- Discuss - lists.centos.org

CentOS-announce Digest, Vol 193, Issue 3
by centos-announce-request＠centos.org 17 Apr '21

17 Apr '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:1145 Important CentOS 7 nettle Security Update (Johnny Hughes) 2. CESA-2021:1135 Important CentOS 7 squid Security Update (Johnny Hughes) 3. CESA-2021:1192 Moderate CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 16 Apr 2021 20:23:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1145 Important CentOS 7 nettle Security Update Message-ID: <20210416202343.GA17564(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1145 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1145 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 11d3ad095a9838e98b8360b005aa07fa292cf9a71c4265bdf7c5adda14d463b3 nettle-2.7.1-9.el7_9.i686.rpm a8f566d686a31517c6e1f0981aa8a7650ec4c8d5cea01c3500ae51e847966eee nettle-2.7.1-9.el7_9.x86_64.rpm 764049c60a710f88bfffed5ba17cd51ea7bb2822f89390f24d0db26a94bb9220 nettle-devel-2.7.1-9.el7_9.i686.rpm 16a78c16f102931cd4ab634fc4177b99535edda6436721529c1f30e8ec464b9a nettle-devel-2.7.1-9.el7_9.x86_64.rpm Source: 1f330271bdc651bc0996f2cb86292e6afe40bd1afe6d94735a4ee8f2a1ba5cc8 nettle-2.7.1-9.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 16 Apr 2021 20:24:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1135 Important CentOS 7 squid Security Update Message-ID: <20210416202410.GA17687(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1135 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1135 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d71161880783b5c75a2c86c86ecd65a9b1c075f8f6ae57b1c22186db3a0e482b squid-3.5.20-17.el7_9.6.x86_64.rpm 05b86a6126cc85e6e214a09707b886a17df5b705f5cb7dab4c86228f6b2ad4d2 squid-migration-script-3.5.20-17.el7_9.6.x86_64.rpm 147f560470dacac3f89bc4c5cfaa3c9d32364fc302511f2bf1a13025a5875621 squid-sysvinit-3.5.20-17.el7_9.6.x86_64.rpm Source: 4ef86458d8b6ff61084da478e9df0d5dc69d8fdd2cdfcf9229ce84c82b8b6835 squid-3.5.20-17.el7_9.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 16 Apr 2021 20:25:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1192 Moderate CentOS 7 thunderbird Security Update Message-ID: <20210416202529.GA17844(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1192 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2021:1192 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 89b015eb0d04659b187b7cae8d68fd38cdfd6ebc31ef6a4cc9432e777fe5c452 thunderbird-78.9.1-1.el7.centos.x86_64.rpm Source: 0a6c601af8bd999761c7d0669ac00e0b7246d487efefdfd634ea869fdd665891 thunderbird-78.9.1-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 193, Issue 3 ***********************************************

1 0

enough free pages but high number of major page faults and page reclaims
by yf chu 17 Apr '21

17 Apr '21

We find that for some servers io disk read is very high. We also notice that there are many major page faults on those servers. But we checked the /proc/zoneinfo, there are enough free pages. Here is the content of /proc/zoneinfo: pages free 3913507 min 11333 low 14166 high 16999 scanned 0 spanned 16777216 present 16777216 managed 16507043 nr_free_pages 3913507 We also use "perf" to monitor the event of "mm_filemap_delete_from_page_cache". Here is the result of perf: 7fff81189dd0 __delete_from_page_cache ([kernel.kallsyms]) 7fff8119b771 __remove_mapping ([kernel.kallsyms]) 7fff8119c8e8 shrink_page_list ([kernel.kallsyms]) 7fff8119d45a shrink_inactive_list ([kernel.kallsyms]) 7fff8119df55 shrink_lruvec ([kernel.kallsyms]) 7fff8119e376 shrink_zone ([kernel.kallsyms]) 7fff8119e880 do_try_to_free_pages ([kernel.kallsyms]) 7fff8119ed6c try_to_free_pages ([kernel.kallsyms]) 7fff816ac515 __alloc_pages_slowpath ([kernel.kallsyms]) 7fff811932d5 __alloc_pages_nodemask ([kernel.kallsyms]) 7fff811d7a68 alloc_pages_current ([kernel.kallsyms]) 7fff811e27f5 new_slab ([kernel.kallsyms]) 7fff811e40fc ___slab_alloc ([kernel.kallsyms]) 7fff816adaf1 __slab_alloc ([kernel.kallsyms]) 7fff811e609b kmem_cache_alloc ([kernel.kallsyms]) 7fff812778ed proc_alloc_inode ([kernel.kallsyms]) 7fff812234d0 alloc_inode ([kernel.kallsyms]) 7fff81225771 new_inode_pseudo ([kernel.kallsyms]) 7fff812257d9 new_inode ([kernel.kallsyms]) 7fff8127bc1e proc_pid_make_inode ([kernel.kallsyms]) 7fff812800e5 proc_fd_instantiate ([kernel.kallsyms]) 7fff8127c54c proc_fill_cache ([kernel.kallsyms]) 7fff812802dd proc_readfd_common ([kernel.kallsyms]) 7fff812803f5 proc_readfd ([kernel.kallsyms]) 7fff8121c246 vfs_readdir ([kernel.kallsyms]) 7fff8121c665 sys_getdents ([kernel.kallsyms]) 7fff816c2715 system_call_fastpath ([kernel.kallsyms]) bab95 __getdents64 (/usr/lib64/libc-2.17.so) It seems that os is carrying on page reclaim. But I don't know since there are enough free pages, why could page reclaim ocurr?

1 0

Proxmox Backup Server equivalent for the RHEL/CentOS world ?
by Nicolas Kovacs 17 Apr '21

17 Apr '21

Hi, I've just spent a couple weeks experimenting extensively with Proxmox VE (Virtual Environment) and Proxmox PBS (Backup Server) on a couple of sandbox servers. I must say I'm impressed, especially of the elegance and simplicity of the backup solution. Running virtual machines can be backed up efficiently, combining deduplication and incremental backups. A bit like Rsnapshot, only for whole VM images. Both PVE and PBS are based on Debian, and now I wonder if RHEL-based systems have something similar to offer. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

9 15

CentOS-announce Digest, Vol 193, Issue 2
by centos-announce-request＠centos.org 15 Apr '21

15 Apr '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0742 Important CentOS 7 screen Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 14 Apr 2021 13:29:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0742 Important CentOS 7 screen Security Update Message-ID: <20210414132909.GA20207(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0742 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0742 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 30b844415ba647e65a9810574f3ded5e1fc1edd02e28f73cc44ee2c35e97baea screen-4.1.0-0.27.20120314git3c2946.el7_9.x86_64.rpm Source: 8110b0f5f7bc0070b8cd656a7965d0f7d2f7c69102bbd80dbfc966ea718f96d8 screen-4.1.0-0.27.20120314git3c2946.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 193, Issue 2 ***********************************************

1 0

rsync over ssh stalls after completing the job
by Frank Cox 15 Apr '21

15 Apr '21

Here's a weird one. I have two Centos 8 machines that use rsync-over-ssh to back up files between each other. (Each machine acts as a backup machine for the other one.) There's are nightly cronjobs that do the backing up, the commands look like this: rsync -av --delete /home/mydirectory jeff:/home/mydirectorybackup That command works fine when it's run through the cronjob. When I try to run a rsync command between mutt and jeff from the commandline, that's where the problem starts. It worked a few days ago but now when I log into jeff and do a rsync to or from mutt it works fine. When I log into mutt and do a rsync to or from jeff it works and does the job, but then it seems to stall afterward and I have to hit ctrl-c to get my cursor back. Here's a test run so you can see what happens. [me@mutt temp]$ rsync -avv ../temp/ jeff:temp opening connection using: ssh jeff rsync --server -vvlogDtpre.iLsfxC . temp (7 args) sending incremental file list delta-transmission enabled bookmarks.html is uptodate ./ abc total: matches=0 hash_hits=0 false_alarms=0 data=26321 ^Crsync error: received SIGINT, SIGTERM, or SIGHUP (code 20) at rsync.c(644) [sender=3.1.3] A file named bookmarks.html existed in both directories so it wasn't changed, and a new file abc was copied to the backup directory. Then my ctrl-c stopped the job and brought the cursor back after it stalled. scp works fine to copy files either way when logged into either machine and, again, my backup-this-to-that cronjobs that run rsync seem to be working fine as well. I just discovered this last night when I went to rsync some files manually between these machines. The last time I did that was at least a few days ago and it worked fine then. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

6 18

NAME:WRECK
by mark 14 Apr '21

14 Apr '21

I'm reading a story linked to from slashdot, and I see FreeBSD is vulnerable. Has anyone looked at CentOS? mark

2 1

Missing /etc/ld.so.conf.d/kernel-3.10.0-1127.19.1.el7.x86_64.conf
by Kenneth Porter 14 Apr '21

14 Apr '21

I'm yum updating some CentOS 7 systems today and got this error. Two systems (so far) seem to have rebooted fine. Should I worry? error: file /etc/ld.so.conf.d/kernel-3.10.0-1127.19.1.el7.x86_64.conf: No such file or directory

4 7

Re: [CentOS] Proxmox Backup Server equivalent for the RHEL/CentOS world ?
by Blaž Bogataj 14 Apr '21

14 Apr '21

Hello As I said a couple of weeks ago in response to Niki I have been using ProxMox almost from the beginning ;). No "enterprise" version. And backup is one of the reasons for that. NFS on NAS as a backup target is really nice, even one time quicker than backup to local storage (NAS with 10gb FC). Also fiddling with RHV. But there is no "free" backup solution. I am trying with Bacchus but no way to schedule backup. Single backup OK, schedule backup no go. So now use vProtect, for 5 years not a lot of $. But I hope to find some instructions on how to build Prox and use it as software defined storage. I must learn how to build this, especially about a separated management network, without I think I can't build this to get HA. And them migrate from RHV. All the best Blaz

1 0

What to do when a selinux policy doesn't work?
by hw 14 Apr '21

14 Apr '21

Hi, I'm getting log file entries about ejabberd not being able to remove files that were uploaded by client through the file upload facility of XMPP. With the help of audit2allow, I have already created and installed some selinux modules to solve such issues, and still files can't be expired. So I used grep '/srv/data/ejabberd' /var/log/audit/audit.log | audit2allow -w to find out what might cause this, and the answer is: type=AVC msg=audit(1606302910.314:2905): avc: denied { open } for pid=18687 comm="8_dirty_io_sche" path="/srv/data/ejabberd/[...]" dev="md100" ino=166 scontext=system_u:system_r:ejabberd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 Was caused by: Unknown - would be allowed by active policy Possible mismatch between this policy and the one under which the audit message was generated. Possible mismatch between current in-memory boolean settings vs. permanent ones. I have reloaded the policies with 'semodule -R', and that didn't change anything. The files in question seem to have the correct attributes like: ls -laZ /srv/data/ejabberd/[...] -rw-r--r--. 1 ejabberd ejabberd system_u:object_r:var_t:s0 1384362 Nov 25 12:15 /srv/data/ejabberd/[...] Ejabberd is supposed to expire files when they are older than desired, and selinux prevents it. How can I solve this problem other than by disabling selinux or by deleting the files manually?

2 3

How to find out what's eating the bandwidth
by Frank Cox 14 Apr '21

14 Apr '21

Is there a program that will tell me what's eating the bandwidth on a lan? I'm thinking of something that would tell me that a.b.c.d is using so many mbps and a.b.c.e is using this many and so on. Or can just-another-computer-on-the-network actually see that sort of information? I don't know enough about the low level nuts and bolts of networking to know if it has that kind of access. I'm really just interested in volume of traffic per attached device rather than specific origin/destination information if that's easier to obtain. This way if something is eating the network I can find out what it is without having to start unplugging cables and so on to find out when it stops. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

5 6

How to organize your VMs
by Nicolas Kovacs 13 Apr '21

13 Apr '21

Hi, Up until now my main production server has been a "bare metal" installation of CentOS 7.9 hosting a variety of stuff. * DNS server with BIND for eight domains * IMAP mail server with Postfix and Dovecot for these domains, with about two dozen mail accounts * Webmail with Roundcube for all the mail accounts * Various WordPress-based websites and blogs * Several instances of the management software Dolibarr * The learning platform GEPI for our local school * One instance of OwnCloud for half a dozen users The hardware has no problems to deal with all that performance-wise. But managing all this in one big bulk has become a bit of a problem, since the LAMP-based PHP applications (WordPress, Dolibarr, GEPI, OwnCloud) increasingly cultivate their idiosyncrasies, so this feels more and more like herding cats. My main goal in migrating all this stuff preogressively to a series of neat VMs hosted on a KVM hypervisor is clarity and ease of maintenance. Now I wonder what could be a smart subdivision of all these VMs. After a bit of brainstorming, here's what I can come up with. 1. It would make sense to regroup all the applications, e. g. one VM for all the Dolibarr hostings, and then a different VM for WordPress, and a third VM for OwnCloud. 2. It's tempting to have a lot of small VMs for clarity's sake. On the other hand, it's maybe better to have one single VM for all the mail stuff. 3. Should I put all the Roundcube instances in a separate VM? Or does that go with the Postfix/Dovecot mail VM? 4. DNS is a bit of a special case, a bit of a catch 22. I would be tempted to setup an extra (bare-metal) machine for just handling this. Since BIND provides the DNS information about the hypervisor and the backup server themselves this becomes a bit of a chicken-and-egg situation. 5. Even if it's tempting to multiply VMs, let's not forget that I have to keep an eye on hardware resources, not to forget I have to pay for every extra IPv4 address. I'd be curious to have your input, since I'm fairly new to this sort of approach. Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

7 7

Resize a VM: any risk involved ?
by Nicolas Kovacs 11 Apr '21

11 Apr '21

Hi, I'm currently fiddling with KVM, Proxmox and various VMs. I setup a very basic VM with a manual (fdisk) partitioning scheme: one /boot partition, one swap partition, and one root partition, the latter being the last partition and thus expandable). I'm starting with a reduced disk size (6 GB in total) and a minimal installation. The idea behind this approach is that I can clone this minimal VM and then eventually expand it to fit my needs. Here's how I expand the available disk size. First I increase the virtual disk in the hypervisor. Then I fire up the VM and do the following: # yum install cloud-utils-growpart # lsblk # growpart -v /dev/sda 3 # resize2fs /dev/sda3 Now here's my question (finally): is there any risk involved in this sort of operation? Or can it be performed on a production system without having to worry about data loss? Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

8 10

"System error" when trying to logon via SSH to CentOS 8 joined to AD
by Konstantin Boyandin 11 Apr '21

11 Apr '21

Hello, I joined a CentOS 8 box to an AD, using the below document as general guide: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/ht… (section 14.1) A problem: after I tried to log on via SSH (as an AD user) to the box, the journalctl gets the below records: March 23 12:41:01 sandbox.lan sshd[2262]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.10.0.55 user=username March 23 12:41:01 sandbox.lan sshd[2262]: pam_sss(sshd:account): Access denied for user username: 4 (System error) March 23 12:41:01 sandbox.lan sshd[2262]: Failed password for username from 10.10.0.55 port 57610 ssh2 March 23 12:41:01 sandbox.lan sshd[2262]: fatal: Access denied for user username by PAM account configuration [preauth] Quick and dirty fix: When I comment a line in /etc/pam.d/password-auth (the one commented below), error goes away: ======= /etc/pam.d/password-auth below auth required pam_env.so auth required pam_faildelay.so delay=2000000 auth [default=1 ignore=ignore success=ok] pam_usertype.so isregular auth [default=1 ignore=ignore success=ok] pam_localuser.so auth sufficient pam_unix.so nullok try_first_pass auth [default=1 ignore=ignore success=ok] pam_usertype.so isregular auth sufficient pam_sss.so forward_pass auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_usertype.so issystem #account [default=bad success=ok user_unknown=ignore] pam_sss.so account required pam_permit.so password requisite pam_pwquality.so try_first_pass local_users_only password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_sss.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so -session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_sss.so ======= /etc/pam.d/password-auth above If I understand correctly, the commented line means "account is invalid by default; if found in SSSD, it's good; if not found - ignore and proceed". Commenting it is not a good idea, but I can't figure out what's wrong (according to first line from jornalctl authentication *is* passed normally). Additional data (AD domain in this example is EXAMPLE.COM) $ realm list realm list example.com type: kerberos realm-name: EXAMPLE.COM domain-name: example.com configured: kerberos-member server-software: active-directory client-software: sssd required-package: oddjob required-package: oddjob-mkhomedir required-package: sssd required-package: adcli required-package: samba-common-tools login-formats: %U login-policy: allow-realm-logins $ cat /etc/sssd/sssd.conf [sssd] domains = example.com config_file_version = 2 services = nss, pam, ssh debug_level = 9 [domain/example.com] ad_domain = example.com krb5_realm = EXAMPLE.COM realmd_tags = manages-system joined-with-adcli cache_credentials = True id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_sasl_authid = SANDBOX$ ldap_id_mapping = True use_fully_qualified_names = False ad_gpo_ignore_unreadable = True fallback_homedir = /home/%u access_provider = ad debug_level = 9 === end of /etc/sssd/sssd.conf $ cat /etc/krb5.conf includedir /etc/krb5.conf.d/ [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] ticket_lifetime = 24h renew_lifetime = 7d forwardable = true rdns = false pkinit_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt spake_preauth_groups = edwards25519 default_ccache_name = KEYRING:persistent:%{uid} default_realm = EXAMPLE.COM dns_lookup_realm = false dns_lookup_kdc = true [realms] EXAMPLE.COM = { kdc = dc.example.com kdc = bdc.example.com admin_server = dc.example.com } [domain_realm] .example.com = EXAMPLE.COM example.com = EXAMPLE.COM === end of /etc/krb5.conf GPO cache exists and is properly owned: ls -al /var/lib/sss/gpo_cache/example.com/ total 0 drwx------. 3 sssd sssd 22 Mar 22 14:52 . drwxr-xr-x. 3 sssd sssd 24 Mar 22 14:52 .. drwx------. 3 sssd sssd 52 Mar 22 14:52 Policies I would appreciate pieces of advice on how to fix authentication issue without commenting out the pam.d configuration file line. Thank you. Sincerely, Konstantin

5 6

CentOS-announce Digest, Vol 193, Issue 1
by centos-announce-request＠centos.org 11 Apr '21

11 Apr '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:1071 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2021:1072 Important CentOS 7 libldb Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 10 Apr 2021 17:09:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1071 Important CentOS 7 kernel Security Update Message-ID: <20210410170938.GA12184(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1071 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1071 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bfe191b783a11c70daf05fb86e81e2e36d80b7dec5eb2243fa223700ce330824 bpftool-3.10.0-1160.24.1.el7.x86_64.rpm 996ee55268c9971d07d38c3217e0fb813a202d1b838963b6db16217069d193db kernel-3.10.0-1160.24.1.el7.x86_64.rpm 33b524d6eec3fc82a17df2220b596193025c1faf20c5939c4271809681f95803 kernel-abi-whitelists-3.10.0-1160.24.1.el7.noarch.rpm 8764032443efee4dc7bfb0ee1a11749205880cd86b230ad538346b697120c5e7 kernel-debug-3.10.0-1160.24.1.el7.x86_64.rpm e2b80fc90e80e10166a785ab1c718ed12380055d955ab295c5363ad6405fe815 kernel-debug-devel-3.10.0-1160.24.1.el7.x86_64.rpm 52fc84afa30b500c79c2116a67a199c3eba6bbed1b7b171fc4fec483dc2c9f4c kernel-devel-3.10.0-1160.24.1.el7.x86_64.rpm cda402fcb291052201381d37c733af954d30e2e6e3f24e5b636ae67715e8c0d0 kernel-doc-3.10.0-1160.24.1.el7.noarch.rpm 2a69b561a8c58b7ed126929ce0f305827b54da8604e8f662568fc8ec96090f26 kernel-headers-3.10.0-1160.24.1.el7.x86_64.rpm 150b5e83d6acc1e5a6e22bee18216d6c7e0c581dca489071a61aab70eb9b93fb kernel-tools-3.10.0-1160.24.1.el7.x86_64.rpm 540ad2675ab792c4e347811b9c59c9dfa46be5932ed582b6b0748c7a27660973 kernel-tools-libs-3.10.0-1160.24.1.el7.x86_64.rpm 44904175313b13552ac962d42d456dc5d52bface994ef485f56c33f7f6971440 kernel-tools-libs-devel-3.10.0-1160.24.1.el7.x86_64.rpm 9124221e268619f8424d72980a7b256e0e00ba0639fcf0be1387712d145c7416 perf-3.10.0-1160.24.1.el7.x86_64.rpm 2308127baa502197469a17cef0a36622ccd5c528247af648e424284943e73572 python-perf-3.10.0-1160.24.1.el7.x86_64.rpm Source: 6fc0eaf2486a736d0793f6165e07c183bb0c8db2c858bd0dbefc1a2b23a0528b kernel-3.10.0-1160.24.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Sat, 10 Apr 2021 17:14:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1072 Important CentOS 7 libldb Security Update Message-ID: <20210410171431.GA12486(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1072 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1072 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 67364ca692de365478eee5a94879717c1fae2b7a4ba46d128ec04f0477c8c2b5 ldb-tools-1.5.4-2.el7.x86_64.rpm 36ad5a43df60889dd9c1134cb0e042317befa64f7293f44bc91271fddbbfc7e6 libldb-1.5.4-2.el7.i686.rpm cec370a7441899c3ffcd47f783a0437d9d649fd4a1252c6c317561f431e537c4 libldb-1.5.4-2.el7.x86_64.rpm 359852ce38e0555b23e78c945070ef67c0599138eac0c52de77a819e8fdebce9 libldb-devel-1.5.4-2.el7.i686.rpm 4d0e360eff9294623b345353bcf2cb4623c50a3e2bf31ace6ba05141150d85fd libldb-devel-1.5.4-2.el7.x86_64.rpm 29124a79cce7024da4f024131a66f80d78a70d73c5fafe6456617633e5b83560 pyldb-1.5.4-2.el7.i686.rpm 8043266fac97f3c92dfeaa8fad590469ad37ab990d86e9ece87829bdd9e0c8ae pyldb-1.5.4-2.el7.x86_64.rpm b3dbb953a4dc9b8b5ee95024d51d922488db5a0f0ec2ece9bf47d8d5cbbf24fa pyldb-devel-1.5.4-2.el7.i686.rpm 8f596e23215f48c31a9bb115c327431b21431ac93d7279b39dc998ca0bdfc6b8 pyldb-devel-1.5.4-2.el7.x86_64.rpm Source: e678f1a0df3c67bd8f6319dbe32013a311d6d797b51284ff7d5e254c2f7a1ff5 libldb-1.5.4-2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 193, Issue 1 ***********************************************

1 0

Can't upgrade sssd-*
by Warren Young 09 Apr '21

09 Apr '21

Is anyone else getting this on dnf upgrade? [MIRROR] sssd-proxy-2.3.0-9.el8.x86_64.rpm: Interrupted by header callback: Server reports Content-Length: 9937 but expected size is: 143980 [MIRROR] sssd-proxy-2.3.0-9.el8.x86_64.rpm: Interrupted by header callback: Server reports Content-Length: 9937 but expected size is: 143980 [MIRROR] sssd-proxy-2.3.0-9.el8.x86_64.rpm: Interrupted by header callback: Server reports Content-Length: 9937 but expected size is: 143980 [MIRROR] sssd-proxy-2.3.0-9.el8.x86_64.rpm: Interrupted by header callback: Server reports Content-Length: 9937 but expected size is: 143980 I can install almost everything else in the latest batch of updates but not any of sssd-* or anything directly dependent upon it. (Basically, gvfs, samba, and assorted libraries built atop sssd.)

5 10

Re: [CentOS] CentOS 8
by Valeri Galtsev 09 Apr '21

09 Apr '21

On 4/9/21 10:47 AM, Binet, Valere (NIH/NIA/IRP) [C] wrote: > The NIST and CIS baselines don't allow su, we have to use sudo on government computers. > Could you enlighten me on the rationale behind that restriction? As, as you already noticed, my [ancient, maybe] reasoning makes me arrive at an opposite conclusion. (but mine is pure security consideration with full trust vested into sysadmin, see below...) On a second guess: it is just for a separation of privileges, and accounting of who did what which sudo brings to the table... Right? Thanks in advance. Valeri > Valère Binet > > On 4/9/21, 11:39 AM, "Valeri Galtsev" <galtsev(a)kicp.uchicago.edu> wrote: > > > > On 4/9/21 10:31 AM, Johnny Hughes wrote: > > On 4/9/21 5:18 AM, Steve Clark via CentOS wrote: > >> On 4/8/21 3:50 PM, Tony Schreiner wrote: > >> > >> On Thu, Apr 8, 2021 at 2:33 PM Nicolas Kovacs > >> <info(a)microlinux.fr><mailto:info@microlinux.fr> wrote: > >> > >> > >> > >> Le 08/04/2021 à 18:58, Steve Clark via CentOS a écrit : > >> > >> > >> How do I allow root log in on GDM. > >> > >> > >> > >> tl;dr: you don't. > >> > >> Log in as a non-root user, and when you do need root, either open up a > >> terminal > >> and use 'su -' or (even better) setup your user by making your user a > >> member of > >> the wheel group and then use sudo. > >> > >> Logging in to a GUI as root is *BAD* practice. > >> > >> Cheers, > >> > >> Niki > >> > >> > >> > >> > >> > >> That said - you can do it, by clicking on "Not listed?" and typing root > >> into the user field. > >> > >> Yes I have done that and it immediately comes back to the login screen, > >> I know I am typing the > >> correct passwd, because if I botch the passwd I get a message to that > >> effect. > >> > >> > >> > > > > I would not recommend ever using the GUI as the root user .. it creates > > keys and items that are very dangerous. (gnome key rings, etc) > > > > +1000 > > > You should be able to 'su -' , then use visudo to create a sudo account > > for your user. You can even NOPASSWD your user for using sudo (you may > > or may not want to do that .. if someone gains access to your local > > account, they could then sudo with no passwd). > > > > In the past I even avoided sudo. It yet one more SUID-ed binary on your > machine. Which may add to your potential [local, in general] > vulnerability footprint. su, - making yourself root is more than enough > for regular sysadmin. > > > But, i have never, ever logged in as root on a GUI account directly on a > > machine that I cared about or was keeping live .. just advise, do with > > it what you will. > > > > +1 > > To OP: Do as you wish, and deal with consequences. > > Valeri > > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > > -- > ++++++++++++++++++++++++++++++++++++++++ > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > ++++++++++++++++++++++++++++++++++++++++ > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 7

CentOS 8
by Steve Clark 09 Apr '21

09 Apr '21

Hello, How do I allow root log in on GDM. The only people that have access are admins - so I am not worried about someone screwing things up. Thanks, -- Stephen Clark Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

5 6

Re: [CentOS] Automatic clean /tmp folder
by Gestió Servidors 09 Apr '21

09 Apr '21

>>> With these files I supposed that a file with more than 10 days in /tmp >>> would be automatically deleted, but today I have found some files/folders >>> with more than 10 days. >>> >>> What I have done wrong? >> >> The test is on access time, not modification. Have they been read in the last 10 days? > >And note that a GUI file manager might attempt to read every file in a >directory in order to determine its type and display the correct icon. I have check my /tmp folder with "find ./ -atime +10d" and there are some folders that appears as "accessed" more than 10 days ago... so I don't understand why automatic deletion system has not deleted them. Thanks.

2 1

Re: [CentOS] Booting from an ISO file in a XFS /boot
by Gestió Servidors 08 Apr '21

08 Apr '21

> Just guessing - loading the grub module for xfs is missing? Also, I have test adding "insmod xfs" in the "menuentry" section of my "iPXE" boot option, but result is the same...

1 0

Booting from an ISO file in a XFS /boot partition
by Gestió Servidors 08 Apr '21

08 Apr '21

Hi, I want to boot with a customized iPXE iso boot file from my GRUB2 menu. My system is running CentOS-7, with /boot formated as XFS filesystem. After copying my iPXE.iso into /boot, I have created a custom GRUB2 file in /etc/grub.d/40_custom like this: menuentry "iPXE" { set isofile="/ipxe.iso" loopback loop (hd0,1)$isofile linux16 (loop)/ipxe.lkrn } After regenerating grub2.cfg with "grub2-mkconfig -o /etc/grub2.cfg , I have rebooted my system, I have chosen "iPXE" entry, but system doesn't boot. I receive this error: error: file '/ipxe.iso' not found. Starting /ipxe.iso... error: no server is specified. Press any key to continue... However, in another similar system that runs /boot in EXT4 filesystem, that ISO file boots perfectly with the same configuration, so it seems the problem is with XFS. Could you help me? Thanks.

2 1

Re: [CentOS] almalinux?
by Jack Aboutboul 08 Apr '21

08 Apr '21

Thanks Rich for the kind words and Johnny for the support as well. Rich is correct about the non-profit foundation that was setup to facilitate community ownership and involvement. No one party owns or controls AlmaLinux. We don’t view anyone as "the other team” either, and we are glad, and here, to work together with everyone. The way we see it is that we are all family now as well and people have different needs. We are sure CentOS Stream is going to be great for those whose needs it fills and you really can’t beat the engineering team behind it. Time has already proven their prowess and some of them are close personal friends. That being said, we are trying our absolute hardest to make sure that we are the best community and distribution for people whose needs fall on the other side of the road. We are here to work together to build an ecosystem that is greater than the sum of its parts. I’ve spent, at this point, the majority of my life in the the EL extended family (including Fedora) and I can confidently say it is the most powerful platform for innovation, certainly of my generation. It has helped either directly or indirectly spawn or support probably most of today’s most leading technological advancements, everything from the the way we develop and deploy software, huge advancements in space exploration, particle physics research, AI, biological breakthroughs, art, finance and everything in between. It’s taken a collaborative, global effort to make that materialize and we are here to keep that going. There is no horizon we cannot explore, no sea we cannot cross and no peak we cannot summit. Together. Thanks, Jack

1 0

Binutils-2.30-98.el8.aarch64 broken on raspberry Pi4
by Maurice Smulders 07 Apr '21

07 Apr '21

The recent update of binutils/binutils-devel on aarch64 totally breaks gcc. When running gcc over a simple program with main - executing it results in a SIGSEGV, as the _start prologue calls a NULL pointer. I haven't figured out yet how to build a new build using git.centos.org, but I noticed that there is a -99 variant out there... -90 worked fine. What's the quickest way to get this back to being operational? The instructions to build a new package look to be a bit scattered - and how can I build a working one if any update picks up a borked one... Maurice

2 2

almalinux?
by mark 07 Apr '21

07 Apr '21

Anyone looked into almalinux? I was sort of waiting for rocky, but I see from over the weekend on slashdot that almalinux stable is released. mark

15 18

Automatic clean /tmp folder
by Gestió Servidors 07 Apr '21

07 Apr '21

Hello, I have found some files/folders in /tmp that I thought they had to be deleted because of age. My /usr/lib/tmpfiles.d/tmp.conf is: # Clear tmp directories separately, to make them easier to override v /tmp 1777 root root 10d v /var/tmp 1777 root root 30d # Exclude namespace mountpoints created with PrivateTmp=yes x /tmp/systemd-private-%b-* X /tmp/systemd-private-%b-*/tmp x /var/tmp/systemd-private-%b-* X /var/tmp/systemd-private-%b-*/tmp And my /usr/lib/systemd/system/systemd-tmpfiles-clean.timer is: [Unit] Description=Daily Cleanup of Temporary Directories Documentation=man:tmpfiles.d(5) man:systemd-tmpfiles(8) [Timer] OnBootSec=15min OnUnitActiveSec=1d With these files I supposed that a file with more than 10 days in /tmp would be automatically deleted, but today I have found some files/folders with more than 10 days. What I have done wrong? Thanks.

3 2

Prevent Anaconda from switching root and swap partition
by Nicolas Kovacs 07 Apr '21

07 Apr '21

Hi, More often than not, when installing CentOS, I choose manual partitioning and then apply the KISS principle, with a very simple partitioning scheme that looks more or less like this: * /boot partition: 500 MB, ext2 * swap partition: equivalent to amount of RAM * root partition: available space, ext4 Now when I do this, Anaconda insists on switching my swap and root partitions, so instead of this: * /dev/sda1: boot partition * /dev/sda2: swap partition * /dev/sda3: root partition ... I get this: * /dev/sda1: boot partition * /dev/sda2: root partition * /dev/sda3: swap partition Up until now this hasn't bothered me much. But for my needs right now it does, because I need my root partition to be at the end of the disk, so it can be expanded later on. Anyone knows how I can prevent Anaconda from switching my root and swap partitions? What I'm doing right now is switching to a text console with Ctrl-Alt-F5, manually partition using fdisk, switch back to Anaconda and then rescan the disk, but it's quite a PITA. These are the moments where I miss the good old bone-headed Slackware installer. :o) Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

6 5

Problem with chromium 89.0.4389.82
by H 06 Apr '21

06 Apr '21

I am running CentOS 7 and just updated chromium to version 89.0.4389.82 from EPEL. Although this version was released a few weeks ago, I had had the previous version of chromium (88.0.4324.150) running for several weeks but it crashed and the new version was then loaded. The older version worked fine but this new one refuses to load certain, ie most, websites that the old version did not have a problem with - it is jus stuck waiting for the domain in question. Further, the version of Firefox I also have installed loads all of them without any problems which suggests there is not a problem with those sites, the DNS resolution, nor with my system apart from chromium. Rpm does not allow me to downgrade to the previous version and cannot find the previous version. I remember having a similar problem loading websites at least a year ago which, if I remember correctly, was due to some bug in chromium. Does anyone have a similar problem?

7 21

RHEL/Centos 8 power off issue
by R C 05 Apr '21

05 Apr '21

Hello, I have a laptop, in a docking station. When running RHEL/Centos 7 I could shut it down and power it off by using 'shutdown -h now' In did a new install of Centos 8 (and also RHEL 8) and when I do a "shutdown -h now" it just reboots (behaves the same as if I'd do a reboot). Is that a known issue? thanks, Ron

3 5

CentOS 8 issues.
by Frank Ramaekers 05 Apr '21

05 Apr '21

Okay, I made a foolish mistake a few months ago and upgraded my perfectly running CentOS 7 to CentOS 8 and have been struggling ever since. Looking to upgade to AlmaLinux or Rocky Linux. I have a number of things I need to clean up on this system before attempting a upgrade. Does anyone have any idea as to how I can clean/straighten this out: grub2-common.noarch 1:2.02-90.el8_3.1 BaseOS grub2-pc-modules.noarch 1:2.02-90.el8_3.1 BaseOS grub2-tools-minimal.x86_64 1:2.02-90.el8_3.1 BaseOS grubby.x86_64 8.40-41.el8 BaseOS kernel-abi-whitelists.noarch 4.18.0-240.15.1.el8_3 BaseOS kernel-debug-devel.x86_64 4.18.0-240.15.1.el8_3 BaseOS kernel-devel.x86_64 4.18.0-240.15.1.el8_3 BaseOS libgdiplus.x86_64 6.0.4-3.el8 epel libgdiplus-devel.x86_64 6.0.5-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libpwquality.x86_64 1.4.0-9.el8 BaseOS lz4.x86_64 1.8.3-2.el8 BaseOS t1lib.x86_64 5.1.2-28.el8 epel Obsoleting Packages centos-linux-release.noarch 8.3-1.2011.el8 BaseOS centos-release.x86_64 8.2-2.2004.0.2.el8 @BaseOS centos-linux-release.noarch 8.3-1.2011.el8 BaseOS centos-repos.x86_64 8.2-2.2004.0.2.el8 @BaseOS libgdiplus0.x86_64 3.12-1 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 4.2-0.xamarin.2.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6-0.xamarin.2.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6.1-0.xamarin.3.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.2-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.4-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.5-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel I'm unable to update grub2/grubby: dnf update grubby Last metadata expiration check: 0:46:20 ago on Fri 02 Apr 2021 08:57:14 AM CDT. Error: Problem: The operation would result in removing the following protected packages: kernel (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) ..also for some reason, my kernel packages are being installed but the system is not booting to them: ls /boot/vmlin* /boot/vmlinuz-0-rescue-3e806a41305047db81c0e9f9b9a4e36c /boot/vmlinuz-4.18.0-240.10.1.el8_3.x86_64 /boot/vmlinuz-4.18.0-240.15.1.el8_3.x86_64 /boot/vmlinuz-3.10.0-1127.8.2.el7.x86_64 /boot/vmlinuz-4.18.0-240.1.1.el8_3.x86_64 .but it always boots to: uname -r 3.10.0-1127.8.2.el7.x86_64 I found on the internet that this "The operations would.." Message was because of a kernel file in a protected.d (either yum or dnf), but I checked and it doesn't exist. H E L P (TIA) -Frank

2 2

KVM vs. incremental remote backups
by Nicolas Kovacs 04 Apr '21

04 Apr '21

Hi, Up until recently I've hosted all my stuff (web & mail) on a handful of bare metal servers. Web applications (WordPress, OwnCloud, Dolibarr, GEPI, Roundcube) as well as mail and a few other things were hosted mostly on one big machine. Backups for this setup were done using Rsnapshot, a nifty utility that combines Rsync over SSH and hard links to make incremental backups. This approach has become problematic, for several reasons. First, web applications have increasingly specific and sometimes mutually exclusive requirements. And second, last month I had a server crash, and even though I had backups for everything, this meant quite some offline time. So I've opted to go for KVM-based solutions, with everything split up over a series of KVM guests. I wrapped my head around KVM, played around with it (a lot) and now I'm more or less ready to go. One detail is nagging me though: backups. Let's say I have one VM that handles only DNS (base installation + BIND) and one other VM that handles mail (base installation + Postfix + Dovecot). Under the hood that's two QCOW2 images stored in /var/lib/libvirt/images. With the old "bare metal" approach I could perform remote backups using Rsync, so only the difference between two backups would get transferred over the network. Now with KVM images it looks like every day I have to transfer the whole image again. As soon as some images have lots of data on them (say, 100 GB for a small OwnCloud server), this quickly becomes unmanageable. I googled around quite some time for "KVM backup best practices" and was a bit puzzled to find many folks asking the same question and no real answer, at least not without having to jump through burning loops. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

8 11

SELINUX blocks procmail from executing perl script without logging
by Radu Radutiu 04 Apr '21

04 Apr '21

Hi, I'm upgrading our request tracker from Centos 7 to 8 and found some unexpected SELINUX issues with procmail. Even after I create a policy which allows all denied operations, procmail is still not allowed to run a perl script (in my case rt-mailgate). I get the following error in the procmail log: "Can't open perl script "/opt/rt5/bin/rt-mailgate": Permission denied" but I have no denied audit entry in /var/log/audit/audit.log. If I set selinux to permissive, everything works fine. Any idea how to debug this? Best regards, Radu

4 4

Migrating to nvme and expand
by Jerry Geis 02 Apr '21

02 Apr '21

I have older SATA disks (2 of them size 2T) in a software raid config running CentOS 7. /dev/md127 is / and xfs /dev/sda2 is swap /dev/md126 is /home and xfs I desire to get a new (single) NVME 4T disk. What is the correct way to copy the software raid to a single "new" NVME disk ? then expand the /home file system to All the remaining space? Thanks, Jerry

3 3

Debuginfo for CentOS 8 Stream
by Matthew Saltzman 01 Apr '21

01 Apr '21

My CentOS 8 Stream installation is fully current. I did sudo debuginfo-install libgcc libstdc++ but the response I get is Could not find debuginfo package for the following installed packages: libgcc-8.4.1-1.el8.x86_64, libstdc++-8.4.1-1.el8.x86_64 Could not find debugsource package for the following installed packages: libgcc-8.4.1-1.el8.x86_64, libstdc++-8.4.1-1.el8.x86_64 If I do sudo dnf --enablerepo=debuginfo debuginfo-install libgcc libstdc++ I get CentOS Stream 8 - Debuginfo 35 kB/s | 7.6 kB 00:00 Errors during downloading metadata for repository 'debuginfo': - Status code: 404 for http://debuginfo.centos.org/8-stream/x86_64/repodata/repomd.xml (IP: 2620:52:3::12) Error: Failed to download metadata for repo 'debuginfo': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried What do I need to do to get these debuginfo packages? TIA. -- Matthew Saltzman School of Mathematical and Statistical Sciences Clemson University mjs AT clemson DOT edu

2 1

Centos/RHEL 8 gnome drive/usb icons
by R C 01 Apr '21

01 Apr '21

Hello, In Centos 7 (and RHEL 7) when one would connect a drive, or USB stick, an icon wold appear on the (gnome) desktop. Is that just something that was turned off (like anything else)? or is that not around anymore? If it is, how can it be turnd on again, that when logged in, and a drive is connected an icon shows up on the desktop again? thanks, Ron

1 0

Problem with mail server: stop flooding with fail2ban ?
by Nicolas Kovacs 31 Mar '21

31 Mar '21

Hi, My main mail server is running CentOS 7 with Postfix and Dovecot. Last week I was surprised to see that Postfix had some troubles on this machine, according to Icinga. I took a peek at the logs: # journalctl -p err Mar 28 04:37:02 sd-151768 postfix/smtpd[2786]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2788]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2790]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2792]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2794]: fatal: no SASL authentication mechanisms ... And in /var/log/maillog I found a tsunami of these: Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: warning: unknown[45.227.253.115]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: lost connection after AUTH from unknown[45.227.253.115] Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: disconnect from unknown[45.227.253.115] My first reaction was to manually ban the IP addresses / networks which caused the flood, using my firewall: # firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='45.227.253.0/24' reject" # firewall-cmd --reload I'm already using fail2ban in conjunction with firewalld to prevent brute force SSH attacks. Q: can I use it in a similar configuration to stop Postfix from getting flooded and brought down to its knees? Thanks & cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

3 3

nmcli
by Jerry Geis 31 Mar '21

31 Mar '21

under CentOS 7 - I use "alias" like eth1:0 for an alias network. Remove the file restart network - and back to normal. Now I am trying to us NetworkManager. I can 'add' the network fine. however - when I remove the network nmcli connection delete "Wired connection 2" ipv4.addr 192.168.1.58/22 it remove BOTH address and removes the "Wired connection 2" config file - and it reverts to DHCP not the other static address I had associated with "Wired connection 2". how do I just remove the single ADDRESS I added as an alias ? not the whole thing ? Thanks Jerry

3 3

Cups - weird interaction with the Internet
by Frank Cox 30 Mar '21

30 Mar '21

I have Centos 6 machine that I use for a cups printer server. (Yes, I know, but it's working fine for what it's for at the moment.) My ISP lost its connection to the network that printer server is on. While the outside Internet service was unavailable I sent a print job to the printer on that server and nothing printed even though the print server and the machine I sent the job from are on the same lan and are actually connected to the same router. The job appeared to be sent from the originating machine (but timed out, as shown below), and running lpq and lpq -a on the server showed "no entries" (because it timed out for some reason). I did this a few times and even rebooted the server and always the same thing. Job sent, "no entries" on the server. The my ISP's connection came back and blammo! All of a sudden I got a ton of sheets printed, everything that I had been trying to print for the previous ten minutes. Here is what appears to be a relevant portion of the log on the machine that was sending the job to the print server: Mar 30 13:05:06 mutt cupsd[1443]: Started backend /usr/lib/cups/backend/implicit class (PID 951459) Mar 30 13:05:06 mutt cupsd[1443]: REQUEST localhost - root "POST /admin/ HTTP/1. 1" 200 245 CUPS-Add-Modify-Printer successful-ok Mar 30 13:05:07 mutt cupsd[1443]: Job completed. Mar 30 13:06:02 mutt cupsd[1443]: Job submission timed out. So what happened here? Why would cups care if it has a connection to the outside world when it's just printing a job sent to it from the local lan? The connection between the machine originating the print job and the print server timed out even though all of the relevant traffic was going over the lan. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

qemu-kvm images of old Windows XP SP3
by David McGuffey 30 Mar '21

30 Mar '21

I have a Nikon slide scanner (very high quality) for which the software has not been updated. It last ran on WinXP SP3 and I was not able to get it to run under Win 7 and certainly not Win 10. Anyone know where I can obtain images of this old OS to run in CentOS 7 under kvm? Dave McGuffey

4 5

installing gnome icons
by R C 29 Mar '21

29 Mar '21

Hello, is there a way to install "icons / themes" so one gets all the gnome icons in /usr/share/icons/gnome ? thanks, Ron

1 0

CentOS-announce Digest, Vol 192, Issue 3
by centos-announce-request＠centos.org 27 Mar '21

27 Mar '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0992 Important CentOS 7 firefox Security Update (Johnny Hughes) 2. CESA-2021:0996 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 26 Mar 2021 18:11:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0992 Important CentOS 7 firefox Security Update Message-ID: <20210326181151.GA4954(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0992 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0992 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 67cc5f25f8e6a42f9536eb9dbe7e22e3fab22c55d87d37db23cb90136913067e firefox-78.9.0-1.el7.centos.i686.rpm 44600066daf3f3b57b9e269737e0b0dfcd410f3a524fbbd74aec3162d6f84f7c firefox-78.9.0-1.el7.centos.x86_64.rpm Source: bedd47ac6fc527b008c2ed93845707f248f2a8eae9ad4201508728e2b54283ad firefox-78.9.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 26 Mar 2021 18:12:50 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0996 Important CentOS 7 thunderbird Security Update Message-ID: <20210326181250.GA5084(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0996 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0996 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 412317b2522f388f60a8b9846d99020fa2c884e8557b0552ad09b4218e97803d thunderbird-78.9.0-3.el7.centos.x86_64.rpm Source: 9b3ff2329273f188e644f9e8fb481e12ff32397fac7f7f9b4a689aa99d84529b thunderbird-78.9.0-3.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 192, Issue 3 ***********************************************

1 0

Cloning bridged VMs : VirtualBox vs. KVM
by Nicolas Kovacs 26 Mar '21

26 Mar '21

Hi, (tl;dr : how can I clone a KVM-based bridged virtual machine and force a duplicate MAC address ?) Up until recently I've been using VirtualBox on my workstation to test various local setups. Usually I would setup a basic CentOS installation, and whenever I wanted to fiddle around, I would just clone that system and play around with it. So whenever I shot myself in the foot on that VM, I would simply erase it and start over again with a new clone. Think of it as a disposable VM. All my VMs under VirtualBox used bridged mode, so they were in the same network. And in my local proxy server, I have Dnsmasq that assigns static IP addresses and meaningful hostnames to these VMs. Here's what the corresponding lines in dnsmasq.conf look like: dhcp-host=08:00:27:00:00:01,suse-lp151,192.168.2.10 dhcp-host=08:00:27:00:00:02,suse-lp152,192.168.2.11 dhcp-host=08:00:27:00:00:03,ce7-server,192.168.2.12 dhcp-host=08:00:27:00:00:04,ce8-server,192.168.2.13 dhcp-host=08:00:27:00:00:05,ol7-server,192.168.2.14 dhcp-host=08:00:27:00:00:06,ol8-server,192.168.2.15 dhcp-host=08:00:27:00:00:07,rh7-server,192.168.2.16 dhcp-host=08:00:27:00:00:08,rh8-server,192.168.2.17 Over the last two weeks, I decided to migrate from VirtualBox to KVM even for local configurations and virtualized desktop configurations. So far, everything works nice... except one problem I can't seem to solve (yet). I'm using KVM in bridged mode, over a br0 bridge on my workstation. Like with VirtualBox, all my KVM virtual machines are part of my local 192.168.2.0/24 network. Unfortunately there is no way to simply make a perfect clone of a virtual machine using virt-manager. It insists on assigning my cloned VM a different MAC address. And whenever I want to manually create a NIC with the same MAC address as the original, Virtual Machine Manager tells me I can't do that. Same player shoot again. Now I know that is normally a good thing. You don't want MAC address conflicts in your network. But here's the thing: I don't intend to fire up both copies at once. As with VirtualBox, I only intend to use one VM at a time, for testing purposes. Now how can I "explain" this to Virtual Machine Manager without having to jump through burning loops ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

3 5

yum versionlock vs priority
by Stijn De Weirdt 25 Mar '21

25 Mar '21

hi all, i could use some guidance in debugging an issue on centos 7.9 where "suddenly" yum refuses to install a package. the package has multiple version in 2 repos: highest version is in a repo with prio=5, the other lower versions are in a repo without any priorities set. we however require a specific version, so we use the versionlock plugin to lock it. repoquery --show-duplicates properly shows all versions. however, yum refuses to install this locked version. it says it can find the package (trying to install the package by name, and also by full version). when we remove the prio setting in this one repo it all works just fine. the odd thing is: we discovered this after a reinstall of a single host a few days ago, where we have a lot of other hosts with same setup without issues. there seem to have no updates of yum or anything related, so i'm a bit puzzled where this sudden change could come from. obvioulsy, it will turn out something did change, but i have no idea how to start finding the culprit. is there any documnetaiton that describes the precedence between yum plugins? is versionlock plugin always supposed to win over prio setting? hints/tips welcome. many thanks, stijn

1 0

fresh install of centos 7 and curl accessing some sites
by sashk 23 Mar '21

23 Mar '21

Hi, I've run into an issue with fresh install of CentOS 7. I used CentOS-7-x86_64-NetInstall-2009.iso to bootup and one of the mirrors to finish the setup. When I first logged in, had to install something from gitlab and download failed with an error "curl: (35) TCP connection reset by peer" and while in verbose mode, curl reports that "NSS error -5961 (PR_CONNECT_RESET_ERROR)". When I go to existing CentOS system (same version, but installed much earlier), everything works as expected. I compared version of curl, nss and openssl -- they all match. I quiet puzzled and have no idea what's going on (except it seems that curl doesn't know about ECDHE-RSA-AES128-GCM-SHA256 cipher, in this case. What do I miss? ``` $ cat /etc/centos-release CentOS Linux release 7.9.2009 (Core) $ curl --version curl 7.29.0 (x86_64-redhat-linux-gnu) libcurl/7.29.0 NSS/3.53.1 zlib/1.2.7 libidn/1.28 libssh2/1.8.0 Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp Features: AsynchDNS GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz unix-sockets $ curl -v https://about.gitlab.com * About to connect() to about.gitlab.com port 443 (#0) * Trying 151.101.2.49... * Connected to about.gitlab.com (151.101.2.49) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * NSS error -5961 (PR_CONNECT_RESET_ERROR) * TCP connection reset by peer * Closing connection 0 curl: (35) TCP connection reset by peer $ curl -v --tlsv1.3 https://about.gitlab.com * About to connect() to about.gitlab.com port 443 (#0) * Trying 151.101.194.49... * Connected to about.gitlab.com (151.101.194.49) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * NSS error -5961 (PR_CONNECT_RESET_ERROR) * TCP connection reset by peer * Closing connection 0 curl: (35) TCP connection reset by peer $ curl -v --tlsv1.2 https://about.gitlab.com * About to connect() to about.gitlab.com port 443 (#0) * Trying 151.101.66.49... * Connected to about.gitlab.com (151.101.66.49) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * NSS error -5961 (PR_CONNECT_RESET_ERROR) * TCP connection reset by peer * Closing connection 0 curl: (35) TCP connection reset by peer $ openssl s_client -connect about.gitlab.com:443 CONNECTED(00000003) depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign verify return:1 depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018 verify return:1 depth=0 C = US, ST = California, L = San Francisco, O = "Fastly, Inc.", CN = c.sni.fastly.net verify return:1 --- Certificate chain 0 s:/C=US/ST=California/L=San Francisco/O=Fastly, Inc./CN=c.sni.fastly.net i:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign RSA OV SSL CA 2018 1 s:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign RSA OV SSL CA 2018 i:/OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign --- Server certificate -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgIMbzE9NHtvAS1nE+2MMA0GCSqGSIb3DQEBCwUAMFAxCzAJ ... -----END CERTIFICATE----- subject=/C=US/ST=California/L=San Francisco/O=Fastly, Inc./CN=c.sni.fastly.net issuer=/C=BE/O=GlobalSign nv-sa/CN=GlobalSign RSA OV SSL CA 2018 --- No client certificate CA names sent Peer signing digest: SHA256 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 3320 bytes and written 415 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: 2935F1EC82151ABC0F853E64BFC433414AF00ECCFABBE32B57B40F4A44C3E043 Session-ID-ctx: Master-Key: 563BE1A9EB4D42B2A7D3CA8744066A0B0CB520DC4CB8365B970D97E343461E4D46CBC1535A6EBAB9D89FBA9324987E17 Key-Arg : None Krb5 Principal: None PSK identity: None PSK identity hint: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - 1c 95 21 f7 8d df 11 44-3a f8 0d a0 81 2a e0 0c ..!....D:....*.. 0010 - b4 06 9d 90 03 a5 8e b7-3e d0 2e 4f c5 68 19 d0 ........>..O.h.. 0020 - d3 73 3b 0a d2 36 43 68-68 79 5d 68 b6 12 5c be .s;..6Chhy]h..\. 0030 - 29 d2 df 43 4a b2 ac dd-ec e5 b3 13 1b 22 7a f9 )..CJ........"z. 0040 - 50 40 b5 96 0d 2a c6 d9-17 1b 3c 2d 63 68 60 9f P@...*....<-ch`. 0050 - 84 10 08 81 6c bc 7b 2d-3f fc 48 6a 74 25 95 8a ....l.{-?.Hjt%.. 0060 - 0c 9b 82 4f ca 90 62 bd-8d e4 d5 58 f6 a9 d7 e6 ...O..b....X.... 0070 - 68 5c 47 81 d0 be a5 2e-f6 17 38 9b 0f a0 c1 5e h\G.......8....^ 0080 - 7e b5 71 30 19 30 34 63-47 2c bc 86 c6 48 ea 57 ~.q0.04cG,...H.W 0090 - f3 e5 8c 1d 97 77 00 31-94 9f 5c f3 41 8d 4e c1 .....w.1..\.A.N. Start Time: 1616504968 Timeout : 300 (sec) Verify return code: 0 (ok) --- ``` Thanks -Sashk

1 0

Centos 8 host -> VMware host
by Gregory P. Ennis 22 Mar '21

22 Mar '21

Everyone, I am trying to move some Centos 7 guests off of a Centos 8 host to a VMware host machine. qemu-img is a great tool in kvm to convert the files from *.qcow2 to *.vmdk very easily with the command : qemu-img convert -f qcow2 -O vmdk *.qcow2 *.vmdk I have been able to easily move these files to the 'usb vmware' system with scp from the Centos 8 host to the VmWare host. (Interesting in that I could not get the scp in the VMware host to work). Unfortunately, I have not figured out how to import the files into VMware virtual machine yet. I can easily create a new virtual machine with a CentOS8 *.iso file which tells me that the Vmware host is working. I may have been looking in the wrong places for documentation, but so fare I have not been impressed with VMware's documentation to import pre-existing kvm guests. Do any of you have any tutorial links as to how to import these *.vmdk files into VMware? Thanks for your help!!!! Greg Ennis

3 5

Festival for Centos 8
by Frank Cox 21 Mar '21

21 Mar '21

Johnny Hughes has compiled festival (the speech synthesis thing) for Centos 8. https://koji.mbox.centos.org/koji/buildinfo?buildID=2246 I could download it directly from that webpage, but I'm wondering what repo it's in. I don't see any repo listed there, and dnf search festival returns no results on my computer. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

2 1

Anyone running CentOS 8 on ML350p Gen8
by Strahil Nikolov 21 Mar '21

21 Mar '21

Hi All, Does anyone manage to run CentOS 8 (Stream or not) on ML350p Gen8 ?Did you experience any hiccups or did you have to run some workarounds to make it work ? Thanks in advance. Best Regards,Strahil Nikolov

1 0

XML parsing in shell script
by H 20 Mar '21

20 Mar '21

I have a challenge I am interested in getting feedback on. I will on a regular basis download a series of data files from the web where the data is in XML-format. The format is known in advance but is different between the various data files. I then plan to extract the various data items ("elements?") from each data file, do some light formatting and then save desired parts of each original data file as a formatted CSV-file for later importing into a database. As the plan is to use a bash shell script using curl to get the files, I have begun looking at external XML parsers that I can call from my script, perhaps specify which elements I want, get the data back in some kind of bash data structure and finally format and save as CSV-files. There seems to be a number of XML parsers available but perhaps someone on the list has a recommendation for which one might suit my needs best? I should add that I am running CentOS 7. Thank you.

4 9

Re: [CentOS] CentOS 7.3
by david 19 Mar '21

19 Mar '21

At 02:03 PM 3/18/2021, you wrote: > > At 11:47 AM 3/18/2021, you wrote: > >>On Thu, Mar 18, 2021 at 04:44:18PM -0000, Mark Woolfson wrote: > >> > I have a requirement to load CentOS 7.3 on to a server. I have the > >> > distribution on a bootable USB key. > >> > >>I know this comes up on the list quite often, but if you want security > >>updates for 7.3, you're going to end up with 7.9 + patches, so why are > >>you making your life difficult and installing such an old release? > >> > >>If a vendor is telling you that you have to run a particular version, > >>perhaps you should consider finding another vendor, the baseline 7.3 > >>has a lot of glaring vulnerabilities in it that are readily > >>exploitable. > >> > >>-- > >>Jonathan Billings <billings(a)negate.org> > >>_______________________________________________ > >>CentOS mailing list > >>CentOS(a)centos.org > >>https://lists.centos.org/mailman/listinfo/centos > > > > > > One reason might be that somewhere between 7.3 and 7.9, Centos ceased > > being bootable on Apple hardware. At least that failure occurred for > > me on two machines. > > > > David > > > >But he was talking about a server, something that Apple doesn't have for a >long time now. > >Simon Simon: I am talking about installing Centos on a MacMini, and a MacPro. Ubuntu works, Centos fails.

2 1

CentOS-announce Digest, Vol 192, Issue 2
by centos-announce-request＠centos.org 19 Mar '21

19 Mar '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2021:0869 CentOS 7 java-11-openjdk BugFix Update (Johnny Hughes) 2. CEBA-2021:0859 CentOS 7 libstoragemgmt BugFix Update (Johnny Hughes) 3. CEBA-2021:0858 CentOS 7 resource-agents BugFix Update (Johnny Hughes) 4. CEBA-2021:0855 CentOS 7 samba BugFix Update (Johnny Hughes) 5. CESA-2021:0851 Important CentOS 7 pki-core Security Update (Johnny Hughes) 6. CEBA-2021:0864 CentOS 7 glusterfs BugFix Update (Johnny Hughes) 7. CEEA-2021:0866 CentOS 7 open-vm-tools Enhancement Update (Johnny Hughes) 8. CEBA-2021:0868 CentOS 7 389-ds-base BugFix Update (Johnny Hughes) 9. CEBA-2021:0863 CentOS 7 lvm2 BugFix Update (Johnny Hughes) 10. CESA-2021:0808 Important CentOS 7 wpa_supplicant Security Update (Johnny Hughes) 11. CEBA-2021:0861 CentOS 7 slapi-nis BugFix Update (Johnny Hughes) 12. CEBA-2021:0854 CentOS 7 dmidecode BugFix Update (Johnny Hughes) 13. CESA-2021:0856 Important CentOS 7 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 18 Mar 2021 19:04:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0869 CentOS 7 java-11-openjdk BugFix Update Message-ID: <20210318190447.GA1394(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0869 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0869 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 322851c3e3042c4bb07d4bb68b94af8a35852bcac51ee3546cab4f53bc08392b java-11-openjdk-11.0.10.0.9-1.el7_9.i686.rpm 0768c02eab146e2f88cb0c3f41aee2d4f7b14dbdde274b3955f2155eb21cf944 java-11-openjdk-11.0.10.0.9-1.el7_9.x86_64.rpm 47f52ae65081a918aa822fb28261dafe5b707b012d7f07714f3beff7a4d49f45 java-11-openjdk-demo-11.0.10.0.9-1.el7_9.i686.rpm 6eb48672224acb21d0dbc83835af74ba98ee85d8e9d3991623af2bc0d57d6761 java-11-openjdk-demo-11.0.10.0.9-1.el7_9.x86_64.rpm 62730a490f70fb743015316019c09c1992ef54947750f054eaaf08ff9a387163 java-11-openjdk-devel-11.0.10.0.9-1.el7_9.i686.rpm 6b0ef069c7763a3ba0b61d3804a6919fa06467de6088cbbcda7c568dfc3309b0 java-11-openjdk-devel-11.0.10.0.9-1.el7_9.x86_64.rpm 0de12d2701881f7f8bd093302babcb112ad65af4943bd2e0d2bcb2884f12012d java-11-openjdk-headless-11.0.10.0.9-1.el7_9.i686.rpm 33ead8c29c4da7be1c35398bea14adbd1069eb04196df8a75ddffab71562e778 java-11-openjdk-headless-11.0.10.0.9-1.el7_9.x86_64.rpm e78824bc6d2ccd3f5942b851ce6c3323367ca0cfa615dc8c95158aee19c123fe java-11-openjdk-javadoc-11.0.10.0.9-1.el7_9.i686.rpm c77e3e9c9f9cc48a40bb188838bad833e1ea361ee0ba3424abed546f3945d701 java-11-openjdk-javadoc-11.0.10.0.9-1.el7_9.x86_64.rpm 115dde7a103bd42e620ddd732d36ef609984603c7103f803f2d1d8bac1bef6c9 java-11-openjdk-javadoc-zip-11.0.10.0.9-1.el7_9.i686.rpm 74c5d742dbaa75738c5c52f77416c65b88472bdd5eafe0c39fe63d1816522476 java-11-openjdk-javadoc-zip-11.0.10.0.9-1.el7_9.x86_64.rpm 7efe56d9bcad9ff6dc145a50baf931d2125888da4d984a84fd14a509862f3751 java-11-openjdk-jmods-11.0.10.0.9-1.el7_9.i686.rpm 58b23e3f8226650315902eba6ab9e2d2a81f816aa85d12cebf74af56a8504c16 java-11-openjdk-jmods-11.0.10.0.9-1.el7_9.x86_64.rpm fed1a25dff437173e5198969384d287e1c91872362d72445cda5bf8bc78201f5 java-11-openjdk-src-11.0.10.0.9-1.el7_9.i686.rpm 03861872c0b045970aa5d709fc96b48dc78114b5fe454d59dff316eb4753ec08 java-11-openjdk-src-11.0.10.0.9-1.el7_9.x86_64.rpm 50a577d62eed91a0ed5c686f85830b3c9252dff331c94841f673d8f19924250d java-11-openjdk-static-libs-11.0.10.0.9-1.el7_9.i686.rpm 01b83fa31f2e2ed972aa491423479df2e3e026e54668e3933d3b8b1803fe208b java-11-openjdk-static-libs-11.0.10.0.9-1.el7_9.x86_64.rpm Source: 332a4760c95b3023ffe95559c70e49bc30e02493bbacb943892d4ac3360c87d3 java-11-openjdk-11.0.10.0.9-1.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 18 Mar 2021 19:07:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0859 CentOS 7 libstoragemgmt BugFix Update Message-ID: <20210318190735.GA1719(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0859 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0859 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a2747777a7c3d1ef8019b71132c4a6eb6e5a8363b7b085140da95747f86c10af libstoragemgmt-1.8.1-2.el7_9.i686.rpm cc499773d5b8e2ef0f1585f8f54cda5bdf26720005e766f1ad4fa13b420b5f7a libstoragemgmt-1.8.1-2.el7_9.x86_64.rpm 5cdd011988bd5f786fd69bb2f85ee35ad72937f71784e3c1b95f7eaad14b4e71 libstoragemgmt-arcconf-plugin-1.8.1-2.el7_9.noarch.rpm 124996a9073a9ca8c3f0c37ffc32039a2cdb8a8eb5ae0de982fc65de11708c2c libstoragemgmt-devel-1.8.1-2.el7_9.i686.rpm 5e7c13e7ca9ceba3ee4769206f16397f62fe367684d347573b551f0ff2c8fd6d libstoragemgmt-devel-1.8.1-2.el7_9.x86_64.rpm 00ee764e0982d01d4e6bb4be901fe9d45e00ba81aada6ca3196a2f4c6a633f63 libstoragemgmt-hpsa-plugin-1.8.1-2.el7_9.noarch.rpm f8d5011b3c0674720d0b3957a9b73860210ff186379452e0225431f7619a349f libstoragemgmt-local-plugin-1.8.1-2.el7_9.noarch.rpm a2e16e3449f1d216456cce32c996514ef5ca92cbe8e4e01823b44edb2054748f libstoragemgmt-megaraid-plugin-1.8.1-2.el7_9.noarch.rpm 02f39c31f6b85c556cb651767e2383c2bac89bab5627ec18df62fd758577a348 libstoragemgmt-nfs-plugin-1.8.1-2.el7_9.noarch.rpm 22a2f90a540cd9a8330a6a4c96da322865926757812e4c0fdfea538a351e6f5a libstoragemgmt-nfs-plugin-clibs-1.8.1-2.el7_9.x86_64.rpm c3e8755371c95986d3d9b24ce2a85e7158f92f26160148570b73b95ab7cc341c libstoragemgmt-nstor-plugin-1.8.1-2.el7_9.noarch.rpm b18eeaf97c8e575f6c91cac0852221503010783f1b05f5c71ba0566e0569c473 libstoragemgmt-python-1.8.1-2.el7_9.noarch.rpm 7c5dcd2035ff3f4503debbaeecc9659798c5a4cc8626f9cb089451584f53fefc libstoragemgmt-python-clibs-1.8.1-2.el7_9.x86_64.rpm c4ae76d7c6a23e9345f969ab95acd6dee04900b227f0de925cc539ffeb60c2e7 libstoragemgmt-smis-plugin-1.8.1-2.el7_9.noarch.rpm 16cc8bcd9289899b14393eedecdb5d31b11e6a4d0c504f593037804de5878fce libstoragemgmt-targetd-plugin-1.8.1-2.el7_9.noarch.rpm 5eaba3f50062813592c389ebb343e248af7f03caee550d7cab3599bd3e6847d4 libstoragemgmt-udev-1.8.1-2.el7_9.x86_64.rpm Source: 0b297acba21f17cb8883d029d0dc219c3592e54f96a1a396b680e5c7015eb9d1 libstoragemgmt-1.8.1-2.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 18 Mar 2021 19:08:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0858 CentOS 7 resource-agents BugFix Update Message-ID: <20210318190825.GA1862(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0858 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0858 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b471f99ddcb78e386e77a4c7bf4a814b35fce51259b2f34d2daa9be4e09d6e98 resource-agents-4.1.1-61.el7_9.8.x86_64.rpm 980d1c1b856c308eb7fb1dc1f32d4d5d9828a5ac152037e4fcb99050874e9506 resource-agents-aliyun-4.1.1-61.el7_9.8.x86_64.rpm 259d7d947d78e3105849ae7a9929d030e772e103b7c652d987701a6a7d08f78d resource-agents-gcp-4.1.1-61.el7_9.8.x86_64.rpm Source: bad3024aef5c140e975908a34299a104ebbaf4b0926aee76f738bf3db6a79ee4 resource-agents-4.1.1-61.el7_9.8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 18 Mar 2021 19:13:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0855 CentOS 7 samba BugFix Update Message-ID: <20210318191324.GA2412(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0855 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0855 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 891dab92096ecafec7121bace38c5d802443f838cef21422beb6a451c0e0892d ctdb-4.10.16-13.el7_9.x86_64.rpm 030d403b90d83c7791ba3ea26cc659f709c596898fbfbd5d5f6e4b737a1293fa ctdb-tests-4.10.16-13.el7_9.x86_64.rpm baa1991d1849681ae5e74f8eeb2d213f69221f0c76cbe0018df32bd8f5ec1cb6 libsmbclient-4.10.16-13.el7_9.i686.rpm 25fa10449317511df1bc80c25c0cc1e7bede87a02929b5c0676ce9957353a8d9 libsmbclient-4.10.16-13.el7_9.x86_64.rpm 9ce18db0c7edcdf3961e7086a8438b700e7bb5f91d89a4bca5049729c6b02228 libsmbclient-devel-4.10.16-13.el7_9.i686.rpm 51eac9ff71e53c4175eb210efa8bffca4476cc9cd86104293d1ca7f714062a4e libsmbclient-devel-4.10.16-13.el7_9.x86_64.rpm bc63c8bfc930293da3e922e892186113cc420688e28a4ef936bbae8372240055 libwbclient-4.10.16-13.el7_9.i686.rpm 6fbcfd20152fd53029a53f360639d892f5a3daa9485dc2be94c27eed6cf2df64 libwbclient-4.10.16-13.el7_9.x86_64.rpm b534be5ce2fdd42fba4271d4bfc8275f8788cc729ebeb59920e58209b92fbf2e libwbclient-devel-4.10.16-13.el7_9.i686.rpm 8134bb4793d96d74f2db411ef17a6b86bcdf3847073ba2f4a8d8e89bc0d849c6 libwbclient-devel-4.10.16-13.el7_9.x86_64.rpm 19b2915a18191474719e65f30ae39ec3e32b24de808caf1144908d5905ec22db samba-4.10.16-13.el7_9.x86_64.rpm 92fe5e925dcbbf773a6a9a67725a97c2ee05ba99988b7c569d34ea5485b8e2ca samba-client-4.10.16-13.el7_9.x86_64.rpm 47b080e5a77e0a4e64120cb62ee1a56fde234cd979ec9e29cfa1488c409e4a88 samba-client-libs-4.10.16-13.el7_9.i686.rpm e5677937bcb75d7acb7f08f429bf9a0f982b23101f1c089b063117be1a84ccb1 samba-client-libs-4.10.16-13.el7_9.x86_64.rpm 6b1f4e0b7d2eac0f0c87900cfe0b6ceee898b0e7fff0ea37a318fb2be0b794ae samba-common-4.10.16-13.el7_9.noarch.rpm f87c2dd925c9d1309b2c16ad21f5c84cb1b2789d322aefb90bd02179185c3c04 samba-common-libs-4.10.16-13.el7_9.i686.rpm 07a39b4944cc8d1c6e61f1ad215c744f685fcf1cf0494ce979a7f28539da66d6 samba-common-libs-4.10.16-13.el7_9.x86_64.rpm 48d7e4811a291ee31fea33ff56b5e11082ae3d2a0bee442c7ee6b29212f72b3e samba-common-tools-4.10.16-13.el7_9.x86_64.rpm 5f7b92aac28013990bf6ff5dfda904b49259d332381f6fd3a71b635df396f7e1 samba-dc-4.10.16-13.el7_9.x86_64.rpm 0bc7a3258a261dafb1804614ca3e65cc202ca5a9607554f6524da136cb7c7ee6 samba-dc-libs-4.10.16-13.el7_9.x86_64.rpm c31f2747e3388b9d79c19442e86c3d4556be28b28509108ed5c494f7278e2a38 samba-devel-4.10.16-13.el7_9.i686.rpm f8d72ec48ec0e1f77e42f4f2a5c6dbeabe6e13e680771e35008c6865faee59f6 samba-devel-4.10.16-13.el7_9.x86_64.rpm a6776dea18957f42231f6c504897a29ef208e3c2b1f0ae2ca2b12d5f93fec583 samba-krb5-printing-4.10.16-13.el7_9.x86_64.rpm 6ab73b9be208b744fbb10e2b4b62ee6782dd5717e49b00d2c93994bf8c59e499 samba-libs-4.10.16-13.el7_9.i686.rpm 113bbd026677c12bbfb0f6803e303c762606f5f0c0dd003dac3e57e0a598d8c9 samba-libs-4.10.16-13.el7_9.x86_64.rpm ac054a6cb21fb80c8fa5d92b7cfe026640f5eb200f4e353fa4faf2ec2c2a0cf9 samba-pidl-4.10.16-13.el7_9.noarch.rpm 4752988d38c83850c74c74ec19ca5b7e1c79f8817544be00ab3fbc407c01355a samba-python-4.10.16-13.el7_9.i686.rpm 88ebbac297f77c53cd09a2f137fda3254023224d3da2a351b153770a4ada109f samba-python-4.10.16-13.el7_9.x86_64.rpm 809f841a5c44ddbe609d0827d1562e3515efe0f58ca9a5b5495789e578e2f7cf samba-python-test-4.10.16-13.el7_9.x86_64.rpm ef6b1d6ee31b3645952263c7292d83ff8479a7e1fa07238da2994be9d38f266b samba-test-4.10.16-13.el7_9.x86_64.rpm e67d6b84ad7acb2955ee72b7ee68979e8e001bb2a5d5cd54e752f6d78ee327d9 samba-test-libs-4.10.16-13.el7_9.i686.rpm cd38869a69886ec7014b529b0a5e2a8c6f5cb941544d083216de2f68d1db8abf samba-test-libs-4.10.16-13.el7_9.x86_64.rpm 410ce04c09d80f22a31d904271e83d196121736299e85e3eed33da09b5e99399 samba-vfs-glusterfs-4.10.16-13.el7_9.x86_64.rpm fee2103b6ba68f134bc8d706313e6d873b9ef2d803cbcb27234da184bd579eb1 samba-winbind-4.10.16-13.el7_9.x86_64.rpm 4e82685863559181e2fb19cd0ab050ce5c0cc72aee0aa23484c3c8bd3233a2ae samba-winbind-clients-4.10.16-13.el7_9.x86_64.rpm 5cadd6d1e44a896802e1df30ac84a484345f572bfaaa938544b43458dc6d80bd samba-winbind-krb5-locator-4.10.16-13.el7_9.x86_64.rpm 4a0c264159f020e612793ba279b544a49c67ce5644e4673d6a1b7e01986d8c98 samba-winbind-modules-4.10.16-13.el7_9.i686.rpm dfe0da66e34f229040771968adc12e53f3ef8575433da409ecd46a284495677e samba-winbind-modules-4.10.16-13.el7_9.x86_64.rpm Source: b088a5c6032151b45b682b6116ad99c0b8c1d583fde4bea8ed276010c2d095fd samba-4.10.16-13.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 18 Mar 2021 19:15:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0851 Important CentOS 7 pki-core Security Update Message-ID: <20210318191506.GA2661(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0851 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0851 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 821164fdb3e807716631102ab1778e4736d70fc13bfc34bebdebe03bcfc8510f pki-base-10.5.18-12.el7_9.noarch.rpm b97ca8437ca8ddd548433b4e5244b6b95c3c06fabebee6a67b64e0183ff83641 pki-base-java-10.5.18-12.el7_9.noarch.rpm c799c7a9b990e36dedf9785fd1b300a75ffe77c3f8e0e9074d4279a3d1d85cd7 pki-ca-10.5.18-12.el7_9.noarch.rpm 86754c49d208af8b291d53143af752244a68d88e0b4ccbd4efb6811386339d4c pki-javadoc-10.5.18-12.el7_9.noarch.rpm f5ed6de364527262c7c94c0a93639ae14e4a1137b79f84385dfd331a2a78b7f4 pki-kra-10.5.18-12.el7_9.noarch.rpm c2282a789d3df8501b91543727d2c0b76e144991275bca82e8c75c83afbe05d7 pki-server-10.5.18-12.el7_9.noarch.rpm d5f36384f01382169e35a68adc8feedd5a3f1bb1e38a45244efcf65320e8c633 pki-symkey-10.5.18-12.el7_9.x86_64.rpm 3518ffcaeb18d70ca1e7a98dfb39cdb789944a2791b29a154aa0a970188b0b33 pki-tools-10.5.18-12.el7_9.x86_64.rpm Source: 680812694e7d6b680289c73882db571ef4630c2d3cbb06f0c7a9bd5f54b0788e pki-core-10.5.18-12.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Thu, 18 Mar 2021 19:16:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0864 CentOS 7 glusterfs BugFix Update Message-ID: <20210318191614.GA2849(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0864 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0864 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bffa643f42fbf585a2b14d6c8bfb9d7ac804826cf20ad4d14bbdc3c996290615 glusterfs-6.0-49.1.el7.x86_64.rpm 83e83351bd9f8e17bb928673f2236a6035cf3a335789585a60a5d5068c2c8b23 glusterfs-api-6.0-49.1.el7.x86_64.rpm a9cdf7b1790648907c553d9bd3ea79400a2884d68c1cb870f1c3d0c0ef2af44d glusterfs-api-devel-6.0-49.1.el7.x86_64.rpm 9ff292253bb056d6533811af24502ff8e6b9f03d370e153698aff7cc1cb568b6 glusterfs-cli-6.0-49.1.el7.x86_64.rpm b126c7678a3e74f9a0dca6136f61a6fdd9471991c6ce22a72c08d8a8aa86f2e1 glusterfs-client-xlators-6.0-49.1.el7.x86_64.rpm 18f14d208b245267c6cc29b0b7074e0e030ee89e895659c26047d4186135bd94 glusterfs-cloudsync-plugins-6.0-49.1.el7.x86_64.rpm b83531fbbb21a612cb6bf9dd29ef1ba3afdeacd82de1d86b9949dac00d9edecb glusterfs-devel-6.0-49.1.el7.x86_64.rpm b843af350666656b6246dd355d5e90fac356a7c6b609118d69957fefcf9350b3 glusterfs-fuse-6.0-49.1.el7.x86_64.rpm 276df6b2e20398eb1acd7d2327f480491884ec450b49410d4cad1f010cba2e36 glusterfs-libs-6.0-49.1.el7.x86_64.rpm aa8159ebe427848a84e44ec1263eb6e8467bd09994185803163c9501ede167ad glusterfs-rdma-6.0-49.1.el7.x86_64.rpm 31a17cc7c43aa0aefd3039a43028118f0ea8b11195c232e1310e14547c07b77d python2-gluster-6.0-49.1.el7.x86_64.rpm Source: c0cbdabb0751f08dacaefe9b6119c121ed57ee16e5edaf031896b416b0986b8f glusterfs-6.0-49.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Thu, 18 Mar 2021 19:17:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2021:0866 CentOS 7 open-vm-tools Enhancement Update Message-ID: <20210318191705.GA2972(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2021:0866 Upstream details at : https://access.redhat.com/errata/RHEA-2021:0866 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 55be553fdb6b711c94e1f41369abf744fab2d8d3938dc7af09ee75d2249c22d5 open-vm-tools-11.0.5-3.el7_9.2.x86_64.rpm bede1b23de7ac03e2016ec4a2b4e29cd230b29837f427b14a2d8d9c06f385151 open-vm-tools-desktop-11.0.5-3.el7_9.2.x86_64.rpm 295238e79bcc60f7da37eb6e533e39f157bbafa94bbd0724124a24661cfe67f7 open-vm-tools-devel-11.0.5-3.el7_9.2.x86_64.rpm ffbadd5995846ef0be55a84dee1a668513bc703e46ee467cb84a4e847415cbe4 open-vm-tools-test-11.0.5-3.el7_9.2.x86_64.rpm Source: 29ef01d702ef3e0b7347d36cc485e26326d46b69b8a050de324d02e9c25dff17 open-vm-tools-11.0.5-3.el7_9.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 8 Date: Thu, 18 Mar 2021 19:18:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0868 CentOS 7 389-ds-base BugFix Update Message-ID: <20210318191802.GA3135(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0868 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0868 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a6a35e6ed55e101d96fd0ed48dd8267a7e8e10917230172a9de28a796d39490e 389-ds-base-1.3.10.2-10.el7_9.x86_64.rpm 7f2bca34d66595ea71392f8a9fe4f631679313d883bbc5d48d3d49e1ceb88d8b 389-ds-base-devel-1.3.10.2-10.el7_9.x86_64.rpm cf900656ad664e99d27fd815261164678b178f186d6fbadf440dbc7ab48fbbfe 389-ds-base-libs-1.3.10.2-10.el7_9.x86_64.rpm 37244afa6bebe0e93a5dcd0ef3ea1ac9a76f734e116ce8c087a5f791ad1136d3 389-ds-base-snmp-1.3.10.2-10.el7_9.x86_64.rpm Source: f8002ef8f194c2c50bc7c043887bce64c6c71640d9d2df4593b84b060967cd03 389-ds-base-1.3.10.2-10.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 9 Date: Thu, 18 Mar 2021 19:20:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0863 CentOS 7 lvm2 BugFix Update Message-ID: <20210318192044.GA3456(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0863 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0863 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 71f20a3e8a0bfe010564d4b6ff77d4b2647ba8383e62e64a557c131359fff889 cmirror-2.02.187-6.el7_9.4.x86_64.rpm 2ed2fcd8e79d8a62a374c054083792b657cb4d4668e39188deeb1ad3d72c948f device-mapper-1.02.170-6.el7_9.4.x86_64.rpm 88e796afa3934d3cefb09a6a575714bdc8aede8ee6a3c6b7be0bb59a130d5efd device-mapper-devel-1.02.170-6.el7_9.4.i686.rpm 39c70285432c56fe5dd79f0d155069d48956d10fcdcac838a4590c4a44b0b521 device-mapper-devel-1.02.170-6.el7_9.4.x86_64.rpm 96abc02747879aa68bd335dadad5f1e2d5ea64c519db929820194757e80af933 device-mapper-event-1.02.170-6.el7_9.4.x86_64.rpm 3feced91f7391352cfca0debae0c2aa43febbeee7d24929c75cd8d1d5a6b782e device-mapper-event-devel-1.02.170-6.el7_9.4.i686.rpm 0986dce8e3a59471cabc7ed457e23c3f0fdc81e3cbab4093eaa0426e2d5d26ef device-mapper-event-devel-1.02.170-6.el7_9.4.x86_64.rpm 12fb546150a8175c1aa95419a75e512972cb4c6c8eea1ade84e3319b1cfadaea device-mapper-event-libs-1.02.170-6.el7_9.4.i686.rpm 68e1429d8531b268902804fdf15f6eb8ffcadc2d36315c6090a3edb14eb2ab13 device-mapper-event-libs-1.02.170-6.el7_9.4.x86_64.rpm 85c0d75554f340d99942609a8488c0ad5b2e4ddc0e40c1192056ab8ab8395492 device-mapper-libs-1.02.170-6.el7_9.4.i686.rpm 40ebdc19d1f43fa0892059019bcdba4bd97351c6d146ef74e530e00dc4732c4c device-mapper-libs-1.02.170-6.el7_9.4.x86_64.rpm 9d34ca3784c0b623e48bc95dca03187a3404a69dd41baa19138db561f25be0f9 lvm2-2.02.187-6.el7_9.4.x86_64.rpm 14b4703549cb70dba8871814b76da451a63a067a0c48cbf78c90a94b528e8071 lvm2-cluster-2.02.187-6.el7_9.4.x86_64.rpm 75f984b4cdee8c054416401d8e1a4f00cb8d0fa104e54d12456f8884c58d7db5 lvm2-devel-2.02.187-6.el7_9.4.i686.rpm 06d86e24f67250850372882170efd7d12d041a90b28a72fb952a0f3d10141825 lvm2-devel-2.02.187-6.el7_9.4.x86_64.rpm bd945872965d8eeb4accc4fc087400341b7ecfd21918499fa21ff68810cb4194 lvm2-libs-2.02.187-6.el7_9.4.i686.rpm fdbf4bfe28188e74649c64f6a210cdce1aec37dafe82324cc4a7403e012e4c4f lvm2-libs-2.02.187-6.el7_9.4.x86_64.rpm a1e667c441a340c5ac1f0544c4a3d934fde4bf968688af42f5d33e773f092b5b lvm2-lockd-2.02.187-6.el7_9.4.x86_64.rpm bff2adfbc894a60df24055ab573b81c8128737c5d8b2530955f48d64f1c121b5 lvm2-python-boom-1.2-2.el7_9.4.noarch.rpm c3b133e5f06890f86c2c918c35177dfe1000500cfee3fc5ff248faab874324f1 lvm2-python-libs-2.02.187-6.el7_9.4.x86_64.rpm 76398082a1500552d12445932d6e5689e02b1ebdced0a38e4003a7fa56871ce1 lvm2-sysvinit-2.02.187-6.el7_9.4.x86_64.rpm Source: e524f3b8629d666bb07fca6db6c4cf645fade58651dee4ccbe851534259adf17 lvm2-2.02.187-6.el7_9.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 10 Date: Thu, 18 Mar 2021 19:21:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0808 Important CentOS 7 wpa_supplicant Security Update Message-ID: <20210318192105.GA3548(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0808 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0808 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 274694000767f81dd075fa9b55a09e5e143824fe75c13fb69a510889a95f7f25 wpa_supplicant-2.6-12.el7_9.2.x86_64.rpm Source: b261ffacff431bd6616224f98faed8eff963aae0e8a3232c5454ce41cfc4d77b wpa_supplicant-2.6-12.el7_9.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 11 Date: Thu, 18 Mar 2021 19:21:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0861 CentOS 7 slapi-nis BugFix Update Message-ID: <20210318192127.GA3656(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0861 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0861 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 406370b48821a02c6cd77913d2bbfb9b1c8a38d584ee789492dbdbda1796c482 slapi-nis-0.56.5-3.el7_9.x86_64.rpm Source: 0199a9051530c26a95f4b6454e9d3a2ad18715f01785cf9d51976a55fc3b3a9b slapi-nis-0.56.5-3.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 12 Date: Thu, 18 Mar 2021 19:21:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0854 CentOS 7 dmidecode BugFix Update Message-ID: <20210318192148.GA3787(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0854 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0854 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7b812c97766f36c2e477c31f7c5cfaabf34e7bfaf746d34a7f6971d6abc3e95c dmidecode-3.2-5.el7_9.1.x86_64.rpm Source: e98ba3314e7c5f7b5631d03bb72f3ce929cedaf3fd5386ef71cc432e2bf3c1f7 dmidecode-3.2-5.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 13 Date: Thu, 18 Mar 2021 23:24:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0856 Important CentOS 7 kernel Security Update Message-ID: <20210318232441.GA11547(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0856 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0856 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a6119606e76fc09a37585914c2063026064b1b979d9cffcf71712c2218b4c3c2 bpftool-3.10.0-1160.21.1.el7.x86_64.rpm b8c980b0d2eaf56affe69fde8c004c91dde7d83277578de4cfc8c06aaa322858 kernel-3.10.0-1160.21.1.el7.x86_64.rpm 62db43a91b2c1f3cd0407729f5c13f51ea098fea0aa9b90e2444d92166d1817d kernel-abi-whitelists-3.10.0-1160.21.1.el7.noarch.rpm b918eb715248bdb46d8f49387310a25030a9f4fe192d5ee0f69fabde9b84d42d kernel-debug-3.10.0-1160.21.1.el7.x86_64.rpm 3f77e8c91079e010fb161e28eaf613452e1c25d2d67b0367cb344f3141bf3cb9 kernel-debug-devel-3.10.0-1160.21.1.el7.x86_64.rpm 4abf0ebc2127e7a5b5dfb595fa447cb44f339ff023ce88bb0a97992bba4cd3a9 kernel-devel-3.10.0-1160.21.1.el7.x86_64.rpm 29feb5e5f9922979d66fabe2aac8bd7fdd18f1915777acf5b360bb7e5cdb0109 kernel-doc-3.10.0-1160.21.1.el7.noarch.rpm 21af3e26269599f29ef700b687a3e84539aa03ffc025f0794649d54f0a041582 kernel-headers-3.10.0-1160.21.1.el7.x86_64.rpm a133fe2fda391e345abde6444e57c6fbfb5ebcfe7720bc5b1ae1c3313bd38aed kernel-tools-3.10.0-1160.21.1.el7.x86_64.rpm 34255ef50bd9c16239a9a579c23a1bc1f046428a2aecf0fb06e04340b46af985 kernel-tools-libs-3.10.0-1160.21.1.el7.x86_64.rpm 6a47e214a36fc58ad9b00ab50073240c79076c8bd04a01dd01029f8ca43122bd kernel-tools-libs-devel-3.10.0-1160.21.1.el7.x86_64.rpm 2520a8d9459f82ba9401fb0a86ddb5154277672b55919b252535b199ef9fc3d4 perf-3.10.0-1160.21.1.el7.x86_64.rpm 9308a731a1aba4b9209f5cc4ee3e7f8bd57be5fa213ed219fd59941fb9b092cb python-perf-3.10.0-1160.21.1.el7.x86_64.rpm Source: 26eccba611785427726d6ecdb0a26f910a6ac05b29f3f6e3afd12f4d363a52f9 kernel-3.10.0-1160.21.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 192, Issue 2 ***********************************************

1 0

Centos 7 installer alert! message
by R C 19 Mar '21

19 Mar '21

When I install Centos 7, I see an "alert!" message flash by, too fast to read it. Is there a way to figure out what that message is/was (after install) or make it wait so I can actually read it? thanks, Ron

2 2

CentOS-7-x86_64-dvd-2009.iso is too big for DVD blanks
by Robert G. (Doc) Savage 18 Mar '21

18 Mar '21

I need help from someone experienced with the CentOS bug tracking system. I gotta say it is one of the most complicated and imposing front ends I've ever seen. Could anyone familiar with it please file a bug on my behalf? Particulars: "CentOS 7.9.2009 DVD iso image too large" ISO image: CentOS-7-x86_64-DVD-2009.iso 4.7GB raw CD image Wed Nov 4 05:37:25 2020 Burners: Both K3B and Brasero Media: Both DVD-R and DVD+R single-layer disks iso image: 4,712,300,544 bytes User Anthony F McInerney advises Wikipedia says DVD-R capacity: 4,707,319,808 bytes (max) I have tried burning this same iso image on two different machines: a CentOS 7.9 server and a Fedora 33 laptop. Same failure on both. We need to ask the developers to make a re-spin that's about 5MB smaller. And before someone suggests it, the 2010-vintage server I'm trying to install CentOS on does not support booting from a thumb drive, so that option is not available. Thanks, --Doc Savage Fairview Heights, IL

16 29

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss