- Discuss - lists.centos.org

World clocks on CentOS 8?
by Mathieu Baudier 27 Apr '21

27 Apr '21

Hello, I am using CentOS 8 Streams + GNOME, and I cannot find the world clocks anymore (in order to add various cities and their current time). It used to be under the calendar, when one clicks on the time on the top bar. I cannot launch 'gnome-clocks' from the command line, and package search (with EPEL enabled) doesn't provide any results : $ sudo dnf list gnome-clocks Error: No matching Packages to list $ sudo dnf list *clock* Error: No matching Packages to list Was this software removed? Thank you! Mathieu

1 0

Problem with RequiresMountsFor defined in a systemd service
by Carlos Lopez 24 Apr '21

24 Apr '21

Hi all, I have setup a systemd service that needs to mount a NFS share before starts. To accomplish this I have defined: RequiresMountsFor=/data/sysos As a dependency in [Unit] section but it doesn’t work. NFS share is defined in fstab with “defaults,noauto” options also .. What am I doing wrong? How can I debug this? Best regards, C. L. Martinez

4 3

password algorithm with authconfig vs authselect
by Leon Fauster 22 Apr '21

22 Apr '21

In the old days I could do # authconfig --passalgo=sha256 --update With EL8 comes authselect now (replacement of authconfig). authselect --passalgo=sha512 --update does not work and seems to be unsupported. # grep -R passalgo /usr/lib/python3.6/site-packages/authselect/ /usr/lib/python3.6/site-packages/authselect/authcompat_Options.py: Option.UnsupportedValued ("passalgo", _("<descrypt|bigcrypt|md5|sha256|sha512>")), How does the new "way" looks like (>=EL8), to switch the password algorithm? Any hints would be great ... -- Leon

2 2

C7 live CD does not like F33 ext partition
by Michael Hennebry 21 Apr '21

21 Apr '21

I've been trying to backup the root partition of my F33 installation. To that end, I'm running a C7 live CD. C7 won't mount the partition. tune2fs likes it, but [root@localhost mnt]# mount /dev/sda5 /mnt/a5 mount: wrong fs type, bad option, bad superblock on /dev/sda5, missing codepage or helper program, or other error In some cases useful info is found in syslog - try dmesg | tail or so. [root@localhost mnt]# dmesg | tail -n 15 [ 123.848185] SELinux: initialized (dev fuse, type fuse), uses genfs_contexts [ 123.856904] SELinux: initialized (dev fusectl, type fusectl), uses genfs_contexts [ 146.541654] Bluetooth: Core ver 2.16 [ 146.541737] NET: Registered protocol family 31 [ 146.541739] Bluetooth: HCI device and connection manager initialized [ 146.541750] Bluetooth: HCI socket layer initialized [ 146.541753] Bluetooth: L2CAP socket layer initialized [ 146.541760] Bluetooth: SCO socket layer initialized [ 146.548524] Bluetooth: BNEP (Ethernet Emulation) ver 1.3 [ 146.548529] Bluetooth: BNEP filters: protocol multicast [ 146.548540] Bluetooth: BNEP socket layer initialized [ 300.961319] JBD2: Unrecognised features on journal [ 300.961325] EXT4-fs (sda5): error loading journal ====== WHY? [ 361.930877] e1000e: enp0s25 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 361.931025] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s25: link becomes ready [root@localhost mnt]# mount -t ext2 /dev/sda5 /mnt/a5 mount: wrong fs type, bad option, bad superblock on /dev/sda5, missing codepage or helper program, or other error In some cases useful info is found in syslog - try dmesg | tail or so. No idea why the journal should be a problem. I used gnome to do the reboot. I can boot back into F33. How do I figure out what is going on? What can I do about it? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 3

devtoolset-10 -- built but not released?
by Kris Knigga (TT) 21 Apr '21

21 Apr '21

Hello, devtoolset-10 has been out for a while now and it looks like Centos packages for it have been built for a few months ( https://cbs.centos.org/koji/packages?tagID=2186) Will these be released soon? Or, perhaps is there anything I can volunteer to help with to get devtoolset-10 ready for release? Thank you, Kris

1 0

Code of Conduct
by Rich Bowen 20 Apr '21

20 Apr '21

You may have seen, a few days ago, that the Fedora project announced[1] a new Code of Conduct for their community. What you may not have known is that the CentOS project was involved in the crafting of that Code, so that we could also use it here. Yeah, I know, this is something we should have done a long time ago. But, you know what they say about the best time to plant a tree. (The best time to plant a tree is 20 years ago. The second best time is today.) As we continue to work to make all aspects of the CentOS Project more open and transparent, it is important that we create an open, welcoming community where all people, from all backgrounds, feel safe in their participation. This allows for a broader contributor pool, with more ideas and more community ownership of the resulting outcomes. And it's just the right thing to do. It is our intent to take the text of the Fedora CoC, and replace 'Fedora' with 'CentOS' everywhere, and propose it here. There will, of course, be other small changes to the text (Board vs Council, and so on) but not to the details of the Code itself, and how we intend to address reports. We're holding off on those edits so that our version doesn't drift from theirs, during their 2 week comment period. (Ends April 26th.) The document is derived from the Contributor Covenant, along with work that has been ongoing in the Fedora project for some time. Note also that the Contributor Covenant is also the source material for the CoC used by the Linux kernel project.[2] To that end, we encourage you to engage in the discussion around the Fedora CoC, because any changes made there will influence what we end up with here. And we also encourage discussion on centos-devel[3], for anything that you feel is specific to our community. --Rich, on behalf of the CentOS Board of Directors [1] https://communityblog.fedoraproject.org/policy-proposal-new-code-of-conduct/ [2] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… [3] https://lists.centos.org/mailman/listinfo/centos-devel

2 1

qemu-system-x86_64 in EL8
by Leon Fauster 19 Apr '21

19 Apr '21

I am planning to migrate a EL7 host to CS8 and noticed that an "application" runs via /usr/bin/qemu-system-x86_64 . Its seems its from EPEL. Stock C8 does not ship it. Any SIG repository with "qemu-system-x86_64"? Thanks, Leon

2 2

Re: [CentOS] include file
by Mark Woolfson 19 Apr '21

19 Apr '21

Hello, I am trying to build some drivers under CentOS 8.3 using scripts which work on CentOS 8.2. However, I am now missing the include file drm/drmP.h. Please can you tell me where I can find this file. Mark -- This email has been checked for viruses by AVG. https://www.avg.com

3 2

[c8-stream] podman CAP_PERFMON
by Łukasz Posadowski 19 Apr '21

19 Apr '21

Hi everyone. I decided to go container with Centos Stream, but I keep having errors about "unknow capability: CAP_PERFMON". I tried minikube, as well as standard podman and toolbox container creation: $ toolbox create --distro fedora --release 34 --container test3 $ toolbox create --distro rhel --release 8.3 --container test4 Containers are created, I can list them with toolbox and podman. $ toolbox enter --container test4 Error: failed to start container test4 $ podman start test4 Error: OCI runtime error: unable to start container "[longhash]": container =_linux_go:370: starting container process caused: unknow capability "CAP_PERFMON" thanks -- Łukasz Posadowski

1 1

CentOS-announce Digest, Vol 193, Issue 3
by centos-announce-request＠centos.org 17 Apr '21

17 Apr '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:1145 Important CentOS 7 nettle Security Update (Johnny Hughes) 2. CESA-2021:1135 Important CentOS 7 squid Security Update (Johnny Hughes) 3. CESA-2021:1192 Moderate CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 16 Apr 2021 20:23:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1145 Important CentOS 7 nettle Security Update Message-ID: <20210416202343.GA17564(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1145 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1145 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 11d3ad095a9838e98b8360b005aa07fa292cf9a71c4265bdf7c5adda14d463b3 nettle-2.7.1-9.el7_9.i686.rpm a8f566d686a31517c6e1f0981aa8a7650ec4c8d5cea01c3500ae51e847966eee nettle-2.7.1-9.el7_9.x86_64.rpm 764049c60a710f88bfffed5ba17cd51ea7bb2822f89390f24d0db26a94bb9220 nettle-devel-2.7.1-9.el7_9.i686.rpm 16a78c16f102931cd4ab634fc4177b99535edda6436721529c1f30e8ec464b9a nettle-devel-2.7.1-9.el7_9.x86_64.rpm Source: 1f330271bdc651bc0996f2cb86292e6afe40bd1afe6d94735a4ee8f2a1ba5cc8 nettle-2.7.1-9.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 16 Apr 2021 20:24:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1135 Important CentOS 7 squid Security Update Message-ID: <20210416202410.GA17687(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1135 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1135 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d71161880783b5c75a2c86c86ecd65a9b1c075f8f6ae57b1c22186db3a0e482b squid-3.5.20-17.el7_9.6.x86_64.rpm 05b86a6126cc85e6e214a09707b886a17df5b705f5cb7dab4c86228f6b2ad4d2 squid-migration-script-3.5.20-17.el7_9.6.x86_64.rpm 147f560470dacac3f89bc4c5cfaa3c9d32364fc302511f2bf1a13025a5875621 squid-sysvinit-3.5.20-17.el7_9.6.x86_64.rpm Source: 4ef86458d8b6ff61084da478e9df0d5dc69d8fdd2cdfcf9229ce84c82b8b6835 squid-3.5.20-17.el7_9.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 16 Apr 2021 20:25:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1192 Moderate CentOS 7 thunderbird Security Update Message-ID: <20210416202529.GA17844(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1192 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2021:1192 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 89b015eb0d04659b187b7cae8d68fd38cdfd6ebc31ef6a4cc9432e777fe5c452 thunderbird-78.9.1-1.el7.centos.x86_64.rpm Source: 0a6c601af8bd999761c7d0669ac00e0b7246d487efefdfd634ea869fdd665891 thunderbird-78.9.1-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 193, Issue 3 ***********************************************

1 0

enough free pages but high number of major page faults and page reclaims
by yf chu 17 Apr '21

17 Apr '21

We find that for some servers io disk read is very high. We also notice that there are many major page faults on those servers. But we checked the /proc/zoneinfo, there are enough free pages. Here is the content of /proc/zoneinfo: pages free 3913507 min 11333 low 14166 high 16999 scanned 0 spanned 16777216 present 16777216 managed 16507043 nr_free_pages 3913507 We also use "perf" to monitor the event of "mm_filemap_delete_from_page_cache". Here is the result of perf: 7fff81189dd0 __delete_from_page_cache ([kernel.kallsyms]) 7fff8119b771 __remove_mapping ([kernel.kallsyms]) 7fff8119c8e8 shrink_page_list ([kernel.kallsyms]) 7fff8119d45a shrink_inactive_list ([kernel.kallsyms]) 7fff8119df55 shrink_lruvec ([kernel.kallsyms]) 7fff8119e376 shrink_zone ([kernel.kallsyms]) 7fff8119e880 do_try_to_free_pages ([kernel.kallsyms]) 7fff8119ed6c try_to_free_pages ([kernel.kallsyms]) 7fff816ac515 __alloc_pages_slowpath ([kernel.kallsyms]) 7fff811932d5 __alloc_pages_nodemask ([kernel.kallsyms]) 7fff811d7a68 alloc_pages_current ([kernel.kallsyms]) 7fff811e27f5 new_slab ([kernel.kallsyms]) 7fff811e40fc ___slab_alloc ([kernel.kallsyms]) 7fff816adaf1 __slab_alloc ([kernel.kallsyms]) 7fff811e609b kmem_cache_alloc ([kernel.kallsyms]) 7fff812778ed proc_alloc_inode ([kernel.kallsyms]) 7fff812234d0 alloc_inode ([kernel.kallsyms]) 7fff81225771 new_inode_pseudo ([kernel.kallsyms]) 7fff812257d9 new_inode ([kernel.kallsyms]) 7fff8127bc1e proc_pid_make_inode ([kernel.kallsyms]) 7fff812800e5 proc_fd_instantiate ([kernel.kallsyms]) 7fff8127c54c proc_fill_cache ([kernel.kallsyms]) 7fff812802dd proc_readfd_common ([kernel.kallsyms]) 7fff812803f5 proc_readfd ([kernel.kallsyms]) 7fff8121c246 vfs_readdir ([kernel.kallsyms]) 7fff8121c665 sys_getdents ([kernel.kallsyms]) 7fff816c2715 system_call_fastpath ([kernel.kallsyms]) bab95 __getdents64 (/usr/lib64/libc-2.17.so) It seems that os is carrying on page reclaim. But I don't know since there are enough free pages, why could page reclaim ocurr?

1 0

Proxmox Backup Server equivalent for the RHEL/CentOS world ?
by Nicolas Kovacs 17 Apr '21

17 Apr '21

Hi, I've just spent a couple weeks experimenting extensively with Proxmox VE (Virtual Environment) and Proxmox PBS (Backup Server) on a couple of sandbox servers. I must say I'm impressed, especially of the elegance and simplicity of the backup solution. Running virtual machines can be backed up efficiently, combining deduplication and incremental backups. A bit like Rsnapshot, only for whole VM images. Both PVE and PBS are based on Debian, and now I wonder if RHEL-based systems have something similar to offer. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

9 15

CentOS-announce Digest, Vol 193, Issue 2
by centos-announce-request＠centos.org 15 Apr '21

15 Apr '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0742 Important CentOS 7 screen Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 14 Apr 2021 13:29:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0742 Important CentOS 7 screen Security Update Message-ID: <20210414132909.GA20207(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0742 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0742 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 30b844415ba647e65a9810574f3ded5e1fc1edd02e28f73cc44ee2c35e97baea screen-4.1.0-0.27.20120314git3c2946.el7_9.x86_64.rpm Source: 8110b0f5f7bc0070b8cd656a7965d0f7d2f7c69102bbd80dbfc966ea718f96d8 screen-4.1.0-0.27.20120314git3c2946.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 193, Issue 2 ***********************************************

1 0

rsync over ssh stalls after completing the job
by Frank Cox 15 Apr '21

15 Apr '21

Here's a weird one. I have two Centos 8 machines that use rsync-over-ssh to back up files between each other. (Each machine acts as a backup machine for the other one.) There's are nightly cronjobs that do the backing up, the commands look like this: rsync -av --delete /home/mydirectory jeff:/home/mydirectorybackup That command works fine when it's run through the cronjob. When I try to run a rsync command between mutt and jeff from the commandline, that's where the problem starts. It worked a few days ago but now when I log into jeff and do a rsync to or from mutt it works fine. When I log into mutt and do a rsync to or from jeff it works and does the job, but then it seems to stall afterward and I have to hit ctrl-c to get my cursor back. Here's a test run so you can see what happens. [me@mutt temp]$ rsync -avv ../temp/ jeff:temp opening connection using: ssh jeff rsync --server -vvlogDtpre.iLsfxC . temp (7 args) sending incremental file list delta-transmission enabled bookmarks.html is uptodate ./ abc total: matches=0 hash_hits=0 false_alarms=0 data=26321 ^Crsync error: received SIGINT, SIGTERM, or SIGHUP (code 20) at rsync.c(644) [sender=3.1.3] A file named bookmarks.html existed in both directories so it wasn't changed, and a new file abc was copied to the backup directory. Then my ctrl-c stopped the job and brought the cursor back after it stalled. scp works fine to copy files either way when logged into either machine and, again, my backup-this-to-that cronjobs that run rsync seem to be working fine as well. I just discovered this last night when I went to rsync some files manually between these machines. The last time I did that was at least a few days ago and it worked fine then. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

6 18

NAME:WRECK
by mark 14 Apr '21

14 Apr '21

I'm reading a story linked to from slashdot, and I see FreeBSD is vulnerable. Has anyone looked at CentOS? mark

2 1

Missing /etc/ld.so.conf.d/kernel-3.10.0-1127.19.1.el7.x86_64.conf
by Kenneth Porter 14 Apr '21

14 Apr '21

I'm yum updating some CentOS 7 systems today and got this error. Two systems (so far) seem to have rebooted fine. Should I worry? error: file /etc/ld.so.conf.d/kernel-3.10.0-1127.19.1.el7.x86_64.conf: No such file or directory

4 7

Re: [CentOS] Proxmox Backup Server equivalent for the RHEL/CentOS world ?
by Blaž Bogataj 14 Apr '21

14 Apr '21

Hello As I said a couple of weeks ago in response to Niki I have been using ProxMox almost from the beginning ;). No "enterprise" version. And backup is one of the reasons for that. NFS on NAS as a backup target is really nice, even one time quicker than backup to local storage (NAS with 10gb FC). Also fiddling with RHV. But there is no "free" backup solution. I am trying with Bacchus but no way to schedule backup. Single backup OK, schedule backup no go. So now use vProtect, for 5 years not a lot of $. But I hope to find some instructions on how to build Prox and use it as software defined storage. I must learn how to build this, especially about a separated management network, without I think I can't build this to get HA. And them migrate from RHV. All the best Blaz

1 0

What to do when a selinux policy doesn't work?
by hw 14 Apr '21

14 Apr '21

Hi, I'm getting log file entries about ejabberd not being able to remove files that were uploaded by client through the file upload facility of XMPP. With the help of audit2allow, I have already created and installed some selinux modules to solve such issues, and still files can't be expired. So I used grep '/srv/data/ejabberd' /var/log/audit/audit.log | audit2allow -w to find out what might cause this, and the answer is: type=AVC msg=audit(1606302910.314:2905): avc: denied { open } for pid=18687 comm="8_dirty_io_sche" path="/srv/data/ejabberd/[...]" dev="md100" ino=166 scontext=system_u:system_r:ejabberd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 Was caused by: Unknown - would be allowed by active policy Possible mismatch between this policy and the one under which the audit message was generated. Possible mismatch between current in-memory boolean settings vs. permanent ones. I have reloaded the policies with 'semodule -R', and that didn't change anything. The files in question seem to have the correct attributes like: ls -laZ /srv/data/ejabberd/[...] -rw-r--r--. 1 ejabberd ejabberd system_u:object_r:var_t:s0 1384362 Nov 25 12:15 /srv/data/ejabberd/[...] Ejabberd is supposed to expire files when they are older than desired, and selinux prevents it. How can I solve this problem other than by disabling selinux or by deleting the files manually?

2 3

How to find out what's eating the bandwidth
by Frank Cox 14 Apr '21

14 Apr '21

Is there a program that will tell me what's eating the bandwidth on a lan? I'm thinking of something that would tell me that a.b.c.d is using so many mbps and a.b.c.e is using this many and so on. Or can just-another-computer-on-the-network actually see that sort of information? I don't know enough about the low level nuts and bolts of networking to know if it has that kind of access. I'm really just interested in volume of traffic per attached device rather than specific origin/destination information if that's easier to obtain. This way if something is eating the network I can find out what it is without having to start unplugging cables and so on to find out when it stops. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

5 6

How to organize your VMs
by Nicolas Kovacs 14 Apr '21

14 Apr '21

Hi, Up until now my main production server has been a "bare metal" installation of CentOS 7.9 hosting a variety of stuff. * DNS server with BIND for eight domains * IMAP mail server with Postfix and Dovecot for these domains, with about two dozen mail accounts * Webmail with Roundcube for all the mail accounts * Various WordPress-based websites and blogs * Several instances of the management software Dolibarr * The learning platform GEPI for our local school * One instance of OwnCloud for half a dozen users The hardware has no problems to deal with all that performance-wise. But managing all this in one big bulk has become a bit of a problem, since the LAMP-based PHP applications (WordPress, Dolibarr, GEPI, OwnCloud) increasingly cultivate their idiosyncrasies, so this feels more and more like herding cats. My main goal in migrating all this stuff preogressively to a series of neat VMs hosted on a KVM hypervisor is clarity and ease of maintenance. Now I wonder what could be a smart subdivision of all these VMs. After a bit of brainstorming, here's what I can come up with. 1. It would make sense to regroup all the applications, e. g. one VM for all the Dolibarr hostings, and then a different VM for WordPress, and a third VM for OwnCloud. 2. It's tempting to have a lot of small VMs for clarity's sake. On the other hand, it's maybe better to have one single VM for all the mail stuff. 3. Should I put all the Roundcube instances in a separate VM? Or does that go with the Postfix/Dovecot mail VM? 4. DNS is a bit of a special case, a bit of a catch 22. I would be tempted to setup an extra (bare-metal) machine for just handling this. Since BIND provides the DNS information about the hypervisor and the backup server themselves this becomes a bit of a chicken-and-egg situation. 5. Even if it's tempting to multiply VMs, let's not forget that I have to keep an eye on hardware resources, not to forget I have to pay for every extra IPv4 address. I'd be curious to have your input, since I'm fairly new to this sort of approach. Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

7 7

Resize a VM: any risk involved ?
by Nicolas Kovacs 11 Apr '21

11 Apr '21

Hi, I'm currently fiddling with KVM, Proxmox and various VMs. I setup a very basic VM with a manual (fdisk) partitioning scheme: one /boot partition, one swap partition, and one root partition, the latter being the last partition and thus expandable). I'm starting with a reduced disk size (6 GB in total) and a minimal installation. The idea behind this approach is that I can clone this minimal VM and then eventually expand it to fit my needs. Here's how I expand the available disk size. First I increase the virtual disk in the hypervisor. Then I fire up the VM and do the following: # yum install cloud-utils-growpart # lsblk # growpart -v /dev/sda 3 # resize2fs /dev/sda3 Now here's my question (finally): is there any risk involved in this sort of operation? Or can it be performed on a production system without having to worry about data loss? Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

8 10

"System error" when trying to logon via SSH to CentOS 8 joined to AD
by Konstantin Boyandin 11 Apr '21

11 Apr '21

Hello, I joined a CentOS 8 box to an AD, using the below document as general guide: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/ht… (section 14.1) A problem: after I tried to log on via SSH (as an AD user) to the box, the journalctl gets the below records: March 23 12:41:01 sandbox.lan sshd[2262]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.10.0.55 user=username March 23 12:41:01 sandbox.lan sshd[2262]: pam_sss(sshd:account): Access denied for user username: 4 (System error) March 23 12:41:01 sandbox.lan sshd[2262]: Failed password for username from 10.10.0.55 port 57610 ssh2 March 23 12:41:01 sandbox.lan sshd[2262]: fatal: Access denied for user username by PAM account configuration [preauth] Quick and dirty fix: When I comment a line in /etc/pam.d/password-auth (the one commented below), error goes away: ======= /etc/pam.d/password-auth below auth required pam_env.so auth required pam_faildelay.so delay=2000000 auth [default=1 ignore=ignore success=ok] pam_usertype.so isregular auth [default=1 ignore=ignore success=ok] pam_localuser.so auth sufficient pam_unix.so nullok try_first_pass auth [default=1 ignore=ignore success=ok] pam_usertype.so isregular auth sufficient pam_sss.so forward_pass auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_usertype.so issystem #account [default=bad success=ok user_unknown=ignore] pam_sss.so account required pam_permit.so password requisite pam_pwquality.so try_first_pass local_users_only password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_sss.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so -session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_sss.so ======= /etc/pam.d/password-auth above If I understand correctly, the commented line means "account is invalid by default; if found in SSSD, it's good; if not found - ignore and proceed". Commenting it is not a good idea, but I can't figure out what's wrong (according to first line from jornalctl authentication *is* passed normally). Additional data (AD domain in this example is EXAMPLE.COM) $ realm list realm list example.com type: kerberos realm-name: EXAMPLE.COM domain-name: example.com configured: kerberos-member server-software: active-directory client-software: sssd required-package: oddjob required-package: oddjob-mkhomedir required-package: sssd required-package: adcli required-package: samba-common-tools login-formats: %U login-policy: allow-realm-logins $ cat /etc/sssd/sssd.conf [sssd] domains = example.com config_file_version = 2 services = nss, pam, ssh debug_level = 9 [domain/example.com] ad_domain = example.com krb5_realm = EXAMPLE.COM realmd_tags = manages-system joined-with-adcli cache_credentials = True id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_sasl_authid = SANDBOX$ ldap_id_mapping = True use_fully_qualified_names = False ad_gpo_ignore_unreadable = True fallback_homedir = /home/%u access_provider = ad debug_level = 9 === end of /etc/sssd/sssd.conf $ cat /etc/krb5.conf includedir /etc/krb5.conf.d/ [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] ticket_lifetime = 24h renew_lifetime = 7d forwardable = true rdns = false pkinit_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt spake_preauth_groups = edwards25519 default_ccache_name = KEYRING:persistent:%{uid} default_realm = EXAMPLE.COM dns_lookup_realm = false dns_lookup_kdc = true [realms] EXAMPLE.COM = { kdc = dc.example.com kdc = bdc.example.com admin_server = dc.example.com } [domain_realm] .example.com = EXAMPLE.COM example.com = EXAMPLE.COM === end of /etc/krb5.conf GPO cache exists and is properly owned: ls -al /var/lib/sss/gpo_cache/example.com/ total 0 drwx------. 3 sssd sssd 22 Mar 22 14:52 . drwxr-xr-x. 3 sssd sssd 24 Mar 22 14:52 .. drwx------. 3 sssd sssd 52 Mar 22 14:52 Policies I would appreciate pieces of advice on how to fix authentication issue without commenting out the pam.d configuration file line. Thank you. Sincerely, Konstantin

5 6

CentOS-announce Digest, Vol 193, Issue 1
by centos-announce-request＠centos.org 11 Apr '21

11 Apr '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:1071 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2021:1072 Important CentOS 7 libldb Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 10 Apr 2021 17:09:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1071 Important CentOS 7 kernel Security Update Message-ID: <20210410170938.GA12184(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1071 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1071 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bfe191b783a11c70daf05fb86e81e2e36d80b7dec5eb2243fa223700ce330824 bpftool-3.10.0-1160.24.1.el7.x86_64.rpm 996ee55268c9971d07d38c3217e0fb813a202d1b838963b6db16217069d193db kernel-3.10.0-1160.24.1.el7.x86_64.rpm 33b524d6eec3fc82a17df2220b596193025c1faf20c5939c4271809681f95803 kernel-abi-whitelists-3.10.0-1160.24.1.el7.noarch.rpm 8764032443efee4dc7bfb0ee1a11749205880cd86b230ad538346b697120c5e7 kernel-debug-3.10.0-1160.24.1.el7.x86_64.rpm e2b80fc90e80e10166a785ab1c718ed12380055d955ab295c5363ad6405fe815 kernel-debug-devel-3.10.0-1160.24.1.el7.x86_64.rpm 52fc84afa30b500c79c2116a67a199c3eba6bbed1b7b171fc4fec483dc2c9f4c kernel-devel-3.10.0-1160.24.1.el7.x86_64.rpm cda402fcb291052201381d37c733af954d30e2e6e3f24e5b636ae67715e8c0d0 kernel-doc-3.10.0-1160.24.1.el7.noarch.rpm 2a69b561a8c58b7ed126929ce0f305827b54da8604e8f662568fc8ec96090f26 kernel-headers-3.10.0-1160.24.1.el7.x86_64.rpm 150b5e83d6acc1e5a6e22bee18216d6c7e0c581dca489071a61aab70eb9b93fb kernel-tools-3.10.0-1160.24.1.el7.x86_64.rpm 540ad2675ab792c4e347811b9c59c9dfa46be5932ed582b6b0748c7a27660973 kernel-tools-libs-3.10.0-1160.24.1.el7.x86_64.rpm 44904175313b13552ac962d42d456dc5d52bface994ef485f56c33f7f6971440 kernel-tools-libs-devel-3.10.0-1160.24.1.el7.x86_64.rpm 9124221e268619f8424d72980a7b256e0e00ba0639fcf0be1387712d145c7416 perf-3.10.0-1160.24.1.el7.x86_64.rpm 2308127baa502197469a17cef0a36622ccd5c528247af648e424284943e73572 python-perf-3.10.0-1160.24.1.el7.x86_64.rpm Source: 6fc0eaf2486a736d0793f6165e07c183bb0c8db2c858bd0dbefc1a2b23a0528b kernel-3.10.0-1160.24.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Sat, 10 Apr 2021 17:14:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:1072 Important CentOS 7 libldb Security Update Message-ID: <20210410171431.GA12486(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:1072 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:1072 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 67364ca692de365478eee5a94879717c1fae2b7a4ba46d128ec04f0477c8c2b5 ldb-tools-1.5.4-2.el7.x86_64.rpm 36ad5a43df60889dd9c1134cb0e042317befa64f7293f44bc91271fddbbfc7e6 libldb-1.5.4-2.el7.i686.rpm cec370a7441899c3ffcd47f783a0437d9d649fd4a1252c6c317561f431e537c4 libldb-1.5.4-2.el7.x86_64.rpm 359852ce38e0555b23e78c945070ef67c0599138eac0c52de77a819e8fdebce9 libldb-devel-1.5.4-2.el7.i686.rpm 4d0e360eff9294623b345353bcf2cb4623c50a3e2bf31ace6ba05141150d85fd libldb-devel-1.5.4-2.el7.x86_64.rpm 29124a79cce7024da4f024131a66f80d78a70d73c5fafe6456617633e5b83560 pyldb-1.5.4-2.el7.i686.rpm 8043266fac97f3c92dfeaa8fad590469ad37ab990d86e9ece87829bdd9e0c8ae pyldb-1.5.4-2.el7.x86_64.rpm b3dbb953a4dc9b8b5ee95024d51d922488db5a0f0ec2ece9bf47d8d5cbbf24fa pyldb-devel-1.5.4-2.el7.i686.rpm 8f596e23215f48c31a9bb115c327431b21431ac93d7279b39dc998ca0bdfc6b8 pyldb-devel-1.5.4-2.el7.x86_64.rpm Source: e678f1a0df3c67bd8f6319dbe32013a311d6d797b51284ff7d5e254c2f7a1ff5 libldb-1.5.4-2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 193, Issue 1 ***********************************************

1 0

Can't upgrade sssd-*
by Warren Young 10 Apr '21

10 Apr '21

Is anyone else getting this on dnf upgrade? [MIRROR] sssd-proxy-2.3.0-9.el8.x86_64.rpm: Interrupted by header callback: Server reports Content-Length: 9937 but expected size is: 143980 [MIRROR] sssd-proxy-2.3.0-9.el8.x86_64.rpm: Interrupted by header callback: Server reports Content-Length: 9937 but expected size is: 143980 [MIRROR] sssd-proxy-2.3.0-9.el8.x86_64.rpm: Interrupted by header callback: Server reports Content-Length: 9937 but expected size is: 143980 [MIRROR] sssd-proxy-2.3.0-9.el8.x86_64.rpm: Interrupted by header callback: Server reports Content-Length: 9937 but expected size is: 143980 I can install almost everything else in the latest batch of updates but not any of sssd-* or anything directly dependent upon it. (Basically, gvfs, samba, and assorted libraries built atop sssd.)

5 10

Re: [CentOS] CentOS 8
by Valeri Galtsev 09 Apr '21

09 Apr '21

On 4/9/21 10:47 AM, Binet, Valere (NIH/NIA/IRP) [C] wrote: > The NIST and CIS baselines don't allow su, we have to use sudo on government computers. > Could you enlighten me on the rationale behind that restriction? As, as you already noticed, my [ancient, maybe] reasoning makes me arrive at an opposite conclusion. (but mine is pure security consideration with full trust vested into sysadmin, see below...) On a second guess: it is just for a separation of privileges, and accounting of who did what which sudo brings to the table... Right? Thanks in advance. Valeri > Valère Binet > > On 4/9/21, 11:39 AM, "Valeri Galtsev" <galtsev(a)kicp.uchicago.edu> wrote: > > > > On 4/9/21 10:31 AM, Johnny Hughes wrote: > > On 4/9/21 5:18 AM, Steve Clark via CentOS wrote: > >> On 4/8/21 3:50 PM, Tony Schreiner wrote: > >> > >> On Thu, Apr 8, 2021 at 2:33 PM Nicolas Kovacs > >> <info(a)microlinux.fr><mailto:info@microlinux.fr> wrote: > >> > >> > >> > >> Le 08/04/2021 à 18:58, Steve Clark via CentOS a écrit : > >> > >> > >> How do I allow root log in on GDM. > >> > >> > >> > >> tl;dr: you don't. > >> > >> Log in as a non-root user, and when you do need root, either open up a > >> terminal > >> and use 'su -' or (even better) setup your user by making your user a > >> member of > >> the wheel group and then use sudo. > >> > >> Logging in to a GUI as root is *BAD* practice. > >> > >> Cheers, > >> > >> Niki > >> > >> > >> > >> > >> > >> That said - you can do it, by clicking on "Not listed?" and typing root > >> into the user field. > >> > >> Yes I have done that and it immediately comes back to the login screen, > >> I know I am typing the > >> correct passwd, because if I botch the passwd I get a message to that > >> effect. > >> > >> > >> > > > > I would not recommend ever using the GUI as the root user .. it creates > > keys and items that are very dangerous. (gnome key rings, etc) > > > > +1000 > > > You should be able to 'su -' , then use visudo to create a sudo account > > for your user. You can even NOPASSWD your user for using sudo (you may > > or may not want to do that .. if someone gains access to your local > > account, they could then sudo with no passwd). > > > > In the past I even avoided sudo. It yet one more SUID-ed binary on your > machine. Which may add to your potential [local, in general] > vulnerability footprint. su, - making yourself root is more than enough > for regular sysadmin. > > > But, i have never, ever logged in as root on a GUI account directly on a > > machine that I cared about or was keeping live .. just advise, do with > > it what you will. > > > > +1 > > To OP: Do as you wish, and deal with consequences. > > Valeri > > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > > -- > ++++++++++++++++++++++++++++++++++++++++ > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > ++++++++++++++++++++++++++++++++++++++++ > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 7

CentOS 8
by Steve Clark 09 Apr '21

09 Apr '21

Hello, How do I allow root log in on GDM. The only people that have access are admins - so I am not worried about someone screwing things up. Thanks, -- Stephen Clark Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

5 6

Re: [CentOS] Automatic clean /tmp folder
by Gestió Servidors 09 Apr '21

09 Apr '21

>>> With these files I supposed that a file with more than 10 days in /tmp >>> would be automatically deleted, but today I have found some files/folders >>> with more than 10 days. >>> >>> What I have done wrong? >> >> The test is on access time, not modification. Have they been read in the last 10 days? > >And note that a GUI file manager might attempt to read every file in a >directory in order to determine its type and display the correct icon. I have check my /tmp folder with "find ./ -atime +10d" and there are some folders that appears as "accessed" more than 10 days ago... so I don't understand why automatic deletion system has not deleted them. Thanks.

2 1

Re: [CentOS] Booting from an ISO file in a XFS /boot
by Gestió Servidors 08 Apr '21

08 Apr '21

> Just guessing - loading the grub module for xfs is missing? Also, I have test adding "insmod xfs" in the "menuentry" section of my "iPXE" boot option, but result is the same...

1 0

Booting from an ISO file in a XFS /boot partition
by Gestió Servidors 08 Apr '21

08 Apr '21

Hi, I want to boot with a customized iPXE iso boot file from my GRUB2 menu. My system is running CentOS-7, with /boot formated as XFS filesystem. After copying my iPXE.iso into /boot, I have created a custom GRUB2 file in /etc/grub.d/40_custom like this: menuentry "iPXE" { set isofile="/ipxe.iso" loopback loop (hd0,1)$isofile linux16 (loop)/ipxe.lkrn } After regenerating grub2.cfg with "grub2-mkconfig -o /etc/grub2.cfg , I have rebooted my system, I have chosen "iPXE" entry, but system doesn't boot. I receive this error: error: file '/ipxe.iso' not found. Starting /ipxe.iso... error: no server is specified. Press any key to continue... However, in another similar system that runs /boot in EXT4 filesystem, that ISO file boots perfectly with the same configuration, so it seems the problem is with XFS. Could you help me? Thanks.

2 1

Re: [CentOS] almalinux?
by Jack Aboutboul 08 Apr '21

08 Apr '21

Thanks Rich for the kind words and Johnny for the support as well. Rich is correct about the non-profit foundation that was setup to facilitate community ownership and involvement. No one party owns or controls AlmaLinux. We don’t view anyone as "the other team” either, and we are glad, and here, to work together with everyone. The way we see it is that we are all family now as well and people have different needs. We are sure CentOS Stream is going to be great for those whose needs it fills and you really can’t beat the engineering team behind it. Time has already proven their prowess and some of them are close personal friends. That being said, we are trying our absolute hardest to make sure that we are the best community and distribution for people whose needs fall on the other side of the road. We are here to work together to build an ecosystem that is greater than the sum of its parts. I’ve spent, at this point, the majority of my life in the the EL extended family (including Fedora) and I can confidently say it is the most powerful platform for innovation, certainly of my generation. It has helped either directly or indirectly spawn or support probably most of today’s most leading technological advancements, everything from the the way we develop and deploy software, huge advancements in space exploration, particle physics research, AI, biological breakthroughs, art, finance and everything in between. It’s taken a collaborative, global effort to make that materialize and we are here to keep that going. There is no horizon we cannot explore, no sea we cannot cross and no peak we cannot summit. Together. Thanks, Jack

1 0

Binutils-2.30-98.el8.aarch64 broken on raspberry Pi4
by Maurice Smulders 07 Apr '21

07 Apr '21

The recent update of binutils/binutils-devel on aarch64 totally breaks gcc. When running gcc over a simple program with main - executing it results in a SIGSEGV, as the _start prologue calls a NULL pointer. I haven't figured out yet how to build a new build using git.centos.org, but I noticed that there is a -99 variant out there... -90 worked fine. What's the quickest way to get this back to being operational? The instructions to build a new package look to be a bit scattered - and how can I build a working one if any update picks up a borked one... Maurice

2 2

almalinux?
by mark 07 Apr '21

07 Apr '21

Anyone looked into almalinux? I was sort of waiting for rocky, but I see from over the weekend on slashdot that almalinux stable is released. mark

15 18

Automatic clean /tmp folder
by Gestió Servidors 07 Apr '21

07 Apr '21

Hello, I have found some files/folders in /tmp that I thought they had to be deleted because of age. My /usr/lib/tmpfiles.d/tmp.conf is: # Clear tmp directories separately, to make them easier to override v /tmp 1777 root root 10d v /var/tmp 1777 root root 30d # Exclude namespace mountpoints created with PrivateTmp=yes x /tmp/systemd-private-%b-* X /tmp/systemd-private-%b-*/tmp x /var/tmp/systemd-private-%b-* X /var/tmp/systemd-private-%b-*/tmp And my /usr/lib/systemd/system/systemd-tmpfiles-clean.timer is: [Unit] Description=Daily Cleanup of Temporary Directories Documentation=man:tmpfiles.d(5) man:systemd-tmpfiles(8) [Timer] OnBootSec=15min OnUnitActiveSec=1d With these files I supposed that a file with more than 10 days in /tmp would be automatically deleted, but today I have found some files/folders with more than 10 days. What I have done wrong? Thanks.

3 2

Prevent Anaconda from switching root and swap partition
by Nicolas Kovacs 07 Apr '21

07 Apr '21

Hi, More often than not, when installing CentOS, I choose manual partitioning and then apply the KISS principle, with a very simple partitioning scheme that looks more or less like this: * /boot partition: 500 MB, ext2 * swap partition: equivalent to amount of RAM * root partition: available space, ext4 Now when I do this, Anaconda insists on switching my swap and root partitions, so instead of this: * /dev/sda1: boot partition * /dev/sda2: swap partition * /dev/sda3: root partition ... I get this: * /dev/sda1: boot partition * /dev/sda2: root partition * /dev/sda3: swap partition Up until now this hasn't bothered me much. But for my needs right now it does, because I need my root partition to be at the end of the disk, so it can be expanded later on. Anyone knows how I can prevent Anaconda from switching my root and swap partitions? What I'm doing right now is switching to a text console with Ctrl-Alt-F5, manually partition using fdisk, switch back to Anaconda and then rescan the disk, but it's quite a PITA. These are the moments where I miss the good old bone-headed Slackware installer. :o) Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

6 5

Problem with chromium 89.0.4389.82
by H 06 Apr '21

06 Apr '21

I am running CentOS 7 and just updated chromium to version 89.0.4389.82 from EPEL. Although this version was released a few weeks ago, I had had the previous version of chromium (88.0.4324.150) running for several weeks but it crashed and the new version was then loaded. The older version worked fine but this new one refuses to load certain, ie most, websites that the old version did not have a problem with - it is jus stuck waiting for the domain in question. Further, the version of Firefox I also have installed loads all of them without any problems which suggests there is not a problem with those sites, the DNS resolution, nor with my system apart from chromium. Rpm does not allow me to downgrade to the previous version and cannot find the previous version. I remember having a similar problem loading websites at least a year ago which, if I remember correctly, was due to some bug in chromium. Does anyone have a similar problem?

7 21

RHEL/Centos 8 power off issue
by R C 05 Apr '21

05 Apr '21

Hello, I have a laptop, in a docking station. When running RHEL/Centos 7 I could shut it down and power it off by using 'shutdown -h now' In did a new install of Centos 8 (and also RHEL 8) and when I do a "shutdown -h now" it just reboots (behaves the same as if I'd do a reboot). Is that a known issue? thanks, Ron

3 5

CentOS 8 issues.
by Frank Ramaekers 05 Apr '21

05 Apr '21

Okay, I made a foolish mistake a few months ago and upgraded my perfectly running CentOS 7 to CentOS 8 and have been struggling ever since. Looking to upgade to AlmaLinux or Rocky Linux. I have a number of things I need to clean up on this system before attempting a upgrade. Does anyone have any idea as to how I can clean/straighten this out: grub2-common.noarch 1:2.02-90.el8_3.1 BaseOS grub2-pc-modules.noarch 1:2.02-90.el8_3.1 BaseOS grub2-tools-minimal.x86_64 1:2.02-90.el8_3.1 BaseOS grubby.x86_64 8.40-41.el8 BaseOS kernel-abi-whitelists.noarch 4.18.0-240.15.1.el8_3 BaseOS kernel-debug-devel.x86_64 4.18.0-240.15.1.el8_3 BaseOS kernel-devel.x86_64 4.18.0-240.15.1.el8_3 BaseOS libgdiplus.x86_64 6.0.4-3.el8 epel libgdiplus-devel.x86_64 6.0.5-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libpwquality.x86_64 1.4.0-9.el8 BaseOS lz4.x86_64 1.8.3-2.el8 BaseOS t1lib.x86_64 5.1.2-28.el8 epel Obsoleting Packages centos-linux-release.noarch 8.3-1.2011.el8 BaseOS centos-release.x86_64 8.2-2.2004.0.2.el8 @BaseOS centos-linux-release.noarch 8.3-1.2011.el8 BaseOS centos-repos.x86_64 8.2-2.2004.0.2.el8 @BaseOS libgdiplus0.x86_64 3.12-1 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 4.2-0.xamarin.2.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6-0.xamarin.2.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6.1-0.xamarin.3.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.2-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.4-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.5-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel I'm unable to update grub2/grubby: dnf update grubby Last metadata expiration check: 0:46:20 ago on Fri 02 Apr 2021 08:57:14 AM CDT. Error: Problem: The operation would result in removing the following protected packages: kernel (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) ..also for some reason, my kernel packages are being installed but the system is not booting to them: ls /boot/vmlin* /boot/vmlinuz-0-rescue-3e806a41305047db81c0e9f9b9a4e36c /boot/vmlinuz-4.18.0-240.10.1.el8_3.x86_64 /boot/vmlinuz-4.18.0-240.15.1.el8_3.x86_64 /boot/vmlinuz-3.10.0-1127.8.2.el7.x86_64 /boot/vmlinuz-4.18.0-240.1.1.el8_3.x86_64 .but it always boots to: uname -r 3.10.0-1127.8.2.el7.x86_64 I found on the internet that this "The operations would.." Message was because of a kernel file in a protected.d (either yum or dnf), but I checked and it doesn't exist. H E L P (TIA) -Frank

2 2

KVM vs. incremental remote backups
by Nicolas Kovacs 04 Apr '21

04 Apr '21

Hi, Up until recently I've hosted all my stuff (web & mail) on a handful of bare metal servers. Web applications (WordPress, OwnCloud, Dolibarr, GEPI, Roundcube) as well as mail and a few other things were hosted mostly on one big machine. Backups for this setup were done using Rsnapshot, a nifty utility that combines Rsync over SSH and hard links to make incremental backups. This approach has become problematic, for several reasons. First, web applications have increasingly specific and sometimes mutually exclusive requirements. And second, last month I had a server crash, and even though I had backups for everything, this meant quite some offline time. So I've opted to go for KVM-based solutions, with everything split up over a series of KVM guests. I wrapped my head around KVM, played around with it (a lot) and now I'm more or less ready to go. One detail is nagging me though: backups. Let's say I have one VM that handles only DNS (base installation + BIND) and one other VM that handles mail (base installation + Postfix + Dovecot). Under the hood that's two QCOW2 images stored in /var/lib/libvirt/images. With the old "bare metal" approach I could perform remote backups using Rsync, so only the difference between two backups would get transferred over the network. Now with KVM images it looks like every day I have to transfer the whole image again. As soon as some images have lots of data on them (say, 100 GB for a small OwnCloud server), this quickly becomes unmanageable. I googled around quite some time for "KVM backup best practices" and was a bit puzzled to find many folks asking the same question and no real answer, at least not without having to jump through burning loops. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

8 11

SELINUX blocks procmail from executing perl script without logging
by Radu Radutiu 04 Apr '21

04 Apr '21

Hi, I'm upgrading our request tracker from Centos 7 to 8 and found some unexpected SELINUX issues with procmail. Even after I create a policy which allows all denied operations, procmail is still not allowed to run a perl script (in my case rt-mailgate). I get the following error in the procmail log: "Can't open perl script "/opt/rt5/bin/rt-mailgate": Permission denied" but I have no denied audit entry in /var/log/audit/audit.log. If I set selinux to permissive, everything works fine. Any idea how to debug this? Best regards, Radu

4 4

Migrating to nvme and expand
by Jerry Geis 02 Apr '21

02 Apr '21

I have older SATA disks (2 of them size 2T) in a software raid config running CentOS 7. /dev/md127 is / and xfs /dev/sda2 is swap /dev/md126 is /home and xfs I desire to get a new (single) NVME 4T disk. What is the correct way to copy the software raid to a single "new" NVME disk ? then expand the /home file system to All the remaining space? Thanks, Jerry

3 3

Debuginfo for CentOS 8 Stream
by Matthew Saltzman 01 Apr '21

01 Apr '21

My CentOS 8 Stream installation is fully current. I did sudo debuginfo-install libgcc libstdc++ but the response I get is Could not find debuginfo package for the following installed packages: libgcc-8.4.1-1.el8.x86_64, libstdc++-8.4.1-1.el8.x86_64 Could not find debugsource package for the following installed packages: libgcc-8.4.1-1.el8.x86_64, libstdc++-8.4.1-1.el8.x86_64 If I do sudo dnf --enablerepo=debuginfo debuginfo-install libgcc libstdc++ I get CentOS Stream 8 - Debuginfo 35 kB/s | 7.6 kB 00:00 Errors during downloading metadata for repository 'debuginfo': - Status code: 404 for http://debuginfo.centos.org/8-stream/x86_64/repodata/repomd.xml (IP: 2620:52:3::12) Error: Failed to download metadata for repo 'debuginfo': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried What do I need to do to get these debuginfo packages? TIA. -- Matthew Saltzman School of Mathematical and Statistical Sciences Clemson University mjs AT clemson DOT edu

2 1

Centos/RHEL 8 gnome drive/usb icons
by R C 01 Apr '21

01 Apr '21

Hello, In Centos 7 (and RHEL 7) when one would connect a drive, or USB stick, an icon wold appear on the (gnome) desktop. Is that just something that was turned off (like anything else)? or is that not around anymore? If it is, how can it be turnd on again, that when logged in, and a drive is connected an icon shows up on the desktop again? thanks, Ron

1 0

Problem with mail server: stop flooding with fail2ban ?
by Nicolas Kovacs 01 Apr '21

01 Apr '21

Hi, My main mail server is running CentOS 7 with Postfix and Dovecot. Last week I was surprised to see that Postfix had some troubles on this machine, according to Icinga. I took a peek at the logs: # journalctl -p err Mar 28 04:37:02 sd-151768 postfix/smtpd[2786]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2788]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2790]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2792]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2794]: fatal: no SASL authentication mechanisms ... And in /var/log/maillog I found a tsunami of these: Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: warning: unknown[45.227.253.115]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: lost connection after AUTH from unknown[45.227.253.115] Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: disconnect from unknown[45.227.253.115] My first reaction was to manually ban the IP addresses / networks which caused the flood, using my firewall: # firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='45.227.253.0/24' reject" # firewall-cmd --reload I'm already using fail2ban in conjunction with firewalld to prevent brute force SSH attacks. Q: can I use it in a similar configuration to stop Postfix from getting flooded and brought down to its knees? Thanks & cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

3 3

nmcli
by Jerry Geis 31 Mar '21

31 Mar '21

under CentOS 7 - I use "alias" like eth1:0 for an alias network. Remove the file restart network - and back to normal. Now I am trying to us NetworkManager. I can 'add' the network fine. however - when I remove the network nmcli connection delete "Wired connection 2" ipv4.addr 192.168.1.58/22 it remove BOTH address and removes the "Wired connection 2" config file - and it reverts to DHCP not the other static address I had associated with "Wired connection 2". how do I just remove the single ADDRESS I added as an alias ? not the whole thing ? Thanks Jerry

3 3

Cups - weird interaction with the Internet
by Frank Cox 31 Mar '21

31 Mar '21

I have Centos 6 machine that I use for a cups printer server. (Yes, I know, but it's working fine for what it's for at the moment.) My ISP lost its connection to the network that printer server is on. While the outside Internet service was unavailable I sent a print job to the printer on that server and nothing printed even though the print server and the machine I sent the job from are on the same lan and are actually connected to the same router. The job appeared to be sent from the originating machine (but timed out, as shown below), and running lpq and lpq -a on the server showed "no entries" (because it timed out for some reason). I did this a few times and even rebooted the server and always the same thing. Job sent, "no entries" on the server. The my ISP's connection came back and blammo! All of a sudden I got a ton of sheets printed, everything that I had been trying to print for the previous ten minutes. Here is what appears to be a relevant portion of the log on the machine that was sending the job to the print server: Mar 30 13:05:06 mutt cupsd[1443]: Started backend /usr/lib/cups/backend/implicit class (PID 951459) Mar 30 13:05:06 mutt cupsd[1443]: REQUEST localhost - root "POST /admin/ HTTP/1. 1" 200 245 CUPS-Add-Modify-Printer successful-ok Mar 30 13:05:07 mutt cupsd[1443]: Job completed. Mar 30 13:06:02 mutt cupsd[1443]: Job submission timed out. So what happened here? Why would cups care if it has a connection to the outside world when it's just printing a job sent to it from the local lan? The connection between the machine originating the print job and the print server timed out even though all of the relevant traffic was going over the lan. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

qemu-kvm images of old Windows XP SP3
by David McGuffey 30 Mar '21

30 Mar '21

I have a Nikon slide scanner (very high quality) for which the software has not been updated. It last ran on WinXP SP3 and I was not able to get it to run under Win 7 and certainly not Win 10. Anyone know where I can obtain images of this old OS to run in CentOS 7 under kvm? Dave McGuffey

4 5

installing gnome icons
by R C 29 Mar '21

29 Mar '21

Hello, is there a way to install "icons / themes" so one gets all the gnome icons in /usr/share/icons/gnome ? thanks, Ron

1 0

CentOS-announce Digest, Vol 192, Issue 3
by centos-announce-request＠centos.org 27 Mar '21

27 Mar '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0992 Important CentOS 7 firefox Security Update (Johnny Hughes) 2. CESA-2021:0996 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 26 Mar 2021 18:11:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0992 Important CentOS 7 firefox Security Update Message-ID: <20210326181151.GA4954(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0992 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0992 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 67cc5f25f8e6a42f9536eb9dbe7e22e3fab22c55d87d37db23cb90136913067e firefox-78.9.0-1.el7.centos.i686.rpm 44600066daf3f3b57b9e269737e0b0dfcd410f3a524fbbd74aec3162d6f84f7c firefox-78.9.0-1.el7.centos.x86_64.rpm Source: bedd47ac6fc527b008c2ed93845707f248f2a8eae9ad4201508728e2b54283ad firefox-78.9.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 26 Mar 2021 18:12:50 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0996 Important CentOS 7 thunderbird Security Update Message-ID: <20210326181250.GA5084(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0996 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0996 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 412317b2522f388f60a8b9846d99020fa2c884e8557b0552ad09b4218e97803d thunderbird-78.9.0-3.el7.centos.x86_64.rpm Source: 9b3ff2329273f188e644f9e8fb481e12ff32397fac7f7f9b4a689aa99d84529b thunderbird-78.9.0-3.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 192, Issue 3 ***********************************************

1 0

Cloning bridged VMs : VirtualBox vs. KVM
by Nicolas Kovacs 27 Mar '21

27 Mar '21

Hi, (tl;dr : how can I clone a KVM-based bridged virtual machine and force a duplicate MAC address ?) Up until recently I've been using VirtualBox on my workstation to test various local setups. Usually I would setup a basic CentOS installation, and whenever I wanted to fiddle around, I would just clone that system and play around with it. So whenever I shot myself in the foot on that VM, I would simply erase it and start over again with a new clone. Think of it as a disposable VM. All my VMs under VirtualBox used bridged mode, so they were in the same network. And in my local proxy server, I have Dnsmasq that assigns static IP addresses and meaningful hostnames to these VMs. Here's what the corresponding lines in dnsmasq.conf look like: dhcp-host=08:00:27:00:00:01,suse-lp151,192.168.2.10 dhcp-host=08:00:27:00:00:02,suse-lp152,192.168.2.11 dhcp-host=08:00:27:00:00:03,ce7-server,192.168.2.12 dhcp-host=08:00:27:00:00:04,ce8-server,192.168.2.13 dhcp-host=08:00:27:00:00:05,ol7-server,192.168.2.14 dhcp-host=08:00:27:00:00:06,ol8-server,192.168.2.15 dhcp-host=08:00:27:00:00:07,rh7-server,192.168.2.16 dhcp-host=08:00:27:00:00:08,rh8-server,192.168.2.17 Over the last two weeks, I decided to migrate from VirtualBox to KVM even for local configurations and virtualized desktop configurations. So far, everything works nice... except one problem I can't seem to solve (yet). I'm using KVM in bridged mode, over a br0 bridge on my workstation. Like with VirtualBox, all my KVM virtual machines are part of my local 192.168.2.0/24 network. Unfortunately there is no way to simply make a perfect clone of a virtual machine using virt-manager. It insists on assigning my cloned VM a different MAC address. And whenever I want to manually create a NIC with the same MAC address as the original, Virtual Machine Manager tells me I can't do that. Same player shoot again. Now I know that is normally a good thing. You don't want MAC address conflicts in your network. But here's the thing: I don't intend to fire up both copies at once. As with VirtualBox, I only intend to use one VM at a time, for testing purposes. Now how can I "explain" this to Virtual Machine Manager without having to jump through burning loops ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

3 5

yum versionlock vs priority
by Stijn De Weirdt 25 Mar '21

25 Mar '21

hi all, i could use some guidance in debugging an issue on centos 7.9 where "suddenly" yum refuses to install a package. the package has multiple version in 2 repos: highest version is in a repo with prio=5, the other lower versions are in a repo without any priorities set. we however require a specific version, so we use the versionlock plugin to lock it. repoquery --show-duplicates properly shows all versions. however, yum refuses to install this locked version. it says it can find the package (trying to install the package by name, and also by full version). when we remove the prio setting in this one repo it all works just fine. the odd thing is: we discovered this after a reinstall of a single host a few days ago, where we have a lot of other hosts with same setup without issues. there seem to have no updates of yum or anything related, so i'm a bit puzzled where this sudden change could come from. obvioulsy, it will turn out something did change, but i have no idea how to start finding the culprit. is there any documnetaiton that describes the precedence between yum plugins? is versionlock plugin always supposed to win over prio setting? hints/tips welcome. many thanks, stijn

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss