Discuss February 2020

discuss@lists.centos.org

85 participants
65 discussions

CentOS-announce Digest, Vol 180, Issue 7
by centos-announce-request＠centos.org 28 Feb '20

28 Feb '20

1 0

Re-configuring BIND DNS Servers for CentOS Web Panel Web Hosting Control Panel on Amazon AWS Cloud
by Turritopsis Dohrnii Teo En Ming 27 Feb '20

27 Feb '20

Subject: Re-configuring BIND DNS Servers for CentOS Web Panel Web Hosting Control Panel on Amazon AWS Cloud Author: Mr. Turritopsis Dohrnii Teo En Ming, Singapore Date: 27 Feb 2020 Thursday Rationale for Re-configuration of BIND DNS Servers for CentOS Web Panel ======================================================================= I have originally followed the approach for cPanel where there are 2 DNS-ONLY servers and one or more cPanel webservers. However, CentOS Web Panel implements DNS Clusters differently. Hence I have to re-configure BIND DNS Servers for CentOS Web Panel web hosting control panel. PREREQUISITES ============= Part 1 of the series: Mr. Teo En Ming's Guide to Deploying CentOS Web Panel (CWP) Web Hosting Control Panel on Amazon AWS Cloud Redundant Blogger and Wordpress blog links: [1] https://tdtemcerts.blogspot.com/2020/02/mr-teo-en-mings-guide-to-deploying.… [2] https://tdtemcerts.wordpress.com/2020/02/23/mr-teo-en-mings-guide-to-deploy… Part 2 of the series: Setting Up Mail Server Operation for CentOS Web Panel Web Hosting Control Panel on Amazon AWS Cloud Redundant Blogger and Wordpress blog links: [1] https://tdtemcerts.blogspot.com/2020/02/setting-up-mail-server-operation-fo… [2] https://tdtemcerts.wordpress.com/2020/02/25/setting-up-mail-server-operatio… THIS guide is Part 3 of the series. EXTREMELY DETAILED INSTRUCTIONS OF TEO EN MING'S GUIDE ====================================================== Login to Amazon AWS Console. Setting Up Secondary/Slave DNS Server ===================================== On the EC2 Dashboard, click Instances. Click Launch Instance. Search for centos in the AWS Markpetplace. Select CentOS 7 (x86_64) - with Updates HVM (free tier eligible). Click Continue. Select t2.micro (free tier eligible). Click Next: Configure Instance Details. Network: Teo En Ming VPC Subnet: Public subnet | us-east-2a Click Protect against accidental termination. Click Next: Add Storage Size (GiB): 8 Click Next: Add Tags Key = Name Value = slave Click Next: Configure Security Group Click Select an existing security group Select NameServers Click Review and Launch. Click Launch. Select Choose an existing key pair. Key pair name: cwp Click Launch Instances. Click Instances. Select slave, right click and select Networking > Manage IP Addresses. Click Allocate an elastic IP to this instance. Click Allocate. Click Associate this Elastic IP Address. Instance: slave Click Associate. IPv4 address of Secondary/Slave DNS server is 3.12.224.179 $ ssh -i cwp.pem centos(a)3.12.224.179 $ sudo passwd $ su - # yum -y update && yum -y install wget # hostnamectl set-hostname ns2.teo-en-ming.com # cd /usr/local/src && wget http://centos-webpanel.com/cwp-el7-latest && sh cwp-el7-latest Started installing CentOS Web Panel at 9:00 PM on 26 Feb 2020 Wed. Completed installing CentOS Web Panel at 9:05 PM on 26 Feb 2020 Wed. Total duration: 5 mins. ############################# # CWP Installed # ############################# Go to CentOS WebPanel Admin GUI at http://SERVER_IP:2030/ http://3.12.224.179:2030 SSL: https://3.12.224.179:2031 --------------------- Username: root Password: ssh server root password MySQL root Password: ######################################################### CentOS Web Panel MailServer Installer ######################################################### SSL Cert name (hostname): ns2.teo-en-ming.com SSL Cert file location /etc/pki/tls/ private|certs ######################################################### Visit for help: www.centos-webpanel.com Write down login details and press ENTER for server reboot! Please reboot the server! Reboot command: shutdown -r now # reboot REFERENCE ========= Guide: Slave DNS Server & Manager - DNS Cluster Link: https://wiki.centos-webpanel.com/slave-dns-server-manager-dns-cluster REFERENCE ========= Guide: Slave DNS Server & Manager download version Link: https://wiki.centos-webpanel.com/slave-dns-server-manager-download-version Login to the CentOS Web Panel Admin Panel on the Slave. >From the left menu, click on CWP Settings, then select Edit Settings. Admin Email: ceo(a)teo-en-ming-corp.com Check Activate NAT-ed network configuration. Click Save Changes. Create a New Account on the Secondary/Slave DNS Server ====================================================== >From the left menu, click User Accounts, then click New Account. Domain name: teo-en-ming.com Username: slave Package: default Click Create. Download Slave DNS Manager and upload it to public_html folder on the Secondary/Slave DNS Server ================================================================================================ ssh -i cwp.pem centos(a)3.12.224.179 su - cd /home/slave/public_html wget http://dl1.centos-webpanel.com/files/cwp/addons/cwp-slave_dns.zip unzip cwp-slave_dns.zip mv slave_dns/* . rm -f index.html Fix file permissions on the Slave DNS Server ============================================ chown -R slave.slave /home/slave/public_html/* MySQL: Create User and Database on the Slave DNS Server ======================================================= >From the left menu, click SQL Services, then click MySQL Manager. Click Create Database and User. New Database for user: slave Database Name: slave Click Create Database. Edit file /home/slave/public_html/inc/db_conn.php.sample and enter your database connection details # nano /home/slave/public_html/inc/db_conn.php.sample # mv inc/db_conn.php.sample inc/db_conn.php # mysql slave_slave < sql/slave_dns.sql # nano /etc/sudoers.d/slave slave ALL= NOPASSWD: /bin/systemctl start named slave ALL= NOPASSWD: /bin/systemctl stop named slave ALL= NOPASSWD: /bin/systemctl restart named slave ALL= NOPASSWD: /bin/systemctl reload named slave ALL= NOPASSWD: /bin/systemctl status named slave ALL= NOPASSWD: /bin/systemctl is-active named # touch /etc/named/slave.conf # chmod 771 /etc/named # usermod -a -G named slave # chown slave.named /etc/named/slave.conf # mkdir /var/named/slave # chown named.named /var/named/slave Edit File: /etc/named.conf and add this in options section before closing } masterfile-format text; Add after options{} where other include lines are specifed //Slave dns configuration include "/etc/named/slave.conf"; Now you can login to Slave DNS Manager GUI by using a domain link of the account you have created. Go to http://3.12.224.179/~slave/index.php?login Default login for Slave DNS Manager GUI admin/root Username: root Password: FX8QKxvQ * Please change the default password after the first login Adding WebServers to Slave DNS Manager ====================================== - On Slave DNS manager GUI create a new user for each server or use a single for all webservers if you plan to transfer accounts from one to another webserver. Click Add New User. Username: Password: Email: API Key: API Secret: Domain Limit: 1000000 Click Save. - On Master CentOS Web Panel WebServer go to DNS Functions -> Slave DNS Manager Buy CWPPro license first. It is only USD$1.49 compared to USD$20 for the license of cPanel. I can't afford to buy the license for cPanel, hence I have to settle for CentOS Web Panel. Then ssh into your Master CentOS Web Panel Webserver. # sh /scripts/update_cwp You have successfully upgraded to CWPpro. On the Master CentOS Web Panel, Go to DNS Functions -> Slave DNS Manager API Key: Secret Key: Base URL: http://3.12.224.179/~slave Master Server IP's: 3.21.30.127 Click Submit. Master CentOS Web Panel WebServer configuration =============================================== Edit File: /etc/named.conf and add this in options section before closing } //Slave dns configuration allow-transfer {3.12.224.179;}; allow-recursion {3.12.224.179;}; also-notify {3.12.224.179;}; masterfile-format text; # named-checkconf # systemctl restart named REFERENCE ========= Guide: How to setup DNS cluster on CWP 1 – Install DNS Manager Link: https://opentechy.com/how-to-setup-dns-cluster-on-cwp/ REFERENCE ========= Guide: How to setup DNS cluster on CWP 2 – Add webservers to DNS cluster Link: https://opentechy.com/how-to-setup-dns-cluster-on-cwp-2-add-webservers-to-d… CONFIGURING CUSTOM NAME SERVERS AT YOUR DOMAIN REGISTRAR ======================================================== Go to Advanced Features > Hostnames Host: ns1 IP Addresses: 3.21.30.127 Host: ns2 IP Addresses: 3.12.224.179 Nameservers: Using custom nameservers ns1.teo-en-ming.com ns2.teo-en-ming.com CONFIGURING NAME SERVERS ON THE MASTER CENTOS WEB PANEL WEBSERVER ================================================================== >From the left menu, click DNS Functions, then click Edit Nameservers IPs. Name Server 1: ns1.teo-en-ming.com 3.21.30.127 Name Server 2: ns2.teo-en-ming.com 3.12.224.179 Click Save changes. # systemctl restart named BIND DNS CONFIGURATION ON THE MASTER CENTOS WEB PANEL WEBSERVER =============================================================== File /etc/named.conf: // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a any DNS resolver only). // // See /usr/share/doc/bind*/sample/ for example named configuration files. // // See the BIND Administrator's Reference Manual (ARM) for details about the // configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html options { listen-on port 53 { any; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; recursing-file "/var/named/data/named.recursing"; secroots-file "/var/named/data/named.secroots"; allow-query { any; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ // recursion no; dnssec-enable yes; dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "/etc/named.root.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; //Slave dns configuration allow-transfer {3.12.224.179;}; allow-recursion {3.12.224.179;}; also-notify {3.12.224.179;}; masterfile-format text; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; zone "." IN { type hint; file "named.ca"; }; include "/etc/named.rfc1912.zones"; include "/etc/named.root.key"; zone "ns1.teo-en-ming.com" {type master;file "/var/named/ns1.teo-en-ming.com.db";}; zone "ns2.teo-en-ming.com" {type master;file "/var/named/ns2.teo-en-ming.com.db";}; // zone teo-en-ming.com zone "teo-en-ming.com" {type master; file "/var/named/teo-en-ming.com.db";}; // zone_end teo-en-ming.com File /var/named/ns1.teo-en-ming.com.db: ; Panel %version% ; Zone file for ns1.teo-en-ming.com $TTL 14400 ns1.teo-en-ming.com. 86400 IN SOA ns1.teo-en-ming.com. info.centos-webpanel.com. ( 2013071600 ;serial, todays date+todays 86400 ;refresh, seconds 7200 ;retry, seconds 3600000 ;expire, seconds 86400 ;minimum, seconds ) ns1.teo-en-ming.com. 86400 IN NS ns1.teo-en-ming.com. ns1.teo-en-ming.com. 86400 IN NS ns2.teo-en-ming.com. ns1.teo-en-ming.com. 14400 IN A 3.21.30.127 File /var/named/ns2.teo-en-ming.com.db: ; Panel %version% ; Zone file for ns2.teo-en-ming.com $TTL 14400 ns2.teo-en-ming.com. 86400 IN SOA ns1.teo-en-ming.com. info.centos-webpanel.com. ( 2013071600 ;serial, todays date+todays 86400 ;refresh, seconds 7200 ;retry, seconds 3600000 ;expire, seconds 86400 ;minimum, seconds ) ns2.teo-en-ming.com. 86400 IN NS ns1.teo-en-ming.com. ns2.teo-en-ming.com. 86400 IN NS ns2.teo-en-ming.com. ns2.teo-en-ming.com. 14400 IN A 3.12.224.179 File /var/named/teo-en-ming.com.db: ; Generated by CWP ; Zone file for teo-en-ming.com $TTL 14400 @ 86400 IN SOA ns1.teo-en-ming.com. ceo.teo-en-ming-corp.com. ( 2020022453 ; serial, todays date+todays 3600 ; refresh, seconds 7200 ; retry, seconds 1209600 ; expire, seconds 86400 ) ; minimum, seconds @ 86400 IN NS ns1.teo-en-ming.com. @ 86400 IN NS ns2.teo-en-ming.com. @ IN A 3.21.30.127 localhost.teo-en-ming.com. IN A 127.0.0.1 @ IN MX 0 teo-en-ming.com. mail 14400 IN CNAME teo-en-ming.com. smtp 14400 IN CNAME teo-en-ming.com. pop 14400 IN CNAME teo-en-ming.com. pop3 14400 IN CNAME teo-en-ming.com. imap 14400 IN CNAME teo-en-ming.com. webmail 14400 IN A 3.21.30.127 cpanel 14400 IN A 3.21.30.127 cwp 14400 IN A 3.21.30.127 www 14400 IN CNAME teo-en-ming.com. ftp 14400 IN CNAME teo-en-ming.com. _dmarc 14400 IN TXT "v=DMARC1; p=none" @ 14400 IN TXT "v=spf1 +a +mx +ip4:3.21.30.127 ~all" ns1.teo-en-ming.com. 14400 IN A 3.21.30.127 ns2.teo-en-ming.com. 14400 IN A 3.12.224.179 default._domainkey 14400 IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEXk5wQIfKJPjTkkj0yHGX8yIJOOrsOsvAqbqVaEBFBWhRlF7YxyGzchaAdWEVQkozcsWPIL5DgJ7vWBoJIGqfNOT7vO/lStqNcXC+2hYVIF7MTB8i6tBW1/UDEuL8oammKWDq8P9Fpduk6JppV7rtKXeFzrYj35ydIhDIKUABcwIDAQAB" BIND DNS CONFIGURATION ON THE SLAVE DNS MANAGER =============================================== File /etc/named.conf: // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a any DNS resolver only). // // See /usr/share/doc/bind*/sample/ for example named configuration files. // // See the BIND Administrator's Reference Manual (ARM) for details about the // configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html options { listen-on port 53 { any; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; recursing-file "/var/named/data/named.recursing"; secroots-file "/var/named/data/named.secroots"; allow-query { any; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ recursion no; dnssec-enable yes; dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "/etc/named.root.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; masterfile-format text; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; zone "." IN { type hint; file "named.ca"; }; include "/etc/named.rfc1912.zones"; include "/etc/named.root.key"; // zone teo-en-ming.com // zone "teo-en-ming.com" {type master; file "/var/named/teo-en-ming.com.db";}; // zone_end teo-en-ming.com //Slave dns configuration include "/etc/named/slave.conf"; File /var/named/teo-en-ming.com.db (WRONG, DON'T USE): ; Generated by CWP ; Zone file for teo-en-ming.com $TTL 14400 @ 86400 IN SOA ns1.centos-webpanel.com. ceo.teo-en-ming-corp.com. ( 2020022660 ; serial, todays date+todays 3600 ; refresh, seconds 7200 ; retry, seconds 1209600 ; expire, seconds 86400 ) ; minimum, seconds @ 86400 IN NS ns1.centos-webpanel.com. @ 86400 IN NS ns2.centos-webpanel.com. @ IN A 3.12.224.179 localhost.teo-en-ming.com. IN A 127.0.0.1 @ IN MX 0 teo-en-ming.com. mail 14400 IN CNAME teo-en-ming.com. smtp 14400 IN CNAME teo-en-ming.com. pop 14400 IN CNAME teo-en-ming.com. pop3 14400 IN CNAME teo-en-ming.com. imap 14400 IN CNAME teo-en-ming.com. webmail 14400 IN A 3.12.224.179 cpanel 14400 IN A 3.12.224.179 cwp 14400 IN A 3.12.224.179 www 14400 IN CNAME teo-en-ming.com. ftp 14400 IN CNAME teo-en-ming.com. _dmarc 14400 IN TXT "v=DMARC1; p=none" @ 14400 IN TXT "v=spf1 +a +mx +ip4:3.12.224.179 ~all" default._domainkey 14400 IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCktDYpEtFO7dyJeErMbjHvyfJYU8RqDeS7WVqQnjH4fP42JSqPmxEFX+QytFTlGqd6ndlz9Tjqi1iZsD0ajB/+0Pkwq/KtL6NVo2TIqnXj8VebV9+FEcx+FGvLA/b5zz+Hfn0Bf+w/2T2bSwUm+tJoHilmANCFGlcGmpO9/lXvAwIDAQAB" File /etc/named/slave.conf: zone "teo-en-ming.com" { type slave; file "slave/db.teo-en-ming.com"; masters { 3.21.30.127; };}; //username:enming That's all folks! -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

3 2

mingw compiler for x84_64 CentOS 7
by wwp 27 Feb '20

27 Feb '20

Hello there, it seems that EPEL only provides mingw cross-compiler packages for aarch64. Aren't there x64_64 ones for CentOS 7, as there were for CentOS 6? Regards, -- wwp https://useplaintext.email/

2 2

CentOS-announce Digest, Vol 180, Issue 6
by centos-announce-request＠centos.org 27 Feb '20

27 Feb '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:0374 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2020:0578 Important CentOS 7 python-pillow Security Update (Johnny Hughes) 3. CESA-2020:0568 Important CentOS 7 ksh Security Update (Johnny Hughes) 4. CESA-2020:0576 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 5. CESA-2020:0574 Important CentOS 6 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 26 Feb 2020 17:10:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0374 Important CentOS 7 kernel Security Update Message-ID: <20200226171015.GA18009(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0374 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0374 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 823a3224138464ae405a87ef40428caa99f7bed4e0014ddbf0650d9eb0b7d314 bpftool-3.10.0-1062.12.1.el7.x86_64.rpm b6a9f2c16aff89bb7fa364c61c1efecb2afb84e0c5e309aff644c7e198556523 kernel-3.10.0-1062.12.1.el7.x86_64.rpm 33d336117d15fe7d6d14ff88f013fa311c25b2db739bfaa193997cf87d5725c8 kernel-abi-whitelists-3.10.0-1062.12.1.el7.noarch.rpm 294bf893c42a86cae92bccf8246e65e9a2e1156f77bc7994d388634dbf980b7c kernel-debug-3.10.0-1062.12.1.el7.x86_64.rpm 6233e348a7183027f88e4164d5c978bb12de89ef246b6a93ca303eaf775573f8 kernel-debug-devel-3.10.0-1062.12.1.el7.x86_64.rpm d0183b67d31d57fc7c58646e0d1c337169cab5d792538ae04116111f8398cd92 kernel-devel-3.10.0-1062.12.1.el7.x86_64.rpm d58b7b9a6d64c9fd4f67b9859de2c71a2e6c959664582d2026428bc48f44df37 kernel-doc-3.10.0-1062.12.1.el7.noarch.rpm d9d0bbbea0747ecfde0b657ee0cbe1fa49173d5151c264ab78862caeba4800d3 kernel-headers-3.10.0-1062.12.1.el7.x86_64.rpm 8ec5ea4586dd3997d3f65412766b958e45ac79843f41fd28c4b7c6fe5be24ccc kernel-tools-3.10.0-1062.12.1.el7.x86_64.rpm 60a2921ead8c26cf3937ebe81ac71006bb8ed724786aaf13235f85653cfd65e6 kernel-tools-libs-3.10.0-1062.12.1.el7.x86_64.rpm 2a1686c967c2bd0ead48b1883dcf6d662df25622dea3236c023f95cabf03d627 kernel-tools-libs-devel-3.10.0-1062.12.1.el7.x86_64.rpm 6cbb0603daf4dca9be7f6b2ee8208ffca490360b3f98661db878ac11ba181eab perf-3.10.0-1062.12.1.el7.x86_64.rpm 310a94c94acc848628da65728cb7b116303fdeb61efbdd4a742324b37ee941f6 python-perf-3.10.0-1062.12.1.el7.x86_64.rpm Source: d4e974016eb6f79cc3c65e8614be75d7aa2cfc423b10962db648f430b53016b0 kernel-3.10.0-1062.12.1.el7.centos.plus.src.rpm 1fadf666591312c708379616407db46c8d46866dce958447239a21627b6ca7a5 kernel-3.10.0-1062.12.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 26 Feb 2020 17:13:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0578 Important CentOS 7 python-pillow Security Update Message-ID: <20200226171351.GA18258(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0578 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0578 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 10d0763e405aae51e7c80f9f1a0a4d60ccaffc7c5e3baa09ef8eda3c4d9bd805 python-pillow-2.0.0-20.gitd1c6db8.el7_7.i686.rpm 5315ecf80b6847a540d59697ce47c0a18b49494994dbd4f1010b591396fca1ca python-pillow-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm 2493055e42d60e589c60321de254932992d14d999da734cb52163b30163ae455 python-pillow-devel-2.0.0-20.gitd1c6db8.el7_7.i686.rpm 2af1d74c965029b48878392480b2e52436fea0ab666e9bc362c66fd4f3b4c6de python-pillow-devel-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm ec5588c4d600ecc876cf8b9237376e3d0fc72c512a8d7cfeb17e8e21ebaf4498 python-pillow-doc-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm 216c146772490caa86d5e64c46cd34f65d01596a2a1104d8d1860720923ffdba python-pillow-qt-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm b3b57a7090b5e581f5015d946336f3d4bccf3d6eff4196c08b24496daa8d9c3d python-pillow-sane-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm 26767bd6254f64e52f0a6d14a4ab34f3e6e08476864535c13cd47cfcafa4bf2e python-pillow-tk-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm Source: 6f6aa7223ab73060ec98c82411c898a7f6c9b66acbb474a7c9bce5ccced0220a python-pillow-2.0.0-20.gitd1c6db8.el7_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 26 Feb 2020 17:14:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0568 Important CentOS 7 ksh Security Update Message-ID: <20200226171416.GA18367(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0568 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0568 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0987cea3cf687c71517c7e29b83521e818a9f811cee57df2375adac9b04e75d7 ksh-20120801-140.el7_7.x86_64.rpm Source: 2ae6d7ccd138425b20e227033b0bf811ac0f1c92c7962368642e38c618c9d8d7 ksh-20120801-140.el7_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 26 Feb 2020 17:15:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0576 Important CentOS 7 thunderbird Security Update Message-ID: <20200226171525.GA18532(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0576 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0576 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7d68665877df01b039d49ab94dfd049eeb2f0eb35c3bc4f8d48f853eb0d56fa3 thunderbird-68.5.0-1.el7.centos.x86_64.rpm Source: b60f4ca1059f7dacd5e38fa71b5456168e78fc4955e9127f064b89c8b837cbea thunderbird-68.5.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 26 Feb 2020 17:17:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0574 Important CentOS 6 thunderbird Security Update Message-ID: <20200226171713.GA18687(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0574 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0574 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0ecd700cd71a96565913e36ef8350995a5d00cccc830f3042f00fbebd833fdf2 thunderbird-68.5.0-1.el6.centos.i686.rpm x86_64: 0f8583b47449d42711d8df5daeb3e9a2ec217c1304e771a711b8d775673f60f5 thunderbird-68.5.0-1.el6.centos.x86_64.rpm Source: bb00e7c71ec579f52dbb33f9fef9676a2b27b49250e451798f9a4c8ef765f927 thunderbird-68.5.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 180, Issue 6 ***********************************************

1 0

Centos 8 Postfix & Cyrus
by Gregory P. Ennis 27 Feb '20

27 Feb '20

Everyone, I have had two e-mail servers running, one with Centos 6 and the other with Centos 7 using sendmail, dovecot, spamassassin, clamd, and cclamav-milter without hardly any problems after the initial setup. My expertise should be considered not much more than beginner or early intermediate. I would like to create a hypervisor with Centos 8 and run a guest Centos 8 with postfix and cyrus. I already have a guest Centos 8 on a Centos 7 hypervisor, and have had difficulty getting cyrus to work. Can anyone refer me to a tutorial on how to get postfix and cyrus to work on centos 8. Everyone seems to imply that postfix is much easier to use, but so far I have not been able to pass the low end of the learning curve. Best recommendations for a tutorial is what I would like to have. Thanks much!!!! Greg Ennis

2 2

anyone know of a list or wiki for GWC?
by Fred Smith 26 Feb '20

26 Feb '20

Hi! totally OT... Hoping there is a mailing list or wiki (or other help forum) for GWC, but haven't found one yet. I'm working on converting a bunch of my LPs to CDs, and am using GWC (Gnome Wave Cleaner, or GTK Wave Cleaner) to clean up the noise. It works great, but I can't figure out how to deal with certain types of pressing flaws that create a thump every time around. Anyone know of such a resource? Thanks in advance! Fred -- ------------------------------------------------------------------------------- .---- Fred Smith / ( /__ ,__. __ __ / __ : / / / / /__) / / /__) .+' Home: fredex(a)fcshome.stoneham.ma.us / / (__ (___ (__(_ (___ / :__ 781-438-5471 -------------------------------- Jude 1:24,25 ---------------------------------

2 4

Re: [CentOS] Encrypted container on CentOS VPS
by fvargas 26 Feb '20

26 Feb '20

Enviado desde mi smartphone Samsung Galaxy. -------- Mensaje original --------De: H <agents(a)meddatainc.com> Fecha: 24/2/20 20:37 (GMT-04:00) A: centos(a)centos.org Asunto: Re: [CentOS] Encrypted container on CentOS VPS On 02/24/2020 05:01 PM, Michael Hennebry wrote:> What is the use-case here?> Are you concerned that the host may change the data or just read it?> Would re-creating the file anew for each use be practical?> What about using the file in an encrypted form?> I'm thinking of the case of records on people.> Separate "cyphers" for first names, last names and other names> would go a long way toward hiding whatever needs to be hidden.>> Keeping the host from reading the data might not be a solvable problem.> Keeping the host from quietly changing the data might be expensive.> If all else fails you might keep copies of the> data on separate hosts and compare their md5sums.> I expect that doing it on your own host has already been deemed a failure.>General prudence as to someone accessing my files._______________________________________________CentOS mailing listCentOS@centos.orghttps://lists.centos.org/mailman/listinfo/centos

1 0

Downgrade Mariadb 10.3 on centos 8 ?
by Ian B 25 Feb '20

25 Feb '20

We've just got a new server running centos 8 and mariadb 10.3.17, so there's no real data loss issues currently on that server. We've also got some older servers running mysql 5.1.7 which can't be upgraded currently. We can't connect to the old mysql servers using libmysqlclient (to be more precise Perl using DBD::mysql which uses that to my understanding). We get a 'handshake error', and digging about it suggests that it's mysql version incompatibilities. Really we need the new servers connecting to the old and vice versa. So I'm wondering how I get around this. Is downgrading Mariadb on Centos 8 the only (or possible) route here ? If so, any idea how we can go about this (I can't seem to find any information on what version would work either)? Happy to explore any other routes, other than changing the old servers currently. Thanks, Ian

1 0

dbus/systemd failure on startup (CentOS 7.7)
by James Pearson 25 Feb '20

25 Feb '20

We are seeing a problem that occurs ~5% of the time when rebooting CentOS 7.7 where systemd gets a 'Connection timed out' to D-Bus just after the D-Bus service starts - from 'journalctl -x' : ... Jan 21 16:09:59 linux7-7.mpc.local systemd[1]: Started D-Bus System Message Bus. -- Subject: Unit dbus.service has finished start-up -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit dbus.service has finished starting up. -- -- The start-up result is done. Jan 21 16:10:24 linux7-7.mpc.local systemd[1]: Failed to register match for Disconnected message: Connection timed out Jan 21 16:10:24 linux7-7.mpc.local systemd[1]: Failed to initialize D-Bus connection: Connection timed out ... This then has a knock-on effect that causes other services to fail - e.g. -- Unit gdm.service has begun starting up. Jan 21 16:10:39 linux7-7.mpc.local dbus[817]: [system] Activating systemd to hand-off: service name='org.freedesktop.login1' unit='dbus-org.freedesktop.login1.service' Jan 21 16:10:50 linux7-7.mpc.local dbus[817]: [system] Failed to activate service 'org.freedesktop.systemd1': timed out Jan 21 16:10:50 linux7-7.mpc.local systemd-logind[1221]: Failed to enable subscription: Failed to activate service 'org.freedesktop.systemd1': timed out Jan 21 16:10:50 linux7-7.mpc.local systemd-logind[1221]: Failed to fully start up daemon: Connection timed out Jan 21 16:10:50 linux7-7.mpc.local systemd[1]: systemd-logind.service: main process exited, code=exited, status=1/FAILURE Jan 21 16:10:50 linux7-7.mpc.local systemd[1]: Failed to start Login Service. -- Subject: Unit systemd-logind.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit systemd-logind.service has failed. -- -- The result is failed. Whatever the issue is, it appears that polkit might be involved - if we restart the polkit service, things appear to return to normal (e.g. gdm starts up etc) We can't find any similar reports of this happening elsewhere with CentOS 7.7 - but we were wondering if anyone else had come across a problem like this? Thanks James Pearson

3 6

Nested Virtualization with CentOS 7 host and CentOS 8 guest
by Chris Card 25 Feb '20

25 Feb '20

I'm not sure whether this is a specific CentOS question, but I'm hoping someone here can give me some pointers. I have an OpenStack compute node running CentOS 7.4.1708 and kernel 3.10.0-693.17.1.el7.x86_64 which is configured for nested virtualization; this has been set up for a few years and works fine when running CentOS 7 guests which themselves are using virt-create / virt-customize etc. Nova is set up on the compute node so that guests have cpu mode host-passthrough. I have been trying to run a CentOS 8 guest on the compute node so that I can build CentOS 8 images for OpenStack (there is an issue using a CentOS 7 server to build a CentOS 8 image related to xfs options which are only supported read-only by CentOS 7). However, every time I try to build a CentOS 8 image using a CentOS 8 guest, the CentOS 8 guest crashes with a kernel panic, not immediately but usually near the end of the image build process. (I have also seen similar behaviour using a Fedora 31 guest to build a CentOS 8 image, but the crashes are less frequent, and some image builds have succeeded). The CentOS 8 guest is running CentOS 8.1.1911 (Core) and kernel 4.18.0-147.3.1.el8_1.x86_64. Any ideas?

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2020