July 2021 - Discuss - lists.centos.org

Issues booting centos7 [dracut is failing to enable centos/root, centos/swap LVs]
by Yannis Milios 01 Feb '25

01 Feb '25

Hello, I'm having a strange problem booting a new centos7 installation. Below some background on this. [I have attached the tech details at the bottom of this message] I started a new CentOS7 installation on a VM, so far all good, o/s boots fine. Then I decided to increase VM disk size (initially was 10G) to 13G. Powered off the VM, increased the vhd via the hypervisor, booted from CentOS livecd, selected "recover my centos installation". Then I used the following sequence of commands to make the new vhd size "visible" to the o/s ... - ran fdisk /dev/sda and deleted partition 2. (This is the LVM partition where the o/s is stored. The first partition is /boot [xfs] partition *non lvm*.) - created a new partition with same starting sector as before deleting it, but a different ending sector (to reflect to the increased space). - set partition type to 8e (lvm), saved settings and exit. - ran pvresize and lvresize to make new space visible to the o/s.All good, I can see the space increase on 'lvdisplay centos/root'. - ran 'mount /dev/mapper/centos-root /mnt/root' to temporarily mount the o/s partition. - ran 'xfs_growfs /mnt/root' to resize the o/s fs to the new size. It was successful and I could actually chroot to the o/s and verify new disk size. - rebooted and tried to boot from hdd this time. Grub menu shows up and loads default kernel (3.10.0-862.9.1.el7.x86_64). - after initial kernel boot up process, booting continues to initrd and then it's where the problem starts... - looks like dracut has issues locating/enabling /dev/mapper/centos-root (lv) and as a result it cannot boot to the 'real' root fs (/). - while in dracut shell, I execute the following command sequence: 1. lvm lvchange -ay /dev/centos/root 2. lvm lvchange -ay /dev/centos/swap 3. ln -s /dev/mapper/centos-root /dev/root 4. exit ...and the o/s boots fine...so looks like the pv,vg,lv is detected properly while in initrd, but somehow dracut has difficulties enabling the root,swap LVs ? - While in o/s, I rebuild initrd by using: 'dracut -f -v -a lvm' Note, I have to use '-a lvm' as for some reason, if don't, the lvm utils (lvm,lvm_scan) are not being included to the initrd, not sure why this happens. After rebooting, same thing happens, I have to manually boot the system via dracut shell. I'm a bit stuck at this point, any clues what I'm doing wrong in here ? As I previously said, this is a new installation, so I could simply reinstall the whole thing, but I would rather try to find out some answer to why is this happening ... :-) [curiosity] Some additional details: ================== I've attached /run/initramfs/rdsosreport.txt file [generated while in inird] here: https://privatebin.net/?fdc4052c0c402884#gdB/QYR3IeR55SxUbjfrkZPQfJ7jMxiUxq… o/s ver=CentOS Linux release 7.5.1804 (Core) [root@localhost ~]# lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda 8:0 0 13G 0 disk ├─sda1 8:1 0 500M 0 part /boot └─sda2 8:2 0 12.5G 0 part ├─centos-root 253:0 0 11.5G 0 lvm / └─centos-swap 253:1 0 1G 0 lvm [SWAP] [root@localhost ~]# cat /etc/default/grub GRUB_TIMEOUT=5 GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)" GRUB_DEFAULT=saved GRUB_DISABLE_SUBMENU=true GRUB_TERMINAL_OUTPUT="console" GRUB_CMDLINE_LINUX="rd.lvm.lv=centos/root rd.lvm.lv=centos/swap rd.shell rhgb" GRUB_DISABLE_RECOVERY="true"

4 11

Microsoft Teams on CentOS 7. Does the latest version work?
by Toralf Lund 03 Dec '21

03 Dec '21

Does anyone else run Microsoft Teams on CentOS 7? I've used it for a while now, and it's generally worked reasonably well. However, after upgrading to the latest version from the Microsoft repos, it doesn't start up properly. Processes start and remain active until I give up and kill them, but I can't see a window or a tray icon or anything. Has anyone else seen this? Is there anything I can do to make the GUI appear? This is not a big deal as everything just works fine if I revert to the previous release, but it would be interesting to know if this is a general problem with the software, or I have some weird issue with my system. The release that doesn't work is 1.4.00.13653. The one that does is 1.4.00.7556. - Toralf

14 31

MATE 1.20 test build for CentOS 7 available
by Greg Bailey 14 Oct '21

14 Oct '21

Hi everyone, There's been discussions in the past about updating MATE RPMs in EPEL-7: https://bugzilla.redhat.com/show_bug.cgi?id=1436260 https://lists.centos.org/pipermail/centos/2019-August/173154.html (and lots of others...) As a proof-of-concept, I've written some scripts that clone specific commits from the Fedora master branches, and then runs a tool to re-apply RPM scriptlets that are required by EL7 but removed from the Fedora .spec files. The scripts are available at: https://github.com/gebailey/mate-rpms/tree/master/1.20/el7 There's also instructions there if you want to try upgrading to MATE 1.20 w/o rebuilding them yourself. If these packages work for others, perhaps we can revisit the idea of updating the epel7 branches of the Fedora git repos and submitting an official update. There's nothing here (yet) about building MATE 1.22 (which might require a newer gcc for EL7), or building anything on CentOS 8, but thought the CentOS 7 users might find this helpful. -Greg

6 17

Transition test report going from CentOS8 to Debian 10.
by Lamar Owen 06 Aug '21

06 Aug '21

Sorry for the length.... I'm posting this here since this particular transition has been mentioned on-list as one possibility for a path forward for current CentOS Linux users. AlmaLinux, the Developer Subscription RHEL, Rocky, CentOS Stream, Springdale, upgrading to full RHEL; all these are also possibilities, too, and all have different strengths and weaknesses. The transition to Debian has a lot of strengths, including a long track-record of support (even if the support time for a particular release is shorter), a fully-open development model with no 'corporate overlord' that I know of, a large set of supported packages, and a huge community of developers and users. For the CentOS user the main weakness is having to learn a few areas of difference in the way the system is setup and maintained; of course, if a ten-year 'stable' timeframe is really that important to you the lack of that is also a weakness. So, last week I transitioned, as a test of sorts, my working CentOS 8 main laptop to Debian 10. I kept a complete backup of the C8 install should I wish to go back to it, and installed Buster to a new mSATA SSD, but ported the two SATA drives (Dell Precision M6700 - has an mSATA slot plus two SATA bays) straight over after making full backups. I posted a pretty complete rundown on the scientific linux users mailing list, so I won't recap it all here. The bottom line was the the transition was not any more difficult, really, than moving from CentOS 7 to CentOS 8. The software versions in Buster are pretty close to what is in CentOS 8, although I have yet to need any third-party repository (PPA) for anything I've needed to install. All the packages I have worked with so far have worked fine with a little bit of massaging. These include commercial (and costly) software such as Harrison Consoles' Mixbus32C, Qoppa's PDFStudio2019 Professional, and others. So if you were to decide that this is the route for you to take, it does work and I found it to be not nearly as hard as I had thought it might be. If you install GNOME 3 you get GNOME 3; it feels pretty much the same as a non-Classic CentOS GNOME 3, just with a different set of extensions installed by default. That's on the workstation. On the server side, I'm evaluating Proxmox for the virtualization solution, and so far I'm finding it to be a pretty easy migration. I'm using the 'non-subscription' repository, so this is a no-cost option. Even getting the box registered to our EMC Clariion SAN was relatively easy; EMC provides the Unisphere Server Utility for Linux x64 in RPM form; the latest I have is "ServerUtil-Linux-64-x86-en_US-1.0.55.1.0044-1.x86_64.rpm" (which is fairly old, but I did say Clariion arrays, so they're pretty old, too). Debian has provided the 'alien' tool for some time; after installing alien, a simple 'alien -i ServerUtil-Linux-64-x86-en_US-1.0.55.1.0044-1.x86_64.rpm' installed the EMC RPM in the correct place. Proxmox already included everything that serverutilcli requires; on a plain Buster install I had to install dm-multipath and the device mapper libraries and tools before serverutilcli would find the arrays; but it ran just like it did on CentOS 8 (and 7). I haven't decided whether to stay on Debian or not; too early to tell. I have time to test and evaluate. My CentOS 7 installs aren't goin anywhere, though, at least until late 2023. And I've registered for a Developer subscription of RHEL so that I can properly evaluate that option, too. This is the beauty of open source: we have OPTIONS.

11 23

hosts.deny, fail2ban etc.
by H 04 Aug '21

04 Aug '21

|Running CentOS 7. I was under the impression - seemingly mistaken - that by adding a rule to /etc/hosts.deny such as ALL: aaa.bbb.ccc.* would ban all attempts from that network segment to connect to the server, ie before fail2ban would (eventually) ban connection attempts. This, however, does not seem correct and I could use a pointer to correct my misunderstanding. How is hosts.deny used and what have I missed? Is it necessary to run: iptables -I INPUT -s aaa.bbb.ccc.0/24 -j DROP to drop incoming connection attempts from that subnet? Thank you! |

9 17

how do I get an OLD Version like 6.3
by Jerry Geis 04 Aug '21

04 Aug '21

I need to example a really old version like 6.3. Where can I get a download for that ? Thanks Jerry

3 3

CentOS 8: two external network adapters, two ISPs - routing problems
by Konstantin Boyandin 02 Aug '21

02 Aug '21

Hello! Given: a CentOS 8-powered computer with three network adapters. eth0, eth2: external, connected to two different ISPs eth1: faces home network (intranet) The task: allow accessing certain internal services from either ISP. There are several services, I only mention SSH below. In the configs below: IP1: external IP at first ISP (ISP1), assigned to eth0 Gateway1: IP of gateway provided by ISP1 Network1,Netmask1: related to IP1 IP2: external IP at second ISP (ISP2), assigned to eth2 Gateway2: IP of gateway provided by ISP2 Network2,Netmask2: related to IP2 LocalSSHIP: IP in intranet (eth1) where SSH server is running Current configs follow. Routing tables: echo "200 isp1" >> /etc/iproute2/rt_tables echo "201 isp2" >> /etc/iproute2/rt_tables Routing policies: /etc/sysconfig/network-scripts/route-eth0 Network1 dev eth0 src IP1 table isp1 default via Gateway1 dev eth0 table isp1 /etc/sysconfig/network-scripts/route-eth2 Network2 dev eth2 src IP2 table isp2 default via Gateway2 dev eth2 table isp2 Routing rules: /etc/sysconfig/network-scripts/rule-eth0 from IP1/32 table isp1 /etc/sysconfig/network-scripts/rule-eth2 from IP2/32 table isp2 iptables snippets. External traffic forwarded to local SSH server from both interfaces: iptables -A PREROUTING -t nat -i eth0 -p tcp -d IP1 --dport 22 -j DNAT --to LocalSSHIP:22 iptables -A PREROUTING -t nat -i eth2 -p tcp -d IP2 --dport 22 -j DNAT --to LocalSSHIP:22 iptables -A FORWARD -p tcp -d LocalSSHIP --dport 22 -j ACCEPT eth0 is default gateway: $ ip route default via Gateway1 dev eth0 proto static metric 100 default via Gateway2 dev eth2 proto static metric 101 ... $ ip rule 0: from all lookup local 32764: from IP2 lookup isp2 32765: from IP1 lookup isp1 32766: from all lookup main 32767: from all lookup default SNAT is applied for the traffic originating from eth1: iptables -t nat -A POSTROUTING -i eth1 -o eth0 -j SNAT --to-source IP1 Current situation: - All services forwarded from eth0 are working normally. - All traffic originating from intranet passes out and back normally. - All the attempts to access services from eth2 time out. There are no obvious hints in /var/log/messages (such as complaints about "martian IPs"). I am somewhat at a loss here, all the pieces of advice would be very welcome. -- Sincerely, Konstantin Boyandin

3 2

It's been six days since CVD-2021-33909 was patched in RHEL, what's the holdup for Stream 8?
by Steven Rosenberg 29 Jul '21

29 Jul '21

This bug in the kernel was patched in RHEL on 7/20. Every other mainstream Linux distro patched it that day or the day after. That includes Rocky and Alma. https://access.redhat.com/security/cve/CVE-2021-33909 It's still not patched six days later in CentOS Stream 8. This Bugzilla entry makes it clear that when it comes to security, CentOS Stream falls behind RHEL. But this far behind? https://bugzilla.redhat.com/show_bug.cgi?id=1975182 This doesn't make a good argument for Stream being a viable CentOS Linux replacement.

3 5

Old CentOS 6.3 grub.conf
by Jerry Geis 28 Jul '21

28 Jul '21

I am trying to "add" an entry to grub.conf on CentOS 6.3 - and change the default=0 to default=1 # grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You do not have a /boot partition. This means that # all kernel and initrd paths are relative to /, eg. # root (hd0,0) # kernel /boot/vmlinuz-version ro root=/dev/sda1 # initrd /boot/initrd-[generic-]version.img #boot=/dev/sda default=1 timeout=5 splashimage=(hd0,0)/boot/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-279.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-279.el6.x86_64 ro root=UUID=09337d96-de39-43f1-99c2-8a6a1fadd465 rd_NO_LUKS rd_NO_LVM LANG=en_US.UTF-8 rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=auto KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet initrd /boot/initramfs-2.6.32-279.el6.x86_64.img title Boot Other root (hd0,0) kernel /boot/vmlinuz initrd /boot/initrd I then run "grub-install /dev/sda" and reboot. If I cursor down - my new title is present - but the default is still the first title. What did I miss ? Thanks, jerry

1 0

heads up: stream8 cloud-init rebase 20 to 21
by Leon Fauster 26 Jul '21

26 Jul '21

FYI and everyone on C8S: cloud-init does run on deployed cloud vm's anymore succesfully after update (it was rebased from 20. to 21.). Fix: before rebooting run "cloud-init clean" -- Leon

1 0

Folio Infobase
by J Martin Rushton 26 Jul '21

26 Jul '21

Does anyone know any way to read .nfo files from Folio infobases. The best suggestion I've seen so far is to run up a VM with Windows 98 on it, does anyone know where I can get a copy of that! BTW, these are not the .nfo files used to describe scenes. -- J Martin Rushton MBCS

1 0

yum quiet not really quiet anymore?
by Gionatan Danti 24 Jul '21

24 Jul '21

Hi all, I noticed that "yum -q" (or "dnf" -q) on CentOS 8 is not really quiet anymore. For example (notiche the "upgraded" line): [root@localhost cron.d]# yum upgrade -y -q Upgraded: python3-perf-4.18.0-305.10.2.el8_4.x86_64 While yum historically had issue with the quiet option [1], this specific issue seems new to me. Do you have any suggestion (short of redirecting stdout to /dev/null)? Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 2

OT: firefox question
by Valeri Galtsev 24 Jul '21

24 Jul '21

Dear Experts, My question is OT, as it is related to firefox, not CentOS system per se. Even more: my firefox runs on FreeBSD workstation. But I figured this list have largest likelihood of having experts in firefox (as well as on other things), so... My firefox behavior changed after one of recent updates.. When one logs in to website that is locked using web password (e.g., set in .htacess/.htpasswd in apache), one gives username/password once. Then firefox remembers that while firefox is running, and you don't have to give credentials (though authentication does happen behind the scenes all the time since). But not anymore for me at least on my (FreeBSD) workstation: in the morning I discover firefox (though it had not been restarted) asks yet again credentials to websites I have been logged to. As if firefox purges credentials to websites after some period of time (or inactivity on those websites). This stared happening not long ago after one of updates firefox is known to release annoyingly often (as in: mozilla foundation forgot the meaning of the word "release" which means well debugged code some time about decade ago...). I tried to find relevant setting in GUI preferences to no avail (maybe it is just me?), and hope, experts know deeper lying preferences, and may point me to relevant one. All in all, I'm forced back onto my pursuit for replacement for firefox browser... Thanks a lot for all your answers. And my apologies for rant (which I was not able to separate due to my frustration...). Valeri -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 2

Difference between CentOS Linux and CentOS Stream
by Kaushal Shriyan 23 Jul '21

23 Jul '21

Hi, I am confused between CentOS Linux and CentOS Stream as per https://www.centos.org/download/. Please guide me on which one I need to use in the production environment. Is there a difference between CentOS Linux and CentOS Stream? Thanks in advance and I look forward to hearing from you. Best Regards, Kaushal

15 18

Annoyances with sound
by mark 23 Jul '21

23 Jul '21

Hi, folks, Running C7, updated the beginning of this month. KDE, I go to the start menu->multimedia. and select kmix, the pretty cursor bounces for a while, then apparently ends with nothing running. Nothing in .xerrors. I try selecting audacity - which I don't trust, given that the last time, weeks ago, that I ran it from the command line, after about 5 min, it hung my system (16G RAM, Core I-7) so hard I had to power cycle. From the start menu... I get a popup "an error has occured." What's going on here? mark

1 0

CentOS-announce Digest, Vol 196, Issue 4
by centos-announce-request＠centos.org 23 Jul '21

23 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2725 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2021:2784 Important CentOS 7 java-11-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 22 Jul 2021 13:52:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2725 Important CentOS 7 kernel Security Update Message-ID: <20210722135255.GA22110(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2725 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2725 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e07580dc20cee29ddae2c26b7d4782a6e7671477d7f4ae210d2cef6cc71555cb bpftool-3.10.0-1160.36.2.el7.x86_64.rpm 91d2cf4d7a40fe66ba14583d4d5f045850fefc8b26b7e0adc2634f5ec9f9a775 kernel-3.10.0-1160.36.2.el7.x86_64.rpm 6ce4b480a292b7fa51c31777377a1711c2537597c5cf02d8aa14b345321b67bf kernel-abi-whitelists-3.10.0-1160.36.2.el7.noarch.rpm 1cd93bcccbab328b508e869ff3ceeaa30e1ab5ac781b7a6c3b91207832226025 kernel-debug-3.10.0-1160.36.2.el7.x86_64.rpm 5ec120d1c66453ab1a85e5107b0b4457686f595cf2e8dfc5ca04adcec4f0ade0 kernel-debug-devel-3.10.0-1160.36.2.el7.x86_64.rpm ba5a53ea9bd2aff2765fd9fc38a3f75ecd5d3e617e1c2cb85f6a9a793063506c kernel-devel-3.10.0-1160.36.2.el7.x86_64.rpm 28f85ca5b6e7c2b1e3ab7c4b31675583e8a72c18188f86f288a9a9bc046a202c kernel-doc-3.10.0-1160.36.2.el7.noarch.rpm 68cfd2b5e2aa6b9bad7a4040def6ccec2aa6ca31c6acf4758e98b507e8efc105 kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm 53ebea1b387c7333eb49334b5bf8e867d5307742f502d7d40091abe8eb42387b kernel-tools-3.10.0-1160.36.2.el7.x86_64.rpm c3571b20ed80af5bcdad26c4ffded5902a413e69a9f36e66ea22eb7f0b7343be kernel-tools-libs-3.10.0-1160.36.2.el7.x86_64.rpm d0f3c1d37d812e6fbf2b4e853fb66fd0ffe2a908b0bd0749ea1f99b53198ad71 kernel-tools-libs-devel-3.10.0-1160.36.2.el7.x86_64.rpm cc99796988903240582ca2234451a6b7eaa5f9534e910f4f9838cbd024cc7b0a perf-3.10.0-1160.36.2.el7.x86_64.rpm d1779b88b2029c7b3cd102334127e7013a0a71479581fd2f04f0d23bbc8a0463 python-perf-3.10.0-1160.36.2.el7.x86_64.rpm Source: e82932562eb31affee526927b3cbc2280750983a88182a0fcc49e511e6836691 kernel-3.10.0-1160.36.2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 22 Jul 2021 13:56:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2784 Important CentOS 7 java-11-openjdk Security Update Message-ID: <20210722135657.GA22487(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2784 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2784 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a2e3eec180d90a42cea830a8b5f0fa6890394a9b51d4349667c8010da5d2d418 java-11-openjdk-11.0.12.0.7-0.el7_9.i686.rpm f8d118dd0c38e6be586da71c24bb8639d30d388d9b57e276ec52b9ac2f649ead java-11-openjdk-11.0.12.0.7-0.el7_9.x86_64.rpm c1a1ba3ae8f745008a0b7e5c0e4663241db1a386d16bd54eef846e125686ceba java-11-openjdk-demo-11.0.12.0.7-0.el7_9.i686.rpm 708f19a2413ea0ae0ab9a7619a05c06675c69004d477b56b71ac6ec988ee1cc4 java-11-openjdk-demo-11.0.12.0.7-0.el7_9.x86_64.rpm 1a762e2d8882a0c051d0a322eb97ba3c2fbdb843e16699bb702cecd284f238fa java-11-openjdk-devel-11.0.12.0.7-0.el7_9.i686.rpm 5b9c35a49f05bdae1d6d9ae13688adb2f1aa9eed15604ea80e3126af3ad89c77 java-11-openjdk-devel-11.0.12.0.7-0.el7_9.x86_64.rpm 155a01df2abb9e5b0463d2bbe0314d3147245d1540cc0e5026de16abc670d0e6 java-11-openjdk-headless-11.0.12.0.7-0.el7_9.i686.rpm f1402f59f4309e9a2ad497a9699c098b61381170de7f600a6a7636db589400d5 java-11-openjdk-headless-11.0.12.0.7-0.el7_9.x86_64.rpm 49275f52aa1c71edc688e6802a1f2c8b136594807077f4aa90e4e2686edd8ddb java-11-openjdk-javadoc-11.0.12.0.7-0.el7_9.i686.rpm f3c1504a0f9e8be3e261212092e89009d8b01f3fe0f1804ed10e767846e87d26 java-11-openjdk-javadoc-11.0.12.0.7-0.el7_9.x86_64.rpm d17d23e9f3e2cd89c98f84ba07345a6c51f1dc3d67f5d52d483e6f2ed2d93751 java-11-openjdk-javadoc-zip-11.0.12.0.7-0.el7_9.i686.rpm 4c7a4b1402ce62b471994dd364f3e883167ad5ba8ebba01d67f8ceee2f63d6a5 java-11-openjdk-javadoc-zip-11.0.12.0.7-0.el7_9.x86_64.rpm 2596d8e58b7977e350ac45b39a8c22507bf5f23a48e5c5af3025b81016622b58 java-11-openjdk-jmods-11.0.12.0.7-0.el7_9.i686.rpm b346f29da69c21241a449decf0f47b1117502c6f136b70a23a24f1438e919766 java-11-openjdk-jmods-11.0.12.0.7-0.el7_9.x86_64.rpm f544bc64d6a690d2e5853b042cb5a8c7eb50879dacd1acf3c3eca69966d25370 java-11-openjdk-src-11.0.12.0.7-0.el7_9.i686.rpm c55fbad2b511346ebf2a848c75861a87c98b38738226ac74429144324281ef52 java-11-openjdk-src-11.0.12.0.7-0.el7_9.x86_64.rpm 8f21403b3615c8a3c67833bcb49d11b4c3b80d768a6bdba42abe5d2b299d9cb3 java-11-openjdk-static-libs-11.0.12.0.7-0.el7_9.i686.rpm 8319e904c4b86f6892579492778456a31dcdbb29d4f7b62060dba26486be2a85 java-11-openjdk-static-libs-11.0.12.0.7-0.el7_9.x86_64.rpm Source: 31ba75ab61265b2d9377e08747ee05ef445f4fb160a5d4e4f4d2d1b1bcb78b56 java-11-openjdk-11.0.12.0.7-0.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 4 ***********************************************

1 0

CentOS8 nouveau errors
by Bill Gee 21 Jul '21

21 Jul '21

I am running the stream version of CentOS 8 on a system that hosts a bunch of VirtualBox guests. Recently, like about a month ago, a problem started showing up. When working at the console, the system is almost completely unresponsive. In a terminal session, any key that you press might show up a minute later. Any mouse movement might show up a minute later. About every ten seconds the screen switches to a completely different display for maybe a few tens of milliseconds and then switches back. This happens so fast it is almost subliminal. The log fills with tens of thousands of messages per day that look like this: Jul 21 07:21:06 vmhost2 kernel: Hardware name: Supermicro C7SIM-Q/C7SIM-Q, BIOS 1.2a 06/02/2017 Jul 21 07:21:06 vmhost2 kernel: Workqueue: events_unbound nv50_disp_atomic_commit_work [nouveau] Jul 21 07:21:06 vmhost2 kernel: RIP: 0010:nv50_dmac_wait+0x1e1/0x230 [nouveau] Jul 21 07:21:06 vmhost2 kernel: Code: 8d 48 04 48 89 4a 68 c7 00 00 00 00 20 49 8b 46 38 41 c7 86 20 01 00 00 00 00 00 0 0 49 89 46 68 e8 d4 fc ff ff e9 76 fe ff ff <0f> 0b b8 92 ff ff ff e9 ed fe ff ff 49 8b be 80 00 00 00 e8 b7 fc Jul 21 07:21:06 vmhost2 kernel: RSP: 0018:ffff9ab3c2077d60 EFLAGS: 00010282 Jul 21 07:21:06 vmhost2 kernel: RAX: ffffffffffffff92 RBX: ffff9ab3c2077d60 RCX: 0000000000000000 Jul 21 07:21:06 vmhost2 kernel: RDX: ffffffffffffff92 RSI: ffff9ab3c2077ca0 RDI: ffff9ab3c2077d40 Jul 21 07:21:06 vmhost2 kernel: RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffc0365fd0 Jul 21 07:21:06 vmhost2 kernel: R10: 0000000000000006 R11: ffffffffc03733c0 R12: 00000000fffffffb Jul 21 07:21:06 vmhost2 kernel: R13: ffff8c141b820b68 R14: ffff8c141b820ba8 R15: ffff8c1144d21e00 Jul 21 07:21:06 vmhost2 kernel: FS: 0000000000000000(0000) GS:ffff8c142fd80000(0000) knlGS:0000000000000000 Jul 21 07:21:06 vmhost2 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Jul 21 07:21:06 vmhost2 kernel: CR2: 000055e49fe63ef0 CR3: 00000001a5410000 CR4: 00000000000006e0 Jul 21 07:21:06 vmhost2 kernel: Call Trace: Jul 21 07:21:06 vmhost2 kernel: base507c_update+0x2f/0x70 [nouveau] Jul 21 07:21:06 vmhost2 kernel: nv50_disp_atomic_commit_wndw.isra.16+0x5f/0x80 [nouveau] Jul 21 07:21:06 vmhost2 kernel: nv50_disp_atomic_commit_tail+0x669/0x9b0 [nouveau] Jul 21 07:21:06 vmhost2 kernel: process_one_work+0x1a7/0x360 Jul 21 07:21:06 vmhost2 kernel: worker_thread+0x30/0x390 Jul 21 07:21:06 vmhost2 kernel: ? create_worker+0x1a0/0x1a0 Jul 21 07:21:06 vmhost2 kernel: kthread+0x116/0x130 Jul 21 07:21:06 vmhost2 kernel: ? kthread_flush_work_fn+0x10/0x10 Jul 21 07:21:06 vmhost2 kernel: ret_from_fork+0x35/0x40 Jul 21 07:21:06 vmhost2 kernel: ---[ end trace 43122b13e20cf558 ]--- Jul 21 07:21:08 vmhost2 kernel: nouveau 0000:01:00.0: DRM: base-0: timeout The daily logwatch report has thousands of lines like this: --------------------- Kernel Begin ------------------------ WARNING: Kernel Errors Present WARNING: CPU: 0 PID: 131209 at drivers/gpu/drm/n ...: 201 Time(s) WARNING: CPU: 0 PID: 131356 at drivers/gpu/drm/n ...: 450 Time(s) WARNING: CPU: 0 PID: 132285 at drivers/gpu/drm/n ...: 3 Time(s) WARNING: CPU: 0 PID: 15274 at drivers/gpu/drm/no ...: 1245 Time(s) WARNING: CPU: 0 PID: 15808 at drivers/gpu/drm/no ...: 144 Time(s) WARNING: CPU: 0 PID: 62 at drivers/gpu/drm/nouve ...: 1080 Time(s) WARNING: CPU: 1 PID: 131209 at drivers/gpu/drm/n ...: 336 Time(s) WARNING: CPU: 1 PID: 131356 at drivers/gpu/drm/n ...: 828 Time(s) WARNING: CPU: 1 PID: 132030 at drivers/gpu/drm/n ...: 18 Time(s) WARNING: CPU: 1 PID: 132285 at drivers/gpu/drm/n ...: 12 Time(s) WARNING: CPU: 1 PID: 15274 at drivers/gpu/drm/no ...: 903 Time(s) WARNING: CPU: 1 PID: 15808 at drivers/gpu/drm/no ...: 108 Time(s) (repeat for 2 megabytes of text) With all VB guests stopped, htop shows CPU usage in the range of 1% or less. Sessions opened by ssh run normally. Sessions opened to a guest with xrdp run normally. Guests do not report any errors in their log files. Where do I begin to troubleshoot something like this? Thanks - ======== Bill Gee

1 1

local privilege escalation in kernel and systemd
by Kenneth Porter 21 Jul '21

21 Jul '21

<https://www.bleepingcomputer.com/news/security/new-linux-kernel-bug-lets-yo…> Two related bugs involve mounting a very long path. The kernel bug requires passing a 1 GB path string, while the systemd bug involves an 8 MB path that overflows its stack. Technical details here: <https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/sequoia-…> <https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/cve-2021…>

1 0

CentOS IRC
by Earl Ramirez 20 Jul '21

20 Jul '21

Good day, Did CentOS moved from freenode to LibraIRC? -- Kind Regards, Earl A. Ramirez 2021-07-20T21:27:00 (PST +0800)

2 2

Warning: No matches found for: clamav on CentOS Linux release 7.9.2009 (Core)
by Kaushal Shriyan 20 Jul '21

20 Jul '21

Hi, I am running CentOS Linux release 7.9.2009 (Core) and installed epel repository. # rpm -qa | grep epel epel-release-7-13.noarch # cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) #yum search clamav Loaded plugins: fastestmirror Determining fastest mirrors * base: mirrors.piconets.webwerks.in * extras: mirrors.piconets.webwerks.in * updates: mirrors.piconets.webwerks.in base | 3.6 kB 00:00:00 docker-ce-stable | 3.5 kB 00:00:00 elastic-7.x | 1.3 kB 00:00:00 extras | 2.9 kB 00:00:00 ius | 1.3 kB 00:00:00 mariadb | 2.9 kB 00:00:00 nginx | 2.9 kB 00:00:00 updates | 2.9 kB 00:00:00 (1/10): base/7/x86_64/group_gz | 153 kB 00:00:00 (2/10): extras/7/x86_64/primary_db | 242 kB 00:00:00 (3/10): elastic-7.x/primary | 288 kB 00:00:00 (4/10): docker-ce-stable/7/x86_64/primary_db | 62 kB 00:00:00 (5/10): docker-ce-stable/7/x86_64/updateinfo | 55 B 00:00:00 (6/10): ius/x86_64/primary | 100 kB 00:00:01 (7/10): updates/7/x86_64/primary_db | 8.8 MB 00:00:04 (8/10): base/7/x86_64/primary_db | 6.1 MB 00:00:05 (9/10): nginx/7/x86_64/primary_db | 67 kB 00:00:04 (10/10): mariadb/primary_db | 36 kB 00:00:05 elastic-7.x 880/880 ius 467/467 Warning: No matches found for: clamav No matches found Am I missing anything? Please suggest further. Thanks in Advance. Best Regards, Kaushal

5 8

Samba Problem with AD Connection
by Mr Typo 17 Jul '21

17 Jul '21

Hello all, i hope you can help me. I have successfully set up a connection with samba to my domain controller. What works: * wbinfo -u / wbinfo -g * wbinfo -a * bet ads info i hope you can help me! thank you! ============ net ads info LDAP server: 10.40.130.10 LDAP server name: sv1-dc01p.pfw.local Realm: PFW.LOCAL Bind Path: dc=PFW,dc=LOCAL LDAP port: 389 Server time: Sat, 17 Jul 2021 13:32:03 CEST KDC server: 10.40.130.10 Server time offset: 0 Last machine account password change: Sat, 17 Jul 2021 10:55:08 CEST =========== ======== wbinfo -a srvadmsar Enter srvadmsar's password: plaintext password authentication succeeded Enter srvadmsar's password: challenge/response password authentication succeeded ======= when i try to connect with smbclient and a domain user i get the error SPNEGO login failed: The attempted logon is invalid. This is either due to a bad username or authentication information. session setup failed: NT_STATUS_LOGON_FAILURE in the Logfiles ob the samba server i get a NT_STATUS_OK (when i join with a domain joined windows system, i get NT_STATUS_OK, but windows then wants a username and password. below you can find the logs from /var/log/samba/* i hope you can help me, i am trying for hours... ==> /var/log/samba/log.127.0.0.1 <== [2021/07/17 13:38:05.792287, 5] ../../source3/param/loadparm.c:1396(free_service) free_service: Freeing service shareshare [2021/07/17 13:38:05.792319, 5] ../../source3/param/loadparm.c:1396(free_service) free_service: Freeing service IPC$ [2021/07/17 13:38:05.792339, 3] ../../source3/param/loadparm.c:3945(lp_load_ex) lp_load_ex: refreshing parameters [2021/07/17 13:38:05.792349, 5] ../../source3/param/loadparm.c:1371(free_param_opts) Freeing parametrics: [2021/07/17 13:38:05.792434, 3] ../../source3/param/loadparm.c:551(init_globals) Initialising global parameters [2021/07/17 13:38:05.792535, 3] ../../source3/param/loadparm.c:2847(lp_do_section) Processing section "[global]" doing parameter workgroup = PFW doing parameter realm = PFW.LOCAL doing parameter security = ads doing parameter password server = 10.40.130.10 doing parameter idmap config * : backend = autorid doing parameter idmap config * : range = 100000-19999999 doing parameter idmap config * : rangesize = 1000000 doing parameter template homedir = /home/%D/%U doing parameter template shell = /bin/bash doing parameter winbind use default domain = true doing parameter ntlm auth = yes doing parameter winbind offline logon = true doing parameter log file = /var/log/samba/log.%m doing parameter max log size = 50 doing parameter log level = 5 [2021/07/17 13:38:05.792740, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 doing parameter load printers = no [2021/07/17 13:38:05.792873, 2] ../../source3/param/loadparm.c:2864(lp_do_section) Processing section "[shareshare]" doing parameter path = /storage/share doing parameter browsable = yes doing parameter writable = yes doing parameter read only = no doing parameter guest ok = yes doing parameter valid users = PFW\SRVADMSAR [2021/07/17 13:38:05.792992, 4] ../../source3/param/loadparm.c:3987(lp_load_ex) pm_process() returned Yes [2021/07/17 13:38:05.793023, 3] ../../source3/param/loadparm.c:1648(lp_add_ipc) adding IPC service [2021/07/17 13:38:05.793057, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 [2021/07/17 13:38:05.793459, 2] ../../source3/lib/interface.c:345(add_interface) added interface ens192 ip=192.168.110.104 bcast=192.168.110.255 netmask=255.255.255.0 [2021/07/17 13:38:05.793493, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.793563, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.793659, 3] ../../source3/smbd/oplock.c:1427(init_oplocks) init_oplocks: initializing messages. [2021/07/17 13:38:05.793672, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 774 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793681, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 778 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793692, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 770 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793700, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 801 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793706, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 787 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793713, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 779 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793723, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2021/07/17 13:38:05.793740, 5] ../../source3/lib/messages.c:740(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2021/07/17 13:38:05.793751, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2021/07/17 13:38:05.793762, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 16 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793773, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x55fecf14d350 [2021/07/17 13:38:05.793783, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 33 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793793, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2021/07/17 13:38:05.793804, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 790 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793815, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2021/07/17 13:38:05.793826, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2021/07/17 13:38:05.793836, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2021/07/17 13:38:05.793889, 3] ../../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 214 (0 toread) [2021/07/17 13:38:05.793943, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:05.793963, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:05.793979, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:05.794013, 5] ../../source3/smbd/uid.c:494(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2021/07/17 13:38:05.794036, 4] ../../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2021/07/17 13:38:05.794045, 4] ../../source3/smbd/uid.c:562(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2021/07/17 13:38:05.794056, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2021/07/17 13:38:05.794064, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:05.794070, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:05.794125, 4] ../../source3/smbd/sec_ctx.c:438(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:05.794151, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 [2021/07/17 13:38:05.794366, 3] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot) Selected protocol SMB3_11 [2021/07/17 13:38:05.794393, 5] ../../source3/auth/auth.c:540(make_auth3_context_for_ntlm) Making default auth method list for server role = 'domain member' [2021/07/17 13:38:05.794417, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend anonymous [2021/07/17 13:38:05.794436, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'anonymous' [2021/07/17 13:38:05.794450, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam [2021/07/17 13:38:05.794467, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam' [2021/07/17 13:38:05.794480, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2021/07/17 13:38:05.794493, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2021/07/17 13:38:05.794501, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam_netlogon3 [2021/07/17 13:38:05.794517, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam_netlogon3' [2021/07/17 13:38:05.794529, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend winbind [2021/07/17 13:38:05.794539, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'winbind' [2021/07/17 13:38:05.794549, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match anonymous [2021/07/17 13:38:05.794560, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method anonymous has a valid init [2021/07/17 13:38:05.794571, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2021/07/17 13:38:05.794582, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam has a valid init [2021/07/17 13:38:05.794593, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind [2021/07/17 13:38:05.794604, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method winbind has a valid init [2021/07/17 13:38:05.794611, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam_ignoredomain [2021/07/17 13:38:05.794617, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam_ignoredomain has a valid init [2021/07/17 13:38:05.794730, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC mechanism spnego [2021/07/17 13:38:05.794813, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC submechanism gse_krb5 ==> /var/log/samba/log.smbd <== [2021/07/17 13:38:05.791006, 2] ../../source3/lib/tallocmsg.c:84(register_msg_pool_usage) Registered MSG_REQ_POOL_USAGE [2021/07/17 13:38:05.791086, 5] ../../source3/passdb/pdb_interface.c:155(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2021/07/17 13:38:05.791103, 5] ../../source3/passdb/pdb_interface.c:176(make_pdb_method_name) Found pdb backend tdbsam [2021/07/17 13:38:05.791143, 5] ../../source3/passdb/pdb_interface.c:187(make_pdb_method_name) pdb backend tdbsam has a valid init [2021/07/17 13:38:05.791248, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.791344, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.791502, 3] ../../lib/util/access.c:371(allow_access) Allowed connection from 127.0.0.1 (127.0.0.1) [2021/07/17 13:38:05.791563, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 ==> /var/log/samba/log.127.0.0.1 <== [2021/07/17 13:38:08.966773, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:08.966824, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:08.966839, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:08.966873, 5] ../../source3/smbd/uid.c:494(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2021/07/17 13:38:08.966910, 5] ../../lib/dbwrap/dbwrap.c:148(dbwrap_lock_order_lock) dbwrap_lock_order_lock: check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967145, 5] ../../lib/dbwrap/dbwrap.c:180(dbwrap_lock_order_unlock) dbwrap_lock_order_unlock: release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967170, 5] ../../source3/auth/auth.c:540(make_auth3_context_for_ntlm) Making default auth method list for server role = 'domain member' [2021/07/17 13:38:08.967183, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match anonymous [2021/07/17 13:38:08.967216, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method anonymous has a valid init [2021/07/17 13:38:08.967239, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2021/07/17 13:38:08.967251, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam has a valid init [2021/07/17 13:38:08.967261, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind [2021/07/17 13:38:08.967271, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method winbind has a valid init [2021/07/17 13:38:08.967281, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam_ignoredomain [2021/07/17 13:38:08.967292, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam_ignoredomain has a valid init [2021/07/17 13:38:08.967388, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC mechanism spnego [2021/07/17 13:38:08.967406, 5] ../../lib/dbwrap/dbwrap.c:148(dbwrap_lock_order_lock) dbwrap_lock_order_lock: check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967430, 5] ../../lib/dbwrap/dbwrap.c:180(dbwrap_lock_order_unlock) dbwrap_lock_order_unlock: release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967442, 4] ../../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2021/07/17 13:38:08.967451, 4] ../../source3/smbd/uid.c:562(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2021/07/17 13:38:08.967462, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2021/07/17 13:38:08.967472, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:08.967479, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:08.967550, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2021/07/17 13:38:08.967586, 3] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x62088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM ==> /var/log/samba/log.wb-PFW <== [2021/07/17 13:38:08.969578, 4] ../../source3/winbindd/winbindd_dual.c:1626(child_handler) child daemon request 14 [2021/07/17 13:38:08.969608, 3] ../../source3/winbindd/winbindd_pam.c:2683(winbindd_dual_pam_auth_crap) [10364]: pam auth crap domain: PFW user: srvadmsar [2021/07/17 13:38:08.969741, 5] ../../source3/rpc_client/cli_pipe.c:827(rpc_api_pipe_send) rpc_api_pipe: host sv1-dc01p.pfw.local [2021/07/17 13:38:08.969754, 5] ../../source3/rpc_client/cli_pipe.c:179(rpc_write_send) rpc_write_send: data_to_write: 696 [2021/07/17 13:38:08.970968, 5] ../../source3/rpc_client/cli_pipe.c:99(rpc_read_send) rpc_read_send: data_to_read: 632 [2021/07/17 13:38:08.971188, 5] ../../source3/winbindd/winbindd_pam.c:2640(winbind_dual_SamLogon) NTLM CRAP authentication for user [PFW]\[srvadmsar] returned NT_STATUS_OK [2021/07/17 13:38:08.971291, 3] ../../auth/auth_log.c:653(log_authentication_event_human_readable) Auth: [winbind,NTLM_AUTH, smbd, 10364] user [PFW]\[srvadmsar] at [Sat, 17 Jul 2021 13:38:08.971273 CEST] with [NTLMv2] status [NT_STATUS_OK] workstation [SMBTEST-ANDI] remote host [unix:] became [PFW]\[srvadmsar] [S-1-5-21-4080695503-475066264-1108356078-1126]. local host [unix:] {"timestamp": "2021-07-17T13:38:08.971345+0200", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4624, "logonId": "7944426e07973722", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": "unix:", "remoteAddress": "unix:", "serviceDescription": "winbind", "authDescription": "NTLM_AUTH, smbd, 10364", "clientDomain": "PFW", "clientAccount": "srvadmsar", "workstation": "SMBTEST-ANDI", "becameAccount": "srvadmsar", "becameDomain": "PFW", "becameSid": "S-1-5-21-4080695503-475066264-1108356078-1126", "mappedAccount": null, "mappedDomain": null, "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1758}} [2021/07/17 13:38:08.971423, 4] ../../source3/winbindd/winbindd_dual.c:1634(child_handler) Finished processing child request 14 ==> /var/log/samba/log.winbindd <== [2021/07/17 13:38:08.969181, 3] ../../source3/winbindd/winbindd_misc.c:432(winbindd_interface_version) winbindd_interface_version: [smbd (10448)]: request interface version (version = 31) [2021/07/17 13:38:08.969319, 3] ../../source3/winbindd/winbindd_misc.c:470(winbindd_priv_pipe_dir) winbindd_priv_pipe_dir: [smbd (10448)]: request location of privileged pipe [2021/07/17 13:38:08.969346, 3] ../../source3/winbindd/winbindd_misc.c:483(winbindd_priv_pipe_dir) winbindd_priv_pipe_dir: [smbd (10448)]: response location of privileged pipe: (null) [2021/07/17 13:38:08.969496, 3] ../../source3/winbindd/winbindd_pam_auth_crap.c:113(winbindd_pam_auth_crap_send) [10448]: pam auth crap domain: [PFW] user: srvadmsar [2021/07/17 13:38:08.973296, 3] ../../source3/winbindd/winbindd_misc.c:407(winbindd_ping) winbindd_ping: [smbd (10448)]: ping

1 0

CentOS-announce Digest, Vol 196, Issue 3
by centos-announce-request＠centos.org 16 Jul '21

16 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2741 Important CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 15 Jul 2021 22:22:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2741 Important CentOS 7 firefox Security Update Message-ID: <20210715222246.GA25165(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2741 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2741 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d09bdd004c3fac87661119d619afb43d9ad9824ef8a2e58fa51c55f0211f12d9 firefox-78.12.0-1.el7.centos.i686.rpm 6a6db0a030199ad5a8e0edde0f8458ca5391f94ac4ccd7a93c3c186326026cc3 firefox-78.12.0-1.el7.centos.x86_64.rpm Source: fd28ed7ab0523d22a76adadf6f4da17f29f7bba08cc83e43af80bf3e0bd490b0 firefox-78.12.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 3 ***********************************************

1 0

Centos 8 two network cards
by Ken Smith 15 Jul '21

15 Jul '21

Hi folks, I'm a bit confused about how to set up two network cards in different LANS in C8. I've done this multiple times in Centos6 and lower, but in the NetworkManager/systemd world I'm all at sea without any charts. (I'm sure there's a HKLM in there somewhere -sorry ;-)) and my Googlefoo is failing me this evening. Via the GUI it will let me configure one device or the other but not both :-( Anyway I want one NIC with IP 10.100.0.2/24 and GW 10.100.0.1 and the other with IP 10.2.0.2/24 and no gateway. I've seen a method that removes NetworkManager and installs network-scripts then configures the ifcfg-eth0 and ifcfg-eth1 scripts. Interestingly the devices seem to be still called eth0 & 1 on this system which happens to be a VM. When I use this method the systemctl start network appears not to be able to find eth1. Is there a recommended way to do this? I'd prefer to use 'approved' techniques rather than work arounds. Any suggestions? Thanks Ken -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 3

CentOS-announce Digest, Vol 196, Issue 2
by centos-announce-request＠centos.org 14 Jul '21

14 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2683 Important CentOS 7 xstream Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 13 Jul 2021 21:13:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2683 Important CentOS 7 xstream Security Update Message-ID: <20210713211330.GA23228(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2683 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2683 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0930a501a892602ab5d8c48730193fa5230e46803b8b20533482a6322014c898 xstream-1.3.1-14.el7_9.noarch.rpm 24dee6e8be939b14900bb668c0f5908df2590d8188545bd59c83122ddcd7a785 xstream-javadoc-1.3.1-14.el7_9.noarch.rpm Source: 0d289851834f7f2542e8bdb62092d92004f1a02bd2d700aac88c9a83017a1baa xstream-1.3.1-14.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 2 ***********************************************

1 0

Server monitoring
by H 11 Jul '21

11 Jul '21

I want to install open-source software on my hosted CentOS 7 server to monitor the system in general, as well as logs, apache webserver, MySQL and PostgreSQL to begin with. I know there are a multitude of packages available and would be interested in hearing if others have a favorite package? My preference is for a graphical interface where it is easy to follow a variety of load measures but also provides alerts etc. Suggestions appreciated!

7 7

Re: [CentOS] Auditing all Linux clients with centralised server
by Adrian van Bloois 10 Jul '21

10 Jul '21

Ever heard of ossec? Se: www.ossec.net -- Adri P. van Bloois "The greatest threat to our planet is the belief that someone else will save it." Robert Swan.

1 0

Centos versions in the future?
by Carlos Oliva 09 Jul '21

09 Jul '21

Will there be newer versions of Centos? We have heard rumors that version 8 will be the last one. We are concerned with using an OS that will loose support in the future. Thank you.

29 107

Auditing all Linux clients with centralised server
by Kaushal Shriyan 09 Jul '21

09 Jul '21

Hi, I have 20 Linux servers in the network. Is there a way to audit all Linux clients using a centralized server? For example, what commands are run by John on Linuxnode1? Steve on Linuxnode15? and so on and so forth to track user activity. Which files have been modified or edited or commands etc...... by the users. I have installed auditd, but it is local to the Linux server. Thanks in advance. Best Regards, Kaushal

7 9

CentOS-announce Digest, Vol 196, Issue 1
by centos-announce-request＠centos.org 08 Jul '21

08 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2658 Important CentOS 7 linuxptp Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 7 Jul 2021 18:17:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2658 Important CentOS 7 linuxptp Security Update Message-ID: <20210707181720.GA16669(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2658 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2658 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5d92d36050c5d7174cd65358882ce23f7eab51af6a02070c42917f77f9dcb3fe linuxptp-2.0-2.el7_9.1.x86_64.rpm Source: a0aa8a92f7fc0f029559b186db4016eaab076fb34c67d1aaf9bb54143ca62a9a linuxptp-2.0-2.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 1 ***********************************************

1 0

Audacity
by mark 08 Jul '21

08 Jul '21

I'm trying to record a reading of my just-published novel... and I'm underwhelmed. In KDE, I select multimedia->audacity, and it crashes. I can get it to run from a command line, but if I try to start "new", it crashes. When I was testing, and got the correct mike, then wanted to delete what I'd done and actually start, it crashes. This is as installed, nothing odd. Recommendations (other than reinstall)? mark

3 3

Sending mail from rkhunter
by H 08 Jul '21

08 Jul '21

I am having problems getting rkhunter to send the daily report to an outside email account under CentOS 7. I have installed postfix and fail2ban now sends ban messages as expected. I have googled but so far failed to identify the error in my setup: - /etc/aliases contain the correct mail alias for root - /etc/rkhunter.conf has REPORT_EMAIL=themailadress and MAIL-ON-WARNING=themailadress - /var/log/rkhunter/rkhunter.log does not contain any error messages What have I missed?

1 0

Problems with CentOS 8 kickstart
by Hooton, Gerard 07 Jul '21

07 Jul '21

Hi All, I am having problems with a kickstart install of CentOS 8 When I try to do a completely automated install using PXE/UEFI it get to the point where it reads the kickstart config file. Then I see the following message "kickstart install Started cancel waiting for multipath siblings for nvme0n1" This is what I have in the kickstart file # Clear the Master Boot Record zerombr # Partition clearing information clearpart --all --initlabel autopart --nohome --type=lvm --fstype=xfs ================ When I install from a USB drive it works OK and I have the following in /dev/disk/by-id lrwxrwxrwx. 1 root root 13 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810 -> ../../nvme0n1 lrwxrwxrwx. 1 root root 13 Jul 5 10:28 nvme-eui.002538b11102f46d -> ../../nvme0n1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 lvm-pv-uuid-5Dg4mg-saHa-hJJ6-n5a8-MxBS-gdFi-5jPoNn -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part2 UNG_MZVL2512HCJQ-0-> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part2 -> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part2 -> ../../nvme0n1p2 drwxr-xr-x. 2 root root 400 Jul 5 10:28 . lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkKtEdtLjwJQyIdxJcSvPv8TEAjwYGMv6yU -> ../../dm-0 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkKAooqrczySYJyiHvUAUji9oScPN2cVi7J -> ../../dm-1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-swap -> ../../dm-1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-root -> ../../dm-0 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkK5HZXbR2ow5xKGuD7jVe4UPzZm2qRLLXI -> ../../dm-2 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-home -> ../../dm-2 It's looks like that I am not doing the disk drive stuff in the config file correctly. -- Gerard Hooton. Senior Technical Officer School of Engineering. University College Cork. College Road. Cork. Ireland. Loc8: WDR-04-60G Tel: +353 21 4902296 Mobile: +353 852813491

2 6

Re: [CentOS] CentOS Digest, Vol 198, Issue 6
by Anand Babu 07 Jul '21

07 Jul '21

Hi Leon, Thanks a lot for taking a look at my test and the suggestion. We have tested this suggestion echo never > /sys/kernel/mm/transparent_hugepage/enabled Unfortunately, the Ram usage was the same with this option changed as well. Just to give some additional context to the original question to all, We see 10-25 percent more RSS on CentOS 8 ( as compared to CentOS 7) for the same Java vm process that we are benchmarking . And in that case , the RSS growth for the executable and the shared library of our application is considerably higher. Perhaps, for the big server use cases the rss growth did not matter, but for us, we are trying to use it in an embedded scenario and this is a major issue. We will be glad to hear any further suggestions/ tests that we could check to further understand the differences between the 2 versions. Regards, -Anand On Wed, Jul 7, 2021, 5:30 PM <centos-request(a)centos.org> wrote: > Send CentOS mailing list submissions to > centos(a)centos.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.centos.org/mailman/listinfo/centos > or, via email, send a message with subject or body 'help' to > centos-request(a)centos.org > > You can reach the person managing the list at > centos-owner(a)centos.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of CentOS digest..." > > > Today's Topics: > > 1. RSS usage on centos8.4 is higher for user-application > compared to centos7.9 (Anand Babu) > 2. Re: RSS usage on centos8.4 is higher for user-application > compared to centos7.9 (Leon Fauster) > 3. Re: Centos versions in the future? (Nikolaos Milas) > 4. Re: Centos versions in the future? (J Martin Rushton) > 5. Re: Centos versions in the future? (Nikolaos Milas) > 6. Re: Centos versions in the future? (Leon Fauster) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 6 Jul 2021 15:02:49 +0200 > From: Anand Babu <mail2anand(a)gmail.com> > To: centos(a)centos.org > Subject: [CentOS] RSS usage on centos8.4 is higher for > user-application compared to centos7.9 > Message-ID: > <CAB5++c4-Z= > 7FheHD02RW6YLP6d-trwCqqQqvDdAKsoBZF4tbUg(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > Hi Centos Community, > > This is my first time here and I apologize in advance if I made a mistake > here and hope you will correct me , if i made any. > > > With that said, > > This is a native example that was written to narrow down the higher RAM > usage that we see when we are using Centos8 as opposed to Centos7. > > The c-code is very small and looks like this : > > #include<stdio.h> > > #include<unistd.h> > > int main() > > { > > pause(); > > return 0; > > } > > I compile and run the binary on centos7 and memory backed section of pmap > output looks like below: > > pmap -X $(pidof sleep) | head -n -2 | awk '{ if (NR > 2 && $5 > 0 ) > printf "%12s %8s %8s %4s %s\n", $1, $6, $7, $2,$13}' > 00400000 4 4 r-xp sleep > 00600000 4 4 r--p sleep > 00601000 4 4 rw-p sleep*7f54514f9000 1808 > 204 r-xp libc-2.17.so <http://libc-2.17.so> > *7f54516bd000 2044 0 ---p libc-2.17.so > 7f54518bc000 16 16 r--p libc-2.17.so > 7f54518c0000 8 8 rw-p libc-2.17.so > 7f54518c7000 136 108 r-xp ld-2.17.so > 7f5451ae8000 4 4 r--p ld-2.17.so > 7f5451ae9000 4 4 rw-p ld-2.17.so > > and ps says the following: > > ** ps -o rss= pidof sleep 352** > > Running the same binary on centos8 leads to > > ** ps -o rss= pidof pause 784 ** > > and the pmap output looks like below: > > 00400000 4 4 r-xp pause > 00600000 4 4 r--p pause > 00601000 4 4 rw-p pause* 7f24029a8000 1776 > 788 r-xp libc-2.28.so <http://libc-2.28.so> * > 7f2402b64000 2044 0 ---p libc-2.28.so > 7f2402d63000 16 16 r--p libc-2.28.so > 7f2402d67000 8 8 rw-p libc-2.28.so > 7f2402d6d000 176 176 r-xp ld-2.28.so > 7f2402f99000 4 4 r--p ld-2.28.so > 7f2402f9a000 8 8 rw-p ld-2.28.so > > For running the same executable, the libc.so takes 788KB(204KB on centos7). > > Note: > > 1. > > This is not the only library that is showing this behavior, but we see > the same behavior for other shared-library as well as executables that > were > compiled on centos7. Running the same executables/shared objects take a > higher amount of pages on centos8 than on centos7. > 2. > > Since the glibc version on Centos8 was 2.28 , i have compiled 2.17 > version and then used patchelf to patch the centos7 built binary to make > use of 2.17 glibc on centos8 host like patchelf --set-interpreter > > > /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib/ld-linux-x86-64.so.2 > --set-rpath /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib > /tmp/pause > > and then run it under LD_DEBUG=libs and verified the 2.17 version of libc > libraries were used and still the memory usage on centos8 was higher than > on centos7 (about the same numbers as above). > > What could be the reason for the higher RAM usage on centos8 vs centos7? I > can imagine some defaults have changed on centos8 and that has meant this > impact and i could change this default and could reproduce the same RSS > numbers on centos8 as well? > > > I am posting my environment details in the P.S below. > > Regards, > > -Anand > > > P.S: > > cat /etc/centos-release > > CentOS Linux release 8.4.2105 > > [root@localhost RSS_measurement]# cat /etc/centos-release > > CentOS Linux release 7.9.2009 (Core) > > I am running both the centos versions under Virtualbox. > > > ------------------------------ > > Message: 2 > Date: Tue, 6 Jul 2021 17:59:11 +0200 > From: Leon Fauster <leonfauster(a)googlemail.com> > To: centos(a)centos.org > Subject: Re: [CentOS] RSS usage on centos8.4 is higher for > user-application compared to centos7.9 > Message-ID: <4e84ea30-9d8b-2e9d-a898-e469303a537c(a)gmail.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 06.07.21 15:02, Anand Babu wrote: > > Hi Centos Community, > > > > This is my first time here and I apologize in advance if I made a mistake > > here and hope you will correct me , if i made any. > > > > > > With that said, > > > > This is a native example that was written to narrow down the higher RAM > > usage that we see when we are using Centos8 as opposed to Centos7. > > > > The c-code is very small and looks like this : > > > > #include<stdio.h> > > > > #include<unistd.h> > > > > int main() > > > > { > > > > pause(); > > > > return 0; > > > > } > > > > I compile and run the binary on centos7 and memory backed section of pmap > > output looks like below: > > > > pmap -X $(pidof sleep) | head -n -2 | awk '{ if (NR > 2 && $5 > 0 ) > > printf "%12s %8s %8s %4s %s\n", $1, $6, $7, $2,$13}' > > 00400000 4 4 r-xp sleep > > 00600000 4 4 r--p sleep > > 00601000 4 4 rw-p sleep*7f54514f9000 1808 > > 204 r-xp libc-2.17.so <http://libc-2.17.so> > > *7f54516bd000 2044 0 ---p libc-2.17.so > > 7f54518bc000 16 16 r--p libc-2.17.so > > 7f54518c0000 8 8 rw-p libc-2.17.so > > 7f54518c7000 136 108 r-xp ld-2.17.so > > 7f5451ae8000 4 4 r--p ld-2.17.so > > 7f5451ae9000 4 4 rw-p ld-2.17.so > > > > and ps says the following: > > > > ** ps -o rss= pidof sleep 352** > > > > Running the same binary on centos8 leads to > > > > ** ps -o rss= pidof pause 784 ** > > > > and the pmap output looks like below: > > > > 00400000 4 4 r-xp pause > > 00600000 4 4 r--p pause > > 00601000 4 4 rw-p pause* 7f24029a8000 1776 > > 788 r-xp libc-2.28.so <http://libc-2.28.so> * > > 7f2402b64000 2044 0 ---p libc-2.28.so > > 7f2402d63000 16 16 r--p libc-2.28.so > > 7f2402d67000 8 8 rw-p libc-2.28.so > > 7f2402d6d000 176 176 r-xp ld-2.28.so > > 7f2402f99000 4 4 r--p ld-2.28.so > > 7f2402f9a000 8 8 rw-p ld-2.28.so > > > > For running the same executable, the libc.so takes 788KB(204KB on > centos7). > > > > Note: > > > > 1. > > > > This is not the only library that is showing this behavior, but we > see > > the same behavior for other shared-library as well as executables > that were > > compiled on centos7. Running the same executables/shared objects > take a > > higher amount of pages on centos8 than on centos7. > > 2. > > > > Since the glibc version on Centos8 was 2.28 , i have compiled 2.17 > > version and then used patchelf to patch the centos7 built binary to > make > > use of 2.17 glibc on centos8 host like patchelf --set-interpreter > > > > > /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib/ld-linux-x86-64.so.2 > > --set-rpath /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib > > /tmp/pause > > > > and then run it under LD_DEBUG=libs and verified the 2.17 version of libc > > libraries were used and still the memory usage on centos8 was higher than > > on centos7 (about the same numbers as above). > > > > What could be the reason for the higher RAM usage on centos8 vs centos7? > I > > can imagine some defaults have changed on centos8 and that has meant this > > impact and i could change this default and could reproduce the same RSS > > numbers on centos8 as well? > > > > > > How does the results look like after doing: > > echo never > /sys/kernel/mm/transparent_hugepage/enabled > > -- > Leon > > > > ------------------------------ > > Message: 3 > Date: Wed, 7 Jul 2021 12:44:15 +0300 > From: Nikolaos Milas <nmilas(a)noa.gr> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Centos versions in the future? > Message-ID: <6b3c136f-5aae-1b0a-e65c-868377875f7a(a)noa.gr> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 30/4/2021 7:27 ?.?., Gionatan Danti wrote: > > > > > The correct answer is to buy RH: fine. But do not let Stream touch > > anything which require a kABI compatible modules. As said above, the > > Stream move is squarely addresses *cloud* vendor requests and needs. > > Again, fine. But please leave apart the RH comparison, this is not > > going to help Stream. > > > > Again, don't let me wrong: I wishes the best to Stream, and I will use > > it where appropriate. But "where" is much smaller today than > > yesterday. But this aside, I really thank you all CentOS maintainer > > for your monumental work, and I really hope Stream will be a success. > > I re-visit this thread, since it is crucial for CentOS 8 users. > > RESF / Rocky Linux is gaining worldwide recognition and sets itself as > the primary organization / platform to become the CentOS 8 heir / > successor in the future. > > Google and Microsoft become RESF sponsors/partners: > > https://rockylinux.org/news/community-update-june-2021/ > > And so IBM/RH lose the tremendous advantage they had by owning the > CentOS project, which - it seems - never evaluated correctly. > > From now on, it is clear that hundreds of thousands of CentOS > installations will be migrating to Rocky Linux. > > I also wish the best of success to CentOS Stream, but this is not what > the CentOS community expected. > > My 2c. > Nick > > > > ------------------------------ > > Message: 4 > Date: Wed, 7 Jul 2021 10:47:16 +0100 > From: J Martin Rushton <martinrushton56(a)btinternet.com> > To: centos(a)centos.org > Subject: Re: [CentOS] Centos versions in the future? > Message-ID: <e6298010-bece-df14-98d0-9f8b5e04e8e2(a)btinternet.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > There's also Alma, which is where I've gone after being with CentOS > since 5.3 > > On 07/07/2021 10:44, Nikolaos Milas wrote: > > On 30/4/2021 7:27 ?.?., Gionatan Danti wrote: > > > >> > >> The correct answer is to buy RH: fine. But do not let Stream touch > >> anything which require a kABI compatible modules. As said above, the > >> Stream move is squarely addresses *cloud* vendor requests and needs. > >> Again, fine. But please leave apart the RH comparison, this is not > >> going to help Stream. > >> > >> Again, don't let me wrong: I wishes the best to Stream, and I will use > >> it where appropriate. But "where" is much smaller today than > >> yesterday. But this aside, I really thank you all CentOS maintainer > >> for your monumental work, and I really hope Stream will be a success. > > > > I re-visit this thread, since it is crucial for CentOS 8 users. > > > > RESF / Rocky Linux is gaining worldwide recognition and sets itself as > > the primary organization / platform to become the CentOS 8 heir / > > successor in the future. > > > > Google and Microsoft become RESF sponsors/partners: > > > > ?? https://rockylinux.org/news/community-update-june-2021/ > > > > And so IBM/RH lose the tremendous advantage they had by owning the > > CentOS project, which - it seems - never evaluated correctly. > > > > From now on, it is clear that hundreds of thousands of CentOS > > installations will be migrating to Rocky Linux. > > > > I also wish the best of success to CentOS Stream, but this is not what > > the CentOS community expected. > > > > My 2c. > > Nick > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > -- > J Martin Rushton MBCS > > > ------------------------------ > > Message: 5 > Date: Wed, 7 Jul 2021 13:07:12 +0300 > From: Nikolaos Milas <nmilas(a)noa.gr> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Centos versions in the future? > Message-ID: <ce7e72f7-7159-78ee-4576-e75e806025f7(a)noa.gr> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 7/7/2021 12:47 ?.?., J Martin Rushton via CentOS wrote: > > > There's also Alma, which is where I've gone after being with CentOS > > since 5.3 > > AlmaLinux is a great project too, IMHO, but things show that the new > industry standard (replacing CentOS) will probably be Rocky Linux. > > (Yes, RHEL **AND** CentOS have indeed been industry standards - the > point of reference -, IMHO, and this is what IBM/RHEL have failed to > realize: You don't alter a point of reference.) > > It is interesting to see what Service Providers will do with their (huge > numbers of) CentOS installations, when they migrate... > > From the users/admins' perspective it is to their interest to have > robust and healthy alternatives. > > In our org, I am now using Rocky Linux on new installations (without > issues) and will be migrating several CentOS 8 boxes to Rocky Linux as > well. > > Cheers, > Nick > > > > ------------------------------ > > Message: 6 > Date: Wed, 7 Jul 2021 12:28:58 +0200 > From: Leon Fauster <leonfauster(a)googlemail.com> > To: centos(a)centos.org > Subject: Re: [CentOS] Centos versions in the future? > Message-ID: <9d2d8304-6779-a452-1a8b-62c58d7722e1(a)gmail.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 07.07.21 12:07, Nikolaos Milas wrote: > > On 7/7/2021 12:47 ?.?., J Martin Rushton via CentOS wrote: > > > >> There's also Alma, which is where I've gone after being with CentOS > >> since 5.3 > > > > AlmaLinux is a great project too, IMHO, but things show that the new > > industry standard (replacing CentOS) will probably be Rocky Linux. > > > > (Yes, RHEL **AND** CentOS have indeed been industry standards - the > > point of reference -, IMHO, and this is what IBM/RHEL have failed to > > realize: You don't alter a point of reference.) > > > It should not be forgotten that Rocky Linux will be a 1:1 rebuild, also > in the future. So, to shape this future everyone is invited to > participate at CentOS Stream. This is a great future or not? > > > > > It is interesting to see what Service Providers will do with their (huge > > numbers of) CentOS installations, when they migrate... > > > > From the users/admins' perspective it is to their interest to have > > robust and healthy alternatives. > > > > In our org, I am now using Rocky Linux on new installations (without > > issues) and will be migrating several CentOS 8 boxes to Rocky Linux as > > well. > > > > Cheers, > > Nick > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > > > ------------------------------ > > End of CentOS Digest, Vol 198, Issue 6 > ************************************** >

1 0

RSS usage on centos8.4 is higher for user-application compared to centos7.9
by Anand Babu 06 Jul '21

06 Jul '21

Hi Centos Community, This is my first time here and I apologize in advance if I made a mistake here and hope you will correct me , if i made any. With that said, This is a native example that was written to narrow down the higher RAM usage that we see when we are using Centos8 as opposed to Centos7. The c-code is very small and looks like this : #include<stdio.h> #include<unistd.h> int main() { pause(); return 0; } I compile and run the binary on centos7 and memory backed section of pmap output looks like below: pmap -X $(pidof sleep) | head -n -2 | awk '{ if (NR > 2 && $5 > 0 ) printf "%12s %8s %8s %4s %s\n", $1, $6, $7, $2,$13}' 00400000 4 4 r-xp sleep 00600000 4 4 r--p sleep 00601000 4 4 rw-p sleep*7f54514f9000 1808 204 r-xp libc-2.17.so <http://libc-2.17.so> *7f54516bd000 2044 0 ---p libc-2.17.so 7f54518bc000 16 16 r--p libc-2.17.so 7f54518c0000 8 8 rw-p libc-2.17.so 7f54518c7000 136 108 r-xp ld-2.17.so 7f5451ae8000 4 4 r--p ld-2.17.so 7f5451ae9000 4 4 rw-p ld-2.17.so and ps says the following: ** ps -o rss= pidof sleep 352** Running the same binary on centos8 leads to ** ps -o rss= pidof pause 784 ** and the pmap output looks like below: 00400000 4 4 r-xp pause 00600000 4 4 r--p pause 00601000 4 4 rw-p pause* 7f24029a8000 1776 788 r-xp libc-2.28.so <http://libc-2.28.so> * 7f2402b64000 2044 0 ---p libc-2.28.so 7f2402d63000 16 16 r--p libc-2.28.so 7f2402d67000 8 8 rw-p libc-2.28.so 7f2402d6d000 176 176 r-xp ld-2.28.so 7f2402f99000 4 4 r--p ld-2.28.so 7f2402f9a000 8 8 rw-p ld-2.28.so For running the same executable, the libc.so takes 788KB(204KB on centos7). Note: 1. This is not the only library that is showing this behavior, but we see the same behavior for other shared-library as well as executables that were compiled on centos7. Running the same executables/shared objects take a higher amount of pages on centos8 than on centos7. 2. Since the glibc version on Centos8 was 2.28 , i have compiled 2.17 version and then used patchelf to patch the centos7 built binary to make use of 2.17 glibc on centos8 host like patchelf --set-interpreter /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib/ld-linux-x86-64.so.2 --set-rpath /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib /tmp/pause and then run it under LD_DEBUG=libs and verified the 2.17 version of libc libraries were used and still the memory usage on centos8 was higher than on centos7 (about the same numbers as above). What could be the reason for the higher RAM usage on centos8 vs centos7? I can imagine some defaults have changed on centos8 and that has meant this impact and i could change this default and could reproduce the same RSS numbers on centos8 as well? I am posting my environment details in the P.S below. Regards, -Anand P.S: cat /etc/centos-release CentOS Linux release 8.4.2105 [root@localhost RSS_measurement]# cat /etc/centos-release CentOS Linux release 7.9.2009 (Core) I am running both the centos versions under Virtualbox.

2 1

Centos 8 crypto-policy to get SSL Labs A rating
by Adrian Jenzer 05 Jul '21

05 Jul '21

Dear Community I try to get an SSL Labs A rating for my CentOS8 Apache-server. I'am sure it has to do with my lack of understanding the crypto-policies configuration, can anybody give me an advice where i am wrong? My understanding is that the configuration in the pmod-file will override the ssl.conf values if PROFILE=SYSTEM is active. *** # Current runtime policy dump # DEFAULT:HTTPS arbitrary_dh_groups = 1 cipher = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 AES-256-CTR AES-256-CBC AES-128-GCM AES-128-CCM AES-128-CTR AES-128-CBC group = X25519 X448 SECP256R1 SECP384R1 SECP521R1 FFDHE-2048 FFDHE-3072 FFDHE-4096 FFDHE-6144 FFDHE-8192 hash = SHA2-256 SHA2-384 SHA2-512 SHA3-256 SHA3-384 SHA3-512 SHA2-224 SHA1 ike_protocol = IKEv2 key_exchange = ECDHE DHE DHE-RSA DHE-PSK ECDHE-PSK ECDHE-GSS DHE-GSS mac = AEAD HMAC-SHA2-256 HMAC-SHA1 UMAC-128 HMAC-SHA2-384 HMAC-SHA2-512 min_dh_size = 2048 min_dsa_size = 2048 min_dtls_version = DTLS1.2 min_rsa_size = 2048 min_tls_version = TLS1.2 protocol = TLS1.3 TLS1.2 DTLS1.2 sha1_in_certs = 1 sign = ECDSA-SHA3-256 ECDSA-SHA2-256 ECDSA-SHA3-384 ECDSA-SHA2-384 ECDSA-SHA3-512 ECDSA-SHA2-512 EDDSA-ED25519 EDDSA-ED448 RSA-PSS-SHA2-256 RSA-PSS-SHA2-384 RSA-PSS-SHA2-512 RSA-SHA3-256 RSA-SHA2-256 RSA-SHA3-384 RSA-$ ssh_certs = 1 ssh_cipher = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 CAMELLIA-256-GCM AES-256-CTR AES-256-CBC CAMELLIA-256-CBC AES-128-GCM AES-128-CCM CAMELLIA-128-GCM AES-128-CTR AES-128-CBC CAMELLIA-128-CBC ssh_etm = 1 ssh_group = X25519 X448 SECP256R1 SECP384R1 SECP521R1 FFDHE-2048 FFDHE-3072 FFDHE-4096 FFDHE-6144 FFDHE-8192 tls_cipher = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 AES-256-CBC AES-128-GCM AES-128-CCM AES-128-CBC *** cat /etc/crypto-policies/policies/modules/HTTPS.pmod cipher = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 *** Part of /etc/httpd/conf.d/ssl.conf *** # SSL Engine Switch: # Enable/Disable SSL for this virtual host. SSLEngine on # List the protocol versions which clients are allowed to connect with. # The OpenSSL system profile is used by default. See # update-crypto-policies(8) for more details. #SSLProtocol all -SSLv3 #SSLProxyProtocol all -SSLv3 SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2 # User agents such as web browsers are not configured for the user's # own preference of either security or performance, therefore this # must be the prerogative of the web server administrator who manages # cpu load versus confidentiality, so enforce the server's cipher order. SSLHonorCipherOrder on # SSL Cipher Suite: # List the ciphers that the client is permitted to negotiate. # See the mod_ssl documentation for a complete list. # The OpenSSL system profile is configured by default. See # update-crypto-policies(8) for more details. SSLCipherSuite PROFILE=SYSTEM #SSLProxyCipherSuite PROFILE=SYSTEM #SSLCipherSuite HIGH:!aNULL:!MD5 #SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256 Thanks for any hint! Adrian

3 4

BTRFS to ext4
by Christopher Wensink 05 Jul '21

05 Jul '21

Hello Everyone, We have two virtual machines running CentOS 7, one for file sharing and one for email. Both base Filesystems run BTRFS. I need to convert both filesystems over from BTRFS to ext4. Both guest VM's are in a vmware environment on the same server. The file server has 2.8 TB of space total allocated to it, 2.1 TB of total used space The mail server has 2TB allocated to it, and 982 GB of total used space. The host it is attached to has 13.97 TB of total usable space, with 3.4 TB free. What steps would you go through to migrate the file systems over? Would you set up a duplicate VM and rsync data over? Expand the capacity of the existing VM, add a new partition then move data over from one partition to another from within the same VM? What are your thoughts? -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

3 2

Two directories for 8.4.2105 and 8-stream in the centos mirrors
by Burn Alting 05 Jul '21

05 Jul '21

Recently, it appears that two directories for 8.4 and 8-stream are being distributed in the Centos mirrors. You can't see it if you view the mirrors, but if one downloads the filelist.gz file and grep for '^\.\/\.' one will see the directories, with content, .8.4.2105 and .8-stream. Can this be explained? An error or a new distribution concept?? Rgds

1 0

[C8 stream] update
by Helmut Drodofsky 01 Jul '21

01 Jul '21

Hello, actual, C8 stream update only with exclude platform-python-pip-9.0.3-20.el8.noarch net-snmp* ? -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2021