Discuss

discuss@lists.centos.org

34753 discussions

firewalld: whitelisting/blacklisting addresses allowed to connect to a service/port with ipset
by Kenneth Porter 06 Jul '17

06 Jul '17

I'm trying to figure out how to use firewalld on CentOS 7 to block access to ssh (on a custom port to control log bloat) and smtp submission except for specific source addresses, using ipset. I haven't been able to figure out how to combine a port number or service name with an ipset, either as a blacklist of nets or a whitelist of addresses. It looks like ipset with type of "hash:net,port" might work but the current version of firewalld on C7 doesn't support that type. I fear I'm going to have to write a direct rule. Has anyone combined ipset with a port to achieve this? I tried a rich rule but I can't specify both an ipset and a port as the source value. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

Sound stopped working from internal speaker in CentOS 7.2 (intel-hda) and is still broken.
by Barry Brimer 06 Jul '17

06 Jul '17

This message is long overdue. I've commented on similar issues when other people have mentioned similar items, but I am finally taking the time to to ask this question. Did anyone else have the sound from their internal speaker stop working with the release of CentOS 7.2? I have tested this with multiple machines with the same card and the same issue. The card is identified as: !!PCI Soundcards installed in the system !!-------------------------------------- 00:1b.0 Audio device: Intel Corporation 82801JD/DO (ICH10 Family) HD Audio Controller (rev 02) !!Advanced information - PCI Vendor/Device/Subsystem ID's !!------------------------------------------------------- 00:1b.0 0403: 8086:3a6e (rev 02) Subsystem: 17aa:3048 At the release of CentOS 7.2, sound stopped working from the internal speaker. I could still plug in headphones and get audio without issue, but I can't use the speaker. This breaks between the last update kernel of CentOS 7.1 and the GA kernel of 7.2 and is still broken as of the latest 7.3 kernel. I have captured alsa-info.sh output from the following kernels: kernel-3.10.0-229.20.1.el7.x86_64 <== Last kernel which produces sound from internal speaker. If booted with this kernel, sound is produced from the internal speaker. This was the last update kernel before CentOS 7.2 kernel-3.10.0-327.el7.x86_64 <== 7.2 GA kernel. Sound is not produced from internal speaker. kernel-3.10.0-514.26.2.el7.x86_64 Current 7.3 update kernel. Sound is not produced from internal speaker. I have tried eliminating alsa, as directed in Fedora sounds troubleshooting <https://fedoraproject.org/wiki/How_to_debug_sound_problems> by removing alsa-plugins-pulseaudio I have tried creating /etc/modprobe.d/sound.conf file with the following contents: ============================================================= options snd-pcsp index=-2 alias snd-card-0 snd-hda-intel alias sound-slot-0 snd-hda-intel options snd-hda-intel model=6stack options snd-hda-intel position_fix=1 enable=yes ============================================================= I have tried listing and unmuting all devices alsa using scripts from <http://www.troubleshooters.com/linux/sound/sound_troubleshooting.htm> The only thing which appears relevant that is mentioned in the RHEL 7.2 release notes is: "The HDA driver has been updated to the latest upstream version to use the new jack kctls method." In reviewing the changelog there are a handful of sound/alsa related changes in 3.10.0-318.el7 and prior to that, there were an immense number of sound/alsa changes in 3.10.0-278.el7. The most specific thing that I can state is that in the working kernel, in alsamixer there is a second box which appears to be a level which can be adjusted on top of the item "Front" which I assume to be the front speaker. In the kernels that do not have sound working, this second level-looking box does not appear. I welcome any and all suggestions. Thanks, Barry

1 0

Re: [CentOS] Firefox 52.2.x and javascipt issues
by Richard 05 Jul '17

05 Jul '17

> Date: Wednesday, July 05, 2017 15:51:30 -0400 > From: Scott Gennari <sgennari(a)simons-rock.edu> > Subject: Re: [CentOS] Firefox 52.2.x and javascipt issues > > On 07/05/2017 03:27 PM, Bernard Lheureux wrote: >> Hi all, >> >> Is it me or there are a lot of troubles with Firefox ESR 52.2.x >> and javascript ??? >> I face a lot of troubles with pages I used before correctly >> running javascript, since the update to >> firefox-52.2.0-1.el7.centos.x86_64 on my EL7 laptop >> > > Not sure if this is what you are experiencing, this was taken from > Java https://java.com/en/download/help/firefox_java.xml > > Even with 'ESR', it appears the writing is on the wall for Firefox > with regards to Java. > The question was about javascript, not java. They are unrelated, (except for the confusion caused by the name similarity). Bernard -- Having an example or two of sites that you are having issues with might help it trying to see if it's a general problem or perhaps something more local.

1 0

Re: [CentOS] Firefox 52.2.x and javascipt issues
by Scott Gennari 05 Jul '17

05 Jul '17

On 07/05/2017 03:27 PM, Bernard Lheureux wrote: > Hi all, > > Is it me or there are a lot of troubles with Firefox ESR 52.2.x and > javascript ??? > I face a lot of troubles with pages I used before correctly running > javascript, since the update to firefox-52.2.0-1.el7.centos.x86_64 on > my EL7 laptop > Not sure if this is what you are experiencing, this was taken from Java https://java.com/en/download/help/firefox_java.xml /Beginning with Firefox 52 (released March 2017), plug-in support is limited to Adobe Flash, and drops support for NPAPI, impacting plugins for Java, Silverlight, and other similar NPAPI based plugins.// <snip> //// Firefox 52 ESR 32-bit release //// Mozilla offers an Extended Support Release (ESR) <https://www.mozilla.org/firefox/organizations/> version of Firefox specifically for use by organizations who need extended support for mass deployments. Only Mozilla Firefox 52 ESR 32-bit release will continue offering support for the standards-based plugin support technology required to launch Java Applets. To see if you are using an ESR release, check the Firefox menu item (Help -> About) and looking for the "ESR" identifier. Mozilla maintains Firefox ESR Releases for approximately one year. Developers and users still relying on the Java plugin technology in the 32-bit Mozilla Firefox web browser should consider migrating to a different solution. * * // Even with 'ESR', it appears the writing is on the wall for Firefox with regards to Java. / Scott //

1 0

Upstream details at...
by Stuart Barkley 05 Jul '17

05 Jul '17

On Fri, 30 Jun 2017 at 08:00 -0000, centos-announce-request(a)centos.org wrote: > Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-1609.html For a while now the "upstream details" pointed to in messages from centos-announce have been saying: Attention: RHN Hosted will reach the end of its service life on July 31, 2017. Customers will be required to migrate existing systems to Red Hat Subscription Management prior to this date. Is there any plan to shift the CentOS announcements to refer to an alternative freely available service? Thanks, Stuart Barkley -- I've never been lost; I was once bewildered for three days, but never lost! -- Daniel Boone

4 4

Using ssd disks for kvm guests
by C. L. Martinez 05 Jul '17

05 Jul '17

Hi all, Recently I have acquired a supermicro e200-8d micro server to use it as my homelab. It is equipped with two ssd disks. My idea is to install several kvm guests on it, but I have some doubts about what type of filesystem (ext4 or xfs?) or block to use (lvm). Recommendations? Do I need to accomplish some type of running if I choose to use ext4 or xfs?? Thanks.

2 1

CentOS-announce Digest, Vol 149, Issue 1
by centos-announce-request＠centos.org 05 Jul '17

05 Jul '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2017:1674 CentOS 7 kernel BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 4 Jul 2017 21:47:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:1674 CentOS 7 kernel BugFix Update Message-ID: <20170704214757.GA14488(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:1674 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-1674.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0f04f600ad46e6c88b26e17bff4e29b4d714b3309c3e13432f064ef6a607743c kernel-3.10.0-514.26.2.el7.x86_64.rpm f92bf25f84edc678919d0fad93d8d1c770e06bf0ca6cbff87b3793343aa2ee22 kernel-abi-whitelists-3.10.0-514.26.2.el7.noarch.rpm 5d112585822691550a58c592618dc23bd043c3839211d62ded5d9bdf4cd812a9 kernel-debug-3.10.0-514.26.2.el7.x86_64.rpm 8b632fc2bc753eb7ff59a421b1b83fab5ba822f17c1b214db75c61a506faf77a kernel-debug-devel-3.10.0-514.26.2.el7.x86_64.rpm 11d65223659f0a09ed353e3d6aa035f72a0163d83d9149f2441cb764431dcee5 kernel-devel-3.10.0-514.26.2.el7.x86_64.rpm f112fc9f1e822362b0f438f2d854995c16f599cab073ba7fffd2bd84facdd630 kernel-doc-3.10.0-514.26.2.el7.noarch.rpm a621b1f5ed9f6a8d123a6c2b7ae2e596f60ced7391a8a60a1ec34dfcebc82fa4 kernel-headers-3.10.0-514.26.2.el7.x86_64.rpm 5b30cbf20282b3cbca3ef0bf6b82e98e1540b619c47755caffb449bb391eb011 kernel-tools-3.10.0-514.26.2.el7.x86_64.rpm 45eedd7517bc471171a628effc28920ffdc5bc8d99ec4d3706ae06a586d96f56 kernel-tools-libs-3.10.0-514.26.2.el7.x86_64.rpm 224a2d0fee3189cf8248acc5fe2f7760731ad8be104c9d1171eb3a4580726072 kernel-tools-libs-devel-3.10.0-514.26.2.el7.x86_64.rpm 027e754436627404165a34f17d1c70feb13fe60afc072d4c12e7838138bcb579 perf-3.10.0-514.26.2.el7.x86_64.rpm 1b8d18a6838cc8ef82a567fcfd63eead1e9548ce29188a91be9a29e38fcac68b python-perf-3.10.0-514.26.2.el7.x86_64.rpm Source: 6b996b97357df82b42ffad3f8d91980b30d3a62d4a54503348370da877b605af kernel-3.10.0-514.26.2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 149, Issue 1 ***********************************************

1 0

attempt to access beyond end of device XFS Disks
by Götz Reinicke - IT Koordinator 05 Jul '17

05 Jul '17

Hi, I rebooted some CEPH servers with 24 HDs and do get some messages for some of the disks: [ 519.667055] XFS (sdk1): Mounting V4 Filesystem [ 519.692307] XFS (sdk1): Ending clean mount [ 519.781975] attempt to access beyond end of device [ 519.781984] sdk1: rw=0, want=1560774288, limit=1560774287 All disks are xfs formated and currently I don't see any problem on the CEPH side. But I have a bad feeling. I updated the kernel too from kernel-3.10.0-514.21.1 to kernel-3.10.0-514.26.1, but nothing changed. Any hints, suggestions? Thanks & regards . Götz

1 0

System Start-Up Issue Progress
by Chris Olson 04 Jul '17

04 Jul '17

My thanks to all that responded to my posting about our virtual machine CentOS 6 system start-up issue. I found the alternative boot options to be the most helpful. Interrupting the boot-up process with Alt-d or Escape allowed me to see what appears to be a quite normal string of start, install and mount activity. However, this process ends with the system hanging at the point below: Starting ipmidetectd: ipmidetectd: No nodes configured [FAILED] Starting sendmail: It is not clear to me whether the boot-up process is hanging due to the failed starting of ipmidetectd or sendmail, but I suspect that the ipmidetectd start up failure is the actual cause. It is not clear whether any IPMI related features were ever installed. Interrupting the boot-up process and selecting Run Level 1 results in a functioning system. Starting with other Run Levels results in the incomplete boot-up process noted previously. Using the "service network start" command yielded functional network and internet connectivity. This enabled the successful execution of yum update. The update consisted of kernel and other updates with a total download size of 274 MB. After this update, the boot-up process still hangs at the point indicated above. Why this is happening is still a mystery and if it actually is IPMI related, why would this be appropriate or even needed in a CentOS system that is running on VirualBox. There is no IPMI related hardware accessible to the virtual CentOS system or on the Windows 7 host system. It would be good if the IPMI start-up could be disabled.

6 8

Problem with ipa-client
by Nicolas Kovacs 04 Jul '17

04 Jul '17

Hi, Here's the warning that Yum currently displays: ** Found 3 pre-existing rpmdb problem(s), 'yum check' output follows: ipa-client-4.4.0-14.el7.centos.7.x86_64 has installed conflicts freeipa-client: ipa-client-4.4.0-14.el7.centos.7.x86_64 ipa-client-common-4.4.0-14.el7.centos.7.noarch has installed conflicts freeipa-client-common: ipa-client-common-4.4.0-14.el7.centos.7.noarch ipa-common-4.4.0-14.el7.centos.7.noarch has installed conflicts freeipa-common: ipa-common-4.4.0-14.el7.centos.7.noarch Any suggestions what I can do about that? (BTW, I don't use IPA) Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss