 25. Jan 21:26 config-3.10.0-693.17.1.el7.x86_64 -rw-r--r-- 1 root root 140898 13. Sep 00:38 config-3.10.0-693.2.2.el7.x86_64 -rw-r--r-- 1 root root 140898 20. Okt 22:56 config-3.10.0-693.5.2.el7.x86_64 drwxr-xr-x 3 root root 1024 15. Sep 09:43 efi drwxr-xr-x. 2 root root 1024 11. Apr 2016 grub drwx------. 5 root root 1024 28. Jan 10:31 grub2 -rw-r--r--. 1 root root 40142116 15. Dez 2015 initramfs-0-rescue-34946d7b5edb0946bfb52c0f6cae67af.img -rw------- 1 root root 50402914 6. Dez 09:23 initramfs-3.10.0-693.11.1.el7.x86_64.img -rw------- 1 root root 18149718 6. Dez 09:24 initramfs-3.10.0-693.11.1.el7.x86_64kdump.img -rw------- 1 root root 50405879 5. Jan 09:02 initramfs-3.10.0-693.11.6.el7.x86_64.img -rw------- 1 root root 18150336 5. Jan 09:04 initramfs-3.10.0-693.11.6.el7.x86_64kdump.img -rw------- 1 root root 50402830 28. Jan 10:31 initramfs-3.10.0-693.17.1.el7.x86_64.img -rw------- 1 root root 18147918 28. Jan 10:33 initramfs-3.10.0-693.17.1.el7.x86_64kdump.img -rw------- 1 root root 50341850 15. Sep 09:45 initramfs-3.10.0-693.2.2.el7.x86_64.img -rw------- 1 root root 18147818 22. Okt 10:07 initramfs-3.10.0-693.2.2.el7.x86_64kdump.img -rw------- 1 root root 50393743 24. Okt 09:39 initramfs-3.10.0-693.5.2.el7.x86_64.img -rw------- 1 root root 18146720 24. Okt 09:40 initramfs-3.10.0-693.5.2.el7.x86_64kdump.img -rw-r--r--. 1 root root 611928 15. Sep 09:45 initrd-plymouth.img drwx------ 2 root root 12288 25. Mai 2016 lost+found -rw-r--r-- 1 root root 293093 5. Dez 01:07 symvers-3.10.0-693.11.1.el7.x86_64.gz -rw-r--r-- 1 root root 293110 4. Jan 02:21 symvers-3.10.0-693.11.6.el7.x86_64.gz -rw-r--r-- 1 root root 293109 25. Jan 21:28 symvers-3.10.0-693.17.1.el7.x86_64.gz -rw-r--r-- 1 root root 293064 13. Sep 00:40 symvers-3.10.0-693.2.2.el7.x86_64.gz -rw-r--r-- 1 root root 293084 20. Okt 22:59 symvers-3.10.0-693.5.2.el7.x86_64.gz -rw------- 1 root root 3228852 5. Dez 01:04 System.map-3.10.0-693.11.1.el7.x86_64 -rw------- 1 root root 3232490 4. Jan 02:19 System.map-3.10.0-693.11.6.el7.x86_64 -rw------- 1 root root 3232454 25. Jan 21:26 System.map-3.10.0-693.17.1.el7.x86_64 -rw------- 1 root root 3228852 13. Sep 00:38 System.map-3.10.0-693.2.2.el7.x86_64 -rw------- 1 root root 3228852 20. Okt 22:56 System.map-3.10.0-693.5.2.el7.x86_64 -rwxr-xr-x. 1 root root 5156528 15. Dez 2015 vmlinuz-0-rescue-34946d7b5edb0946bfb52c0f6cae67af -rwxr-xr-x 1 root root 5877504 5. Dez 01:05 vmlinuz-3.10.0-693.11.1.el7.x86_64 -rw-r--r-- 1 root root 171 5. Dez 01:05 .vmlinuz-3.10.0-693.11.1.el7.x86_64.hmac -rwxr-xr-x 1 root root 5889728 4. Jan 02:19 vmlinuz-3.10.0-693.11.6.el7.x86_64 -rw-r--r-- 1 root root 171 4. Jan 02:19 .vmlinuz-3.10.0-693.11.6.el7.x86_64.hmac -rwxr-xr-x 1 root root 5890720 25. Jan 21:26 vmlinuz-3.10.0-693.17.1.el7.x86_64 -rw-r--r-- 1 root root 171 25. Jan 21:26 .vmlinuz-3.10.0-693.17.1.el7.x86_64.hmac -rwxr-xr-x 1 root root 5878848 13. Sep 00:38 vmlinuz-3.10.0-693.2.2.el7.x86_64 -rw-r--r-- 1 root root 170 13. Sep 00:38 .vmlinuz-3.10.0-693.2.2.el7.x86_64.hmac -rwxr-xr-x 1 root root 5878368 20. Okt 22:56 vmlinuz-3.10.0-693.5.2.el7.x86_64 -rw-r--r-- 1 root root 170 20. Okt 22:56 .vmlinuz-3.10.0-693.5.2.el7.x86_64.hmac # cat /etc/grub2.cfg # # DO NOT EDIT THIS FILE # # It is automatically generated by grub2-mkconfig using templates # from /etc/grub.d and settings from /etc/default/grub # ### BEGIN /etc/grub.d/00_header ### set pager=1 if [ -s $prefix/grubenv ]; then load_env fi if [ "${next_entry}" ] ; then set default="${next_entry}" set next_entry= save_env next_entry set boot_once=true else set default="${saved_entry}" fi if [ x"${feature_menuentry_id}" = xy ]; then menuentry_id_option="--id" else menuentry_id_option="" fi export menuentry_id_option if [ "${prev_saved_entry}" ]; then set saved_entry="${prev_saved_entry}" save_env saved_entry set prev_saved_entry= save_env prev_saved_entry set boot_once=true fi function savedefault { if [ -z "${boot_once}" ]; then saved_entry="${chosen}" save_env saved_entry fi } function load_video { if [ x$feature_all_video_module = xy ]; then insmod all_video else insmod efi_gop insmod efi_uga insmod ieee1275_fb insmod vbe insmod vga insmod video_bochs insmod video_cirrus fi } terminal_output console if [ x$feature_timeout_style = xy ] ; then set timeout_style=menu set timeout=5 # Fallback normal timeout code in case the timeout_style feature is # unavailable. else set timeout=5 fi ### END /etc/grub.d/00_header ### ### BEGIN /etc/grub.d/00_tuned ### set tuned_params="" ### END /etc/grub.d/00_tuned ### ### BEGIN /etc/grub.d/01_users ### if [ -f ${prefix}/user.cfg ]; then source ${prefix}/user.cfg if [ -n "${GRUB2_PASSWORD}" ]; then set superusers="root" export superusers password_pbkdf2 root ${GRUB2_PASSWORD} fi fi ### END /etc/grub.d/01_users ### ### BEGIN /etc/grub.d/10_linux ### menuentry 'CentOS Linux (3.10.0-693.17.1.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.17.1.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.17.1.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.11.6.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.11.6.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.11.6.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.11.1.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.11.1.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.11.1.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.5.2.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.5.2.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.5.2.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.2.2.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.2.2.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.2.2.el7.x86_64.img } menuentry 'CentOS Linux (0-rescue-34946d7b5edb0946bfb52c0f6cae67af) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-0-rescue-34946d7b5edb0946bfb52c0f6cae67af-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-0-rescue-34946d7b5edb0946bfb52c0f6cae67af root=UUID=2a4bc862-eb7a-46b1-8979-d19c873dca3b ro nomodeset rd.auto=1 crashkernel=auto initrd16 /initramfs-0-rescue-34946d7b5edb0946bfb52c0f6cae67af.img } if [ "x$default" = 'CentOS Linux (3.10.0-327.13.1.el7.x86_64) 7 (Core)' ]; then default='Advanced options for CentOS Linux>CentOS Linux (3.10.0-327.13.1.el7.x86_64) 7 (Core)'; fi; ### END /etc/grub.d/10_linux ### ### BEGIN /etc/grub.d/20_linux_xen ### ### END /etc/grub.d/20_linux_xen ### ### BEGIN /etc/grub.d/20_ppc_terminfo ### ### END /etc/grub.d/20_ppc_terminfo ### ### BEGIN /etc/grub.d/30_os-prober ### ### END /etc/grub.d/30_os-prober ### ### BEGIN /etc/grub.d/40_custom ### # This file provides an easy way to add custom menu entries. Simply type the # menu entries you want to add after this comment. Be careful not to change # the 'exec tail' line above. ### END /etc/grub.d/40_custom ### ### BEGIN /etc/grub.d/41_custom ### if [ -f ${config_directory}/custom.cfg ]; then source ${config_directory}/custom.cfg elif [ -z "${config_directory}" -a -f $prefix/custom.cfg ]; then source $prefix/custom.cfg; fi ### END /etc/grub.d/41_custom ### Thank you for any hints Alex

2 2

Allowing non-root users to reboot a workstation
by Felipe Westfields 06 Feb '18

06 Feb '18

I would like to be able to allow regular users that don't have admin privileges to be able to reboot their workstation. (they're software developers so rebooting their workstation doesn't affect anybody else) I tried changing the ownership of /sbin/reboot and /sbin/shutdown to root:users and permissions to 550, but that didn't work - it's still asking for root privileges. Possibly the problem might be that there's centralized LDAP authentication, not local, so the changes I made only apply to local accounts? Any suggestions? FW

7 7

Slightly OT : newsletters, mail formatting and netiquette
by Nicolas Kovacs 06 Feb '18

06 Feb '18

Hi, This question is not exactly CentOS-related strictly speaking, but here goes. I'm running a few newsletter servers for myself and a handful of clients on public CentOS servers with PHPList. For the last twenty years or so I've followed the basic rule that mails should have no formatting whatsoever, only simple text. And now I wonder if that basic rule of netiquette also applies to newsletters. I'm a subscriber to a series of tech-related newsletters, and I couldn't help but notice that they all seem to be HTML-formatted, even those from respectable hardcore geek groups. So my somewhat naive question: is HTML formatting acceptable in newsletters? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

6 6

Re: [CentOS] CentOS Digest, Vol 157, Issue 4
by Stephen Davies 06 Feb '18

06 Feb '18

On 04/02/18 22:30, centos-request(a)centos.org wrote: ---------------- > > Message: 1 > Date: Sat, 3 Feb 2018 16:57:19 -0800 > From: Akemi Yagi <amyagi(a)gmail.com> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Update to 3.10.0-693.17.1 breaks ath5k > Message-ID: > <CABA31DoCu6Yf7_nkN6s0Zz=THvrpqAcFfj2=2oTmscTpEPD3XA(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > On Fri, Feb 2, 2018 at 10:57 PM, Stephen Davies <sdavies(a)sdc.com.au> wrote: >> Where can I find a suitable module or even source code to build here? >> >> (Centos 7) > > ELRepo used to provide the kmod-ath5k package. However, the module > does not compile under EL7.4 due to the change in the wireless stack. > If your device needs ath5k, give ELRepo's kernel-lt a try. The module > is enabled in this kernel. > > Akemi > > I have worked around this issue by changing the default boot image to the previous release. I realise that this leaves the Intel issue but I can live with that and without future kernel updates. Hopefully somebody will fix the module before I die. Cheers, Stephen

1 0

Re: [CentOS] CentOS Digest, Vol 157, Issue 4
by Stephen Davies 06 Feb '18

06 Feb '18

On 04/02/18 22:30, centos-request(a)centos.org wrote: ---------------- > > Message: 1 > Date: Sat, 3 Feb 2018 16:57:19 -0800 > From: Akemi Yagi <amyagi(a)gmail.com> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Update to 3.10.0-693.17.1 breaks ath5k > Message-ID: > <CABA31DoCu6Yf7_nkN6s0Zz=THvrpqAcFfj2=2oTmscTpEPD3XA(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > On Fri, Feb 2, 2018 at 10:57 PM, Stephen Davies <sdavies(a)sdc.com.au> wrote: >> Where can I find a suitable module or even source code to build here? >> >> (Centos 7) > > ELRepo used to provide the kmod-ath5k package. However, the module > does not compile under EL7.4 due to the change in the wireless stack. > If your device needs ath5k, give ELRepo's kernel-lt a try. The module > is enabled in this kernel. > > Akemi > > I have worked around this issue by changing the default boot image to the previous release. I realise that this leaves the Intel issue but I can live with that and without future kernel updates. Hopefully somebody will fix the module before I die. Cheers, Stephen

1 0

mod_auth_kerb realm not stripped
by ewae rpok 05 Feb '18

05 Feb '18

Hello all. We have a CentOS 7 system integrated with Active Directory. Achieved using realmd, SSSD and krb5-workstation together with a ktpass-generated keytab. Apache's mod_auth_kerb allows users to authenticate via their AD accounts, and authorise with "require user" directive. But so far we fail to authorise via AD group membership. i.e. adding AuthLDAPUrl and "require ldap-group" directives to httpd.conf results in access being denied. Using ldapsearch with GSSAPI (or password entry) works as expected. After looking at debug logs and tcpdump output, I (possibly incorrectly) put the issue down to being unsure how to get krb5_aname_to_localname to function appropriately with the KrbLocalUserMapping directive of apache's mod_auth_kerb. It does do some transformation, converting to lowercase. However the realm part is not stripped off. Example output from apache error_log: [Thu Jan 25 11:53:33.969841 2018] [auth_kerb:debug] [pid 2176] src/mod_auth_kerb.c(1855): [client 192.168.254.170:65016] kerb_authenticate_a_name_to_local_name Test12 at X.Y.Z -> test12 at x.y.z (All other examples I found have output of format: ... Test12 at X.Y.Z -> Test12 ) I have tried experimenting with auth_to_local tags in the [realms] sections of /etc/krb5.conf, but could see no evidence of the rules being invoked. i.e. Same output in the apache error log regardless. This then appears to get passed on for use in subsequent ldap authorisations (apache mod_authnz_ldap). This does not work for us as we need to authorise against stripped user names (Active Directory sAMAccount or similar; our userPrincipalName is a different format: Test12 at Q.Y.Z, so can't workaround using that). I previously posted a similar messages to kerberos(a)mit.edu but got no feedback. Hopefully this list might be more appropriate. Grateful for any advice, Ewae.

1 0

shutdown or poweroff?
by Walter H. 04 Feb '18

04 Feb '18

Hello, just a simple question, my router has CentOS 6 with the apcupsd running, in the log of apcupsd I see this: 2018-02-01 19:05:54 +0100 apcupsd 3.14.12 (29 March 2014) redhat startup succeeded 2018-02-04 15:52:43 +0100 Power failure. 2018-02-04 15:52:49 +0100 Running on UPS batteries. 2018-02-04 15:53:00 +0100 Reached remaining time percentage limit on batteries. 2018-02-04 15:53:00 +0100 Initiating system shutdown! 2018-02-04 15:53:00 +0100 User logins prohibited 2018-02-04 15:53:37 +0100 apcupsd exiting, signal 15 2018-02-04 15:53:37 +0100 apcupsd shutdown succeeded does this mean the shutdown was successfull? is there other log where I can verify this: because shutting down squid takes almost a minute or so ... Thanks, Walter

2 1

Update to 3.10.0-693.17.1 breaks ath5k
by Stephen Davies 04 Feb '18

04 Feb '18

Where can I find a suitable module or even source code to build here? (Centos 7) Cheers and thanks, Stephen

2 1

OT: RepoForge/RPMForge State Survey
by David Hrbáč 03 Feb '18

03 Feb '18

Hello, RepoForge used to be one of the important repositories for CentOS/RHEL. I know that RepoForge is considered to be clinically dead nowadays. On the other hand RepoForge is still physically alive. We would like to harness community opinion on RepoForge status and future. In case that you use or used to use the RepoForge I kindly ask you to fill up this form to help us with the decision. The form is here: https://goo.gl/forms/4SLFnD16K4yJeitt2 Thanks a lot, David Hrbáč

1 0

Error installing Nvidia driver on a 7.5 beta kernel
by James Pearson 03 Feb '18

03 Feb '18

OK, I know CentOS has nothing to do with RHEL beta releases, but I wanted to test if el7.5 has added support for a particular peripheral (Wacom Pro 2 tablet) ... but was unable to install the propriety Nvidia display driver (v390.25) on a test workstation - and was wondering if anyone could explain on what is going on. All I've done is upgrade an existing CentOS 7.4 install with the RHEL 7.5 beta kernel RPMS However, when installing the Nvidia driver, it fails with: FATAL: modpost: GPL-incompatible module nvidia.ko uses GPL-only symbol '__cachemode2pte_tbl' A bit of Googling seems to suggest that this issue has been 'fixed' in later upstream kernels by changing the export of this symbol from 'EXPORT_SYMBOL_GPL' to 'EXPORT_SYMBOL' However, 7.4 and earlier el7 kernels also export this symbol as EXPORT_SYMBOL_GPL - but the Nvidia driver builds/installs fine on 7.4 kernels ... So, I'm not really sure what the issue is - i.e. is it an Nvidia or Redhat issue ? For now, I've managed to hack around this by patching the stub Nvidia driver src to change MODULE_LICENSE from "NVIDIA" to "GPL" - and the Nvidia driver now installs and loads OK If anyone knows any more about this, then please let me know Thanks James Pearson

2 3

Software does not boot in Secure Boot
by Mikhail Utin 02 Feb '18

02 Feb '18

The matter of EUFI’s Secure Boot vs Legacy Boot has been briefly discussed a couple of days ago. I would ask the List opinion concerning our case. A bit of the history. We’ve been in the research of malicious hypervisor threat since 2013. We finally developed publicly available HyperCatcher freeware. It runs on specially built Ubuntu 14.4. We tried CentOS 6/7 as well. The OS was compiled to minimize the number of services and OS features to only essential to the application. The software is ISO bootable image. The problem. As of today, we recommend to switch to Legacy option before booting. Our attempts to find out how to boot in Secure were unsuccessful. I believe that it is not possible if Secure Boot functions correctly. Does anybody know (excepting hacking the UEFI firmware and utilizing nice 0-day) if boot-up is still possible in Secure Boot? We tried so far a few Dell models. What could we add in bootable image so Secure Boot considered it as OK? There is yet another small issue of Ubuntu output messages while booting, which you could see is you try to use and boot our software. Such “leftovers” are not really important but a bit disturbing people who use our software. Is there anything like compilation option etc. we can use to block Ubuntu boot-up screen output? One technical note on our research. We experimented with VMware hypervisor (CentOS 6/7 and Ubuntu 14 OS as operating environment as well). The conclusion is that well-designed hypervisor adds less than one percent (0.7% in most cases) of current CPU utilization. For instance, 100% utilization means 99.3% user software and 0.7% the hypervisor. You can use your system for years but will never notice that a hypervisor runs below your OS. It can come from anywhere and even from your motherboard firmware. Mikhail Utin, CISSP Rubos, Inc. mutin(a)rubos.com mikhailutin(a)!hotmail.com

1 0

CentOS-announce Digest, Vol 156, Issue 1
by centos-announce-request＠centos.org 02 Feb '18

02 Feb '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:0260 Moderate CentOS 7 systemd Security Update (Johnny Hughes) 2. CESA-2018:0262 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 3. CESA-2018:0262 Important CentOS 6 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 1 Feb 2018 23:43:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:0260 Moderate CentOS 7 systemd Security Update Message-ID: <20180201234331.GA46540(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:0260 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:0260 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a7ff6697cba768a37cfbf5b08cd4fea42887544e64fa81d652726fac42328c22 libgudev1-219-42.el7_4.7.i686.rpm ae8a35516e4db15022c7bdf3dc7fb17d565c3566bfe0598e9e83fd79f7bcb78e libgudev1-219-42.el7_4.7.x86_64.rpm 387700a80d251f5fd2c4ed4f4d6be0c0dd31cd13218034b7bee995602965c794 libgudev1-devel-219-42.el7_4.7.i686.rpm b1e7c83f256176b876f5f9df330e2c97011efd1e301c8e2b8bd6951479f9fced libgudev1-devel-219-42.el7_4.7.x86_64.rpm b048c461c24df985cf5d3daa80c79fddfd435b01c81ece0543b8f6e44902b3c2 systemd-219-42.el7_4.7.x86_64.rpm 5b8a7713fe41db817ca9e7d734f9fc7e3e9bb2c751317adec9129529b1a3a711 systemd-devel-219-42.el7_4.7.i686.rpm df475636c40dff17bb76c95952b1a84df70234ce6164ec5d8d6e0622c18a26de systemd-devel-219-42.el7_4.7.x86_64.rpm 8b0f6580d8ac768bb2bdd2d3fea37471c12f69622070c028c6654a67d9ed62ba systemd-journal-gateway-219-42.el7_4.7.x86_64.rpm 39996be3a24fea93dd74b3858e849bd13d42b3618933646c014999301f74c989 systemd-libs-219-42.el7_4.7.i686.rpm d7ba060ecee893b2e60d18394899768fe93a9199a3eba7eb0e2b2942a4d5b03f systemd-libs-219-42.el7_4.7.x86_64.rpm efe57fcbf99513a07140cb9ab10780cc416bbc0a3fa51775fb628331ee99910a systemd-networkd-219-42.el7_4.7.x86_64.rpm ccff4b016165af8c211c4ff5c0dd2668498487130c7a18da188281f0b8c2fcac systemd-python-219-42.el7_4.7.x86_64.rpm 6179b555b0aea983902a99e83a2e2687ef6cdba897e8fe804c9c860f36fa1642 systemd-resolved-219-42.el7_4.7.i686.rpm 73889e7ca81e3d4f6c918e5c7928ab47927f227a833a20821a2f9f994e393d80 systemd-resolved-219-42.el7_4.7.x86_64.rpm 4669da503e9376fc14044bd230db80452c595c09c439dc769d92b6844b4a5488 systemd-sysv-219-42.el7_4.7.x86_64.rpm Source: 6857f944bb775fce5c2ec5942d5b9bbff74b3ac0d7466b4b0d2c10ed5c6e898a systemd-219-42.el7_4.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 1 Feb 2018 23:44:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:0262 Important CentOS 7 thunderbird Security Update Message-ID: <20180201234438.GA46591(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:0262 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:0262 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c5a42870fd0dbb44e82f8030a889a0bdf8cb2f8b1becb9d49763070d47820ff0 thunderbird-52.6.0-1.el7.centos.x86_64.rpm Source: 92c034d0d0f6895453c4e371841d78a5bfdedb11df63cf21a1d1c341c5216f35 thunderbird-52.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 1 Feb 2018 23:45:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:0262 Important CentOS 6 thunderbird Security Update Message-ID: <20180201234544.GA46715(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:0262 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:0262 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4c5faa32a2ce2a7945e7e58a31c90a29f5c8bbc1522299ca8074ff0b179fe244 thunderbird-52.6.0-1.el6.centos.i686.rpm x86_64: 4f97f078cdf9f020ebc5cad99100a54f18bb74b23673f8226fb77763320cebc8 thunderbird-52.6.0-1.el6.centos.x86_64.rpm Source: 27aefaa5049fbe2eae663bca4d17c93281223bdae48cf918b774ee2ad6d7fec3 thunderbird-52.6.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 156, Issue 1 ***********************************************

1 0

In reply to: What is best way of managing isolated network environment?
by Leroy Tennison 01 Feb '18

01 Feb '18

(Couldn't find the original request in my email but definitely have an idea). Set up an OpenVPN server on your network and create a client on the isolated network (set up to connect on boot), configure routing appropriately. You get to decide what subnet the VPN IP address is on, in this situation I recommend a static IP address for the client. From your network you connect to the OpenVPN IP address and connect to the rest of the isolated network from it (or set up multiple clients on the isolated network).

1 0

What is best way of managing isolated network environment?
by Xinhuan Zheng 01 Feb '18

01 Feb '18

Hello, We need to manage isolated network environment so that even though host name and ip address could be same, but they are located in isolated network environment so that’s not a problem. However, that would be very challenging to build a server in such an isolated environment. For example, we could do kickstart to build a server in non-isolated network environment, but for isolated one, we don’t have such a kickstart server. If we had such one, that would mean we consume more resources for building server. What is best way of managing such isolated environment in terms of easily building servers? Thank you, - xinhuan

2 1

Xen hypervisor on CentOS 7.4 with modern UEFI server not booting from grub
by John Naggets 01 Feb '18

01 Feb '18

Hi, I installed CentOS 7.4 on a modern Lenovo ThinkSystem SR630 server which uses UEFI. So far so good CentOS 7.4 works fine so then I went on to install the Xen hypervisor by following the instructions from the wiki (https://wiki.centos.org/HowTos/Xen/Xen4QuickStart) Unfortunately when I reboot after having installed the xen package the system does not boot into "CentOS Linux, with Xen hypervisor" from the grub menu prompt. I get the following error: Loading Xen 4.6.6-8.el7 ... error: can't find command `multiboot'. Loading Linux 4.9.75-29.el7.x86_64 ... error: can't find command `module'. Loading initial ramdisk ... error: can't find command `module'. Press any key to continue... The problem which I encounter here is exactly the same issue as described for Fedora in the RedHat bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1286317 with the exception that for me it's CentOS 7.4 and that the workarounds as described in that bug do not work. Does anyone know how I can make my CentOS boot with the Xen hypervisor using UEFI? Thank you very much for your help. Best regards, John

5 6

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2018