- Discuss - lists.centos.org

Changing command line version of php for apache
by H 15 Feb '21

15 Feb '21

I have updated php on a Centos 7 system to use php 7.2 from sclo. Apache running on the system is also using php 7.2 as shown by phpinfo(), however, apache continues to use the default version of php, ie 5.4.16, when that user launches a process from the command line. All other users default to php 7.2 when running from the command line which is correct. For some reason I have missed configuring apache php-cli correctly. I have googled and found many examples on how to change the configuration settings so that apache uses php 7.2 when serving web pages but in this case it is php-cli that needs to be corrected to use a later version. What should I check? What have I missed? By the way, I am not planning to remove php 5.4 from the system since it might be needed for something at a later time. Thanks.

4 8

CentOS 7, selinux and pop_port_t
by H 12 Feb '21

12 Feb '21

I am muddling my way through learning selinux when installing a webapp with httpd as the webserver running CentOS 7. The app allows the user to send/receive mail etc but it seems that I have yet to allow access to imap port 993. So far it seems this is configured through pop_port_t but setsebool httpd_can_network_connect 1 does not include pop_port_t. In the audit log I have: type=AVC msg=audit(1613093671.415:155086): avc: denied { name_connect } for pid=22431 comm="httpd" dest=993 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:pop_port_t:s0 tclass=tcp_socket permissive=0 Yet, running the below sesearch -A -s httpd_t -c tcp_socket -p name_connect -d -C tells me ET allow httpd_t pop_port_t : tcp_socket name_connect ; [ httpd_can_sendmail ] I am obviously missing something. Does anyone know how to enable access to pop_port_t?

2 1

el7 systemd service:: ensure var/log owner when User is specified
by Adrian Sevcenco 12 Feb '21

12 Feb '21

Hi! Does anyone have an idea how can i (in a nice way [1]) to ensure ownership/permissions of log directory in /var/log for a unit that drops privileges to a user (with User=/Group=) [1] The ugly way being with script in StartPre and sudo in Start so i want to use User= I'm aware of LogsDirectory= but is not available on EL7 Thanks a lot! Adrian

5 4

Update - Resizing a QEMU guest display
by Bill Gee 12 Feb '21

12 Feb '21

Strahil Nikolov and I took this conversation off-line for a few days. The thread of our discussion is below. Net result: No solution is yet found. Strahil had some very good ideas, but they did not pan out in this case. For archiving - and in hope that someone may have some other ideas! - I post this back to the list. -- Bill Gee ---------- Forwarded Message ---------- Subject: Re: [CentOS] Resizing a QEMU guest display Date: Tuesday, February 9, 2021, 10:38:08 PM CST From: Strahil Nikolov <hunter86_bg(a)yahoo.com> To: bgee(a)campercaver.net, Bill Gee <bgee(a)campercaver.net> Erm... mine was spice-vdagent.service , and not '.socket'.Never mind, it could be something else. Best Regards,Strahil Nikolov On Tue, Feb 9, 2021 at 21:52, Bill Gee<bgee(a)campercaver.net> wrote: I restarted spice-vdagentd.socket on the guest that will not resize. It still will not resize. [root@practice21a ~]# systemctl restart spice-vdagentd.socket [root@practice21a ~]# systemctl status spice-vdagentd.socket ● spice-vdagentd.socket - Activation socket for spice guest agent daemon Loaded: loaded (/usr/lib/systemd/system/spice-vdagentd.socket; static) Active: active (listening) since Tue 2021-02-09 13:43:10 CST; 8s ago Triggers: ● spice-vdagentd.service Listen: /run/spice-vdagentd/spice-vdagent-sock (Stream) CGroup: /system.slice/spice-vdagentd.socket Feb 09 13:43:10 practice21a.billgee.local systemd[1]: Listening on Activation socket for spice guest a> [root@practice21a ~]# ps ax | grep spice 3018 ? Ssl 0:00 /usr/bin/spice-vdagent 3032 ? Ssl 0:00 /usr/sbin/spice-vdagentd 3554 pts/0 S+ 0:00 grep --color=auto spice [root@practice21a ~]# But! Just to be sure, I checked the guest that WILL resize. There is no service on it called spice-vdagentd.socket! There is also no process with spice in the name. The guest that should work does not, and the guest that should not work does! -- Bill Gee On Tuesday, February 9, 2021 12:56:38 PM CST you wrote: > The serviceis indirect, which means that another unit has to 'call' it. Try restarting the service in the VM. > # systemctl status spice-vdagentd.service ● spice-vdagentd.service - Agent daemon for Spice guests Loaded: loaded (/usr/lib/systemd/system/spice-vdagentd.service; indirect; vendor preset: enabled) Active: active (running) since Mon 2021-02-08 22:31:06 EET; 22h ago Main PID: 27963 (spice-vdagentd) Tasks: 1 CGroup: /system.slice/spice-vdagentd.service └─27963 /usr/sbin/spice-vdagentd Feb 08 22:31:06 openshift1 systemd[1]: Starting Agent dae...Feb 08 22:31:06 openshift1 systemd[1]: Started Agent daem...Feb 08 22:31:07 openshift1 spice-vdagentd[27963]: opening...Hint: Some lines were ellipsized, use -l to show in full. > Best Regards,Strahil Nikolov > > On Tue, Feb 9, 2021 at 20:50, Bill Gee<bgee(a)campercaver.net> wrote: > Hmmmm.... I am missing something. Why would rebooting the entire computer NOT restart the service? > > > And for that matter - Exactly what service are you talking about? Can you be more specific? > > > > The service is of type indirect. Try to restart only the service (not the guest). > > > Best Regards,Strahil Nikolov > > > > > > > > > On Tue, Feb 9, 2021 at 20:31, Bill Gee<bgee(a)campercaver.net> wrote: > > > The host and all of its guests have been rebooted multiple times in the last two days. > > > > > > > > > > > > > Have you restarted the service ?Yesterday I built a CentOS 7 system and spice didn't resize untill I restarted the service. > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > > > > > > On Mon, Feb 8, 2021 at 14:40, Bill Gee<bgee(a)campercaver.net> wrote: Hi Strahil - > > > > > > > > > > > > > > Thanks for the link. Unfortunately it is not helpful. The spice agent is already installed on the guest, and the spice channel is already configured. > > > > > > > > > > > > > > [bgee@practice21a ~]$ rpm -qa | grep spice > > > > > > > spice-vdagent-0.20.0-3.fc33.x86_64 > > > > > > > > > > > > > > A question occurs to me ... The working guest also has both the spice-vdagent package and the spice channel. Why does it work and the other guest does not? > > > > > > > > > > > > > > > I think the following is a good start: > > > > > > > > 11.3. SPICE Agent Red Hat Enterprise Linux 7 | Red Hat Customer Portal > > > > > > > > | > > > > > > > > | > > > > > > > > | > > > > > > > > | | | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > | > > > > > > > > | > > > > > > > > | | > > > > > > > > 11.3. SPICE Agent Red Hat Enterprise Linux 7 | Red Hat Customer Portal > > > > > > > > > > > > > > > > The Red Hat Customer Portal delivers the knowledge, expertise, and guidance available through your Red Hat subscription. > > > > > > > > | | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > | > > > > > > > > > > > > > > > > > > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > > > > > > > > > On Sun, Feb 7, 2021 at 20:29, Bill Gee<bgee(a)campercaver.net> wrote: Hi Strahil - > > > > > > > > > > > > > > > > How does one reach a guest via spice? I am not familiar with any remote access application called "spice". I have tried two methods of accessing the host. First is to open it from the Virtual Machine Manager on the host. Second is to use TigerVNC to access it across the local network. > > > > > > > > > > > > > > > > I see a package installed on the guest which looks like the guest agent. Is there more that needs to be added? This is the only qemu package installed on both the Fedora machine that does not resize and the CentOS7 machine that will resize. The versions are way different between the two guests. > > > > > > > > > > > > > > > > [root@practice21a ~]# rpm -qa | grep qemu > > > > > > > > qemu-guest-agent-5.1.0-9.fc33.x86_64 > > > > > > > > > > > > > > > > The Fedora guest has, as you see, version 5.1.0-9. The CentOS7 guest has version 2.12.0-3. Perhaps the Fedora guest version is too new to run on a CentOS7 host?? > > > > > > > > > > > > > > > > I see other QEMU packages available. One of them is called "qemu-device-display-qxl" which is very suggestive. However, that package is NOT installed on the CentOS7 guest and yet that guest works. > > > > > > > > > > > > > > > > Another package I see is "libvirt-daemon-driver-qemu". This package is installed on the host but is not present on either guest. Is it needed on guests? > > > > > > > > > > > > > > > > > Have you tried to reach the VM via spice ?Also check if qemu's guest agent is runningin the VM. > > > > > > > > > > > > > > > > > > Best Regards,Strahil Nikolov > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > CentOS mailing list > > > > > > > > CentOS(a)centos.org > > > > > > > > https://lists.centos.org/mailman/listinfo/centos > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > CentOS mailing list > > > > > > > CentOS(a)centos.org > > > > > > > https://lists.centos.org/mailman/listinfo/centos > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -----------------------------------------

1 0

Re: [CentOS] udev rules & USB devices - ignored at boot
by lejeczek 12 Feb '21

12 Feb '21

On 09/02/2021 18:25, Strahil Nikolov wrote: > CentOS 7 doesn't use the old naming convention but ,if you > set a device name and mac address for your connection, the > network stack will rename the device during activation. > > Try with: > > SUBSYSTEM=="net", ACTION=="add|change", DRIVERS=="?*", > ATTR{address}=="00:1e:10:1f:00:00", ATTR{type}=="1", > pop NAME="lteusb" dnf pulled in quite a few updates in the meanwhile but most likely "change" does the trick. I thought it had something to do with USB/kernel/subsystems parts as the very same rules worked for PCIe devices, those worked at re/boot. many! thanks Strahil. > > Best Regards, > Strahil Nikolov > > On Mon, Feb 8, 2021 at 17:04, lejeczek via CentOS > <centos(a)centos.org> wrote: > > > On 08/02/2021 08:10, Strahil Nikolov wrote: > > Can you share your udev rules ? > > > > Best Regards, > > Strahil Nikolov > > > > On Sun, Feb 7, 2021 at 15:33, lejeczek via CentOS > > <centos(a)centos.org <mailto:centos@centos.org>> wrote: > > Hi guys, > > > > I have an Ethernet USB adapter for which udev > executes my > > custom rules but!... udev does it only at plug-in > > event and > > not! when the USB stays plugged in during a > reboot, then > > same rules are ignored (or some other problem > results in > > udev failure to do the same when device is > plugged to a > > running system). > > My system is just an average box with a Ryzen on > a B550 > > platform. > > Anybody sees this reproduce? > > many thanks, L. > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org <mailto:CentOS@centos.org> > <mailto:CentOS@centos.org <mailto:CentOS@centos.org>> > > https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos> > > <https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos>> > > > simple rules: > > SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", > ATTR{address}=="00:1e:10:1f:00:00", ATTR{type}=="1", > KERNEL=="eth*", NAME="lteusb" > > like I said - I get iface "lteusb" when I plug the USB > so it > works. If I leave that USB plugged in and reboot then no > "lteusb". > > regards, L. > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org <mailto:CentOS@centos.org> > https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos> >

1 0

smba shares are unreachable once or twice per month
by Prengel, Ralf 10 Feb '21

10 Feb '21

Hallo, I ve a problem with my samba-server. We are using a centos 7.7 with an samba exporting samba-shares. Logins are managed by our Windows-AD. The samba server has only the function to exports hares. Windows clients are Win10 patched every month. Our problem: Once or twice a month shares aren't akctive any longer and reachable for the Window-Clients. Network can nor be a reason because the same directory exported via NFS is reachable for all Linux-NFS-Client. Normally we disconect and connect the Samba server in the AD and after a reboot the shares are working again but that cant be the solution ;-) Can anyone give me hints hwo to anaylse and solving the problem. Thanks Ralf

3 2

CentOS-announce Digest, Vol 191, Issue 3
by centos-announce-request＠centos.org 10 Feb '21

10 Feb '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0411 Important CentOS 7 flatpak Security Update (Johnny Hughes) 2. CEBA-2021:0439 CentOS 7 glibc BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Feb 2021 14:32:53 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0411 Important CentOS 7 flatpak Security Update Message-ID: <20210209143253.GA26338(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0411 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0411 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0e230546571aa26c06f1097967584ab4b9e777e7ca6c94d45f8706a36bdccc22 flatpak-1.0.9-10.el7_9.x86_64.rpm 724795eec6065da1df593d22a6a359fc5b241aec5a3916cbec646ff78f2196ba flatpak-builder-1.0.0-10.el7_9.x86_64.rpm 85ac0468355fd6847c79849e947fd3b5d88f606ad3aa6fd06cb4aca3fe3c9fc8 flatpak-devel-1.0.9-10.el7_9.x86_64.rpm 6a5560cf575ee9bfa9cac85044e94e3bce3ea85e26431c99e41877289cf82b64 flatpak-libs-1.0.9-10.el7_9.x86_64.rpm Source: 170d39f61f08b19f0c202440b9ac801e8d5e80ec0240b8cd0f3a9d85a3c109d4 flatpak-1.0.9-10.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 9 Feb 2021 14:33:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0439 CentOS 7 glibc BugFix Update Message-ID: <20210209143356.GA26542(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0439 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0439 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ee561a3f0dd8945edec3478e8426cc324bdf6fc5fe6a31d762cfae60d3e14830 glibc-2.17-323.el7_9.i686.rpm b2b420ac2c03b3a2e4cadd073857498446180ec51a863fe30335c9da3a963fde glibc-2.17-323.el7_9.x86_64.rpm f48d75115ac638576d608849a173ace6a70c2430a2e0226487652befdf004b27 glibc-common-2.17-323.el7_9.x86_64.rpm acbb0c34227bd9c7bba35cfa08b4942dd141ee4ccadd128d8acedaef5e31522c glibc-devel-2.17-323.el7_9.i686.rpm aab72ef4b89bc4481b87f7aaf225cbdefb62073dddddc7fc7c2b94ab11a0a936 glibc-devel-2.17-323.el7_9.x86_64.rpm 9ba71fe357dd09d1913b30b0bd83507588d8cb06eda6f2c15326f3f1384c6180 glibc-headers-2.17-323.el7_9.x86_64.rpm eae7a2d2bc9f6058c113c27e6bdea6677a865df0f7924ed51165a2653c2d2175 glibc-static-2.17-323.el7_9.i686.rpm 49e01e923bc5d1026751341c9a01ab8ef4d50d8b17e94f179de33afcbfb0b234 glibc-static-2.17-323.el7_9.x86_64.rpm cafdbebcda7664e47d81f647d715249983cbe0bb4b063c1d56ab327a8766e2d0 glibc-utils-2.17-323.el7_9.x86_64.rpm 27d1ba676d3d4007102e714f71f0f4e97d46890c6eed54e5f10720ff65e7cea8 nscd-2.17-323.el7_9.x86_64.rpm Source: cb68b648ffec5a38b0cef7e6a88fb2dfb6357c8f0a17cf0331376a3cdfd41d97 glibc-2.17-323.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 191, Issue 3 ***********************************************

1 0

SCLO php70 imap missing
by H 10 Feb '21

10 Feb '21

I am installing php70 on a machine running CentOS 7 for a particular reason and needed sclo-php70-php-imap which I believe is the imap module for php70 from SCL. It, however, does not seem to be available even though https://cbs.centos.org/koji/buildinfo?buildID=24734 suggests it should be. Am I missing something?

1 0

Resizing a QEMU guest display
by Bill Gee 09 Feb '21

09 Feb '21

Hello everyone - I think I know the answer, but just in case ... I want to run it by the experts. I have a machines running CentOS 7. "uname -a" returns this: Linux practice7.billgee.local 3.10.0-1160.15.2.el7.x86_64 #1 SMP Wed Feb 3 15:06:38 UTC 2021 x86_64 x86 _64 x86_64 GNU/Linux This machine has an nVidia GS8400 and uses the nouveau driver. Its main job is to be a host for QEMU/KVM virtual machines. The QEMU packages on the host are: [bgee@practice7 ~]$ rpm -qa | grep qemu qemu-kvm-1.5.3-175.el7_9.3.x86_64 qemu-guest-agent-2.12.0-3.el7.x86_64 qemu-kvm-common-1.5.3-175.el7_9.3.x86_64 qemu-img-1.5.3-175.el7_9.3.x86_64 libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.x86_64 ipxe-roms-qemu-20180825-3.git133f4c.el7.noarch One of the guest VMs is Fedora 33. The guest comes up with a display resolution of 1024x768. I have not found a way to change it to something higher. If I go to the Settings - Display item in Fedora, there is a long list of resolutions. No matter what I choose, the system will switch to that resolution for about 1/2 second and then go back to 1024x768. This happens when using VNC to connect remotely and also when running on the host computer. Resizing the guest display window does nothing except make big black borders around the guest display. The guest video configuration in the virtual machine manager is set for "QXL". In my searching I found several suggestions to use "virtio" instead. When I make that change and start the guest, it immediately throws an error: "This QEMU does not support 'virtio' video device" I also tried "vmvga" and "cirrus". The cirrus setting does not resize and also loses coordination of the mouse pointer. The vmvga setting gives the same message about not being supported in this QEMU. I verified that the spice-vdagent package is installed on the guest VM. The virtual machine manager has "Resize guest with window" set to ON. Just to make life really interesting... Another guest VM on the same host is running CentOS7. That machine happily resizes! It is set for QXL in the virtual machine manager. I think I am just out of luck. I found some references which say that CentOS 7 does not have support for virtio displays. Is that right? Is there some way to resize the Fedora guest? I don't care about dynamic sizing by dragging a window border. If I can choose something and have it stick, I would be happy. Thanks! -- Bill Gee

2 5

Recommendation for 10 gigabit NICs on CentOS8
by Strahil Nikolov 09 Feb '21

09 Feb '21

Hi All, can you share what kind of old NICs do you use on CentOS 8 (Stream or not , it doesn't matter) without any issues? I was looking at ebay and I found some pretty old Mellanox "ConnectX" or "ConnectX-2" but I seriously doubt they will work on CentOS 8. Any proposals are also welcome. I don't care of the brand as long as it is PCIe and is supported by the vanilla kernel. Best Regards, Strahil Nikolov

4 3

firewalld - same source in different zones
by Łukasz Posadowski 09 Feb '21

09 Feb '21

Hi. I have a little trouble with firewalld. I'm trying to open some ports for monitoring server, but it's in the same network as "home" zone: Monitored host (192.168.111.60): lukasz @ strategie 17:52:19 ~ $ -> sudo firewall-cmd --get-active home sources: 192.168.111.0/24 (open ports 22, 80, 443) monitoring sources: 192.168.111.19 (open ports: 5666) public interfaces: ens18 (no open ports) --------------------------------------------------- Monitoring host (192.168.111.19): lukasz @ potemkin 17:57:25 ~ $ -> telnet strategie.ping.local 5666 Trying 192.168.111.60... telnet: connect to address 192.168.111.60: No route to host lukasz @ potemkin 17:57:26 ~ $ -> telnet strategie.ping.local 80 Trying 192.168.111.60... Connected to strategie.ping.local. Escape character is '^]'. ^] telnet> Connection closed. --------------------------------------------------- I think there are conflicting rules on a monitored host, that: - prevent access to 5666 from 192.168.111.0/24, - give access to 5666 from 192.168.111.19 and packets from potemkin are routed trough a home zone. I really would like to have dedicated "monitor" zone. Is there a way to give "monitor" zone more priority, than "home"? I may end with OpenVPN on potemkin and use 172.30.25.0/24 for monitoring, but, apart from encryption aspect, it seems a little excessive. Thank You. -- Łukasz Posadowski

2 2

Re: [CentOS] udev rules & USB devices - ignored at boot
by lejeczek 08 Feb '21

08 Feb '21

On 08/02/2021 08:10, Strahil Nikolov wrote: > Can you share your udev rules ? > > Best Regards, > Strahil Nikolov > > On Sun, Feb 7, 2021 at 15:33, lejeczek via CentOS > <centos(a)centos.org> wrote: > Hi guys, > > I have an Ethernet USB adapter for which udev executes my > custom rules but!... udev does it only at plug-in > event and > not! when the USB stays plugged in during a reboot, then > same rules are ignored (or some other problem results in > udev failure to do the same when device is plugged to a > running system). > My system is just an average box with a Ryzen on a B550 > platform. > Anybody sees this reproduce? > many thanks, L. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org <mailto:CentOS@centos.org> > https://lists.centos.org/mailman/listinfo/centos > <https://lists.centos.org/mailman/listinfo/centos> > simple rules: SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:10:1f:00:00", ATTR{type}=="1", KERNEL=="eth*", NAME="lteusb" like I said - I get iface "lteusb" when I plug the USB so it works. If I leave that USB plugged in and reboot then no "lteusb". regards, L.

2 1

Challenging times in trying to access oracle Linux documentation
by Shamim Shahriar 07 Feb '21

07 Feb '21

Good afternoon everyone, hope you all are well. Apologies if this is considered unwelcome -- asking oracle question in centos group -- but a lot of centos Vs oracle is going on here so hoping this will not be shot down. I am unable to access any of the oracle documentation I need, as it keeps on asking for support identifier number, which, as far as I can tell, is only available if I purchase an expensive support subscription. Even obtaining a free oracle cloud account does not give you any access. I was trying to access oracle FreeIPA setup how to documentation, and even after many emails work oracle support over several weeks -- no resolution! They are not even clear as to what I need to do to obtain access -- all they are saying is I need a SI number!!! Has anyone experienced that or is it me having the issue? If I have to pay subscription, why not continue with RHEL subscription anyway? Would appreciate if someone could please confirm. Best regards Shamim

9 15

udev rules & USB devices - ignored at boot
by lejeczek 07 Feb '21

07 Feb '21

Hi guys, I have an Ethernet USB adapter for which udev executes my custom rules but!... udev does it only at plug-in event and not! when the USB stays plugged in during a reboot, then same rules are ignored (or some other problem results in udev failure to do the same when device is plugged to a running system). My system is just an average box with a Ryzen on a B550 platform. Anybody sees this reproduce? many thanks, L.

1 0

letsencrypt error
by Jerry Geis 06 Feb '21

06 Feb '21

Hi all - So I just ran into the changes lately from letsencrpt. certbot-auto is no longer available. I added this to httpd.conf <VirtualHost *:80> ServerName mydomain </VirtualHost> service httpd restart When I do "certbot -d mydomain" I get this : Domain: mydomain Type: unauthorized Detail: Invalid response from http://mydomain/.well-known/acme-challenge/i_fU1bFrQZzgfVI2FtWo8Ov0ITjplCcP… [97.107.162.8]: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>403 Forbidden</title>\n</head><body>\n<h1>Forbidden</h1>\n<p" What did I miss ? Thanks Jerry

4 8

msmilter doesn t start / Can't open PID file /run/MSMilter.pid
by Ralf Prengel 05 Feb '21

05 Feb '21

Hallo, msmilter doesn t start. Has anyone a hint for me? I used this tutorial. /run exists and selinux is disabled. https://www.awsmonster.com/2020/03/how-to-install-mailscanner-stable-v521.h… Thanks for a hint. Ralf -- Unit msmilter.service has begun starting up. Feb 05 15:09:14 vader2 msmilter-init[1001]: Edit the file /etc/MailScann-- Unit msmilter.service has begun starting up. Feb 05 15:09:14 vader2 msmilter-init[1001]: Edit the file /etc/MailScanner/MailScanner.conf according to Feb 05 15:09:14 vader2 msmilter-init[1001]: your needs. When complete, edit /etc/MailScanner/defaults and set Feb 05 15:09:14 vader2 msmilter-init[1001]: the variable to enable MailScanner to run: Feb 05 15:09:14 vader2 msmilter-init[1001]: run_mailscanner=1 Feb 05 15:09:14 vader2 systemd[1]: (yet?) after start: No such file or directory Feb 05 15:09:14 vader2 systemd[1]: Failed to start LSB: MSMilter daemon. -- Subject: Unit msmilter.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel er/MailScanner.conf according to Feb 05 15:09:14 vader2 msmilter-init[1001]: your needs. When complete, edit /etc/MailScanner/defaults and set Feb 05 15:09:14 vader2 msmilter-init[1001]: the variable to enable MailScanner to run: Feb 05 15:09:14 vader2 msmilter-init[1001]: run_mailscanner=1 Feb 05 15:09:14 vader2 systemd[1]: Can't open PID file /run/MSMilter.pid (yet?) after start: No such file or directory Feb 05 15:09:14 vader2 systemd[1]: Failed to start LSB: MSMilter daemon. -- Subject: Unit msmilter.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

2 1

Which bug tracker should I use to report things to CentOS ? (recap)
by Fabian Arrotin 05 Feb '21

05 Feb '21

With some moving parts within the CentOS Project, some people are now confused about where to report things, as https://bugs.centos.org isn't the only bugs/tickets tracker, so let's just have a quick recap so that people aren't confused anymore ? :) # CentOS Stream (all kind of tickets) see https://wiki.centos.org/FAQ/CentOSStream#Where_do_I_report_bugs.3F So basically https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20… # CentOS Infra, CBS, SIGs, mirror, CI, etc see previous mail : https://lists.centos.org/pipermail/centos-devel/2020-August/055980.html # All the rest (CentOS Linux pkgs, etc) https://bugs.centos.org Hope that it helps , as we have people asking on irc the status of a ticket that was filed in wrong tracker (and so also not correct category as for example infra categories were removed/archived on https://bugs.centos.org) and not reviewed. -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

Filesystem choice for BackupPC extrenal drive
by Kenneth Porter 05 Feb '21

05 Feb '21

I'm setting up a CentOS 7 box as a BackupPC 4 server to back up Windows boxes on my LAN. I'm using an external 1.5 TB USB drive for the "pool". BackupPC deduplicates by saving all files in a pool, a directory hiearchy with each file named for the checksum of the file, and the directories acting as a hash tree to reach each pool file. A backup for a specific workstation is a directory tree of checksums and metadata that point into the pool for the actual file data. Incremental backups are reverse deltas from periodic "filled" backups of all files. I'm using rsyncd to pull changed files from the workstations. I'm deciding which filesystem to use for my external drive. I'm thinking the main candidates are ext4 and xfs. What's the best filesystem for this application? <https://github.com/backuppc/backuppc> Repo for CentOS 7 users: <https://copr.fedorainfracloud.org/coprs/hobbes1069/BackupPC/>

3 2

Intel/64 CentOS VM running on a Mac M1?
by Lists 04 Feb '21

04 Feb '21

My Dell Precision M3800 running Fedora works great but is really starting to show its age, and I'm thinking about getting a new Mac M1-based laptop as it would really be useful for Video production. But I really need to have a IA64 CentOS 7/8 VMs running locally for development as I'm often on the road and flaky Internet makes it a necessity to keep productivity up. I've been unable to officially confirm that VMWare/ Parallels/VirtualBox intend to support IA64 based OS's and it *needs* to be an exact (VM) copy of production so I can trial environments and builds prior to roll out. Calling around, I actually got ahold of a sales staff at Parallels who assured me (in broken India-accent English) that "of course all OS will supported when the trial complete" but given that I wasn't sure that he really understood my question I remain uncertain. Anybody here have any more information than I do?

10 14

RHEL <==> CentOS <==> Oracle Linux migration scripts
by Nicolas Kovacs 04 Feb '21

04 Feb '21

Hi, I've recently done some extensive testing with the centos2ol.sh migration script provided by Oracle: https://github.com/oracle/centos2ol The script works perfectly on both CentOS 7.x and 8.x, so I wrote a little blog article about it: https://blog.microlinux.fr/migration-centos-oracle-linux-cas-pratique/ I wonder if something similar exists for other use cases, e. g. migrate from CentOS to Red Hat Enterprise Linux. Why I'd like to do this? Well, a significant part of my work is teaching Linux and writing books about it. My last two books have been based on CentOS 7.x, and I'd like future editions to be distribution-agnostic within the RHEL family. This is now an option since Red Hat offered free Developer subscriptions a few days ago. In other words, future blog articles and book chapters will be based on RHEL (the real thing), but I'll also test everything with the various clones, namely Oracle Linux and (probably) Rocky Linux as soon as there's a usable version. Public server providers like Scaleway offer the "usual suspects" among distributions, e. g. Ubuntu, Debian, CentOS and FreeBSD. So I'd like to know if there's a script out there that converts an existing CentOS (or Oracle Linux) installation into a RHEL system. Any suggestions ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 1

not a Centos topic, but since many had concerns ......
by R C 03 Feb '21

03 Feb '21

Hello, not a Centos topic perse, but since many had concerns about 'regular' Centos going away, and "Centos Stream" replacing it. This is what I read today, might have been around longer though, don't know. "New Year, new Red Hat Enterprise Linux programs: Easier ways to access RHEL" https://www.redhat.com/en/blog/new-year-new-red-hat-enterprise-linux-progra…

4 5

CentOS-announce Digest, Vol 191, Issue 1
by centos-announce-request＠centos.org 03 Feb '21

03 Feb '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. ConfigManagement SIG : removal of old/unmaintained ansible versions (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Tue, 2 Feb 2021 13:48:17 +0100 From: Fabian Arrotin <arrfab(a)centos.org> To: "The CentOS developers mailing list." <centos-devel(a)centos.org>, centos-announce(a)centos.org Subject: [CentOS-announce] ConfigManagement SIG : removal of old/unmaintained ansible versions Message-ID: <d5ca00f8-6ae8-de4d-45ac-750d4b60f247(a)centos.org> Content-Type: text/plain; charset=utf-8 Notification: So far, the ConfigManagement SIG rebuilt and shipped some Ansible versions through different repos (per "branch") over the last months/years , so we currently still have on mirror.centos.org (and so external mirrors) the following repositories : For CentOS 7: - ansible 2.6 - ansible 2.7 - ansible 2.8 - ansible 2.9 For CentOS 8 (also working on 8-stream) : - ansible 2.9 Per Ansible EOL policy (see https://docs.ansible.com/ansible/devel/reference_appendices/release_and_mai…) we'll continue to maintain 2.8 (security fixes if they appear) and 2.9 but we'll remove previous versions/repositories. Worth knowing that they'd still be available through vault.centos.org though, but not available directly through a centos-release-ansible*.rpm (configuring yum/dnf repositories on systems) So far I never had a chance/time to look at ansible 2.10, as there is a split between ansible-base and ansible-core and then collections. My goal would be to discuss with EPEL/Fedora maintainer (Kevin Fenzi) about the best way to have it working and then we can start (re)building through configmanagement tags on https://cbs.centos.org Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 191, Issue 1 ***********************************************

1 0

Reminder: CentOS Dojo this week. FOSDEM this weekend
by Rich Bowen 03 Feb '21

03 Feb '21

TL;DR: https://wiki.centos.org/Events/Dojo/FOSDEM2021 <-- Dojo Thursday and Friday https://fosdem.org/2021/ <-- FOSDEM Saturday and Sunday The full schedule of talks for the Dojo is available at the above URL, and includes a roundtable discussion with (some of) the Board. Registration is free, and all talks will be recorded for later viewing on our YouTube channel. But of course if you want to participate in the Q&A aspect of the event, you'll need to be there. Hoping to see you Thursday, --Rich

1 0

grub2-mkconfig with custom kernel
by Jerry Geis 02 Feb '21

02 Feb '21

Hi - I am running CentOS 7 I tried to add a custom initrd and custom vmlinux when I run grub2-mkconfig -o /boot/grub2/grub.cfg the custom files are not listed . when I reboot my entry for /etc/grub.d/40_custom is not listed either. How do I get grub2-mkconfig to recognize my entries ? Is grub2-mkconfig only looking at installed kernels - How do I get it to see mine? Thanks Jerry

1 1

Amazon Alexa on CentOS 7 - how?
by Frank Bures 02 Feb '21

02 Feb '21

Hi, I am looking for an app for CentOS that would enable me to control my Alexa compatible devices from my KDE desktop. Currently, I have to use an iPad for that. I found an app called Alexa installable via snap, but it had not been updated since 2017 and I could not find any detailed info about it. Is there an app out there that would allow me to do this? Thanks Frank -- <listfrank1(a)gmail.com>

3 2

luks encrypted - tell at boot to skip/ignore it - how?
by lejeczek 02 Feb '21

02 Feb '21

Hi guys. How to tell grub/kernel to ignore, skip either all or a specific block device which is luks-ecrypted - would anybody know? I have a box (kvm) which had a "secondary" luks-encrypted disk which now is detached and Centos just hangs @boot waiting for that disk. many thanks, L.

2 1

Samba setup
by Robert G. (Doc) Savage 31 Jan '21

31 Jan '21

I'm following https://www.linuxbabe.com/redhat/set-up-samba-server-on-centos-8-rhel-8-for… to set up Samba 4.12.3-12 on my Storinator fileserver running CentOS 8.3. I am trying to share out /tank/Windows/ as a Samba share: # ls -al /tank total 61 drwxr-xr-x. 6 root root 7 Dec 26 10:43 Backups drwxr-xr-x. 6 root root 6 Dec 4 22:47 Repos drwxrwxrwx. 2 doc doc 4 Dec 28 14:01 VMs drwxrwxrwx. 2 root root 2 Jan 17 17:04 Windows My /etc/samba/smb.conf file is set up as follows: # testparm Load smb config files from /etc/samba/smb.conf Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions # Global parameters [global] printcap name = cups security = USER idmap config * : backend = tdb cups options = raw hosts allow = 192.168.0 ... [public] comment = public share, no need to enter username and password guest ok = Yes path = /tank/Windows read only = No When I try to map network drive from my Windows 10 PC using the graphical File Explorer, it asks me for my username and password. It doesn't accept my password. When I try to map it at the CMD cli, I get: C:\> net use S: \\192.168.1.20\public\ System error 67 has occurred. The network name cannot be found. Could this be a network browsing problem in Samba? What have I missed? --Doc Savage Fairview Heights, IL

3 5

Re: [CentOS] Samba setup
by Robert G. (Doc) Savage 30 Jan '21

30 Jan '21

On Fri, 2021-01-29 at 04:40 +0000, Strahil Nikolov wrote: > I know from experience that you need to decide how you control access > and you got 2 options: > > - Linux directory is set to 777 and all control is in samba > - Linux directory is set as if unix user will access it and you use > the sam uid/gid for both client and server accounts (AD, FreeIPA, > LDAP) > > What is your settings right now ? > > Best Regards, > Strahil Nikolov Strahil, 777 and ownership of /tank/Windows is nobody:nobody. It's actually an empty directory right now. Not using AD/FreeIPA/LDAP. --Robert Savage Fairview Heights, IL > > > On Thu, Jan 28, 2021 at 7:57, Robert G. (Doc) Savage via CentOS > > <centos(a)centos.org> wrote: > > On Tue, 2021-01-19 at 17:18 +0100, Götz Reinicke wrote: > > > > > > Anything in the samba logs? May be SELinux/Firewall issues? > > > > Götz, > > > > Unfortunately, no. > > > > The nmbd log verifies that the fileserver's samba service is the > > local > > master browser for WORKGROUP on both eth0 and virbr0. > > > > [2021/01/17 19:02:22.190795, 0] > > > > ../../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2 > > ) > > ***** > > Samba name server LIONSTORE is now a local master browser for > > workgroup > > WORKGROUP on subnet 192.168.1.20 > > ***** > > > > [2021/01/17 19:02:22.191085, 0] > > > > ../../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2 > > ) > > ***** > > Samba name server LIONSTORE is now a local master browser for > > workgroup > > WORKGROUP on subnet 192.168.122.1 > > ***** > > > > The samba smbd log simply reports the connection denials: > > > > [2021/01/17 23:07:40.304626, 0] > > ../../lib/util/access.c:371(allow_access) > > Denied connection from 192.168.1.30 (192.168.1.30 > > > > There's nothing in the SELinux logs for that date. > > > > I checked firewall-config on the storage server and verified that > > the > > samba service is allowed (but not samba-client or samba-dc). > > > > Is there a really comprehensive setup checklist available for > > setting > > up samba on CentOS? The partial how-tos I've been able to find are > > obviously not enough. I'm looking for completer smb.conf setup, > > firewall settings, required services, directory permissions, > > accounts, > > and anything else that's required. I'm running up against very > > unhelpful roadblocks that seem to indicate a critical permissions > > problem but nothing specific. > > > > V/R > > --Doc Savage > > Fairview Heights, IL > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos

2 3

Telegram on CentOS 7
by H 29 Jan '21

29 Jan '21

Is anyone running Telegram on CentOS 7? I see that it seems to be available as a snap and also in the getpagespeed repository. I try to avoid snap apps but am not familiar with the latter repository. Does anyone have experience with either source for the program?

3 4

How do I download RHEL 8.3 with free license and free subscription for my production servers?
by Turritopsis Dohrnii Teo En Ming 29 Jan '21

29 Jan '21

Subject: How do I download RHEL 8.3 with free license and free subscription for my production servers? Good day from Singapore, I am referring to the following news articles. Article: CentOS is gone—but RHEL is now free for up to 16 production servers Link: https://arstechnica.com/gadgets/2021/01/centos-is-gone-but-rhel-is-now-free… Article: Red Hat’s Disruption of CentOS Unleashes Storm of Dissent Link: https://www.enterpriseai.news/2021/01/22/red-hats-disruption-of-centos-unle… How do I download Red Hat Enterprise Linux 8.3 with free license and free subscription for my production servers? When I visited Red Hat's official website, I don't see any page or any option to download RHEL 8.3 with free license and free subscription. Please advise. Thank you very much. Mr. Turritopsis Dohrnii Teo En Ming, 42 years old as of 28 January 2021 Thursday, is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant with a System Integrator (SI)/computer firm in Singapore. He is an IT enthusiast. -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

5 4

CentOS 6 fix sudo CVE-2021-3156
by Gionatan Danti 29 Jan '21

29 Jan '21

Hi all, do you know if a fix for sudo CVE-2021-3156 is available for CentOS 6? While CentOS 6 is now supported anymore, RedHat has it under its payedsupport agreement (see: https://access.redhat.com/security/vulnerabilities/RHSB-2021-002) So I wonder if some community-packaged patch exists... Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

7 11

OPIE w/ OpenSSH Account Enumeration The remote host is susceptible to an information disclosure attack.
by Kaushal Shriyan 28 Jan '21

28 Jan '21

Hi, I am running the openssh-server-7.4p1-21.el7.x86_64 on CentOS Linux release 7.9.2009 (Core). #cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) # rpm -qa |grep ssh openssh-server-7.4p1-21.el7.x86_64 libssh2-1.8.0-4.el7.x86_64 openssh-7.4p1-21.el7.x86_64 openssh-clients-7.4p1-21.el7.x86_64 While invoking the Vulnerability Assessment and Penetration Testing (VAPT) scan, we are encountering the below vulnerability. OPIE w/ OpenSSH Account Enumeration The remote host is susceptible to an > information disclosure attack. CVE-2007-2768 A patch currently does not > exist for this issue. As a workaround, ensure that OPIE for PAM is not > installed. > Version source : SSH-2.0-OpenSSH_7.4 > Installed version : 7.4 > https://seclists.org/fulldisclosure/2007/Apr/634 Any help will be highly appreciated. Thanks in Advance. Please let me know if you need any additional information. Best Regards, Kaushal -

2 1

Re: [CentOS] How to query which yum package groups a particular package is member of
by Jamie Burchell 28 Jan '21

28 Jan '21

How about using yum history to find when and why the package was installed? yum history summary dnsmasq yum history package-list dnsmasq Jamie On Wed, 27 Jan 2021 at 20:56, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > --On Wednesday, January 27, 2021 3:31 PM -0500 Stephen John Smoogen > <smooge(a)gmail.com> wrote: > > > or one can look for the comps file in /var/cache/yum > > > > network-tools has dnsmasq listed as a package > > > > repoquery says the following on my rhel box > > NetworkManager-1:1.4.0-20.el7_3.x86_64 > > libvirt-daemon-driver-network-0:4.5.0-36.el7_9.3.x86_64 > > Aha! It's actually in network-server ("Network Infrastructure Server") > group. network-tools is the next one in the comps.xml file. The group name > sounds like something I might have wanted for my application, but the > contents are really for a lightweight server like one finds in a consumer > router. > > But, except for dhcp and radvd, none of the other packages in that group > are installed, so I still don't see how I got dnsmasq on my system. Here's > the network-server package list: > > <packagereq type="optional">dhcp</packagereq> > <packagereq type="optional">dnsmasq</packagereq> > <packagereq type="optional">freeradius</packagereq> > <packagereq type="optional">quagga</packagereq> > <packagereq type="optional">radvd</packagereq> > <packagereq type="optional">rsyslog-gnutls</packagereq> > <packagereq type="optional">rsyslog-gssapi</packagereq> > <packagereq type="optional">rsyslog-kafka</packagereq> > <packagereq type="optional">rsyslog-mysql</packagereq> > <packagereq type="optional">rsyslog-pgsql</packagereq> > <packagereq type="optional">rsyslog-relp</packagereq> > <packagereq type="optional">syslinux</packagereq> > <packagereq type="optional">syslinux-tftpboot</packagereq> > <packagereq type="optional">tang</packagereq> > <packagereq type="optional">tftp-server</packagereq> > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos >

3 4

Re: [CentOS] How to query which yum package groups a particular package is member of
by Stephen John Smoogen 28 Jan '21

28 Jan '21

On Wed, 27 Jan 2021 at 15:23, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > --On Wednesday, January 27, 2021 8:07 PM +0000 J Martin Rushton via CentOS > <centos(a)centos.org> wrote: > > > Here's how to find the package for a particular file: > > That one's easy and I use this all the time: > > rpm -qf full-file-name > > I'm looking for how to get the yum group for a package. (I'm guessing a > package might even be in more than one group?) That would help explain how > the dnsmasq package got installed on my system. (It was never enabled by > systemd and isn't required by any other package. So I went ahead and > erased > it to free the space and reduce my attack surface.) > > > yum group list then look at the groups installed yum group info <group> as in yum group info base > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- Stephen J Smoogen.

2 2

How to query which yum package groups a particular package is member of
by Kenneth Porter 28 Jan '21

28 Jan '21

I'm trying to find out how dnsmasq got on my CentOS 7 system, since I use BIND for DNS. I'm guessing it was part of a base group that Anaconda installs for all systems. Red Hat has this answered on this page but the answer is only available to subscribers. I'm guessing this kind of content will be available to us once the new free subscription thing starts. <https://access.redhat.com/solutions/2534881>

2 2

Re: [CentOS] How to query which yum package groups a particular package is member of
by Stephen John Smoogen 28 Jan '21

28 Jan '21

On Wed, 27 Jan 2021 at 15:01, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > I'm trying to find out how dnsmasq got on my CentOS 7 system, since I use > BIND for DNS. I'm guessing it was part of a base group that Anaconda > installs for all systems. > > probably from virtualization if it is there.. but a way to check is repoquery --whatrequires dnsmasq Red Hat has this answered on this page but the answer is only available to > subscribers. I'm guessing this kind of content will be available to us > once > the new free subscription thing starts. > > <https://access.redhat.com/solutions/2534881> > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- Stephen J Smoogen.

1 0

Re: [CentOS] CESA-2021:0221 Important CentOS 7 sudo Security Update
by Frank Liu 27 Jan '21

27 Jan '21

Hi, Is there a reason why the update is not tagged as "security"? yum --security update sudo ... --> sudo-1.8.23-10.el7_9.1.x86_64 from updates removed (updateinfo) --> sudo-1.8.23-9.el7.x86_64 from @base removed (updateinfo) No packages needed for security; 1 packages available ...

2 1

CentOS-announce Digest, Vol 190, Issue 2
by centos-announce-request＠centos.org 27 Jan '21

27 Jan '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2021:0013 CentOS 7 tzdata BugFix Update (Johnny Hughes) 2. CEBA-2021:0209 CentOS 7 java-1.8.0-openjdk BugFix Update (Johnny Hughes) 3. CEBA-2021:0202 CentOS 7 java-11-openjdk BugFix Update (Johnny Hughes) 4. CESA-2020:5350 Important CentOS 7 net-snmp Security Update (Johnny Hughes) 5. CESA-2021:0162 Important CentOS 7 xstream Security Update (Johnny Hughes) 6. CESA-2021:0153 Moderate CentOS 7 dnsmasq Security Update (Johnny Hughes) 7. CESA-2021:0221 Important CentOS 7 sudo Security Update (Johnny Hughes) 8. CEBA-2021:0276 CentOS 7 tzdata BugFix Update (Johnny Hughes) 9. CEBA-2021:0077 CentOS 7 389-ds-base BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 25 Jan 2021 14:05:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0013 CentOS 7 tzdata BugFix Update Message-ID: <20210125140543.GA26054(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0013 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0013 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d43f51759f659c79abdf2a56831458fa8cf1af488cfda2fae914b1dd04bbaba0 tzdata-2020f-1.el7.noarch.rpm 3598bf42bdc531b55ad9bbe89ca716bd42b7f2e4ff19fa4082235369c9a26303 tzdata-java-2020f-1.el7.noarch.rpm Source: 44565f45761eb60156f6f170109a52c17ba5d1264d3c0b8c2553867b8c530d82 tzdata-2020f-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 25 Jan 2021 14:06:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0209 CentOS 7 java-1.8.0-openjdk BugFix Update Message-ID: <20210125140644.GA26330(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0209 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0209 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 830680293bf892ad9b57630cd1fd50d4415343677c361c32b8b849c399daeb14 java-1.8.0-openjdk-1.8.0.282.b08-1.el7_9.i686.rpm fde70f28b5a0ce727403a12e9a6a39a8f953d1975000b7be4be8c5434c4d3556 java-1.8.0-openjdk-1.8.0.282.b08-1.el7_9.x86_64.rpm 2bf9825999c7f3930c1032ad0b77786e49c18ee2996e142adc2d28d3b61709ed java-1.8.0-openjdk-accessibility-1.8.0.282.b08-1.el7_9.i686.rpm 824340802392135f9a064de630acd55a619c7b8240b3aa7ae13f664637c0f023 java-1.8.0-openjdk-accessibility-1.8.0.282.b08-1.el7_9.x86_64.rpm 2e1ba328190cee6e94f98145224aec06902152d1cc3188f06c1ac84dc0887d0b java-1.8.0-openjdk-demo-1.8.0.282.b08-1.el7_9.i686.rpm 917745f55091ed42757a3d445e0f98ebd8e84ff75ab716acbdd8f6e1c584a8fd java-1.8.0-openjdk-demo-1.8.0.282.b08-1.el7_9.x86_64.rpm da4cd5b16857b9f434f773471d103d61dba9fbe99a3264cfce051444c342cf1b java-1.8.0-openjdk-devel-1.8.0.282.b08-1.el7_9.i686.rpm 313a86e45fc4b42084c618c11f233c1ab6950f5af7ce19f962ea3fd1020736eb java-1.8.0-openjdk-devel-1.8.0.282.b08-1.el7_9.x86_64.rpm 39bc056b01daeb577a1d13e5d56959179803eea2c53c39eeff982663bc189df1 java-1.8.0-openjdk-headless-1.8.0.282.b08-1.el7_9.i686.rpm f3ebae8493971694208c96d6d6286e660e797bed742700585d403ce9fd145072 java-1.8.0-openjdk-headless-1.8.0.282.b08-1.el7_9.x86_64.rpm 43d76c869fe744e94bf344aa66f638f4afcac144a43ed4d8336d4147ae3bb81e java-1.8.0-openjdk-javadoc-1.8.0.282.b08-1.el7_9.noarch.rpm 895038cbd6764ef3eb9ee3cd61f7aeb95255a9dab0f3a8da8ecf81d235a2abc1 java-1.8.0-openjdk-javadoc-zip-1.8.0.282.b08-1.el7_9.noarch.rpm fae889b06ab0ce312053475d9327bbc3ab774b5205f23a802574f40fb6dd1621 java-1.8.0-openjdk-src-1.8.0.282.b08-1.el7_9.i686.rpm 1b30b4a38b3fef0e81dd1879d3e9b159f739eadedc3e869eb5947a4bd3b25968 java-1.8.0-openjdk-src-1.8.0.282.b08-1.el7_9.x86_64.rpm Source: da53cdfa2b68153f4cb12e7d55bc6886f39fc8796f153d0674173c5555f9d95e java-1.8.0-openjdk-1.8.0.282.b08-1.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 25 Jan 2021 14:07:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0202 CentOS 7 java-11-openjdk BugFix Update Message-ID: <20210125140759.GA26634(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0202 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0202 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d6029c8033366f8fa025ecb16d28c0d7ebe9ff2aa2c4b0f27fd5af20a22fc2d0 java-11-openjdk-11.0.10.0.9-0.el7_9.i686.rpm dda309e14f66aa1f8ced19d835b7e6ff04827b05e42baed38cfbde2ea01b3351 java-11-openjdk-11.0.10.0.9-0.el7_9.x86_64.rpm 637c8c01ec07ac21fcb709f52f870af6526eaa83bd2915683f8a6f983072e500 java-11-openjdk-demo-11.0.10.0.9-0.el7_9.i686.rpm d7d58e3708a957c3e2d7c60c347de4ffa8baf7169446426889d9fd0618af02c9 java-11-openjdk-demo-11.0.10.0.9-0.el7_9.x86_64.rpm d81b0c0ebf60fb1b4d6ccb36f93b9d93064cf246ecff7f7c16b2ddbb61c57c91 java-11-openjdk-devel-11.0.10.0.9-0.el7_9.i686.rpm e3e0d812a13816d47ae085d4f88c2d0f4d8affad6568434ab0f720442981017b java-11-openjdk-devel-11.0.10.0.9-0.el7_9.x86_64.rpm f2a450757e610e9d7a49050e04cab12edad074ddca95fd92a67972bd61fcbaba java-11-openjdk-headless-11.0.10.0.9-0.el7_9.i686.rpm 89818b9dde137228b185c849e8eec7f90bed6867be5b294a8b8121f52776af6a java-11-openjdk-headless-11.0.10.0.9-0.el7_9.x86_64.rpm 30c32ac3292a24f2136302bf5bf2d8ebf572bc2b8c57b4cb3c50ffeb223e144e java-11-openjdk-javadoc-11.0.10.0.9-0.el7_9.i686.rpm d1a6eb397fc04c57428b2ed1f9e3077ed639a5877ef02b2312725fb99c17c807 java-11-openjdk-javadoc-11.0.10.0.9-0.el7_9.x86_64.rpm 4c5528d38245aa14b33d05948eb02c322e95528485c9970733d2e5a577774d6d java-11-openjdk-javadoc-zip-11.0.10.0.9-0.el7_9.i686.rpm 28d98e71d3a3f5bef8abd07f0acc8353279545bf2aee26db49d58baded52104e java-11-openjdk-javadoc-zip-11.0.10.0.9-0.el7_9.x86_64.rpm db00d954c05dbf5ebc5e47f7671980d64911b459229bc83c8dcd6c60c4ce0b90 java-11-openjdk-jmods-11.0.10.0.9-0.el7_9.i686.rpm 4851da54ebe84600b0c7af372a59c38094992018f2ffe45bec040b2dd5d380bd java-11-openjdk-jmods-11.0.10.0.9-0.el7_9.x86_64.rpm 8c2a340bb8e3487639e7851ddf9b80b263ca137dee7948eceddfd372f4b80882 java-11-openjdk-src-11.0.10.0.9-0.el7_9.i686.rpm 0bec8227df4692ec640eaf96154a87faa5a1ab3d9c37856f4f8e0c0a98c88525 java-11-openjdk-src-11.0.10.0.9-0.el7_9.x86_64.rpm 393806557640081ee6c9dd7dc6ee00e307d9ae676a1a267d20fb4793dda538d7 java-11-openjdk-static-libs-11.0.10.0.9-0.el7_9.i686.rpm 2cee495ddd05e0808ca1e516d0b1ad02fcdf3e46ede1dadb81a285b96ab3648c java-11-openjdk-static-libs-11.0.10.0.9-0.el7_9.x86_64.rpm Source: e6eec7030d7de24b8286053fe178a78a85c6f1ad953482486bb62dbb12851295 java-11-openjdk-11.0.10.0.9-0.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 25 Jan 2021 14:08:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5350 Important CentOS 7 net-snmp Security Update Message-ID: <20210125140835.GA26839(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5350 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5350 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 46bca967117d9441489461b3e6c17e9d3e387f3c3bfba523e30b819bb00825ef net-snmp-5.7.2-49.el7_9.1.x86_64.rpm 940d3c647a6731e9ac3db41e0ac29dd98c5646b2f3d6559663e1ef5e309d5a77 net-snmp-agent-libs-5.7.2-49.el7_9.1.i686.rpm 9337c05672cf9bfec36d4f07ea3e1ff83103684578d98cb0b7c93d90c03620dc net-snmp-agent-libs-5.7.2-49.el7_9.1.x86_64.rpm 743f6a2f0afed6f677ea24028a9be02fb82801ed898d3523695bc6b923a302d3 net-snmp-devel-5.7.2-49.el7_9.1.i686.rpm b987f0cc8431b286cd14af878fe7d373d1fef790672495746f45a37477544b88 net-snmp-devel-5.7.2-49.el7_9.1.x86_64.rpm 8bad4d40202c32d3b92c589f87621067f44ac2cd0793dc3c8ca85d82dc069603 net-snmp-gui-5.7.2-49.el7_9.1.x86_64.rpm b9e5d765d9cdb4e753cc90c405374ae4f1e90a89b8969164455783fc60720afd net-snmp-libs-5.7.2-49.el7_9.1.i686.rpm bf6158e17a81b9067714e7011f8111f3764aec96494c531e4518423d302b355b net-snmp-libs-5.7.2-49.el7_9.1.x86_64.rpm 5800fe1251af68096a15f87c737c6bb60eea189076391a14cee6c95f32fdb304 net-snmp-perl-5.7.2-49.el7_9.1.x86_64.rpm 3ed462219356a67f4b4e61ac7fe20b5177652f7b0016197ed02c546f91020c7f net-snmp-python-5.7.2-49.el7_9.1.x86_64.rpm bd8ba984e8b76d404b8422b2aeaf6d8ebee207f7fe92acda66e7ef0e2f94f312 net-snmp-sysvinit-5.7.2-49.el7_9.1.x86_64.rpm ecac7aae69f045e6bb94ecf2521d78d9f8f856a67352b6d877799477a31afa6b net-snmp-utils-5.7.2-49.el7_9.1.x86_64.rpm Source: 6560320e0ff6431ae21a753f2a26a0798475dcf3bb7a2a06669c53a73347be0c net-snmp-5.7.2-49.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Mon, 25 Jan 2021 14:08:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0162 Important CentOS 7 xstream Security Update Message-ID: <20210125140847.GA26960(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0162 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0162 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f53aa25a58a78740dad5a5777ccec426834c3455b4a323c3cd264c877f39e567 xstream-1.3.1-12.el7_9.noarch.rpm 6abc3f24e051fa25828e517e1a6999a1a3612b5f97a13d8e99553cc31d24663d xstream-javadoc-1.3.1-12.el7_9.noarch.rpm Source: d078e00e0e2cb6bcffa7a7dc8d938b38d802b89cb906bcdfb2b250d3624f9991 xstream-1.3.1-12.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Mon, 25 Jan 2021 14:08:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0153 Moderate CentOS 7 dnsmasq Security Update Message-ID: <20210125140858.GA27060(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0153 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2021:0153 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bbf2b7054c85cc8831c0ffba64a4cabdc3eb23c4d32ba5484b962d4c8f22ecde dnsmasq-2.76-16.el7_9.1.x86_64.rpm 912ce11b5c1438a25af1e1961d891e6421717a57685de5add6d528d3ff3bdf42 dnsmasq-utils-2.76-16.el7_9.1.x86_64.rpm Source: 896b308d212709dca6ffb64bbbec44f0b6747ab3eea831ecf0ae9c9c745b981f dnsmasq-2.76-16.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Wed, 27 Jan 2021 00:11:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0221 Important CentOS 7 sudo Security Update Message-ID: <20210127001123.GA17548(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0221 Important Upstream details at : https://access.redhat.com/errata/RHSA-2021:0221 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 78721775026f8ae9ad659054bb6aa8c453a791cc260f66e1ea959649a8f8d922 sudo-1.8.23-10.el7_9.1.x86_64.rpm d60d364eab2fcbe5b73378922674c904aa0843d27145c8b5ab2bc29462a3ddc0 sudo-devel-1.8.23-10.el7_9.1.i686.rpm 03e57a64f56503f6e79a1fc2c5923cb7b7c844a98479ed62503b92933057832d sudo-devel-1.8.23-10.el7_9.1.x86_64.rpm Source: efe580c1a98dfc85f4112e5d5adb6ddab0509d0c989706b311f8717877cb73b6 sudo-1.8.23-10.el7_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 8 Date: Wed, 27 Jan 2021 00:11:36 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0276 CentOS 7 tzdata BugFix Update Message-ID: <20210127001136.GA17658(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0276 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0276 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4b0430168f86ed2d3205e156f91cb895de8e9f80a08f08355aaaed21286d7be5 tzdata-2021a-1.el7.noarch.rpm f89e78370bd25ce90933cc003b71d1a2bcb2d53f73c8919389825731abc97807 tzdata-java-2021a-1.el7.noarch.rpm Source: 38974708d565f8077796f018c431bc40e12d1473e454ab3d619ac65670c875c0 tzdata-2021a-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 9 Date: Wed, 27 Jan 2021 00:11:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:0077 CentOS 7 389-ds-base BugFix Update Message-ID: <20210127001156.GA17807(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:0077 Upstream details at : https://access.redhat.com/errata/RHBA-2021:0077 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2952ebf67510a8da5c648a66cb72fb82d02a871b1b805e3fa5d9a1ab8d1377d2 389-ds-base-1.3.10.2-9.el7_9.x86_64.rpm 5d56166abb7686fc795b62a2d6600a144699caccdbc3ea53b082d1535c2834b0 389-ds-base-devel-1.3.10.2-9.el7_9.x86_64.rpm 29d3baca7632def182f6a6250f76f26476b491b66dfe819eb6d94008003dfc3d 389-ds-base-libs-1.3.10.2-9.el7_9.x86_64.rpm 7f3bdd324d9659e15f12b5165027a55a0cea71990ff77d978912c84bebe83633 389-ds-base-snmp-1.3.10.2-9.el7_9.x86_64.rpm Source: 5389afa67a0b034de14795b943df1bf98b486ba5b93f3f77c5944eb96ce84764 389-ds-base-1.3.10.2-9.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 190, Issue 2 ***********************************************

1 0

RHEL changes
by J Martin Rushton 26 Jan '21

26 Jan '21

See: https://arstechnica.com/gadgets/2021/01/centos-is-gone-but-rhel-is-now-free… and https://www.redhat.com/en/blog/new-year-new-red-hat-enterprise-linux-progra… -- J Martin Rushton MBCS

33 88

CentOS Dojo @FOSDEM, Next Week
by Rich Bowen 26 Jan '21

26 Jan '21

Reminder: we will be holding our annual FOSDEM CentOS Dojo next week on Thursday and Friday. It will of course be online. Details, schedule, and registration, are available at https://wiki.centos.org/Events/Dojo/FOSDEM2021 Registration is free. Please come, and tel your colleagues!

2 1

CentOS Stream suitability as a production webserver
by Jamie Burchell 25 Jan '21

25 Jan '21

Hello I've recently discovered the announcement regarding the change in direction for the CentOS project and I imagine like many others, I'm confused and concerned about what this means moving forward. I work for a small web development agency and we offer hosting as part of our package to clients who need it. We have many CentOS 7 web servers (DigitalOcean droplets) (LAMP/LEMP) that I look after and today I'm thankful I have only migrated one of those to CentOS 8, given the recent announcement about its curtailed EOL. I literally just went to the Wiki today to confirm the EOL date for EL7 and boy am I glad I spotted it. Given we are not developing drivers or applications (other than websites and web applications), is the change a non-issue for my use-case? I've seen it written that CentOS Stream is the "development version" of RHEL but also that we shouldn't have considered RHEL to be the beta for CentOS. Others have said to think of CentOS more like RHEL RC-1. I just don't know how the stability will compare and we have historically always chosen CentOS for its stability (and of course price). Sure, I could migrate to Ubuntu (I use this locally in WSL), but I've become somewhat "comfy slippers" with CentOS and have built our setup around it (including custom ansible scripts etc) and don't want to change everything unncessarily. Of course, a lot of this is somewhat dependent on what DigitalOcean will decide to provide image wise moving forward. I'm sorry if this has already been answered, I spent a good few hours reading through the respective threads in the devel list and ended up more confused than I started. Cheers, Jamie

25 62

Infiniband special ops?
by lejeczek 25 Jan '21

25 Jan '21

Hi guys. Hoping some net experts my stumble upon this message, I have an IPoIB direct host to host connection and: -> $ ethtool ib1 Settings for ib1: Supported ports: [ ] Supported link modes: Not reported Supported pause frame use: No Supports auto-negotiation: No Supported FEC modes: Not reported Advertised link modes: Not reported Advertised pause frame use: No Advertised auto-negotiation: No Advertised FEC modes: Not reported Speed: 40000Mb/s Duplex: Full Auto-negotiation: on Port: Other PHYAD: 255 Transceiver: internal Link detected: yes and that's both ends, both hosts, yet: > $ iperf3 -c 10.5.5.97 Connecting to host 10.5.5.97, port 5201 [ 5] local 10.5.5.49 port 56874 connected to 10.5.5.97 port 5201 [ ID] Interval Transfer Bitrate Retr Cwnd [ 5] 0.00-1.00 sec 1.36 GBytes 11.6 Gbits/sec 0 2.50 MBytes [ 5] 1.00-2.00 sec 1.87 GBytes 16.0 Gbits/sec 0 2.50 MBytes [ 5] 2.00-3.00 sec 1.84 GBytes 15.8 Gbits/sec 0 2.50 MBytes [ 5] 3.00-4.00 sec 1.83 GBytes 15.7 Gbits/sec 0 2.50 MBytes [ 5] 4.00-5.00 sec 1.61 GBytes 13.9 Gbits/sec 0 2.50 MBytes [ 5] 5.00-6.00 sec 1.60 GBytes 13.8 Gbits/sec 0 2.50 MBytes [ 5] 6.00-7.00 sec 1.56 GBytes 13.4 Gbits/sec 0 2.50 MBytes [ 5] 7.00-8.00 sec 1.52 GBytes 13.1 Gbits/sec 0 2.50 MBytes [ 5] 8.00-9.00 sec 1.52 GBytes 13.1 Gbits/sec 0 2.50 MBytes [ 5] 9.00-10.00 sec 1.52 GBytes 13.1 Gbits/sec 0 2.50 MBytes - - - - - - - - - - - - - - - - - - - - - - - - - [ ID] Interval Transfer Bitrate Retr [ 5] 0.00-10.00 sec 16.2 GBytes 13.9 Gbits/sec 0 sender [ 5] 0.00-10.00 sec 16.2 GBytes 13.9 Gbits/sec receiver It's rather an oldish platform which hosts the link, PCIe is only 2.0 but with link of x8 that should be able to carry more than ~13Gbits/sec. Infiniband is Mellanox's ConnectX-3. Any thoughts on how to track the bottleneck or any thoughts I'll appreciate much. thanks, L

4 4

simple http server grab data posted and send to another server - slightly off topic
by Jerry Geis 22 Jan '21

22 Jan '21

Hi All, anyone know how to make a "simple" http server (python -m SimpleHTTPServer 8000) type of stuff - but simply take the incoming data, (should be real small) and when received - send that to a different server . This is different than "redirect" as that is the issue. The device does not understand the redirect response that is happening now. So I was looking for a way to "consume" the post - then re-send the post. It has to be independent of httpd as that is in use. CentOS 7 is my platform. Thanks Jerry

1 1

KVM support on RT Kernerl
by Danishka Navin 21 Jan '21

21 Jan '21

Hi, I have deployed CentOS 7.6 and then installed RT kernel. Later KVM installed on the same box. I noticed that KVM module was not loaded and then switched to the generic kernel. KVM module was loaded in the generic kernel. Is this a known issue? I would like to use KVM with RT kernel. Regards, -- Danishka Navin

1 0

Compiling Qt applications in docker
by H 21 Jan '21

21 Jan '21

I am working on compiling an application using Qt and am a newbie. I already have Qt on my CentOS 7 system but this application requires a later version of Qt not available for C 7. It also requires postgreSQL libraries and I am using the latest version of that, ie pgsql 13. I have successfully compiled it in a docker environment and I can launch it on the desktop. I have, however, not tested it against postgreSQL on my computer - yet. I do not want to run it in docker though but on my "regular" computer outside docker, as well as be able to move it to other computers I have. I am only using docker as a sandbox while working on compiling etc. I am not sure how I should set it up - outside docker - so that the Qt libraries it needs do not foul up the rest of my system but are only seen by this particular application. Can anyone offer a suggestion? Should the compiled application eventually reside in its own directory under /usr/local/bin and where should the Qt libraries be? In the same directory as the app? If not, where should they be placed? I tried to compile it to use the Qt libraries statically linked but the app does not run that way in docker but crashes with a segmentation fault. Suggestions/best practices appreciated!

1 0

mcelog service error flagged in Cockpit
by Robert G. (Doc) Savage 20 Jan '21

20 Jan '21

Whenever I log into Cockpit, it flags mcelog as a service failure-to- start failure. systemctl confirms this. # systemctl status mcelog * mcelog.service - Machine Check Exception Logging Daemon Loaded: loaded (/usr/lib/systemd/system/mcelog.service; disabled; vendor preset: enabled) Active: failed (Result: exit-code) since Sun 2021-01-10 18:06:36 CST; 1 weeks 2 days ago Main PID: 21959 (code=exited, status=1/FAILURE) Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: Started Machine Check Exception Logging Daemon. Jan 10 18:06:36 lionstore.protogeek.org mcelog[21959]: mcelog: ERROR: AMD Processor family 23: mcelog does not support this processor. Please use the edac_mce_amd module instead. Jan 10 18:06:36 lionstore.protogeek.org mcelog[21959]: CPU is unsupported Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: mcelog.service: Main process exited, code=exited, status=1/> Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: mcelog.service: Failed with result 'exit-code'. A search through BZ indicates mcelog hasn't been supported on AMD processors s since family 21. How do I tell Cockpit to use this alternative module? Perhaps more importantly, why doesn't Cockpit automatically set up this module when it's installed on an AMD system? --Doc Savage Fairview Heights, IL

1 0

btrfs to ext4
by Christopher Wensink 20 Jan '21

20 Jan '21

Hello CentOS Gurus, I have just learned that our backup system natively supports restoring vmware VM individual files from a vmware based backup for ext3,ext4 file systems but not BTRFS and some of our VM's run BTRFS as the root file system. Does anyone know if it's possible to convert BTRFS partitions to ext4? Chris -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

2 1

Restore pristine SELinux configuration ?
by Nicolas Kovacs 20 Jan '21

20 Jan '21

Hi, I have CentOS 7 running on a public server hosting all sorts of web applications, mail, XMPP, MPD, etc. How do I reset SELinux configuration to defaults? I know how to reset all my custom booleans to the initial state. # cat /etc/selinux/targeted/active/booleans.local # This file is auto-generated by libsemanage # Do not edit directly. httpd_unified=1 httpd_can_sendmail=1 spamd_enable_home_dirs=1 httpd_can_network_connect=1 ftpd_full_access=1 mpd_enable_homedirs=1 named_write_master_zones=1 Starting from there, I can manually reset them to 0 with setsebool. On the other hand, I don't know how I would do something similar with the SELinux modules. I vaguely remember having created some of these, for example for Fail2ban to work correctly. But I don't remember what I did here over the years, what modules I created, etc. How would I recreate the default SELinux configuration without having to wipe and reinstall the whole server? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 2

Kickstart "Error setting up base repository"
by Alex Kirk 20 Jan '21

20 Jan '21

I recently built my first CentOS kickstart config on a CentOS 7 system; it runs well, but the OS and its tools are old enough that it's causing pain with the apps I want to run on top of said system, so I'm trying to port it to CentOS 8. I've taken the anaconda-ks.cfg file created from a successful manual install (of both regular 8 and Stream), placed it on my DVD ISO, and wrapped things back up like I was doing with CentOS 7. I'm successfully beginning the installation, but running into "Error setting up base repository" - despite having not touched either the filesystem structure of the ISO, or the generated kickstart file that points at my repos. Here is the relevant config: #version=RHEL8 # Use graphical install graphical repo --name="AppStream" --baseurl=file:///run/install/sources/mount-0000-cdrom/AppStream %packages @^minimal-environment @development kexec-tools %end # Keyboard layouts keyboard --xlayouts='us' # System language lang en_US.UTF-8 # Network information network --hostname=localhost.localdomain # Use CDROM installation media cdrom # Run the Setup Agent on first boot firstboot --enable ignoredisk --only-use=sda autopart # Partition clearing information clearpart --none --initlabel # System timezone timezone America/New_York --isUtc %addon com_redhat_kdump --enable --reserve-mb='auto' %end %anaconda pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty %end When I switched over to a console to try to troubleshoot this, I noticed that /run/install/sources/mount-0000-cdrom/AppStream didn't exist (the "mount-0000-cdrom" directory is empty), but /run/install/repo/AppStream does, and appears to have all the right information within it. I've tried specifying that directory as the baseurl instead, and get no difference in behavior. The only other file I've touched is isolinux/isolinux.cfg on the DVD, with the relevant line now being: append initrd=initrd.img inst.ks=cdrom:/ks.cfg inst.stage2=hd:LABEL=CentOS-Stream-8-x86_64-dvd quiet What am I doing wrong here? This seems like basic config, but obviously I've missed something... -- Alex Kirk Global Principal, Suricata 404-291-6588 akirk(a)corelight.com

3 4

centos-release-gluster8 for centos 7
by Nicolas Zuber 19 Jan '21

19 Jan '21

Hi all, We have some Centos 7 server running with gluster 7 installed. We are using the the packages provided by the storage SIG (centos-release-gluster7). "Yum search centos-release-gluster" shows centos-release-gluster7 as the latest gluster version provided. But according to https://wiki.centos.org/SpecialInterestGroup/Storage there should be already packages for the gluster 8 release available. So I am wondering what I can do to be able to install glusterfs 8 from the storage SIG. Thanks, Nicolas

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss