Discuss February 2022

discuss@lists.centos.org

47 participants
33 discussions

Any downside to mount -o noatime?
by Kenneth Porter 11 Feb '22

11 Feb '22

I'd like to reduce the wear-and-tear on my SSDs and eliminate the unnecessary metadata writes on my backup media that only slow down the backup process. So I want to add noatime to all my mounts. Is there any downside to this? At one time I remember atime being useful for tmpwatch, which removes files in /tmp that haven't been accessed in a week or two. But I can live without that feature.

5 12

Re: [CentOS] Any downside to mount -o noatime?
by Joshua Kramer 11 Feb '22

11 Feb '22

You may get just as much SSD "savings" by putting /var/log and /tmp into a RAM disk. I do this with all of my Raspberry Pi's, since SD cards burn through pretty quickly, and I have several that haven't had their SD cards replaced in a couple years. On Wed, Feb 9, 2022 at 5:10 PM Kenneth Porter <shiva(a)sewingwitch.com> wrote: > I'd like to reduce the wear-and-tear on my SSDs and eliminate the > unnecessary metadata writes on my backup media that only slow down the > backup process. So I want to add noatime to all my mounts. Is there any > downside to this? > > At one time I remember atime being useful for tmpwatch, which removes > files > in /tmp that haven't been accessed in a week or two. But I can live > without > that feature. > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos >

1 0

[CentOS Stream 8] Update of IPA server broken - bind-dyndb-ldap needs to be rebuilt?
by Mathieu Baudier 10 Feb '22

10 Feb '22

Hello, We are testing an IPA/IDM infrastructure which is a mix of RHEL 8 and CentOS Stream 8 environments. The configuration has been completed since last summer, and it is working fine between updates. Currently, the CentOS Stream 8 IPA servers cannot upgrade. I put the whole error message below, but after analyzing a bit, it seems to be that the problem is between: bind-dyndb-ldap (for which there is no new update) and bind-libs-lite (for which a new update is available) $ sudo dnf upgrade bind-libs-lite* Error: Problem: problem with installed package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 - package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 requires libdns.so.1112()(64bit), but none of the providers can be installed - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-6.el8.x86_64 - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-3.el8.x86_64 - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-4.el8_4.x86_64 - cannot install the best update candidate for package bind-libs-lite-32:9.11.26-6.el8.x86_64 The update bind-libs-lite (32:9.11.36-2) seems to offer: /usr/lib64/libdns.so.1115 while bind-dyndb-ldap (11.6-2.module_el8.5.0+750+c59b186b) seems to still require precisely: /usr/lib64/libdns.so.1112 $ sudo dnf provides */libdns.so* ... bind-libs-lite-32:9.11.26-6.el8.x86_64 : Libraries for working with the DNS protocol Repo : @System Matched from: Filename : /usr/lib64/libdns.so.1112 Filename : /usr/lib64/libdns.so.1112.0.2 ... bind-libs-lite-32:9.11.36-2.el8.x86_64 : Libraries for working with the DNS protocol Repo : appstream Matched from: Filename : /usr/lib64/libdns.so.1115 Filename : /usr/lib64/libdns.so.1115.0.3 ... $ sudo dnf list bind-libs-lite bind-dyndb-ldap Installed Packages bind-dyndb-ldap.x86_64 11.6-2.module_el8.5.0+750+c59b186b @appstream bind-libs-lite.x86_64 32:9.11.26-6.el8 @appstream Available Packages bind-libs-lite.i686 32:9.11.36-2.el8 appstream bind-libs-lite.x86_64 32:9.11.36-2.el8 appstream Please note that, of course, the module stream idm:DL1 is enabled: $ sudo dnf module list idm* CentOS Stream 8 - AppStream Name Stream Profiles Summary idm DL1 [e] adtrust, client, common [d], dns [i], server The Red Hat Enterprise Linux Identity Management system module idm client [d] common [d] RHEL IdM long term support client module Also, as can be expected, these updates are not yet available on the *RHEL 8* IPA servers: $ sudo dnf list bind-libs-lite bind-dyndb-ldap Updating Subscription Management repositories. Installed Packages bind-dyndb-ldap.x86_64 11.6-2.module+el8.4.0+9328+4ec4e316 @rhel-8-for-x86_64-appstream-rpms bind-libs-lite.x86_64 32:9.11.26-6.el8 @rhel-8-for-x86_64-appstream-rpms Available Packages bind-libs-lite.i686 32:9.11.26-6.el8 rhel-8-for-x86_64-appstream-rpms So, is there any workaround, or should we simply wait for the IPA/IDM server DL1 module stream to be updated? (there are updates of the ipa packages which are pending there, juts not bind-dyndb-ldap) Also, should I rather send such reports of our CentOS Stream testing to another mailing-list? (devel?) Or book them into Red Hat's bugzilla? Thanks in advance for your comments! Mathieu ## Full error log when trying to update a CentOS Stream 8 IPA/IDM server $ sudo ipactl status Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING httpd Service: RUNNING ipa-custodia Service: RUNNING ipa-otpd Service: RUNNING ipa-dnskeysyncd Service: RUNNING ipa: INFO: The ipactl command was successful $ sudo dnf upgrade --refresh CentOS Stream 8 - AppStream 13 kB/s | 4.4 kB 00:00 CentOS Stream 8 - BaseOS 26 kB/s | 3.9 kB 00:00 CentOS Stream 8 - Extras 15 kB/s | 3.0 kB 00:00 Error: Problem 1: package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 requires libdns.so.1112()(64bit), but none of the providers can be installed - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-6.el8.x86_64 - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-3.el8.x86_64 - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-4.el8_4.x86_64 - cannot install the best update candidate for package bind-libs-lite-32:9.11.26-6.el8.x86_64 - cannot install the best update candidate for package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 Problem 2: problem with installed package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 - package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 requires libdns.so.1112()(64bit), but none of the providers can be installed - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-6.el8.x86_64 - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-3.el8.x86_64 - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-4.el8_4.x86_64 - package bind-32:9.11.36-2.el8.x86_64 requires libdns.so.1115()(64bit), but none of the providers can be installed - package bind-32:9.11.36-2.el8.x86_64 requires bind-libs-lite(x86-64) = 32:9.11.36-2.el8, but none of the providers can be installed - cannot install the best update candidate for package bind-32:9.11.26-6.el8.x86_64 Problem 3: package ipa-server-dns-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch requires bind-dyndb-ldap >= 11.2-2, but none of the providers can be installed - package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 requires libdns.so.1112()(64bit), but none of the providers can be installed - package bind-dyndb-ldap-11.6-2.module_el8.4.0+639+a88aab78.x86_64 requires libdns.so.1112()(64bit), but none of the providers can be installed - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-6.el8.x86_64 - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-3.el8.x86_64 - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and bind-libs-lite-32:9.11.26-4.el8_4.x86_64 - package bind-libs-32:9.11.36-2.el8.x86_64 requires libdns.so.1115()(64bit), but none of the providers can be installed - package bind-libs-32:9.11.36-2.el8.x86_64 requires bind-libs-lite(x86-64) = 32:9.11.36-2.el8, but none of the providers can be installed - cannot install the best update candidate for package ipa-server-dns-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch - cannot install the best update candidate for package bind-libs-32:9.11.26-6.el8.x86_64 Problem 4: problem with installed package ipa-server-dns-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch - package ipa-server-dns-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch requires bind-dyndb-ldap >= 11.2-2, but none of the providers can be installed - package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 requires libdns.so.1112()(64bit), but none of the providers can be installed - package bind-dyndb-ldap-11.6-2.module_el8.4.0+639+a88aab78.x86_64 requires libdns.so.1112()(64bit), but none of the providers can be installed - package bind-libs-lite-32:9.11.26-6.el8.x86_64 requires bind-license = 32:9.11.26-6.el8, but none of the providers can be installed - package bind-libs-lite-32:9.11.26-3.el8.x86_64 requires bind-license = 32:9.11.26-3.el8, but none of the providers can be installed - package bind-libs-lite-32:9.11.26-4.el8_4.x86_64 requires bind-license = 32:9.11.26-4.el8_4, but none of the providers can be installed - cannot install both bind-license-32:9.11.36-2.el8.noarch and bind-license-32:9.11.26-6.el8.noarch - cannot install both bind-license-32:9.11.36-2.el8.noarch and bind-license-32:9.11.26-3.el8.noarch - cannot install both bind-license-32:9.11.36-2.el8.noarch and bind-license-32:9.11.26-4.el8_4.noarch - cannot install the best update candidate for package bind-license-32:9.11.26-6.el8.noarch (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

3 4

Email Notification of updates which are available to be applied on CentOS Linux release 7.9.2009 (Core)
by Kaushal Shriyan 09 Feb '22

09 Feb '22

Hi, I am running the below open source components on CentOS Linux release 7.9.2009 (Core) 1. nginx service 2. mysql service 3. php framework 4. pph-fpm service 5. composer A Dependency Manager for PHP Is there a way to notify via email if there are any new security updates available for CentOS Linux release 7.9.2009 along with the above open source components which are running? Currently, I am manually running the *yum -y update* command to update the OS along with the above open source components. I have tried for yum-updatesd - Update notifier daemon but it is not available for CentOS Linux release 7.9.2009 (Core). Thanks in advance. I look forward to hearing from you. More info:- https://linux.die.net/man/8/yum-updatesd Best Regards, Kaushal

5 4

CentOS-announce Digest, Vol 202, Issue 3
by centos-announce-request＠centos.org 09 Feb '22

09 Feb '22

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2022:0473 Important CentOS 7 aide Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 8 Feb 2022 23:31:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0473 Important CentOS 7 aide Security Update Message-ID: <20220208233143.GA28824(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0473 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:0473 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e00e4e27e76a7ce874a947e6df6282be03c80787552e9101d00197dc467c0182 aide-0.15.1-13.el7_9.1.x86_64.rpm Source: 9a2c3381dea205aafa6593afa062b62b7659783b72f822cd20909cf80b4a524b aide-0.15.1-13.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 202, Issue 3 ***********************************************

1 0

CentOS-announce Digest, Vol 202, Issue 2
by centos-announce-request＠centos.org 08 Feb '22

08 Feb '22

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2022:0442 Important CentOS 7 log4j Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 7 Feb 2022 16:47:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0442 Important CentOS 7 log4j Security Update Message-ID: <20220207164744.GA17797(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0442 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:0442 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 1b461b4e217ac5f51d8990aad583c7f189e73fd3220a54053124772b83c42eba log4j-1.2.17-18.el7_4.noarch.rpm e4950b148639895cb3ed78b8a00c0708abe4685bd380e0003ebeb947ea1edc42 log4j-javadoc-1.2.17-18.el7_4.noarch.rpm 7bbf77456d5e310210c4bd541fee70097c26568f34f44184c878e5874e2b57f1 log4j-manual-1.2.17-18.el7_4.noarch.rpm Source: c4224181672eede65a1b3d8f829c9ed475cade9b7234f58c03994f39459ca732 log4j-1.2.17-18.el7_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 202, Issue 2 ***********************************************

1 0

c9s: CPU ISA level lower than required
by Alessio 07 Feb '22

07 Feb '22

Hello. I had a CentOS Stream 9 installation in a KVM VM. Today a "dnf upgrade" lead to an unusable system: dnf, rpm commands complain that "glibc cpu does not support x86-64-v2" or "CPU ISA level is lower than required". The updates leading to this state seem to be: python3 3.9.10-1, glibc 2.34-21, rpm 4.16.1.3-10 What happened? Thanks, A.

5 9

Migrating / upgrading CentOS Linux 8 to CentOS Stream release 8
by Götz Reinicke 07 Feb '22

07 Feb '22

Hi, is it still possible to migrating / upgrading CentOS Linux 8 to CentOS Stream release 8 ? Any hint is welcome! Right now I do get errors: dnf install centos-release-stream CentOS Linux 8 - AppStream 111 B/s | 38 B 00:00 Fehler: Failed to download metadata for repo 'appstream': Cannot prepare internal mirrorlist: No URLs in mirrorlist Thanks for any suggestions. /Götz

3 3

CentOS 7.9: No authentication after samba update
by Gerhard Schneider 06 Feb '22

06 Feb '22

We are using FreeIPA for Linux accounts and a Windows DC for Windows accounts. Users were able to access their Linux file systems from Windows using their windows user name and password. After upgrading samba from samba-4.10.16-7.el7_9.x86_64 to samba-4.10.16-18.el7_9.x86_64 users cannot authenticate and I get the following error message: 1.2.3.4.log: ../../source3/auth/auth_util.c:1889(check_account) check_account: Failed to convert SID S-1-5-21-xxxxxxx-xxxxxxx-xxxxxxx-1158 to a UID (dom_user[DOMAIN\username]) Winbind is still running My smb.conf: [global] netbios name = HOSTNAME security = ADS workgroup = DOMAIN realm = DOMAIN.FULL.NAME socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=131072 SO_SNDBUF=131072 use sendfile = true dns proxy = no log file = /var/log/samba/%m.log max log size = 50 log level = 1 client signing = required server signing = auto [Tmpdisk] comment = TMP-Disk public = yes path = /tmp browsable = Yes read only = No Nothing else updated or changed. What do I miss? This setup was working for years.. Thank you in advance! Gerhard Schneider -- Gerhard Schneider Institute of Lightweight Design and e-Mail: gs(a)ilsb.tuwien.ac.at Structural Biomechanics (E317) Tel.: +43 1 58801 31716 TU Wien / Vienna / Austria Fax: +43 1 58801 31799 A-1060 Wien, Gumpendorfer Straße 7 http://www.ilsb.tuwien.ac.at/~gs/

1 1

Assitance with perl
by H 03 Feb '22

03 Feb '22

I am writing a long bash script under CentOS 7 where perl is used for manipulating some external files. So far I am using perl one-liners to do so but ran into a problem when I need to append text to an external file. Here is a simplified example in the bash script where txt is a bash variable which I built containing a longish text with multiple newlines: txt="a b$'\n'cd ef$'\n'g h$'\n'ij kl" A simplified perl one-liner to append the text in the variable above to some file in the bash script would be: perl -pe 'eof && do{print $_'"${txt}"'; exit}' someexternalfile.txt This works when fine when $txt does /not/ contain any spaces but falls apart when it does. I would like to keep the above structure, ie using bash variables to build text strings and one-liners to do the text manipulation. Hopefully there is a "simple" solution to do this, I have tried many variations and failed miserably... Note that I also want to use a similar pattern to do substitutions in external files, I would thus like to use the same code pattern. Thanks.

6 12

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2022