Discuss

discuss@lists.centos.org

2 participants
34758 discussions

kmod c74 broken: howto report it
by Stijn De Weirdt 14 Feb '18

14 Feb '18

hi all, latest kmod update 20-15.el7_4.6 is broken on our systems, while previous 20-15.el7_4.4 was working fine (and downgrading fixes the issue). the issue is with modules from mellanox kmod rpms that are symlinked in the weak-updates dir. the config files in /etc/depmod.d look ok (and do work with previous version): dist.conf has weak-updates after built-in, and mellanox kmod rpms ship a config that overrides it for all modules. anyhow, before i try to get this upstream, how do i report this with centos team (to make sure the centos kmod rpm was correctly build). (i have already asked here before how to properly report it, but can't find my previous mail ;) stijn

3 4

Re: [CentOS] CentOS 6: Yum downloadonly changes local source repositories (and CentOS 7)
by Danny Smit 14 Feb '18

14 Feb '18

For what its worth, I managed to get around the problem with a small patch on yum itself: --- ORIG/usr/lib/python2.6/site-packages/yum/yumRepo.py 2017-03-22 05:32:26.000000000 +0000 +++ NEW/usr/lib/python2.6/site-packages/yum/yumRepo.py 2018-02-14 09:14:04.879902463 +0000 @@ -863,6 +863,7 @@ class YumRepository(Repository, config.R text=text, cache=cache, size=package.size, + copy_local=1, ) def getHeader(self, package, checkfunc = None, reget = 'simple', Although newer versions of yum do not rename the local package anymore, it still does not copy/download the package into the desired "downloaddir". I will try to report that upstream. Regards, Danny On Tue, Feb 13, 2018 at 6:05 PM, Danny Smit <danny.smit.0(a)gmail.com> wrote: > Hi All, > > I'm trying to use yum with the downloadonly option to collect a set of > packages including dependencies. I noticed that even on CentOS 6 the > downloadonly option is currently a default feature of the core of yum > itself, which is nice. > > However something strange occurs when one of the repositories to > download from is a local repository, like: > > [custom-repo] > name=My custom repo > baseurl=file:///repositories/mycustomrepo/ > > I added such a repo to my yum configuration and then executed: > > yum install -y --downloadonly --downloaddir=downloads custom_package > > When executing the above the package in question is suddenly renamed from: > > /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6.x86_64.rpm > > to > > /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6 > > Note that the architecture part and file extension are removed with > the file in the local repo, where I wouldn't expect yum to even try to > change something there. > Also nothing is downloaded into the downloads dir as specified. > > Strangely when it concerns a package that comes from a repository that > is configured as an http URL, the download option works flawlessly. > > Has anyone else seen this behavior? Is it a bug? Or is there a way around this? > Actually I would even prefer not having to run yum as root for this, > unfortunately yum to require write access to lock files in /var/. > > Platform: CentOS 6.9 (also not working with CentOS 7, then it keeps > the file intact, but doesn't download either) > Yum: 3.2.29-81.el6.centos > > Kind regards, > Danny

1 0

selinux policy with rsyslog and tls/certs
by John Ratliff 13 Feb '18

13 Feb '18

I've setup my rsyslog server to forward traffic to another rsyslog server on my network. It's using gTLS to encrypt the messages in transit. selinux is not allowing rsyslogd to read the certificates. They are world readable, so I don't think that is the problem. When I turn selinux mode to permissive, it works fine. What context should the ssl certificates be in for rsyslog to be able to read them? thanks.

1 1

Two MACs for one IP
by m.roth＠5-cent.us 13 Feb '18

13 Feb '18

The reason I want to assign one IP to two MAC addresses is that I have one (and only one) user for whom I have to spoof the MAC address (it's a case of stupid software licensing). But... his system is encrypted. Now, we're using clevis to allow reboots without someone being at the keyboard to type in the password. Those of you who've looked at clevis see where this is going: clevis uses the *real* firmware MAC address to get the key from the latchset server... while currently, the dhcpd *only* knows the spoofed MAC address. After the system's unlocked, it boots, and comes up with the spoofed MAC address. It *appears* I can do this, but I thought I'd ask here if there were any issues that dhcpd itself would have if I do. mark

1 0

CentOS 6: Yum downloadonly changes local source repositories
by Danny Smit 13 Feb '18

13 Feb '18

Hi All, I'm trying to use yum with the downloadonly option to collect a set of packages including dependencies. I noticed that even on CentOS 6 the downloadonly option is currently a default feature of the core of yum itself, which is nice. However something strange occurs when one of the repositories to download from is a local repository, like: [custom-repo] name=My custom repo baseurl=file:///repositories/mycustomrepo/ I added such a repo to my yum configuration and then executed: yum install -y --downloadonly --downloaddir=downloads custom_package When executing the above the package in question is suddenly renamed from: /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6.x86_64.rpm to /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6 Note that the architecture part and file extension are removed with the file in the local repo, where I wouldn't expect yum to even try to change something there. Also nothing is downloaded into the downloads dir as specified. Strangely when it concerns a package that comes from a repository that is configured as an http URL, the download option works flawlessly. Has anyone else seen this behavior? Is it a bug? Or is there a way around this? Actually I would even prefer not having to run yum as root for this, unfortunately yum to require write access to lock files in /var/. Platform: CentOS 6.9 (also not working with CentOS 7, then it keeps the file intact, but doesn't download either) Yum: 3.2.29-81.el6.centos Kind regards, Danny

1 0

Unbound question: forward-zone and stub-zone
by C. L. Martinez 13 Feb '18

13 Feb '18

Hi all, I have a strange case with unbound ... I have defined a stub-zone to query to a secondary DNS server: stub-zone: name: "mydomain.org" stub-addr: 172.22.54.4 stub-zone: name: "54.22.172.in-addr.arpa." stub-addr: 172.22.54.4 ... but it doesn't works: any hostname or IP address is resolved. But if I use "forward": forward-zone: name: "mydomain.org" forward-addr: 172.22.54.4 forward-zone: name: "54.22.172.in-addr.arpa." forward-addr: 172.22.54.4 all works ok. Then, which is the real difference between stub and forward zones? According to unbound's man page, stub-zone is used for authority servers, which is my case. But forward zones are valid for not authority servers. On the other side: "unbound performs the recursive processing itself for stub zones." ¿¿¿??? How?? Why?? If I use a stub-zone, it is because I have an authority server with recursion for its SOA domain ... I don't understand ... What is the correct configuration? -- Greetings, C. L. Martinez

1 0

Not able to sync mirror of Centos7 due to CRC checksum errors
by Soham Chakraborty 13 Feb '18

13 Feb '18

Hi, yesterday I was trying to create local mirror of CentOS7 using katello/pulp. I was receiving CRC checksum errors while attempting to sync the mirror. The particular error in question was: Feb 12 07:46:34 bazinga pulp: pulp_rpm.plugins.importers.yum.sync:INFO: [e2cd9930] Generating metadata databases. Feb 12 07:47:06 bazinga pulp: pulp_rpm.plugins.importers.yum.sync:ERROR: [e2cd9930] (23897-68256) CRC check failed 0x0 != 0xd61ac297L The full logs are available here: https://paste.fedoraproject.org/paste/lPnjaCFD6c~e22FtTedEKA I was under the impression that maybe somethinig is broken with katello/pulp and didn't pursue it further. Today, I attempted to sync it again with standalone pulp server (without katello/foreman/candlepin bits) and it failed again with same error. I tried a different mirror location as well, but received the same CRC check error: https://paste.fedoraproject.org/paste/O1ocILrTMEWkKDohOmXcaQ Then to test whether this is a problem with pulp or the upstream mirror, I decided to try to sync the CentOS6 repository from the same mirror and so far it is working. Can someone please tell me whether there could be any repodata corruption on the upstream repositories (as unlikely as it sounds)? Or anything which could prevent me from syncing the mirrors for internal consumption? Pulp installation is default as per https://docs.pulpproject.org/en/2.14/user-guide/installation/f23-.html Any thoughts? I am testing this on the 'generic/centos7' vagrant box. Thanks, -- Soham Chakraborty, Systems Administrator - EIS Pythian - Love your data chakraborty(a)pythian.com -- --

1 0

A question about NBD kernel module...
by Raghuram Devarakonda 12 Feb '18

12 Feb '18

Hi, I would like to mount a device using NBD protocol on CentOS 7 but it looks like the module is not available by default in the kernel. Is there a way I can install it (like from a rpm somewhere)? I found instructions to build such a module but want to make sure that it is not already available in some repo before I go ahead with building. Any help is greatly appreciated. Thanks, Raghu

2 1

libsmbclient conflict problem
by me＠tdiehl.org 12 Feb '18

12 Feb '18

Hi, I have a c-6 machine that I noticed the following on: (bugs pts10) # package-cleanup --problems Loaded plugins: fastestmirror, priorities, refresh-packagekit Package system-config-printer-libs-1.1.16-26.el6.x86_64 requires libsmbclient.so.0()(64bit) Package kdebase-runtime-libs-4.3.4-9.el6.x86_64 requires libsmbclient.so.0()(64bit) So then I ran: (bugs pts10) # yum install libsmbclient Loaded plugins: changelog, fastestmirror, priorities, refresh-packagekit Setting up Install Process Loading mirror speeds from cached hostfile * base: yumrepo * extras: yumrepo * fasttrack: yumrepo * remi: mirror.team-cymru.org * remi-php56: mirror.team-cymru.org * updates: yumrepo 138 packages excluded due to repository priority protections Resolving Dependencies --> Running transaction check ---> Package libsmbclient.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-winbind-clients = 3.6.23-46el6_9 for package: libsmbclient-3.6.23-46el6_9.x86_64 --> Processing Dependency: libwbclient.so.0()(64bit) for package: libsmbclient-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-winbind-clients.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-winbind = 3.6.23-46el6_9 for package: samba-winbind-clients-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-winbind.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-common = 3.6.23-46el6_9 for package: samba-winbind-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-common.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Conflict: samba4-common-4.2.10-12.el6_9.x86_64 conflicts samba-common < 3.9.9 --> Processing Conflict: samba4-winbind-4.2.10-12.el6_9.x86_64 conflicts samba-winbind < 3.9.9 --> Processing Conflict: samba4-winbind-clients-4.2.10-12.el6_9.x86_64 conflicts samba-winbind-clients < 3.9.9 --> Finished Dependency Resolution --> Finding unneeded leftover dependencies Found and removing 0 unneeded dependencies Error: samba4-winbind conflicts with samba-winbind-3.6.23-46el6_9.x86_64 Error: samba4-winbind-clients conflicts with samba-winbind-clients-3.6.23-46el6_9.x86_64 Error: samba4-common conflicts with samba-common-3.6.23-46el6_9.x86_64 You could try using --skip-broken to work around the problem ** Found 2 pre-existing rpmdb problem(s), 'yum check' output follows: kdebase-runtime-libs-4.3.4-9.el6.x86_64 has missing requires of libsmbclient.so.0()(64bit) system-config-printer-libs-1.1.16-26.el6.x86_64 has missing requires of libsmbclient.so.0()(64bit) (bugs pts10) # I have the following samba packages installed: (bugs pts10) # rpm -qa samba4\* samba4-winbind-clients-4.2.10-12.el6_9.x86_64 samba4-4.2.10-12.el6_9.x86_64 samba4-client-4.2.10-12.el6_9.x86_64 samba4-common-4.2.10-12.el6_9.x86_64 samba4-winbind-4.2.10-12.el6_9.x86_64 samba4-libs-4.2.10-12.el6_9.x86_64 (bugs pts10) Can someone tell me what what I need to do to resolve the above conflicts? There does not seem to be a later version of libsmbclient available. Regards, -- Tom me(a)tdiehl.org

3 5

Meltdown and Spectre
by isdtor 12 Feb '18

12 Feb '18

Does anyone know if Red Hat are working on backporting improved mitigation techniques and features from newer, 4.14.14+ kernels? $ grep . /sys/devices/system/cpu/vulnerabilities/* /sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI /sys/devices/system/cpu/vulnerabilities/spectre_v1:Vulnerable /sys/devices/system/cpu/vulnerabilities/spectre_v2:Vulnerable: Minimal generic ASM retpoline $

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss