Discuss

discuss@lists.centos.org

2 participants
34758 discussions

CentOS-announce Digest, Vol 145, Issue 3
by centos-announce-request＠centos.org 07 Mar '17

07 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Re: CESA-2017:0294 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2017:0386 Important CentOS 7 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Mar 2017 09:03:51 -0600 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: Re: [CentOS-announce] CESA-2017:0294 Important CentOS 7 kernel Security Update Message-ID: <94be00e4-0b9c-4137-1ba0-e3aacb0c17e6(a)centos.org> Content-Type: text/plain; charset="windows-1252" On older index number (2017:0294) was accidentally attached to these new kernel packages. The actual announcement index number should be: 2017:0386 The link is: https://rhn.redhat.com/errata/RHSA-2017-0386.html Please disregard the previous announcement and I will do the correct one in a few minutes. Thanks, Johnny Hughes On 03/03/2017 07:31 AM, Johnny Hughes wrote: > > CentOS Errata and Security Advisory 2017:0294 Important > > Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0294.html > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > x86_64: > 212a275e48ec514d4861c2a3875dc9db349113c85c7a0ef2bc117433ed672c6a kernel-3.10.0-514.10.2.el7.x86_64.rpm > 69a054916b0971013c950394269393f7bca325c4a54864d651ee0dfcd70f0987 kernel-abi-whitelists-3.10.0-514.10.2.el7.noarch.rpm > abaacb8f44ebc8450cb741bc9e5e4a9619f8e72741f072a53129774d63afeb15 kernel-debug-3.10.0-514.10.2.el7.x86_64.rpm > 591ccd7652ec7f515920e056326ad8057fb88b5e8ef1d0b968a719ea7c82090a kernel-debug-devel-3.10.0-514.10.2.el7.x86_64.rpm > 0cf810a3e592ac9c6fa3d20135ad40c1fb81eae26f167e57b1a18d69f7f72ce4 kernel-devel-3.10.0-514.10.2.el7.x86_64.rpm > 1f6a8ce592f859a78fc03f5d6eafae0a8f7574f0336c9a111ebbc11ea57d8291 kernel-doc-3.10.0-514.10.2.el7.noarch.rpm > 3ea79ae6d6b7efabd4676e5e537bf43a069ce7b84fd604273c5a454ddba26331 kernel-headers-3.10.0-514.10.2.el7.x86_64.rpm > 89a7eafa0a4ae0a1f7d01df12cc640250557dbffe831062c1cdc718fa3f49527 kernel-tools-3.10.0-514.10.2.el7.x86_64.rpm > 7c412e18af66b6b4250a803e8c81c6c9b88e71b8a5e039108f21033223abf882 kernel-tools-libs-3.10.0-514.10.2.el7.x86_64.rpm > cf48a20efabb6be1adb03d14fe948e360b1930d194458b4dc30ea4f043730c5d kernel-tools-libs-devel-3.10.0-514.10.2.el7.x86_64.rpm > bef65f9243e0e1f0a56592f2a906d3d88fad0d39fd8848240fd2729b801df676 perf-3.10.0-514.10.2.el7.x86_64.rpm > 78004dd93fd62f990c3962e9a9c6cfc46ce4efe974bc425ee1791df9c226fec8 python-perf-3.10.0-514.10.2.el7.x86_64.rpm > > Source: > d9bb044abf6a37556f7935801606f03964941e5fd805085bf012cc29ba6b7dac kernel-3.10.0-514.10.2.el7.centos.plus.src.rpm > 67495a911d87f9f2feaa736f9de2b93575199794338d30e01ec600c14b77d893 kernel-3.10.0-514.10.2.el7.src.rpm > > >

1 0

CentOS 7, firefox, and flash
by m.roth＠5-cent.us 07 Mar '17

07 Mar '17

I posted Friday about this oddity. Now I've got more data, and what's happening is this: if I tell noscript to enable youtube and googlevideo in one tab, not only does it affect *all* tabs, but also affects another browser window opened from the first browser window. Anyone have any clues for a workaround fix? mark

3 2

base64 response for websockets
by Jerry Geis 06 Mar '17

06 Mar '17

I'm trying to generate the correct response to a websocket connect. The websocket connect is: GET /chat HTTP/1.1 Host: example.com:8000 Upgrade: websocket Connection: Upgrade Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ== Sec-WebSocket-Version: 13 So I take the Sec-WebSocket-Key above and add the extra part and put that in /tmp/sha1 dGhlIHNhbXBsZSBub25jZQ==258EAFA5-E914-47DA-95CA-C5AB0DC85B11 I then run sha1sum /tmp/sha1 and it gives: 05082898ab78f6da9c1ad2587b8012cd0cf52172 I put that in a file /tmp/base64 and run base64 /tmp/base64 The result of that is: MDUwODI4OThhYjc4ZjZkYTljMWFkMjU4N2I4MDEyY2QwY2Y1MjE3Mgo= Which is not correct. Its supposed to be s3pPLMBiTxaQ9kYGzzhZRbK+xOo= What am I not doing correct? Thanks, Jerry

2 2

dracut-initqueue errors while using virt-install + kickstart file
by Germano Massullo 06 Mar '17

06 Mar '17

I am trying to install a CentOS qemu/kvm virtual machine using a virt-install script[1]. Since Anaconda text user interface does not permit to users to edit filesystem type and mount points[2], I decided to use a kickstart file to customize such settings. To create a kickstart file, I used a trick: I installed a CentOS machine using Anaconda graphical user interface, and I made all customizations I need, then when the installation has been completed, I got the kickstart file (generated by Anaconda) in /root. [3] Then I added --grow flags to enlarge "/" as much as possible. After that, I started the virt-install script passing as input an ISO and the kickstart file, but the installation failed with logs [4]. Where did I make mistakes? Thank you for your time [1]: https://paste.fedoraproject.org/paste/OrbunqjpK7pxGlkUJdnV015M1UNdIGYhyRLiv… [2]: https://bugzilla.redhat.com/show_bug.cgi?id=1426126 [3]: https://paste.fedoraproject.org/paste/4zKZ3RopjwX5OmpuVAhwG15M1UNdIGYhyRLiv… [4]: https://paste.fedoraproject.org/paste/QYijE3MFeyoGpGdgSHPp715M1UNdIGYhyRLiv…

1 2

How to automatically confirm importing repo key?
by Yuri Kanivetsky 05 Mar '17

05 Mar '17

Hi, I'm trying to set up provisioning LXC container running CentOS. And among other things, I need to install nginx + passenger from a non-official repo (the docs: https://www.phusionpassenger.com/library/install/nginx/install/oss/el7/) With this playbook: - hosts: all tasks: # https://docs.ansible.com/ansible/yum_repository_module.html - name: Add repository yum_repository: # from https://oss-binaries.phusionpassenger.com/yum/definitions/el-passenger.repo name: passenger description: Passenger repository baseurl: https://oss-binaries.phusionpassenger.com/yum/passenger/el/$releasever/$bas… repo_gpgcheck: 1 gpgcheck: 0 enabled: 1 gpgkey: https://packagecloud.io/gpg.key sslverify: 1 sslcacert: /etc/pki/tls/certs/ca-bundle.crt # http://docs.ansible.com/ansible/command_module.html - name: (1) Add repository key (shell command) command: rpm --import https://packagecloud.io/gpg.key # # http://docs.ansible.com/ansible/rpm_key_module.html # - name: (2) Add repository key (python code) # rpm_key: # key: https://packagecloud.io/gpg.key # http://docs.ansible.com/ansible/yum_module.html - name: Install nginx yum: name={{ item }} with_items: nginx ansible fails performing the last task with: Failure talking to yum: failure: repodata/repomd.xml from passenger: [Errno 256] No more mirrors to try. https://oss-binaries.phusionpassenger.com/yum/passenger/el/7/x86_64/repodat…: [Errno -1] repomd.xml signature could not be verified for passenger no matter which way of importing key I choose (1 or 2). If I then ssh to container and run `yum install nginx` manually, it says: Retrieving key from https://packagecloud.io/gpg.key Importing GPG key 0xD59097AB: Userid : "packagecloud ops (production key) <ops(a)packagecloud.io>" Fingerprint: 418a 7f2f b0e1 e6e7 eabf 6fe8 c2e7 3424 d590 97ab From : https://packagecloud.io/gpg.key Is this ok [y/N]: And I suppose this extra confirmation request is what makes ansible fail. Can it be confirmed automatically? I tried to make it clear for those who don't use ansible, but feel free to ask questions. Thanks in advance. Related Stack Overflow question (just in case): http://stackoverflow.com/questions/38327406/how-to-install-yum-repository-k… Regards, Yuri

1 1

How to rebuilt the pxe initramfs
by Andreas Benzler 05 Mar '17

05 Mar '17

Hello Guys, i read the official red hat documentation of "How built pxe initramfs", but it does not work" the inluded version of initramfs is about 42MB, mine 13MB. This is again one of more failure of redhat documentation. That's why i ask here. In my despair tried a very hard version: dracut -v -f -m "nfs network base" --add-drivers "nfsv4 (find /lib/modules/3.10.0-514.el7.x86_64/kernel/drivers/net ) $(find /lib/modules/3.10.0-514.el7.x86_64/kernel/drivers/virtio/) "; chmod 644 /boot/initramfs-3.10.0-514.el7.x86_64.img In the past i did it on ubuntu and it works flawless - means in principal I know what I do. Thanks for help Sincerely Andy PS: given kernel & initramfs from iso boots..

1 1

Python search path
by Alice Wonder 05 Mar '17

05 Mar '17

Hello, Working on a project to create clean spec files for libbitcoin for CentOS 7 (and eventually I want them to work in Fedora 25+ too) These spec files must work with the user defines an alternate %{_prefix} before building them. This means that python components would be installed in /opt/libbitcoin (or whatever) instead of in /usr so %{python2_sitelib} and %{python2_sitearch} no longer would apply. sys.path.append looks like the way to tell python about a new path to look for stuff, but I'm guessing there are guidelines somewhere for how that is suppose to properly done from within spec files. Unfortunately I can't find them, and search engines are getting harder and harder to use to find technical related information, always changing my query and showing me completely unrelated results. Anyway I didn't see anything in the Fedora packaging guidelines for python, that seems to be targeting a prefix of /usr Thanks for any links or suggestions.

2 3

CentOS 7 iso file SHA-256 hashes
by Darr247 04 Mar '17

04 Mar '17

I downloaded CentOS-7-x86_64-Everything.iso (8,233,418,752 bytes) by clicking on the 'Everything' link in the 'Rolling' line on https://wiki.centos.org/Download (supposedly the 1611 build). But when I look in the sha256sum.txt file from https://buildlogs.centos.org/rolling/7/isos/x86_64/ (where Chrome says that iso came from), there is no SHA hash for a file of that name. The reason I wanted to check it is because it's a different size than another one I found on my hard drive while looking through the Downloads history in Chrome. The other file I found was CentOS-7-x86_64-Everything-1611.iso (8,280,604,672 bytes), which returns a hash of af4969ebbdc479d330de97c5bfbb37eedc64c369f009cb15a97f9553ba441c88 and that matches the value given in the sha256sum.txt file for the file of that name. So, my question is tri-fold. what's the SHA-256 hash supposed to be for the file given when clicking the 'Everything' link on centos.org. then, why is the 'official' download link sending a file that's not listed in the hash results. and finally, why is the file sent thusly, different from another 'everything' iso allegedly from the same build? Thanks.

2 2

New C7 kernel ABI and kmods
by Lamar Owen 04 Mar '17

04 Mar '17

All, This is just a heads-up that the new C7 update kernel breaks ABI compatibility, at least as far as using the ELrepo nVidia drivers is concerned. I have posted more details to the ELrepo list; but since many folks use the Elrepo kmods I thought a heads-up would be appropriate. If you use the ELrepo nvidia kmod you will either need to hold off on the kernel update or uninstall the nvidia kmod.

4 4

last update yum and kernel Problem
by Günther J. Niederwimmer 04 Mar '17

04 Mar '17

Hello, the last update brings much Problems ? On my System the most KVM client have a crashed yum after reboot the new kernel is broken and have a panic screen I have to reboot to a older kernel ? The first I have to run yum-complete-transaction afterward i have to reinstall the kernel ?? this helps to restart the KVM Client ! is it possible the deltarpm is broken ? Also RPM or "yum check" have a problem with the new update for ipa-* I mean the problem is the naming 4.4.0-14.el7.centos.6 -- mit freundlichen Grüssen / best regards Günther J. Niederwimmer

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss