Discuss June 2022

discuss@lists.centos.org

18 participants
18 discussions

CentOS-announce Digest, Vol 205, Issue 1
by centos-announce-request＠centos.org 08 Jun '22

08 Jun '22

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. [Infra] : Planned outage : git.centos.org (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Jun 2022 07:24:38 +0200 From: Fabian Arrotin <arrfab(a)centos.org> To: "The CentOS developers mailing list." <centos-devel(a)centos.org>, centos-announce(a)centos.org, CentOS mailing list <centos(a)centos.org> Subject: [CentOS-announce] [Infra] : Planned outage : git.centos.org Message-ID: <2e632140-7589-f0bb-97aa-33ac2d74e2be(a)centos.org> Content-Type: text/plain; charset="utf-8"; Format="flowed" Due to a scheduled pagure upgrade, we'll have to move the existing Pagure instance (aka https://git.centos.org) to a new node. Migration is scheduled for """"Monday June 13rd, 7:00 am UTC time"""". You can convert to local time with $(date -d '2022-06-13 07:00 UTC') The expected "downtime" is estimated to ~60 minutes , time needed to : - backup/restore last DB dump - import and convert DB schema for newer pagure version - last data (sources in lookaside cache and git repositories) sync - verify service and switch public IP to new host. Important note wrt that migration is that we're moving from pagure 5.8 running on CentOS 7 to pagure 5.13 on RHEL 8. It means it's a new host and so sshd host keys will change (we didn't want to import older host keys to comply with newer algo) The new fingerprint will be displayed at usual place (https://git.centos.org/ssh_info) but it only matters for SIGs users pushing to specific projects/branches over ssh. For people pulling through https, nothing changes. Here are in advance the new fingerprints : rsa=3072 SHA256:qeSehpwh3X7HI0D/jF7N4qZcergdr9tUCdaZ2EIdiLc (RSA) rsa_md5=3072 MD5:a9:a1:ba:83:96:71:28:ca:86:19:c0:5d:4f:48:9f:63 (RSA) ecdsa=256 SHA256:vIRsg5g/t/7ucYP4NKTkcPJdE7CWbFQVInscthHKihU (ECDSA) ecdsa_md5=256 MD5:8f:40:35:4f:b9:43:60:d9:09:c0:5f:80:52:69:c8:8d (ECDSA) Also worth knowing that we also present a signed cert for sshd host keys, so if you already trust our CA (https://github.com/CentOS/ansible-role-sshd/blob/master/defaults/main.yml#L…) in your ~/.ssh/known_hosts file, you'll not even have to accept new key Thanks for your understanding and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

NFS Server Centos7
by Erik Frangež 07 Jun '22

07 Jun '22

Hi guys, we are setting NFS server on CentOS7 system. Everything working OK except speed, speed over NFS very drop... if we run dd command directly on server we are getting speed around 1,4Gbps, if we run from client connected to NFS is 200Mbps. Do you have maybe some advice what we need to check? Thank you! Best, Erik

6 5

C7 pam_oath.so changes group ownership of system file
by Tom Yates 04 Jun '22

04 Jun '22

I'm using pam_oath.so to control sudo access. The following line appears in my /etc/pam.d/sudo: auth sufficient pam_oath.so usersfile=/etc/users.oath window=5 digits=8 It works well, and has done since time out of mind. I've recently noticed, however, that having a user authenticate via a HOTP OATH token not only causes the /etc/users.oath file to be updated (which makes sense, the stored counter needs to be incremented) but also have its group-ownership changed to the primary group of the last user who sudoed. The file has no group read- or writeability, but it still strikes me as weird, and if the group modes were not -rwx, it might be a vulnerability. Does anyone else use HOTP OATH via PAM, and see this? Is there a good reason for it? [me@dormouse ~]$ ls -la /etc/users.oath -rw-------. 1 root root 550 Jun 4 10:31 /etc/users.oath [me@dormouse ~]$ sudo -l One-time password (OATH) for `me': [...] User me may run the following commands on dormouse: (ALL) ALL [me@dormouse ~]$ ls -la /etc/users.oath -rw-------. 1 root me 550 Jun 4 10:33 /etc/users.oath -- Tom Yates - https://www.teaparty.net

1 0

Centos 7 guest on virt-manager
by Jerry Geis 04 Jun '22

04 Jun '22

Hello - I am running Centos 7 virt-manager which I have used for years. Trying to install Ubuntu 22.04 as a guest. I have set up the CDRom - even disconnected and reset it - but it never boots the CDROM ??? Why ? It just defaults back to the OS that is already loaded. I'm confused. Why don't it boot the CDROM. I event set the boot options to BOOT CDROM and unchecked everything else. I have the VM machine set for secure boot. Thanks Jerry

2 1

Update RPM GPG key for EL9
by Orion Poplawski 02 Jun '22

02 Jun '22

Looks like the GPG key we use to sign our RPMs is not longer good with EL9: # rpm --import RPM-GPG-KEY-nwra error: RPM-GPG-KEY-nwra: key 1 import failed gpg key info: sec rsa2048/35DDB0B86218AC2F created: 2017-08-16 expires: never usage: SC trust: ultimate validity: ultimate ssb rsa2048/6A7FBC1E9DB22E8E created: 2017-08-16 expires: never usage: E Can someone explain what I need to do to make things compatible with EL9? Thank you! -- Orion Poplawski IT Systems Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

2 4

centos 7 sendmail on AWS
by Jerry Geis 02 Jun '22

02 Jun '22

I am trying to get email out of AWS image to google on port 587. When I use telnet it connects - so 587 is a valid path... telnet smtp-relay.gmail.com 587 Trying 142.250.112.28... Connected to smtp-relay.gmail.com. Escape character is '^]'. 220 smtp-relay.gmail.com ESMTP l15-20020a17090a150f00b001dfac278995sm682651pja.12 - gsmtp ^]quit When I run interactive session: sendmail -Am -v -t To: X@Y From: X@Y Subject: test X@Y... Connecting to aspmx.l.google.com. port 587 via esmtp... sendmail.mc has define(`RELAY_MAILER_ARGS', `TCP $h 587')dnl define(`ESMTP_MAILER_ARGS', `TCP $h 587')dnl define(`RELAY_MAILER', `esmtp')dnl define(`null_client', `smtp-relay.gmail.com.') I dont understand why 587 is not connecting. It connects on the manual telnet. It does not connect otherwise. What might I be missing? Jerry

1 0

FW: NFS Server Centos7
by Erik Frangež 02 Jun '22

02 Jun '22

Any news? On 29/05/2022, 17:33, "CentOS on behalf of Erik Frangež via CentOS" <centos-bounces(a)centos.org on behalf of centos(a)centos.org> wrote: Hi guys, Thank you all for replys and sorry I was having enabled digest mode and I did not get all messages in time. Here are answers: Message 2: Client and server are virtual machines inside vmware environment which is connected to 10gbps. Network is devided between virtual machines. Physical servers are connected to Nexus switch with 10gbps. Message 3: We have try speeds with iperf, they are between 1 and 6 gbps, sometimes goes to 8gbps - depends of the load of networks. All checks was done with sync mode (NFS will be used for important data and we do not want to lose something). Message 4: Config is default, just installed and tested with NFSv3 NFSv4. Message 5: We did not enable jumbo frames on network. For all: We are testing speed with this script (PHP7.4): <?php // Define to join the language pack. define('BENCHFAIL_SLOWHARDDRIVE', 'slowharddrive'); $lorem = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque lacus felis, dignissim quis nisl sit amet, blandit suscipit lacus. Duis maximus, urna sed fringilla consequat, tellus ex sollicitudin ante, vitae posuere neque purus nec justo. Donec porta ipsum sed urna tempus, sit amet dictum lorem euismod. Phasellus vel erat a libero aliquet venenatis. Phasellus condimentum venenatis risus ut egestas. Morbi sit amet posuere orci, id tempor dui. Vestibulum eget sapien eget mauris eleifend ullamcorper. In finibus mauris id augue fermentum porta. Fusce dictum vestibulum justo eget malesuada. Nullam at tincidunt urna, nec ultrices velit. Nunc eget augue velit. Mauris sed rhoncus purus. Etiam aliquam urna ac nisl tristique, vitae tristique urna tincidunt. Vestibulum luctus nulla magna, non tristique risus rhoncus nec. Vestibulum vestibulum, nulla scelerisque congue molestie, dolor risus hendrerit velit, non malesuada nisi orci eget eros. Aenean interdum ut lectus quis semper. Curabitur viverra vitae augue id.'; $loremipsum = str_repeat($lorem, 16); $i = 0; $pass = 2000; $tempfile = '/srv/moodledata/test/benchmark.temp'; while ($i < $pass) { ++$i; file_put_contents($tempfile, $loremipsum); unlink($tempfile); } return array('limit' => 1, 'over' => 1.25, 'fail' => BENCHFAIL_SLOWHARDDRIVE); ?> On 29/05/2022, 14:00, "centos-bounces(a)centos.org on behalf of centos-request(a)centos.org" <centos-bounces(a)centos.org on behalf of centos-request(a)centos.org> wrote: ---------------------------------------------------------------------- Message: 1 Date: Sat, 28 May 2022 15:43:12 +0200 From: Erik Frange? <erik(a)frangez.net> To: centos(a)centos.org Subject: [CentOS] NFS Server Centos7 Message-ID: <6dfea2b2-1a90-059c-8ffe-f8f7f077508e(a)frangez.net> Content-Type: text/plain; charset=UTF-8; format=flowed Hi guys, we are setting NFS server on CentOS7 system. Everything working OK except speed, speed over NFS very drop... if we run dd command directly on server we are getting speed around 1,4Gbps, if we run from client connected to NFS is 200Mbps. Do you have maybe some advice what we need to check? Thank you! Best, Erik ------------------------------ Message: 2 Date: Sat, 28 May 2022 10:40:10 -0600 From: Frank Cox <theatre(a)sasktel.net> To: centos(a)centos.org Subject: Re: [CentOS] NFS Server Centos7 Message-ID: <20220528104010.b28a86a9d8ac9186f2fc3743(a)sasktel.net> Content-Type: text/plain; charset=UTF-8 On Sat, 28 May 2022 15:43:12 +0200 Erik Frange? via CentOS wrote: > we are setting NFS server on CentOS7 system. Everything working OK > except speed, speed over NFS very drop... if we run dd command directly > on server we are getting speed around 1,4Gbps, if we run from client > connected to NFS is 200Mbps. > > Do you have maybe some advice what we need to check? Speed of network card in the server. Speed of network card in the client. Speed of any and all routers and switches between the server and the client. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com ------------------------------ Message: 3 Date: Sat, 28 May 2022 12:07:17 -0700 From: Skylar Thompson <skylar2(a)uw.edu> To: centos(a)centos.org Subject: Re: [CentOS] NFS Server Centos7 Message-ID: <20220528190717.ibbohtdtx4bzkl2w@hithlum> Content-Type: text/plain; charset=utf-8 I would start with something like iperf to measure the actual network throughput b/w the client and server. Once you have a baseline for that, we'd have to know things like read and write buffer sizes, and sync vs async mode. On Sat, May 28, 2022 at 03:43:12PM +0200, Erik Frange? via CentOS wrote: > Hi guys, > > we are setting NFS server on CentOS7 system. Everything working OK except > speed, speed over NFS very drop... if we run dd command directly on server > we are getting speed around 1,4Gbps, if we run from client connected to NFS > is 200Mbps. > > Do you have maybe some advice what we need to check? > > Thank you! > > Best, Erik -- -- Skylar Thompson (skylar2(a)u.washington.edu) -- Genome Sciences Department (UW Medicine), System Administrator -- Foege Building S046, (206)-685-7354 -- Pronouns: He/Him/His ------------------------------ Message: 4 Date: Sat, 28 May 2022 21:08:14 +0200 From: Leon Fauster <leonfauster(a)googlemail.com> To: centos(a)centos.org Subject: Re: [CentOS] NFS Server Centos7 Message-ID: <9f619570-23b6-eb0a-c68a-dfd744fbd122(a)gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Am 28.05.22 um 18:40 schrieb Frank Cox: > On Sat, 28 May 2022 15:43:12 +0200 > Erik Frange? via CentOS wrote: > >> we are setting NFS server on CentOS7 system. Everything working OK >> except speed, speed over NFS very drop... if we run dd command directly >> on server we are getting speed around 1,4Gbps, if we run from client >> connected to NFS is 200Mbps. >> >> Do you have maybe some advice what we need to check? > > Speed of network card in the server. > Speed of network card in the client. > Speed of any and all routers and switches between the server and the client. > and what config is in place ? -- Leon ------------------------------ Message: 5 Date: Sat, 28 May 2022 19:52:29 -0400 From: Valeri Galtsev <galtsev(a)kicp.uchicago.edu> To: centos(a)centos.org Subject: Re: [CentOS] NFS Server Centos7 Message-ID: <9c231113-c3e2-7dc2-f2e1-b2cefd0ae274(a)kicp.uchicago.edu> Content-Type: text/plain; charset=UTF-8; format=flowed On 5/28/22 9:43 AM, Erik Frange? via CentOS wrote: > Hi guys, > > we are setting NFS server on CentOS7 system. Everything working OK > except speed, speed over NFS very drop... if we run dd command directly > on server we are getting speed around 1,4Gbps, if we run from client > connected to NFS is 200Mbps. > > Do you have maybe some advice what we need to check? > Make sure you have good speed of physical connection along the whole path from server to client(s), enable Jumbo packets on all switches along the path. NFS experts will add NFS specific tuning. Valeri > Thank you! > > Best, Erik > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos ------------------------------ Subject: Digest Footer _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos ------------------------------ End of CentOS Digest, Vol 208, Issue 8 ************************************** _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] USB 2.5GbE NIC
by Mark Woolfson 01 Jun '22

01 Jun '22

Hi, Can anyone please help. I have an Intel NUC11i7 running CentOS 8.4 successfully. I have a Plugable USB 3.0 to 2.5GbE adapter to be used with the NUC. This works at 1GbE but the standard CentOS 8.4 driver will not allow me to change the speed. Can anyone please point me in the right direction for the driver and driver installation instructions. Advise would be appreciated for anyone who has done this. Mark Woolfson -- This email has been checked for viruses by AVG. https://www.avg.com

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2022