- Discuss - lists.centos.org

install woes
by Chuck Campbell 13 Apr '15

13 Apr '15

I'm really at a loss. I had 5.11 running on this machine, from this physical boot disk, until I stepped on /bin the other day. I've tried installing Centos 5.10 and 5.11 to this Seagate 1TB drive. Both installs run perfectly, but when I try to reboot, grub says Filesystem type unknown, partition type 0xee googling this indicates that the disk has a GUID partition table. This must have been done by the installer??? If so, why doesn't it get the boot loader set up correctly? Sigh, So stage two of the saga, I thought I would try to install CentOS 6.5 (I had the dvds burned already). It boots, but claims the install image is corrupt. I re-downloaded CentOS 6.6, verified the checksums and burned a new dvd set. it boots, but when I test the media, it says the same thing (install image has errors). If I try to skip media checks, it just ejects the disk and says insert the CentOS disk. I burned a new set of disks, identical behavior. I downloaded from a completely different mirror, validated checksums and burned new disks. I get identical behavior. I'm not sure what to do next, but I need to get this machine back up and running. I'm thinking of getting a different boot disk to install 5.11 to. I have no idea why CentOS 6.6 refuses to install. -chuck --

4 4

install problem
by Chuck Campbell 13 Apr '15

13 Apr '15

I shot myself in the foot today. I had a centos 5.11 install running fine. Doing a backup, I overwrote the /bin directory by mistake. I couldn't get my machine to recognize a centos 6.5 or 6.6 install dvd, so I put in the original centos 5.10 install disc and re-installed. No problem. During the text installer, I told it to install grub on /dev/sdc1, which is /boot. My raid arrays with lots of data (still intact) are /dev/sda and /dev/sdb, so I didn't want it to install grub on the MBR of /dev/sda. When I power it on, the kernel selection comes up, I select the (only) kernel and it says: Booting 'Centos (2.6.18-371.el5)' root (hd2,0) filesystem type is ext2fs, partition type is 0x83 kernel /vmlinuz-2.6.18-371.el5 ro root=LABEL=/ rhgb quiet Error 15: file not found Press any key to continue So it is finding the /boot/grub/grub.conf and reading it correctly. /boot (/dev/sdc1) actually contains the vmlinux-2.6.18-371.el5 file as well as all the other related files that belong there. I installed onto the same hard disk that the last OS was on, reformatting the /, /boot, /usr partitions and installing to them. /boot is /dev/sdc1 and / is on /dev/sdc5. No errors or problems in the install. should the root (hd2,0) line above actually read root (hd2,4) where the real / partition is (/dev/sdc5)?? I booted linux rescue with the 5.10 install disk, and I see that the /boot/grub/grub.conf file looks correct, and all the correct files are there in /boot. I am confused and don't know what to do next. thanks, -chuck --

2 4

6.5 install dvd won't
by Chuck Campbell 13 Apr '15

13 Apr '15

When I boot a machine from disc 1 of 2, Centos 6.5 install dvd, I get to a grub prompt. I have no idea what to do from there, but clearly something isn't right. Shoudl I try to download centos 6 again and burn new discs? thanks, -chuck --

3 3

Re: [CentOS] Access Problem after update to CentOS 7.1
by Don Vogt 13 Apr '15

13 Apr '15

I hope I am not just mudding the water but I ran into a problem in updating to 7.1 and a license accptance, which I solved - for me. I booted into a gui in 7.0, opened a terminal and issued a sudo yum update command. I don't know at this time whether that qualifies as a GUI update or a CLI update. After the update to 7.1, the reboot (in the terminal in X) hung up on a message that said something like " license not accepted. Enter y to accept or C to continue" I tried both and neither worked. I did some googling and found a bug (in Bugzilla I believe) from several months ago. It was against the initial-setup script. I didn't (and don't ) understand all they were saying about whether they need that block of code in the script. The thing that solved my problem was that it said the right answer is 1, and 2 "not Y and C". I am sorry I can't confirm this because I don't know how to run the initial-setup script now that I have managed to boot. I hope this helps someone.

1 0

disk order question
by Chuck Campbell 11 Apr '15

11 Apr '15

I'm not sure, but I think I may be having a disk order issue related to my installation woes. When I boot the installer, it sees /dev/sda and /dev/sdb on my 3ware disk controller (both multi TB raid 5 arrays). It also sees /dev/sdc, which is the target disk for the installation. The install runs fine (5.11, BTW) and tells me to reboot. My reboot fails. If I go into grub and do a find /grub/grub.conf it returns (hd0,0), not the (hd2,0) that the installer used to setup grub.conf, which indeed says root is /dev/sdc1 (hd2,0) My best guess is that when it tries to boot itself, my target disk for the install appears to be (hd0,0) or /dev/sda1 instead of (hd2,0) or /dev/sdc1 which is what the installer saw it as. What is my way forward for this. Is there a way to make the machine see my 3ware disks as /dev/sdc and /dev/sdd ? (like they used to be, according to my old /etc/fstab). Is there a way to make the install DVD see my target disk as /dev/sda and the 3ware disks as /dev/sdc and /dev/sdd? thanks, -chuck ANCHORFREE_VERSION="413161526"(function(){if(typeof(_AF2$runned)!='undefined'&&_AF2$runned==true){return}_AF2$={'SN':'HSSHIELD00ZZ','IP':'209.73.136.251','CH':'HSSCNL100550','CT':'z99','HST':'','AFH':'hss1122','RN':Math.floor(Math.random()*999),'TOP':(parent.location!=document.location||top.location!=document.location)?0:1,'AFVER':'4.12','FBW':'','FBWCNT':0};if(/^(.*,)?(11C)(,.*)?$/g.exec(_AF2$.CT)!=null){document.write("")}document.write(".AFc_body"+_AF2$.RN+"{} .AFc_all"+_AF2$.RN+",a.AFc_all"+_AF2$.RN+":hover,a.AFc_all"+_AF2$.RN+":visited{outline:none;background:transparent;border:none;margin:0;padding:0;top:0;left:0;text-decoration:none;overflow:hidden;display:block;z-index:666999;}");})();.AFc_body110{} .AFc_all110,a.AFc_all110:hover,a.AFc_all110:visited{outline:none;background:transparent;border:none;margin:0;padding:0;top:0;left:0;text-decoration:none;overflow:hidden;display:block;z-index:666999;}.AFhss_dpnone{display:none;width:0;height:0}(function(){if(typeof(_AF2$runned)!='undefined'&&_AF2$runned==true){return}_AF2$={'SN':'HSSHIELD00ZZ','IP':'209.73.136.251','CH':'HSSCNL100550','CT':'z99','HST':'','AFH':'hss1122','RN':Math.floor(Math.random()*999),'TOP':(parent.location!=document.location||top.location!=document.location)?0:1,'AFVER':'4.12','FBW':'','FBWCNT':0};if(_AF2$.TOP==1){document.write("")}})()

1 0

Netflix, CentOS-6 and Docker for the lazy
by Scott Robbins 11 Apr '15

11 Apr '15

This came up last month, so thought there might be some interest in it. Currently, CentOS-6.x's version of nss is too old to work with Netflix. Last month, there were a few posts mentioning the possibility of running a more recent version of chrome in Docker, so I made my own lazy person's howto. http://srobb.net/rhnetflix.html -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

1 0

CentOS-announce Digest, Vol 122, Issue 6
by centos-announce-request＠centos.org 11 Apr '15

11 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:0797 Moderate CentOS 7 xorg-x11-server Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 Apr 2015 12:06:39 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0797 Moderate CentOS 7 xorg-x11-server Security Update Message-ID: <20150410120639.GA8399(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0797 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0797.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9a513894b013da425a310f70ef2cd51366c0589bc373064244ad377af3dd5a4c xorg-x11-server-common-1.15.0-33.el7_1.x86_64.rpm 2c70206944b33221b458d73a433d09e03a245b7588b6336d174e03b415ae2b31 xorg-x11-server-devel-1.15.0-33.el7_1.i686.rpm 5d95103ad40a8d267155635b5caa711fc0c5babdd4afd8d4c71f9060c5e0c7ae xorg-x11-server-devel-1.15.0-33.el7_1.x86_64.rpm da352e8d7e9233902b8cbf23e110490a150badff8769b7ead55d85ca9750b723 xorg-x11-server-source-1.15.0-33.el7_1.noarch.rpm 3d7df2d9538974e18ebc15544478264566639636fcfe83a5d74226ad47f087b2 xorg-x11-server-Xdmx-1.15.0-33.el7_1.x86_64.rpm 457439475e9c9b3d1404f9c7871d8e9ba6f39bc6f59ac7116af49f117085d222 xorg-x11-server-Xephyr-1.15.0-33.el7_1.x86_64.rpm 36e1cceadcd4ee2c8aa653203e53011a273e2db634611e59a09df9eb0238a7a3 xorg-x11-server-Xnest-1.15.0-33.el7_1.x86_64.rpm 0950a666527abf801af14afd1347ffd04d13e94d8da82e58e8b6621b4044b737 xorg-x11-server-Xorg-1.15.0-33.el7_1.x86_64.rpm a0db62e25ad3c9bee5fad4b5272d4a68610f511bfb09e03a92a656cf30c26898 xorg-x11-server-Xvfb-1.15.0-33.el7_1.x86_64.rpm Source: b8107d5baa5ccea33bc4c837b8dacd889dc79d9d2ab91a1610a4d449a712d293 xorg-x11-server-1.15.0-33.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 6 ***********************************************

1 0

Re: [CentOS] CentOS 7.1 user login screen can't scroll up/down
by James B. Byrne 11 Apr '15

11 Apr '15

On Thu, April 9, 2015 13:12, zep wrote: > frankly, this blows my mind. not long ago there was a huge kerfuffle > over the change to only allow (as someone defined it 'secure') certain > passwords, requiring numbers, special characters, some minimum length > and that -had to be done- because people didn't use proper passwords > and couldn't be trusted to just use what was appropriate/correct > for their environment. > > now a completely reverse the position, plain text showing user names > to the world (which has always been considered to be poor security > at best) is just 'yeah, whatever you feel like doing. go ahead.' > User interface decisions are never driven by security. If security is mentioned then it is used as a fig-leaf to shut down dissent. Security when applied to these sorts of decisions is the patriotism of the FOSS world. The last refuge of scoundrels who have no desire to admit error and wish no discomfort from making any. The actual reasons for change usually come down to the aesthetic values of a small group of developers, or often a single individual, with the power to impose their vision on the rest of humanity. And the desire to do so. I cannot imagine why. . . -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Edit login user list on CentOS 6
by Richard 10 Apr '15

10 Apr '15

------------ Original Message ------------ > Date: Thursday, April 09, 2015 11:03:04 -0600 > From: Frank Cox <theatre(a)melvilletheatre.com> > > On Thu, 9 Apr 2015 12:58:18 -0400 > Alfred von Campe wrote: > >> The thread on the CentOS 7.1 user login screen reminded me of a >> small nagging issue I have on CentOS 6. We are using a Windows >> AD backend to authenticate users on our CentOS 6 systems. When a >> system is built, and nobody has yet logged into it, you have to >> enter your username in the login screen to log in. The next time >> you are the the login screen it lists all the users who have >> logged in (via the graphical login screen). This works great if >> this is your own desktop and nobody ever logs into it, but on a >> shared system the list can get very long. Does anyone know where >> this lists is kept? > > I think that you can exclude usernames from the list on Centos 6 > by making their user number less than 500. You can (also) exclude entries by enumerating them on an "Exclude=" line in the greeter section of /etc/gdm/custom.conf . Alternatively, you can suppress the list totally by changing the default of gdm->simple-greeter->disable_user_list with the gconf editor.

3 5

how can I tell what's on the MBR of /dev/sda?
by Chuck Campbell 10 Apr '15

10 Apr '15

Subject says it. I would like to find out if I have anything written on the MBR of a disk in my system /dev/sda, or any other device. If there is something there, is it readable, or recognizable to humans? thanks, -chuck

4 4

yum-config-manager, does --save/--setopt work?
by Adam Tauno Williams 10 Apr '15

10 Apr '15

What is the point of --save in yum-config-manager. I cannot figure out how to use --setopt= $ yum-config-manager --save --setopt="exclude=samba*" updates Seems evident what that should do, but it doesn't do anything. The documentation for --save says "save the current options (useful with --setopt)" I would like to script/automate some YUM configuration. -- Adam Tauno Williams <mailto:awilliam@whitemice.org> GPG D95ED383 Systems Administrator, Python Developer, LPI / NCLA

1 0

CentOS 7 auto mounting non authenticated users
by Michael Horne 10 Apr '15

10 Apr '15

Hi, I mentioned this issue in reply to "CentOS 7.1 user login screen can't scroll up/down" but heard nothing. We authenticate using NIS and our home directories are mounted via NFS. Once a user logs into a CentOS7 workstation their username appears in the login screen 'user list'. I have disabled the list but notice that after a reboot running mount -l shows all previously authenticated users home directories are being mounted over NFS again automatically. Is this normal? I have noticed some latency issues with the NFS and assume it is related, can anybody verify if this is a bug or a configuration error? Surely they shouldn't re-mount until the user authenticates again? thanks in advance, Michael

3 3

VPNC on CENTOS 7
by Samson 10 Apr '15

10 Apr '15

hi, Please can someone help on steps/how to setup vpnc client to connect to a remote server. Thanks and Regards. Samson.

3 3

CentOS-announce Digest, Vol 122, Issue 5
by centos-announce-request＠centos.org 10 Apr '15

10 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:0794 Moderate CentOS 6 krb5 Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 9 Apr 2015 11:47:52 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0794 Moderate CentOS 6 krb5 Security Update Message-ID: <20150409114752.GA34866(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0794 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0794.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 395aa571ff1ce0b19fb6f7615e3cd7ba1a44be0d97291d6768f70028621051c6 krb5-devel-1.10.3-37.el6_6.i686.rpm 5ea733d91e3d63148f3c9a9140dce4460b0e44d90ac8cefb32067e30da841964 krb5-libs-1.10.3-37.el6_6.i686.rpm 2a806635abf2bc7bc819e89a95ed644a06245deee7ab6b2124c8de6c7c64c23d krb5-pkinit-openssl-1.10.3-37.el6_6.i686.rpm be44fd07f926a391fb75caf3272b1239194b15d6637536e466331e5e58233e11 krb5-server-1.10.3-37.el6_6.i686.rpm db92cd8d4154bb6d66b05c160ee4c993cdc062be0222be7b9f27d6e50eb0af09 krb5-server-ldap-1.10.3-37.el6_6.i686.rpm 90ac4ccf98a4b56d76c5418bf88af5f6ac2951863a3a8822e6da3e30511cdfaf krb5-workstation-1.10.3-37.el6_6.i686.rpm x86_64: 395aa571ff1ce0b19fb6f7615e3cd7ba1a44be0d97291d6768f70028621051c6 krb5-devel-1.10.3-37.el6_6.i686.rpm d7c6513f3c96313d5f23c7211c9d2b8effb06199a1aaee82efa70cd58c26c437 krb5-devel-1.10.3-37.el6_6.x86_64.rpm 5ea733d91e3d63148f3c9a9140dce4460b0e44d90ac8cefb32067e30da841964 krb5-libs-1.10.3-37.el6_6.i686.rpm b1d47512686365f16bc55567ad6d57ed15982c6852ac6230e5d00c2a091428fe krb5-libs-1.10.3-37.el6_6.x86_64.rpm c8600323ef8c6e8102d2c675c60eb32d3f0d774878ec131084b1e0cf7265edac krb5-pkinit-openssl-1.10.3-37.el6_6.x86_64.rpm 2348489635b660b008b7e3570bc2f816d24d53da3ee64fffad49a798692902e0 krb5-server-1.10.3-37.el6_6.x86_64.rpm db92cd8d4154bb6d66b05c160ee4c993cdc062be0222be7b9f27d6e50eb0af09 krb5-server-ldap-1.10.3-37.el6_6.i686.rpm 5fe443372e9cd465648371fc6e144ba36a983e2332f2a2ca4308fa4a4e47f882 krb5-server-ldap-1.10.3-37.el6_6.x86_64.rpm dcd5f1801eb89556bf8b987f4af369653373d5938adfdddc0592be4c6ecf182a krb5-workstation-1.10.3-37.el6_6.x86_64.rpm Source: 44da125def3113c2ac45dc40ba7f7365126362bd19aeb7c67da1fa842ca9d2ae krb5-1.10.3-37.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 5 ***********************************************

1 0

Question centos 7 upgrade
by Günther J. Niederwimmer 10 Apr '15

10 Apr '15

Hello, I make a test installation with the new iso 1503-01 but I mean with this release is anything broken ? The first thing, is it "normal" with this release avahi-daemon is not installed! I disable this always ;-) The nfs-server installation don't work any more correct for me, I can't connect from a client? some packages are broken like firewall-config? Is it a better way to install the "normal" Centos 7 and afterward upgrade to Centos 7 1503. Thanks for a answer, -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer

1 0

DELL U2412M monitor slow boot
by hai wu 10 Apr '15

10 Apr '15

Using large Dell U2412M monitor here, with CentOS7. It is really slow to boot up, each time it would hang after the following messages for a very long time, with no logs, then it would continue to boot up fine: [ OK ] Reached target Initrd Default Target. Welcome to CentOS Linux 7 (Core)! This does not occur for other Dell monitor like DELL P190S. Any ideas?

3 4

centos kernel changelog?
by Matt Garman 09 Apr '15

09 Apr '15

I'm probably overlooking something simple, but I can't seem to find a concise changelog for the rhel/centos kernel. I'm on an oldish 6.5 kernel (2.6.32-431), and I want to look at the changes and fixes for every kernel that has been released since, all the way up to the current 6.6 kernel. Anyone have a link to this? Thanks! Matt

4 5

CentOS 7.1 user login screen can't scroll up/down
by Ole Holm Nielsen 09 Apr '15

09 Apr '15

After we upgraded our CentOS 7.0 desktops to CentOS 7.1, a critical error in the graphical login screen has appeared on all 7.1 machines: We have 100+ users defined in /etc/passwd, and a list of names is presented on the initial login screen. However, it's impossible to scroll up or down in this user list to select the desired user. The middle mouse button seems to be disabled, so scrolling has become impossible! One can use the left and right mouse buttons to select one of the users in view, but no one else. This seems definitely to be a critical bug in CentOS 7.1. Workarounds: 1. Log in non-graphically using Ctrl-Alt-F2, then run the command startx. 2. Trim down /etc/passwd to 1 (or a few) relevant users. -- Ole Holm Nielsen Department of Physics, Technical University of Denmark

10 17

Edit login user list on CentOS 6
by Alfred von Campe 09 Apr '15

09 Apr '15

The thread on the CentOS 7.1 user login screen reminded me of a small nagging issue I have on CentOS 6. We are using a Windows AD backend to authenticate users on our CentOS 6 systems. When a system is built, and nobody has yet logged into it, you have to enter your username in the login screen to log in. The next time you are the the login screen it lists all the users who have logged in (via the graphical login screen). This works great if this is your own desktop and nobody ever logs into it, but on a shared system the list can get very long. Does anyone know where this lists is kept? There are some systems where I want to edit the user list, but I have not been able to find it. Thanks, Alfred

2 1

The future of centos
by Francis Gerund 09 Apr '15

09 Apr '15

Almost everyone here has probably read this by now. If so, move along, nothing new here. But just in case you haven't, please take the time to read this. Here it is, in their own words: what Redhat thinks of Centos, and it's plans for the future of Centos. Can you read between the lines? In this case, it isn't very hard to do, IMHO. community.redhat.com/centos-faq

20 44

Update only of security vulnerabilities?
by Rafał Radecki 09 Apr '15

09 Apr '15

Hi All :) What is the best way to get a list of available security updates? I found several commands for that: 1) yum updateinfo list updates -q --security 2) yum list-security --security -q 3) yum --security check-update -q Based on the sample output below I think I can use any of the three with some awk to get a list of packages. yum updateinfo list updates -q --security FEDORA-EPEL-2014-0525 security libyaml-0.1.5-1.el6.x86_64 FEDORA-EPEL-2014-0990 security libyaml-0.1.6-1.el6.x86_64 yum list-security --security -q FEDORA-EPEL-2014-0525 security libyaml-0.1.5-1.el6.x86_64 FEDORA-EPEL-2014-0990 security libyaml-0.1.6-1.el6.x86_64 yum --security check-update -q libyaml.x86_64 0.1.3-4.el6_6 updates Then I can add this to nagios or cron to get a notification about available security updates. Do you see any advantages/disadvantages in using one of the three choices? How do you do this kind of task? What can you propose to get a notification about available security updates? BR, Rafal.

5 5

resource busy
by Michael Hennebry 09 Apr '15

09 Apr '15

How do I find whatever it is that wodim or readom thinks is using /dev/sr0 and kill it? So far, reboot is the only solution I've found that works. I don't like it. I want to be able to use my DVD-burner more than once without rebooting. lsof has not helped. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "SCSI is NOT magic. There are *fundamental technical reasons* why it is necessary to sacrifice a young goat to your SCSI chain now and then." -- John Woods

1 1

yum upgrade of an older 6.1
by John R Pierce 09 Apr '15

09 Apr '15

i fired up a vm i haven't used in ages, it was centos 6.1, so I ran yum update -y, and it bombed on package conflicts with matahari and qpid-something... I had no need for matahari (heck, I don't even know what it is), so I removed matahari-\* and the yum update succeeded, but shouldn't yum update be able to update ANY centos 6 to latest ? this system has NO extra repos, just CentOS-Base etc. -- john r pierce, recycling bits in santa cruz

2 1

Some subscribers posts to the list ending up in Gmail spam
by Andrew Holway 08 Apr '15

08 Apr '15

Did we work out the technical reason why some users that post to the list are getting dumped into gmail spam? Ta, Andrew

5 5

EPEL no php-pear package?
by James B. Byrne 08 Apr '15

08 Apr '15

Does anyone know what package provides the pear utility for php on CentOS? I tried installing a php-pear module from epel and got this error: Resolving Dependencies --> Running transaction check ---> Package php-pear-DB.noarch 0:1.7.13-3.el6 will be installed --> Processing Dependency: php-pear(PEAR) for package: php-pear-DB-1.7.13-3.el6.noarch --> Processing Dependency: /usr/bin/pear for package: php-pear-DB-1.7.13-3.el6.noarch --> Processing Dependency: /usr/bin/pear for package: php-pear-DB-1.7.13-3.el6.noarch --> Processing Dependency: /usr/bin/pear for package: php-pear-DB-1.7.13-3.el6.noarch --> Processing Dependency: /usr/bin/pear for package: php-pear-DB-1.7.13-3.el6.noarch --> Finished Dependency Resolution Error: Package: php-pear-DB-1.7.13-3.el6.noarch (epel) Requires: /usr/bin/pear Error: Package: php-pear-DB-1.7.13-3.el6.noarch (epel) Requires: php-pear(PEAR) You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest Thanks, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] The future of centos
by James B. Byrne 08 Apr '15

08 Apr '15

On Tue, April 7, 2015 12:48, Les Mikesell wrote: > > Seems odd to mention Oracle's name at all in the link without pointing > out that they have a product very similar to CentOS with the option to > purchase support. > For what it is worth. If RedHat (or someone else) offered support contracts for CentOS aimed towards the more 'self-help' type 'enterprises' then we would likely participate. We not prepared to install and run one copy of RHELx simply to be able to report bugs and get a modest amount of help via online channels. The administrative burden is simply not worth it. However, if one could purchase a company-wide support policy for CentOS based on the number of points of contact at the subscriber's end, regardless of the number of hosts running CentOS, then we would definitely be interested. Again, we are not interested in assuming the administrative burden of counting hosts on various VM platforms and physical units as they come and go simply to properly determine support fees. But restricting at our end who can report incidents and deal with the support contractors poses no significant difficulty at all. Just a thought. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 122, Issue 4
by centos-announce-request＠centos.org 08 Apr '15

08 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0781 CentOS 6 shadow-utils BugFix Update (Johnny Hughes) 2. CESA-2015:0783 Important CentOS 5 kernel Security Update (Johnny Hughes) 3. CEBA-2015:0793 CentOS 6 lftp FASTTRACK BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 7 Apr 2015 16:30:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0781 CentOS 6 shadow-utils BugFix Update Message-ID: <20150407163032.GA42527(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0781 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0781.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: eba572421ae5aa17dc7e081dbb3bcbbe57fdac179f3757c85e33f257ce2913c0 shadow-utils-4.1.4.2-19.el6_6.1.i686.rpm x86_64: dd1ee7bd797fb52fda1586d856c51b12c06fad013e42e6346571e3bed8dcfa72 shadow-utils-4.1.4.2-19.el6_6.1.x86_64.rpm Source: 17fa66c35c4dacbed3a25d24ffc92ef97f26fb6d8d1e7db9ea5d492c92f58b21 shadow-utils-4.1.4.2-19.el6_6.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 7 Apr 2015 22:09:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0783 Important CentOS 5 kernel Security Update Message-ID: <20150407220926.GA14481(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0783 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0783.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 475d837cc9924ceb14b456fd057de62b3d3cb6a3f7c53dd70fb7580ef91b05a5 kernel-2.6.18-404.el5.i686.rpm 6de0467ca5afb9c387d3a1e1862e5c12dbe479ae4e402106c35c5363e154cfa7 kernel-debug-2.6.18-404.el5.i686.rpm 6e77b4af2ca5ebe9023055a04db394242d2c869d36ed5dc8f7dadcb2b19623e2 kernel-debug-devel-2.6.18-404.el5.i686.rpm 5e4f4461d5d9478ad6af90d27d211a4b9be597874be003993fc0a9a66f96389b kernel-devel-2.6.18-404.el5.i686.rpm b06167dcc0b2aa0bc8c2080779e50a7f7c1bb5b5b936a1bf37753e6f9f4cc0a6 kernel-doc-2.6.18-404.el5.noarch.rpm c65ca33c3efe79b6186b5881f60d0e94373627a0579fc1590b0fda00267bf146 kernel-headers-2.6.18-404.el5.i386.rpm fae902613688df5506c07189d0220534c87df68e594e5361583f3c5edba66e8e kernel-PAE-2.6.18-404.el5.i686.rpm e466b09d80eb75290b75649ff1b18c6eb8879096f30b9065c78f9c50e4cfbaf4 kernel-PAE-devel-2.6.18-404.el5.i686.rpm a9631336b37f7e09734484879287cd3aa56754a33b5d418679d9c8b382da4c9d kernel-xen-2.6.18-404.el5.i686.rpm aa372175b7cd76d8657d942e86009478b519c85b993e084a95b41a2e7ebcc46c kernel-xen-devel-2.6.18-404.el5.i686.rpm x86_64: 43233e249ab68bbb983bca151e8147d2d508317c1cc046c16f4eac8313fe1639 kernel-2.6.18-404.el5.x86_64.rpm 7138275db21e8bfc76f53307f59b3368fd2f68847c86b8dcacdaa97a1b3cc96f kernel-debug-2.6.18-404.el5.x86_64.rpm 12af1d4746f82591999106dd6cf2feb37136b2c24463c195c76cc461391ec738 kernel-debug-devel-2.6.18-404.el5.x86_64.rpm b061f8582d90352035ae540b8584534aadc83e509b9901f5308ef1c3677bde2d kernel-devel-2.6.18-404.el5.x86_64.rpm b06167dcc0b2aa0bc8c2080779e50a7f7c1bb5b5b936a1bf37753e6f9f4cc0a6 kernel-doc-2.6.18-404.el5.noarch.rpm d05c43ade8337a751709becf0d40c71201258d984481fe0066b4e269a1415c08 kernel-headers-2.6.18-404.el5.x86_64.rpm 80ac6cf796fc9bf6271451e62534552669965cfb5d6ec63a49bb0db0e866b79b kernel-xen-2.6.18-404.el5.x86_64.rpm b8a76664d89a48a40a7e6d3f2711e291ef3a9528bae41e617fea0835e6656cb4 kernel-xen-devel-2.6.18-404.el5.x86_64.rpm Source: c3278c1370851b3db311e492e55329db086f74e72a5852029d4eb0235e0b721f kernel-2.6.18-404.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 8 Apr 2015 11:27:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0793 CentOS 6 lftp FASTTRACK BugFix Update Message-ID: <20150408112756.GA8250(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0793 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0793.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b0bd2688031fc57327e6f421c9fbd6c8cd5a8bc0f9b323cb3aae8852f209e4e5 lftp-4.0.9-6.el6.i686.rpm f3b6f43c1938941dd274558d5f329837530929933aac7fd412b24a7c12b7ce01 lftp-scripts-4.0.9-6.el6.noarch.rpm x86_64: b0bd2688031fc57327e6f421c9fbd6c8cd5a8bc0f9b323cb3aae8852f209e4e5 lftp-4.0.9-6.el6.i686.rpm 99f82e33cd92ff9522503f21face4a8df20641a11ff566f0b7a3672958214f30 lftp-4.0.9-6.el6.x86_64.rpm f3b6f43c1938941dd274558d5f329837530929933aac7fd412b24a7c12b7ce01 lftp-scripts-4.0.9-6.el6.noarch.rpm Source: 26789a7acc4e980ba85462731a385282621c0689d00d5a1ddad356a7a85aef6f lftp-4.0.9-6.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 4 ***********************************************

1 0

NFS Stale file handle drives me crazy (Centos 6)
by Götz Reinicke - IT Koordinator 08 Apr '15

08 Apr '15

Hi folks, I have a Centos 6 NFS server, which dirves me crazy. The directory I try to export cant be accessed by different clients. I tried a centos 7, centos 6 and a pool of vmware esxi 5.5 systems. At the client side I get errors like: mount.nfs: Stale file handle or Sysinfo set operation VSI_MODULE_NODE_mount failed with the tatus Unable to query remote mount point's attributes. On the server I get messages in the log like svc: 172.17.252.35, port=851: unknown version (0 for prog 100003, nfsd) rpc.mountd[1927]: authenticated mount request from .... The curious thing is, that other directories exported on the same filesysten can be exported. so /home/stuff works /home/students fails. chmode 777 is set, /etc/exports is double checked. nfs/rpc/etc is up and running. selinux & firewall for debugging off. I use xfs on all shared filesystems. Googling for VMWARE and native NFS suggestions did not help so far :-/ Any hint or suggestion is very very welcome! Regard & thanks . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

5 4

Linux Australia breached, personal details leaked
by m.roth＠5-cent.us 07 Apr '15

07 Apr '15

FYI, folks, Excerpt: Linux Australia discovered the breach on March 24 after it noticed conference management software it uses called Zookeepr started sending a large number of error reporting emails, Hesketh wrote. A server had been attacked two days prior. “It is the assessment of Linux Australia that the individual utilized a currently unknown vulnerability to trigger a remote buffer overflow and gain root level access to the server,” Hesketh wrote. The attacker installed a remote access tool and then botnet command and control software. --- end excerpt --- <http://www.cio.com/article/2906814/linux-australia-breached-personal-detail…> mark

4 3

Re: [CentOS] The future of centos
by SilverTip257 07 Apr '15

07 Apr '15

On Sat, Apr 4, 2015 at 12:46 PM, Andrew Holway <andrew.holway(a)gmail.com> wrote: > In the context of this discussion I would appreciate any feedback the list > might have on this article I wrote for my new company. > > http://otternetworks.de/tech/rhel-centos-brief/ Well put. For a non-technical person, your brief clues them in to the differences between RHEL and CentOS. And the reason both coexist. I do however agree with Valeri in that you probably (c|s)hould mention Debian in there somewhere. I realize you left Debian out because there is no official "enterprise" support entity as there is with Ubuntu. So at that point, maybe it's not worth mentioning Debian? > > > I for one welcome our Redhat overlords. I think they will provide better > governance which should give Centos better credibility as an Enterprise, > community supported operating system. > > On 4 April 2015 at 17:17, Lamar Owen <lowen(a)pari.edu> wrote: > > > On 04/04/2015 06:12 AM, Nux! wrote: > > > >> 100% with Digimer here. > >> > >> I think there are no conspiracy theories. IMO RedHat does not want nor > >> does it afford to mess up CentOS. > >> > >> All this energy should be put into contributing towards to the project, > >> testing, helping out community. > >> > >> Lucian > >> > >> > >> Agreed, and I want to thank you specifically for the nux dextop repo, > > which is in my standard installed repo set for EL6 and EL7. > > > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > http://lists.centos.org/mailman/listinfo/centos > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > -- ---~~.~~--- Mike // SilverTip257 //

3 2

Re: [CentOS] SEmodule dependency hell.
by James B. Byrne 07 Apr '15

07 Apr '15

On Wed, April 1, 2015 16:09, Andrew Holway wrote: > I used the command: semanage port -m -t http_port_t -p tcp 8000 > to relabel a port. perhaps you could try: > "semanage port -m -t unconfined_t -p tcp 8000" > Failing that; would it work to run your application in the httpd_t > domain? > I ended up having to create a custom policy to allow the other application to have access to the http_port_t context. Which is not an issue given that no httpd service is, or will ever be, installed on that host. However, it seems a rather dangerous hole in the logical design of SELinux that one cannot explicitly remove and reassign contexts to ports. In order to accomplish this on a system running httpd but attached to non-standard ports one perforce is required to cross link permissions between all of the affected processes. Which I cannot conceive as a security enhancement. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

tcsd service fails on boot because device missing
by Laurent Blume 07 Apr '15

07 Apr '15

Hello all, On CentOS 7.1, I activated the tcsd service. When I did it manually, it worked without problem, however, on reboot, I noted it was failed. I restarted it, and it worked immediately. But more reboots confirmed that it's always failing when the system starts. It seems the service is started too early, before the device it uses is created. Here's the logs: # journalctl -u tcsd -- Logs begin at Mon 2015-04-06 10:20:59 CEST, end at Tue 2015-04-07 10:11:37 CEST. -- Apr 06 10:21:38 server systemd[1]: Starting TCG Core Services Daemon... Apr 06 10:21:38 server systemd[1]: tcsd.service: control process exited, code=exited status=137 Apr 06 10:21:38 server systemd[1]: Failed to start TCG Core Services Daemon. Apr 06 10:21:38 server systemd[1]: Unit tcsd.service entered failed state. In syslog: Apr 6 10:21:38 server journal: TCSD TDDL[2557]: TrouSerS ERROR: Could not find a device to open! The device appears at about the same time, it must be a matter of seconds: crw------- 1 root root 10, 224 Apr 6 10:21 /dev/tpm0 Is that a bug of the service or something I can fix? Thanks! Laurent

1 0

filesystem corruption?
by m.roth＠5-cent.us 07 Apr '15

07 Apr '15

Got an older server here, running CentOS 6.6 (64-bit). Suddenly, at 0-dark-30 yesterday morning, we had failures to connect. After several tries to reboot and get working, I tried yum update, and that failed, complaining of an python krb5 error. With more investigation, I discovered that logins were failing as there was a problem with pam; this turned out to be it couldn't open /lib64/security/pam_permit.so. The reason for that was that it was a broken symlink, pointing to a file in the same directory, that actually existed in the /lib64. Checking other systems, I found it should, in fact, be a file, not a symlink. At this point, the system was considered suspect. I brought the system down, replaced the root drive, and rebuilt. I was not able to build it as CentOS 7, as something in the older hardware broke the install. CentOS 6 built successfully, and the server was returned to service. I then loaded the drive in another server, and examined it. fsck reported both / and /boot were clean, but when I redid this with fask -c, to check for bad blocks, it found many multiply-claimed blocks. First question: anyone have an idea why it showed as clean, until I checked for bad blocks? Would that just be because I'd gracefully shut down the original server, and it mounted ok on the other server? Mounting it on /mnt, I found no driver errors being reported in the logs, nor anything happening, including logons, before an automated contact from another server, which failed. AND I checked our loghost, and nothing odd shows there, neither in message nor in secure. At this point, I *think* it's filesystem corruption, rather than a compromised system, but I'd really like to hear anyone's thoughts on this. mark

4 3

Satellite sync (spacewalk) of configuration channels?
by Christopher Jacoby 06 Apr '15

06 Apr '15

Hello all. I have inter-Satellite sync set up and working on two Satellite servers downstream from a development Satellite server. Channels sync up fine, but I would like to sync up system groups and configuration channel content as well. Any ideas? Thanks, Chris

1 0

Import Nautilus file notes from C6 Gnome to C7 Mate
by Frank Cox 06 Apr '15

06 Apr '15

With C6 Gnome and C7 Mate you can right-click on a file icon, select Properties, select Notes, and write notes about your file. Does anyone know if those notes can be directly transferred between C6 Gnome and C7 Mate? I'm looking into upgrading someone's desktop machine to C7 and she has a lot of notes attached to her files that she doesn't want to lose. After doing a bit of experimenting, I think the notes are actually stored in a file named ~/.local/share/gvfs-metadata/home Can I just copy that "home" file into the new C7 Mate desktop and have the file notes move in automatically, or do I have to somehow extract the notes and re-import them? Any suggestions will be appreciated. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 1

Firewall-config NetworkManager Problem (Centos-7( 1))
by Günther J. Niederwimmer 06 Apr '15

06 Apr '15

Hello I installed the Firewall-config on a new system and have bad Errors The firewall-config brake with a error line 53 can't load NetworkManager and on a reboot I have this Message. ABRT hat 1 Fehler festgestellt. (Für weitere Informationen: abrt-cli list -- since 1428305986) [root@ipa1 ~]# abrt-cli list --since 1428305986 id 659c6c2d4ec4cc75b8e2156b5be69375e551b82a reason: firewall-config:34:<module>:ImportError: cannot import name NetworkManager time: Mo 06 Apr 2015 09:19:58 CEST cmdline: /usr/bin/python -Es /usr/bin/firewall-config package: firewall-config-0.3.9-11.el7 uid: 0 (root) count: 2 Directory: /var/tmp/abrt/Python-2015-04-06-09:19:58-3224 Have any a Hint? -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer

1 0

vncserver on centos 7
by Jerry Geis 06 Apr '15

06 Apr '15

Is there a way to make vncserver on centos 7 to be read only? I want to allow someone to connect and see the screen- but not change it of course. Thanks, jerry

2 1

Selinux issues with 7.1 update
by Joseph L. Casale 05 Apr '15

05 Apr '15

I am trying to update some local policies for bacula that allow a series of clients with pre run scripts to su in order to perform some preparatory work for a backup. With selinux enforcing, the su is denied obviously execute as bacula_t tries su_exec_t. You only see this with enforcing enabled? So creating an initial policy for that (this is not the way to do this) allows one more avc to appear for execute_no_ as bacula_t tries su_exec_t again. The problem is once these are enabled with local policies they seem to be ignored producing the same avc's. Why are the initial avc's not generated in permissive allowing a complete policy to be derived? If they can't appear in permissive mode, even after playing wackamole with avc's one by one, there is no resolution as they continue to get denied. Anyone else seeing similar or know what I am missing? Bacula-fd runs as root/root. Thanks, jlc

1 0

Re: [CentOS] Fail2Ban Centos 7 is there a trick to making it work?
by James B. Byrne 05 Apr '15

05 Apr '15

On Mon, March 9, 2015 13:11, John Plemons wrote: > Been working on fail2ban, and trying to make it work with plain Jane > install of Centos 7 > > Machine is a HP running 2 Quad core Xeons, 16 gig or ram and 1 plus TB > of disk space. Very generic and vanilla. > > Current available epel repo version is fail2ban-0.9.1 > > Looking at the log file, fail2ban starts and stops fine, there isn't > output though showing any login attempts being restricted. > > 2015-03-09 12:54:37,930 fail2ban.server [14805]: INFO > Stopping all jails > 2015-03-09 12:54:37,931 fail2ban.server [14805]: INFO > Exiting Fail2ban > 2015-03-09 12:54:38,338 fail2ban.server [16678]: INFO > Changed logging target to /var/log/fail2ban.log for Fail2ban v0.9.1 > 2015-03-09 12:54:38,341 fail2ban.database [16678]: INFO > Connected to fail2ban persistent database > '/var/lib/fail2ban/fail2ban.sqlite3' > > I copied jail.conf and added the edited jail.local to the directory > /etc/fail2ban/ > > This is about as far as I have gotten with searches on how to > configure > with Centos 7. > > Any help would be welcome. What am I missing? > > john > This is what I have for ssh in jail.conf [ssh-iptables] enabled = true filter = sshd action = iptables[name=SSH, port=ssh, protocol=tcp] sendmail-whois[name=SSH, dest=x(a)harte-lyne.ca, sender=x(a)harte-lyne.ca, sendername=Fail2Ban] logpath = /var/log/secure maxretry = 5 And this (among many others) is what we have in /etc/fail2ban/action.d cat /etc/fail2ban/action.d/iptables.conf # Fail2Ban configuration file # # Author: Cyril Jaquier # # [INCLUDES] before = iptables-blocktype.conf [Definition] # Option: actionstart # Notes.: command executed once at the start of Fail2Ban. # Values: CMD # actionstart = iptables -N fail2ban-<name> iptables -A fail2ban-<name> -j RETURN iptables -I <chain> -p <protocol> --dport <port> -j fail2ban-<name> # Option: actionstop # Notes.: command executed once at the end of Fail2Ban # Values: CMD # actionstop = iptables -D <chain> -p <protocol> --dport <port> -j fail2ban-<name> iptables -F fail2ban-<name> iptables -X fail2ban-<name> # Option: actioncheck # Notes.: command executed once before each actionban command # Values: CMD # actioncheck = iptables -n -L <chain> | grep -q 'fail2ban-<name>[ \t]' # Option: actionban # Notes.: command executed when banning an IP. Take care that the # command is executed with Fail2Ban user rights. # Tags: See jail.conf(5) man page # Values: CMD # actionban = iptables -I fail2ban-<name> 1 -s <ip> -j <blocktype> # Option: actionunban # Notes.: command executed when unbanning an IP. Take care that the # command is executed with Fail2Ban user rights. # Tags: See jail.conf(5) man page # Values: CMD # actionunban = iptables -D fail2ban-<name> -s <ip> -j <blocktype> [Init] # Default name of the chain # name = default # Option: port # Notes.: specifies port to monitor # Values: [ NUM | STRING ] Default: # port = ssh # Option: protocol # Notes.: internally used by config reader for interpolations. # Values: [ tcp | udp | icmp | all ] Default: tcp # protocol = tcp # Option: chain # Notes specifies the iptables chain to which the fail2ban rules should be # added # Values: STRING Default: INPUT chain = INPUT HTH -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

perf trace
by Александр Кириллов 05 Apr '15

05 Apr '15

# perf trace perf: 'trace' is not a perf-command. See 'perf --help'. Should 'perf trace' work in C6.6 or this is a bug related to https://bugzilla.redhat.com/show_bug.cgi?id=892893? # rpm -qa perf perf-2.6.32-504.12.2.el6.x86_64

1 0

systemctl (again)
by J Martin Rushton 05 Apr '15

05 Apr '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been trying to get the timidity system running as a daemon. I wrote the following init script: #!/bin/sh # # timidity # ### BEGIN INIT INFO # Provides: timidity # Required-Start: # Required-Stop: # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 # Short-Description: Add and remove timidity # Description: ### END INIT INFO . /etc/rc.d/init.d/functions RETVAL=0 PROG=timidity EXEC=/bin/$PROG PIDFILE=/var/run/timidity.pid function start { [[ -x $EXEC ]] || exit 5 echo -n "Starting $PROG: " $EXEC -iAD RETVAL=$? echo return $RETVAL } function stop { echo -n "Stopping $PROG: " killproc $EXEC -TERM RETVAL=$? echo return $RETVAL } case "$1" in start) start RETVAL=$? ;; stop) stop RETVAL=$? ;; status) status $PROG RETVAL=$? ;; restart) stop start ;; reload) stop start ;; *) echo $"Usage: $prog {start|stop|status|restart|reload}" exit 1 esac exit $RETVAL When run through systemctl during startup it fails: [root@tamar init.d]# systemctl status timidity timidity.service - LSB: Add and remove timidity Loaded: loaded (/etc/rc.d/init.d/timidity) Active: active (exited) since Thu ... Process: 784 ExecStart=/etc/rc.d/init.d/timidity start (code=exited, status=0/SUCCESS) ... Starting LSB: Add and remove timidity... ... Starting timidity: ... jack_client_new: deprecated ... Started LSB: Add and remove timidity. ... Cannot connect to server socket err = No such file or directory ... Cannot connect to server request channel ... jack server is not running or cannot be started ... Couldn't open output device But when run directly is works fine: [root@tamar init.d]# ./timidity start Starting timidity: TiMidity starting in ALSA server mode Opening sequencer port: 128:0 128:1 128:2 128:3 If I use # service timidity start it also fails. I _think_ that what is happening is that systemctl is stripping off the switch. I've spent a couple of hours searching for any links or explanation and got nowhere. I even knocked up a script to try and separate the two parts: #!/bin/sh cd /etc/init.d ./timidity start but to no avail. If there is a simple fix could someone point me there, if it's complex don't bother, I only need the daemon when running MIDI and can start it by hand. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJVHa+rAAoJEAF3yXsqtyBlKFUP/0olzOxF44xGa0/b1UI9LyKb 8LWLJ6XYXQfwJZvZ7N5v/r9g6WPesIuWf/TugXEz20MhrN0BhoqmUrkD9FjVnpFa B7zQxRQ/DUXs2Z/w2DCfHRs5QWr3o31EGNPw/cZtqMf2bq+Z0LXXlU6A4QozDFe8 Aq/ZYduOr5GG6D8DPRCSV2ggFGvs27I7vvp48bvCNZ4jh2dAjBSlygI42Koug2Ga UcAGllj4Litdm+O5hUpyPtsJC58umfNy4Lq9Y6HBxIpeZrioxNE+trNQHoZuzoP/ clLItDMwj990Hs7ft3eyt1oIihuCTsVQ3HOkn0fjZ0OAWPIudq7ZynzfHctMGtP2 Htx0A3coYxFFZ/fZZfYUkM4FQU6OA6fQ378u9hdxq9+XKayCh4938PZHmKjGHUTH DSu+iZVJ8DEc62pfgeLUWMidEgSu5/n5ROGIHed/wwt4nE6rGv/fz0D33ArMwD3t Ozybkt+FW2u8XK4qkA/ehgf3SBK4AIHMNg9IDWiWSaF4krQlInhKHGoCp1Xi1ISV 2C/Lb7exn2CX/Uohdhqy86HNOhHHbZ6mkOL1k8XTIIazjRWJWQ/+gkt6Bj39q+K8 NDnN03oVYsXgVz2nqFT3eQ001k/pRlkKn11ZYtEZ1fY77nzsOj+J3DD/txn8qTRi yNSvbWmxPj24hEVzSKu3 =CEIq -----END PGP SIGNATURE-----

5 15

Mysterious ICMP timeout?
by James B. Byrne 04 Apr '15

04 Apr '15

I am looking at these sorts of things as well: IN=eth0 OUT=eth1 SRC=129.250.200.121 DST=x.y.z.56 LEN=96 TOS=0x00 PREC=0x00 TTL=243 ID=32285 PROTO=ICMP TYPE=11 CODE=0 [SRC=x.y.z.56 DST=88.198.155.41 LEN=28 TOS=0x10 PREC=0x60 TTL=1 ID=1968 PROTO=UDP SPT=50131 DPT=6528 LEN=8 ] x.y.z.56 is a disused address in our netblock assignment. So whatever this is it is not legit. Does anyone recognize this? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] The future of centos
by James B. Byrne 04 Apr '15

04 Apr '15

On Fri, April 3, 2015 22:54, Always Learning wrote: > > On Fri, 2015-04-03 at 22:47 -0400, Digimer wrote: > >> No, people are speculating about the future of CentOS. > > . . . > The future is certain. To benefit from this free operating system, > tolerate the RH control and desire to ensure Centos and RHEL are not > exactly the same (including incompatible version numbers) or get > another operating system. It is that simple. > > Happy Easter to everyone. > > . . . There remain ClearOS and Scientific Linux. But, I am in no hurry to make any decision at the present time. I am not at all on-board with the "evil empire" takeover interpretation of recent events. I do not believe this to be the case. However, the golden rule holds that whoever pays the gold makes the rules. I do not think this situation will prove any different in the long run. When a "volunteer" board becomes dominated by a single commercial entity who pays employees to "volunteer" the long-term results are decisions that tend to favour that entity over all members. I have seen this happen first hand and our firm no long belongs to that particular national organisation in consequence. This is an interesting situation from a philosophical POV though. What are the ethics of attempting to monetize the intellectual property of others? What are the ethics of attempting to make use of the benefits that arise from that monetizing effort without paying for them? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64
by Ryan Qian 04 Apr '15

04 Apr '15

As a CentOs newbie, I'm not sure, will we still have CentOS 7.1 which derive from RHEL 7.1? or this is the new naming conversion for CentOS 7. Thanks! -Ryan > On Apr 1, 2015, at 12:30 AM, Karanbir Singh <kbsingh(a)centos.org> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > We would like to announce the general availability of CentOS Linux 7 > (1503) for 64 bit x86 compatible machines. > > This is the second major release for CentOS-7 and is tagged as 1503. > This build is derived from Red Hat Enterprise Linux 7.1 > > As always, read through the Release Notes at : > http://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 - these notes > contain important information about the release and details about some > of the content inside the release from the CentOS QA team. These notes > are updated constantly to include issues and incorporate feedback from > the users. > > - ---------- > Updates, Sources, and DebugInfos > > This merges in all base, updates, and CR (continuous release) > components released in the month of March 2015. If you have been using > the CR repos on your previous CentOS Linux 7 install, you already have > all the components used to compose this new release. > > As with all CentOS Linux 7 components, this release was built from > sources hosted at git.centos.org. In addition, SRPMs that are a > byproduct of the build (and also considered critical in the code and > buildsys process) are being published to match every binary RPM we > release. Sources will be available from vault.centos.org in their own > dedicated directories to match the corresponding binary RPMs. Since > there is far less traffic to the CentOS source RPMs compared with the > binary RPMs, we are not putting this content on the main mirror > network. If users wish to mirror this content they can do so using the > reposync command available in the yum-utils package. All CentOS source > RPMs are signed with the same key used to sign their binary > counterparts. Developers and end users looking at inspecting and > contributing patches to the CentOS Linux distro will find the code > hosted at git.centos.org far simpler to work against. Details on how > to best consume those are documented along with a quick start at : > http://wiki.centos.org/Sources > > Debuginfo packages are also being signed and pushed. Yum configs > shipped in the new release file will have all the context required for > debuginfo to be available on every CentOS Linux install. > > This release supersedes all previously released content for CentOS > Linux 7, and therefore we highly encourage all users to upgrade their > machines. Information on different upgrade strategies and how to > handle stale content is included in the Release Notes. > > For the CentOS-7 build and release process we adopted a very open > process. The output of the entire buildsystem is made available, as it > is built, at http://buildlogs.centos.org/ - we hope to continue with > that process for the life of CentOS Linux 7, and hope to attempt > bringing CentOS-5 and CentOS-6 builds into the same system. > > - ---------- > Release file handling > > This release splits the /etc/centos-release from /etc/redhat-release > to better indicate the relationship between the two distributions. > There are also changes to the /etc/os-release file to incorporate > changes needed by the new abrt stack. > > - ---------- > Download > > In order to conserve donor bandwidth, and to make it possible to get > the mirror content sync'd out as soon as possible, we recommend using > torrents to get your initial installer images: > > Details on the images are available on the mirrors at > http://mirror.centos.org/centos/7/isos/x86_64/0_README.txt - that file > clearly highlights the difference in the images, and when one might be > more suitable than the others. > > The sizes, sha256 sums and torrents for the ISO files: > > * CentOS-7-x86_64-Minimal-1503.iso > Size: 591396864 > Torrent: > http://mirror.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-Minimal-15 > 03.torrent > sha256sum: > 0b8482dc7e3076749f7fd914487ec6280539d3ba1f10c5b73c94b632f987f011 > > * CentOS-7-x86_64-DVD-1503.iso > Size: 4236247040 > Torrent: > http://mirror.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-DVD-1503.t > orrent > sha256sum: > 1817a1689b3c646a6473c93012e06307c6b659000ccffd188a3f4d0a0b531ba9 > > * CentOS-7-x86_64-Everything-1503.iso > Size: 7517241344 > Torrent: > http://mirror.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-Everything > - -1503.torrent > sha256sum: > 3cef58a3a03aff3ea194e63fdc95f03548b292e6f57e4a931a8d5453a6697661 > > * CentOS-7-x86_64-LiveGNOME-1503.iso > Size: 1124073472 > Torrent: > http://mirror.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-LiveGNOME- > 1503.torrent > sha256sum: > 2cfc9fab2edb0be51b75ee63528b61cad79489129d2aad1713eeed1b4117ab47 > > * CentOS-7-x86_64-LiveKDE-1503.iso > Size: 1310720000 > Torrent: > http://mirror.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-LiveKDE-15 > 03.torrent > sha256sum: > 6b2cd1c30092e9a141a458d40d0fcba74207b6c80e4f68dc7f800fbe1d7bae1b > > * CentOS-7-x86_64-LiveCD-1503.iso > Size: 729808896 > Torrent: > http://mirror.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-LiveCD-150 > 3.torrent > sha256sum: > 96ee805573d0617ee11704e7973b55387adef13c6efdc82d50d287dba00dfaf1 > > * CentOS-7-x86_64-NetInstall-1503.iso > Size: 377487360 > Torrent: > http://mirror.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-NetInstall > - -1503.torrent > sha256sum: > 498bb78789ddc7973fe14358822eb1b48521bbaca91c17bd132c7f8c903d79b3 > > The iso files are also available for direct download from > http://mirror.centos.org/centos/7/isos/x86_64 > > * CentOS 7 1503 Docker Container: ' docker pull centos' will now give > you the 1503 container image. You can see the official CentOS Linux > container tags at : https://registry.hub.docker.com/_/centos/ > > - ---------- > Special Interest Groups > > The CentOS Linux distribution is built, managed, and released by the > CentOS Core SIG. In addition, we also have the following SIGs that are > doing an amazing job expanding and building on the base Linux platform: > > * Cloud SIG @ http://wiki.centos.org/SpecialInterestGroup/Cloud is > working to deliver various cloud controller infrastructure including > OpenStack. They have a fully functional, feature complete RDO stack > now available for testing with CentOS Linux 7 at > http://buildlogs.centos.org/centos/7/cloud/openstack-rdo/ > > * Cloud Instance SIG @ > http://wiki.centos.org/SpecialInterestGroup/CloudInstance aims to > deliver VM images for use in various cloud and virtualised ecosystems > including AWS ( > https://aws.amazon.com/marketplace/seller-profile?id=16cb8b03-256e-4dde- > 8f34-1b0f377efe89 > ) and Docker ( https://registry.hub.docker.com/_/centos/ ) > > * Virtualization SIG @ > http://wiki.centos.org/SpecialInterestGroup/Virtualization includes > upstream virtualization and hypervisor related projects including Xen > ( http://www.xenproject.org ), oVirt ( http://www.ovirt.org/ ), and > Docker ( http://docker.io ). They also work to build and release > support tools around these virtualization technologies. > > * Storage SIG @ http://wiki.centos.org/SpecialInterestGroup/Storage > includes the Gluster Project ( http://www.gluster.org/ ), Ceph ( > http://ceph.com ), OpenAFS ( http://www.openafs.org ) and the SCST > project ( http://scst.sourceforge.net/ ). Gluster builds for CentOS, > that track upstream community code are available for testing now at > http://buildlogs.centos.org/centos/7/storage/gluster/ > > * Software Collections SIG @ > http://wiki.centos.org/SpecialInterestGroup/SCLo is working on > documenting and then delivering software collections built for newer > versions of in-distro content. Their aim is to deliver a community and > contributor friendly mechanism for SCL's in an easy to consume format. > > * Atomic SIG @ http://wiki.centos.org/SpecialInterestGroup/Atomic is > working on building, maintaining, and delivering a CentOS Atomic host > ( http://projectatomic.io ). Testing and development builds including > AWS EC2 instances and Vagrant boxes are now available at > http://wiki.centos.org/SpecialInterestGroup/Atomic/Download > > In addition to these, the CentOS Artwork and CentOS Promo SIGs help > with promo content and helping organise Dojos around the world. > > SIGs are a great way for people to come together and deliver content > around a specific area into the wider CentOS ecosystem and we welcome > groups to come together with low barriers to entry and plenty of > resources to offer the groups. Details on the process can be found at > http://wiki.centos.org/SpecialInterestGroup > > - ---------- > Dojo > > We try and organise Dojos in various parts of the world as a one day > event, to bring together people who use CentOS and others who are keen > to learn about CentOS. The day's focus is on sharing technical > knowledge and success stories. It's also a great place to meet and > talk about upcoming technologies and learn how others are using them > on CentOS Linux. > > In the coming months we hope to host events in London, Bangalore, > Sweden, Germany, Spain, and in many parts of the USA. If you would > like to help organise a Dojo, do drop by the centos-promo list at > http://lists.centos.org/mailman/listinfo/centos-promo > > - ---------- > Getting Help > > The CentOS ecosystem is sustained by community driven help and > guidance. The best place to start for new users is at > http://wiki.centos.org/GettingHelp > > - ---------- > Contributors > > This release was made possible due to the hard work of many people, > foremost on that list are the Red Hat Engineers for producing a great > distribution, without them CentOS Linux would look very different. > > We are also looking for people to get involved with the QA process in > CentOS, if you would like to join this please introduce yourself on > the centos-devel list ( > http://lists.centos.org/mailman/listinfo/centos-devel ). > > > - ---------- > Thanks > > I would also like to thank our donors and sponsors for their continued > support for the project. And to everyone who contributed with ideas, > code, test feedback, and promoting CentOS Linux into the ecosystem. > > Enjoy! > > - -- > Karanbir Singh, Project Lead, The CentOS Project > +44-207-0094455 | http://www.centos.org/ | twitter.com/CentOS > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.14 (GNU/Linux) > > iQEcBAEBAgAGBQJVGsvBAAoJEI3Oi2Mx7xbt1xAH/0ZoWz65f/O8URzsleO4DaiD > Wy8YMWaPVTlLDnik7EukYSueT1bE9ziB3DxycQJVXz8HTABdjNugN6Ouy83bCY2a > 17t6F0VGY0ZRZe6Uqv8rb2xiFnFR/ssy9s921vJVcpzaSLgKl2/D5ed1aSsLaxLw > CdpYcC7t/8xbkpnCtoyQ2nko0Jzj8fYPr8wCUKTgnf0BXyXYYcuNsi+J6HKzlExc > KXHuvLDjXCjOVi4X7BLbn2F5N7bwBcmjYWC/hX1oAlD2uvbbNg/+mDbAu9QtWmeC > RthUq5uwpA05i9MvyMU5/ODS1NpIg3f+JybPLTp9zaFU6hXmJSvOR679wZbFdUc= > =Z60w > -----END PGP SIGNATURE----- > _______________________________________________ > CentOS-announce mailing list > CentOS-announce(a)centos.org > http://lists.centos.org/mailman/listinfo/centos-announce

26 93

Iptables config removed with 7.1 update
by Paul R. Ganci 04 Apr '15

04 Apr '15

I had turned off firewalld and was using iptables when I originally installed CentOS 7.0. Two days ago I upgraded my CentOS 7.0 to 7.1. Everything seemed to be fine. Today I discovered that my iptables configuration was removed with the update. Has anyone else experienced this on doing upgrade? Literally the /etc/sysconfig/iptables is gone and the /etc/sysconfig/iptables-config is the blank template that comes with the distribution. This seems to me to be a serious bug with the upgrade. -- Paul (ganci(a)nurdog.com) (303)257-5208

3 3

Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64
by Always Learning 04 Apr '15

04 Apr '15

Posted on behalf of Mark (m.roth(a)5-cent.us) who is currently experiencing technical difficulties with his Internet connection --------------------------------- > On Fri, 2015-04-03 at 11:23 -0400, Lamar Owen wrote: > >> I really think that if someone is actually interested in helping the project, rather than being a backseat driver and griping at every change ........ Y'know, the whole thread with the naming, and the comments that it had been discussed, but only on the devel list, and the talk of an "ambassador" or whatever.... Couldn't some upcoming change like this have been mentioned in centos-announcements, and make sure it went to all the centos mailman lists? mark

3 2

CentOS-announce Digest, Vol 122, Issue 3
by centos-announce-request＠centos.org 04 Apr '15

04 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Infra outage : bugs.centos.org (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Sat, 04 Apr 2015 12:01:35 +0200 From: Fabian Arrotin <arrfab(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] Infra outage : bugs.centos.org Message-ID: <551FB67F.9040305(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Due to a network routing issue happening outside of our infra, we have decided to migrate the CentOS bug tracker system (aka bugs.centos.org) to a new node today. Yesterday, around 2PM UTC, the company hosting the bugs.centos.org suffered from network connectivity loss (whole subnet not being routed/announced on bgp, etc ..). We've exchanged several phone calls to have an ETA, but it seems it was impossible to get any estimate. So, we decided to move the service to another node. (and service is now active). We had to restore the last good backup from that node, before machine was unreachable, so that means that we've lost some bug reports, and/or modified status/comments in the bug tracker. We're sorry for the inconvenience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlUftn8ACgkQnVkHo1a+xU5K9QCfd+7l8ZE3e5+0SkJRlcxOeIe4 qtUAn1KY0zRuXfQzyWBvMbnV4CAspwwc =ySbp -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 3 ***********************************************

1 0

Installing HomeBank on CentOS 7.1
by Jatin 04 Apr '15

04 Apr '15

Hi I have recently installed CentOS 7.1 on my laptop. Earlier i was using Ubuntu 14.04. I have managed to successfully install all the apps that i was using in ubuntu in CentOS 7.1 except for the app named as: HomeBank http://homebank.free.fr/ Here is the information about my system: [jatin@localhost ~]$ cat /etc/*release CentOS Linux release 7.1.1503 (Core) NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7" CentOS Linux release 7.1.1503 (Core) CentOS Linux release 7.1.1503 (Core) Here is the repo list that i have enabled and using so far: [jatin@localhost ~]$ yum repolist Loaded plugins: fastestmirror, langpacks Determining fastest mirrors * base: centos.excellmedia.net * epel: mirror01.idc.hinet.net * extras: centos.excellmedia.net * nux-dextop: li.nux.ro * updates: mirrors.fibo.vn adobe-linux-x86_64 2/2 repo id repo name status adobe-linux-x86_64 Adobe Systems Incorporated 2 base/7/x86_64 CentOS-7 - Base 8,652 epel/x86_64 Extra Packages for Enterprise Linux 7 - x86_64 7,602 extras/7/x86_64 CentOS-7 - Extras 79 nux-dextop/x86_64 Nux.Ro RPMs for general desktop use 1,919 updates/7/x86_64 CentOS-7 - Updates 300 Appreciate any help in this regard. Thanks Jatin

5 6

Explanation please?
by James B. Byrne 04 Apr '15

04 Apr '15

I am seeing log file entries like this: IN=eth0 OUT=eth1 SRC=109.74.193.253 DST=x.y.z.34 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=49692 PROTO=ICMP TYPE=3 CODE=3 [SRC=x.y.z.34 DST=109.74.193.253 LEN=94 TOS=0x00 PREC=0x00 TTL=53 ID=41330 PROTO=UDP SPT=34679 DPT=53 LEN=74 ] This is found on our gateway host. eth0 is the WAN i/f, eth1 is the LAN i/f. Our netblock is x.y.z.0/24. Can somebody tell me what this record is? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

unsetting/erasing an iptables mark
by Boris Epstein 03 Apr '15

03 Apr '15

Hello all, iptables provides a way to mark/tag packets for future identification/accounting, etc. A brief discussion of it is offered here: https://wiki.archlinux.org/index.php/Advanced_traffic_control Here is a more detailed description of the issue I am working on: http://lists.centos.org/pipermail/centos/2015-April/151245.html Getting to the crux of the issue as it stands now. I need to get rid of the mark on the packets after they have been processed by tc and sent on. That can be done by a VM down the line, too. Basic logic of the process should be: "anything that comes with a mark, erase that mark, send it on". Effectively, going off this syntax: iptables -A FORWARD -t mangle -i eth0 -j MARK --set-mark 6 I would need to be able to come up with something like --erase-mark or functional equivalent thereof. Any suggestions much appreciated. Cheers, Boris.

1 0

vncserver on CentOS 7
by Jerry Geis 03 Apr '15

03 Apr '15

I am trying to setup a centos 7.1 vncserver I cannot believe they went from a relatively easy process in 6 to the "crazyness" that is 7. I did the following: yum install tigervnc-server cp /lib/systemd/system/vncserver@.service /etc/systemd/system systemctl daemon-reload edit /etc/systemd.system/vncserver@.service and replace <USER> with myuser su - myuser run vncpassword to set password systemctl enable vncserver@. Says its enabled: systemctl list-unit-files | grep vnc vncserver@.service enabled using another machine to connect gives error about nothing there. netstat -tuln | grep 5900 gives nothing. What did I miss? Thanks, Jerry

5 7

Re: [CentOS] OT: Recommended anti-virus for Windows
by Always Learning 03 Apr '15

03 Apr '15

On Fri, 2015-04-03 at 10:17 +0300, Александр Кириллов wrote: > Paul, world's a big place. We just see many things differently. > The West pretends the rules invented by the West are universal. They are > not. Hi Александр (Aleksandr, Alexander), Agreed. The West is far from perfect and has a terrible history of supporting corrupt and brutal regimes as well as subverting some democratically elected governments that were not pro-USA. Any intelligent service would love to get internal access to as many computers as possible. Kasperski (from the largest country in the world) is a potential weakness. So too are the USA anti-virus Windoze packages which ignore penetrations by Uncle Sam (special 'virus' signatures accepted). Conversely non-Windoze machines running Linux, BSDs etc. are inherently more safe. It is good that many people from different countries, different religions, different customs and different daylight hours can peacefully unite in their collective use and enjoyment of Centos. > Je ne suis pas Charlie. Pourquoi ? Did those people, the attackers and their victims, really need to die ? We have only 1 life. Best regards, Paul.

1 1

OT: Recommended anti-virus for Windows
by J Martin Rushton 03 Apr '15

03 Apr '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry to mention the "opposition" here, but I have a family member's laptop to protect, and I'm not allowed to upgrade it to Linux. What's the current best recommendation? Thanks, MArtin -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJVHbCMAAoJEAF3yXsqtyBl4I8P/AsvH+cyGcG9PDtL8I091WJc jaAhT8Z77G8LBTNaCUi1NXaR3zYsxZ1LltS8MyyqpA+TZ5TkwGRI5V0g2h5owrXv vmFNHW4DQcnB5D4s5+B50lnjyIWgtLG0BKUwCgLik++U11umHd5sCTqXTaHzlyP8 Ndz2RAVEm9A8T3My7fKeVF+/c2pt6rKaRoifeTiH+IUnmvuFHPHuQEpLuOx0qKLH BCHyg7ZJcpwQEocYMhZu7JkZ/zg5/eCb+0HIq5qOCkeRj64ax0QOMzlvcScBRQDp tBzXIAXnFGMNmgE8tvD9Xh2Gi/OKx/bbqRdo8mMzUGUlWSErSt2UMPkpN3Vm3S2C wQhSqMoNnxWCypofazmIXH+TKn1/ipUhZXF3GcZsBYDfIb95kvdBrJm//QioI8Fy BFGc5Cj9DjXNxIbCfvQuyrG1RDdwHKjt/AMmoB0RXpSwhxRfS2749gyrkGXRUSSd IFRpX8Ds0quxx8D9YY96FYX4VbPFhFKIm64OigjLOenedek4A0TpUg7tF5HpyDA7 SXl/l9wFbqAOIKR+VYHIix9UPqxUkU/6fio1D/RhD+8gulY9Tj4Bx5vjpVkJm4wY +Dj0VZ6LyhhkkOTypvENrY2imyxJ+MQ/xKiBQCcvGJIkNcxKr3Xd9D6cFkkkZWR7 bAaC26I/cC4witLZSC2k =1XHp -----END PGP SIGNATURE-----

8 9

Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64
by James B. Byrne 03 Apr '15

03 Apr '15

On Thu, April 2, 2015 15:25, Jim Perrin wrote: > > > On 04/02/2015 01:28 PM, Phelps, Matthew wrote: > >> >> Soliciting our feedback *before* changing everything regarding >> release names would have been nice. > > We did. > > http://lists.centos.org/pipermail/centos-devel/2015-February/012873.html > > You mean this? On: Sun Feb 22 23:19:42 UTC 2015 Karanbir Singh mail-lists at karan.org wrote: >> We have also decided to split the /etc/redhat-release link >> to /etc/centos-release and use that as a way to better >> indicate what codebase the running CentOS Linux instance >> was derived from. >> >> Examples of what these files will look like in say March 2015 >> ( if .1 is released upstream by then ): >> >> ------------------- >> /etc/centos-release: >> CentOS Linux release 7.1.1503 (Core) >> >> /etc/redhat-release >> Derived from Red Hat Enterprise Linux 7.1 (Source) Hmmmmm. I wonder how the proposed 7.1.1503 became 7.1503 in practice. Bait and switch? Personally I do not care one way or the other what RH tells Centos to call itself. The priests can decide and the faithful can either put up with it or change pews. But I find it somewhat distressing to view otherwise intelligent people for whom I have a great deal of personal regard debase themselves with patently inadequate, and frequently deliberately misleading, justifications for unpopular decisions. BTW. What happens if a bad ISO gets spun, released and then is replaced in the same month? Does it become: 7.1504_a?; 7.1504b?; 7.1504_1?; 7.150403? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Community voice (was [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64)
by Tim Bell 03 Apr '15

03 Apr '15

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Karanbir Singh > Sent: 03 April 2015 01:00 > To: centos(a)centos.org > Subject: Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on > x86_64 > > On 02/04/15 21:35, Phelps, Matthew wrote: > > > See my reply earlier. The description of the centos-devel list says > > "this is strictly about development." > > > Matt, come join the contributor base - be a commnuity communication liason ( > or, I am sure we can find a title to quantify this ). > > stretching this a bit futher : lets see if we can find 10 people who might be > considered 'community beacons', who could / would act as commnuity comms > and liason to make sure we are driving in the right directions and communicating > things in the most impactful manner. > > I am willing to lobby the board to then allow this group to spectate and > feedback into Board Meetings ( we meet once a month ). > Limiting the influence of the community to spectate and feedback seems less than I would expect. If community involvement in governance is to be improved, it needs to be seen to make a difference. OpenStack has ambassadors (https://wiki.openstack.org/wiki/Community/AmbassadorProgram) and elections to the 1/3 of the board from the community. This is probably too heavy for CentOS but some form of community representation with a genuine voice in governance would seem reasonable for an open source project. However, with the board rules as defined in http://www.centos.org/about/governance/joining-the-project/, it is difficult for someone who is a user of CentOS as opposed to a developer to meet the merit criteria. The current CentOS board membership would benefit from more diversity and different outlooks to help identify changes which need further community input such as this one. > One data point I want to drop in here is that less than 0.1 % of the CentOS user > base has any contact with the project ( wherein I imply, lists + forums + irc + > bugs + wiki ), so we might need to spread the net wide to find a reasonable > representation. > > thoughts ? > The challenge here is to find the appropriate people to help since many will be paid for delivering value to their companies rather than being paid to work on CentOS. Given their limited time, I do not feel that requiring operators to follow a development list is the right solution to encourage more interaction. Tim > > -- > Karanbir Singh > +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh > GnuPG Key : http://www.karan.org/publickey.asc > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

5 4

Re: [CentOS] OT: Recommended anti-virus for Windows
by James B. Byrne 03 Apr '15

03 Apr '15

On Thu, April 2, 2015 17:11, J Martin Rushton wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Sorry to mention the "opposition" here, but I have a family member's > laptop to protect, and I'm not allowed to upgrade it to Linux. What's > the current best recommendation? > Thanks, We (Harte & Lyne Limited) formerly used F-Prot out of Iceland for the remaining MS based desktops. We are presently switching to ClamAV for Windows (http://www.clamav.net/download.html) Norton is better than nothing; but nowhere near adequate. The rest of the AV field I have no basis for evaluating. MicroSoft's SE has sort of dropped out of the AV race. See: http://www.howtogeek.com/173291/goodbye-microsoft-security-essentials-micro… -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

iptables marking and NAT issue
by Boris Epstein 03 Apr '15

03 Apr '15

Hello all, It appears that, for some reason I have thus far failed to understand when you use marking in iptables you then run into troubles if you attempt to do NAT (MAQUERADE). Let me describe this in more detail. We are attempting to use a network test environment named ATCD running it on a CentOS VM under VirtualBox. For more into on ATCD see: https://github.com/facebook/augmented-traffic-control The networking inside the VirtualBox environment is private so at some point before you get out of it you've got to have a NAT router - not necessarily on the same VM where the ATCD runs - which also is a router. Be that as it may, ATCD uses a combination of iptables marking and tc to degrade/control network transmission quality in accordance with your settings. And it seems to work just fine up until you reach the NATing router - at which point the transmission drops to very slow if not non-existent. An old article here makes a passing reference to a conflict between iptables marking and MASQ (NAT): http://tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.netfilter.html Unfortunately, the link to another text supposedly detailing how to deal with this is dead. Has anybody encountered this? Any tips on how to fix this issue? Thanks. Boris.

1 0

mounted NFS does not show in df -h
by Tim Dunphy 03 Apr '15

03 Apr '15

Hey guys, This is kind of odd, so I wanted to do a sanity check. I mounted an NFS share like so: [root@web1:~] #mount -t nfs nfs1.jokefire.com:/home /mnt/home Seemed to go ok. Then I took a look at the output of df -h and didn't see it! [root@web1:~] #df -h Filesystem Size Used Avail Use% Mounted on /dev/vda 40G 24G 14G 64% / devtmpfs 996M 0 996M 0% /dev tmpfs 1001M 0 1001M 0% /dev/shm tmpfs 1001M 101M 901M 11% /run tmpfs 1001M 0 1001M 0% /sys/fs/cgroup s3fs 256T 0 256T 0% /backup/cassandradb s3fs 256T 0 256T 0% /backup/mysql nfs1.jokefire.com:/var/www 20G 3.1G 16G 17% /var/www Yet, when I do a df -h on the directory I mounted the NFS share on, I see that it's mounted via NFS as expected: [root@web1:~] #df -h /mnt/home Filesystem Size Used Avail Use% Mounted on nfs1.jokefire.com:/home 20G 3.1G 16G 17% /mnt/home So, what do you think could be happening? Why is it that I can't see the output I'm expecting just by going df -h??? Thanks!! Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

2 1

can't mount an LVM volume inCentos 5.10
by Dave Stevens 03 Apr '15

03 Apr '15

I have a degraded raid array (originally raid-10, now only two drives) that contains an LVM volume. I can see in the appended text that the Xen domains are there but I don't see how to mount them. No doubt this is just ignorance on my part but I wonder if anyone would care to direct me? I want to be able to retrieve dom-0 and one of the dom-Us to do data recovery, the others are of no interest. Suggestions? Will rtfm if directed. Dave excerpt from failed mount attempts --------------- starting here ------------ root@Microknoppix:/home/knoppix# vgchange -ay bulkley Volume group "bulkley" not found root@Microknoppix:/home/knoppix# vgchange -ay /dev/VolGroup00/bulkley Invalid volume group name: VolGroup00/bulkley Run `vgchange --help' for more information. root@Microknoppix:/home/knoppix# vgimport -f VolGroup00 Volume group "VolGroup00" is not exported root@Microknoppix:/home/knoppix# vgchange -ay VolGroup00 8 logical volume(s) in volume group "VolGroup00" now active root@Microknoppix:/home/knoppix# lvscan ACTIVE '/dev/VolGroup00/Dom0' [40.00 GiB] inherit ACTIVE '/dev/VolGroup00/babine' [100.00 GiB] inherit ACTIVE '/dev/VolGroup00/centos-template' [100.00 GiB] inherit ACTIVE '/dev/VolGroup00/bulkley-old' [100.00 GiB] inherit ACTIVE '/dev/VolGroup00/ubuntu' [10.00 GiB] inherit ACTIVE '/dev/VolGroup00/morice' [200.00 GiB] inherit ACTIVE '/dev/VolGroup00/oldserver' [80.00 GiB] inherit ACTIVE '/dev/VolGroup00/bulkley' [100.00 GiB] inherit root@Microknoppix:/home/knoppix# mount /dev/mapper/VolGroup00 aa mount: special device /dev/mapper/VolGroup00 does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/bulkley aa mount: special device /dev/mapper/bulkley does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/dev/VolGroup00 aa mount: special device /dev/mapper/dev/VolGroup00 does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/dev/VolGroup00/bulkley aa mount: special device /dev/mapper/dev/VolGroup00/bulkley does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/dev/VolGroup00/LogVol00 aa mount: special device /dev/mapper/dev/VolGroup00/LogVol00 does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/dev/VolGroup00/LogVol00/bulkley aa mount: special device /dev/mapper/dev/VolGroup00/LogVol00/bulkley does not exist root@Microknoppix:/home/knoppix# mount /dev/VolGroup00/LogVol00/bulkley aa mount: special device /dev/VolGroup00/LogVol00/bulkley does not exist -- "As long as politics is the shadow cast on society by big business, the attenuation of the shadow will not change the substance." -- John Dewey

2 1

CentOS mailing list for/in Vietnamese
by Nguyen Hung Vu 03 Apr '15

03 Apr '15

Hello all, Any Vietnamese are on this list? How about creating a dedicated mailing list, for Vietnamese, in Vietnamese[1] for the community? Looking the the list of existing mailing list, I see that there are some language-specific communities already there[2] Ref. [1] http://lists.centos.org/mailman/listinfo/centos-vi <http://lists.centos.org/mailman/listinfo/centos-vi> (not exists yet) [2] List of available mailing lists on CentOS: http://lists.centos.org/mailman/listinfo/

1 0

Kernel panic, CentOS 7.1503 fully updated, with executing gkrellm.
by Lamar Owen 03 Apr '15

03 Apr '15

Just a heads up, since I know gkrellm is in EPEL and not in the main CentOS repos. However, something fairly fundamental has changed, as prior to updating, gkrellm worked fine, but now every time I execute gkrellm the kernel panics. I'm going to triage on a different machine, as the panic corrupted at least one system library used by nautilus, but rpm -Va is your friend in these situations, and yum reinstall is its close kin. So I would prefer to duplicate on a burner machine, and I'll try to get a snapshot of the panic. If anyone else wants to try to reproduce, simply try installing the current gkrellm from EPEL on a fully updated CentOS 7 machine and see if it panics on you. I kindof hope it's local to my machine and its configuration (/home is LUKS, for instance), and it would be great if someone could verify that.

4 9

emailing plain text to exchange/outlook
by Les Mikesell 03 Apr '15

03 Apr '15

I know this isn't CentOS-specific, but it is probably a common problem - does anyone have a solution? If you mail something that is plain text from linux a recipient using outlook, it will remove line breaks more or less randomly. There is a way to tell outook to put them back as you read each message, but most people just think I sent it wrong. Is there something you can do to make a plain text list show up correctly short of converting it to html with <br>'s? -- Les Mikesell lesmikesell(a)gmail.com

3 2

Boot Failure [Solved]
by pro alias 02 Apr '15

02 Apr '15

I writ: "The latest kernel kernel-3.10.0.229.1.2.el7.x86_64 appears not to like our Supermicro X9SBAA-F board. It fails on boot with the last message before panic being apic_timer_interupt ...." <snipped rest> It turned out that only one X9SBAA box was affected. Deleting and reinstalling the kernel did not fix the issue. The problem turned out to be the old "initrd" issue in grub.conf. We have seen this from time to time on updates in the past. The line: initrd /initramfs-3.10.0-229.1.2.el7.x86_64.img was missing from grub.conf. When manually inserted, the new kernel worked swimmingly. I suspect that this is related to updating grub either immediately before or after a new kernel is installed. It's just enough of an annoyance that someone with spare time on their hands might want to look in it.

2 1

Boot Failure Lastest CEntos 7 Kernel on X9SBAA-F Board
by pro alias 02 Apr '15

02 Apr '15

The latest kernel kernel-3.10.0.229.1.2.el7.x86_64 appears not to like our Supermicro X9SBAA-F board. It fails on boot with the last message before panic being apic_timer_interupt . Previous kernels load very well. We erased and reinstalled the kernel, it verifies good as does everything else using "rpm- qaV". Anyone have any ideas?? Pretty hard to troubleshoot when you just get the last few lines on the screen.

2 1

OpenSSL vulnerability fix
by Venkateswara Rao Dokku 02 Apr '15

02 Apr '15

Hi All, I wanted to fix the openssl vulnerabilities (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572) in my CentOS 5.5 and found out that 0.9.8zd has the fixes I am looking for (from the https://www.openssl.org/news/vulnerabilities.html link). But, When I tried to find the openssl-0.9.8zd rpm package, I did not find it in http://mirror.centos.org/centos/5/updates/x86_64/RPMS/. The latest that I could find was 0.9.8e-31-el5. Can you please help me on how can I find the rpm I am looking for or How can I fix the vulnerabilities.? Thanks for your help. -- Thanks & Regards, Venkateswara Rao Dokku.

3 4

low latency kernel?
by Les Mikesell 02 Apr '15

02 Apr '15

Someone recently posted on the x2go list that he had a problem with jerky videos playing remotely on Ubuntu, but solved it by installing a low latency kernel that was available as an alternative. That made me curious as to whether CentOS has an equivalent - or a way to build something similar. -- Les Mikesell lesmikesell(a)gmail.com

2 1

CentOS-announce Digest, Vol 122, Issue 2
by centos-announce-request＠centos.org 02 Apr '15

02 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:0771 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 2. CEEA-2015:0717 CentOS 7 tzdata Enhancement Update (Johnny Hughes) 3. CEBA-2015:0769 CentOS 6 libvirt BugFix Update (Johnny Hughes) 4. CEBA-2015:0772 CentOS 6 openssl BugFix Update (Johnny Hughes) 5. CESA-2015:0771 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 6. CESA-2015:0771 Important CentOS 5 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 1 Apr 2015 14:33:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0771 Important CentOS 7 thunderbird Security Update Message-ID: <20150401143326.GA46610(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0771 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0771.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7ebfced7a86fc0807143f90dbf4ca28fdd63b38d2cfe442fffbc8ca3d9395394 thunderbird-31.6.0-1.el7.centos.x86_64.rpm Source: 61228bdaf11280dbf4a5f9360fc668b3460f5f9cc8ec981a3efb808384207d86 thunderbird-31.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 1 Apr 2015 14:33:03 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0717 CentOS 7 tzdata Enhancement Update Message-ID: <20150401143303.GA46517(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0717 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0717.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 818c1d17d5adb9ab3d6757430050e8070e06e2af4ee54a1d8bdfb0cb460722ee tzdata-2015b-1.el7.noarch.rpm 71e6f2749ec0de934123278410f5df6209a4190d6e11081b47704930818abed5 tzdata-java-2015b-1.el7.noarch.rpm Source: 8ec69e7d73b7f0cd4cbef055142adf3c5098070bfdb2720e7c6a94614c66ab63 tzdata-2015b-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 1 Apr 2015 13:37:08 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0769 CentOS 6 libvirt BugFix Update Message-ID: <20150401133708.GA41162(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0769 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0769.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4ad971b924283fbc82dae8448ee1b66ecbc848ef04db26678c076ce7212f2170 libvirt-0.10.2-46.el6_6.4.i686.rpm 2c11678643a4b451f39126892d4760c819e2d10e17b7665438e5535710ad0821 libvirt-client-0.10.2-46.el6_6.4.i686.rpm 23285525bead07faa02d923eb7524ae5f5869b1dd87c4a1d3c44c9b3c3ed4102 libvirt-devel-0.10.2-46.el6_6.4.i686.rpm b04c0f7edbd1554eb510efc2974a7b4ba5207230c5b6697433eafbd677c19fd1 libvirt-python-0.10.2-46.el6_6.4.i686.rpm x86_64: 1c73ef3ecea2073fe7159f92c475c1332dbd54824897382304f520c8a33aed28 libvirt-0.10.2-46.el6_6.4.x86_64.rpm 2c11678643a4b451f39126892d4760c819e2d10e17b7665438e5535710ad0821 libvirt-client-0.10.2-46.el6_6.4.i686.rpm 653aa707dbcf4df2bba46c2324d5cbb98354d1b987eb67a7b1d26bea63e37601 libvirt-client-0.10.2-46.el6_6.4.x86_64.rpm 23285525bead07faa02d923eb7524ae5f5869b1dd87c4a1d3c44c9b3c3ed4102 libvirt-devel-0.10.2-46.el6_6.4.i686.rpm 0756926b4fd386e5ffc83182ef87cefc1aa9430c72514480ba6157cdc4a0f9b9 libvirt-devel-0.10.2-46.el6_6.4.x86_64.rpm 8a67dfcba8fe5f0cca99698b19241b84b31167ecb233644e70b81461e219981a libvirt-lock-sanlock-0.10.2-46.el6_6.4.x86_64.rpm 90c1e5d9057e403e2f351f0448c564e6e66958e7d8d0a8306854fb65fafc29f7 libvirt-python-0.10.2-46.el6_6.4.x86_64.rpm Source: 4a3e98c3a2c0e26729f92c5a5b14df9eb01ca9e2b485a512598a0ecce653ac30 libvirt-0.10.2-46.el6_6.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 1 Apr 2015 13:37:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0772 CentOS 6 openssl BugFix Update Message-ID: <20150401133732.GA41279(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0772 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0772.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 41659461dfbc5f9ad6f32bf6d01385d0612829409a357e38aa060365123e7052 openssl-1.0.1e-30.el6.8.i686.rpm c65591768da26f73430303389ef04d3e16f5fbad641ff6e5373cfea18172edec openssl-devel-1.0.1e-30.el6.8.i686.rpm 91af1b70c6cb34e72b607251fcbe1b7deaefb62305f880793b8e473222e77b97 openssl-perl-1.0.1e-30.el6.8.i686.rpm 450af614f5c7e43c3886f8157daa7562ff0262fb58935a3d25b2dedb36a6a2c7 openssl-static-1.0.1e-30.el6.8.i686.rpm x86_64: 41659461dfbc5f9ad6f32bf6d01385d0612829409a357e38aa060365123e7052 openssl-1.0.1e-30.el6.8.i686.rpm 61c7f512a888cf7b6e10077a834cdc6068ff2b5ef6ff3f46bc711d7280c9b97b openssl-1.0.1e-30.el6.8.x86_64.rpm c65591768da26f73430303389ef04d3e16f5fbad641ff6e5373cfea18172edec openssl-devel-1.0.1e-30.el6.8.i686.rpm f3f37c0e41241e075e337191221972db1d30a83e26a02308bf7e0a11adf205c7 openssl-devel-1.0.1e-30.el6.8.x86_64.rpm a69ab8b475b329367440c62abe428b4ea99ee66deea2c49c870f326e47ddab25 openssl-perl-1.0.1e-30.el6.8.x86_64.rpm 9e052cb778422d1353469c33f00790c2bd5a153882d90eca8925e58cbe069f3f openssl-static-1.0.1e-30.el6.8.x86_64.rpm Source: e7c3b41c56fd2e7a3816d94623f9cbe57b0f1539f84032672f0e48e75e9e3a6b openssl-1.0.1e-30.el6.8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 1 Apr 2015 16:12:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0771 Important CentOS 7 thunderbird Security Update Message-ID: <20150401161227.GA10302(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0771 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0771.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7ebfced7a86fc0807143f90dbf4ca28fdd63b38d2cfe442fffbc8ca3d9395394 thunderbird-31.6.0-1.el7.centos.x86_64.rpm Source: 61228bdaf11280dbf4a5f9360fc668b3460f5f9cc8ec981a3efb808384207d86 thunderbird-31.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 1 Apr 2015 18:06:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0771 Important CentOS 5 thunderbird Security Update Message-ID: <20150401180644.GA4611(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0771 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0771.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b923092c5411b96e3732b1a9a3491a43fa9ded362b2dfb91a8280447ac7c899d thunderbird-31.6.0-1.el5.centos.i386.rpm x86_64: bc45f9ffc81cdee944d9616d921277f73841be88edc06ddb336cf93473ad0a69 thunderbird-31.6.0-1.el5.centos.x86_64.rpm Source: b77452b4fdd245dcc599fba4b0624a3ce8ab1dc4c8ea41544079cb9b8768b06b thunderbird-31.6.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 2 ***********************************************

1 0

Centos7: start job running for dev/mapper-centos\x2dhome.device
by johan.vermeulen7＠telenet.be 02 Apr '15

02 Apr '15

Hello All, I have this Centos7 machine that"s dualbooted with Win7. It's Centos7 with Mate desktop. The upgrade to Centos7.1 was interrupted. I ssh-d into the machine and finished it manualy, by issuing the command package-cleanup --cleandupes and yum update Now I' missing some packages, after some reïnstalling, I can boot again. However, I can not log in. EM:apr 02 13:58:25 jvanbaekel lightdm[1596]: ** (process:2903): WARNING **: Failed to open CK session: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.ConsoleKit was not provided by any .service files So far I was not able to find out which pakages I'm missing for lightdm. Can anyone help me with this? greetings, Johan

1 1

os-release file doesn't match upstream?
by Stephen Harris 02 Apr '15

02 Apr '15

On a fully patched C7 machine... % cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) % cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7" In particular note the version ID is 7 On a RedHat machine: % cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.1 (Maipo) % cat /etc/os-release NAME="Red Hat Enterprise Linux Server" VERSION="7.1 (Maipo)" ID="rhel" ID_LIKE="fedora" VERSION_ID="7.1" PRETTY_NAME="Red Hat Enterprise Linux Server 7.1 (Maipo)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:redhat:enterprise_linux:7.1:GA:server" HOME_URL="https://www.redhat.com/" BUG_REPORT_URL="https://bugzilla.redhat.com/" REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 7" REDHAT_BUGZILLA_PRODUCT_VERSION=7.1 REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux" REDHAT_SUPPORT_PRODUCT_VERSION="7.1" Here the version ID is 7.1; different to CentOS. Is this a bug or is it deliberate? -- rgds Stephen

3 2

Centos 7 License???
by David A. De Graaf 01 Apr '15

01 Apr '15

Today I did a yum upgrade to my kvm'ized Centos 7 test machine (perhaps a bad day to do such a thing) and received new kernel vmlinuz-3.10.0-229.1.2.el7.x86_64, among many other things. When I rebooted, I was asked to confirm (or renew, or some such) my license. My LICENSE ??? I was booting in text mode and the actions required were a) unfamiliar, and b) hard to understand. As I recall, I had to read the EULA - a worrisomely Microsoftian demand - and accept it. Of course, the terms were pretty benign. Then I had to continue. I can't remember the exact language. Of course, now when I reboot, all this cruft is gone. Is this a cute April Fool joke? If not, WTF is going on? -- David A. De Graaf DATIX, Inc. Hendersonville, NC dad(a)datix.us www.datix.us A: Because people read from top to bottom Q: Why is top posting bad?

7 8

SEmodule dependency hell.
by James B. Byrne 01 Apr '15

01 Apr '15

I want you all to see what I went through trying to simply reassign (unsuccessfully) the context of a well-known port. To the best of my ability to recall none of the packages mentioned below are even installed on the host in question. Why are these dependices preventing me from removing a disused SELinux policy. I have done exactly that, reassign port contexts, in the past without encountering this situation. So it has to be a recent development. I am not against SELinux. We use it extensively. But this is not security it is simply BS. It is stuff like this that causes people to say just turn selinux off altogether. semodule -r apache libsepol.print_missing_requirements: awstats's global requirements were not met: type/attribute httpd_log_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r awstats semodule -r apache libsepol.print_missing_requirements: bugzilla's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r bugzilla semodule -r apache libsepol.print_missing_requirements: cobbler's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r cobbler semodule -r apache libsepol.print_missing_requirements: collectd's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r collectd semodule -r apache libsepol.print_missing_requirements: git's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r git semodule -r apache libsepol.print_missing_requirements: gpg's global requirements were not met: type/attribute httpd_sys_content_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r gpg semodule -r apache libsepol.print_missing_requirements: mediawiki's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r mediawiki semodule -r apache libsepol.print_missing_requirements: munin's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r munin semodule -r apache libsepol.print_missing_requirements: nagios's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r nagios semodule -r apache libsepol.print_missing_requirements: w3c's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r apache libsepol.print_missing_requirements: webadm's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r webadm semodule -r apache libsepol.print_missing_requirements: webalizer's global requirements were not met: type/attribute httpd_sys_content_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r webalizer semodule -r apache libsepol.context_from_record: type httpd_openshift_script_exec_t is not defined libsepol.context_from_record: could not create context structure libsepol.context_from_string: could not create context structure libsepol.sepol_context_to_sid: could not convert unconfined_u:object_r:httpd_openshift_script_exec_t:s0 to sid invalid context unconfined_u:object_r:httpd_openshift_script_exec_t:s0 libsemanage.semanage_install_active: setfiles returned error code 1. semodule: Failed! semodule -R [root@xnet241 ~]# semanage port -d -t http_port_t -p tcp 80 /usr/sbin/semanage: Port tcp/80 is defined in policy, cannot be deleted -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

How to decrypt rootpassword form kickstart file
by Jegadeesh Kumar 01 Apr '15

01 Apr '15

Hi Team, I have the kick start file where my root password is store like # Root password rootpw --iscrypted $1$1SItJOAg$UM9n7lRFK1/OCs./rgQtQ/ # System authorization information auth --useshadow --passalgo=sha512 Is there any way to decry pt the password and get it as plain text. I know single user mode works but my case it in remote site. Thanks, Jegadeesh

10 11

Release 7 1503 includes samba-common.i686 (breaks multilib installs)
by Benjamin Ash 01 Apr '15

01 Apr '15

Hi, Unfortunately we are getting multilib issues with the latest release of CentOS 7. It seems that samba-common.i686 conflicts with samba-common.x86_64, and therefore Yum multilib support. Is this expected? Thanks, -ben Transaction check error: file /usr/bin/net conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/pdbedit conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/profiles conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/smbcontrol conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/testparm conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 -- Benjamin Ash | Technical Manager - Intelerad RHCE +1-514-931-6222 ext. 7311 | bash(a)intelerad.com Website <http://www.intelerad.com/> | Twitter<http://www.twitter.com/intelerad> | LinkedIn <http://www.linkedin.com/company/intelerad-medical-systems> | Blog <http://intelerad-insider.com/> -- This email or any attachments may contain confidential or legally privileged information intended for the sole use of the addressees. Any use, redistribution, disclosure, or reproduction of this information, except as intended, is prohibited. If you received this email in error, please notify the sender and remove all copies of the message, including any attachments.

2 2

Thanks for 7.1
by Nux! 01 Apr '15

01 Apr '15

Just wanted to say "Thanks!" to the CentOS team for their efforts to put out a 7.1 release. Upgraded several systems, so far smooth sailing. Good job! -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

6 6

tc seems to have no effect on the NIC's
by Boris Epstein 01 Apr '15

01 Apr '15

Hello all, We have installed this network testing environment: https://github.com/facebook/augmented-traffic-control which seems pretty nice overall. It allows you to artificially degrade your network performance by issuing tc commands to directly affect your networking. I have it set up on two CentOS 6 machines - one a Dell server, one a VirtualBox VM. The tc syntax seems OK, it seems to all make sense - only it seems to have no effect whatsoever on the actual network performance. Hence the question: is there a known issue with tc? Am I perhaps missing some kernel modules, or do I perhaps now have some kernel parameters set correctly? Any insight will be helpful. Thanks in advance, Cheers, Boris.

2 1

Unexplained size difference with CentOS 7 (1503) -01 install media
by Greg Bailey 01 Apr '15

01 Apr '15

In the process of updating my copy of the CentOS 7 (1503) -01 install media, I notice that it's ~70MB larger than the image that it's replacing: $ rsync mirrors.kernel.org::centos/7.1.1503/isos/x86_64/*DVD*.iso -rw-r--r-- 4310695936 2015/03/31 17:05:50 CentOS-7-x86_64-DVD-1503-01.iso -rw-r--r-- 4236247040 2015/03/28 12:15:26 CentOS-7-x86_64-DVD-1503.iso But when I compare sizes using "du" on the mounted ISO files, I can't see any discernible difference: Original CentOS 7 (1503) DVD: $ du -ks /centos7/* 1 /centos7/CentOS_BuildTag 6148 /centos7/EFI 1 /centos7/EULA 18 /centos7/GPL 79428 /centos7/images 73378 /centos7/isolinux 281423 /centos7/LiveOS 3752743 /centos7/Packages 12696 /centos7/repodata 2 /centos7/RPM-GPG-KEY-CentOS-7 2 /centos7/RPM-GPG-KEY-CentOS-Testing-7 3 /centos7/TRANS.TBL Revised CentOS 7 (1503) -01 DVD with centos-release fix: $ du -ks /centos7-01/* 1 /centos7-01/CentOS_BuildTag 6148 /centos7-01/EFI 1 /centos7-01/EULA 18 /centos7-01/GPL 79428 /centos7-01/images 73378 /centos7-01/isolinux 281423 /centos7-01/LiveOS 3752745 /centos7-01/Packages 12696 /centos7-01/repodata 2 /centos7-01/RPM-GPG-KEY-CentOS-7 2 /centos7-01/RPM-GPG-KEY-CentOS-Testing-7 3 /centos7-01/TRANS.TBL Seems like a large delta in ISO size for not much of a change in content. Any ideas? -Greg

1 0

SELinux on CentOS-6.6
by James B. Byrne 01 Apr '15

01 Apr '15

I wish to reuse ports 80 and 443 for a different service. When I try to assign the port context for that service I get this: /usr/sbin/semanage: Port tcp/80 already defined When I try to delete the assigned context then I get this: semanage port -d -t http_port_t -p tcp 80 /usr/sbin/semanage: Port tcp/80 is defined in policy, cannot be deleted httpd is not installed on this host. But looking at the port context assignments I see this nonetheless: semanage port -l | grep ^http_port_t http_port_t tcp 80, 81, 443, 488, 8008, 8009, 8443, 9000 How do I rid myself of these artefacts and make the context assignments that I wish? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

mirrors still catching up and -01.iso images?
by Stuart Barkley 01 Apr '15

01 Apr '15

I'm watching a couple of mirrors catch up with the 7.1 release and am noticing some churn on the .iso images. It appears that new -01.iso versions are coming downstream while some of the mirrors apparently were getting different .iso images. The -01.iso versions look to be significantly larger than the previous non-01.iso versions (the -Minimal .iso appears to have gone from 560M to 630M for -01.iso). I'm not downloading the larger .iso image so don't know the actual content, but the md5/sha files also changed and some of the mirrored -01.iso versions appear to have different sizes (actually from the timestamps it looks like the non-01.iso versions might have been renamed -01.iso before being replaced with newer content). What is the difference between the non-01.iso versions and the -01.iso versions? Is this what we can expect with the monthly rebuilds? For tracability reasons, I don't like seeing different .iso images at different times. We really need to see consistent content on the distribution mirrors. Some of this may still be churn and one mirror may have run out of disk space (or otherwise be waiting for manual intervention). Stuart -- I've never been lost; I was once bewildered for three days, but never lost! -- Daniel Boone

1 1

kernel Panic on desktop
by James B. Byrne 01 Apr '15

01 Apr '15

I arrived at work this morning to find that my desktop unit (CentOS-6.6 KVM) halted with a kernel panic. I am not conversant with any way to save the console display in this case and there was rather a lot of text. I jotted down a few notes and power-cycled the unit to restart. which it did and I am using now to compose this message. The few notes that I manually copied, subject to transcription errors, were: ? pci-configure - slot 0x365.0x420 . . . pic (ed. note: transcription error? maybe pci?) . . . pciehpd - Tainted: G D -------- 2.6.32-504.12.2.el6.x86_64 #1 panic+0x17/0x16f . . . kvm 2998 cpu0 disabled: perfctr wrmsr 0xc1 data 0xabcd 1. Is there any way to get the entire console display following a panic as a text file? 2. I take that this points to a hardware issue of some sort. Any suggestions as to where I look? The system has two NICs but one is disused and has no cable. Following a update last year I began receiving console messages complaining about this state but ignored them. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] opendkim-2.9.0
by James B. Byrne 01 Apr '15

01 Apr '15

On Tue, March 31, 2015 16:18, Frank Cox wrote: > On Tue, 31 Mar 2015 16:11:38 -0400 > James B. Byrne wrote: > >> Does anyone have any idea what has happened and why I might be >> getting that message? > > I don't use that but have you checked to see if you now have a > "rpmsave" file left after installing the update? If so, that's your > old configuration and you might need to re-write the new configuration > file to incorporate your previous customization. > Yes that was the problem. The OpenDKIM maintainers deprecated a configuration option (SenderHeaders) that we were using so the opendkim service would not restart. So there was nothing listening at port 8891. Removing the optin fixed the problem. I can find no discussion of why this option was removed and the OpenDKIM readme (http://www.opendkim.org/opendkim-README) still makes reference to it as the preferred way of handling mailing lists. Go figure. B.T.W. Redhat has apparently 'fixed' (I think) Mailman to deal with the Yahoo/AOL - DMARC problems. But only in RHEL5 (so far). As they have moved all discussion of the bug behind a paywall I can no longer follow developments and so cannot be sure. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

LDAP TLS error -8023
by Paul R. Ganci 01 Apr '15

01 Apr '15

Can somebody tell me what this error means (server, domain etc. changed to protect the innocent)? ldapsearch -H ldap://ldapserv-1.example.com:389 -ZZ -W -D cn=Boss,dc=example,dc=com -b dc=example,dc=com uid=testuser homeDirectory ldap_start_tls: Connect error (-11) additional info: TLS error -8023:A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot. My google searches do not seem to provide any useful information. I am just looking for some hints as to what to look for in my configuration. I just don't know how to interpret this error message. I am sure it is trying to tell me something but I just don't know what. What is really strange is I have a second ldap server which replicates with this one. It works fine so I am pretty convinced the problem is not with the ldap configuration but rather something with the certificates and/or the setup. Thanks. -- Paul (ganci(a)nurdog.com) (303)257-5208

1 1

Release 7 1503
by Jerry Geis 01 Apr '15

01 Apr '15

Just updated to release 7 1503. CentOS team is awesome! I thought I read sometime back that the release was going to rebase to a newer gnome? Did that not happen? Is there a way to get release 7 to a later gnome version? Thanks! Looking forward to playing. Jerry

2 1

opendkim-2.9.0
by James B. Byrne 31 Mar '15

31 Mar '15

There was an update to opendkim 2.10.1 which I applied and now I am seeing this: warning: connect to Milter service inet:127.0.0.1:8891: Connection refused I tried to yum history rollback to 2.9.1 but that package has disappeared so I am evidently constrained to resolve this. Does anyone have any idea what has happened and why I might be getting that message? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Hdd maximum size
by donais 31 Mar '15

31 Mar '15

Server is a Lenovo RV-340 E2420 build 70AB001VUX 8go Support for Sata-3 6gbps and Raid-5 Did someone can tell if it can handle 6tb hard drives? -- Michel Donais

4 3

Building a newer glibc RPM for CentOS 6 and installing into an alternate path
by Alfred von Campe 31 Mar '15

31 Mar '15

We have a third party shared library from a vendor that requires glib 2.15 or newer. We are using CentOS 6.6 which comes with glibc 2.12, and I know it can’t be replaced as it’s an integral part of the OS. However, is it possible to build a glib 2.15 RPM from source to be installed in /opt/centos (or somewhere else other than /usr/lib) so that I can link the one application that requires the third party shared library with this version of glib? If so, does anyone have instructions on how to build such an RPM, or better yet, has already build such an RPM? Thanks, Alfred

7 10

upstart CentOS vs upstart Ubuntu is there any difference between them?
by reynierpm＠gmail.com 31 Mar '15

31 Mar '15

I'm moving some server configurations from Ubuntu Server 12.04 to CentOS 6.6. Now I'm working on `/etc/init` script that should be handled by `upstart` at both OS as far as I know. The files on both server are the same and I mean the same at content level and also at path level and permissions level, is the exactly copy from Ubuntu to CentOS. I'm having some issues with upstart at CentOS since scripts doesn't start and I can't find why (the cause). This is the output from `initctl list` at Ubuntu server: # Ubuntu 12.04 root@qa:/etc/init# initctl list // rest of processes goes here pdoneVendorBroker start/running, process 854 repToolBroker start/running, process 3705 emailBroker start/running, process 3738 cmeBroker start/running, process 3760 messageBroker start/running, process 3727 shareEventHandler start/running, process 3686 edetailBroker start/running, process 3749 pdoneLoginProctor start/running, process 3716 All the processes has been started at OS boot, that's fine. This is the output from CentOS server: # CentOS 6.6 root@staging:/etc/init# initctl list // rest of processes goes here pdoneVendorBroker stop/waiting repToolBroker stop/waiting emailBroker stop/waiting cmeBroker stop/waiting messageBroker stop/waiting shareEventHandler stop/waiting edetailBroker stop/waiting pdoneLoginProctor stop/waiting None processes has been started after OS boot, and that's wrong. Why? What I'm missing here? Can any give me some advice? At CentOS I've tried also to start the process manually by running this: initctl start messageBroker And this is the output at console: messageBroker start/running, process 3587 But if I run the command `initctl list` I didn't see the process started: initctl list rc stop/waiting tty (/dev/tty3) start/running, process 2565 tty (/dev/tty2) start/running, process 2562 tty (/dev/tty1) start/running, process 2558 tty (/dev/tty6) start/running, process 2577 tty (/dev/tty5) start/running, process 2574 tty (/dev/tty4) start/running, process 2571 plymouth-shutdown stop/waiting control-alt-delete stop/waiting debug stop/waiting rcS-emergency stop/waiting kexec-disable stop/waiting pdoneVendorBroker stop/waiting quit-plymouth stop/waiting rcS stop/waiting prefdm stop/waiting repToolBroker stop/waiting init-system-dbus stop/waiting emailBroker stop/waiting splash-manager stop/waiting cmeBroker stop/waiting start-ttys stop/waiting messageBroker stop/waiting shareEventHandler stop/waiting edetailBroker stop/waiting pdoneLoginProctor stop/waiting rcS-sulogin stop/waiting serial stop/waiting This is the content for the file `/ etc/init/messageBroker.conf`: description "messageBroker" start on runlevel [234] stop on runlevel [0156] respawn exec php /usr/local/bin/messageBroker/messageBroker.php post-start script PID=`status messageBroker| egrep -oi '([0-9]+)$' | head -n1` echo $PID > /var/run/messageBroker.pid end script post-stop script rm -f /var/run/messageBroker.pid end script Why it's not starting? What is wrong?

1 0

heavy IO load when working with sparse files (centos 6.4)
by Ron E 31 Mar '15

31 Mar '15

Dear List, We have noticed a variety of reproducible conditions working with sparse files on multiple servers under load with CentOS 6.4. The short story is that processes that read / write sparse files with large "holes" can generate an IO storm. Oddly, this only happens with holes and not with the sections of the files that contain data. We have seen extremely high IO load for example copying a 40 or 80gb sparse file that only has a few gigs of data in it. Attempts to lower the io priority and cpu priority of these processes do not make any measurable difference. (ionice, nice) This has been observed with processes such as: cp rsync sha1sum The server does have to be under some load to reproduce the necessary conditions. The cases we have seen involve servers running 10-30 guests under kvm. Load is in acceptable norms when the processes are run, such as load avg 5-15 on a 24 core (12 core with HT enabled) server. We also verify before starting such a process that the spindle with the file we're working on is not being unduly hammered by another process. These servers have one hardware raid controller each (Dell H700 controller with write cache enabled) and multiple raid arrays (separate sets of physical spindles). Interestingly, the IO storm is not limited to the array / spindles where the sparse file resides but affects all IO on that server. We have looked extensively and not found any account of a similar issue. We have seen this on configurations that are 'plain vanilla' enough to think that this is not something specific to our environment. Wondering if anyone else has seen this and if any suggestions on gathering more data / troubleshooting. We wonder if we've found either a raid controller driver issue, an OS issue or some other such thing. What seems to point in this direction is that even with ionice -c3 which should prevent the process from using IO unless the storage is idle, an io storm which appears to saturate the entire raid bus on a given server can occur. Thanks in advance.

3 3

NTLM Authentication ISA Server
by Tim 31 Mar '15

31 Mar '15

Hello list, how can I get CentOS 7 to authenticate against a Microsoft ISA server for package installations after the OS is installed. In Debian/Ubuntu apt.conf just needs to be edited and it works. How to do so in CentOS? Regards Tim

4 6

CentOS-announce Digest, Vol 121, Issue 13
by centos-announce-request＠centos.org 31 Mar '15

31 Mar '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0754 CentOS 6 cronie FASTTRACK BugFix Update (Johnny Hughes) 2. CEBA-2015:0755 CentOS 6 pinentry FASTTRACK BugFix Update (Johnny Hughes) 3. CESA-2015:0750 Moderate CentOS 6 postgresql Security Update (Johnny Hughes) 4. CEBA-2015:0756 CentOS 6 gnome-terminal BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 30 Mar 2015 13:24:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0754 CentOS 6 cronie FASTTRACK BugFix Update Message-ID: <20150330132420.GA60530(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0754 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0754.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 28de493fc3a314d52bb60c96688fd807c986e4a3885be4eb339c696229dd6b7c cronie-1.4.4-15.el6.i686.rpm ec22b667ff1f9f11ad54f9cb8eeaaf1fcbea2c4eb2a96f655bea877084b739ef cronie-anacron-1.4.4-15.el6.i686.rpm 5223d45f4a40ae9b521844f666504d55778e166f1c5cd8e8dc92bfd3ac22a2b6 cronie-noanacron-1.4.4-15.el6.i686.rpm x86_64: d2238fa4100380f7607393e48345614bc90e1385f1426dc1269c40b01f07b4bb cronie-1.4.4-15.el6.x86_64.rpm f3ea8f9f6fe548d64699592ccbe326ed474f7b1ae17df7a35b3010b419ed26d0 cronie-anacron-1.4.4-15.el6.x86_64.rpm 606d1a6d304f77eb0e05259fcc1e56391073469f4603040e32ba5637e17a34d6 cronie-noanacron-1.4.4-15.el6.x86_64.rpm Source: eba4bb44466ffc8965cd6f3e58e298ad522b0e95eca38cbc2f3b4521500b80ac cronie-1.4.4-15.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 30 Mar 2015 13:24:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0755 CentOS 6 pinentry FASTTRACK BugFix Update Message-ID: <20150330132444.GA60799(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0755 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0755.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d1f4465b64e0161267195bb8fe53f9a8b5b1ee6e6159c3a6f983deae186bda0e pinentry-0.7.6-8.el6.i686.rpm ff437591b4f488bb9e7536e66495fe43ec35c58425b57cabc89e1d066e0365ec pinentry-gtk-0.7.6-8.el6.i686.rpm f72857f70505a1533aa91203b0d2e2b9de4d23b34ea170ea2202073b2ad2705e pinentry-qt-0.7.6-8.el6.i686.rpm 2b5d65c30499cc59b4eeb23b8f166c4511d0419250efa54414fc82c32c51e4c4 pinentry-qt4-0.7.6-8.el6.i686.rpm x86_64: 6c0de956f85b7f1f86b258462fb2546ee8f7f4f3b9e6eecd26a1ea80541964fe pinentry-0.7.6-8.el6.x86_64.rpm 335fec896578be4933278eb11d00a5613092f8e4a94f71339cd445b727bdc05e pinentry-gtk-0.7.6-8.el6.x86_64.rpm fb70a14ae035381aec2b738e8eb807bc61bdbe1dbda8fa5fb45cf003a8de8eb9 pinentry-qt-0.7.6-8.el6.x86_64.rpm e020b8d550bcdeac8b0842500592c857ad5fb4ca0b9938423162f420b39e5e02 pinentry-qt4-0.7.6-8.el6.x86_64.rpm Source: 8ef5e67049e28dfadf0bbcafe5ef34b2cc195f3f238c273ff9b3123d2d7f11f1 pinentry-0.7.6-8.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 30 Mar 2015 13:25:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0750 Moderate CentOS 6 postgresql Security Update Message-ID: <20150330132516.GA61201(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0750 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0750.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9b1c5e6fc09b4bd771526bba9121531dd56ae1066a7e976fcb0a9e59424ecf01 postgresql-8.4.20-2.el6_6.i686.rpm 2d6f25109301286cd1b4c70d76d8b55773aed22d102dee287604db820ef51f1c postgresql-contrib-8.4.20-2.el6_6.i686.rpm 20b37d3688e1231aadbbba02d9de9b1ef0ce14d29df11ddaba457b4e86c3c29f postgresql-devel-8.4.20-2.el6_6.i686.rpm 30e1bd187bf84d8972c738df54008b70bf6479ecbf9a062e0150dd34144a0819 postgresql-docs-8.4.20-2.el6_6.i686.rpm 54e959b271e297dceeaa579a1f7ae7681da67e967977be5bfc3ffd6d2f11066d postgresql-libs-8.4.20-2.el6_6.i686.rpm f90e6904076cf05ac3f078756b6d7d13c727396461ab109d1b2d561d9ff75cb6 postgresql-plperl-8.4.20-2.el6_6.i686.rpm 80bfe27e547b59982c5d25954b5ae85e4b1a6738e5768ae7451f7a772129c891 postgresql-plpython-8.4.20-2.el6_6.i686.rpm 4e89aae1a210bded523f0b0247396dcd1d00c4c0cb557fb89aa48e4c29c18ea8 postgresql-pltcl-8.4.20-2.el6_6.i686.rpm 8e7f2663b0a0eabab967dd85be0d4d8e4a6c2decb934e4e715898ba77ad1f964 postgresql-server-8.4.20-2.el6_6.i686.rpm 834720ab345e29b1492d95ba0ffcd74ef0eef4568a34141590332d057f70d053 postgresql-test-8.4.20-2.el6_6.i686.rpm x86_64: 9b1c5e6fc09b4bd771526bba9121531dd56ae1066a7e976fcb0a9e59424ecf01 postgresql-8.4.20-2.el6_6.i686.rpm ab2948563fa1d47ec9360d10e404f49ceb4f63e818fb949120ecf0c669fda391 postgresql-8.4.20-2.el6_6.x86_64.rpm 46c94eec4d5382afa1325726679e1947fe4b90aea36cd54667d1abdfcf237afd postgresql-contrib-8.4.20-2.el6_6.x86_64.rpm 20b37d3688e1231aadbbba02d9de9b1ef0ce14d29df11ddaba457b4e86c3c29f postgresql-devel-8.4.20-2.el6_6.i686.rpm ee3fdc90c751e7bff1c948e1b0c3a60c3088fbcd69f78f229b62c01a3417a254 postgresql-devel-8.4.20-2.el6_6.x86_64.rpm 33c0334ad155eff14642340d4ffe639321316112bb8335d3b6d73fa2debfdd5f postgresql-docs-8.4.20-2.el6_6.x86_64.rpm 54e959b271e297dceeaa579a1f7ae7681da67e967977be5bfc3ffd6d2f11066d postgresql-libs-8.4.20-2.el6_6.i686.rpm 7b470977301202de1b1fbb5b91e5fa6a49e22817e6d721128f245eb154562c0f postgresql-libs-8.4.20-2.el6_6.x86_64.rpm e74543976b939c8fb02645c5017724c950c2a0f5b055e92024c71aa974a995b7 postgresql-plperl-8.4.20-2.el6_6.x86_64.rpm 03293e559e9a5520dce545a0bdd59b16fce91a2bcc1d7d66a41dcab9b8c8baf4 postgresql-plpython-8.4.20-2.el6_6.x86_64.rpm 0a577fa35944d1edcda3575c0687c0e8502fa607ed22bdf2a125cb1eeff45edb postgresql-pltcl-8.4.20-2.el6_6.x86_64.rpm 4ed70e43633f1631dde37e269b44617fa4f5ccd5dba56d186a61ea2e365a719c postgresql-server-8.4.20-2.el6_6.x86_64.rpm 85b1c69ba73a7802aa51f844d53d3bc3ddb13c582e869260633f0c423a162dbb postgresql-test-8.4.20-2.el6_6.x86_64.rpm Source: cbef7bd40527f2b53850de5b2032aef78bc0bab3068e9ca231f483d302aa9a41 postgresql-8.4.20-2.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 30 Mar 2015 13:25:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0756 CentOS 6 gnome-terminal BugFix Update Message-ID: <20150330132544.GA61389(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0756 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0756.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f142f273b39b52330692113229fb1b2705bcb14cc7d3dca87c9af05b17c30547 gnome-terminal-2.31.3-11.el6_6.i686.rpm x86_64: d7d44f7bf07a6b695501abaf97615bff33d0a8b8624e507ee5de88b633f81e31 gnome-terminal-2.31.3-11.el6_6.x86_64.rpm Source: 091b062c38b298d7fe8bddff8e63d815e8aec3cf1a8ec8ffd8d237869c926fc4 gnome-terminal-2.31.3-11.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 121, Issue 13 ************************************************

1 0

Re: [CentOS] RAID not software raid
by Dan Purgert 31 Mar '15

31 Mar '15

On Mon, 30 Mar 2015 19:42:05 -0400, Stephen wrote: > > 16G/swap 500MB/boot 80G/home 50G/root > > 800G/sdb > > will not install Grub bootloader Fatal error Um, this is JBOD, and not RAID1. Raid1 would be 2x drives (sda & sdb) appearing as one single drive to the OS. Data is byte for byte mirrored between them.

1 0

race conditions in dbus-1.2
by Danny Smit 31 Mar '15

31 Mar '15

Hi everyone, I'm having some issue with a Qt application using D-Bus (Qt API) in a threaded appllication on CentOS 6. Searching for the cause has led me to the following issues in the dbus library: https://bugs.freedesktop.org/show_bug.cgi?id=857 https://bugs.freedesktop.org/show_bug.cgi?id=17754 It appears that there are threading issues with the dbus library version < 1.6. However there doesn't seem to be other version than 1.2 available for CentOS 6. Can someone advise what approach can be used to either work around or solve the issue? For instance, is it even possible to upgrade to a newer dbus version without side effects? Kind regards, Danny Smit

1 0

updating tzdata on CentOS 7
by Dulmandakh 31 Mar '15

31 Mar '15

Hello, Government of Mongolia decided to adopt DST from this 28th March 2015. It’s changes are submitted and accepted by IANA. It seems that update to tzdata (2015b) issued for CentOS 6, but not for CentOS 7. Could you please tell when an update for CentOS 7 will be issued? Thank you.

3 3

Centos 6.4 on Xserve, IPMI error
by Arno B 31 Mar '15

31 Mar '15

Hello! I'm trying to install Centos 6.4 64 bit on this Xserve: http://www.everymac.com/systems/apple/xserve/specs/xserve-intel-xeon-2.8-ei… I got a bootloader from: http://blog.christophersmart.com/2009/07/23/linux-on-an-apple-xserve-efi-on… as none of the official Centos releases (full, minimal, network 64 bit) boot on this machine. They all crash when loading the bootx64.conf. I have built a USB stick with a working bootx64.efi, grub.cfg, together with an initrd and a vmlinuz from the isolinux folder. These seem to get me into booting a kernel until something called IPMI is starting to throw errors at me: Console: switching to colour frame buffer device 128x48 fb0: VESA VGA frame buffer device ipmi message handler version 39.2 IPMI System Interface driver. ipmi_si 0000:09:00.4: enable device (0002 -> 0003) ipmi_si 0000:09:00.4: PCI INT C -> GSI 16 (level, low) -> IRQ 16 ipmi_si: Adding PCI-specified kcs state machine ipmi_si 0000:09:00.7: enable device (0000 -> 0003) ipmi_si 0000:09:00.7: PCI INT D -> GSI 17 (level, low) -> IRQ 17 ipmi_si: Adding PCI-specified bt state machine ipmi_si: Trying PCI-specified kcs state machine at mem address 0x90841000, slave address 0x0 irq 16 IRQ 16/ipmi_si: IRQF_DISABLED is not guaranteed on shared IRQs Using irq 16 ipmi: Found new BMC (man_id: 0x00003f, prod_id: 0x0003, dev_id: 0x20) IPMI kcs interface initialized ipmi_si: Trying PCI-specified kcs state machine at mem address 0x90840000, slave address 0x0 irq 17 Refined TSC clocksource calibration: 2792.999 MHz. Switching to clocksource tsc IPMI BT: timeout in XACTION [ B_BUSY ] 1 retries left IPMI BT: timeout in XACTION [ B_BUSY ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) IPMI BT: timeout in XACTION [ B_BUSY H2B ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) IPMI BT: timeout in XACTION [ B_BUSY H2B ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) IPMI BT: timeout in XACTION [ B_BUSY H2B ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) IPMI BT: timeout in XACTION [ B_BUSY H2B ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) then the screen goes to black and the machine doesn't respond to anything anymore... Can anyone please help me with this? Maybe just point me in a direction where to find a solution? I've been googling for a few days now without much results... thanks in advance Arno Beekman

2 1

viewvc for EL7?
by Les Mikesell 30 Mar '15

30 Mar '15

Is there a reliable repo with viewvc for Centos7? Or some reason it isn't in EPEL? -- Les Mikesell lesmikesell(a)gmail.com

1 0

db2 is running out of shared memory
by Harold Pritchett 30 Mar '15

30 Mar '15

Db2 is running our of shared memory. The environment: Virtual computers running under VMware ESXi hypervisor version 5.5. Two different virtual machines, each running CentOS 5, db2 express C, and Apache/PHP and vmware tools. The machines each have 8 GB of memory, 4 processors, and a couple of hundred GB of disk space available. Everything is running on the 64 bit versions. The actual hardware for VMware is a dual processor machine with two Xeon E5410 processors, each with four cpu cores and 32 GB of ram. The difference in the two virtual machines is that one is running db2 version 9.7.1 and the other is running db2 version 10.5.5. The error occurs while restoring a backup taken on another server to the test server in question. Worse than that, it occurs when restoring a second database after the first restore works OK. The error message we are getting is this: On the 9.7 system: RESTORE DATABASE XYZZY USER db2inst9 using FROM '/db2home/restore1' INTO XYZZZ REPLACE EXISTING WITHOUT ROLLING FORWARD WITHOUT PROMPTING SQL1084C Shared memory segments cannot be allocated. SQLSTATE=57019 On the 10.5 system: RESTORE DATABASE XYZZY USER db2inst9 using FROM '/db2home/restore1' INTO XYZZZ REPLACE EXISTING WITHOUT ROLLING FORWARD WITHOUT PROMPTING SQL1084C The database manager failed to allocate shared memory because an`operating system kernel memory limit has been reached. SQLSTATE=57019 Everything I have read online says to increas the value of Shared Memory Size in the /etc/sysctl.conf file. However, on these systems it is already set to a value eight times larger than the actual memory size. The command "ipcs -l" give: [root@cowtest etc]# ipcs -l ------ Shared Memory Limits -------- max number of segments = 4096 max seg size (kbytes) = 67108864 max total shared memory (kbytes) = 17179869184 min seg size (bytes) = 1 ------ Semaphore Limits -------- max number of arrays = 1024 max semaphores per array = 250 max semaphores system wide = 256000 max ops per semop call = 32 semaphore max value = 32767 ------ Messages: Limits -------- max queues system wide = 2048 max size of message (bytes) = 65536 default max size of queue (bytes) = 65536 [root@cowtest etc]# the file /etc/sysctl.conf has the following in it # Controls the maximum size of a message, in bytes kernel.msgmax = 65536 # Controls the maximum shared segment size, in bytes kernel.shmmax = 68719476736 # Controls the maximum number of shared memory segments, in pages kernel.shmall = 4294967296 These numbers just don't make sense. kernel.shmmax is set to 64 GB, 8 times the actual memory of the machine. the value of "Total Max Shared Memory" from the ipcs command is 16 TB! I have other machine running on real hardware with only 6 GB of memory on which this works fine. What is so strange about the virtual machines? I'm posting this to both the db2 and CentOS mailing lists. Sorry for the duplication if you are subscribed to both. Harold Attached below is the complete output of the backup.restore job which ran on the db2 10.5 machine. The backup was taken on a db2 9.7 machine, hence the message about database upgraded to current db2 version. backup.restore 1.0.0 - submitted Mon Mar 30 05:45:01 EDT 2015 on cowtest waiting... 1 05:45:01 waiting... 2 05:46:01 waiting... 3 05:47:01 waiting... 4 05:48:01 waiting... 5 05:49:03 backup.restore - started Mon Mar 30 05:50:03 EDT 2015 on cowtest File to be restored is: /db2home/www/daily/ANIMALS.0.db2inst9.NODE0000.CATN0000.20150330030114.001.bz2 Testing file to be restored for integrity at Mon Mar 30 05:50:03 EDT 2015 unzipping backup file ------------ /db2home/db2inst9/archivelogs/animals ------------ total 0 ------------ /db2home/db2inst9/archivelogs/animals ------------ SQL1064N DB2STOP processing was successful. Waiting for 1 minute... SQL1063N DB2START processing was successful. ATTACH TO db2inst9 Instance Attachment Information Instance server = DB2/LINUXX8664 10.5.5 Authorization ID = DB2INST9 Local instance alias = DB2INST9 DEACTIVATE DATABASE ANIMALS DB20000I The DEACTIVATE DATABASE command completed successfully. RESTORE DATABASE ANIMALS USER db2inst9 using FROM '/db2home/restore1' REPLACE EXISTING WITHOUT ROLLING FORWARD WITHOUT PROMPTING SQL2555I The database was restored and then successfully upgraded to the current DB2 release where you issued the RESTORE DATABASE command. CONNECT to animals user db2inst9 using Database Connection Information Database server = DB2/LINUXX8664 10.5.5 SQL authorization ID = DB2INST9 Local database alias = ANIMALS SELECT count(bhid) from is3.dna 1 ----------- 220 1 record(s) selected. DETACH DB20000I The DETACH command completed successfully. DISCONNECT CURRENT DB20000I The SQL DISCONNECT command completed successfully. ACTIVATE DATABASE ANIMALS DB20000I The ACTIVATE DATABASE command completed successfully. TERMINATE DB20000I The TERMINATE command completed successfully. ATTACH TO db2inst9 Instance Attachment Information Instance server = DB2/LINUXX8664 10.5.5 Authorization ID = DB2INST9 Local instance alias = DB2INST9 RESTORE DATABASE ANIMALS USER db2inst9 using FROM '/db2home/restore1' INTO VERIFY REPLACE EXISTING WITHOUT ROLLING FORWARD WITHOUT PROMPTING SQL1084C The database manager failed to allocate shared memory because an operating system kernel memory limit has been reached. SQLSTATE=57019 connect to verify user db2inst9 using SQL1084C The database manager failed to allocate shared memory because an operating system kernel memory limit has been reached. SQLSTATE=57019 select count(bhid) from is3.dna SQL1024N A database connection does not exist. SQLSTATE=08003 DETACH DB20000I The DETACH command completed successfully. TERMINATE DB20000I The TERMINATE command completed successfully. system is cowtest SQL1064N DB2STOP processing was successful. SQL1063N DB2START processing was successful. DB20000I The ACTIVATE DATABASE command completed successfully. ------------ /db2home/db2inst9/archivelogs/20150330 ------------ total 0 ------------ /db2home/db2inst9/archivelogs/20150330 ------------ backup.complete file has already been removed... backup.restore - ended Mon Mar 30 07:44:52 EDT 2015 on cowtest

3 3

mysql can't connect from localhost -strange behavior
by Tim Dunphy 30 Mar '15

30 Mar '15

Hey all, I've been having some trouble creating a mysql user that can connect to the database from localhost. It's always been a straight forward thing to do in the past, so its time for a sanity check, if you guys don't mind. Ok, so here's the actual command with actual simplified password that I'm using. It's on localhost so I don't think it's a security threat unless someone gets access to the box itself. mysql> grant all privileges on ftp.* to 'proftpd'@'localhost' identified by 'testpattern'; Query OK, 0 rows affected (0.35 sec) Here's what it looks like when you select it from the mysql database: mysql> select User,Host,Password from user where User like 'proftpd'; +---------+-----------+-------------------------------------------+ | User | Host | Password | +---------+-----------+-------------------------------------------+ | proftpd | localhost | *2EE931CA39652F1ED359A3A36961511B387E74A9 | +---------+-----------+-------------------------------------------+ 1 row in set (0.00 sec) And here's my attempt to connect with the password shown. Which is something I don't usually do, but am doing now to demonstrate what's going on: [root@ops:~] #mysql -uproftpd -ptestpattern -h localhost ERROR 1045 (28000): Access denied for user 'proftpd'@'localhost' (using password: YES) OK, so as I've said this should work! The database I'm trying to give the user access to does also exist: mysql> show databases like 'ftp'; +----------------+ | Database (ftp) | +----------------+ | ftp | +----------------+ 1 row in set (0.34 sec) I checked the error log for mysql and didn't find any clues there: [root@ops:~] #grep log /etc/my.cnf log-error=/var/log/mysqld.log [root@ops:~] #tail /var/log/mysqld.log InnoDB: Restoring possible half-written data pages from the doublewrite InnoDB: buffer... 150329 13:30:34 InnoDB: Waiting for the background threads to start 150329 13:30:35 InnoDB: 5.5.42 started; log sequence number 6071094973 150329 13:30:35 [Note] Server hostname (bind-address): '0.0.0.0'; port: 3306 150329 13:30:35 [Note] - '0.0.0.0' resolves to '0.0.0.0'; 150329 13:30:35 [Note] Server socket created on IP: '0.0.0.0'. 150329 13:30:35 [Note] Event Scheduler: Loaded 0 events 150329 13:30:35 [Note] /usr/libexec/mysqld: ready for connections. Version: '5.5.42' socket: '/var/lib/mysql/mysql.sock' port: 3306 MySQL Community Server (GPL) by Remi Does anybody out there have any idea why this isn't working? Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

5 6

headless VirtualBox on Centos
by Boris Epstein 30 Mar '15

30 Mar '15

Hello listmates, I am wondering if there is a set of scripts/utilities for automatically starting and running headless (no X11) VM's using VirtualBox omn a CentOS 6 server. VNC/RDP access to the VM's would be fine. Any help much appreciated. Cheers, Boris.

7 10

RAID1 bootloader configuration on CentOS 6.x and 7
by Niki Kovacs 29 Mar '15

29 Mar '15

Hi, The CentOS wiki sports a page about setting up software RAID1 on CentOS 5.x. There's a section about making both members of the RAID1 bootable by setting up GRUB on both disks. Now I wonder how this should be done on CentOS 6.x and 7. I have two sandbox machines in my office, one running a minimal CentOS 6.6, the other one with a CentOS 7 installation. Correct me if I'm wrong, but I guess the setup on CentOS 6.6 is similar to the one described on the wiki page for CentOS 5.x, something like: grub> device (hd0) /dev/sda grub> device (hd1) /dev/sdb grub> root (hd0,0) grub> setup (hd0) grub> root (hd1,0) grub> setup (hd1) grub> quit Now how would that work with the new GRUB2 under CentOS 7? Or maybe it's already installed on both disks, but how would I know that? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 1

Why is irqbalance not balancing?
by Steve Snyder 29 Mar '15

29 Mar '15

I am running irqbalance with default configuration on an Atom 330 machine. This CPU has 2 physical cores + 2 SMT (aka Hyperthreading) cores. As shown below the interrupt for the eth0 device is always on CPUs 0 and 1, with CPUs 2 and 3 left idle. But why? Maybe irqbalance prefers physical cores? My understanding, though, is that the even-numbered CPUs are the physical cores, with the odd-numbered one being the SMT cores. If this understanding is correct, it means that irqbalance is toggling between a single physical core and its SMT sibling. Any thoughts on why irqbalance is not using all 4 CPUs to distribute the eth0 interrupts? Thanks. --------------------- # cat /proc/interrupts CPU0 CPU1 CPU2 CPU3 0: 717 568 0 0 IO-APIC-edge timer 1: 0 2 0 0 IO-APIC-edge i8042 8: 26 33 0 0 IO-APIC-edge rtc0 9: 0 0 0 0 IO-APIC-fasteoi acpi 12: 1 3 0 0 IO-APIC-edge i8042 17: 11409 11661 0 0 IO-APIC-fasteoi ahci 18: 264 424 0 0 IO-APIC-fasteoi snd_hda_intel 20: 0 0 0 0 IO-APIC-fasteoi ohci_hcd:usb2 21: 0 0 0 0 IO-APIC-fasteoi ohci_hcd:usb3 22: 0 0 0 0 IO-APIC-fasteoi ehci_hcd:usb1 24: 686292451 685980205 0 0 PCI-MSI-edge eth0

3 2

reboot causes mapping failures after update to Centos 7
by Stephen 29 Mar '15

29 Mar '15

Hi, I perform the initial update of about 200 packages then when I reboot I get three options instead of two. One is the Core 7 and the other is x86 what do those mean? Also after this the journal returns mapping errors and ext4 errors Best, Steve

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss