Discuss

discuss@lists.centos.org

3 participants
34748 discussions

snat packet going out a bridge
by Steve Clark 21 Jan '16

21 Jan '16

Hi List, I am running into a problem where I have 2 interfaces bridged with and ip address assigned. I have another interface in which traffic has ingress traffic that needs to go out the bridged interface. I am trying unsuccessfully to SNAT the traffic leaving the bridge interface to its assigned address. # brctl show xbrdg0 bridge name bridge id STP enabled interfaces xbrdg0 8000.000c297aa55f no eth0 eth1 # ip a s xbrdg0 11: xbrdg0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN link/ether 00:0c:29:7a:a5:5f brd ff:ff:ff:ff:ff:ff inet 192.168.100.3/24 scope global xbrdg0 # ip a s eth5 7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:0c:29:7a:a5:7d brd ff:ff:ff:ff:ff:ff inet 10.10.0.1/29 scope global eth5 default via 192.168.100.1 dev xbrdg0 So I want traffic coming in eth5 with 10.10.0.x addresses to be source natted to 192.168.100.3. But my iptables nat statement never gets hit. Chain POSTROUTING (policy ACCEPT 172 packets, 31384 bytes) pkts bytes target prot opt in out source destination 0 0 SNAT all -- * xbrdg0 0.0.0.0/0 0.0.0.0 to:192.168.100.3 29 1933 MASQUERADE all -- * tun+ 0.0.0.0/0 0.0.0.0/0 # ping -I 10.10.0.1 8.8.8.8 # tcpdump -nli xbrdg0 icmp or arp tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on xbrdg0, link-type EN10MB (Ethernet), capture size 65535 bytes 12:52:06.914295 IP 10.10.0.1 > 8.8.8.8: ICMP echo request, id 38932, seq 1, length 64 12:52:07.914592 IP 10.10.0.1 > 8.8.8.8: ICMP echo request, id 38932, seq 2, length 64 12:52:08.914579 IP 10.10.0.1 > 8.8.8.8: ICMP echo request, id 38932, seq 3, length 64 Any ideas? Thanks, Steve -- Stephen Clark

3 4

Radeon driver with HD 2600 pro and dual head
by Tim 21 Jan '16

21 Jan '16

Hey list, I got a problem with a Gigabyte radeon HD 2600 pro card regarding my multi head setup with . This card has two DVI connectors. The second monitor has the state of being disconnected after startup (xrandr -q). When I disconnect it and reconnect sometimes the screen comes up and the second monitor shows up in display settings. It doesn't matter which port of the card I use first - the other one is disconnected. Any idea where I can take a look at? Thanks in advance Regards Tim

1 0

signing RPM packages with SHA256
by Alice Wonder 21 Jan '16

21 Jan '16

hi, I noticed that RPM packages I sign use SHA1 Signature : RSA/SHA1, Fri 08 Jan 2016 10:50:58 AM PST, Key ID ad3b591d147abf59 Signatures from CentOS 7 use SHA256 Signature : RSA/SHA256, Wed 06 Jan 2016 08:54:58 AM PST, Key ID 24c6a8a7f4a80eb5 I'm trying to find where / how to use sha256 when I sign packages but I am not having much luck. Closest I have found is this : https://fedoraproject.org/wiki/RPM_file_format_changes_to_support_SHA-256 That page appears to be from 2009 and six years is a really long time, things change a lot. Is there an up to date reference somewhere on RPM package signing that I haven't stumbled upon yet? SHA1 is broken. I shouldn't be using it. CentOS 7 is all I build packages for. Thank you.

3 9

ifenslave vs. /etc/sysconfig/network-scripts
by Nicholas Geovanis 21 Jan '16

21 Jan '16

How does the ifenslave command relate to "normal" network slave configuration in /etc/sysconfig/network-scripts? Does config-file-based setup use ifenslave or is it more complicated than that? Thanks....Nick

1 0

Failed to start polkit.service: Connection timed out
by Henry McLaughlin 21 Jan '16

21 Jan '16

This is related to another earlier post regarding "realm discover" I want to set the timezone to Melbourne/Australia which failed with: [root@sssd-testing ~]# timedatectl set-timezone Australia/Melbourne Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: Timeout was reached (g-io-error-quark, 24) Failed to set time zone: Connection timed out I found the following which suggests the error is caused by the polkit service failing to start: http://unix.stackexchange.com/questions/249575/systemctl-keeps-timing-out-o… When I reinstall and try to start the polkit service in accordance with the post above I receive the following: [root@sssd-testing ~]# systemctl start polkit Error getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: Timeout was reached (g-io-error-quark, 24) Failed to start polkit.service: Connection timed out When I call the service directly in accordance with the post above I receive: [root@sssd-testing ~]# /usr/lib/polkit-1/polkitd Successfully changed to user polkitd Error getting system bus: Could not connect: Permission denied ** (polkitd:922): WARNING **: Error getting system bus: Could not connect: Permission denied 10:44:10.564: Loading rules from directory /etc/polkit-1/rules.d 10:44:10.564: Loading rules from directory /usr/share/polkit-1/rules.d 10:44:10.564: Finished loading, compiling and executing 2 rules Entering main event loop 10:44:10.564: Lost the name org.freedesktop.PolicyKit1 - exiting Shutting down Exiting with code 0 The post below identifies a similar issue with the polkit service not starting however I have confirmed dbus is running and the polkitd user does exist. https://bbs.archlinux.org/viewtopic.php?id=161291 [root@sssd-testing ~]# ps ax | grep dbus 221 ? Ss 0:00 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation 929 pts/1 S+ 0:00 grep --color=auto dbus [root@sssd-testing ~]# getent passwd polkitd polkitd:x:997:995:User for polkitd:/:/sbin/nologin

1 0

realm discover
by Henry McLaughlin 21 Jan '16

21 Jan '16

I am new to CentOS and trying to setup a Samba file server however when discovering domains I receive an authorisation error: [root@sssd-testing ~]# id uid=0(root) gid=0(root) groups=0(root) [root@sssd-testing ~]# realm discover realm: Couldn't discover realms: Not authorized to perform this action

3 3

Monitor Dummy Device
by Joey 21 Jan '16

21 Jan '16

Hello List, i want to use a Dual-Screen Solution without connected a second Monitor. Its a solution available, that a physical monitor/Device is simulated? I want to use it on KDE. Thank you. Joey

7 22

Re: [CentOS] HDD badblocks
by James B. Byrne 20 Jan '16

20 Jan '16

On Tue, January 19, 2016 18:36, John R Pierce wrote: > On 1/19/2016 3:29 PM, J Martin Rushton wrote: >> I suspect that the gold layer on edge connectors 30-odd years ago >> was >> a lot thicker than on modern cards. We are talking contacts on 0.1" >> spacing not some modern 1/10 of a knat's whisker. (Off topic) I >> also >> remember seeing engineers determine which memory chip was at fault >> and >> replacing the chip using a soldering iron. Try that on a DIMM! > > indeed, I pretty much quit doing component level electronics when > everything went to surface mount. > > Kids these days! I remember taking the vacuum tubes to the testing centre in the corner drug-store to see which ones need replacing. Apologies to the four Yorkshiremen. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 131, Issue 6
by centos-announce-request＠centos.org 20 Jan '16

20 Jan '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2016:0044 CentOS 6 igb Enhancement Update (Johnny Hughes) 2. CESA-2016:0045 Important CentOS 5 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 15 Jan 2016 15:23:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:0044 CentOS 6 igb Enhancement Update Message-ID: <20160115152317.GA4136(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:0044 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-0044.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cbaabacef73bb8a664314c419c0a357f813a1a6203bf8045c71e2f4b9212e2e2 kmod-igb-5.2.15_k-1.el6_7.i686.rpm x86_64: 866a0c15dda8db6193cfaa36c8ce617893fbee54d80278adb9524e271f792118 kmod-igb-5.2.15_k-1.el6_7.x86_64.rpm Source: dff34134cf087bf972cd380ad1837a12957e3ea85aee644446757eb3c9f5d47b igb-5.2.15_k-1.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 19 Jan 2016 20:05:12 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0045 Important CentOS 5 kernel Security Update Message-ID: <20160119200512.GA32304(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0045 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0045.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 45d48fb8351d1e77ca7826f2025b8c28e42d244a37cccd7e40c945f193a4f929 kernel-2.6.18-408.el5.i686.rpm 2ab4facb340d3a1fb1fc81ed12f58a8b5c9103cd9f2133b4082be8d6c553df81 kernel-debug-2.6.18-408.el5.i686.rpm a42578c0604c1d86e976a104dee01a03c2f5b92e9cb713ead3c1616cb79e67b3 kernel-debug-devel-2.6.18-408.el5.i686.rpm 6c1406f7375ec4617d3d53e7e6ad0add39fe9e646675b4e1247c91cb5f7066e5 kernel-devel-2.6.18-408.el5.i686.rpm df8c6370f9b74dba17f99d608daa1259f4271f15f1bae6091197d11952a83b3c kernel-doc-2.6.18-408.el5.noarch.rpm b2ff283f0d821a062ec1414a86756154f6a9df3a3c4c0563d29b0b27655b492d kernel-headers-2.6.18-408.el5.i386.rpm 82d38fccf6d3b7e21fcfa6b3807014b280696e53aae6b95a870ab33342f86f8c kernel-PAE-2.6.18-408.el5.i686.rpm 758913ae27c4da4b4f5a98f851e5ae55ac9c427476f1e893662fe9a7b571412d kernel-PAE-devel-2.6.18-408.el5.i686.rpm 5e758fe8925b0b79ee4d5386a1cfd760ea06abe80d6ee6ec43963b01e87af878 kernel-xen-2.6.18-408.el5.i686.rpm 6648864e010dcaeddb600d11635f1385806cad22fc2916e8706be1a136f0b728 kernel-xen-devel-2.6.18-408.el5.i686.rpm x86_64: 38c47b61044a33476ab42ba2cfdbafc57f86ab29846352edb7017725e1b190bc kernel-2.6.18-408.el5.x86_64.rpm 02fad3d60b68a09db26aa6299b51e69bb3f3e60f6b2695b7b267c93862ad59a7 kernel-debug-2.6.18-408.el5.x86_64.rpm 62502d190c1650834f58df4b73532afc18743381c376987d862b954dfaefa2eb kernel-debug-devel-2.6.18-408.el5.x86_64.rpm 2013207c15f229da615a620443ff96a1f4e200dced92f3e7ee070bcf0fe2ef8b kernel-devel-2.6.18-408.el5.x86_64.rpm df8c6370f9b74dba17f99d608daa1259f4271f15f1bae6091197d11952a83b3c kernel-doc-2.6.18-408.el5.noarch.rpm cbe09cac6bc78fedc1f79a12ebffe1663ec5c8d76640c7a4d7cfb5b4a93754c0 kernel-headers-2.6.18-408.el5.x86_64.rpm c8965c4e5f822bcca0bb4afeee41512731b1823b403112d71445ed869fa3efb4 kernel-xen-2.6.18-408.el5.x86_64.rpm a2da81341a223d25427ce21be8caf689771c0f7900b61fd736796f3402261764 kernel-xen-devel-2.6.18-408.el5.x86_64.rpm Source: 90958bbb66a6776d51e6b9e5d920d18c989fd169b5308e47ff1d6384272846b9 kernel-2.6.18-408.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 131, Issue 6 ***********************************************

1 0

LVM thin volumes fstrim operation not supported
by Tim Robinson 20 Jan '16

20 Jan '16

Hi All I'm trying to setup my LVM thin pool to support discards so that the pool can reclaim space even if the underlying device doesn't support trim. It is my understanding that all thin pools should support trim even if the underlying device doesn't. (please correct me if I'm wrong here) I have one centos server that does support trim and everything is working correctly but any new servers and thin pools throw the error below. # fstrim -v /mnt/data00 fstrim: /mnt/data00: the discard operation is not supported I can't find any differences in the LVM configuration between the two servers, they both have the lv discards set to passthough. Can anyone tell me if I'm missing something when creating the thin pool that would allow me to perform the fstrim. I'm using xfs on all of the lvs. Thanks, Tim

2 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss