Discuss

discuss@lists.centos.org

3 participants
34748 discussions

Very odd issue w/ a CentOS 6 system
by m.roth＠5-cent.us 23 Mar '16

23 Mar '16

Now, this is one we have an issue with: it's got a bttv card, and motion running on it. It's a Dell PE R720. For some reason, it has never liked the card: 20 min after reboot, it says fatal bus error... but nothing's wrong, and it runs just fine. Well, expect that we need to keep it on the 2.6.32-431.20.3 kernel, because *everything* later, it randomly starts rebooting, several times a day. But we've never had anything like this, and I've never seen anything like this: the bttv module was throwing a ton of IRQ lockup errors. Restarting motion didn't help. So I was wondering if the issue was with the bttv kernel module, so I rmmoded that, then modprobe bttv... and that was all she wrote. The system lost network connectivity. Ok, I go over to the rack, and plug in the monitor-on-a-stick, and that's where it got very strange, and I've never seen anything like this: I turn up the monitor... and see it announcing it had seen a new USB device (the keyboard)... and no login, it kept printing copying data [<percentage done>%] When it hit 100%, it rebooted. So - has anyone ever seen this behavior? Anyone have an idea what it was copying? mark

3 9

Re: [CentOS] Mirror update
by Ryan Nix 23 Mar '16

23 Mar '16

> HTTP: http://mirror.sesp.northwestern.edu/centos/ <http://mirror.sesp.northwestern.edu/centos/> > Sync schedule: Hourly > Bandwidth: Internet2 > Location: Evanston, Illinois > Sponsor: Northwestern University School of Education and Social Policy > Sponsor URL: www. <http://www.sesp.northwestern.edu/>sesp <http://www.sesp.northwestern.edu/>. <http://www.sesp.northwestern.edu/>northwestern <http://www.sesp.northwestern.edu/>.edu <http://www.sesp.northwestern.edu/> > IP to authorize: 129.105.185.172 > Email contact: r-nix(a)northwestern.edu <mailto:r-nix@northwestern.edu>

1 0

CentOS 7, systemd, nmcli, wifi, oh, my...
by m.roth＠5-cent.us 23 Mar '16

23 Mar '16

I've been googling, but haven't come up with a satisfactory answer to the question of how I permanently turn off wifi on a workstation or server (which are *all* hardwired). I see I can turn wifi off... but I don't know that it's permanent. mark

5 5

no kernel-debuginfo or source RPM for kernel 3.18.21-17
by Thanos Makatos 23 Mar '16

23 Mar '16

I'm trying to debug what I believe to be a kernel bug (https://lists.centos.org/pipermail/centos-devel/2016-March/014463.html) and I'm trying to set up systemtap for that. I'm trying to set up systemtap on kernel 3.18.21-17.el6.x86_64 (Xen 4.4.3-10.el6) and it requires the kernel-debuginfo package, however I cannot find anywhere package kernel-debuginfo-3.18.21-17.el6.x86_64.rpm. In addition, I cannot find anywhere the kernel source RPM in order to build the debuginfo RPM. Should these packages be available in the first place? Am I missing something? -- Thanos Makatos

2 4

CentOS-announce Digest, Vol 133, Issue 10
by centos-announce-request＠centos.org 23 Mar '16

23 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Announcing release of Ruby on Rails 4.2 on CentOS Linux 6 x86_64 SCL (Dominic Cleal) 2. Announcing release of Ruby on Rails 4.2 on CentOS Linux 7 x86_64 SCL (Dominic Cleal) 3. CEBA-2016:0469 CentOS 6 haproxy BugFix Update (Johnny Hughes) 4. CEBA-2016:0480 CentOS 6 grub BugFix Update (Johnny Hughes) 5. CEBA-2016:0468 CentOS 6 389-ds-base BugFix Update (Johnny Hughes) 6. CEBA-2016:0476 CentOS 6 glusterfs BugFix Update (Johnny Hughes) 7. CEBA-2016:0473 CentOS 6 kexec-tools BugFix Update (Johnny Hughes) 8. CEBA-2016:0472 CentOS 6 crash BugFix Update (Johnny Hughes) 9. CEEA-2016:0479 CentOS 6 sdhci Enhancement Update (Johnny Hughes) 10. CEBA-2016:0474 CentOS 6 sssd BugFix Update (Johnny Hughes) 11. CEBA-2016:0483 CentOS 6 libvirt BugFix Update (Johnny Hughes) 12. CEBA-2016:0481 CentOS 6 mysql BugFix Update (Johnny Hughes) 13. CEEA-2016:0470 CentOS 6 ca-certificates Enhancement Update (Johnny Hughes) 14. CEBA-2016:0484 CentOS 6 sg3_utils BugFix Update (Johnny Hughes) 15. CEBA-2016:0487 CentOS 6 vsftpd BugFix Update (Johnny Hughes) 16. CEBA-2016:0485 CentOS 6 libcgroup BugFix Update (Johnny Hughes) 17. CEBA-2016:0488 CentOS 6 kdebase BugFix Update (Johnny Hughes) 18. CEBA-2016:0486 CentOS 6 zsh BugFix Update (Johnny Hughes) 19. CEBA-2016:0471 CentOS 6 httpd BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 21 Mar 2016 13:28:49 +0000 From: Dominic Cleal <dominic(a)cleal.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] Announcing release of Ruby on Rails 4.2 on CentOS Linux 6 x86_64 SCL Message-ID: <56EFF711.5080002(a)cleal.org> Content-Type: text/plain; charset="utf-8" I am pleased to announce the immediate availability of Ruby on Rails 4.2 on CentOS Linux 6 x86_64, delivered via a Software Collection (SCL) built by the CentOS SCLo Special Interest Group (https://wiki.centos.org/SpecialInterestGroup/SCLo) QuickStart ---------- You can get started in three easy steps: $ sudo yum install centos-release-scl $ sudo yum install sclo-ror42 $ scl enable sclo-ror42 bash At this point you can use Ruby on Rails in the usual way with the `rails` command. Examples of commands might be: $ rails new --skip-bundle example $ rails generate model Article 'byebug' and 'webconsole' development dependencies are not supplied, so should be removed from generated Gemfiles. In order to compile assets, uncomment or add the gem 'therubyracer' to the application Gemfile. Add the v8314 SCL to use this supplied gem: $ scl enable sclo-ror42 v8314 bash To deploy an application under Passenger, see the wiki documentation: https://wiki.centos.org/SpecialInterestGroup/SCLo/RubyOnRails About Software Collections -------------------------- Software Collections give you the power to build, install, and use multiple versions of software on the same system, without affecting system-wide installed packages. Each collection is delivered as a group of RPMs, with the grouping being done using the name of the collection as a prefix of all packages that are part of the software collection. The sclo-ror42 collection delivers Ruby on Rails version 4.2.5.1, modelled on previous collections (e.g. rh-ror41) and provides all of Rails with full asset compilation support, plus extras such as jQuery (1.11.2 & 2.1.3). It depends on the rh-ruby22 and v8314 collections. For more on Ruby on Rails, see http://rubyonrails.org/. The SCLo SIG in CentOS ---------------------- The Software Collections SIG group is an open community group co-ordinating the development of the SCL technology, and helping curate a reference set of collections. In addition to the Rails collection released here, we also build and deliver databases, web servers, and language stacks including multiple versions of PostgreSQL, MariaDB, Apache HTTP Server, NodeJS, Ruby, Python and others. Software Collections SIG release was announced at https://lists.centos.org/pipermail/centos-announce/2015-October/021446.html You can learn more about Software Collections concepts at: http://softwarecollections.org You can find information on the SIG at https://wiki.centos.org/SpecialInterestGroup/SCLo ; this includes howto get involved and help with the effort. We meet every second Wednesday at 16:00 UTC in #centos-devel (ref: https://www.centos.org/community/calendar) for an informal open forum open to anyone who might have comments, concerns or wants to get started with SCLs in CentOS. -- Dominic Cleal dominic(a)cleal.org

1 0

rpmbuild annoyance
by m.roth＠5-cent.us 22 Mar '16

22 Mar '16

I'm building a package (rasmol, if you must know) from an srpm. It's an FC20 pkg, nothing older, but the software itself hasn't changed. So... I try the build, and it fails, telling me: gcc: %__global_ldflags: No such file or directory make: *** [rasmol] Error 1 Now, this isn't a brand-new package, so I'm puzzled by the error. Is there supposed to be something I need to add to the rpmbuild command line, or...? Clues for the poor. mark

4 4

Postfix Installed by default on CentOS 7 Minimal
by Igal ＠ Lucee.org 22 Mar '16

22 Mar '16

Is there a reason that Postfix is installed and enabled by default on CentOS 7 minimal? -- Igal Sapir Lucee Core Developer Lucee.org <http://lucee.org/>

2 1

CentOS-announce Digest, Vol 133, Issue 9
by centos-announce-request＠centos.org 22 Mar '16

22 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2016:0464 CentOS 7 i40e Enhancement Update (Johnny Hughes) 2. CESA-2016:0466 Moderate CentOS 6 openssh Security Update (Johnny Hughes) 3. CESA-2016:0465 Moderate CentOS 7 openssh Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 21 Mar 2016 18:35:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0464 CentOS 7 i40e Enhancement Update Message-ID: <20160321183513.GA17500(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0464 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0464.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c24738b7d58cc0a24d4ba2bb6ff090bb641fa0f12bcc0e7f31ffcc2cc3a6e773 kmod-i40e-1.3.21_k-1.el7_2.x86_64.rpm Source: 867a83ca723b110a44c2aca41b39cd373751a44ac6ae1d17336ffaca02b5c3e8 i40e-1.3.21_k-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 21 Mar 2016 22:18:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0466 Moderate CentOS 6 openssh Security Update Message-ID: <20160321221829.GA20930(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0466 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0466.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b21827af15406e5fb1e14d7ab71f160edd0fd8ec6d59ef49a0a561d5d4b8a419 openssh-5.3p1-114.el6_7.i686.rpm 2f8adbe69f2cded0bccb7286ee55bac1ae517f4a2a5bca19914e3f6b190f2a59 openssh-askpass-5.3p1-114.el6_7.i686.rpm 83429d1efd75f100d1f8b705d082813ffef80174809b06cd67ce192344f0816e openssh-clients-5.3p1-114.el6_7.i686.rpm 80749c749e2e2172ebfa1bdd85d150ed7a54a6c9a693f2aceb5024f6ee5f7f95 openssh-ldap-5.3p1-114.el6_7.i686.rpm 84f986e02d188722130d943aa279a576f5b90125c94bd41bf1669794cac34604 openssh-server-5.3p1-114.el6_7.i686.rpm a800afcd8667f3fcae2424ad39e4b28875324b765a355a6894fa76a148d77e56 pam_ssh_agent_auth-0.9.3-114.el6_7.i686.rpm x86_64: 077603015723d9c96bed95f4215ae642829f009b7bd4f8b5eb44c214a4cf9b23 openssh-5.3p1-114.el6_7.x86_64.rpm af443f9daefbbb5fed105ed9a70bf59e765dca26589d7c0448e579ba8dd15e62 openssh-askpass-5.3p1-114.el6_7.x86_64.rpm e9be7aece75e15e5cf41e509fb36e0b3e7eb3d2ca847fe100336c20fa78945f3 openssh-clients-5.3p1-114.el6_7.x86_64.rpm 77b33f82d02447a6ff11e2a790cf040d0766c7c36ca7290da7c62ed76a892765 openssh-ldap-5.3p1-114.el6_7.x86_64.rpm 9572a0632e4c9c7fd28a23f14843547629a05fff9586696e62c3617a2278818a openssh-server-5.3p1-114.el6_7.x86_64.rpm a800afcd8667f3fcae2424ad39e4b28875324b765a355a6894fa76a148d77e56 pam_ssh_agent_auth-0.9.3-114.el6_7.i686.rpm dae8b23912f2b7a76d9b53a1d133dbb18c467e46bf7a08b3e1941a3be4a998e3 pam_ssh_agent_auth-0.9.3-114.el6_7.x86_64.rpm Source: 1d22a68fb98d5ee4f4cc473b11a2da154568d8a8b4939b568d3094493b4c231a openssh-5.3p1-114.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 21 Mar 2016 22:38:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0465 Moderate CentOS 7 openssh Security Update Message-ID: <20160321223814.GA39827(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0465 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0465.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7de3cbf4ec75c073b1aaecf2fae539fe6b95742a7ffd4333f9a45dbb85191130 openssh-6.6.1p1-25.el7_2.x86_64.rpm d1a6a87820d542d51a05017a6b6f14ebe35fce7aa3cb0d9efe2a0750d548a7ef openssh-askpass-6.6.1p1-25.el7_2.x86_64.rpm 9ccca04375b3466810c7bff2fd902436871468192249fefafba8db1324ca2e48 openssh-clients-6.6.1p1-25.el7_2.x86_64.rpm 03dbf819fecec3fd39f6971b35acf2d385654f87f7e477e068875cfa85678ca2 openssh-keycat-6.6.1p1-25.el7_2.x86_64.rpm 81df6fd13ab30aedc6ef397d476a49d5f272fb569addc8a3f67370a53d6dd1cd openssh-ldap-6.6.1p1-25.el7_2.x86_64.rpm 29384ae8c514bc7fba475901e73fd502bb61d74e4e70ce64b0006bdd4fd6fc02 openssh-server-6.6.1p1-25.el7_2.x86_64.rpm 8caca16e598dfee9a3559865501a948d7c81d22950038a6d2f89e9e9ba8b5b7a openssh-server-sysvinit-6.6.1p1-25.el7_2.x86_64.rpm fce6a61ae3a6cc1eb857ddd53a8e27e82521b0a67e09ac6a1bc3e226de5e2dc9 pam_ssh_agent_auth-0.9.3-9.25.el7_2.i686.rpm f9705216270f97985d10275390cb32fbad3325c23bcf03db52956c6bfb45179d pam_ssh_agent_auth-0.9.3-9.25.el7_2.x86_64.rpm Source: 2274b5597edc75fe23e6b10b8a727105ca3412906338909331f3da5f87054ff6 openssh-6.6.1p1-25.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 9 ***********************************************

1 0

hosted VMs, VLANs, and firewalld
by Devin Reade 22 Mar '16

22 Mar '16

I'm looking for some information regarding the interaction of KVM, VLANs, firewalld, and the kernel's forwarding configuration. I would appreciate input especially from anyone already running a similar configuration in production. In short, I'm trying to figure out if a current configuration is inadvertently opening up traffic across network segments. On earlier versions of CentOS I've run HA clusters with and without VMs (in this case, based on xen). On those clusters, both the host machine's IPs and the VM IPs were in the same subnet (call it the DMZ). In a CentOS 7 test HA cluster I'm building I want both traditional services running on the cluster and VMs running on both nodes (not necessarily under control of the cluster). In the new setup, I'd like to retain *some* VMs on the same subnet as the host machine's IP, however have other VMs on different VLANs. So the physical topology looks like this: ----------------- DMZ ------------------ | | bridged-if bridged-if | | node-1 --------- heartbeat-if -------- node-2 | | --|-- --|-- / \ / \ vlan2 vlan3 vlan2 vlan3 \ / \ / bridged-if bridged-if | | --------------- --------------- | | managed switch | | vlan2-net vlan3-net A given VM will be assigned a single network interface, either in the DMZ, on vlan2, or on vlan3. Default routes for each of those networks are essentially different gateways. (The CentOS boxes in questions are *not* intended to be routers.) I'll take a brief aside here to describe the bridge/vlan configuration: Interface Details ================= On the DMZ side, the physical interface is eno1 on which is layered bridge br0. br0 is assigned a static IP used by the physical node (host OS). VMs that should be on the DMZ get assigned br0 as their underlying network device. On the other network side, the physical interface is enp1s0, on which is layered bridge br2, on which is layered VLAN devices enp1s0.2 and enp1s0.3. None of these have IPs assigned in the host OS; The host is not supposed to have direct access to vlan2 or vlan3. VMs that are supposed to be on vlan2 and vlan3 are assigned either enp1s0.2 or enp1s0.3, respectively, as their underlying network device. ================= A quick test with a VM using enp1s0.2 seems to show the desired connectivity. However I'm looking at the firewalld configuration on the host nodes and am not sure if I'm missing something. There are currently two active zones defined, 'dmz' and 'heartbeat'. The 'heartbeat' zone only contains the physical interface for the heartbeat network between nodes which is fine. The 'dmz' zone contains br0, br2, eno1, enp1s0, enp1s0.2, and enp1s0.3. It looks like default that firewall rules aren't applied to bridge devices so we can ignore those. enp1s0 is an expected interface for that zone. Where it gets muddy is enp1s0, enp1s0.2 and enp1s0.3. Since the host shouldn't have any IPs on those interfaces, what is the relevence of having them in the DMZ zone or another zone? By having them in the 'dmz' zone, does this mean that host firewall rules will impact VMs? Finally, `sysctl -a | grep forward | grep ' = 1'` shows: net.ipv4.conf.all.forwarding = 1 net.ipv4.conf.br2.forwarding = 1 net.ipv4.conf.default.forwarding = 1 net.ipv4.conf.eno1.forwarding = 1 net.ipv4.conf.enp1s0.forwarding = 1 net.ipv4.conf.enp1s0/2.forwarding = 1 net.ipv4.conf.enp1s0/2.forwarding = 1 net.ipv4.conf.enp4s0.forwarding = 1 net.ipv4.conf.lo.forwarding = 1 net.ipv4.conf.virbr0.forwarding = 1 net.ipv4.conf.virbr0-nic.forwarding = 1 net.ipv4.ip_forward = 1 I understand that for bridging and vlans to work that I likely need these forwardings active, but am I opening things up so that (for example) a maliciously crafted packet seen on the enp1s0.2 interface could jump onto the dmz subnet on eno1? I have to admit, the firewall-config GUI seems more like it's oriented to either the local machine or other machines behind NAT, rather than a router. (I don't want the host nodes generally acting as routers, but how can I tell if they are doing so inadvertently?) Further my google-fu isn't bringing up much in the way of definitive information as to how all the pieces interact. I'm hoping it is the case that packets seen on the DMZ interface bound for vlan2 and vlan3 are dropped, and that the host can't be reached via vlan2 or vlan3, but it's not clear that this is the case. Clues are welcome. Devin

3 4

IPSec multiple VPN setups
by Glenn Pierce 22 Mar '16

22 Mar '16

Hi I hope someone can answer something I'm sure is quite basic. I am following the instructions at https://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-vpn.html On setting up a VPN The part I am having trouble with is when it show the /etc/racoon/racoon.conf file. But it doesn't say whay you have to do with this file. When I bring up my connection ifup bicester I get RTNETLINK answers: No such device looking at /var/messages I see ERROR: failed to bind to address 127.0.0.1[500] (Address already in use). Mar 21 17:01:05 racoon: ERROR: failed to bind to address *.*.*.*[500] (Address already in use). Mar 21 17:01:05 racoon: ERROR: failed to bind to address *.*.*.*[500] (Address already in use). Mar 21 17:01:05 racoon: ERROR: failed to bind to address *.*.*.*[500] (Address already in use). Mar 21 17:01:05 racoon: ERROR: failed to bind to address ::1[500] (Address already in use). Mar 21 17:01:05 racoon: INFO: fe80::bcef:4fff:fe66:82ec%eth0[500] used as isakmp port (fd=25) There was an existing setup done long ago. How can I setup more than one vpn connection (manually as this is a headless server) or is that not possible ? Thanks for any pointers

7 22

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss