Discuss March 2020

discuss@lists.centos.org

63 participants
64 discussions

crypto-policies / per connection based config
by Leon Fauster 18 Mar '20

18 Mar '20

EL8 workstation: crypto-policies is set to DEFAULT. I need to establish a VPN connection via NetworkManager (Gnome UI) that uses a legacy protocol. Downgrading the policies globally in /etc/crypto-policies/back-ends (I do it just for one backend) helps to establish the connection. To protect this workstation I want to have this config just for this connection (its openssl based that needs opensslcnf.config adapted) and not for all openssl based services. Is a per connection based config possible? Thanks for hints, Leon

1 0

CentOS 8 VM 800x600
by Jerry Geis 18 Mar '20

18 Mar '20

Hi all, I am trying again to get video higher that 800x600 on CentOS 8 VM guest. I re-installed the image, I installed spice-vdagent, I tried setting QXL and VGA both - so far everything is always 800x600. What is the trick ? I am using virt-manager. Jerry

1 0

Running amanda on CentOS 7: "amanda-udp.service failed."
by Robert Heller 18 Mar '20

18 Mar '20

I am trying to get amanda backup going on a CentOS 7 system and things are not working: sharky4.deepsoft.com% sudo systemctl start amanda-udp [sudo] password for heller: Job for amanda-udp.service failed because a configured resource limit was exceeded. See "systemctl status amanda-udp.service" and "journalctl -xe" for details. sharky4.deepsoft.com% sudo systemctl status -l amanda-udp â amanda-udp.service - Amanda Backup System Loaded: loaded (/usr/lib/systemd/system/amanda-udp.service; static; vendor preset: disabled) Active: failed (Result: resources) Mar 17 08:35:58 sharky4.deepsoft.com systemd[1]: Unit amanda-udp.service entered failed state. Mar 17 08:35:58 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed. Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: Got more than one socket. Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to run 'start' task: Invalid argument Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup System. Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed. Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Got more than one socket. Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to run 'start' task: Invalid argument Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup System. Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed. sharky4.deepsoft.com% sudo journalctl -xe Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup -- Subject: Unit amanda-udp.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit amanda-udp.service has failed. -- -- The result is failed. Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed. sharky4.deepsoft.com% cat /usr/lib/systemd/system/amanda-udp.service [Unit] Description=Amanda Backup System After=local-fs.target [Service] User=amandabackup Group=disk ExecStart=/usr/sbin/amandad -auth=bsd amdump StandardInput=socket What is missing? I have installed (stock CentOS 7 from standard repos): sharky4.deepsoft.com% rpm -qa amanda\* amanda-server-3.3.3-21.el7.x86_64 amanda-client-3.3.3-21.el7.x86_64 amanda-libs-3.3.3-21.el7.x86_64 amanda-3.3.3-21.el7.x86_64 -- Robert Heller -- 978-544-6933 Cell: 413-658-7953 GV: 978-633-5364 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

3 3

signing modules
by Jerry Geis 17 Mar '20

17 Mar '20

Is there an "easy" way to just sign all kernel modules in the /lib/modules directory ? I'm getting an error about a module not being signed so not loading. CentOS 7.7 UEFI booting. (I cannot remove UEFI as hardware does not allow it). Thanks, Jerry

5 10

Xorg on CentOS
by Jerry Geis 17 Mar '20

17 Mar '20

I am trying to find a way to tell the ORDER of X drivers. I have a VM image of CentOS 7. If I boot the image I want the generic driver to load. But if I put that image on hardware I want the Intel driver to load. So if I specific the /etc/X11/xorg.conf.d/20-intel.conf and specify Intel - this is great for the physical device. But booting my image it fails cause there is not Intel hardware. How can have ONE X config that specifies Intel first and if not present load generic VGA stuff. Thanks, Jerry

2 2

tuned on CentOS 6.9
by Chris Card 17 Mar '20

17 Mar '20

Does tuned on CentOS 6.9 (i.e. tuned-0.2.19-18.el6.noarch) do any dynamic tuning, or does it only support static configuration via a static profile? Chris

1 0

CentOS rpm versioning
by koka miptpatriot 16 Mar '20

16 Mar '20

Hello Clair vulnerability scanner considers the latest version of CentOS mariadb vulnerable, because of RHSA-2019:3708 It states, that mariadb must be updated at least to the version "10.3.17-1.module+el8.1.0+3974+90eded84". CentOS' last version is "10.3.17-1.module_el8.1.0+257+48736ea6". Rpm/yum considers CentOS' version older, than RHEL's. % rpmdev-vercmp 3:10.3.17-1.module_el8.1.0+257+48736ea6 3:10.3.17-1.module+ el8.1.0+3974+90eded84 3:10.3.17-1.module_el8.1.0+257+48736ea6 < 3:10.3.17-1.module+el8.1.0+3974+ 90eded84 That's why Clair considers it's vulnerable. Is there any way to fix it? -- skype: miptpatriot

2 2

Slightly OT : where is Cipherli.st ?
by Nicolas Kovacs 16 Mar '20

16 Mar '20

Hi, Up until recently, I've been using the excellent https://cipherli.st resource to configure SSL on my servers. I tried to take a look again today, but the site seems to have vanished. Anybody knows what's happened ? Has it moved ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 1

EPEL Package update?
by Chris Boyd 15 Mar '20

15 Mar '20

We run RANCID at the day job to back up switch and router configs. Version 3.11 adds some support for devices we need. The current EPEL version is 3.9. I filed a request at Fedora to get it updated, which they have completed (version 3.11), but it still hasn't made it into the EPEL for CentOS. What's the right place/process to get the update into EPEL for CentOS? All pointers appreciated. --Chris

2 1

CentOS-announce Digest, Vol 181, Issue 3
by centos-announce-request＠centos.org 13 Mar '20

13 Mar '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:0790 Important CentOS 6 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 12 Mar 2020 14:27:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0790 Important CentOS 6 kernel Security Update Message-ID: <20200312142710.GA19323(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0790 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0790 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 47261a2124f4b01f6d6d730b79880a49fea891821f9469b86ca1b999435b426a kernel-2.6.32-754.28.1.el6.i686.rpm 6e8712a76b2b7dc2bc6e834d7982cae5f5fe3fa83e746251fb3513b887fc1261 kernel-abi-whitelists-2.6.32-754.28.1.el6.noarch.rpm a67dfe435f8190ee7c8c575b59c14913adbb7de6543dadfa2613c1bed8138317 kernel-debug-2.6.32-754.28.1.el6.i686.rpm 070e30f9e0266793da7600e606745bc0e721af3b8638f658f606250559a96d6c kernel-debug-devel-2.6.32-754.28.1.el6.i686.rpm c2f527d4390b60d285c95e38484c8b64a314d72afa846e48b3316332eddd6fb3 kernel-devel-2.6.32-754.28.1.el6.i686.rpm 2a72eecba01f18b8d694722f1e6694c8d009b2052490715a7799d1e0b7cba82c kernel-doc-2.6.32-754.28.1.el6.noarch.rpm fba4e545ae924e5671a0fcc384390defa75bbee1860d738bee76b0514f4d3f6d kernel-firmware-2.6.32-754.28.1.el6.noarch.rpm 631353f0cefb3927a778159eee482b3b4de8372311532d935365c0ee43a64973 kernel-headers-2.6.32-754.28.1.el6.i686.rpm b794d2566b29a5cc32f424fb4fbb441a4c92d2d2ba147a0c952194806f2ff477 perf-2.6.32-754.28.1.el6.i686.rpm 3ea6b1d604f513deb458d1c9f05522922de085f7e492e390dc90ec29df270cca python-perf-2.6.32-754.28.1.el6.i686.rpm x86_64: 8f6b20e76e23b4b52fc320a452fd16f8eef0170e64512b5c2fb2f3e5996f935e kernel-2.6.32-754.28.1.el6.x86_64.rpm 6e8712a76b2b7dc2bc6e834d7982cae5f5fe3fa83e746251fb3513b887fc1261 kernel-abi-whitelists-2.6.32-754.28.1.el6.noarch.rpm 5b73bea119dc3b655d408d0837fd60186e6285e2560734d2825815bd3a2a93ed kernel-debug-2.6.32-754.28.1.el6.x86_64.rpm 070e30f9e0266793da7600e606745bc0e721af3b8638f658f606250559a96d6c kernel-debug-devel-2.6.32-754.28.1.el6.i686.rpm 00f1659a33ac079d34e58fbc831df78e43809ccac29fcaefdbf8d0705e3d1798 kernel-debug-devel-2.6.32-754.28.1.el6.x86_64.rpm 6f944d39456b313dc86b19b79f55a416e527ed16651bd3575c605e511f1ccf7a kernel-devel-2.6.32-754.28.1.el6.x86_64.rpm 2a72eecba01f18b8d694722f1e6694c8d009b2052490715a7799d1e0b7cba82c kernel-doc-2.6.32-754.28.1.el6.noarch.rpm fba4e545ae924e5671a0fcc384390defa75bbee1860d738bee76b0514f4d3f6d kernel-firmware-2.6.32-754.28.1.el6.noarch.rpm 033099fa92c9934ad55e83206b797afbac10873e748fffc34b01a766c6f24813 kernel-headers-2.6.32-754.28.1.el6.x86_64.rpm d9ad8d44c6415ba74a0051f8026d476f6291e00ef39c3dfa39ee2287499d6c1f perf-2.6.32-754.28.1.el6.x86_64.rpm 84c6b57e406acd8ab8d6be4d920870f3b0e64eda998ff4d2c20447d2c9b6d57b python-perf-2.6.32-754.28.1.el6.x86_64.rpm Source: e76b3fba6effae976721c78e8bb0b52c11ce661989986a9bd08543af70a462a8 kernel-2.6.32-754.28.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 181, Issue 3 ***********************************************

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2020