- Discuss - lists.centos.org

Installing HomeBank on CentOS 7.1
by Jatin 04 Apr '15

04 Apr '15

Hi I have recently installed CentOS 7.1 on my laptop. Earlier i was using Ubuntu 14.04. I have managed to successfully install all the apps that i was using in ubuntu in CentOS 7.1 except for the app named as: HomeBank http://homebank.free.fr/ Here is the information about my system: [jatin@localhost ~]$ cat /etc/*release CentOS Linux release 7.1.1503 (Core) NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7" CentOS Linux release 7.1.1503 (Core) CentOS Linux release 7.1.1503 (Core) Here is the repo list that i have enabled and using so far: [jatin@localhost ~]$ yum repolist Loaded plugins: fastestmirror, langpacks Determining fastest mirrors * base: centos.excellmedia.net * epel: mirror01.idc.hinet.net * extras: centos.excellmedia.net * nux-dextop: li.nux.ro * updates: mirrors.fibo.vn adobe-linux-x86_64 2/2 repo id repo name status adobe-linux-x86_64 Adobe Systems Incorporated 2 base/7/x86_64 CentOS-7 - Base 8,652 epel/x86_64 Extra Packages for Enterprise Linux 7 - x86_64 7,602 extras/7/x86_64 CentOS-7 - Extras 79 nux-dextop/x86_64 Nux.Ro RPMs for general desktop use 1,919 updates/7/x86_64 CentOS-7 - Updates 300 Appreciate any help in this regard. Thanks Jatin

5 6

Explanation please?
by James B. Byrne 04 Apr '15

04 Apr '15

I am seeing log file entries like this: IN=eth0 OUT=eth1 SRC=109.74.193.253 DST=x.y.z.34 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=49692 PROTO=ICMP TYPE=3 CODE=3 [SRC=x.y.z.34 DST=109.74.193.253 LEN=94 TOS=0x00 PREC=0x00 TTL=53 ID=41330 PROTO=UDP SPT=34679 DPT=53 LEN=74 ] This is found on our gateway host. eth0 is the WAN i/f, eth1 is the LAN i/f. Our netblock is x.y.z.0/24. Can somebody tell me what this record is? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

unsetting/erasing an iptables mark
by Boris Epstein 03 Apr '15

03 Apr '15

Hello all, iptables provides a way to mark/tag packets for future identification/accounting, etc. A brief discussion of it is offered here: https://wiki.archlinux.org/index.php/Advanced_traffic_control Here is a more detailed description of the issue I am working on: http://lists.centos.org/pipermail/centos/2015-April/151245.html Getting to the crux of the issue as it stands now. I need to get rid of the mark on the packets after they have been processed by tc and sent on. That can be done by a VM down the line, too. Basic logic of the process should be: "anything that comes with a mark, erase that mark, send it on". Effectively, going off this syntax: iptables -A FORWARD -t mangle -i eth0 -j MARK --set-mark 6 I would need to be able to come up with something like --erase-mark or functional equivalent thereof. Any suggestions much appreciated. Cheers, Boris.

1 0

vncserver on CentOS 7
by Jerry Geis 03 Apr '15

03 Apr '15

I am trying to setup a centos 7.1 vncserver I cannot believe they went from a relatively easy process in 6 to the "crazyness" that is 7. I did the following: yum install tigervnc-server cp /lib/systemd/system/vncserver@.service /etc/systemd/system systemctl daemon-reload edit /etc/systemd.system/vncserver@.service and replace <USER> with myuser su - myuser run vncpassword to set password systemctl enable vncserver@. Says its enabled: systemctl list-unit-files | grep vnc vncserver@.service enabled using another machine to connect gives error about nothing there. netstat -tuln | grep 5900 gives nothing. What did I miss? Thanks, Jerry

5 7

Re: [CentOS] OT: Recommended anti-virus for Windows
by Always Learning 03 Apr '15

03 Apr '15

On Fri, 2015-04-03 at 10:17 +0300, Александр Кириллов wrote: > Paul, world's a big place. We just see many things differently. > The West pretends the rules invented by the West are universal. They are > not. Hi Александр (Aleksandr, Alexander), Agreed. The West is far from perfect and has a terrible history of supporting corrupt and brutal regimes as well as subverting some democratically elected governments that were not pro-USA. Any intelligent service would love to get internal access to as many computers as possible. Kasperski (from the largest country in the world) is a potential weakness. So too are the USA anti-virus Windoze packages which ignore penetrations by Uncle Sam (special 'virus' signatures accepted). Conversely non-Windoze machines running Linux, BSDs etc. are inherently more safe. It is good that many people from different countries, different religions, different customs and different daylight hours can peacefully unite in their collective use and enjoyment of Centos. > Je ne suis pas Charlie. Pourquoi ? Did those people, the attackers and their victims, really need to die ? We have only 1 life. Best regards, Paul.

1 1

OT: Recommended anti-virus for Windows
by J Martin Rushton 03 Apr '15

03 Apr '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry to mention the "opposition" here, but I have a family member's laptop to protect, and I'm not allowed to upgrade it to Linux. What's the current best recommendation? Thanks, MArtin -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJVHbCMAAoJEAF3yXsqtyBl4I8P/AsvH+cyGcG9PDtL8I091WJc jaAhT8Z77G8LBTNaCUi1NXaR3zYsxZ1LltS8MyyqpA+TZ5TkwGRI5V0g2h5owrXv vmFNHW4DQcnB5D4s5+B50lnjyIWgtLG0BKUwCgLik++U11umHd5sCTqXTaHzlyP8 Ndz2RAVEm9A8T3My7fKeVF+/c2pt6rKaRoifeTiH+IUnmvuFHPHuQEpLuOx0qKLH BCHyg7ZJcpwQEocYMhZu7JkZ/zg5/eCb+0HIq5qOCkeRj64ax0QOMzlvcScBRQDp tBzXIAXnFGMNmgE8tvD9Xh2Gi/OKx/bbqRdo8mMzUGUlWSErSt2UMPkpN3Vm3S2C wQhSqMoNnxWCypofazmIXH+TKn1/ipUhZXF3GcZsBYDfIb95kvdBrJm//QioI8Fy BFGc5Cj9DjXNxIbCfvQuyrG1RDdwHKjt/AMmoB0RXpSwhxRfS2749gyrkGXRUSSd IFRpX8Ds0quxx8D9YY96FYX4VbPFhFKIm64OigjLOenedek4A0TpUg7tF5HpyDA7 SXl/l9wFbqAOIKR+VYHIix9UPqxUkU/6fio1D/RhD+8gulY9Tj4Bx5vjpVkJm4wY +Dj0VZ6LyhhkkOTypvENrY2imyxJ+MQ/xKiBQCcvGJIkNcxKr3Xd9D6cFkkkZWR7 bAaC26I/cC4witLZSC2k =1XHp -----END PGP SIGNATURE-----

8 9

Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64
by James B. Byrne 03 Apr '15

03 Apr '15

On Thu, April 2, 2015 15:25, Jim Perrin wrote: > > > On 04/02/2015 01:28 PM, Phelps, Matthew wrote: > >> >> Soliciting our feedback *before* changing everything regarding >> release names would have been nice. > > We did. > > http://lists.centos.org/pipermail/centos-devel/2015-February/012873.html > > You mean this? On: Sun Feb 22 23:19:42 UTC 2015 Karanbir Singh mail-lists at karan.org wrote: >> We have also decided to split the /etc/redhat-release link >> to /etc/centos-release and use that as a way to better >> indicate what codebase the running CentOS Linux instance >> was derived from. >> >> Examples of what these files will look like in say March 2015 >> ( if .1 is released upstream by then ): >> >> ------------------- >> /etc/centos-release: >> CentOS Linux release 7.1.1503 (Core) >> >> /etc/redhat-release >> Derived from Red Hat Enterprise Linux 7.1 (Source) Hmmmmm. I wonder how the proposed 7.1.1503 became 7.1503 in practice. Bait and switch? Personally I do not care one way or the other what RH tells Centos to call itself. The priests can decide and the faithful can either put up with it or change pews. But I find it somewhat distressing to view otherwise intelligent people for whom I have a great deal of personal regard debase themselves with patently inadequate, and frequently deliberately misleading, justifications for unpopular decisions. BTW. What happens if a bad ISO gets spun, released and then is replaced in the same month? Does it become: 7.1504_a?; 7.1504b?; 7.1504_1?; 7.150403? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Community voice (was [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64)
by Tim Bell 03 Apr '15

03 Apr '15

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Karanbir Singh > Sent: 03 April 2015 01:00 > To: centos(a)centos.org > Subject: Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on > x86_64 > > On 02/04/15 21:35, Phelps, Matthew wrote: > > > See my reply earlier. The description of the centos-devel list says > > "this is strictly about development." > > > Matt, come join the contributor base - be a commnuity communication liason ( > or, I am sure we can find a title to quantify this ). > > stretching this a bit futher : lets see if we can find 10 people who might be > considered 'community beacons', who could / would act as commnuity comms > and liason to make sure we are driving in the right directions and communicating > things in the most impactful manner. > > I am willing to lobby the board to then allow this group to spectate and > feedback into Board Meetings ( we meet once a month ). > Limiting the influence of the community to spectate and feedback seems less than I would expect. If community involvement in governance is to be improved, it needs to be seen to make a difference. OpenStack has ambassadors (https://wiki.openstack.org/wiki/Community/AmbassadorProgram) and elections to the 1/3 of the board from the community. This is probably too heavy for CentOS but some form of community representation with a genuine voice in governance would seem reasonable for an open source project. However, with the board rules as defined in http://www.centos.org/about/governance/joining-the-project/, it is difficult for someone who is a user of CentOS as opposed to a developer to meet the merit criteria. The current CentOS board membership would benefit from more diversity and different outlooks to help identify changes which need further community input such as this one. > One data point I want to drop in here is that less than 0.1 % of the CentOS user > base has any contact with the project ( wherein I imply, lists + forums + irc + > bugs + wiki ), so we might need to spread the net wide to find a reasonable > representation. > > thoughts ? > The challenge here is to find the appropriate people to help since many will be paid for delivering value to their companies rather than being paid to work on CentOS. Given their limited time, I do not feel that requiring operators to follow a development list is the right solution to encourage more interaction. Tim > > -- > Karanbir Singh > +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh > GnuPG Key : http://www.karan.org/publickey.asc > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

5 4

Re: [CentOS] OT: Recommended anti-virus for Windows
by James B. Byrne 03 Apr '15

03 Apr '15

On Thu, April 2, 2015 17:11, J Martin Rushton wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Sorry to mention the "opposition" here, but I have a family member's > laptop to protect, and I'm not allowed to upgrade it to Linux. What's > the current best recommendation? > Thanks, We (Harte & Lyne Limited) formerly used F-Prot out of Iceland for the remaining MS based desktops. We are presently switching to ClamAV for Windows (http://www.clamav.net/download.html) Norton is better than nothing; but nowhere near adequate. The rest of the AV field I have no basis for evaluating. MicroSoft's SE has sort of dropped out of the AV race. See: http://www.howtogeek.com/173291/goodbye-microsoft-security-essentials-micro… -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

iptables marking and NAT issue
by Boris Epstein 03 Apr '15

03 Apr '15

Hello all, It appears that, for some reason I have thus far failed to understand when you use marking in iptables you then run into troubles if you attempt to do NAT (MAQUERADE). Let me describe this in more detail. We are attempting to use a network test environment named ATCD running it on a CentOS VM under VirtualBox. For more into on ATCD see: https://github.com/facebook/augmented-traffic-control The networking inside the VirtualBox environment is private so at some point before you get out of it you've got to have a NAT router - not necessarily on the same VM where the ATCD runs - which also is a router. Be that as it may, ATCD uses a combination of iptables marking and tc to degrade/control network transmission quality in accordance with your settings. And it seems to work just fine up until you reach the NATing router - at which point the transmission drops to very slow if not non-existent. An old article here makes a passing reference to a conflict between iptables marking and MASQ (NAT): http://tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.netfilter.html Unfortunately, the link to another text supposedly detailing how to deal with this is dead. Has anybody encountered this? Any tips on how to fix this issue? Thanks. Boris.

1 0

mounted NFS does not show in df -h
by Tim Dunphy 03 Apr '15

03 Apr '15

Hey guys, This is kind of odd, so I wanted to do a sanity check. I mounted an NFS share like so: [root@web1:~] #mount -t nfs nfs1.jokefire.com:/home /mnt/home Seemed to go ok. Then I took a look at the output of df -h and didn't see it! [root@web1:~] #df -h Filesystem Size Used Avail Use% Mounted on /dev/vda 40G 24G 14G 64% / devtmpfs 996M 0 996M 0% /dev tmpfs 1001M 0 1001M 0% /dev/shm tmpfs 1001M 101M 901M 11% /run tmpfs 1001M 0 1001M 0% /sys/fs/cgroup s3fs 256T 0 256T 0% /backup/cassandradb s3fs 256T 0 256T 0% /backup/mysql nfs1.jokefire.com:/var/www 20G 3.1G 16G 17% /var/www Yet, when I do a df -h on the directory I mounted the NFS share on, I see that it's mounted via NFS as expected: [root@web1:~] #df -h /mnt/home Filesystem Size Used Avail Use% Mounted on nfs1.jokefire.com:/home 20G 3.1G 16G 17% /mnt/home So, what do you think could be happening? Why is it that I can't see the output I'm expecting just by going df -h??? Thanks!! Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

2 1

can't mount an LVM volume inCentos 5.10
by Dave Stevens 03 Apr '15

03 Apr '15

I have a degraded raid array (originally raid-10, now only two drives) that contains an LVM volume. I can see in the appended text that the Xen domains are there but I don't see how to mount them. No doubt this is just ignorance on my part but I wonder if anyone would care to direct me? I want to be able to retrieve dom-0 and one of the dom-Us to do data recovery, the others are of no interest. Suggestions? Will rtfm if directed. Dave excerpt from failed mount attempts --------------- starting here ------------ root@Microknoppix:/home/knoppix# vgchange -ay bulkley Volume group "bulkley" not found root@Microknoppix:/home/knoppix# vgchange -ay /dev/VolGroup00/bulkley Invalid volume group name: VolGroup00/bulkley Run `vgchange --help' for more information. root@Microknoppix:/home/knoppix# vgimport -f VolGroup00 Volume group "VolGroup00" is not exported root@Microknoppix:/home/knoppix# vgchange -ay VolGroup00 8 logical volume(s) in volume group "VolGroup00" now active root@Microknoppix:/home/knoppix# lvscan ACTIVE '/dev/VolGroup00/Dom0' [40.00 GiB] inherit ACTIVE '/dev/VolGroup00/babine' [100.00 GiB] inherit ACTIVE '/dev/VolGroup00/centos-template' [100.00 GiB] inherit ACTIVE '/dev/VolGroup00/bulkley-old' [100.00 GiB] inherit ACTIVE '/dev/VolGroup00/ubuntu' [10.00 GiB] inherit ACTIVE '/dev/VolGroup00/morice' [200.00 GiB] inherit ACTIVE '/dev/VolGroup00/oldserver' [80.00 GiB] inherit ACTIVE '/dev/VolGroup00/bulkley' [100.00 GiB] inherit root@Microknoppix:/home/knoppix# mount /dev/mapper/VolGroup00 aa mount: special device /dev/mapper/VolGroup00 does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/bulkley aa mount: special device /dev/mapper/bulkley does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/dev/VolGroup00 aa mount: special device /dev/mapper/dev/VolGroup00 does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/dev/VolGroup00/bulkley aa mount: special device /dev/mapper/dev/VolGroup00/bulkley does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/dev/VolGroup00/LogVol00 aa mount: special device /dev/mapper/dev/VolGroup00/LogVol00 does not exist root@Microknoppix:/home/knoppix# mount /dev/mapper/dev/VolGroup00/LogVol00/bulkley aa mount: special device /dev/mapper/dev/VolGroup00/LogVol00/bulkley does not exist root@Microknoppix:/home/knoppix# mount /dev/VolGroup00/LogVol00/bulkley aa mount: special device /dev/VolGroup00/LogVol00/bulkley does not exist -- "As long as politics is the shadow cast on society by big business, the attenuation of the shadow will not change the substance." -- John Dewey

2 1

CentOS mailing list for/in Vietnamese
by Nguyen Hung Vu 03 Apr '15

03 Apr '15

Hello all, Any Vietnamese are on this list? How about creating a dedicated mailing list, for Vietnamese, in Vietnamese[1] for the community? Looking the the list of existing mailing list, I see that there are some language-specific communities already there[2] Ref. [1] http://lists.centos.org/mailman/listinfo/centos-vi <http://lists.centos.org/mailman/listinfo/centos-vi> (not exists yet) [2] List of available mailing lists on CentOS: http://lists.centos.org/mailman/listinfo/

1 0

Kernel panic, CentOS 7.1503 fully updated, with executing gkrellm.
by Lamar Owen 03 Apr '15

03 Apr '15

Just a heads up, since I know gkrellm is in EPEL and not in the main CentOS repos. However, something fairly fundamental has changed, as prior to updating, gkrellm worked fine, but now every time I execute gkrellm the kernel panics. I'm going to triage on a different machine, as the panic corrupted at least one system library used by nautilus, but rpm -Va is your friend in these situations, and yum reinstall is its close kin. So I would prefer to duplicate on a burner machine, and I'll try to get a snapshot of the panic. If anyone else wants to try to reproduce, simply try installing the current gkrellm from EPEL on a fully updated CentOS 7 machine and see if it panics on you. I kindof hope it's local to my machine and its configuration (/home is LUKS, for instance), and it would be great if someone could verify that.

4 9

emailing plain text to exchange/outlook
by Les Mikesell 03 Apr '15

03 Apr '15

I know this isn't CentOS-specific, but it is probably a common problem - does anyone have a solution? If you mail something that is plain text from linux a recipient using outlook, it will remove line breaks more or less randomly. There is a way to tell outook to put them back as you read each message, but most people just think I sent it wrong. Is there something you can do to make a plain text list show up correctly short of converting it to html with <br>'s? -- Les Mikesell lesmikesell(a)gmail.com

3 2

Boot Failure [Solved]
by pro alias 02 Apr '15

02 Apr '15

I writ: "The latest kernel kernel-3.10.0.229.1.2.el7.x86_64 appears not to like our Supermicro X9SBAA-F board. It fails on boot with the last message before panic being apic_timer_interupt ...." <snipped rest> It turned out that only one X9SBAA box was affected. Deleting and reinstalling the kernel did not fix the issue. The problem turned out to be the old "initrd" issue in grub.conf. We have seen this from time to time on updates in the past. The line: initrd /initramfs-3.10.0-229.1.2.el7.x86_64.img was missing from grub.conf. When manually inserted, the new kernel worked swimmingly. I suspect that this is related to updating grub either immediately before or after a new kernel is installed. It's just enough of an annoyance that someone with spare time on their hands might want to look in it.

2 1

Boot Failure Lastest CEntos 7 Kernel on X9SBAA-F Board
by pro alias 02 Apr '15

02 Apr '15

The latest kernel kernel-3.10.0.229.1.2.el7.x86_64 appears not to like our Supermicro X9SBAA-F board. It fails on boot with the last message before panic being apic_timer_interupt . Previous kernels load very well. We erased and reinstalled the kernel, it verifies good as does everything else using "rpm- qaV". Anyone have any ideas?? Pretty hard to troubleshoot when you just get the last few lines on the screen.

2 1

OpenSSL vulnerability fix
by Venkateswara Rao Dokku 02 Apr '15

02 Apr '15

Hi All, I wanted to fix the openssl vulnerabilities (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572) in my CentOS 5.5 and found out that 0.9.8zd has the fixes I am looking for (from the https://www.openssl.org/news/vulnerabilities.html link). But, When I tried to find the openssl-0.9.8zd rpm package, I did not find it in http://mirror.centos.org/centos/5/updates/x86_64/RPMS/. The latest that I could find was 0.9.8e-31-el5. Can you please help me on how can I find the rpm I am looking for or How can I fix the vulnerabilities.? Thanks for your help. -- Thanks & Regards, Venkateswara Rao Dokku.

3 4

low latency kernel?
by Les Mikesell 02 Apr '15

02 Apr '15

Someone recently posted on the x2go list that he had a problem with jerky videos playing remotely on Ubuntu, but solved it by installing a low latency kernel that was available as an alternative. That made me curious as to whether CentOS has an equivalent - or a way to build something similar. -- Les Mikesell lesmikesell(a)gmail.com

2 1

CentOS-announce Digest, Vol 122, Issue 2
by centos-announce-request＠centos.org 02 Apr '15

02 Apr '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:0771 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 2. CEEA-2015:0717 CentOS 7 tzdata Enhancement Update (Johnny Hughes) 3. CEBA-2015:0769 CentOS 6 libvirt BugFix Update (Johnny Hughes) 4. CEBA-2015:0772 CentOS 6 openssl BugFix Update (Johnny Hughes) 5. CESA-2015:0771 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 6. CESA-2015:0771 Important CentOS 5 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 1 Apr 2015 14:33:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0771 Important CentOS 7 thunderbird Security Update Message-ID: <20150401143326.GA46610(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0771 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0771.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7ebfced7a86fc0807143f90dbf4ca28fdd63b38d2cfe442fffbc8ca3d9395394 thunderbird-31.6.0-1.el7.centos.x86_64.rpm Source: 61228bdaf11280dbf4a5f9360fc668b3460f5f9cc8ec981a3efb808384207d86 thunderbird-31.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 1 Apr 2015 14:33:03 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:0717 CentOS 7 tzdata Enhancement Update Message-ID: <20150401143303.GA46517(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:0717 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0717.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 818c1d17d5adb9ab3d6757430050e8070e06e2af4ee54a1d8bdfb0cb460722ee tzdata-2015b-1.el7.noarch.rpm 71e6f2749ec0de934123278410f5df6209a4190d6e11081b47704930818abed5 tzdata-java-2015b-1.el7.noarch.rpm Source: 8ec69e7d73b7f0cd4cbef055142adf3c5098070bfdb2720e7c6a94614c66ab63 tzdata-2015b-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 1 Apr 2015 13:37:08 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0769 CentOS 6 libvirt BugFix Update Message-ID: <20150401133708.GA41162(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0769 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0769.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4ad971b924283fbc82dae8448ee1b66ecbc848ef04db26678c076ce7212f2170 libvirt-0.10.2-46.el6_6.4.i686.rpm 2c11678643a4b451f39126892d4760c819e2d10e17b7665438e5535710ad0821 libvirt-client-0.10.2-46.el6_6.4.i686.rpm 23285525bead07faa02d923eb7524ae5f5869b1dd87c4a1d3c44c9b3c3ed4102 libvirt-devel-0.10.2-46.el6_6.4.i686.rpm b04c0f7edbd1554eb510efc2974a7b4ba5207230c5b6697433eafbd677c19fd1 libvirt-python-0.10.2-46.el6_6.4.i686.rpm x86_64: 1c73ef3ecea2073fe7159f92c475c1332dbd54824897382304f520c8a33aed28 libvirt-0.10.2-46.el6_6.4.x86_64.rpm 2c11678643a4b451f39126892d4760c819e2d10e17b7665438e5535710ad0821 libvirt-client-0.10.2-46.el6_6.4.i686.rpm 653aa707dbcf4df2bba46c2324d5cbb98354d1b987eb67a7b1d26bea63e37601 libvirt-client-0.10.2-46.el6_6.4.x86_64.rpm 23285525bead07faa02d923eb7524ae5f5869b1dd87c4a1d3c44c9b3c3ed4102 libvirt-devel-0.10.2-46.el6_6.4.i686.rpm 0756926b4fd386e5ffc83182ef87cefc1aa9430c72514480ba6157cdc4a0f9b9 libvirt-devel-0.10.2-46.el6_6.4.x86_64.rpm 8a67dfcba8fe5f0cca99698b19241b84b31167ecb233644e70b81461e219981a libvirt-lock-sanlock-0.10.2-46.el6_6.4.x86_64.rpm 90c1e5d9057e403e2f351f0448c564e6e66958e7d8d0a8306854fb65fafc29f7 libvirt-python-0.10.2-46.el6_6.4.x86_64.rpm Source: 4a3e98c3a2c0e26729f92c5a5b14df9eb01ca9e2b485a512598a0ecce653ac30 libvirt-0.10.2-46.el6_6.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 1 Apr 2015 13:37:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0772 CentOS 6 openssl BugFix Update Message-ID: <20150401133732.GA41279(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0772 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0772.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 41659461dfbc5f9ad6f32bf6d01385d0612829409a357e38aa060365123e7052 openssl-1.0.1e-30.el6.8.i686.rpm c65591768da26f73430303389ef04d3e16f5fbad641ff6e5373cfea18172edec openssl-devel-1.0.1e-30.el6.8.i686.rpm 91af1b70c6cb34e72b607251fcbe1b7deaefb62305f880793b8e473222e77b97 openssl-perl-1.0.1e-30.el6.8.i686.rpm 450af614f5c7e43c3886f8157daa7562ff0262fb58935a3d25b2dedb36a6a2c7 openssl-static-1.0.1e-30.el6.8.i686.rpm x86_64: 41659461dfbc5f9ad6f32bf6d01385d0612829409a357e38aa060365123e7052 openssl-1.0.1e-30.el6.8.i686.rpm 61c7f512a888cf7b6e10077a834cdc6068ff2b5ef6ff3f46bc711d7280c9b97b openssl-1.0.1e-30.el6.8.x86_64.rpm c65591768da26f73430303389ef04d3e16f5fbad641ff6e5373cfea18172edec openssl-devel-1.0.1e-30.el6.8.i686.rpm f3f37c0e41241e075e337191221972db1d30a83e26a02308bf7e0a11adf205c7 openssl-devel-1.0.1e-30.el6.8.x86_64.rpm a69ab8b475b329367440c62abe428b4ea99ee66deea2c49c870f326e47ddab25 openssl-perl-1.0.1e-30.el6.8.x86_64.rpm 9e052cb778422d1353469c33f00790c2bd5a153882d90eca8925e58cbe069f3f openssl-static-1.0.1e-30.el6.8.x86_64.rpm Source: e7c3b41c56fd2e7a3816d94623f9cbe57b0f1539f84032672f0e48e75e9e3a6b openssl-1.0.1e-30.el6.8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 1 Apr 2015 16:12:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0771 Important CentOS 7 thunderbird Security Update Message-ID: <20150401161227.GA10302(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0771 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0771.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7ebfced7a86fc0807143f90dbf4ca28fdd63b38d2cfe442fffbc8ca3d9395394 thunderbird-31.6.0-1.el7.centos.x86_64.rpm Source: 61228bdaf11280dbf4a5f9360fc668b3460f5f9cc8ec981a3efb808384207d86 thunderbird-31.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 1 Apr 2015 18:06:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0771 Important CentOS 5 thunderbird Security Update Message-ID: <20150401180644.GA4611(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0771 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0771.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b923092c5411b96e3732b1a9a3491a43fa9ded362b2dfb91a8280447ac7c899d thunderbird-31.6.0-1.el5.centos.i386.rpm x86_64: bc45f9ffc81cdee944d9616d921277f73841be88edc06ddb336cf93473ad0a69 thunderbird-31.6.0-1.el5.centos.x86_64.rpm Source: b77452b4fdd245dcc599fba4b0624a3ce8ab1dc4c8ea41544079cb9b8768b06b thunderbird-31.6.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 122, Issue 2 ***********************************************

1 0

Centos7: start job running for dev/mapper-centos\x2dhome.device
by johan.vermeulen7＠telenet.be 02 Apr '15

02 Apr '15

Hello All, I have this Centos7 machine that"s dualbooted with Win7. It's Centos7 with Mate desktop. The upgrade to Centos7.1 was interrupted. I ssh-d into the machine and finished it manualy, by issuing the command package-cleanup --cleandupes and yum update Now I' missing some packages, after some reïnstalling, I can boot again. However, I can not log in. EM:apr 02 13:58:25 jvanbaekel lightdm[1596]: ** (process:2903): WARNING **: Failed to open CK session: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.ConsoleKit was not provided by any .service files So far I was not able to find out which pakages I'm missing for lightdm. Can anyone help me with this? greetings, Johan

1 1

os-release file doesn't match upstream?
by Stephen Harris 02 Apr '15

02 Apr '15

On a fully patched C7 machine... % cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) % cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7" In particular note the version ID is 7 On a RedHat machine: % cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.1 (Maipo) % cat /etc/os-release NAME="Red Hat Enterprise Linux Server" VERSION="7.1 (Maipo)" ID="rhel" ID_LIKE="fedora" VERSION_ID="7.1" PRETTY_NAME="Red Hat Enterprise Linux Server 7.1 (Maipo)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:redhat:enterprise_linux:7.1:GA:server" HOME_URL="https://www.redhat.com/" BUG_REPORT_URL="https://bugzilla.redhat.com/" REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 7" REDHAT_BUGZILLA_PRODUCT_VERSION=7.1 REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux" REDHAT_SUPPORT_PRODUCT_VERSION="7.1" Here the version ID is 7.1; different to CentOS. Is this a bug or is it deliberate? -- rgds Stephen

3 2

Centos 7 License???
by David A. De Graaf 01 Apr '15

01 Apr '15

Today I did a yum upgrade to my kvm'ized Centos 7 test machine (perhaps a bad day to do such a thing) and received new kernel vmlinuz-3.10.0-229.1.2.el7.x86_64, among many other things. When I rebooted, I was asked to confirm (or renew, or some such) my license. My LICENSE ??? I was booting in text mode and the actions required were a) unfamiliar, and b) hard to understand. As I recall, I had to read the EULA - a worrisomely Microsoftian demand - and accept it. Of course, the terms were pretty benign. Then I had to continue. I can't remember the exact language. Of course, now when I reboot, all this cruft is gone. Is this a cute April Fool joke? If not, WTF is going on? -- David A. De Graaf DATIX, Inc. Hendersonville, NC dad(a)datix.us www.datix.us A: Because people read from top to bottom Q: Why is top posting bad?

7 8

SEmodule dependency hell.
by James B. Byrne 01 Apr '15

01 Apr '15

I want you all to see what I went through trying to simply reassign (unsuccessfully) the context of a well-known port. To the best of my ability to recall none of the packages mentioned below are even installed on the host in question. Why are these dependices preventing me from removing a disused SELinux policy. I have done exactly that, reassign port contexts, in the past without encountering this situation. So it has to be a recent development. I am not against SELinux. We use it extensively. But this is not security it is simply BS. It is stuff like this that causes people to say just turn selinux off altogether. semodule -r apache libsepol.print_missing_requirements: awstats's global requirements were not met: type/attribute httpd_log_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r awstats semodule -r apache libsepol.print_missing_requirements: bugzilla's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r bugzilla semodule -r apache libsepol.print_missing_requirements: cobbler's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r cobbler semodule -r apache libsepol.print_missing_requirements: collectd's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r collectd semodule -r apache libsepol.print_missing_requirements: git's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r git semodule -r apache libsepol.print_missing_requirements: gpg's global requirements were not met: type/attribute httpd_sys_content_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r gpg semodule -r apache libsepol.print_missing_requirements: mediawiki's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r mediawiki semodule -r apache libsepol.print_missing_requirements: munin's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r munin semodule -r apache libsepol.print_missing_requirements: nagios's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r nagios semodule -r apache libsepol.print_missing_requirements: w3c's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r apache libsepol.print_missing_requirements: webadm's global requirements were not met: type/attribute httpd_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r webadm semodule -r apache libsepol.print_missing_requirements: webalizer's global requirements were not met: type/attribute httpd_sys_content_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! semodule -r webalizer semodule -r apache libsepol.context_from_record: type httpd_openshift_script_exec_t is not defined libsepol.context_from_record: could not create context structure libsepol.context_from_string: could not create context structure libsepol.sepol_context_to_sid: could not convert unconfined_u:object_r:httpd_openshift_script_exec_t:s0 to sid invalid context unconfined_u:object_r:httpd_openshift_script_exec_t:s0 libsemanage.semanage_install_active: setfiles returned error code 1. semodule: Failed! semodule -R [root@xnet241 ~]# semanage port -d -t http_port_t -p tcp 80 /usr/sbin/semanage: Port tcp/80 is defined in policy, cannot be deleted -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

How to decrypt rootpassword form kickstart file
by Jegadeesh Kumar 01 Apr '15

01 Apr '15

Hi Team, I have the kick start file where my root password is store like # Root password rootpw --iscrypted $1$1SItJOAg$UM9n7lRFK1/OCs./rgQtQ/ # System authorization information auth --useshadow --passalgo=sha512 Is there any way to decry pt the password and get it as plain text. I know single user mode works but my case it in remote site. Thanks, Jegadeesh

10 11

Release 7 1503 includes samba-common.i686 (breaks multilib installs)
by Benjamin Ash 01 Apr '15

01 Apr '15

Hi, Unfortunately we are getting multilib issues with the latest release of CentOS 7. It seems that samba-common.i686 conflicts with samba-common.x86_64, and therefore Yum multilib support. Is this expected? Thanks, -ben Transaction check error: file /usr/bin/net conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/pdbedit conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/profiles conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/smbcontrol conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 file /usr/bin/testparm conflicts between attempted installs of samba-common-0:4.1.12-21.el7_1.i686 and samba-common-0:4.1.12-21.el7_1.x86_64 -- Benjamin Ash | Technical Manager - Intelerad RHCE +1-514-931-6222 ext. 7311 | bash(a)intelerad.com Website <http://www.intelerad.com/> | Twitter<http://www.twitter.com/intelerad> | LinkedIn <http://www.linkedin.com/company/intelerad-medical-systems> | Blog <http://intelerad-insider.com/> -- This email or any attachments may contain confidential or legally privileged information intended for the sole use of the addressees. Any use, redistribution, disclosure, or reproduction of this information, except as intended, is prohibited. If you received this email in error, please notify the sender and remove all copies of the message, including any attachments.

2 2

Thanks for 7.1
by Nux! 01 Apr '15

01 Apr '15

Just wanted to say "Thanks!" to the CentOS team for their efforts to put out a 7.1 release. Upgraded several systems, so far smooth sailing. Good job! -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

6 6

tc seems to have no effect on the NIC's
by Boris Epstein 01 Apr '15

01 Apr '15

Hello all, We have installed this network testing environment: https://github.com/facebook/augmented-traffic-control which seems pretty nice overall. It allows you to artificially degrade your network performance by issuing tc commands to directly affect your networking. I have it set up on two CentOS 6 machines - one a Dell server, one a VirtualBox VM. The tc syntax seems OK, it seems to all make sense - only it seems to have no effect whatsoever on the actual network performance. Hence the question: is there a known issue with tc? Am I perhaps missing some kernel modules, or do I perhaps now have some kernel parameters set correctly? Any insight will be helpful. Thanks in advance, Cheers, Boris.

2 1

Unexplained size difference with CentOS 7 (1503) -01 install media
by Greg Bailey 01 Apr '15

01 Apr '15

In the process of updating my copy of the CentOS 7 (1503) -01 install media, I notice that it's ~70MB larger than the image that it's replacing: $ rsync mirrors.kernel.org::centos/7.1.1503/isos/x86_64/*DVD*.iso -rw-r--r-- 4310695936 2015/03/31 17:05:50 CentOS-7-x86_64-DVD-1503-01.iso -rw-r--r-- 4236247040 2015/03/28 12:15:26 CentOS-7-x86_64-DVD-1503.iso But when I compare sizes using "du" on the mounted ISO files, I can't see any discernible difference: Original CentOS 7 (1503) DVD: $ du -ks /centos7/* 1 /centos7/CentOS_BuildTag 6148 /centos7/EFI 1 /centos7/EULA 18 /centos7/GPL 79428 /centos7/images 73378 /centos7/isolinux 281423 /centos7/LiveOS 3752743 /centos7/Packages 12696 /centos7/repodata 2 /centos7/RPM-GPG-KEY-CentOS-7 2 /centos7/RPM-GPG-KEY-CentOS-Testing-7 3 /centos7/TRANS.TBL Revised CentOS 7 (1503) -01 DVD with centos-release fix: $ du -ks /centos7-01/* 1 /centos7-01/CentOS_BuildTag 6148 /centos7-01/EFI 1 /centos7-01/EULA 18 /centos7-01/GPL 79428 /centos7-01/images 73378 /centos7-01/isolinux 281423 /centos7-01/LiveOS 3752745 /centos7-01/Packages 12696 /centos7-01/repodata 2 /centos7-01/RPM-GPG-KEY-CentOS-7 2 /centos7-01/RPM-GPG-KEY-CentOS-Testing-7 3 /centos7-01/TRANS.TBL Seems like a large delta in ISO size for not much of a change in content. Any ideas? -Greg

1 0

SELinux on CentOS-6.6
by James B. Byrne 01 Apr '15

01 Apr '15

I wish to reuse ports 80 and 443 for a different service. When I try to assign the port context for that service I get this: /usr/sbin/semanage: Port tcp/80 already defined When I try to delete the assigned context then I get this: semanage port -d -t http_port_t -p tcp 80 /usr/sbin/semanage: Port tcp/80 is defined in policy, cannot be deleted httpd is not installed on this host. But looking at the port context assignments I see this nonetheless: semanage port -l | grep ^http_port_t http_port_t tcp 80, 81, 443, 488, 8008, 8009, 8443, 9000 How do I rid myself of these artefacts and make the context assignments that I wish? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

mirrors still catching up and -01.iso images?
by Stuart Barkley 01 Apr '15

01 Apr '15

I'm watching a couple of mirrors catch up with the 7.1 release and am noticing some churn on the .iso images. It appears that new -01.iso versions are coming downstream while some of the mirrors apparently were getting different .iso images. The -01.iso versions look to be significantly larger than the previous non-01.iso versions (the -Minimal .iso appears to have gone from 560M to 630M for -01.iso). I'm not downloading the larger .iso image so don't know the actual content, but the md5/sha files also changed and some of the mirrored -01.iso versions appear to have different sizes (actually from the timestamps it looks like the non-01.iso versions might have been renamed -01.iso before being replaced with newer content). What is the difference between the non-01.iso versions and the -01.iso versions? Is this what we can expect with the monthly rebuilds? For tracability reasons, I don't like seeing different .iso images at different times. We really need to see consistent content on the distribution mirrors. Some of this may still be churn and one mirror may have run out of disk space (or otherwise be waiting for manual intervention). Stuart -- I've never been lost; I was once bewildered for three days, but never lost! -- Daniel Boone

1 1

kernel Panic on desktop
by James B. Byrne 01 Apr '15

01 Apr '15

I arrived at work this morning to find that my desktop unit (CentOS-6.6 KVM) halted with a kernel panic. I am not conversant with any way to save the console display in this case and there was rather a lot of text. I jotted down a few notes and power-cycled the unit to restart. which it did and I am using now to compose this message. The few notes that I manually copied, subject to transcription errors, were: ? pci-configure - slot 0x365.0x420 . . . pic (ed. note: transcription error? maybe pci?) . . . pciehpd - Tainted: G D -------- 2.6.32-504.12.2.el6.x86_64 #1 panic+0x17/0x16f . . . kvm 2998 cpu0 disabled: perfctr wrmsr 0xc1 data 0xabcd 1. Is there any way to get the entire console display following a panic as a text file? 2. I take that this points to a hardware issue of some sort. Any suggestions as to where I look? The system has two NICs but one is disused and has no cable. Following a update last year I began receiving console messages complaining about this state but ignored them. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] opendkim-2.9.0
by James B. Byrne 01 Apr '15

01 Apr '15

On Tue, March 31, 2015 16:18, Frank Cox wrote: > On Tue, 31 Mar 2015 16:11:38 -0400 > James B. Byrne wrote: > >> Does anyone have any idea what has happened and why I might be >> getting that message? > > I don't use that but have you checked to see if you now have a > "rpmsave" file left after installing the update? If so, that's your > old configuration and you might need to re-write the new configuration > file to incorporate your previous customization. > Yes that was the problem. The OpenDKIM maintainers deprecated a configuration option (SenderHeaders) that we were using so the opendkim service would not restart. So there was nothing listening at port 8891. Removing the optin fixed the problem. I can find no discussion of why this option was removed and the OpenDKIM readme (http://www.opendkim.org/opendkim-README) still makes reference to it as the preferred way of handling mailing lists. Go figure. B.T.W. Redhat has apparently 'fixed' (I think) Mailman to deal with the Yahoo/AOL - DMARC problems. But only in RHEL5 (so far). As they have moved all discussion of the bug behind a paywall I can no longer follow developments and so cannot be sure. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

LDAP TLS error -8023
by Paul R. Ganci 01 Apr '15

01 Apr '15

Can somebody tell me what this error means (server, domain etc. changed to protect the innocent)? ldapsearch -H ldap://ldapserv-1.example.com:389 -ZZ -W -D cn=Boss,dc=example,dc=com -b dc=example,dc=com uid=testuser homeDirectory ldap_start_tls: Connect error (-11) additional info: TLS error -8023:A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot. My google searches do not seem to provide any useful information. I am just looking for some hints as to what to look for in my configuration. I just don't know how to interpret this error message. I am sure it is trying to tell me something but I just don't know what. What is really strange is I have a second ldap server which replicates with this one. It works fine so I am pretty convinced the problem is not with the ldap configuration but rather something with the certificates and/or the setup. Thanks. -- Paul (ganci(a)nurdog.com) (303)257-5208

1 1

Release 7 1503
by Jerry Geis 01 Apr '15

01 Apr '15

Just updated to release 7 1503. CentOS team is awesome! I thought I read sometime back that the release was going to rebase to a newer gnome? Did that not happen? Is there a way to get release 7 to a later gnome version? Thanks! Looking forward to playing. Jerry

2 1

opendkim-2.9.0
by James B. Byrne 31 Mar '15

31 Mar '15

There was an update to opendkim 2.10.1 which I applied and now I am seeing this: warning: connect to Milter service inet:127.0.0.1:8891: Connection refused I tried to yum history rollback to 2.9.1 but that package has disappeared so I am evidently constrained to resolve this. Does anyone have any idea what has happened and why I might be getting that message? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Hdd maximum size
by donais 31 Mar '15

31 Mar '15

Server is a Lenovo RV-340 E2420 build 70AB001VUX 8go Support for Sata-3 6gbps and Raid-5 Did someone can tell if it can handle 6tb hard drives? -- Michel Donais

4 3

Building a newer glibc RPM for CentOS 6 and installing into an alternate path
by Alfred von Campe 31 Mar '15

31 Mar '15

We have a third party shared library from a vendor that requires glib 2.15 or newer. We are using CentOS 6.6 which comes with glibc 2.12, and I know it can’t be replaced as it’s an integral part of the OS. However, is it possible to build a glib 2.15 RPM from source to be installed in /opt/centos (or somewhere else other than /usr/lib) so that I can link the one application that requires the third party shared library with this version of glib? If so, does anyone have instructions on how to build such an RPM, or better yet, has already build such an RPM? Thanks, Alfred

7 10

upstart CentOS vs upstart Ubuntu is there any difference between them?
by reynierpm＠gmail.com 31 Mar '15

31 Mar '15

I'm moving some server configurations from Ubuntu Server 12.04 to CentOS 6.6. Now I'm working on `/etc/init` script that should be handled by `upstart` at both OS as far as I know. The files on both server are the same and I mean the same at content level and also at path level and permissions level, is the exactly copy from Ubuntu to CentOS. I'm having some issues with upstart at CentOS since scripts doesn't start and I can't find why (the cause). This is the output from `initctl list` at Ubuntu server: # Ubuntu 12.04 root@qa:/etc/init# initctl list // rest of processes goes here pdoneVendorBroker start/running, process 854 repToolBroker start/running, process 3705 emailBroker start/running, process 3738 cmeBroker start/running, process 3760 messageBroker start/running, process 3727 shareEventHandler start/running, process 3686 edetailBroker start/running, process 3749 pdoneLoginProctor start/running, process 3716 All the processes has been started at OS boot, that's fine. This is the output from CentOS server: # CentOS 6.6 root@staging:/etc/init# initctl list // rest of processes goes here pdoneVendorBroker stop/waiting repToolBroker stop/waiting emailBroker stop/waiting cmeBroker stop/waiting messageBroker stop/waiting shareEventHandler stop/waiting edetailBroker stop/waiting pdoneLoginProctor stop/waiting None processes has been started after OS boot, and that's wrong. Why? What I'm missing here? Can any give me some advice? At CentOS I've tried also to start the process manually by running this: initctl start messageBroker And this is the output at console: messageBroker start/running, process 3587 But if I run the command `initctl list` I didn't see the process started: initctl list rc stop/waiting tty (/dev/tty3) start/running, process 2565 tty (/dev/tty2) start/running, process 2562 tty (/dev/tty1) start/running, process 2558 tty (/dev/tty6) start/running, process 2577 tty (/dev/tty5) start/running, process 2574 tty (/dev/tty4) start/running, process 2571 plymouth-shutdown stop/waiting control-alt-delete stop/waiting debug stop/waiting rcS-emergency stop/waiting kexec-disable stop/waiting pdoneVendorBroker stop/waiting quit-plymouth stop/waiting rcS stop/waiting prefdm stop/waiting repToolBroker stop/waiting init-system-dbus stop/waiting emailBroker stop/waiting splash-manager stop/waiting cmeBroker stop/waiting start-ttys stop/waiting messageBroker stop/waiting shareEventHandler stop/waiting edetailBroker stop/waiting pdoneLoginProctor stop/waiting rcS-sulogin stop/waiting serial stop/waiting This is the content for the file `/ etc/init/messageBroker.conf`: description "messageBroker" start on runlevel [234] stop on runlevel [0156] respawn exec php /usr/local/bin/messageBroker/messageBroker.php post-start script PID=`status messageBroker| egrep -oi '([0-9]+)$' | head -n1` echo $PID > /var/run/messageBroker.pid end script post-stop script rm -f /var/run/messageBroker.pid end script Why it's not starting? What is wrong?

1 0

heavy IO load when working with sparse files (centos 6.4)
by Ron E 31 Mar '15

31 Mar '15

Dear List, We have noticed a variety of reproducible conditions working with sparse files on multiple servers under load with CentOS 6.4. The short story is that processes that read / write sparse files with large "holes" can generate an IO storm. Oddly, this only happens with holes and not with the sections of the files that contain data. We have seen extremely high IO load for example copying a 40 or 80gb sparse file that only has a few gigs of data in it. Attempts to lower the io priority and cpu priority of these processes do not make any measurable difference. (ionice, nice) This has been observed with processes such as: cp rsync sha1sum The server does have to be under some load to reproduce the necessary conditions. The cases we have seen involve servers running 10-30 guests under kvm. Load is in acceptable norms when the processes are run, such as load avg 5-15 on a 24 core (12 core with HT enabled) server. We also verify before starting such a process that the spindle with the file we're working on is not being unduly hammered by another process. These servers have one hardware raid controller each (Dell H700 controller with write cache enabled) and multiple raid arrays (separate sets of physical spindles). Interestingly, the IO storm is not limited to the array / spindles where the sparse file resides but affects all IO on that server. We have looked extensively and not found any account of a similar issue. We have seen this on configurations that are 'plain vanilla' enough to think that this is not something specific to our environment. Wondering if anyone else has seen this and if any suggestions on gathering more data / troubleshooting. We wonder if we've found either a raid controller driver issue, an OS issue or some other such thing. What seems to point in this direction is that even with ionice -c3 which should prevent the process from using IO unless the storage is idle, an io storm which appears to saturate the entire raid bus on a given server can occur. Thanks in advance.

3 3

NTLM Authentication ISA Server
by Tim 31 Mar '15

31 Mar '15

Hello list, how can I get CentOS 7 to authenticate against a Microsoft ISA server for package installations after the OS is installed. In Debian/Ubuntu apt.conf just needs to be edited and it works. How to do so in CentOS? Regards Tim

4 6

CentOS-announce Digest, Vol 121, Issue 13
by centos-announce-request＠centos.org 31 Mar '15

31 Mar '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0754 CentOS 6 cronie FASTTRACK BugFix Update (Johnny Hughes) 2. CEBA-2015:0755 CentOS 6 pinentry FASTTRACK BugFix Update (Johnny Hughes) 3. CESA-2015:0750 Moderate CentOS 6 postgresql Security Update (Johnny Hughes) 4. CEBA-2015:0756 CentOS 6 gnome-terminal BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 30 Mar 2015 13:24:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0754 CentOS 6 cronie FASTTRACK BugFix Update Message-ID: <20150330132420.GA60530(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0754 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0754.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 28de493fc3a314d52bb60c96688fd807c986e4a3885be4eb339c696229dd6b7c cronie-1.4.4-15.el6.i686.rpm ec22b667ff1f9f11ad54f9cb8eeaaf1fcbea2c4eb2a96f655bea877084b739ef cronie-anacron-1.4.4-15.el6.i686.rpm 5223d45f4a40ae9b521844f666504d55778e166f1c5cd8e8dc92bfd3ac22a2b6 cronie-noanacron-1.4.4-15.el6.i686.rpm x86_64: d2238fa4100380f7607393e48345614bc90e1385f1426dc1269c40b01f07b4bb cronie-1.4.4-15.el6.x86_64.rpm f3ea8f9f6fe548d64699592ccbe326ed474f7b1ae17df7a35b3010b419ed26d0 cronie-anacron-1.4.4-15.el6.x86_64.rpm 606d1a6d304f77eb0e05259fcc1e56391073469f4603040e32ba5637e17a34d6 cronie-noanacron-1.4.4-15.el6.x86_64.rpm Source: eba4bb44466ffc8965cd6f3e58e298ad522b0e95eca38cbc2f3b4521500b80ac cronie-1.4.4-15.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 30 Mar 2015 13:24:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0755 CentOS 6 pinentry FASTTRACK BugFix Update Message-ID: <20150330132444.GA60799(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0755 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0755.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d1f4465b64e0161267195bb8fe53f9a8b5b1ee6e6159c3a6f983deae186bda0e pinentry-0.7.6-8.el6.i686.rpm ff437591b4f488bb9e7536e66495fe43ec35c58425b57cabc89e1d066e0365ec pinentry-gtk-0.7.6-8.el6.i686.rpm f72857f70505a1533aa91203b0d2e2b9de4d23b34ea170ea2202073b2ad2705e pinentry-qt-0.7.6-8.el6.i686.rpm 2b5d65c30499cc59b4eeb23b8f166c4511d0419250efa54414fc82c32c51e4c4 pinentry-qt4-0.7.6-8.el6.i686.rpm x86_64: 6c0de956f85b7f1f86b258462fb2546ee8f7f4f3b9e6eecd26a1ea80541964fe pinentry-0.7.6-8.el6.x86_64.rpm 335fec896578be4933278eb11d00a5613092f8e4a94f71339cd445b727bdc05e pinentry-gtk-0.7.6-8.el6.x86_64.rpm fb70a14ae035381aec2b738e8eb807bc61bdbe1dbda8fa5fb45cf003a8de8eb9 pinentry-qt-0.7.6-8.el6.x86_64.rpm e020b8d550bcdeac8b0842500592c857ad5fb4ca0b9938423162f420b39e5e02 pinentry-qt4-0.7.6-8.el6.x86_64.rpm Source: 8ef5e67049e28dfadf0bbcafe5ef34b2cc195f3f238c273ff9b3123d2d7f11f1 pinentry-0.7.6-8.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 30 Mar 2015 13:25:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0750 Moderate CentOS 6 postgresql Security Update Message-ID: <20150330132516.GA61201(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0750 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0750.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9b1c5e6fc09b4bd771526bba9121531dd56ae1066a7e976fcb0a9e59424ecf01 postgresql-8.4.20-2.el6_6.i686.rpm 2d6f25109301286cd1b4c70d76d8b55773aed22d102dee287604db820ef51f1c postgresql-contrib-8.4.20-2.el6_6.i686.rpm 20b37d3688e1231aadbbba02d9de9b1ef0ce14d29df11ddaba457b4e86c3c29f postgresql-devel-8.4.20-2.el6_6.i686.rpm 30e1bd187bf84d8972c738df54008b70bf6479ecbf9a062e0150dd34144a0819 postgresql-docs-8.4.20-2.el6_6.i686.rpm 54e959b271e297dceeaa579a1f7ae7681da67e967977be5bfc3ffd6d2f11066d postgresql-libs-8.4.20-2.el6_6.i686.rpm f90e6904076cf05ac3f078756b6d7d13c727396461ab109d1b2d561d9ff75cb6 postgresql-plperl-8.4.20-2.el6_6.i686.rpm 80bfe27e547b59982c5d25954b5ae85e4b1a6738e5768ae7451f7a772129c891 postgresql-plpython-8.4.20-2.el6_6.i686.rpm 4e89aae1a210bded523f0b0247396dcd1d00c4c0cb557fb89aa48e4c29c18ea8 postgresql-pltcl-8.4.20-2.el6_6.i686.rpm 8e7f2663b0a0eabab967dd85be0d4d8e4a6c2decb934e4e715898ba77ad1f964 postgresql-server-8.4.20-2.el6_6.i686.rpm 834720ab345e29b1492d95ba0ffcd74ef0eef4568a34141590332d057f70d053 postgresql-test-8.4.20-2.el6_6.i686.rpm x86_64: 9b1c5e6fc09b4bd771526bba9121531dd56ae1066a7e976fcb0a9e59424ecf01 postgresql-8.4.20-2.el6_6.i686.rpm ab2948563fa1d47ec9360d10e404f49ceb4f63e818fb949120ecf0c669fda391 postgresql-8.4.20-2.el6_6.x86_64.rpm 46c94eec4d5382afa1325726679e1947fe4b90aea36cd54667d1abdfcf237afd postgresql-contrib-8.4.20-2.el6_6.x86_64.rpm 20b37d3688e1231aadbbba02d9de9b1ef0ce14d29df11ddaba457b4e86c3c29f postgresql-devel-8.4.20-2.el6_6.i686.rpm ee3fdc90c751e7bff1c948e1b0c3a60c3088fbcd69f78f229b62c01a3417a254 postgresql-devel-8.4.20-2.el6_6.x86_64.rpm 33c0334ad155eff14642340d4ffe639321316112bb8335d3b6d73fa2debfdd5f postgresql-docs-8.4.20-2.el6_6.x86_64.rpm 54e959b271e297dceeaa579a1f7ae7681da67e967977be5bfc3ffd6d2f11066d postgresql-libs-8.4.20-2.el6_6.i686.rpm 7b470977301202de1b1fbb5b91e5fa6a49e22817e6d721128f245eb154562c0f postgresql-libs-8.4.20-2.el6_6.x86_64.rpm e74543976b939c8fb02645c5017724c950c2a0f5b055e92024c71aa974a995b7 postgresql-plperl-8.4.20-2.el6_6.x86_64.rpm 03293e559e9a5520dce545a0bdd59b16fce91a2bcc1d7d66a41dcab9b8c8baf4 postgresql-plpython-8.4.20-2.el6_6.x86_64.rpm 0a577fa35944d1edcda3575c0687c0e8502fa607ed22bdf2a125cb1eeff45edb postgresql-pltcl-8.4.20-2.el6_6.x86_64.rpm 4ed70e43633f1631dde37e269b44617fa4f5ccd5dba56d186a61ea2e365a719c postgresql-server-8.4.20-2.el6_6.x86_64.rpm 85b1c69ba73a7802aa51f844d53d3bc3ddb13c582e869260633f0c423a162dbb postgresql-test-8.4.20-2.el6_6.x86_64.rpm Source: cbef7bd40527f2b53850de5b2032aef78bc0bab3068e9ca231f483d302aa9a41 postgresql-8.4.20-2.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 30 Mar 2015 13:25:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0756 CentOS 6 gnome-terminal BugFix Update Message-ID: <20150330132544.GA61389(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0756 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0756.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f142f273b39b52330692113229fb1b2705bcb14cc7d3dca87c9af05b17c30547 gnome-terminal-2.31.3-11.el6_6.i686.rpm x86_64: d7d44f7bf07a6b695501abaf97615bff33d0a8b8624e507ee5de88b633f81e31 gnome-terminal-2.31.3-11.el6_6.x86_64.rpm Source: 091b062c38b298d7fe8bddff8e63d815e8aec3cf1a8ec8ffd8d237869c926fc4 gnome-terminal-2.31.3-11.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 121, Issue 13 ************************************************

1 0

Re: [CentOS] RAID not software raid
by Dan Purgert 31 Mar '15

31 Mar '15

On Mon, 30 Mar 2015 19:42:05 -0400, Stephen wrote: > > 16G/swap 500MB/boot 80G/home 50G/root > > 800G/sdb > > will not install Grub bootloader Fatal error Um, this is JBOD, and not RAID1. Raid1 would be 2x drives (sda & sdb) appearing as one single drive to the OS. Data is byte for byte mirrored between them.

1 0

race conditions in dbus-1.2
by Danny Smit 31 Mar '15

31 Mar '15

Hi everyone, I'm having some issue with a Qt application using D-Bus (Qt API) in a threaded appllication on CentOS 6. Searching for the cause has led me to the following issues in the dbus library: https://bugs.freedesktop.org/show_bug.cgi?id=857 https://bugs.freedesktop.org/show_bug.cgi?id=17754 It appears that there are threading issues with the dbus library version < 1.6. However there doesn't seem to be other version than 1.2 available for CentOS 6. Can someone advise what approach can be used to either work around or solve the issue? For instance, is it even possible to upgrade to a newer dbus version without side effects? Kind regards, Danny Smit

1 0

updating tzdata on CentOS 7
by Dulmandakh 31 Mar '15

31 Mar '15

Hello, Government of Mongolia decided to adopt DST from this 28th March 2015. It’s changes are submitted and accepted by IANA. It seems that update to tzdata (2015b) issued for CentOS 6, but not for CentOS 7. Could you please tell when an update for CentOS 7 will be issued? Thank you.

3 3

Centos 6.4 on Xserve, IPMI error
by Arno B 31 Mar '15

31 Mar '15

Hello! I'm trying to install Centos 6.4 64 bit on this Xserve: http://www.everymac.com/systems/apple/xserve/specs/xserve-intel-xeon-2.8-ei… I got a bootloader from: http://blog.christophersmart.com/2009/07/23/linux-on-an-apple-xserve-efi-on… as none of the official Centos releases (full, minimal, network 64 bit) boot on this machine. They all crash when loading the bootx64.conf. I have built a USB stick with a working bootx64.efi, grub.cfg, together with an initrd and a vmlinuz from the isolinux folder. These seem to get me into booting a kernel until something called IPMI is starting to throw errors at me: Console: switching to colour frame buffer device 128x48 fb0: VESA VGA frame buffer device ipmi message handler version 39.2 IPMI System Interface driver. ipmi_si 0000:09:00.4: enable device (0002 -> 0003) ipmi_si 0000:09:00.4: PCI INT C -> GSI 16 (level, low) -> IRQ 16 ipmi_si: Adding PCI-specified kcs state machine ipmi_si 0000:09:00.7: enable device (0000 -> 0003) ipmi_si 0000:09:00.7: PCI INT D -> GSI 17 (level, low) -> IRQ 17 ipmi_si: Adding PCI-specified bt state machine ipmi_si: Trying PCI-specified kcs state machine at mem address 0x90841000, slave address 0x0 irq 16 IRQ 16/ipmi_si: IRQF_DISABLED is not guaranteed on shared IRQs Using irq 16 ipmi: Found new BMC (man_id: 0x00003f, prod_id: 0x0003, dev_id: 0x20) IPMI kcs interface initialized ipmi_si: Trying PCI-specified kcs state machine at mem address 0x90840000, slave address 0x0 irq 17 Refined TSC clocksource calibration: 2792.999 MHz. Switching to clocksource tsc IPMI BT: timeout in XACTION [ B_BUSY ] 1 retries left IPMI BT: timeout in XACTION [ B_BUSY ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) IPMI BT: timeout in XACTION [ B_BUSY H2B ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) IPMI BT: timeout in XACTION [ B_BUSY H2B ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) IPMI BT: timeout in XACTION [ B_BUSY H2B ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) IPMI BT: timeout in XACTION [ B_BUSY H2B ] failed 2 retries, sending error response IPMI: BT reset (takes 5 secs) then the screen goes to black and the machine doesn't respond to anything anymore... Can anyone please help me with this? Maybe just point me in a direction where to find a solution? I've been googling for a few days now without much results... thanks in advance Arno Beekman

2 1

viewvc for EL7?
by Les Mikesell 30 Mar '15

30 Mar '15

Is there a reliable repo with viewvc for Centos7? Or some reason it isn't in EPEL? -- Les Mikesell lesmikesell(a)gmail.com

1 0

db2 is running out of shared memory
by Harold Pritchett 30 Mar '15

30 Mar '15

Db2 is running our of shared memory. The environment: Virtual computers running under VMware ESXi hypervisor version 5.5. Two different virtual machines, each running CentOS 5, db2 express C, and Apache/PHP and vmware tools. The machines each have 8 GB of memory, 4 processors, and a couple of hundred GB of disk space available. Everything is running on the 64 bit versions. The actual hardware for VMware is a dual processor machine with two Xeon E5410 processors, each with four cpu cores and 32 GB of ram. The difference in the two virtual machines is that one is running db2 version 9.7.1 and the other is running db2 version 10.5.5. The error occurs while restoring a backup taken on another server to the test server in question. Worse than that, it occurs when restoring a second database after the first restore works OK. The error message we are getting is this: On the 9.7 system: RESTORE DATABASE XYZZY USER db2inst9 using FROM '/db2home/restore1' INTO XYZZZ REPLACE EXISTING WITHOUT ROLLING FORWARD WITHOUT PROMPTING SQL1084C Shared memory segments cannot be allocated. SQLSTATE=57019 On the 10.5 system: RESTORE DATABASE XYZZY USER db2inst9 using FROM '/db2home/restore1' INTO XYZZZ REPLACE EXISTING WITHOUT ROLLING FORWARD WITHOUT PROMPTING SQL1084C The database manager failed to allocate shared memory because an`operating system kernel memory limit has been reached. SQLSTATE=57019 Everything I have read online says to increas the value of Shared Memory Size in the /etc/sysctl.conf file. However, on these systems it is already set to a value eight times larger than the actual memory size. The command "ipcs -l" give: [root@cowtest etc]# ipcs -l ------ Shared Memory Limits -------- max number of segments = 4096 max seg size (kbytes) = 67108864 max total shared memory (kbytes) = 17179869184 min seg size (bytes) = 1 ------ Semaphore Limits -------- max number of arrays = 1024 max semaphores per array = 250 max semaphores system wide = 256000 max ops per semop call = 32 semaphore max value = 32767 ------ Messages: Limits -------- max queues system wide = 2048 max size of message (bytes) = 65536 default max size of queue (bytes) = 65536 [root@cowtest etc]# the file /etc/sysctl.conf has the following in it # Controls the maximum size of a message, in bytes kernel.msgmax = 65536 # Controls the maximum shared segment size, in bytes kernel.shmmax = 68719476736 # Controls the maximum number of shared memory segments, in pages kernel.shmall = 4294967296 These numbers just don't make sense. kernel.shmmax is set to 64 GB, 8 times the actual memory of the machine. the value of "Total Max Shared Memory" from the ipcs command is 16 TB! I have other machine running on real hardware with only 6 GB of memory on which this works fine. What is so strange about the virtual machines? I'm posting this to both the db2 and CentOS mailing lists. Sorry for the duplication if you are subscribed to both. Harold Attached below is the complete output of the backup.restore job which ran on the db2 10.5 machine. The backup was taken on a db2 9.7 machine, hence the message about database upgraded to current db2 version. backup.restore 1.0.0 - submitted Mon Mar 30 05:45:01 EDT 2015 on cowtest waiting... 1 05:45:01 waiting... 2 05:46:01 waiting... 3 05:47:01 waiting... 4 05:48:01 waiting... 5 05:49:03 backup.restore - started Mon Mar 30 05:50:03 EDT 2015 on cowtest File to be restored is: /db2home/www/daily/ANIMALS.0.db2inst9.NODE0000.CATN0000.20150330030114.001.bz2 Testing file to be restored for integrity at Mon Mar 30 05:50:03 EDT 2015 unzipping backup file ------------ /db2home/db2inst9/archivelogs/animals ------------ total 0 ------------ /db2home/db2inst9/archivelogs/animals ------------ SQL1064N DB2STOP processing was successful. Waiting for 1 minute... SQL1063N DB2START processing was successful. ATTACH TO db2inst9 Instance Attachment Information Instance server = DB2/LINUXX8664 10.5.5 Authorization ID = DB2INST9 Local instance alias = DB2INST9 DEACTIVATE DATABASE ANIMALS DB20000I The DEACTIVATE DATABASE command completed successfully. RESTORE DATABASE ANIMALS USER db2inst9 using FROM '/db2home/restore1' REPLACE EXISTING WITHOUT ROLLING FORWARD WITHOUT PROMPTING SQL2555I The database was restored and then successfully upgraded to the current DB2 release where you issued the RESTORE DATABASE command. CONNECT to animals user db2inst9 using Database Connection Information Database server = DB2/LINUXX8664 10.5.5 SQL authorization ID = DB2INST9 Local database alias = ANIMALS SELECT count(bhid) from is3.dna 1 ----------- 220 1 record(s) selected. DETACH DB20000I The DETACH command completed successfully. DISCONNECT CURRENT DB20000I The SQL DISCONNECT command completed successfully. ACTIVATE DATABASE ANIMALS DB20000I The ACTIVATE DATABASE command completed successfully. TERMINATE DB20000I The TERMINATE command completed successfully. ATTACH TO db2inst9 Instance Attachment Information Instance server = DB2/LINUXX8664 10.5.5 Authorization ID = DB2INST9 Local instance alias = DB2INST9 RESTORE DATABASE ANIMALS USER db2inst9 using FROM '/db2home/restore1' INTO VERIFY REPLACE EXISTING WITHOUT ROLLING FORWARD WITHOUT PROMPTING SQL1084C The database manager failed to allocate shared memory because an operating system kernel memory limit has been reached. SQLSTATE=57019 connect to verify user db2inst9 using SQL1084C The database manager failed to allocate shared memory because an operating system kernel memory limit has been reached. SQLSTATE=57019 select count(bhid) from is3.dna SQL1024N A database connection does not exist. SQLSTATE=08003 DETACH DB20000I The DETACH command completed successfully. TERMINATE DB20000I The TERMINATE command completed successfully. system is cowtest SQL1064N DB2STOP processing was successful. SQL1063N DB2START processing was successful. DB20000I The ACTIVATE DATABASE command completed successfully. ------------ /db2home/db2inst9/archivelogs/20150330 ------------ total 0 ------------ /db2home/db2inst9/archivelogs/20150330 ------------ backup.complete file has already been removed... backup.restore - ended Mon Mar 30 07:44:52 EDT 2015 on cowtest

3 3

mysql can't connect from localhost -strange behavior
by Tim Dunphy 30 Mar '15

30 Mar '15

Hey all, I've been having some trouble creating a mysql user that can connect to the database from localhost. It's always been a straight forward thing to do in the past, so its time for a sanity check, if you guys don't mind. Ok, so here's the actual command with actual simplified password that I'm using. It's on localhost so I don't think it's a security threat unless someone gets access to the box itself. mysql> grant all privileges on ftp.* to 'proftpd'@'localhost' identified by 'testpattern'; Query OK, 0 rows affected (0.35 sec) Here's what it looks like when you select it from the mysql database: mysql> select User,Host,Password from user where User like 'proftpd'; +---------+-----------+-------------------------------------------+ | User | Host | Password | +---------+-----------+-------------------------------------------+ | proftpd | localhost | *2EE931CA39652F1ED359A3A36961511B387E74A9 | +---------+-----------+-------------------------------------------+ 1 row in set (0.00 sec) And here's my attempt to connect with the password shown. Which is something I don't usually do, but am doing now to demonstrate what's going on: [root@ops:~] #mysql -uproftpd -ptestpattern -h localhost ERROR 1045 (28000): Access denied for user 'proftpd'@'localhost' (using password: YES) OK, so as I've said this should work! The database I'm trying to give the user access to does also exist: mysql> show databases like 'ftp'; +----------------+ | Database (ftp) | +----------------+ | ftp | +----------------+ 1 row in set (0.34 sec) I checked the error log for mysql and didn't find any clues there: [root@ops:~] #grep log /etc/my.cnf log-error=/var/log/mysqld.log [root@ops:~] #tail /var/log/mysqld.log InnoDB: Restoring possible half-written data pages from the doublewrite InnoDB: buffer... 150329 13:30:34 InnoDB: Waiting for the background threads to start 150329 13:30:35 InnoDB: 5.5.42 started; log sequence number 6071094973 150329 13:30:35 [Note] Server hostname (bind-address): '0.0.0.0'; port: 3306 150329 13:30:35 [Note] - '0.0.0.0' resolves to '0.0.0.0'; 150329 13:30:35 [Note] Server socket created on IP: '0.0.0.0'. 150329 13:30:35 [Note] Event Scheduler: Loaded 0 events 150329 13:30:35 [Note] /usr/libexec/mysqld: ready for connections. Version: '5.5.42' socket: '/var/lib/mysql/mysql.sock' port: 3306 MySQL Community Server (GPL) by Remi Does anybody out there have any idea why this isn't working? Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

5 6

headless VirtualBox on Centos
by Boris Epstein 30 Mar '15

30 Mar '15

Hello listmates, I am wondering if there is a set of scripts/utilities for automatically starting and running headless (no X11) VM's using VirtualBox omn a CentOS 6 server. VNC/RDP access to the VM's would be fine. Any help much appreciated. Cheers, Boris.

7 10

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss