Discuss

discuss@lists.centos.org

7 participants
34743 discussions

Nginx and SELinux on CentOS 7
by Nicolas Kovacs 01 Jan '20

01 Jan '20

Hi, I'm currently fiddling with Nginx on CentOS 7. Eventually I want to use it instead of Apache on some servers. Apache works more or less out of the box with SELinux. My websites are all stored under /var/www, and ls -Z shows me that all files created under /var/www are correctly labeled httpd_sys_content_t. On my sandbox server I don't have Apache (httpd) installed, only Nginx (the nginx package from EPEL). I manually created the /var/www directory and put a handful of static websites in there to play around with. Curiously enough, I got a SELinux alert. I took a peek in /var/www, and here's what the SELinux context looks like: unconfined_u:object_r:var_t:s0 Now I'm a bit puzzled. Is the correct httpd_sys_content_t context only applied if the httpd package is installed? How else can I explain this strange behavior? Any suggestions? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 2

lapack
by Michael Hennebry 31 Dec '19

31 Dec '19

Has anyone gotten lapack to work on centos 7? If so, how? Most recently, I installed lapace-devel and let yum bring in what it wanted. Whenever I try to link, I get a long list of undefined references ending with /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/liblapacke.so: undefined reference to `dgeevx_' [hennebry@localhost test]$ nm -D /usr/lib64/libblas.so | grep dge 0000000000018850 T dgemm_ 0000000000011080 T dgemv_ 00000000000170c0 T dger_ [hennebry@localhost test]$ confirmes that the reference is not there. Installing blas or atlas first does not help. When installing lapack-devel, yum always wants to install blas-devel. What do I need? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

cannot install Centos 8 Stream
by Paul de Vries 30 Dec '19

30 Dec '19

I want to install Centos Stream on an older server. the Areca ARC-1680 RAID Controller is not supported anymore, so I tried to install on an external USB drive. i did a manual partitioning: sdc1 /boot/efi efi system partition sdc2 /boot ext4 sdc3 / lvm and the system cannot boot - hangs forever. new try: sdc1 /boot/efi, efi system partition sdc2 / xfs at end of install i see 'bootloader install failed'. debug shows 'NOTICE root:83haiku: debug: /dev/sdc1 is not a beFS partiotion: exiting' then i did an automatic partitioning and got no efi partition. and the system cannot boot - hangs forever. HOW do i install centos stream on external usb disk with efi boot?

1 0

looking for rpms in CentOS 8
by Patrick Rael 30 Dec '19

30 Dec '19

Hi, I can't find 3 rpms (for now, maybe more later) in centos 8, which are available for centos 7 and 6. perl-Crypt-SSLeay perl-Data-Validate-IP ndisc6 Any ideas why these aren't in the repos yet? I'm using these repos below and I've browsed repos searching for these. # dnf repolist ... repo id repo name status AppStream CentOS-8 - AppStream 5,089 BaseOS CentOS-8 - Base 2,843 Stream-AppStream CentOS-Stream - AppStream 4,629 Stream-BaseOS CentOS-Stream - Base 2,326 Stream-extras CentOS-Stream - Extras 3 cr CentOS-8 - cr 6,338 *epel Extra Packages for Enterprise Linux 8 - x86_64 3,732 extras CentOS-8 - Extras 3 Plus, I just want to say thanks for the entire CentOS team and community, you do a lot of work that is critical, and is highly appreciated! -->Pat ---------

2 2

Does Centos kernel support usb w/ UASP ?
by Fred Smith 30 Dec '19

30 Dec '19

Looking to buy a new usb-attached RAID box for nightly backups, and I see that many of them now support usb 3.1 with UASP. Looking at add-in usb 3.1 cards (my motherboard is probably too old, and only supports usb 3.0) to go with it, but don't know if the old kernel RH/Centos uses supports UASP. Chipset dependent? If one can trust the product images on Amazon, most of them use an asmedia 2142 chip. Anyone know? Thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- God made him who had no sin to be sin for us, so that in him we might become the righteousness of God." --------------------------- Corinthians 5:21 ---------------------------------

2 2

Install Questions
by Eugene Poole 29 Dec '19

29 Dec '19

This is my situation: I've a AMD Phenom II X6 1055T machine with 2 - ISA DVD drives and 6 - SATA Drives. The drives are (I assume by the BIOS) assigned /dev/ sda through /dev/sdf. In order to do a specific definition easily I use CentOS 6 (what disks are used with RAID-1 and which ones are used with RAID-10) and what the /dev/mdx names to use. What I don't understand is why when I get to the page where I'm to install the boot loader it wants to install it on /dev/sdf. When I try to install it on /dev/md0 (where /boot is located) the reboot fails. When I try to alter the BIOS order (it allows me to do this with 4 of the 6 disks) so the /dev/sda is the first BIOS drive the also fails. Before I had multiple disks in a RAID environment I could install the boot loader on /dev/sda1 without problems (BTW, /dev/md0 is defined with /dev/sda1 and /dev/sdd1). What am I doing wrong and how can I make it better? BTW, My goal is to get the file system defined exactly like I want it and then install CentOS 7.5 (CentOS 7.7 gives me several warning messages concerning my processor). TIA -- Eugene Poole Woodstock, Georgia

1 0

Centos 8 KVM and Win10 time
by Tom Bishop 28 Dec '19

28 Dec '19

I didn't have this issue when using Centos 7 but for some reason now using 8 I have a windows 10 vm that keeps changing it's time to UTC. Centos appears to be using local time but something is telling it to change time. I have time sync running in windows and it syncs but then at some point when I come back to it the time has changed. Tried a bunch of things but so far no luck, anyone have any suggestions that I could try please let me know, thanks.

1 0

The case of the missing /boot/grub2/grub.cfg in centos8
by Mauricio Tavares 28 Dec '19

28 Dec '19

So I installed centos8. And I was looking for the grub config file: [root@testbox ~]# ls -l /etc/grub2.cfg lrwxrwxrwx. 1 root root 22 Oct 2 13:01 /etc/grub2.cfg -> ../boot/grub2/grub.cfg [root@testbox ~]# But [root@testbox ~]# ls /boot/grub2/ grubenv [root@testbox ~]# Why is it not there? FYI, I did try 'yum reinstall grub2' and no /boot/grub2/grub.cfg for me.

5 6

Disabling TLS 1.1 in Centos 7 cockpit
by Erick Perez - Quadrian Enterprises 28 Dec '19

28 Dec '19

Hi, I'm using cockpit in standard port 9090 in a Centos 7 system. Due to a suggestion from management, they want TLS 1.1 disabled system-wide in all Linux boxes and TLS 1.2 enabled. I have not found proper documentation on how to disable it for cockpit (version 195.1 ships with Centos 7) So far I have tried (https://cockpit-project.org/guide/149/https.html) /usr/lib/systemd/system/cockpit.service [Service] Environment=G_TLS_GNUTLS_PRIORITY=-VERS-ALL:+VERS-TLS1.2 And I also created the file /etc/systemd/system/cockpit.service.d/ssl.conf and added: [Service] Environment=G_TLS_GNUTLS_PRIORITY=-VERS-ALL:+VERS-TLS1.2 after that, I systemctl restart cockpit But if I do #openssl s_client -connect localhost:9090 -tls1_1 I get a proper response (a certificate), so TLS 1.1 is being accepted. Suggestions? Thanks. -- --------------------- Erick Perez ---------------------

3 6

bind problems
by Helmut Drodofsky 27 Dec '19

27 Dec '19

I made yum update to bind on 21.12.2019. Yum.log: Dec 21 23:14:41 Updated: 32:bind-license-9.11.4-9.P2.el7.noarch Dec 21 23:16:43 Installed: 32:bind-export-libs-9.11.4-9.P2.el7.x86_64 Dec 21 23:16:49 Updated: 32:bind-libs-lite-9.11.4-9.P2.el7.x86_64 Dec 21 23:16:50 Updated: 32:bind-libs-9.11.4-9.P2.el7.x86_64 Dec 21 23:18:02 Updated: rpcbind-0.2.0-48.el7.x86_64 Dec 21 23:23:21 Updated: 32:bind-9.11.4-9.P2.el7.x86_64 Dec 21 23:24:44 Updated: 32:bind-utils-9.11.4-9.P2.el7.x86_64 up to this date, bind has gone 4 month with the last update to bind 9.9.4 without any problem. Since the bold line in named.log 27-Dec-2019 23:20:21.200 general: info: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0 27-Dec-2019 23:20:21.201 general: info: zone localhost/IN: loaded serial 0 27-Dec-2019 23:20:21.201 general: notice: all zones loaded 27-Dec-2019 23:20:21.201 general: notice: running 27-Dec-2019 23:20:21.223 notify: info: zone dyn.internet-xs.net/IN: sending notifies (serial 2018012040) 27-Dec-2019 23:20:21.226 notify: info: zone panama.int/IN: sending notifies (serial 2016121200) 27-Dec-2019 23:20:21.227 notify: info: zone ixsdns.de/IN: sending notifies (serial 2018010102) *27-Dec-2019 23:20:28.434 dnssec: info: validating ./NS: got insecure response; parent indicates it should be secure* 27-Dec-2019 23:20:28.444 general: warning: managed-keys-zone: No DNSKEY RRSIGs found for '.': success 27-Dec-2019 23:20:29.219 dnssec: info: validating ./NS: no valid signature found 27-Dec-2019 23:20:29.714 dnssec: info: validating ./SOA: got insecure response; parent indicates it should be secure 27-Dec-2019 23:20:29.957 dnssec: info: validating ./NS: no valid signature found named needs some 1 hour to be really active. The named.log shows: ..... 7-Dec-2019 23:36:28.268 dnssec: info: validating it/DS: no valid signature found 27-Dec-2019 23:36:28.270 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.271 dnssec: info: validating info/DS: no valid signature found 27-Dec-2019 23:36:28.281 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.295 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.296 dnssec: info: validating it/DS: no valid signature found 27-Dec-2019 23:36:28.323 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.440 dnssec: info: validating it/DS: no valid signature found 27-Dec-2019 23:36:28.473 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:28.597 dnssec: info: validating it/DS: no valid signature found 27-Dec-2019 23:36:28.634 dnssec: info: validating net/DS: no valid signature found 27-Dec-2019 23:36:29.303 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.308 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.313 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.318 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.323 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.328 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.335 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.345 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.360 dnssec: info: validating org/DS: no valid signature found 27-Dec-2019 23:36:29.387 dnssec: info: validating org/DS: no valid signature found .... and really many lines as above. This validating happens even when dnssec-enable no; and dnssec-validation and dnssec-lookaside are commented out any idea? -- best regards Helmut Drodofsky

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss