- Discuss - lists.centos.org

nodejs version 14
by Jerry Geis 22 Apr '20

22 Apr '20

Hi All, I was following the instructions for installing nodejs version 14. https://github.com/nodesource/distributions First thing was: curl -sL https://rpm.nodesource.com/setup_14.x | bash - After that : yum -y install nodejs ---> Package nodejs.x86_64 2:12.16.2-1nodesource will be installed --> Finished Dependency Resolution You can see its installing the OLD Version 12. not the 14. ??? Why ? (this errors actually) My repo looks correct for Version 14 not 12.. more /etc/yum.repos.d/nodesource-el7.repo [nodesource] name=Node.js Packages for Enterprise Linux 7 - $basearch baseurl=https://rpm.nodesource.com/pub_14.x/el/7/$basearch failovermethod=priority enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/NODESOURCE-GPG-SIGNING-KEY-EL [nodesource-source] name=Node.js for Enterprise Linux 7 - $basearch - Source baseurl=https://rpm.nodesource.com/pub_14.x/el/7/SRPMS failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/NODESOURCE-GPG-SIGNING-KEY-EL gpgcheck=1 Thoughts ? did I do something wrong ? Jerry

2 1

CentOOS 8 and libuv
by Adrian van Bloois 20 Apr '20

20 Apr '20

Hi all, Why is libuv-devel missing in CentOS-8? The rpm for libuv is preset but libuv-devel is not there. Adrian -- Adri P. van Bloois "Elegance is not a dispensable luxury but a factor that decides between success and failure." Edsger W. Dijkstra

3 2

running app panel overflows
by Michael Hennebry 20 Apr '20

20 Apr '20

I'm running Centos 7 with gnome. After 32 running applications, the panel at the bottom overflows. There seems to be no scrolling mechanism. How if at all can I see the overflow? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 1

Re: [CentOS] [Off topic] sending mail from Comcast was: Sendmail not working
by Jason Pyeron 20 Apr '20

20 Apr '20

> -----Original Message----- > From: Tim Evans > Sent: Sunday, April 19, 2020 12:50 PM > > On 4/19/20 12:38 PM, S.Bob wrote: > > > > On 4/19/20 10:36 AM, Tim Evans wrote: > >> On 4/19/20 12:28 PM, S.Bob wrote: > >>> All; > >>> > >>> > >>> I installed sendmail via yum, but if I test it like this: > >>> > >>> > >> > >>> The original message was received at Sun, 19 Apr 2020 10:02:56 -0600 > >>> from localhost [127.0.0.1] > >>> > >>> ----- The following addresses had permanent fatal errors ----- > >>> <sbob(a)quadratum-braccas.com> > >>> (reason: 554 5.7.1 Service unavailable; Client host > >>> [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; > >>> https://www.spamhaus > >>> .org/query/ip/50.243.150.81) > >> > >> Is 50.243.150.81 your system's IP address? If so, as this shows, that > >> IP is on spamhaus' blacklist of addresses. Thus, your sendmail is > >> working fine. Problem is elsewhere. > >> > >> anything I can do to fix it? > > Assuming this is your IP address, visit https://www.spamhaus.org/lookup/ > and request that it be removed from the blacklisted IP's. > > However, looking at the headers from your message, it appears Comcast > may be your ISP, and this 50.243.150.81 IP address appears to be a > Comcast address, so you may need to contact Comcast tech support for > help in getting the blacklist designation removed. There are a few situations here. 1. You are a business customer with a static IP, and are entitled to send/receive SMTP by your ISP (Comcast) 2. You are a business/residential customer who is allowed to send (not likely allowed to receive) SMTP and you have a domain elsewhere to receive replies to your email 3. You are a business/residential customer who is NOT allowed to send SMTP except for your ISP (Comcast) provided email. Only you would know which on for sure is you, but it is very likely #3. The advice provided previously is for case #1 - contact Comcast and inform them that your contracted services are not working because of .... and you will need to beable to work with them on testing and suggesting fixes. They have a dedicated support phone number (which they provided you if you are actually a #1 type customer - e.g. gigabit pro, metro Ethernet, etc.) In case you are a #2 or #3 type customer, you may want to use a smart host configuration - e.g. define('SMART_HOST','[smtp.comcast.net]') . For postfix, use relayhost = [smtp.comcast.net] . Now when you send mail to that relay it will relay it. This is provided you are entitled to have your email relayed - contact Xfinity customer service for help there. If using this relay does not work, please post the exchange starting with the HELO (check your maillog or do it by hand with telnet). -- Jason Pyeron | Architect PD Inc | 10 w 24th St | Baltimore, MD | .com: jpyeron(a)pdinc.us tel : 202-741-9397

5 15

Sendmail not working
by S.Bob 19 Apr '20

19 Apr '20

All; I installed sendmail via yum, but if I test it like this: echo "Subject: sendmail test" | sendmail sbob(a)quadratum-braccas.com I get a local mail on the server with this every time: Message 1: From MAILER-DAEMON(a)kdb-bugs.example.com Sun Apr 19 10:15:00 2020 Return-Path: <MAILER-DAEMON(a)kdb-bugs.example.com> Date: Sun, 19 Apr 2020 10:15:00 -0600 From: Mail Delivery Subsystem <MAILER-DAEMON(a)kdb-bugs.example.com> To: <root(a)kdb-bugs.example.com> Content-Type: multipart/report; report-type=delivery-status; boundary="03JGF0ni013558.1587312900/kdb-bugs.example.com" Subject: Returned mail: see transcript for details Auto-Submitted: auto-generated (failure) Status: R Part 1: The original message was received at Sun, 19 Apr 2020 10:02:56 -0600 from localhost [127.0.0.1] ----- The following addresses had permanent fatal errors ----- <sbob(a)quadratum-braccas.com> (reason: 554 5.7.1 Service unavailable; Client host [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; https://www.spamhaus .org/query/ip/50.243.150.81) ----- Transcript of session follows ----- ... while talking to in1-smtp.messagingengine.com.: >>> RCPT To:<sbob(a)quadratum-braccas.com> <<< 554 5.7.1 Service unavailable; Client host [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; https://www.spamhaus.org/quer y/ip/50.243.150.81 554 5.0.0 Service unavailable >>> DATA <<< 421 4.4.2 mx5.messagingengine.com Error: timeout exceeded ... while talking to in2-smtp.messagingengine.com.: >>> DATA <<< 421 4.4.2 wmx2.messagingengine.com Error: timeout exceeded Thanks in advance If it helps, here is my sendmail.mc file: [root@kdb-bugs ~]# cat /etc/mail/sendmail.mc divert(-1)dnl dnl # dnl # This is the sendmail macro config file for m4. If you make changes to dnl # /etc/mail/sendmail.mc, you will need to regenerate the dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is dnl # installed and then performing a dnl # dnl # /etc/mail/make dnl # include(`/usr/share/sendmail-cf/m4/cf.m4')dnl VERSIONID(`setup for linux')dnl OSTYPE(`linux')dnl dnl # dnl # Do not advertize sendmail version. dnl # dnl define(`confSMTP_LOGIN_MSG', `$j Sendmail; $b')dnl dnl # dnl # default logging level is 9, you might want to set it higher to dnl # debug the configuration dnl # dnl define(`confLOG_LEVEL', `9')dnl dnl # dnl # Uncomment and edit the following line if your outgoing mail needs to dnl # be sent out through an external mail server: dnl # dnl define(`SMART_HOST', `smtp.your.provider')dnl dnl # define(`confDEF_USER_ID', ``8:12'')dnl dnl define(`confAUTO_REBUILD')dnl define(`confTO_CONNECT', `1m')dnl define(`confTRY_NULL_MX_LIST', `True')dnl define(`confDONT_PROBE_INTERFACES', `True')dnl define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl define(`ALIAS_FILE', `/etc/aliases')dnl define(`STATUS_FILE', `/var/log/mail/statistics')dnl define(`UUCP_MAILER_MAX', `2000000')dnl define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl define(`confAUTH_OPTIONS', `A')dnl dnl # dnl # The following allows relaying if the user authenticates, and disallows dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links dnl # dnl define(`confAUTH_OPTIONS', `A p')dnl dnl # dnl # PLAIN is the preferred plaintext authentication method and used by dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do dnl # use LOGIN. Other mechanisms should be used if the connection is not dnl # guaranteed secure. dnl # Please remember that saslauthd needs to be running for AUTH. dnl # dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl dnl # dnl # Rudimentary information on creating certificates for sendmail TLS: dnl # cd /etc/pki/tls/certs; make sendmail.pem dnl # Complete usage: dnl # make -C /etc/pki/tls/certs usage dnl # dnl define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/sendmail.pem')dnl dnl # dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's dnl # slapd, which requires the file to be readble by group ldap dnl # dnl define(`confDONT_BLAME_SENDMAIL', `groupreadablekeyfile')dnl dnl # dnl define(`confTO_QUEUEWARN', `4h')dnl dnl define(`confTO_QUEUERETURN', `5d')dnl dnl define(`confQUEUE_LA', `12')dnl dnl define(`confREFUSE_LA', `18')dnl define(`confTO_IDENT', `0')dnl dnl # If you're operating in a DSCP/RFC-4594 environment with QoS dnl define(`confINET_QOS', `AF11')dnl dnl FEATURE(delay_checks)dnl FEATURE(`no_default_msa', `dnl')dnl FEATURE(`smrsh', `/usr/sbin/smrsh')dnl FEATURE(`mailertable', `hash -o /etc/mail/mailertable.db')dnl FEATURE(`virtusertable', `hash -o /etc/mail/virtusertable.db')dnl FEATURE(redirect)dnl FEATURE(always_add_domain)dnl FEATURE(use_cw_file)dnl FEATURE(use_ct_file)dnl dnl # dnl # The following limits the number of processes sendmail can fork to accept dnl # incoming messages or process its message queues to 20.) sendmail refuses dnl # to accept connections once it has reached its quota of child processes. dnl # dnl define(`confMAX_DAEMON_CHILDREN', `20')dnl dnl # dnl # Limits the number of new connections per second. This caps the overhead dnl # incurred due to forking new sendmail processes. May be useful against dnl # DoS attacks or barrages of spam. (As mentioned below, a per-IP address dnl # limit would be useful but is not available as an option at this writing.) dnl # dnl define(`confCONNECTION_RATE_THROTTLE', `3')dnl dnl # dnl # The -t option will retry delivery if e.g. the user runs over his quota. dnl # FEATURE(local_procmail, `', `procmail -t -Y -a $h -d $u')dnl FEATURE(`access_db', `hash -T<TMPF> -o /etc/mail/access.db')dnl FEATURE(`blacklist_recipients')dnl EXPOSED_USER(`root')dnl dnl # dnl # For using Cyrus-IMAPd as POP3/IMAP server through LMTP delivery uncomment dnl # the following 2 definitions and activate below in the MAILER section the dnl # cyrusv2 mailer. dnl # dnl define(`confLOCAL_MAILER', `cyrusv2')dnl dnl define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')dnl dnl # dnl # The following causes sendmail to only listen on the IPv4 loopback address dnl # 127.0.0.1 and not on any other network devices. Remove the loopback dnl # address restriction to accept email from the internet or intranet. dnl # DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl dnl # dnl # The following causes sendmail to additionally listen to port 587 for dnl # mail from MUAs that authenticate. Roaming users who can't reach their dnl # preferred sendmail daemon due to port 25 being blocked or redirected find dnl # this useful. dnl # dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl dnl # dnl # The following causes sendmail to additionally listen to port 465, but dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses smtps dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1. dnl # dnl # For this to work your OpenSSL certificates must be configured. dnl # dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl dnl # dnl # The following causes sendmail to additionally listen on the IPv6 loopback dnl # device. Remove the loopback address restriction listen to the network. dnl # dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl dnl # dnl # enable both ipv6 and ipv4 in sendmail: dnl # dnl DAEMON_OPTIONS(`Name=MTA-v4, Family=inet, Name=MTA-v6, Family=inet6') dnl # dnl # We strongly recommend not accepting unresolvable domains if you want to dnl # protect yourself from spam. However, the laptop and users on computers dnl # that do not have 24x7 DNS do need this. dnl # FEATURE(`accept_unresolvable_domains')dnl dnl # dnl FEATURE(`relay_based_on_MX')dnl dnl # dnl # Also accept email sent to "localhost.localdomain" as local email. dnl # LOCAL_DOMAIN(`localhost.localdomain')dnl dnl # dnl # The following example makes mail from this host and any additional dnl # specified domains appear to be sent from mydomain.com dnl # dnl MASQUERADE_AS(`mydomain.com')dnl dnl # dnl # masquerade not just the headers, but the envelope as well dnl # dnl FEATURE(masquerade_envelope)dnl dnl # dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com as well dnl # dnl FEATURE(masquerade_entire_domain)dnl dnl # dnl MASQUERADE_DOMAIN(localhost)dnl dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl dnl MASQUERADE_DOMAIN(mydomainalias.com)dnl dnl MASQUERADE_DOMAIN(mydomain.lan)dnl MAILER(smtp)dnl MAILER(procmail)dnl dnl MAILER(cyrusv2)dnl -- `When you say "I wrote a program that crashed Windows", people just stare at you blankly and say "Hey, I got those with the system, *for free*".' (By Linus Torvalds)

5 7

Netfilter fails to filter traffic from a netblock?
by Jeffrey Walton 19 Apr '20

19 Apr '20

Hi Everyone, We rent a CentOS 7 VM from GoDaddy. We received a warning about excessive cpu usage, and a threat to cancel our service. We tracked it down to Apache and someone hammering our web server. The offending host is 59.64.129.175. To err on the side of caution we attempted to block the entire netblock. According to whois data, that's 59.64.128.0-59.64.159.255. iptables -A INPUT -s 59.64.128.0/19 -p TCP -j DROP After reboot cpu usage is still high and access_log still shows useless requests from the host: 59.64.129.175 - - [19/Apr/2020:08:53:53 -0400] "GET /w/index.php?title=Special:WhatLinksHere&limit=50& printable=yes HTTP/1.1" 301 311 I seem to be missing something. That's not surprising since I am not a server administrator. How do I filter the unwanted traffic from the netblock? Thanks in advance.

6 11

CentO 8 and nftables default policy
by Alessandro Baggi 19 Apr '20

19 Apr '20

Hi list, I'm studying nftables. I'm using CentOS 8.1 (Gnome) and I disabled firewalld. I noticed that a default policy is created with tables and chains probably for firewalld. So I created a .nft script where I stored my rules with a flush for previous ruleset, then saved on /etc/sysconfig/nftables.conf and the enabled nftables service. Running the script with nft -f script.nft all work as expected but when rebooting, running nft list ruleset I find my rules and the default policy (chains and tables) that I would not have in my configuration. My nftables.conf contains only my ruleset. For example, running nft list tables I found several default tables like: table ip filter table ip6 filter table bridge filter table ip nat table ip mangle So probably there is something that is applying its policy but I ignore what is. Can someone point me in the right direction? Thank you in advance.

2 3

Strangeness on X11 screen capture
by Jerry Geis 19 Apr '20

19 Apr '20

Hi all, I am running CentOS 7 on a NUC5CPYB. Intel video: 00:02.0 VGA compatible controller: Intel Corporation Atom/Celeron/Pentium Processor x5-E8000/J3xxx/N3xxx Integrated Graphics Controller (rev 35) When I take a screen shot I get "different" things. I use: export DISPLAY=:0.0 /usr/bin/xwd -silent -root -out screen; convert screen screen.png I tried import also for the screen capture and its the same random images. Granted the images are all things I have showing previously - but most times its not what is showing now. I have verified the Intel driver is loaded: [ 19.009] (II) LoadModule: "intel" [ 19.010] (II) Loading /usr/lib64/xorg/modules/drivers/intel_drv.so [ 19.012] (II) Module intel: vendor="X.Org Foundation" [ 19.012] compiled for 1.20.1, module version = 2.99.917 [ 19.012] Module class: X.Org Video Driver [ 19.012] ABI class: X.Org Video Driver, version 24.0 [ 19.012] (II) intel: Driver for Intel(R) Integrated Graphics Chipsets: i810, i810-dc100, i810e, i815, i830M, 845G, 854, 852GM/855GM, 865G, 915G, E7221 (i915), 915GM, 945G, 945GM, 945GME, Pineview GM, Pineview G, 965G, G35, 965Q, 946GZ, 965GM, 965GME/GLE, G33, Q35, Q33, GM45, 4 Series, G45/G43, Q45/Q43, G41, B43 [ 19.015] (II) intel: Driver for Intel(R) HD Graphics [ 19.015] (II) intel: Driver for Intel(R) Iris(TM) Graphics [ 19.015] (II) intel: Driver for Intel(R) Iris(TM) Pro Graphics [ 19.015] (++) using VT number 1 [ 19.016] (II) intel(0): Using Kernel Mode Setting driver: i915, version 1.6.0 20181204 [ 19.018] (--) intel(0): Integrated Graphics Chipset: Intel(R) HD Graphics [ 19.019] (--) intel(0): CPU: x86-64, sse2, sse3, ssse3, sse4.1, sse4.2; using a maximum of 2 threads [ 19.019] (II) intel(0): Creating default Display subsection in Screen section "Default Screen Section" for depth/fbbpp 24/32 [ 19.019] (==) intel(0): Depth 24, (--) framebuffer bpp 32 [ 19.019] (==) intel(0): RGB weight 888 [ 19.019] (==) intel(0): Default visual is TrueColor [ 19.023] (II) intel(0): Output DP1 has no monitor section [ 19.024] (II) intel(0): Enabled output DP1 [ 19.024] (II) intel(0): Output HDMI1 has no monitor section [ 19.025] (II) intel(0): Enabled output HDMI1 [ 19.025] (II) intel(0): Output DP2 has no monitor section [ 19.026] (II) intel(0): Enabled output DP2 [ 19.026] (II) intel(0): Output HDMI2 has no monitor section [ 19.027] (II) intel(0): Enabled output HDMI2 [ 19.027] (--) intel(0): Using a maximum size of 256x256 for hardware cursors [ 19.027] (II) intel(0): Output VIRTUAL1 has no monitor section [ 19.027] (II) intel(0): Enabled output VIRTUAL1 [ 19.028] (--) intel(0): Output HDMI2 using initial mode 1920x1080 on pipe 2 What can be doing this ? How do I track it down? Thanks, Jerry

2 2

CentOS 8 and xhost
by Jerry Geis 19 Apr '20

19 Apr '20

I am trying to run 'xhost +' on CentOS 8 (such that I can grab a screen shot) but its not letting me. On boot of X I run the "xhost +" then later with SSH into hte box - I run export DISPLAY=:0.0 gnome-screenshot -f jj.png and I get the cannot open display message. This works on the older CentOS 7. What is the magic for C8? Thanks, Jerry

3 4

phpMyAdmin for Centos 8
by Ranbir 18 Apr '20

18 Apr '20

Has anyone seen a phpMyAdmin rpm for Centos 8 out in the wild? I've been using the Centos 7 EPEL package for phpMyAdmin for many years. When I went there to look for the Centos 8 version of the rpm, I couldn't find one. O_O -- Ranbir

1 0

fail2ban firewalld problems with current CentOS 7
by Andreas Haumer 18 Apr '20

18 Apr '20

Hi! I have a server running CentOS 7.7 (1908) with all current patches installed. I think this server should be a quite standard installation with no specialities On this server I have fail2ban with an apache and openvpn configuration. I'm using firewalld to manage the firewall rules. Fail2an is configured to use firewalld: [root@server ~]# ll /etc/fail2ban/jail.d/ insgesamt 12 -rw-r--r--. 1 root root 356 21. Jan 05:12 00-firewalld.conf -rw-r--r--. 1 root root 610 15. Nov 19:55 apache.local -rw-r--r--. 1 root root 115 15. Nov 19:10 openvpn.local [root@server ~]# cat /etc/fail2ban/jail.d/00-firewalld.conf # This file is part of the fail2ban-firewalld package to configure the use of # the firewalld actions as the default actions. You can remove this package # (along with the empty fail2ban meta-package) if you do not use firewalld [DEFAULT] banaction = firewallcmd-ipset[actiontype=<multiport>] banaction_allports = firewallcmd-ipset[actiontype=<allports>] A few days ago I noticed that on restart firewalld complains about a missing ipset: [root@server ~]# systemctl restart firewalld [root@server ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Do 2020-04-09 09:25:28 CEST; 5s ago Docs: man:firewalld(1) Main PID: 8324 (firewalld) CGroup: /system.slice/firewalld.service └─8324 /usr/bin/python2 -Es /usr/sbin/firewalld --nofork --nopid Apr 09 09:25:28 server.my.domain systemd[1]: Starting firewalld - dynamic firewall daemon... Apr 09 09:25:28 server.my.domain systemd[1]: Started firewalld - dynamic firewall daemon. Apr 09 09:25:30 server.my.domain firewalld[8324]: ERROR: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: Set f2b-apache doesn't exist. Error occurred at line: 2... Apr 09 09:25:30 server.my.domain firewalld[8324]: ERROR: COMMAND_FAILED: Direct: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: Set f2b-apache doesn't exist. Error occurred at line: 2... Hint: Some lines were ellipsized, use -l to show in full. Indeed there is no ipset named "f2b-apache", there is no set configured at all: [root@server ~]# ipset list There is no error when restarting fail2ban: [root@server ~]# systemctl restart fail2ban [root@server ~]# systemctl status fail2ban ● fail2ban.service - Fail2Ban Service Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; vendor preset: disabled) Active: active (running) since Do 2020-04-09 09:26:13 CEST; 4s ago Docs: man:fail2ban(1) Process: 8539 ExecStop=/usr/bin/fail2ban-client stop (code=exited, status=0/SUCCESS) Process: 8543 ExecStartPre=/bin/mkdir -p /run/fail2ban (code=exited, status=0/SUCCESS) Main PID: 8545 (f2b/server) CGroup: /system.slice/fail2ban.service └─8545 /usr/bin/python -s /usr/bin/fail2ban-server -xf start Apr 09 09:26:13 server.my.domain systemd[1]: Stopped Fail2Ban Service. Apr 09 09:26:13 server.my.domain systemd[1]: Starting Fail2Ban Service... Apr 09 09:26:13 server.my.domain systemd[1]: Started Fail2Ban Service. Apr 09 09:26:13 server.my.domain fail2ban-server[8545]: Server ready Fail2ban seems to be running fine: [root@server ~]# fail2ban-client status Status |- Number of jail: 6 `- Jail list: apache, apache-badbots, apache-nohome, apache-noscript, apache-overflows, openvpn No errors loged in fail2ban.log on restart: [...] 2020-04-09 09:26:13,773 fail2ban.server [8545]: INFO Starting Fail2ban v0.10.5 2020-04-09 09:26:13,799 fail2ban.database [8545]: INFO Connected to fail2ban persistent database '/var/lib/fail2ban/fail2ban.sqlite3' 2020-04-09 09:26:13,801 fail2ban.jail [8545]: INFO Creating new jail 'apache-badbots' 2020-04-09 09:26:13,805 fail2ban.jail [8545]: INFO Jail 'apache-badbots' uses poller {} 2020-04-09 09:26:13,805 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,838 fail2ban.filter [8545]: INFO maxRetry: 1 2020-04-09 09:26:13,838 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,839 fail2ban.actions [8545]: INFO banTime: 172800 2020-04-09 09:26:13,839 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,840 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,840 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,841 fail2ban.jail [8545]: INFO Creating new jail 'apache-noscript' 2020-04-09 09:26:13,843 fail2ban.jail [8545]: INFO Jail 'apache-noscript' uses poller {} 2020-04-09 09:26:13,843 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,851 fail2ban.filter [8545]: INFO maxRetry: 3 2020-04-09 09:26:13,851 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,851 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,852 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,853 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,854 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,855 fail2ban.jail [8545]: INFO Creating new jail 'apache-overflows' 2020-04-09 09:26:13,857 fail2ban.jail [8545]: INFO Jail 'apache-overflows' uses poller {} 2020-04-09 09:26:13,857 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,863 fail2ban.filter [8545]: INFO maxRetry: 2 2020-04-09 09:26:13,863 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,864 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,864 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,865 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,865 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,866 fail2ban.jail [8545]: INFO Creating new jail 'apache-nohome' 2020-04-09 09:26:13,867 fail2ban.jail [8545]: INFO Jail 'apache-nohome' uses poller {} 2020-04-09 09:26:13,868 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,872 fail2ban.filter [8545]: INFO maxRetry: 2 2020-04-09 09:26:13,873 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,873 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,873 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,874 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,875 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,876 fail2ban.jail [8545]: INFO Creating new jail 'apache' 2020-04-09 09:26:13,878 fail2ban.jail [8545]: INFO Jail 'apache' uses poller {} 2020-04-09 09:26:13,879 fail2ban.jail [8545]: INFO Initiated 'polling' backend 2020-04-09 09:26:13,898 fail2ban.filter [8545]: INFO maxRetry: 3 2020-04-09 09:26:13,899 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,899 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,900 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,900 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/ssl_error_log' (pos = 588859, hash = 755a00cfc09ef9b2f76d78cff61ea766) 2020-04-09 09:26:13,901 fail2ban.filter [8545]: INFO Added logfile: '/var/log/httpd/error_log' (pos = 27101, hash = 53ba5e7041d49628af3b86be05de6fa7) 2020-04-09 09:26:13,902 fail2ban.jail [8545]: INFO Creating new jail 'openvpn' 2020-04-09 09:26:13,931 fail2ban.jail [8545]: INFO Jail 'openvpn' uses systemd {} 2020-04-09 09:26:13,932 fail2ban.jail [8545]: INFO Initiated 'systemd' backend 2020-04-09 09:26:13,944 fail2ban.filtersystemd [8545]: INFO [openvpn] Added journal match for: '_SYSTEMD_UNIT=openvpn-server(a)xss.service + _COMM=openvpn' 2020-04-09 09:26:13,944 fail2ban.actions [8545]: INFO banTime: 10800 2020-04-09 09:26:13,944 fail2ban.filter [8545]: INFO maxRetry: 2 2020-04-09 09:26:13,944 fail2ban.filter [8545]: INFO encoding: UTF-8 2020-04-09 09:26:13,945 fail2ban.filter [8545]: INFO findtime: 3600 2020-04-09 09:26:13,949 fail2ban.jail [8545]: INFO Jail 'apache-badbots' started 2020-04-09 09:26:13,952 fail2ban.jail [8545]: INFO Jail 'apache-noscript' started 2020-04-09 09:26:13,954 fail2ban.jail [8545]: INFO Jail 'apache-overflows' started 2020-04-09 09:26:13,956 fail2ban.jail [8545]: INFO Jail 'apache-nohome' started 2020-04-09 09:26:13,961 fail2ban.jail [8545]: INFO Jail 'apache' started 2020-04-09 09:26:13,964 fail2ban.jail [8545]: INFO Jail 'openvpn' started [...] BUT: SELinux complains about fail2ban: type=AVC msg=audit(1586413496.76:53507): avc: denied { read } for pid=1324 comm="f2b/f.apache" name="disable" dev="sysfs" ino=1481 scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=0 So it seems somehow fail2ban does not add the required ip sets correctly. From what I see in firewalld logfile it seems these problems started after the last updates on April 2nd. On this day I did a "yum update" which executed without errors and installed: augeas-libs-1.4.0-9.el7_7.1.x86_64 Do 02 Apr 2020 20:14:27 CEST restic-0.9.6-1.el7.x86_64 Do 02 Apr 2020 20:14:25 CEST python-perf-3.10.0-1062.18.1.el7.x86_64 Do 02 Apr 2020 20:14:23 CEST python3-pip-9.0.3-7.el7_7.noarch Do 02 Apr 2020 20:14:23 CEST borgbackup-1.1.11-1.el7.x86_64 Do 02 Apr 2020 20:14:19 CEST libgudev1-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:14:18 CEST kernel-tools-3.10.0-1062.18.1.el7.x86_64 Do 02 Apr 2020 20:14:16 CEST pcp-4.3.2-5.el7_7.x86_64 Do 02 Apr 2020 20:14:01 CEST kernel-3.10.0-1062.18.1.el7.x86_64 Do 02 Apr 2020 20:13:44 CEST systemd-python-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:13:27 CEST systemd-sysv-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:13:26 CEST rsyslog-8.24.0-41.el7_7.4.x86_64 Do 02 Apr 2020 20:13:26 CEST python2-certbot-apache-1.3.0-1.el7.noarch Do 02 Apr 2020 20:13:25 CEST sssd-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:24 CEST firewalld-0.6.3-2.el7_7.4.noarch Do 02 Apr 2020 20:13:24 CEST sssd-proxy-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:23 CEST sssd-krb5-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:23 CEST sssd-ldap-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:22 CEST sssd-ipa-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:22 CEST sssd-ad-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:22 CEST sssd-krb5-common-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:21 CEST sssd-common-pac-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:21 CEST sssd-common-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:13:20 CEST http-parser-2.7.1-8.el7_7.2.x86_64 Do 02 Apr 2020 20:13:19 CEST python-firewall-0.6.3-2.el7_7.4.noarch Do 02 Apr 2020 20:13:18 CEST certbot-1.3.0-1.el7.noarch Do 02 Apr 2020 20:13:11 CEST python2-certbot-1.3.0-1.el7.noarch Do 02 Apr 2020 20:13:10 CEST python2-acme-1.3.0-1.el7.noarch Do 02 Apr 2020 20:13:09 CEST python-requests-2.6.0-9.el7_7.noarch Do 02 Apr 2020 20:13:08 CEST systemd-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:13:05 CEST kmod-20-25.el7_7.1.x86_64 Do 02 Apr 2020 20:13:02 CEST binutils-2.27-41.base.el7_7.3.x86_64 Do 02 Apr 2020 20:13:00 CEST pcp-selinux-4.3.2-5.el7_7.x86_64 Do 02 Apr 2020 20:12:48 CEST libsss_autofs-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:47 CEST kernel-tools-libs-3.10.0-1062.18.1.el7.x86_64 Do 02 Apr 2020 20:12:46 CEST python-sssdconfig-1.16.4-21.el7_7.3.noarch Do 02 Apr 2020 20:12:45 CEST libsss_sudo-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:45 CEST firewalld-filesystem-0.6.3-2.el7_7.4.noarch Do 02 Apr 2020 20:12:44 CEST sssd-client-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:43 CEST libsss_nss_idmap-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:42 CEST libipa_hbac-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:42 CEST pcp-libs-4.3.2-5.el7_7.x86_64 Do 02 Apr 2020 20:12:41 CEST pcp-conf-4.3.2-5.el7_7.x86_64 Do 02 Apr 2020 20:12:41 CEST kmod-libs-20-25.el7_7.1.x86_64 Do 02 Apr 2020 20:12:40 CEST libsss_idmap-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:39 CEST libsss_certmap-1.16.4-21.el7_7.3.x86_64 Do 02 Apr 2020 20:12:33 CEST systemd-libs-219-67.el7_7.4.x86_64 Do 02 Apr 2020 20:12:32 CEST The firewalld errors start exactly after the updates were installed. Does anyone else see similar problems since the last updates? I googled and found some older postings, but nothing matching the problems I see exactly. I have other CentOS 7 servers with fail2ban and firewalld which should be updated soon, but before I do this I first want to solve this issue. Any idea? Thanks! - andreas -- Andreas Haumer | mailto:andreas@xss.co.at *x Software + Systeme | http://www.xss.co.at/ Karmarschgasse 51/2/20 | Tel: +43-1-6060114-0 A-1100 Vienna, Austria | Fax: +43-1-6060114-71

4 6

HPC question: torques replacement
by Valeri Galtsev 17 Apr '20

17 Apr '20

Dear Experts, I know there are many HPC (high performance computing) experts on this list. I'd like to ask your advise. Almost two decades ago I chose to go with OpenPBS (turned down condor and other alternatives for whatever reason) for clusters and number crunchers I support for the Department at the university. It turned out to be not bad, long lived choice. At some point I smoothly migrated to torque which was advertised as open source project (based on PBS, but it was much less hassle to compile...). Torque ceased to be open source two years ago, it is proprietary now. At some point I have to migrate away from torque for this reason. One of the ways would be to switch (back) to open source PBS Pro (pbspro.org) I wonder what other options experts would recommend. Hopefully, not too far from torque (or PBS) from user prospective. Thanks a lot for all your advises! Valeri -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 2

Re: [CentOS] Thank You
by david 17 Apr '20

17 Apr '20

At 07:59 PM 4/16/2020, you wrote: >Just reaching out to say thanks to all the folks that keep CentOS, >EPEL, this mailing list, etc running. It is probably partly due to >having used Red Hat for over two decades, but I always have a good >experience with CentOS. The recent servers that I have setup with >CentOS 8 are purring along. Thanks for the work and support. > >Cheers, >Ian Ian It is an absolute delight to see a posting like yours. No questions, no complaints, no "you shouldn't be doing that, and no non-answers. Thank you for confirming my belief that the open-source community is there to help. I, too, started with RedHat Linux when it was 'free', converted to WhiteHat, then Centos. I control servers of x86_64, Raspberry Pi, mostly on Centos 7, all for fun, not as a job. I'm working on the C8.... Now, ... I haven't had as good luck with C8 s you allege. There were several things I had to deal with: - new firewall - new mailer (sendmail -> postfix) - new system management (systemd) - new yum (introduction of software streams, whatever they are) But, it keeps me busy during this lockdown time. David San Francisco

2 1

Thank You
by Ian P. 17 Apr '20

17 Apr '20

Just reaching out to say thanks to all the folks that keep CentOS, EPEL, this mailing list, etc running. It is probably partly due to having used Red Hat for over two decades, but I always have a good experience with CentOS. The recent servers that I have setup with CentOS 8 are purring along. Thanks for the work and support. Cheers, Ian

1 0

A
by MOHD HOMAIDUR RAHMAN 16 Apr '20

16 Apr '20

-- ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' *M*d* H*omaidur* R**ahman *( Research Scholar ) Lab No. 510, Computational Biophysics Lab. Department of Biotechnology Indian Institute of Technology-Madras Chennai-600 036, India *Mobile No = +91- 7845991785* '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

1 0

Asking again: CentOS 7, KDE, logout needed twice
by mark 15 Apr '20

15 Apr '20

Every single time, no matter if I chose leave->logout from the start menu, or from ctrl-alt-delete, it does *not* log me out, but restarts KDE. The second time, doesn't matter which way I go, it *does* log me out. Anyone got a clue? Googling hasn't found anything.... mark

2 1

bcc tools and bpftrace packages misbuilt?
by Eric Zuck 15 Apr '20

15 Apr '20

After upgrading to 8.1.1911, bcc-tools and bpftrace seem to be broken. Current package versions I have: bpftrace-0.9-3.el8.x86_64 and bcc-tools-0.8.0-4.el8.x86_64 Both of these seem to be pulling in LLVM version 7, rather than the version 8 that is in 8.1.1911: [root@localhost ~]# bpftrace bpftrace: error while loading shared libraries: libclangFrontend.so.7: cannot open shared object file: No such file or directory [root@localhost ~]# /usr/share/bcc/tools/opensnoop Traceback (most recent call last): File "/usr/share/bcc/tools/opensnoop", line 19, in <module> from bcc import ArgString, BPF File "/usr/lib/python3.6/site-packages/bcc/__init__.py", line 27, in <module> from .libbcc import lib, bcc_symbol, bcc_symbol_option, _SYM_CB_TYPE File "/usr/lib/python3.6/site-packages/bcc/libbcc.py", line 17, in <module> lib = ct.CDLL("libbcc.so.0", use_errno=True) File "/usr/lib64/python3.6/ctypes/__init__.py", line 343, in __init__ self._handle = _dlopen(self._name, mode) OSError: libclangFrontend.so.7: cannot open shared object file: No such file or directory Looking through the CentosBug tracker, I see https://bugs.centos.org/view.php?id=16922: qt5-doctools-5.11.1-9.el8 from CentOS CR/8-stream is misbuilt https://bugs.centos.org/view.php?id=16930: rust-1.37.0-1.module_el8.1.0+246+1f1fd47e built against old libLLVM-7.so So, I gather that bcc-tools and bpftrace are not the only packages affected by an LLVM mismatch. Short of downloading and rebuilding the packages, does anyone have any suggestions about workarounds? Regards, -EricZ

1 1

Samba Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE SessSetup = -13
by Ralf Prengel 15 Apr '20

15 Apr '20

Hallo, perhaps someone hat a hint vor me. My centos 7 samba Server ist working fine using Win10 Clienst with Domaine-Integration. Shares are browseable and access is possible with a sepearte login. My problem: I want to mount this shares from a centos7 client. This fails with the following mesages. I tried several variations in my fstab found in the internet. Can anyone give me a hint to to access an samba-server that is working fine against a Win2016 Domain-Cotroller? Thanks Rakf Apr 15 05:37:47 6805ca01a270 kernel: Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE Apr 15 05:37:47 6805ca01a270 kernel: CIFS VFS: Send error in SessSetup = -13 Apr 15 05:37:47 6805ca01a270 kernel: CIFS VFS: cifs_mount failed w/return code = -13 Apr 15 05:37:52 6805ca01a270 kernel: Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE Apr 15 05:37:52 6805ca01a270 kernel: CIFS VFS: Send error in SessSetup = -13 Apr 15 05:37:52 6805ca01a270 kernel: CIFS VFS: cifs_mount failed w/return code = -13 smb.conf [global] Workgroup = COMLINE security = ads encrypt passwords = yes passdb backend = tdbsam realm = comline.de printing = cups printcap name = cups load printers = yes cups options = raw map to guest = bad user [share_gov_srvgovrcpbuild_clients] comment = share für gov projekt rcpbuild clients path = /mnt/raid01/share_volumes_gov_srvgovrcpbuild_clients_smb browseable = yes comment = Share für alle guest ok = yes writeable = yes read only = no force user = root create mask = 0777 directory mask = 0777 public = yes

3 5

Centos 7: cups-pdf Postprocessing prevented by selinux :(
by hw 15 Apr '20

15 Apr '20

Hi, how can I make it so that printing to a cups PDF printer can successfully run the postprocessing script I specified in /etc/cups/cups-pdf.conf? It does work with 'sentenforce permissve', and after creating and installing some selinux modules from audit.log entries, it still doesn't work, and there doesn't seem to be anything else that might prevent the postprocessing script from being run.

2 1

Red Hat Enterprise Linux 8.2 Beta now available
by Turritopsis Dohrnii Teo En Ming 14 Apr '20

14 Apr '20

Link: https://www.redhat.com/en/blog/red-hat-enterprise-linux-82-beta-now-availab… -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

1 0

SELinux denies login
by Gordon Messmer 13 Apr '20

13 Apr '20

We have a CentOS 7 workstation whose user has started reporting periodic login failures. This seems to be the result of the krb5 cache aging out, and sssd's krb5_child attempting and failing to remove the old cache file. The AVC follows: type=AVC msg=audit(1586670874.327:73041): avc: denied { unlink } for pid=28735 comm="krb5_child" name="krb5cc_1985100122_oxJnH7" dev="dm-0" ino=67978294 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file permissive=0 The policy allows sssd_t to unlink user_tmp_type: sesearch -s sssd_t --allow: allow sssd_t user_tmp_type : file { ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open } ; Is the problem that the credential cache files in /tmp are being created with the wrong label, or is there some other problem I'm not seeing?

1 0

CentOS 8 NIS
by Mark LaPierre 13 Apr '20

13 Apr '20

Hey all, Does anyone know where I can get NIS for CentOS 8? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

8 14

Display system logs in chroot ?
by kikinovak 12 Apr '20

12 Apr '20

Hi, This morning my day began quite badly, since my main production server wasn't responsive anymore. For public hosting I'm using a "Dedibox Pro" server at the french provider Online that's recently been acquired by Scaleway. I'm currently managing half a dozen public servers at that provider, all running CentOS 7. For debugging purposes, Online's web console enables you to boot the machine into a live rescue system, in that case Ubuntu 18.04. Once I managed to connect via SSH to the live system, here's what I did. Mount the root partition : # mount /dev/sda2 /mnt Mount the /boot partition : # mount /dev/sda1 /mnt/boot Then : # mount --rbind /proc /mnt/proc # mount --rbind /dev /mnt/dev # mount --rbind /sys /mnt/sys And then I chroot into the system : # chroot /mnt /bin/bash I had networking in the chroot environment. I tried to disable a handful of services like fail2ban and firewalld to begin with, but systemctl won't run in a chroot. So what I did was simply remove everything related to fail2ban and firewalld. Next thing was to look at the system logs to know what went wrong on startup, but I don't know how to do that from within a chroot. Any suggestions? Cheers, Niki PS : sorry for bad formatting. Since the unresponsive server is also running all my mails, I had to setup a Protonmail account to post on this list. Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Zoom?
by mark 11 Apr '20

11 Apr '20

Hi, folks, After I did a complete reinstall of current 7, with KDE instead of minimal, I'm mostly ok... except for Zoom. Has anyone gotten sound working with firefox? I get video, but it keeps claiming that my browser (the default firefox) can't access the system sound. Given that even as I type this, I'm streaming WUMB through its player.... I have noScript, but I enabled everything (except google-analytics), and no joy. I'd *really* rather use my browser than trust their app.... mark

11 15

CentOS 7 : broken dependencies
by Nicolas Kovacs 09 Apr '20

09 Apr '20

Hi, I got an alert from Yum-Cron this morning: Failed to check for updates with the following error message: Failed to build transaction: sclo-php72-php-pecl-imagick-3.4.4-1.el7.x86_64 requires libMagickCore.so.5()(64bit) sclo-php72-php-pecl-imagick-3.4.4-1.el7.x86_64 requires libMagickWand.so.5()(64bit) The CR repository is activated on this server, so I guess that's why. Which leads me to the more general question of: enable CR on a production server, yes or no? Pros : get security updates sooner Cons : expect breakage like the one above Any suggestions? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

4 8

CentOS-announce Digest, Vol 182, Issue 2
by centos-announce-request＠centos.org 09 Apr '20

09 Apr '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:1349 Important CentOS 6 krb5-appl Security Update (Johnny Hughes) 2. CESA-2020:1331 Important CentOS 6 ipmitool Security Update (Johnny Hughes) 3. CESA-2020:1335 Important CentOS 6 telnet Security Update (Johnny Hughes) 4. CESA-2020:1339 Critical CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Apr 2020 15:29:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1349 Important CentOS 6 krb5-appl Security Update Message-ID: <20200408152938.GA12312(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1349 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1349 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2cffa95c73d5b9662a971f9eddbd67ce1bf396911127e3d31b52caf60c90d984 krb5-appl-clients-1.0.1-10.el6_10.i686.rpm b7af46946a015ebf805991e9a9341163aec0ecbd1d9edb7cfc0234fbcc2b40cb krb5-appl-servers-1.0.1-10.el6_10.i686.rpm x86_64: 6309ea0347c159b5270abe84ad36d6e6d94c563c41ba107190a79a2a8210ccb6 krb5-appl-clients-1.0.1-10.el6_10.x86_64.rpm 3dced1fba4d6aa65537dedc85ef52ec6d7093edd165279e6284aac7e326f5579 krb5-appl-servers-1.0.1-10.el6_10.x86_64.rpm Source: 24b1ce1567946fff000259c1904aeb7b4736bbd067b6ca929d9869dcab4787e7 krb5-appl-1.0.1-10.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 8 Apr 2020 15:29:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1331 Important CentOS 6 ipmitool Security Update Message-ID: <20200408152949.GA12427(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1331 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1331 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fe098e08061bc5f26a3ccf7cf13727bcb81372ed1b075f8f6bb72760b554a839 ipmitool-1.8.15-3.el6_10.i686.rpm x86_64: 07ff5fac0cc78ed7bc23e72e668073b9ed878ecc9255021783e22d1f4fe3fcbb ipmitool-1.8.15-3.el6_10.x86_64.rpm Source: 00383fb3bf567a510f400d60bf8e8626bc350a00fbaeac9280db242b7f770bcb ipmitool-1.8.15-3.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 8 Apr 2020 15:30:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1335 Important CentOS 6 telnet Security Update Message-ID: <20200408153005.GA12627(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1335 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:1335 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 923d72923ba2cd24753cc70ac63cf25d24718d3c228f6f92d2254ec7d73ef590 telnet-0.17-49.el6_10.i686.rpm 63af65efc0cf601f982af8bc595e12980d43b3c4b9872a273b518d05057c07b6 telnet-server-0.17-49.el6_10.i686.rpm x86_64: 591ba5f1a15b7b68106ddd4021fb4ff5f9c405535efe3b72375fec756ac414c9 telnet-0.17-49.el6_10.x86_64.rpm 4fb370c991172abffe095b182b70b2ed7badea2ae9db89e33c28d66b5c9c339c telnet-server-0.17-49.el6_10.x86_64.rpm Source: 7aba1d5e792fe1bbf45000f404f712727a55724523c36c88f26abe3c0cd1e91b telnet-0.17-49.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 8 Apr 2020 15:31:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:1339 Critical CentOS 6 firefox Security Update Message-ID: <20200408153117.GA13046(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:1339 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2020:1339 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 459d53b5c53d356ac22b15f40bdb6d7c046d1ceb8bfda60a717325677780533f firefox-68.6.1-1.el6.centos.i686.rpm x86_64: 459d53b5c53d356ac22b15f40bdb6d7c046d1ceb8bfda60a717325677780533f firefox-68.6.1-1.el6.centos.i686.rpm e83b453b7ccedac2c51fe1c6885e7d93d94940bf9011bbba921b98e75b6d4bc7 firefox-68.6.1-1.el6.centos.x86_64.rpm Source: cb52c089eb51c556b126bca5243dfa28125152405f1e77de20dbc247c0288733 firefox-68.6.1-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 182, Issue 2 ***********************************************

1 0

Re: [CentOS] RHEL 7.8 is out
by Thomas Stephen Lee 08 Apr '20

08 Apr '20

On Wed, Apr 8, 2020 at 2:01 AM Kenneth Porter <shiva(a)sewingwitch.com> wrote: > Some useful info for the list. Release notes! ;) > > < > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/ht… > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > Is this https://wiki.centos.org/About/Building_7 the place to look ? thanks. -- Lee

2 1

CentOS 7 and USB 3.1
by Jerry Geis 08 Apr '20

08 Apr '20

I am getting these errors on my machine for an external USB connection. Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: ERROR Transfer event for unknown stream ring slot 4 ep 3 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: @00000020155b24c0 00000000 00000000 1a001000 04048001 Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#3 uas_eh_abort_handler 0 uas-tag 4 inflight: CMD OUT Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#3 CDB: Write(10) 2a 00 35 b8 db ff 00 04 00 00 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: ERROR Transfer event for unknown stream ring slot 4 ep 3 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: @00000020155b24e0 00000000 00000000 1a001000 04048001 Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#2 uas_eh_abort_handler 0 uas-tag 3 inflight: CMD OUT Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#2 CDB: Write(10) 2a 00 35 b8 d7 ff 00 04 00 00 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: ERROR Transfer event for unknown stream ring slot 4 ep 3 Apr 8 13:23:55 devgeis kernel: xhci_hcd 0000:b3:00.0: @00000020155b2500 00000000 00000000 1a001000 04048001 Apr 8 13:23:55 devgeis kernel: sd 7:0:0:0: [sdd] tag#1 uas_eh_abort_handler 0 uas-tag 2 inflight: CMD OUT The device is a Crucial MX300 SSD 2T disk. I ran badblocks on it and nothing was reported. Why might I be getting errors ? Jerry

1 1

Upgrade from Centos 7 to Centos 8
by Stefano Simonucci 08 Apr '20

08 Apr '20

I don't understand how I can upgrade my CentOS 7. cat /etc/redhat-release CentOS Linux release 7.7.1908 (Core) I followed the directions found on the web (by installing dnf and so on), but when I tried to install centos-release I get dnf upgrade -y http://mirror.centos.org/centos/8/BaseOS/x86_64/os/Packages/centos-release-… Last metadata expiration check: 0:19:05 ago on Wed 08 Apr 2020 04:50:14 PM CEST. centos-release-8.1-1.1911.0.9.el8.x86_64.rpm 184 kB/s | 21 kB 00:00 Dependencies resolved. Problem: cannot install the best update candidate for package centos-release-7-7.1908.0.el7.centos.x86_64 - nothing provides centos-gpg-keys = 8.1-1.1911.0.9.el8 needed by centos-release-8.1-1.1911.0.9.el8.x86_64 - nothing provides centos-repos = 8.1-1.1911.0.9.el8 needed by centos-release-8.1-1.1911.0.9.el8.x86_64 ================================================================================================================================= Package Arch Version Repository Size ================================================================================================================================= Skipping packages with broken dependencies: centos-release x86_64 8.1-1.1911.0.9.el8 @commandline 21 k Transaction Summary ================================================================================================================================= Skip 1 Package Nothing to do. Complete! Does anyone know how to upgrade? Thanks Stefano

5 5

fail2ban ban not working
by Gary Stainburn 08 Apr '20

08 Apr '20

I have fail2ban on my mail server monitoring Dovecot and Exim. I have noticed that it has stopped banning IP's. I have seen in /var/log/fail2ban.log: 2020-04-07 09:42:05,875 fail2ban.filter [16138]: INFO [dovecot] Found 77.40.61.224 - 2020-04-07 09:42:05 2020-04-07 09:42:06,408 fail2ban.actions [16138]: NOTICE [dovecot] Ban 77.40.61.224 2020-04-07 09:42:06,981 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- exec: ipset create f2b-dovecot hash:ip timeout 3600000 firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -p tcp -m multiport --dports 0:65535 -m set --match-set f2b-dovecot src -j REJECT --reject-with icmp-port-unreachable 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: "ipset v7.1: Syntax error: '3600000' is out of range 0-2147483" 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: Set f2b-dovecot doesn't exist." 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: '' 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: 'Error occurred at line: 2' 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: "Try `iptables-restore -h' or 'iptables-restore --help' for more information." 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- stderr: '' 2020-04-07 09:42:06,982 fail2ban.utils [16138]: ERROR 7ff736d6f930 -- returned 13 In /var/log/firewalld I got 2020-04-07 09:42:06 ERROR: COMMAND_FAILED: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.4.21: Set f2b-dovecot doesn't exist. Error occurred at line: 2 Try `iptables-restore -h' or 'iptables-restore --help' for more information. Looking back at my logs, this has been going on some time. Any advice on fixing this would be appreciated

3 3

C8.1 Grub problem
by Alessandro Baggi 08 Apr '20

08 Apr '20

Hi list, I reinstalled on my workstation CentOS 8.1. I explain: I'm a KDE user but packages shipped from EPEL currently are buggy so I prefer a stable and functioning system to work with. So I tried to remove KDE workgroup and installed group "Workstation" but the system bricked so I reinstalled with GNOME. I've an nvidia gtx 1050ti GPU so I installed kmod-driver from rpmfusion. After the installation of Nvidia driver, I rebooted, gdm start and after I perform the login the system freeze. So this problem happened to me with C7.5 and nvidia driver. In my case I need to blacklist i915 module and system works. Also in this case I tried to boot centos changing grub kernel parameters pressing 'e' in the grub menu and adding "i915.modeset=0 rd.driver.blacklist=i915", booted and system works. So I tried to make this permanent updating grub configuration adding the previous directives (and removed rhgb and quiet) to /etc/default/grub and run grub2-mkconfig -o /boot/efi/EFI/centos/grub.cfg. Reboot the system and checked again kernel parameters on grub menu and seen that nothing changed. Booted and freezed. I checked /boot/efi/EFI/centos/grub.cfg and kernelops has the new directives. Seems that grub configuration does not take effect. I made another test inside a VM installed with minimal selection and remove rhgb and quiet parameters and worked fine. The vm is BIOS and my workstation UEFI. How I can solve this problem? Currently to boot my system I need always to add this params. Thank you in advance

6 15

CentOS-announce Digest, Vol 182, Issue 1
by centos-announce-request＠centos.org 08 Apr '20

08 Apr '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Welcome Thomas and Patrick to CentOS Project Governing Board (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 7 Apr 2020 17:55:53 +0100 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org>, "The CentOS developers mailing list." <centos-devel(a)centos.org> Subject: [CentOS-announce] Welcome Thomas and Patrick to CentOS Project Governing Board Message-ID: <4bac266d-6ab6-0f81-47fe-dcd77d65ae57(a)centos.org> Content-Type: text/plain; charset="utf-8" Hi, The CentOS Governing Board of Directors is pleased to appoint two new Directors to be added to the Governing Board, effective 8th April 2020: Thomas Oulevey [1] and Patrick Riehecky [2]. The community will instantly recognise both from their long standing and well established support for the CentOS Project over the years, initially as consumers and community participants, and in more recent times as active across various initiatives in and around the project space. Over the last sixteen years the CentOS project has established itself as a critical component in the open source ecosystem online. In order to maintain this leading role and help drive success for the wider open source ecosystem, we are moving to a more contributor-centric model. A key part of enabling this goal is to evolve our transparent governance. Pat and Thomas have shown keen interest in participating in this specific endeavour, and we are excited to welcome them to the team, helping us get there. Thomas (alphacc) works in the Controls group within the CERN Beams department [3]. He has contributed to the CentOS Project since 2012, as a member of the infrastructure team. He helped to bootstrap a few Special Interest Groups, helped the QA team with reports, and now mainly designs and improves the Community Build Service [4]. Thomas?s sponsor on the Board is Mike McLean, who will help oversee his transition to project leadership. Patrick (jcpunk) works at Fermi National Accelerator Laboratory [5]. He is part of the Scientific Linux team [6] and works on systems that perform Data Acquisition for various experiments at Fermilab. Although a long time member of the community, formally Pat began working with the CentOS Community when Fermilab decided to use CentOS 8 [7] as its EL8-base platform. Pat?s sponsor is Johnny Hughes, who will help oversee his transition to project leadership. Please join me in welcoming them to the team, Regards Karanbir Singh Project Lead, The CentOS Project [1] https://wiki.centos.org/ThomasOulevey [2] https://wiki.centos.org/PatrickRiehecky [3] https://beams.cern [4] https://cbs.centos.org [5] https://beams.cern [6] https://www.scientificlinux.org/about/who-makes-scientific-linux/ [7] https://listserv.fnal.gov/scripts/wa.exe?A2=SCIENTIFIC-LINUX-ANNOUNCE;11d60…

1 0

RHEL 7.8 is out
by Phelps, Matthew 07 Apr '20

07 Apr '20

This is not your usual "so when is CO 7.8.xxxx coming out?" posts. I'm just curious if the CentOS team is affected by our current world conditions, or is work-from-home modus operandi for the team? (In other words, "when is CO 7.8.xxxx coming out?") -- *Matt Phelps* *Information Technology Specialist, Systems Administrator* (Computation Facility, Smithsonian Astrophysical Observatory) Center for Astrophysics | Harvard & Smithsonian 60 Garden Street | MS 39 | Cambridge, MA 02138 email: mphelps(a)cfa.harvard.edu cfa.harvard.edu | Facebook <http://cfa.harvard.edu/facebook> | Twitter <http://cfa.harvard.edu/twitter> | YouTube <http://cfa.harvard.edu/youtube> | Newsletter <http://cfa.harvard.edu/newsletter>

3 2

firefox unable to load pkcs11 module
by Tony Schreiner 06 Apr '20

06 Apr '20

CentOS 7, In firefox -> privacy & security -> certificates -> security devices i am trying to load the pkcs11 modules, but get the error unable to load. I am following the directions at https://piv.idmanagement.gov/engineering/firefox/ I have installed opensc and openssl-pkcs11, which contains /usr/lib64/openssl/engines/pkcs11.so and am using that is the module Has anybody here done that, and can offer advice? Tony Schreiner

2 3

C7, odd log off issue
by mark 06 Apr '20

06 Apr '20

Fresh C 7 install, fully updated... but whenever I go to log off, whether with ctl-alt-delete, or from the menu, instead of logging me off, it restart X, with me still logged on. The second time I try, it logs me off. Anyone seen this behavior? mark

1 0

CentOS 8.1 cron does not send mail
by Tobias Kirchhofer 06 Apr '20

06 Apr '20

Hi, we experience difficulties with crond behaviour sending mail since CentOS 8.1. The cron job is the same like we used in CentOS 7. crontab -l /usr/bin/python3 -c 'import random; import time; time.sleep(random.random() * 3600)' && /usr/local/bin/backup.sh backup.sh writes the backup to the remote backup server. There are around 30 machines with the same cron job. The python part spreads the jobs over an hour so that the backup server is not struck at once from about 30 machines. The change in behaviour is that crond sends no mail anymore. It is because of the logical and (&&). Without this crond sends mails. What has changed in CentOS 8 and does anyone has an idea how we could fix it? Thank you! Tobias -- collect(a)shift.agency

5 12

Windows 10 as guest on Centos 8
by Georgios 05 Apr '20

05 Apr '20

Hi there! Im trying to install windows 10 as a guest on Centos 8.1 I tried with cockpit and with boxes and both times my computer freezes during installation. Any ideas? Thanks in advance!

4 5

Trying again: KDE fails with a gray screen after login, can't reinstall
by mark 04 Apr '20

04 Apr '20

I set for graphical mode, I get the login screen, I change to KDE, and the screen goes black, then after minutes, gray with a cursor, and that's it - I left it overnight, no change. Brand new install (as of yesterday). Missed any "agree to license", and missed choosing software. Manually groupinstalled Installed Environment Groups: KDE Plasma Workspaces Development and Creative Workstation Tried to reinstall: No group named KDE Plasma Workspaces exists I'm assuming I need to install something else, but does anyone have a clue? I really do NOT want gnome. mark

3 3

Mostly better: new C7
by mark 04 Apr '20

04 Apr '20

Well, I gave up, and reinstalled C7. This time, I realized I needed to make a software choice before the install, and did so. My install, yesterday, was a minimal. Silly me, yesterday, after that, I did a groupinstall of KDE Plasma Workspaces... and it did *NOT* include all the dependencies to run KDE. Having installed a KDE desktop, much is better... with one exception: I can't seem to find any games. I tried yum groupinstall "Games and Entertainment", which showed when I did group list... and was told it was empty. Now what am I missing? I do have epel and rpmfusion, both free and non-free. mark

4 4

Upgraded to 7.10 from 6...
by mark 04 Apr '20

04 Apr '20

Let me start out by making clear I *LOATHE* gnome, ok? So I don't want to hear about it. What's happening is this: I did this: yum groupinstall "Development and Creative Workstation" yum groupinstall "KDE Plasma Workspaces" Now, when I go in graphical mode, I try to change to kde on login. Nope - minutes later, I can see a cursor, and a gray screen. Ditto on the "safe mode", and ditto on "gnome classic". What have I missed? mark

3 2

IOMMU and kernel
by Georgios 03 Apr '20

03 Apr '20

Hi. Im trying to set intel_iommu=on on kernel parameters at grub but for some reason it doesnt work. I edit /etc/default/grub file and i add the parameter. then i run grub2-mkconfig -o /boot/efi/EFI/centos/grub.cfg and then i reboot. when i run virt-host-validate i get QEMU: Checking if IOMMU is enabled by kernel: WARN (IOMMU appears to be disabled in kernel. Add intel_iommu=on to kernel cmdline arguments) when i edit the grub menu durring boot and i put intel_iommu=on and the i run again virt-host-validate i get QEMU: Checking if IOMMU is enabled by kernel: PASS any ideas? I tried editing other variables like GRUB_TIMEOUT and it seems to me that changes are applied. Thanks in advance

3 9

C8 and backup solution
by Alessandro Baggi 03 Apr '20

03 Apr '20

Hi list, I'm searching a valid backup system to perform backups of 3 server, one local and 2 remote, and 2 linux workstation. (this number could be higher in future). Currently I'm testing bacula, scripted rsync with hardlink and borgbackup on C8.1. Bacula works without any problem, well tested, solid but complex to configure. Tested on a single server (with volumes on disk) and a full backup of 810gb (~150000 files) took 6,30 hours (too much). I would run deduplication but 1. bacula on C8 is not compiled with aligned 2. bacula put attention on some possibile bad scenario where deduplication could be a problem in losing one block that could break many files with the same shared block. So deduplication is secure or I should be away from it? scripted rsync. Simple, through ssh protocol and private key. No agent required on target. I use file level deduplication using hardlinks. To perform compression and block deduplication I could use fs like zfs (not available from epel) or use something like stratis (I don't checked if it offer deduplication in this moment). Encryption could be performed on fs level. Using a scripted rsync is the simpler way but there is something that could be leaved out by me (or undiscovered error). Simple to restore. BorgBackup is another solution similar to rsync in some way. It works like rsync through ssh but while rsync simply sends data, borg run deduplication, compression and encryption on place. Why is similar rsync? Because I need another script to run borg. It is not a complete solution and it works on push method and not pull like with bacula or rsync. If I would manage all my server from a central backup server is a problem, so to accomplish this I should run the borg command from the central server on the target server that point back to the remote repository (located on the central server). There is another solution with borg: using sshfs but is 4 time slower (too much solwer). I have not so much experiences on backups and choosing the bad tool could be dangerous so I need some suggestion. What backup solution do you suggest for my scenario? Thank you in advance. Alessandro.

9 11

Mounting CIFS shares on C8
by Patrick DERWAEL 03 Apr '20

03 Apr '20

Hi all, I'm tearing my hair off trying to understand the difference between C7 & C8 for mounting a cifs FS with fstab I'm building a Plex media server on C8 and duplicated the fstab entries over from my current C7 installation My data (music & movies) are on CIFS shares on a Synology NAS. The packages cifs-utils samba-client samba-common are installed, up to date etc... These are my current fstab entries on the C7 box //192.168.1.200/mp3 /home/plex/Musique cifs user=plex,pass=plex,ro,auto,vers=3.0 //192.168.1.200/videos /home/plex/Vidéos cifs user=plex,pass=plex,ro,auto,vers=3.0 On my C8: [root@plexvm etc]# cat fstab # # /etc/fstab # Created by anaconda on Fri Apr 3 14:02:23 2020 # # Accessible filesystems, by reference, are maintained under '/dev/disk/'. # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info. # # After editing this file, run 'systemctl daemon-reload' to update systemd # units generated from this file. # /dev/mapper/cl_plexvm-root / xfs defaults 0 0 UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot ext4 defaults 1 2 /dev/mapper/cl_plexvm-swap swap swap defaults 0 0 //192.168.1.200/mp3 /home/plex/Musique cifs user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0 //192.168.1.200/videos /home/plex/Vidéos cifs user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0 //192.168.1.200/series /home/plex/Séries cifs user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0 [root@plexvm etc]# mount -a mount error(2): No such file or directory Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) mount error(2): No such file or directory Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) mount error(2): No such file or directory Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) [root@plexvm etc]# Any pointer would be MUCH appreciated! Thanks -- Patrick Derwael Rue de la fontaine, 3 4210 Burdinne Tél:+32.(0)479.80.50.79

7 13

Re: [CentOS] C8 and backup solution
by Alessandro Baggi 03 Apr '20

03 Apr '20

Il 02/04/20 21:14, Karl Vogel ha scritto: > [Replying privately because my messages aren't making it to the list] > >>> In a previous message, Alessandro Baggi said: > A> Bacula works without any problem, well tested, solid but complex to > A> configure. Tested on a single server (with volumes on disk) and a > A> full backup of 810gb (~150000 files) took 6,30 hours (too much). > > For a full backup, I'd use something like "scp -rp". Anything else > has overhead you don't need for the first copy. > > Also, pick a good cipher (-c) for the ssh/scp commands -- it can improve > your speed by an order of magnitude. Here's an example where I copy > my current directory to /tmp/bkup on my backup server: > > Running on: Linux x86_64 > Thu Apr 2 14:48:45 2020 > > me% scp -rp -c aes128-gcm(a)openssh.com -i $HOME/.ssh/bkuphost_ecdsa \ > . bkuphost:/tmp/bkup > > Authenticated to remote-host ([remote-ip]:22). > ansible-intro 100% 16KB 11.3MB/s 00:00 ETA > nextgov.xml 100% 27KB 21.9MB/s 00:00 ETA > building-VM-images 100% 1087 1.6MB/s 00:00 ETA > sort-array-of-hashes 100% 1660 2.5MB/s 00:00 ETA > ... > ex1 100% 910 1.9MB/s 00:00 ETA > sitemap.m4 100% 1241 2.3MB/s 00:00 ETA > contents 100% 3585 5.5MB/s 00:00 ETA > ini2site 100% 489 926.1KB/s 00:00 ETA > mkcontents 100% 1485 2.2MB/s 00:00 ETA > > Transferred: sent 6465548, received 11724 bytes, in 0.4 seconds > Bytes per second: sent 18002613.2, received 32644.2 > > Thu Apr 02 14:48:54 2020 > > A> scripted rsync. Simple, through ssh protocol and private key. No agent > A> required on target. I use file level deduplication using hardlinks. > > I avoid block-level deduplication as a general rule -- ZFS memory > use goes through the roof if you turn that on. > > rsync can do the hardlinks, but for me it's been much faster to create > a list of SHA1 hashes and use a perl script to link the duplicates. > I can send you the script if you're interested. > > This way, you're not relying on the network for anything other than the > copies; everything else takes place on the local or backup system. > > A> Using a scripted rsync is the simpler way but there is something that > A> could be leaved out by me (or undiscovered error). Simple to restore. > > I've never had a problem with rsync, and I've used it to back up Linux > workstations with ~600Gb or so. One caveat -- if you give it a really > big directory tree, it can get lost in the weeds. You might want to do > something like this: > > 1. Make your original backup using scp. > > 2. Get a complete list of file hashes on your production systems > using SHA1 or whatever you like. > > 3. Whenever you do a backup, get a (smaller) list of modified files > using something like "find ./something -newer /some/timestamp/file" > or just making a new list of file hashes and comparing that to the > original list. > > 4. Pass the list of modified files to rsync using the "--files-from" > option so it doesn't have to walk the entire tree again. > > Good luck! > > -- > Karl Vogel / vogelke(a)pobox.com / I don't speak for the USAF or my company > > The best setup is having a wife and a mistress. Each of them will assume > you're with the other, leaving you free to get some work done. > --programmer with serious work-life balance issues Hi Karl, thank you for your answer. I'm trying ssh scripted rsync using a faster cypher like you suggested and seems that transfer on 10GB is better of default selected cypher (129 sec vs 116 using aes128-gcm, I tested this multiple times). Now I will try to check on the entire dataset and see how much benefit I gain. Waiting that, what do you think about bacula as backup solution? Thank you in advance.

1 0

CentOS 7 host with guests as bridge cannot access host
by Jerry Geis 02 Apr '20

02 Apr '20

I have CentOS 7 host. Two guests on bridge network setup by GUI and virt-manager. 1 CentOS 8 guest 1 Win 10 guest Both cannot access the host. They can other machines on the network. Guests can access the internet just not the host. I used virt-manager GUi to set up everything. Selected the eth0:macvtap and Bridge. I "desire" bridge network. If I select something else I get access to host - but of course machine is not on the main network. Thoughts ? Jerry

3 9

Re: [CentOS] Versions in RHEL and CentOS
by Peter Kjellström 02 Apr '20

02 Apr '20

On Thu, 2 Apr 2020 11:10:23 +0530 Thomas Stephen Lee <lee.iitb(a)gmail.com> wrote: ... > /usr/bin/sensors > > from the lm_sensors package > > I had run > > sensors-detect --auto I had no idea people still used that package. Especially on a server. Per core temperatures in linux for Zen2 is done using (a very up to date kernel with its k10temp module). Alternatively one can look at: https://github.com/ocerman/zenpower.git I don't know if it works with the c8 kernel (but it does not work with the c7 one). But in the end. Why care about per core temperatures? Setup basic monitoring of the server using ipmi or whatever the vendor supports. /Peter K

2 3

Cloud Image building (like CentOS is doing it)
by Nicolas Ghirlanda 02 Apr '20

02 Apr '20

Hello, I was not able to find information about how CentOS is building its Cloud Images. I know packer etc are able to do it, but I am interested in how CentOS is building its own images as we like to adapt that for our Openstack Cloud. thanks for any hints Nicolas

2 1

centos 6 vs 7
by Divine Tanyingoh 02 Apr '20

02 Apr '20

Issue: After installing vms on vmware, I noticed a difference in behavior between centos 6 vs 7. On centos 6 I cannot ping the hostname and get a reply without first resolving in the /etc/hosts file by adding a new entry: 192.168.0.47 server1.example.com. But for centos 7 I am able to ping the hostname and get a reply even when I have not made any changes to the /etc/hosts file. Why is there this difference between centos 6 vs 7. Thank you for your assistance.

3 3

Qemu guest(s) in bridge mode cannot see host machine.
by Jerry Geis 31 Mar '20

31 Mar '20

Hi All - I have a Win10 and Centos 8 guest both that bridge mode does not see the host- other computers seem ok. They cannot even ping the host. My host is CentOS 7. I did some searching - I see the issue - but not what was done to resolve it ? Thanks, Jerry

1 0

mlocate-updatedb.timer not working?
by Frank Cox 31 Mar '20

31 Mar '20

I set this computer up with Centos 8 a few days ago. "systemctl status mlocate-updatedb.timer" says "Active (waiting)". But the mlocate database hasn't been updated since the last time I ran updatedb manually. # ls -l /var/lib/mlocate/* -rw-r-----. 1 root slocate 22944208 Feb 29 10:30 /var/lib/mlocate/mlocate.db What have I missed? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

2 2

Problem installing bind-dyndb-ldap
by Michal Zacek 31 Mar '20

31 Mar '20

Hello, is there a way, how to avoid this stupid "module" problem? Google didn't help, except it is quite common at Centos 8.1. [root@centos8 ~]# dnf install bind-dyndb-ldap ..... Running transaction check No available modular metadata for modular package 'bind-dyndb-ldap-11.1-14.module_el8.1.0+253+3b90c921.x86_64', it cannot be installed on the system [root@centos8 ~]# cat /etc/redhat-release CentOS Linux release 8.1.1911 (Core) Thanks, MZa

1 0

Versions in RHEL and CentOS
by Thomas Stephen Lee 31 Mar '20

31 Mar '20

Hi, I had a doubt regarding RHEL/CentOS Versions. https://access.redhat.com/support/policy/amd in the he Notes No (8) says "Update 2 of Red Hat Enterprise Linux 8" does it mean it will appear in CentOS 8.2, or is already there from 8.0 ? thanks -- Lee

2 1

CentOS 8 Gstreamer and Mplayer
by Mark LaPierre 31 Mar '20

31 Mar '20

Hey Y'all, What replaced Gstreamer and Mplayer in CentOS 8. RPM finder finds both for CentOS 6 and 7 but not 8. There must be a replacement for them but I don't know what. I appear to be having codec issues but, not knowing what's supposed to handle the jobs that the two programs used to do, I don't know where to look for a commercial set of codecs compatible with the application. I'm getting error messages, "No video with supported format and MIME type found." when visiting certain web sites with Firefox. I would try it with Chrome but that does not appear to be available in the CentOS 8 repos either. I found solutions to this issue on the net that involved turning off HTML5 direct rendering and using Flash, but that's not going to happen. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

6 7

Re: [CentOS] CentOS 8 Gstreamer and Mplayer
by Mark LaPierre 31 Mar '20

31 Mar '20

On 2020-03-30 00:13, Ted Miller wrote: > I have generally found that installing VLC takes care of my codec needs. > Have not tried it on Centos8 yet. > Ted Miller > > > On 3/29/20 11:18 PM, Mark LaPierre wrote: >> On 2020-03-29 18:42, Frank Cox wrote: >>> On Sun, 29 Mar 2020 18:34:20 -0400 >>> Mark LaPierre wrote: >>> >>>> What replaced Gstreamer and Mplayer in CentOS 8. RPM finder finds both >>>> for CentOS 6 and 7 but not 8. There must be a replacement for them but >>>> I don't know what. >>> >>> rpmfusion might be what you're looking for. >>> >> >> I'm assuming that rpmfusion is a repository that I have to set up on >> my new squeaky clean freshly installed machine and then proceed to >> pollute it with questionable packages. ;-) >> >> I'll look into that tomorrow. >> >> What I would really like to know is, were these applications replaced >> with something else that I should be using instead? >> >> Thank you for responding. I really do appreciate it. >> > > The box says, "No match for argument: vlc Error: Unable to find a match: vlc" Perhaps there's another repo like epel for CentOS 8 where these toys live? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 1

Some problems with Unbound under CentOS8
by Carlos Lopez 30 Mar '20

30 Mar '20

Good morning, I have detected two strange problems with unbound under CentOS8 (fully patched). I have tried same configuration in an OpenBSD host, and these problems do not appear. a/ Error mesage “connection refused”. I am using this unbound server to resolv DNS records for our internal domain (Bind9 is configured to listen in localhost interface, port 5353 udp and in the same host where unbound runs). When I try to run a nslookup query like this: > set q=any > my.internal.dom ;; Connection to 127.0.0.1#53(127.0.0.1) for my.internal.dom failed: connection refused. > And I don’t understand why. Bind9 resolves this without problems, but unbound returns connection refused. Unbound is configured to listen in 0.0.0.0 and allow all connections (access-control: 0.0.0.0/0 allow). The strange thing is that it only happens with that kind of request, any other request works fine. b/ Unbound tries to connect to Root DNS servers directly. Every time unbound starts, it tries to connect to root DNS servers directly and not through internal DNS. I am using a second unbound server as a cache nameserver in a DMZ zone and unbound anchor timer service is disabled. My forward config is: forward-zone: name: "." forward-addr: 172.22.54.6@53<mailto:172.22.54.6@53> Any idea why these problems occur? -- Regards, C. L. Martinez

2 4

Upgrade to CentOS8
by Patrick DERWAEL 29 Mar '20

29 Mar '20

Hi folks I have a couple of Zotac mini PCs running CentOS7 which I want/need to upgrade to CentOS8 In theory, they are CentOS8 capable, but assuming Murphy might be lurking around, I prefer validating the hardware before starting the effective installation As there is no LiveCD, what would be the recommended way to do this? Thanks! <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> Virus-free. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

5 7

Need help to fix bug in rsync
by Simon Matter 28 Mar '20

28 Mar '20

Hi, I've discovered a bug in rsync which leads to increased CPU usage and slower transfers in many situations. When syncing with compression (-z), certain file types should not be compressed during the transfer because they are already compressed. The file types which are not to be compressed can be seen in the man page section --skip-compress. Unfortunately skipping the default file types doesn't work and all transferred data is being compressed during the transfer. This is true for all versions since 3.1.0. Steps to Reproduce: 1. run 'rm -f Z ; rsync -azv alpha:z.gz Z' Actual results, transferred data was compressed during the transfer: sent 43 bytes received 63,873 bytes 25,566.40 bytes/sec total size is 628,952 speedup is 9.84 Expected results: No compression should happen for .gz file. Additional info: Note that the source file 'z.gz' was an ascii text file to show clearly that compression took place. Please the following BZ for more info: https://bugzilla.samba.org/show_bug.cgi?id=14323 https://bugzilla.redhat.com/show_bug.cgi?id=1816528 I tried to locate the bug in the code but failed. That said I'm not a C developer and therefore need some help from someone who understands C better than me. Any help is much appreciated! Thanks and kind regards, Simon

13 28

directfb on CentOS 7
by Jerry Geis 27 Mar '20

27 Mar '20

I have another package (baresip) that needs "directfb". from baresip make MOD := directfb $(MOD)_SRCS += directfb.c $(MOD)_LFLAGS += $(shell pkg-config --libs directfb) $(MOD)_CFLAGS += $(shell pkg-config --cflags directfb \ | sed -e 's/-I/-isystem/g') include mk/mod.mk I tried to find with: yum provides "*/directfb.pc" but nothing is returned. Where can I get/find directfb for CentOS 7 ? Thanks, Jerry

2 2

CentOS 8 two installs one is X and one is Xwayland
by Jerry Geis 27 Mar '20

27 Mar '20

HI All, I have two installs of CentOS 8. One is a VM and uses what sees as the OLD X as I get /var/log/X* files ... the other is on a real machine and seems to be using Xwayland and I have no /var/log/X* files. Couple things: 1) The VM is using qxl driver it seems. I do not see Xwayland running. 2) Xwayland is running on the physical box - and where are log files for it. Surprised its running two different ways. Thanks, Jerry

2 1

CentOS 8
by Jerry Geis 27 Mar '20

27 Mar '20

I have for CentOS 8 - totem and totem-pl-parser installed - but I cannot find the -devel packages for CentOS 8. Where are they ? Thanks, Jerry

1 0

X module not loading
by Jerry Geis 25 Mar '20

25 Mar '20

HI - On CentOS 8 I see this in my X log intel: waited 2020 ms for i915.ko driver to load I find this: find . | grep i915.ko ./4.18.0-147.5.1.el8_1.x86_64/kernel/drivers/gpu/drm/i915/i915.ko.xz uname -r 4.18.0-147.5.1.el8_1.x86_64 Why might it not be loading ? Thanks, Jerry

2 2

CentOS 6.10 bind DNSSEC issues
by Support 25 Mar '20

25 Mar '20

Hi, Anyone else had any issues with CentOS 6.10 bind DNS server issues this afternoon. At 16:26 (GMT) had alerts for DNS failures against our CentOS 6.10 bind DNS servers from our monitoring system. Sure enough DNS requests via the server was failing, checking the named.log showed dnssec issues; 25-Mar-2020 16:26:10.285 dnssec: info: validating @0xb48b17c0: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.337 dnssec: info: validating @0xb4858cb0: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.349 dnssec: info: validating @0xb48b17c0: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.349 dnssec: info: validating @0xb4858cb0: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.359 dnssec: info: validating @0xb1ec0030: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.360 dnssec: info: validating @0xb462c430: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.441 dnssec: info: validating @0xb48b17c0: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.441 dnssec: info: validating @0xb4858cb0: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.451 dnssec: info: validating @0xb1ec0030: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.452 dnssec: info: validating @0xb462c430: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.463 dnssec: info: validating @0xb1ec0030: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.463 dnssec: info: validating @0xb462c430: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.474 dnssec: info: validating @0xb1ec0030: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.474 dnssec: info: validating @0xb462c430: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.898 dnssec: info: validating @0xb48b17c0: www.kernel.org AAAA: bad cache hit (www.kernel.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.899 dnssec: info: validating @0xb4858cb0: www.kernel.org A: bad cache hit (www.kernel.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.902 dnssec: info: validating @0xb1ec0030: www.national-lottery.co.uk A: bad cache hit (www.national-lottery.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.902 dnssec: info: validating @0xb48b17c0: www.mirrorservice.org A: bad cache hit (www.mirrorservice.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.902 dnssec: info: validating @0xb462c430: www.national-lottery.co.uk AAAA: bad cache hit (www.national-lottery.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.903 dnssec: info: validating @0xb48b17c0: www.mirrorservice.org AAAA: bad cache hit (www.mirrorservice.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.908 dnssec: info: validating @0xb1ec0030: www.kernel.org A: bad cache hit (www.kernel.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.909 dnssec: info: validating @0xb462c430: www.kernel.org AAAA: bad cache hit (www.kernel.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.914 dnssec: info: validating @0xb48b17c0: www.mirrorservice.org A: bad cache hit (www.mirrorservice.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.915 dnssec: info: validating @0xb4858cb0: www.mirrorservice.org AAAA: bad cache hit (www.mirrorservice.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.915 dnssec: info: validating @0xb48b17c0: www.national-lottery.co.uk AAAA: bad cache hit (www.national-lottery.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.916 dnssec: info: validating @0xb48b17c0: www.national-lottery.co.uk A: bad cache hit (www.national-lottery.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.925 dnssec: info: validating @0xb1ec0030: www.boredpanda.com A: bad cache hit (www.boredpanda.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.925 dnssec: info: validating @0xb48b17c0: www.boredpanda.com AAAA: bad cache hit (www.boredpanda.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.927 dnssec: info: validating @0xb48b17c0: www.bbc.co.uk AAAA: bad cache hit (www.bbc.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.927 dnssec: info: validating @0xb4858cb0: www.bbc.co.uk A: bad cache hit (www.bbc.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.935 dnssec: info: validating @0xb48b17c0: www.boredpanda.com A: bad cache hit (www.boredpanda.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.935 dnssec: info: validating @0xb4858cb0: www.boredpanda.com AAAA: bad cache hit (www.boredpanda.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.938 dnssec: info: validating @0xb1ec0030: www.bbc.co.uk A: bad cache hit (www.bbc.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.938 dnssec: info: validating @0xb462c430: www.bbc.co.uk AAAA: bad cache hit (www.bbc.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.950 dnssec: info: validating @0xb48b17c0: www.fosslinux.com A: bad cache hit (www.fosslinux.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.951 dnssec: info: validating @0xb4858cb0: www.fosslinux.com AAAA: bad cache hit (www.fosslinux.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.962 dnssec: info: validating @0xb48b17c0: www.fosslinux.com A: bad cache hit (www.fosslinux.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.962 dnssec: info: validating @0xb4858cb0: www.fosslinux.com AAAA: bad cache hit (www.fosslinux.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:11.021 dnssec: info: validating @0xb1ec0030: uk.yahoo.com AAAA: bad cache hit (uk.yahoo.com.dlv.isc.org/DLV) Followed by; 25-Mar-2020 16:26:25.828 dnssec: info: validating @0xb48fdcd0: dlv.isc.org NSEC: verify failed due to bad signature (keyid=64263): RRSIG has expired 25-Mar-2020 16:26:25.828 dnssec: info: validating @0xb48fdcd0: dlv.isc.org NSEC: no valid signature found 25-Mar-2020 16:29:05.075 dnssec: info: validating @0xb473dc48: dlv.isc.org DNSKEY: verify failed due to bad signature (keyid=19297): RRSIG has expired 25-Mar-2020 16:29:05.075 dnssec: notice: validating @0xb473dc48: dlv.isc.org DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches a trusted key for 'dlv.isc.org' 25-Mar-2020 16:29:05.075 dnssec: notice: validating @0xb473dc48: dlv.isc.org DNSKEY: please check the 'trusted-keys' for 'dlv.isc.org' in named.conf. No issues with our CentOS 7.7.1908 bind DNS servers. To fix I had to set the following in /etc/named.conf and restart the named service. dnssec-enable no; dnssec-validation no; Anyone else had this issue? Is there and updated key that is needed in CentOS 6.10 version of bind so that I can turn dnssec back on. regards Tim Tim D'Cruz

3 2

Building a NFS server with a mix of HDD and SSD (for caching)
by kadafax＠gmail.com 24 Mar '20

24 Mar '20

Hi list, I'm building a NFS server on top of CentOS 8. It has 8 x 8 TB HDDs and 2 x 500GB SSDs. The spinning drives are in a RAID-6 array. They are 4K sector size. The SSDs are in RAID-1 array and with a 512bytes sector size. I want to use the SSDs as a cache using dm-cache. So here what I've done so far: /dev/sdb ==> SSD raid1 array /dev/sdd ==> spinning raid6 array I've added "allow_mixed_block_sizes = 1" to lvm.conf to be able to add sdb and sdd in the same VG (because of the sector size missmatch). But as the LVs will only use one and only one PV I guess it's OK. # lvcreate -L 500M -n lv_cache_meta VGnfs /dev/sdb # lvcreate -l +100%FREE -n lv_cache VGnfs /dev/sdb # lvconvert --type cache-pool /dev/VGnfs/lv_cache --poolmetadata /dev/VGnfs/lv_cache_meta # lvcreate -l +100%FREE -n LVnfs VGnfs /dev/sdd # lvconvert --type cache /dev/VGnfs/LVnfs --cachepool /dev/VGnfs/lv_cache # lvconvert --cachemode writeback --type cache /dev/VGnfs/LVnfs --cachepool /dev/VGnfs/lv_cache # mkfs.xfs /dev/VGnfs/LVnfs And now I'm asking myself if I'm not doing something somewhat dangerous for a server that will be critical when in production :] The server has 128GB of RAM so maybe the caching in memory will be sufficient to achieve good performance ? What do you think ? Do you use something similar ? Thanks !

2 2

Firewalld direct.xml
by Jerry Geis 24 Mar '20

24 Mar '20

HI All - I created a /etc/firewalld/direct.xml file and put in it : <?xml version="1.0" encoding="utf-8"?> <direct> <chain ipv="ipv4" table="raw" chain="blacklist"/> <rule ipv="ipv4" table="raw" chain="PREROUTING" priority="0">-s 192.168.1.8 -j blacklist</rule> </direct> I rebooted, so then from the 192.168.1.8 machine I tried to ping the machine. I responds. I was expecting it not to respond? What do I not have right with the direct.xml file ? Thanks Jerry

2 2

Issue with AppStream
by Jerry Geis 24 Mar '20

24 Mar '20

is there an issue happening ? yum provides "*/firewall-config" CentOS-8 - AppStream 0.0 B/s | 0 B 00:05 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream' jerry

1 1

Pidgin + pidgin-sipe audo/video calls to Skype for Business
by Toralf Lund 23 Mar '20

23 Mar '20

Has anyone got the audio/video call functionality to work with the CentOS 7 Pidgin packages? I primarily interested in Skype for Business/Office Communicator, but if you have anything else set up that supports audio/video, that may also be of interest. I recently tried to join a "scheduled conference", and got a (working) chat window, but didn't get any sound, and nobody else heard me. And there were no traces of video. I got an additional window with two sound-level bars, with a status line saying "Calling...", which seemed to get no further. I've tried "Test call" from the Accounts, with a similar result - a new window saying "Calling...", but no further progress. I then went ahead and tried "Call a phone number...", again from Accounts, and entered my cell phone number. Then got the "Calling..." window again, and an actual call to the mobile phone. But when I answered it, nothing much happened. The Pidgin window was unchanged, i.e. there was nothing to indicate that the call had been connected, and I couldn't hear any sound at either end. Also, there was no call signal or anything in Pidgin before I picked up. So, has anyone tried this functionality? Any luck? What's supposed to happen when I make a "Test call", anyway? Thanks. - Toralf

1 0

gnome-keyring auto locking
by Leon Fauster 21 Mar '20

21 Mar '20

Hey all, I am preparing some workstations with C8/GNOME here and wonder if there is a smart way to automatically lock the keyring after some defined time (e.g 1800 seconds). The net suggests killing the gnome-keyring-daemon process - not the smartest way. I can manually lock the keyring with seahorse but this way doesn't scale very well :-) Any hints? Leon

1 0

gdm postsession scripts
by Leon Fauster 20 Mar '20

20 Mar '20

Its seems that only the "Default" script in /etc/gdm/PostSession gets processed. Is this the intended behaviour? This makes packaging harder. Or can drop-in scripts/files be enabled? Thanks for hints, Leon

2 2

Re: [CentOS] CentOS 8 VM 800x600
by Jerry Geis 19 Mar '20

19 Mar '20

Ok I tried that and rebooted. I get all kinds of lines in X log that says FBDEV(0): mode "1440x900" not found. FBDEV(0): mode "1024x768" not found. Funny thing is I set up a different CentOS 7 and Windows 10 guest - and they are scaling just fine and I get higher resolutions. Its just my CentOS 8 guest that is 800x600. Thoughts? Jerry

1 1

How do I manually renew Identity Management (FreeIPA) certificates on CentOS6 after they have expired?
by liyi 19 Mar '20

19 Mar '20

Hello： Does someone know how I manually renew Identity Management (FreeIPA) certificates on CentOS6 after they have expired? There is a solution on redhat.com (https://access.redhat.com/solutions/643753) but I can't see it. Please help, thank you! Li Yi

1 0

vnc kde emacs redraw issue
by Steve Clark 18 Mar '20

18 Mar '20

Does anyone have access to the following that could help me with the issue I am having trying to use kdrc with vnc and emacs. VNC redraw issues with emacs on KDE https://access.redhat.com/solutions/1585893 I can't access the portal since I am using CentOS. -- Stephen Clark Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

2 4

crypto-policies / per connection based config
by Leon Fauster 18 Mar '20

18 Mar '20

EL8 workstation: crypto-policies is set to DEFAULT. I need to establish a VPN connection via NetworkManager (Gnome UI) that uses a legacy protocol. Downgrading the policies globally in /etc/crypto-policies/back-ends (I do it just for one backend) helps to establish the connection. To protect this workstation I want to have this config just for this connection (its openssl based that needs opensslcnf.config adapted) and not for all openssl based services. Is a per connection based config possible? Thanks for hints, Leon

1 0

CentOS 8 VM 800x600
by Jerry Geis 18 Mar '20

18 Mar '20

Hi all, I am trying again to get video higher that 800x600 on CentOS 8 VM guest. I re-installed the image, I installed spice-vdagent, I tried setting QXL and VGA both - so far everything is always 800x600. What is the trick ? I am using virt-manager. Jerry

1 0

Running amanda on CentOS 7: "amanda-udp.service failed."
by Robert Heller 18 Mar '20

18 Mar '20

I am trying to get amanda backup going on a CentOS 7 system and things are not working: sharky4.deepsoft.com% sudo systemctl start amanda-udp [sudo] password for heller: Job for amanda-udp.service failed because a configured resource limit was exceeded. See "systemctl status amanda-udp.service" and "journalctl -xe" for details. sharky4.deepsoft.com% sudo systemctl status -l amanda-udp â amanda-udp.service - Amanda Backup System Loaded: loaded (/usr/lib/systemd/system/amanda-udp.service; static; vendor preset: disabled) Active: failed (Result: resources) Mar 17 08:35:58 sharky4.deepsoft.com systemd[1]: Unit amanda-udp.service entered failed state. Mar 17 08:35:58 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed. Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: Got more than one socket. Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to run 'start' task: Invalid argument Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup System. Mar 17 08:43:00 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed. Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Got more than one socket. Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to run 'start' task: Invalid argument Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup System. Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed. sharky4.deepsoft.com% sudo journalctl -xe Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed to Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: Failed to start Amanda Backup -- Subject: Unit amanda-udp.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit amanda-udp.service has failed. -- -- The result is failed. Mar 17 08:52:24 sharky4.deepsoft.com systemd[1]: amanda-udp.service failed. sharky4.deepsoft.com% cat /usr/lib/systemd/system/amanda-udp.service [Unit] Description=Amanda Backup System After=local-fs.target [Service] User=amandabackup Group=disk ExecStart=/usr/sbin/amandad -auth=bsd amdump StandardInput=socket What is missing? I have installed (stock CentOS 7 from standard repos): sharky4.deepsoft.com% rpm -qa amanda\* amanda-server-3.3.3-21.el7.x86_64 amanda-client-3.3.3-21.el7.x86_64 amanda-libs-3.3.3-21.el7.x86_64 amanda-3.3.3-21.el7.x86_64 -- Robert Heller -- 978-544-6933 Cell: 413-658-7953 GV: 978-633-5364 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

3 3

signing modules
by Jerry Geis 17 Mar '20

17 Mar '20

Is there an "easy" way to just sign all kernel modules in the /lib/modules directory ? I'm getting an error about a module not being signed so not loading. CentOS 7.7 UEFI booting. (I cannot remove UEFI as hardware does not allow it). Thanks, Jerry

5 10

Xorg on CentOS
by Jerry Geis 17 Mar '20

17 Mar '20

I am trying to find a way to tell the ORDER of X drivers. I have a VM image of CentOS 7. If I boot the image I want the generic driver to load. But if I put that image on hardware I want the Intel driver to load. So if I specific the /etc/X11/xorg.conf.d/20-intel.conf and specify Intel - this is great for the physical device. But booting my image it fails cause there is not Intel hardware. How can have ONE X config that specifies Intel first and if not present load generic VGA stuff. Thanks, Jerry

2 2

tuned on CentOS 6.9
by Chris Card 17 Mar '20

17 Mar '20

Does tuned on CentOS 6.9 (i.e. tuned-0.2.19-18.el6.noarch) do any dynamic tuning, or does it only support static configuration via a static profile? Chris

1 0

CentOS rpm versioning
by koka miptpatriot 16 Mar '20

16 Mar '20

Hello Clair vulnerability scanner considers the latest version of CentOS mariadb vulnerable, because of RHSA-2019:3708 It states, that mariadb must be updated at least to the version "10.3.17-1.module+el8.1.0+3974+90eded84". CentOS' last version is "10.3.17-1.module_el8.1.0+257+48736ea6". Rpm/yum considers CentOS' version older, than RHEL's. % rpmdev-vercmp 3:10.3.17-1.module_el8.1.0+257+48736ea6 3:10.3.17-1.module+ el8.1.0+3974+90eded84 3:10.3.17-1.module_el8.1.0+257+48736ea6 < 3:10.3.17-1.module+el8.1.0+3974+ 90eded84 That's why Clair considers it's vulnerable. Is there any way to fix it? -- skype: miptpatriot

2 2

Slightly OT : where is Cipherli.st ?
by Nicolas Kovacs 16 Mar '20

16 Mar '20

Hi, Up until recently, I've been using the excellent https://cipherli.st resource to configure SSL on my servers. I tried to take a look again today, but the site seems to have vanished. Anybody knows what's happened ? Has it moved ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 1

EPEL Package update?
by Chris Boyd 15 Mar '20

15 Mar '20

We run RANCID at the day job to back up switch and router configs. Version 3.11 adds some support for devices we need. The current EPEL version is 3.9. I filed a request at Fedora to get it updated, which they have completed (version 3.11), but it still hasn't made it into the EPEL for CentOS. What's the right place/process to get the update into EPEL for CentOS? All pointers appreciated. --Chris

2 1

CentOS-announce Digest, Vol 181, Issue 3
by centos-announce-request＠centos.org 13 Mar '20

13 Mar '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:0790 Important CentOS 6 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 12 Mar 2020 14:27:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0790 Important CentOS 6 kernel Security Update Message-ID: <20200312142710.GA19323(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0790 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0790 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 47261a2124f4b01f6d6d730b79880a49fea891821f9469b86ca1b999435b426a kernel-2.6.32-754.28.1.el6.i686.rpm 6e8712a76b2b7dc2bc6e834d7982cae5f5fe3fa83e746251fb3513b887fc1261 kernel-abi-whitelists-2.6.32-754.28.1.el6.noarch.rpm a67dfe435f8190ee7c8c575b59c14913adbb7de6543dadfa2613c1bed8138317 kernel-debug-2.6.32-754.28.1.el6.i686.rpm 070e30f9e0266793da7600e606745bc0e721af3b8638f658f606250559a96d6c kernel-debug-devel-2.6.32-754.28.1.el6.i686.rpm c2f527d4390b60d285c95e38484c8b64a314d72afa846e48b3316332eddd6fb3 kernel-devel-2.6.32-754.28.1.el6.i686.rpm 2a72eecba01f18b8d694722f1e6694c8d009b2052490715a7799d1e0b7cba82c kernel-doc-2.6.32-754.28.1.el6.noarch.rpm fba4e545ae924e5671a0fcc384390defa75bbee1860d738bee76b0514f4d3f6d kernel-firmware-2.6.32-754.28.1.el6.noarch.rpm 631353f0cefb3927a778159eee482b3b4de8372311532d935365c0ee43a64973 kernel-headers-2.6.32-754.28.1.el6.i686.rpm b794d2566b29a5cc32f424fb4fbb441a4c92d2d2ba147a0c952194806f2ff477 perf-2.6.32-754.28.1.el6.i686.rpm 3ea6b1d604f513deb458d1c9f05522922de085f7e492e390dc90ec29df270cca python-perf-2.6.32-754.28.1.el6.i686.rpm x86_64: 8f6b20e76e23b4b52fc320a452fd16f8eef0170e64512b5c2fb2f3e5996f935e kernel-2.6.32-754.28.1.el6.x86_64.rpm 6e8712a76b2b7dc2bc6e834d7982cae5f5fe3fa83e746251fb3513b887fc1261 kernel-abi-whitelists-2.6.32-754.28.1.el6.noarch.rpm 5b73bea119dc3b655d408d0837fd60186e6285e2560734d2825815bd3a2a93ed kernel-debug-2.6.32-754.28.1.el6.x86_64.rpm 070e30f9e0266793da7600e606745bc0e721af3b8638f658f606250559a96d6c kernel-debug-devel-2.6.32-754.28.1.el6.i686.rpm 00f1659a33ac079d34e58fbc831df78e43809ccac29fcaefdbf8d0705e3d1798 kernel-debug-devel-2.6.32-754.28.1.el6.x86_64.rpm 6f944d39456b313dc86b19b79f55a416e527ed16651bd3575c605e511f1ccf7a kernel-devel-2.6.32-754.28.1.el6.x86_64.rpm 2a72eecba01f18b8d694722f1e6694c8d009b2052490715a7799d1e0b7cba82c kernel-doc-2.6.32-754.28.1.el6.noarch.rpm fba4e545ae924e5671a0fcc384390defa75bbee1860d738bee76b0514f4d3f6d kernel-firmware-2.6.32-754.28.1.el6.noarch.rpm 033099fa92c9934ad55e83206b797afbac10873e748fffc34b01a766c6f24813 kernel-headers-2.6.32-754.28.1.el6.x86_64.rpm d9ad8d44c6415ba74a0051f8026d476f6291e00ef39c3dfa39ee2287499d6c1f perf-2.6.32-754.28.1.el6.x86_64.rpm 84c6b57e406acd8ab8d6be4d920870f3b0e64eda998ff4d2c20447d2c9b6d57b python-perf-2.6.32-754.28.1.el6.x86_64.rpm Source: e76b3fba6effae976721c78e8bb0b52c11ce661989986a9bd08543af70a462a8 kernel-2.6.32-754.28.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 181, Issue 3 ***********************************************

1 0

Software gone AWOL...
by Robert Heller 12 Mar '20

12 Mar '20

I am moving from a CentOS 6 VM to a CentOS 7 VM and two pieces of software I use seem to be missing: RT (from Best Practical Solutions) -- an RPM for rt 3.1.13 was in EPel 6 and until recently, was also in EPel 7. It is not there now. Since it is just Perl code, I wonder if I can just install the el6 rpm on a CentOS 7 system. Bugzilla -- I installed this from an RPM on my CentOS 6 server (bugzilla-3.4.14-2.el6.noarch). It is not in the EPel 7. It too is noarch (also Perl code) and wonder if I can just install the el6 rpm (if I can find it somewhere -- a yum search bugzill finds it, but it is not actually there in the repo. Are there other solutions? (Installing RT "from source" is something of a bear, since there are lots of Perl module dependencies, that I would rather yum deal with if possible.) -- Robert Heller -- 978-544-6933 Cell: 413-658-7953 GV: 978-633-5364 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

3 2

C8 and Plasma5 error
by Alessandro Baggi 12 Mar '20

12 Mar '20

Hi list, I have installed plasma5 on my c8 workstation but I'm getting (random) error for kdeinit5 and cannot see any information about the segmentation fault because there are not available information. Anyone that use Plasma5 from EPEL get this error? How I can communicate the bug with the maintainer? Thanks in advance.

3 6

Problem setting keyboard shortcuts for more than 4 workspaces.
by me＠tdiehl.org 11 Mar '20

11 Mar '20

Hi, Does anyone know how to set keyboard shortcuts for more than 4 workspaces? If I goto settings -> devices -> keyboard I see "Switch to workspace {1-4}" I have virtual workspaces configured for 12. I would like to set keyboard shortcuts for all 12 workspaces. Google shows numerous solutions for ubuntu but I cannot get any of them to work on Centos 7 with gnome 3. Regards, -- Tom me(a)tdiehl.org

1 0

System Time
by Chris Olson 11 Mar '20

11 Mar '20

A few years ago, one of our interns was curious about system time keeping features in computer systems. This intern was also the proud owner of an inexpensive Radio-Controlled Clock. The intern wondered why computer motherboards were not just equipped with a chip like the ones in the RCC so that their system time would always be correct. I posted a question about this on the CentOS email list and received more responses than those postings about problems with the new Firefox release. I must have really struck a very sensitive system time nerve. This large response was a bit of a surprise and included a bunch of time related horror stories. It became clear why using an RCC chip on motherboards would NOT be a good idea. GPS network time servers seemed to be a preferred choice. All of our bedrooms have Radio-Controlled Clocks. At 5:30 this morning, half of the clocks displayed the correct time. The other half of the clocks were incorrectly showing a time one hour ahead. Maybe this is one more piece of evidence to reject using an RCC time base for computers, at lease in thestate of Arizona.

7 6

CentOS-announce Digest, Vol 181, Issue 2
by centos-announce-request＠centos.org 11 Mar '20

11 Mar '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:0726 Important CentOS 6 sudo Security Update (Johnny Hughes) 2. CESA-2020:0775 Important CentOS 6 qemu-kvm Security Update (Johnny Hughes) 3. CEBA-2020:0749 CentOS 6 nfs-utils BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 10 Mar 2020 20:33:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0726 Important CentOS 6 sudo Security Update Message-ID: <20200310203330.GA6987(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0726 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0726 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ed17c727b0327a156d3dc917a95bc1fbf50a03bd6fcaa7f6155c63271b7ade9c sudo-1.8.6p3-29.el6_10.3.i686.rpm 17fd13eb5a39d752ca21fa7a1f0a452c77831cac1646efc232257d1ea31180b5 sudo-devel-1.8.6p3-29.el6_10.3.i686.rpm x86_64: 34dc40c917e4080b159bb3fbea767eeea5d60275b0a3d4f715cde348a24e9886 sudo-1.8.6p3-29.el6_10.3.x86_64.rpm 17fd13eb5a39d752ca21fa7a1f0a452c77831cac1646efc232257d1ea31180b5 sudo-devel-1.8.6p3-29.el6_10.3.i686.rpm 2d709b3d4831234d92105aaa0b7207a41c73432005322781098de926c7ed1d4c sudo-devel-1.8.6p3-29.el6_10.3.x86_64.rpm Source: 7fa30b571a1bcb5762dd8754a17001a71080475b7eb7dffc831ea1f2e6bd809d sudo-1.8.6p3-29.el6_10.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 10 Mar 2020 20:44:03 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0775 Important CentOS 6 qemu-kvm Security Update Message-ID: <20200310204403.GA7367(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0775 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0775 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d0d628e01e9253fdf3f0b063ec84cfdff42b51524d6781dcaedcbf8c6d1bbaf7 qemu-guest-agent-0.12.1.2-2.506.el6_10.6.i686.rpm x86_64: 1ff1b79f5fcc7f5434c6f96605e8f0ab35a57515b70a0f1c34cdc3819ad2b62f qemu-guest-agent-0.12.1.2-2.506.el6_10.6.x86_64.rpm e1ec2dbb8cf9025c0a8841ff695edb293f3363b3e75a54ccb29ae45659cb35dc qemu-img-0.12.1.2-2.506.el6_10.6.x86_64.rpm be1a8e676406bb39ee09b1c87b23291287154bf077f92317f2479cbdddd4cf44 qemu-kvm-0.12.1.2-2.506.el6_10.6.x86_64.rpm 7cbb3572d7582da02efd6bbe07655b254f279a26ce8a5efb38ae6352b3fb2a13 qemu-kvm-tools-0.12.1.2-2.506.el6_10.6.x86_64.rpm Source: fc9782f96408c4a58265cc040d6b2f7e22900326961e0cc0dfccb941f09cd904 qemu-kvm-0.12.1.2-2.506.el6_10.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 10 Mar 2020 20:52:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2020:0749 CentOS 6 nfs-utils BugFix Update Message-ID: <20200310205253.GA7762(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2020:0749 Upstream details at : https://access.redhat.com/errata/RHBA-2020:0749 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d863a1dbd03ea062056599ec532283a5277623258f411e65503549425d447f5c nfs-utils-1.2.3-78.el6_10.2.i686.rpm x86_64: b3d0dfe3f9434b149db83e6a55194e5935c51f15b0edebf0d96a799d75c2940b nfs-utils-1.2.3-78.el6_10.2.x86_64.rpm Source: da792f4971e3a0b1fbfe3ce62d6323594201fd7ef2059bfbe00a3a072806fef8 nfs-utils-1.2.3-78.el6_10.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 181, Issue 2 ***********************************************

1 0

Weird error when installing BIND on CentOS 7
by Nicolas Kovacs 11 Mar '20

11 Mar '20

Hi, I just installed a minimal CentOS 7 on an Internet-facing server. Installing BIND gives me this: Running transaction Installing : python-ply-3.4-11.el7.noarch 1/2 Installing : 32:bind-9.11.4-9.P2.el7.x86_64 2/2 /var/tmp/rpm-tmp.M6XABV: line 59: /etc/selinux/mls/rpmbooleans.custom: No such file or directory grep: /etc/selinux/mls/rpmbooleans.custom: No such file or directory /var/tmp/rpm-tmp.M6XABV: line 72: /etc/selinux/mls/rpmbooleans.custom: No such file or directory ValueError: SELinux policy is not managed or store cannot be accessed. Verifying : python-ply-3.4-11.el7.noarch 1/2 Verifying : 32:bind-9.11.4-9.P2.el7.x86_64 Should I be worried ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

1 0

Running CentOS 6 in a Docker container on a non-CentOS host
by Alfred von Campe 10 Mar '20

10 Mar '20

I have to support a legacy build that runs on CentOS 6. I’m new to Docker and would like to use the official CentOS 6.10 image (https://github.com/CentOS/sig-cloud-instance-images/blob/da050e2fc6c28d8d72… <https://github.com/CentOS/sig-cloud-instance-images/blob/da050e2fc6c28d8d72…>) as a Docker container on another host (probably some flavor of Ubuntu), but can’t figure out how to tell Docker to find that image. I also need to make some specific customizations that I would like to distribute locally but not share with upstream. Can somebody point me to some HOWTOs or tutorials? Most Google searches return how to run Docker on CentOS, which is not what I’m after. Thanks, Alfred

3 4

QEMU virt-manager video device
by Jerry Geis 09 Mar '20

09 Mar '20

I am trying to use the Video Virtio device and set it to Virtio (to get resolutions higher that 800x600). My host is CentOS 7 and my guest is CentOS 8. When I set the virtio for video - I get an add about QEMU does not support 'virtio' video device. Do I not have something loaded ? Real question is how to get video higher than 800x600. I tried every selection there Cirrus , QXL, VGA, VMVGA and virtio. Thanks, Jerry

2 3

Support for Intel Graphics 605 UHD
by Jerry Geis 06 Mar '20

06 Mar '20

I found this site https://www.linux-hardware.org/index.php?id=pci:8086-3185-8086-2212 Says the Intel UHD 605 graphics chip is supported in kernel > 4.11 centos 8 comes with 4.18 but I am not getting X on CentOS 8 with this chip. When I put this: Section "Device" Identifier "Intel Graphics" Driver "intel" EndSection in /etc/X11/xorg.conf.d it does not boot into X, when I remove it - it boots into X with generic driver - not the Intel driver. Thoughts ? Jerry

4 11

Convert CentOS-8 UEFI img to hyper-V
by Jerry Geis 06 Mar '20

06 Mar '20

Hi All, Anyone tried to convert QEMU to hyper v? I tried this: qemu-img convert -f raw “kvm-virtal-machine.img” -O vhdx -o subformat=dynamic “hyperv-virtual-machine.vhdx” Then defined new HyperV stuff - and booted it did not boot got a dracut error. Anyone done that ? If so how ? Jerry

1 0

[FIPS] FIPS_selftest failing in Centos 7
by Akshar Kanak 06 Mar '20

06 Mar '20

Dear team The API FIPS_selftest() is failing . The content of the file /proc/sys/crypto/fips_enabled is 1 I have executed the below mentioned code The code is #include "stdio.h" int main() { int ret=0; ret=FIPS_mode(); printf("\nFIPS_mode = %u \n",ret); ret=FIPS_selftest(); printf("\nFIPS_selftest=%u \n",ret); ERR_print_errors_fp(stderr); } Output is " FIPS_mode = 1 FIPS_selftest=0 140091346814640:error:0607B0A3:lib(6):func(123):reason(163):evp_enc.c:313: 140091346814640:error:2D06F065:lib(45):func(111):reason(101):fips_des_selftest.c:134: " Looks like flag EVP_CIPH_FLAG_FIPS is not set for the cipher returned by EVP_des_ede_ecb() . I am using openssl-1.0.2k-19.el7.x86_64 on "CentOS Linux release 7.6.1810 (Core)" Please let me know you thoughts on this Thanks and Regards Akshar

1 0

Anki on CentOS 7
by H 05 Mar '20

05 Mar '20

I am trying to run Anki on one of my computers running the latest update of CentOS 7. However, starting it in a terminal window shows it fails with the following messages: libEGL warning: DRI2: failed to authenticate libEGL warning: DRI2: failed to open swrast (search paths /usr/lib/x86_64-linux-gnu/dri:${ORIGIN}/dri:/usr/lib/dri) libEGL warning: GLX: glXQueryVersion failed libEGL warning: DRI2: failed to authenticate libEGL warning: DRI2: failed to open swrast (search paths /usr/lib/x86_64-linux-gnu/dri:${ORIGIN}/dri:/usr/lib/dri) libEGL warning: GLX: glXQueryVersion failed qt: QXcbIntegration: Cannot create platform OpenGL context, neither GLX nor EGL are enabled qt: QXcbIntegration: Cannot create platform offscreen surface, neither GLX nor EGL are enabled qt: QXcbIntegration: Cannot create platform OpenGL context, neither GLX nor EGL are enabled mpv not found, reverting to mplayer qt: WebEngineContext used before QtWebEngine::initialize() or OpenGL context creation failed. qt: QXcbIntegration: Cannot create platform OpenGL context, neither GLX nor EGL are enabled Aborted (core dumped) Anki 2.1.15-alternate comes with the QtWebEngine and I have this app running on two other computers running CentOS 7. Thus, not a general problem but probably related either to the graphics driver on this system xorg-x11-drv-ati or some configuration mismatch. It was suggested on the Anki support forum I ask in the distribution forum since they had no explanation...

1 0

CentOS-announce Digest, Vol 181, Issue 1
by centos-announce-request＠centos.org 05 Mar '20

05 Mar '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:0702 Important CentOS 6 xerces-c Security Update (Johnny Hughes) 2. CESA-2020:0704 Important CentOS 7 xerces-c Security Update (Johnny Hughes) 3. CESA-2020:0703 Important CentOS 7 http-parser Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 4 Mar 2020 21:35:42 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0702 Important CentOS 6 xerces-c Security Update Message-ID: <20200304213542.GA18749(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0702 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0702 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0861c4b8994e80705dddd912cd70682b51509b540ed7dd4e1e3cf78f122803ed xerces-c-3.0.1-21.el6_10.i686.rpm c0628db57278c22954afb43dbc7dd62732d815914c8658bf9ba892c41135d934 xerces-c-devel-3.0.1-21.el6_10.i686.rpm f2167b408851e122c1657c2abf55e7a9a457d7bb0048291b6d1165980a7819d3 xerces-c-doc-3.0.1-21.el6_10.noarch.rpm x86_64: 0861c4b8994e80705dddd912cd70682b51509b540ed7dd4e1e3cf78f122803ed xerces-c-3.0.1-21.el6_10.i686.rpm a1c0cb84f34519d23313d11f07ac9b9f8478b6bdbb2f922a1232bc080f1a949e xerces-c-3.0.1-21.el6_10.x86_64.rpm c0628db57278c22954afb43dbc7dd62732d815914c8658bf9ba892c41135d934 xerces-c-devel-3.0.1-21.el6_10.i686.rpm ba3cd486f66ceb35cd7b1a2c439f7db1a46272ae5d44d62c61eebf73d99d76bf xerces-c-devel-3.0.1-21.el6_10.x86_64.rpm f2167b408851e122c1657c2abf55e7a9a457d7bb0048291b6d1165980a7819d3 xerces-c-doc-3.0.1-21.el6_10.noarch.rpm Source: 93b069ea5ec6cf99bfd2b63547a4fe29c7b427e3b14851f22fadf91bba0522fa xerces-c-3.0.1-21.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 4 Mar 2020 21:37:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0704 Important CentOS 7 xerces-c Security Update Message-ID: <20200304213738.GA18889(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0704 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0704 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d92aa24ca95f4fb1255591a78295226f9d85a2822740448fb901241e823e3fa9 xerces-c-3.1.1-10.el7_7.i686.rpm 7981b58ca2dffdde00f5ff4284984b087ae3e5aae2b67bbdf9f41113d246c492 xerces-c-3.1.1-10.el7_7.x86_64.rpm 0bd400b558a3db19fc2970d2db15232b786656bb8f49b8375c50be668e2301ea xerces-c-devel-3.1.1-10.el7_7.i686.rpm 4a6e55a8b0b5622adba0d1e9db864f618d23386c8522ab66509340281f07254c xerces-c-devel-3.1.1-10.el7_7.x86_64.rpm c6d4fe729eebda97e3d004aa38eb1099806e8d88a7b6a4b04cd9401360b51ecf xerces-c-doc-3.1.1-10.el7_7.noarch.rpm Source: 498f7fc75bb4c887217b88a468152bf110ac801f572b9dfcaf6e756d83ac900b xerces-c-3.1.1-10.el7_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 4 Mar 2020 21:38:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:0703 Important CentOS 7 http-parser Security Update Message-ID: <20200304213841.GA18992(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:0703 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:0703 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 18c1947137ff700a633b90f89d11594fe0e7a286c25eba5a11624b19f5d0d8e2 http-parser-2.7.1-8.el7_7.2.i686.rpm fca3ad101d02d5cc258566eddbeb5ab21d99245c088a9f5abeb7bbbf2bf8b235 http-parser-2.7.1-8.el7_7.2.x86_64.rpm b6af828aef8522539f8a2f826e971333bf25611daa884b06b10a4696c4073c43 http-parser-devel-2.7.1-8.el7_7.2.i686.rpm 6415375dbca78a981197bb57862aa43b025e3ac35c409eecd8c258104496fc0f http-parser-devel-2.7.1-8.el7_7.2.x86_64.rpm Source: 225c333b122266fc8c8ad8f9b6f9dcef15e0fe568ab2df72707e8e53c1178459 http-parser-2.7.1-8.el7_7.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 181, Issue 1 ***********************************************

1 0

CentOS 8 libXss
by Jerry Geis 04 Mar '20

04 Mar '20

I am in need of libXss for centos 8 -yum install did not find it. Thoughts? Jerry

2 1

SQL modeling tool for CentOS 7
by H 04 Mar '20

04 Mar '20

I am looking for an open-source SQL modeling tool to use with MySQL, MariaDB and PostgreSQL. Does anyone have a favorite?

3 6

Saving windows and settings in CentOS 7 running MATE
by H 04 Mar '20

04 Mar '20

I have installed gnome session save and restore per http://blog.thewebsitepeople.org/2013/07/gnome-session-save-and-restore/. I am running the MATE Desktop on CentOS 7 but the app above does not seem to save and restore the positions and sizes of directory listing windows, nor does it save the order of the windows on the taskbar at the bottom. Does anyone have a better solution?

2 4

CentOS 8 xorg-x11-drv-intel
by Jerry Geis 03 Mar '20

03 Mar '20

This package used to be in CentOS 7 - does not seem to be there in 8. Thoughts ? Thanks Jerry

2 1

OpenSSL Version 1.0.2 is not supported
by Kaushal Shriyan 03 Mar '20

03 Mar '20

Hi, I am running CentOS Linux release 7.7.1908 (Core) with the below mentioned OpenSSL version. As per https://www.openssl.org/policies/releasestrat.html. Version 1.0.2 is no longer supported. OpenSSL Version > #openssl version > OpenSSL 1.0.2k-fips 26 Jan 2017 > # Are there any plans for the latest stable supported version of OpenSSL to be made available in the CentOS 7.x version? I look forward to hearing from you and thanks in advance. Best Regards, Kaushal

3 4

C8 and bacula messages
by Alessandro Baggi 03 Mar '20

03 Mar '20

Hi list, I'm updating my backup server using C8 and bacula 9.0.6. I have problem when I run a full backup with a pool that has Maximum Volume Jobs = 1 as in the configuration used on C7. The problem is that I get this message: JobId 11: Max Volume jobs=1 exceeded. Marking Volume "Full-0009" as Used. multiple time inside bacula messages when backup is performing? Is this a bug or is a misconfiguration? Thanks in advance.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss