- Discuss - lists.centos.org

Minimising a CentOS installation
by Anand Buddhdev 21 Aug '21

21 Aug '21

Hi folks, After doing a minimal CentOS 8.4 installation, I found the following packages to be useful for a simple server, so I removed them: cronie-anacron (replaced with cronie-noanacron) alsa-firmware ivtv-firmware iwl*-firmware sssd-common (along with all packages that depended on it) What other things do folk usually remove to make their installation smaller? Regards, Anand

6 7

CentOS-announce Digest, Vol 197, Issue 3
by centos-announce-request＠centos.org 19 Aug '21

19 Aug '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:3158 Important CentOS 7 exiv2 Security Update (Johnny Hughes) 2. CESA-2021:3154 Important CentOS 7 firefox Security Update (Johnny Hughes) 3. CESA-2021:3160 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 18 Aug 2021 16:49:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:3158 Important CentOS 7 exiv2 Security Update Message-ID: <20210818164924.GA28105(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:3158 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:3158 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bb452c600e6c925bf0e8b365957a5cb5741e5f38181ed32aed22124e690edc30 exiv2-0.27.0-4.el7_8.src.rpm 18defd29c31366e3f3fc7602eed4307dcdd1028a8e25fd6823379fa2ef33eb6b exiv2-0.27.0-4.el7_8.x86_64.rpm 4402a7fcf865ee506196d91c722ec2875470f134b63f3912ac69561ba10e5113 exiv2-devel-0.27.0-4.el7_8.i686.rpm 1a5b2d18101ca9a398c7873900403ed4ffc7daf7fb801a9ce1649c3fafe185cf exiv2-devel-0.27.0-4.el7_8.x86_64.rpm 73cda0f598ca90fe3470940ed62663a7a5a1091731757b8e057fc929d3c1a209 exiv2-doc-0.27.0-4.el7_8.noarch.rpm 037e885e4b00fa8c73772c5a2e0f05aa735f04807e080c5819a8a15dade3d5dc exiv2-libs-0.27.0-4.el7_8.i686.rpm 54b72bac2daf97a8d1ba79e4288be55712b5b35027f2df547f3e0af93bd9b6a5 exiv2-libs-0.27.0-4.el7_8.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 18 Aug 2021 16:50:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:3154 Important CentOS 7 firefox Security Update Message-ID: <20210818165015.GA28235(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:3154 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:3154 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7724d8a7b5c53b6b19107130e41d127672ad5e6814dd6d9cdf6130a27f22354b firefox-78.13.0-2.el7.centos.i686.rpm 73a1cda95043965a2075495410ef47a525580c614071ac8a4b643cff8fbb2c61 firefox-78.13.0-2.el7.centos.src.rpm 64a964dbf122edcb897186c8824b60976d45bd7ddce017d938404771e1396a1e firefox-78.13.0-2.el7.centos.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 18 Aug 2021 16:51:04 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:3160 Important CentOS 7 thunderbird Security Update Message-ID: <20210818165104.GA28362(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:3160 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:3160 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 245ac011d84f87d216206c87c125f53accc51bf59e77b4f325bd2519bbae562a thunderbird-78.13.0-1.el7.centos.src.rpm d358a86339e24e16bfcc77c61f6f12dea5c1485847a4bd5eee6a6e06c3634ff2 thunderbird-78.13.0-1.el7.centos.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 197, Issue 3 ***********************************************

1 0

Re: [CentOS] A Blast from the past
by Mark Woolfson 18 Aug '21

18 Aug '21

Hello, Can you please help with an interesting problem. I have an Intel Haswell based processor with CentOS 7.0 with an early kernel booting and running perfectly. I changed the processor to an Ice Lake and I get the problem below when I boot the working Haswell disk. The boot process hangs almost immediately and when I remove the 'quiet' boot parameter I see that it hangs randomly, usually with a high CPU number, when SMPBOOT is starting up the cores. The only solution I have found is to boot with the 'nr_cpus=8 (could be any low number), update to the latest kernel then reboot with the 'nr_cpus=8' parameter removed. On examination there are no problems with CentOS 7.4 and above but there are with CentOS 7.3 and below. Mark -- This email has been checked for viruses by AVG. https://www.avg.com

7 8

CentOS-announce Digest, Vol 197, Issue 2
by centos-announce-request＠centos.org 12 Aug '21

12 Aug '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2845 Important CentOS 7 java-1.8.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 11 Aug 2021 16:31:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2845 Important CentOS 7 java-1.8.0-openjdk Security Update Message-ID: <20210811163146.GA13797(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2845 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2845 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2ef14c819a2c602bcce68d1f84b1e8143bb560f7737ba254e3b07d9c4302af67 java-1.8.0-openjdk-1.8.0.302.b08-0.el7_9.i686.rpm bea9e14dd6778afded7cb4e5d5a5f3fa3b0fefe9bafbf913cd21dd494fc8a966 java-1.8.0-openjdk-1.8.0.302.b08-0.el7_9.x86_64.rpm 3f7b46638efdb99c13fe45aa513af69cad728c4ffca568196d21fed273ba7f97 java-1.8.0-openjdk-accessibility-1.8.0.302.b08-0.el7_9.i686.rpm 55baaa197af05067cb206423655392e7b0a52e3ee9144a1fde30de40eb599d5a java-1.8.0-openjdk-accessibility-1.8.0.302.b08-0.el7_9.x86_64.rpm c6fc833a542f540c1edc0431e34f06b0cd121fc635294ae62ae5d48fab254ddf java-1.8.0-openjdk-demo-1.8.0.302.b08-0.el7_9.i686.rpm 5001584535af6ba52a00d1913b2b5f60df1239116a2cbcff84db48a9359bd3a3 java-1.8.0-openjdk-demo-1.8.0.302.b08-0.el7_9.x86_64.rpm 00dfecc575f562ca6c58f3290ca7fda9b19bbacf629d7c687dc4242984f8bb37 java-1.8.0-openjdk-devel-1.8.0.302.b08-0.el7_9.i686.rpm 2ced5602fa70385602b80de9a0a4dd9347186ade416907e8bb7fd066af18f6e3 java-1.8.0-openjdk-devel-1.8.0.302.b08-0.el7_9.x86_64.rpm c7627b2a018e4b1db2b6131608528eae404bf3c43ab252995b1d5f7196ab97e1 java-1.8.0-openjdk-headless-1.8.0.302.b08-0.el7_9.i686.rpm 0a35810bd924f95ae2af1ba31051f64c8683e42b953329a6af07ea00495f96a2 java-1.8.0-openjdk-headless-1.8.0.302.b08-0.el7_9.x86_64.rpm 60639db656637bac71a8495c83b9cc351c89b200e836ed3343dfa6bca29e3956 java-1.8.0-openjdk-javadoc-1.8.0.302.b08-0.el7_9.noarch.rpm 9deefb8ac4e6a1d43c4894b9e5daf58d70b43a9f12952164dc89a1d15e5a400c java-1.8.0-openjdk-javadoc-zip-1.8.0.302.b08-0.el7_9.noarch.rpm dfa6a2ee9076eba358c12de54d5d936a15a282109538f6772bdb75582afd0584 java-1.8.0-openjdk-src-1.8.0.302.b08-0.el7_9.i686.rpm dfbc0cbaf5fb588c23fcfdacafa9024ed6efd13bfbb1cf69316269cbaee79463 java-1.8.0-openjdk-src-1.8.0.302.b08-0.el7_9.x86_64.rpm Source: 38cfa9cb3255518e6d06ffca3f266df4124bb1d55baea794b484bfc2cd145736 java-1.8.0-openjdk-1.8.0.302.b08-0.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 197, Issue 2 ***********************************************

1 0

CentOS-announce Digest, Vol 197, Issue 1
by centos-announce-request＠centos.org 10 Aug '21

10 Aug '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:1002 Important CentOS 7 flatpak Security Update (Johnny Hughes) 2. CESA-2021:3028 Important CentOS 7 microcode_ctl Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 9 Aug 2021 15:29:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1002 Important CentOS 7 flatpak Security Update Message-ID: <20210809152920.GA13355(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1002 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1002 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ac621916b414525cdb8e9a02b622a0b85c0f539979311abe60541cc0da534032 flatpak-1.0.9-11.el7_9.x86_64.rpm aeadded2fd899332eca7c3d0d69c10f06ba09b988bbb0be751dfc6ea05b1a753 flatpak-builder-1.0.0-11.el7_9.x86_64.rpm 1979501bae62e6070c0c6037b5547a69c4342485df1f9dd821ad18a174b0bd48 flatpak-devel-1.0.9-11.el7_9.x86_64.rpm e251fe0d7ffbb8b51c6644310756c5ea0a0ea8d5282cb0ecda819c8ff161dfec flatpak-libs-1.0.9-11.el7_9.x86_64.rpm Source: b370bbea447786abdcf03a57a462ba72d2fa235bd255bcdc74be873e55b25424 flatpak-1.0.9-11.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 9 Aug 2021 15:29:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:3028 Important CentOS 7 microcode_ctl Security Update Message-ID: <20210809152953.GA13461(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:3028 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:3028 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 68b647f3d90f5828c04a513b4561ba0866363b42452fbf73668418e2faa06983 microcode_ctl-2.1-73.11.el7_9.x86_64.rpm Source: e53891c0f92e021a87e8bda5e3ec6b66e6b05ca2c4eed2267de314c906cc7623 microcode_ctl-2.1-73.11.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 197, Issue 1 ***********************************************

1 0

Freeipa sssd service
by Gokan Atmaca 09 Aug '21

09 Aug '21

Hello I started using freeipa. Users I have given "SUDO" right cannot use this right after logging out and logging in. For the solution, I need to restart the "SSSD" service. How can I solve this? Thanks.

2 2

centos 8 stream / last yum update / VirtualBox 6.1.26
by Mathy Froeyen 06 Aug '21

06 Aug '21

Hi all Till this morning, I ran Windows 10 client on VirtualBox 6.1.24 on host Centos 8 stream kernel 4.18.0-315.el8 without problem (desktop). I took the risk to do a "yum update" and as well as the kernel as the VirtualBox were updated: kernel going from 4.18.0-315.el8 to 4.18.0-326.el8 VirtualBox going from 6.1.24 to 6.1.26 But yum complained already : ... Installing: Package Arch Version Repository Size ================================================================================ VirtualBox-6.1 x86_64 6.1.26_145957_el8-1 virtualbox 86 M ... Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : SDL-1.2.15-39.el8.x86_64 1/2 Running scriptlet: SDL-1.2.15-39.el8.x86_64 1/2 Running scriptlet: VirtualBox-6.1-6.1.26_145957_el8-1.x86_64 2/2 Installing : VirtualBox-6.1-6.1.26_145957_el8-1.x86_64 2/2 Running scriptlet: VirtualBox-6.1-6.1.26_145957_el8-1.x86_64 2/2 Creating group 'vboxusers'. VM users must be member of that group! depmod: ERROR: fstatat(4, nvidia-drm.ko.xz): No such file or directory depmod: ERROR: fstatat(4, nvidia-modeset.ko.xz): No such file or directory depmod: ERROR: fstatat(4, nvidia-peermem.ko.xz): No such file or directory depmod: ERROR: fstatat(4, nvidia-uvm.ko.xz): No such file or directory depmod: ERROR: fstatat(4, nvidia.ko.xz): No such file or directory Verifying : SDL-1.2.15-39.el8.x86_64 1/2 Verifying : VirtualBox-6.1-6.1.26_145957_el8-1.x86_64 2/2 Installed products updated. Installed: SDL-1.2.15-39.el8.x86_64 VirtualBox-6.1-6.1.26_145957_el8-1.x86_64 Complete! Vbox did not start my Windows 10 when I tried. I also tried to install VirtualBox 6.0 and 5.2 with the same kind of error in yum. I rebooted then the computer and started a previous kernel 4.18.0-310.el8 and reinstalled Virtualbox 6.1.26 now without those errors and it runs smooth as before. (Kernel 315 had the same vbox errors.) However, when I went back to kernel 4.18.0-326 and tried starting there VirtualBox 6.1.26 again, he complained with : ... Failed to open a session for the virtual machine Windows10. Kernel driver not installed (rc=-1908) The VirtualBox Linux kernel driver is either not loaded or not set up correctly. Please try setting it up again by executing '/sbin/vboxconfig' as root. ... (I tried that "/sbin/vboxconfig" but that tells me nonsense about registering because of EFI secure boot, but I did not change anything in the BIOS.) or there is some conflict between the last kernels and VirtualBox? cheers mathy

1 0

Transition test report going from CentOS8 to Debian 10.
by Lamar Owen 06 Aug '21

06 Aug '21

Sorry for the length.... I'm posting this here since this particular transition has been mentioned on-list as one possibility for a path forward for current CentOS Linux users. AlmaLinux, the Developer Subscription RHEL, Rocky, CentOS Stream, Springdale, upgrading to full RHEL; all these are also possibilities, too, and all have different strengths and weaknesses. The transition to Debian has a lot of strengths, including a long track-record of support (even if the support time for a particular release is shorter), a fully-open development model with no 'corporate overlord' that I know of, a large set of supported packages, and a huge community of developers and users. For the CentOS user the main weakness is having to learn a few areas of difference in the way the system is setup and maintained; of course, if a ten-year 'stable' timeframe is really that important to you the lack of that is also a weakness. So, last week I transitioned, as a test of sorts, my working CentOS 8 main laptop to Debian 10. I kept a complete backup of the C8 install should I wish to go back to it, and installed Buster to a new mSATA SSD, but ported the two SATA drives (Dell Precision M6700 - has an mSATA slot plus two SATA bays) straight over after making full backups. I posted a pretty complete rundown on the scientific linux users mailing list, so I won't recap it all here. The bottom line was the the transition was not any more difficult, really, than moving from CentOS 7 to CentOS 8. The software versions in Buster are pretty close to what is in CentOS 8, although I have yet to need any third-party repository (PPA) for anything I've needed to install. All the packages I have worked with so far have worked fine with a little bit of massaging. These include commercial (and costly) software such as Harrison Consoles' Mixbus32C, Qoppa's PDFStudio2019 Professional, and others. So if you were to decide that this is the route for you to take, it does work and I found it to be not nearly as hard as I had thought it might be. If you install GNOME 3 you get GNOME 3; it feels pretty much the same as a non-Classic CentOS GNOME 3, just with a different set of extensions installed by default. That's on the workstation. On the server side, I'm evaluating Proxmox for the virtualization solution, and so far I'm finding it to be a pretty easy migration. I'm using the 'non-subscription' repository, so this is a no-cost option. Even getting the box registered to our EMC Clariion SAN was relatively easy; EMC provides the Unisphere Server Utility for Linux x64 in RPM form; the latest I have is "ServerUtil-Linux-64-x86-en_US-1.0.55.1.0044-1.x86_64.rpm" (which is fairly old, but I did say Clariion arrays, so they're pretty old, too). Debian has provided the 'alien' tool for some time; after installing alien, a simple 'alien -i ServerUtil-Linux-64-x86-en_US-1.0.55.1.0044-1.x86_64.rpm' installed the EMC RPM in the correct place. Proxmox already included everything that serverutilcli requires; on a plain Buster install I had to install dm-multipath and the device mapper libraries and tools before serverutilcli would find the arrays; but it ran just like it did on CentOS 8 (and 7). I haven't decided whether to stay on Debian or not; too early to tell. I have time to test and evaluate. My CentOS 7 installs aren't goin anywhere, though, at least until late 2023. And I've registered for a Developer subscription of RHEL so that I can properly evaluate that option, too. This is the beauty of open source: we have OPTIONS.

11 23

kernel command line
by Jerry Geis 05 Aug '21

05 Aug '21

I am trying to install on a NUC7C with 32G of eMMC showing up as /dev/sdb Is there a way I can tell the kernel boot line or command line to MASK /dev/sdb ? Make it look like it does not exist ? It has windows pre-installed - I dont want to mistake it. Thanks Jerry

2 2

virt-manager and windows quest
by Jerry Geis 05 Aug '21

05 Aug '21

I am trying to get a windows guest on CentOS 7.9 to have more than 800x600 display. I started the Windows client, I downloaded Virtio 0.1.196.iso, went to the Device Manager, Display, right clicked - updated the driver - installed the qxldod driver, Rebooted. The Device Manager shows RedHat QXL Controller but I still only get 800x600 ghosted on Display Settings. Properties - shows "Windows has stopped this device as it reported a problem (Code 43)". What do I do with that ? This is the same error I had with I first tried VirtIO 0.1.185.iso Thanks, Jerry

2 1

unable to connect to the guest VM instance running Ubuntu 18.04
by Kaushal Shriyan 05 Aug '21

05 Aug '21

Hi, #cat /etc/redhat-release CentOS Linux release 7.8.2003 (Core) #virt-install --version 1.5.0 #virt-install -n snipeitassetmanagementubuntu --ram 8096 --vcpus 2 --virt-type kvm --os-type linux --os-variant ubuntu18.04 --graphics none --location 'http://archive.ubuntu.com/ubuntu/dists/bionic/main/installer-amd64/' --extra-args "console=tty0 console=ttyS0,115200n8" --disk path=/linuxkvmguestosdisk/snipeitassetmanagementubuntu.img,size=30 I am unable to connect to the guest VM instance. Any clue and i look forward to hearing from you. Thanks in advance. Best Regards, Kaushal

1 1

Trying out CentOS Stream 9
by Thomas Stephen Lee 05 Aug '21

05 Aug '21

Hi, How do I go about installing CentOS Stream 9 daily build in a VirtualBox VM? --- Lee

1 0

hosts.deny, fail2ban etc.
by H 04 Aug '21

04 Aug '21

|Running CentOS 7. I was under the impression - seemingly mistaken - that by adding a rule to /etc/hosts.deny such as ALL: aaa.bbb.ccc.* would ban all attempts from that network segment to connect to the server, ie before fail2ban would (eventually) ban connection attempts. This, however, does not seem correct and I could use a pointer to correct my misunderstanding. How is hosts.deny used and what have I missed? Is it necessary to run: iptables -I INPUT -s aaa.bbb.ccc.0/24 -j DROP to drop incoming connection attempts from that subnet? Thank you! |

9 17

vinagre from Ubuntu to CentOS 7.9
by Jerry Geis 04 Aug '21

04 Aug '21

I am trying to use vinagre (vncviewer type program) from Ubuntu 20.04 going to CentOS 7.9. I get prompted for the password. I enter it - then it says Authentication failed. I can connect with this program to other windows and Ubuntu machines no problem. Just having issue with CentOS. I can use vncviewer from CentOS to centOS. What's up ? Thanks, Jerry

1 0

how do I get an OLD Version like 6.3
by Jerry Geis 04 Aug '21

04 Aug '21

I need to example a really old version like 6.3. Where can I get a download for that ? Thanks Jerry

3 3

Newest kernel issue, C7
by mark 04 Aug '21

04 Aug '21

Just fullyu updated yesterday. The reboot gets past Centos (core)... and reboots. Repeatedly. messages *look* as though it got up... and then reboot. Any clues? mark

3 3

CentOS 8: two external network adapters, two ISPs - routing problems
by Konstantin Boyandin 02 Aug '21

02 Aug '21

Hello! Given: a CentOS 8-powered computer with three network adapters. eth0, eth2: external, connected to two different ISPs eth1: faces home network (intranet) The task: allow accessing certain internal services from either ISP. There are several services, I only mention SSH below. In the configs below: IP1: external IP at first ISP (ISP1), assigned to eth0 Gateway1: IP of gateway provided by ISP1 Network1,Netmask1: related to IP1 IP2: external IP at second ISP (ISP2), assigned to eth2 Gateway2: IP of gateway provided by ISP2 Network2,Netmask2: related to IP2 LocalSSHIP: IP in intranet (eth1) where SSH server is running Current configs follow. Routing tables: echo "200 isp1" >> /etc/iproute2/rt_tables echo "201 isp2" >> /etc/iproute2/rt_tables Routing policies: /etc/sysconfig/network-scripts/route-eth0 Network1 dev eth0 src IP1 table isp1 default via Gateway1 dev eth0 table isp1 /etc/sysconfig/network-scripts/route-eth2 Network2 dev eth2 src IP2 table isp2 default via Gateway2 dev eth2 table isp2 Routing rules: /etc/sysconfig/network-scripts/rule-eth0 from IP1/32 table isp1 /etc/sysconfig/network-scripts/rule-eth2 from IP2/32 table isp2 iptables snippets. External traffic forwarded to local SSH server from both interfaces: iptables -A PREROUTING -t nat -i eth0 -p tcp -d IP1 --dport 22 -j DNAT --to LocalSSHIP:22 iptables -A PREROUTING -t nat -i eth2 -p tcp -d IP2 --dport 22 -j DNAT --to LocalSSHIP:22 iptables -A FORWARD -p tcp -d LocalSSHIP --dport 22 -j ACCEPT eth0 is default gateway: $ ip route default via Gateway1 dev eth0 proto static metric 100 default via Gateway2 dev eth2 proto static metric 101 ... $ ip rule 0: from all lookup local 32764: from IP2 lookup isp2 32765: from IP1 lookup isp1 32766: from all lookup main 32767: from all lookup default SNAT is applied for the traffic originating from eth1: iptables -t nat -A POSTROUTING -i eth1 -o eth0 -j SNAT --to-source IP1 Current situation: - All services forwarded from eth0 are working normally. - All traffic originating from intranet passes out and back normally. - All the attempts to access services from eth2 time out. There are no obvious hints in /var/log/messages (such as complaints about "martian IPs"). I am somewhat at a loss here, all the pieces of advice would be very welcome. -- Sincerely, Konstantin Boyandin

3 2

It's been six days since CVD-2021-33909 was patched in RHEL, what's the holdup for Stream 8?
by Steven Rosenberg 29 Jul '21

29 Jul '21

This bug in the kernel was patched in RHEL on 7/20. Every other mainstream Linux distro patched it that day or the day after. That includes Rocky and Alma. https://access.redhat.com/security/cve/CVE-2021-33909 It's still not patched six days later in CentOS Stream 8. This Bugzilla entry makes it clear that when it comes to security, CentOS Stream falls behind RHEL. But this far behind? https://bugzilla.redhat.com/show_bug.cgi?id=1975182 This doesn't make a good argument for Stream being a viable CentOS Linux replacement.

3 5

Old CentOS 6.3 grub.conf
by Jerry Geis 28 Jul '21

28 Jul '21

I am trying to "add" an entry to grub.conf on CentOS 6.3 - and change the default=0 to default=1 # grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You do not have a /boot partition. This means that # all kernel and initrd paths are relative to /, eg. # root (hd0,0) # kernel /boot/vmlinuz-version ro root=/dev/sda1 # initrd /boot/initrd-[generic-]version.img #boot=/dev/sda default=1 timeout=5 splashimage=(hd0,0)/boot/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-279.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-279.el6.x86_64 ro root=UUID=09337d96-de39-43f1-99c2-8a6a1fadd465 rd_NO_LUKS rd_NO_LVM LANG=en_US.UTF-8 rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=auto KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet initrd /boot/initramfs-2.6.32-279.el6.x86_64.img title Boot Other root (hd0,0) kernel /boot/vmlinuz initrd /boot/initrd I then run "grub-install /dev/sda" and reboot. If I cursor down - my new title is present - but the default is still the first title. What did I miss ? Thanks, jerry

1 0

heads up: stream8 cloud-init rebase 20 to 21
by Leon Fauster 26 Jul '21

26 Jul '21

FYI and everyone on C8S: cloud-init does run on deployed cloud vm's anymore succesfully after update (it was rebased from 20. to 21.). Fix: before rebooting run "cloud-init clean" -- Leon

1 0

Folio Infobase
by J Martin Rushton 26 Jul '21

26 Jul '21

Does anyone know any way to read .nfo files from Folio infobases. The best suggestion I've seen so far is to run up a VM with Windows 98 on it, does anyone know where I can get a copy of that! BTW, these are not the .nfo files used to describe scenes. -- J Martin Rushton MBCS

1 0

yum quiet not really quiet anymore?
by Gionatan Danti 24 Jul '21

24 Jul '21

Hi all, I noticed that "yum -q" (or "dnf" -q) on CentOS 8 is not really quiet anymore. For example (notiche the "upgraded" line): [root@localhost cron.d]# yum upgrade -y -q Upgraded: python3-perf-4.18.0-305.10.2.el8_4.x86_64 While yum historically had issue with the quiet option [1], this specific issue seems new to me. Do you have any suggestion (short of redirecting stdout to /dev/null)? Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 2

OT: firefox question
by Valeri Galtsev 24 Jul '21

24 Jul '21

Dear Experts, My question is OT, as it is related to firefox, not CentOS system per se. Even more: my firefox runs on FreeBSD workstation. But I figured this list have largest likelihood of having experts in firefox (as well as on other things), so... My firefox behavior changed after one of recent updates.. When one logs in to website that is locked using web password (e.g., set in .htacess/.htpasswd in apache), one gives username/password once. Then firefox remembers that while firefox is running, and you don't have to give credentials (though authentication does happen behind the scenes all the time since). But not anymore for me at least on my (FreeBSD) workstation: in the morning I discover firefox (though it had not been restarted) asks yet again credentials to websites I have been logged to. As if firefox purges credentials to websites after some period of time (or inactivity on those websites). This stared happening not long ago after one of updates firefox is known to release annoyingly often (as in: mozilla foundation forgot the meaning of the word "release" which means well debugged code some time about decade ago...). I tried to find relevant setting in GUI preferences to no avail (maybe it is just me?), and hope, experts know deeper lying preferences, and may point me to relevant one. All in all, I'm forced back onto my pursuit for replacement for firefox browser... Thanks a lot for all your answers. And my apologies for rant (which I was not able to separate due to my frustration...). Valeri -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 2

Difference between CentOS Linux and CentOS Stream
by Kaushal Shriyan 23 Jul '21

23 Jul '21

Hi, I am confused between CentOS Linux and CentOS Stream as per https://www.centos.org/download/. Please guide me on which one I need to use in the production environment. Is there a difference between CentOS Linux and CentOS Stream? Thanks in advance and I look forward to hearing from you. Best Regards, Kaushal

15 18

Annoyances with sound
by mark 23 Jul '21

23 Jul '21

Hi, folks, Running C7, updated the beginning of this month. KDE, I go to the start menu->multimedia. and select kmix, the pretty cursor bounces for a while, then apparently ends with nothing running. Nothing in .xerrors. I try selecting audacity - which I don't trust, given that the last time, weeks ago, that I ran it from the command line, after about 5 min, it hung my system (16G RAM, Core I-7) so hard I had to power cycle. From the start menu... I get a popup "an error has occured." What's going on here? mark

1 0

CentOS-announce Digest, Vol 196, Issue 4
by centos-announce-request＠centos.org 23 Jul '21

23 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2725 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2021:2784 Important CentOS 7 java-11-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 22 Jul 2021 13:52:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2725 Important CentOS 7 kernel Security Update Message-ID: <20210722135255.GA22110(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2725 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2725 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e07580dc20cee29ddae2c26b7d4782a6e7671477d7f4ae210d2cef6cc71555cb bpftool-3.10.0-1160.36.2.el7.x86_64.rpm 91d2cf4d7a40fe66ba14583d4d5f045850fefc8b26b7e0adc2634f5ec9f9a775 kernel-3.10.0-1160.36.2.el7.x86_64.rpm 6ce4b480a292b7fa51c31777377a1711c2537597c5cf02d8aa14b345321b67bf kernel-abi-whitelists-3.10.0-1160.36.2.el7.noarch.rpm 1cd93bcccbab328b508e869ff3ceeaa30e1ab5ac781b7a6c3b91207832226025 kernel-debug-3.10.0-1160.36.2.el7.x86_64.rpm 5ec120d1c66453ab1a85e5107b0b4457686f595cf2e8dfc5ca04adcec4f0ade0 kernel-debug-devel-3.10.0-1160.36.2.el7.x86_64.rpm ba5a53ea9bd2aff2765fd9fc38a3f75ecd5d3e617e1c2cb85f6a9a793063506c kernel-devel-3.10.0-1160.36.2.el7.x86_64.rpm 28f85ca5b6e7c2b1e3ab7c4b31675583e8a72c18188f86f288a9a9bc046a202c kernel-doc-3.10.0-1160.36.2.el7.noarch.rpm 68cfd2b5e2aa6b9bad7a4040def6ccec2aa6ca31c6acf4758e98b507e8efc105 kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm 53ebea1b387c7333eb49334b5bf8e867d5307742f502d7d40091abe8eb42387b kernel-tools-3.10.0-1160.36.2.el7.x86_64.rpm c3571b20ed80af5bcdad26c4ffded5902a413e69a9f36e66ea22eb7f0b7343be kernel-tools-libs-3.10.0-1160.36.2.el7.x86_64.rpm d0f3c1d37d812e6fbf2b4e853fb66fd0ffe2a908b0bd0749ea1f99b53198ad71 kernel-tools-libs-devel-3.10.0-1160.36.2.el7.x86_64.rpm cc99796988903240582ca2234451a6b7eaa5f9534e910f4f9838cbd024cc7b0a perf-3.10.0-1160.36.2.el7.x86_64.rpm d1779b88b2029c7b3cd102334127e7013a0a71479581fd2f04f0d23bbc8a0463 python-perf-3.10.0-1160.36.2.el7.x86_64.rpm Source: e82932562eb31affee526927b3cbc2280750983a88182a0fcc49e511e6836691 kernel-3.10.0-1160.36.2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 22 Jul 2021 13:56:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2784 Important CentOS 7 java-11-openjdk Security Update Message-ID: <20210722135657.GA22487(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2784 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2784 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a2e3eec180d90a42cea830a8b5f0fa6890394a9b51d4349667c8010da5d2d418 java-11-openjdk-11.0.12.0.7-0.el7_9.i686.rpm f8d118dd0c38e6be586da71c24bb8639d30d388d9b57e276ec52b9ac2f649ead java-11-openjdk-11.0.12.0.7-0.el7_9.x86_64.rpm c1a1ba3ae8f745008a0b7e5c0e4663241db1a386d16bd54eef846e125686ceba java-11-openjdk-demo-11.0.12.0.7-0.el7_9.i686.rpm 708f19a2413ea0ae0ab9a7619a05c06675c69004d477b56b71ac6ec988ee1cc4 java-11-openjdk-demo-11.0.12.0.7-0.el7_9.x86_64.rpm 1a762e2d8882a0c051d0a322eb97ba3c2fbdb843e16699bb702cecd284f238fa java-11-openjdk-devel-11.0.12.0.7-0.el7_9.i686.rpm 5b9c35a49f05bdae1d6d9ae13688adb2f1aa9eed15604ea80e3126af3ad89c77 java-11-openjdk-devel-11.0.12.0.7-0.el7_9.x86_64.rpm 155a01df2abb9e5b0463d2bbe0314d3147245d1540cc0e5026de16abc670d0e6 java-11-openjdk-headless-11.0.12.0.7-0.el7_9.i686.rpm f1402f59f4309e9a2ad497a9699c098b61381170de7f600a6a7636db589400d5 java-11-openjdk-headless-11.0.12.0.7-0.el7_9.x86_64.rpm 49275f52aa1c71edc688e6802a1f2c8b136594807077f4aa90e4e2686edd8ddb java-11-openjdk-javadoc-11.0.12.0.7-0.el7_9.i686.rpm f3c1504a0f9e8be3e261212092e89009d8b01f3fe0f1804ed10e767846e87d26 java-11-openjdk-javadoc-11.0.12.0.7-0.el7_9.x86_64.rpm d17d23e9f3e2cd89c98f84ba07345a6c51f1dc3d67f5d52d483e6f2ed2d93751 java-11-openjdk-javadoc-zip-11.0.12.0.7-0.el7_9.i686.rpm 4c7a4b1402ce62b471994dd364f3e883167ad5ba8ebba01d67f8ceee2f63d6a5 java-11-openjdk-javadoc-zip-11.0.12.0.7-0.el7_9.x86_64.rpm 2596d8e58b7977e350ac45b39a8c22507bf5f23a48e5c5af3025b81016622b58 java-11-openjdk-jmods-11.0.12.0.7-0.el7_9.i686.rpm b346f29da69c21241a449decf0f47b1117502c6f136b70a23a24f1438e919766 java-11-openjdk-jmods-11.0.12.0.7-0.el7_9.x86_64.rpm f544bc64d6a690d2e5853b042cb5a8c7eb50879dacd1acf3c3eca69966d25370 java-11-openjdk-src-11.0.12.0.7-0.el7_9.i686.rpm c55fbad2b511346ebf2a848c75861a87c98b38738226ac74429144324281ef52 java-11-openjdk-src-11.0.12.0.7-0.el7_9.x86_64.rpm 8f21403b3615c8a3c67833bcb49d11b4c3b80d768a6bdba42abe5d2b299d9cb3 java-11-openjdk-static-libs-11.0.12.0.7-0.el7_9.i686.rpm 8319e904c4b86f6892579492778456a31dcdbb29d4f7b62060dba26486be2a85 java-11-openjdk-static-libs-11.0.12.0.7-0.el7_9.x86_64.rpm Source: 31ba75ab61265b2d9377e08747ee05ef445f4fb160a5d4e4f4d2d1b1bcb78b56 java-11-openjdk-11.0.12.0.7-0.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 4 ***********************************************

1 0

CentOS8 nouveau errors
by Bill Gee 21 Jul '21

21 Jul '21

I am running the stream version of CentOS 8 on a system that hosts a bunch of VirtualBox guests. Recently, like about a month ago, a problem started showing up. When working at the console, the system is almost completely unresponsive. In a terminal session, any key that you press might show up a minute later. Any mouse movement might show up a minute later. About every ten seconds the screen switches to a completely different display for maybe a few tens of milliseconds and then switches back. This happens so fast it is almost subliminal. The log fills with tens of thousands of messages per day that look like this: Jul 21 07:21:06 vmhost2 kernel: Hardware name: Supermicro C7SIM-Q/C7SIM-Q, BIOS 1.2a 06/02/2017 Jul 21 07:21:06 vmhost2 kernel: Workqueue: events_unbound nv50_disp_atomic_commit_work [nouveau] Jul 21 07:21:06 vmhost2 kernel: RIP: 0010:nv50_dmac_wait+0x1e1/0x230 [nouveau] Jul 21 07:21:06 vmhost2 kernel: Code: 8d 48 04 48 89 4a 68 c7 00 00 00 00 20 49 8b 46 38 41 c7 86 20 01 00 00 00 00 00 0 0 49 89 46 68 e8 d4 fc ff ff e9 76 fe ff ff <0f> 0b b8 92 ff ff ff e9 ed fe ff ff 49 8b be 80 00 00 00 e8 b7 fc Jul 21 07:21:06 vmhost2 kernel: RSP: 0018:ffff9ab3c2077d60 EFLAGS: 00010282 Jul 21 07:21:06 vmhost2 kernel: RAX: ffffffffffffff92 RBX: ffff9ab3c2077d60 RCX: 0000000000000000 Jul 21 07:21:06 vmhost2 kernel: RDX: ffffffffffffff92 RSI: ffff9ab3c2077ca0 RDI: ffff9ab3c2077d40 Jul 21 07:21:06 vmhost2 kernel: RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffc0365fd0 Jul 21 07:21:06 vmhost2 kernel: R10: 0000000000000006 R11: ffffffffc03733c0 R12: 00000000fffffffb Jul 21 07:21:06 vmhost2 kernel: R13: ffff8c141b820b68 R14: ffff8c141b820ba8 R15: ffff8c1144d21e00 Jul 21 07:21:06 vmhost2 kernel: FS: 0000000000000000(0000) GS:ffff8c142fd80000(0000) knlGS:0000000000000000 Jul 21 07:21:06 vmhost2 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Jul 21 07:21:06 vmhost2 kernel: CR2: 000055e49fe63ef0 CR3: 00000001a5410000 CR4: 00000000000006e0 Jul 21 07:21:06 vmhost2 kernel: Call Trace: Jul 21 07:21:06 vmhost2 kernel: base507c_update+0x2f/0x70 [nouveau] Jul 21 07:21:06 vmhost2 kernel: nv50_disp_atomic_commit_wndw.isra.16+0x5f/0x80 [nouveau] Jul 21 07:21:06 vmhost2 kernel: nv50_disp_atomic_commit_tail+0x669/0x9b0 [nouveau] Jul 21 07:21:06 vmhost2 kernel: process_one_work+0x1a7/0x360 Jul 21 07:21:06 vmhost2 kernel: worker_thread+0x30/0x390 Jul 21 07:21:06 vmhost2 kernel: ? create_worker+0x1a0/0x1a0 Jul 21 07:21:06 vmhost2 kernel: kthread+0x116/0x130 Jul 21 07:21:06 vmhost2 kernel: ? kthread_flush_work_fn+0x10/0x10 Jul 21 07:21:06 vmhost2 kernel: ret_from_fork+0x35/0x40 Jul 21 07:21:06 vmhost2 kernel: ---[ end trace 43122b13e20cf558 ]--- Jul 21 07:21:08 vmhost2 kernel: nouveau 0000:01:00.0: DRM: base-0: timeout The daily logwatch report has thousands of lines like this: --------------------- Kernel Begin ------------------------ WARNING: Kernel Errors Present WARNING: CPU: 0 PID: 131209 at drivers/gpu/drm/n ...: 201 Time(s) WARNING: CPU: 0 PID: 131356 at drivers/gpu/drm/n ...: 450 Time(s) WARNING: CPU: 0 PID: 132285 at drivers/gpu/drm/n ...: 3 Time(s) WARNING: CPU: 0 PID: 15274 at drivers/gpu/drm/no ...: 1245 Time(s) WARNING: CPU: 0 PID: 15808 at drivers/gpu/drm/no ...: 144 Time(s) WARNING: CPU: 0 PID: 62 at drivers/gpu/drm/nouve ...: 1080 Time(s) WARNING: CPU: 1 PID: 131209 at drivers/gpu/drm/n ...: 336 Time(s) WARNING: CPU: 1 PID: 131356 at drivers/gpu/drm/n ...: 828 Time(s) WARNING: CPU: 1 PID: 132030 at drivers/gpu/drm/n ...: 18 Time(s) WARNING: CPU: 1 PID: 132285 at drivers/gpu/drm/n ...: 12 Time(s) WARNING: CPU: 1 PID: 15274 at drivers/gpu/drm/no ...: 903 Time(s) WARNING: CPU: 1 PID: 15808 at drivers/gpu/drm/no ...: 108 Time(s) (repeat for 2 megabytes of text) With all VB guests stopped, htop shows CPU usage in the range of 1% or less. Sessions opened by ssh run normally. Sessions opened to a guest with xrdp run normally. Guests do not report any errors in their log files. Where do I begin to troubleshoot something like this? Thanks - ======== Bill Gee

1 1

local privilege escalation in kernel and systemd
by Kenneth Porter 21 Jul '21

21 Jul '21

<https://www.bleepingcomputer.com/news/security/new-linux-kernel-bug-lets-yo…> Two related bugs involve mounting a very long path. The kernel bug requires passing a 1 GB path string, while the systemd bug involves an 8 MB path that overflows its stack. Technical details here: <https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/sequoia-…> <https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/cve-2021…>

1 0

CentOS IRC
by Earl Ramirez 20 Jul '21

20 Jul '21

Good day, Did CentOS moved from freenode to LibraIRC? -- Kind Regards, Earl A. Ramirez 2021-07-20T21:27:00 (PST +0800)

2 2

Warning: No matches found for: clamav on CentOS Linux release 7.9.2009 (Core)
by Kaushal Shriyan 20 Jul '21

20 Jul '21

Hi, I am running CentOS Linux release 7.9.2009 (Core) and installed epel repository. # rpm -qa | grep epel epel-release-7-13.noarch # cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) #yum search clamav Loaded plugins: fastestmirror Determining fastest mirrors * base: mirrors.piconets.webwerks.in * extras: mirrors.piconets.webwerks.in * updates: mirrors.piconets.webwerks.in base | 3.6 kB 00:00:00 docker-ce-stable | 3.5 kB 00:00:00 elastic-7.x | 1.3 kB 00:00:00 extras | 2.9 kB 00:00:00 ius | 1.3 kB 00:00:00 mariadb | 2.9 kB 00:00:00 nginx | 2.9 kB 00:00:00 updates | 2.9 kB 00:00:00 (1/10): base/7/x86_64/group_gz | 153 kB 00:00:00 (2/10): extras/7/x86_64/primary_db | 242 kB 00:00:00 (3/10): elastic-7.x/primary | 288 kB 00:00:00 (4/10): docker-ce-stable/7/x86_64/primary_db | 62 kB 00:00:00 (5/10): docker-ce-stable/7/x86_64/updateinfo | 55 B 00:00:00 (6/10): ius/x86_64/primary | 100 kB 00:00:01 (7/10): updates/7/x86_64/primary_db | 8.8 MB 00:00:04 (8/10): base/7/x86_64/primary_db | 6.1 MB 00:00:05 (9/10): nginx/7/x86_64/primary_db | 67 kB 00:00:04 (10/10): mariadb/primary_db | 36 kB 00:00:05 elastic-7.x 880/880 ius 467/467 Warning: No matches found for: clamav No matches found Am I missing anything? Please suggest further. Thanks in Advance. Best Regards, Kaushal

5 8

Samba Problem with AD Connection
by Mr Typo 17 Jul '21

17 Jul '21

Hello all, i hope you can help me. I have successfully set up a connection with samba to my domain controller. What works: * wbinfo -u / wbinfo -g * wbinfo -a * bet ads info i hope you can help me! thank you! ============ net ads info LDAP server: 10.40.130.10 LDAP server name: sv1-dc01p.pfw.local Realm: PFW.LOCAL Bind Path: dc=PFW,dc=LOCAL LDAP port: 389 Server time: Sat, 17 Jul 2021 13:32:03 CEST KDC server: 10.40.130.10 Server time offset: 0 Last machine account password change: Sat, 17 Jul 2021 10:55:08 CEST =========== ======== wbinfo -a srvadmsar Enter srvadmsar's password: plaintext password authentication succeeded Enter srvadmsar's password: challenge/response password authentication succeeded ======= when i try to connect with smbclient and a domain user i get the error SPNEGO login failed: The attempted logon is invalid. This is either due to a bad username or authentication information. session setup failed: NT_STATUS_LOGON_FAILURE in the Logfiles ob the samba server i get a NT_STATUS_OK (when i join with a domain joined windows system, i get NT_STATUS_OK, but windows then wants a username and password. below you can find the logs from /var/log/samba/* i hope you can help me, i am trying for hours... ==> /var/log/samba/log.127.0.0.1 <== [2021/07/17 13:38:05.792287, 5] ../../source3/param/loadparm.c:1396(free_service) free_service: Freeing service shareshare [2021/07/17 13:38:05.792319, 5] ../../source3/param/loadparm.c:1396(free_service) free_service: Freeing service IPC$ [2021/07/17 13:38:05.792339, 3] ../../source3/param/loadparm.c:3945(lp_load_ex) lp_load_ex: refreshing parameters [2021/07/17 13:38:05.792349, 5] ../../source3/param/loadparm.c:1371(free_param_opts) Freeing parametrics: [2021/07/17 13:38:05.792434, 3] ../../source3/param/loadparm.c:551(init_globals) Initialising global parameters [2021/07/17 13:38:05.792535, 3] ../../source3/param/loadparm.c:2847(lp_do_section) Processing section "[global]" doing parameter workgroup = PFW doing parameter realm = PFW.LOCAL doing parameter security = ads doing parameter password server = 10.40.130.10 doing parameter idmap config * : backend = autorid doing parameter idmap config * : range = 100000-19999999 doing parameter idmap config * : rangesize = 1000000 doing parameter template homedir = /home/%D/%U doing parameter template shell = /bin/bash doing parameter winbind use default domain = true doing parameter ntlm auth = yes doing parameter winbind offline logon = true doing parameter log file = /var/log/samba/log.%m doing parameter max log size = 50 doing parameter log level = 5 [2021/07/17 13:38:05.792740, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 doing parameter load printers = no [2021/07/17 13:38:05.792873, 2] ../../source3/param/loadparm.c:2864(lp_do_section) Processing section "[shareshare]" doing parameter path = /storage/share doing parameter browsable = yes doing parameter writable = yes doing parameter read only = no doing parameter guest ok = yes doing parameter valid users = PFW\SRVADMSAR [2021/07/17 13:38:05.792992, 4] ../../source3/param/loadparm.c:3987(lp_load_ex) pm_process() returned Yes [2021/07/17 13:38:05.793023, 3] ../../source3/param/loadparm.c:1648(lp_add_ipc) adding IPC service [2021/07/17 13:38:05.793057, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 [2021/07/17 13:38:05.793459, 2] ../../source3/lib/interface.c:345(add_interface) added interface ens192 ip=192.168.110.104 bcast=192.168.110.255 netmask=255.255.255.0 [2021/07/17 13:38:05.793493, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.793563, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.793659, 3] ../../source3/smbd/oplock.c:1427(init_oplocks) init_oplocks: initializing messages. [2021/07/17 13:38:05.793672, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 774 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793681, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 778 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793692, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 770 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793700, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 801 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793706, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 787 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793713, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 779 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793723, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2021/07/17 13:38:05.793740, 5] ../../source3/lib/messages.c:740(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2021/07/17 13:38:05.793751, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2021/07/17 13:38:05.793762, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 16 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793773, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x55fecf14d350 [2021/07/17 13:38:05.793783, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 33 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793793, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2021/07/17 13:38:05.793804, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 790 - private_data=0x55fecf175270 [2021/07/17 13:38:05.793815, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2021/07/17 13:38:05.793826, 5] ../../source3/lib/messages.c:772(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2021/07/17 13:38:05.793836, 5] ../../source3/lib/messages.c:725(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2021/07/17 13:38:05.793889, 3] ../../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 214 (0 toread) [2021/07/17 13:38:05.793943, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:05.793963, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:05.793979, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:05.794013, 5] ../../source3/smbd/uid.c:494(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2021/07/17 13:38:05.794036, 4] ../../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2021/07/17 13:38:05.794045, 4] ../../source3/smbd/uid.c:562(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2021/07/17 13:38:05.794056, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2021/07/17 13:38:05.794064, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:05.794070, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:05.794125, 4] ../../source3/smbd/sec_ctx.c:438(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:05.794151, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 [2021/07/17 13:38:05.794366, 3] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot) Selected protocol SMB3_11 [2021/07/17 13:38:05.794393, 5] ../../source3/auth/auth.c:540(make_auth3_context_for_ntlm) Making default auth method list for server role = 'domain member' [2021/07/17 13:38:05.794417, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend anonymous [2021/07/17 13:38:05.794436, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'anonymous' [2021/07/17 13:38:05.794450, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam [2021/07/17 13:38:05.794467, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam' [2021/07/17 13:38:05.794480, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2021/07/17 13:38:05.794493, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2021/07/17 13:38:05.794501, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend sam_netlogon3 [2021/07/17 13:38:05.794517, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'sam_netlogon3' [2021/07/17 13:38:05.794529, 5] ../../source3/auth/auth.c:51(smb_register_auth) Attempting to register auth backend winbind [2021/07/17 13:38:05.794539, 5] ../../source3/auth/auth.c:63(smb_register_auth) Successfully added auth method 'winbind' [2021/07/17 13:38:05.794549, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match anonymous [2021/07/17 13:38:05.794560, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method anonymous has a valid init [2021/07/17 13:38:05.794571, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2021/07/17 13:38:05.794582, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam has a valid init [2021/07/17 13:38:05.794593, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind [2021/07/17 13:38:05.794604, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method winbind has a valid init [2021/07/17 13:38:05.794611, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam_ignoredomain [2021/07/17 13:38:05.794617, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam_ignoredomain has a valid init [2021/07/17 13:38:05.794730, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC mechanism spnego [2021/07/17 13:38:05.794813, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC submechanism gse_krb5 ==> /var/log/samba/log.smbd <== [2021/07/17 13:38:05.791006, 2] ../../source3/lib/tallocmsg.c:84(register_msg_pool_usage) Registered MSG_REQ_POOL_USAGE [2021/07/17 13:38:05.791086, 5] ../../source3/passdb/pdb_interface.c:155(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2021/07/17 13:38:05.791103, 5] ../../source3/passdb/pdb_interface.c:176(make_pdb_method_name) Found pdb backend tdbsam [2021/07/17 13:38:05.791143, 5] ../../source3/passdb/pdb_interface.c:187(make_pdb_method_name) pdb backend tdbsam has a valid init [2021/07/17 13:38:05.791248, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.791344, 5] ../../lib/util/util_net.c:1058(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1061488 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 TCP_USER_TIMEOUT = 0 [2021/07/17 13:38:05.791502, 3] ../../lib/util/access.c:371(allow_access) Allowed connection from 127.0.0.1 (127.0.0.1) [2021/07/17 13:38:05.791563, 5] ../../lib/util/debug.c:811(debug_dump_status) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 scavenger: 5 dns: 5 ldb: 5 tevent: 5 auth_audit: 5 auth_json_audit: 5 kerberos: 5 drs_repl: 5 smb2: 5 smb2_credits: 5 dsdb_audit: 5 dsdb_json_audit: 5 dsdb_password_audit: 5 dsdb_password_json_audit: 5 dsdb_transaction_audit: 5 dsdb_transaction_json_audit: 5 dsdb_group_audit: 5 dsdb_group_json_audit: 5 ==> /var/log/samba/log.127.0.0.1 <== [2021/07/17 13:38:08.966773, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2021/07/17 13:38:08.966824, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:08.966839, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:08.966873, 5] ../../source3/smbd/uid.c:494(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2021/07/17 13:38:08.966910, 5] ../../lib/dbwrap/dbwrap.c:148(dbwrap_lock_order_lock) dbwrap_lock_order_lock: check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967145, 5] ../../lib/dbwrap/dbwrap.c:180(dbwrap_lock_order_unlock) dbwrap_lock_order_unlock: release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967170, 5] ../../source3/auth/auth.c:540(make_auth3_context_for_ntlm) Making default auth method list for server role = 'domain member' [2021/07/17 13:38:08.967183, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match anonymous [2021/07/17 13:38:08.967216, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method anonymous has a valid init [2021/07/17 13:38:08.967239, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2021/07/17 13:38:08.967251, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam has a valid init [2021/07/17 13:38:08.967261, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind [2021/07/17 13:38:08.967271, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method winbind has a valid init [2021/07/17 13:38:08.967281, 5] ../../source3/auth/auth.c:425(load_auth_module) load_auth_module: Attempting to find an auth method to match sam_ignoredomain [2021/07/17 13:38:08.967292, 5] ../../source3/auth/auth.c:450(load_auth_module) load_auth_module: auth method sam_ignoredomain has a valid init [2021/07/17 13:38:08.967388, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC mechanism spnego [2021/07/17 13:38:08.967406, 5] ../../lib/dbwrap/dbwrap.c:148(dbwrap_lock_order_lock) dbwrap_lock_order_lock: check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967430, 5] ../../lib/dbwrap/dbwrap.c:180(dbwrap_lock_order_unlock) dbwrap_lock_order_unlock: release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2021/07/17 13:38:08.967442, 4] ../../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2021/07/17 13:38:08.967451, 4] ../../source3/smbd/uid.c:562(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2021/07/17 13:38:08.967462, 4] ../../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2021/07/17 13:38:08.967472, 5] ../../libcli/security/security_token.c:52(security_token_debug) Security token: (NULL) [2021/07/17 13:38:08.967479, 5] ../../source3/auth/token_util.c:874(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2021/07/17 13:38:08.967550, 5] ../../auth/gensec/gensec_start.c:849(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2021/07/17 13:38:08.967586, 3] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x62088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM ==> /var/log/samba/log.wb-PFW <== [2021/07/17 13:38:08.969578, 4] ../../source3/winbindd/winbindd_dual.c:1626(child_handler) child daemon request 14 [2021/07/17 13:38:08.969608, 3] ../../source3/winbindd/winbindd_pam.c:2683(winbindd_dual_pam_auth_crap) [10364]: pam auth crap domain: PFW user: srvadmsar [2021/07/17 13:38:08.969741, 5] ../../source3/rpc_client/cli_pipe.c:827(rpc_api_pipe_send) rpc_api_pipe: host sv1-dc01p.pfw.local [2021/07/17 13:38:08.969754, 5] ../../source3/rpc_client/cli_pipe.c:179(rpc_write_send) rpc_write_send: data_to_write: 696 [2021/07/17 13:38:08.970968, 5] ../../source3/rpc_client/cli_pipe.c:99(rpc_read_send) rpc_read_send: data_to_read: 632 [2021/07/17 13:38:08.971188, 5] ../../source3/winbindd/winbindd_pam.c:2640(winbind_dual_SamLogon) NTLM CRAP authentication for user [PFW]\[srvadmsar] returned NT_STATUS_OK [2021/07/17 13:38:08.971291, 3] ../../auth/auth_log.c:653(log_authentication_event_human_readable) Auth: [winbind,NTLM_AUTH, smbd, 10364] user [PFW]\[srvadmsar] at [Sat, 17 Jul 2021 13:38:08.971273 CEST] with [NTLMv2] status [NT_STATUS_OK] workstation [SMBTEST-ANDI] remote host [unix:] became [PFW]\[srvadmsar] [S-1-5-21-4080695503-475066264-1108356078-1126]. local host [unix:] {"timestamp": "2021-07-17T13:38:08.971345+0200", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4624, "logonId": "7944426e07973722", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": "unix:", "remoteAddress": "unix:", "serviceDescription": "winbind", "authDescription": "NTLM_AUTH, smbd, 10364", "clientDomain": "PFW", "clientAccount": "srvadmsar", "workstation": "SMBTEST-ANDI", "becameAccount": "srvadmsar", "becameDomain": "PFW", "becameSid": "S-1-5-21-4080695503-475066264-1108356078-1126", "mappedAccount": null, "mappedDomain": null, "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1758}} [2021/07/17 13:38:08.971423, 4] ../../source3/winbindd/winbindd_dual.c:1634(child_handler) Finished processing child request 14 ==> /var/log/samba/log.winbindd <== [2021/07/17 13:38:08.969181, 3] ../../source3/winbindd/winbindd_misc.c:432(winbindd_interface_version) winbindd_interface_version: [smbd (10448)]: request interface version (version = 31) [2021/07/17 13:38:08.969319, 3] ../../source3/winbindd/winbindd_misc.c:470(winbindd_priv_pipe_dir) winbindd_priv_pipe_dir: [smbd (10448)]: request location of privileged pipe [2021/07/17 13:38:08.969346, 3] ../../source3/winbindd/winbindd_misc.c:483(winbindd_priv_pipe_dir) winbindd_priv_pipe_dir: [smbd (10448)]: response location of privileged pipe: (null) [2021/07/17 13:38:08.969496, 3] ../../source3/winbindd/winbindd_pam_auth_crap.c:113(winbindd_pam_auth_crap_send) [10448]: pam auth crap domain: [PFW] user: srvadmsar [2021/07/17 13:38:08.973296, 3] ../../source3/winbindd/winbindd_misc.c:407(winbindd_ping) winbindd_ping: [smbd (10448)]: ping

1 0

CentOS-announce Digest, Vol 196, Issue 3
by centos-announce-request＠centos.org 16 Jul '21

16 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2741 Important CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 15 Jul 2021 22:22:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2741 Important CentOS 7 firefox Security Update Message-ID: <20210715222246.GA25165(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2741 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2741 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d09bdd004c3fac87661119d619afb43d9ad9824ef8a2e58fa51c55f0211f12d9 firefox-78.12.0-1.el7.centos.i686.rpm 6a6db0a030199ad5a8e0edde0f8458ca5391f94ac4ccd7a93c3c186326026cc3 firefox-78.12.0-1.el7.centos.x86_64.rpm Source: fd28ed7ab0523d22a76adadf6f4da17f29f7bba08cc83e43af80bf3e0bd490b0 firefox-78.12.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 3 ***********************************************

1 0

Centos 8 two network cards
by Ken Smith 15 Jul '21

15 Jul '21

Hi folks, I'm a bit confused about how to set up two network cards in different LANS in C8. I've done this multiple times in Centos6 and lower, but in the NetworkManager/systemd world I'm all at sea without any charts. (I'm sure there's a HKLM in there somewhere -sorry ;-)) and my Googlefoo is failing me this evening. Via the GUI it will let me configure one device or the other but not both :-( Anyway I want one NIC with IP 10.100.0.2/24 and GW 10.100.0.1 and the other with IP 10.2.0.2/24 and no gateway. I've seen a method that removes NetworkManager and installs network-scripts then configures the ifcfg-eth0 and ifcfg-eth1 scripts. Interestingly the devices seem to be still called eth0 & 1 on this system which happens to be a VM. When I use this method the systemctl start network appears not to be able to find eth1. Is there a recommended way to do this? I'd prefer to use 'approved' techniques rather than work arounds. Any suggestions? Thanks Ken -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 3

CentOS-announce Digest, Vol 196, Issue 2
by centos-announce-request＠centos.org 14 Jul '21

14 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2683 Important CentOS 7 xstream Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 13 Jul 2021 21:13:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2683 Important CentOS 7 xstream Security Update Message-ID: <20210713211330.GA23228(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2683 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2683 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0930a501a892602ab5d8c48730193fa5230e46803b8b20533482a6322014c898 xstream-1.3.1-14.el7_9.noarch.rpm 24dee6e8be939b14900bb668c0f5908df2590d8188545bd59c83122ddcd7a785 xstream-javadoc-1.3.1-14.el7_9.noarch.rpm Source: 0d289851834f7f2542e8bdb62092d92004f1a02bd2d700aac88c9a83017a1baa xstream-1.3.1-14.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 2 ***********************************************

1 0

Server monitoring
by H 11 Jul '21

11 Jul '21

I want to install open-source software on my hosted CentOS 7 server to monitor the system in general, as well as logs, apache webserver, MySQL and PostgreSQL to begin with. I know there are a multitude of packages available and would be interested in hearing if others have a favorite package? My preference is for a graphical interface where it is easy to follow a variety of load measures but also provides alerts etc. Suggestions appreciated!

7 7

Re: [CentOS] Auditing all Linux clients with centralised server
by Adrian van Bloois 10 Jul '21

10 Jul '21

Ever heard of ossec? Se: www.ossec.net -- Adri P. van Bloois "The greatest threat to our planet is the belief that someone else will save it." Robert Swan.

1 0

Centos versions in the future?
by Carlos Oliva 09 Jul '21

09 Jul '21

Will there be newer versions of Centos? We have heard rumors that version 8 will be the last one. We are concerned with using an OS that will loose support in the future. Thank you.

29 107

Auditing all Linux clients with centralised server
by Kaushal Shriyan 09 Jul '21

09 Jul '21

Hi, I have 20 Linux servers in the network. Is there a way to audit all Linux clients using a centralized server? For example, what commands are run by John on Linuxnode1? Steve on Linuxnode15? and so on and so forth to track user activity. Which files have been modified or edited or commands etc...... by the users. I have installed auditd, but it is local to the Linux server. Thanks in advance. Best Regards, Kaushal

7 9

CentOS-announce Digest, Vol 196, Issue 1
by centos-announce-request＠centos.org 08 Jul '21

08 Jul '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:2658 Important CentOS 7 linuxptp Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 7 Jul 2021 18:17:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:2658 Important CentOS 7 linuxptp Security Update Message-ID: <20210707181720.GA16669(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:2658 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:2658 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5d92d36050c5d7174cd65358882ce23f7eab51af6a02070c42917f77f9dcb3fe linuxptp-2.0-2.el7_9.1.x86_64.rpm Source: a0aa8a92f7fc0f029559b186db4016eaab076fb34c67d1aaf9bb54143ca62a9a linuxptp-2.0-2.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 196, Issue 1 ***********************************************

1 0

Audacity
by mark 07 Jul '21

07 Jul '21

I'm trying to record a reading of my just-published novel... and I'm underwhelmed. In KDE, I select multimedia->audacity, and it crashes. I can get it to run from a command line, but if I try to start "new", it crashes. When I was testing, and got the correct mike, then wanted to delete what I'd done and actually start, it crashes. This is as installed, nothing odd. Recommendations (other than reinstall)? mark

3 3

Sending mail from rkhunter
by H 07 Jul '21

07 Jul '21

I am having problems getting rkhunter to send the daily report to an outside email account under CentOS 7. I have installed postfix and fail2ban now sends ban messages as expected. I have googled but so far failed to identify the error in my setup: - /etc/aliases contain the correct mail alias for root - /etc/rkhunter.conf has REPORT_EMAIL=themailadress and MAIL-ON-WARNING=themailadress - /var/log/rkhunter/rkhunter.log does not contain any error messages What have I missed?

1 0

Re: [CentOS] CentOS Digest, Vol 198, Issue 6
by Anand Babu 07 Jul '21

07 Jul '21

Hi Leon, Thanks a lot for taking a look at my test and the suggestion. We have tested this suggestion echo never > /sys/kernel/mm/transparent_hugepage/enabled Unfortunately, the Ram usage was the same with this option changed as well. Just to give some additional context to the original question to all, We see 10-25 percent more RSS on CentOS 8 ( as compared to CentOS 7) for the same Java vm process that we are benchmarking . And in that case , the RSS growth for the executable and the shared library of our application is considerably higher. Perhaps, for the big server use cases the rss growth did not matter, but for us, we are trying to use it in an embedded scenario and this is a major issue. We will be glad to hear any further suggestions/ tests that we could check to further understand the differences between the 2 versions. Regards, -Anand On Wed, Jul 7, 2021, 5:30 PM <centos-request(a)centos.org> wrote: > Send CentOS mailing list submissions to > centos(a)centos.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.centos.org/mailman/listinfo/centos > or, via email, send a message with subject or body 'help' to > centos-request(a)centos.org > > You can reach the person managing the list at > centos-owner(a)centos.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of CentOS digest..." > > > Today's Topics: > > 1. RSS usage on centos8.4 is higher for user-application > compared to centos7.9 (Anand Babu) > 2. Re: RSS usage on centos8.4 is higher for user-application > compared to centos7.9 (Leon Fauster) > 3. Re: Centos versions in the future? (Nikolaos Milas) > 4. Re: Centos versions in the future? (J Martin Rushton) > 5. Re: Centos versions in the future? (Nikolaos Milas) > 6. Re: Centos versions in the future? (Leon Fauster) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 6 Jul 2021 15:02:49 +0200 > From: Anand Babu <mail2anand(a)gmail.com> > To: centos(a)centos.org > Subject: [CentOS] RSS usage on centos8.4 is higher for > user-application compared to centos7.9 > Message-ID: > <CAB5++c4-Z= > 7FheHD02RW6YLP6d-trwCqqQqvDdAKsoBZF4tbUg(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > Hi Centos Community, > > This is my first time here and I apologize in advance if I made a mistake > here and hope you will correct me , if i made any. > > > With that said, > > This is a native example that was written to narrow down the higher RAM > usage that we see when we are using Centos8 as opposed to Centos7. > > The c-code is very small and looks like this : > > #include<stdio.h> > > #include<unistd.h> > > int main() > > { > > pause(); > > return 0; > > } > > I compile and run the binary on centos7 and memory backed section of pmap > output looks like below: > > pmap -X $(pidof sleep) | head -n -2 | awk '{ if (NR > 2 && $5 > 0 ) > printf "%12s %8s %8s %4s %s\n", $1, $6, $7, $2,$13}' > 00400000 4 4 r-xp sleep > 00600000 4 4 r--p sleep > 00601000 4 4 rw-p sleep*7f54514f9000 1808 > 204 r-xp libc-2.17.so <http://libc-2.17.so> > *7f54516bd000 2044 0 ---p libc-2.17.so > 7f54518bc000 16 16 r--p libc-2.17.so > 7f54518c0000 8 8 rw-p libc-2.17.so > 7f54518c7000 136 108 r-xp ld-2.17.so > 7f5451ae8000 4 4 r--p ld-2.17.so > 7f5451ae9000 4 4 rw-p ld-2.17.so > > and ps says the following: > > ** ps -o rss= pidof sleep 352** > > Running the same binary on centos8 leads to > > ** ps -o rss= pidof pause 784 ** > > and the pmap output looks like below: > > 00400000 4 4 r-xp pause > 00600000 4 4 r--p pause > 00601000 4 4 rw-p pause* 7f24029a8000 1776 > 788 r-xp libc-2.28.so <http://libc-2.28.so> * > 7f2402b64000 2044 0 ---p libc-2.28.so > 7f2402d63000 16 16 r--p libc-2.28.so > 7f2402d67000 8 8 rw-p libc-2.28.so > 7f2402d6d000 176 176 r-xp ld-2.28.so > 7f2402f99000 4 4 r--p ld-2.28.so > 7f2402f9a000 8 8 rw-p ld-2.28.so > > For running the same executable, the libc.so takes 788KB(204KB on centos7). > > Note: > > 1. > > This is not the only library that is showing this behavior, but we see > the same behavior for other shared-library as well as executables that > were > compiled on centos7. Running the same executables/shared objects take a > higher amount of pages on centos8 than on centos7. > 2. > > Since the glibc version on Centos8 was 2.28 , i have compiled 2.17 > version and then used patchelf to patch the centos7 built binary to make > use of 2.17 glibc on centos8 host like patchelf --set-interpreter > > > /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib/ld-linux-x86-64.so.2 > --set-rpath /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib > /tmp/pause > > and then run it under LD_DEBUG=libs and verified the 2.17 version of libc > libraries were used and still the memory usage on centos8 was higher than > on centos7 (about the same numbers as above). > > What could be the reason for the higher RAM usage on centos8 vs centos7? I > can imagine some defaults have changed on centos8 and that has meant this > impact and i could change this default and could reproduce the same RSS > numbers on centos8 as well? > > > I am posting my environment details in the P.S below. > > Regards, > > -Anand > > > P.S: > > cat /etc/centos-release > > CentOS Linux release 8.4.2105 > > [root@localhost RSS_measurement]# cat /etc/centos-release > > CentOS Linux release 7.9.2009 (Core) > > I am running both the centos versions under Virtualbox. > > > ------------------------------ > > Message: 2 > Date: Tue, 6 Jul 2021 17:59:11 +0200 > From: Leon Fauster <leonfauster(a)googlemail.com> > To: centos(a)centos.org > Subject: Re: [CentOS] RSS usage on centos8.4 is higher for > user-application compared to centos7.9 > Message-ID: <4e84ea30-9d8b-2e9d-a898-e469303a537c(a)gmail.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 06.07.21 15:02, Anand Babu wrote: > > Hi Centos Community, > > > > This is my first time here and I apologize in advance if I made a mistake > > here and hope you will correct me , if i made any. > > > > > > With that said, > > > > This is a native example that was written to narrow down the higher RAM > > usage that we see when we are using Centos8 as opposed to Centos7. > > > > The c-code is very small and looks like this : > > > > #include<stdio.h> > > > > #include<unistd.h> > > > > int main() > > > > { > > > > pause(); > > > > return 0; > > > > } > > > > I compile and run the binary on centos7 and memory backed section of pmap > > output looks like below: > > > > pmap -X $(pidof sleep) | head -n -2 | awk '{ if (NR > 2 && $5 > 0 ) > > printf "%12s %8s %8s %4s %s\n", $1, $6, $7, $2,$13}' > > 00400000 4 4 r-xp sleep > > 00600000 4 4 r--p sleep > > 00601000 4 4 rw-p sleep*7f54514f9000 1808 > > 204 r-xp libc-2.17.so <http://libc-2.17.so> > > *7f54516bd000 2044 0 ---p libc-2.17.so > > 7f54518bc000 16 16 r--p libc-2.17.so > > 7f54518c0000 8 8 rw-p libc-2.17.so > > 7f54518c7000 136 108 r-xp ld-2.17.so > > 7f5451ae8000 4 4 r--p ld-2.17.so > > 7f5451ae9000 4 4 rw-p ld-2.17.so > > > > and ps says the following: > > > > ** ps -o rss= pidof sleep 352** > > > > Running the same binary on centos8 leads to > > > > ** ps -o rss= pidof pause 784 ** > > > > and the pmap output looks like below: > > > > 00400000 4 4 r-xp pause > > 00600000 4 4 r--p pause > > 00601000 4 4 rw-p pause* 7f24029a8000 1776 > > 788 r-xp libc-2.28.so <http://libc-2.28.so> * > > 7f2402b64000 2044 0 ---p libc-2.28.so > > 7f2402d63000 16 16 r--p libc-2.28.so > > 7f2402d67000 8 8 rw-p libc-2.28.so > > 7f2402d6d000 176 176 r-xp ld-2.28.so > > 7f2402f99000 4 4 r--p ld-2.28.so > > 7f2402f9a000 8 8 rw-p ld-2.28.so > > > > For running the same executable, the libc.so takes 788KB(204KB on > centos7). > > > > Note: > > > > 1. > > > > This is not the only library that is showing this behavior, but we > see > > the same behavior for other shared-library as well as executables > that were > > compiled on centos7. Running the same executables/shared objects > take a > > higher amount of pages on centos8 than on centos7. > > 2. > > > > Since the glibc version on Centos8 was 2.28 , i have compiled 2.17 > > version and then used patchelf to patch the centos7 built binary to > make > > use of 2.17 glibc on centos8 host like patchelf --set-interpreter > > > > > /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib/ld-linux-x86-64.so.2 > > --set-rpath /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib > > /tmp/pause > > > > and then run it under LD_DEBUG=libs and verified the 2.17 version of libc > > libraries were used and still the memory usage on centos8 was higher than > > on centos7 (about the same numbers as above). > > > > What could be the reason for the higher RAM usage on centos8 vs centos7? > I > > can imagine some defaults have changed on centos8 and that has meant this > > impact and i could change this default and could reproduce the same RSS > > numbers on centos8 as well? > > > > > > How does the results look like after doing: > > echo never > /sys/kernel/mm/transparent_hugepage/enabled > > -- > Leon > > > > ------------------------------ > > Message: 3 > Date: Wed, 7 Jul 2021 12:44:15 +0300 > From: Nikolaos Milas <nmilas(a)noa.gr> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Centos versions in the future? > Message-ID: <6b3c136f-5aae-1b0a-e65c-868377875f7a(a)noa.gr> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 30/4/2021 7:27 ?.?., Gionatan Danti wrote: > > > > > The correct answer is to buy RH: fine. But do not let Stream touch > > anything which require a kABI compatible modules. As said above, the > > Stream move is squarely addresses *cloud* vendor requests and needs. > > Again, fine. But please leave apart the RH comparison, this is not > > going to help Stream. > > > > Again, don't let me wrong: I wishes the best to Stream, and I will use > > it where appropriate. But "where" is much smaller today than > > yesterday. But this aside, I really thank you all CentOS maintainer > > for your monumental work, and I really hope Stream will be a success. > > I re-visit this thread, since it is crucial for CentOS 8 users. > > RESF / Rocky Linux is gaining worldwide recognition and sets itself as > the primary organization / platform to become the CentOS 8 heir / > successor in the future. > > Google and Microsoft become RESF sponsors/partners: > > https://rockylinux.org/news/community-update-june-2021/ > > And so IBM/RH lose the tremendous advantage they had by owning the > CentOS project, which - it seems - never evaluated correctly. > > From now on, it is clear that hundreds of thousands of CentOS > installations will be migrating to Rocky Linux. > > I also wish the best of success to CentOS Stream, but this is not what > the CentOS community expected. > > My 2c. > Nick > > > > ------------------------------ > > Message: 4 > Date: Wed, 7 Jul 2021 10:47:16 +0100 > From: J Martin Rushton <martinrushton56(a)btinternet.com> > To: centos(a)centos.org > Subject: Re: [CentOS] Centos versions in the future? > Message-ID: <e6298010-bece-df14-98d0-9f8b5e04e8e2(a)btinternet.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > There's also Alma, which is where I've gone after being with CentOS > since 5.3 > > On 07/07/2021 10:44, Nikolaos Milas wrote: > > On 30/4/2021 7:27 ?.?., Gionatan Danti wrote: > > > >> > >> The correct answer is to buy RH: fine. But do not let Stream touch > >> anything which require a kABI compatible modules. As said above, the > >> Stream move is squarely addresses *cloud* vendor requests and needs. > >> Again, fine. But please leave apart the RH comparison, this is not > >> going to help Stream. > >> > >> Again, don't let me wrong: I wishes the best to Stream, and I will use > >> it where appropriate. But "where" is much smaller today than > >> yesterday. But this aside, I really thank you all CentOS maintainer > >> for your monumental work, and I really hope Stream will be a success. > > > > I re-visit this thread, since it is crucial for CentOS 8 users. > > > > RESF / Rocky Linux is gaining worldwide recognition and sets itself as > > the primary organization / platform to become the CentOS 8 heir / > > successor in the future. > > > > Google and Microsoft become RESF sponsors/partners: > > > > ?? https://rockylinux.org/news/community-update-june-2021/ > > > > And so IBM/RH lose the tremendous advantage they had by owning the > > CentOS project, which - it seems - never evaluated correctly. > > > > From now on, it is clear that hundreds of thousands of CentOS > > installations will be migrating to Rocky Linux. > > > > I also wish the best of success to CentOS Stream, but this is not what > > the CentOS community expected. > > > > My 2c. > > Nick > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > -- > J Martin Rushton MBCS > > > ------------------------------ > > Message: 5 > Date: Wed, 7 Jul 2021 13:07:12 +0300 > From: Nikolaos Milas <nmilas(a)noa.gr> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Centos versions in the future? > Message-ID: <ce7e72f7-7159-78ee-4576-e75e806025f7(a)noa.gr> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 7/7/2021 12:47 ?.?., J Martin Rushton via CentOS wrote: > > > There's also Alma, which is where I've gone after being with CentOS > > since 5.3 > > AlmaLinux is a great project too, IMHO, but things show that the new > industry standard (replacing CentOS) will probably be Rocky Linux. > > (Yes, RHEL **AND** CentOS have indeed been industry standards - the > point of reference -, IMHO, and this is what IBM/RHEL have failed to > realize: You don't alter a point of reference.) > > It is interesting to see what Service Providers will do with their (huge > numbers of) CentOS installations, when they migrate... > > From the users/admins' perspective it is to their interest to have > robust and healthy alternatives. > > In our org, I am now using Rocky Linux on new installations (without > issues) and will be migrating several CentOS 8 boxes to Rocky Linux as > well. > > Cheers, > Nick > > > > ------------------------------ > > Message: 6 > Date: Wed, 7 Jul 2021 12:28:58 +0200 > From: Leon Fauster <leonfauster(a)googlemail.com> > To: centos(a)centos.org > Subject: Re: [CentOS] Centos versions in the future? > Message-ID: <9d2d8304-6779-a452-1a8b-62c58d7722e1(a)gmail.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 07.07.21 12:07, Nikolaos Milas wrote: > > On 7/7/2021 12:47 ?.?., J Martin Rushton via CentOS wrote: > > > >> There's also Alma, which is where I've gone after being with CentOS > >> since 5.3 > > > > AlmaLinux is a great project too, IMHO, but things show that the new > > industry standard (replacing CentOS) will probably be Rocky Linux. > > > > (Yes, RHEL **AND** CentOS have indeed been industry standards - the > > point of reference -, IMHO, and this is what IBM/RHEL have failed to > > realize: You don't alter a point of reference.) > > > It should not be forgotten that Rocky Linux will be a 1:1 rebuild, also > in the future. So, to shape this future everyone is invited to > participate at CentOS Stream. This is a great future or not? > > > > > It is interesting to see what Service Providers will do with their (huge > > numbers of) CentOS installations, when they migrate... > > > > From the users/admins' perspective it is to their interest to have > > robust and healthy alternatives. > > > > In our org, I am now using Rocky Linux on new installations (without > > issues) and will be migrating several CentOS 8 boxes to Rocky Linux as > > well. > > > > Cheers, > > Nick > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > > > ------------------------------ > > End of CentOS Digest, Vol 198, Issue 6 > ************************************** >

1 0

RSS usage on centos8.4 is higher for user-application compared to centos7.9
by Anand Babu 06 Jul '21

06 Jul '21

Hi Centos Community, This is my first time here and I apologize in advance if I made a mistake here and hope you will correct me , if i made any. With that said, This is a native example that was written to narrow down the higher RAM usage that we see when we are using Centos8 as opposed to Centos7. The c-code is very small and looks like this : #include<stdio.h> #include<unistd.h> int main() { pause(); return 0; } I compile and run the binary on centos7 and memory backed section of pmap output looks like below: pmap -X $(pidof sleep) | head -n -2 | awk '{ if (NR > 2 && $5 > 0 ) printf "%12s %8s %8s %4s %s\n", $1, $6, $7, $2,$13}' 00400000 4 4 r-xp sleep 00600000 4 4 r--p sleep 00601000 4 4 rw-p sleep*7f54514f9000 1808 204 r-xp libc-2.17.so <http://libc-2.17.so> *7f54516bd000 2044 0 ---p libc-2.17.so 7f54518bc000 16 16 r--p libc-2.17.so 7f54518c0000 8 8 rw-p libc-2.17.so 7f54518c7000 136 108 r-xp ld-2.17.so 7f5451ae8000 4 4 r--p ld-2.17.so 7f5451ae9000 4 4 rw-p ld-2.17.so and ps says the following: ** ps -o rss= pidof sleep 352** Running the same binary on centos8 leads to ** ps -o rss= pidof pause 784 ** and the pmap output looks like below: 00400000 4 4 r-xp pause 00600000 4 4 r--p pause 00601000 4 4 rw-p pause* 7f24029a8000 1776 788 r-xp libc-2.28.so <http://libc-2.28.so> * 7f2402b64000 2044 0 ---p libc-2.28.so 7f2402d63000 16 16 r--p libc-2.28.so 7f2402d67000 8 8 rw-p libc-2.28.so 7f2402d6d000 176 176 r-xp ld-2.28.so 7f2402f99000 4 4 r--p ld-2.28.so 7f2402f9a000 8 8 rw-p ld-2.28.so For running the same executable, the libc.so takes 788KB(204KB on centos7). Note: 1. This is not the only library that is showing this behavior, but we see the same behavior for other shared-library as well as executables that were compiled on centos7. Running the same executables/shared objects take a higher amount of pages on centos8 than on centos7. 2. Since the glibc version on Centos8 was 2.28 , i have compiled 2.17 version and then used patchelf to patch the centos7 built binary to make use of 2.17 glibc on centos8 host like patchelf --set-interpreter /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib/ld-linux-x86-64.so.2 --set-rpath /home/babu/RSS_measurement/2_17_downloaded/glibc_home/lib /tmp/pause and then run it under LD_DEBUG=libs and verified the 2.17 version of libc libraries were used and still the memory usage on centos8 was higher than on centos7 (about the same numbers as above). What could be the reason for the higher RAM usage on centos8 vs centos7? I can imagine some defaults have changed on centos8 and that has meant this impact and i could change this default and could reproduce the same RSS numbers on centos8 as well? I am posting my environment details in the P.S below. Regards, -Anand P.S: cat /etc/centos-release CentOS Linux release 8.4.2105 [root@localhost RSS_measurement]# cat /etc/centos-release CentOS Linux release 7.9.2009 (Core) I am running both the centos versions under Virtualbox.

2 1

Centos 8 crypto-policy to get SSL Labs A rating
by Adrian Jenzer 05 Jul '21

05 Jul '21

Dear Community I try to get an SSL Labs A rating for my CentOS8 Apache-server. I'am sure it has to do with my lack of understanding the crypto-policies configuration, can anybody give me an advice where i am wrong? My understanding is that the configuration in the pmod-file will override the ssl.conf values if PROFILE=SYSTEM is active. *** # Current runtime policy dump # DEFAULT:HTTPS arbitrary_dh_groups = 1 cipher = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 AES-256-CTR AES-256-CBC AES-128-GCM AES-128-CCM AES-128-CTR AES-128-CBC group = X25519 X448 SECP256R1 SECP384R1 SECP521R1 FFDHE-2048 FFDHE-3072 FFDHE-4096 FFDHE-6144 FFDHE-8192 hash = SHA2-256 SHA2-384 SHA2-512 SHA3-256 SHA3-384 SHA3-512 SHA2-224 SHA1 ike_protocol = IKEv2 key_exchange = ECDHE DHE DHE-RSA DHE-PSK ECDHE-PSK ECDHE-GSS DHE-GSS mac = AEAD HMAC-SHA2-256 HMAC-SHA1 UMAC-128 HMAC-SHA2-384 HMAC-SHA2-512 min_dh_size = 2048 min_dsa_size = 2048 min_dtls_version = DTLS1.2 min_rsa_size = 2048 min_tls_version = TLS1.2 protocol = TLS1.3 TLS1.2 DTLS1.2 sha1_in_certs = 1 sign = ECDSA-SHA3-256 ECDSA-SHA2-256 ECDSA-SHA3-384 ECDSA-SHA2-384 ECDSA-SHA3-512 ECDSA-SHA2-512 EDDSA-ED25519 EDDSA-ED448 RSA-PSS-SHA2-256 RSA-PSS-SHA2-384 RSA-PSS-SHA2-512 RSA-SHA3-256 RSA-SHA2-256 RSA-SHA3-384 RSA-$ ssh_certs = 1 ssh_cipher = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 CAMELLIA-256-GCM AES-256-CTR AES-256-CBC CAMELLIA-256-CBC AES-128-GCM AES-128-CCM CAMELLIA-128-GCM AES-128-CTR AES-128-CBC CAMELLIA-128-CBC ssh_etm = 1 ssh_group = X25519 X448 SECP256R1 SECP384R1 SECP521R1 FFDHE-2048 FFDHE-3072 FFDHE-4096 FFDHE-6144 FFDHE-8192 tls_cipher = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 AES-256-CBC AES-128-GCM AES-128-CCM AES-128-CBC *** cat /etc/crypto-policies/policies/modules/HTTPS.pmod cipher = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 *** Part of /etc/httpd/conf.d/ssl.conf *** # SSL Engine Switch: # Enable/Disable SSL for this virtual host. SSLEngine on # List the protocol versions which clients are allowed to connect with. # The OpenSSL system profile is used by default. See # update-crypto-policies(8) for more details. #SSLProtocol all -SSLv3 #SSLProxyProtocol all -SSLv3 SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2 # User agents such as web browsers are not configured for the user's # own preference of either security or performance, therefore this # must be the prerogative of the web server administrator who manages # cpu load versus confidentiality, so enforce the server's cipher order. SSLHonorCipherOrder on # SSL Cipher Suite: # List the ciphers that the client is permitted to negotiate. # See the mod_ssl documentation for a complete list. # The OpenSSL system profile is configured by default. See # update-crypto-policies(8) for more details. SSLCipherSuite PROFILE=SYSTEM #SSLProxyCipherSuite PROFILE=SYSTEM #SSLCipherSuite HIGH:!aNULL:!MD5 #SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256 Thanks for any hint! Adrian

3 4

BTRFS to ext4
by Christopher Wensink 05 Jul '21

05 Jul '21

Hello Everyone, We have two virtual machines running CentOS 7, one for file sharing and one for email. Both base Filesystems run BTRFS. I need to convert both filesystems over from BTRFS to ext4. Both guest VM's are in a vmware environment on the same server. The file server has 2.8 TB of space total allocated to it, 2.1 TB of total used space The mail server has 2TB allocated to it, and 982 GB of total used space. The host it is attached to has 13.97 TB of total usable space, with 3.4 TB free. What steps would you go through to migrate the file systems over? Would you set up a duplicate VM and rsync data over? Expand the capacity of the existing VM, add a new partition then move data over from one partition to another from within the same VM? What are your thoughts? -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

3 2

Two directories for 8.4.2105 and 8-stream in the centos mirrors
by Burn Alting 05 Jul '21

05 Jul '21

Recently, it appears that two directories for 8.4 and 8-stream are being distributed in the Centos mirrors. You can't see it if you view the mirrors, but if one downloads the filelist.gz file and grep for '^\.\/\.' one will see the directories, with content, .8.4.2105 and .8-stream. Can this be explained? An error or a new distribution concept?? Rgds

1 0

[C8 stream] update
by Helmut Drodofsky 01 Jul '21

01 Jul '21

Hello, actual, C8 stream update only with exclude platform-python-pip-9.0.3-20.el8.noarch net-snmp* ? -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

3 2

Tracking down application sending mail in CentOS 7
by H 25 Jun '21

25 Jun '21

I am running CentOS 7 on a server where I have only recently installed postfix. Postfix is configured to only send outgoing mail via an external relay server and test mails created on my server are indeed delivered via this external server. However, I must have some other application on the server generating mails where the recipient's address is incorrect resulting in being rejected by the external relay server. Viewing /var/log/maillog I get some information but cannot see which application generated that e-mail, nor the content of it which would likely allow me to see where it comes from. Can anyone suggest how to track down the app so I can reconfigure the mail address? Thanks.

4 6

Help with default shell
by Hooton, Gerard 24 Jun '21

24 Jun '21

Hi all, I have a computer with CentOS 7. The users are authenticated using OpenLDAP. On LDAP the default shell is csh. When ssh to login it works, i.e. $SHELL = /bin/csh Also, when using xrdp it works. However, a login from the keyboard and screen attached computer we get $SHELL = /bin/bash Any help is welcome. Regards, Ger. -- Gerard Hooton. Senior Technical Officer School of Engineering. University College Cork. College Road. Cork. Ireland.

4 6

libvoikko-devel not available on Centos8?
by Myyrä, Timo 23 Jun '21

23 Jun '21

Hi, Any ideas why CentOS 8 doesn't include the libvoikko-devel package? The libvoikko package is present but it doesn't have the development headers in it. The Fedora RPM SPEC seems to have separate package for the headers: https://src.fedoraproject.org/rpms/libvoikko/blob/rawhide/f/libvoikko.spec I'm looking at using a postgresql extension using libvoikko but it needs those header files. -- Timo Myyrä Palvelinylläpitäjä Puhelin +358 40 860 2103 Käyntiosoite: Verkkosaarenkatu 5, HELSINKI Postiosoite: PL 510, 00043 NORDIC MORNING Edita Prima Oy Edita Prima tuottaa automatisoituja prosesseja asiakasviestinnän hallintaan. Autamme yrityksiä poistamaan tehottomuutta ja parantamaan asiakaskokemusta. www.editaprima.fi

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss