Discuss December 2019

discuss@lists.centos.org

89 participants
80 discussions

Disabling TLS 1.1 in Centos 7 cockpit
by Erick Perez - Quadrian Enterprises 28 Dec '19

28 Dec '19

Hi, I'm using cockpit in standard port 9090 in a Centos 7 system. Due to a suggestion from management, they want TLS 1.1 disabled system-wide in all Linux boxes and TLS 1.2 enabled. I have not found proper documentation on how to disable it for cockpit (version 195.1 ships with Centos 7) So far I have tried (https://cockpit-project.org/guide/149/https.html) /usr/lib/systemd/system/cockpit.service [Service] Environment=G_TLS_GNUTLS_PRIORITY=-VERS-ALL:+VERS-TLS1.2 And I also created the file /etc/systemd/system/cockpit.service.d/ssl.conf and added: [Service] Environment=G_TLS_GNUTLS_PRIORITY=-VERS-ALL:+VERS-TLS1.2 after that, I systemctl restart cockpit But if I do #openssl s_client -connect localhost:9090 -tls1_1 I get a proper response (a certificate), so TLS 1.1 is being accepted. Suggestions? Thanks. -- --------------------- Erick Perez ---------------------

3 6

bind problems
by Helmut Drodofsky 27 Dec '19

27 Dec '19

I made yum update to bind on 21.12.2019. Yum.log: Dec 21 23:14:41 Updated: 32:bind-license-9.11.4-9.P2.el7.noarch Dec 21 23:16:43 Installed: 32:bind-export-libs-9.11.4-9.P2.el7.x86_64 Dec 21 23:16:49 Updated: 32:bind-libs-lite-9.11.4-9.P2.el7.x86_64 Dec 21 23:16:50 Updated: 32:bind-libs-9.11.4-9.P2.el7.x86_64 Dec 21 23:18:02 Updated: rpcbind-0.2.0-48.el7.x86_64 Dec 21 23:23:21 Updated: 32:bind-9.11.4-9.P2.el7.x86_64 Dec 21 23:24:44 Updated: 32:bind-utils-9.11.4-9.P2.el7.x86_64 up to this date, bind has gone 4 month with the last update to bind 9.9.4 without any problem. Since the bold line in named.log 27-Dec-2019 23:20:21.200 general: info: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0 27-Dec-2019 23:20:21.201 general: info: zone localhost/IN: loaded serial 0 27-Dec-2019 23:20:21.201 general: notice: all zones loaded 27-Dec-2019 23:20:21.201 general: notice: running 27-Dec-2019 23:20:21.223 notify: info: zone dyn.internet-xs.net/IN: sending notifies (serial 2018012040) 27-Dec-2019 23:20:21.226 notify: info: zone panama.int/IN: sending notifies (serial 2016121200) 27-Dec-2019 23:20:21.227 notify: info: zone ixsdns.de/IN: sending notifies (serial 2018010102) *27-Dec-2019 23:20:28.434 dnssec: info: validating ./NS: got insecure response; parent indicates it should be secure* 27-Dec-2019 23:20:28.444 general: warning: managed-keys-zone: No DNSKEY RRSIGs found for '.': success 27-Dec-2019 23:20:29.219 dnssec: info: validating ./NS: no valid signature found 27-Dec-2019 23:20:29.714 dnssec: info: validating ./SOA: got insecure response; parent indicates it should be secure 27-Dec-2019 23:20:29.957 dnssec: info: validating ./NS: no valid signature found named needs some 1 hour to be really active. The named.log shows: ..... 7-Dec-2019 23:36:28.268 dnssec: info: validating it/DS: no valid signature found 27-Dec-2019 23:36:28.270 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.271 dnssec: info: validating info/DS: no valid signature found 27-Dec-2019 23:36:28.281 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.295 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.296 dnssec: info: validating it/DS: no valid signature found 27-Dec-2019 23:36:28.323 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.440 dnssec: info: validating it/DS: no valid signature found 27-Dec-2019 23:36:28.473 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.597 dnssec: info: validating it/DS: no valid signature found 27-Dec-2019 23:36:28.634 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:29.303 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.308 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.313 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.318 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.323 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.328 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.335 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.345 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.360 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.387 dnssec: info: validating org/DS: no valid signature found .... and really many lines as above. This validating happens even when dnssec-enable no; and dnssec-validation and dnssec-lookaside are commented out any idea? -- best regards Helmut Drodofsky

1 0

nfs causes Centos 7.7 system to hang
by Nikolaos Milas 27 Dec '19

27 Dec '19

Hello, MERRY CHRISTMAS to all in list! After I upgraded to latest: CentOS Linux release 7.7.1908 (Core) I am facing nfs crashes which cause the system to hang frequently. This is caused by cp to nfs-mounted shares. Below is dmesg output; you will see call traces. These cause system to gradually overload: [root@hesperia1 ~]# top top - 10:09:40 up 10:16, 1 user, load average: 53.66, 54.13, 52.98 Tasks: 475 total, 2 running, 436 sleeping, 0 stopped, 37 zombie %Cpu(s): 0.1 us, 0.6 sy, 0.0 ni, 99.2 id, 0.0 wa, 0.0 hi, 0.0 si, 0.1 st KiB Mem : 3879928 total, 813504 free, 1733216 used, 1333208 buff/cache KiB Swap: 4063228 total, 4062708 free, 520 used. 1797264 avail Mem and finally hangs showing messages (which I have not recorded precisely) in the CLI login screen like "System out of memory". Then I have to reboot. I tried to downgrade nfs-utils and rpcbind to earlier versions (in case there is a bug in latest ones), but I couldn't: [root@hesperia1 ~]# yum downgrade rpcbind-0.2.0-47 nfs-utils-1.3.0-61 Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: ftp.ntua.gr * epel: mirrors.daticum.com * extras: ftp.ntua.gr * updates: ftp.ntua.gr No package rpcbind-0.2.0-47 available. No package nfs-utils-1.3.0-61 available. Error: Nothing to do Do you know if this is a known bug? (I couldn't find something in my searches.) Can you suggest a solution / workaround? I am facing this problem constantly and the system has become unstable. [root@hesperia1 ~]# dmesg ... [ 26.525584] RPC: Registered named UNIX socket transport module. [ 26.525588] RPC: Registered udp transport module. [ 26.525590] RPC: Registered tcp transport module. [ 26.525592] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 27.103268] type=1305 audit(1577317991.465:3): audit_pid=836 old=0 auid=4294967295 ses=4294967295 res=1 [ 29.384755] nf_conntrack version 0.5.0 (16384 buckets, 65536 max) [ 29.629701] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 30.773604] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready [ 31.977476] FS-Cache: Loaded [ 32.170682] FS-Cache: Netfs 'nfs' registered for caching [ 53.671997] random: crng init done [26399.967630] INFO: task cp:14560 blocked for more than 120 seconds. [26399.967984] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [26399.968202] cp D ffff89373fc9ac80 0 14560 14053 0x00000080 [26399.968211] Call Trace: [26399.968272] [<ffffffffc070ce05>] ? nfs_permission+0x105/0x220 [nfs] [26399.968321] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [26399.968345] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [26399.968375] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [26399.968395] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [26399.968404] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [26399.968410] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [26399.968421] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [26399.968445] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [26399.968475] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [26399.968481] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [26399.968487] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [26399.968492] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [26399.968497] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [26399.968501] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [26399.968505] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [26399.968530] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [26399.968534] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [26399.968544] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [27479.967352] INFO: task cp:4656 blocked for more than 120 seconds. [27479.967414] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [27479.967711] cp D ffff8936b6548000 0 4656 2914 0x00000080 [27479.967726] Call Trace: [27479.967749] [<ffffffffc070ce05>] ? nfs_permission+0x105/0x220 [nfs] [27479.967762] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [27479.967769] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [27479.967774] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [27479.967786] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [27479.967792] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [27479.967821] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [27479.967828] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [27479.967836] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [27479.967841] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [27479.967846] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [27479.967852] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [27479.967857] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [27479.967862] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [27479.967866] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [27479.967870] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [27479.967880] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [27479.967884] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [27479.967892] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [27479.967910] INFO: task cp:7754 blocked for more than 120 seconds. [27479.968147] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [27479.968437] cp D ffff89373fc1ac80 0 7754 7285 0x00000080 [27479.968443] Call Trace: [27479.968455] [<ffffffffc070ce05>] ? nfs_permission+0x105/0x220 [nfs] [27479.968461] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [27479.968466] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [27479.968470] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [27479.968475] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [27479.968481] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [27479.968486] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [27479.968491] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [27479.968500] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [27479.968505] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [27479.968510] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [27479.968515] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [27479.968520] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [27479.968525] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [27479.968528] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [27479.968533] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [27479.968539] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [27479.968543] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [27479.968547] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [27479.968557] INFO: task cp:20086 blocked for more than 120 seconds. [27479.968798] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [27479.969064] cp D ffff89373fc9ac80 0 20086 19644 0x00000080 [27479.969069] Call Trace: [27479.969080] [<ffffffffc070ce05>] ? nfs_permission+0x105/0x220 [nfs] [27479.969086] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [27479.969090] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [27479.969094] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [27479.969099] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [27479.969105] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [27479.969110] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [27479.969115] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [27479.969119] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [27479.969124] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [27479.969129] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [27479.969134] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [27479.969139] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [27479.969144] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [27479.969148] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [27479.969152] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [27479.969157] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [27479.969161] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [27479.969166] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [30359.967071] INFO: task cp:4656 blocked for more than 120 seconds. [30359.967120] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [30359.967345] cp D ffff89373fd9ac80 0 4656 2914 0x00000080 [30359.967369] Call Trace: [30359.967391] [<ffffffffc070ce05>] ? nfs_permission+0x105/0x220 [nfs] [30359.967403] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [30359.967410] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [30359.967415] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [30359.967421] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [30359.967427] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [30359.967432] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [30359.967438] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [30359.967444] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [30359.967449] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [30359.967454] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [30359.967459] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [30359.967464] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [30359.967469] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [30359.967473] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [30359.967477] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [30359.967486] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [30359.967490] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [30359.967497] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [30359.967502] INFO: task cp:6363 blocked for more than 120 seconds. [30359.967708] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [30359.967933] cp D ffff89373fd9ac80 0 6363 6002 0x00000080 [30359.967938] Call Trace: [30359.968064] [<ffffffffc05bc091>] ? rpcauth_lookupcred+0x91/0xd0 [sunrpc] [30359.968071] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [30359.968076] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [30359.968082] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [30359.968088] [<ffffffffaf458fc8>] do_last+0x298/0x1290 [30359.968093] [<ffffffffaf45bdbd>] path_openat+0xcd/0x5a0 [30359.968100] [<ffffffffaf44737a>] ? __check_object_size+0x1ca/0x250 [30359.968121] [<ffffffffaf45d72d>] do_filp_open+0x4d/0xb0 [30359.968129] [<ffffffffaf46b282>] ? __alloc_fd+0xc2/0x170 [30359.968135] [<ffffffffaf449684>] do_sys_open+0x124/0x220 [30359.968140] [<ffffffffaf44979e>] SyS_open+0x1e/0x20 [30359.968145] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [30359.968151] INFO: task cp:9517 blocked for more than 120 seconds. [30359.968414] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [30359.968649] cp D ffff89373fd9ac80 0 9517 9100 0x00000080 [30359.968656] Call Trace: [30359.968670] [<ffffffffc070ce05>] ? nfs_permission+0x105/0x220 [nfs] [30359.968677] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [30359.968682] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [30359.968686] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [30359.968691] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [30359.968696] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [30359.968701] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [30359.968706] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [30359.968711] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [30359.968716] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [30359.968721] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [30359.968726] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [30359.968730] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [30359.968735] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [30359.968739] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [30359.968743] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [30359.968749] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [30359.968753] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [30359.968760] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [30359.968767] INFO: task cp:15665 blocked for more than 120 seconds. [30359.969037] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [30359.969287] cp D ffff89373fd1ac80 0 15665 15170 0x00000080 [30359.969308] Call Trace: [30359.969319] [<ffffffffc070ce05>] ? nfs_permission+0x105/0x220 [nfs] [30359.969325] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [30359.969330] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [30359.969334] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [30359.969339] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [30359.969344] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [30359.969348] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [30359.969354] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [30359.969358] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [30359.969363] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [30359.969368] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [30359.969375] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [30359.969380] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [30359.969385] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [30359.969389] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [30359.969393] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [30359.969398] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [30359.969402] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [30359.969407] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [30359.969413] INFO: task cp:21924 blocked for more than 120 seconds. [30359.969657] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [30359.969902] cp D ffff89373fc9ac80 0 21924 21419 0x00000080 [30359.969907] Call Trace: [30359.969917] [<ffffffffc070ce05>] ? nfs_permission+0x105/0x220 [nfs] [30359.969923] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [30359.969927] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [30359.969931] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [30359.969936] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [30359.969941] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [30359.969945] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [30359.969950] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [30359.969969] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [30359.969974] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [30359.969979] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [30359.969984] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [30359.969988] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [30359.969994] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [30359.970000] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [30359.970004] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [30359.970009] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [30359.970013] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [30359.970018] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a [30359.970024] INFO: task cp:28139 blocked for more than 120 seconds. [30359.970260] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [30359.970497] cp D ffff8937380a5780 0 28139 27597 0x00000080 [30359.970504] Call Trace: [30359.970510] [<ffffffffaf504262>] ? security_inode_permission+0x22/0x30 [30359.970514] [<ffffffffaf981929>] schedule_preempt_disabled+0x29/0x70 [30359.970518] [<ffffffffaf97f8b7>] __mutex_lock_slowpath+0xc7/0x1d0 [30359.970523] [<ffffffffaf455ec3>] ? unlazy_walk+0x133/0x140 [30359.970529] [<ffffffffaf97ec8f>] mutex_lock+0x1f/0x2f [30359.970533] [<ffffffffaf977865>] lookup_slow+0x33/0xa7 [30359.970538] [<ffffffffaf45b608>] path_lookupat+0x838/0x8b0 [30359.970542] [<ffffffffaf424ef5>] ? kmem_cache_alloc+0x35/0x1f0 [30359.970547] [<ffffffffaf45c45f>] ? getname_flags+0x4f/0x1a0 [30359.970552] [<ffffffffaf45b6ab>] filename_lookup+0x2b/0xc0 [30359.970557] [<ffffffffaf45d5f7>] user_path_at_empty+0x67/0xc0 [30359.970561] [<ffffffffaf450695>] ? cp_new_stat+0x165/0x1a0 [30359.970566] [<ffffffffaf45d661>] user_path_at+0x11/0x20 [30359.970570] [<ffffffffaf450343>] vfs_fstatat+0x63/0xc0 [30359.970592] [<ffffffffaf4506fe>] SYSC_newstat+0x2e/0x60 [30359.970598] [<ffffffffaf33e3f6>] ? __audit_syscall_exit+0x1e6/0x280 [30359.970602] [<ffffffffaf450bbe>] SyS_newstat+0xe/0x10 [30359.970607] [<ffffffffaf98dede>] system_call_fastpath+0x25/0x2a Please advise! Cheers, Nick

3 2

State of CentOS 8
by Michael Kofler 26 Dec '19

26 Dec '19

Hi, I have been a happy user of CentOS 7 in the past. I am now considering switching to CentOS 8. However, since end of Oct. 2019, I have not received any updates on my CentOS 8 test installations. Since then, RHEL 8 has published several critical security updates. Obviously, this make the use of CentOS 8 in production dangerous. I guess the missing updates have to to with RHEL version 8.1, which is not yet available for CentOS. Basically, I would like to ask how the CentOS team sees the state of CentOS 8. Is the current version only intended for testing/evaluation? When does the CentOS team consider CentOS ready for production use? Is there any public documentation on this matter? Thank you, best wishes and happy holidays, Michael

12 17

Nginx on CentOS 7: which one for production?
by Nicolas Kovacs 26 Dec '19

26 Dec '19

Hi, I'm currently fiddling with Nginx to get acquainted with its various quirks and idiosyncrasies. I have a public CentOS 7 sandbox server, and I've tried various setups. Install the binary from EPEL, install various binaries from SCLo, build from source. I wonder which version is recommended for production use on CentOS 7. Any suggestions? Cheers & happy Christmas holidays, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

3 4

livemedia-creator --make-pxe-live CentOS 7
by Drew Weaver 26 Dec '19

26 Dec '19

Hello, I am trying to build a PXE boot image for CentOS 7. livemedia-creator --make-pxe-live --ks=ks --no-virt It runs the entire process and then it says: losetup: /dev/: detach failed: Inappropriate ioctl for device 2019-12-26 11:49:47,293: Disk Image install successful 2019-12-26 11:49:47,293: working dir is /var/tmp/tmpKwqC77 mount: /dev/loop0 is write-protected, mounting read-only mount: unknown filesystem type '(null)' 2019-12-26 11:49:52,301: Command '['mount', '-o', 'loop', '/var/tmp/diskJVpsJd.img', '/var/tmp/lorax.imgutils.OtV8Yh']' returned non-zero exit status 32 I then tried it on CentOS 8 and had the same problem until I installed the dracut-live package but that package doesn't exist on CentOS 7. I will point out that it seems to work fine with make-iso, just not make-pxe-live. So there is probably a package it needs that I don't know about. Has anyone gotten this to work at all? Since it is a disk/image issue this is the part of the ks relevant to disks: # Disk partitioning information reqpart part / --fstype="ext4" --size=4000 part swap --size=1000 zerombr clearpart --all bootloader --location=mbr Below is my packages part of my kickstart: %packages # Packages needed by anaconda, but not directly required. # Includes all of the grub2 and shim packages needed, except # for the grub2-efi-*-cdboot package @anaconda-tools --optional @core anaconda isomd5sum kernel memtest86+ syslinux -dracut-config-rescue dell-system-update # This package is needed to boot the iso on UEFI grub2-efi-*-cdboot grub2-efi-ia32 %end Thanks, -Drew

2 3

Re: [CentOS] Raspberri PI 4B 4GB install image
by Strahil 26 Dec '19

26 Dec '19

Thanks A lot. I will give it a try , once the RPi is here. Best Regards, Strahil NikolovOn Dec 25, 2019 18:46, Akemi Yagi <amyagi(a)gmail.com> wrote: > > On Wed, Dec 25, 2019 at 7:53 AM Strahil via CentOS <centos(a)centos.org> wrote: > > > > Hello Community, > > > > I'm waiting for my first ARM-based toy - a 4GB Raspberry Pi 4B and I was looking for a CentOS 8/ CentOS Stream image with no success. > > > > Do we have an image ? > > > > Best Regards, > > Strahil Nikolov > > Here we go: > > https://forums.centos.org/viewtopic.php?f=49&t=71407&p=305437&hilit=pgreco#… > > Thanks to Pablo Greco. > > Akemi

3 2

CentOS-announce Digest, Vol 178, Issue 5
by centos-announce-request＠centos.org 26 Dec '19

26 Dec '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS Linux 8.0.1905 Continuous Release Populated (Brian Stinson) ---------------------------------------------------------------------- Message: 1 Date: Wed, 25 Dec 2019 23:16:52 -0600 From: "Brian Stinson" <brian(a)bstinson.com> To: CentOS-devel <centos-devel(a)centos.org>, centos-announce(a)centos.org Subject: [CentOS-announce] CentOS Linux 8.0.1905 Continuous Release Populated Message-ID: <0b74b7dd-c879-4062-802f-49ee0ef76597(a)www.fastmail.com> Content-Type: text/plain Hi Folks, We've populated CentOS Linux 8.0.1905 with content from the upcoming 8.1.1911 GA Release: https://wiki.centos.org/AdditionalResources/Repositories/CR This includes only the GA content at this time (0-day updates are still pending). One of the major things we're working on is matching the x86_64 multilib content set with upstream, be prepared for changes to i686 packages that may be removed at release time for CentOS Linux. As usual, this content takes a little while to make it out to the mirror network, but it should coalesce shortly. On behalf of the CentOS team: Happy testing, and Happy *C*hristmas *R*elease -- Brian Stinson brian(a)bstinson.com ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 178, Issue 5 ***********************************************

1 0

Problems installing CentOS 8
by Michael Eager 25 Dec '19

25 Dec '19

I'm having a problem installing CentOS 8 from a USB drive. When the installer boots from the USB, it displays the language selection screen. After I select English and continue, the installer freezes. The USB drive flashes a couple times over the next minute or so, the stops. The mouse moves the cursor, but the installer is unresponsive to either selecting QUIT or HELP. I've tried both the default and the basic graphic install with the same results. Details: CentOS-8-x86-1905-dvd1.iso (sha256 verified) ASUS Prime B350 Plus motherboard AMD Ryzen 5 1600 CPU 32Gb DRAM 4 SATA drives in RAID/LVM configuration. M.2 500Gb Samsung SSD (not formatted) -- Michael Eager eager(a)eagerm.com 1960 Park Blvd., Palo Alto, CA 94306

2 3

Raspberri PI 4B 4GB install image
by Strahil 25 Dec '19

25 Dec '19

Hello Community, I'm waiting for my first ARM-based toy - a 4GB Raspberry Pi 4B and I was looking for a CentOS 8/ CentOS Stream image with no success. Do we have an image ? Best Regards, Strahil Nikolov

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss December 2019