Discuss

discuss@lists.centos.org

8 participants
34745 discussions

CentOS 6.X, iptables 1.47 and GeoLite2 Country Database
by Jobst Schmalenbach 16 Jan '19

16 Jan '19

Hi Specs in subject line: CentOS 6.X all latest patches), iptables 1.47, Apache2.2 I use the Geolite legacy databases together with iptables 1.47 to filter traffic for a variety of ports and only allow .AU traffic to have access. Maxmind (https://dev.maxmind.com/geoip/geoip2/geolite2/) changed the default DB to the latest version which is GeoLite2, this leaves all users in need of the old Geolite Legacy database in the dark, they cannot update. If I download a later version of xtables it will complain that it requires iptable>1.6 which I do not think I can get going on CentOS 6.X. Is there a way that I can convert Geolite2 CSV files to Geolite Legacy CSV Files and then compile those into BE/LE? Are there any other ways I can use Geolite2 on a CentOS 6.X system? Does anyone have other ideas how to tackle this? (this made me really sleep well!) thanks Jobst -- "XP: If you are nine years old you are just going to love it. If you're a few years older you'll resent the choking paternalistic atmosphere of vapid gee-whiz kiddie entertainment (babysitting), euphemism and fake-friendly bullying." | |0| | Jobst Schmalenbach, | | |0| Barrett & Sales Essentials |0|0|0| Caulfield South, 3162, Australia

3 6

@reboot only some lines of a script are working (yum install not)
by Ralf Prengel 15 Jan '19

15 Jan '19

Hallo, I m using a script to install docker after a reboot. The script is starting and working. The problem: yum install doesn't work running the script via cron allthough yum remove works. Starting the script manual works fine . Has anyone a hint for me? Thanks Ralf xxx SHELL=/bin/bash PATH=/sbin:/bin:/usr/sbin:/usr/bin MAILTO=root # For details see man 4 crontabs # Example of job definition: # .---------------- minute (0 - 59) # | .------------- hour (0 - 23) # | | .---------- day of month (1 - 31) # | | | .------- month (1 - 12) OR jan,feb,mar,apr ... # | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat # | | | | | # * * * * * user-name command to be executed @reboot root /opt/install_via_pxe/centos_autoinstall/stage01/init_stage01_docker.sh xxx #! /bin/bash echo 'script init_stage01_docker.sh ist gestartet' >> /var/log/comline/autoinst.log /usr/bin/yum install -y cifs-utils systemctl stop packagekit.service systemctl disable packagekit.service yum remove PackageKit -y /usr/bin/yum install -y docker mv /var/lib/docker /mnt/platte02 cd /var/lib ln -s /mnt/platte02/docker docker cp /opt/install_via_pxe/centos_autoinstall/stage01/docker/daemon.json /etc/docker systemctl enable docker systemctl start docker docker run --rm --privileged -v /var/run/docker.sock:/var/run/docker.sock -v /var/lib/rancher:/var/lib/rancher rancher/agent:v1.2.10 http://192.168.242.x.y/v1/scripts/811F51C097F763ABA2E5:1546214400000:Nzpsvk… cp -r /opt/install_via_pxe/centos_autoinstall/stage02/etc/crontab /etc/ echo 'script init_stage01_docker.sh ist gelaufen' >> /var/log/comline/autoinst.log shutdown -r now xxx

3 6

CentOS-announce Digest, Vol 167, Issue 3
by centos-announce-request＠centos.org 15 Jan '19

15 Jan '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0049 Important CentOS 7 systemd Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 15 Jan 2019 11:38:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0049 Important CentOS 7 systemd Security Update Message-ID: <20190115113856.GA61890(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0049 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0049 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 649fed4327a416093635b2b80459d00d97ffcfbece08b641b995dbad57fd58ac libgudev1-219-62.el7_6.2.i686.rpm 8e814081fe732ee1a25defc56d00b4c58b25d22ca4772dce34823f97fa6b427b libgudev1-219-62.el7_6.2.x86_64.rpm 1faa7d14cc5a8aa6e547e14cec18a9a6f556d5a2a9f1bbc8711278127358c324 libgudev1-devel-219-62.el7_6.2.i686.rpm 6da8d646dc649d387766110ca7ba495533a14ab47c34b4247c0c639fc0faac37 libgudev1-devel-219-62.el7_6.2.x86_64.rpm a34eedd90269505a11d70d49db2e93b936c670c6dfb439bc6cf68699a5974780 systemd-219-62.el7_6.2.x86_64.rpm 98e49665ffdf214d5dfe711cce125356fdc0348c18fb15eb50b22d6470079467 systemd-devel-219-62.el7_6.2.i686.rpm d67fcdb38a97033c6f3e45e5956f1e5516005567db26fa5b23d328d44f5501ef systemd-devel-219-62.el7_6.2.x86_64.rpm 31421ee8b5a777e3196943b0c232b9f3c29c993b14061b909334c13382826929 systemd-journal-gateway-219-62.el7_6.2.x86_64.rpm 79541a9226cbba215c6ac1c4280e1b428e5e770d5b73870adc5fa0caa37823c7 systemd-libs-219-62.el7_6.2.i686.rpm 2e55da1133e5dcc1892427cd68bf34ee94f7908bb7f39d5a7e6122f8286a70cd systemd-libs-219-62.el7_6.2.x86_64.rpm dac02b0fc760dc1d31266fab4c353821b7d411de644110736b43246686ec0054 systemd-networkd-219-62.el7_6.2.x86_64.rpm ca622a8c3bef58ad6c09b5aab7cb322eff4ff0ace18f3a0a58f598e085453537 systemd-python-219-62.el7_6.2.x86_64.rpm 3f20641ff1ff43a1d562f0b4ba71369b0468ca72d34d0cbedccabc1f58d8ce01 systemd-resolved-219-62.el7_6.2.i686.rpm bd4bf5a9f4339976b00c76b92bd434e36210631f1b43ad0798962de7f159f5a5 systemd-resolved-219-62.el7_6.2.x86_64.rpm e5e0efddb59dd352310097b9a78d00c21248282ae4f9a42f46a102a2fbb7d497 systemd-sysv-219-62.el7_6.2.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 167, Issue 3 ***********************************************

1 0

Re: [CentOS] @reboot only some lines of a script are working (yum install not)
by Ralf Prengel 14 Jan '19

14 Jan '19

Hallo. solved. proxy in yum.conf is working when starting yum in an crontab-environment. Ralf Zitat von Ralf Prengel <ralf.prengel(a)rprengel.de>: > Zitat von Mogens Kjaer <mk(a)lemo.dk>: > >> On 1/10/19 11:32 AM, Ralf Prengel wrote: >>> yum install doesn't work running the script via cron allthough yum >>> remove works. >> >> Is the network up when the script executes? > > > Hallo, > > yes it is up. > Result of 10 pings is fine as first line in the script. > Any other ideas? > > Ralf > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] Yum excluding packages I need
by mark 12 Jan '19

12 Jan '19

Stephen Berg (Code 7309) wrote: > On 1/11/19 10:41 AM, mark wrote: > >> C7, and I did a yum update --disableexcludes=all, and yet it's telling >> me [nvidia]: excluding kmod-nvidia-410.66-1.el7_5.elrepo.x86_64 >> [nvidia]: excluding kmod-nvidia-410.73-1.el7_5.elrepo.x86_64 >> [nvidia]: excluding kmod-nvidia-410.73-2.el7_6.elrepo.x86_64 >> [nvidia]: excluding kmod-nvidia-410.78-1.el7_6.elrepo.x86_64 >> [nvidia]: excluding kmod-nvidia-410.93-1.el7_6.elrepo.x86_64 <...> >> Even with a -vvv flag, it doesn't tell me why it's excluding them. >> > Pretty sure that's the yum-plugin-nvidia.noarch doing it's thing to keep > the wrong nvidia drivers from getting installed. Y'all will love this: you *can't* update yum-plugin-nvidia - *it* is excluded by itself. mark

4 5

Help finishing off Centos 7 RAID install
by Gary Stainburn 11 Jan '19

11 Jan '19

I've just finished installing a new Bacula storeage server. Prior to doing the install I did some research and ended up deciding to do the following config. 6x4TB drives /boot/efi efi_fs sda1 /boot/efi_copy efi_fs sdb1 /boot xfs RAID1 sda2 sdb2 VG RAID6 all drives containing SWAP / /home /var/bacula Questions: 1) The big problem with this is that it is dependant on sda for booting. I did find an aritcle on how to set up boot loading on multiple HDD's, including cloning /boot/efi but I now can't find it. Does anyone know of a similar article? 2) is putting SWAP in a RAID a good idea? Will it help, will it cause problems?

5 12

Yum excluding packages I need
by mark 11 Jan '19

11 Jan '19

C7, and I did a yum update --disableexcludes=all, and yet it's telling me [nvidia]: excluding kmod-nvidia-410.66-1.el7_5.elrepo.x86_64 [nvidia]: excluding kmod-nvidia-410.73-1.el7_5.elrepo.x86_64 [nvidia]: excluding kmod-nvidia-410.73-2.el7_6.elrepo.x86_64 [nvidia]: excluding kmod-nvidia-410.78-1.el7_6.elrepo.x86_64 [nvidia]: excluding kmod-nvidia-410.93-1.el7_6.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-410.66-1.el7_5.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-410.73-1.el7_5.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-410.78-1.el7_6.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-410.78-2.el7_6.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-410.93-1.el7_6.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-32bit-410.66-1.el7_5.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-32bit-410.73-1.el7_5.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-32bit-410.78-1.el7_6.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-libs-410.78-2.el7_6.elrepo.i686 [nvidia]: excluding nvidia-x11-drv-libs-410.78-2.el7_6.elrepo.x86_64 [nvidia]: excluding nvidia-x11-drv-libs-410.93-1.el7_6.elrepo.i686 [nvidia]: excluding nvidia-x11-drv-libs-410.93-1.el7_6.elrepo.x86_64 Even with a -vvv flag, it doesn't tell me why it's excluding them. Clues for the poor? mark

2 1

From slashdot, systemd memory corruption bugs
by mark 11 Jan '19

11 Jan '19

Story: Linux systemd Affected by Memory Corruption Vulnerabilities, No Patches Yet (bleepingcomputer.com) 286 Posted by msmash on Thursday January 10, 2019 @01:00PM from the call-the-IT dept. Major Linux distributions are vulnerable to three bugs in systemd, a Linux initialization system and service manager in widespread use, California-based security company Qualys said late yesterday. From a report: The bugs exist in 'journald' service, tasked with collecting and storing log data, and they can be exploited to obtain root privileges on the target machine or to leak information. No patches exist at the moment. Discovered by researchers at Qualys, the flaws are two memory corruption vulnerabilities (stack buffer overflow - CVE-2018-16864, and allocation of memory without limits - CVE-2018-16865) and one out-of-bounds error (CVE-2018-16866). They were able to obtain local root shell on both x86 and x64 machines by exploiting CVE-2018-16865 and CVE-2018-16866. The exploit worked faster on the x86 platform, achieving its purpose in ten minutes; on x64, though, the exploit took 70 minutes to complete. Qualys is planning on publishing the proof-of-concept exploit code in the near future, but they did provide details on how they were able to take advantage of the flaws. -- 30 -- mark "Paging Mr. Poettering...."

1 0

CentOS 7 as a Fibre Channel SAN Target
by Steffan A. Cline 11 Jan '19

11 Jan '19

For quite some time I’ve been using FreeNAS to provide services as a NAS over ethernet and SAN over Fibre Channel to CentOS 7 servers each using their own export, not sharing the same one. It’s time for me to replace my hardware and I have a new R720XD that I’d like to use in the same capacity but configure CentOS 7 as a Fibre Channel target rather than use FreeNAS any further. I’m doing virtualization and this will allow me to have failover from one node to the other since they’ll all be sharing the same export rather than me simply backing up to the FreeNAS server the way I am now. Does anyone know of any really good current articles that explain how to set up CentOS 7 as the target in such a configuration and also setting up CLVMd so they can all share an export over Fibre Channel from CentOS 7? Steffan A. Cline steffan(a)hldns.com 602-793-0014

1 0

IPv6 DUID
by Stephen Berg (Code 7309) 11 Jan '19

11 Jan '19

Does anyone have a utility or method to show the IPv6 DUID for a client system without relying on looking through a DHCP server's logs or waiting until after a request is made? I'd like to determine a client's DUID before I set it up for IPv6, that way I can have it configured in the dhcpd6.conf file for a static assignment before it gets set up. I really don't care if it's an LL, LLT or UUID style as long as I can get it. -- Stephen Berg, IT Specialist, Oceanography Division, Code 7309 Naval Research Laboratory W: (228) 688-5738 DSN: (312) 823-5738 C: (228) 365-0162

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss