Discuss

discuss@lists.centos.org

2 participants
34758 discussions

From network-scripts to NetworkManager on a router : questions
by Nicolas Kovacs 18 Feb '20

18 Feb '20

Hi, I'm running CentOS 7 on all my servers, in three different contexts : 1. simple local server 2. public facing server 3. router/gateway/firewall I'm currently in the process of moving my KISS-style network-scripts-style configurations to something more orthodox based on NetworkManager. Scenarios (1) and (2) caused no problems, but (3) is giving me some headache. Let me take an example. The router in my office is a PC Engines routerboard running CentOS 7. It has three NICs, and I use two of these. WAN-facing NIC : # /etc/sysconfig/network-scripts/ifcfg-enp1s0 DEVICE=enp1s0 TYPE=Ethernet ONBOOT=yes BOOTPROTO=static IPADDR=192.168.1.1 NETMASK=255.255.255.0 LAN-facing NIC : DEVICE=enp2s0 TYPE=Ethernet ONBOOT=yes BOOTPROTO=static IPADDR=192.168.2.1 NETMASK=255.255.255.0 Third NIC is disabled : # /etc/sysconfig/network-scripts/ifcfg-enp3s0 DEVICE=enp3s0 TYPE=Ethernet ONBOOT=no Gateway information : # /etc/sysconfig/network GATEWAY=192.168.1.254 The router is running Dnsmasq : # /etc/resolv.conf nameserver 127.0.0.1 Packet forwarding is enabled and handled through the firewall script. No need to go into the details for that. This setup works perfectly as is. Now I'd like to move it to a NetworkManager-based configuration, and I have a couple questions about that. I'm using NetworkManager TUI (nmtui) to configure my connections. I'm defining two profiles WAN (enp1s0) and LAN (enp2s0). With NetworkManager I have to configure gateway and DNS information on a per-interface basis. 1. Which interface should have the gateway information ? 2. In a similar manner, which interface should have the DNS server information ? Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

6 10

anybody runs HPE ProLiant DL385 Gen10 ?
by lejeczek 17 Feb '20

17 Feb '20

hi guys, what I would like to ask is DDR4 3200Mhz in these server - has anybody tried? many thanks, L.

2 1

CentOS 7 : network interface renamed from eth0 to eth1 after reboot
by Nicolas Kovacs 17 Feb '20

17 Feb '20

Hi, I've done my fair share of CentOS 7 installations, but this is the first time I have this kind of weird problem. Here goes. In my office I have a battered Dell Optiplex 320 PC with two NICs that I'm using as a bare metal sandbox server for testing purposes. The CentOS 7 installer sees the connected network card as eth0. But after the first reboot, the interface comes up as eth1. My first reflex was to rename ifcfg-eth0 to ifcfg-eth1 and edit it accordingly. Weirdly enough, on the subsequent reboot the interface comes back as eth0. I took a peek in /etc/udev/rules.d to see if there was any persistent interface definition, but the directory is empty. On a side note, I installed Ubuntu Server 16.04 LTS on that same machine and got the exact same problem. Debian installer sees the main network interface as eth0, but on the first reboot the interface comes back as eth1. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

8 12

NetworkManager on servers
by Nicolas Kovacs 16 Feb '20

16 Feb '20

Hi, I'm currently reading the upstream "Considerations in adopting RHEL 8" document. The chapter about networking states that traditional networking scripts (shipped with the network-scripts package) are considered obsolete. I bluntly admit I don't see the point in this. As far as I'm concerned, I've been a happy user of NetworkManager since the early days (when folks used to call it NotworkManager :oD). It's one of those nifty pieces of software that brought the Linux desktop to the masses - or at least a bit nearer to them - since it allows managing wireless and wired interfaces transparently and easily on a laptop or any computer with a wireless card. On servers though, one of the first post-installation steps I performed was to get rid of Network-Manager and all its components. The servers I'm working on are relatively small-scale and have from one to four network interfaces. Each interface has a corresponding configuration in /etc/sysconfig/network-scripts, and that's it. From there, I rarely - if ever - touch it. In all my setups, NetworkManager is merely a useless layer of abstraction, and I like sticking to the KISS principle and shave off useless layers. Maybe there's a reason to make NetworkManager more or less mandatory from now on, but I don't see it. So I thought I'd rather ask on this list. Cheers from the foggy South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

10 17

Teo En Ming's Manual for Setting Up Samba 4.11.6 and CentOS 8.1 (1911) Linux Server QEMU/KVM Virtual Machine as an Active Directory Domain Controller (AD DC)
by Turritopsis Dohrnii Teo En Ming 15 Feb '20

15 Feb '20

Links to reading materials: [1] https://lkml.org/lkml/2020/2/15/16 [2] http://lkml.iu.edu/hypermail/linux/kernel/2002.1/10224.html [3] https://marc.info/?l=linux-kernel&m=158174694431737&w=2 [4] http://lists.linuxfromscratch.org/pipermail/lfs-chat/2020-February/029090.h… [5] https://lists.samba.org/archive/samba/2020-February/228348.html [6] https://marc.info/?l=kvm&m=158174875032089&w=2 [7] https://marc.info/?l=kvm-ia64&m=158174885032130&w=2 [8] https://marc.info/?l=kvm-ppc&m=158174912932190&w=2 -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

1 0

Monitor email for office365.com with fetchmail
by Jerry Geis 13 Feb '20

13 Feb '20

I am trying to use fetchmail to monitor box in office365.com. Its not working. Is there a "better" way to monitor and inbox ? I have verified all the ports are open, using 993, using ssl, using sslproto SSL3 etc.. Anyone done this ? Got it working. I basically have: machine outlook.office365.com login myuser@mydomain password mypassword fetchmail --ssl --sslproto SSL3 --smtpname X -u X outlook.office365.com Thanks, jerry

3 2

CentOS 7, Fail2ban and SELinux
by Nicolas Kovacs 13 Feb '20

13 Feb '20

Hi, I'm running CentOS 7 on an Internet-facing server. SELinux is in permissive mode for debugging. I've removed FirewallD and replaced it with a custom-made Iptables script. I've also installed and configured Fail2ban (fail2ban-server package) to protect the server from brute force attacks. Out of the box, Fail2ban doesn't seem to play well with SELinux. Here's what I get. $ sudo sealert -a /var/log/audit/audit.log 100% done found 5 alerts in /var/log/audit/audit.log ------------------------------------------------------------ SELinux is preventing /usr/bin/python2.7 from read access on the file disable. ***** Plugin catchall (100. confidence) suggests ***** If you believe that python2.7 should be allowed read access on the disable file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'f2b/f.sshd' --raw | audit2allow -M my-f2bfsshd # semodule -i my-f2bfsshd.pp ... As far as I can tell - and please correct me if I'm wrong - if a package doesn't play well with SELinux in the default configuration, this should be considered as a bug. In that case, the appropriate reaction would be to file a bug on the EPEL mailing list, since EPEL provides the fail2ban-server package. Other than that, the solution suggested by sealert seems to work. $ sudo ausearch -c 'f2b/f.sshd' --raw | sudo audit2allow -M my-f2bfsshd ******************** IMPORTANT *********************** To make this policy package active, execute: semodule -i my-f2bfsshd.pp $ sudo ausearch -c 'f2b/f.sshd' --raw | sudo audit2allow -M my-f2bfsshd ******************** IMPORTANT *********************** To make this policy package active, execute: semodule -i my-f2bfsshd.pp $ sudo semodule -i my-f2bfsshd.pp $ echo | sudo tee /var/log/audit/audit.log $ sudo systemctl restart fail2ban $ sudo sealert -a /var/log/audit/audit.log 100% done found 0 alerts in /var/log/audit/audit.log Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

4 3

Teo En Ming's Installing CentOS 8.1 (1911) Linux Server as a QEMU/KVM Virtual Machine PDF Manual
by Turritopsis Dohrnii Teo En Ming 13 Feb '20

13 Feb '20

Subject: Teo En Ming's Installing CentOS 8.1 (1911) Linux Server as a QEMU/KVM Virtual Machine PDF Manual Redundant Google Drive download links for my PDF manual: [1] https://drive.google.com/open?id=1BdV3qAjsshiVJoDEhZMQBxAXk2yXzDyY [2] https://drive.google.com/open?id=1mHncd2Ngp1MpQ3T3-zPOweXK5vMeMtJJ [3] https://drive.google.com/open?id=1bsS0F0TkLsrrHTT87jVNHmXJi2AmjLJb [4] https://drive.google.com/open?id=1QzVEDAJUzIkGbb6_XIPYGVKI7n4skeRc For future updates, please refer to my redundant RAID 1 mirroring Blogger and Wordpress blogs. https://tdtemcerts.blogspot.sg https://tdtemcerts.wordpress.com -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

1 0

lxc driver in libvirt - missing
by lejeczek 12 Feb '20

12 Feb '20

hi everyone is lxc driver missing from libvirt by omission or by an oversight, would you know? many thaks, L.

2 1

CentOS-announce Digest, Vol 180, Issue 3
by centos-announce-request＠centos.org 12 Feb '20

12 Feb '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:0471 Moderate CentOS 6 spice-gtk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 11 Feb 2020 18:21:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0471 Moderate CentOS 6 spice-gtk Security Update Message-ID: <20200211182131.GA27412(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0471 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2020:0471 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c89a83ebbc2927db579984c7570fe55087dcaafeec5ce677ab22e3f757a71bec spice-glib-0.26-8.el6_10.2.i686.rpm aefc99b2ae6103ee35d0f84a7ca434a97b0487218bc3732dcadb3df65b354b95 spice-glib-devel-0.26-8.el6_10.2.i686.rpm 8c7245834b3ddf3bfea20985ece7232be20508293977c142ea4e1f1ae0ac3289 spice-gtk-0.26-8.el6_10.2.i686.rpm 0c6335f7d20ee1fc2ced68eab4565c1f1381798db218408d7ba2171c117b734d spice-gtk-devel-0.26-8.el6_10.2.i686.rpm fe966c3dea0ad8aa61373154930f82249bbc95aa9aaa706d1bbed1f362cca611 spice-gtk-python-0.26-8.el6_10.2.i686.rpm db78e07bffbe2ce0ee59ae181f25bcec1d7ba32eb4fd07b21bb13559ff2915b7 spice-gtk-tools-0.26-8.el6_10.2.i686.rpm x86_64: c89a83ebbc2927db579984c7570fe55087dcaafeec5ce677ab22e3f757a71bec spice-glib-0.26-8.el6_10.2.i686.rpm 2d8d5b773b4ef4b6430150a46f83535c304c1a2a6557f9a813517b214cfac308 spice-glib-0.26-8.el6_10.2.x86_64.rpm aefc99b2ae6103ee35d0f84a7ca434a97b0487218bc3732dcadb3df65b354b95 spice-glib-devel-0.26-8.el6_10.2.i686.rpm b04f8161bef4f75a4c11df4af982fa88721f7dde199c912350da4605a7f60c5f spice-glib-devel-0.26-8.el6_10.2.x86_64.rpm 8c7245834b3ddf3bfea20985ece7232be20508293977c142ea4e1f1ae0ac3289 spice-gtk-0.26-8.el6_10.2.i686.rpm 95890f560915fae14b5e12eb6b9aadd3462c1797c7a38d6ba2d0d2a567df2978 spice-gtk-0.26-8.el6_10.2.x86_64.rpm 0c6335f7d20ee1fc2ced68eab4565c1f1381798db218408d7ba2171c117b734d spice-gtk-devel-0.26-8.el6_10.2.i686.rpm 37e65725d994b497c7a33f23eb93f554d6a8f6089815cec7eb753574c2b14f6f spice-gtk-devel-0.26-8.el6_10.2.x86_64.rpm 18d169a7a38e5e5c8074fabc4301db2d32b48e4e2a6ee89f0a2bc90016c78eeb spice-gtk-python-0.26-8.el6_10.2.x86_64.rpm ad4fa3791dc89e3eeede9835af0113bb2f0219d5876bab7cf2a43fbc62c790a9 spice-gtk-tools-0.26-8.el6_10.2.x86_64.rpm Source: a192f5c676fa61618782afcedcaab3d8d8fb6a3f4406eb5cc8113844ab8ef8cb spice-gtk-0.26-8.el6_10.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 180, Issue 3 ***********************************************

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss