Discuss February 2019

discuss@lists.centos.org

97 participants
80 discussions

firefox-60.5.0-2.el7.centos.x86_64 and Netflix
by Bernard Lheureux 09 Feb '19

09 Feb '19

Hi all, Since the last upgrade to firefox-60.5.0-2.el7.centos.x86_64 on my CentOS 7, it is no longer possible to watch Netflix with my Firefox, it always says that "Firefox is installing components needed to play the audio or video on this page. Please try again later." But nothing happens and Netflix is no longer readable with Firefox... I tried downgrading to firefox-60.4.0-1.el7.centos.x86_64 and al is now correct with Netflix... Anyone had experienced the same behavior ? -- (°- Bernard Lheureux //\ Linux System Administrator v_/_ MailTo:bernard@lheureux.be

4 4

CentOS 7, rsyslog and redis
by Pete Biggs 09 Feb '19

09 Feb '19

TL;DR: Is there a sensible way to get rsyslog to talk to redis on CentOS 7. The official way is to use the omhiredis plugin, but that doesn't seem to exist in the CentOS 7 repositories? (It's how I do it on my Fedora box.) The long version: I'm trying to rationalise logging and am using an ELK stack. When I've done this in the past it has suffered badly from congestion at peak times with messages being dropped and various issues on the clients. The sensible thing seemed to be putting redis between the clients and ELK - that works in my test setup from a Fedora box. My problem though is ingesting the logs from my CentOS servers. By far the easiest thing is to get rsyslog to send things directly to redis, but that needs the omhiredis plugin. The second choice is to use filebeat to scan the log files - but if I want to have things like facility and severity logged, I have to use custom rsyslog templates and it's a pain trying to get filebeat to parse them (and the filebeat redis output seems a bit flaky as well). I can see that syslog-ng has redis support, but I would prefer to keep rsyslog since that is the default. So, what do people do to ship their logs to ELK (or, specifically, logstash). Is there some magic, neat solution? Or do I keep just hammering away at filebeat -> redis -> logstash until I get something that's reliable? Or do I go down the syslog-ng route? P.

1 0

CentOS-announce Digest, Vol 168, Issue 2
by centos-announce-request＠centos.org 09 Feb '19

09 Feb '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0232 Important CentOS 6 spice-server Security Update (Johnny Hughes) 2. CESA-2019:0269 Important CentOS 6 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 8 Feb 2019 14:39:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0232 Important CentOS 6 spice-server Security Update Message-ID: <20190208143905.GA63305(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0232 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0232 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 14d17995139944b6a2f31fe65c77cbee19bac2a4dd472fdc515b0658eaf33bdc spice-server-0.12.4-16.el6_10.3.x86_64.rpm 86bfc7eb53ddbe24d421f84dc102bf7a73d1f5c26e7a294a9085323914ac0791 spice-server-devel-0.12.4-16.el6_10.3.x86_64.rpm Source: 7cca30eb830211771a6a8ddae5f78398cf07934f00d4e1e4c81d892d96641008 spice-server-0.12.4-16.el6_10.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 8 Feb 2019 14:40:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0269 Important CentOS 6 thunderbird Security Update Message-ID: <20190208144051.GA63518(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0269 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0269 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 59270993b2b4eef241e0f3768836517725647ba858fb265d3af6d86e39681022 thunderbird-60.5.0-1.el6.centos.i686.rpm x86_64: 0caae2e4aee38ac3452b2085159f3df856c49dad7dec212ef236298a20ebba95 thunderbird-60.5.0-1.el6.centos.x86_64.rpm Source: ae552e7088c6e71e7f07f13c9f5a687b0a26cd0d7128ad28552fa76e8c9b93ad thunderbird-60.5.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 168, Issue 2 ***********************************************

1 0

Did I install too much for clamav?
by Robert Moskowitz 08 Feb '19

08 Feb '19

I just checked the status of amavisd: # systemctl -l status amavisd ● amavisd.service - Amavisd-new is an interface between MTA and content checkers. Loaded: loaded (/usr/lib/systemd/system/amavisd.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2019-02-07 08:16:59 EST; 7h ago Docs: http://www.ijs.si/software/amavisd/#doc Process: 5715 ExecStart=/usr/sbin/amavisd -c /etc/amavisd/amavisd.conf (code=exited, status=0/SUCCESS) Main PID: 6327 (/usr/sbin/amavi) CGroup: /system.slice/amavisd.service ├─6327 /usr/sbin/amavisd (master) ├─6336 /usr/sbin/amavisd (virgin child) └─6337 /usr/sbin/amavisd (virgin child) Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .lha at /usr/bin/7z Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .iso at /usr/bin/7z Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .exe at /usr/bin/unarj Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Using primary internal av scanner code for ClamAV-clamd Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Deleting db files __db.002,snmp.db,nanny.db,__db.001,__db.003 in /var/spool/amavisd/db Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Creating db in /var/spool/amavisd/db/; BerkeleyDB 0.51, libdb 5.3 Feb 07 08:17:00 klovia.htt-consult.com amavis[6327]: initializing Mail::SpamAssassin (0) Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: SpamControl: init_pre_fork on SpamAssassin done Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: extra modules loaded after daemonizing/chrooting: /usr/lib/perl5/vendor_perl/auto/Net/SSLeay/autosplit.ix, /usr/lib/perl5/vendor_perl/auto/Net/SSLeay/randomize.al, /usr/share/perl5/Net/libnet.cfg, IO/Socket/SSL.pm, Mail/SpamAssassin/Plugin/FreeMail.pm, Mail/SpamAssassin/Plugin/SpamCop.pm, Net/Cmd.pm, Net/Config.pm, Net/SMTP.pm, Net/SSLeay.pm Primary and secondary AV scanner? Is this right? I installed: # grep clam /var/log/yum.log* /var/log/yum.log:Feb 06 08:40:06 Installed: clamav-filesystem-0.101.1-1.el7.noarch /var/log/yum.log:Feb 06 08:40:29 Installed: clamav-lib-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:40:30 Installed: clamav-update-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:40:59 Installed: clamav-devel-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:41:01 Installed: clamav-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:46:16 Installed: clamd-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:46:17 Installed: clamav-server-systemd-0.101.1-1.el7.armv7hl thanks

2 2

CentOS 7.6 update with gettimeofday()
by david allan finch 08 Feb '19

08 Feb '19

In my app compiled on another linux I am getting Assertion 'clock_gettime(clock_id, &ts) == 0' failed at src/shared/time-util.c:34, function now(). Aborting. when calling gettimeofday() on an update CentOS (did not fail in 7.5). Is it possible that the update has changed the size of the types in the timeval struct and causing the crash? Or has there be some for of bug fix etc? Regards

2 1

netmask on aliases overriden by netmask on interface
by James B. Byrne 08 Feb '19

08 Feb '19

CentOS-6.10 We have a host with the following ifcfg file contents: BOOTPROTO=none BROADCAST="" DEFROUTE=yes DEVICE=eth1 . . . GATEWAY=X.Y.Z.234 IPADDR=A.B.C.2 IPV4_FAILURE_FATAL=yes NAME="LAN Link - eth1" NETMASK="255.255.255.128" NETWORK="A.B.C.0" NM_CONTROLLED=no ONBOOT=yes PREFIX=25 TYPE=Ethernet USERCTL=no And an aliased ifcfg containing this: BOOTPROTO="none" BROADCAST="192.168.8.255" DEVICE="eth1:192008001" IPADDR="192.168.8.1" IPV6INIT="no" NETMASK="255.255.255.0" NETWORK="192.168.8.0" ONPARENT="yes" However, ifconfig shows this: # ifconfig eth1:192008001 eth1:192008001 Link encap:Ethernet HWaddr 00:25:90:61:74:C1 inet addr:192.168.8.1 Bcast:192.168.8.255 Mask:255.255.255.128 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Interrupt:17 Memory:feae0000-feb00000 Which shows that the network mask is determined by the interface mask and is not overridden by the alias definition. Is this expected behaviour? Does this mean that a particular physical interface cannot belong to more than one network, or at least not to networks having differing cidr masks? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

C7, enable an abrt for a daemon
by mark 08 Feb '19

08 Feb '19

I've mentioned here before that gssproxy is crashing all over the place with a SEGV. However, there's no /var/spool/abrt/... when it does. How do I enable the daemon to give me an abrt with information? I'm just not sure of what the right word is for systemd, so online searching isn't always useful. Thanks in advance. mark

1 0

systemd
by Jerry Geis 08 Feb '19

08 Feb '19

Hi All - I have a systemd service file to start my application. Part of my service file is: [Service] Type=forking ExecStart=/path to start ExecStop=/path to stop RemainAfterExit=yes This works fine "normally". However - when I do a "yum update; and reboot" my script detects a kernel change and now does a number of "recompiling" steps for drivers and such before starting my application. Somewhere along the way that just stops. I'm half way into recompiling those drivers and it just stops. Is there something else I need in the service file ? Thanks Jerry

3 2

CentOS 6 and 389 Directory Server
by Eugene Poole 07 Feb '19

07 Feb '19

I'm not sure it this is the correct location to ask these questions, but ... In the past when I worked for a living the place where I worked had thousands of RHEL Linux servers on various hardware, but the access was controlled by Windows Active Directory and a third party piece of software that was the middle-man between the 2. Now that I no longer work I'm trying to build a CentOS Linux environment where the access is controlled by 389-Directory Server. But I have no practical experience with 389-Directory Server (Question 1) so I'm looking for a tutorial or 'How To' to put information into 389-DS from a machine that is currently running? (Question 2) Can I export the 389-DS database to a LDIF file, migrate my machine from CentOS 6 to CentOS 7 by doing a fresh CentOS 7 install. Install 389-DS and import the just created LDIF file? I want to use 389-DS (or OpenLDAP) because as my environment grows defining everything locally is becoming hard to be exact. Any comments will be helpful TIA -- Eugene Poole Woodstock, Georgia

2 1

Pb with bounding
by Pierre Malard 07 Feb '19

07 Feb '19

Hi, We have a Dell server with 4 Ethernet interface. I would to aggregate them in a bond. Everything work but the default gateway doesn’t work on the « bond0 » interface and I have no links. My configuration: - CentOS 7: :/etc/sysconfig/network-scripts# uname -a Linux nas-mtd2 3.10.0-957.5.1.el7.x86_64 #1 SMP Fri Feb 1 14:54:57 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux - NetworkManager disabled: :/etc/sysconfig/network-scripts# systemctl list-unit-files | grep NetworkManager NetworkManager-dispatcher.service disabled NetworkManager-wait-online.service disabled NetworkManager.service disabled - ifcfg-em1 to em4 (they are identical): :/etc/sysconfig/network-scripts# cat ifcfg-em2 NAME=bond0-slave[1 to 4] DEVICE=em[1 to 4] TYPE=Ethernet BOOTPROTO=none ONBOOT=yes MASTER=bond0 SLAVE=yes NM_CONTROLLED=no - the bond0 declaration: :/etc/sysconfig/network-scripts# cat ifcfg-bond0 DEVICE=bond0 TYPE=Ethernet BONDING_MASTER=yes BOOTPROTO=none ONBOOT=yes NM_CONTROLLED=no # IP IPADDR=172.16.1.128 PREFIX=16 GATEWAY=172.16.0.254 # Bonding BONDING_OPTS="mode=802.3ad ad_select=stable use_carrier=1 miimon=100 arp_ip_target=172.16.1.128 updelay=100 lacp_rate=fast" USERCTL=no After a « systemctl restart network »: :/etc/sysconfig/network-scripts# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:0e brd ff:ff:ff:ff:ff:ff 3: em2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 4: em3: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 5: em4: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 6: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet 172.16.1.128/16 brd 172.16.255.255 scope global bond0 valid_lft forever preferred_lft forever And the route command: :/etc/sysconfig/network-scripts# ip r default via 172.16.0.254 dev bond0 169.254.0.0/16 dev bond0 scope link metric 1006 169.254.0.0/16 dev bond0.10 scope link metric 1008 172.16.0.0/16 dev bond0 proto kernel scope link src 172.16.1.128 but their is no network connection on « bond0 »! The only way I found to have a network active connection is keeping my first interface outside the bond and having the default route on this one! In this case I have a specific IP to it and a bond one on bound. As I must have also a VLAN connection on the bound, I have create a « ifcfg-bond0.10 » file: :/etc/sysconfig/network-scripts# cat ifcfg-bond0.10 NAME=bond0.10 DEVICE=bond0.10 #TYPE="Ethernet" VLAN=yes NM_CONTROLLED=no ONPARENT=yes DEFROUTE="no" # IP IPADDR=XXX.XXX.XXX.142 NETMASK=255.255.255.0 NETWORK=XXX.XXX.XXX.0 BROADCAST=XXX.XXX.XXX.255 PREFIX=24 GATEWAY=1XXX.XXX.XXX.126 With that and the first Ethernet interface on a specific address I have: :/etc/sysconfig/network-scripts# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether d0:94:66:65:32:0e brd ff:ff:ff:ff:ff:ff inet 172.16.1.86/16 brd 172.16.255.255 scope global em1 valid_lft forever preferred_lft forever 3: em2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 4: em3: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 5: em4: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 6: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet 172.16.1.128/16 brd 172.16.255.255 scope global bond0 valid_lft forever preferred_lft forever 8: bond0.10@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet XXX.XXX.XXX.142/24 brd XXX.XXX.XXX.255 scope global bond0.10 valid_lft forever preferred_lft forever :/etc/sysconfig/network-scripts# ip r default via 172.16.0.254 dev em1 169.254.0.0/16 dev em1 scope link metric 1002 169.254.0.0/16 dev bond0 scope link metric 1006 169.254.0.0/16 dev bond0.10 scope link metric 1008 172.16.0.0/16 dev em1 proto kernel scope link src 172.16.1.86 172.16.0.0/16 dev bond0 proto kernel scope link src 172.16.1.128 XXX.XXX.XXX.0/24 dev bond0.10 proto kernel scope link src XXX.XXX.XXX.142 And everything is working. But… I am not satisfy. Is it normal? Is it a way to have all the Ethernet link on a bond? Your help is needed :-) Best wishes -- Pierre Malard « Si l'on veut croire en l'humanité, il faut voir et comprendre l'inhumanité » |\ _,,,---,,_ /,`.-'`' -. ;-;;,_ |,4- ) )-,_. ,\ ( `'-' '---''(_/--' `-'\_) πr perl -e '$_=q#: 3|\ 5_,3-3,2_: 3/,`.'"'"'`'"'"' 5-. ;-;;,_: |,A- ) )-,_. ,\ ( `'"'"'-'"'"': '"'"'-3'"'"'2(_/--'"'"' `-'"'"'\_): 24πr::#;y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print' - --> Ce message n’engage que son auteur <--

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2019