February 2021 - Discuss - lists.centos.org

MATE 1.20 test build for CentOS 7 available
by Greg Bailey 14 Oct '21

14 Oct '21

Hi everyone, There's been discussions in the past about updating MATE RPMs in EPEL-7: https://bugzilla.redhat.com/show_bug.cgi?id=1436260 https://lists.centos.org/pipermail/centos/2019-August/173154.html (and lots of others...) As a proof-of-concept, I've written some scripts that clone specific commits from the Fedora master branches, and then runs a tool to re-apply RPM scriptlets that are required by EL7 but removed from the Fedora .spec files. The scripts are available at: https://github.com/gebailey/mate-rpms/tree/master/1.20/el7 There's also instructions there if you want to try upgrading to MATE 1.20 w/o rebuilding them yourself. If these packages work for others, perhaps we can revisit the idea of updating the epel7 branches of the Fedora git repos and submitting an official update. There's nothing here (yet) about building MATE 1.22 (which might require a newer gcc for EL7), or building anything on CentOS 8, but thought the CentOS 7 users might find this helpful. -Greg

6 17

Transition test report going from CentOS8 to Debian 10.
by Lamar Owen 06 Aug '21

06 Aug '21

Sorry for the length.... I'm posting this here since this particular transition has been mentioned on-list as one possibility for a path forward for current CentOS Linux users. AlmaLinux, the Developer Subscription RHEL, Rocky, CentOS Stream, Springdale, upgrading to full RHEL; all these are also possibilities, too, and all have different strengths and weaknesses. The transition to Debian has a lot of strengths, including a long track-record of support (even if the support time for a particular release is shorter), a fully-open development model with no 'corporate overlord' that I know of, a large set of supported packages, and a huge community of developers and users. For the CentOS user the main weakness is having to learn a few areas of difference in the way the system is setup and maintained; of course, if a ten-year 'stable' timeframe is really that important to you the lack of that is also a weakness. So, last week I transitioned, as a test of sorts, my working CentOS 8 main laptop to Debian 10. I kept a complete backup of the C8 install should I wish to go back to it, and installed Buster to a new mSATA SSD, but ported the two SATA drives (Dell Precision M6700 - has an mSATA slot plus two SATA bays) straight over after making full backups. I posted a pretty complete rundown on the scientific linux users mailing list, so I won't recap it all here. The bottom line was the the transition was not any more difficult, really, than moving from CentOS 7 to CentOS 8. The software versions in Buster are pretty close to what is in CentOS 8, although I have yet to need any third-party repository (PPA) for anything I've needed to install. All the packages I have worked with so far have worked fine with a little bit of massaging. These include commercial (and costly) software such as Harrison Consoles' Mixbus32C, Qoppa's PDFStudio2019 Professional, and others. So if you were to decide that this is the route for you to take, it does work and I found it to be not nearly as hard as I had thought it might be. If you install GNOME 3 you get GNOME 3; it feels pretty much the same as a non-Classic CentOS GNOME 3, just with a different set of extensions installed by default. That's on the workstation. On the server side, I'm evaluating Proxmox for the virtualization solution, and so far I'm finding it to be a pretty easy migration. I'm using the 'non-subscription' repository, so this is a no-cost option. Even getting the box registered to our EMC Clariion SAN was relatively easy; EMC provides the Unisphere Server Utility for Linux x64 in RPM form; the latest I have is "ServerUtil-Linux-64-x86-en_US-1.0.55.1.0044-1.x86_64.rpm" (which is fairly old, but I did say Clariion arrays, so they're pretty old, too). Debian has provided the 'alien' tool for some time; after installing alien, a simple 'alien -i ServerUtil-Linux-64-x86-en_US-1.0.55.1.0044-1.x86_64.rpm' installed the EMC RPM in the correct place. Proxmox already included everything that serverutilcli requires; on a plain Buster install I had to install dm-multipath and the device mapper libraries and tools before serverutilcli would find the arrays; but it ran just like it did on CentOS 8 (and 7). I haven't decided whether to stay on Debian or not; too early to tell. I have time to test and evaluate. My CentOS 7 installs aren't goin anywhere, though, at least until late 2023. And I've registered for a Developer subscription of RHEL so that I can properly evaluate that option, too. This is the beauty of open source: we have OPTIONS.

11 23

What to do when a selinux policy doesn't work?
by hw 14 Apr '21

14 Apr '21

Hi, I'm getting log file entries about ejabberd not being able to remove files that were uploaded by client through the file upload facility of XMPP. With the help of audit2allow, I have already created and installed some selinux modules to solve such issues, and still files can't be expired. So I used grep '/srv/data/ejabberd' /var/log/audit/audit.log | audit2allow -w to find out what might cause this, and the answer is: type=AVC msg=audit(1606302910.314:2905): avc: denied { open } for pid=18687 comm="8_dirty_io_sche" path="/srv/data/ejabberd/[...]" dev="md100" ino=166 scontext=system_u:system_r:ejabberd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 Was caused by: Unknown - would be allowed by active policy Possible mismatch between this policy and the one under which the audit message was generated. Possible mismatch between current in-memory boolean settings vs. permanent ones. I have reloaded the policies with 'semodule -R', and that didn't change anything. The files in question seem to have the correct attributes like: ls -laZ /srv/data/ejabberd/[...] -rw-r--r--. 1 ejabberd ejabberd system_u:object_r:var_t:s0 1384362 Nov 25 12:15 /srv/data/ejabberd/[...] Ejabberd is supposed to expire files when they are older than desired, and selinux prevents it. How can I solve this problem other than by disabling selinux or by deleting the files manually?

2 3

Koji packages
by Frederick 03 Mar '21

03 Mar '21

Good Day All! I am trying to grab some packages from the Koji site. Any idea why it seems to be down and if/when it will be back? 403 Forbidden Request forbidden by administrative rules. https://koji.mbox.centos.org/pkgs/packages/ Thank you!

4 5

CentOS-announce Digest, Vol 191, Issue 4
by centos-announce-request＠centos.org 28 Feb '21

28 Feb '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2021:0623 CentOS 7 microcode_ctl BugFix Update (Johnny Hughes) 2. CESA-2020:5402 Important CentOS 7 libexif Security Update (Johnny Hughes) 3. CESA-2020:5408 Important CentOS 7 xorg-x11-server Security Update (Johnny Hughes) 4. CESA-2021:0024 Important CentOS 7 ImageMagick Security Update (Johnny Hughes) 5. CEBA-2020:4046 CentOS 7 grub2 BugFix Update (Johnny Hughes) 6. CESA-2021:0656 Critical CentOS 7 firefox Security Update (Johnny Hughes) 7. CESA-2021:0661 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 27 Feb 2021 14:18:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0623 CentOS 7 microcode_ctl BugFix Update Message-ID: <20210227141835.GA6669(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0623 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0623 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0cf6bb4e5beb49f3a45a5171babb25685cf72156e8666dc2a57f9fef6af67838 microcode_ctl-2.1-73.8.el7_9.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Sat, 27 Feb 2021 14:19:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5402 Important CentOS 7 libexif Security Update Message-ID: <20210227141900.GA6802(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5402 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5402 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3bb0da4f1c883b5aaa0ad687bcc2022ba9573d912ff906b6657bc7e96676c5d9 libexif-0.6.22-2.el7_9.i686.rpm 49776569805f34f9417a664fb394e7bff8444fee386100309ce6306cba1c8b1a libexif-0.6.22-2.el7_9.x86_64.rpm 6dafcb9ecc7ca14a4ae5417e71c1fee10a7213e0ebf3d3750cbd23a8cacf5eef libexif-devel-0.6.22-2.el7_9.i686.rpm 618179611cd44ba685db172d3afd1dc0248e66533a35b8e46cdf118d812340d3 libexif-devel-0.6.22-2.el7_9.x86_64.rpm 0c9cd97e333e5ea85907e92483ef91dbdb08349b7e29916dcf5c08061c74f836 libexif-doc-0.6.22-2.el7_9.x86_64.rpm Source: 3729ce39ae2b4b5ca93513cb15046a4b55ada0662f3ee6888927e6caad3f5709 libexif-0.6.22-2.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Sat, 27 Feb 2021 14:19:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5408 Important CentOS 7 xorg-x11-server Security Update Message-ID: <20210227141946.GA7011(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5408 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5408 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5ba93bb7af0fa5612cec66a27e5736fb8c5460ccfc0e32ff2e9e8c97c2587a3f xorg-x11-server-common-1.20.4-15.el7_9.x86_64.rpm 8300c30550c66d4567d56de5063d79d5818aea066707cfcf6638dd2811bd74fc xorg-x11-server-devel-1.20.4-15.el7_9.i686.rpm 40a441051ed2bb80ba7bf16effb6ef562dc02cffbcb40be34952dcdc20a3b66c xorg-x11-server-devel-1.20.4-15.el7_9.x86_64.rpm bb3864015d5c6e8d0e5f6d4ad1683af99c0b275dcf2efcaee1e4aebf6d78082d xorg-x11-server-source-1.20.4-15.el7_9.noarch.rpm 375dc1e4e253dad77a1c726888c330f2d32bfac978fb2501318c810a4fb93843 xorg-x11-server-Xdmx-1.20.4-15.el7_9.x86_64.rpm fc23786485123d8fc0e167c65ecee809b1c1047c61cea465e243cf4b64b2a78e xorg-x11-server-Xephyr-1.20.4-15.el7_9.x86_64.rpm a79594486e59ec5b826e79499c455a6d627baff4bdc3f3df763e5018309b5f9c xorg-x11-server-Xnest-1.20.4-15.el7_9.x86_64.rpm 38116fc986dbde5d1071bccc99bf83579d9cf9cfe210af409971b02a8225df2e xorg-x11-server-Xorg-1.20.4-15.el7_9.x86_64.rpm 27534a1920262b79fa35a9509e192cd19a2916bb7b11d0db13f71ae7cff375a9 xorg-x11-server-Xvfb-1.20.4-15.el7_9.x86_64.rpm b0d7b591888b6fd49b457c15fa981112edaa1d269c881960174a8676102cad81 xorg-x11-server-Xwayland-1.20.4-15.el7_9.x86_64.rpm Source: aa1a835131bbf66abfd0409afc8d8cf66e6ae6e5c446c0aa7c773d037b730a41 xorg-x11-server-1.20.4-15.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Sat, 27 Feb 2021 14:21:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0024 Important CentOS 7 ImageMagick Security Update Message-ID: <20210227142105.GA7191(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0024 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0024 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 49941263a7a0309c58b3d3e00ab81c56b1ee1a70b49b873188cc23686f5d3d9b ImageMagick-6.9.10.68-5.el7_9.i686.rpm 8b82511897f48ce484e303fe650c32ea1191e71ee0cbd9aff580743fa4f9067c ImageMagick-6.9.10.68-5.el7_9.x86_64.rpm 3d1f2217dd6b5ed505a6858933c562175be86840b5c6c7328291ec8c31333a56 ImageMagick-c++-6.9.10.68-5.el7_9.i686.rpm 208142489b5b939b70a9d0d5242ac84ad700f6bc7f8549c1b26d447993c66b86 ImageMagick-c++-6.9.10.68-5.el7_9.x86_64.rpm 3fb72ac0367e9afd39874f48b9a0b356b9cbb0b86d41265538358ef72583d32d ImageMagick-c++-devel-6.9.10.68-5.el7_9.i686.rpm fb00ca97e06f7da066e8d05cafb17b9f9680e39f50979090e489d8a1720bb4d4 ImageMagick-c++-devel-6.9.10.68-5.el7_9.x86_64.rpm d45776ea070dd01bfa5681b3d5be4cd2fdb7fe2baac5c1720ab216221ef7ddf8 ImageMagick-devel-6.9.10.68-5.el7_9.i686.rpm b095f7fcbb5d718e30c01471ddebc9eca7b0315ab21ba2c286f3e4c44b8bf2b1 ImageMagick-devel-6.9.10.68-5.el7_9.x86_64.rpm 4c39fd8baa3677dd6ae1debc1bc8f2bcb012f024717dc7b97179d39ba6e3853f ImageMagick-doc-6.9.10.68-5.el7_9.x86_64.rpm 4dc1a1327e468460b517ab53ed5f213f2ea0b15a999fc2c3f80d7d5b477118cd ImageMagick-perl-6.9.10.68-5.el7_9.x86_64.rpm Source: 22f7687f463972266acf1480018df3edab9c5b809501a842b97042deef75bf90 ImageMagick-6.9.10.68-5.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Sat, 27 Feb 2021 14:33:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2020:4046 CentOS 7 grub2 BugFix Update Message-ID: <20210227143322.GA9504(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2020:4046 Upstream details at : https://access.redhat.com/errata/RHBA-2020:4046 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: abb495131866830ec1e5474b69876de363e44c471e7221b10ce992f1f526f966 grub2-2.02-0.87.el7.centos.x86_64.rpm 50c11af52b9c7aba5a74a2beb07e802550af036c3a37feb00b9bfca7b241ffa1 grub2-common-2.02-0.87.el7.centos.noarch.rpm 72b814596920effa935ebdde082d64181b5aa2f44485a058f2535c54828f931e grub2-efi-ia32-2.02-0.87.el7.centos.x86_64.rpm ce893faa55582d8281001d9876f4ceaddca9de5adf25f32692196a6e85a1aa48 grub2-efi-ia32-cdboot-2.02-0.87.el7.centos.x86_64.rpm 5d260748ee7254fcf65c3e3312e541e2f9883d21279926f45ee85ad44eb5b4e7 grub2-efi-ia32-modules-2.02-0.87.el7.centos.noarch.rpm f659cc4a3ded31fe85ee2123860696b26f1983182f66c76b6a76d0e5dc5f3d2f grub2-efi-x64-2.02-0.87.el7.centos.x86_64.rpm 05a40b72da0cf303bc79e3b58cda8c7f7edb3f19a201eca57225af9a1e012beb grub2-efi-x64-cdboot-2.02-0.87.el7.centos.x86_64.rpm f2ef03a6ec5037c50e7f13a6a7c2465e14b247e48ec9b158e91bbf86094e3dd1 grub2-efi-x64-modules-2.02-0.87.el7.centos.noarch.rpm bd55b6e53bef2770d4702bf6fb6bcd13145e761a809da1a07423a7e1e3898f82 grub2-i386-modules-2.02-0.87.el7.centos.noarch.rpm dc1039bae026e06f606e2a26e159743f3cf3ed19a75609cb5664372c17b4d90c grub2-pc-2.02-0.87.el7.centos.x86_64.rpm 456aa067cc96e03aaa605e52a86cc973f7a8dab09337cce112097a4608dd143a grub2-pc-modules-2.02-0.87.el7.centos.noarch.rpm 82bf486bffe227eaa4681fdcf6cb4c2225d25b5dbdad8b4009f3da4a506834ef grub2-tools-2.02-0.87.el7.centos.x86_64.rpm 0eb359490eab964f970cb8d6fd9987a38a3e3f9c585348941c53fb1b709c71f1 grub2-tools-extra-2.02-0.87.el7.centos.x86_64.rpm c0e72c1dbf2c72f272577dc891736d1403dd928b5e9f236721ea261f99677b61 grub2-tools-minimal-2.02-0.87.el7.centos.x86_64.rpm Source: b54c7d7d22e344b19816c6b891484dd12659442b088bab993053889a28dea14d grub2-2.02-0.87.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Sat, 27 Feb 2021 14:34:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0656 Critical CentOS 7 firefox Security Update Message-ID: <20210227143420.GA9686(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0656 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2021:0656 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c51cb2eba6f030cce0b81686cebf834e0aad1fb747875ef6fc8d06c6930fe18a firefox-78.8.0-1.el7.centos.i686.rpm 802ef81827f925a8e48e7eac8b4f0c0e44a7873cc15a96c696316840d6541191 firefox-78.8.0-1.el7.centos.x86_64.rpm Source: 9fb25f49dbe9e585312f707a0303a6c6c1a19f2ab52f2b36e52c21b79225b925 firefox-78.8.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Sat, 27 Feb 2021 14:34:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0661 Important CentOS 7 thunderbird Security Update Message-ID: <20210227143456.GA9797(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0661 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0661 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2079fcbe2c07aa0485612a667be1c81504654629f2931e7110664db306550787 thunderbird-78.8.0-1.el7.centos.x86_64.rpm Source: b1d0ae38d26dde16a81ac71b72f6368e625a7ccbed26d6dc8475c975d7569636 thunderbird-78.8.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 191, Issue 4 ***********************************************

1 0

bash: return status of an assignment
by Kenneth Porter 28 Feb '21

28 Feb '21

In the sqm-scripts package for managing network traffic shaping is this line for finding a program suitable for loading the kernel shaping modules: [ -z "$INSMOD" ] && INSMOD=$(which modprobe) || INSMOD=$(which insmod) It seems to set INSMOD to /usr/sbin/insmod, even though /usr/sbin/modprobe is available. (Both are symlinks to ../bin/kmod.) According to this article, the return value of the first assignment should be success and it shouldn't take the fallback statement: <https://unix.stackexchange.com/questions/270828/how-is-the-return-status-of…> Also working the issue here: <https://github.com/tohojo/sqm-scripts/issues/133>

3 3

How to install XFCE on CentOS 8?
by Simon Matter 27 Feb '21

27 Feb '21

Hi, Is anyone here running XFCE desktop on CentOS 8? If so, how did you install it? I just tried to install it from EPEL and this is what I got: # dnf group install Xfce Last metadata expiration check: 0:14:01 ago on Thu 11 Feb 2021 10:05:47 CET. No match for group package "NetworkManager-gnome" No match for group package "thunar-archive-plugin" I'm unable to find packages for NetworkManager-gnome or thunar-archive-plugin anywhere in CentOS 8 or EPEL 8. Did I miss something? Thanks, Simon

14 53

menu apps like make menu config
by Christopher Wensink 26 Feb '21

26 Feb '21

Good morning everyone, While vi, cat more or less can work (see what I did there..) for looking at every day Linux Administration, sometimes I think it's just easier to work with a menu based interface, where you can select and navigate messages and options, with a little bit of color, possibly function key interaction, and a working interface, similar to using make menuconfig for compiling the kernel and similar to performing a legacy text based install on a new system. Is there a master list of those kinds of apps that have a menu for looking at various things? Can anyone who thinks of more of these apps rattle off some other options such as: abc - for reading logs xyz for text based chat def - for a menu based browser ghi - for a text mail client, etc -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

2 1

e2fsck but says mounted and cannot
by Jerry Geis 25 Feb '21

25 Feb '21

I have a system that needs to run e2fsck (C7). I boot into rescue mode, skip to shell (option 3). enter they PW and I type: e2fsck -y /dev/sda1 and it says is mounted. This is "/" What do I do so I can run e2fsck ? Thanks, Jerry

3 2

OpenStack Training Recommendations
by Paul Heinlein 24 Feb '21

24 Feb '21

Our team at work is looking for OpenStack training options. The training should cover * overview of widely used OpenStack services * network architecture * installation and configuration * ongoing administration, maintenance, and troubleshooting * upgrading We'd prefer workflows based around Puppet or Ansible, since we know those tools, but operational continuity is more important than the tools used. We'd likewise prefer solutions oriented toward CentOS or RHEL, but, again, it's just a preference. We've investigated kolla-ansible for deployment, but we're not adverse to changing toolsets if the upside is right. I'd characterize our team as journeymen to expert system administrators. We specialize in supporting research groups. The training would be to provide skills and knowledge for our team to support OpenStack as a long-term in-house virtualization option. I'd love to hear your first-hand experiences with any specific training offerings. Thanks! (Note: we have other virtualization solutions in place. OpenStack is specifically required by researchers whose wider scientific communities have built workflows for that environment. Suggestions to ditch OpenStack for OtherGreatSolution will be ignored.) -- Paul Heinlein heinlein(a)madboa.com 45°38' N, 122°6' W

1 0

Permission denied when updating CentOS 8 Streams
by Mathieu Baudier 22 Feb '21

22 Feb '21

Hello, On a remote server (in an IPv6-only infrastructure) I am getting the following error when trying to update CentOS 8 Streams x86_64: $ sudo dnf upgrade --refresh Failed to set locale, defaulting to C.UTF-8 CentOS Stream 8 - AppStream 0.0 B/s | 0 B 00:16 Errors during downloading metadata for repository 'appstream': - Curl error (7): Couldn't connect to server for http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=AppStream&i… [Failed to connect to mirrorlist.centos.org port 80: Permission denied] Error: Failed to download metadata for repo 'appstream': Cannot prepare internal mirrorlist: Curl error (7): Couldn't connect to server for http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=AppStream&i… [Failed to connect to mirrorlist.centos.org port 80: Permission denied] Trying to retrieve the mirror list with wget gives similar errors (see log below). This is a development VM and I was playing with firewalld zones on this interface (drop, block, etc.) in order to see the most restrictive that I could use in order to update a system. But the error also appears if I switch back the zone to public. Could it be that my address has been blacklisted because of all these tests? >From my laptop, also running CentOS 8 Streams, everything is working as expected. Thank in advance for hints on how to analyze further! Mathieu ## wget log $ wget http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=AppStream&i… --2021-02-19 08:35:14-- http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=AppStream&i… Resolving mirrorlist.centos.org (mirrorlist.centos.org)... 2001:4178:5:200::10, 2600:1f16:c1:5e01:4180:6610:5482:c1c0, 2604:1380:2001:d00::3, ... Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2001:4178:5:200::10|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2600:1f16:c1:5e01:4180:6610:5482:c1c0|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2604:1380:2001:d00::3|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2604:1580:fe02:2::10|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2604:1380:1001:6c00::1|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2a05:d012:8b5:6503:9efb:5cad:348f:e826|:80... failed: Permission denied.

6 5

Date question
by Jerry Geis 18 Feb '21

18 Feb '21

SO from the man page on date I can do current=`TZ=":America/Indianapolis" date` echo $current current=`TZ=":America/Los_Angeles" date ` echo $current And I get correct data. LA is 3 hours earlier. But doing this: current=`TZ=":America/Indianapolis" date +%s` echo $current current=`TZ=":America/Los_Angeles" date +%s` echo $current I get the same data - its not 3 hours different. What am I not doing correct ? Thanks, Jerry

3 3

Using C7 as host to C5 guest
by Jerry Geis 17 Feb '21

17 Feb '21

Hi all, I am using C7 as a host to a C5 image. This used to boot. I tried today to boot up the C5 image and it get stuck now on the boot screen. Any thoughts on why ? It stuck on the screen that shows root (hd0,0) Filesystem type ext2fs partition type 0x83 kernel /boot/vmlinuz-2.16.18-402.el5 Then nothing... I know C5 is way out of date - but have a couple places still using it. Thoughts on getting this to boot up ? Jerry

1 0

Certificate Authority (CA) in CentOS 7 to create digital certificates
by Kaushal Shriyan 16 Feb '21

16 Feb '21

Hi, I am running CentOS Linux release 7.9.2009 (Core). Is there a way to configure a Certificate Authority (CA) in CentOS 7 to create digital certificates for servers on LAN or for VPN clients that need SSL Certificates? https://gitlab.int.mydomain.com for example. Thanks in Advance. Please guide. Best Regards, Kaushal

4 3

Re: [CentOS] Dual WAN on EL8 desktop.
by Kenneth Porter 16 Feb '21

16 Feb '21

--On Tuesday, February 16, 2021 12:00 PM +0530 Thomas Stephen Lee <lee.iitb(a)gmail.com> wrote: > The solution should be a software one without acquiring new hardware. > What is ideal is the bandwidth of two connections and half bandwidth > when one link is down. The search term you're looking for is "NIC bonding". Here's the first hit I get from Google: <https://www.enterprisenetworkingplanet.com/linux_unix/article.php/3850636/U…>

1 0

Difference between shimx64-centos.efi and shimx64.efi
by Gianluca Cecchi 16 Feb '21

16 Feb '21

Hello, in shim-x64-15-15.el8_2.x86_64.rpm of CentOS 8.3 I see the two files: ./boot/efi/EFI/centos/shimx64-centos.efi ./boot/efi/EFI/centos/shimx64.efi # ll boot/efi/EFI/centos/shim* -rwx------. 1 root root 1238416 Aug 1 2020 boot/efi/EFI/centos/shimx64-centos.efi -rwx------. 1 root root 1244496 Aug 1 2020 boot/efi/EFI/centos/shimx64.efi What is the difference? Thanks, Gianluca

1 0

to which Bugzilla go to?
by lejeczek 16 Feb '21

16 Feb '21

Hi devel I've noticed a while ago that Redhat's Bugzilla has had, in "Red Hat Enterprise Linux 8" as one of the options "CentOS Stream" - which is where I've been recently reporting to. But I wonder about bugs relating to CentOS infra/repos - where to submit those, would you know? many thanks, L.

2 1

ssh pubkey login from root@linux to administrator@windows
by Ralf Prengel 16 Feb '21

16 Feb '21

Hallo, I try to configure a ssh login with public key login from windows to root. Login work when entering the password but using a public key doesn t work. I m using win10 an the MS ssh server addon. root should login as administrator. I read and tried out several tutorial but without success. Next problem is that I can t find any logfiles to analyze for hint. Ralf

1 1

Dual WAN on EL8 desktop.
by Thomas Stephen Lee 15 Feb '21

15 Feb '21

Hi, I have two internet connections from two ISPs. I also have a desktop with two Ethernet ports. My question: What is the best way to get the maximum out of two internet connections in EL 8 for my desktop? Thanks --- Lee

4 3

Delta Chat on CentOS 7
by H 14 Feb '21

14 Feb '21

Has anyone compiled Delta Chat to run on CentOS 7? I know it is available as a Flatpak and as an AppImage (https://delta.chat/en/download) but I wonder if there might be benefits to compile and run natively on CentOS.

1 0

Changing command line version of php for apache
by H 14 Feb '21

14 Feb '21

I have updated php on a Centos 7 system to use php 7.2 from sclo. Apache running on the system is also using php 7.2 as shown by phpinfo(), however, apache continues to use the default version of php, ie 5.4.16, when that user launches a process from the command line. All other users default to php 7.2 when running from the command line which is correct. For some reason I have missed configuring apache php-cli correctly. I have googled and found many examples on how to change the configuration settings so that apache uses php 7.2 when serving web pages but in this case it is php-cli that needs to be corrected to use a later version. What should I check? What have I missed? By the way, I am not planning to remove php 5.4 from the system since it might be needed for something at a later time. Thanks.

4 8

CentOS 7, selinux and pop_port_t
by H 12 Feb '21

12 Feb '21

I am muddling my way through learning selinux when installing a webapp with httpd as the webserver running CentOS 7. The app allows the user to send/receive mail etc but it seems that I have yet to allow access to imap port 993. So far it seems this is configured through pop_port_t but setsebool httpd_can_network_connect 1 does not include pop_port_t. In the audit log I have: type=AVC msg=audit(1613093671.415:155086): avc: denied { name_connect } for pid=22431 comm="httpd" dest=993 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:pop_port_t:s0 tclass=tcp_socket permissive=0 Yet, running the below sesearch -A -s httpd_t -c tcp_socket -p name_connect -d -C tells me ET allow httpd_t pop_port_t : tcp_socket name_connect ; [ httpd_can_sendmail ] I am obviously missing something. Does anyone know how to enable access to pop_port_t?

2 1

el7 systemd service:: ensure var/log owner when User is specified
by Adrian Sevcenco 12 Feb '21

12 Feb '21

Hi! Does anyone have an idea how can i (in a nice way [1]) to ensure ownership/permissions of log directory in /var/log for a unit that drops privileges to a user (with User=/Group=) [1] The ugly way being with script in StartPre and sudo in Start so i want to use User= I'm aware of LogsDirectory= but is not available on EL7 Thanks a lot! Adrian

5 4

Update - Resizing a QEMU guest display
by Bill Gee 11 Feb '21

11 Feb '21

Strahil Nikolov and I took this conversation off-line for a few days. The thread of our discussion is below. Net result: No solution is yet found. Strahil had some very good ideas, but they did not pan out in this case. For archiving - and in hope that someone may have some other ideas! - I post this back to the list. -- Bill Gee ---------- Forwarded Message ---------- Subject: Re: [CentOS] Resizing a QEMU guest display Date: Tuesday, February 9, 2021, 10:38:08 PM CST From: Strahil Nikolov <hunter86_bg(a)yahoo.com> To: bgee(a)campercaver.net, Bill Gee <bgee(a)campercaver.net> Erm... mine was spice-vdagent.service , and not '.socket'.Never mind, it could be something else. Best Regards,Strahil Nikolov On Tue, Feb 9, 2021 at 21:52, Bill Gee<bgee(a)campercaver.net> wrote: I restarted spice-vdagentd.socket on the guest that will not resize. It still will not resize. [root@practice21a ~]# systemctl restart spice-vdagentd.socket [root@practice21a ~]# systemctl status spice-vdagentd.socket ● spice-vdagentd.socket - Activation socket for spice guest agent daemon Loaded: loaded (/usr/lib/systemd/system/spice-vdagentd.socket; static) Active: active (listening) since Tue 2021-02-09 13:43:10 CST; 8s ago Triggers: ● spice-vdagentd.service Listen: /run/spice-vdagentd/spice-vdagent-sock (Stream) CGroup: /system.slice/spice-vdagentd.socket Feb 09 13:43:10 practice21a.billgee.local systemd[1]: Listening on Activation socket for spice guest a> [root@practice21a ~]# ps ax | grep spice 3018 ? Ssl 0:00 /usr/bin/spice-vdagent 3032 ? Ssl 0:00 /usr/sbin/spice-vdagentd 3554 pts/0 S+ 0:00 grep --color=auto spice [root@practice21a ~]# But! Just to be sure, I checked the guest that WILL resize. There is no service on it called spice-vdagentd.socket! There is also no process with spice in the name. The guest that should work does not, and the guest that should not work does! -- Bill Gee On Tuesday, February 9, 2021 12:56:38 PM CST you wrote: > The serviceis indirect, which means that another unit has to 'call' it. Try restarting the service in the VM. > # systemctl status spice-vdagentd.service ● spice-vdagentd.service - Agent daemon for Spice guests Loaded: loaded (/usr/lib/systemd/system/spice-vdagentd.service; indirect; vendor preset: enabled) Active: active (running) since Mon 2021-02-08 22:31:06 EET; 22h ago Main PID: 27963 (spice-vdagentd) Tasks: 1 CGroup: /system.slice/spice-vdagentd.service └─27963 /usr/sbin/spice-vdagentd Feb 08 22:31:06 openshift1 systemd[1]: Starting Agent dae...Feb 08 22:31:06 openshift1 systemd[1]: Started Agent daem...Feb 08 22:31:07 openshift1 spice-vdagentd[27963]: opening...Hint: Some lines were ellipsized, use -l to show in full. > Best Regards,Strahil Nikolov > > On Tue, Feb 9, 2021 at 20:50, Bill Gee<bgee(a)campercaver.net> wrote: > Hmmmm.... I am missing something. Why would rebooting the entire computer NOT restart the service? > > > And for that matter - Exactly what service are you talking about? Can you be more specific? > > > > The service is of type indirect. Try to restart only the service (not the guest). > > > Best Regards,Strahil Nikolov > > > > > > > > > On Tue, Feb 9, 2021 at 20:31, Bill Gee<bgee(a)campercaver.net> wrote: > > > The host and all of its guests have been rebooted multiple times in the last two days. > > > > > > > > > > > > > Have you restarted the service ?Yesterday I built a CentOS 7 system and spice didn't resize untill I restarted the service. > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > > > > > > On Mon, Feb 8, 2021 at 14:40, Bill Gee<bgee(a)campercaver.net> wrote: Hi Strahil - > > > > > > > > > > > > > > Thanks for the link. Unfortunately it is not helpful. The spice agent is already installed on the guest, and the spice channel is already configured. > > > > > > > > > > > > > > [bgee@practice21a ~]$ rpm -qa | grep spice > > > > > > > spice-vdagent-0.20.0-3.fc33.x86_64 > > > > > > > > > > > > > > A question occurs to me ... The working guest also has both the spice-vdagent package and the spice channel. Why does it work and the other guest does not? > > > > > > > > > > > > > > > I think the following is a good start: > > > > > > > > 11.3. SPICE Agent Red Hat Enterprise Linux 7 | Red Hat Customer Portal > > > > > > > > | > > > > > > > > | > > > > > > > > | > > > > > > > > | | | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > | > > > > > > > > | > > > > > > > > | | > > > > > > > > 11.3. SPICE Agent Red Hat Enterprise Linux 7 | Red Hat Customer Portal > > > > > > > > > > > > > > > > The Red Hat Customer Portal delivers the knowledge, expertise, and guidance available through your Red Hat subscription. > > > > > > > > | | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > > > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > > > > > > > > > On Sun, Feb 7, 2021 at 20:29, Bill Gee<bgee(a)campercaver.net> wrote: Hi Strahil - > > > > > > > > > > > > > > > > How does one reach a guest via spice? I am not familiar with any remote access application called "spice". I have tried two methods of accessing the host. First is to open it from the Virtual Machine Manager on the host. Second is to use TigerVNC to access it across the local network. > > > > > > > > > > > > > > > > I see a package installed on the guest which looks like the guest agent. Is there more that needs to be added? This is the only qemu package installed on both the Fedora machine that does not resize and the CentOS7 machine that will resize. The versions are way different between the two guests. > > > > > > > > > > > > > > > > [root@practice21a ~]# rpm -qa | grep qemu > > > > > > > > qemu-guest-agent-5.1.0-9.fc33.x86_64 > > > > > > > > > > > > > > > > The Fedora guest has, as you see, version 5.1.0-9. The CentOS7 guest has version 2.12.0-3. Perhaps the Fedora guest version is too new to run on a CentOS7 host?? > > > > > > > > > > > > > > > > I see other QEMU packages available. One of them is called "qemu-device-display-qxl" which is very suggestive. However, that package is NOT installed on the CentOS7 guest and yet that guest works. > > > > > > > > > > > > > > > > Another package I see is "libvirt-daemon-driver-qemu". This package is installed on the host but is not present on either guest. Is it needed on guests? > > > > > > > > > > > > > > > > > Have you tried to reach the VM via spice ?Also check if qemu's guest agent is runningin the VM. > > > > > > > > > > > > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > CentOS mailing list > > > > > > > > CentOS(a)centos.org > > > > > > > > https://lists.centos.org/mailman/listinfo/centos > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > CentOS mailing list > > > > > > > CentOS(a)centos.org > > > > > > > https://lists.centos.org/mailman/listinfo/centos > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -----------------------------------------

1 0

Re: [CentOS] udev rules & USB devices - ignored at boot
by lejeczek 11 Feb '21

11 Feb '21

On 09/02/2021 18:25, Strahil Nikolov wrote: > CentOS 7 doesn't use the old naming convention but ,if you > set a device name and mac address for your connection, the > network stack will rename the device during activation. > > Try with: > > SUBSYSTEM=="net", ACTION=="add|change", DRIVERS=="?*", > ATTR{address}=="00:1e:10:1f:00:00", ATTR{type}=="1", > pop NAME="lteusb" dnf pulled in quite a few updates in the meanwhile but most likely "change" does the trick. I thought it had something to do with USB/kernel/subsystems parts as the very same rules worked for PCIe devices, those worked at re/boot. many! thanks Strahil. > > Best Regards, > Strahil Nikolov > > On Mon, Feb 8, 2021 at 17:04, lejeczek via CentOS > <centos(a)centos.org> wrote: > > > On 08/02/2021 08:10, Strahil Nikolov wrote: > > Can you share your udev rules ? > > > > Best Regards, > > Strahil Nikolov > > > > On Sun, Feb 7, 2021 at 15:33, lejeczek via CentOS > > <centos(a)centos.org <mailto:centos@centos.org>> wrote: > > Hi guys, > > > > I have an Ethernet USB adapter for which udev > executes my > > custom rules but!... udev does it only at plug-in > > event and > > not! when the USB stays plugged in during a > reboot, then > > same rules are ignored (or some other problem > results in > > udev failure to do the same when device is > plugged to a > > running system). > > My system is just an average box with a Ryzen on > a B550 > > platform. > > Anybody sees this reproduce? > > many thanks, L. > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org <mailto:CentOS@centos.org> > <mailto:CentOS@centos.org <mailto:CentOS@centos.org>> > > https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos> > > <https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos>> > > > simple rules: > > SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", > ATTR{address}=="00:1e:10:1f:00:00", ATTR{type}=="1", > KERNEL=="eth*", NAME="lteusb" > > like I said - I get iface "lteusb" when I plug the USB > so it > works. If I leave that USB plugged in and reboot then no > "lteusb". > > regards, L. > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org <mailto:CentOS@centos.org> > https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos> >

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2021