Discuss

discuss@lists.centos.org

3 participants
34748 discussions

CentOS install disable USB keyboard on Acer AXC 603G UW13
by Juan De Mola 26 Feb '16

26 Feb '16

Hi. I am triying to set up CentOS 5 on an Acer AXC 603G UW13. The install turn off my USB keyboard between /sbin/loader and the media check prompt screen. What I can do to get the install working with the USB keyboard? Thanks. Juan De Mola molaxp(a)aol.com

5 13

IPtables block user from outbound ICMP
by John Cenile 26 Feb '16

26 Feb '16

Hello, Is it possible at all to block all users other than root from sending outbound ICMP packets on an interface? At the moment we have the following two rules in our IPtables config: iptables -A OUTPUT -o eth1 -m owner --uid-owner 0 -j ACCEPT iptables -A OUTPUT -o eth1 -j DROP But this still allows ICMP for some reason (but *does* block other TCP/UDP packets, which is what we want, as well as ICMP). Thanks.

7 8

CentOS 7 SELinux issue
by Alice Wonder 25 Feb '16

25 Feb '16

Trying to add SELinux support to my bitcoin package. Keep getting this on install: SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.29, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.29: No such file or directory /sbin/load_policy: Can't load policy: No such file or directory libsemanage.semanage_reload_policy: load_policy returned error code 2. I Tried yum reinstall selinux-policy selinux-policy-targeted restorecon -R -v /etc/selinux as suggested on some mailing lists. Didn't work, same issue. How can I troubleshoot what is causing this? The policy.29 file exists. The RPM responsible for it verifies (and was reinstalled) I don't ordinarily run SELinux and do not have it enabled. Things like that are why, it always ALWAYS got in the way of productivity and when I did run it and I was never hacked without it, so... but I need to figure out what the problem is here.

4 4

Bitcoin for CentOS 7
by Alice Wonder 24 Feb '16

24 Feb '16

For those interested I have a working spec file for Bitcoin 0.12.0 https://github.com/AliceWonderMiscreations/bitcoin/blob/master/contrib/rpm/… I believe the only BuildRequires that isn't in CentOS/EPEL is miniupnpc-devel but that's trivial to build as well. With Bitcoin 0.12.0 the ECC stuff that Red Hat ripped out of OpenSSL doesn't matter anymore. -=- That spec file is somewhat based on what https://www.ringingliberty.com/bitcoin/ does for Fedora / CentOS with a couple noted differences - A) I don't have SELinux stuff (yet). His SELinux stuff is broken on CentOS 7. Only matters for the bitcoin-server package, the GUI client doesn't seem to matter. B) He uses system BerkeleyDB. I build BerkeleyDB when building bitcoin because BerkeleyDB is fragile enough that changes to it can cause a wallet that can't be read by other clients. C) He adds a patch that adds functionality needed by a very small demographic - hardware machines that sell bitcoins. I prefer to not add that patch because I prefer pristine source rather than modifying what the devs produced for a feature 99.9% of the population doesn't need. So I prefer to stick with the precise version that bitcoin.org uses in the binary builds they distribute. Happens to be same version CentOS 7 has now but that may not always be the case. It isn't with CentOS 6. Anyway if anyone one this list has interest, figured I'd share the spec file. Adding SELinux to the server package I will work on. Oh the referenced patch that is there is only needed for LibreSSL, you can comment it out to build against OpenSSL. 0.12.0 seems much faster at indexing than previous versions, and catches up faster when it is behind on blocks.

3 8

CentOS 7, odd message from nfsdcltrack
by m.roth＠5-cent.us 23 Feb '16

23 Feb '16

Is this normal, or a bug, perhaps a mismatch in two pieces (and this server was just updated late yesterday afternoon, and rebooted this morning): <timestamp> <servername> nfsdcltrack[12128]: sqlite_insert_client: insert statement prepare failed: table clients has 2 columns but 3 values were supplied mark

2 1

Substitute pdftk with other command
by Dario Lesca 22 Feb '16

22 Feb '16

Hi, I must migrate a Centos5 server on Centos7 On server Centos5 there is a shell procedure witch add to PDF a timestamp like this example: http://i.stack.imgur.com/OBsqX.png with this command: $ pdftk input.pdf stamp overlay.pdf output stamped.pdf Into Centos7 pdftk it is no longer allowed Someone knows some other command to replace it or other ways to do this? Or how I can install pdftk on Centos7. Many thanks for your help. -- Dario Lesca (inviato dal mio Linux Fedora 23 Workstation)

3 4

Network hangs after several hours (Centos 6 recently upgraded kernel/glibc)
by Ian B 22 Feb '16

22 Feb '16

Hi all, We have a development server we have just tried updating the kernel & glibc after recent recommendations. Its been stable previously for a few years with only scheduled reboots. Its running Centos 6.6(final) 2.6.32-573.18.1.el6.x86_64 GNU libc 2.12 Upgraded via YUM, rebooted, all fine for several hours, and then network seemed to hang. Not much happening as its a dev server we are testing before moving to production. Googling, I see there is some history of e100e driver having issues, and I'm wondering if it could be related. Does anyone have any thoughts on where to do with it, as I'm assuming it will hang again later. Thanks, Ian Feb 18 05:04:36 kernel: WARNING: at net/sched/sch_generic.c:261 dev_watchdog+0x26d/0x280() (Not tainted) Feb 18 05:04:36 kernel: Hardware name: X9SCL/X9SCM Feb 18 05:04:36 kernel: NETDEV WATCHDOG: eth0 (e1000e): transmit queue 0 timed out Feb 18 05:04:36 kernel: Modules linked in: ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables ipv6 ext4 jbd2 e1000e serio_raw i2c_i801 i2c_core sg iTCO_wdt iTCO_vendor_support shpchp ext3 jbd mbcache raid1 sd_mod crc_t10dif ahci dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan] Feb 18 05:04:36 kernel: Pid: 0, comm: swapper Not tainted 2.6.32-220.4.2.el6.x86_64 #1 Feb 18 05:04:36 kernel: Call Trace: Feb 18 05:04:36 kernel: <IRQ> [<ffffffff81069a17>] ? warn_slowpath_common+0x87/0xc0 Feb 18 05:04:36 kernel: [<ffffffff81069b06>] ? warn_slowpath_fmt+0x46/0x50 Feb 18 05:04:36 kernel: [<ffffffff8144a4fd>] ? dev_watchdog+0x26d/0x280 Feb 18 05:04:36 kernel: [<ffffffff8108b3fd>] ? insert_work+0x6d/0xb0 Feb 18 05:04:36 kernel: [<ffffffff8144a290>] ? dev_watchdog+0x0/0x280 Feb 18 05:04:36 kernel: [<ffffffff8107c7f7>] ? run_timer_softirq+0x197/0x340 Feb 18 05:04:36 kernel: [<ffffffff810a0a10>] ? tick_sched_timer+0x0/0xc0 Feb 18 05:04:36 kernel: [<ffffffff8102ad6d>] ? lapic_next_event+0x1d/0x30 Feb 18 05:04:36 kernel: [<ffffffff81072001>] ? __do_softirq+0xc1/0x1d0 Feb 18 05:04:36 kernel: [<ffffffff81095610>] ? hrtimer_interrupt+0x140/0x250 Feb 18 05:04:36 kernel: [<ffffffff8100c24c>] ? call_softirq+0x1c/0x30 Feb 18 05:04:36 kernel: [<ffffffff8100de85>] ? do_softirq+0x65/0xa0 Feb 18 05:04:36 kernel: [<ffffffff81071de5>] ? irq_exit+0x85/0x90 Feb 18 05:04:36 kernel: [<ffffffff814f4d70>] ? smp_apic_timer_interrupt+0x70/0x9b Feb 18 05:04:36 kernel: [<ffffffff8100bc13>] ? apic_timer_interrupt+0x13/0x20 Feb 18 05:04:36 kernel: <EOI> [<ffffffff812c49de>] ? intel_idle+0xde/0x170 Feb 18 05:04:36 kernel: [<ffffffff812c49c1>] ? intel_idle+0xc1/0x170 Feb 18 05:04:36 kernel: [<ffffffff813f9ef7>] ? cpuidle_idle_call+0xa7/0x140 Feb 18 05:04:36 kernel: [<ffffffff81009e06>] ? cpu_idle+0xb6/0x110 Feb 18 05:04:36 kernel: [<ffffffff814d40ca>] ? rest_init+0x7a/0x80 Feb 18 05:04:36 kernel: [<ffffffff81c1ff76>] ? start_kernel+0x424/0x430 Feb 18 05:04:36 kernel: [<ffffffff81c1f33a>] ? x86_64_start_reservations+0x125/0x129 Feb 18 05:04:36 kernel: [<ffffffff81c1f438>] ? x86_64_start_kernel+0xfa/0x109 Feb 18 05:04:36 kernel: ---[ end trace 21915186e9d87b29 ]--- modinfo e1000e | grep version version: 3.2.5-k srcversion: 8CCA78B3C15DE6229299348 vermagic: 2.6.32-573.18.1.el6.x86_64 SMP mod_unload modversions 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 Processor Family DRAM Controller (rev 09) 00:1a.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #2 (rev 05) 00:1c.0 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 1 (rev b5) 00:1c.4 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 5 (rev b5) 00:1d.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #1 (rev 05) 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev a5) 00:1f.0 ISA bridge: Intel Corporation C202 Chipset Family LPC Controller (rev 05) 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset Family SATA AHCI Controller (rev 05) 00:1f.3 SMBus: Intel Corporation 6 Series/C200 Series Chipset Family SMBus Controller (rev 05) 02:00.0 Ethernet controller: Intel Corporation 82574L Gigabit Network Connection 03:03.0 VGA compatible controller: Matrox Electronics Systems Ltd. MGA G200eW WPCM450 (rev 0a)

5 8

where did SCL go?
by jason welsh 22 Feb '16

22 Feb '16

monsterjam:/etc/letsencrypt/archive/monsterjam # yum --enablerepo=extras install centos-release-SCL Loaded plugins: fastestmirror, remove-with-leaves Setting up Install Process Loading mirror speeds from cached hostfile * base: mirror.dattobackup.com * epel: mirror.us.leaseweb.net * extras: distro.ibiblio.org * updates: mirror.netdepot.com No package centos-release-SCL available. Error: Nothing to do monsterjam.org:/etc/letsencrypt/archive/monsterjam # cat /etc/centos-release CentOS release 6.7 (Final) monsterjam:/etc/letsencrypt/archive/monsterjam # any ideas?

3 3

Kernel panic and crash, was Re: [CentOS-announce] CEBA-2016:0150 CentOS 6 kernel BugFix Update
by Max Pyziur 21 Feb '16

21 Feb '16

Greetings, I just tried upgrading one of my CentOS boxes to this kernel. It crashes; the screen looks like this: http://www.brama.com/~deckard/P1010308.JPG So, I'm continuing to run on kernel-2.6.32-504.23.4.el6.x86_64 I had previously reported this, and I was told that the reported bug was here: https://bugs.centos.org/view.php?id=9374 Looking at it now, I see that it is closed. It's odd that CentOS is releasing a production kernel that fails. fyi, Max Pyziur pyz(a)brama.com On Wed, 10 Feb 2016, Johnny Hughes wrote: > > CentOS Errata and Bugfix Advisory 2016:0150 > > Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0150.html > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > i386: > b5f33a81b28d0a89af970bc08c4a07856c13f9789fe520e90d237dc7a2e5df65 kernel-2.6.32-573.18.1.el6.i686.rpm > 8b375b6d363800343bc325966b4db96347e2508db458547b0df5dc63581e2793 kernel-abi-whitelists-2.6.32-573.18.1.el6.noarch.rpm > cba169e9faf5ebc0ba25011f3b920de1a3a2943b7e46be6292193b31df7b8a5a kernel-debug-2.6.32-573.18.1.el6.i686.rpm > a4bf157c52dc0d736ef7a65a073e543b3f2cf0070aa938da41eeecaca11e783d kernel-debug-devel-2.6.32-573.18.1.el6.i686.rpm > 5151ae3d0f6dde51c1ec991e14b88f0308ef7d46975ee7e9ed036f1381153901 kernel-devel-2.6.32-573.18.1.el6.i686.rpm > 74ff6b30bd2603f2e859e899a653aaac2daa0ee534abd5ab3e32a8ffc2cdb2fb kernel-doc-2.6.32-573.18.1.el6.noarch.rpm > 38a27fbf4e7fa229fe8ab6b8cf25ec08031c376cf51ec38400197bc478d0255a kernel-firmware-2.6.32-573.18.1.el6.noarch.rpm > f318d66d12c72c060e8f644aa90d0c10099f1ab8ba5e24875f2a1ace22e35a57 kernel-headers-2.6.32-573.18.1.el6.i686.rpm > 81ef77b0d7841946bf8825e599c1f6a6015082013b5ea02a836db34e19ca7fbc perf-2.6.32-573.18.1.el6.i686.rpm > a8fa3ef717f09235052dd6bd4285be52ff494ea8c242788df16eda5b9aed7fb6 python-perf-2.6.32-573.18.1.el6.i686.rpm > > x86_64: > 1cb5031871e077e7d70fec7801901a948438d10f226ffb4311540c28f9253a55 kernel-2.6.32-573.18.1.el6.x86_64.rpm > 8b375b6d363800343bc325966b4db96347e2508db458547b0df5dc63581e2793 kernel-abi-whitelists-2.6.32-573.18.1.el6.noarch.rpm > 9f31b8f7f4db48d8ba30c16564cb6ad614d04b7d63811c274134654607cbce08 kernel-debug-2.6.32-573.18.1.el6.x86_64.rpm > a4bf157c52dc0d736ef7a65a073e543b3f2cf0070aa938da41eeecaca11e783d kernel-debug-devel-2.6.32-573.18.1.el6.i686.rpm > 16cb431b4a01c6b3b915e646c971fa0c79e62f4feeffd57939f39df687ebc6a3 kernel-debug-devel-2.6.32-573.18.1.el6.x86_64.rpm > b81c297339078d80dda73d86a1aec61c50d7fb05728585c1ebbe81bb088851bf kernel-devel-2.6.32-573.18.1.el6.x86_64.rpm > 74ff6b30bd2603f2e859e899a653aaac2daa0ee534abd5ab3e32a8ffc2cdb2fb kernel-doc-2.6.32-573.18.1.el6.noarch.rpm > 38a27fbf4e7fa229fe8ab6b8cf25ec08031c376cf51ec38400197bc478d0255a kernel-firmware-2.6.32-573.18.1.el6.noarch.rpm > 9dd3a3533ebb6646bafafef2229b6142fa0277f34a534e7c74f3c8cacafd7296 kernel-headers-2.6.32-573.18.1.el6.x86_64.rpm > 5ff27ecbdca7013f093d697f4ba3bcaa9b14be03ef79cafb4a3ed3d0aef1bf69 perf-2.6.32-573.18.1.el6.x86_64.rpm > c5fee073bee1f19dc848a8302e07e4241e49cbff55f35a3db5ae903352f11dc4 python-perf-2.6.32-573.18.1.el6.x86_64.rpm > > Source: > ef3c944af9b7e94448e3c343da7d6f582b267aa9a5653586b8b9332351b01afc kernel-2.6.32-573.18.1.el6.src.rpm > > > >

2 1

centos7 :: ks.cfg :: customisation of sshd
by Adrian Sevcenco 19 Feb '16

19 Feb '16

Hi! I want to change the sshd port at install for centos7 but i am not sure if i am on the good track (and it is time expensive to make many try-outs).. So, i would be grateful if someone with experience can spot if i have problems with my planning.. (the actual purpose is that after installation i have access for my ansible provisioning) first make sure ssh is started services --enabled=sshd,chronyd then .. i imagine that in the %post section %post --interpreter=/usr/bin/bash --log=/root/ks-post.log 1. i could use sed to change the port sed -i 's/#Port\ 22/Port 60000/' /etc/ssh/sshd_config 2. sed -i 's/#PermitRootLogin\ yes/PermitRootLogin\ yes/' /etc/ssh/sshd_config 3. enable key access mkdir -p /root/.ssh chmod 700 /root/.ssh cat << EOF >> /root/.ssh/authorized_keys my_ssh_pubkey EOF 4. semanage port -a -t ssh_port_t -p tcp 60000 5. firewall-cmd --permanent --zone=public --add-port=60000/tcp 6. systemctl enable firewalld.service did i miss anything? Thank you! Adrian

4 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss