- Discuss - lists.centos.org

OT: systemd Poll
by Anthony K 17 Apr '17

17 Apr '17

According to "Arthur Schopenhauer": "All truth passes through three stages. First, it is ridiculed. Second, it is violently opposed. Third, it is accepted as being self-evident." I must admit that I skipped through the first and second stages - I never found creating init scripts a joy and instead opted to write my own scripts that I launched via inittab. As such, I welcomed the simplicity systemd's service files without fuss. So, at which stage are you in w/ regards to adopting systemd? Are you still ridiculing it, violently opposed to it, or have you mellowed to it?

37 118

Pulseaudio
by Adrian van Bloois 17 Apr '17

17 Apr '17

Hi, I get this error message: ALSA lib pulse.c:243:(pulse_connect) PulseAudio: Unable to connect: Connection refused It does not say connection to what, ?????? And is this a matter of permission??? This is C7 latest and greatest. Any ideas??? Adrian -- Adri P. van Bloois "Elegance is not a dispensable luxury but a factor that decides between success and failure." Edsger W. Dijkstra

2 1

Help w/Error #14 in grub legacy in CentOS 6.8
by ejm 16 Apr '17

16 Apr '17

Hi all, I am getting Error #14 from grub version 0.97 when trying to boot for the first time into a newly installed partition with Scientific Linux 6.7 and need help resolving the error. The setup: MacPro with 2 HDs HD #1: ESP partition has rEFInd installed and running 2nd partition: Mac OSX 10.7.5 (lion) installed HD #2: 1st partition: Centos 6.8 (uses grub version 0.97) filesystem = ext4 2nd partition: Debian 8.7 (uses grub 2.0.2 beta). filesystem = ext4 3rd partition: Scientific Linux 6.7 (uses grub version 0.97). filesystem = ext4 The grub.conf in the CentOS partition has the following entries: title CentOS 6.8 (2.6.32-696.el6.x86_64) root (hd0,0) kernel /boot/vmlimuz-2.6.32-696.el6.x86_64 ro root=UUID=531c3b86-dc7e-4d14-9505-6df970dc8495 rd_NO_LUKS rd_NO_LVM LANG=en_US.UTF-8 rd_no_MD SYSFONT=latarcyrheb=sun16 crashkernel=128M KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet initrd /boot/initramfs-2.6.32-696.el6.x86_64.img title Debian 8.7 root (hd0,1) chainloader +1 title Scientific Linux 6.7 (Carbon) root(hd0,2) kernel /boot/vmlinuz-2.6.32-573.el6.x86_64 ro root=UUID=af382492-c826-4cf8-b134-9456fe5c100c initrd /boot/initramfs-2.6.32-573.el6.x86_64.img chainloader +1 I can boot fine into the Mac OSX from rEFInd. When I boot from rEFInd into the CentOS partition I get the Grub version 0.97 menu list with the 3 OSs listed above. I can then boot fine into CentOS 6.8 or Debian 8.7 just fine. I just added Scientific Linux 6.7 (SL) from a downloaded ISO image to the 3rd partition. SL installed fine. The installation itself was done using a PC (AMD64) running Windows 7 and the HD connected via USB and a mobile SATA dock. But using the above grub config for SL I get Error #14. If I comment-out the kernel and initrd lines in the SL entry I get Error #13. I confirmed that the kernel and the initramfs files both are in /boot in SL. I also checked the UUID for the 3rd partition with blkid and that is correct too. If I replace the kernel line for SL with the same one in the SL parititon I still get Error #14. The only difference with the full CentOS and SL kernel entries are the UUIDs of the partition and the minor version # (696 vs 573). I haven't seen anything specific to Error #14 in the blog entries I've seen. Everything I've tried results in either Error #14 or 13. I do think the SL partition will boot if given the correct grub conf to start with. Any tips or ideas would be greatly appreciated! Thanks, --Ed

1 0

OT: Controlling Chrome via policy
by C. L. Martinez 15 Apr '17

15 Apr '17

Hi all, I have installed Google Chrome in two CentOS7 workstations. I would like to setup some extensions by default and install automatically. Reading Chrome/Chromium docs, it is possible to accomplish this using master_preferences or via policy. According to Chromium's docs, policy files needs to be installed under /etc/opt/chrome/policies/managed/ (for Chrome) or /etc/chromium/policies/managed/ (for Chromium). I have tried to create a JSON file (custom.json) with my options, but no go. What am I doing wrong? On the other side, according to Chromium's docs, master_preferences needs to be placed under dir where chrome binary is. Tried and no go. Any light on this? Thanks. -- Greetings, C. L. Martinez

1 1

Primary DNS server with BIND on a public machine running CentOS 7
by Nicolas Kovacs 15 Apr '17

15 Apr '17

Hi, I just installed CentOS 7 on a public server. I'd like to setup BIND as a primary DNS server for a few domains. Until now, all my public machines were running Slackware Linux, and setting up BIND on a Slackware machine is relatively easy. In its out of the box configuration, it has a bone-headed caching nameserver role, which is quite easy to expand to a primary nameserver. Here's my documentation. It's in French, but the *nix bits are universal. http://blog.microlinux.fr/bind-slackware/ On my server running CentOS, I notice things are more complicated in the default configuration. The problem here is not so much documentation, but more like the wealth of information on the subject of BIND on CentOS, with often contradicting information. Is there a *reliable* more or less quick & dirty tutorial on how to get BIND up and running as a primary public nameserver, with the default configuration as a starting point? Think "recipe for pasta" and not "degree in food chemistry". :o) Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

8 17

Possible bug with latest 7.3 installer, md RAID1, and SATADOM.
by David C. Miller 14 Apr '17

14 Apr '17

I'm seeing a problem that I think maybe a bug with the mdraid software on the latest CentOS installer. I have a couple of new supermicro servers and each system has two innodisk 32GB SATADOM's that are experiencing the same issue. I used the latest CentOS-7-x86_64-1611 to install to the two SATADOM's a simple RAID1 for the root. The install goes just fine but when I boot off the new install I see one of two behaviours. It either hangs at boot, or boots fine but I start getting errors when using the system. For example it will give me the following error if I try to run yum update. error: rpmdb: damaged header #6 retrieved -- skipping. It will just hang giving that error over and over. I have to use a different login session to kill it or reboot. It doesn't even log anything to journelctl or /var/log/messages. At first I thought either the hardware was the issue(sata port, controller, SATADOM, etc). However, I do not see any issues if I don't try to raid the disks. Setting either of the SATADOM's up as a single system drive works just fine. It does not matter if I choose xfs or ext4 for the filesystem when I try to RAID them either. Making an md RAID1 out of the two disks with 7.3 installer is the only combination I see this issue with. If I use the previous 7.2 installer(CentOS-7-x86_64-1511) I don't see the problem at all. I can run yum update, reboot, and everything is still ok. I should also point out that I tested the CentOS 7.3 installer creating a md RAID1 system drive using two regular spinning hard drives and that worked just fine. I was wondering if anyone else has seen something similar or can confirm this problem before I submit it as a real bug.. TL/DR. Two different supermicro servers, both using innodisk 32GB SATADOM's and latest CentOS 7.3 installer to create a RAID1 system results in freezes and weird errors. Using the CentOS 7.2 installer works fine. David Miller.

2 2

email subject length issue
by Jerry Geis 13 Apr '17

13 Apr '17

Hello all I seem to be running into a subject length issue on email. Is there any way to increase that ? Thanks, jerry

7 16

bind vs. bind-chroot
by Nicolas Kovacs 13 Apr '17

13 Apr '17

Hi, On my public servers, I usually run BIND for DNS. I see CentOS offers a preconfigured (sort of) bind-chroot package. I wonder what's the effective benefit of this vs. a "normal" BIND setup without chroot. On my Slackware servers, I have a rather Keep-It-Simple approach to all things security, e. g. run no unneed services, open only needed ports etc. but I don't run the extra mile (and haven't been bitten so far). Any suggestions? (No flamefest please.) Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

6 11

Excel shared spreadsheets on Samba share
by Dante F. B. Colò 13 Apr '17

13 Apr '17

Hello everyone I 'm trying to find what it happens on my Samba AD servers especially with shared spreadsheets, my personal opinion this feature on Excel is crap and unreliable but many people use it, how does Samba currently behave with this ? Is someone experienced any problem with this ? Frequently happens changes made by other user are lost the spreadsheet opens as read only , the shares are all using vfs_acl_xattr module to mimic NTFS permissions, clients are all windows machines versions 7 and 10 , i upgraded samba 4.3.11 to 4.5.7 but both have the same behavior. Any ideas ? Regards Dante

2 1

OT apology
by Jon LaBadie 13 Apr '17

13 Apr '17

Sorry for those two Unix reminisces that made it to the list. I meant to send them to the poster. jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

1 0

Enterprise Linux Slack
by Andrew Holway 12 Apr '17

12 Apr '17

Hallo, Considering the relative decline of IRC (sorry folks) I have set up a Slack for Enterprise Linux. I've been using "pythondev.slack.com" and honestly, its a fantastic tool for community support with really nice features for computer centric discussion. https://enterpriselinux.slack.com/shared_invite/MTY4MTM5NjQ2NTc5LTE0OTE5OTk… My hope is that those running Rhel and Centos can have a common place to flame war about SystemD, what to do when FreeIPA replication breaks and how to give your network interfaces sensible names without having to use a pastebin. Thoughts? Experiances? Cheers, Andrew

8 17

Re CentOS and Intel graphics
by Mark (Netbook) 12 Apr '17

12 Apr '17

Hello, I have an Intel NUC7i3 with 620 graphics and an Intel NUC7i7 with 640 graphics. I have loaded CentOS 6.9 and the graphics is not fully working. I believe that I need a driver. Does CentOS support the Intel 620 and 640 graphics and if not, can someone please point me in the direction of the drivers, with install instructions. Regards, Mark Woolfson

2 4

Ignoring /run/user/X
by Cameron Smith 12 Apr '17

12 Apr '17

We are running into an issue relating to snmpd and the temporary partitions created in /run/user/ so any insight by someone with magical net-snmp skills would be much appreciated. Our monitoring app walks all our servers. We modify /etc/snmp/snmpd.conf on all our servers to just have one line: rocommunity ourcommnuityname monitor.ing.app.ip This has worked just fine for almost 10 years. Since the release of CentOS 7 we are getting alerts for partitions not being found during walks and these are the temporary partitions that are ephemeral while a user is logged in: /run/user/0 /run/user/65000 Seems if the partition is there when the monitor is set or is added while the monitor is active the monitor will keep looking for it and these are meant to go away. We thought "OK we can just ignore those" so we added a line to /etc/snmpd.conf : ignoredisk /run/user/* but that has not helped :( Does anybody have a recommendation on how we can stop those partitions from being seen on walks so we can stop being alerted about partitions for which we are not interested in monitoring their available space? Thanks, Cameron

3 4

Network Manager / CentOS 7 / local unbound
by Alice Wonder 12 Apr '17

12 Apr '17

Hello list - http://unix.stackexchange.com/questions/90035/how-to-set-dns-resolver-in-fe… That says it works for CentOS 5 and I *suspect* the methods there (3 listed) would work, but what is the best way with NetworkManager to set it up to use the localhost for DNS ? I'm paranoid about DNS spoofing and really prefer to have a local instance of DNSSEC enforcing unbound running on my CentOS 7 virtual machines (e.g. linode) Currently I just use a cron job that runs once a minute to over-write was it is /etc/resolv.conf so they don't use the DHCP assigned nameservers, but that does leave a short window every time the network is restarted. I'd like to know the proper way to set up Network Manager to just create nameserver 127.0.0.1 nameserver ::1 in /etc/resolv.conf Via google, it seems every distro approaches it differently and most instructions I have seen involve a GUI. I did not see how to do it in the CentOS documentation but it might be there and I just did not figure out how to search it for what I wanted. Those stackexchange methods look like they might work but they reference CentOS 5 and I know some NetworkManager stuff changed even just between 7.2 and 7.3 as I experienced incorrect IPv6 address after update as a result of those changes. Is there an "official" way to tell NetworkManager what I want in /etc/resolv.conf ? Or better yet, a way to just tell it to leave that file alone?

7 8

CentOS 6 and pxeboot
by m.roth＠5-cent.us 11 Apr '17

11 Apr '17

Hi, folks, We've been using pxeboot to pull up a menu, to build or rebuild machines for years. We have this new server, and it fails. Times out. What's happening is that it tries in this order .../pxelinux.cfg/b8945908-d6a6-41a9-611d-74a6ab80b83d .../pxelinux.cfg/01-88-99-aa-bb-cc-dd .../pxelinux.cfg/C0A8025B .../pxelinux.cfg/C0A8025 .../pxelinux.cfg/C0A802 .../pxelinux.cfg/C0A80 .../pxelinux.cfg/C0A8 .../pxelinux.cfg/C0A .../pxelinux.cfg/C0 .../pxelinux.cfg/C .../pxelinux.cfg/default The first are MAC addresses, etc. I want it to pull default. It takes *minutes* to time out each option, so after a dozen or 15 min, when it gets to defaul, tftp has timed it out. Now, our dhcpd config has this for pxeboot: group { allow booting; allow bootp; filename "gpxelinux.0"; option-209 = "pxelinux.cfg/default"; option subnet-mask 255.255.254.0; option routers <our router>; default-lease-time 172800; # 2 days. max-lease-time 432000; # 5 days. I added that option-209, but it didn't take. I've been looking at the docs, but if someone's can tell me off the top of their head what I need to do, I'd appreciate it. This has become a high priority today.... mark

6 7

jave-1.5.0 on centos 7...
by Ian Diddams 11 Apr '17

11 Apr '17

Curring a long story short... we had a centos 5 server running jboss 6 and jboss 4.2.3GA because of centois 5 EOL TPTB have decreed this server needs migratiung to a Centos 7 server But... the hboss 4.2.3GA jboss app uses java 1.5.0 (_22 FTWT). I can't *(unsurprisingly!) find java 1.5.0 under yum. anyone got it in an rpm or know where it can found? (At his stage it is merely a guess that it will run under centos 7 anyway!) cheers ian

2 1

Re: [CentOS] OT: systemd Poll
by James B. Byrne 11 Apr '17

11 Apr '17

On Sun, April 9, 2017 00:39, Anthony K wrote: > According to "Arthur Schopenhauer": > > "All truth passes through three stages. > First, it is ridiculed. > Second, it is violently opposed. > Third, it is accepted as being self-evident." > > I must admit that I skipped through the first and second stages - I > never found creating init scripts a joy and instead opted to write my > own scripts that I launched via inittab. As such, I welcomed the > simplicity systemd's service files without fuss. > > So, at which stage are you in w/ regards to adopting systemd? Are you > still ridiculing it, violently opposed to it, or have you mellowed to > it? > A. FreeBSD-11. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Fwd: Obsolete NSA exploit for Postfix 2.0 - 2.2
by Robert Moskowitz 10 Apr '17

10 Apr '17

This was just posted on the Postfix list. Centos 7 ships with: postfix-2.10.1-6.el7 Has this cert advisory been applied to the Centos build of Postfix? thank you -------- Forwarded Message -------- Subject: Obsolete NSA exploit for Postfix 2.0 - 2.2 Date: Sun, 9 Apr 2017 16:18:06 -0400 (EDT) From: Wietse Venema <wietse(a)porcupine.org> To: Postfix users <postfix-users(a)postfix.org> CC: Postfix announce <postfix-announce(a)postfix.org> A recent twitter post reveals the existence of an exploit for Postfix, in a collection of what appear to be NSA tools. https://twitter.com/JulianAssange/status/850870683831648256 This is an exploit for Postfix 2.0 - 2.2, for a bug that was fixed 11 years ago in Postfix 2.2.11 and later. There was a memory corruption bug in a Postfix workaround for a Sendmail bug (CERT advisory CA-2003-07, remote buffer overflow when message headers contain lots of comment text before an email address). Technical details: the Postfix strip_address() function, which removes large comments from a mail header, called the printable() function on a string that wasn't null-terminated. This caused the printable() function to scribble past the end of malloc()ed memory, corrupting the memory heap. Running the exploit against Postfix versions less than 11 years old results in odd-looking email messages in the super-user's mailbox, and warning messages in the maillog file (warning: stripping too many comments from address: <long character string>). Wietse

2 2

logwatch customization question
by Robert Moskowitz 09 Apr '17

09 Apr '17

Logwatch is installed, and I am assuming by how empty /etc/logwatch is that it is running from defaults, which I find in /usr/share/logwatch/default.conf/services I want to customize ONE service. dovecot. Do I copy /usr/share/logwatch/default.conf/services/dovecot.conf to /etc/logwatch/conf/services and edit it there, or do I have to copy ALL default.conf/services/* there and modify /etc/logwatch/conf/logwatch.conf to look there? The README is rather not helpful on this. How do I modify ONE service (and not just make the changes in default.conf that I have seen in a couple howtos. thanks

2 2

Network configuration: desktop vs. laptop
by Nicolas Kovacs 09 Apr '17

09 Apr '17

Hi, I'm just migrating some stuff from Slackware Linux to CentOS, and I have a question about the orthodox way of configuring a network connection. On a desktop or workstation, I usually get rid of NetworkManager: # systemctl stop NetworkManager # yum remove NetworkManager Then I edit the /etc/sysconfig/network-scripts/ifcfg-XXXXX file corresponding to my network interface. Here's a working example: # /etc/sysconfig/network-scripts/ifcfg-enp2s0 DEVICE=enp2s0 TYPE=Ethernet ONBOOT=yes BOOTPROTO=dhcp Now I wonder how I should configure things on a laptop, where I usually keep NetworkManager. On a Slackware system, it's usually just a matter of leaving a pristine /etc/rc.d/rc.inet1.conf file, and then activate /etc/rc.d/rc.networkmanager. Starting from there, when there's a wireless connection available, I can connect using the little NetworkManager applet on the desktop. And when I switch to cable, NetworkManager will prefer that connection automagically. On a default installation (I went for the KDE version), NetworkManager is active, so I'll keep that. 'ifconfig' shows me that the cabled connection is up and running via enp3s0 on the laptop. Wireless doesn't seem to work, but 'ifconfig -a' shows me a wlp2s0 interface, which means there's a chance it will work. First thing I did was edit ifcfg-enp3s0 like this: DEVICE="enp3s0" TYPE="Ethernet" NM_CONTROLLED="yes" Then I edited ifcfg-wlp2s0 from scratch, since there's nothing present: DEVICE="wlp2s0" TYPE="Wireless" NM_CONTROLLED="yes" I rebooted (just to be on the safe side), and I have a partial success. I can connect via KDE's NetworkManager applet. But when I plug in an Ethernet cable, the wireless connection stays up and is not replaced by the cabled connection. Any suggestions? Niki Kovacs -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

centos-release srpm for 6.9
by me＠tdiehl.org 08 Apr '17

08 Apr '17

Hi, Is the centos-release srpm available anywhere? I do not see any srpms in vault. Regards, -- Tom me(a)tdiehl.org Spamtrap address me123(a)tdiehl.org

3 4

how to use livecd-creator to create my own livecd iso as same as offical release iso？
by 王强 08 Apr '17

08 Apr '17

1 0

How to remove or disable xhci driver in images/pxeboot/vmlinuz in livecd iso
by 王强 08 Apr '17

08 Apr '17

Hello list, Is there an easy way to remove or disable xhci driver in images/pxeboot/vmlinuz? I need to avoid USB 3.0 controller to work in xhci mode when thn ananconda is working.

1 0

Centos7-arm mailserver guide
by Robert Moskowitz 07 Apr '17

07 Apr '17

Three months in development! (well a couple hours a day) I am 99% complete! http://medon.htt-consult.com/Centos7-mailserver.html Virtual Mail Hosting on Centos7 Using Postfix MariaDB Dovecot PostfixAdmin Amavisd-new Spamassassin and Clamav The server is running in test right now. I will later go through this again to build the production unit. I welcome all reviews and comments.

1 0

HP USB printer accepts jobs, but won't print
by Michael Hennebry 07 Apr '17

07 Apr '17

My HP USB C3180 All-in-one printer accepts jobs, but does not print. A job simply sits in the queue. I haven't used it on this computer for a while. It will print a test page when I connect it. The last line from hp-info -i is 04/07/17 13:26:21 5012 Device communication error hennebry 0 (I've removed some blanks.) Any ideas on how to diagnose this? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 4

CentOS 6, apcupsd
by m.roth＠5-cent.us 07 Apr '17

07 Apr '17

Hi, folks, Anyone know what apcupsd is no longer in the EPEL repo for CentOS/RHEL 6? It's still in for 7. mark

2 1

howto install yumex
by geo.inbox.ignored 07 Apr '17

07 Apr '17

greetings. trying to install yumex, but obviously have forgotten what i did previously to install packages. sudo yum install yumex* errors out with; No package yumex* available. please inform my chemo brain what is correct. tia. -- peace out. CentOS GNU/Linux 7.1511 tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= in a world with out fences, who needs gates. =+=

7 16

Lock Screen in Gnome and using keyboard
by Daniel Ruiz Molina 06 Apr '17

06 Apr '17

Hello, I need to reconfigure Gnome in CentOS for avoiding that a normal user could lock screen using task bar option and/or "Super L" key (Windows Key + L). How could I configure Gnome? I need to do that in several computers, so I can't do "login" in X environment of each computer, but I need to reconfigure executing from command line (multiple SSH connections). Thanks.

2 1

CentOS-announce Digest, Vol 146, Issue 2
by centos-announce-request＠centos.org 06 Apr '17

06 Apr '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS Linux 6.9 i386 and x86_64 (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 5 Apr 2017 08:02:53 -0500 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for CentOS Linux 6.9 i386 and x86_64 Message-ID: <b6e412e7-cab4-1dce-2a9c-2e7536aef70a(a)centos.org> Content-Type: text/plain; charset="utf-8" We are pleased to announce the immediate availability of CentOS Linux 6.9 and install media for i386 and x86_64 Architectures. Release Notes for 6.9 are available at: http://wiki.centos.org/Manuals/ReleaseNotes/CentOS6.9 CentOS Linux 6.9 is derived from source code released by Red Hat, Inc. for Red Hat Enterprise Linux 6.9. All upstream variants have been placed into one combined repository to make it easier for end users. Workstation, server, and minimal installs can all be done from our combined repository. All of our testing is only done against this combined distribution. There are many fundamental changes in this release, compared with the past CentOS Linux 6 releases, and we highly recommend everyone study the upstream Release Notes as well as the upstream Technical Notes about the changes and how they might impact your installation. (See the 'Further Reading' section if the CentOS release notes link above). All updates since the upstream 6.9 release are also on the CentOS mirrors as zero day updates. When installing CentOS-6.9 (or any other version) from any of our media, you should always run 'yum update' after the install to apply these. Users consuming our CentOS-CR repositories will already be running most of the packages that make up CentOS-6.9, and all updates released since. They will notice only the centos-release, anaconda, curl, tzdata, and oracleasm updates today when moving to CentOS Linux 6.9. For more information on the CR repository for future updates, see this link: http://wiki.centos.org/AdditionalResources/Repositories/CR Release Announcements for all updated packages are available here: http://bit.ly/2n1H8Bf +++++++++++++++++++++++ Upgrading From Prior Major CentOS Versions: We recommend everyone perform a fresh reinstall rather than attempt an inplace upgrade from other major CentOS versions (CentOS-2.1, CentOS-3.x, CentOS-4.x, CentOS-5.x). +++++++++++++++++++++++ Upgrading from CentOS-6.0 / 6.1 / 6.2 / 6.3 / 6.4 / 6.5 / 6.6 / 6.7 / 6.8 CentOS Linux is designed to automatically upgrade between releases within a major version (in this case, CentOS-6). Unless you have edited your yum default configuration, a 'yum update' should move your machines seamlessly from any previous CentOS Linux 6.x release to 6.9. We also test this in our QA cycles and have noticed no problems, any issues would be mentioned in the Release Notes. +++++++++++++++++++++++ Downloading CentOS Linux 6.9 for new installs: When possible, consider using torrents to obtain our ISOs. Usually it is also the fastest means to download the distro. The install media is split into various formats. We have made efforts to ensure that most install types and roles can be done from DVD-1 itself, and the minimal install ISO is only tested to deliver a minimal install set, when used as an ISO format ( either on cd or usb ). While other forms of installs ( eg. pxe delivered ) might work from the minimal ISO, they are neither tested not supported. The only format where we support the entire set of install options and delivery mechanisms is via the complete CentOS Linux 6.9 tree, which can also be created by consolidating all content from DVD1 and DVD2. We no longer produce CD size images for the entire CentOS Linux 6 distribution, however the minimal install and netinstall iso images are small enough to fit on all CD grade media. Torrent files for the DVD's are available at : i386: http://bit.ly/2nDOzh8 x86_64: http://bit.ly/2naL2eY If you download an ISO via torrent, leave it up for a couple hours to share with other users who are downloading. You can also use a mirror close to you to get any of our ISOs: http://mirror.centos.org/centos/6.9/isos/ If you need to update a local mirror, you can choose from our mirror network ( http://www.centos.org/download/mirrors/ ). Most mirrors will allow downloads over http, ftp and rsync. Note: The x86_64 ISOs (minimal, netinstall, DVD1) should install on UEFI machines. Secure Boot must be disabled to install CentOS 6. The Live ISOs and i386 ISOs will not boot with UEFI. +++++++++++++++++++++++ sha256sum for the CentOS-6.9 ISOS: x86_64: CentOS-6.9-x86_64-bin-DVD1.iso: d27cf37a40509c17ad70f37bc743f038c1feba00476fe6b69682aa424c399ea6 CentOS-6.9-x86_64-bin-DVD2.iso: 631b8640460f46a8139a6a7cbbac5f3594d08c32945449b6bbd65234929ce7a4 CentOS-6.9-x86_64-minimal.iso: 422af57b493b8af49d485885a730c5a1d955f803fac85aa51311c393168b9080 CentOS-6.9-x86_64-netinstall.iso: 6b2cbec908708476389b143841a8e73462506de0744bda8b4192d3655d5bb8d2 CentOS-6.9-x86_64-LiveDVD.iso ae56f677786673ad476477ed2df84ce80cf5f9b90a44e25146e69ef3cfd02602 i386: CentOS-6.9-i386-bin-DVD1.iso: 0724a468ec0c4ac46ac6a1daba0273be697a37bb7f4e9fed8ad84ad270cdee2f CentOS-6.9-i386-bin-DVD2.iso d95e427ca39588f4287f3bfdb080110c8dcbbfff76e1a6394395ec06858c8275 CentOS-6.9-i386-minimal.iso e104b3bc2261e40c020e4047d31a4454a00435787c54fb0a376261f9348382b7 CentOS-6.9-i386-netinstall.iso c498a47b5ec47ecc8423c96bb80e5dd530e4d98bb839c60476cf113d1e4de0d6 CentOS-6.9-i386-LiveDVD.iso 4f7cd0be1c223b22427830b101e3e1765a93d27ed668047d8183976247a8a427 +++++++++++++++++++++++ Cloud Images: Images for various on-premise and off-premise Cloud environments are currently under development for CentOS Linux 6.9 and will be released in the coming days. Everyone looking to join and help with the CentOS Cloud efforts is encouraged to join the CentOS-devel list where such issues are discussed ( http://lists.centos.org/mailman/listinfo/centos-devel ). +++++++++++++++++++++++ Getting Help: The best place to start when looking for help with CentOS is at the wiki ( http://wiki.centos.org/GettingHelp ) which lists various options and communities who might be able to help. If you think there is a bug in the system, do report it at http://bugs.centos.org/ - but keep in mind that the bugs system is *not* a support mechanism. If you need supported software with Support Level Agreements, people to call and response times then we recommend Red Hat Enterprise Linux. If you have questions you would like to field at us in real time, come join the office hours on Wed or Thu of every week. You can find details on these at http://wiki.centos.org/OfficeHours +++++++++++++++++++++++ Meet-ups and Events: If you would like to get involved in helping organize, run, present or sponsor a CentOS Dojo or even just want more details then join the CentOS Promo list: http://lists.centos.org/mailman/listinfo/centos-promo and drop an email introducing yourself. We are very keen to find help to run events around the world, and also to find people who can represent CentOS at various community events around the world. (Current Events List: https://wiki.centos.org/Events ) +++++++++++++++++++++++ Contributing and joining the project: We are always looking for people to join and help with various things in the project. If you are keen to help out a good place to start is the wiki page at http://wiki.centos.org/Contribute . If you have questions or a specific area you would like to contribute towards that is not covered on that page, feel free to drop in on #centos-devel at irc.freenode.net for a chat or email the centos-devel list (http://lists.centos.org) +++++++++++++++++++++++ Thanks to everyone who contributed towards making CentOS Linux 6.9, especially the effort put in, as always, by the QA (http://wiki.centos.org/QaGroup) and Build teams. A special shout out to all the donors who have contributed hardware, network connectivity, hosting and resources over the years. The CentOS project now has a fairly well setup resource pool, solely thanks to the donors. Enjoy! -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net Twitter: @JohnnyCentOS

1 0

Re: [CentOS] [CentOS-announce] Release for CentOS Linux 6.9 i386 and x86_64
by Leon Fauster 06 Apr '17

06 Apr '17

Am 05.04.2017 um 15:02 schrieb Johnny Hughes <johnny(a)centos.org>: > > We are pleased to announce the immediate availability of CentOS Linux > 6.9 and install media for i386 and x86_64 Architectures. Release Notes > for 6.9 are available at: > > http://wiki.centos.org/Manuals/ReleaseNotes/CentOS6.9 > > CentOS Linux 6.9 is derived from source code released by Red Hat, Inc. > for Red Hat Enterprise Linux 6.9. All upstream variants have been placed > into one combined repository to make it easier for end users. > Workstation, server, and minimal installs can all be done from our > combined repository. All of our testing is only done against this > combined distribution. Thank you very much! Just a hint: the new /6/ repo tree misses a signed repomd.xml for the cr/fasttrack subtrees. local config: # grep -R repo_gpg /etc/yum.repos.d/ /etc/yum.repos.d/CentOS-CR.repo:repo_gpgcheck=1 /etc/yum.repos.d/CentOS-Base.repo:repo_gpgcheck=1 /etc/yum.repos.d/CentOS-Base.repo:repo_gpgcheck=1 /etc/yum.repos.d/CentOS-Base.repo:repo_gpgcheck=1 /etc/yum.repos.d/CentOS-fasttrack.repo:repo_gpgcheck=1 Again, thanks for your great effort! -- LF

3 2

Roundcubemail 1.1.8 possible bug?
by Robert Moskowitz 05 Apr '17

05 Apr '17

I am installing Roundcubemail on Centos7-arm roundcubemail-1.1.8-1.el7.noarch The installer web app creates a config.inc.php to save within the /etc/roundcubemail/ directory. It warns that: "Make sure that there are no characters outside the <?php ?> brackets when saving the file." Thing is there is no ?> at the end of this. It is left out. So I got to add that myself. I should be able to just copy the content of the text box, and paste it into a cat > /etc/roundcubemail/config.inc.php, but I am left having to at least having to add the ending ?>

2 2

CentOS 7, systemd,, and message floods
by m.roth＠5-cent.us 05 Apr '17

05 Apr '17

I've just updated a couple of servers, latest 7.3, and systemd is flooding dmesg, journalctl with info level messages... or maybe debug level 1. Examples: [ 478.258571] systemd[1]: Sent message type=signal sender=n/a destination=n/a object=/org/freedesktop/systemd1/unit/httpd_2eservice interface=org.freedesktop.DBus.Properties member=PropertiesChanged cookie=436 reply_cookie=0 error=n/a [ 478.258971] systemd[1]: Got notification message for unit systemd-logind.service [ 478.258980] systemd[1]: systemd-logind.service: Got notification message from PID 821 (WATCHDOG=1) [ 478.258985] systemd[1]: systemd-logind.service: got WATCHDOG=1 What *is* all that garbage, and is there some way to turn it down to WARN and ERR messages? mark

3 3

Timezone and date
by Jerry Geis 05 Apr '17

05 Apr '17

When I do the date +%Z I get the timezone. Which currently is EDT. I am sending information to another system, that says EDT is not a valid timezone. I have no way to modify the other system. My question is - is there a way to get the non-day-lite savings time zone ? For example EST is valid - EDT is not. Just curious if there is an easy way already present to get a standard time zone. Thanks, - I know weird situation the other end not supported EDT. Jerry

6 8

Re: [CentOS] Timezone and date
by James B. Byrne 05 Apr '17

05 Apr '17

On Tue, April 4, 2017 21:22, Jerry Geis wrote: > When I do the date +%Z I get the timezone. Which currently is EDT. > > I am sending information to another system, that says EDT is not a > valid > timezone. I have no way to modify the other system. > > My question is - is there a way to get the non-day-lite savings time > zone ? > For example EST is valid - EDT is not. > date -u Wed Apr 5 20:18:45 UTC 2017 -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Xorg problem
by Rosenthal, Shoshana 05 Apr '17

05 Apr '17

I updated to Centos 6.8. Every thing is working, except Xorg does not startup. When I look at top, it seems that Xorg keeps trying but not succeeding to start. Any idea what the problem might be? Thanks Shoshana Rosenthal srosenthal(a)cfa.harvard.edu

4 7

Compiling custom "vmlinuz" PXE kernel?
by Locane 04 Apr '17

04 Apr '17

Hello CentOS list, I still need help. Does anyone know how I would go about creating my own "vmlinuz" PXE kernel? I'm still trying to get the NUC6CAYH to load to a LiveCD, and I'm getitng nowhere with Intel. My company wants to do hundreds of these per month; we're not above paying for professional help at this point. My current line of reasoning is to get whatever specialized memory and CPU drivers the NUC6CAYH requires to recognize properly and bake them in to a custom vmlinuz PXE kernel that loads the initial ramdisk image. This kernel is located in a regular CentOS 7.3 DVD at CentOS-7-x86_64-DVD-1611/images/pxeboot/vmlinuz. Has anyone done this before? Is there documentation online?

4 3

sound problems... config?
by ken 04 Apr '17

04 Apr '17

The www has failed me with this, so I'm trying you guys. Sound worked great out of the box when I installed 7.2... Yay! I could watch all kinds of videos, like on facebook and youtube. And I could listen to most podcasts too. But then something happened. It was either a kernel upgrade or that I installed vlc (for watching videos on DVD) and the whole stack of codecs for it... I don't know exactly when, but at some point I no longer had sound with youtube and other web videos. The videos played fine, just no sound. Note that using vlc, both video and the audio with it play just fine. I need to select the audio driver (from a list in a vlc menu), however, else the sound won't work in vlc either. If I go into the Applications menu, then System Tools -> Settings -> Sound, under "Choose a device for sound output:" there are no devices listed. There used to be. If I run "aplayer file.wav", nothing plays (no sound at all) and I get the error "main:786: audio open error: No such file or directory". If, on the other hand, I run "aplay file.wav -D plughw:0" (i.e., specify the/a device), I do get sound, the file does play. I ran alsa-info.sh and it posted tons of info from it on my setup at http://www.alsa-project.org/db/?f=1dba91886be054df4816000768a0f5b109947a48. Yet it still doesn't tell me what's missing. Anyone here have an idea...? or thoughts about where to look next? tia, ken

5 14

libreoffice vs. PDF fillable forms
by Michael Hennebry 04 Apr '17

04 Apr '17

On centos 6, I've been trying to use LibreOffice to fill in entries of a PDF with fillable forms. In addition to all my other problems, the font size is stuck on 24. I can change it, but whenever I so much a take a deep breath, it's back to 24 again. How do I stop this? So far, all my searches have given me stuff about making fillable forms, but nothing about dealing with existing ones. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 1

M.2 PCI-E card
by Alice Wonder 04 Apr '17

04 Apr '17

Hello list, My instinct says the vast majority will "just work" but I'll ask anyway. I need a low profile PCI-E card that allows for up to 2 M.2 SSD drives that is known to work with the stock kernel in CentOS 7. Can anyone recommend one? Thanks

6 6

CentOS-announce Digest, Vol 146, Issue 1
by centos-announce-request＠centos.org 04 Apr '17

04 Apr '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS Linux 5 EOL (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 3 Apr 2017 07:12:27 -0500 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] CentOS Linux 5 EOL Message-ID: <4e6a4cf7-e532-ad53-a775-95bef831e1be(a)centos.org> Content-Type: text/plain; charset="utf-8" CentOS Linux 5 has reached End of Life, as of 31 March 2017. Please note that the latest version of CentOS Linux 5 (version 5.11 with updates) will remain available here (archived): http://vault.centos.org/5.11/ Please also note that this directory will not be maintained as there are no more public source code releases for upstream RHEL-5. That means there will be no more security updates for CentOS Linux 5. The CentOS team does not recommend using CentOS Linux 5 for any purpose. If you have workloads that can not be moved from the EL5 code base, you can obtain paid extended support from Red Hat for RHEL-5. See ELS (Extended Life-cycle Support) from this link: https://access.redhat.com/support/policy/updates/errata Thanks, Johnny Hughes

1 0

Using environment variables in mariadb
by Robert Moskowitz 04 Apr '17

04 Apr '17

I want to script a rather simple create database operation. Thing is, I have to provide the password for that database. I would like to do this with an environment variable, but the simple approach dose not work: mailpswd=charlie mysql -u root -p CREATE DATABASE mailfix; CREATE USER 'mailfix'@'localhost' IDENTIFIED BY $mailpswd; GRANT ALL PRIVILEGES ON `mailfix` . * TO 'mailfix'@'localhost'; Of course the mysql command needs the mysql root password, but that is as expected. But mysql will not process $mailpswd, not surprisingly. I know I could create a file with these commands, sed the password into the file, then pipe thr file into mysql. I would rather do this directly without a temp file. thanks

3 3

Realtime repo
by Tim 04 Apr '17

04 Apr '17

Hello, is there an easy way to activate/install the realtime-repo under http://mirror.centos.org/centos/7/rt/ or do I have to write the repo-file manually? Thanks in advance Tim

2 1

NFS Client with quota
by koji.morikawa 04 Apr '17

04 Apr '17

Hello. I am "koji". I have a question. Can I mount a NFS with quota? (Not Server side) I understand quota is set NFS server. But I must client side. (Is rquota only report?) Does anyone know a good solution? Best regard. koji

3 6

CentOS Linux 5 End of Life
by Johnny Hughes 03 Apr '17

03 Apr '17

CentOS Linux 5 has reached End of Life, as of 31 March 2017. Please note that the latest version of CentOS Linux 5 (version 5.11 with updates) will remain available here (archived): http://vault.centos.org/5.11/ Please also note that this directory will not be maintained as there are no more public source code releases for upstream RHEL-5. That means there will be no more security updates for CentOS Linux 5. The CentOS team does not recommend using CentOS Linux 5 for any purpose. If you have workloads that can not be moved from the EL5 code base, you can obtain paid extended support from Red Hat for RHEL-5. See ELS (Extended Life-cycle Support) from this link: https://access.redhat.com/support/policy/updates/errata Thanks, Johnny Hughes

1 0

How to enable the svm cpu flag inside a vm?
by Leonard den Ottolander 03 Apr '17

03 Apr '17

Hello, I'm trying to get the Android Emulator to run inside a kvm vm on CentOS-6. Apparently the latest Android Emulators cannot run without hardware acceleration so I am trying to get the vm to see the svm cpu flag. Host: $ grep model\ name /proc/cpuinfo | sort -u model name : AMD Phenom(tm) II X4 965 Processor $ grep svm /proc/cpuinfo | sort -u flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm 3dnowext 3dnow constant_tsc rep_good nonstop_tsc extd_apicid pni monitor cx16 popcnt lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt npt lbrv svm_lock nrip_save $ cat /sys/module/kvm_amd/parameters/nested 1 I have tried copying the cpu options (Opteron_G3) in the host cpu configuration and setting the svm flag to either "model", "required" or "force" to no avail: $ ps waux | grep qemu qemu 7962 7.2 21.9 3722092 2680668 ? Rl 13:23 6:36 /usr/libexec/qemu-kvm -name C7-Android -S -M rhel6.6.0 -cpu Opteron_G3,+invtsc,+wdt,+skinit,+ibs,+osvw,+3dnowprefetch,+cr8legacy, +extapic,+cmp_legacy,+3dnow,+3dnowext,+pdpe1gb,+fxsr_opt,+mmxext,+ht, +vme -enable-kvm -m 3072 -realtime mlock=off -smp <snip> So the question is: How do I enable the svm flag in the guest? Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

4 7

DNAT Internet gate problem on centos
by Andreas Benzler 02 Apr '17

02 Apr '17

Hello Guys, I got trouble to get vserver work as gate: GATE=XX.XX.XX.XX YY_PORT=YY echo "1" > /proc/sys/net/ipv4/ip_forward iptables -F -t nat iptables -t nat -A PREROUTING -p tcp -i venet0:0 --dport $YY_PORT \ -j DNAT --to-destination $GATE:$YY_PORT iptables -t nat -A POSTROUTING -p tcp --dport $YY_PORT \ -j MASQUERADE iptables -L -t nat Any suggestion? I got it in the past, but now I'm completely confused. Thanks for help. Sincerely Andy

1 2

Sendmail is considered deprecated
by Xinhuan Zheng 02 Apr '17

02 Apr '17

Hello, Today I searched redhat official portal and learned that Sendmail is considered deprecated. By default, CentOS 7 will use postfix as MTA. I need good advise on what it means to us. We are CentOS customers. We use that operating system for quite a few years. We rely on Sendmail for years for us to relay large quantity of emails to our customers for marketing purpose. We build our additional fallback servers as well for fallback relays. We build our customized configuration for Sendmail too. I really need help to figure out if we can continue using Sendmail (even deprecated) for future long term and what implication would be doing so. Thanks, - xinhuan

7 11

Best practices for docker setup on Centos 7?
by Rafał Radecki 31 Mar '17

31 Mar '17

Hi All. I am currently running docker 1.13 on Centos 7 boxes with devicemapper storage plugin. I would like to know what are your experiences in regard to: - storage plugins - kernel versions - stability I consider upgrade to docker 17.03.1 and would like to choose most stable combination of kernel/storage plugin. Thanks for all info! BR, Rafal.

2 1

firewalld management on a headless server
by Robert Moskowitz 31 Mar '17

31 Mar '17

Is there an Apache tool to manage firewalld on a headless server? I am looking forward to my next Centos project which is to replace my Juniper SSG5 firewall... And along that line, what overlap, if any between firewalld and Suricata? thank you

12 17

have udev to ignore/hide a scsi disk - but how?
by lejeczek 30 Mar '17

30 Mar '17

hi everyone I've been playing and trying to tell udev to ignore and not create symlinks in /dev but I fail. Hoping this is the one: ENV{ID_SERIAL}== I've tried: ENV{SYSTEMD_READY}:="0" OPTIONS+="last_rule" even ENV{UDISKS_IGNORE}="1" but udev tests would still show: ACTION=add and symlinks created. Would share an advice? many thanks, L.

1 0

Python 3.x on Centos 7
by Matt 29 Mar '17

29 Mar '17

Is there a way to install Python 3.x on Centos 7.x without breaking anything that depends on an older version of Python? This server is a minimal Centos 7 install that primarily runs a simple LAMP setup.

8 10

Re: [CentOS] RHEL 6.9 is out
by Richard 29 Mar '17

29 Mar '17

>> On Fri, Mar 24, 2017 at 1:11 PM, Johnny Hughes <johnny(a)centos.org> >> wrote: >> >> OK guys, the CR release has happened. >> > Date: Tuesday, March 28, 2017 16:23:32 -0700 > From: Kay Schenk <kay.schenk(a)gmail.com> > > Still only 6.8 on the mirror link you gave near as I can see. > And, since I'm still on 32-bit ( no time to move on right now), > will a 32-bit be included in 6.9? > My read, and poking, is that what was released is the CR repo, and that these will be released to production (as 6.9) "shortly". If you enable the CR repo on your 6.x machine I believe you'll see these updates, and can install them if you want to check things out. My experience is that there will likely be a few updates from the CR when the production set is released. If you go to: http://mirror.centos.org/centos/6.8/cr/<i386|x86_64>/Packages/ you'll see that there are packages for both 32- and 64-bit, so you should be getting 32-bit updates that will take you up to 6.9.

4 3

CentOS-announce Digest, Vol 145, Issue 9
by centos-announce-request＠centos.org 29 Mar '17

29 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2017:0839 CentOS 5 tzdata BugFix Update (Johnny Hughes) 2. CEBA-2017:0823 CentOS 7 selinux-policy BugFix Update (Johnny Hughes) 3. CESA-2017:0837 Important CentOS 7 icoutils Security Update (Johnny Hughes) 4. CEBA-2017:0839 CentOS 7 tzdata BugFix Update (Johnny Hughes) 5. CESA-2017:0838 Moderate CentOS 7 openjpeg Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 27 Mar 2017 13:17:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0839 CentOS 5 tzdata BugFix Update Message-ID: <20170327131719.GA16003(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0839 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d58328c545b0e860954c77bdb60b158a471c341b83354a5ec8724f093158282f tzdata-2017b-1.el5.i386.rpm 22a70cf9924e673ceb03b4adf663fda03103b172288bc174b5da09397770b86c tzdata-java-2017b-1.el5.i386.rpm x86_64: fbc86ab21cb3abf327e40e822816ab73feff09d22d96816a793eae4eac4e6328 tzdata-2017b-1.el5.x86_64.rpm 42e9feddb7a0f81ab91ad7a894b753f4c8f38bd64d0530e6f6722c2f78a39208 tzdata-java-2017b-1.el5.x86_64.rpm Source: 48e3fa1fae0375ad65516800a7bfc0cf099422c2c9e948db2463e60611f442a1 tzdata-2017b-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 29 Mar 2017 10:57:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0823 CentOS 7 selinux-policy BugFix Update Message-ID: <20170329105748.GA19600(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0823 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0823.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b7655ac40262e437f9150ab7b23cb0caba2c5a914083d7d89aca0093e15ea30f selinux-policy-3.13.1-102.el7_3.16.noarch.rpm dccc0451d8e822c0e6b1f45f8437fc27005270f86ace45114ca01b339bf39f76 selinux-policy-devel-3.13.1-102.el7_3.16.noarch.rpm 357e9d0c2cc9894ce512dfd37071297626604b2c6f424f156cfae51a0ffdeb47 selinux-policy-doc-3.13.1-102.el7_3.16.noarch.rpm c50eb3168371899ae5d39e5088733f59fed60836c884a59339089afa73bc8b2d selinux-policy-minimum-3.13.1-102.el7_3.16.noarch.rpm 9da71a2db1b9ae05910c8a448c2e649c1b991c10a22f9e15b48b3814ff61f2f6 selinux-policy-mls-3.13.1-102.el7_3.16.noarch.rpm afcfda72700317168719f55f95233ae3733d003df50029256ac8e701b5b04491 selinux-policy-sandbox-3.13.1-102.el7_3.16.noarch.rpm 35b53b8646de10c01263b008b4e1f5a16c22a2068cf48f46aa238b551cbaab93 selinux-policy-targeted-3.13.1-102.el7_3.16.noarch.rpm Source: 8b974ed11551356b4f906ad5e0940dc2e74d57171105622ab88ab3c8b7c23263 selinux-policy-3.13.1-102.el7_3.16.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 29 Mar 2017 10:58:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0837 Important CentOS 7 icoutils Security Update Message-ID: <20170329105802.GA19664(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0837 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0837.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0f76b00e410e81cde0b6b4be09548c1bb87acfcb09aa6707e20e63339d768d36 icoutils-0.31.3-1.el7_3.x86_64.rpm Source: 50e48f018d8550d885c50e15e6f07033da72f30d497b9f183843ca8d21dd4c63 icoutils-0.31.3-1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 29 Mar 2017 10:58:34 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0839 CentOS 7 tzdata BugFix Update Message-ID: <20170329105834.GA19742(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0839 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ef2ac10ca81fa29dc5c72043e7252fcddbee257c98a53cf64a25c253e38c191e tzdata-2017b-1.el7.noarch.rpm 8837c0389dc7788ce52a92338a7d72e83148bf7680a9a20a7223b5067ae89d34 tzdata-java-2017b-1.el7.noarch.rpm Source: e73813d365d3de442ae2e7fbf456c7494ed6b415b41f6ecd0831fb4c950250f1 tzdata-2017b-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 29 Mar 2017 10:58:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0838 Moderate CentOS 7 openjpeg Security Update Message-ID: <20170329105856.GA19816(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0838 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0838.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 57a8fc263d03f7068f90fad0af9773efa9cf500409b53f48edeb7d0c3c6511a7 openjpeg-1.5.1-16.el7_3.x86_64.rpm 9cceb4fcf9673742e58eb15e268006095d383559a9e940b68b763f5ec3aa3370 openjpeg-devel-1.5.1-16.el7_3.i686.rpm b9a6b4f0f4cc33ba18812f76e951854567e6fe8e7c9207a735f5e225713ffc4c openjpeg-devel-1.5.1-16.el7_3.x86_64.rpm 09096384201d44cdfc09368f80de68eaa47c55620d0aeba86234375264e44281 openjpeg-libs-1.5.1-16.el7_3.i686.rpm cba929afdd67e4932f76e1efd5dbf946405be2878039b2ff898113053be52ec8 openjpeg-libs-1.5.1-16.el7_3.x86_64.rpm Source: ae0181b3ce23493cc653e78af26486a4eccdf278d1b5fc099bb96df36d94685a openjpeg-1.5.1-16.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 145, Issue 9 ***********************************************

1 0

Mixed bonding and vlan on plain adapter possible?
by Gianluca Cecchi 29 Mar '17

29 Mar '17

Hello, I have a CentOS 7.3 + updates server where my configuration arises from the need to connect via iSCSI to a Dell PS Series storage array and Dell not supporting bonding. So that I need to use 2 nics on the same vlan to connect to iSCSI portal IP and then use multipath. Also, the iSCSI lan is on a dedicated vlan I have only these 2 x 10Gbit adapters and I also need to put other vlans on them through bonding. I plan to use active-backup as bonding mode. My first tests were only with iSCSI in place to verify connection is ok I followed these Dell guidelines, for both multipath and sysctl configs for network adapters: http://en.community.dell.com/techcenter/extras/m/white_papers/20442422 iSCSI vlan is 100 so that the configured devices are p1p1.100 and p1p2.100 and my sysctl config is: net.ipv4.conf.p1p1/100.arp_announce=2 net.ipv4.conf.p1p2/100.arp_announce=2 net.ipv4.conf.p1p1/100.arp_ignore=1 net.ipv4.conf.p1p2/100.arp_ignore=1 # net.ipv4.conf.p1p1/100.rp_filter=2 net.ipv4.conf.p1p2/100.rp_filter=2 So far so good and my lun is viewed this way through multipath [root@ov300 etc]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-3 EQLOGIC ,100E-00 size=1.0T features='0' hwhandler='0' wp=rw `-+- policy='round-robin 0' prio=0 status=active |- 7:0:0:0 sde 8:64 active undef running `- 8:0:0:0 sdf 8:80 active undef running I tried a test workload and both paths are used in a balanced way. Now I temporarily stop the iSCSI layer and ifdown the p1p1.100 and p1p2.100 devices and put in place bonding on plain p1p1 and p1p2 interfaces and then vlans over it and bridges (they are for VMs) [root@ov300 ~]# cat /proc/net/bonding/bond1 Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011) Bonding Mode: fault-tolerance (active-backup) Primary Slave: None Currently Active Slave: p1p1 MII Status: up MII Polling Interval (ms): 100 Up Delay (ms): 0 Down Delay (ms): 0 Slave Interface: p1p1 MII Status: up Speed: 10000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: a0:36:9f:2e:4d:80 Slave queue ID: 0 Slave Interface: p1p2 MII Status: up Speed: 10000 Mbps Duplex: full Link Failure Count: 1 Permanent HW addr: a0:36:9f:2e:4d:82 Slave queue ID: 0 [root@ov300 ~]# - ifcfg-bond1.65 DEVICE=bond1.65 VLAN=yes BRIDGE=vlan65 ONBOOT=yes MTU=1500 DEFROUTE=no NM_CONTROLLED=no IPV6INIT=no - ifcfg-vlan65 DEVICE=vlan65 TYPE=Bridge DELAY=0 STP=off ONBOOT=yes MTU=1500 DEFROUTE=no NM_CONTROLLED=no IPV6INIT=no [root@ov300 network-scripts]# brctl show vlan65 bridge name bridge id STP enabled interfaces vlan65 8000.a0369f2e4d80 no bond1.65 [root@ov300 network-scripts]# The same for vlans 162, while for vlan 187 I only have the bond1.187 without a bridge on top of it At the end I try to re-start the iSCSI components, but it seems now I have iSCSI connection interrupted and not stable. During this phase the command [root@ov300 network-scripts]# iscsiadm -m session -P1 has in its output for the 2 interfaces Iface Netdev: p1p2.100 SID: 5 iSCSI Connection State: TRANSPORT WAIT iSCSI Session State: FAILED Internal iscsid Session State: REOPEN ... SID: 6 iSCSI Connection State: TRANSPORT WAIT iSCSI Session State: FREE Internal iscsid Session State: REOPEN and then Iface Netdev: p1p2.100 SID: 5 iSCSI Connection State: TRANSPORT WAIT iSCSI Session State: FREE Internal iscsid Session State: REOPEN ... Iface Netdev: p1p1.100 SID: 6 iSCSI Connection State: LOGGED IN iSCSI Session State: LOGGED_IN Internal iscsid Session State: NO CHANGE and from multipath point of view a sequence of these: [root@ov300 network-scripts]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-2 EQLOGIC ,100E-00 size=1.0T features='0' hwhandler='0' wp=rw `-+- policy='round-robin 0' prio=0 status=active |- 14:0:0:0 sde 8:64 active undef running `- 13:0:0:0 sdf 8:80 failed faulty running [root@ov300 network-scripts]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-2 EQLOGIC ,100E-00 size=1.0T features='0' hwhandler='0' wp=rw `-+- policy='round-robin 0' prio=0 status=active |- 14:0:0:0 sde 8:64 active undef running `- 13:0:0:0 sdf 8:80 failed faulty running [root@ov300 network-scripts]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-2 EQLOGIC ,100E-00 size=1.0T features='0' hwhandler='0' wp=rw `-+- policy='round-robin 0' prio=0 status=active |- 14:0:0:0 sde 8:64 active undef running `- 13:0:0:0 sdf 8:80 failed undef running Should my config work or do you see any physical/network intrinsic problems in it? >From first tests it seems the more problematic adapter in iSCSI connection is the one that at the time was the active slave in the active-backup bond..... but I only did preliminary tests Tomorrow I'm going to run further tests and verify better and deeper, but any comment/suggestion would be appreciated in advance. Thanks Gianluca

1 0

Nodejs010 Packages giving unresolved dependency error when building the nodejs packages
by Maheshwari, Shagun 29 Mar '17

29 Mar '17

Hi, I am trying to built an ISO with nodejs010 packages but when I run the command "repoclosure -a x86_64 -r <local-repository-name>" to check its further dependencies, it is giving unresolved dependencies error. Example: package: nodejs010-node-gyp-3.2.0-2.el7.centos.noarch from Harman (it's a local repo name) unresolved deps: npm(minimatch) < 0:4 npm(minimatch) >= 0:3 nodejs(engine) >= 0:0.8.0 In ISO we have nodejs010-nodejs-minimatch-3.0.2-1.el7 but it is giving error that npm(minimatch) < 0.4 or npm(minimatch) >= 0:3 and on mirror.centos.org latest version of this package is 3.0.2-1. It was an example, there are many errors like this. So, Please find the attached nodejs-unresolved-dep-erre.log file. I have also attached the list of nodejs's RPMs which I want to include in my ISO. Steps to reproduce this issue: 1. Built all nodejs packages using mock Mock -r centos-7-x86_64 rebuild -define 'scl nodejs010' nodejs010-x.x.x.src.rpm 2. Copy all nodejs rpms in a folder 3. Make a local repository in /etc/yum.repos.d/ folder e.g. 1. cd /etc/yum.repos.d/ 2. mkdir dep.repo 3. copy following lines in dep.repo file: [harman] name=harman baseurl=file:///path of the folder where you have copied your nodejs rpms/ enabled=1 4. Run the following command in that folder where you have copied your rpms: createrepo . 5. Then run repoclosure -a x86_64 -r harman But when I download all nodejs rpms from http://mirror.centos.org/centos-7/7.3.1611/sclo/x86_64/rh/nodejs010/ site and repeat the same steps then it is not giving any unresolved dependency errors. Why it is happening ? or There is any problem with our rpm building process ? Please response and help. Regards, Shagun Maheshwari

1 0

RHEL 6.9 is out
by Phelps, Matthew 28 Mar '17

28 Mar '17

Red Hat released RHEL 6.9 yesterday. Why isn't CentOS 6.9 out yet? :) -- Matt Phelps System Administrator, Computation Facility Harvard - Smithsonian Center for Astrophysics mphelps(a)cfa.harvard.edu, http://www.cfa.harvard.edu

6 8

mirror for debug_info repo
by jsl6uy js16uy 28 Mar '17

28 Mar '17

Hello all hope all is well. We pull down via rsync from a Centos mirror for general updates/os/etc. I don't see a mirror for debuginfo.centos.org::centos-debuginfo well debuginfo.centos.org. The banner for the site states you should only use this site if you plan to be a public mirror. I have not checked every site on the centos mirror list, checked 10 to 15 in the US, but the only one I found that even had a folder for a debug_info sync stated: "due to size this has been moved to debuginfo.centos.org" I am only syncing debuginfo.centos.org::centos-debuginfo/7/x86_64 and i386. Should I pull from here? Is there a better place? Just trying to do the right thing net/netizen resource usage wise Any help/guidance appreciated thanks all

1 0

Re: [CentOS] firewalld management on a headless server
by m.roth＠5-cent.us 28 Mar '17

28 Mar '17

James B. Byrne wrote: > > On Mon, March 27, 2017 17:31, m.roth(a)5-cent.us wrote: >> Mike wrote: >>> Nice catch, Mr. Schumacher ---> The following modules are included as standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz Configure a Linux firewall using FirewallD, by editing allowed services and ports. >>> >>> This is likely the right tool for the job. >>> >> Webmin used to be considered insecure, and people would scream and yell if you suggested using it. Has that changed? > > Webmin is as insecure as the administrator cares to make it. > > Our host systems' Webmin instances listen on a reserved IP address different from the host's DNS entry and that address is only reachable through the host's firewall from specified IP addresses originating on our internal LAN. Further, Webmin is configured to automatically switch to https and use a certificate generated by our corporate private CA. Our gateway firewall blocks all access to the port > assigned to Webmin. One has to tunnel in to one of the pre-determined host addresses to obtain remote access. > > A separate webmin logon is set in the webmin configuration which has no existence on the host system. > > Webmin can also be configured to restrict the hours and day that asccess is allowed to specific users but we have not bothered with that. > > The main known weakness is Webmin's dependency on passwords which for all I know is due to my ignorance. If Webmin does support RSA > certificate authentication then I would love to be told where it is configured. However,failing that, very long phase phrases mitigate the password issue somewhat. Further, Webmin does support two-factor authentication using Google or Authy. > > To my knowledge there are no CVEs reported for Webmin since 2015 and I believe that all known problems are resolved in the present release. Which is not to say that there are no exploits left to be uncovered but then again we can hardly claim that about any software. > Thanks for the extended response, James, esp. that last paragraph. I hadn't been following webmin for a number of years - we don't use it here. I did find and use it in a job I was in ten years ago - it was the only way I could get LDAP working, as, at the time, the tools that came with the package were *not* ready for prime time.... mark PS: Tried reply, James, but it bounced.

1 0

Using i3 wm under CentOS7
by C. L. Martinez 28 Mar '17

28 Mar '17

Hi all, Anyone has installed i3 wm under CentOS7? Any samples? I have some doubts about to how to manage battery power, notifications, etc. Thanks -- Greetings, C. L. Martinez

1 0

Re: [CentOS] firewalld management on a headless server
by James B. Byrne 28 Mar '17

28 Mar '17

On Mon, March 27, 2017 17:31, m.roth(a)5-cent.us wrote: > Mike wrote: >> Nice catch, Mr. Schumacher ---> The following modules are included >> as >> standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz >> Configure a Linux firewall using FirewallD, by editing allowed >> services and ports. >> >> This is likely the right tool for the job. >> > Webmin used to be considered insecure, and people would scream and > yell if you suggested using it. Has that changed? Webmin is as insecure as the administrator cares to make it. Our host systems' Webmin instances listen on a reserved IP address different from the host's DNS entry and that address is only reachable through the host's firewall from specified IP addresses originating on our internal LAN. Further, Webmin is configured to automatically switch to https and use a certificate generated by our corporate private CA. Our gateway firewall blocks all access to the port assigned to Webmin. One has to tunnel in to one of the pre-determined host addresses to obtain remote access. A separate webmin logon is set in the webmin configuration which has no existence on the host system. Webmin can also be configured to restrict the hours and day that asccess is allowed to specific users but we have not bothered with that. The main known weakness is Webmin's dependency on passwords which for all I know is due to my ignorance. If Webmin does support RSA certificate authentication then I would love to be told where it is configured. However,failing that, very long phase phrases mitigate the password issue somewhat. Further, Webmin does support two-factor authentication using Google or Authy. To my knowledge there are no CVEs reported for Webmin since 2015 and I believe that all known problems are resolved in the present release. Which is not to say that there are no exploits left to be uncovered but then again we can hardly claim that about any software. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] firewalld management on a headless server
by Mike 28 Mar '17

28 Mar '17

Webmin used to be considered insecure, and people would scream and yell if you suggested using it. Has that changed? mark Ahh, I did not know of this. Well, I'm back to suggesting OP take a little time and get comfortable with firewall-cmd in the terminal. If we want our solid redhat clone then systemd, NetworkManager, and firewalld are soldered into the foreseeable future.

2 1

Does fail2ban protect anything other than SSH logins?
by Robert Moskowitz 27 Mar '17

27 Mar '17

I am looking at fail2ban, and all I see is it protecting remote logins to SSH. Does it protect any other access to systems? Well perhaps other than VNC perhaps? thank you

3 2

Systemd interface rename does not work
by Matt . 27 Mar '17

27 Mar '17

Hi, I'm moving to Systemd for my network management but I don't see my link name changed when I try to using a .link name. The .network file works right, networkmanager is removed as well to accomplish this. Any idea why the rename is not done ? /etc/systemd/network/0-eth.network [Match] MACAddress=00:1a:4a:a9:0a:17 [Network] Address=172.16.3.141/24 Gateway=172.16.3.254 DNS=172.16.3.1 DNS=172.16.3.2 /etc/systemd/network/0-eth.link [Match] MACAddress=00:1a:4a:a9:0a:17 [Link] Name=eth0

3 2

SNMP oddity
by Digimer 25 Mar '17

25 Mar '17

Hi all, Not sure if this is on topic or not. I'm trying to query an SNMP value from centos 6 and I get a bad response if I don't specify the MIB to use: 0 digimer@pulsar:~/anvil/striker$ snmpget -v2c -c public -m /home/digimer/Downloads/APC/AP7900/MIB/powernet421.mib 10.255.2.1 .1.3.6.1.2.1.2.2.1.6.2 RFC1213-MIB::ifPhysAddress.2 = Hex-STRING: 00 C0 B7 5F 8A 85 0 digimer@pulsar:~/anvil/striker$ snmpget -v2c -c public 10.255.2.1 .1.3.6.1.2.1.2.2.1.6.2 IF-MIB::ifPhysAddress.2 = STRING: 0:c0:b7:5f:8a:85 Note the second reply is not returning the first character (should be '00:', returning '0:'. Trying to request Hex doesn't seem to help, either: 0 digimer@pulsar:~/anvil/striker$ snmpget -v2c -c public -Ox 10.255.2.1 .1.3.6.1.2.1.2.2.1.6.2 IF-MIB::ifPhysAddress.2 = STRING: 0:c0:b7:5f:8a:85 Any SNMP folks know what I might be doing wrong? Thanks! -- Digimer Papers and Projects: https://alteeve.com/w/ "I am, somehow, less interested in the weight and convolutions of Einstein’s brain than in the near certainty that people of equal talent have lived and died in cotton fields and sweatshops." - Stephen Jay Gould

3 2

Disabling Firewall/iptables on CentOS 7??
by James Pifer 24 Mar '17

24 Mar '17

I apologize if this has been asked and answered, but I googled and attempted things for several hours today without success. I have a freshly installed CentOS 7 system that I'd like to disable the firewall and all iptables rules. Basically the equivalent of doing iptables -F In a nutshell I've tried the following commands, in many different ways and orders, but when the system restarts it still seems to end up with some form of default rules. It even has a couple rules specifying 192.168.122.0 and I can't figure out where it's coming from. #Disable Firewall systemctl stop firewalld systemctl disable firewalld rm '/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service' rm '/etc/systemd/system/basic.target.wants/firewalld.service' systemctl disable firewalld systemctl stop firewalld iptables --flush iptables --list iptables -L yum install iptables-services service iptables save systemctl enable iptables service iptables save Any help is appreciated. Thanks James

3 3

polkit helper timeout and defunct pkla-check-authorization processes on CentOS 7.3
by Edgecombe, Jason 24 Mar '17

24 Mar '17

Hi everyone, We seem to be having issues on multiple CentOS 7.3 machines. The problem seems to revolve around polkitd. At some random time, polkitd seems to stop responding on my systems. Along with this, there might be hundreds of defunct pkla-check-authorization processes. If I reboot, then things are fine for a while. I don't see any activity in the unabridged journal to suggest anything that might be triggering polkitd. The puppet run finished 5 minutes before polkitd lost it's head. polkit version is polkit-0.112-11.el7_3.x86_64 Any help is appreciated. Thanks, Jason Here is some condensed output from the "journalctl -u polkit" command: Mar 09 04:02:14 myhost systemd[1]: Starting Authorization Manager... Mar 09 04:02:14 myhost polkitd[1018]: Started polkitd version 0.112 Mar 09 04:02:14 myhost polkitd[1018]: Loading rules from directory /etc/polkit-1/rules.d Mar 09 04:02:14 myhost polkitd[1018]: Loading rules from directory /usr/share/polkit-1/rules.d Mar 09 04:02:14 myhost polkitd[1018]: Finished loading, compiling and executing 7 rules Mar 09 04:02:14 myhost systemd[1]: Started Authorization Manager. Mar 09 04:02:14 myhost polkitd[1018]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Mar 09 04:02:53 myhost polkitd[1018]: Registered Authentication Agent for unix-session:c1 (system bus name :1.41 [gnome-shell --mode=gdm], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) Mar 09 04:08:25 myhost polkitd[1018]: Reloading rules Mar 09 04:08:25 myhost polkitd[1018]: Collecting garbage unconditionally... Mar 09 04:08:25 myhost polkitd[1018]: Loading rules from directory /etc/polkit-1/rules.d Mar 09 04:08:25 myhost polkitd[1018]: Loading rules from directory /usr/share/polkit-1/rules.d Mar 09 04:08:25 myhost polkitd[1018]: Finished loading, compiling and executing 8 rules Mar 09 04:08:25 myhost polkitd[1018]: Reloading rules Mar 09 04:08:25 myhost polkitd[1018]: Collecting garbage unconditionally... Mar 09 04:08:25 myhost polkitd[1018]: Loading rules from directory /etc/polkit-1/rules.d Mar 09 04:08:25 myhost polkitd[1018]: Loading rules from directory /usr/share/polkit-1/rules.d Mar 09 04:08:25 myhost polkitd[1018]: Finished loading, compiling and executing 8 rules Mar 09 04:08:53 myhost polkitd[1018]: Reloading rules ... (snipped more rules loading) Mar 09 04:10:39 myhost polkitd[1018]: Collecting garbage unconditionally... Mar 09 04:10:39 myhost polkitd[1018]: Loading rules from directory /etc/polkit-1/rules.d Mar 09 04:10:39 myhost polkitd[1018]: Loading rules from directory /usr/share/polkit-1/rules.d Mar 09 04:10:39 myhost polkitd[1018]: Finished loading, compiling and executing 7 rules Mar 09 16:59:42 myhost polkitd[1018]: /etc/polkit-1/rules.d/49-polkit-pkla-compat.rules:21: Error: Error spawning helper: Timed out after 10 seconds (g-io-error-quark, 24) Mar 09 16:59:42 myhost polkitd[1018]: Error evaluating authorization rules Mar 10 04:13:34 myhost polkitd[1018]: /etc/polkit-1/rules.d/49-polkit-pkla-compat.rules:21: Error: Error spawning helper: Timed out after 10 seconds (g-io-error-quark, 24) Mar 10 04:13:34 myhost polkitd[1018]: Error evaluating authorization rules Mar 10 04:14:32 myhost polkitd[1018]: /etc/polkit-1/rules.d/49-polkit-pkla-compat.rules:21: Error: Error spawning helper: Timed out after 10 seconds (g-io-error-quark, 24) ... (snipped more lines about error evaluating rules)... --------------------------------------------------------------------------- Jason Edgecombe | Linux Administrator UNC Charlotte | The William States Lee College of Engineering 9201 University City Blvd. | Charlotte, NC 28223-0001 Phone: 704-687-1943 jwedgeco(a)uncc.edu | http://engr.uncc.edu | Facebook --------------------------------------------------------------------------- If you are not the intended recipient of this transmission or a person responsible for delivering it to the intended recipient, any disclosure, copying, distribution, or other use of any of the information in this transmission is strictly prohibited. If you have received this transmission in error, please notify me immediately by reply e-mail or by telephone at 704-687-1943. Thank you.

1 1

kerberized-nfs - any experts out there?
by Matt Garman 23 Mar '17

23 Mar '17

Is anyone on the list using kerberized-nfs on any kind of scale? I've been fighting with this for years. In general, when we have issues with this system, they are random and/or not repeatable. I've had very little luck with community support. I hope I don't offend by saying that! Rather, my belief is that these problems are very niche/esoteric, and so beyond the scope of typical community support. But I'd be delighted to be proven wrong! So this is more of a "meta" question: anyone out there have any general recommendations for how to get support on what I presume are niche problems specific to our environment? How is paid upstream support? Just to give a little insight into our issues: we have an in-house-developed compute job dispatching system. Say a user has 100s of analysis jobs he wants to run, he submits them to a central master process, which in turn dispatches them to a "farm" of >100 compute nodes. All these nodes have two different krb5p NFS mounts, to which the jobs will read and write. So while the users can technically log in directly to the compute nodes, in practice they never do. The logins are only "implicit" when the job dispatching system does a behind-the-scenes ssh to kick off these processes. Just to give some "flavor" to the kinds of issues we're facing, what tends to crop up are one of three things: (1) Random crashes. These are full-on kernel trace dumps followed by an automatic reboot. This was really bad under CentOS 5. A random kernel upgrade magically fixed it. It happens almost never under CentOS 6. But happens fairly frequently under CentOS 7. (We're completely off CentOS 5 now, BTW.) (2) Permission denied issues. I have user Kerberos tickets configured for 70 days. But there is clearly some kind of undocumented kernel caching going on. Looking at the Kerberos server logs, it looks like it "could" be a performance issue, as I see 100s of ticket requests within the same second when someone tries to launch a lot of jobs. Many of these will fail with "permission denied" but if they immediately re-try, it works. Related to this, I have been unable to figure out what creates and deletes the /tmp/krb5cc_uid_random files. (3) Kerberized NFS shares getting "stuck" for one or more users. We have another monitoring app (in-house developed) that, among other things, makes periodic checks of these NFS mounts. It does so by forking and doing a simple "ls" command. This is to ensure that these mounts are alive and well. Sometimes, the "ls" command gets stuck to the point where it can't even be killed via "kill -9". Only a reboot fixes it. But the mount is only stuck for the user running the monitoring app. Or sometimes the monitoring app is fine, but an actual user's processes will get stuck in "D" state (in top, means waiting on IO), but everyone else's jobs (and access to the kerberizes nfs shares) are OK. This is actually blocking us from upgrading to CentOS 7. But my colleagues and I are at a loss how to solve this. So this post is really more of a semi-desperate plea for any kind of advice. What other resources might we consider? Paid support is not out of the question (within reason). Are there any "super specialist" consultants out there who deal in Kerberized NFS? Thanks! Matt

4 5

KVM guest fails to boot cleanly
by James B. Byrne 22 Mar '17

22 Mar '17

I have a KVM vm running CentOS-6.8 on a host also running CentOS-6.8. This instance is used for occasional development projects which require segregation. Thus it is seldom accessed. At some point in the recent past this guest developed an issue with starting. Specifically these messages were found in the system log files: /var/log/messages-20170312:Mar 10 16:31:06 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_cm_xnet245.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages-20170312:Mar 10 16:31:06 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet241.harte-lyne.ca_00' [32.00 GiB] inherit /var/log/messages-20170312:Mar 10 16:31:06 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet241.harte-lyne.ca_01' [32.00 GiB] inherit /var/log/messages-20170312:Mar 10 16:31:06 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet241.harte-lyne.ca_02' [32.00 GiB] inherit /var/log/messages-20170312:Mar 10 16:31:06 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet242.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages-20170312:Mar 10 16:31:06 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet243.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages-20170312:Mar 10 16:31:06 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet244.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages-20170312:Mar 10 16:31:06 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet245.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages:Mar 20 08:52:10 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_cm_xnet245.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages:Mar 20 08:52:10 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet241.harte-lyne.ca_00' [32.00 GiB] inherit /var/log/messages:Mar 20 08:52:10 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet241.harte-lyne.ca_01' [32.00 GiB] inherit /var/log/messages:Mar 20 08:52:10 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet241.harte-lyne.ca_02' [32.00 GiB] inherit /var/log/messages:Mar 20 08:52:10 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet242.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages:Mar 20 08:52:10 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet243.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages:Mar 20 08:52:10 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet244.harte-lyne.ca_00' [31.25 GiB] inherit /var/log/messages:Mar 20 08:52:10 vhost04 kernel: dracut: inactive '/dev/vg_vhost04/lv_vm_xnet245.harte-lyne.ca_00' [31.25 GiB] inherit It appears that this issue was first encountered on March 10 as our log files go back much further than that and have no earlier record. The symptom presented on the guest console during boot is: Error 13: Invalid or unsupported executable format Press any key to continue... Pressing enter brings up the following text display GNU GRUB version 0.97 (615K lower / 3668980K upper memory) CentOS (2.6.32-641.15.1.el6.x86_64) CentOS (2.6.32-641.13.1.el6.x86_64) CentOS (2.6.32-641.11.1.el6.x86_64) CentOS (2.6.32-641.2.1.el6.x86_64) Use the ↑ and ↓ keys to select which entry is highlighted Press enter to boot the selected OS, 'e' to edit . . . The first choice repeats the Error. The second choice boots cleanly. Looking at yum history I see this: yum history Loaded plugins: etckeeper, fastestmirror, priorities, refresh-packagekit, security ID | Login user | Date and time | Action(s) | Altered --------------------------------------------------------------------- . . . 368 | root <root> | 2017-03-10 16:46 | Update | 4 367 | root <root> | 2017-03-10 16:42 | E, U | 35 EE . . . Looking at transaction 367 more closely we see that the kernel was updated to 2.6.32-642.15.1.el6.x86_64 on March 10 but that a number or errors, whose nature I do not comprehend, were also reported. # yum history info 367 Loaded plugins: etckeeper, fastestmirror, priorities, refresh-packagekit, security Transaction ID : 367 Begin time : Fri Mar 10 16:42:32 2017 Begin rpmdb : 1489:fd0eb9a01b1667f826b8fead9bc0a05e5bc43efd End time : 16:43:59 2017 (87 seconds) End rpmdb : 1461:cac690d6280fa97910ccb59d0d1f6d43990dfd0a User : root <root> Return-Code : Success Transaction performed with: Installed rpm-4.8.0-55.el6.x86_64 @base Installed yum-3.2.29-75.el6.centos.noarch @updates Installed yum-metadata-parser-1.1.2-16.el6.x86_64 @anaconda-CentOS-201207061011.x86_64/6.3 Installed yum-plugin-fastestmirror-1.1.30-37.el6.noarch @base Installed yum-utils-1.1.30-37.el6.noarch @base Packages Altered: Updated firefox-45.7.0-1.el6.centos.x86_64 @updates Update 45.7.0-2.el6.centos.x86_64 @updates Updated gnome-settings-daemon-2.28.2-35.el6.x86_64 @base Update 2.28.2-35.el6_8.2.x86_64 @updates Erase initscripts-9.03.53-1.el6.centos.1.x86_64 @updates Erase kernel-2.6.32-642.4.2.el6.x86_64 @updates Erase kernel-firmware-2.6.32-642.13.1.el6.noarch @updates Updated kernel-headers-2.6.32-642.13.1.el6.x86_64 @updates Update 2.6.32-642.15.1.el6.x86_64 @updates Updated kexec-tools-2.0.0-300.el6_8.1.x86_64 @updates Update 2.0.0-300.el6_8.2.x86_64 @updates Erase libbasicobjects-0.1.1-11.el6.x86_64 @base Erase libblkid-2.17.2-12.24.el6_8.1.x86_64 @updates Erase libcollection-0.6.2-11.el6.x86_64 @base Erase libdhash-0.4.3-11.el6.x86_64 @base Erase libini_config-1.1.0-11.el6.x86_64 @base Erase libipa_hbac-1.13.3-22.el6_8.4.x86_64 @updates Erase libpath_utils-0.2.1-11.el6.x86_64 @base Erase libref_array-0.1.4-11.el6.x86_64 @base Erase libsss_idmap-1.13.3-22.el6_8.4.x86_64 @updates Erase libuuid-2.17.2-12.24.el6_8.1.x86_64 @updates Updated openssl-1.0.1e-48.el6_8.3.i686 @updates Erase openssl-1.0.1e-48.el6_8.3.x86_64 @updates Update openssl-1.0.1e-48.el6_8.4.i686 @updates Updated openssl-devel-1.0.1e-48.el6_8.3.x86_64 @updates Update 1.0.1e-48.el6_8.4.x86_64 @updates Updated python-libipa_hbac-1.13.3-22.el6_8.4.x86_64 @updates Update 1.13.3-22.el6_8.6.x86_64 @updates Erase python-sssdconfig-1.13.3-22.el6_8.4.noarch @updates Erase selinux-policy-3.7.19-292.el6_8.2.noarch @updates Erase selinux-policy-targeted-3.7.19-292.el6_8.2.noarch @updates Erase sssd-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-ad-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-client-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-common-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-common-pac-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-ipa-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-krb5-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-krb5-common-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-ldap-1.13.3-22.el6_8.4.x86_64 @updates Erase sssd-proxy-1.13.3-22.el6_8.4.x86_64 @updates Erase util-linux-ng-2.17.2-12.24.el6_8.1.x86_64 @updates Scriptlet output: 1 warning: erase unlink of /lib/modules/2.6.32-642.4.2.el6.x86_64/weak-updates failed: No such file or directory 2 warning: erase unlink of /lib/modules/2.6.32-642.4.2.el6.x86_64/modules.order failed: No such file or directory 3 warning: erase unlink of /lib/modules/2.6.32-642.4.2.el6.x86_64/modules.networking failed: No such file or directory 4 warning: erase unlink of /lib/modules/2.6.32-642.4.2.el6.x86_64/modules.modesetting failed: No such file or directory 5 warning: erase unlink of /lib/modules/2.6.32-642.4.2.el6.x86_64/modules.drm failed: No such file or directory 6 warning: erase unlink of /lib/modules/2.6.32-642.4.2.el6.x86_64/modules.block failed: No such file or directory Reviewing grub.conf I note that the initrd entry is missing from the newest kernel entry. Which of course explains the boot error message. However, as kernel updates are entirely automated when performed by yum I am at a lost to explain its absence. default=saved fallback= 0 1 2 timeout=5 splashimage=(hd0,0)/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-642.15.1.el6.x86_64) root (hd0,0) kernel /vmlinuz-2.6.32-642.15.1.el6.x86_64 ro root=/dev/mapper/vg_xnet241-lv_root rd_NO_LUKS LANG=en_CA(a)yyyy-mmm-dd.UTF-8 rd_LVM_LV=vg_xnet241/lv_swap rd_LVM_LV=vg_xnet241/lv_root rd_NO_MD SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet crashkernel=auto radeon.modeset=0 title CentOS (2.6.32-642.13.1.el6.x86_64) root (hd0,0) kernel /vmlinuz-2.6.32-642.13.1.el6.x86_64 ro root=/dev/mapper/vg_xnet241-lv_root rd_NO_LUKS LANG=en_CA(a)yyyy-mmm-dd.UTF-8 rd_LVM_LV=vg_xnet241/lv_swap rd_LVM_LV=vg_xnet241/lv_root rd_NO_MD SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet crashkernel=auto radeon.modeset=0 initrd /initramfs-2.6.32-642.13.1.el6.x86_64.img There is no initramfs-2.6.32-642.15.1.el6.x86_64.img file present in /boot so something is seriously wrong somewhere. As shown above I have since reconfigured grub.conf to fallback to the last working kernel. Nonetheless, I would like guidance on how to proceed with fixing/removing the broken one. Suggestions? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Centos 7.3.1611 - NetworkManager + dhcp + ipv6
by Diaulas Castro 22 Mar '17

22 Mar '17

Used steps on sysctl from Centos7 FAQ (https://wiki.centos.org/FAQ/CentOS7) and some gathered on internet # cat /etc/sysctl.d/90-disable_ipv6.conf net.ipv6.conf.all.disable_ipv6=1 net.ipv6.conf.default.disable_ipv6=1 net.ipv6.conf.eth0.disable_ipv6=1 net.ipv6.conf.eth1.disable_ipv6=1 net.ipv6.conf.all.use_tempaddr=0 net.ipv6.conf.all.autoconf=0 net.ipv6.conf.all.accept_ra=0 net.ipv6.conf.default.autoconf=0 net.ipv6.conf.default.accept_ra=0 net.ipv6.conf.eth0.autoconf=0 net.ipv6.conf.eth1.autoconf=0 But with dhcp, NetworkManager (or something) reenables ipv6 on interfaces. #sysctl -a | grep ipv6 | grep disable net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 net.ipv6.conf.eth0.disable_ipv6 = 0 net.ipv6.conf.eth1.disable_ipv6 = 1 net.ipv6.conf.lo.disable_ipv6 = 1 And the interface gets the ipv4 but still have temporary ipv6 on it (our dhcp doesnt support ipv6) # ip a s eth0 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:0c:29:31:5a:9d brd ff:ff:ff:ff:ff:ff inet 10.10.216.247/24 brd 10.10.216.255 scope global dynamic eth0 valid_lft 451sec preferred_lft 451sec inet6 fe80::20c:29ff:fe31:5a9d/64 scope link valid_lft forever preferred_lft forever And this bugs my use for ovftool with the option "--X:waitForIp" because it's returns (mostly of times) the ipv6 addr It's a bug, missing documentation or my

2 2

I want to connect to a l2tp server from centos.
by Eliezer Croitoru 22 Mar '17

22 Mar '17

I have a server currently connecting to a pptp remote server. This server(lns\lac) has the option for pptp connections and l2tp connections. The l2tp connections are not using ipsec encryption at all. I have seen couple guides\tutorials on the internet: - https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_on_CentOS_-_Red_Hat_Enterpris… - https://wiki.archlinux.org/index.php/L2TP/IPsec_VPN_client_setup But all the guides that I have found are using ipsec with "secret". On ubuntu there is a gui applet that helps setting these kind of connections up but I am working with a CentOS server and not Ubuntu desktop. If someone used l2tp the same way I want to use on CentOS 7 please give me some advice. If you have a guide which might help me I will be more then happy to see this one. Thanks, Eliezer

4 8

Centos7 USB wifi recommendation
by Robert Moskowitz 21 Mar '17

21 Mar '17

I am looking for one of those very small USB wifi adapters for the server I am working on. I am tired of dealing with the 4" long TP-LINK I have and for my purposes, one of those little 1cm ones would do. But which work with Linux? When I was last in the store, only the TP-LINK said it was supported on Linux... thanks

8 10

frozen bubble for C7
by Fred Smith 21 Mar '17

21 Mar '17

Hi all! I'm looking for a frozen-bubble that works on C7. I've tried installing the one in the Nux C7 archive, and the installation dies with: Error: Package: frozen-bubble-2.2.1-0.10.beta1.el7.nux.x86_64 (nux-dextop) Requires: perl(Compress::Bzip2) Can't find perl(compress::bzip2) anywhere. thansk in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

3 3

An 'orrible question: Outlook 365 under wine on CentOS?
by m.roth＠5-cent.us 21 Mar '17

21 Mar '17

Either CentOS 6 or 7 - anyone know if it's possible? Upper Management has decided on a policy that IMAP is going to go away in the near future, and they want everyone on Lookout, sorry, Outlook 365. mark, VMNH* * Very Much Not Happy

14 22

Need help
by Rosenthal, Shoshana 21 Mar '17

21 Mar '17

I am running centos 6.8 The system went down when we try to reboot it we get the message ST:3P7Y9Y1 Do you know what the problem might be. Thanks shoshana(a)cfa.harvard.edu

8 16

qmail package for CentOS 7
by Rajmohan Banavi 21 Mar '17

21 Mar '17

Is there any package available for qmail? I am having hard time finding it.

6 7

Anyone ever gotten Solaris to install from a CentOS PXE server?
by Locane 20 Mar '17

20 Mar '17

I'm poking through Solaris documentation trying to figure out how to make it installable via our PXE server and, as with many things Solaris, I'm hitting walls of completely foreign procedures and setups. Has anyone managed to do this before? I'm trying to set Solaris 11.3 up.

4 3

Re: [CentOS] Need help
by m.roth＠5-cent.us 20 Mar '17

20 Mar '17

I'm sending to you, directly, because manitu is again blocking my ISP.... Rosenthal, Shoshana wrote: > You are right it is a Dell PowerEdge. However as I said it stops in the middle of booting with no message. > > On Mon, Mar 20, 2017 at 3:11 PM, John R Pierce <pierce(a)hogranch.com> wrote: > >> On 3/20/2017 11:54 AM, Scott Robbins wrote: >> >>> I am running centos 6.8 >>>> The system went down when we try to reboot it we get the >>>> message ST:3P7Y9Y1 >>>> Do you know what the problem might be. >>>> <snip> You say "in the middle of booting" - please define. 1. Did it finish POST? 2. Did you see the kernel it was about to boot, displayed by grub? If the latter, *sigh*, hit "e" when you see the kernel, then edit the kernel line, and DELETE rhgb quiet, then boot. mark

1 0

Re: [CentOS] CentOS-6.8 fsck report Maximal Count
by James B. Byrne 20 Mar '17

20 Mar '17

On Fri, March 10, 2017 11:57, m.roth(a)5-cent.us wrote: > > Looks like only one sector's bad. Running badblocks should, > I think, mark that sector as bad, so the system doesn't try > to read or write there. I've got a user whose workstation has > had a bad sector running for over a year. However, if it > becomes two, or four, or 64 sectors, it's replacement > time, asap. > <snip> Bear with me on this. The last time I did anything like this I ended up having to boot into recovery mode from an install cd and do this by hand. This is not an option in the present circumstance as the unit is a headless server in a remote location. If I do this: echo '-c' > /fsckoptions touch /forcefsck shutdown -r now Will this repair the bad block and bring the system back up? If not then what other options should I use? The bad block is located in an LV assigned to a libvirt pool associated with a single vm. Can this be checked and corrected without having to deal with the base system? If so then how? Regards, -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

cPanel install failes on CentOS7
by Adam Tauno Williams 20 Mar '17

20 Mar '17

Attempting to install cPanel on a CentOS7 box [consultant wants it]. The install fails ... 2017-03-20 13:45:42 249 (DEBUG): Package perl-core-5.16.3-291.el7.x86_64 already installed and latest version 2017-03-20 13:45:42 249 (DEBUG): Package perl-libwww-perl-6.05-2.el7.noarch already installed and latest version 2017-03-20 13:45:42 249 (DEBUG): Package crontabs-1.11-6.20121102git.el7.noarch already installed and latest version 2017-03-20 13:45:42 249 (DEBUG): Package sysstat-10.1.5-11.el7.x86_64 already installed and latest version 2017-03-20 13:45:42 249 (DEBUG): Nothing to do 2017-03-20 13:45:42 249 (DEBUG): - ssystem [END] 2017-03-20 13:45:42 781 (DEBUG): - ssystem [BEGIN]: /usr/local/cpanel/scripts/checkyum --nokernel --noperl open3: exec of /usr/local/cpanel/scripts/checkyum --nokernel --noperl failed at /home/cPanelInstall/selfgz5400/install line 268.Removing /root/installer.lock. The interpreter in /usr/local/cpanel/scripts/checkyum is "/usr/local/cpanel/3rdparty/bin/perl" which does not exist.

1 0

SYSCALL problem in C7
by Fred Smith 20 Mar '17

20 Mar '17

Hi all! I know this isn't a devel list, but thought someone here may have a clue I could use... I have a fairly big application that runs on Centos 7 (and 6 and 5). Sometimes (not often, but too often) when running under the ddd debugger, while sitting stopped at a breakpoint, it will suddenly spew an apparent segfault in, as it says at the top of the source file, "Assembly code template for system call stubs". The specific place always looks like this: T_PSUEDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) ret_ERRVAL T_PSEUDO_END_ERRVAL (SYSCALL_SYMBOL) the red error marker points to SYSCALL_NAME. I have no idea why its doing this, it never does it when not running in the debugger, as far as I can tell. and why it would croak in the debugger while sitting (apparently) idle at a breakpoint is beyond me. anyone here got a clue? thanks in advance! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "Not everyone who says to me, 'Lord, Lord,' will enter the kingdom of heaven, but only he who does the will of my Father who is in heaven." ------------------------------ Matthew 7:21 (niv) -----------------------------

1 0

CentOS-announce Digest, Vol 145, Issue 8
by centos-announce-request＠centos.org 20 Mar '17

20 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0559 Moderate CentOS 6 openjpeg Security Update (Johnny Hughes) 2. CESA-2017:0558 Critical CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 20 Mar 2017 08:25:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0559 Moderate CentOS 6 openjpeg Security Update Message-ID: <20170320082544.GA29156(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0559 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0559.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 02e27ed7e8b6bff9b8ec4f67555fdd7db4c4f58337b40a03800174665b554806 openjpeg-1.3-16.el6_8.i686.rpm 2f3b00f939b54431e661b7375e039fe85613c4015724c277616cb150e2610cb5 openjpeg-devel-1.3-16.el6_8.i686.rpm d922e3acc84b2b15ab136cfba03013e269c160a75f2d97862bd0321ab6abab21 openjpeg-libs-1.3-16.el6_8.i686.rpm x86_64: 7337114ea2f5a315d06ff2dfe4ec0cba4e0576502c04e8722fbc0533abbec601 openjpeg-1.3-16.el6_8.x86_64.rpm 2f3b00f939b54431e661b7375e039fe85613c4015724c277616cb150e2610cb5 openjpeg-devel-1.3-16.el6_8.i686.rpm eb7849e478c1d8bbe7c08c57d2eedec58a6fca7802033f6b6f283176118725c2 openjpeg-devel-1.3-16.el6_8.x86_64.rpm d922e3acc84b2b15ab136cfba03013e269c160a75f2d97862bd0321ab6abab21 openjpeg-libs-1.3-16.el6_8.i686.rpm ed488c9b78118803ec38a7dc6aa1be7f04e0f5a3c15ff49c9eb31f2ad1ea244c openjpeg-libs-1.3-16.el6_8.x86_64.rpm Source: e48dcef19de9e4f41049d690eae143aa06058eb2d560530844ce3be500759ef6 openjpeg-1.3-16.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 20 Mar 2017 08:40:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0558 Critical CentOS 7 firefox Security Update Message-ID: <20170320084056.GA44240(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0558 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0558.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2ab96c7e804d0816c27341b2baceb6d9d12fa81cc2d3d16dd9421eda83ffd696 firefox-52.0-5.el7.centos.i686.rpm 58040774979bf3b82a7fd159b62e87e56b27d69097bab7181bf04b5b260ea354 firefox-52.0-5.el7.centos.x86_64.rpm Source: deb69db57f095fcc47ae7df159ae74d75c6150e4eec7dc1910863b8cefdc8ff4 firefox-52.0-5.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 145, Issue 8 ***********************************************

1 0

usb 3.1 support in CentOS 7
by Jerry Geis 20 Mar '17

20 Mar '17

Hi All - Been trying to find out if USB 3.1 support is in CentOS 7 and kernel 3.10 ? I see its in the 4.X kernel - but what about CentOS 7? Was hoping to make my external backups faster. Thanks, Jerry

2 1

upgrading Mysql 5.0.95
by Mark Weaver 20 Mar '17

20 Mar '17

Hi All, I'm getting things ready to upgrade my aging installation of MySQL 5.0.95 on my CentOS 5 LAMP server. With the impending EOL date of 3.31 fast approaching my sense of doom and urgency is increasing. I see that the necessary packages are available in @base and @updates - mysql51 and mysql55 respectively but from all the information I've read on the matter so far I'm left with a few questions I don't yet have answers to.' What I've done so far and thankfully was able recover from: 1. installed and enabled to epel repo - ran yum remove mysql - this command wanted to remove a few things I wanted to keep in place like dovecot and a few php53 packages. I didn't want to have to go back and clean up any messes that would create. So, I used the rpm -e --nodeps command to remove the MySQL packages. - because this was a redhat repo it installed the binaries in a total different place AND tossed all my existing data directories. and yes I spit coffee all over my laptop screen and yes, I did have data dir backups and a dump of MySQL data. HOLY CRAP! 2. removed the epel packages - disabled this repo - for ever at least for now... 3. reinstalled the old MySQL 5.0.95 packages - because I was hyper-ventilating - reset roots password - imported all the databases from the dump and checked my web apps - everything working again. - I did have to recreate the mysql.servers table to be able to flush privileges. I understand that mysql51 is available in @base for the sole purpose of upgrading old MySQL and mysql55 is in updates for getting to 5.5, however here is where things get a little fuzzy for me: Steps for Upgrading (as I understand them): 1. Take a dump of all mysql database using mysqldump --add-drop-database --all-databases 2. Stop mysql services 3. make a backup of data directories: /var/lib/mysql (but its not _supposed_ to remove the data directories.) 3. yum remove mysql mysql-server (again, it will include a few things I don't want removed. so, i'll have to use rpm -e --nodeps and list the packages for removal then issue yum clean all.' 4. yum install mysql51 5. start mysql service 6. run command mysql_upgrade... (here's where things start getting fuzzy) Question #1: is this command to be run from the commandline or should I log into mysql as root user and run the command? Question #2: at this point I will have mysql 5.1 installed and running but to get up to 5.5 am I expected to yum remove 5.1 and then yum install 5.5 from @updates and repeat steps 5 and 6 OR simply run the command yum update mysql51* to catch all already installed mysql51 packages to and then run the mysql_update command to bring data up to date with the current mysql install? THank you for your kind attention... -- Mark

4 7

Up to date guide/information Sendmail SMTP Auth
by Mark Weaver 19 Mar '17

19 Mar '17

Hello all, I've been googling my brains out since yesterday looking for up-to-date information on this matter, and have found information that is anywhere from 15 to 5 years old. I'd really like some information that much more up to date on the subject. Specifically configuring Sendmail SMTP authentication (_no smart host stuff_). I've got Sendmail 8.14 installed on a CentOS 7.3 server. Also installed: - Cyrus-sasl - Dovecot - Openssl Essentially everything I need except the working knowledge for the process. If someone knows where I might locate this information it would be greatly appreciated. thanks Mark

5 17

Centos-6.8 fsck and lvms
by James B. Byrne 18 Mar '17

18 Mar '17

I have a CentOS-6.8 system which has a suspected HHD failure. I have booted it into rescue mode from a CentOS-6.5 minimal install CD in order to run fsck -c on it. The system hosts several vms. I have activated the lvs associated with these vm using pvscan -s ; vgscan ; vgchange -ay. An lvscan shows the lvs as ACTIVE. None are mounted. When I try to run fsck on any of them I see the following error: fsck from util-linux-ng.2.17.2 e2fsck 1.41.12.(17-May-2010) fsck.ext2: No such file or directory while trying to open /dev/vg. . . The superblock could not be read or does not describe a correct ext2 filesystem. If the device is valid and it really contains an ext2 filesystem (and not swap or ufs or simething else), then the superblock is corrupt, and you might try running e2fsck with an alternate superblock: e2fsck -b 8193 <device> Trying to find alternate super-blocks proves futile: dump2fs /dev/sda2 | grep -i superblock dump2fs 1.41.12 (17-May-2010) dump2fs: Bad magic number in super-block while trying to open /dev/sda2 Couldn't find valid filesystem superblock The file systems on this host were all created as type ext4 and all are lvs with the exception of /boot, which is not an lv and has its own partition on /dev/sda1. I infer that the HDD is gone the way of all flesh; or ferrite as the case may be. But, my ignorance on this is profound so if I am missing some form of recovery step I would appreciate some guidance on how to proceed. Thanks, -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] [CentOS-announce] CEBA-2017:0392 CentOS 7 polkit BugFix Update
by Leonard den Ottolander 18 Mar '17

18 Mar '17

On Fri, 2017-03-03 at 13:26 +0000, Johnny Hughes wrote: > CentOS Errata and Bugfix Advisory 2017:0392 > > Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0392.html > 33395736c057583471a3e8d3554adb014d0d4cd167aa03bad5099c02faad1d38 polkit-0.112-11.el7_3.src.rpm Note that this update fixes neither the memory leak in the options parsing of the setuid binary pkexec, nor does it fix the memory leaks in pkcheck. https://googleprojectzero.blogspot.nl/2014/08/the-poisoned-nul-byte-2014-ed… https://bugs.freedesktop.org/show_bug.cgi?id=99626 https://bugzilla.redhat.com/show_bug.cgi?id=1418278 https://bugzilla.redhat.com/show_bug.cgi?id=1418287 https://bugzilla.redhat.com/show_bug.cgi?id=1418824 https://bugzilla.redhat.com/show_bug.cgi?id=1418825 Attached is a fix for these. Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

1 0

Re: [CentOS] frozen bubble for C7
by Scott Robbins 18 Mar '17

18 Mar '17

On Sat, Mar 18, 2017 at 07:16:08AM +0000, Miguel Medalha wrote: > > > > > Can't find perl(compress::bzip2) anywhere. > > Are you looking for this? (first hit on Google) > > http://search.cpan.org/~rurban/Compress-Bzip2-2.25/lib/Compress/Bzip2.pm > > Or this? > > ftp://195.220.108.108/linux/centos/7.3.1611/os/x86_64/Packages/perl-IO-Compress-2.061-2.el7.noarch.rpm > _______________________________________________ Definitely not the second one, as that makes no difference, (nor does having perl-Compress-Raw-Bzip2 which seemed a possibility. As for the first one you list, I see it is a Bzip2.pm and I note that I have that in a few different places, but frozen-bubble doesn't install for me. So, TL;DR Nope. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

1 0

CentOS-announce Digest, Vol 145, Issue 7
by centos-announce-request＠centos.org 18 Mar '17

18 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0527 Moderate CentOS 6 tomcat6 Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 17 Mar 2017 14:19:39 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0527 Moderate CentOS 6 tomcat6 Security Update Message-ID: <20170317141939.GA39564(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0527 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0527.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f64287823394f3d9d740b227a937b1de4ce02fbb1ae8889739b05ed65c940d00 tomcat6-6.0.24-105.el6_8.noarch.rpm d0591d641d9b3108a67690f13904d4e2365e8c5a8934eda37078e28e22ecb009 tomcat6-admin-webapps-6.0.24-105.el6_8.noarch.rpm edfa8cf02e4ef510fefd95b3d20fbac303a21d0db2102cf7d54b74aad8167551 tomcat6-docs-webapp-6.0.24-105.el6_8.noarch.rpm 60f0a75029377fd15564dd2f22ab6d13bc92883d72e262c55058d602e2528da1 tomcat6-el-2.1-api-6.0.24-105.el6_8.noarch.rpm 2c65091e26bb0bc15e257f2b4551fc5273b0593d29c40a3b9c6fcbc17cf81d23 tomcat6-javadoc-6.0.24-105.el6_8.noarch.rpm 27fb7034a285f3251ce6b436795ad8ab2035e7f21c26e82d01200bfb50bc8061 tomcat6-jsp-2.1-api-6.0.24-105.el6_8.noarch.rpm a54a224d39d3f4fd84209fa80b2854c59e239dd62b66f9126d4465550ade826d tomcat6-lib-6.0.24-105.el6_8.noarch.rpm 9821af169505129d5db326cd237121850c4238f9bc1da963ba8ae4fc2678e11f tomcat6-servlet-2.5-api-6.0.24-105.el6_8.noarch.rpm 4e3673601b91c8466cf84702176570e572ff786c083e59e0ad2bf609d06a4e79 tomcat6-webapps-6.0.24-105.el6_8.noarch.rpm x86_64: f64287823394f3d9d740b227a937b1de4ce02fbb1ae8889739b05ed65c940d00 tomcat6-6.0.24-105.el6_8.noarch.rpm d0591d641d9b3108a67690f13904d4e2365e8c5a8934eda37078e28e22ecb009 tomcat6-admin-webapps-6.0.24-105.el6_8.noarch.rpm edfa8cf02e4ef510fefd95b3d20fbac303a21d0db2102cf7d54b74aad8167551 tomcat6-docs-webapp-6.0.24-105.el6_8.noarch.rpm 60f0a75029377fd15564dd2f22ab6d13bc92883d72e262c55058d602e2528da1 tomcat6-el-2.1-api-6.0.24-105.el6_8.noarch.rpm 2c65091e26bb0bc15e257f2b4551fc5273b0593d29c40a3b9c6fcbc17cf81d23 tomcat6-javadoc-6.0.24-105.el6_8.noarch.rpm 27fb7034a285f3251ce6b436795ad8ab2035e7f21c26e82d01200bfb50bc8061 tomcat6-jsp-2.1-api-6.0.24-105.el6_8.noarch.rpm a54a224d39d3f4fd84209fa80b2854c59e239dd62b66f9126d4465550ade826d tomcat6-lib-6.0.24-105.el6_8.noarch.rpm 9821af169505129d5db326cd237121850c4238f9bc1da963ba8ae4fc2678e11f tomcat6-servlet-2.5-api-6.0.24-105.el6_8.noarch.rpm 4e3673601b91c8466cf84702176570e572ff786c083e59e0ad2bf609d06a4e79 tomcat6-webapps-6.0.24-105.el6_8.noarch.rpm Source: c645432afdc6023fe17ffcb90158a66e3742e6201fc27806cae722102c226ab9 tomcat6-6.0.24-105.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 145, Issue 7 ***********************************************

1 0

lock out account after 3 failures
by Ian Diddams 18 Mar '17

18 Mar '17

I’m looking to configure a centos 7 server to lock out anaccount after 3 login failures. I’ve followed this https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/ht… Section2.1.9.5 Account Locking And even rebooted the serverbut it doesn’t lock my test account out. login as: test test@X’s password: Access denied test@X's password: Access denied test@X's password: Access denied test@X's password: Access denied test@X's password: Last failed login: Wed Mar 15 15:44:37 GMT 2017 fromXXXXXX on ssh:notty There were 4 failed login attempts since the lastsuccessful login. Last login: Wed Mar 15 15:14:05 2017 from YYYYYYYYYYYYY [test]$ Meanwhile the secure log also shows Mar 15 15:44:27 testbox sshd[4051]: pam_unix(sshd:auth): authenticationfailure; logname= uid=0 euid=0 tty=ssh ruser= rhost=YYYYYYYY user=test Mar 15 15:44:29 testbox sshd[4051]: Failed password fortest from X port 57118 ssh2 Mar 15 15:44:29 testbox sshd[4051]: Failed password fortest from X port 57118 ssh2 Mar 15 15:44:33 testbox sshd[4051]: Failed password fortest from X port 57118 ssh2 Mar 15 15:44:35 testbox sshd[4051]:pam_faillock(sshd:auth): Consecutive login failures for user test accounttemporarily locked Mar 15 15:44:37 testbox sshd[4051]: Failed password fortest from X port 57118 ssh2 Mar 15 15:44:44 testbox sshd[4051]: Accepted password fortest from X port 57118 ssh2 Mar 15 15:44:44 testbox sshd[4051]:pam_unix(sshd:session): session opened for user test by (uid=0) Ie I can deliberately mangle the password three times,secure log shows the account has been locked out, but then I can immediatelystill log in. Has anybody a link to a configuration that works?cheers ian

3 3

Re: [CentOS] frozen bubble for C7
by Miguel Medalha 18 Mar '17

18 Mar '17

> > Can't find perl(compress::bzip2) anywhere. Are you looking for this? (first hit on Google) http://search.cpan.org/~rurban/Compress-Bzip2-2.25/lib/Compress/Bzip2.pm Or this? ftp://195.220.108.108/linux/centos/7.3.1611/os/x86_64/Packages/perl-IO-Compress-2.061-2.el7.noarch.rpm

1 0

laptop editing
by Michael Hennebry 17 Mar '17

17 Mar '17

How does one put centos on a laptop? My understanding that laptops no longer come with optical drives. Booting from an install disk would be difficult. >From https://wiki.centos.org/HowTos/Laptops : Preparation tasks Repartition your harddisk Backup your Master Boot Record (MBR) Modifying your bootloader My understanding is that most laptops have at most one harddisk. Can it really be unmounted for partitioning? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

6 7

PXE vmlinuz kernel doesn't recognize memory in Intel NUC?
by Locane 17 Mar '17

17 Mar '17

Hello all! I'm hoping someone can help. I'm having 2 issues; first: When trying to load a CentOS LiveCD via PXE on an Intel NUC (NUC6CAY), I get: "Not enough memory to load specified image". The image is 1.1 gigs, and there is 16 gigs of memory in the NUC. To combat this, I found this forum post <https://www.centos.org/forums/viewtopic.php?t=1398> which suggested using the "mem=" kernel parameter to manually set it. The next problem I get is one of two things: On a normal working system, I get the dots loading in PXE, then it freezes on "ready." forever On the NUC, I get a sqaushfs crash saying that the image is unusable. My questions are: Has anyone successfully used the "mem=" parameter in a PXE environment? I wasn't even aware that drivers were necessary for a kernel image to read RAM; I'd thought this was something that was just inherent. Does the CentOS PXE kernel need to be updated?

3 4

OT: hardware: blackmagic video capture cards
by m.roth＠5-cent.us 16 Mar '17

16 Mar '17

Hi, folks, I'm still trying to find a video capture card that won't crash Dell servers, and ran across a Blackmagic BDLKDUO2 DeckLink Duo 2. It claims to support Linux. I'm also seeing, in the few non-Blabkmagic or sales pages I can find, that they like "binary blobs". I also haven't been able to find anything about o/s or library requirements. Has anyone run across these cards, or know anything at all about them? All we're doing with them is running a few video cameras in for surveillance of our secure rooms, no audio, nothing fancy, with the motion package reading the input. mark

3 5

CentOS-announce Digest, Vol 145, Issue 6
by centos-announce-request＠centos.org 16 Mar '17

16 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0498 Important CentOS 5 thunderbird Security Update (Johnny Hughes) 2. CESA-2017:0498 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 3. CESA-2017:0498 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 4. CEEA-2017:0518 CentOS 7 kmod-redhat-megaraid_sas Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Mar 2017 16:45:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0498 Important CentOS 5 thunderbird Security Update Message-ID: <20170315164557.GA12852(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0498 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0498.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d845221ad2fdad1633ee7d41dfaa75654c0297b15d097a5a86548cd0377f91c7 thunderbird-45.8.0-1.el5.centos.i386.rpm x86_64: dcb7e0c426eddf342d66ca9996f5c082d78eeba75aef48a1ead6a7efacafe06f thunderbird-45.8.0-1.el5.centos.x86_64.rpm Source: b97f3870d9aa08a550eec0e539fbbc9599da7a356a3550fced80c0be03f942ab thunderbird-45.8.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 15 Mar 2017 16:51:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0498 Important CentOS 6 thunderbird Security Update Message-ID: <20170315165153.GA62402(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0498 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0498.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0692c96015dfc1686339c2ee2ec069b28d368e34384fdbd0e7e8b0d096a4a29f thunderbird-45.8.0-1.el6.centos.i686.rpm x86_64: 3d765bc15c4b7cd7edfcfbe591de7eeff3dc7c073c37820a7b153c47c55adbd5 thunderbird-45.8.0-1.el6.centos.x86_64.rpm Source: dbaee105c64165b7c960bf7e422987b8514e8b09c9cd88f68853058bb2b673c8 thunderbird-45.8.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 15 Mar 2017 17:43:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0498 Important CentOS 7 thunderbird Security Update Message-ID: <20170315174325.GA12678(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0498 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0498.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a0b3b41571f8e3bcd493b4e7eb723f6fb71e6a34ffa76411937bcdb12e89a0d6 thunderbird-45.8.0-1.el7.centos.x86_64.rpm Source: e1470568b06fe689923e752a97e06146bcc13009c7bb8c0ff8ce345c527499d7 thunderbird-45.8.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 15 Mar 2017 17:43:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:0518 CentOS 7 kmod-redhat-megaraid_sas Enhancement Update Message-ID: <20170315174357.GA12744(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:0518 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-0518.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ed979c3e0264765971802dcf126c98649e278f5c5fddd224d72e80b461826169 kmod-redhat-megaraid_sas-07.700.00.00-rh1.el7_3.x86_64.rpm Source: c0fdfc51f0e3795f1ce4b2efb303a815265a06619e1036d5bf09e057c94f15da kmod-redhat-megaraid_sas-07.700.00.00-rh1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 145, Issue 6 ***********************************************

1 0

Re: [CentOS] Fw: CentOS 6, flash-plugin crashing
by mark 15 Mar '17

15 Mar '17

On 01/30/17 19:27, Chris Olson wrote: > I have had other flash crashes. If you send me the radio station > links, I will give them a try on my CentOS 6.8 and my CentOS 7.xsystems. > > > On Monday, January 30, 2017 4:58 PM, "m.roth(a)5-cent.us" <m.roth(a)5-cent.us> wrote: > > > Anyone else seeing this? I'm playing streaming media, and after about 10 > or 15 min, flash-plugin crashes. I've had this happen today on streams > from two separate radio stations. > Sure: kutx.org (U of TX, Austin), and wqxr.org (NYC classical station). On both, I'm using their default player, which uses flash. A currently-updated flash-plugin, and firefox was just updated in the last week, with the critical update. mark

1 0

[Fwd: The CentOS list]
by Valeri Galtsev 15 Mar '17

15 Mar '17

Dear All, Mark has problem sending mail to centos(a)centos.org list... He has trouble with flash plugin on CentOS 6, please, take a look at his e-mail below. I'll try to see what I can do to help, but what I can do definitely is no match to Experts on this list. Thanks in advance! Valeri ---------------------------- Original Message ---------------------------- Subject: The CentOS list From: m.roth(a)5-cent.us Date: Mon, January 30, 2017 3:11 pm To: "Valeri Galtsev" <galtsev(a)kicp.uchicago.edu> -------------------------------------------------------------------------- Hi, Valeri, I've tried, twice, to post to the list today, and they neither show up, *nor* do I get a blocked message - they just go to /dev/null. The second was just a test, the first was asking if anyone else was seeing, with CentOS 6 (updated) flash-plugin crashing every 10-15 min. And there's no downgrade for it. mark ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

5 6

Updated webkit
by Jerry Geis 15 Mar '17

15 Mar '17

Has anyone updated their webkit in CentOS 7 to something much newer ? LIke 2.14.5 ? If so how might I do that. Thanks, Jerry

1 0

kernel 2.6.32-642.15.1.el6.x86_6
by m.roth＠5-cent.us 15 Mar '17

15 Mar '17

Folks, There's some kind of bug here, esp. with this kernel. We've got a cron yum update, and it fails, repeatably, un multiple machines. We reboot to the previous kernel, it comes up, we do a reinstall of the kernel modules, and everything's fine. I was thinking it was with yum, but the admin I work with says it happened today on some with no exlude=kernel\* in yum.conf. My manager's thinking that the initramfs isn't being rebuilt. Have other folks seen this? Not sure if the other admin's tested it on one of our upstream boxen. mark

1 0

Accountsservice in CentOS 7.3
by Gerhard Schneider 15 Mar '17

15 Mar '17

Is there any known problem with accountsservice-0.6.35-12 with NFS users? After logging in via lightdm they are not "remembered" and there is no entry created to /var/lib/AccountsService/users Downgrading to accountsservice-0.6.35-9 resolved that issue Gerhard Schneider -- Gerhard Schneider Institute of Lightweight Design and e-Mail: gs(a)ilsb.tuwien.ac.at Structural Biomechanics (E317) Tel.: +43 1 58801 31716 TU Wien / Vienna / Austria Fax: +43 1 58801 31799 A-1060 Wien, Getreidemarkt 9/BE02 http://www.ilsb.tuwien.ac.at/~gs/

2 1

Centos7 and apachectl
by Robert Moskowitz 15 Mar '17

15 Mar '17

I am looking at: https://httpd.apache.org/docs/2.4/vhosts/index.html I tried: |apachectl -S | And no output. Even stopping httpd, no output. How to we see how apache parsed the config files? thank you

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss