March 2022 - Discuss - lists.centos.org

Memory vs. Display Card
by Rick 28 Oct '25

28 Oct '25

Since memory has become quite cheap lately I decided to move from 2 GB to 6. When I installed the memory every thing was fine until I went to run level 5. At that point the screen turned to garbage and the system froze. Is there a way to fix this so I can use the memory I bought? Do I need a new display card? Current hardware: Intel D975XBX2 Motherboard VGA compatible controller: ATI Technologies Inc RV505 [Radeon X1550 64-bit] -- http://www.spinics.net/lists/

13 19

SSD for Centos SWAP /tmp & /var/ partition
by Keith Roberts 03 Sep '25

03 Sep '25

Has anyone actually used a SSD in a Centos setup? My little experiment with a s/h WD drive for /tmp and SWAP partitions kicked the bucket on Wednesday, when the poor WD drive caught the click-of-death. It was a s/h drive to start with and lasted about 4 months. But that was without the /var/log/ partition being written to it, as I mounted that back onto /var/log from the original drive. So I had to install another (WD) drive, and repartion it and rebuild my RPM package database, from the backed-up Packages file. That seems to be all OK now. I'm wondering if it would be a good idea to use a new SSD for moving all the disk i/o to, that Linux likes to do so often. Plus putting SWAP onto a decent SSD should speed things up somewhat. Here's a short video of a laptop fitted with a SSD drive booting macOS, compared to a similar laptop booting from the standard HDD. The laptop with the SSD boots and loads some apps in 28 seconds. The other one takes twice as long. http://eshop.macsales.com/shop/SSD/OWC/Mercury_Extreme_Pro_6G/?utm_source=t… Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

33 96

Problems with CentOS 8 kickstart
by Hooton, Gerard 23 Jun '25

23 Jun '25

Hi All, I am having problems with a kickstart install of CentOS 8 When I try to do a completely automated install using PXE/UEFI it get to the point where it reads the kickstart config file. Then I see the following message "kickstart install Started cancel waiting for multipath siblings for nvme0n1" This is what I have in the kickstart file # Clear the Master Boot Record zerombr # Partition clearing information clearpart --all --initlabel autopart --nohome --type=lvm --fstype=xfs ================ When I install from a USB drive it works OK and I have the following in /dev/disk/by-id lrwxrwxrwx. 1 root root 13 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810 -> ../../nvme0n1 lrwxrwxrwx. 1 root root 13 Jul 5 10:28 nvme-eui.002538b11102f46d -> ../../nvme0n1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 lvm-pv-uuid-5Dg4mg-saHa-hJJ6-n5a8-MxBS-gdFi-5jPoNn -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part2 UNG_MZVL2512HCJQ-0-> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part2 -> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part2 -> ../../nvme0n1p2 drwxr-xr-x. 2 root root 400 Jul 5 10:28 . lrwxrwxrwx. 1 root root 15 Jul 5 10:28 wwn-eui.002538b11102f46d-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-SAMSUNG_MZVL2512HCJQ-00BL7_S64KNE0R161810-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jul 5 10:28 nvme-eui.002538b11102f46d-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkKtEdtLjwJQyIdxJcSvPv8TEAjwYGMv6yU -> ../../dm-0 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkKAooqrczySYJyiHvUAUji9oScPN2cVi7J -> ../../dm-1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-swap -> ../../dm-1 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-root -> ../../dm-0 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-uuid-LVM-qQok4M7AOo1TxZZ42GwZcbuVNBs0hnkK5HZXbR2ow5xKGuD7jVe4UPzZm2qRLLXI -> ../../dm-2 lrwxrwxrwx. 1 root root 10 Jul 5 11:07 dm-name-cs_uews027-home -> ../../dm-2 It's looks like that I am not doing the disk drive stuff in the config file correctly. -- Gerard Hooton. Senior Technical Officer School of Engineering. University College Cork. College Road. Cork. Ireland. Loc8: WDR-04-60G Tel: +353 21 4902296 Mobile: +353 852813491

3 7

Issues booting centos7 [dracut is failing to enable centos/root, centos/swap LVs]
by Yannis Milios 01 Feb '25

01 Feb '25

Hello, I'm having a strange problem booting a new centos7 installation. Below some background on this. [I have attached the tech details at the bottom of this message] I started a new CentOS7 installation on a VM, so far all good, o/s boots fine. Then I decided to increase VM disk size (initially was 10G) to 13G. Powered off the VM, increased the vhd via the hypervisor, booted from CentOS livecd, selected "recover my centos installation". Then I used the following sequence of commands to make the new vhd size "visible" to the o/s ... - ran fdisk /dev/sda and deleted partition 2. (This is the LVM partition where the o/s is stored. The first partition is /boot [xfs] partition *non lvm*.) - created a new partition with same starting sector as before deleting it, but a different ending sector (to reflect to the increased space). - set partition type to 8e (lvm), saved settings and exit. - ran pvresize and lvresize to make new space visible to the o/s.All good, I can see the space increase on 'lvdisplay centos/root'. - ran 'mount /dev/mapper/centos-root /mnt/root' to temporarily mount the o/s partition. - ran 'xfs_growfs /mnt/root' to resize the o/s fs to the new size. It was successful and I could actually chroot to the o/s and verify new disk size. - rebooted and tried to boot from hdd this time. Grub menu shows up and loads default kernel (3.10.0-862.9.1.el7.x86_64). - after initial kernel boot up process, booting continues to initrd and then it's where the problem starts... - looks like dracut has issues locating/enabling /dev/mapper/centos-root (lv) and as a result it cannot boot to the 'real' root fs (/). - while in dracut shell, I execute the following command sequence: 1. lvm lvchange -ay /dev/centos/root 2. lvm lvchange -ay /dev/centos/swap 3. ln -s /dev/mapper/centos-root /dev/root 4. exit ...and the o/s boots fine...so looks like the pv,vg,lv is detected properly while in initrd, but somehow dracut has difficulties enabling the root,swap LVs ? - While in o/s, I rebuild initrd by using: 'dracut -f -v -a lvm' Note, I have to use '-a lvm' as for some reason, if don't, the lvm utils (lvm,lvm_scan) are not being included to the initrd, not sure why this happens. After rebooting, same thing happens, I have to manually boot the system via dracut shell. I'm a bit stuck at this point, any clues what I'm doing wrong in here ? As I previously said, this is a new installation, so I could simply reinstall the whole thing, but I would rather try to find out some answer to why is this happening ... :-) [curiosity] Some additional details: ================== I've attached /run/initramfs/rdsosreport.txt file [generated while in inird] here: https://privatebin.net/?fdc4052c0c402884#gdB/QYR3IeR55SxUbjfrkZPQfJ7jMxiUxq… o/s ver=CentOS Linux release 7.5.1804 (Core) [root@localhost ~]# lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda 8:0 0 13G 0 disk ├─sda1 8:1 0 500M 0 part /boot └─sda2 8:2 0 12.5G 0 part ├─centos-root 253:0 0 11.5G 0 lvm / └─centos-swap 253:1 0 1G 0 lvm [SWAP] [root@localhost ~]# cat /etc/default/grub GRUB_TIMEOUT=5 GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)" GRUB_DEFAULT=saved GRUB_DISABLE_SUBMENU=true GRUB_TERMINAL_OUTPUT="console" GRUB_CMDLINE_LINUX="rd.lvm.lv=centos/root rd.lvm.lv=centos/swap rd.shell rhgb" GRUB_DISABLE_RECOVERY="true"

4 11

OT:: Multiple PHP versions
by TE Dukes 22 Aug '22

22 Aug '22

Hello, Been trying to get multiple versions of PHP on a CentOS 7 machine, off and on for the past couple months. I have followed 5 or 6 different howtos but none work. They are very similar and they seems to be done on a fresh install as most do an apache install is the steps. I setup two virtualhosts one for PHP5.6 and one for PHP 7.4. When I create a file with phpinfo, it reports back 5.6.xxx on both sites. So, I'm wondering if I need to remove the existing PHP version that is included with CentOS? Any suggestions or a better way to do this? TIA

6 13

CentOS Linux Notifications for any changes in files or folders
by Kaushal Shriyan 26 Apr '22

26 Apr '22

Hi, I am running CentOS Linux release 7.9.2009 (Core). Is there a way to notify via email if any files or folders have been accessed, modified, or changed? Also, if somebody deletes or adds any files in a specific folder /opt. Sysadmin should be notified via email or Slack channel using an alerting mechanism. Please guide and suggest. Thanks in advance. Best Regards, Kaushal

5 6

Introducing CentOS Stream 9
by Johnny Hughes 05 Apr '22

05 Apr '22

Rich Bowen has posted a blog entry "Introducing CentOS Stream 9" https://blog.centos.org/2021/12/introducing-centos-stream-9/ More details here: https://centos.org/stream9/ Thanks, Johnny Hughes

5 13

CentOS-announce Digest, Vol 203, Issue 2
by centos-announce-request＠centos.org 30 Mar '22

30 Mar '22

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2022:1032 CentOS 7 tzdata BugFix Update (Johnny Hughes) 2. CESA-2022:1045 Important CentOS 7 httpd Security Update (Johnny Hughes) 3. CESA-2022:1066 Important CentOS 7 openssl Security Update (Johnny Hughes) 4. CESA-2022:0824 Critical CentOS 7 firefox Security Update (Johnny Hughes) 5. CESA-2022:0850 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 6. CESA-2022:1069 Important CentOS 7 expat Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 29 Mar 2022 13:34:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2022:1032 CentOS 7 tzdata BugFix Update Message-ID: <20220329133423.GA21687(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2022:1032 Upstream details at : https://access.redhat.com/errata/RHBA-2022:1032 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ef535692955e3b9dc14a633b487f86ba36720866a39c354e86275b7f23d6adba tzdata-2022a-1.el7.noarch.rpm 69bfe28a120aa3364ed2beefdae50126ff4e6b20ea1caf0f1054904964676724 tzdata-java-2022a-1.el7.noarch.rpm Source: 3f0438cb6e72b6f0d7005a2e2783c608cc8603a480718b38697ffdc675096223 tzdata-2022a-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 29 Mar 2022 13:35:36 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:1045 Important CentOS 7 httpd Security Update Message-ID: <20220329133536.GA22208(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:1045 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:1045 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 35fc790f76f1d12e738a6b5cd1438085704844f9c267638a15f9cc080376b10d httpd-2.4.6-97.el7.centos.5.x86_64.rpm 57e3a74cb68c72426ee6a022b286950bbc4ac0c0a450be5d5e07d0a0ac91fcc0 httpd-devel-2.4.6-97.el7.centos.5.x86_64.rpm a52b0985bc9791dee53f7a73f22051cc229824892249b53b748eaad81619a0bf httpd-manual-2.4.6-97.el7.centos.5.noarch.rpm 601f376aa7ef59f60e13ba11f0a9a7286b883a945173b5b829fe2e939b6b3d1e httpd-tools-2.4.6-97.el7.centos.5.x86_64.rpm 9bc8c09cfaaabcb254797b1579fccbbf5a7ac3febd8172c07ad6764c33c3270e mod_ldap-2.4.6-97.el7.centos.5.x86_64.rpm d69a242a1a58b858cffa727cb8193e2ccaf358421e81076cf5c96b4a5082d5f9 mod_proxy_html-2.4.6-97.el7.centos.5.x86_64.rpm 1cd1ae8c0b9506f0a8066d9b0a935712889175386de9909062d20b0523e2876b mod_session-2.4.6-97.el7.centos.5.x86_64.rpm e1558062e338ec19488115a645f60559e370f1ddbf06a4b6e522b9803ac21304 mod_ssl-2.4.6-97.el7.centos.5.x86_64.rpm Source: e7711bdac101195a87b7ceb1d05293aee71c10fdc9b7f662e593211c94448035 httpd-2.4.6-97.el7.centos.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 29 Mar 2022 13:36:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:1066 Important CentOS 7 openssl Security Update Message-ID: <20220329133631.GA22661(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:1066 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:1066 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 03b9fa607eacb360a4f21fe9861d8a7d571cf120e781d9e0c5639af4c8923a17 openssl-1.0.2k-25.el7_9.src.rpm 04f581972286e776f852cf380fd0a4c05af1556c3d62f8ad579d87985ee0467c openssl-1.0.2k-25.el7_9.x86_64.rpm 08396cb866f024b0054c16918fe544406f737f7ddefcecbda04ad29ab9a27a15 openssl-devel-1.0.2k-25.el7_9.i686.rpm 5989f8701c6fe912d154675a3f7ad276f5dccc5afc8ccce28405408ee673c16c openssl-devel-1.0.2k-25.el7_9.x86_64.rpm 7a1256ee4fd271d588649f70d8aa4492d3967b0afd9d82a145275924442baae0 openssl-libs-1.0.2k-25.el7_9.i686.rpm c01bfc1d06b6e8d39a0bb038993a565a42a4f152542fec05d266098c4206140f openssl-libs-1.0.2k-25.el7_9.x86_64.rpm 593df90370183706f3bc69451b1aa4c6cd88b0a4d1d3964bc1b8e621b3d67d97 openssl-perl-1.0.2k-25.el7_9.x86_64.rpm d2bc75a69afc2e940e2a933c55941d7c4f269ade992c161c681b9cd72ff158a4 openssl-static-1.0.2k-25.el7_9.i686.rpm 1adcef07e0e83f4fc27809eacf51bdd1d75267095f0cf92832e1d636e04e477c openssl-static-1.0.2k-25.el7_9.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Tue, 29 Mar 2022 13:53:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0824 Critical CentOS 7 firefox Security Update Message-ID: <20220329135309.GA2963(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0824 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2022:0824 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 078df219eb34b52cef5f93c17533da34f2eceaec30e85da8944716d38dfee196 firefox-91.7.0-3.el7.centos.i686.rpm 0b48a1dc6bd965ac5f800c44cf498da51c5fd0ec07bf16a07911d66f89932c4b firefox-91.7.0-3.el7.centos.x86_64.rpm Source: fe895a292e341716911619c187d5030176eda5d1c55869a61faf1cde01e442f1 firefox-91.7.0-3.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Tue, 29 Mar 2022 13:54:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0850 Important CentOS 7 thunderbird Security Update Message-ID: <20220329135414.GA3371(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0850 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:0850 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d75ace9160c666f8c11b19909fd788117c9134c9ec1c12c636f6a45ee642ed18 thunderbird-91.7.0-2.el7.centos.x86_64.rpm Source: f12b857c03422ca4fd610898acf959c554126e0038b0cff81d2fd9466b1532bd thunderbird-91.7.0-2.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Tue, 29 Mar 2022 22:31:03 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:1069 Important CentOS 7 expat Security Update Message-ID: <20220329223103.GA21014(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:1069 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:1069 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c653aaa3759f6c65e6ccf1dafa36096bf4821f315dbf756943730947258100ef expat-2.1.0-14.el7_9.i686.rpm b0179562abc1ff5d40c03661749ce4f7f4c7d58c428cecfc4a3711bfa98e6ec6 expat-2.1.0-14.el7_9.x86_64.rpm f4c0956c54c55adea5769904bb460f6ab64b017d31e9a73f0a047345be6dd6af expat-devel-2.1.0-14.el7_9.i686.rpm 301d479dffc9084746269cad6d9be379a3c01fafa139c9203aa5c98ca7e9d79e expat-devel-2.1.0-14.el7_9.x86_64.rpm a962654ff0fe134fdd88392c47a711e94bc84e08e27d0a7cb7d28e9150d2999a expat-static-2.1.0-14.el7_9.i686.rpm 46c46ba8573d8f101c53fe10179a66e853ec151d66f5dfb686fb60c5e75aa610 expat-static-2.1.0-14.el7_9.x86_64.rpm Source: 6c86a22138aaddd33328f353b445995e9a67f824e4cb25423b1e07b325142366 expat-2.1.0-14.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 203, Issue 2 ***********************************************

1 0

Updating a package to one from a different repository
by Kenneth Porter 29 Mar '22

29 Mar '22

At some point I updated fail2ban from a copr repo to get the latest release. That repo no longer exists but a newer version is available in EPEL. Is there a direct way to get yum to update using the different repo? Or do I need to save my config and DB, erase the old version, and install the new one from EPEL?

2 1

Compatible SATA controller needed
by Pete Geenhuizen 27 Mar '22

27 Mar '22

I'm trying to install Centos 8 on an older PC but it fails because the SATA controller isn't supported. Anyone have a source for a PCI/ePCI controller card that is compatible with Centos 8? Thanks Pete -- Unencumbered by the thought process. -- Click and Clack the Tappet brothers

4 5

kernel message format - how ?
by lejeczek 24 Mar '22

24 Mar '22

Hi guys. When kernel - I think - broadcasts messages, spits to console, I wonder how one controls that message format. I specifically think of what 'dmesg' offers for time parts of the message, eg. '--reltime' - so the same only persistent/default behavior. many thanks, L.

1 0

Cron and GNU parallel
by Joseph L. Casale 21 Mar '22

21 Mar '22

I am using parallel-20190922-1 from epel and when I run a job in cron such as /usr/bin/parallel /usr/bin/bash ::: a.sh b.sh c.sh I don't receive any mail regardless of all three scripts generating output. All other jobs in cron generate mail if they write to stdout or stderr. When the above is run at a terminal, I get the output from all three jobs grouped in the order they complete. I can't find any documentation for parallel that states the behavior when not running with a terminal. Anyone have any ideas? Thanks, jlc

1 0

Re: [CentOS] Updating a package to one from a different repository
by Fred 21 Mar '22

21 Mar '22

Delete the package then reinstall from EPEL??? On Mon, Mar 21, 2022, 10:33 Kenneth Porter <shiva(a)sewingwitch.com> wrote: > At some point I updated fail2ban from a copr repo to get the latest > release. That repo no longer exists but a newer version is available in > EPEL. Is there a direct way to get yum to update using the different repo? > Or do I need to save my config and DB, erase the old version, and install > the new one from EPEL? > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos >

1 0

TCP Sequence Number Approximation Based Denial of Service on CentOS Linux release 7.9.2009 (Core)
by Kaushal Shriyan 18 Mar '22

18 Mar '22

Hi, I have 3.10.0-1160.59.1.el7.x86_64 on CentOS Linux release 7.9.2009 (Core) running Nagios Monitoring system. We have run an external vulnerability scan today on this server. The vulnerability reports say the below details. I am not sure if I completely understand the below issue. CVSS base score:- 5.0 CVE-2004-0230 Severity : Medium TCP Sequence Number Approximation Based Denial of Service TCP provides stateful communications between hosts on a network. TCP sessions are established by a three-way handshake and use random 32-bit sequence and acknowledgement numbers to ensure the validity of traffic. A vulnerability was reported that may permit TCP sequence numbers to be more easily approximated by remote attackers. This issue affects products released by multiple vendors. The cause of the vulnerability is that affected implementations will accept TCP sequence numbers within a certain range, known as the acknowledgement range, of the expected sequence number for a packet in the session. This is determined by the TCP window size, which is negotiated during the three-way handshake for the session. Larger TCP window sizes may be set to allow for more throughput, but the larger the TCP window size, the more probable it is to guess a TCP sequence number that falls within an acceptable range. It was initially thought that guessing an acceptable sequence number was relatively difficult for most implementations given random distribution, making this type of attack impractical. However, some implementations may make it easier to successfully approximate an acceptable TCP sequence number, making these attacks possible with a number of protocols and implementations. This is further compounded by the fact that some implementations may support the use of the TCP Window Scale Option, as described in RFC 1323, to extend the TCP window size to a maximum value of 1 billion. This vulnerability will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset and effectively allowing for denial of service attacks. An attacker would exploit this issue by sending a packet to a receiving implementation with an approximated sequence number and a forged source IP address and TCP port. There are a few factors that may present viable target implementations, such as those which depend on long-lived TCP connections, those that have known or easily guessed IP address endpoints and those implementations with easily guessed TCP source ports. It has been noted that Border Gateway Protocol (BGP) is reported to be particularly vulnerable to this type of attack, due to the use of long-lived TCP sessions and the possibility that some implementations may use the TCP Window Scale Option. As a result, this issue is likely to affect a number of routing platforms. Another factor to consider is the relative difficulty of injecting packets into TCP sessions, as a number of receiving implementations will reassemble packets in order, dropping any duplicates. This may make some implementations more resistant to attacks than others. It should be noted that while a number of vendors have confirmed this issue in various products, investigations are ongoing and it is likely that many other vendors and products will turn out to be vulnerable as the issue is investigated further. Solution Please first check the results section below for the port number on which this vulnerability was detected. If that port number is known to be used for port-forwarding, then it is the backend host that is really vulnerable. Various implementations and products including Check Point, Cisco, Cray Inc, Hitachi, Internet Initiative Japan, Inc (IIJ), Juniper Networks, NEC, Polycom, and Yamaha are currently undergoing review. Contact the vendors to obtain more information about affected products and fixes. " http://packetstormsecurity.org/0404-advisories/246929.html" NISCC Advisory 236929 - Vulnerability Issues in TCP details the vendor patch status as of the time of the advisory, and identifies resolutions and workarounds. Refer to "http://www.kb.cert.org/vuls/id/415294" US-CERT Vulnerability Note VU#415294 and "http://osvdb.org/4030" OSVDB Article 4030 to obtain a list of vendors affected by this issue and a note on resolutions (if any) provided by the vendor. For Microsoft: Refer to " https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms…" MS05-019 and " https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms…" MS06-064 for further details. For SGI IRIX: Refer to " ftp://patches.sgi.com/support/free/security/advisories/20040905-01-P.asc" SGI Security Advisory 20040905-01-P For SCO UnixWare 7.1.3 and 7.1.1: Refer to " ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt" SCO Security Advisory SCOSA-2005.14 For Solaris (Sun Microsystems): The vendor has acknowledged the vulnerability; however a patch is not available. Refer to "http://www.kb.cert.org/vuls/id/JARL-5YGQAJ" Sun Microsystems, Inc. Information for VU#415294 to obtain additional details. Also, refer to "http://www.us-cert.gov/cas/techalerts/TA04-111A.html" TA04-111A for detailed mitigating strategies against these attacks. For NetBSD: Refer to " ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.a…" NetBSD-SA2004-006 For Cisco: Refer to " http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml" cisco-sa-20040420-tcp-ios.shtml . For Red Hat Linux: There is no fix available. Workaround: The following BGP-specific workaround information has been provided. For BGP implementations that support it, the TCP MD5 Signature Option should be enabled. Passwords that the MD5 checksum is applied to should be set to strong values and changed on a regular basis. Secure BGP configuration instructions have been provided for Cisco and Juniper at these locations: " http://www.cymru.com/Documents/secure-bgp-template.html" Secure Cisco IOS BGP Template " http://www.cymru.com/gillsr/documents/junos-bgp-template.pdf" JUNOS Secure BGP Template Additional Information Tested on port 80 with an injected SYN/RST offset by 16 bytes. Please guide/suggest. Thanks in advance. Best Regards, Kaushal

2 2

domain configuration does not support video model 'qxl
by Sudheer S 13 Mar '22

13 Mar '22

Hello, Using libvirt and qemu, I am trying to install CentOS Stream 8 guest on CentOS Stream 9. I get this error: Unable to complete install: 'unsupported configuration: domain configuration does not support video model 'qxl'' Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/asyncjob.py", line 65, in cb_wrapper callback(asyncjob, *args, **kwargs) File "/usr/share/virt-manager/virtManager/createvm.py", line 2001, in _do_async_install installer.start_install(guest, meter=meter) File "/usr/share/virt-manager/virtinst/install/installer.py", line 701, in start_install domain = self._create_guest( File "/usr/share/virt-manager/virtinst/install/installer.py", line 649, in _create_guest domain = self.conn.createXML(install_xml or final_xml, 0) File "/usr/lib/python3/dist-packages/libvirt.py", line 4389, in createXML raise libvirtError('virDomainCreateXML() failed') libvirt.libvirtError: unsupported configuration: domain configuration does not support video model 'qxl' Am I missing any package? Or having a misconfiguration? - Sudheer

1 0

CentOS 9 and gtk-spice
by Joshua Kramer 11 Mar '22

11 Mar '22

Hello- Before I open a bug report on this, I wanted to ask if there is a specific reason that spice-gtk is not in the OS repositories of EL9? It looks like I have to install the ovirt repositories before I get access to spice-gtk and its dependencies. Thanks! -JK

2 1

Autoreply: "CentOS Digest, Vol 206, Issue 9"
by mak＠jump.com.hk 11 Mar '22

11 Mar '22

Thank you for your email. Vincent Mak is no longer working at Jump. Please do not hesitate to contact samantha(a)jump.com.hk or gary(a)jump.com.hk with any enquiry you have.

2 1

session-*.scope: Succeeded. messages in log
by Emmett Culley 10 Mar '22

10 Mar '22

I am seeing a "Mar 10 07:20:01 avm4 systemd[1]: session-66528.scope: Succeeded." message in the log that happens once each minute, of course with different session number values". What is causing this and how can I stop them. Linux avm4.mydomain.com 4.18.0-358.el8.x86_64 #1 SMP Mon Jan 10 13:11:20 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux CentOS Stream 8 I could cause logwatch to ignore them, but I would like to understand why three of my server are producing these unnecessary log entries. Emmett

1 0

Process owned by a user running after logout
by Hooton, Gerard 10 Mar '22

10 Mar '22

After logout, process owned by the logged out user keep running. If a user connects using ssh and then, without starting any programs, signs out the following processes remain running 4 S Tom 1808940 1 0 80 0 - 22440 do_epo 11:08 ? 00:00:00 /usr/lib/systemd/systemd --user 5 S Tom 1808943 1808940 0 80 0 - 75441 - 11:08 ? 00:00:00 (sd-pam) 0 S Tom 1809033 1 0 80 0 - 108596 x64_sy 11:08 ? 00:00:00 gio monitor -f /run/systemd/sessions/13496 0 S Tom 1809062 1808940 0 80 0 - 16095 do_epo 11:08 ? 00:00:00 /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only This only applies to users who use ssh, when using the system console [Gnome 3 desktop] all processes own by a user stop when that user signs out. I have a number of users who use the computer for remote access and the number of these running process grows over a few weeks. I am using CentOS Stream 8. Kernel : 4.18.0-365.el8.x86_64 #1 SMP Thu Feb 10 16:11:23 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

2 3

Autoreply: "CentOS Digest, Vol 206, Issue 7"
by mak＠jump.com.hk 07 Mar '22

07 Mar '22

Thank you for your email. Vincent Mak is no longer working at Jump. Please do not hesitate to contact samantha(a)jump.com.hk or gary(a)jump.com.hk with any enquiry you have.

1 0

Open source Pastebin service
by Kaushal Shriyan 07 Mar '22

07 Mar '22

Hi, Is there any open source Pastebin service that can be set up in the private LAN or Internal network? I am running CentOS Linux release 7.9.2009 (Core) in my internal LAN network. Thanks in advance. Best Regards, Kaushal

4 3

Autoreply: "CentOS Digest, Vol 206, Issue 5"
by mak＠jump.com.hk 05 Mar '22

05 Mar '22

Thank you for your email. Vincent Mak is no longer working at Jump. Please do not hesitate to contact samantha(a)jump.com.hk or gary(a)jump.com.hk with any enquiry you have.

1 0

vault.centos.org down
by Christopher Wensink 04 Mar '22

04 Mar '22

Is anyone else having issues getting to vault.centos.org right now? I'm getting connection timed out on the web page, but I can ping the server: $ ping vault.centos.org PING vault.centos.org (54.186.51.210) 56(84) bytes of data. 64 bytes from ec2-54-186-51-210.us-west-2.compute.amazonaws.com (54.186.51.210): icmp_seq=1 ttl=25 time=67.1 ms 64 bytes from ec2-54-186-51-210.us-west-2.compute.amazonaws.com (54.186.51.210): icmp_seq=2 ttl=25 time=66.6 ms 64 bytes from ec2-54-186-51-210.us-west-2.compute.amazonaws.com (54.186.51.210): icmp_seq=3 ttl=25 time=67.6 ms Chris -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

6 8

CentOS-announce Digest, Vol 203, Issue 1
by centos-announce-request＠centos.org 03 Mar '22

03 Mar '22

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2022:0666 Important CentOS 7 cyrus-sasl Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 2 Mar 2022 15:03:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0666 Important CentOS 7 cyrus-sasl Security Update Message-ID: <20220302150329.GA5936(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0666 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:0666 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5a07757ffcab76dc74eef1e1537c4ea823f723bae2c05ab1dd29679d95478db1 cyrus-sasl-2.1.26-24.el7_9.i686.rpm 8180d23815951b3c5be397846577728116502dad35bbc2dd67b7c4188244e465 cyrus-sasl-2.1.26-24.el7_9.x86_64.rpm cf7edef3f54d6a2816515812d2f679ae21bbfb26767bf64e34b73d19a3bce3ae cyrus-sasl-devel-2.1.26-24.el7_9.i686.rpm b2e43341cc469f66b5495139b62a419c0c671b19535efcdc79df055cc43686e5 cyrus-sasl-devel-2.1.26-24.el7_9.x86_64.rpm 46f713cd31041330e2739c5a644e4f598536096f3e39d6c667a6d044eaa87893 cyrus-sasl-gs2-2.1.26-24.el7_9.i686.rpm da2b0ffc968803d239f38444842e6792e85494901ff8d0075652f6c2d7aa1800 cyrus-sasl-gs2-2.1.26-24.el7_9.x86_64.rpm c75dd0b94b1e1300b04edfbfa5a3739573a6f83dc0737110d2f8cfedfc5ab7a2 cyrus-sasl-gssapi-2.1.26-24.el7_9.i686.rpm 816c816facf8421458376b99f244ef91c147063ed4f4955fd0e8dae62eccaeb8 cyrus-sasl-gssapi-2.1.26-24.el7_9.x86_64.rpm 46ac94286722fc2f6f68ec4c0e70152b3d1ff6fac6001d2155f8228d91126574 cyrus-sasl-ldap-2.1.26-24.el7_9.i686.rpm 4a53adae3dd3a8d933f2ec113b7303ce7d9c782edd612d17b8d3badf4c04167e cyrus-sasl-ldap-2.1.26-24.el7_9.x86_64.rpm 4579c7a7925097881dd33b28c72cce227a024a5f071fa4cd0c5bb09cd76d8ec0 cyrus-sasl-lib-2.1.26-24.el7_9.i686.rpm e1d065bfaef705d407c6134352d1afc64ecf26a5970a0e5282f6dda745483db8 cyrus-sasl-lib-2.1.26-24.el7_9.x86_64.rpm ffcf7016d990141a16d89aca74ebc89f797e93581bb8c97a08c83f5bf4ae47e4 cyrus-sasl-md5-2.1.26-24.el7_9.i686.rpm c92bf980488dff6128c5564f2f75712ccb2a9a0f859f4667af435f967eef4c45 cyrus-sasl-md5-2.1.26-24.el7_9.x86_64.rpm 94d6c80d9b08af719fa8a5e007bf753a3f13406d99bcd8411d914c6115c3b571 cyrus-sasl-ntlm-2.1.26-24.el7_9.i686.rpm 995c318e872c57fa7ce17355320c34d3fdd0774343e691cc23d9e9215ad53931 cyrus-sasl-ntlm-2.1.26-24.el7_9.x86_64.rpm 5a42bda7621305ca3bcd588a0c84aac743aba372ea8ee558945564b62173e3f3 cyrus-sasl-plain-2.1.26-24.el7_9.i686.rpm c960158be24b783ab7fb4a317899b83f806692c1e48426fe46c6bee909357ee5 cyrus-sasl-plain-2.1.26-24.el7_9.x86_64.rpm 925078e3fe326e7212b074bf495287d0fafc0395d9657b439a01b27d1539037e cyrus-sasl-scram-2.1.26-24.el7_9.i686.rpm 4fc0e17577976ecf2487198134b9f2656bdc36caf8e27c75efb6aff14204088e cyrus-sasl-scram-2.1.26-24.el7_9.x86_64.rpm b1fa72dca82442418098746eaa9881ac7e92678c41e6786a458c28d77235fd5e cyrus-sasl-sql-2.1.26-24.el7_9.i686.rpm 9fc8f4ae81c019b16a882823948eff561fe0f6ad38be509f514a5c287a60d121 cyrus-sasl-sql-2.1.26-24.el7_9.x86_64.rpm Source: c49472bd08c6060f53a9dace005b81cf466836790d2dcb407a536820f6319e77 cyrus-sasl-2.1.26-24.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 203, Issue 1 ***********************************************

1 0

Need fstab-decode for CentOS 8
by Robert Nichols 02 Mar '22

02 Mar '22

Does anything for CentOS 8 provide the function of the fstab-decode utility? Entries in /proc/mounts and /etc/fstab can have escape sequences for certain special characters, and I need to decode that. -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

3 11

Autoreply: "CentOS Digest, Vol 206, Issue 2"
by mak＠jump.com.hk 02 Mar '22

02 Mar '22

Thank you for your email. Vincent Mak is no longer working at Jump. Please do not hesitate to contact samantha(a)jump.com.hk or gary(a)jump.com.hk with any enquiry you have.

1 0

mock gimmicks - experts?
by lejeczek 01 Mar '22

01 Mar '22

Hi guys. I'm trying something I believe is trivial, on centOS 9 with mock version 2.16 -> $ mock -r centos-stream-8-x86_64 --rootdir=~/mock --localrepo=/00.STORAGE/1/var/www/repos --continue --chain ./mpfr-4.1.0-7.el9.src.rpm ./libmpc-1.2.1-4.el9.src.rpm ... CentOS Stream 8 - PowerTools 14 kB/s | 4.4 kB 00:00 Error: Problem: cannot install the best update candidate for package libmpc-1.1.0-9.1.el8.x86_64 - problem with installed package libmpc-1.1.0-9.1.el8.x86_64 - package libmpc-1.1.0-9.1.el8.x86_64 requires libmpfr.so.4()(64bit), but none of the providers can be installed - cannot install the best update candidate for package mpfr-3.1.6-1.el8.x86_64 - cannot install both mpfr-4.1.0-7.el8.x86_64 and mpfr-3.1.6-1.el8.x86_64 - cannot install both mpfr-3.1.6-1.el8.x86_64 and mpfr-4.1.0-7.el8.x86_64 (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) ERROR: Exception(./libmpc-1.2.1-4.el9.src.rpm) Config(centos-stream-8-x86_64) 0 minutes 6 seconds INFO: Results and/or logs in: /00.STORAGE/1/var/www/repos/results/centos-stream-8-x86_64/libmpc-1.2.1-4.el9 ERROR: Command failed: ... Why would it end up asking for 'mpfr-3.1.6' if 'libmpc-1.2.1' requires ver. >4.x and.. why would 'ibmpc-1.1.0-9.1' even show up there I cannot wrap my head around it. I've only started using 'mock' but this weird stuff have not seen until now. many thanks, L.

2 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2022