- Discuss - lists.centos.org

CentOS-announce Digest, Vol 125, Issue 3
by centos-announce-request＠centos.org 09 Jul '15

09 Jul '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:1212 CentOS 5 dhcpv6 BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Jul 2015 12:20:08 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1212 CentOS 5 dhcpv6 BugFix Update Message-ID: <20150708122008.GA2676(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1212 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1212.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 59346288516ea2b78d52e60a4c6f57efaf5fd52e2439b31c9d1d72007479ed93 dhcpv6-1.0.10-22.el5_11.i386.rpm a45f38d962896c9caf159a6031457795937eeab0b1ea81efb48b880a3e484dad dhcpv6-client-1.0.10-22.el5_11.i386.rpm 1cc7830722ec93f2f4781044dc24fe3ba4b5001f1de1219d58017073cc1af327 libdhcp6client-1.0.10-22.el5_11.i386.rpm 76c5877358fe5c298d351dc710f7b5e2d31cfe8a2ca2bbc5fca75bb6d252acb4 libdhcp6client-devel-1.0.10-22.el5_11.i386.rpm x86_64: 992236c4c294ca5e3fbb3883f0f0af5f1779eaad470f8736fcca02c7f4172f1a dhcpv6-1.0.10-22.el5_11.x86_64.rpm 867c0a09c213e28ce32203aa2db7a92c7f49daeaa412a400285e9576c5361bd2 dhcpv6-client-1.0.10-22.el5_11.x86_64.rpm 1cc7830722ec93f2f4781044dc24fe3ba4b5001f1de1219d58017073cc1af327 libdhcp6client-1.0.10-22.el5_11.i386.rpm 0a0da012999941c3cfcc93eb3781279882145f6ceb7507de6d95133607f91b09 libdhcp6client-1.0.10-22.el5_11.x86_64.rpm 76c5877358fe5c298d351dc710f7b5e2d31cfe8a2ca2bbc5fca75bb6d252acb4 libdhcp6client-devel-1.0.10-22.el5_11.i386.rpm d702b9e1a65d997ed463adda32c8b12c4d8e7be88d291d4d052520da75047ab0 libdhcp6client-devel-1.0.10-22.el5_11.x86_64.rpm Source: 785a27201af8b94e4f03d8cc0f08d6bf39b4730402e6290ee0e7614c80dde2e3 dhcpv6-1.0.10-22.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 125, Issue 3 ***********************************************

1 0

CentOS Pre Release Updates CI tests
by Johnny Hughes 08 Jul '15

08 Jul '15

The CentOS project has been running Continuous Integration (aka CI) process where we run checks from our t_functional suite on a daily basis for quite a while now: https://ci.centos.org/view/CentOS-Core-QA/ We will continue to run these daily as they provide good historical info, but recently, we have adopted a practice of "Pre Release" testing using the same t_functional suite. So, from now on, we will need to get a "Green" result on t_functional (or know what is failing and make a decision that it is false positive) BEFORE we release any updates to CentOS-5, CentOS-6 or CentOS-7. Pre Release Update tests are here and now part of the updates process before release of the packages: https://ci.centos.org/view/CentOS-Core/ If you have issues that need to be checked for, that we sometimes get wrong (in this case, wrong means broken in CentOS an not in RHEL) .. then you can update t_functional suite to test for that issue and we can integrate it into the test suite. You can checkout and run t_functional here: https://github.com/CentOS/sig-core-t_functional * NOTE:* These tests make major changes on the machine where they are run .. so they are *DESTRUCTIVE* to that environment and should only be used on machines specifically built for testing that can be rebuilt/reinstalled after the tests complete. Info on how to use t_functional is here: http://wiki.centos.org/QaWiki/AutomatedTests/WritingTests/t_functional We will accept new tests and changes that make sense via github with discussions about the changes taking place on the CentOS-Devel mailing list. If there is a nagging issue that you want tested for, feel free to fork t_functional and create tests to make CentOS Linux better in the future. Thanks, Johnny Hughes

1 0

Successful installation
by michael wright 08 Jul '15

08 Jul '15

Hi i have installed centos but i need to know how i can do a grub 2 can somebody help me please Mike

3 2

where can i find fbset package
by kqt4at5v＠gmail.com 08 Jul '15

08 Jul '15

where can i find the fbset package for centos 6

3 5

Installing Centos Server Problems
by michael wright 08 Jul '15

08 Jul '15

Hi Can some one help me please. I am trying to install Centos 7.0 server but every time I install centos I keep loosing my windows 7 ? I have a 2TB Hard-Drive, Window 7 64 bit Operating System with Intel Core i5 2300 Processor when I reboot I loose windows and I have no dual-boot can anybody help me please this is the 7 time I have tried this and still fail Michael Wright

2 2

successful installation
by michael wright 08 Jul '15

08 Jul '15

1 0

Re: [CentOS] Prompt for chrooted users
by James B. Byrne 07 Jul '15

07 Jul '15

Well, I seem to have resolved most of this. In the end I had to create a separate logical link for the chrooted users' home directories that pointed back to their actual directory. It sounds confusing because it is. I first tried this in sshd_conf ChrootDirectory %h and in ~/%h I had created the following mount points: bin dev etc lib lib64 tmp usr Upon which I had hung mounts to directories containing the chroot reduced functionality. mount --bind /path/to/chroot/bin bin However, that did not work. I next tried this: ChrootDirectory /path/to/chroot And that did not work either. By not work I really mean did not execute the user's bash_profile script at login, which is why the prompt was screwed up. Of course that was simply the most immediately visible problem. What did work, eventually, was this combination: In sshd_conf ChrootDirectory /path/to/chroot plus: cd /path/to/chroot mkdir -p path/to/chroot cd /path/to/chroot//path/to/chroot ln -s ../../user_home_dir user_home_dir I infer from the documentation that sshd first switches to the chroot and then to the user's home directory from within the chroot. Which makes sense but the implications for correct implementation are not exactly obvious. The result of not recreating the home directory path under chroot was that the programs in chroot/bin were not found and did not execute while the user stayed in chroot. This is also why using %h in sshd_conf did not work. For that to succeed I need to recreate the user's entire home directory tree inside each user's home directory. Since using a common root and logical links is less burdensome from a maintenance point of view I choose the later. I was also too lazy to return to the first approach once I got the second working. So, that mystery is cleared up. I have others, and of course SELinux is in there, but this one is put to bed. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Prompt for chrooted users
by James B. Byrne 07 Jul '15

07 Jul '15

We have a requirement to allow ssh access to a server in order to provide a secure link to one of our legacy systems. I would like to chroot these accounts. I have this working except for one small detail, the user's prompt in the ssh session. Each user has their shell set to /bin/bash in /etc/passwd. However, instead of getting the prompt defined in their .bash_profiles we see this: -bash-4.1$ when we are expecting this: [username@hostname dir]$ So, before I go messing around moving files I would some information from you as tio what I have overlooked. Do I need to move something like etc/passwd and /etc/group into the chroot/etc? TIA -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Re: [CentOS] Prompt for chrooted users
by James B. Byrne 07 Jul '15

07 Jul '15

On Mon, July 6, 2015 15:47, m.roth(a)5-cent.us wrote: > James B. Byrne wrote: >> We have a requirement to allow ssh access to a server in order to >> provide a secure link to one of our legacy systems. I would like to >> chroot these accounts. >> >> I have this working except for one small detail, the user's prompt >> in >> the ssh session. Each user has their shell set to /bin/bash in >> /etc/passwd. However, instead of getting the prompt defined in >> their >> .bash_profiles we see this: >> >> -bash-4.1$ >> >> when we are expecting this: >> >> [username@hostname dir]$ >> >> So, before I go messing around moving files I would some information >> from you as tio what I have overlooked. Do I need to move something >> like etc/passwd and /etc/group into the chroot/etc? > > When ssh'ing into the chrooted directories, where's their > /home/<user>? > I'd set the prompt in ~/.bash_profile. > > mark > > It appears that the user profile .bash_profile is not being called at all which no doubt is the root problem. Any ideas as to why this is not happening? Is the -l switch for bash not being used for some reason? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

USB stick query
by Timothy Murphy 07 Jul '15

07 Jul '15

I have a working CentOS-7 machine. I want to install grub2 on a USB stick (without altering my present system in any way) so that I can boot the present system from the USB stick. Could some kind (and expert) soul explain precisely what to do. If it were possible to boot other systems on the computer as well that would be an added bonus. I did google for this, but all the sites I saw wanted to do more than I am asking. I also tried "sudo grub2-install /dev/sdb" but for some reason this did not do the trick. -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

3 7

CentOS-announce Digest, Vol 125, Issue 2
by centos-announce-request＠centos.org 07 Jul '15

07 Jul '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1207 Critical CentOS 5 firefox Security Update (Johnny Hughes) 2. CESA-2015:1207 Critical CentOS 6 firefox Security Update (Johnny Hughes) 3. CESA-2015:1207 Critical CentOS 7 firefox Security Update (Johnny Hughes) 4. CentOS Linux for AArch64 Beta2 (Jim Perrin) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Jul 2015 14:50:33 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1207 Critical CentOS 5 firefox Security Update Message-ID: <20150706145033.GA20774(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1207 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1207.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 45f2fad91b980fd2cc21a9752193b8dbee248a1e0436ccd0eb7d8d4b297f476a firefox-38.1.0-1.el5.centos.i386.rpm x86_64: 45f2fad91b980fd2cc21a9752193b8dbee248a1e0436ccd0eb7d8d4b297f476a firefox-38.1.0-1.el5.centos.i386.rpm dc491eab91a8cad5f0678902bad27f9e2b3966892ea79151ac0ee50b77f972fa firefox-38.1.0-1.el5.centos.x86_64.rpm Source: 03dd6f3a55de8b5349cc18ca8887da8e527190591eadcb80f688b30ca11f1f56 firefox-38.1.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 6 Jul 2015 16:47:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1207 Critical CentOS 6 firefox Security Update Message-ID: <20150706164720.GA49622(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1207 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1207.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b5882e3695d34f9318074874468b2c427eade13ad481866ae314f6edcadfb7db firefox-38.1.0-1.el6.centos.i686.rpm x86_64: b5882e3695d34f9318074874468b2c427eade13ad481866ae314f6edcadfb7db firefox-38.1.0-1.el6.centos.i686.rpm b7f8d8f7fe4dde69f71355177bd859e08551a11513e7f293ef7bb6beb094eb13 firefox-38.1.0-1.el6.centos.x86_64.rpm Source: 05d27d1ca3378334c19eeb53bc8b5a6a7a64dbae179a17da7841753d596bd430 firefox-38.1.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 6 Jul 2015 17:16:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1207 Critical CentOS 7 firefox Security Update Message-ID: <20150706171658.GA50235(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1207 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1207.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f61ea750633f5b444eaae0e52cbc430febc0a68534166659d7ac8fcfac2c89e1 firefox-38.1.0-1.el7.centos.i686.rpm 2a8f94561cb77d12c8b02adcb7c689a36cd36b4b9f9e91328a5e4d287491049c firefox-38.1.0-1.el7.centos.x86_64.rpm Source: 1b7b07cf869c0b06c2b23f919d6ea9bab648c270f56ceea33da8c7453c80ab69 firefox-38.1.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 06 Jul 2015 12:29:17 -0500 From: Jim Perrin <jperrin(a)centos.org> To: centos-announce(a)centos.org, arm-dev(a)centos.org Subject: [CentOS-announce] CentOS Linux for AArch64 Beta2 Message-ID: <559ABAED.7030105(a)centos.org> Content-Type: text/plain; charset=utf-8 We are pleased to announce the second public beta release of CentOS Linux 7 for the AArch64 platform. This release contains fixes and code updates provided in the RHELSA source code recently published to git.centos.org as well as rolling previous updates into the installer. We intend to have a 'Gold' release very soon unless a blocker bugs are reported, so please test this release. Improvements since the initial Beta =================================== The 4.1rc kernel has been removed in favor of the 3.19 kernel as it contains some additional functionality by default. The 4.x kernel will be available later as a -plus kernel. Installation/Everything ISO is now available. We're currently offering an Everything ISO that can be used for usb based installation if desired. This iso is currently too large for standard DVD media, and so is best used via usb media. Many updated packages, including core packages likebzip2, dbus, grub2, libaio, and more. Download ======== The full (unsigned) install tree is available at http://buildlogs.centos.org/centos/7/os/aarch64/ Everything-ISO is available at http://buildlogs.centos.org/centos/7/isos/aarch64/CentOS-7-aarch64-Everythi… Installation ============ Installation guides and documentation will be provided via the CentOS wiki, at http://wiki.centos.org/SpecialInterestGroup/AltArch/AArch64 Update procedures for existing installations ============================================ Because the kernel version has been rolled back from 4.x to 3.19, you will need to take some additional steps to update. 1. yum -y update 2. yum distro-sync # This will roll back the installed kernel packages 3. yum remove kernel-core kernel-modules # cleans up kernel leftovers. 4. reboot to new kernel ============ Contributing The AArch64 effort is meant to be a community effort as part of the AltArch SIG (http://wiki.centos.org/SpecialInterestGroup/AltArch) and we welcome enthusiasts and vendors to contribute patches, fixes, documentation, etc. In the AArch64 Extras repository, we have provided the mock package and dependencies so that community members can more easily contribute, as well as testing their own builds locally. Please submit patches, fixes, etc to the Arm-Dev list (http://lists.centos.org/mailman/listinfo/arm-dev) for discussion and acceptance. We encourage vendors to come and join this effort, we have a loose organization focused on the alternative architectures build process and welcome interaction at the group level. Please get in touch with me (jperrin(a)centos.org) or K Singh ( kbsingh(a)centos.org ) to find out more details. The wider CentOS Ecosystem is also welcome to engage with us, both at the project and code level. If you are working with a project that interfaces, manages or develops on top of CentOS, specially in the virtualization, cloud, container and infrastructure management areas - we would love to have you guys get involved. While we don't have a lot of resources, we are working with a few vendors to build up a community resource pool that we would encourage other projects to share their development, testing and delivery around CentOS Linux for aarch64. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77 ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 125, Issue 2 ***********************************************

1 0

Re: [CentOS] Replacing cpu
by g 07 Jul '15

07 Jul '15

On 07/06/15 22:22, jd1008 wrote: <<>> > I plan to do both :) > This is why I use AmEx. > They fully refund for merchandise that does not work. > They are able to extract that from the merchant. > Don't ask me how :) They have done it for me before. it is in the 'toa', 'terms of agreement'. credit card companies require signing agreement before they will do any funds transactions. cyoa. > But B 4 I resort to AmEX, I will first try Ebay problem > resolution. Failing that, I will talk to AmEx. go back to ebay page that you ordered from to see if there is ability to make comment about seller. -- peace out. -+- If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! -+- in a world with out fences, who needs gates. -+- CentOS GNU/Linux 6.6 tc,hago. g .

1 1

Re: [CentOS] 7.1 install with Areca arc-1224
by C Linus Hicks 07 Jul '15

07 Jul '15

On 07/06/15, g wrote: you might try verifying that system you are getting error message on has a good cd/dvd drive. burn another dvd at at least 4 speeds slower. if runs ok, bad drive. if still fails, bad drive. another way you can check is to pull iso on system you are having problem with and burn dvd. if you get error, get a new drive. -------- Above quoted -------- When I md5sum the DVD on the system I burned it on, it matches. When I md5sum it on another system, it matches. When I md5sum it on the system I am trying to install, it comes up with a different answer. I'm getting a new DVD drive.

3 2

ntpd new version
by Vijendra Agarwal (vijagarw) 07 Jul '15

07 Jul '15

Hi All, Currently CentOS site contains the below version of ntpd. ntp-4.2.6p5-3.el6.centos.x86_64.rpm<http://mirror.centos.org/centos/6.6/updates/x86_64/Packages/ntp-4.2.6p5-3.e…> :- 16 mar 2015. Does anybody have any information about when the new version of ntpd is expected to release containing new vulnerabilities fixes? Thanks Vijendra.

4 4

Re: [CentOS] 7.1 install with Areca arc-1224
by C Linus Hicks 06 Jul '15

06 Jul '15

On 07/05/15, Gordon Messmer wrote: That's not the same as checking the media for corruption. You may be able to read all of the files, but if the data is corrupt, rpm may throw and IOError. So, the next thing to do is check your media. The DVD should offer to do that first when you boot from it. ------ Above quoted -------- Booted the DVD again, took the default. It got to 76.2% then told me: The media check is complete. The result is: FAIL. It is not recommended to use this media. [FAILED] Failed to start media check on /dev/sr0. See 'systemctl status checkisomd5(a)-dev-sr0.service' for details. dracut-initqueue[681]: Job for checkisomd5(a)-dev-sr0.service failed. See 'systemctl status checkisomd5(a)-dev-sr0.service' and 'journalctl -xn' for details. [ 243.972119] dracut: FATAL: CD check failed! [ 243.972141] dracut: Refusing to continue Could not unmount /run/install/repo: Device or resource busy [ 245.127417] System halted. Ran the check again, same thing. Took that DVD back to the machine I burned it on, downloaded the MD5SUM from one of the mirrors and checked the file I downloaded. That checks. Used cmp to compare the .iso file to the image on the DVD, they match, the DVD is good. Hmm, what gives. Burned another DVD and verified the burned image matches the .iso file. Took the new DVD to the machine I'm doing the install on and ran the check again. OMG, it did the same thing at 76.2%. Now I'm thinking, wait, it says "Failed to start media check" is that a poorly worded message or does it really mean what it says?

3 2

ssh -X versus -Y
by Stuart Barkley 06 Jul '15

06 Jul '15

On Fri, 26 Jun 2015 at 03:16 -0000, Alexandru Chiscan wrote: > On 06/25/2015 11:51 PM, Stuart Barkley wrote: > > Then from your desktop (assuming Linux already running X) in a > > local xterm do something like: > > > > ssh -Y remote-system > > Do not use that because any user logged on the server can connect to > your X server display and snoop what you are doing, open windows > etc. > > -Y disables all the X server authentication mechanisms > (http://www.x.org/wiki/Development/Documentation/Security/) I believe this is incorrect. The authentication protocols are still used (thus the need for the xorg-x11-xauth package on CentOS). This is not the same as 'xhost +' which should never be used. Both -X and -Y require read access to the ~/.Xauthority file on the remote system in order to connect back to the X server. You can see this by using the 'xauth remove' command to remove the authentication token for the display and clients can no longer connect. > > Note about -X versus -Y with ssh: > > > > -X enables basic X forwarding, It disables some X functionality > > making it "safer" to allow. -X also stops working after about 20 > > minutes (this is by design but not well documented). I only > > recently learned why it would stop working after pulling out the > > last of my hair. > > I have been using ssh X forwarding for current work use (local > betwork) for more than 15 years and never got into this kind of > problem from RH 7 to Centos 7, AIX and Solaris. Likewise, I've used ssh/X for 20+ years on a variety of systems. In most cases -X is sufficient, but some applications seem to require -Y and I have not dug into all of the reasons. > Maybe it is some other issue that is closing your ssh connection > (maybe you should use the KeepAlive options on the ssh > server/client); just guessing. On Debian and FreeBSD 'man ssh_config' now shows: ForwardX11Timeout Specify a timeout for untrusted X11 forwarding using the format described in the TIME FORMATS section of sshd_config(5). X11 connections received by ssh(1) after this time will be refused. The default is to disable untrusted X11 forwarding after twenty minutes has elapsed. This option seems to have appeared in OpenSSH 6.0 [See more at the end of this email]. > > -Y allows the full X protocol which might be a security risk. > > Some applications will only work with -Y. With this, remote X > > applications can grab keyboard interactions, grab passwords, put > > windows on top of other windows (obscuring security messages), > > etc. > > > > For my own choice I use -Y (although I only enable it occasionally > > to specific systems). This is a recent behaviour change on my part with limited use to system I trust. Now that I know about the timeout I can probably just live with -X and will consider moving back to -X for my occasional use, The documentation of the practical differences between -X and -Y is pretty obscure (mostly defering to the X Security extension documentation). I would like to see better clarification of the differences. ...some additional research looking at the source code and revision history... The ForwardX11Timeout change was 5 years ago in OpenSSH 6.0. CentOS 6 still has OpenSSH 5.3 without this change (or if a patch was applied the documentation was not also patched). CentOS 7 has OpenSSH 6.6 which includes this change. http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/clientloop.c.diff?… Prior to that there was an intended hard coded 20 minute timeout since at least 2005: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/clientloop.c.diff?… Based upon the comments in the June 2010 revision it appears that the timeout was not working correctly and perhaps was falling back to trusted authentication after 20 minutes: Add X11ForwardTimeout option to specify timeout for untrusted X11 authentication cookies to avoid fallback in X11 code to fully-trusted implicit authentication using SO_PEERCRED described at: http://lists.x.org/archives/xorg-devel/2010-May/008636.html After the X11ForwardTimeout has expired the client will now refuse incoming X11 channel opens. I will need to see it this is an unpatched security issue on CentOS/RedHat 6. If so, I claim credit for observing it as a possibility. Stuart -- I've never been lost; I was once bewildered for three days, but never lost! -- Daniel Boone

5 6

Centos 7 Server Forgets IPv6 Address On Reboot
by Dave Cross 06 Jul '15

06 Jul '15

My Centos 7 server has started to forget its IPv6 address on a reboot. This causes problems with services being unable to start up. It's easy enough to fix each time (ip addr add ...), but it would be nice to be able to convince it to retain that information. Presumably, there's a file somewhere under /etc/sysconfig that should contain this information - does anyone know where it should be stored? Thanks, Dave... -- Dave Cross :: dave(a)dave.org.uk http://dave.org.uk/ @davorg

3 2

IPMI/BMC/BIOS
by Chris Olson 06 Jul '15

06 Jul '15

We have recently been asked to evaluate some computing machinery for a new project. This particular end user has very limited experience with the stated security requirements in a lights-out environment. Their primary work (as well as mine) in the past has been with very small, simple networks of desktop machines and a few servers with extremely limited access. For the most part, their admins haverefused to use any maintenance connectivity to servers other thanthe primary serial ports. There is a concern about system security primarily driven by recent information searches performed by end user admins and included below. IPMI/BMC Security Issues ------------------------ https://en.wikipedia.org/wiki/Intelligent_Platform_Management_Interface http://www.google.com Search: IPMI "Security Holes" -- Hits: 14,500 http://www.google.com Search: IPMI BMC "Security Holes" -- Hits: 4950 BIOS Security Issues -------------------- https://en.wikipedia.org/wiki/BIOS http://www.google.com Search: BIOS "Security Holes" -- Hits: 342,000 My initial recommendation was to use a totally separate network for any service processors within the servers that implement IPMI/BMC capabilities. This has been standard practice in most systems I have worked on in the past, and has allowed certification with essentially no problems. The BIOS concern seems to be another issue to be addressed separately. Any connectivity and access to a system brings security issues. The list from these searches is huge. Are there specific things that must always be addressed for system security besides keeping junior admins off the server supporting the maintenance network? Thanks in advance for any feedback and best regards.

5 4

Re: [CentOS] 7.1 install with Areca arc-1224
by C Linus Hicks 06 Jul '15

06 Jul '15

On 07/05/15, Gordon Messmer wrote: anaconda will try to delete an rpm file if it gets an IOError. Your media may be corrupt. Check that first. ----- Above quoted ----- No such luck. On the system where I'm doing the install, I used dd to read the entire DVD and also copied every .rpm to /dev/null and didn't get any I/O errors. What next?

3 2

Re: [CentOS] 7.1 install with Areca arc-1224
by C Linus Hicks 05 Jul '15

05 Jul '15

On 07/05/2015 09:17 AM, linush(a)verizon.net wrote: > Someone please tell me what I did to screw this thing up so badly. On 07/05/15, Gordon Messmer<gordon.messmer(a)gmail.com> wrote: Have you looked at the log files in /mnt/sysimage/root/? ------------- Quoting broken in this mailer ------------ So I looked in /mnt/sysimage/var/log/anaconda and found this in anaconda.packaging.log: --------- cut --------- 02:40:53,109 DEBUG packaging: Installing abrt-dbus (684/1349) 02:40:53,125 DEBUG packaging: Installing flite (685/1349) 02:40:54,291 DEBUG packaging: Traceback (most recent call last): 02:40:54,291 DEBUG packaging: File "/usr/libexec/anaconda/anaconda-yum", line 220, in callback 02:40:54,292 DEBUG packaging: return func(amount, total, key, data) 02:40:54,292 DEBUG packaging: File "/usr/libexec/anaconda/anaconda-yum", line 342, in inst_open_file 02:40:54,292 DEBUG packaging: os.unlink(txmbr.po.localPkg()) 02:40:54,292 DEBUG packaging: OSError: [Errno 30] Read-only file system: '/run/install/repo/Packages/flite-1.3-22.el7.x86_64.rpm' 02:40:54,292 DEBUG packaging: FATAL ERROR: python callback <bound method RPMCallback.callback of <__main__.RPMCallback object at 0x7fa4569d1a10>> failed, aborting! 02:40:54,393 INFO packaging: ==== start rpm scriptlet logs ==== 02:40:54,393 INFO packaging: warning: filesystem-3.2-18.el7.x86_64: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY 02:40:54,393 INFO packaging: libgcc-4.8.3-9.el7.x86_64 (1/1349) 02:40:54,393 INFO packaging: fontpackages-filesystem-1.44-8.el7.noarch (2/1349) 02:40:54,393 INFO packaging: 1:control-center-filesystem-3.8.6-18.el7.x86_64 (3/1349) --------- cut --------- The path it is complaining is a read-only filesystem is the installation DVD. If my interpretation is correct, it appears to be attempting to delete a file on the DVD. Is there some issue with installing flite or is something else going on? When I searched there was a bug opened on a similar issue, but the person had a RAID array failure and the only error I see in the anaconda.storage.log is this: ------ cut -------- 02:24:19,798 DEBUG blivet: parsing /mnt/sysimage/etc/blkid/blkid.tab 02:24:19,799 INFO blivet: IGNORED: Caught exception, continuing. 02:24:19,799 INFO blivet: IGNORED: Problem description: error parsing blkid.tab 02:24:19,800 INFO blivet: IGNORED: Begin exception details. 02:24:19,800 INFO blivet: IGNORED: Traceback (most recent call last): 02:24:19,800 INFO blivet: IGNORED: File "/usr/lib/python2.7/site-packages/blivet/__init__.py", line 3227, in parseFSTab 02:24:19,800 INFO blivet: IGNORED: blkidTab.parse() 02:24:19,800 INFO blivet: IGNORED: File "/usr/lib/python2.7/site-packages/blivet/__init__.py", line 2282, in parse 02:24:19,800 INFO blivet: IGNORED: with open(path) as f: 02:24:19,800 INFO blivet: IGNORED: IOError: [Errno 2] No such file or directory: '/mnt/sysimage/etc/blkid/blkid.tab' 02:24:19,800 INFO blivet: IGNORED: End exception details. ---------- cut --------- Which doesn't appear to be fatal.

2 1

7.1 install with Areca arc-1224
by linush＠verizon.net 05 Jul '15

05 Jul '15

I must be doing something horribly wrong and I hope somebody can help. The Areca arc-1224 is not supported by the Areca driver included driver in 7.1 so I have to supply that when starting the install. Documentation provided by Areca and in the Red Hat install guide say the same thing, put the driver on an accessible medium then append inst.dd on the boot command, choose the driver and now the drives show up. So far so good. There's already a possible glitch, however. The USB memory stick is mounted as sda1, shifting the hard drives off by one letter. So I break into the shell and partition the drives the way I want them, go back to the GUI installer and select the drives I want to use, assign mount points and formatting options. Done with that, configure the network and disable kdump. Start the installation. Give it a root password. Install completes, reboot. Only it won't boot. Boot the DVD again, use troubleshooting with rescue option, again providing the new Areca driver. Tell it to mount my install under /mnt/sysimage. Look around a bit, there's almost nothing I expect to see in /boot, there's no kernel image. Do chroot /mnt/sysimage and query the RPM database, I see kernel-devel, kernel-headers and kernel-tools-libs. Hmmm, I'll bet that's a problem. What the heck?? I actually did try copying the kernel and a few other required RPMs into a directory inside the chroot jail, install them and that worked fine, so I know those bits on the DVD are good. Someone please tell me what I did to screw this thing up so badly. Linus

2 1

OT Advantage of running DNS server?
by Timothy Murphy 05 Jul '15

05 Jul '15

What is the advantage, if any, of running one's own DNS server? Surely the link between domain name and IP address must already have been established? -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

7 6

Gracefully powering off system in case of power failure
by Jatin Davey 04 Jul '15

04 Jul '15

Hi I am using the system as shown below. ********************************* [root@localhost sbin]# cat /etc/*release LSB_VERSION=base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch:graphi cs-4.0-amd64:graphics-4.0-noarch:printing-4.0-amd64:printing-4.0-noarch Red Hat Enterprise Linux Server release 6.5 (Santiago) Red Hat Enterprise Linux Server release 6.5 (Santiago) [root@localhost sbin]# uname -a Linux localhost.localdomain 2.6.32-431.el6.x86_64 #1 SMP Sun Nov 10 22:19:54 EST 2013 x86_64 x86_64 x86_64 GNU/Linux [root@localhost sbin]# ********************************** In case of power failure on this server , how can i make the system to shutdown gracefully so that it unmounts the file-system and cleans up the required buffers. My server does have a battery backup so it will help in shutting down the system more gracefully. I tried looking at this link: https://www.olimex.com/forum/index.php?topic=3326.0 But it did not help. Appreciate if someone can help me in this regard. Thanks Jatin

4 10

sendmail tls and oppenssl
by Gregory P. Ennis 04 Jul '15

04 Jul '15

Everyone, Looks like the new version of oppenssl has broken my sendmail's use of tls. Has anyone else had this problem or seen a fix? Greg Ennis

2 3

get ride of initial screen on CentOS 7
by Jerry Geis 03 Jul '15

03 Jul '15

Through kickstart I setup everything I need. On CentOS 7 I still get the "welcome" screen followed by a couple more then your ready to start using centos how do I get Rid of those series of screens ? Thanks Jerry

3 2

installing Cents os server 7.0
by Michael Wright 03 Jul '15

03 Jul '15

Hi all I have downloaded centos and burn the iso file every time I install centos it deletes my windows 7 what am I doing wrong mike

11 30

What causes phantom update nags?
by Kay Schenk 03 Jul '15

03 Jul '15

My Update Applet keeps giving me messages to install an update to a package I do not have installed. To make matters more confusing, when I actually try to install the package it wants to update, there is a problem with the installation. Any tips on how to resolve this? Is this somehow caused by the repositories I have enabled? -- -------------------------------------------- MzK "We can all sleep easy at night knowing that somewhere at any given time, the Foo Fighters are out there fighting Foo." -- David Letterman

4 7

CentOS-announce Digest, Vol 125, Issue 1
by centos-announce-request＠centos.org 03 Jul '15

03 Jul '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1197 Moderate CentOS 5 openssl Security Update (Johnny Hughes) 2. CEBA-2015:1205 CentOS 6 cluster BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 2 Jul 2015 12:10:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1197 Moderate CentOS 5 openssl Security Update Message-ID: <20150702121041.GA9430(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1197 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1197.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8b8c609255b3fc78e8a8227dfcf456fc6fad6ee44402b00741d66eb7a7c91b02 openssl-0.9.8e-36.el5_11.i386.rpm 61f39339bba2e5d56667ccf56d5209e48dc3bce26b45d1b0d043ae5a5f4cd96c openssl-0.9.8e-36.el5_11.i686.rpm 00f5e3d2df2c933bbc7d49df3a0496212963eae0923ea1a8ab78c698bd67ab30 openssl-devel-0.9.8e-36.el5_11.i386.rpm 6e76fd11355d47b0ba0afc79f8cfe97fea5ec3434dc4ec0a75d426fd2a1f3d09 openssl-perl-0.9.8e-36.el5_11.i386.rpm x86_64: 61f39339bba2e5d56667ccf56d5209e48dc3bce26b45d1b0d043ae5a5f4cd96c openssl-0.9.8e-36.el5_11.i686.rpm 9f922500d3726e5e910e3291bd6ababbd82df79b9b504f654e8711e3922d24a7 openssl-0.9.8e-36.el5_11.x86_64.rpm 00f5e3d2df2c933bbc7d49df3a0496212963eae0923ea1a8ab78c698bd67ab30 openssl-devel-0.9.8e-36.el5_11.i386.rpm be2e32d534efa94c2be0077f4cd9fcb4923f4cf1c5f34002ad865ea28e127f6a openssl-devel-0.9.8e-36.el5_11.x86_64.rpm 949a68f470e7baaa9385c6a5b6efbab45762e8693a2258e2b5cf2a755fadfc16 openssl-perl-0.9.8e-36.el5_11.x86_64.rpm Source: d3fd488129138efbffee4176587436a22c10e54950bc274f1fd894dc355adf55 openssl-0.9.8e-36.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 2 Jul 2015 12:14:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1205 CentOS 6 cluster BugFix Update Message-ID: <20150702121438.GA44896(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1205 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1205.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 90ef0a84184a3857346cc2b4693509e5d91d5bb0a9acda7cd4904fd14aade523 clusterlib-3.0.12.1-68.el6_6.1.i686.rpm 24a565af8a5f95f74ce5e361db082cfd583507446ba2915772e2f54ce5ef16a2 clusterlib-devel-3.0.12.1-68.el6_6.1.i686.rpm 0649fb13b74635527b1bbdfeb34dadf4198d6886397b38f9605b38cd85e5f8a2 cman-3.0.12.1-68.el6_6.1.i686.rpm dab56b4f6957e8a1136e735d1b3f271555c04adb61dbca496c50393277d13529 gfs2-utils-3.0.12.1-68.el6_6.1.i686.rpm x86_64: 90ef0a84184a3857346cc2b4693509e5d91d5bb0a9acda7cd4904fd14aade523 clusterlib-3.0.12.1-68.el6_6.1.i686.rpm 06cd9d2f96a961d1c67f89ced86925224b636d2371a5ea75b2ab9fd7afb78f98 clusterlib-3.0.12.1-68.el6_6.1.x86_64.rpm 24a565af8a5f95f74ce5e361db082cfd583507446ba2915772e2f54ce5ef16a2 clusterlib-devel-3.0.12.1-68.el6_6.1.i686.rpm ea72d89d426bc921d34d650b69c07673558dea746d6de0f11785729fba7c398f clusterlib-devel-3.0.12.1-68.el6_6.1.x86_64.rpm 9bc8ecb5f0a5daf0a1dd7890612395a905576b922b1820baee4213a4614557d0 cman-3.0.12.1-68.el6_6.1.x86_64.rpm fcf679b864fb47c769c2a735197f853164aec04d5a968efbb23efa567f9d1698 gfs2-utils-3.0.12.1-68.el6_6.1.x86_64.rpm Source: 13e2a6f640e75705771785dd7248eb66bb3dd039df0eb3ea462df0497e65968d cluster-3.0.12.1-68.el6_6.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 125, Issue 1 ***********************************************

1 0

An mdadm question
by m.roth＠5-cent.us 02 Jul '15

02 Jul '15

CentOS 7. I have a server with four drives. 1 is /, and the other three are in RAID5. I need to pull a drive, so I can test whether the server can read > 2TB drives. I've been googling, but don't want to screw the server up.... I think I'd like to 1. stop the RAID 2. pull a drive 3. put in a large drive, and run parted, and mkfs 4. pull the large drive 5. replace the RAID drive 6. fire up the RAID. So, can I do it in that order? Do I need to fail something? mark

4 3

Re: [CentOS] [CentOS-announce] CESA-2015:1197 Moderate CentOS 5 openssl Security Update
by Blake Hudson 02 Jul '15

02 Jul '15

FYI I believe applying this openssl update may result in breaking SSL MySQL connections similar to RHEL/CentOS 6 - https://bugzilla.redhat.com/show_bug.cgi?id=1228755 I opened a bug report for RHEL5/CentOS 5 weeks ago - https://bugzilla.redhat.com/show_bug.cgi?id=1231960. However, it hasn't gained any attention. --Blake Johnny Hughes wrote on 7/2/2015 7:10 AM: > CentOS Errata and Security Advisory 2015:1197 Moderate > > Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1197.html > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > i386: > 8b8c609255b3fc78e8a8227dfcf456fc6fad6ee44402b00741d66eb7a7c91b02 openssl-0.9.8e-36.el5_11.i386.rpm > 61f39339bba2e5d56667ccf56d5209e48dc3bce26b45d1b0d043ae5a5f4cd96c openssl-0.9.8e-36.el5_11.i686.rpm > 00f5e3d2df2c933bbc7d49df3a0496212963eae0923ea1a8ab78c698bd67ab30 openssl-devel-0.9.8e-36.el5_11.i386.rpm > 6e76fd11355d47b0ba0afc79f8cfe97fea5ec3434dc4ec0a75d426fd2a1f3d09 openssl-perl-0.9.8e-36.el5_11.i386.rpm > > x86_64: > 61f39339bba2e5d56667ccf56d5209e48dc3bce26b45d1b0d043ae5a5f4cd96c openssl-0.9.8e-36.el5_11.i686.rpm > 9f922500d3726e5e910e3291bd6ababbd82df79b9b504f654e8711e3922d24a7 openssl-0.9.8e-36.el5_11.x86_64.rpm > 00f5e3d2df2c933bbc7d49df3a0496212963eae0923ea1a8ab78c698bd67ab30 openssl-devel-0.9.8e-36.el5_11.i386.rpm > be2e32d534efa94c2be0077f4cd9fcb4923f4cf1c5f34002ad865ea28e127f6a openssl-devel-0.9.8e-36.el5_11.x86_64.rpm > 949a68f470e7baaa9385c6a5b6efbab45762e8693a2258e2b5cf2a755fadfc16 openssl-perl-0.9.8e-36.el5_11.x86_64.rpm > > Source: > d3fd488129138efbffee4176587436a22c10e54950bc274f1fd894dc355adf55 openssl-0.9.8e-36.el5_11.src.rpm > > >

1 0

Status: openssl security update
by Leon Fauster 02 Jul '15

02 Jul '15

Hello CentOS-Team, is https://rhn.redhat.com/errata/RHSA-2015-1197.html in the pipeline? Thanks, LF

1 1

nfs problems lately ?
by Adrian Sevcenco 01 Jul '15

01 Jul '15

Hi! Did anyone encountered problems with nfs after the latest updates? I started to have problems like nfsvers=3 no longer working in fstab or messages like : RPC: Program not registered Thanks! Adrian

4 4

gssproxy items...
by Erik Laxdal 30 Jun '15

30 Jun '15

Hi, I've been working on some systems trying to get kerberized nfsv4 and kerberized web services going on 7. Kerberized nfsv4 was working with 7.0, but with the 7.1 release it stopped working, the key difference between the two setups is that gssproxy wasn't being used with 7.0, but seems to be key with 7.1. The problem I am encountering with Kerberized NFSv4 is that the directory will mount okay, and I can see it's contents as root, but I encounter "Permission denied" errors when trying to access it as a regular user. 'klist -ce' returns valid results as the user (including a a line for the server spn that I was trying to access), and I am able to access Kerberized NFSv4 shares hosted on EL6 servers as the same user. Kerberized web services have been a recent thing to try in order to see if they would work with gssproxy - a colleague did get Kerberized web services going on 7.1 without using gssproxy. I followed the instructions at https://fedorahosted.org/gss-proxy/wiki/Apache, but still didn't have any success until I added the cred_store line mentioned in comment 6 of https://bugzilla.redhat.com/show_bug.cgi?id=1168962 as we are running with selinux enabled. The success was short-lived for once I started adding user/group checking it would succeed about 30% of the time as the user principal was being returned as elaxdal@REALMH\x86\xf7\x12\x01\x02\x02 instead of just elaxdal@REALM. Today I tried recompiling the 0.4.1-1 source rpm from Fedora 21's updates, installed it onto a 7.1 nfsv4/web server, at which point everything started to consistently work - NFSv4 shares and web services with user/group checking. So it appears that the problem I'm encountering has been addressed. I've also tried recompiling the 0.3.1-1 and 0.3.1-4 source rpms from Fedora 20 and 21, both of which show the same problems I see with the 7.1 version of gssproxy. Some additional background information, the Kerberos server is an AD server that is maintained by another group. The system keytab uses a user account based spn on the AD server, and a computer account based keytab for the system with aliases for host and http keytabs. Any thoughts/suggestions as I'd rather stay with the distribution's version of supplied packages? Thanks, Erik

2 2

CPAN issues
by James D. Parra 30 Jun '15

30 Jun '15

Hello List, Running CentOS Linux release 7.0.1406 (Core), and trying to update CPAN from version 1.98 to version 2.10, but it fails. <snip> t/97-process_setup_options.t .. ok t/97-return_values.t .......... 6/10 # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Prereq::Fails' # at t/97-return_values.t line 49. # got: '2' # expected: '1' # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Make::Fails' # at t/97-return_values.t line 49. # got: '2' # expected: '1' t/97-return_values.t .......... 8/10 # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Test::Fails' # at t/97-return_values.t line 49. # got: '2' # expected: '1' t/97-return_values.t .......... 9/10 # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Unsupported::OS' # at t/97-return_values.t line 49. # got: '2' # expected: '1' t/97-return_values.t .......... 10/10 # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Works::Fine' # at t/97-return_values.t line 49. # got: '2' # expected: '0' # Looks like you failed 5 tests of 10. t/97-return_values.t .......... Dubious, test returned 5 (wstat 1280, 0x500) Failed 5/10 subtests Test Summary Report ------------------- t/30shell.t (Wstat: 65280 Tests: 150 Failed: 0) Non-zero exit status: 255 Parse errors: Bad plan. You planned 223 tests but ran 150. t/41distribution.t (Wstat: 1024 Tests: 19 Failed: 4) Failed tests: 14, 16-17, 19 Non-zero exit status: 4 t/97-return_values.t (Wstat: 1280 Tests: 10 Failed: 5) Failed tests: 6-10 Non-zero exit status: 5 Files=30, Tests=595, 259 wallclock secs ( 0.27 usr 0.02 sys + 14.40 cusr 1.11 csys = 15.80 CPU) Result: FAIL Failed 3/30 test programs. 9/595 subtests failed. make: *** [test_dynamic] Error 5 ANDK/CPAN-2.10.tar.gz one dependency not OK (CPAN::Meta::Requirements); additionally test harness failed /usr/bin/make test -- NOT OK //hint// to see the cpan-testers results for installing this module, try: reports ANDK/CPAN-2.10.tar.gz Running make install make test had returned bad status, won't install without force Failed during this command: ANDK/CPAN-2.10.tar.gz : make_test NO one dependency not OK (CPAN::Meta::Requirements); additionally test harness failed <end> Any ideas how I can resolve this? Thank you, James

3 4

user 'not listed' on login screen
by CS DBA 30 Jun '15

30 Jun '15

All; I installed centOS 7 (KDE), I also created a user 'postgres' the postgres user does not show up as a user on the login screen. How can I make this user show up on the login screen? I've googled it with no luck Thanks in advance

5 4

Tar CentOS installation and transfer it to new server
by Mike 30 Jun '15

30 Jun '15

Current Installation: CentOS 7.1503 with SerNet Samba 4 ver. 4.1.17 configured as Active Directory Domain Controller. Current Installation: HP Workstation with dual Xeon quadcore cpu's and 4 x SATA hard drives NOT configured in RAID array. New Installation: CentOS 7.1503 minimal install New Installation: SuperMicro with single Xeon quadcore cpu and 4 x SATA hard drives configured in two pairs of RAID 1. The Current Install is about 3.5 GB's and has my Samba 4 setup all solid and working well. I want to know if it's possible to simply: - tar up the whole root partition - put it on a USB drive - boot the New server with a livecd - chroot into / partition - unpack the tar'ed root (/) from the USB drive into the New server root (/). Both installs used the automatic partitioning from anaconda, so /boot is on a separate partition. Each server has an initrd and kernel that works from /boot partition. Both CentOS installs are setup using the xfs filesystem on the root (/) partition. I saw someone do this successfully once but they left out certain directories like /srv , /tmp , and /var. But I'm not 100% certain which directories need to be left out of the tarball. Has anyone done this before? Do you know if it's doable? Thanks for reading.

4 7

Qemu 2.x on CentOS 7?
by Robert Fitzpatrick 30 Jun '15

30 Jun '15

Is there any way to get the latest Qemu to run on CentOS 7? I'm looking for a way to create backup snapshots, but the current install says: [root@vhost1 ~]# virsh snapshot-create-as myvm snapshot1 "snapshot1 description" error: Operation not supported: live disk snapshot not supported with this QEMU binary -- Robert

2 1

CentOS 6 gcc is a bit old
by Michael Hennebry 30 Jun '15

30 Jun '15

gcc (GCC) 4.4.7 20120313 (Red Hat 4.4.7-11) is a bit old. There have been major changes since then. I'd like a newer version. If I have to, I expect that I can install from source. I'd rather not. Is there a CentOS 6-compatible repository from which I can get a newer version? Does a standard CentOS 7 repository have a newer version? Does a CentOS 7-compatible repository have a newer version? It's my understanding that to compile from source, I will need to keep the gcc I have. Otherwise I would have nothing to compile the source. I expect that providing the right options will let old and new co-exist. Is ensuring that I get the right gcc when I type "gcc" just a matter of having the right search path for gcc? Will I need to do anything interesting to ensure that the resulting executables run using the right libraries? I've installed from source before, but never to replace an existing compiler. My concern is that if I louse things up, the mess could be very hard to fix. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "SCSI is NOT magic. There are *fundamental technical reasons* why it is necessary to sacrifice a young goat to your SCSI chain now and then." -- John Woods

5 5

Re: [CentOS] Using a CentOS 6 Machine as a gateway/router/home server
by James B. Byrne 30 Jun '15

30 Jun '15

On Mon, June 29, 2015 02:14, Sorin Srbu wrote: OS 6? > > Please note: I'm not criticizing, just curious about the argument > behind using a regular OS to do firewall-stuff. > Maintenance. A consistent set of expectations does wonders for debugging odd-ball occurrences. Why learn the idiosyncrasies of two distros when one suffices? Just start with a minimal CentOS install on your router/gateway and add only the packages that you know that you need. Any critical omission will evidence itself in short order and can be added then; or the source of the need removed as circumstance warrants. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 8

CentOS-announce Digest, Vol 124, Issue 17
by centos-announce-request＠centos.org 30 Jun '15

30 Jun '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:1192 CentOS 7 openssl BugFix Update (Johnny Hughes) 2. CESA-2015:1194 Moderate CentOS 6 postgresql Security Update (Johnny Hughes) 3. CESA-2015:1193 Moderate CentOS 7 xerces-c Security Update (Johnny Hughes) 4. CESA-2015:1194 Moderate CentOS 7 postgresql Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 29 Jun 2015 13:10:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1192 CentOS 7 openssl BugFix Update Message-ID: <20150629131010.GA18119(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1192 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1192.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e6c2ef7c0b89fcfacb8e64488d2802271ab082921512860385fb1c0aae46684a openssl-1.0.1e-42.el7.9.x86_64.rpm b96a444096055df0ceec150eb107130a814060558ddaa4ecbec1abcfc0acc99e openssl-devel-1.0.1e-42.el7.9.i686.rpm 018b50c925ec2feba99dd5b06e651327da4258b7a0c0a4bb4e551c6f0710ceb0 openssl-devel-1.0.1e-42.el7.9.x86_64.rpm 7a2778580ee3d50584b8329e859d4be55d93ff749b088f50df2bb9a6879eb817 openssl-libs-1.0.1e-42.el7.9.i686.rpm b4dcd15094fc1a2f4e9742169d66e5de06a6751de26f2baa13282cca64954e3d openssl-libs-1.0.1e-42.el7.9.x86_64.rpm 13600af8063a7f56cb8686a5261c1c8cf42335a2a5f41ada1038d3e55ef78b08 openssl-perl-1.0.1e-42.el7.9.x86_64.rpm 3c62e5f755a5db436f16c15af1236b8c80565b69b00d31f60bb4b686f36270c7 openssl-static-1.0.1e-42.el7.9.i686.rpm 0aae83ae75cbcb9bb61c5c85fe5a06b35a8fc96d5fd35ce2b845d647c243b160 openssl-static-1.0.1e-42.el7.9.x86_64.rpm Source: ad13e94dd6fb298aef32f250d95ea9f27a2de4a62d2f1e9f3e3ecc7c8e034c84 openssl-1.0.1e-42.el7.9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 29 Jun 2015 16:03:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1194 Moderate CentOS 6 postgresql Security Update Message-ID: <20150629160344.GA21622(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1194 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1194.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 38011c1a69aac2d06e4309c0fa4cf17d8fa3f6393d9b99116365d277bf9df8a4 postgresql-8.4.20-3.el6_6.i686.rpm 75b8c97fbcc379ff002cc3ec6a9e65c3163966add47d9cc51a09ee8526ba31c7 postgresql-contrib-8.4.20-3.el6_6.i686.rpm 392b1251aab447568fbb76fd8c4997ff331246061db197b0cd13574a18cd4415 postgresql-devel-8.4.20-3.el6_6.i686.rpm dea73d52e9d5185a49ab859220cdecca739c8c7d85f7a51fba49d6dd7bfaa012 postgresql-docs-8.4.20-3.el6_6.i686.rpm 292276c6e567d46ef194cdd9fff8cb0fb11b7e924d418ad75cc3be1555634aeb postgresql-libs-8.4.20-3.el6_6.i686.rpm e570c1313bfe0e7502299d0af4696feb56f7d8847165896913e2baa3a198ea94 postgresql-plperl-8.4.20-3.el6_6.i686.rpm ae287231ae774f9aba82085551e38447eb4a611e2af5cf16887d666de6de0581 postgresql-plpython-8.4.20-3.el6_6.i686.rpm dd785db4e8c9f57a86907ac5abab40af293019afbfc731d9801083eaa3ad64ff postgresql-pltcl-8.4.20-3.el6_6.i686.rpm 110719e3176139a68fb8a6867b6183feee528b1a56fb45bc23ce8b4e5a3eb072 postgresql-server-8.4.20-3.el6_6.i686.rpm d02ede44f9cbd547693b9de880f3aed6583f390c9f478a53df6e25430804dd47 postgresql-test-8.4.20-3.el6_6.i686.rpm x86_64: 38011c1a69aac2d06e4309c0fa4cf17d8fa3f6393d9b99116365d277bf9df8a4 postgresql-8.4.20-3.el6_6.i686.rpm 449c2c72585adb94d9fbfcae049e2bcd3ef329b273c36e55c5a1f6a9f3da1e94 postgresql-8.4.20-3.el6_6.x86_64.rpm 19ee23df9fd054b6b748b6a91bd1d07a24e14e56eab91c8587e703daaea544ff postgresql-contrib-8.4.20-3.el6_6.x86_64.rpm 392b1251aab447568fbb76fd8c4997ff331246061db197b0cd13574a18cd4415 postgresql-devel-8.4.20-3.el6_6.i686.rpm 5afb7ab33f153c23ec0414273d02e1d0c801bd90878069dbd294873fbcbc5c16 postgresql-devel-8.4.20-3.el6_6.x86_64.rpm fff82d8f6ed8594ab0a2ac856cf555175520f03eb02b1227fe46810cf68df140 postgresql-docs-8.4.20-3.el6_6.x86_64.rpm 292276c6e567d46ef194cdd9fff8cb0fb11b7e924d418ad75cc3be1555634aeb postgresql-libs-8.4.20-3.el6_6.i686.rpm 79cbf9ab217cfbea6ac19785803e9ef5ed6e8f47a07f8c058ba7da2ae1713913 postgresql-libs-8.4.20-3.el6_6.x86_64.rpm 49b8fc43b5b0fb238135aa8c70dfddd6f8ef712b8e5051ae64543493ef3bf17b postgresql-plperl-8.4.20-3.el6_6.x86_64.rpm e3f840e38086a8df5bc209d997a4d45325abf357e35f5430ccfe48b1087e6522 postgresql-plpython-8.4.20-3.el6_6.x86_64.rpm 6b582939ebfd4f1ae95aa793356a1bfa55bd3fbc4173d8e272b1cb17d1238d20 postgresql-pltcl-8.4.20-3.el6_6.x86_64.rpm 814b84b3007ffcfe92f5f94903d04b185fb5ae263a9f9ec566397715711c737e postgresql-server-8.4.20-3.el6_6.x86_64.rpm e048ea27aa7f338a14c2dfdb7294f41d7dfe816124bae17916b4d59bd5128122 postgresql-test-8.4.20-3.el6_6.x86_64.rpm Source: 75d6b751e43de5008752eb631fb44aeedcec26f8acc61783cefd033451f489c7 postgresql-8.4.20-3.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 29 Jun 2015 16:37:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1193 Moderate CentOS 7 xerces-c Security Update Message-ID: <20150629163738.GA39666(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1193 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1193.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: afe38236b7958205c190007679893aa52681defb42cec67e07a40222c0344ffd xerces-c-3.1.1-7.el7_1.i686.rpm 2978ee1ec27642b6233228ba6bb21dff81609aeded24f66ab348a5d2caf2bfb0 xerces-c-3.1.1-7.el7_1.x86_64.rpm cb5dfd0d635477caeab441417dc1310301661a5b366d845c060104824221f4a8 xerces-c-devel-3.1.1-7.el7_1.i686.rpm 48d763429c615c60c5153aa8b1e22149f056948f99cd5291dcbadc602fe34c7e xerces-c-devel-3.1.1-7.el7_1.x86_64.rpm db2116d626c0c82271a06e14ec8b067fdba3f12594d5d543092f7908e386b800 xerces-c-doc-3.1.1-7.el7_1.noarch.rpm Source: 69ab23c4a875ed4cd10a77b8e310032108569d047d6f323e7573ad146e8798c1 xerces-c-3.1.1-7.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 29 Jun 2015 16:37:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1194 Moderate CentOS 7 postgresql Security Update Message-ID: <20150629163758.GA39784(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1194 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1194.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 68f75a380fb35cbf47d27a27884116cea350e1d8fbf2f566bebb8b58d34bf4a1 postgresql-9.2.13-1.el7_1.i686.rpm 9e301e4212c06695f095b2bee281baf3435608cd63ad70be94e181de341d81c5 postgresql-9.2.13-1.el7_1.x86_64.rpm 981c31541f67bd4b110df1371f9ca313698a97810c38274b0f924459079e7e39 postgresql-contrib-9.2.13-1.el7_1.x86_64.rpm d9e577eb24b8d45803e7c33b320f0880879444c057928dc04a091c4af1cda292 postgresql-devel-9.2.13-1.el7_1.i686.rpm c6dc3e9f24d0b3fb1405506854e7815bd72c9b49c0e5df8498ce558c0001efc8 postgresql-devel-9.2.13-1.el7_1.x86_64.rpm 7995e777b8133a67d72a1b225560ce0f63d41bc064a469dce6b455dbe1a308c6 postgresql-docs-9.2.13-1.el7_1.x86_64.rpm 371b3f5c4adb28366fcce85191dc70455ec7383c1097b0202c4e761743dbea0e postgresql-libs-9.2.13-1.el7_1.i686.rpm eabcc29979df894bc6196447e440e11a5d85f0bac616e1250b6f8930ebc74300 postgresql-libs-9.2.13-1.el7_1.x86_64.rpm f539cb95191a69dd107feaa183ff31cc5f4159b8bad0262fd5449187716f63b7 postgresql-plperl-9.2.13-1.el7_1.x86_64.rpm 7373870c1833da0ca1671ed0cd7c311175967d397b59c2c1ba20ad8e39b9c6ec postgresql-plpython-9.2.13-1.el7_1.x86_64.rpm d036fc72f2c89a661c82cbab8023df4d16704f8a375ecec00cda512b0d2a930b postgresql-pltcl-9.2.13-1.el7_1.x86_64.rpm 392ca0e1accf6883e2b36f39cc9b203e991e48a340d8895b24f02118948c6cd0 postgresql-server-9.2.13-1.el7_1.x86_64.rpm c698baa54a3062dfd6e860c138cf2eef4aa87eea1ea8cbe659f4fe816c9e0a27 postgresql-test-9.2.13-1.el7_1.x86_64.rpm b4d4f0ac450076857682566e4b19dbb0a5362052de181854e13a3d9ad5a59e9f postgresql-upgrade-9.2.13-1.el7_1.x86_64.rpm Source: efa4a7c335d023956ac1d6adfd067921c46ea7bb6aecc15fe04634590f38ef28 postgresql-9.2.13-1.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 124, Issue 17 ************************************************

1 0

set up login.defs but password still not expire?
by mcclnx mcc 30 Jun '15

30 Jun '15

We have Centos 5.8 on LInux server.I setup /etc/login.defs following: PASS_MAX_DAYS 3 PASS_MIN_DAYS 0 PASS_MIN_LEN 8 PASS_WARN_AGE 1 after that I chack user password policy and it show:# chage -l user1 Last password change : Jun 29, 2015 Password expires : never Password inactive : never Account expires : never Minimum number of days between password change : 0 Maximum number of days between password change : 99999 Number of days of warning before password expires : 7 anyone know why? I did reboot server still same.

3 2

Re: [CentOS] Using a CentOS 6 Machine as a gateway/router/home server
by david 30 Jun '15

30 Jun '15

At 07:43 AM 6/29/2015, you wrote: >James B. Byrne wrote: > > On Mon, June 29, 2015 02:14, Sorin Srbu wrote: > > OS 6? > >> > >> Please note: I'm not criticizing, just curious about the argument > >> behind using a regular OS to do firewall-stuff. > > > > Maintenance. > > > > A consistent set of expectations does wonders for debugging odd-ball > > occurrences. Why learn the idiosyncrasies of two distros when one > > suffices? Just start with a minimal CentOS install on your > > router/gateway and add only the packages that you know that you need. > > Any critical omission will evidence itself in short order and can be > > added then; or the source of the need removed as circumstance > > warrants. > >Yup. For, um, about a dozen years, I ran RH 7.1,7.2, 7.3, and eventually 9 >on an old box that was nothing but a firewall router. I was seriously >paranoid - no gcc or any development tools, no X, not much of anything. To >the best of my knowledge, we never had a breakin. > >I'm running DD-WRT on an ASUS router these days, and I'm *NOT* wildly >impressed. I mean, it seems ok, but the project is run in what I can only >describe as "amateur", in the worst sense of the word. The several >official developers release a build, and you can choose which one of >who's; people on the mailing list have "favorite builds", which is not a >phrase I have *ever* heard used with an o/s before, and I'm afraid to >update, as some of their "documentation" is out of date, or wrong. > >At some point, I may just get a PI, and run CentOS, or some >firewall/router distro, though that would mean not having WiFi for guests. > > mark Mark The WiFi solution I use still uses a Centos 6 firewall/router/gateway, but one of my inside devices is a WiFi router. Rather than doing double routing, I connect one of the WiFi's LAN connections via a switch to my Router via a switch, leaving the WiFi Router's WAN conection unused. That way, my gateway (and not the WiFi router) is the DHCP server, and can enforce whatever firewall rules I want to apply. No need to give up your guest WiFi if you stick with a Centos gateway. David

5 4

Old and new package version numbers during RPM update
by Anand Buddhdev 29 Jun '15

29 Jun '15

Hi CentOS folk, In an RPM post-install script, is it possible to know the previous version number, and the new version number of a package if it's an update? I need to know this, because for a certain package, if updating from version 1.x to 2.x, I need to run a program to convert the config file of the package from version 1.x format to version 2.x format. I've looked at SPEC file documentation, but haven't found anything relevant. Regards, Anand

7 14

Using a CentOS 6 Machine as a gateway/router/home server
by Max Pyziur 29 Jun '15

29 Jun '15

Greetings, I'm rebuilding a machine to function as a gateway/router to Verizon DSL. It has two NICs eth0 and eth1 (static set to 192.168.1.1). eth0 connects to the DSL modem. I've setup Verizon DSL usine pppoe-setup, and it works. I can connect from home machines to the server (192.168.1.1); while logged in to the server, I can connect to both the internet, and the home machines. But ... I can't connect from the home machines directly to the Internet. I have set net.ipv4.ip_forward = 1 in /etc/sysctl.conf I haven't setup the firewall yet (dangerous, I know) until I get the connectivity working. I'm obviously overlooking some other configuration settings required for machines inside the network being able to connect through the gateway/router. Thanks for any advice in advance. Max Pyziur pyz(a)brama.com

10 18

CentOS-announce Digest, Vol 124, Issue 16
by centos-announce-request＠centos.org 29 Jun '15

29 Jun '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:1191 CentOS 5 irqbalance BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 27 Jun 2015 12:10:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1191 CentOS 5 irqbalance BugFix Update Message-ID: <20150627121007.GA30368(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1191 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1191.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0ec224e1af235b81234eea49486b3cf28562457ce4c67ae3da06cdc7e5f4ba37 irqbalance-0.55-16.el5_11.i386.rpm x86_64: 818235db375a8409016a5bf4a3c27765adbf4a44dfea7b9a0bbbc6c7c6a959ab irqbalance-0.55-16.el5_11.x86_64.rpm Source: b233e7b4dfe9720ddad886936804055e2c92ae57a5ee83ff3324eff85de0c719 irqbalance-0.55-16.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 124, Issue 16 ************************************************

1 0

/boot on a separate partition?
by Chris Murphy 29 Jun '15

29 Jun '15

Timothy Murphy gayleard at eircom.net Tue Jun 23 12:49:08 UTC 2015 > > Do most people today have /boot on a separate partition, > or do they (you) have it on the / partition ? Different distros have different defaults. There's no actual right or wrong here. Pretty much anything you can think of can be made to work. Jonathan Billings billings at negate.org Tue Jun 23 13:28:18 UTC 2015 >Not only do I have a /boot partition, but I have a /boot/efi partition. It's bad design. First, it's a nested mount: file system A on /, and file system B on /boot, and file system C on /boot/efi. Therefore the mount process must make sure they're mounted in that order, or there's failure. Second, there is no good reason for the EFI System partition to ever be mounted; and multiple reasons to not ever mount it (Windows and OS X never mount the EFI System partition but somehow all the Linux distros are obsessed with mounting things that don't need mounting). Eventually systemd will become smarter and handle on-demand dynamic mount and umount, including the ESP so this will get better but even better would be not ever mounting it in the first place. > I probably could get away without using the /boot partition, but I've > been experimenting with btrfs and snapshots and it makes sense to keep > /boot as an ext4 filesystem. I disagree, yet I'm curious what example you have that this makes sense. This ext4 /boot is unique to F/C/RH's dependency on grubby which doesn't grok Btrfs subvolumes, and therefore kernel updates don't get written to grub.cfg properly if /boot is on a Btrfs subvolume. GRUB, including grub2-mkconfig figures out subvolumes just fine. It's specifically a limitation of RH distros. Ubuntu and openSUSE don't have this problem. >I suspect with the move to XFS it might be a good idea to keep an ext4 /boot too. There's no advantage to it being ext4. The default installation for Fedora 22 Server, CentOS/RHEL 7 is /boot on XFS, and / on a separate XFS, and /home on a separate XFS. Just like with ext4, except with XFS. -- Chris Murphy

4 6

/boot on a separate partition?
by Timothy Murphy 28 Jun '15

28 Jun '15

Do most people today have /boot on a separate partition, or do they (you) have it on the / partition ? -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

21 43

Anyone else think the latest Xorg fix is hogging stuff?
by Bill Maltby (C4B) 28 Jun '15

28 Jun '15

Since the latest update (may wrap here), xorg-x11-server-Xorg-1.15.0-26.el6.centos.0.1.x86_64 Sat 20 Jun 2015 04:16:01 PM EDT xorg-x11-server-common-1.15.0-26.el6.centos.0.1.x86_64 Sat 20 Jun 2015 04:15:58 PM EDT x264-0.0.0-0.4.20101111.el6.rf.x86_64 Wed 19 Nov 2014 04:56:05 PM EST xvidcore-1.2.2-1.el6.rf.x86_64 Wed 19 Nov 2014 04:55:49 PM EST . . . drop a lot of older stable stuff ... Xorg is competing heavily with FF for top hog on my system. In FF I understand because I had multiple windows (6 desktops) with many tabs. I know this would theoretically increase Xorg work as well but prior to this update I seldom saw it near the top of "top" PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 4055 hardtolo 20 0 2165m 945m 49m R 95.9 12.0 3724:26 firefox 3119 root 20 0 276m 121m 34m S 34.0 1.6 2228:58 Xorg 15645 hardtolo 20 0 6163m 350m 26m S 10.6 4.5 181:50.51 java 5663 hardtolo 20 0 1557m 202m 24m S 9.6 2.6 294:53.69 plugin-containe 27871 hardtolo 20 0 1957m 520m 88m S 7.6 6.6 456:54.44 soffice.bin 18245 hardtolo 20 0 6228m 356m 26m S 7.3 4.5 112:09.55 java 14349 hardtolo 20 0 6228m 345m 26m S 5.3 4.4 143:59.97 java 9164 root 20 0 197m 51m 12m S 3.3 0.7 14:14.06 Xorg 4152 hardtolo 20 0 915m 28m 20m S 1.7 0.4 182:27.00 knotify4 27 root 20 0 0 0 0 S 1.0 0.0 28:58.96 events/0 12581 wild-bil 20 0 302m 14m 9.9m S 1.0 0.2 0:02.43 gnome-terminal 26741 hardtolo 20 0 15300 1420 892 S 1.0 0.0 0:02.47 top Anyone else pound the crap out of a desktop with FF and see Xorg getting "fat"? TIA for any clues or response. Bill

2 3

CentOS-announce Digest, Vol 124, Issue 15
by centos-announce-request＠centos.org 27 Jun '15

27 Jun '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1189 Important CentOS 5 kvm Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 26 Jun 2015 12:05:54 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1189 Important CentOS 5 kvm Security Update Message-ID: <20150626120554.GA17792(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1189 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1189.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 492ee4251b86edf043521fb03757643de2f25776eb6eab5745b53d1d2337be63 kmod-kvm-83-273.el5.centos.x86_64.rpm 4e43433ec3b141ff6d3eae3d2d4c2407ece9ce948439a4cdc87e651b26dd1e0c kmod-kvm-debug-83-273.el5.centos.x86_64.rpm 62f07523683d3bc7dd295bb39f079d9a08d4d4f4136d920a0b6baf026ca8d2ae kvm-83-273.el5.centos.x86_64.rpm 6a61830f8c07eaa0ce456660fd5bbe1f0d8a1ff791db0507b199e3cf70f3951f kvm-qemu-img-83-273.el5.centos.x86_64.rpm 83104ad3a7483c91c8cb0c09700c08bb5d3463fe20c455e367f17c2c49ce80d1 kvm-tools-83-273.el5.centos.x86_64.rpm Source: b83cedf1824e79195e22e88c431c8f87be9189e61d0dc67dc77eaff507a0a44c kvm-83-273.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 124, Issue 15 ************************************************

1 0

Re: [CentOS] LVM hatred, was Re: /boot on a separate partition?
by Gordon Messmer 26 Jun '15

26 Jun '15

On 06/26/2015 07:58 AM, Mark Milhollan wrote: > On Wed, 24 Jun 2015, Gordon Messmer wrote: > >> 1) If you have a system with a single disk, you have to reboot to add >> partitions for new guests. Linux won't refresh the partition table on the disk >> it boots from. > I'm not sure this is still true, but I use LVM almost everywhere so I > seldom need to try. It's definitely still true on CentOS 7. >> 3) If you want redundancy, partitions on top of RAID is more complex than LVM >> on top of RAID. As far as I know, partitions on top of RAID are subject to the >> same limitation as in #1. > They look the same to me, and share the same limitations (WRT the PV). Create a RAID1 volume on two drives. Partition that volume. Where is your partition table? Is it in a spot where your BIOS/UEFI or another OS will see it? Will that non-Linux system try to open or modify the partitions inside your RAID? It depends on what metadata version you use. If you set this up in Anaconda, it's going to be version 0.90, and your partition table will be in a spot where a non-Linux system will read it. There's no ambiguity with LVM. That's what I mean when I say that it's less complicated. The format of MBR and GPT partition tables are imposed by the design of BIOS and UEFI. There is no good reason to use them for any purpose other than identifying the location of a filesytem that BIOS or UEFI must be able to read. The limitation I was referring to was that as far as I know, if Linux has mounted filesystems from a partitioned RAID set, you can't modify partitions without rebooting. That limitation doesn't affect LVM. > Either can be partitioned but making more LVs is indeed simpler than > using DM to partition a partition or MD. I'd like to use LVM RAID and > never again have RAIDed partitions, so that I can choose the RAID level > per LV, alas LVM RAID MDs don't appear in /proc/mdstat so monitoring > them is somewhat more annoying. > >> 4) As far as I know, Anaconda can't set up a logical volume that's a redundant >> type, so LVM on top of RAID is the only practical way to support redundant >> storage of your host filesystems. > Anaconda has many deficiencies and indeed I am annoyed enough with it > that I often skip trying to use its new disk manager, but making the PV > on an MD RAID isn't impossible I know, that's what I said was the only practical way to support redundant storage (when using LVM). > , or alternatively making the LVs > redundant after install is a single command (each) and you can choose > whether it should be mere mirroring or some MD manged RAID level (modulo > the LVM RAID MD monitoring issue). I hadn't realized that. That's an interesting alternative to MD RAID, particularly for users who want LVs with different RAID levels.

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss