Discuss April 2020

discuss@lists.centos.org

90 participants
70 discussions

Upgrade from Centos 7 to Centos 8
by Stefano Simonucci 08 Apr '20

08 Apr '20

I don't understand how I can upgrade my CentOS 7. cat /etc/redhat-release CentOS Linux release 7.7.1908 (Core) I followed the directions found on the web (by installing dnf and so on), but when I tried to install centos-release I get dnf upgrade -y http://mirror.centos.org/centos/8/BaseOS/x86_64/os/Packages/centos-release-… Last metadata expiration check: 0:19:05 ago on Wed 08 Apr 2020 04:50:14 PM CEST. centos-release-8.1-1.1911.0.9.el8.x86_64.rpm 184 kB/s | 21 kB 00:00 Dependencies resolved. Problem: cannot install the best update candidate for package centos-release-7-7.1908.0.el7.centos.x86_64 - nothing provides centos-gpg-keys = 8.1-1.1911.0.9.el8 needed by centos-release-8.1-1.1911.0.9.el8.x86_64 - nothing provides centos-repos = 8.1-1.1911.0.9.el8 needed by centos-release-8.1-1.1911.0.9.el8.x86_64 ================================================================================================================================= Package Arch Version Repository Size ================================================================================================================================= Skipping packages with broken dependencies: centos-release x86_64 8.1-1.1911.0.9.el8 @commandline 21 k Transaction Summary ================================================================================================================================= Skip 1 Package Nothing to do. Complete! Does anyone know how to upgrade? Thanks Stefano

5 5

fail2ban ban not working
by Gary Stainburn 08 Apr '20

08 Apr '20

I have fail2ban on my mail server monitoring Dovecot and Exim. I have noticed that it has stopped banning IP's. I have seen in /var/log/fail2ban.log: 2020-04-07 09:42:05,875 fail2ban.filter [16138]: INFO [dovecot] Found 77.40.61.224 - 2020-04-07 09:42:05 2020-04-07 09:42:06,408 fail2ban.actions [16138]: NOTICE [dovecot] Ban 77.40.61.224 2020-04-07 09:42:06,981 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- exec: ipset create f2b-dovecot hash:ip timeout 3600000 firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -p tcp -m multiport --dports 0:65535 -m set --match-set f2b-dovecot src -j REJECT --reject-with icmp-port-unreachable 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: "ipset v7.1: Syntax error: '3600000' is out of range 0-2147483" 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: Set f2b-dovecot doesn't exist." 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: '' 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: 'Error occurred at line: 2' 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: "Try `iptables-restore -h' or 'iptables-restore --help' for more information." 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: '' 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- returned 13 In /var/log/firewalld I got 2020-04-07 09:42:06 ERROR: COMMAND_FAILED: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: Set f2b-dovecot doesn't exist. Error occurred at line: 2 Try `iptables-restore -h' or 'iptables-restore --help' for more information. Looking back at my logs, this has been going on some time. Any advice on fixing this would be appreciated

3 3

C8.1 Grub problem
by Alessandro Baggi 08 Apr '20

08 Apr '20

Hi list, I reinstalled on my workstation CentOS 8.1. I explain: I'm a KDE user but packages shipped from EPEL currently are buggy so I prefer a stable and functioning system to work with. So I tried to remove KDE workgroup and installed group "Workstation" but the system bricked so I reinstalled with GNOME. I've an nvidia gtx 1050ti GPU so I installed kmod-driver from rpmfusion. After the installation of Nvidia driver, I rebooted, gdm start and after I perform the login the system freeze. So this problem happened to me with C7.5 and nvidia driver. In my case I need to blacklist i915 module and system works. Also in this case I tried to boot centos changing grub kernel parameters pressing 'e' in the grub menu and adding "i915.modeset=0 rd.driver.blacklist=i915", booted and system works. So I tried to make this permanent updating grub configuration adding the previous directives (and removed rhgb and quiet) to /etc/default/grub and run grub2-mkconfig -o /boot/efi/EFI/centos/grub.cfg. Reboot the system and checked again kernel parameters on grub menu and seen that nothing changed. Booted and freezed. I checked /boot/efi/EFI/centos/grub.cfg and kernelops has the new directives. Seems that grub configuration does not take effect. I made another test inside a VM installed with minimal selection and remove rhgb and quiet parameters and worked fine. The vm is BIOS and my workstation UEFI. How I can solve this problem? Currently to boot my system I need always to add this params. Thank you in advance

6 15

CentOS-announce Digest, Vol 182, Issue 1
by centos-announce-request＠centos.org 08 Apr '20

08 Apr '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Welcome Thomas and Patrick to CentOS Project Governing Board (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 7 Apr 2020 17:55:53 +0100 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org>, "The CentOS developers mailing list." <centos-devel(a)centos.org> Subject: [CentOS-announce] Welcome Thomas and Patrick to CentOS Project Governing Board Message-ID: <4bac266d-6ab6-0f81-47fe-dcd77d65ae57(a)centos.org> Content-Type: text/plain; charset="utf-8" Hi, The CentOS Governing Board of Directors is pleased to appoint two new Directors to be added to the Governing Board, effective 8th April 2020: Thomas Oulevey [1] and Patrick Riehecky [2]. The community will instantly recognise both from their long standing and well established support for the CentOS Project over the years, initially as consumers and community participants, and in more recent times as active across various initiatives in and around the project space. Over the last sixteen years the CentOS project has established itself as a critical component in the open source ecosystem online. In order to maintain this leading role and help drive success for the wider open source ecosystem, we are moving to a more contributor-centric model. A key part of enabling this goal is to evolve our transparent governance. Pat and Thomas have shown keen interest in participating in this specific endeavour, and we are excited to welcome them to the team, helping us get there. Thomas (alphacc) works in the Controls group within the CERN Beams department [3]. He has contributed to the CentOS Project since 2012, as a member of the infrastructure team. He helped to bootstrap a few Special Interest Groups, helped the QA team with reports, and now mainly designs and improves the Community Build Service [4]. Thomas?s sponsor on the Board is Mike McLean, who will help oversee his transition to project leadership. Patrick (jcpunk) works at Fermi National Accelerator Laboratory [5]. He is part of the Scientific Linux team [6] and works on systems that perform Data Acquisition for various experiments at Fermilab. Although a long time member of the community, formally Pat began working with the CentOS Community when Fermilab decided to use CentOS 8 [7] as its EL8-base platform. Pat?s sponsor is Johnny Hughes, who will help oversee his transition to project leadership. Please join me in welcoming them to the team, Regards Karanbir Singh Project Lead, The CentOS Project [1] https://wiki.centos.org/ThomasOulevey [2] https://wiki.centos.org/PatrickRiehecky [3] https://beams.cern [4] https://cbs.centos.org [5] https://beams.cern [6] https://www.scientificlinux.org/about/who-makes-scientific-linux/ [7] https://listserv.fnal.gov/scripts/wa.exe?A2=SCIENTIFIC-LINUX-ANNOUNCE;11d60…

1 0

RHEL 7.8 is out
by Phelps, Matthew 07 Apr '20

07 Apr '20

This is not your usual "so when is CO 7.8.xxxx coming out?" posts. I'm just curious if the CentOS team is affected by our current world conditions, or is work-from-home modus operandi for the team? (In other words, "when is CO 7.8.xxxx coming out?") -- *Matt Phelps* *Information Technology Specialist, Systems Administrator* (Computation Facility, Smithsonian Astrophysical Observatory) Center for Astrophysics | Harvard & Smithsonian 60 Garden Street | MS 39 | Cambridge, MA 02138 email: mphelps(a)cfa.harvard.edu cfa.harvard.edu | Facebook <http://cfa.harvard.edu/facebook> | Twitter <http://cfa.harvard.edu/twitter> | YouTube <http://cfa.harvard.edu/youtube> | Newsletter <http://cfa.harvard.edu/newsletter>

3 2

firefox unable to load pkcs11 module
by Tony Schreiner 06 Apr '20

06 Apr '20

CentOS 7, In firefox -> privacy & security -> certificates -> security devices i am trying to load the pkcs11 modules, but get the error unable to load. I am following the directions at https://piv.idmanagement.gov/engineering/firefox/ I have installed opensc and openssl-pkcs11, which contains /usr/lib64/openssl/engines/pkcs11.so and am using that is the module Has anybody here done that, and can offer advice? Tony Schreiner

2 3

C7, odd log off issue
by mark 06 Apr '20

06 Apr '20

Fresh C 7 install, fully updated... but whenever I go to log off, whether with ctl-alt-delete, or from the menu, instead of logging me off, it restart X, with me still logged on. The second time I try, it logs me off. Anyone seen this behavior? mark

1 0

CentOS 8.1 cron does not send mail
by Tobias Kirchhofer 06 Apr '20

06 Apr '20

Hi, we experience difficulties with crond behaviour sending mail since CentOS 8.1. The cron job is the same like we used in CentOS 7. crontab -l /usr/bin/python3 -c 'import random; import time; time.sleep(random.random() * 3600)' && /usr/local/bin/backup.sh backup.sh writes the backup to the remote backup server. There are around 30 machines with the same cron job. The python part spreads the jobs over an hour so that the backup server is not struck at once from about 30 machines. The change in behaviour is that crond sends no mail anymore. It is because of the logical and (&&). Without this crond sends mails. What has changed in CentOS 8 and does anyone has an idea how we could fix it? Thank you! Tobias -- collect(a)shift.agency

5 12

Windows 10 as guest on Centos 8
by Georgios 05 Apr '20

05 Apr '20

Hi there! Im trying to install windows 10 as a guest on Centos 8.1 I tried with cockpit and with boxes and both times my computer freezes during installation. Any ideas? Thanks in advance!

4 5

Trying again: KDE fails with a gray screen after login, can't reinstall
by mark 04 Apr '20

04 Apr '20

I set for graphical mode, I get the login screen, I change to KDE, and the screen goes black, then after minutes, gray with a cursor, and that's it - I left it overnight, no change. Brand new install (as of yesterday). Missed any "agree to license", and missed choosing software. Manually groupinstalled Installed Environment Groups: KDE Plasma Workspaces Development and Creative Workstation Tried to reinstall: No group named KDE Plasma Workspaces exists I'm assuming I need to install something else, but does anyone have a clue? I really do NOT want gnome. mark

3 3

Mostly better: new C7
by mark 04 Apr '20

04 Apr '20

Well, I gave up, and reinstalled C7. This time, I realized I needed to make a software choice before the install, and did so. My install, yesterday, was a minimal. Silly me, yesterday, after that, I did a groupinstall of KDE Plasma Workspaces... and it did *NOT* include all the dependencies to run KDE. Having installed a KDE desktop, much is better... with one exception: I can't seem to find any games. I tried yum groupinstall "Games and Entertainment", which showed when I did group list... and was told it was empty. Now what am I missing? I do have epel and rpmfusion, both free and non-free. mark

4 4

Upgraded to 7.10 from 6...
by mark 03 Apr '20

03 Apr '20

Let me start out by making clear I *LOATHE* gnome, ok? So I don't want to hear about it. What's happening is this: I did this: yum groupinstall "Development and Creative Workstation" yum groupinstall "KDE Plasma Workspaces" Now, when I go in graphical mode, I try to change to kde on login. Nope - minutes later, I can see a cursor, and a gray screen. Ditto on the "safe mode", and ditto on "gnome classic". What have I missed? mark

3 2

IOMMU and kernel
by Georgios 03 Apr '20

03 Apr '20

Hi. Im trying to set intel_iommu=on on kernel parameters at grub but for some reason it doesnt work. I edit /etc/default/grub file and i add the parameter. then i run grub2-mkconfig -o /boot/efi/EFI/centos/grub.cfg and then i reboot. when i run virt-host-validate i get QEMU: Checking if IOMMU is enabled by kernel: WARN (IOMMU appears to be disabled in kernel. Add intel_iommu=on to kernel cmdline arguments) when i edit the grub menu durring boot and i put intel_iommu=on and the i run again virt-host-validate i get QEMU: Checking if IOMMU is enabled by kernel: PASS any ideas? I tried editing other variables like GRUB_TIMEOUT and it seems to me that changes are applied. Thanks in advance

3 9

C8 and backup solution
by Alessandro Baggi 03 Apr '20

03 Apr '20

Hi list, I'm searching a valid backup system to perform backups of 3 server, one local and 2 remote, and 2 linux workstation. (this number could be higher in future). Currently I'm testing bacula, scripted rsync with hardlink and borgbackup on C8.1. Bacula works without any problem, well tested, solid but complex to configure. Tested on a single server (with volumes on disk) and a full backup of 810gb (~150000 files) took 6,30 hours (too much). I would run deduplication but 1. bacula on C8 is not compiled with aligned 2. bacula put attention on some possibile bad scenario where deduplication could be a problem in losing one block that could break many files with the same shared block. So deduplication is secure or I should be away from it? scripted rsync. Simple, through ssh protocol and private key. No agent required on target. I use file level deduplication using hardlinks. To perform compression and block deduplication I could use fs like zfs (not available from epel) or use something like stratis (I don't checked if it offer deduplication in this moment). Encryption could be performed on fs level. Using a scripted rsync is the simpler way but there is something that could be leaved out by me (or undiscovered error). Simple to restore. BorgBackup is another solution similar to rsync in some way. It works like rsync through ssh but while rsync simply sends data, borg run deduplication, compression and encryption on place. Why is similar rsync? Because I need another script to run borg. It is not a complete solution and it works on push method and not pull like with bacula or rsync. If I would manage all my server from a central backup server is a problem, so to accomplish this I should run the borg command from the central server on the target server that point back to the remote repository (located on the central server). There is another solution with borg: using sshfs but is 4 time slower (too much solwer). I have not so much experiences on backups and choosing the bad tool could be dangerous so I need some suggestion. What backup solution do you suggest for my scenario? Thank you in advance. Alessandro.

9 11

Mounting CIFS shares on C8
by Patrick DERWAEL 03 Apr '20

03 Apr '20

Hi all, I'm tearing my hair off trying to understand the difference between C7 & C8 for mounting a cifs FS with fstab I'm building a Plex media server on C8 and duplicated the fstab entries over from my current C7 installation My data (music & movies) are on CIFS shares on a Synology NAS. The packages cifs-utils samba-client samba-common are installed, up to date etc... These are my current fstab entries on the C7 box //192.168.1.200/mp3 /home/plex/Musique cifs user=plex,pass=plex,ro,auto,vers=3.0 //192.168.1.200/videos /home/plex/Vidéos cifs user=plex,pass=plex,ro,auto,vers=3.0 On my C8: [root@plexvm etc]# cat fstab # # /etc/fstab # Created by anaconda on Fri Apr 3 14:02:23 2020 # # Accessible filesystems, by reference, are maintained under '/dev/disk/'. # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info. # # After editing this file, run 'systemctl daemon-reload' to update systemd # units generated from this file. # /dev/mapper/cl_plexvm-root / xfs defaults 0 0 UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot ext4 defaults 1 2 /dev/mapper/cl_plexvm-swap swap swap defaults 0 0 //192.168.1.200/mp3 /home/plex/Musique cifs user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0 //192.168.1.200/videos /home/plex/Vidéos cifs user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0 //192.168.1.200/series /home/plex/Séries cifs user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0 [root@plexvm etc]# mount -a mount error(2): No such file or directory Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) mount error(2): No such file or directory Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) mount error(2): No such file or directory Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) [root@plexvm etc]# Any pointer would be MUCH appreciated! Thanks -- Patrick Derwael Rue de la fontaine, 3 4210 Burdinne Tél:+32.(0)479.80.50.79

7 13

Re: [CentOS] C8 and backup solution
by Alessandro Baggi 03 Apr '20

03 Apr '20

Il 02/04/20 21:14, Karl Vogel ha scritto: > [Replying privately because my messages aren't making it to the list] > >>> In a previous message, Alessandro Baggi said: > A> Bacula works without any problem, well tested, solid but complex to > A> configure. Tested on a single server (with volumes on disk) and a > A> full backup of 810gb (~150000 files) took 6,30 hours (too much). > > For a full backup, I'd use something like "scp -rp". Anything else > has overhead you don't need for the first copy. > > Also, pick a good cipher (-c) for the ssh/scp commands -- it can improve > your speed by an order of magnitude. Here's an example where I copy > my current directory to /tmp/bkup on my backup server: > > Running on: Linux x86_64 > Thu Apr 2 14:48:45 2020 > > me% scp -rp -c aes128-gcm(a)openssh.com -i $HOME/.ssh/bkuphost_ecdsa \ > . bkuphost:/tmp/bkup > > Authenticated to remote-host ([remote-ip]:22). > ansible-intro 100% 16KB 11.3MB/s 00:00 ETA > nextgov.xml 100% 27KB 21.9MB/s 00:00 ETA > building-VM-images 100% 1087 1.6MB/s 00:00 ETA > sort-array-of-hashes 100% 1660 2.5MB/s 00:00 ETA > ... > ex1 100% 910 1.9MB/s 00:00 ETA > sitemap.m4 100% 1241 2.3MB/s 00:00 ETA > contents 100% 3585 5.5MB/s 00:00 ETA > ini2site 100% 489 926.1KB/s 00:00 ETA > mkcontents 100% 1485 2.2MB/s 00:00 ETA > > Transferred: sent 6465548, received 11724 bytes, in 0.4 seconds > Bytes per second: sent 18002613.2, received 32644.2 > > Thu Apr 02 14:48:54 2020 > > A> scripted rsync. Simple, through ssh protocol and private key. No agent > A> required on target. I use file level deduplication using hardlinks. > > I avoid block-level deduplication as a general rule -- ZFS memory > use goes through the roof if you turn that on. > > rsync can do the hardlinks, but for me it's been much faster to create > a list of SHA1 hashes and use a perl script to link the duplicates. > I can send you the script if you're interested. > > This way, you're not relying on the network for anything other than the > copies; everything else takes place on the local or backup system. > > A> Using a scripted rsync is the simpler way but there is something that > A> could be leaved out by me (or undiscovered error). Simple to restore. > > I've never had a problem with rsync, and I've used it to back up Linux > workstations with ~600Gb or so. One caveat -- if you give it a really > big directory tree, it can get lost in the weeds. You might want to do > something like this: > > 1. Make your original backup using scp. > > 2. Get a complete list of file hashes on your production systems > using SHA1 or whatever you like. > > 3. Whenever you do a backup, get a (smaller) list of modified files > using something like "find ./something -newer /some/timestamp/file" > or just making a new list of file hashes and comparing that to the > original list. > > 4. Pass the list of modified files to rsync using the "--files-from" > option so it doesn't have to walk the entire tree again. > > Good luck! > > -- > Karl Vogel / vogelke(a)pobox.com / I don't speak for the USAF or my company > > The best setup is having a wife and a mistress. Each of them will assume > you're with the other, leaving you free to get some work done. > --programmer with serious work-life balance issues Hi Karl, thank you for your answer. I'm trying ssh scripted rsync using a faster cypher like you suggested and seems that transfer on 10GB is better of default selected cypher (129 sec vs 116 using aes128-gcm, I tested this multiple times). Now I will try to check on the entire dataset and see how much benefit I gain. Waiting that, what do you think about bacula as backup solution? Thank you in advance.

1 0

CentOS 7 host with guests as bridge cannot access host
by Jerry Geis 02 Apr '20

02 Apr '20

I have CentOS 7 host. Two guests on bridge network setup by GUI and virt-manager. 1 CentOS 8 guest 1 Win 10 guest Both cannot access the host. They can other machines on the network. Guests can access the internet just not the host. I used virt-manager GUi to set up everything. Selected the eth0:macvtap and Bridge. I "desire" bridge network. If I select something else I get access to host - but of course machine is not on the main network. Thoughts ? Jerry

3 9

Re: [CentOS] Versions in RHEL and CentOS
by Peter Kjellström 02 Apr '20

02 Apr '20

On Thu, 2 Apr 2020 11:10:23 +0530 Thomas Stephen Lee <lee.iitb(a)gmail.com> wrote: ... > /usr/bin/sensors > > from the lm_sensors package > > I had run > > sensors-detect --auto I had no idea people still used that package. Especially on a server. Per core temperatures in linux for Zen2 is done using (a very up to date kernel with its k10temp module). Alternatively one can look at: https://github.com/ocerman/zenpower.git I don't know if it works with the c8 kernel (but it does not work with the c7 one). But in the end. Why care about per core temperatures? Setup basic monitoring of the server using ipmi or whatever the vendor supports. /Peter K

2 3

Cloud Image building (like CentOS is doing it)
by Nicolas Ghirlanda 02 Apr '20

02 Apr '20

Hello, I was not able to find information about how CentOS is building its Cloud Images. I know packer etc are able to do it, but I am interested in how CentOS is building its own images as we like to adapt that for our Openstack Cloud. thanks for any hints Nicolas

2 1

centos 6 vs 7
by Divine Tanyingoh 02 Apr '20

02 Apr '20

Issue: After installing vms on vmware, I noticed a difference in behavior between centos 6 vs 7. On centos 6 I cannot ping the hostname and get a reply without first resolving in the /etc/hosts file by adding a new entry: 192.168.0.47 server1.example.com. But for centos 7 I am able to ping the hostname and get a reply even when I have not made any changes to the /etc/hosts file. Why is there this difference between centos 6 vs 7. Thank you for your assistance.

3 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2020