Discuss January 2020

discuss@lists.centos.org

93 participants
73 discussions

Adding options to grub
by Mauricio Tavares 14 Jan '20

14 Jan '20

So I want to add a few options to the kernel (say iommu support). I have been told before to avoid using grub2-mkconfig because it would apply the changes to all currently available (to boot from) boot kernels. Instead, I should edit just the latest kernel entry in the grub.cfg file, adding the option to the line that used to start with "linux16" in centos6. This way, if it went boink, all I had to do is reboot, pick another kernel from the grub menu and off I went. And, it seems that every future kernel upgrade would incorporate this change. Looking at a centos7.7 setup, I take the equivalent line in /boot/grub/grub.conf is kernel /boot/vmlinuz-3.10.0-123.4.4.el7.x86_64 console=hvc0 xencons=tty0 root=/dev/xvda ro I am now looking into a centos8 and its grub.cfg (/boot/efi/EFI/centos/grub.cfg in this case) looks rather different. Is what I have described above still the safest way to customize the kernel? Or is there a cleaner way to do the same while still leaving me the option to go back to the grub menu and pick an undisturbed kernel?

1 0

Problems with firewalld-0.7.0
by Orion Poplawski 13 Jan '20

13 Jan '20

After upgrading one of our systems to CentOS 8 CR and firewalld-0.7.0-5.el8.noarch it no longer accepts connections allowed in one of the two active zones. I've reported the issue here: https://bugzilla.redhat.com/show_bug.cgi?id=1790681 but wondered if anyone else was seeing problems with multi-zone firewalld configurations. - Orion -- Orion Poplawski Manager of NWRA Technical Systems 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

1 0

firefox update
by Steve Clark 13 Jan '20

13 Jan '20

Any idea when firefox-68.4.1 will be available? Thanks, Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

2 1

Problem with disconnecting SSH-sessions
by H 12 Jan '20

12 Jan '20

I am running CentOS 7 on a workstation and CentOS 6 and 7 on a couple of servers I am remotely connecting to using the same username and thus ssh configuration. However, one of the servers running CentOS 6 I keep getting disconnected from whereas I have no such problems with another CentOS 6 server and CentOS 7 server. The latter two are on two different hosted server setups far, far away whereas the problematic one is my own physical hardware in the same building. I have tried to make sure the sshd configuration on all servers are identical but still have this problem. I can rule out a general problem with the router in my office since all connections are via that router, the only difference is that the problematic server is in the same building and the connection loops back via the same router but through an external IP address. /var/log/secure on the workstation offers no clues with no messages regarding any disconnection. If anyone has suggestions what I should check, it would be greatly appreciated!

3 8

Blocking attacks from a range of IP addresses
by H 12 Jan '20

12 Jan '20

I am being attacked by an entire subnet where the first two parts of the IP address remain identical but the last two parts vary sufficiently that it is not caught by fail2ban since the attempts do not meet the cut-off of a certain number of attempts within the given time. Has anyone created a fail2ban filter for this type of attack? As of right now, I have manually banned a range of IP addresses but would like to automate it for the future.

9 11

Re: [CentOS] Block attacks from a range of IP addresses
by Adrian van Bloois 12 Jan '20

12 Jan '20

Hi, I'm using sshguard to acomplish this. You can acutally choose tthe size of the range you want to block, /8 of /16, no problem. It works perfect! It is included in the repo both for C7 and C8. Adrian -- Adri P. van Bloois "Elegance is not a dispensable luxury but a factor that decides between success and failure." Edsger W. Dijkstra

1 0

Unresolved dependencies when upgrade on centOS 8
by Ebed 11 Jan '20

11 Jan '20

Hi, Guys i got unresolved dependencies when trying to upgrade centOS 8, what should i do to fix this? [root@ws1 ebedsat]# dnf upgrade Last metadata expiration check: 0:14:27 ago on Sat 11 Jan 2020 12:16:02 PM WIB. Error: Problem 1: cannot install the best update candidate for package kmod-iwlegacy-0.0-1.el8.elrepo.x86_64 - nothing provides kernel >= 4.18.0-147.el8 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(__pci_register_driver) = 0xe85eaefe needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_unregister_driver) = 0x4883cfc3 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_set_master) = 0xe724f530 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(kmalloc_caches) = 0x8200293d needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_disable_device) = 0x24796ca2 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_enable_device) = 0x982a3dc2 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_release_regions) = 0xbf4a2a75 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_request_regions) = 0x9c656956 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_write_config_byte) = 0x21935607 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_read_config_word) = 0x3dc485cf needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_disable_msi) = 0xc174fcd7 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_enable_msi) = 0xda24a9c7 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_write_config_word) = 0x4b15b75c needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_disable_link_state) = 0x02f2f3f8 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(generic_file_llseek) = 0xc27ffb37 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(debugfs_create_dir) = 0x2f4ce417 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(debugfs_create_file) = 0x501d615e needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_alloc_hw_nm) = 0xba0c6cb1 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_beacon_get_tim) = 0x3e9fc88e needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_free_hw) = 0x1a211787 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_register_hw) = 0x94f9cf8d needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_rx_napi) = 0xe42fba8f needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_stop_queue) = 0x14b3a816 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_stop_queues) = 0x5d5f40f9 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_unregister_hw) = 0x740a5bb2 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_wake_queue) = 0xfa79b997 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_wake_queues) = 0xa900f2df needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(led_classdev_unregister) = 0x9fd8b0e4 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(of_led_classdev_register) = 0xe2dcc6bc needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(wiphy_rfkill_set_hw_state) = 0x1df077cc needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(debugfs_remove) = 0x9ef3e60b needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(debugfs_remove_recursive) = 0x4668b613 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(default_llseek) = 0x384172fd needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pcie_capability_read_word) = 0xa785480e needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(__ieee80211_create_tpt_led_trigger) = 0x0d0ddd5f needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(__ieee80211_get_radio_led_name) = 0xd1d478f1 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_chswitch_done) = 0xced3a36a needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_find_sta) = 0xc579589b needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_rate_control_register) = 0xabcd1b6e needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_rate_control_unregister) = 0x22eec09c needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_restart_hw) = 0x779336b9 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_scan_completed) = 0x70edbf96 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_sta_block_awake) = 0xf9257828 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_start_tx_ba_cb_irqsafe) = 0xbd303a44 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_start_tx_ba_session) = 0xa96bdcd7 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_stop_tx_ba_cb_irqsafe) = 0x963e9d4a needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_stop_tx_ba_session) = 0xf0bb0c05 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(ieee80211_tx_status_irqsafe) = 0xdb983f1b needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(pci_ioremap_bar) = 0x5a71258b needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 - nothing provides kernel(rate_control_send_low) = 0x3f7dc196 needed by kmod-iwlegacy-0.0-2.el8_1.elrepo.x86_64 Problem 2: cannot install the best update candidate for package qt-creator-4.9.2-3.el8.x86_64 - nothing provides libLLVM-8.so()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libLLVM-8.so(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangBasic.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangFormat.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangLex.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangRewrite.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingCore.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingInclusions.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 Problem 3: package qt-creator-doc-4.9.2-4.el8.noarch requires qt-creator = 4.9.2-4.el8, but none of the providers can be installed - cannot install the best update candidate for package qt-creator-doc-4.9.2-3.el8.noarch - nothing provides libLLVM-8.so()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libLLVM-8.so(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangBasic.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangFormat.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangLex.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangRewrite.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingCore.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingInclusions.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 Problem 4: package qt-creator-data-4.9.2-4.el8.noarch requires qt-creator = 4.9.2-4.el8, but none of the providers can be installed - cannot install the best update candidate for package qt-creator-data-4.9.2-3.el8.noarch - nothing provides libLLVM-8.so()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libLLVM-8.so(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangBasic.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangFormat.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangLex.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangRewrite.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingCore.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingInclusions.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 Problem 5: package qt-creator-translations-4.9.2-4.el8.noarch requires qt-creator-data = 4.9.2-4.el8, but none of the providers can be installed - package qt-creator-data-4.9.2-4.el8.noarch requires qt-creator = 4.9.2-4.el8, but none of the providers can be installed - cannot install the best update candidate for package qt-creator-translations-4.9.2-3.el8.noarch - nothing provides libLLVM-8.so()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libLLVM-8.so(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclang.so.8(LLVM_8)(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangBasic.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangFormat.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangLex.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangRewrite.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingCore.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 - nothing provides libclangToolingInclusions.so.8()(64bit) needed by qt-creator-4.9.2-4.el8.x86_64 (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) [root@ws1 ebedsat]# uname -mrs Linux 5.4.10-1.el8.elrepo.x86_64 x86_64

2 2

Building and packaging httpd
by Benson Muite 10 Jan '20

10 Jan '20

Hi, Am rebuilding httpd from scratch to enable http2 and minimize extra modules on Cent Os 8. Am having trouble understanding the spec file [0] and systemd initialization [1][2][3] (these are very similar to those extracted from [4]). Why are 3 scripts needed to start the service and why is a pid setting not needed as used in the httpd.service file at [5]? Benson [0] https://src.fedoraproject.org/rpms/httpd/blob/HEAD/f/httpd.spec [1] https://src.fedoraproject.org/rpms/httpd/tree/f31 [2] https://src.fedoraproject.org/rpms/httpd/blob/f31/f/httpd.service [3] https://src.fedoraproject.org/rpms/httpd/blob/f31/f/httpd-init.service [4] http://vault.centos.org/8.0.1905/AppStream/Source/SPackages/httpd-2.4.37-12… [5] https://blacksaildivision.com/how-to-install-apache-httpd-on-centos

2 2

copying files to fill flash drives
by Frank Cox 10 Jan '20

10 Jan '20

Back in the days of DOS I had a program that I obtained from somewhere called FILL. FILL would take the name of a directory and then start writing files from that directory onto a series of floppy disks in such a way that each disk was made as full as possible, but without modifying the files that it was writing. So you might end up with disk 1 having files A B and D on them since D fitted but C was too big so it went onto Disk 2 along with files E and F. Before I re-invent the wheel here, does someone already have a way to do this with Linux so you can write a series of flash drives and fill them with the contents of a specified directory without modifying the files that get written? The reason that I specify without modifying the files is that I could do this easily with tar and split, but then I end up with a tar file and can't just look on disk 1 and copy file A off of it later on. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

6 5

Using shared printers in CentOS 8
by Robert Nichols 09 Jan '20

09 Jan '20

How do I let a CentOS 8 client make use of the shared printers advertised by CUPS on the network? In CentOS 6, this was just a matter in a checkbox "Show printers shared by other systems" on the CUPS Admin page. Is this function still available somehow? Manually adding all the shared printers on every client would be painful. -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

3 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss January 2020