- Discuss - lists.centos.org

remote disk decryption on centos?
by ept8ept8＠secmail.pro 15 Mar '21

15 Mar '21

Hi I was reading about how unlock encrypted root partition from remote (unattended). I'd like asking what is compatible way for this in centos and commonly used by administrators? I think most simple is install dropbear in initramfs for allow remote SSH and manual enter passphrase. I find many HOWTO for that on debian/ubuntu, but nothing for centos. Is there any help, recommend or HOWTO available for centos? Example reference: https://security.stackexchange.com/questions/161974/unattended-disk-encrypt…

4 4

Expand XFS filesystem on CentOS Linux release 8.2.2004 (Core)
by Kaushal Shriyan 14 Mar '21

14 Mar '21

Hi, Is there a way to expand xfs filesystem /dev/nvme0n1p2 which is 7.8G and occupy the remaining free disk space of 60GB? [root@ip-10-0-0-218 centos]# df -hT --total Filesystem Type Size Used Avail Use% Mounted on devtmpfs devtmpfs 1.7G 0 1.7G 0% /dev tmpfs tmpfs 1.7G 0 1.7G 0% /dev/shm tmpfs tmpfs 1.7G 23M 1.7G 2% /run tmpfs tmpfs 1.7G 0 1.7G 0% /sys/fs/cgroup */dev/nvme0n1p2 xfs 7.8G 7.0G 824M 90% /* ----> expand /dev/nvme0n1p2 which is 7.8G and occupy the remaining free disk space of 60GB. /dev/nvme0n1p1 vfat 599M 6.4M 593M 2% /boot/efi tmpfs tmpfs 345M 0 345M 0% /run/user/1000 total - 16G 7.0G 8.5G 46% - [root@ip-10-0-0-218 centos]# fdisk -l GPT PMBR size mismatch (20971519 != 125829119) will be corrected by write. The backup GPT table is not on the end of the device. This problem will be corrected by write. *Disk /dev/nvme0n1: 60 GiB*, 64424509440 bytes, 125829120 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: gpt Disk identifier: E97B9FFA-2C13-474E-A0E4-ABF1572CD20C Device Start End Sectors Size Type /dev/nvme0n1p1 2048 1230847 1228800 600M EFI System /dev/nvme0n1p2 1230848 17512447 16281600 7.8G Linux filesystem /dev/nvme0n1p3 17512448 17514495 2048 1M BIOS boot [root@ip-10-0-0-218 centos]# cat /etc/redhat-release CentOS Linux release 8.2.2004 (Core) [root@ip-10-0-0-218 centos]# Please suggest. Thanks in Advance. Best Regards, Kaushal

7 10

Bare metal vs. virtualization: Proxmox + Ceph + CentOS ?
by Nicolas Kovacs 14 Mar '21

14 Mar '21

Hi, Last week I had a disaster which took me a few unnerving days to repair. My main Internet-facing server is a bare-metal installation with CentOS 7. It hosts four dozen web sites (or web applications) based on WordPress, Dolibarr, OwnCloud, GEPI, and quite a number of mail accounts for ten different domains. On sunday afternoon this machine had a hardware failure and proved to be unrecoverable. The good news is, I always have backups of everything. In that case, I have a dedicated backup server (in a different datacenter in a different country). I’m using Rsnapshot for incremental backups, so I had all data: websites, mail accounts, database dumps, configurations, etc. Now here’s the problem: it took me three and a half days of intense work to restore everything and get everything running again. Three and a half days of downtime is quite a stretch. As far as I understand, my mistake was to use a bare-metal installation and not a virtualized solution where I could simply restore a snapshot of a VM. Correct me if I’m wrong. Now I’m doing a lot of thinking and searching. Proxmox and Ceph look quite promising. From what I can tell, the idea is not to use a big server but a cluster of many small servers, and aggregate them like you would do with hard disks in a RAID 10 array for example, only you would do this for the whole system. And then install one or several CentOS 7 VMs on top of this setup. Any advice from the pros before I dive head first into the documentation? Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

5 4

Re: [CentOS] Dual WAN on EL8 desktop.
by Gordon Messmer 14 Mar '21

14 Mar '21

On Mon, Feb 15, 2021 at 10:30 PM Thomas Stephen Lee <lee.iitb(a)gmail.com> wrote: > What is ideal is the bandwidth of two connections and half bandwidth > when one link is down. That may not be *generally* possible. You can load-balance your network streams (connections), so that you'll utilize the bandwidth of two physical links in sum, but each individual network stream is going to traverse just one physical link, and will never be faster than whichever link is selected for that stream when it is initiated.

1 0

Re: [CentOS] Dual WAN on EL8 desktop.
by Thomas Stephen Lee 12 Mar '21

12 Mar '21

On Wed, Feb 17, 2021 at 2:04 AM Kenneth Porter <shiva(a)sewingwitch.com> wrote: > > --On Tuesday, February 16, 2021 12:00 PM +0530 Thomas Stephen Lee > <lee.iitb(a)gmail.com> wrote: > > > The solution should be a software one without acquiring new hardware. > > What is ideal is the bandwidth of two connections and half bandwidth > > when one link is down. > > The search term you're looking for is "NIC bonding". Here's the first hit I > get from Google: > > <https://www.enterprisenetworkingplanet.com/linux_unix/article.php/3850636/U…> > Hi, I tried https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/ht… without success I have a feeling that bonding is for interfaces on the same network, not two internet routers. Please correct me if I'm wrong. --- Lee

2 1

Disk read io very high, but no process perform io read
by yf chu 12 Mar '21

12 Mar '21

We have experienced a very weird problem. The load of the server machine is very high. We use "pidstat" and find that the disk read io is very high. But the processes running on this server do not perform any disk read operation. We also noticed that when we execute "top" command, for most of processes, the values in "SHR" column are zero. Compared with other normal servers, we found that by executing "free -m", the result shows that the buff/cache value in this server is lower than the value of other normal servers. We also found that there were lots of major page faults by executing "ps -o majflt,minflt". Swap is not enabled on this server. What could be the reason for this issue? The centos version:CentOS Linux release 7.3.1611 kernel version:3.10.0-693.21.1.std7a.el7.0.x86_64

7 13

R730xd & SD card identfication
by Gregory P. Ennis 10 Mar '21

10 Mar '21

Everyone, We have migrated a platform to a Centos 8 host using kvm guest machines Recently I tried to copy one of the guests to the external SD card on the back of the Dell R730xd, but I have not been able to get the Centos 8 host to recognize the SD card. I can use DRAC interface of the R730xd to see that the SD card is being recognized and the status of the external SD slot is turned from inactive to active when the card is inserted. I have used lsblk, fdisk -l, and 'dmesg | tail' none of which demonstrate that the Centos 8 host is recognizing the SD card. You help would be appreciated. Thanks !! -- Greg Ennis

8 20

SHR in top command is zero and major page fault is frequent
by yf chu 08 Mar '21

08 Mar '21

Recently, I found that many processes in our server experienced high frequency of major page faults. The disk IO on this server is also very high. I also noticed that when I execute "top" command, for some processes, the value in SHR column became zero. when I restart these processes, the values of SHR became non-zero again. What could be the reason for frequent major page fault? Is there any connection between zero SHR and major page fault?

1 0

kernel-devel package newer than installed kernel
by Mauricio Tavares 08 Mar '21

08 Mar '21

Running CentOS Linux release 8.3.2011 According to uname my kernel is 4.18.0-240.10.1.el8_3.x86_64, but when I check which version of kernel-devel is available, yum info kernel-devel I get that Source : kernel-4.18.0-240.15.1.el8_3.src.rpm Why is the version of kernel-devel available for my kernel based on a newer kernel?

3 3

Electron for CentOS 7
by H 08 Mar '21

08 Mar '21

I am trying to find electron for CentOS 7 but "yum provides electron\*" turns up nothing and pkgs.org does not find anything (https://pkgs.org/search/?q=electron) Does anyone have better information?

2 2

mkdtemp on CentOS 7
by H 07 Mar '21

07 Mar '21

I am trying to compile DeltaChat in a CentOS 7 docker container and at one stage have to run: npm install --global electron but the above fails, seemingly because CentOS 7 does not have 'mkdtemp', nor have I found it in a repository. I had previously used: npm install electron --save-dev which installs fine but does not seem to use mkdtemp. yum provides mkdtemp ends up not finding anything but perhaps someone knows this better?

2 1

proper recipe for local mirror
by Adrian Sevcenco 06 Mar '21

06 Mar '21

Hi! What is the proper solution for a local mirror for centos 7 (or oven 8) repositories? trying with rsync, while the packages are downloaded but the repodata is not and is actually impossible to be used by clients. while i try to recreate the repodata with createrepo -C -d --workers=4 ${repo} where ${repo} is the sync destination where it contains %arch/{Packages,repodata} directories the clients throw errors like: <LOCAL_MIRROR>/mirrors/centos/7/updates/x86_64/repodata/51d63b04c8bb74c5d9f09ae65f763f319a69492d9a8fac5ea0bf9b63bf347c5c-primary.sqlite.bz2: [Errno 14] HTTP Error 404 - Not Found What am i missing? Thanks a lot! Adrian

3 4

tracking samba changes
by Christopher Wensink 06 Mar '21

06 Mar '21

Good morning everyone. This morning when I came in my boss said that he doesn't have access to the R: drive, which is a samba share to a folder called RP. I looked in /etc/group and his username was not in there. He's had access to this group for years, since before I was at the company. Yesterday I added a new employee to two other groups, saved the change and exited, and I took out an old username out of a few groups but I did not touch my boss's username at all. Is there any kind of trace log that shows changes to a group or to /etc/group that tracks / logs all individual changes that I can trace back to what might have happened that's turned on in the system, to show changes to /etc/group, or does that only get captured through an outside backup? Chris -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

3 4

Tar of files
by Jerry Geis 03 Mar '21

03 Mar '21

When I "tar" up an archive the files have an owner bob, when I extract that to another machine bob is there also but user number is different. So when I extract bob is no longer the owner of the files but someone else. Is there a good way to account for this ? User ID on one box being different to the next box ? I was expecting to untar and bob still be the owner . Thanks, Jerry

7 7

Koji packages
by Frederick 03 Mar '21

03 Mar '21

Good Day All! I am trying to grab some packages from the Koji site. Any idea why it seems to be down and if/when it will be back? 403 Forbidden Request forbidden by administrative rules. https://koji.mbox.centos.org/pkgs/packages/ Thank you!

4 5

CentOS-announce Digest, Vol 192, Issue 1
by centos-announce-request＠centos.org 03 Mar '21

03 Mar '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0671 Important CentOS 7 bind Security Update (Johnny Hughes) 2. CentOS Stream Container images available on quay.io (Brian Stinson) ---------------------------------------------------------------------- Message: 1 Date: Tue, 2 Mar 2021 16:40:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0671 Important CentOS 7 bind Security Update Message-ID: <20210302164018.GA16166(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0671 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0671 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 1edd338d1d20b130c1a107ea59652842ef0a8167393745468301105b2a59ca6d bind-9.11.4-26.P2.el7_9.4.x86_64.rpm 1a87cf953d16581b70a51f9c131f6f714e364e0a57dee8b2856b43aad7d89104 bind-chroot-9.11.4-26.P2.el7_9.4.x86_64.rpm ee52c09ab7dca8a8e11fe87c0855b1ce38df1fdaef899e8ce50d80b72009b62b bind-devel-9.11.4-26.P2.el7_9.4.i686.rpm 5bc7e489f2286aea26973b124918a70b6f8f29e9936508ee68e5fa89b453002b bind-devel-9.11.4-26.P2.el7_9.4.x86_64.rpm 28d32718cac59baf9c4162573d291af2345e664d16de912661fa18de7157ca63 bind-export-devel-9.11.4-26.P2.el7_9.4.i686.rpm a9b560ad84f4c4da2302f2f1c1581df4d699c0e0f9cf0754e125b2bab6ea4795 bind-export-devel-9.11.4-26.P2.el7_9.4.x86_64.rpm f23ad28777ef3020a0b4c72141bc0d367c9a60a8eca144eafcef471df349d126 bind-export-libs-9.11.4-26.P2.el7_9.4.i686.rpm 6df17149302a2cb98a128880ea6df6fe1092d0cd169dda5bd470cf1dc5c73494 bind-export-libs-9.11.4-26.P2.el7_9.4.x86_64.rpm c779ed4a8b7cd8df613f47c214050d61ac25927ab97381ffb59944fb998585ff bind-libs-9.11.4-26.P2.el7_9.4.i686.rpm 43570d8e293bd93001cb8c4cac3e4b2045b3024b7f3e08f4449735bfb9d206c6 bind-libs-9.11.4-26.P2.el7_9.4.x86_64.rpm 43a8791d748c2ca3cb5e8c1b6682319313b8373bb0e84e9e545ba09dc9e093bb bind-libs-lite-9.11.4-26.P2.el7_9.4.i686.rpm 5380ad090ba99c100379b2fc1cf54a62f85cdfe390b04b6e5e0fe4c213aa4661 bind-libs-lite-9.11.4-26.P2.el7_9.4.x86_64.rpm 4cfa5141393a1004bc9d7885fee9a606293ee21216066238700f933afd5e4598 bind-license-9.11.4-26.P2.el7_9.4.noarch.rpm d97cd106cf9572dc73237ecabf174c9e7fd63f1831ecd180582edfe2ee993409 bind-lite-devel-9.11.4-26.P2.el7_9.4.i686.rpm 87c1a04fd7037d13c6be98a8a975ef7a41eec66aa9031b781b61eabe9107ce9b bind-lite-devel-9.11.4-26.P2.el7_9.4.x86_64.rpm 8df89d78d785928efa5b8d059e96ce33ffe0c9356663c9acb50ce3ec8c660d92 bind-pkcs11-9.11.4-26.P2.el7_9.4.x86_64.rpm f5a544c1c54d159d63ecf02b66555411db8230d7164937c969ee12412a7b3426 bind-pkcs11-devel-9.11.4-26.P2.el7_9.4.i686.rpm 1612a4f04271f95f905580cfc4cc94695b1a11ade17803d000750d518bc0e3ac bind-pkcs11-devel-9.11.4-26.P2.el7_9.4.x86_64.rpm 86d0b148abfa317696a046ac187cb479b242ea3f9ec769e6891130395ea172a9 bind-pkcs11-libs-9.11.4-26.P2.el7_9.4.i686.rpm 40ceb41cf108321fdafc40bff1168cbc4f3e85a9ec271d6b55e946ed83697fb7 bind-pkcs11-libs-9.11.4-26.P2.el7_9.4.x86_64.rpm b97a0e1f72d3fb43f706975f8e02ff0c130ef35fc6b4763eb18db88980fcde25 bind-pkcs11-utils-9.11.4-26.P2.el7_9.4.x86_64.rpm 235100bdba26a1af51c7f66f533d9318837d01dafa0c5e822245c8e0e5469978 bind-sdb-9.11.4-26.P2.el7_9.4.x86_64.rpm a191bcc40fb33d21a6109e116756d8999e60adb5535583f65d05f51ff3047463 bind-sdb-chroot-9.11.4-26.P2.el7_9.4.x86_64.rpm 461bf2c4280e37fa28f8577583cf56315e10dc6a8898497da766b5dffbdb1a56 bind-utils-9.11.4-26.P2.el7_9.4.x86_64.rpm Source: c499acbae99041e5bba4d447ec818d428bdcd477b7436f49c0499752925ce86b bind-9.11.4-26.P2.el7_9.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 2 Mar 2021 16:29:22 -0600 From: Brian Stinson <bstinson(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] CentOS Stream Container images available on quay.io Message-ID: <CAJmSYMx72mt9EPnV7kDuappJiGfk88v+XgOO=4UObimY+D3Gaw(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" NOTE: This message was intended to go to centos-devel and centos-announce on 11-Feb-2021 but it only made it to centos-devel. Thanks to folks on IRC for mentioning that this never made it to the proper announcement channels. Hi folks, CentOS Stream container images are now readily available! podman pull quay.io/centos/centos:stream OR podman pull quay.io/centos/centos:stream8 ## Tags? We expect the 'stream' tag to automatically move forward to new Streams as they come on board. This means when CentOS Stream 9 becomes the Live Stream, quay.io/centos/centos:stream will have 9 based content. The 'stream8' tag can be used while Stream 8 is Live, and during the overlap period between Stream 8 and Stream 9. A 'stream9' tag will be created at the appropriate time to serve the same purpose. You can browse through all of the tags for the CentOS repository here: https://quay.io/repository/centos/centos?tab=tags ## Next Steps - We are still in discussions on how to push these properly to Dockerhub. Since CentOS is an Official Image, there are some extra requirements here that we're working through. If you have questions you can find us on the centos-devel mailing list (centos-devel(a)centos.org) or in #centos-stream on Freenode Cheers! -- Brian Stinson On behalf of the CentOS Stream Team

1 0

Tex-Package missing - Best option to proceed.
by Felix Kölzow 03 Mar '21

03 Mar '21

Dear Experts, We are using RHEL8-based distros and CentOS 8 Stream. For specific applications, some Tex-package are absolutely required. It turned out that these packages are not shipped with the available tex-packages in RHEL8 and CentOS8 Stream, e.g. texlive-pgfplots We know that there are some workarounds at this point. Concerning all these options, is there an option that should be considered to be more or less reliable compared to the others? Which procedure would you prefer? Thank you very much for your help. Regards, Felix

2 2

Recommendations for webmail client on EL8
by Simon Matter 02 Mar '21

02 Mar '21

Hi all, I'm still trying to find solutions to replace some aging EL6 and EL7 systems. This time I'm looking at email. Postfix and Cyrus-IMAPd are not a problem and also additional things like DKIM are fine. However, I'm wondering what to use to replace good old squirrelmail with. We had a heavily patched squirrelmail with lots of nice things like avelsieve plugin. Since squirrelmail is dead and unable to run on newer PHP, I'd like to use some other tool instead. I was looking at Roundcube but it seems difficult on EL8 because a lot of PHP stuff is missing and not available as RPMs. I guess the same is true for the python things needed for Mailpile. In the end my list only contains Cypht, Rainloop and Afterlogic Webmail lite. Is there anybody running webmail on EL8? Can you make a recommendation on a certain tool? Thanks, Simon

13 31

CentOS-announce Digest, Vol 191, Issue 4
by centos-announce-request＠centos.org 28 Feb '21

28 Feb '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2021:0623 CentOS 7 microcode_ctl BugFix Update (Johnny Hughes) 2. CESA-2020:5402 Important CentOS 7 libexif Security Update (Johnny Hughes) 3. CESA-2020:5408 Important CentOS 7 xorg-x11-server Security Update (Johnny Hughes) 4. CESA-2021:0024 Important CentOS 7 ImageMagick Security Update (Johnny Hughes) 5. CEBA-2020:4046 CentOS 7 grub2 BugFix Update (Johnny Hughes) 6. CESA-2021:0656 Critical CentOS 7 firefox Security Update (Johnny Hughes) 7. CESA-2021:0661 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 27 Feb 2021 14:18:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0623 CentOS 7 microcode_ctl BugFix Update Message-ID: <20210227141835.GA6669(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0623 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0623 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0cf6bb4e5beb49f3a45a5171babb25685cf72156e8666dc2a57f9fef6af67838 microcode_ctl-2.1-73.8.el7_9.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Sat, 27 Feb 2021 14:19:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5402 Important CentOS 7 libexif Security Update Message-ID: <20210227141900.GA6802(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5402 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5402 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3bb0da4f1c883b5aaa0ad687bcc2022ba9573d912ff906b6657bc7e96676c5d9 libexif-0.6.22-2.el7_9.i686.rpm 49776569805f34f9417a664fb394e7bff8444fee386100309ce6306cba1c8b1a libexif-0.6.22-2.el7_9.x86_64.rpm 6dafcb9ecc7ca14a4ae5417e71c1fee10a7213e0ebf3d3750cbd23a8cacf5eef libexif-devel-0.6.22-2.el7_9.i686.rpm 618179611cd44ba685db172d3afd1dc0248e66533a35b8e46cdf118d812340d3 libexif-devel-0.6.22-2.el7_9.x86_64.rpm 0c9cd97e333e5ea85907e92483ef91dbdb08349b7e29916dcf5c08061c74f836 libexif-doc-0.6.22-2.el7_9.x86_64.rpm Source: 3729ce39ae2b4b5ca93513cb15046a4b55ada0662f3ee6888927e6caad3f5709 libexif-0.6.22-2.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Sat, 27 Feb 2021 14:19:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5408 Important CentOS 7 xorg-x11-server Security Update Message-ID: <20210227141946.GA7011(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5408 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5408 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5ba93bb7af0fa5612cec66a27e5736fb8c5460ccfc0e32ff2e9e8c97c2587a3f xorg-x11-server-common-1.20.4-15.el7_9.x86_64.rpm 8300c30550c66d4567d56de5063d79d5818aea066707cfcf6638dd2811bd74fc xorg-x11-server-devel-1.20.4-15.el7_9.i686.rpm 40a441051ed2bb80ba7bf16effb6ef562dc02cffbcb40be34952dcdc20a3b66c xorg-x11-server-devel-1.20.4-15.el7_9.x86_64.rpm bb3864015d5c6e8d0e5f6d4ad1683af99c0b275dcf2efcaee1e4aebf6d78082d xorg-x11-server-source-1.20.4-15.el7_9.noarch.rpm 375dc1e4e253dad77a1c726888c330f2d32bfac978fb2501318c810a4fb93843 xorg-x11-server-Xdmx-1.20.4-15.el7_9.x86_64.rpm fc23786485123d8fc0e167c65ecee809b1c1047c61cea465e243cf4b64b2a78e xorg-x11-server-Xephyr-1.20.4-15.el7_9.x86_64.rpm a79594486e59ec5b826e79499c455a6d627baff4bdc3f3df763e5018309b5f9c xorg-x11-server-Xnest-1.20.4-15.el7_9.x86_64.rpm 38116fc986dbde5d1071bccc99bf83579d9cf9cfe210af409971b02a8225df2e xorg-x11-server-Xorg-1.20.4-15.el7_9.x86_64.rpm 27534a1920262b79fa35a9509e192cd19a2916bb7b11d0db13f71ae7cff375a9 xorg-x11-server-Xvfb-1.20.4-15.el7_9.x86_64.rpm b0d7b591888b6fd49b457c15fa981112edaa1d269c881960174a8676102cad81 xorg-x11-server-Xwayland-1.20.4-15.el7_9.x86_64.rpm Source: aa1a835131bbf66abfd0409afc8d8cf66e6ae6e5c446c0aa7c773d037b730a41 xorg-x11-server-1.20.4-15.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Sat, 27 Feb 2021 14:21:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0024 Important CentOS 7 ImageMagick Security Update Message-ID: <20210227142105.GA7191(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0024 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0024 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 49941263a7a0309c58b3d3e00ab81c56b1ee1a70b49b873188cc23686f5d3d9b ImageMagick-6.9.10.68-5.el7_9.i686.rpm 8b82511897f48ce484e303fe650c32ea1191e71ee0cbd9aff580743fa4f9067c ImageMagick-6.9.10.68-5.el7_9.x86_64.rpm 3d1f2217dd6b5ed505a6858933c562175be86840b5c6c7328291ec8c31333a56 ImageMagick-c++-6.9.10.68-5.el7_9.i686.rpm 208142489b5b939b70a9d0d5242ac84ad700f6bc7f8549c1b26d447993c66b86 ImageMagick-c++-6.9.10.68-5.el7_9.x86_64.rpm 3fb72ac0367e9afd39874f48b9a0b356b9cbb0b86d41265538358ef72583d32d ImageMagick-c++-devel-6.9.10.68-5.el7_9.i686.rpm fb00ca97e06f7da066e8d05cafb17b9f9680e39f50979090e489d8a1720bb4d4 ImageMagick-c++-devel-6.9.10.68-5.el7_9.x86_64.rpm d45776ea070dd01bfa5681b3d5be4cd2fdb7fe2baac5c1720ab216221ef7ddf8 ImageMagick-devel-6.9.10.68-5.el7_9.i686.rpm b095f7fcbb5d718e30c01471ddebc9eca7b0315ab21ba2c286f3e4c44b8bf2b1 ImageMagick-devel-6.9.10.68-5.el7_9.x86_64.rpm 4c39fd8baa3677dd6ae1debc1bc8f2bcb012f024717dc7b97179d39ba6e3853f ImageMagick-doc-6.9.10.68-5.el7_9.x86_64.rpm 4dc1a1327e468460b517ab53ed5f213f2ea0b15a999fc2c3f80d7d5b477118cd ImageMagick-perl-6.9.10.68-5.el7_9.x86_64.rpm Source: 22f7687f463972266acf1480018df3edab9c5b809501a842b97042deef75bf90 ImageMagick-6.9.10.68-5.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Sat, 27 Feb 2021 14:33:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2020:4046 CentOS 7 grub2 BugFix Update Message-ID: <20210227143322.GA9504(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2020:4046 Upstream details at : https://access.redhat.com/errata/RHBA-2020:4046 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: abb495131866830ec1e5474b69876de363e44c471e7221b10ce992f1f526f966 grub2-2.02-0.87.el7.centos.x86_64.rpm 50c11af52b9c7aba5a74a2beb07e802550af036c3a37feb00b9bfca7b241ffa1 grub2-common-2.02-0.87.el7.centos.noarch.rpm 72b814596920effa935ebdde082d64181b5aa2f44485a058f2535c54828f931e grub2-efi-ia32-2.02-0.87.el7.centos.x86_64.rpm ce893faa55582d8281001d9876f4ceaddca9de5adf25f32692196a6e85a1aa48 grub2-efi-ia32-cdboot-2.02-0.87.el7.centos.x86_64.rpm 5d260748ee7254fcf65c3e3312e541e2f9883d21279926f45ee85ad44eb5b4e7 grub2-efi-ia32-modules-2.02-0.87.el7.centos.noarch.rpm f659cc4a3ded31fe85ee2123860696b26f1983182f66c76b6a76d0e5dc5f3d2f grub2-efi-x64-2.02-0.87.el7.centos.x86_64.rpm 05a40b72da0cf303bc79e3b58cda8c7f7edb3f19a201eca57225af9a1e012beb grub2-efi-x64-cdboot-2.02-0.87.el7.centos.x86_64.rpm f2ef03a6ec5037c50e7f13a6a7c2465e14b247e48ec9b158e91bbf86094e3dd1 grub2-efi-x64-modules-2.02-0.87.el7.centos.noarch.rpm bd55b6e53bef2770d4702bf6fb6bcd13145e761a809da1a07423a7e1e3898f82 grub2-i386-modules-2.02-0.87.el7.centos.noarch.rpm dc1039bae026e06f606e2a26e159743f3cf3ed19a75609cb5664372c17b4d90c grub2-pc-2.02-0.87.el7.centos.x86_64.rpm 456aa067cc96e03aaa605e52a86cc973f7a8dab09337cce112097a4608dd143a grub2-pc-modules-2.02-0.87.el7.centos.noarch.rpm 82bf486bffe227eaa4681fdcf6cb4c2225d25b5dbdad8b4009f3da4a506834ef grub2-tools-2.02-0.87.el7.centos.x86_64.rpm 0eb359490eab964f970cb8d6fd9987a38a3e3f9c585348941c53fb1b709c71f1 grub2-tools-extra-2.02-0.87.el7.centos.x86_64.rpm c0e72c1dbf2c72f272577dc891736d1403dd928b5e9f236721ea261f99677b61 grub2-tools-minimal-2.02-0.87.el7.centos.x86_64.rpm Source: b54c7d7d22e344b19816c6b891484dd12659442b088bab993053889a28dea14d grub2-2.02-0.87.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Sat, 27 Feb 2021 14:34:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0656 Critical CentOS 7 firefox Security Update Message-ID: <20210227143420.GA9686(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0656 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2021:0656 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c51cb2eba6f030cce0b81686cebf834e0aad1fb747875ef6fc8d06c6930fe18a firefox-78.8.0-1.el7.centos.i686.rpm 802ef81827f925a8e48e7eac8b4f0c0e44a7873cc15a96c696316840d6541191 firefox-78.8.0-1.el7.centos.x86_64.rpm Source: 9fb25f49dbe9e585312f707a0303a6c6c1a19f2ab52f2b36e52c21b79225b925 firefox-78.8.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Sat, 27 Feb 2021 14:34:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0661 Important CentOS 7 thunderbird Security Update Message-ID: <20210227143456.GA9797(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0661 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0661 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2079fcbe2c07aa0485612a667be1c81504654629f2931e7110664db306550787 thunderbird-78.8.0-1.el7.centos.x86_64.rpm Source: b1d0ae38d26dde16a81ac71b72f6368e625a7ccbed26d6dc8475c975d7569636 thunderbird-78.8.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 191, Issue 4 ***********************************************

1 0

bash: return status of an assignment
by Kenneth Porter 28 Feb '21

28 Feb '21

In the sqm-scripts package for managing network traffic shaping is this line for finding a program suitable for loading the kernel shaping modules: [ -z "$INSMOD" ] && INSMOD=$(which modprobe) || INSMOD=$(which insmod) It seems to set INSMOD to /usr/sbin/insmod, even though /usr/sbin/modprobe is available. (Both are symlinks to ../bin/kmod.) According to this article, the return value of the first assignment should be success and it shouldn't take the fallback statement: <https://unix.stackexchange.com/questions/270828/how-is-the-return-status-of…> Also working the issue here: <https://github.com/tohojo/sqm-scripts/issues/133>

3 3

How to install XFCE on CentOS 8?
by Simon Matter 27 Feb '21

27 Feb '21

Hi, Is anyone here running XFCE desktop on CentOS 8? If so, how did you install it? I just tried to install it from EPEL and this is what I got: # dnf group install Xfce Last metadata expiration check: 0:14:01 ago on Thu 11 Feb 2021 10:05:47 CET. No match for group package "NetworkManager-gnome" No match for group package "thunar-archive-plugin" I'm unable to find packages for NetworkManager-gnome or thunar-archive-plugin anywhere in CentOS 8 or EPEL 8. Did I miss something? Thanks, Simon

14 53

menu apps like make menu config
by Christopher Wensink 26 Feb '21

26 Feb '21

Good morning everyone, While vi, cat more or less can work (see what I did there..) for looking at every day Linux Administration, sometimes I think it's just easier to work with a menu based interface, where you can select and navigate messages and options, with a little bit of color, possibly function key interaction, and a working interface, similar to using make menuconfig for compiling the kernel and similar to performing a legacy text based install on a new system. Is there a master list of those kinds of apps that have a menu for looking at various things? Can anyone who thinks of more of these apps rattle off some other options such as: abc - for reading logs xyz for text based chat def - for a menu based browser ghi - for a text mail client, etc -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

2 1

e2fsck but says mounted and cannot
by Jerry Geis 25 Feb '21

25 Feb '21

I have a system that needs to run e2fsck (C7). I boot into rescue mode, skip to shell (option 3). enter they PW and I type: e2fsck -y /dev/sda1 and it says is mounted. This is "/" What do I do so I can run e2fsck ? Thanks, Jerry

3 2

OpenStack Training Recommendations
by Paul Heinlein 24 Feb '21

24 Feb '21

Our team at work is looking for OpenStack training options. The training should cover * overview of widely used OpenStack services * network architecture * installation and configuration * ongoing administration, maintenance, and troubleshooting * upgrading We'd prefer workflows based around Puppet or Ansible, since we know those tools, but operational continuity is more important than the tools used. We'd likewise prefer solutions oriented toward CentOS or RHEL, but, again, it's just a preference. We've investigated kolla-ansible for deployment, but we're not adverse to changing toolsets if the upside is right. I'd characterize our team as journeymen to expert system administrators. We specialize in supporting research groups. The training would be to provide skills and knowledge for our team to support OpenStack as a long-term in-house virtualization option. I'd love to hear your first-hand experiences with any specific training offerings. Thanks! (Note: we have other virtualization solutions in place. OpenStack is specifically required by researchers whose wider scientific communities have built workflows for that environment. Suggestions to ditch OpenStack for OtherGreatSolution will be ignored.) -- Paul Heinlein heinlein(a)madboa.com 45°38' N, 122°6' W

1 0

Permission denied when updating CentOS 8 Streams
by Mathieu Baudier 22 Feb '21

22 Feb '21

Hello, On a remote server (in an IPv6-only infrastructure) I am getting the following error when trying to update CentOS 8 Streams x86_64: $ sudo dnf upgrade --refresh Failed to set locale, defaulting to C.UTF-8 CentOS Stream 8 - AppStream 0.0 B/s | 0 B 00:16 Errors during downloading metadata for repository 'appstream': - Curl error (7): Couldn't connect to server for http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=AppStream&i… [Failed to connect to mirrorlist.centos.org port 80: Permission denied] Error: Failed to download metadata for repo 'appstream': Cannot prepare internal mirrorlist: Curl error (7): Couldn't connect to server for http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=AppStream&i… [Failed to connect to mirrorlist.centos.org port 80: Permission denied] Trying to retrieve the mirror list with wget gives similar errors (see log below). This is a development VM and I was playing with firewalld zones on this interface (drop, block, etc.) in order to see the most restrictive that I could use in order to update a system. But the error also appears if I switch back the zone to public. Could it be that my address has been blacklisted because of all these tests? >From my laptop, also running CentOS 8 Streams, everything is working as expected. Thank in advance for hints on how to analyze further! Mathieu ## wget log $ wget http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=AppStream&i… --2021-02-19 08:35:14-- http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=AppStream&i… Resolving mirrorlist.centos.org (mirrorlist.centos.org) 2001:4178:5:200::10, 2600:1f16:c1:5e01:4180:6610:5482:c1c0, 2604:1380:2001:d00::3, ... Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2001:4178:5:200::10|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2600:1f16:c1:5e01:4180:6610:5482:c1c0|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2604:1380:2001:d00::3|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2604:1580:fe02:2::10|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2604:1380:1001:6c00::1|:80... failed: Permission denied. Connecting to mirrorlist.centos.org (mirrorlist.centos.org)|2a05:d012:8b5:6503:9efb:5cad:348f:e826|:80... failed: Permission denied.

6 5

Date question
by Jerry Geis 18 Feb '21

18 Feb '21

SO from the man page on date I can do current=`TZ=":America/Indianapolis" date` echo $current current=`TZ=":America/Los_Angeles" date ` echo $current And I get correct data. LA is 3 hours earlier. But doing this: current=`TZ=":America/Indianapolis" date +%s` echo $current current=`TZ=":America/Los_Angeles" date +%s` echo $current I get the same data - its not 3 hours different. What am I not doing correct ? Thanks, Jerry

3 3

Using C7 as host to C5 guest
by Jerry Geis 17 Feb '21

17 Feb '21

Hi all, I am using C7 as a host to a C5 image. This used to boot. I tried today to boot up the C5 image and it get stuck now on the boot screen. Any thoughts on why ? It stuck on the screen that shows root (hd0,0) Filesystem type ext2fs partition type 0x83 kernel /boot/vmlinuz-2.16.18-402.el5 Then nothing... I know C5 is way out of date - but have a couple places still using it. Thoughts on getting this to boot up ? Jerry

1 0

Certificate Authority (CA) in CentOS 7 to create digital certificates
by Kaushal Shriyan 16 Feb '21

16 Feb '21

Hi, I am running CentOS Linux release 7.9.2009 (Core). Is there a way to configure a Certificate Authority (CA) in CentOS 7 to create digital certificates for servers on LAN or for VPN clients that need SSL Certificates? https://gitlab.int.mydomain.com for example. Thanks in Advance. Please guide. Best Regards, Kaushal

4 3

Re: [CentOS] Dual WAN on EL8 desktop.
by Kenneth Porter 16 Feb '21

16 Feb '21

--On Tuesday, February 16, 2021 12:00 PM +0530 Thomas Stephen Lee <lee.iitb(a)gmail.com> wrote: > The solution should be a software one without acquiring new hardware. > What is ideal is the bandwidth of two connections and half bandwidth > when one link is down. The search term you're looking for is "NIC bonding". Here's the first hit I get from Google: <https://www.enterprisenetworkingplanet.com/linux_unix/article.php/3850636/U…>

1 0

Difference between shimx64-centos.efi and shimx64.efi
by Gianluca Cecchi 16 Feb '21

16 Feb '21

Hello, in shim-x64-15-15.el8_2.x86_64.rpm of CentOS 8.3 I see the two files: ./boot/efi/EFI/centos/shimx64-centos.efi ./boot/efi/EFI/centos/shimx64.efi # ll boot/efi/EFI/centos/shim* -rwx------. 1 root root 1238416 Aug 1 2020 boot/efi/EFI/centos/shimx64-centos.efi -rwx------. 1 root root 1244496 Aug 1 2020 boot/efi/EFI/centos/shimx64.efi What is the difference? Thanks, Gianluca

1 0

to which Bugzilla go to?
by lejeczek 16 Feb '21

16 Feb '21

Hi devel I've noticed a while ago that Redhat's Bugzilla has had, in "Red Hat Enterprise Linux 8" as one of the options "CentOS Stream" - which is where I've been recently reporting to. But I wonder about bugs relating to CentOS infra/repos - where to submit those, would you know? many thanks, L.

2 1

ssh pubkey login from root@linux to administrator@windows
by Ralf Prengel 16 Feb '21

16 Feb '21

Hallo, I try to configure a ssh login with public key login from windows to root. Login work when entering the password but using a public key doesn t work. I m using win10 an the MS ssh server addon. root should login as administrator. I read and tried out several tutorial but without success. Next problem is that I can t find any logfiles to analyze for hint. Ralf

1 1

Dual WAN on EL8 desktop.
by Thomas Stephen Lee 15 Feb '21

15 Feb '21

Hi, I have two internet connections from two ISPs. I also have a desktop with two Ethernet ports. My question: What is the best way to get the maximum out of two internet connections in EL 8 for my desktop? Thanks --- Lee

4 3

Delta Chat on CentOS 7
by H 14 Feb '21

14 Feb '21

Has anyone compiled Delta Chat to run on CentOS 7? I know it is available as a Flatpak and as an AppImage (https://delta.chat/en/download) but I wonder if there might be benefits to compile and run natively on CentOS.

1 0

Changing command line version of php for apache
by H 14 Feb '21

14 Feb '21

I have updated php on a Centos 7 system to use php 7.2 from sclo. Apache running on the system is also using php 7.2 as shown by phpinfo(), however, apache continues to use the default version of php, ie 5.4.16, when that user launches a process from the command line. All other users default to php 7.2 when running from the command line which is correct. For some reason I have missed configuring apache php-cli correctly. I have googled and found many examples on how to change the configuration settings so that apache uses php 7.2 when serving web pages but in this case it is php-cli that needs to be corrected to use a later version. What should I check? What have I missed? By the way, I am not planning to remove php 5.4 from the system since it might be needed for something at a later time. Thanks.

4 8

CentOS 7, selinux and pop_port_t
by H 12 Feb '21

12 Feb '21

I am muddling my way through learning selinux when installing a webapp with httpd as the webserver running CentOS 7. The app allows the user to send/receive mail etc but it seems that I have yet to allow access to imap port 993. So far it seems this is configured through pop_port_t but setsebool httpd_can_network_connect 1 does not include pop_port_t. In the audit log I have: type=AVC msg=audit(1613093671.415:155086): avc: denied { name_connect } for pid=22431 comm="httpd" dest=993 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:pop_port_t:s0 tclass=tcp_socket permissive=0 Yet, running the below sesearch -A -s httpd_t -c tcp_socket -p name_connect -d -C tells me ET allow httpd_t pop_port_t : tcp_socket name_connect ; [ httpd_can_sendmail ] I am obviously missing something. Does anyone know how to enable access to pop_port_t?

2 1

el7 systemd service:: ensure var/log owner when User is specified
by Adrian Sevcenco 12 Feb '21

12 Feb '21

Hi! Does anyone have an idea how can i (in a nice way [1]) to ensure ownership/permissions of log directory in /var/log for a unit that drops privileges to a user (with User=/Group=) [1] The ugly way being with script in StartPre and sudo in Start so i want to use User= I'm aware of LogsDirectory= but is not available on EL7 Thanks a lot! Adrian

5 4

Update - Resizing a QEMU guest display
by Bill Gee 11 Feb '21

11 Feb '21

Strahil Nikolov and I took this conversation off-line for a few days. The thread of our discussion is below. Net result: No solution is yet found. Strahil had some very good ideas, but they did not pan out in this case. For archiving - and in hope that someone may have some other ideas! - I post this back to the list. -- Bill Gee ---------- Forwarded Message ---------- Subject: Re: [CentOS] Resizing a QEMU guest display Date: Tuesday, February 9, 2021, 10:38:08 PM CST From: Strahil Nikolov <hunter86_bg(a)yahoo.com> To: bgee(a)campercaver.net, Bill Gee <bgee(a)campercaver.net> Erm... mine was spice-vdagent.service , and not '.socket'.Never mind, it could be something else. Best Regards,Strahil Nikolov On Tue, Feb 9, 2021 at 21:52, Bill Gee<bgee(a)campercaver.net> wrote: I restarted spice-vdagentd.socket on the guest that will not resize. It still will not resize. [root@practice21a ~]# systemctl restart spice-vdagentd.socket [root@practice21a ~]# systemctl status spice-vdagentd.socket ● spice-vdagentd.socket - Activation socket for spice guest agent daemon Loaded: loaded (/usr/lib/systemd/system/spice-vdagentd.socket; static) Active: active (listening) since Tue 2021-02-09 13:43:10 CST; 8s ago Triggers: ● spice-vdagentd.service Listen: /run/spice-vdagentd/spice-vdagent-sock (Stream) CGroup: /system.slice/spice-vdagentd.socket Feb 09 13:43:10 practice21a.billgee.local systemd[1]: Listening on Activation socket for spice guest a> [root@practice21a ~]# ps ax | grep spice 3018 ? Ssl 0:00 /usr/bin/spice-vdagent 3032 ? Ssl 0:00 /usr/sbin/spice-vdagentd 3554 pts/0 S+ 0:00 grep --color=auto spice [root@practice21a ~]# But! Just to be sure, I checked the guest that WILL resize. There is no service on it called spice-vdagentd.socket! There is also no process with spice in the name. The guest that should work does not, and the guest that should not work does! -- Bill Gee On Tuesday, February 9, 2021 12:56:38 PM CST you wrote: > The serviceis indirect, which means that another unit has to 'call' it. Try restarting the service in the VM. > # systemctl status spice-vdagentd.service ● spice-vdagentd.service - Agent daemon for Spice guests Loaded: loaded (/usr/lib/systemd/system/spice-vdagentd.service; indirect; vendor preset: enabled) Active: active (running) since Mon 2021-02-08 22:31:06 EET; 22h ago Main PID: 27963 (spice-vdagentd) Tasks: 1 CGroup: /system.slice/spice-vdagentd.service └─27963 /usr/sbin/spice-vdagentd Feb 08 22:31:06 openshift1 systemd[1]: Starting Agent dae...Feb 08 22:31:06 openshift1 systemd[1]: Started Agent daem...Feb 08 22:31:07 openshift1 spice-vdagentd[27963]: opening...Hint: Some lines were ellipsized, use -l to show in full. > Best Regards,Strahil Nikolov > > On Tue, Feb 9, 2021 at 20:50, Bill Gee<bgee(a)campercaver.net> wrote: > Hmmmm.... I am missing something. Why would rebooting the entire computer NOT restart the service? > > > And for that matter - Exactly what service are you talking about? Can you be more specific? > > > > The service is of type indirect. Try to restart only the service (not the guest). > > > Best Regards,Strahil Nikolov > > > > > > > > > On Tue, Feb 9, 2021 at 20:31, Bill Gee<bgee(a)campercaver.net> wrote: > > > The host and all of its guests have been rebooted multiple times in the last two days. > > > > > > > > > > > > > Have you restarted the service ?Yesterday I built a CentOS 7 system and spice didn't resize untill I restarted the service. > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > > > > > > On Mon, Feb 8, 2021 at 14:40, Bill Gee<bgee(a)campercaver.net> wrote: Hi Strahil - > > > > > > > > > > > > > > Thanks for the link. Unfortunately it is not helpful. The spice agent is already installed on the guest, and the spice channel is already configured. > > > > > > > > > > > > > > [bgee@practice21a ~]$ rpm -qa | grep spice > > > > > > > spice-vdagent-0.20.0-3.fc33.x86_64 > > > > > > > > > > > > > > A question occurs to me ... The working guest also has both the spice-vdagent package and the spice channel. Why does it work and the other guest does not? > > > > > > > > > > > > > > > I think the following is a good start: > > > > > > > > 11.3. SPICE Agent Red Hat Enterprise Linux 7 | Red Hat Customer Portal > > > > > > > > | > > > > > > > > | > > > > > > > > | > > > > > > > > | | | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > | > > > > > > > > | > > > > > > > > | | > > > > > > > > 11.3. SPICE Agent Red Hat Enterprise Linux 7 | Red Hat Customer Portal > > > > > > > > > > > > > > > > The Red Hat Customer Portal delivers the knowledge, expertise, and guidance available through your Red Hat subscription. > > > > > > > > | | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > > > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > > > > > > > > > On Sun, Feb 7, 2021 at 20:29, Bill Gee<bgee(a)campercaver.net> wrote: Hi Strahil - > > > > > > > > > > > > > > > > How does one reach a guest via spice? I am not familiar with any remote access application called "spice". I have tried two methods of accessing the host. First is to open it from the Virtual Machine Manager on the host. Second is to use TigerVNC to access it across the local network. > > > > > > > > > > > > > > > > I see a package installed on the guest which looks like the guest agent. Is there more that needs to be added? This is the only qemu package installed on both the Fedora machine that does not resize and the CentOS7 machine that will resize. The versions are way different between the two guests. > > > > > > > > > > > > > > > > [root@practice21a ~]# rpm -qa | grep qemu > > > > > > > > qemu-guest-agent-5.1.0-9.fc33.x86_64 > > > > > > > > > > > > > > > > The Fedora guest has, as you see, version 5.1.0-9. The CentOS7 guest has version 2.12.0-3. Perhaps the Fedora guest version is too new to run on a CentOS7 host?? > > > > > > > > > > > > > > > > I see other QEMU packages available. One of them is called "qemu-device-display-qxl" which is very suggestive. However, that package is NOT installed on the CentOS7 guest and yet that guest works. > > > > > > > > > > > > > > > > Another package I see is "libvirt-daemon-driver-qemu". This package is installed on the host but is not present on either guest. Is it needed on guests? > > > > > > > > > > > > > > > > > Have you tried to reach the VM via spice ?Also check if qemu's guest agent is runningin the VM. > > > > > > > > > > > > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > CentOS mailing list > > > > > > > > CentOS(a)centos.org > > > > > > > > https://lists.centos.org/mailman/listinfo/centos > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > CentOS mailing list > > > > > > > CentOS(a)centos.org > > > > > > > https://lists.centos.org/mailman/listinfo/centos > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -----------------------------------------

1 0

Re: [CentOS] udev rules & USB devices - ignored at boot
by lejeczek 11 Feb '21

11 Feb '21

On 09/02/2021 18:25, Strahil Nikolov wrote: > CentOS 7 doesn't use the old naming convention but ,if you > set a device name and mac address for your connection, the > network stack will rename the device during activation. > > Try with: > > SUBSYSTEM=="net", ACTION=="add|change", DRIVERS=="?*", > ATTR{address}=="00:1e:10:1f:00:00", ATTR{type}=="1", > pop NAME="lteusb" dnf pulled in quite a few updates in the meanwhile but most likely "change" does the trick. I thought it had something to do with USB/kernel/subsystems parts as the very same rules worked for PCIe devices, those worked at re/boot. many! thanks Strahil. > > Best Regards, > Strahil Nikolov > > On Mon, Feb 8, 2021 at 17:04, lejeczek via CentOS > <centos(a)centos.org> wrote: > > > On 08/02/2021 08:10, Strahil Nikolov wrote: > > Can you share your udev rules ? > > > > Best Regards, > > Strahil Nikolov > > > > On Sun, Feb 7, 2021 at 15:33, lejeczek via CentOS > > <centos(a)centos.org <mailto:centos@centos.org>> wrote: > > Hi guys, > > > > I have an Ethernet USB adapter for which udev > executes my > > custom rules but!... udev does it only at plug-in > > event and > > not! when the USB stays plugged in during a > reboot, then > > same rules are ignored (or some other problem > results in > > udev failure to do the same when device is > plugged to a > > running system). > > My system is just an average box with a Ryzen on > a B550 > > platform. > > Anybody sees this reproduce? > > many thanks, L. > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org <mailto:CentOS@centos.org> > <mailto:CentOS@centos.org <mailto:CentOS@centos.org>> > > https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos> > > <https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos>> > > > simple rules: > > SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", > ATTR{address}=="00:1e:10:1f:00:00", ATTR{type}=="1", > KERNEL=="eth*", NAME="lteusb" > > like I said - I get iface "lteusb" when I plug the USB > so it > works. If I leave that USB plugged in and reboot then no > "lteusb". > > regards, L. > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org <mailto:CentOS@centos.org> > https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos> >

1 0

smba shares are unreachable once or twice per month
by Prengel, Ralf 10 Feb '21

10 Feb '21

Hallo, I ve a problem with my samba-server. We are using a centos 7.7 with an samba exporting samba-shares. Logins are managed by our Windows-AD. The samba server has only the function to exports hares. Windows clients are Win10 patched every month. Our problem: Once or twice a month shares aren't akctive any longer and reachable for the Window-Clients. Network can nor be a reason because the same directory exported via NFS is reachable for all Linux-NFS-Client. Normally we disconect and connect the Samba server in the AD and after a reboot the shares are working again but that cant be the solution ;-) Can anyone give me hints hwo to anaylse and solving the problem. Thanks Ralf

3 2

CentOS-announce Digest, Vol 191, Issue 3
by centos-announce-request＠centos.org 10 Feb '21

10 Feb '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0411 Important CentOS 7 flatpak Security Update (Johnny Hughes) 2. CEBA-2021:0439 CentOS 7 glibc BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Feb 2021 14:32:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0411 Important CentOS 7 flatpak Security Update Message-ID: <20210209143253.GA26338(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0411 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0411 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0e230546571aa26c06f1097967584ab4b9e777e7ca6c94d45f8706a36bdccc22 flatpak-1.0.9-10.el7_9.x86_64.rpm 724795eec6065da1df593d22a6a359fc5b241aec5a3916cbec646ff78f2196ba flatpak-builder-1.0.0-10.el7_9.x86_64.rpm 85ac0468355fd6847c79849e947fd3b5d88f606ad3aa6fd06cb4aca3fe3c9fc8 flatpak-devel-1.0.9-10.el7_9.x86_64.rpm 6a5560cf575ee9bfa9cac85044e94e3bce3ea85e26431c99e41877289cf82b64 flatpak-libs-1.0.9-10.el7_9.x86_64.rpm Source: 170d39f61f08b19f0c202440b9ac801e8d5e80ec0240b8cd0f3a9d85a3c109d4 flatpak-1.0.9-10.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 9 Feb 2021 14:33:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0439 CentOS 7 glibc BugFix Update Message-ID: <20210209143356.GA26542(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0439 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0439 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ee561a3f0dd8945edec3478e8426cc324bdf6fc5fe6a31d762cfae60d3e14830 glibc-2.17-323.el7_9.i686.rpm b2b420ac2c03b3a2e4cadd073857498446180ec51a863fe30335c9da3a963fde glibc-2.17-323.el7_9.x86_64.rpm f48d75115ac638576d608849a173ace6a70c2430a2e0226487652befdf004b27 glibc-common-2.17-323.el7_9.x86_64.rpm acbb0c34227bd9c7bba35cfa08b4942dd141ee4ccadd128d8acedaef5e31522c glibc-devel-2.17-323.el7_9.i686.rpm aab72ef4b89bc4481b87f7aaf225cbdefb62073dddddc7fc7c2b94ab11a0a936 glibc-devel-2.17-323.el7_9.x86_64.rpm 9ba71fe357dd09d1913b30b0bd83507588d8cb06eda6f2c15326f3f1384c6180 glibc-headers-2.17-323.el7_9.x86_64.rpm eae7a2d2bc9f6058c113c27e6bdea6677a865df0f7924ed51165a2653c2d2175 glibc-static-2.17-323.el7_9.i686.rpm 49e01e923bc5d1026751341c9a01ab8ef4d50d8b17e94f179de33afcbfb0b234 glibc-static-2.17-323.el7_9.x86_64.rpm cafdbebcda7664e47d81f647d715249983cbe0bb4b063c1d56ab327a8766e2d0 glibc-utils-2.17-323.el7_9.x86_64.rpm 27d1ba676d3d4007102e714f71f0f4e97d46890c6eed54e5f10720ff65e7cea8 nscd-2.17-323.el7_9.x86_64.rpm Source: cb68b648ffec5a38b0cef7e6a88fb2dfb6357c8f0a17cf0331376a3cdfd41d97 glibc-2.17-323.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 191, Issue 3 ***********************************************

1 0

SCLO php70 imap missing
by H 10 Feb '21

10 Feb '21

I am installing php70 on a machine running CentOS 7 for a particular reason and needed sclo-php70-php-imap which I believe is the imap module for php70 from SCL. It, however, does not seem to be available even though https://cbs.centos.org/koji/buildinfo?buildID=24734 suggests it should be. Am I missing something?

1 0

Resizing a QEMU guest display
by Bill Gee 09 Feb '21

09 Feb '21

Hello everyone - I think I know the answer, but just in case ... I want to run it by the experts. I have a machines running CentOS 7. "uname -a" returns this: Linux practice7.billgee.local 3.10.0-1160.15.2.el7.x86_64 #1 SMP Wed Feb 3 15:06:38 UTC 2021 x86_64 x86 _64 x86_64 GNU/Linux This machine has an nVidia GS8400 and uses the nouveau driver. Its main job is to be a host for QEMU/KVM virtual machines. The QEMU packages on the host are: [bgee@practice7 ~]$ rpm -qa | grep qemu qemu-kvm-1.5.3-175.el7_9.3.x86_64 qemu-guest-agent-2.12.0-3.el7.x86_64 qemu-kvm-common-1.5.3-175.el7_9.3.x86_64 qemu-img-1.5.3-175.el7_9.3.x86_64 libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.x86_64 ipxe-roms-qemu-20180825-3.git133f4c.el7.noarch One of the guest VMs is Fedora 33. The guest comes up with a display resolution of 1024x768. I have not found a way to change it to something higher. If I go to the Settings - Display item in Fedora, there is a long list of resolutions. No matter what I choose, the system will switch to that resolution for about 1/2 second and then go back to 1024x768. This happens when using VNC to connect remotely and also when running on the host computer. Resizing the guest display window does nothing except make big black borders around the guest display. The guest video configuration in the virtual machine manager is set for "QXL". In my searching I found several suggestions to use "virtio" instead. When I make that change and start the guest, it immediately throws an error: "This QEMU does not support 'virtio' video device" I also tried "vmvga" and "cirrus". The cirrus setting does not resize and also loses coordination of the mouse pointer. The vmvga setting gives the same message about not being supported in this QEMU. I verified that the spice-vdagent package is installed on the guest VM. The virtual machine manager has "Resize guest with window" set to ON. Just to make life really interesting... Another guest VM on the same host is running CentOS7. That machine happily resizes! It is set for QXL in the virtual machine manager. I think I am just out of luck. I found some references which say that CentOS 7 does not have support for virtio displays. Is that right? Is there some way to resize the Fedora guest? I don't care about dynamic sizing by dragging a window border. If I can choose something and have it stick, I would be happy. Thanks! -- Bill Gee

2 5

Recommendation for 10 gigabit NICs on CentOS8
by Strahil Nikolov 09 Feb '21

09 Feb '21

Hi All, can you share what kind of old NICs do you use on CentOS 8 (Stream or not , it doesn't matter) without any issues? I was looking at ebay and I found some pretty old Mellanox "ConnectX" or "ConnectX-2" but I seriously doubt they will work on CentOS 8. Any proposals are also welcome. I don't care of the brand as long as it is PCIe and is supported by the vanilla kernel. Best Regards, Strahil Nikolov

4 3

firewalld - same source in different zones
by Łukasz Posadowski 08 Feb '21

08 Feb '21

Hi. I have a little trouble with firewalld. I'm trying to open some ports for monitoring server, but it's in the same network as "home" zone: Monitored host (192.168.111.60): lukasz @ strategie 17:52:19 ~ $ -> sudo firewall-cmd --get-active home sources: 192.168.111.0/24 (open ports 22, 80, 443) monitoring sources: 192.168.111.19 (open ports: 5666) public interfaces: ens18 (no open ports) --------------------------------------------------- Monitoring host (192.168.111.19): lukasz @ potemkin 17:57:25 ~ $ -> telnet strategie.ping.local 5666 Trying 192.168.111.60... telnet: connect to address 192.168.111.60: No route to host lukasz @ potemkin 17:57:26 ~ $ -> telnet strategie.ping.local 80 Trying 192.168.111.60... Connected to strategie.ping.local. Escape character is '^]'. ^] telnet> Connection closed. --------------------------------------------------- I think there are conflicting rules on a monitored host, that: - prevent access to 5666 from 192.168.111.0/24, - give access to 5666 from 192.168.111.19 and packets from potemkin are routed trough a home zone. I really would like to have dedicated "monitor" zone. Is there a way to give "monitor" zone more priority, than "home"? I may end with OpenVPN on potemkin and use 172.30.25.0/24 for monitoring, but, apart from encryption aspect, it seems a little excessive. Thank You. -- Łukasz Posadowski

2 2

Re: [CentOS] udev rules & USB devices - ignored at boot
by lejeczek 08 Feb '21

08 Feb '21

On 08/02/2021 08:10, Strahil Nikolov wrote: > Can you share your udev rules ? > > Best Regards, > Strahil Nikolov > > On Sun, Feb 7, 2021 at 15:33, lejeczek via CentOS > <centos(a)centos.org> wrote: > Hi guys, > > I have an Ethernet USB adapter for which udev executes my > custom rules but!... udev does it only at plug-in > event and > not! when the USB stays plugged in during a reboot, then > same rules are ignored (or some other problem results in > udev failure to do the same when device is plugged to a > running system). > My system is just an average box with a Ryzen on a B550 > platform. > Anybody sees this reproduce? > many thanks, L. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org <mailto:CentOS@centos.org> > https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos> > simple rules: SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:10:1f:00:00", ATTR{type}=="1", KERNEL=="eth*", NAME="lteusb" like I said - I get iface "lteusb" when I plug the USB so it works. If I leave that USB plugged in and reboot then no "lteusb". regards, L.

2 1

Challenging times in trying to access oracle Linux documentation
by Shamim Shahriar 07 Feb '21

07 Feb '21

Good afternoon everyone, hope you all are well. Apologies if this is considered unwelcome -- asking oracle question in centos group -- but a lot of centos Vs oracle is going on here so hoping this will not be shot down. I am unable to access any of the oracle documentation I need, as it keeps on asking for support identifier number, which, as far as I can tell, is only available if I purchase an expensive support subscription. Even obtaining a free oracle cloud account does not give you any access. I was trying to access oracle FreeIPA setup how to documentation, and even after many emails work oracle support over several weeks -- no resolution! They are not even clear as to what I need to do to obtain access -- all they are saying is I need a SI number!!! Has anyone experienced that or is it me having the issue? If I have to pay subscription, why not continue with RHEL subscription anyway? Would appreciate if someone could please confirm. Best regards Shamim

9 15

udev rules & USB devices - ignored at boot
by lejeczek 07 Feb '21

07 Feb '21

Hi guys, I have an Ethernet USB adapter for which udev executes my custom rules but!... udev does it only at plug-in event and not! when the USB stays plugged in during a reboot, then same rules are ignored (or some other problem results in udev failure to do the same when device is plugged to a running system). My system is just an average box with a Ryzen on a B550 platform. Anybody sees this reproduce? many thanks, L.

1 0

letsencrypt error
by Jerry Geis 06 Feb '21

06 Feb '21

Hi all - So I just ran into the changes lately from letsencrpt. certbot-auto is no longer available. I added this to httpd.conf <VirtualHost *:80> ServerName mydomain </VirtualHost> service httpd restart When I do "certbot -d mydomain" I get this : Domain: mydomain Type: unauthorized Detail: Invalid response from http://mydomain/.well-known/acme-challenge/i_fU1bFrQZzgfVI2FtWo8Ov0ITjplCcP… [97.107.162.8]: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>403 Forbidden</title>\n</head><body>\n<h1>Forbidden</h1>\n<p" What did I miss ? Thanks Jerry

4 8

msmilter doesn t start / Can't open PID file /run/MSMilter.pid
by Ralf Prengel 05 Feb '21

05 Feb '21

Hallo, msmilter doesn t start. Has anyone a hint for me? I used this tutorial. /run exists and selinux is disabled. https://www.awsmonster.com/2020/03/how-to-install-mailscanner-stable-v521.h… Thanks for a hint. Ralf -- Unit msmilter.service has begun starting up. Feb 05 15:09:14 vader2 msmilter-init[1001]: Edit the file /etc/MailScann-- Unit msmilter.service has begun starting up. Feb 05 15:09:14 vader2 msmilter-init[1001]: Edit the file /etc/MailScanner/MailScanner.conf according to Feb 05 15:09:14 vader2 msmilter-init[1001]: your needs. When complete, edit /etc/MailScanner/defaults and set Feb 05 15:09:14 vader2 msmilter-init[1001]: the variable to enable MailScanner to run: Feb 05 15:09:14 vader2 msmilter-init[1001]: run_mailscanner=1 Feb 05 15:09:14 vader2 systemd[1]: (yet?) after start: No such file or directory Feb 05 15:09:14 vader2 systemd[1]: Failed to start LSB: MSMilter daemon. -- Subject: Unit msmilter.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel er/MailScanner.conf according to Feb 05 15:09:14 vader2 msmilter-init[1001]: your needs. When complete, edit /etc/MailScanner/defaults and set Feb 05 15:09:14 vader2 msmilter-init[1001]: the variable to enable MailScanner to run: Feb 05 15:09:14 vader2 msmilter-init[1001]: run_mailscanner=1 Feb 05 15:09:14 vader2 systemd[1]: Can't open PID file /run/MSMilter.pid (yet?) after start: No such file or directory Feb 05 15:09:14 vader2 systemd[1]: Failed to start LSB: MSMilter daemon. -- Subject: Unit msmilter.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

2 1

Which bug tracker should I use to report things to CentOS ? (recap)
by Fabian Arrotin 05 Feb '21

05 Feb '21

With some moving parts within the CentOS Project, some people are now confused about where to report things, as https://bugs.centos.org isn't the only bugs/tickets tracker, so let's just have a quick recap so that people aren't confused anymore ? :) # CentOS Stream (all kind of tickets) see https://wiki.centos.org/FAQ/CentOSStream#Where_do_I_report_bugs.3F So basically https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20… # CentOS Infra, CBS, SIGs, mirror, CI, etc see previous mail : https://lists.centos.org/pipermail/centos-devel/2020-August/055980.html # All the rest (CentOS Linux pkgs, etc) https://bugs.centos.org Hope that it helps , as we have people asking on irc the status of a ticket that was filed in wrong tracker (and so also not correct category as for example infra categories were removed/archived on https://bugs.centos.org) and not reviewed. -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

Filesystem choice for BackupPC extrenal drive
by Kenneth Porter 05 Feb '21

05 Feb '21

I'm setting up a CentOS 7 box as a BackupPC 4 server to back up Windows boxes on my LAN. I'm using an external 1.5 TB USB drive for the "pool". BackupPC deduplicates by saving all files in a pool, a directory hiearchy with each file named for the checksum of the file, and the directories acting as a hash tree to reach each pool file. A backup for a specific workstation is a directory tree of checksums and metadata that point into the pool for the actual file data. Incremental backups are reverse deltas from periodic "filled" backups of all files. I'm using rsyncd to pull changed files from the workstations. I'm deciding which filesystem to use for my external drive. I'm thinking the main candidates are ext4 and xfs. What's the best filesystem for this application? <https://github.com/backuppc/backuppc> Repo for CentOS 7 users: <https://copr.fedorainfracloud.org/coprs/hobbes1069/BackupPC/>

3 2

Intel/64 CentOS VM running on a Mac M1?
by Lists 04 Feb '21

04 Feb '21

My Dell Precision M3800 running Fedora works great but is really starting to show its age, and I'm thinking about getting a new Mac M1-based laptop as it would really be useful for Video production. But I really need to have a IA64 CentOS 7/8 VMs running locally for development as I'm often on the road and flaky Internet makes it a necessity to keep productivity up. I've been unable to officially confirm that VMWare/ Parallels/VirtualBox intend to support IA64 based OS's and it *needs* to be an exact (VM) copy of production so I can trial environments and builds prior to roll out. Calling around, I actually got ahold of a sales staff at Parallels who assured me (in broken India-accent English) that "of course all OS will supported when the trial complete" but given that I wasn't sure that he really understood my question I remain uncertain. Anybody here have any more information than I do?

10 14

RHEL <==> CentOS <==> Oracle Linux migration scripts
by Nicolas Kovacs 04 Feb '21

04 Feb '21

Hi, I've recently done some extensive testing with the centos2ol.sh migration script provided by Oracle: https://github.com/oracle/centos2ol The script works perfectly on both CentOS 7.x and 8.x, so I wrote a little blog article about it: https://blog.microlinux.fr/migration-centos-oracle-linux-cas-pratique/ I wonder if something similar exists for other use cases, e. g. migrate from CentOS to Red Hat Enterprise Linux. Why I'd like to do this? Well, a significant part of my work is teaching Linux and writing books about it. My last two books have been based on CentOS 7.x, and I'd like future editions to be distribution-agnostic within the RHEL family. This is now an option since Red Hat offered free Developer subscriptions a few days ago. In other words, future blog articles and book chapters will be based on RHEL (the real thing), but I'll also test everything with the various clones, namely Oracle Linux and (probably) Rocky Linux as soon as there's a usable version. Public server providers like Scaleway offer the "usual suspects" among distributions, e. g. Ubuntu, Debian, CentOS and FreeBSD. So I'd like to know if there's a script out there that converts an existing CentOS (or Oracle Linux) installation into a RHEL system. Any suggestions ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 1

not a Centos topic, but since many had concerns ......
by R C 03 Feb '21

03 Feb '21

Hello, not a Centos topic perse, but since many had concerns about 'regular' Centos going away, and "Centos Stream" replacing it. This is what I read today, might have been around longer though, don't know. "New Year, new Red Hat Enterprise Linux programs: Easier ways to access RHEL" https://www.redhat.com/en/blog/new-year-new-red-hat-enterprise-linux-progra…

4 5

CentOS-announce Digest, Vol 191, Issue 1
by centos-announce-request＠centos.org 03 Feb '21

03 Feb '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. ConfigManagement SIG : removal of old/unmaintained ansible versions (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Tue, 2 Feb 2021 13:48:17 +0100 From: Fabian Arrotin <arrfab(a)centos.org> To: "The CentOS developers mailing list." <centos-devel(a)centos.org>, centos-announce(a)centos.org Subject: [CentOS-announce] ConfigManagement SIG : removal of old/unmaintained ansible versions Message-ID: <d5ca00f8-6ae8-de4d-45ac-750d4b60f247(a)centos.org> Content-Type: text/plain; charset=utf-8 Notification: So far, the ConfigManagement SIG rebuilt and shipped some Ansible versions through different repos (per "branch") over the last months/years , so we currently still have on mirror.centos.org (and so external mirrors) the following repositories : For CentOS 7: - ansible 2.6 - ansible 2.7 - ansible 2.8 - ansible 2.9 For CentOS 8 (also working on 8-stream) : - ansible 2.9 Per Ansible EOL policy (see https://docs.ansible.com/ansible/devel/reference_appendices/release_and_mai…) we'll continue to maintain 2.8 (security fixes if they appear) and 2.9 but we'll remove previous versions/repositories. Worth knowing that they'd still be available through vault.centos.org though, but not available directly through a centos-release-ansible*.rpm (configuring yum/dnf repositories on systems) So far I never had a chance/time to look at ansible 2.10, as there is a split between ansible-base and ansible-core and then collections. My goal would be to discuss with EPEL/Fedora maintainer (Kevin Fenzi) about the best way to have it working and then we can start (re)building through configmanagement tags on https://cbs.centos.org Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 191, Issue 1 ***********************************************

1 0

Reminder: CentOS Dojo this week. FOSDEM this weekend
by Rich Bowen 02 Feb '21

02 Feb '21

TL;DR: https://wiki.centos.org/Events/Dojo/FOSDEM2021 <-- Dojo Thursday and Friday https://fosdem.org/2021/ <-- FOSDEM Saturday and Sunday The full schedule of talks for the Dojo is available at the above URL, and includes a roundtable discussion with (some of) the Board. Registration is free, and all talks will be recorded for later viewing on our YouTube channel. But of course if you want to participate in the Q&A aspect of the event, you'll need to be there. Hoping to see you Thursday, --Rich

1 0

grub2-mkconfig with custom kernel
by Jerry Geis 02 Feb '21

02 Feb '21

Hi - I am running CentOS 7 I tried to add a custom initrd and custom vmlinux when I run grub2-mkconfig -o /boot/grub2/grub.cfg the custom files are not listed . when I reboot my entry for /etc/grub.d/40_custom is not listed either. How do I get grub2-mkconfig to recognize my entries ? Is grub2-mkconfig only looking at installed kernels - How do I get it to see mine? Thanks Jerry

1 1

Amazon Alexa on CentOS 7 - how?
by Frank Bures 02 Feb '21

02 Feb '21

Hi, I am looking for an app for CentOS that would enable me to control my Alexa compatible devices from my KDE desktop. Currently, I have to use an iPad for that. I found an app called Alexa installable via snap, but it had not been updated since 2017 and I could not find any detailed info about it. Is there an app out there that would allow me to do this? Thanks Frank -- <listfrank1(a)gmail.com>

3 2

luks encrypted - tell at boot to skip/ignore it - how?
by lejeczek 01 Feb '21

01 Feb '21

Hi guys. How to tell grub/kernel to ignore, skip either all or a specific block device which is luks-ecrypted - would anybody know? I have a box (kvm) which had a "secondary" luks-encrypted disk which now is detached and Centos just hangs @boot waiting for that disk. many thanks, L.

2 1

Samba setup
by Robert G. (Doc) Savage 31 Jan '21

31 Jan '21

I'm following https://www.linuxbabe.com/redhat/set-up-samba-server-on-centos-8-rhel-8-for… to set up Samba 4.12.3-12 on my Storinator fileserver running CentOS 8.3. I am trying to share out /tank/Windows/ as a Samba share: # ls -al /tank total 61 drwxr-xr-x. 6 root root 7 Dec 26 10:43 Backups drwxr-xr-x. 6 root root 6 Dec 4 22:47 Repos drwxrwxrwx. 2 doc doc 4 Dec 28 14:01 VMs drwxrwxrwx. 2 root root 2 Jan 17 17:04 Windows My /etc/samba/smb.conf file is set up as follows: # testparm Load smb config files from /etc/samba/smb.conf Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions # Global parameters [global] printcap name = cups security = USER idmap config * : backend = tdb cups options = raw hosts allow = 192.168.0 ... [public] comment = public share, no need to enter username and password guest ok = Yes path = /tank/Windows read only = No When I try to map network drive from my Windows 10 PC using the graphical File Explorer, it asks me for my username and password. It doesn't accept my password. When I try to map it at the CMD cli, I get: C:\> net use S: \\192.168.1.20\public\ System error 67 has occurred. The network name cannot be found. Could this be a network browsing problem in Samba? What have I missed? --Doc Savage Fairview Heights, IL

3 5

Re: [CentOS] Samba setup
by Robert G. (Doc) Savage 30 Jan '21

30 Jan '21

On Fri, 2021-01-29 at 04:40 +0000, Strahil Nikolov wrote: > I know from experience that you need to decide how you control access > and you got 2 options: > > - Linux directory is set to 777 and all control is in samba > - Linux directory is set as if unix user will access it and you use > the sam uid/gid for both client and server accounts (AD, FreeIPA, > LDAP) > > What is your settings right now ? > > Best Regards, > Strahil Nikolov Strahil, 777 and ownership of /tank/Windows is nobody:nobody. It's actually an empty directory right now. Not using AD/FreeIPA/LDAP. --Robert Savage Fairview Heights, IL > > > On Thu, Jan 28, 2021 at 7:57, Robert G. (Doc) Savage via CentOS > > <centos(a)centos.org> wrote: > > On Tue, 2021-01-19 at 17:18 +0100, Götz Reinicke wrote: > > > > > > Anything in the samba logs? May be SELinux/Firewall issues? > > > > Götz, > > > > Unfortunately, no. > > > > The nmbd log verifies that the fileserver's samba service is the > > local > > master browser for WORKGROUP on both eth0 and virbr0. > > > > [2021/01/17 19:02:22.190795, 0] > > > > ../../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2 > > ) > > ***** > > Samba name server LIONSTORE is now a local master browser for > > workgroup > > WORKGROUP on subnet 192.168.1.20 > > ***** > > > > [2021/01/17 19:02:22.191085, 0] > > > > ../../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2 > > ) > > ***** > > Samba name server LIONSTORE is now a local master browser for > > workgroup > > WORKGROUP on subnet 192.168.122.1 > > ***** > > > > The samba smbd log simply reports the connection denials: > > > > [2021/01/17 23:07:40.304626, 0] > > ../../lib/util/access.c:371(allow_access) > > Denied connection from 192.168.1.30 (192.168.1.30 > > > > There's nothing in the SELinux logs for that date. > > > > I checked firewall-config on the storage server and verified that > > the > > samba service is allowed (but not samba-client or samba-dc). > > > > Is there a really comprehensive setup checklist available for > > setting > > up samba on CentOS? The partial how-tos I've been able to find are > > obviously not enough. I'm looking for completer smb.conf setup, > > firewall settings, required services, directory permissions, > > accounts, > > and anything else that's required. I'm running up against very > > unhelpful roadblocks that seem to indicate a critical permissions > > problem but nothing specific. > > > > V/R > > --Doc Savage > > Fairview Heights, IL > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos

2 3

Telegram on CentOS 7
by H 29 Jan '21

29 Jan '21

Is anyone running Telegram on CentOS 7? I see that it seems to be available as a snap and also in the getpagespeed repository. I try to avoid snap apps but am not familiar with the latter repository. Does anyone have experience with either source for the program?

3 4

How do I download RHEL 8.3 with free license and free subscription for my production servers?
by Turritopsis Dohrnii Teo En Ming 29 Jan '21

29 Jan '21

Subject: How do I download RHEL 8.3 with free license and free subscription for my production servers? Good day from Singapore, I am referring to the following news articles. Article: CentOS is gone—but RHEL is now free for up to 16 production servers Link: https://arstechnica.com/gadgets/2021/01/centos-is-gone-but-rhel-is-now-free… Article: Red Hat’s Disruption of CentOS Unleashes Storm of Dissent Link: https://www.enterpriseai.news/2021/01/22/red-hats-disruption-of-centos-unle… How do I download Red Hat Enterprise Linux 8.3 with free license and free subscription for my production servers? When I visited Red Hat's official website, I don't see any page or any option to download RHEL 8.3 with free license and free subscription. Please advise. Thank you very much. Mr. Turritopsis Dohrnii Teo En Ming, 42 years old as of 28 January 2021 Thursday, is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant with a System Integrator (SI)/computer firm in Singapore. He is an IT enthusiast. -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

5 4

CentOS 6 fix sudo CVE-2021-3156
by Gionatan Danti 28 Jan '21

28 Jan '21

Hi all, do you know if a fix for sudo CVE-2021-3156 is available for CentOS 6? While CentOS 6 is now supported anymore, RedHat has it under its payedsupport agreement (see: https://access.redhat.com/security/vulnerabilities/RHSB-2021-002) So I wonder if some community-packaged patch exists... Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

7 11

OPIE w/ OpenSSH Account Enumeration The remote host is susceptible to an information disclosure attack.
by Kaushal Shriyan 28 Jan '21

28 Jan '21

Hi, I am running the openssh-server-7.4p1-21.el7.x86_64 on CentOS Linux release 7.9.2009 (Core). #cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) # rpm -qa |grep ssh openssh-server-7.4p1-21.el7.x86_64 libssh2-1.8.0-4.el7.x86_64 openssh-7.4p1-21.el7.x86_64 openssh-clients-7.4p1-21.el7.x86_64 While invoking the Vulnerability Assessment and Penetration Testing (VAPT) scan, we are encountering the below vulnerability. OPIE w/ OpenSSH Account Enumeration The remote host is susceptible to an > information disclosure attack. CVE-2007-2768 A patch currently does not > exist for this issue. As a workaround, ensure that OPIE for PAM is not > installed. > Version source : SSH-2.0-OpenSSH_7.4 > Installed version : 7.4 > https://seclists.org/fulldisclosure/2007/Apr/634 Any help will be highly appreciated. Thanks in Advance. Please let me know if you need any additional information. Best Regards, Kaushal -

2 1

Re: [CentOS] How to query which yum package groups a particular package is member of
by Jamie Burchell 28 Jan '21

28 Jan '21

How about using yum history to find when and why the package was installed? yum history summary dnsmasq yum history package-list dnsmasq Jamie On Wed, 27 Jan 2021 at 20:56, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > --On Wednesday, January 27, 2021 3:31 PM -0500 Stephen John Smoogen > <smooge(a)gmail.com> wrote: > > > or one can look for the comps file in /var/cache/yum > > > > network-tools has dnsmasq listed as a package > > > > repoquery says the following on my rhel box > > NetworkManager-1:1.4.0-20.el7_3.x86_64 > > libvirt-daemon-driver-network-0:4.5.0-36.el7_9.3.x86_64 > > Aha! It's actually in network-server ("Network Infrastructure Server") > group. network-tools is the next one in the comps.xml file. The group name > sounds like something I might have wanted for my application, but the > contents are really for a lightweight server like one finds in a consumer > router. > > But, except for dhcp and radvd, none of the other packages in that group > are installed, so I still don't see how I got dnsmasq on my system. Here's > the network-server package list: > > <packagereq type="optional">dhcp</packagereq> > <packagereq type="optional">dnsmasq</packagereq> > <packagereq type="optional">freeradius</packagereq> > <packagereq type="optional">quagga</packagereq> > <packagereq type="optional">radvd</packagereq> > <packagereq type="optional">rsyslog-gnutls</packagereq> > <packagereq type="optional">rsyslog-gssapi</packagereq> > <packagereq type="optional">rsyslog-kafka</packagereq> > <packagereq type="optional">rsyslog-mysql</packagereq> > <packagereq type="optional">rsyslog-pgsql</packagereq> > <packagereq type="optional">rsyslog-relp</packagereq> > <packagereq type="optional">syslinux</packagereq> > <packagereq type="optional">syslinux-tftpboot</packagereq> > <packagereq type="optional">tang</packagereq> > <packagereq type="optional">tftp-server</packagereq> > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos >

3 4

Re: [CentOS] How to query which yum package groups a particular package is member of
by Stephen John Smoogen 27 Jan '21

27 Jan '21

On Wed, 27 Jan 2021 at 15:23, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > --On Wednesday, January 27, 2021 8:07 PM +0000 J Martin Rushton via CentOS > <centos(a)centos.org> wrote: > > > Here's how to find the package for a particular file: > > That one's easy and I use this all the time: > > rpm -qf full-file-name > > I'm looking for how to get the yum group for a package. (I'm guessing a > package might even be in more than one group?) That would help explain how > the dnsmasq package got installed on my system. (It was never enabled by > systemd and isn't required by any other package. So I went ahead and > erased > it to free the space and reduce my attack surface.) > > > yum group list then look at the groups installed yum group info <group> as in yum group info base > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- Stephen J Smoogen.

2 2

How to query which yum package groups a particular package is member of
by Kenneth Porter 27 Jan '21

27 Jan '21

I'm trying to find out how dnsmasq got on my CentOS 7 system, since I use BIND for DNS. I'm guessing it was part of a base group that Anaconda installs for all systems. Red Hat has this answered on this page but the answer is only available to subscribers. I'm guessing this kind of content will be available to us once the new free subscription thing starts. <https://access.redhat.com/solutions/2534881>

2 2

Re: [CentOS] How to query which yum package groups a particular package is member of
by Stephen John Smoogen 27 Jan '21

27 Jan '21

On Wed, 27 Jan 2021 at 15:01, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > I'm trying to find out how dnsmasq got on my CentOS 7 system, since I use > BIND for DNS. I'm guessing it was part of a base group that Anaconda > installs for all systems. > > probably from virtualization if it is there.. but a way to check is repoquery --whatrequires dnsmasq Red Hat has this answered on this page but the answer is only available to > subscribers. I'm guessing this kind of content will be available to us > once > the new free subscription thing starts. > > <https://access.redhat.com/solutions/2534881> > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- Stephen J Smoogen.

1 0

Re: [CentOS] CESA-2021:0221 Important CentOS 7 sudo Security Update
by Frank Liu 27 Jan '21

27 Jan '21

Hi, Is there a reason why the update is not tagged as "security"? yum --security update sudo ... --> sudo-1.8.23-10.el7_9.1.x86_64 from updates removed (updateinfo) --> sudo-1.8.23-9.el7.x86_64 from @base removed (updateinfo) No packages needed for security; 1 packages available ...

2 1

CentOS-announce Digest, Vol 190, Issue 2
by centos-announce-request＠centos.org 27 Jan '21

27 Jan '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2021:0013 CentOS 7 tzdata BugFix Update (Johnny Hughes) 2. CEBA-2021:0209 CentOS 7 java-1.8.0-openjdk BugFix Update (Johnny Hughes) 3. CEBA-2021:0202 CentOS 7 java-11-openjdk BugFix Update (Johnny Hughes) 4. CESA-2020:5350 Important CentOS 7 net-snmp Security Update (Johnny Hughes) 5. CESA-2021:0162 Important CentOS 7 xstream Security Update (Johnny Hughes) 6. CESA-2021:0153 Moderate CentOS 7 dnsmasq Security Update (Johnny Hughes) 7. CESA-2021:0221 Important CentOS 7 sudo Security Update (Johnny Hughes) 8. CEBA-2021:0276 CentOS 7 tzdata BugFix Update (Johnny Hughes) 9. CEBA-2021:0077 CentOS 7 389-ds-base BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 25 Jan 2021 14:05:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0013 CentOS 7 tzdata BugFix Update Message-ID: <20210125140543.GA26054(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0013 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0013 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d43f51759f659c79abdf2a56831458fa8cf1af488cfda2fae914b1dd04bbaba0 tzdata-2020f-1.el7.noarch.rpm 3598bf42bdc531b55ad9bbe89ca716bd42b7f2e4ff19fa4082235369c9a26303 tzdata-java-2020f-1.el7.noarch.rpm Source: 44565f45761eb60156f6f170109a52c17ba5d1264d3c0b8c2553867b8c530d82 tzdata-2020f-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 25 Jan 2021 14:06:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0209 CentOS 7 java-1.8.0-openjdk BugFix Update Message-ID: <20210125140644.GA26330(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0209 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0209 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 830680293bf892ad9b57630cd1fd50d4415343677c361c32b8b849c399daeb14 java-1.8.0-openjdk-1.8.0.282.b08-1.el7_9.i686.rpm fde70f28b5a0ce727403a12e9a6a39a8f953d1975000b7be4be8c5434c4d3556 java-1.8.0-openjdk-1.8.0.282.b08-1.el7_9.x86_64.rpm 2bf9825999c7f3930c1032ad0b77786e49c18ee2996e142adc2d28d3b61709ed java-1.8.0-openjdk-accessibility-1.8.0.282.b08-1.el7_9.i686.rpm 824340802392135f9a064de630acd55a619c7b8240b3aa7ae13f664637c0f023 java-1.8.0-openjdk-accessibility-1.8.0.282.b08-1.el7_9.x86_64.rpm 2e1ba328190cee6e94f98145224aec06902152d1cc3188f06c1ac84dc0887d0b java-1.8.0-openjdk-demo-1.8.0.282.b08-1.el7_9.i686.rpm 917745f55091ed42757a3d445e0f98ebd8e84ff75ab716acbdd8f6e1c584a8fd java-1.8.0-openjdk-demo-1.8.0.282.b08-1.el7_9.x86_64.rpm da4cd5b16857b9f434f773471d103d61dba9fbe99a3264cfce051444c342cf1b java-1.8.0-openjdk-devel-1.8.0.282.b08-1.el7_9.i686.rpm 313a86e45fc4b42084c618c11f233c1ab6950f5af7ce19f962ea3fd1020736eb java-1.8.0-openjdk-devel-1.8.0.282.b08-1.el7_9.x86_64.rpm 39bc056b01daeb577a1d13e5d56959179803eea2c53c39eeff982663bc189df1 java-1.8.0-openjdk-headless-1.8.0.282.b08-1.el7_9.i686.rpm f3ebae8493971694208c96d6d6286e660e797bed742700585d403ce9fd145072 java-1.8.0-openjdk-headless-1.8.0.282.b08-1.el7_9.x86_64.rpm 43d76c869fe744e94bf344aa66f638f4afcac144a43ed4d8336d4147ae3bb81e java-1.8.0-openjdk-javadoc-1.8.0.282.b08-1.el7_9.noarch.rpm 895038cbd6764ef3eb9ee3cd61f7aeb95255a9dab0f3a8da8ecf81d235a2abc1 java-1.8.0-openjdk-javadoc-zip-1.8.0.282.b08-1.el7_9.noarch.rpm fae889b06ab0ce312053475d9327bbc3ab774b5205f23a802574f40fb6dd1621 java-1.8.0-openjdk-src-1.8.0.282.b08-1.el7_9.i686.rpm 1b30b4a38b3fef0e81dd1879d3e9b159f739eadedc3e869eb5947a4bd3b25968 java-1.8.0-openjdk-src-1.8.0.282.b08-1.el7_9.x86_64.rpm Source: da53cdfa2b68153f4cb12e7d55bc6886f39fc8796f153d0674173c5555f9d95e java-1.8.0-openjdk-1.8.0.282.b08-1.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 25 Jan 2021 14:07:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0202 CentOS 7 java-11-openjdk BugFix Update Message-ID: <20210125140759.GA26634(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0202 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0202 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d6029c8033366f8fa025ecb16d28c0d7ebe9ff2aa2c4b0f27fd5af20a22fc2d0 java-11-openjdk-11.0.10.0.9-0.el7_9.i686.rpm dda309e14f66aa1f8ced19d835b7e6ff04827b05e42baed38cfbde2ea01b3351 java-11-openjdk-11.0.10.0.9-0.el7_9.x86_64.rpm 637c8c01ec07ac21fcb709f52f870af6526eaa83bd2915683f8a6f983072e500 java-11-openjdk-demo-11.0.10.0.9-0.el7_9.i686.rpm d7d58e3708a957c3e2d7c60c347de4ffa8baf7169446426889d9fd0618af02c9 java-11-openjdk-demo-11.0.10.0.9-0.el7_9.x86_64.rpm d81b0c0ebf60fb1b4d6ccb36f93b9d93064cf246ecff7f7c16b2ddbb61c57c91 java-11-openjdk-devel-11.0.10.0.9-0.el7_9.i686.rpm e3e0d812a13816d47ae085d4f88c2d0f4d8affad6568434ab0f720442981017b java-11-openjdk-devel-11.0.10.0.9-0.el7_9.x86_64.rpm f2a450757e610e9d7a49050e04cab12edad074ddca95fd92a67972bd61fcbaba java-11-openjdk-headless-11.0.10.0.9-0.el7_9.i686.rpm 89818b9dde137228b185c849e8eec7f90bed6867be5b294a8b8121f52776af6a java-11-openjdk-headless-11.0.10.0.9-0.el7_9.x86_64.rpm 30c32ac3292a24f2136302bf5bf2d8ebf572bc2b8c57b4cb3c50ffeb223e144e java-11-openjdk-javadoc-11.0.10.0.9-0.el7_9.i686.rpm d1a6eb397fc04c57428b2ed1f9e3077ed639a5877ef02b2312725fb99c17c807 java-11-openjdk-javadoc-11.0.10.0.9-0.el7_9.x86_64.rpm 4c5528d38245aa14b33d05948eb02c322e95528485c9970733d2e5a577774d6d java-11-openjdk-javadoc-zip-11.0.10.0.9-0.el7_9.i686.rpm 28d98e71d3a3f5bef8abd07f0acc8353279545bf2aee26db49d58baded52104e java-11-openjdk-javadoc-zip-11.0.10.0.9-0.el7_9.x86_64.rpm db00d954c05dbf5ebc5e47f7671980d64911b459229bc83c8dcd6c60c4ce0b90 java-11-openjdk-jmods-11.0.10.0.9-0.el7_9.i686.rpm 4851da54ebe84600b0c7af372a59c38094992018f2ffe45bec040b2dd5d380bd java-11-openjdk-jmods-11.0.10.0.9-0.el7_9.x86_64.rpm 8c2a340bb8e3487639e7851ddf9b80b263ca137dee7948eceddfd372f4b80882 java-11-openjdk-src-11.0.10.0.9-0.el7_9.i686.rpm 0bec8227df4692ec640eaf96154a87faa5a1ab3d9c37856f4f8e0c0a98c88525 java-11-openjdk-src-11.0.10.0.9-0.el7_9.x86_64.rpm 393806557640081ee6c9dd7dc6ee00e307d9ae676a1a267d20fb4793dda538d7 java-11-openjdk-static-libs-11.0.10.0.9-0.el7_9.i686.rpm 2cee495ddd05e0808ca1e516d0b1ad02fcdf3e46ede1dadb81a285b96ab3648c java-11-openjdk-static-libs-11.0.10.0.9-0.el7_9.x86_64.rpm Source: e6eec7030d7de24b8286053fe178a78a85c6f1ad953482486bb62dbb12851295 java-11-openjdk-11.0.10.0.9-0.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 25 Jan 2021 14:08:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5350 Important CentOS 7 net-snmp Security Update Message-ID: <20210125140835.GA26839(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5350 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5350 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 46bca967117d9441489461b3e6c17e9d3e387f3c3bfba523e30b819bb00825ef net-snmp-5.7.2-49.el7_9.1.x86_64.rpm 940d3c647a6731e9ac3db41e0ac29dd98c5646b2f3d6559663e1ef5e309d5a77 net-snmp-agent-libs-5.7.2-49.el7_9.1.i686.rpm 9337c05672cf9bfec36d4f07ea3e1ff83103684578d98cb0b7c93d90c03620dc net-snmp-agent-libs-5.7.2-49.el7_9.1.x86_64.rpm 743f6a2f0afed6f677ea24028a9be02fb82801ed898d3523695bc6b923a302d3 net-snmp-devel-5.7.2-49.el7_9.1.i686.rpm b987f0cc8431b286cd14af878fe7d373d1fef790672495746f45a37477544b88 net-snmp-devel-5.7.2-49.el7_9.1.x86_64.rpm 8bad4d40202c32d3b92c589f87621067f44ac2cd0793dc3c8ca85d82dc069603 net-snmp-gui-5.7.2-49.el7_9.1.x86_64.rpm b9e5d765d9cdb4e753cc90c405374ae4f1e90a89b8969164455783fc60720afd net-snmp-libs-5.7.2-49.el7_9.1.i686.rpm bf6158e17a81b9067714e7011f8111f3764aec96494c531e4518423d302b355b net-snmp-libs-5.7.2-49.el7_9.1.x86_64.rpm 5800fe1251af68096a15f87c737c6bb60eea189076391a14cee6c95f32fdb304 net-snmp-perl-5.7.2-49.el7_9.1.x86_64.rpm 3ed462219356a67f4b4e61ac7fe20b5177652f7b0016197ed02c546f91020c7f net-snmp-python-5.7.2-49.el7_9.1.x86_64.rpm bd8ba984e8b76d404b8422b2aeaf6d8ebee207f7fe92acda66e7ef0e2f94f312 net-snmp-sysvinit-5.7.2-49.el7_9.1.x86_64.rpm ecac7aae69f045e6bb94ecf2521d78d9f8f856a67352b6d877799477a31afa6b net-snmp-utils-5.7.2-49.el7_9.1.x86_64.rpm Source: 6560320e0ff6431ae21a753f2a26a0798475dcf3bb7a2a06669c53a73347be0c net-snmp-5.7.2-49.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Mon, 25 Jan 2021 14:08:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0162 Important CentOS 7 xstream Security Update Message-ID: <20210125140847.GA26960(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0162 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0162 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f53aa25a58a78740dad5a5777ccec426834c3455b4a323c3cd264c877f39e567 xstream-1.3.1-12.el7_9.noarch.rpm 6abc3f24e051fa25828e517e1a6999a1a3612b5f97a13d8e99553cc31d24663d xstream-javadoc-1.3.1-12.el7_9.noarch.rpm Source: d078e00e0e2cb6bcffa7a7dc8d938b38d802b89cb906bcdfb2b250d3624f9991 xstream-1.3.1-12.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Mon, 25 Jan 2021 14:08:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0153 Moderate CentOS 7 dnsmasq Security Update Message-ID: <20210125140858.GA27060(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0153 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2021:0153 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bbf2b7054c85cc8831c0ffba64a4cabdc3eb23c4d32ba5484b962d4c8f22ecde dnsmasq-2.76-16.el7_9.1.x86_64.rpm 912ce11b5c1438a25af1e1961d891e6421717a57685de5add6d528d3ff3bdf42 dnsmasq-utils-2.76-16.el7_9.1.x86_64.rpm Source: 896b308d212709dca6ffb64bbbec44f0b6747ab3eea831ecf0ae9c9c745b981f dnsmasq-2.76-16.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Wed, 27 Jan 2021 00:11:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0221 Important CentOS 7 sudo Security Update Message-ID: <20210127001123.GA17548(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0221 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0221 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 78721775026f8ae9ad659054bb6aa8c453a791cc260f66e1ea959649a8f8d922 sudo-1.8.23-10.el7_9.1.x86_64.rpm d60d364eab2fcbe5b73378922674c904aa0843d27145c8b5ab2bc29462a3ddc0 sudo-devel-1.8.23-10.el7_9.1.i686.rpm 03e57a64f56503f6e79a1fc2c5923cb7b7c844a98479ed62503b92933057832d sudo-devel-1.8.23-10.el7_9.1.x86_64.rpm Source: efe580c1a98dfc85f4112e5d5adb6ddab0509d0c989706b311f8717877cb73b6 sudo-1.8.23-10.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 8 Date: Wed, 27 Jan 2021 00:11:36 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0276 CentOS 7 tzdata BugFix Update Message-ID: <20210127001136.GA17658(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0276 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0276 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4b0430168f86ed2d3205e156f91cb895de8e9f80a08f08355aaaed21286d7be5 tzdata-2021a-1.el7.noarch.rpm f89e78370bd25ce90933cc003b71d1a2bcb2d53f73c8919389825731abc97807 tzdata-java-2021a-1.el7.noarch.rpm Source: 38974708d565f8077796f018c431bc40e12d1473e454ab3d619ac65670c875c0 tzdata-2021a-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 9 Date: Wed, 27 Jan 2021 00:11:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0077 CentOS 7 389-ds-base BugFix Update Message-ID: <20210127001156.GA17807(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0077 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0077 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2952ebf67510a8da5c648a66cb72fb82d02a871b1b805e3fa5d9a1ab8d1377d2 389-ds-base-1.3.10.2-9.el7_9.x86_64.rpm 5d56166abb7686fc795b62a2d6600a144699caccdbc3ea53b082d1535c2834b0 389-ds-base-devel-1.3.10.2-9.el7_9.x86_64.rpm 29d3baca7632def182f6a6250f76f26476b491b66dfe819eb6d94008003dfc3d 389-ds-base-libs-1.3.10.2-9.el7_9.x86_64.rpm 7f3bdd324d9659e15f12b5165027a55a0cea71990ff77d978912c84bebe83633 389-ds-base-snmp-1.3.10.2-9.el7_9.x86_64.rpm Source: 5389afa67a0b034de14795b943df1bf98b486ba5b93f3f77c5944eb96ce84764 389-ds-base-1.3.10.2-9.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 190, Issue 2 ***********************************************

1 0

RHEL changes
by J Martin Rushton 26 Jan '21

26 Jan '21

See: https://arstechnica.com/gadgets/2021/01/centos-is-gone-but-rhel-is-now-free… and https://www.redhat.com/en/blog/new-year-new-red-hat-enterprise-linux-progra… -- J Martin Rushton MBCS

33 88

CentOS Dojo @FOSDEM, Next Week
by Rich Bowen 26 Jan '21

26 Jan '21

Reminder: we will be holding our annual FOSDEM CentOS Dojo next week on Thursday and Friday. It will of course be online. Details, schedule, and registration, are available at https://wiki.centos.org/Events/Dojo/FOSDEM2021 Registration is free. Please come, and tel your colleagues!

2 1

CentOS Stream suitability as a production webserver
by Jamie Burchell 25 Jan '21

25 Jan '21

Hello I've recently discovered the announcement regarding the change in direction for the CentOS project and I imagine like many others, I'm confused and concerned about what this means moving forward. I work for a small web development agency and we offer hosting as part of our package to clients who need it. We have many CentOS 7 web servers (DigitalOcean droplets) (LAMP/LEMP) that I look after and today I'm thankful I have only migrated one of those to CentOS 8, given the recent announcement about its curtailed EOL. I literally just went to the Wiki today to confirm the EOL date for EL7 and boy am I glad I spotted it. Given we are not developing drivers or applications (other than websites and web applications), is the change a non-issue for my use-case? I've seen it written that CentOS Stream is the "development version" of RHEL but also that we shouldn't have considered RHEL to be the beta for CentOS. Others have said to think of CentOS more like RHEL RC-1. I just don't know how the stability will compare and we have historically always chosen CentOS for its stability (and of course price). Sure, I could migrate to Ubuntu (I use this locally in WSL), but I've become somewhat "comfy slippers" with CentOS and have built our setup around it (including custom ansible scripts etc) and don't want to change everything unncessarily. Of course, a lot of this is somewhat dependent on what DigitalOcean will decide to provide image wise moving forward. I'm sorry if this has already been answered, I spent a good few hours reading through the respective threads in the devel list and ended up more confused than I started. Cheers, Jamie

25 62

Infiniband special ops?
by lejeczek 25 Jan '21

25 Jan '21

Hi guys. Hoping some net experts my stumble upon this message, I have an IPoIB direct host to host connection and: -> $ ethtool ib1 Settings for ib1: Supported ports: [ ] Supported link modes: Not reported Supported pause frame use: No Supports auto-negotiation: No Supported FEC modes: Not reported Advertised link modes: Not reported Advertised pause frame use: No Advertised auto-negotiation: No Advertised FEC modes: Not reported Speed: 40000Mb/s Duplex: Full Auto-negotiation: on Port: Other PHYAD: 255 Transceiver: internal Link detected: yes and that's both ends, both hosts, yet: > $ iperf3 -c 10.5.5.97 Connecting to host 10.5.5.97, port 5201 [ 5] local 10.5.5.49 port 56874 connected to 10.5.5.97 port 5201 [ ID] Interval Transfer Bitrate Retr Cwnd [ 5] 0.00-1.00 sec 1.36 GBytes 11.6 Gbits/sec 0 2.50 MBytes [ 5] 1.00-2.00 sec 1.87 GBytes 16.0 Gbits/sec 0 2.50 MBytes [ 5] 2.00-3.00 sec 1.84 GBytes 15.8 Gbits/sec 0 2.50 MBytes [ 5] 3.00-4.00 sec 1.83 GBytes 15.7 Gbits/sec 0 2.50 MBytes [ 5] 4.00-5.00 sec 1.61 GBytes 13.9 Gbits/sec 0 2.50 MBytes [ 5] 5.00-6.00 sec 1.60 GBytes 13.8 Gbits/sec 0 2.50 MBytes [ 5] 6.00-7.00 sec 1.56 GBytes 13.4 Gbits/sec 0 2.50 MBytes [ 5] 7.00-8.00 sec 1.52 GBytes 13.1 Gbits/sec 0 2.50 MBytes [ 5] 8.00-9.00 sec 1.52 GBytes 13.1 Gbits/sec 0 2.50 MBytes [ 5] 9.00-10.00 sec 1.52 GBytes 13.1 Gbits/sec 0 2.50 MBytes - - - - - - - - - - - - - - - - - - - - - - - - - [ ID] Interval Transfer Bitrate Retr [ 5] 0.00-10.00 sec 16.2 GBytes 13.9 Gbits/sec 0 sender [ 5] 0.00-10.00 sec 16.2 GBytes 13.9 Gbits/sec receiver It's rather an oldish platform which hosts the link, PCIe is only 2.0 but with link of x8 that should be able to carry more than ~13Gbits/sec. Infiniband is Mellanox's ConnectX-3. Any thoughts on how to track the bottleneck or any thoughts I'll appreciate much. thanks, L

4 4

simple http server grab data posted and send to another server - slightly off topic
by Jerry Geis 22 Jan '21

22 Jan '21

Hi All, anyone know how to make a "simple" http server (python -m SimpleHTTPServer 8000) type of stuff - but simply take the incoming data, (should be real small) and when received - send that to a different server . This is different than "redirect" as that is the issue. The device does not understand the redirect response that is happening now. So I was looking for a way to "consume" the post - then re-send the post. It has to be independent of httpd as that is in use. CentOS 7 is my platform. Thanks Jerry

1 1

KVM support on RT Kernerl
by Danishka Navin 21 Jan '21

21 Jan '21

Hi, I have deployed CentOS 7.6 and then installed RT kernel. Later KVM installed on the same box. I noticed that KVM module was not loaded and then switched to the generic kernel. KVM module was loaded in the generic kernel. Is this a known issue? I would like to use KVM with RT kernel. Regards, -- Danishka Navin

1 0

Compiling Qt applications in docker
by H 21 Jan '21

21 Jan '21

I am working on compiling an application using Qt and am a newbie. I already have Qt on my CentOS 7 system but this application requires a later version of Qt not available for C 7. It also requires postgreSQL libraries and I am using the latest version of that, ie pgsql 13. I have successfully compiled it in a docker environment and I can launch it on the desktop. I have, however, not tested it against postgreSQL on my computer - yet. I do not want to run it in docker though but on my "regular" computer outside docker, as well as be able to move it to other computers I have. I am only using docker as a sandbox while working on compiling etc. I am not sure how I should set it up - outside docker - so that the Qt libraries it needs do not foul up the rest of my system but are only seen by this particular application. Can anyone offer a suggestion? Should the compiled application eventually reside in its own directory under /usr/local/bin and where should the Qt libraries be? In the same directory as the app? If not, where should they be placed? I tried to compile it to use the Qt libraries statically linked but the app does not run that way in docker but crashes with a segmentation fault. Suggestions/best practices appreciated!

1 0

mcelog service error flagged in Cockpit
by Robert G. (Doc) Savage 20 Jan '21

20 Jan '21

Whenever I log into Cockpit, it flags mcelog as a service failure-to- start failure. systemctl confirms this. # systemctl status mcelog * mcelog.service - Machine Check Exception Logging Daemon Loaded: loaded (/usr/lib/systemd/system/mcelog.service; disabled; vendor preset: enabled) Active: failed (Result: exit-code) since Sun 2021-01-10 18:06:36 CST; 1 weeks 2 days ago Main PID: 21959 (code=exited, status=1/FAILURE) Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: Started Machine Check Exception Logging Daemon. Jan 10 18:06:36 lionstore.protogeek.org mcelog[21959]: mcelog: ERROR: AMD Processor family 23: mcelog does not support this processor. Please use the edac_mce_amd module instead. Jan 10 18:06:36 lionstore.protogeek.org mcelog[21959]: CPU is unsupported Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: mcelog.service: Main process exited, code=exited, status=1/> Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: mcelog.service: Failed with result 'exit-code'. A search through BZ indicates mcelog hasn't been supported on AMD processors s since family 21. How do I tell Cockpit to use this alternative module? Perhaps more importantly, why doesn't Cockpit automatically set up this module when it's installed on an AMD system? --Doc Savage Fairview Heights, IL

1 0

btrfs to ext4
by Christopher Wensink 19 Jan '21

19 Jan '21

Hello CentOS Gurus, I have just learned that our backup system natively supports restoring vmware VM individual files from a vmware based backup for ext3,ext4 file systems but not BTRFS and some of our VM's run BTRFS as the root file system. Does anyone know if it's possible to convert BTRFS partitions to ext4? Chris -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

2 1

Restore pristine SELinux configuration ?
by Nicolas Kovacs 19 Jan '21

19 Jan '21

Hi, I have CentOS 7 running on a public server hosting all sorts of web applications, mail, XMPP, MPD, etc. How do I reset SELinux configuration to defaults? I know how to reset all my custom booleans to the initial state. # cat /etc/selinux/targeted/active/booleans.local # This file is auto-generated by libsemanage # Do not edit directly. httpd_unified=1 httpd_can_sendmail=1 spamd_enable_home_dirs=1 httpd_can_network_connect=1 ftpd_full_access=1 mpd_enable_homedirs=1 named_write_master_zones=1 Starting from there, I can manually reset them to 0 with setsebool. On the other hand, I don't know how I would do something similar with the SELinux modules. I vaguely remember having created some of these, for example for Fail2ban to work correctly. But I don't remember what I did here over the years, what modules I created, etc. How would I recreate the default SELinux configuration without having to wipe and reinstall the whole server? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 2

Kickstart "Error setting up base repository"
by Alex Kirk 19 Jan '21

19 Jan '21

I recently built my first CentOS kickstart config on a CentOS 7 system; it runs well, but the OS and its tools are old enough that it's causing pain with the apps I want to run on top of said system, so I'm trying to port it to CentOS 8. I've taken the anaconda-ks.cfg file created from a successful manual install (of both regular 8 and Stream), placed it on my DVD ISO, and wrapped things back up like I was doing with CentOS 7. I'm successfully beginning the installation, but running into "Error setting up base repository" - despite having not touched either the filesystem structure of the ISO, or the generated kickstart file that points at my repos. Here is the relevant config: #version=RHEL8 # Use graphical install graphical repo --name="AppStream" --baseurl=file:///run/install/sources/mount-0000-cdrom/AppStream %packages @^minimal-environment @development kexec-tools %end # Keyboard layouts keyboard --xlayouts='us' # System language lang en_US.UTF-8 # Network information network --hostname=localhost.localdomain # Use CDROM installation media cdrom # Run the Setup Agent on first boot firstboot --enable ignoredisk --only-use=sda autopart # Partition clearing information clearpart --none --initlabel # System timezone timezone America/New_York --isUtc %addon com_redhat_kdump --enable --reserve-mb='auto' %end %anaconda pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty %end When I switched over to a console to try to troubleshoot this, I noticed that /run/install/sources/mount-0000-cdrom/AppStream didn't exist (the "mount-0000-cdrom" directory is empty), but /run/install/repo/AppStream does, and appears to have all the right information within it. I've tried specifying that directory as the baseurl instead, and get no difference in behavior. The only other file I've touched is isolinux/isolinux.cfg on the DVD, with the relevant line now being: append initrd=initrd.img inst.ks=cdrom:/ks.cfg inst.stage2=hd:LABEL=CentOS-Stream-8-x86_64-dvd quiet What am I doing wrong here? This seems like basic config, but obviously I've missed something... -- Alex Kirk Global Principal, Suricata 404-291-6588 akirk(a)corelight.com

3 4

centos-release-gluster8 for centos 7
by Nicolas Zuber 19 Jan '21

19 Jan '21

Hi all, We have some Centos 7 server running with gluster 7 installed. We are using the the packages provided by the storage SIG (centos-release-gluster7). "Yum search centos-release-gluster" shows centos-release-gluster7 as the latest gluster version provided. But according to https://wiki.centos.org/SpecialInterestGroup/Storage there should be already packages for the gluster 8 release available. So I am wondering what I can do to be able to install glusterfs 8 from the storage SIG. Thanks, Nicolas

2 2

How to do virtual IP on NetworkManager
by Jerry Geis 18 Jan '21

18 Jan '21

Hi All, I use virtual IP from time to time on CentOS 7. just take something like eth0 and make eth0:1 put in there the IP and subnet and bring up the new IP and it works. How do I do that with NetworkManager on the command line (assuming all static IP information) I do something like this from nmcli to set the static address: nmcli connection modify eth0 ipv4.method manual ipv6.method ignore autoconnect yes ipv4.addr 192.168.1.8/24 gw4 192.168.1.1 ipv4.dns 8.8.8.8 How then do I add a virtual IP? Thanks Jerry

4 4

Graphic setup issues...help wanted
by Kay Schenk 16 Jan '21

16 Jan '21

The problem. I can NOT change my screen resolution from GUI. I boot to multi-user, then get "into" graphical. First, some background. My original install of CentOS 8 -- maybe 8.2? -- about 3 months ago -- went pretty well but I kept having lockup issues. No issues with graphics using intel graphics or sound using either aplay at command line or GDM. (I also have NVIDIA which I have not configured.) I upgraded to 8.3 at some point. Still all OK with graphics but still lock up issues. At some point, I decided to start completely over and did a clean install of 8.4. I am now using CentOS8 Stream as my primary repo. Some questions? When I first boot, where is the probe of my video card done? Looking at DMESG, I couldn't determine this. When I "start" graphical, I get the following messages which are apparently related, from Xorg.1.log module loading section... [ 985.857] (II) LoadModule: "glx" [ 985.857] (II) Loading /usr/lib64/xorg/modules/extensions/libglx.so [ 985.859] (II) Module glx: vendor="X.Org Foundation" [ 985.859] compiled for 1.20.10, module version = 1.0.0 [ 985.859] ABI class: X.Org Server Extension, version 10.0 [ 985.859] (==) Matched modesetting as autoconfigured driver 0 [ 985.859] (==) Matched fbdev as autoconfigured driver 1 [ 985.859] (==) Matched vesa as autoconfigured driver 2 [ 985.859] (==) Assigned the driver to the xf86ConfigLayout [ 985.859] (II) LoadModule: "modesetting" [ 985.859] (II) Loading /usr/lib64/xorg/modules/drivers/modesetting_drv.so [ 985.859] (II) Module modesetting: vendor="X.Org Foundation" [ 985.859] compiled for 1.20.10, module version = 1.20.10 [ 985.859] Module class: X.Org Video Driver [ 985.859] ABI class: X.Org Video Driver, version 24.1 [ 985.859] (II) LoadModule: "fbdev" [ 985.859] (II) Loading /usr/lib64/xorg/modules/drivers/fbdev_drv.so [ 985.859] (II) Module fbdev: vendor="X.Org Foundation" [ 985.859] compiled for 1.20.3, module version = 0.5.0 [ 985.859] Module class: X.Org Video Driver [ 985.859] ABI class: X.Org Video Driver, version 24.0 [ 985.859] (II) LoadModule: "vesa" [ 985.859] (II) Loading /usr/lib64/xorg/modules/drivers/vesa_drv.so [ 985.859] (II) Module vesa: vendor="X.Org Foundation" [ 985.859] compiled for 1.20.3, module version = 2.4.0 [ 985.859] Module class: X.Org Video Driver [ 985.859] ABI class: X.Org Video Driver, version 24.0 [ 985.859] (II) modesetting: Driver for Modesetting Kernel Drivers: kms [ 985.859] (II) FBDEV: driver for framebuffer: fbdev [ 985.859] (II) VESA: driver for VESA chipsets: vesa [ 985.859] (EE) open /dev/dri/card0: No such file or directory [ 985.859] (WW) Falling back to old probe method for modesetting [ 985.859] (EE) open /dev/dri/card0: No such file or directory From messages I've seen on this problem, the lack of /dev/dri/card0 is the crux of the issue but I have NO idea of how it gets created. So, right now I'm stuck at a default resolution of 1024 x 768 Thanks for any help. -- ------------------------------------- "Don't let anyone dull your sparkle." MzK

2 3

bnxt_en :: interface renamed with a suffix
by Adrian Sevcenco 16 Jan '21

16 Jan '21

Hi! i had a very unpleasant surprise when an unconnected interface named enp97s0f1 was renamed when connected .. and after reboot i seen this in dmesg: [ 3.665192] bnxt_en 0000:61:00.1 enp97s0f1d1: renamed from enp97s0f1 does anyone have any idea what is going on? I disabled anything i could (to have a proper normal nic that do not act and do things behind the OS) like making sure that the broadcom nic is set to SF and disabled any function that could be disabled.. so why the rename? Thanks! Adrian

2 1

How to reset the USB subsystem?
by Frank Bures 16 Jan '21

16 Jan '21

Hi, my USB connected printer goes into deep space from time to time probably due to a HW problem on the MoBo. Is there a way how to reset the USB subsystem the same way one can restart networking or X without the necessity to reboot? Thanks Frank -- <listfrank1(a)gmail.com>

8 15

CentOS-announce Digest, Vol 190, Issue 1
by centos-announce-request＠centos.org 16 Jan '21

16 Jan '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0053 Critical CentOS 7 firefox Security Update (Johnny Hughes) 2. CESA-2021:0087 Critical CentOS 7 thunderbird Security Update (Johnny Hughes) 3. CEBA-2020:5041 CentOS 7 389-ds-base BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 15 Jan 2021 20:13:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0053 Critical CentOS 7 firefox Security Update Message-ID: <20210115201317.GA19106(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0053 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2021:0053 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a64d622fd50cce3d3743013a5534e4fed4985139f60314ee23246e08601835cf firefox-78.6.1-1.el7.centos.i686.rpm b351574a459bf47d5aed5e921e49e33fc565cab9b3d72ce5cd6fefba1b6f83c9 firefox-78.6.1-1.el7.centos.x86_64.rpm Source: a13932c35463c2df27470a690e3ee1324c298781e1b21226751ccc4ad136487b firefox-78.6.1-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 15 Jan 2021 20:31:45 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0087 Critical CentOS 7 thunderbird Security Update Message-ID: <20210115203145.GA20199(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0087 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2021:0087 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9d6dba1f2b69d9a60186e25386f8b45c69cd3fc28e58774151905a0edfac5a82 thunderbird-78.6.1-1.el7.centos.x86_64.rpm Source: 5f6afd3684dd44a2cd4275e55a7ff11dafa7526fe9220f428582e8a35fc0aa6a thunderbird-78.6.1-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 15 Jan 2021 20:33:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2020:5041 CentOS 7 389-ds-base BugFix Update Message-ID: <20210115203326.GA20412(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2020:5041 Upstream details at : https://access.redhat.com/errata/RHBA-2020:5041 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 69b46c2053c4fbaa163f2390003a89acba1e45f20c75c06337f18474970f4943 389-ds-base-1.3.10.2-7.1.el7_9.x86_64.rpm 1315433f5602796463c98742b5395f6bc95f0716a4d9322f2131b5bd23a0bcdc 389-ds-base-devel-1.3.10.2-7.1.el7_9.x86_64.rpm 808bc13d124b864d8dd90f80437bc5d919d6dcdca1ebbd9efcd56e575fbfb500 389-ds-base-libs-1.3.10.2-7.1.el7_9.x86_64.rpm af4f36c81584781e9a0b5038c6d887f8d9a95020701f12f3688519038ca47c15 389-ds-base-snmp-1.3.10.2-7.1.el7_9.x86_64.rpm Source: 96b30e1368a7747a3797bd9dc27c8f3da3bed79f86af0dea848bb0dd011ee23a 389-ds-base-1.3.10.2-7.1.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 190, Issue 1 ***********************************************

1 0

remove me from the list
by clark＠west.net 15 Jan '21

15 Jan '21

Thank you for all the information over the years. -dennis-

2 1

Security bulletins for CentOS 8 and CentOS Stream
by Salman Baset 14 Jan '21

14 Jan '21

Hello, I was wondering if security bulletins for CentOS 8 (till its EOL date at the end of 2021) and CentOS Stream will be available any time soon. I have not seen any security bulletins for these two operating systems on this page, but we have seen Red Hat security bulletins for Red Hat 8. https://lists.centos.org/pipermail/centos-announce/ Thanks Salman

2 2

LTS
by Thomas Stephen Lee 12 Jan '21

12 Jan '21

Hi, CentOS Linux can continue as Fedora LTS or something similar with a five-year life cycle. After five years, users can opt for paid upgrades. We can also work with System manufacturers to pre-install the free LTS on their products, which will increase our user base. --- Lee, Community User.

7 9

Reboot/shutdown without login
by Kenneth Porter 11 Jan '21

11 Jan '21

I installed CentOS 8 on a Dell server and it's been running fine as a headless system, admin'd remotely by ssh. Now I'd like to allow someone to shut it down at the console without logging in. Is there a way to do that? Or do I need to get the GUI working? I tried switching it into graphical mode ("systemctl isolate graphical") and the console freezes with nothing but a non-blinking text cursor at top left. The usual virtual console switching hotkeys (ctrl-alt F1-F7) don't do anything when it's hung like this. The system is still responsive in my ssh session. It doesn't recover if I switch back to multi-user target so I have to reboot it to make the console useful again. I'm guessing I'm lacking a good video driver. (It's an R720xd I inherited and the latest drivers on Dell's site are for RHEL 7.)

8 9

rare but repeating system crash in C7
by Fred 07 Jan '21

07 Jan '21

Hi all, I'm hoping someone can help me figure this out. every now and then (less than monthly, maybe every 2-4 months, or so, I'll walk up to my C7 box (my home PC) in the morning, wiggle the mouse to wake up the screen, and after a second or so, instead of a live screen, the keyboard shift-lock and scroll-lock keys light up. if I wait a few (tens of) second(s) I find it is rebooting, as the BIOS splash screen appears. it boots normally and comes up with everything apparently working fine. Note that I tend to leave myself logged in 24/7/365 since there's nobody here except my wife and myself, and she has her own Linux box. as it happened again this morning, I grabbed some lines from /var/log/messages that show the last few minutes before it rebooted and the first 3 or four statements as it began to reboot: Jan 2 08:50:12 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cb10 trb-start 00000000a9f2cb20 trb-end 00000000a9f2cb20 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:50:13 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:50:13 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164858d0 trb-start 00000000164858e0 trb-end 00000000164858e0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 08:51:12 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 08:51:13 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 08:51:14 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 08:51:14 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485d20 trb-start 0000000016485d30 trb-end 0000000016485d30 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cae0 trb-start 00000000a9f2caf0 trb-end 00000000a9f2caf0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:58:00 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:58:00 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c530 trb-start 00000000a9f2c540 trb-end 00000000a9f2c540 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c340 trb-start 00000000a9f2c350 trb-end 00000000a9f2c350 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cfb0 trb-start 00000000a9f2cfc0 trb-end 00000000a9f2cfc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:02 fcshome systemd: Created slice User Slice of root. Jan 2 09:00:02 fcshome systemd: Started Session 7364 of user root. Jan 2 09:00:02 fcshome systemd: Removed slice User Slice of root. Jan 2 09:00:06 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:06 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cd20 trb-start 00000000a9f2cd30 trb-end 00000000a9f2cd30 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485400 trb-start 0000000016485410 trb-end 0000000016485410 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbc0 trb-start 00000000a9f2cbd0 trb-end 00000000a9f2cbd0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485c00 trb-start 0000000016485c10 trb-end 0000000016485c10 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:01:01 fcshome systemd: Created slice User Slice of root. Jan 2 09:01:01 fcshome systemd: Started Session 7365 of user root. Jan 2 09:01:01 fcshome systemd: Removed slice User Slice of root. Jan 2 09:03:45 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 09:03:46 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 09:03:47 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 09:03:47 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 09:04:31 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:31 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ca60 trb-start 00000000a9f2ca70 trb-end 00000000a9f2ca70 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:04:58 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:58 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cd70 trb-start 00000000a9f2cd80 trb-end 00000000a9f2cd80 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b30 trb-start 0000000016485b40 trb-end 0000000016485b40 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164856c0 trb-start 00000000164856d0 trb-end 00000000164856d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:05:03 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:05:03 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164851b0 trb-start 00000000164851c0 trb-end 00000000164851c0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:10:01 fcshome systemd: Created slice User Slice of root. Jan 2 09:10:01 fcshome systemd: Started Session 7366 of user root. Jan 2 09:10:01 fcshome systemd: Removed slice User Slice of root. Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164854c0 trb-start 00000000164854d0 trb-end 00000000164854d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485eb0 trb-start 0000000016485ec0 trb-end 0000000016485ec0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164852c0 trb-start 00000000164852d0 trb-end 00000000164852d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b70 trb-start 0000000016485b80 trb-end 0000000016485b80 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbb0 trb-start 00000000a9f2cbc0 trb-end 00000000a9f2cbc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164858d0 trb-start 00000000164858e0 trb-end 00000000164858e0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485a00 trb-start 0000000016485a10 trb-end 0000000016485a10 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:14:46 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:14:46 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485450 trb-start 0000000016485460 trb-end 0000000016485460 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c170 trb-start 00000000a9f2c180 trb-end 00000000a9f2c180 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c7a0 trb-start 00000000a9f2c7b0 trb-end 00000000a9f2c7b0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:10 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:10 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485560 trb-start 0000000016485570 trb-end 0000000016485570 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b90 trb-start 0000000016485ba0 trb-end 0000000016485ba0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cf90 trb-start 00000000a9f2cfa0 trb-end 00000000a9f2cfa0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c9e0 trb-start 00000000a9f2c9f0 trb-end 00000000a9f2c9f0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485660 trb-start 0000000016485670 trb-end 0000000016485670 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:23 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:23 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485330 trb-start 0000000016485340 trb-end 0000000016485340 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:24 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:24 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485500 trb-start 0000000016485510 trb-end 0000000016485510 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c400 trb-start 00000000a9f2c410 trb-end 00000000a9f2c410 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164851c0 trb-start 00000000164851d0 trb-end 00000000164851d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485e30 trb-start 0000000016485e40 trb-end 0000000016485e40 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbf0 trb-start 00000000a9f2cc00 trb-end 00000000a9f2cc00 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c000 trb-start 00000000a9f2c010 trb-end 00000000a9f2c010 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:27 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:27 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ce50 trb-start 00000000a9f2ce60 trb-end 00000000a9f2ce60 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:31 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:31 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c4e0 trb-start 00000000a9f2c4f0 trb-end 00000000a9f2c4f0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:47 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:47 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbb0 trb-start 00000000a9f2cbc0 trb-end 00000000a9f2cbc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:16:15 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 09:16:16 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 09:16:17 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 09:16:17 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b50 trb-start 0000000016485b60 trb-end 0000000016485b60 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c050 trb-start 00000000a9f2c060 trb-end 00000000a9f2c060 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c680 trb-start 00000000a9f2c690 trb-end 00000000a9f2c690 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cb70 trb-start 00000000a9f2cb80 trb-end 00000000a9f2cb80 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c520 trb-start 00000000a9f2c530 trb-end 00000000a9f2c530 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ca10 trb-start 00000000a9f2ca20 trb-end 00000000a9f2ca20 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpuset Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpu Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpuacct Jan 2 09:20:11 fcshome kernel: Linux version 3.10.0-1160.6.1.el7.x86_64 The last four events are the start of reboot and everything above is leading up to the crash. I note that there was a selinux event early in this list of events, but I see those frequently and they normally don't cause a crash. if I scroll upward from this list, I find more of the same above what is shown here. The selinux event seems to be related to a SMB mount. since I have a Synology box on the LAN, and it stays mounted nearly all the time, I suspect the selinux event has something to do with that, but I have no idea why it would cause a crash once every few months. Is that selinux event something I need to fix? I'm further guessing that "xhci_hcd" has something to do with USB, am I right? If so I don't know what it would be... Clues would be greatly appreciated! Thanks in advance! Fred

6 24

Re: [CentOS] dovecot option PROFILE=SYSTEM
by Kenneth Porter 07 Jan '21

07 Jan '21

--On Wednesday, January 06, 2021 7:08 AM -0800 david <david(a)daku.org> wrote: >>>> If only there had been a comment in the file >>>> /etc/dovecot/conf.d/10-ssl.conf I suggest opening an enhancement request on Bugzilla. <https://bugzilla.redhat.com/>

1 0

Running script before reboot or shutdown
by Carlos Lopez 06 Jan '21

06 Jan '21

Hi all, I am trying to configure a script as a systemd service to run first when a shutdown or reboot is called. This script execute some scp commands to copy some files to other machines. My actual defined systemd’s file is: [Unit] Description=Remote copy some files before reboot/shutdown Before=poweroff.target halt.target shutdown.target reboot.target DefaultDependencies=no [Service] Type=simple ExecStart=/bin/true ExecStop=/usr/local/bin/remote_copy RemainAfterExit=yes [Install] WantedBy=multi-user.target But it doesn’t work. “remote_copy” is working when it is executed from root shell. I am using CentOS-8 fully patched release. Any idea what am I doing wrong? Regards, C. L. Martinez

3 7

Apache shows PHP code instead of executing it
by Kaushal Shriyan 06 Jan '21

06 Jan '21

Hi, I am running the below php, httpd and CentOS Linux version. # rpm -qa | grep php php73-mbstring-7.3.25-1.el7.ius.x86_64 php73-json-7.3.25-1.el7.ius.x86_64 php73-fpm-7.3.25-1.el7.ius.x86_64 php73-pdo-7.3.25-1.el7.ius.x86_64 php73-gd-7.3.25-1.el7.ius.x86_64 php73-mysqlnd-7.3.25-1.el7.ius.x86_64 php73-xml-7.3.25-1.el7.ius.x86_64 php73-opcache-7.3.25-1.el7.ius.x86_64 php73-fpm-httpd-7.3.25-1.el7.ius.noarch php73-common-7.3.25-1.el7.ius.x86_64 php73-fpm-nginx-7.3.25-1.el7.ius.noarch php73-cli-7.3.25-1.el7.ius.x86_64 php73-bcmath-7.3.25-1.el7.ius.x86_64 # rpm -qa | grep httpd httpd24u-2.4.46-1.el7.ius.x86_64 httpd24u-tools-2.4.46-1.el7.ius.x86_64 httpd24u-filesystem-2.4.46-1.el7.ius.noarch php73-fpm-httpd-7.3.25-1.el7.ius.noarch # cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) I have placed the below file in /var/www/html directory. #cat info.php <?php phpinfo( ); ?> # I am seeing this in the logs ==> access_log <== 192.168.0.95 - - [06/Jan/2021:21:42:21 +0530] "GET /info.php HTTP/1.1" 304 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_1_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" When I invoke it from the browser Apache shows PHP code instead of executing it. Please let me know if you need any additional information. Thanks in Advance. Best Regards, Kaushal

4 5

fail2ban problems - not banning
by Gary Stainburn 06 Jan '21

06 Jan '21

Hi everyone, I've got fail2ban and firewalld set up on a C7 box, in theory protecting dovecot, exim and ssh but I'm not convinced it's doing anything. in /var/log/fail2ban.log I'm getting loads of entries such as: 2020-12-22 19:08:08,100 fail2ban.actions [1836]: WARNING [dovecot] 78.128.113.67 already banned I think this is because the actual ban is not working. I have entries such as: 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- exec: ports="0:65535"; for p in $(echo $ports | tr ", " " "); do firewall-cmd --add-rich-rule="rule family='ipv4' source address='113.110.47.81' port port='$p' protocol='tcp' reject type='icmp-port-unreachable'"; done 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- stderr: 'Error: INVALID_PORT: 0:65535' 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- returned 102 2020-12-22 19:38:27,620 fail2ban.actions [1836]: ERROR Failed to execute ban jail 'dovecot' action 'firewallcmd-rich-rules' info 'ActionInfo({'ip': '113.110.47.81', 'fid': <function <lambda> at 0x7f119f084050>, 'family': 'inet4', 'raw-ticket': <function <lambda> at 0x7f119f0845f0>})': Error banning 113.110.47.81 I've done some Googling and received lots of responses about fail2ban failures but I can't find anything relating to this. Anyone got any ideas?

2 1

centos-release-stream VS centos-stream-release
by lejeczek 06 Jan '21

06 Jan '21

hi guys, do you know what to make of that? Why these tho packages? many thanks, L.

2 1

dovecot option PROFILE=SYSTEM
by david 06 Jan '21

06 Jan '21

Folks In examining the file /etc/dovecot/conf.d/10-ssl.conf I see the text line: ssl_cipher_list = PROFILE=SYSTEM Yet, I cannot find any documentation that explains what that causes, where the values are stored. I ask because I don't see that text line in other installations of Dovecot 2.3 on other distros. Can anyone point me to an explanation? David

3 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss