- Discuss - lists.centos.org

Re: [CentOS] nfs (or tcp or scheduler) changes between centos 5 and 6?
by Peter van Hooft 04 May '15

04 May '15

> Message: 4 > Date: Wed, 29 Apr 2015 08:35:29 -0500 > From: Matt Garman <matthew.garman(a)gmail.com> > To: CentOS mailing list <centos(a)centos.org> > Subject: [CentOS] nfs (or tcp or scheduler) changes between centos 5 > and 6? > Message-ID: > <CAJvUf-CyTg8ZiGq3OXRLKw7s1K2dGx1gqo_2XwOAXXQty=RHZQ(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > We have a "compute cluster" of about 100 machines that do a read-only > NFS mount to a big NAS filer (a NetApp FAS6280). The jobs running on > these boxes are analysis/simulation jobs that constantly read data off > the NAS. > > We recently upgraded all these machines from CentOS 5.7 to CentOS 6.5. > We did a "piecemeal" upgrade, usually upgrading five or so machines at > a time, every few days. We noticed improved performance on the CentOS > 6 boxes. But as the number of CentOS 6 boxes increased, we actually > saw performance on the CentOS 5 boxes decrease. By the time we had > only a few CentOS 5 boxes left, they were performing so badly as to be > effectively worthless. > > What we observed in parallel to this upgrade process was that the read > latency on our NetApp device skyrocketed. This in turn caused all > compute jobs to actually run slower, as it seemed to move the > bottleneck from the client servers' OS to the NetApp. This is > somewhat counter-intuitive: CentOS 6 performs faster, but actually > results in net performance loss because it creates a bottleneck on our > centralized storage. > > All indications are that CentOS 6 seems to be much more "aggressive" > in how it does NFS reads. And likewise, CentOS 5 was very "polite", > to the point that it basically got starved out by the introduction of > the 6.5 boxes. > > What I'm looking for is a "deep dive" list of changes to the NFS > implementation between CentOS 5 and CentOS 6. Or maybe this is due to > a change in the TCP stack? Or maybe the scheduler? We've tried a lot > of sysctl tcp tunings, various nfs mount options, anything that's > obviously different between 5 and 6... But so far we've been unable to > find the "smoking gun" that causes the obvious behavior change between > the two OS versions. > > Just hoping that maybe someone else out there has seen something like > this, or can point me to some detailed documentation that might clue > me in on what to look for next. > > Thanks! > You may want to try reducing sunrpc.tcp_max_slot_table_entries . In CentOS 5 the number of slots is fixed: sunrpc.tcp_slot_table_entries = 16 In CentOS 6, this number is dynamic with a maximum of sunrpc.tcp_max_slot_table_entries which by default has a value of 65536. We put that in /etc/sysconfig/modprobe.d/sunrpc.conf: options sunrpc tcp_max_slot_table_entries=128 You can't put this in /etc/sysctl.conf because the sunrpc kernel module is loaded before sysctl -p is done. peter

2 2

Could not complete SSL handshake to Amazon EC2 host
by Tim Dunphy 04 May '15

04 May '15

Hello, I am trying to monitor a host in the Amazon EC2 cloud. Yet when I try to check NRPE from the monitoring host I am getting an SSL handshake error: [root@monitor1:~] #/usr/local/nagios/libexec/check_nrpe -H ops.jokefire.com CHECK_NRPE: Error - Could not complete SSL handshake. And if I telnet into the host on port 5666 to see if the FW port is open, the connection closes right away: [root@monitor1:~] #telnet ops.somewhere.com 5666 Trying 54.225.218.125... Connected to ops.somewhere.com. Escape character is '^]'. Connection closed by foreign host. You can see there it connects, but then it closes immediately after the connection. I have NRPE running on the host I want to monitor: [root@ops:~] #lsof -i :5666 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME xinetd 1434 root 5u IPv4 4063 TCP *:nrpe (LISTEN) And I have the IP of my nagios server listed in the xinetd conf file: [root@ops:~] #cat /etc/xinetd.d/nrpe # default: on # description: NRPE (Nagios Remote Plugin Executor) service nrpe { flags = REUSE socket_type = stream port = 5666 wait = no user = nagios group = nagios server = /usr/local/nagios/bin/nrpe server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd log_on_failure += USERID disable = no only_from = 127.0.0.1 xx.xx.xx.xx # <- representing my real nagios server IP } And I have my default security group for that host open on port 5666 to the world for this experiment. I plan on locking that down again to the single IP of my monitoring host once I get this resolved. Does anyone have any suggestions on how I can get that problem solved? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

6 18

can't disable tcp6 on centos 7
by Tim Dunphy 04 May '15

04 May '15

hey all, I tried disabling tcp v6 on a C7 box this way: [root@puppet:~] #cat /etc/sysctl.conf # System default settings live in /usr/lib/sysctl.d/00-system.conf. # To override those settings, enter new settings here, or in an /etc/sysctl.d/<name>.conf file # # For more information, see sysctl.conf(5) and sysctl.d(5). net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 Then going: [root@puppet:~] #sysctl -p net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 Then I restarted xinetd for good measure: [root@puppet:~] #systemctl restart xinetd [root@puppet:~] # Because I'm trying to hit nrpe on this host. Yet, xinetd/nrpe still seems to be listeing on TCP v6!! [root@puppet:~] #netstat -tulpn | grep -i listen | grep xinetd tcp6 0 0 :::5666 :::* LISTEN 2915/xinetd This is a CentOS 7.1 box: [root@puppet:~] #cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) What am I doing wrong? I need to be able to disable tcpv6 completely! Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

7 12

VPN connection before login
by Tim 04 May '15

04 May '15

Hi all, is there a possibility to connect to a VPN manually before login on CentOS desktop (Gnome). I know of a similar functionality in Windows. Is there a tutorial or something? Thank you Tim

6 8

Kvm + libvirt + virt-manager
by Alessandro Baggi 04 May '15

04 May '15

Hi list, I have updated C7 to 7.1 and get some issue (I don't know if problems depend from upgrade). My first problem is on virt-manager that crash after some time. From system messages I get that virt-manager is crashed with signal sigsegv and this problem is related to python (python get sigsegv). Anyone get similar behaviour after upgrade? Another problem, I can't say if it showed before/after upgrade, is related to libvirt when I shutdown my system. On my host I have different vm runned on KVM, where only 2 have autostart enabled. When shutting down the system I get from the console an error like this: Suspending test1: Done Suspending test2: ... error: Failed to save domain $someid state error: internal error: unable to execute QEMU command 'migrate': State blocked by non-migratable device '0000:00:04.8/ich9_ahci' Vm test2 has a disk attached as raw device and not as image file. This message, with same error, is showed also for 2 other vm with autostart disabled and disk on qcow2 images, but only when them are online during shutdown. When system starts, all vms are running without problem. I can't figure out with this error... Why libvirt-guest.sh run migrate command when I shutdown the system? Hope in help. Thanks in advance

3 2

Re: [CentOS] Could not complete SSL handshake to Amazon EC2 host
by Tim Dunphy 04 May '15

04 May '15

> > Not just /var/log/messages. Doesn't nrpe have a log file? Maybe even > secure. Hmmm I don't find any log specific to nrpe. In other words I don't see /var/log/nrpe.log or whatever. :) And when I tail -f /var/log/secure or /var/log/messages I don't see any entries turning up in them when I hit the client with check_nrpe. I was checking the logs on the client itself. > > >> Also nrpe needs to be told from where connections are allowed whether > >> running under an inetd or self-daemonized. > > > >Yep! I've set the only_from to have only the loopback address and the IP > >for the monitoring host in /etc/xinetd.d/npre. > > Not the xinetd config, the nrpe config (too). Hmmmm. but the nrpe.confg file is ignored in the case of allowed hosts. >From the nrpe config: # NOTE: This option is ignored if NRPE is running under either inetd or xinetd allowed_hosts=127.0.0.1 Thanks for the input tho, I genuinely appreciate it! On Sat, May 2, 2015 at 4:05 PM, Mark Milhollan <mlm(a)pixelgate.net> wrote: > On Sat, 2 May 2015, Tim Dunphy wrote: > > >>>It's only when checking from the monitoring host that nrpe fails: > >>Check /var/log/messages to see if xinetd says anything. > > > >I tailed /var/log/messages while hitting the client with check_nrpe from > >the monitoring host. However, that didn't cause an entry in the messages > >log. > > Not just /var/log/messages. Doesn't nrpe have a log file? Maybe even > secure. > > >> Also nrpe needs to be told from where connections are allowed whether > >> running under an inetd or self-daemonized. > > > >Yep! I've set the only_from to have only the loopback address and the IP > >for the monitoring host in /etc/xinetd.d/npre. > > Not the xinetd config, the nrpe config (too). > > > /mark > -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

3 2

Re: [CentOS] Could not complete SSL handshake to Amazon EC2 host
by Tim Dunphy 02 May '15

02 May '15

> > >And I made sure the local firewall was stopped, because I am blocking > ports > >with the security groups instead. > As an aside, I wouldn't do this unless running in a VPC as there are > other hosts in the general cloud and many are malicious. Hmmm... you make an excellent point! I picked up this habit from an AWS shop I used to work at. But what you just said will make me reconsider! > > >It's only when checking from the monitoring host that nrpe fails: > Check /var/log/messages to see if xinetd says anything. I tailed /var/log/messages while hitting the client with check_nrpe from the monitoring host. However, that didn't cause an entry in the messages log. > Also nrpe needs > to be told from where connections are allowed whether running under an > inetd or self-daemonized. Yep! I've set the only_from to have only the loopback address and the IP for the monitoring host in /etc/xinetd.d/npre. > > Also check the NRPE reviews on exchange.nagios.org, where the issue is > discussed. Cool! Thanks. I'll check it out, and see if I can find anything useful. I appreciate the input! Also I really appreciate the ongoing dialog with the community on this issue. I'm grasping at straws at this point. And all the attempts at help have been really great! I hope we can still get to the bottom of this! Tim On Sat, May 2, 2015 at 11:45 AM, Mark Milhollan <mlm(a)pixelgate.net> wrote: > On Fri, 1 May 2015, Tim Dunphy wrote: > > >And I made sure the local firewall was stopped, because I am blocking > ports > >with the security groups instead. > > As an aside, I wouldn't do this unless running in a VPC as there are > other hosts in the general cloud and many are malicious. > > >It's only when checking from the monitoring host that nrpe fails: > > Check /var/log/messages to see if xinetd says anything. Also nrpe needs > to be told from where connections are allowed whether running under an > inetd or self-daemonized. > > Also check the NRPE reviews on exchange.nagios.org, where the issue is > discussed. > > > /mark > -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

1 0

Re: [CentOS] Folding At Home OT
by Mark LaPierre 02 May '15

02 May '15

On 04/22/15 21:05, Mark LaPierre wrote: > Can someone recommend a good video card to use with CentOS 6.6 that has > a GPU, or two, or more, that will work with the Folding At Home project. > > I built a killer machine primarily for contributing to the FAH effort > but the video card, NVIDIA Corporation G94 [GeForce 9600 GT], I had on > hand is not getting any assignments. I'm using the proprietary NVIDIA > driver. I've got a pcie 16X socket to plug it into. > The underwelming response to my question leaves me wondering: Am I to gather that there are no CentOS FAH users here? or Am I to understand that none of the CentOS FAH users have a GPU that works with FAH? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

4 5

rsync backup to fileserver - mystery
by Frank Cox 02 May '15

02 May '15

I have an Intel SS4000E fileserver that I've been using for several years to backup my home directory to. I have a daily cron job that runs the following command: rsync -av --delete /home/frankcox/ /mnt/fileserver/backup I have a directory named misc/sheet-music/classical. About a week ago I created a new subdirectory there, /home/frankcox/misc/sheet-music-classical/Russian\ and\ Eastern\ European/ Notice the spaces in the subdirectory name; I don't know if that's relevant or not. I store a number of bzip-ed pdf files in that subdirectory, like this: BARTOKA.pdf.bz2, BARTOKB.pdf.bz2 and so on. Now for the mystery. The rsync command above gets me a report in my email from cron telling me what files were changed or deleted since the last backup run. And ever since I created that misc/sheet-music-classical/Russian\ and\ Eastern\ European subdirectory, it appears that the files in that subdirectory are getting copied to the fileserver again every day, since they are all listed in the email report that I receive. diff -r --brief /home/frankcox/misc/sheet-music-classical/Russian\ and\ Eastern\ European/ /mnt/fileserver/backup/misc/misc/sheet-music-classical/Russian\ and\ Eastern\ European/ That command gives me no output, so the contents of that subdirectory appear to match on both machines. So why is that subdirectory getting copied again every day when it hasn't changed? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

4 5

eno1 and eth0 on centos 7.1
by Jerry Geis 01 May '15

01 May '15

I installed 7.1 with the command line values biosdevname=0 net.ifnames=0 thinking this would result in ifcfg-eth0 being the file to use... The system still created an ifcfg-eno1 file and that was what is being used for network config information. I remove the ifcfg-eno1 and rebooted - got no network. I then copied back the ifcfg-eth0 to ifcfg-en01 and changed the device name in the file and rebooted and back to the correct network. How can I get just the old behaviour of ifcfg-eth0 ? Thanks, Jerry

2 1

Centos 7.1
by Jerry Geis 01 May '15

01 May '15

Still new to 7.1... I noticed today that when I did a cp command on the console and it asked me to overrite (as it should) the file name had a lower case a with a ^ above the a. Never ran across that before. What might I have not configured? Thanks, Jerry

1 0

kernel-debuginfo
by Steve Clark 01 May '15

01 May '15

Hi, Even though I am not running a centos.plus kernel yum wants to install the kernel-debuginfo for it. # yum install --disablerepo=\* --enablerepo=base-debuginfo kernel-debuginfo Loaded plugins: fastestmirror, refresh-packagekit Setting up Install Process Loading mirror speeds from cached hostfile Resolving Dependencies --> Running transaction check ---> Package kernel-debuginfo.x86_64 0:2.6.32-504.8.1.el6 will be updated ---> Package kernel-debuginfo.x86_64 0:2.6.32-504.16.2.el6.centos.plus will be an update --> Processing Dependency: kernel-debuginfo-common-x86_64 = 2.6.32-504.16.2.el6.centos.plus for package: kernel-debuginfo-2.6.32-504.16.2.el6.centos.plus.x86_64 --> Running transaction check ---> Package kernel-debuginfo-common-x86_64.x86_64 0:2.6.32-504.8.1.el6 will be updated ---> Package kernel-debuginfo-common-x86_64.x86_64 0:2.6.32-504.16.2.el6.centos.plus will be an update --> Finished Dependency Resolution Dependencies Resolved =============================================================================================== Package Arch Version Repository Size =============================================================================================== Updating: kernel-debuginfo x86_64 2.6.32-504.16.2.el6.centos.plus base-debuginfo 268 M Updating for dependencies: kernel-debuginfo-common-x86_64 x86_64 2.6.32-504.16.2.el6.centos.plus base-debuginfo 43 M Transaction Summary =============================================================================================== Upgrade 2 Package(s) -- Stephen Clark *NetWolves Managed Services, LLC.* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

2 1

Cron Issues
by Matt 30 Apr '15

30 Apr '15

I have noanacron installed on a fresh centos 7 install. I added this too settings. nano /etc/cron.d/0hourly */5 * * * * root run-parts /etc/cron.fiveminutes */1 * * * * root run-parts /etc/cron.minute 0,30 * * * * root run-parts /etc/cron.halfhour and then created the directories for it. Now I keep getting these errors in secure log. **** pam_systemd(crond:session): Failed to create session: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken. Can anyone tell me how to resolve it?

2 2

Centos security update
by Venkateswara Rao Dokku 30 Apr '15

30 Apr '15

Hi, I was using CentOS 7 and when I ran some custom commercial security scan on my machine, I found about 122 vulnerabilities. Can you help me on how to get security upgrades on top of my existing CentOS? # cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) Thanks for the help. -- Thanks & Regards, Venkateswara Rao Dokku.

10 14

nfs (or tcp or scheduler) changes between centos 5 and 6?
by Matt Garman 30 Apr '15

30 Apr '15

We have a "compute cluster" of about 100 machines that do a read-only NFS mount to a big NAS filer (a NetApp FAS6280). The jobs running on these boxes are analysis/simulation jobs that constantly read data off the NAS. We recently upgraded all these machines from CentOS 5.7 to CentOS 6.5. We did a "piecemeal" upgrade, usually upgrading five or so machines at a time, every few days. We noticed improved performance on the CentOS 6 boxes. But as the number of CentOS 6 boxes increased, we actually saw performance on the CentOS 5 boxes decrease. By the time we had only a few CentOS 5 boxes left, they were performing so badly as to be effectively worthless. What we observed in parallel to this upgrade process was that the read latency on our NetApp device skyrocketed. This in turn caused all compute jobs to actually run slower, as it seemed to move the bottleneck from the client servers' OS to the NetApp. This is somewhat counter-intuitive: CentOS 6 performs faster, but actually results in net performance loss because it creates a bottleneck on our centralized storage. All indications are that CentOS 6 seems to be much more "aggressive" in how it does NFS reads. And likewise, CentOS 5 was very "polite", to the point that it basically got starved out by the introduction of the 6.5 boxes. What I'm looking for is a "deep dive" list of changes to the NFS implementation between CentOS 5 and CentOS 6. Or maybe this is due to a change in the TCP stack? Or maybe the scheduler? We've tried a lot of sysctl tcp tunings, various nfs mount options, anything that's obviously different between 5 and 6... But so far we've been unable to find the "smoking gun" that causes the obvious behavior change between the two OS versions. Just hoping that maybe someone else out there has seen something like this, or can point me to some detailed documentation that might clue me in on what to look for next. Thanks!

6 8

CENTOS not DoD approved
by bobby Orellano 29 Apr '15

29 Apr '15

nowhere does it say that centos is approved for use in DoD. it is not on the APL, only RedHat and SuSE

8 10

CentOS-announce Digest, Vol 122, Issue 13
by centos-announce-request＠centos.org 29 Apr '15

29 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2015:0913 CentOS 6 tzdata Enhancement Update (Johnny Hughes) 2. CESA-2015:0895 Important CentOS 7 389-ds-base Security Update (Johnny Hughes) 3. CEEA-2015:0913 CentOS 7 tzdata Enhancement Update (Johnny Hughes) 4. CEEA-2015:0913 CentOS 5 tzdata Enhancement Update (Johnny Hughes) 5. CEBA-2015:0915 CentOS 6 dracut BugFix Update (Johnny Hughes) 6. CEBA-2015:0916 CentOS 6 libvirt BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 28 Apr 2015 19:18:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0913 CentOS 6 tzdata Enhancement Update Message-ID: <20150428191848.GA43139(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0913 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 17d079889c081ec38565a95ed34c0d5063b643d97d79da7f421ee423d324f547 tzdata-2015d-1.el6.noarch.rpm 29c5ce7a9f8b50743ee0d1d665525a2110eb6d6cc9a6e86289614d1b6b34fa34 tzdata-java-2015d-1.el6.noarch.rpm x86_64: 17d079889c081ec38565a95ed34c0d5063b643d97d79da7f421ee423d324f547 tzdata-2015d-1.el6.noarch.rpm 29c5ce7a9f8b50743ee0d1d665525a2110eb6d6cc9a6e86289614d1b6b34fa34 tzdata-java-2015d-1.el6.noarch.rpm Source: 36b196f2a6dd2f589917ae18efc38dab3b36849075569f1d0406533add310161 tzdata-2015d-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 28 Apr 2015 21:49:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0895 Important CentOS 7 389-ds-base Security Update Message-ID: <20150428214918.GA59446(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0895 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0895.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0b695f877ea66c6ba7cb15d35f743d2cdb7d26b3c2ad7da7bf5ef716e7dd7a17 389-ds-base-1.3.3.1-16.el7_1.x86_64.rpm eaed7a4bf2c0822c4fee1690b818d9bb5184c3e417e6473a663d060c01c83a5d 389-ds-base-devel-1.3.3.1-16.el7_1.x86_64.rpm 5dd1ceb2c16799fd72ee1d9d79b934bdff6294dbe7e3dc605393701d6dd0ffa1 389-ds-base-libs-1.3.3.1-16.el7_1.x86_64.rpm Source: a5c1801f6621b7d79263c1df4d28afd00ff3ec2f6abc0f2faea373bcfcf70eb3 389-ds-base-1.3.3.1-16.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 28 Apr 2015 21:49:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0913 CentOS 7 tzdata Enhancement Update Message-ID: <20150428214949.GA59524(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0913 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9926c46800be11c474b10719b9935229019201c195e4debb0da4bfab5ff5ec8e tzdata-2015d-1.el7.noarch.rpm 95551f69c3f204b9a7c279698a69b93075f59d82866f7e929b11d8ab60a1fcff tzdata-java-2015d-1.el7.noarch.rpm Source: c733876d95f1e111fe2cb11a0628b09a10d82f539e299ef2358f11c8d868d3cf tzdata-2015d-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 28 Apr 2015 21:52:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0913 CentOS 5 tzdata Enhancement Update Message-ID: <20150428215240.GA4058(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0913 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8387fba89796124258e17bcea37cc9aa891f272170df2d4ed52b993d9e4eecce tzdata-2015d-1.el5.i386.rpm cab6bde88543bd51b4ba52e7a9fa77e4183cc5657ae7e36f1db3f1d205270af6 tzdata-java-2015d-1.el5.i386.rpm x86_64: 13531800faae15e1fe2b4421ebafe34ad9900d0de0dba928b27aa41b32c2e05e tzdata-2015d-1.el5.x86_64.rpm 849a0357c2d8ed582ad308776007df85bff2f9b08e407e60de0cc53a5487dadd tzdata-java-2015d-1.el5.x86_64.rpm Source: 71176448e8dce2b5fb872615cdc49be8854bba5c648b6a2156e500a2ec501f48 tzdata-2015d-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 29 Apr 2015 11:47:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0915 CentOS 6 dracut BugFix Update Message-ID: <20150429114725.GA8717(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0915 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0915.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 288c9836b2cc18268abe502c1625d2b3d4d9d4b2826f1e2afb90e3e33f2168f6 dracut-004-356.el6_6.2.noarch.rpm 00c537711c36db7a24f3a704ce3dbe3f65fa38fa00c1f2698a42366a26b8c858 dracut-caps-004-356.el6_6.2.noarch.rpm bec69edb8ca2317efa62ccfc2fefdfe550f438605235c042ec3f81aba0da357b dracut-fips-004-356.el6_6.2.noarch.rpm dce891fd2ccc0656dff7d69cee0b3df6108e995e1866f97d916e71178ce5496d dracut-fips-aesni-004-356.el6_6.2.noarch.rpm ebfb46c7e304562edcedda9c368c390b2ef3d3492d570bcec226edf8ae3c288c dracut-generic-004-356.el6_6.2.noarch.rpm d6bea1ede04348437bc3d47239d78cad4b54d85c8ca9bb85a30ff5dbf9deca8d dracut-kernel-004-356.el6_6.2.noarch.rpm 3fd1e82fd5d04df430d27faebfce01cb80e8eade61b06d280b85ceb6460dbc30 dracut-network-004-356.el6_6.2.noarch.rpm ba2890cd0cedd441dbebe64d64fb10aca775147427ccac70de3860a8ac4ee382 dracut-tools-004-356.el6_6.2.noarch.rpm x86_64: 288c9836b2cc18268abe502c1625d2b3d4d9d4b2826f1e2afb90e3e33f2168f6 dracut-004-356.el6_6.2.noarch.rpm 00c537711c36db7a24f3a704ce3dbe3f65fa38fa00c1f2698a42366a26b8c858 dracut-caps-004-356.el6_6.2.noarch.rpm bec69edb8ca2317efa62ccfc2fefdfe550f438605235c042ec3f81aba0da357b dracut-fips-004-356.el6_6.2.noarch.rpm dce891fd2ccc0656dff7d69cee0b3df6108e995e1866f97d916e71178ce5496d dracut-fips-aesni-004-356.el6_6.2.noarch.rpm ebfb46c7e304562edcedda9c368c390b2ef3d3492d570bcec226edf8ae3c288c dracut-generic-004-356.el6_6.2.noarch.rpm d6bea1ede04348437bc3d47239d78cad4b54d85c8ca9bb85a30ff5dbf9deca8d dracut-kernel-004-356.el6_6.2.noarch.rpm 3fd1e82fd5d04df430d27faebfce01cb80e8eade61b06d280b85ceb6460dbc30 dracut-network-004-356.el6_6.2.noarch.rpm ba2890cd0cedd441dbebe64d64fb10aca775147427ccac70de3860a8ac4ee382 dracut-tools-004-356.el6_6.2.noarch.rpm Source: c7fe36a990b1e1448a881c5d392e0e8fe993fb6ac4d4b852649c5bbb429370e1 dracut-004-356.el6_6.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 29 Apr 2015 11:48:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0916 CentOS 6 libvirt BugFix Update Message-ID: <20150429114811.GA9008(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0916 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0916.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 388b2c5aab2fe115bb55616fae56ea0e30976e2947d5799175cf90538bd731f5 libvirt-0.10.2-46.el6_6.6.i686.rpm 7df66b6c652132c40f62deae7bc3281413ed3e9a406069a8bd2b2453f5f1fa60 libvirt-client-0.10.2-46.el6_6.6.i686.rpm b3fd537f7dd8073c4dde318987588f83ffcfb7d4d6b0dec25d5faa8cfa885541 libvirt-devel-0.10.2-46.el6_6.6.i686.rpm 601007210bedcdf595469dbe56386018102a31e4fda93d6b33f69e1714aab4ef libvirt-python-0.10.2-46.el6_6.6.i686.rpm x86_64: 2435de68b2ebb108f38f130b5e97872a5182c37114ba7dcac95516ef891ea1d8 libvirt-0.10.2-46.el6_6.6.x86_64.rpm 7df66b6c652132c40f62deae7bc3281413ed3e9a406069a8bd2b2453f5f1fa60 libvirt-client-0.10.2-46.el6_6.6.i686.rpm c47cb1fa1db997e9b66321bc43b146f885f58aec780b511b8f8ff2b6d3b38d10 libvirt-client-0.10.2-46.el6_6.6.x86_64.rpm b3fd537f7dd8073c4dde318987588f83ffcfb7d4d6b0dec25d5faa8cfa885541 libvirt-devel-0.10.2-46.el6_6.6.i686.rpm b82cf3cc95e5d7edfecc76e9f116af5ccf29a1959d7363d518510f5d2037d36b libvirt-devel-0.10.2-46.el6_6.6.x86_64.rpm d60f53d4ec8de33b24c045cd16493fc03f29b26a1ed85746dac1e556ce5239d7 libvirt-lock-sanlock-0.10.2-46.el6_6.6.x86_64.rpm 99c66ce30b90f6931b02eb0b5dc0ea2d74b64d88e30cabd7086be93565d3eb5c libvirt-python-0.10.2-46.el6_6.6.x86_64.rpm Source: 4abe1b325388e5de13ec10304bcb48d508df10eec47ebdb35dc2d2abccaa9400 libvirt-0.10.2-46.el6_6.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 13 ************************************************

1 0

Emacs issue in CentOS 7
by Greg Lindahl 29 Apr '15

29 Apr '15

Sometimes when I save a file in emacs, it thinks that the buffer is still dirty. If I use C-x C-w to write the file, I get an overwrite warning but the buffer always goes clean. Perhaps this is related to the file atime? My /home is btrfs with relatime. I always thought emacs was smarter than that, for example I run emacs on files mounted noatime on CentOS 6 without any issues. A bit of searching the interwebs did not provide any clues. Anyone? -- greg

1 0

Find installed yum groups?
by Les Mikesell 28 Apr '15

28 Apr '15

Is there an 'after the fact' way to find what yum groups are installed, including ones that were added with 'yum groupinstall' instead of the initial anaconda install? -- Les Mikesell lesmikesell(a)gmail.com

4 8

Prevent network setup from changing the hostname
by Robert Nichols 28 Apr '15

28 Apr '15

How can I block network setup (via NetworkManager) from changing the machine's hostname whenever the network configuration changes? The problem: When my graphical login session starts, the xauth database gets an token that is labeled with the hostname at that time. If there is not yet a network connection, that will be "localhost.localdomain". When a network connection is then made (my wireless connection needs the key from my login), the hostname changes. That breaks X session sharing because there is no xauth token that matches the current hostname. If I get a root shell with "su -", commands launched from that shell cannot access the display. If I set up an ssh connection with "ssh -X", I get a complaint about missing xauth data. On systems with an "ONBOOT=yes" network connection, there is no problem since the hostname is set before the X session starts. It's just when the hostname changes during the X session that there is a problem. I am running CentOS 6, fully updated. It's taken me a long time to track down the root cause of this problem. Now I just need a solution, preferably something less ham-fisted than "xhost -". -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

4 9

Fwd: Cross Building Tcl using Mingw32-gcc (4.9.2)
by Robert Heller 28 Apr '15

28 Apr '15

I posted this to the comp.lang.tcl newsgroup, but it might relate to a possible bug in the Mingw32 cross-build environment under CentOS 6 (or EPEL). Forwarded Message: From: Robert Heller <heller(a)deepsoft.com> Subject: Cross Building Tcl using Mingw32-gcc (4.9.2) Newsgroups: comp.lang.tcl Message-ID: <Nc-dnd1wRNTsy6PInZ2dnUU7-b-dnZ2d(a)giganews.com> Date: Mon, 27 Apr 2015 10:32:01 -0500 I am trying to cross-build Tcl (8.5.8) and I have encounted two problems: One I easily hacked the sources (wrapped the offending lines with #ifdefs): ./../generic/tclPosixStr.c:347:5: error: duplicate case value case EPFNOSUPPORT: return "EPFNOSUPPORT"; ^ ./../generic/tclPosixStr.c:290:5: error: previously used here case ENOPROTOOPT: return "ENOPROTOOPT"; ^ ./../generic/tclPosixStr.c: In function 'Tcl_ErrnoMsg': ./../generic/tclPosixStr.c:795:5: error: duplicate case value case EPFNOSUPPORT: return "protocol family not supported"; ^ ./../generic/tclPosixStr.c:738:5: error: previously used here case ENOPROTOOPT: return "bad protocol option"; ^ The other I am not sure how to fix: i686-w64-mingw32-gcc -c -O2 -fomit-frame-pointer -Wall -I"../../generic" -DTCL_TOMMATH -DMP_PREC=4 -I"../../libtommath" -I".." -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DSTDC_HEADERS=1 -DHAVE_NO_SEH=1 -DHAVE_NO_LPFN_DECLS=1 -DHAVE_ALLOCA_GCC_INLINE=1 -DHAVE_CAST_TO_UNION=1 -DTCL_CFGVAL_ENCODING=\"cp1252\" -DHAVE_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DTCL_CFG_OPTIMIZED=1 -DTCL_CFG_DEBUG=1 -DBUILD_tcl "../tclWin32Dll.c" -o tclWin32Dll.o ./tclWin32Dll.c:65:3: error: conflicting types for 'EXCEPTION_REGISTRATION' } EXCEPTION_REGISTRATION; ^ In file included from /usr/i686-w64-mingw32/sys-root/mingw/include/minwindef.h:146:0, from /usr/i686-w64-mingw32/sys-root/mingw/include/windef.h:8, from /usr/i686-w64-mingw32/sys-root/mingw/include/windows.h:69, from ../tclWinPort.h:72, from ../../generic/tclPort.h:25, from ../../generic/tclInt.h:3946, from ../tclWinInt.h:17, from ../tclWin32Dll.c:16: /usr/i686-w64-mingw32/sys-root/mingw/include/winnt.h:3554:43: note: previous declaration of 'EXCEPTION_REGISTRATION' was here typedef EXCEPTION_REGISTRATION_RECORD EXCEPTION_REGISTRATION; ^ Is there a solution possible? This looks like internal inconsistency with the header files that are part of the build toolchain. -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

1 1

Real sh? Or other efficient shell for non-interactive scripts
by E.B. 28 Apr '15

28 Apr '15

I'm sure most people here know about Dash in Debian. Have there been discussions about providing a more efficient shell in Centos for use with heavily invoked non-interactive scripts? With sh being a link to bash in Centos I don't know if it would explode if the link was changed to something else, but at least the scripts we made on our own that run certain services could be changed and tested manually to another shell. Are there other people who have experience in this and can provide interesting guidance?

19 83

Thread moderation and warning: [ Real sh? Or other...]
by Jim Perrin 28 Apr '15

28 Apr '15

This thread has spiraled out of control and will be dealt with. I will again speak with people privately. Some are repeat offenders and may have their contributions to the mailing list moderated. Please keep to the topic posted by the original author, and keep the list technical in nature. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

1 0

Boot message of a modprobe.d conf file that does not exist
by Tim 28 Apr '15

28 Apr '15

Hi all, I got a message at boot: dracut-pre-udev: libkmod: kmod_config_parse: /etc/modprobe.d/thinkpad_battery.conf line 2: ignoring bad line starting with 'options' I have had this file to load modules for my thinkpad (acpi_call & tp_smapi) but I removed it after recompiling the modules for a new kernel and using "make install load". My question is, why this nonexistent file is still demanded. Thanks in advance Tim

2 2

CentOS 6.6 x86_64, rpm error: rpmdbNextIterator: skipping h# ...
by carlh04426＠gmail.com 28 Apr '15

28 Apr '15

Hi All, I had some health issues for a few months and I barely recall dealing with Heartbleed ... it's all just a blur. Now I'm getting back up to speed, but I have a pair of CentOS 6.6 x86_64 + Virtualmin 4.13 GPL servers which no longer seem to be picking up available updates. 'yum check' ran for about 25 minutes this evening on one of them and returned nothing useful. rpm -qa --last is returning this (lines intentionally split): error: rpmdbNextIterator: skipping h# 259 Header V3 RSA/SHA256 \ Signature, key ID c105b9de: BAD error: rpmdbNextIterator: skipping h# 4 Header V3 RSA/SHA256 \ Signature, key ID c105b9de: BAD error: rpmdbNextIterator: skipping h# 1028 Header V3 RSA/SHA1 \ Signature, key ID c105b9de: BAD - - - - 8< snipped for brevity, continuing to end - - - - ->8 - - - - error: rpmdbNextIterator: skipping h# 1019 Header V3 RSA/SHA1 \ Signature, key ID c105b9de: BAD gpg-pubkey-fe837f6f-4e0fd77e Thu 17 Jul 2014 12:00:11 AM EDT gpg-pubkey-ef1d6db8-4e0fd7f0 Thu 17 Jul 2014 12:00:11 AM EDT gpg-pubkey-d0ff3d16-4e0fd442 Thu 17 Jul 2014 12:00:11 AM EDT gpg-pubkey-a0bdbcf9-42d1d837 Thu 17 Jul 2014 12:00:11 AM EDT gpg-pubkey-11f63c51-3c7dc11d Thu 17 Jul 2014 12:00:11 AM EDT gpg-pubkey-c105b9de-4e0fd3a3 Tue 15 Jul 2014 02:32:15 AM EDT gpg-pubkey-0608b895-4bd22942 Mon 14 Jul 2014 07:59:25 PM EDT gpg-pubkey-6b8d79e6-3f49313d Mon 14 Jul 2014 07:57:56 PM EDT I'd be extremely grateful for any guidance or ideas you may wish to share. TIA & regards, Carl

2 3

Route traffic through private IP for only certain hosts
by Ian 28 Apr '15

28 Apr '15

Hi I am having a weird problem which I cant figure out - so I was hoping someone here could give me a hand. First off the end goal is that a specific server in my network runs an IPSEC connection to another company and I want all other servers to route traffic for the IP on that network through this single server. Server 1 in this example is the server that runs the IPSEC connection. (CentOS 6.6) Server 2 in this example is an app server that would route traffic for only that specific IP through server 1. (CentOS 6.5) **Some IP's that will be used below:** Server 1 <pre> Server 1 Public IP: x.x.x.x Server 1 Public Broadcast: x.x.x.y Server 1 Public Gateway: x.x.x.z Server 1 Internal IP: 10.0.64.10/24 </pre> Server 2 <pre> Server 2 Public IP: y.y.y.y Server 2 Public Broadcast: y.y.y.z Server 2 Public Gateway: y.y.y.a Server 2 Internal IP: 10.0.64.150/24 </pre> Those servers have full connectivity between them internally (i.e. I can ping, ssh etc from one to the other without problem). They also both have full acceess to the internet and can be reached that way ---------- **Server 1** Here is an *ip a* for that <pre># ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:99:12:85 brd ff:ff:ff:ff:ff:ff inet x.x.x.x/28 brd x.x.x.y scope global eth0 inet6 xxxx:xxxx:xxxx:xxxx/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:99:12:8f brd ff:ff:ff:ff:ff:ff inet 10.0.64.10/24 brd 10.0.64.255 scope global eth1 inet6 fe80::20c:29ff:fe99:128f/64 scope link valid_lft forever preferred_lft forever </pre> Here is an *ip route* <pre># ip route x.x.x.y/28 dev eth0 proto kernel scope link src x.x.x.x 10.0.64.0/24 dev eth1 proto kernel scope link src 10.0.64.10 169.254.0.0/16 dev eth0 scope link metric 1002 169.254.0.0/16 dev eth1 scope link metric 1003 default via x.x.x.z dev eth0 </pre> Here is a *sysctl -p* <pre> # sysctl -p net.ipv4.conf.default.rp_filter = 1 net.ipv4.conf.default.accept_source_route = 0 kernel.sysrq = 0 kernel.core_uses_pid = 1 net.ipv4.tcp_syncookies = 1 kernel.msgmnb = 65536 kernel.msgmax = 65536 kernel.shmmax = 68719476736 kernel.shmall = 4294967296 net.ipv4.ip_forward = 1 net.ipv6.conf.all.forwarding = 1 net.ipv4.conf.default.proxy_arp = 1 net.ipv4.conf.all.rp_filter = 1 kernel.sysrq = 1 net.ipv4.conf.default.send_redirects = 1 net.ipv4.conf.all.send_redirects = 1 </pre> ---------- **Server 2** I've added a single test ip (8.8.8.8) to server two to test if it works before bringing IPSEC into the equation Here is an *ip a* <pre> # ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:0c:29:15:8b:01 brd ff:ff:ff:ff:ff:ff inet y.y.y.y/29 brd y.y.y.z scope global eth0 inet6 fe80::20c:29ff:fe15:8b01/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:0c:29:15:8b:0b brd ff:ff:ff:ff:ff:ff inet 10.0.64.150/24 brd 10.0.64.255 scope global eth1 inet6 fe80::20c:29ff:fe15:8b0b/64 scope link valid_lft forever preferred_lft forever </pre> Here is an *ip route* <pre> # ip route 8.8.8.8 via 10.0.64.10 dev eth1 y.y.y.z/29 dev eth0 proto kernel scope link src y.y.y.y 10.0.64.0/24 dev eth1 proto kernel scope link src 10.0.64.150 default via y.y.y.a dev eth0 </pre> ---------- Now when I try do a ping from Server 2 -> 8.8.8.8 here are the tcpdumps from each server: **Server 2** If I tcpdump on eth0 i get no matches (so the route appears right!). eth1 gets matches: <pre> # tcpdump -vvv -i eth1 -n host 8.8.8.8 tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes 11:25:55.609902 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 10.0.64.150 > 8.8.8.8: ICMP echo request, id 17999, seq 1, length 64 11:25:56.609262 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 10.0.64.150 > 8.8.8.8: ICMP echo request, id 17999, seq 2, length 64 </pre> **Server 1 (The hopeful gateway for 8.8.8.8)** On eth1 (Private) <pre> # tcpdump -vv -i eth1 -n host 8.8.8.8 tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes 11:27:20.608766 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 10.0.64.150 > 8.8.8.8: ICMP echo request, id 17999, seq 86, length 64 11:27:21.608738 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 10.0.64.150 > 8.8.8.8: ICMP echo request, id 17999, seq 87, length 64 </pre> On eth0 (public) <pre> # tcpdump -vv -i eth0 -n host 8.8.8.8 tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes 11:29:04.608773 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 10.0.64.150 > 8.8.8.8: ICMP echo request, id 17999, seq 190, length 64 11:29:05.608800 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 10.0.64.150 > 8.8.8.8: ICMP echo request, id 17999, seq 191, length 64 </pre> I've disabled the FW on both (as a test), made sure to not have any blocking rules on FORWARD traffic (as a separate test) and I just never get my traffic through from Server 2 to 8.8.8.8. I've also tried substituting 8.8.8.8 for another server that is reachable from both servers and the same thing happens. I'm open to any suggestions - i'm super confused :) Thanks in advance, Ian

3 2

Re: [CentOS] Real sh? Or other efficient shell for non-interactive scripts
by m.roth＠5-cent.us 27 Apr '15

27 Apr '15

Joerg Schilling wrote: > Les Mikesell <lesmikesell(a)gmail.com> wrote: > >> On Mon, Apr 27, 2015 at 12:10 PM, Joerg Schilling >> <Joerg.Schilling(a)fokus.fraunhofer.de> wrote: >> > > >> > If you combine ZFS and Linux, you create a permitted "collective work" and the GPL cannot extend it's rules to the CDDLd separate and independend >> > work ZFS of course. >> >> Which countries' copyright laws would permit that explicitly even when some of the components' licenses prohibit it? > > Fortunately, Europe and the USA declare the same parts of the GPL void, these parts would prevent such a combination. <snip> First, I was not aware that the US had declared any part of the GPL null and void. Second, just to play Eris... which *version* of the GPL are you talking about in this arguement, 1.x, 2.x, or 3.x? mark

2 1

CentOS 7.1 How to change panel background
by Globe Trotter 27 Apr '15

27 Apr '15

Hi, I just installed CentOS and have been trying to change the desktop panel background (in gnome classic) to black. How do I do this? Holding the alt button while right-clicking on the mouse does not seem to do anything. I do not have anything installed (other than what came with the LiveCD). Many thanks!

1 0

CentOS 7 /boot location
by Devin Reade 27 Apr '15

27 Apr '15

I noticed that (in a case with a two disk md mirror and lvm), the CentOS 7 installer is now placing /boot as the *last* partition on the disk. I'm assuming that others are seeing this behavior. Does anyone know why it's now the last instead of the first? (Seems to work, though.) Devin

2 2

can't install gd-devel on centos 7.1
by Tim Dunphy 27 Apr '15

27 Apr '15

Hey guys, I'm trying to instal gd-devel onto a CentOS 7 host. --> Finished Dependency Resolution Error: Package: gd-last-devel-2.1.1-2.el7.remi.x86_64 (remi) Requires: libvpx-devel(x86-64) You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest But when I try to do that I get the error you see above. These are the repos I have installed and enabled: repo id repo name status epel/x86_64 Extra Packages for Enterprise 7,718 puppetlabs-deps/x86_64 Puppet Labs Dependencies El 7 17 puppetlabs-products/x86_64 Puppet Labs Products El 7 - x 162 remi Les RPM de remi pour Enterpri 1,928 rhui-REGION-client-config-server-7/x86_64 Red Hat Update Infrastructure 4 rhui-REGION-rhel-server-releases/7Server/x86_64 Red Hat Enterprise Linux Serv 6,851 rhui-REGION-rhel-server-rh-common/7Server/x86_64 Red Hat Enterprise Linux Serv 131 rpmforge RHEL 7Server - RPMforge.net - 245 webtatic/x86_64 Webtatic Repository EL7 - x86 519 I originally had nothing more than the base CentOS repo enabled. Along with the puppetlabs repo and epel when I first encountered this error. But then I tried adding some repos to find out if I could find the needed package in any of them. The package that it seems to be complaining about not having is called: libvpx-devel(x86-64) But when I try to instal that this is the result I get: [root@monitor1:~] #yum install libvpx-devel Loaded plugins: amazon-id, rhui-lb No package libvpx-devel available. Error: Nothing to do Does anybody have any ideas on how I can get around this problem? I only want to install gd-devel. Seems like it should be so simple! But not in this case. :( Thanks!! Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

4 6

Broken Selinux Postfix Policy?
by E.B. 26 Apr '15

26 Apr '15

Trying to restart postfix installed from yum. Restart fails, I get: type=AVC msg=audit(1430429813.721:12167): avc: denied { unlink } for pid=31624 comm="master" name="defer" dev="dm-0" ino=981632 scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:object_r:postfix_spool_maildrop_t:s0 tclass=sock_file I guess it needs to remove the /var/spool/postfix/defer socket file. audit2allow says this will fix it: allow postfix_master_t postfix_spool_maildrop_t:sock_file unlink; But how do I add this permission to the existing Postfix Selinux policy??? Why was it missing??? By the way, I also had AVCs when I tried to add another instance of Postfix smtpd on local port 20025. Very frustrating there is no docs how to add a rule for this common change. I don't know if I did the right thing: semanage port -a -t smtp_port_t -p tcp 20025 Is this the right way? Why isn't this documented somewhere?

2 2

Login screen under 7.1
by J Martin Rushton 25 Apr '15

25 Apr '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I use a dual headed system with one screen on the digital and the other on the analogue ports. Since 7.1 the update the login has switched from the analogue to the digital. This wouldn't be a problem, but I have the digital rotated 90 degrees into a portrait mode. Login is thus best done lying down! Once I've logged in there is no problem, the screens are easily configured in the settings menu. Can I set it globally though? I've had a look at xrandr and can't see anything. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJVPAi2AAoJEAF3yXsqtyBlZzMP/3in2vFd8whbrZrghVhRF61V IPKEK2E3gYg4jYTa7j5ewwVic9sRU5ix6Hx0ZmqK5dSFqpBY6llK4+zcpmvqq1fR 91uwY/o8o+wEPppyvNm43i01Vb/nwuFeLfyfsn4IHak2ss0mMn76z71EsWw6yfU2 spAHxkkhwWN5YjXpgP0jVj0ot7h5l20d08vjRZ8uwK+cWjlGk2xZBoN4K9L4yyhu TwJAVDivS/VVztJ3ag8ZA413vk5+jl8AjsJELDD+JD7Wab9zpU4HHKk7odga9ekJ TI6FEZub9k46532O0cjnPYrzv/qoh2IxWgMOSp6egObwJs0oENadSl4Zhw3SsmiE yiH/ZjnYcoTzp3c/+To/ZkdFLw+aNn3OxiBgKv1p4mtxLovtPIaiok+XU2tLXIap MHu/rQnFUmMhdR1c5y2rsTIHg2X0uZmBZskr5SLfLTCD+1IdIvu2Av5tYYyaswIT ctHRqSL2dC4ViJnA5IgBoXPDT4Hz0AsTNOvXfWpNNPdUPqV4Ppsa+d8xyE+EM7Sp +6/4l26qZ4NVlYfNodvU38YoR0lvtVwhe73OSLuYHusYAAeT9WQj68svOiS5bhuD 1Jux7m0Df3UgxsxG9mH66GzgIMOIuRkBoQNYNXEN5PxOMZBgXly6WS+zdiys+iXW w3Meq+Ym8DgNiClIAyuc =+WI9 -----END PGP SIGNATURE-----

1 0

Re: [CentOS] Forcing yum update
by Александр Кириллов 25 Apr '15

25 Apr '15

>>> I have tried launching yum shell and then remove libmodplug, >>> install >>> libmodplug while having made sure epel is available. This after >>> having >>> read that it is a bad idea to use no-deps with yum. My attempt, >>> however, fails with a not found message. >>> >>> What would the correct approach be? >> >> The correct approach would be to use yum-plugin-priorities, set >> rpmforge >> priority to a higher value (lower priority) than epel and run yum >> distro-sync. > > Thank you. Unfortunately distro-sync fails with not found which seems > to apply to libmodplug at epel. Check if you have exclude=libmodplug in /etc/yum.repos.d/epel.repo and comment this line out.

1 0

Forcing yum update
by H 25 Apr '15

25 Apr '15

New to CentOS and running 6.6. I have previously installed gstreamer with plugins including libmodplug from rpmforge to listen to mp3 streams. Yum now tells me that a later version of libmodplug is available from epel but I am having problems forcing updating libmodplug from epel. I have tried launching yum shell and then remove libmodplug, install libmodplug while having made sure epel is available. This after having read that it is a bad idea to use no-deps with yum. My attempt, however, fails with a not found message. What would the correct approach be? Thank you.

2 1

google-earth crashes on CentOS 6.6
by Mark LaPierre 25 Apr '15

25 Apr '15

Hey all, With google-earth-stable.x86_64 0:7.1.2.2041-0 [mlapier@peach /]$ /usr/bin/google-earth [0425/000212:ERROR:net_util.cc(2195)] Not implemented reached in bool net::HaveOnlyLoopbackAddresses() Failed to load "/opt/google/earth/free/libinput_plugin.so" because "/usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.14' not found (required by ./libLeap.so)" [0425/000213:ERROR:nss_ocsp.cc(581)] No URLRequestContext for OCSP handler. [0425/000213:ERROR:nss_ocsp.cc(581)] No URLRequestContext for OCSP handler. <SNIP> Another crash happened while handling crash! [mlapier@peach /]$ NOTE: google-earth-stable.x86_64 0:7.1.2.2041-0 was running on my system a couple of weeks ago. With google-earth-stable.x86_64 0:6.0.3.2197-0 [mlapier@peach ~]$ /usr/bin/google-earth libGL error: failed to load driver: swrast [mlapier@peach ~]$ NOTE: GE starts and runs but there is no Earth in GE, just a black box. Googling gets me no useful answers. Do any of you CentOD 6.6 users have GE operating on your system? If so, what version are you using? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

1 1

CentOS 7 Installer Fail With 3Ware Controller
by Kirk Bocek 24 Apr '15

24 Apr '15

I thought I'd post to the mail list because I know there are some that only respond this way. I have a new SuperMicro X10-DRI host with a 3Ware controller that hangs when I try to install CentOS 7 on it. I've documented everything here: https://www.centos.org/forums/viewtopic.php?f=49&t=52231 CentOS 6.6 installs just fine. I'd appreciate any feedback anyone has, either to the list or the forum. Thanks, Kirk Bocek

1 0

CentOS 7 NFS client problems
by Devin Reade 24 Apr '15

24 Apr '15

#define TL;DR Despite idmapd running, usernames/IDs don't get mapped properly. Looking for a workaround. #undef TL;DR I'm trying to get a new CentOS 7.1 workstation running, and having some problems with NFS filesystems. The server is a fully patched CentOS 6 server. On the NFS filesystem, there are two subdirectories owned by a regular user (joe). (There are actually more and by multiple users, but I'll just show the two.) That user exists on both the NFS server and this CentOS 7 NFS client. However, the user on the client machine is unable to perform various operations. (The operations work when logged into the server.) $ whoami joe $ cd /nfs $ ls -l drwx------. 6 joe joe 4096 Apr 23 11:20 one drwxr-xr-x. 4 joe joe 4096 Dec 14 2011 two $ cd one one: Permission denied. $ cd two $ ls subdir1 subdir2 $ touch testfile touch: cannot touch testfile: Permission denied mount(1) shows that the filesystem is mounted rw. The server has it exported rw to the entire subnet. Other machines (CentOS 5) mount the same filesystems without a problem. Looks a lot like an idmapd issue, right? On the server: # id joe uid=501(joe) gid=501(joe) groups=501(joe) Back on the client: $ ps auxww | grep idmap | grep -v grep $ id joe uid=1000(joe) gid=1000(joe) groups=1000(joe) $ cd /nfs $ ls -n drwx------. 6 1000 1000 4096 Apr 23 11:20 one drwxr-xr-x. 4 1000 1000 4096 Dec 14 2011 two So it looks like even though the name/UID mapping is correct even though the idmapd daemon isn't running on the client. (It looks like CentOS7 only starts idmapd when it's running an NFS *server*.) # systemctl list-units | grep nfs nfs.mount loaded active mounted /nfs proc-fs-nfsd.mount loaded active mounted NFSD configuration filesystem var-lib-nfs-rpc_pipefs.mount loaded active mounted RPC Pipe File System nfs-config.service loaded active exited Preprocess NFS configuration nfs-client.target loaded active active NFS client services The behavior was tested again with SELinux in permissive mode; no change. Splunking a bit more shows some similar behavior for other distros: <https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/966734> <https://bugzilla.linux-nfs.org/show_bug.cgi?id=226> Yep, this is a situation where LDAP and Kerberos aren't in play. And the CentOS 5, CentOS 6, and other UNIXen boxes are using consistent UID/GID mappings. However, CentOS7 (well, RHEL7) changed the minimum UID/GID for regular accounts, so when the account was created on the latter, the UID is out of sync. So much for idmapd (without the fixes involved in the above URLs). Has anyone else run into this and have a solution other than forcing UIDs to match? Devin

3 3

Resetting tcp timestamp
by James B. Byrne 24 Apr '15

24 Apr '15

TCP timestamps on some (but not all?) of our CentOs hosts are being reported as a vulnerability by OSSIM. I have looked into the matter briefly and cannot say that I consider this a serious security issue. The vulnerability seems limited to determining the uptime of the target host. The question therefore arises as to whether or not there is any way to reset the tcp timestamp present value to zero or some randomly determined value. If not then what are the technical impediments? I am cognisant of the role of tcp timestamps in handling serial number rollovers. However, since the timestamp itself also must rollover, given sufficient uptime (~288 days I believe I read), what prevents one from manually forcing that event? Is there such a means provided in CentOS6? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Cluster gets stopped
by Jatin Davey 24 Apr '15

24 Apr '15

Hi I am using a two node cluster to achieve high availability. I am basically testing a scenario where in if i shutdown my node (node-1) then the other node (node-2) should start functioning like node-1. Currently what i am observing is that the entire cluster gets into "Stopped" state. Here is my cluster.conf file ************************ <?xml version="1.0"?> <cluster config_version="4" name="****"> <clusternodes> <clusternode name="node-103" nodeid="1"> <fence> <method name="Method01"> <device name="node-103"/> </method> </fence> </clusternode> <clusternode name="node-105" nodeid="2"> <fence> <method name="Method02"> <device name="node-105"/> </method> </fence> </clusternode> </clusternodes> <cman expected_votes="1" two_node="1"/> <fencedevices> <fencedevice agent="fence_ipmilan" auth="password" ipaddr="x.x.x.x" lanplus="on" login="admin" name="node-103" passwd="*****" privlvl="ADMINISTRATOR"/> <fencedevice agent="fence_ipmilan" auth="password" ipaddr="x.x.x.x" lanplus="on" login="admin" name="node-105" passwd="******" privlvl="ADMINISTRATOR"/> </fencedevices> <fence_daemon post_join_delay="120"/> <rm> <resources> <netfs export="/test" force_unmount="1" fstype="nfs" host="x.x.x.x" mountpoint="/test/test/test" name="test123"/> <ip address="x.x.x.x" sleeptime="5"/> <script file="/opt/infra/appliance-mgr/bin/am_svcs.sh" name="am_svcs"/> </resources> <failoverdomains> <failoverdomain name="Failover01" nofailback="1" ordered="1"> <failoverdomainnode name="node-103" priority="1"/> <failoverdomainnode name="node-105" priority="2"/> </failoverdomain> </failoverdomains> <service domain="Failover01" name="Service01" recovery="relocate"> <ip ref="x.x.x.x"/> <netfs ref="test123"/> <script ref="am_svcs"/> </service> </rm> </cluster> **************************************** Thanks Jatin

1 0

How to stagger fsck executions
by Hugh E Cruickshank 23 Apr '15

23 Apr '15

CentOS 6 Hi All: Over the weekend I had to reboot one of my systems and got hit with fsck runs on all of the filesystems. I would not mind so much except doing them all at once took over an hour. I would like to be able to stagger these, ideally only execute one fsck per reboot. I have been able to think of two possible solutions but neither is terrific. My first idea was to manually run fsck on each filesystem, one every couple of weeks. That way they will not all come due at the same time if we reboot on a regular basis. The second idea was to set each filesystem to a different random count value. This would run the risk of having two or more executions at the same time but it would probably not be very frequent. Does anyone have a suggestion for a better way of doing this? TIA Regards, Hugh -- Hugh E Cruickshank, Forward Software, www.forward-software.com

5 13

SIG - Hardening
by Earl A Ramirez 23 Apr '15

23 Apr '15

Dear All, About a week ago; I posted a proposal over on the centos-devel mailing list, the proposal is for a SIG 'CentOS hardening', there were a few of the members of the community who are also interested in this. Therefore, I am extending that email to this community; where there is a larger community. Some things that we will like to achieve are as follows: SSH: disable root (uncomment 'PermitRootLogin' and change to no) enable 'strictMode' modify 'MaxAuthTries' modify 'ClientAliveInterval' modify 'ClientAliveCountMax' Gnome: disable Gnome user list Console: Remove reboot, halt poweroff from /etc/security/console.app Applying security best practises from various compliance perspective, e.g. STIG, SOX, PCI etc... We may also use NSA RHEL 5 secure configuration guide to get some insight or use it as a baseline. The members of the community who are interested in this SIG or are willing to contribute are: Leam Hall Corey Henderson Jason Pyeron You can find the post here [0] We will really like to get SIG approved by the CentOS board so if anyone is interested or willing to contribute we will be happy to have you onboard. [0] http://lists.centos.org/pipermail/centos-devel/2015-April/013197.html -- Earl A Ramirez <earlaramirez(a)gmail.com>

8 12

[OT] Anyone using OSSIM to monitor their CentOS systems?
by James B. Byrne 23 Apr '15

23 Apr '15

We just installed an OSSIM iso as a KVM guest to monitor one of our networks. For those unfamiliar with the product it is a Debian based distro positioned as a security appliance. I am wondering if anyone here has had any experience with it and would care to comment on its usefulness, or lack thereof. Off-list is probably best unless there are any CentOS specific issues that arise. Thanks, -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Test. Do Not Respond
by Chris Weisiger 23 Apr '15

23 Apr '15

2 1

CentOS 7.0.1406, nfs automount issue
by m.roth＠5-cent.us 23 Apr '15

23 Apr '15

I added Domain = ourdomain to /etc/idpmapd.conf, and restarted rpc-idmapd, then autofs. And nfslock, for good measure. service nfs-idmap status Redirecting to /bin/systemctl status nfs-idmap.service nfs-idmap.service - NFSv4 ID-name mapping daemon Loaded: loaded (/usr/lib/systemd/system/nfs-idmap.service; disabled) Active: active (running) since Thu 2015-04-23 11:23:24 EDT; 2min 59s ago Process: 14618 ExecStart=/usr/sbin/rpc.idmapd $RPCIDMAPDARGS (code=exited, status=0/SUCCESS) Main PID: 14620 (rpc.idmapd) CGroup: /system.slice/nfs-idmap.service `-14620 /usr/sbin/rpc.idmapd Apr 23 11:23:24 paris.cit.nih.gov systemd[1]: Starting NFSv4 ID-name mapping.... Apr 23 11:23:24 paris.cit.nih.gov systemd[1]: Started NFSv4 ID-name mapping .... Hint: Some lines were ellipsized, use -l to show in full. but when I ssh into the server as myself, I'm mounted owned by nobody:nobody. What else do I need to do for systemd? mark "really need to order that rubber chicken to sacrifice"

1 0

semi-OT: t-bird mime type on .pdf attachment is wrong
by m.roth＠5-cent.us 23 Apr '15

23 Apr '15

I was sending my manager a copy of a form, and attached it (not inline), using -t-bird, and he complains it didn't want to open. Looking at the message source, t-bird had decided that the mime type was all/allfiles, though the name ended in .pdf. I've searched via the config editor, and I've been googling, and not finding anything. (I just *adore* the current google: I have +"all/allfiles" in the search terms, and in the para it displays on a hit I see "all somethingorother", with the word "all" bolded....) Anyone got ideas? I've looked in .thunderbird/<blah>.default/mime_types.rdf, and everything looks good in there. mark

3 3

Probs with Routing (CentOS7 , KVM)
by Andreas.Reschke＠mahle.com 23 Apr '15

23 Apr '15

Hi there, I've installed a new KVM-Server. The routing in all instances are only working after "arp -s ip_of_router mac_of_router" Server: CentOS7, KVM Clients: CentOS6 and Fedora 21 What going wrong? [root@bgstkvmlr01 ~]# ifconfig bond0: flags=5187<UP,BROADCAST,RUNNING,MASTER,MULTICAST> mtu 1500 inet6 fe80::3ed9:2bff:fe0b:c706 prefixlen 64 scopeid 0x20<link> ether 3c:d9:2b:0b:c7:06 txqueuelen 0 (Ethernet) RX packets 7341811 bytes 9977559369 (9.2 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 2649574 bytes 3041071431 (2.8 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.20.91.233 netmask 255.255.255.0 broadcast 10.20.91.255 inet6 fe80::3ed9:2bff:fe0b:c706 prefixlen 64 scopeid 0x20<link> ether 3c:d9:2b:0b:c7:06 txqueuelen 0 (Ethernet) RX packets 502795 bytes 41156803 (39.2 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 404863 bytes 2871651286 (2.6 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 enp3s0f0: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 1500 ether 3c:d9:2b:0b:c7:06 txqueuelen 1000 (Ethernet) RX packets 7318606 bytes 9975484026 (9.2 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 2649122 bytes 3041013575 (2.8 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 enp3s0f1: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 1500 ether 3c:d9:2b:0b:c7:06 txqueuelen 1000 (Ethernet) RX packets 23205 bytes 2075343 (1.9 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 452 bytes 57856 (56.5 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Lokale Schleife) RX packets 587461 bytes 3015361475 (2.8 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 587461 bytes 3015361475 (2.8 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 virbr0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 inet 192.168.122.1 netmask 255.255.255.0 broadcast 192.168.122.255 ether 52:54:00:04:a7:50 txqueuelen 0 (Ethernet) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 vnet0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::fc54:ff:fe63:59c4 prefixlen 64 scopeid 0x20<link> ether fe:54:00:63:59:c4 txqueuelen 500 (Ethernet) RX packets 362 bytes 29416 (28.7 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 3751 bytes 310945 (303.6 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 vnet1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::fc54:ff:fea4:7493 prefixlen 64 scopeid 0x20<link> ether fe:54:00:a4:74:93 txqueuelen 500 (Ethernet) RX packets 594280 bytes 54135245 (51.6 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 6887388 bytes 9904127165 (9.2 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [root@bgstkvmlr01 ~]# route -n Kernel IP Routentabelle Ziel Router Genmask Flags Metric Ref Use Iface 0.0.0.0 10.20.91.1 0.0.0.0 UG 0 0 0 br0 10.20.91.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 169.254.0.0 0.0.0.0 255.255.0.0 U 1011 0 0 br0 192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0 [root@bgstkvmlr01 ~]# Mit freundlichen Grüßen / Kind regards Mr. Andreas Reschke MAHLE International GmbH Unix/Linux-Administration (FIG5.1) Pragstr. 26 - 46, 70376 Stuttgart, Germany Phone: +49 711 501-47598, Fax: +49 711 501-44 47598 Mobile: 0173-3197397 andreas.reschke(a)mahle.com, http://www.mahle.com MAHLE International GmbH, Location: Stuttgart, Registered: Amtsgericht Stuttgart, HRB 16413 Management Board: Prof. Dr. Heinz K. Junker, Arnd Franz, Michael Frick, Michael Glowatzki

2 2

CentOS-announce Digest, Vol 122, Issue 12
by centos-announce-request＠centos.org 23 Apr '15

23 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0871 CentOS 6 dbus BugFix Update (Johnny Hughes) 2. CESA-2015:0869 Important CentOS 5 kvm Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 22 Apr 2015 14:46:28 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0871 CentOS 6 dbus BugFix Update Message-ID: <20150422144628.GA14662(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0871 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0871.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 154884ae0ff5a4a9ed7aff22f58bb5539f932f18ca469890a30193e10e21da45 dbus-1.2.24-8.el6_6.i686.rpm 1032a57d04f2f53d29f758562d5a58490ca395fdfa59b96d4a8845becbe9c601 dbus-devel-1.2.24-8.el6_6.i686.rpm 5e3ebdeaec7d9e936bed965c6126fa5c2e09cae009d9113ab2fd3ab524108ca5 dbus-doc-1.2.24-8.el6_6.noarch.rpm 831edc20cf2faf3c49c669de67053534dcd46c21a9320331441bbb5667d952c1 dbus-libs-1.2.24-8.el6_6.i686.rpm dc5db046ac22f2ba0520805021f4a3207290fbff10226befa0bd2f36e706f3c7 dbus-x11-1.2.24-8.el6_6.i686.rpm x86_64: 62d7b03f9a215c2ed46745f01d8840de1dda8747eee4eae317fad942850c43f8 dbus-1.2.24-8.el6_6.x86_64.rpm 1032a57d04f2f53d29f758562d5a58490ca395fdfa59b96d4a8845becbe9c601 dbus-devel-1.2.24-8.el6_6.i686.rpm 82901ad649682842fedda2f2641b44a32a536d2eaeb431c0d5dee96d54fa9302 dbus-devel-1.2.24-8.el6_6.x86_64.rpm 5e3ebdeaec7d9e936bed965c6126fa5c2e09cae009d9113ab2fd3ab524108ca5 dbus-doc-1.2.24-8.el6_6.noarch.rpm 831edc20cf2faf3c49c669de67053534dcd46c21a9320331441bbb5667d952c1 dbus-libs-1.2.24-8.el6_6.i686.rpm e412f3b9c5a250d9b08617f967ff5a0b81cddd7dc31c57bd4dc6a8fba2fee7da dbus-libs-1.2.24-8.el6_6.x86_64.rpm e5af547513f8bd81ad1b52eea43b7d93b3a00304c882e072744634b25727ba9b dbus-x11-1.2.24-8.el6_6.x86_64.rpm Source: 97c5927a869793f0edd404c59b0d89d15c2d4db3b466b49ed25f00949b1eca84 dbus-1.2.24-8.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 22 Apr 2015 14:47:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0869 Important CentOS 5 kvm Security Update Message-ID: <20150422144716.GA9232(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0869 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0869.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 110cfc729e2e536ea057491fa59ad58b2a601de7a68914954d47b359df8ce677 kmod-kvm-83-270.el5.centos.x86_64.rpm f23c984edf95cb75ab3a14337693c29cc031b98a2c83203742910742bfbb2a4a kmod-kvm-debug-83-270.el5.centos.x86_64.rpm efd27316bb50ba740b8572395eda046d47b82c0cfa4fb17954a6414442d55c83 kvm-83-270.el5.centos.x86_64.rpm be2b6fe5f10ea4ae06b261269c6b2b4cd1a960b40322770584a23515ecde78da kvm-qemu-img-83-270.el5.centos.x86_64.rpm d5c445566348626991bb0d9a11a62e8002df8e542d79c8ecdd7bc4b4d30d673f kvm-tools-83-270.el5.centos.x86_64.rpm Source: eb82ad54a0dd3a25e5f95c1c2a4ea4c9bb4d8e9039427c55c485edaef20a0fc5 kvm-83-270.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 12 ************************************************

1 0

Bridg and dhclient
by Subscriber 23 Apr '15

23 Apr '15

Hi. Anyone can help me? I have Linux 3.10.0-123.20.1.el7.x86_64 # cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" I added new virtual interfaces (br71 and vlan71) via NetworkManager # cat /etc/sysconfig/network-scripts/ifcfg-br71 DEVICE=br71 STP=no TYPE=Bridge BOOTPROTO=none IPV6INIT=no NAME=br71 ONBOOT=yes # cat /etc/sysconfig/network-scripts/ifcfg-vlan71 VLAN=yes TYPE=Vlan DEVICE=vlan71 PHYSDEV=team0 VLAN_ID=71 REORDER_HDR=0 BOOTPROTO=none IPV6INIT=no NAME=vlan71 ONBOOT=yes NM_CONTROLLED=yes BRIDGE=br71 Q: When interface going up (nmcli connection up br71) it was trying to get ip-addres via dhclient (but options BOOTPROTO=none uses). Why? nmcli device status DEVICE TYPE STATE CONNECTION vlan71 vlan connected vlan71 br71 bridge connecting (getting IP configuration) br71 Something wrong in my config files? Thx.

1 0

hostname on centos 7.1
by Jerry Geis 23 Apr '15

23 Apr '15

I have a file /etc/sysconfig/network and in the file is cat /etc/sysconfig/network # Created by anaconda HOSTNAME=zotac_c7.msgnet.com [root@localhost ~]# I rebooted and the prompt is still localhost ? What is the new thing in CentOS 7 to set the host name such that then the prompt is correct also? Thanks Jerry

5 5

About CentOS Live CD
by WangMike 23 Apr '15

23 Apr '15

In CentOS 7.x, two new Live CDs are introduced: CentOS-7.0-1406-x86_64-GnomeLive.iso and CentOS-7.0-1406-x86_64-KdeLive.iso My question is: is this a long term strategy? or in other words, will they be maintained in all future CentOS 7.x releases? Since CentOS 6.4 or 6.5, many system tools are removed from Live CD. That limits many use cases. I am checking that if I can rely on the new Gnome/KDE based Live CD which contains more system tools.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss