- Discuss - lists.centos.org

mcelog service error flagged in Cockpit
by Robert G. (Doc) Savage 20 Jan '21

20 Jan '21

Whenever I log into Cockpit, it flags mcelog as a service failure-to- start failure. systemctl confirms this. # systemctl status mcelog * mcelog.service - Machine Check Exception Logging Daemon Loaded: loaded (/usr/lib/systemd/system/mcelog.service; disabled; vendor preset: enabled) Active: failed (Result: exit-code) since Sun 2021-01-10 18:06:36 CST; 1 weeks 2 days ago Main PID: 21959 (code=exited, status=1/FAILURE) Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: Started Machine Check Exception Logging Daemon. Jan 10 18:06:36 lionstore.protogeek.org mcelog[21959]: mcelog: ERROR: AMD Processor family 23: mcelog does not support this processor. Please use the edac_mce_amd module instead. Jan 10 18:06:36 lionstore.protogeek.org mcelog[21959]: CPU is unsupported Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: mcelog.service: Main process exited, code=exited, status=1/> Jan 10 18:06:36 lionstore.protogeek.org systemd[1]: mcelog.service: Failed with result 'exit-code'. A search through BZ indicates mcelog hasn't been supported on AMD processors s since family 21. How do I tell Cockpit to use this alternative module? Perhaps more importantly, why doesn't Cockpit automatically set up this module when it's installed on an AMD system? --Doc Savage Fairview Heights, IL

1 0

btrfs to ext4
by Christopher Wensink 19 Jan '21

19 Jan '21

Hello CentOS Gurus, I have just learned that our backup system natively supports restoring vmware VM individual files from a vmware based backup for ext3,ext4 file systems but not BTRFS and some of our VM's run BTRFS as the root file system. Does anyone know if it's possible to convert BTRFS partitions to ext4? Chris -- Christopher Wensink IS Administrator Five Star Plastics, Inc 1339 Continental Drive Eau Claire, WI 54701 Office: 715-831-1682 Mobile: 715-563-3112 Fax: 715-831-6075 cwensink(a)five-star-plastics.com www.five-star-plastics.com

2 1

Restore pristine SELinux configuration ?
by Nicolas Kovacs 19 Jan '21

19 Jan '21

Hi, I have CentOS 7 running on a public server hosting all sorts of web applications, mail, XMPP, MPD, etc. How do I reset SELinux configuration to defaults? I know how to reset all my custom booleans to the initial state. # cat /etc/selinux/targeted/active/booleans.local # This file is auto-generated by libsemanage # Do not edit directly. httpd_unified=1 httpd_can_sendmail=1 spamd_enable_home_dirs=1 httpd_can_network_connect=1 ftpd_full_access=1 mpd_enable_homedirs=1 named_write_master_zones=1 Starting from there, I can manually reset them to 0 with setsebool. On the other hand, I don't know how I would do something similar with the SELinux modules. I vaguely remember having created some of these, for example for Fail2ban to work correctly. But I don't remember what I did here over the years, what modules I created, etc. How would I recreate the default SELinux configuration without having to wipe and reinstall the whole server? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 2

Kickstart "Error setting up base repository"
by Alex Kirk 19 Jan '21

19 Jan '21

I recently built my first CentOS kickstart config on a CentOS 7 system; it runs well, but the OS and its tools are old enough that it's causing pain with the apps I want to run on top of said system, so I'm trying to port it to CentOS 8. I've taken the anaconda-ks.cfg file created from a successful manual install (of both regular 8 and Stream), placed it on my DVD ISO, and wrapped things back up like I was doing with CentOS 7. I'm successfully beginning the installation, but running into "Error setting up base repository" - despite having not touched either the filesystem structure of the ISO, or the generated kickstart file that points at my repos. Here is the relevant config: #version=RHEL8 # Use graphical install graphical repo --name="AppStream" --baseurl=file:///run/install/sources/mount-0000-cdrom/AppStream %packages @^minimal-environment @development kexec-tools %end # Keyboard layouts keyboard --xlayouts='us' # System language lang en_US.UTF-8 # Network information network --hostname=localhost.localdomain # Use CDROM installation media cdrom # Run the Setup Agent on first boot firstboot --enable ignoredisk --only-use=sda autopart # Partition clearing information clearpart --none --initlabel # System timezone timezone America/New_York --isUtc %addon com_redhat_kdump --enable --reserve-mb='auto' %end %anaconda pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty %end When I switched over to a console to try to troubleshoot this, I noticed that /run/install/sources/mount-0000-cdrom/AppStream didn't exist (the "mount-0000-cdrom" directory is empty), but /run/install/repo/AppStream does, and appears to have all the right information within it. I've tried specifying that directory as the baseurl instead, and get no difference in behavior. The only other file I've touched is isolinux/isolinux.cfg on the DVD, with the relevant line now being: append initrd=initrd.img inst.ks=cdrom:/ks.cfg inst.stage2=hd:LABEL=CentOS-Stream-8-x86_64-dvd quiet What am I doing wrong here? This seems like basic config, but obviously I've missed something... -- Alex Kirk Global Principal, Suricata 404-291-6588 akirk(a)corelight.com

3 4

centos-release-gluster8 for centos 7
by Nicolas Zuber 19 Jan '21

19 Jan '21

Hi all, We have some Centos 7 server running with gluster 7 installed. We are using the the packages provided by the storage SIG (centos-release-gluster7). "Yum search centos-release-gluster" shows centos-release-gluster7 as the latest gluster version provided. But according to https://wiki.centos.org/SpecialInterestGroup/Storage there should be already packages for the gluster 8 release available. So I am wondering what I can do to be able to install glusterfs 8 from the storage SIG. Thanks, Nicolas

2 2

How to do virtual IP on NetworkManager
by Jerry Geis 18 Jan '21

18 Jan '21

Hi All, I use virtual IP from time to time on CentOS 7. just take something like eth0 and make eth0:1 put in there the IP and subnet and bring up the new IP and it works. How do I do that with NetworkManager on the command line (assuming all static IP information) I do something like this from nmcli to set the static address: nmcli connection modify eth0 ipv4.method manual ipv6.method ignore autoconnect yes ipv4.addr 192.168.1.8/24 gw4 192.168.1.1 ipv4.dns 8.8.8.8 How then do I add a virtual IP? Thanks Jerry

4 4

Graphic setup issues...help wanted
by Kay Schenk 16 Jan '21

16 Jan '21

The problem. I can NOT change my screen resolution from GUI. I boot to multi-user, then get "into" graphical. First, some background. My original install of CentOS 8 -- maybe 8.2? -- about 3 months ago -- went pretty well but I kept having lockup issues. No issues with graphics using intel graphics or sound using either aplay at command line or GDM. (I also have NVIDIA which I have not configured.) I upgraded to 8.3 at some point. Still all OK with graphics but still lock up issues. At some point, I decided to start completely over and did a clean install of 8.4. I am now using CentOS8 Stream as my primary repo. Some questions? When I first boot, where is the probe of my video card done? Looking at DMESG, I couldn't determine this. When I "start" graphical, I get the following messages which are apparently related, from Xorg.1.log module loading section... [ 985.857] (II) LoadModule: "glx" [ 985.857] (II) Loading /usr/lib64/xorg/modules/extensions/libglx.so [ 985.859] (II) Module glx: vendor="X.Org Foundation" [ 985.859] compiled for 1.20.10, module version = 1.0.0 [ 985.859] ABI class: X.Org Server Extension, version 10.0 [ 985.859] (==) Matched modesetting as autoconfigured driver 0 [ 985.859] (==) Matched fbdev as autoconfigured driver 1 [ 985.859] (==) Matched vesa as autoconfigured driver 2 [ 985.859] (==) Assigned the driver to the xf86ConfigLayout [ 985.859] (II) LoadModule: "modesetting" [ 985.859] (II) Loading /usr/lib64/xorg/modules/drivers/modesetting_drv.so [ 985.859] (II) Module modesetting: vendor="X.Org Foundation" [ 985.859] compiled for 1.20.10, module version = 1.20.10 [ 985.859] Module class: X.Org Video Driver [ 985.859] ABI class: X.Org Video Driver, version 24.1 [ 985.859] (II) LoadModule: "fbdev" [ 985.859] (II) Loading /usr/lib64/xorg/modules/drivers/fbdev_drv.so [ 985.859] (II) Module fbdev: vendor="X.Org Foundation" [ 985.859] compiled for 1.20.3, module version = 0.5.0 [ 985.859] Module class: X.Org Video Driver [ 985.859] ABI class: X.Org Video Driver, version 24.0 [ 985.859] (II) LoadModule: "vesa" [ 985.859] (II) Loading /usr/lib64/xorg/modules/drivers/vesa_drv.so [ 985.859] (II) Module vesa: vendor="X.Org Foundation" [ 985.859] compiled for 1.20.3, module version = 2.4.0 [ 985.859] Module class: X.Org Video Driver [ 985.859] ABI class: X.Org Video Driver, version 24.0 [ 985.859] (II) modesetting: Driver for Modesetting Kernel Drivers: kms [ 985.859] (II) FBDEV: driver for framebuffer: fbdev [ 985.859] (II) VESA: driver for VESA chipsets: vesa [ 985.859] (EE) open /dev/dri/card0: No such file or directory [ 985.859] (WW) Falling back to old probe method for modesetting [ 985.859] (EE) open /dev/dri/card0: No such file or directory From messages I've seen on this problem, the lack of /dev/dri/card0 is the crux of the issue but I have NO idea of how it gets created. So, right now I'm stuck at a default resolution of 1024 x 768 Thanks for any help. -- ------------------------------------- "Don't let anyone dull your sparkle." MzK

2 3

bnxt_en :: interface renamed with a suffix
by Adrian Sevcenco 16 Jan '21

16 Jan '21

Hi! i had a very unpleasant surprise when an unconnected interface named enp97s0f1 was renamed when connected .. and after reboot i seen this in dmesg: [ 3.665192] bnxt_en 0000:61:00.1 enp97s0f1d1: renamed from enp97s0f1 does anyone have any idea what is going on? I disabled anything i could (to have a proper normal nic that do not act and do things behind the OS) like making sure that the broadcom nic is set to SF and disabled any function that could be disabled.. so why the rename? Thanks! Adrian

2 1

How to reset the USB subsystem?
by Frank Bures 16 Jan '21

16 Jan '21

Hi, my USB connected printer goes into deep space from time to time probably due to a HW problem on the MoBo. Is there a way how to reset the USB subsystem the same way one can restart networking or X without the necessity to reboot? Thanks Frank -- <listfrank1(a)gmail.com>

8 15

CentOS-announce Digest, Vol 190, Issue 1
by centos-announce-request＠centos.org 16 Jan '21

16 Jan '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:0053 Critical CentOS 7 firefox Security Update (Johnny Hughes) 2. CESA-2021:0087 Critical CentOS 7 thunderbird Security Update (Johnny Hughes) 3. CEBA-2020:5041 CentOS 7 389-ds-base BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 15 Jan 2021 20:13:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0053 Critical CentOS 7 firefox Security Update Message-ID: <20210115201317.GA19106(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0053 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2021:0053 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a64d622fd50cce3d3743013a5534e4fed4985139f60314ee23246e08601835cf firefox-78.6.1-1.el7.centos.i686.rpm b351574a459bf47d5aed5e921e49e33fc565cab9b3d72ce5cd6fefba1b6f83c9 firefox-78.6.1-1.el7.centos.x86_64.rpm Source: a13932c35463c2df27470a690e3ee1324c298781e1b21226751ccc4ad136487b firefox-78.6.1-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 15 Jan 2021 20:31:45 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:0087 Critical CentOS 7 thunderbird Security Update Message-ID: <20210115203145.GA20199(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:0087 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2021:0087 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9d6dba1f2b69d9a60186e25386f8b45c69cd3fc28e58774151905a0edfac5a82 thunderbird-78.6.1-1.el7.centos.x86_64.rpm Source: 5f6afd3684dd44a2cd4275e55a7ff11dafa7526fe9220f428582e8a35fc0aa6a thunderbird-78.6.1-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 15 Jan 2021 20:33:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2020:5041 CentOS 7 389-ds-base BugFix Update Message-ID: <20210115203326.GA20412(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2020:5041 Upstream details at : https://access.redhat.com/errata/RHBA-2020:5041 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 69b46c2053c4fbaa163f2390003a89acba1e45f20c75c06337f18474970f4943 389-ds-base-1.3.10.2-7.1.el7_9.x86_64.rpm 1315433f5602796463c98742b5395f6bc95f0716a4d9322f2131b5bd23a0bcdc 389-ds-base-devel-1.3.10.2-7.1.el7_9.x86_64.rpm 808bc13d124b864d8dd90f80437bc5d919d6dcdca1ebbd9efcd56e575fbfb500 389-ds-base-libs-1.3.10.2-7.1.el7_9.x86_64.rpm af4f36c81584781e9a0b5038c6d887f8d9a95020701f12f3688519038ca47c15 389-ds-base-snmp-1.3.10.2-7.1.el7_9.x86_64.rpm Source: 96b30e1368a7747a3797bd9dc27c8f3da3bed79f86af0dea848bb0dd011ee23a 389-ds-base-1.3.10.2-7.1.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 190, Issue 1 ***********************************************

1 0

remove me from the list
by clark＠west.net 15 Jan '21

15 Jan '21

Thank you for all the information over the years. -dennis-

2 1

Security bulletins for CentOS 8 and CentOS Stream
by Salman Baset 14 Jan '21

14 Jan '21

Hello, I was wondering if security bulletins for CentOS 8 (till its EOL date at the end of 2021) and CentOS Stream will be available any time soon. I have not seen any security bulletins for these two operating systems on this page, but we have seen Red Hat security bulletins for Red Hat 8. https://lists.centos.org/pipermail/centos-announce/ Thanks Salman

2 2

LTS
by Thomas Stephen Lee 12 Jan '21

12 Jan '21

Hi, CentOS Linux can continue as Fedora LTS or something similar with a five-year life cycle. After five years, users can opt for paid upgrades. We can also work with System manufacturers to pre-install the free LTS on their products, which will increase our user base. --- Lee, Community User.

7 9

Reboot/shutdown without login
by Kenneth Porter 11 Jan '21

11 Jan '21

I installed CentOS 8 on a Dell server and it's been running fine as a headless system, admin'd remotely by ssh. Now I'd like to allow someone to shut it down at the console without logging in. Is there a way to do that? Or do I need to get the GUI working? I tried switching it into graphical mode ("systemctl isolate graphical") and the console freezes with nothing but a non-blinking text cursor at top left. The usual virtual console switching hotkeys (ctrl-alt F1-F7) don't do anything when it's hung like this. The system is still responsive in my ssh session. It doesn't recover if I switch back to multi-user target so I have to reboot it to make the console useful again. I'm guessing I'm lacking a good video driver. (It's an R720xd I inherited and the latest drivers on Dell's site are for RHEL 7.)

8 9

rare but repeating system crash in C7
by Fred 07 Jan '21

07 Jan '21

Hi all, I'm hoping someone can help me figure this out. every now and then (less than monthly, maybe every 2-4 months, or so, I'll walk up to my C7 box (my home PC) in the morning, wiggle the mouse to wake up the screen, and after a second or so, instead of a live screen, the keyboard shift-lock and scroll-lock keys light up. if I wait a few (tens of) second(s) I find it is rebooting, as the BIOS splash screen appears. it boots normally and comes up with everything apparently working fine. Note that I tend to leave myself logged in 24/7/365 since there's nobody here except my wife and myself, and she has her own Linux box. as it happened again this morning, I grabbed some lines from /var/log/messages that show the last few minutes before it rebooted and the first 3 or four statements as it began to reboot: Jan 2 08:50:12 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cb10 trb-start 00000000a9f2cb20 trb-end 00000000a9f2cb20 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:50:13 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:50:13 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164858d0 trb-start 00000000164858e0 trb-end 00000000164858e0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 08:51:12 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 08:51:13 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 08:51:14 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 08:51:14 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485d20 trb-start 0000000016485d30 trb-end 0000000016485d30 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cae0 trb-start 00000000a9f2caf0 trb-end 00000000a9f2caf0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:58:00 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:58:00 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c530 trb-start 00000000a9f2c540 trb-end 00000000a9f2c540 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c340 trb-start 00000000a9f2c350 trb-end 00000000a9f2c350 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cfb0 trb-start 00000000a9f2cfc0 trb-end 00000000a9f2cfc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:02 fcshome systemd: Created slice User Slice of root. Jan 2 09:00:02 fcshome systemd: Started Session 7364 of user root. Jan 2 09:00:02 fcshome systemd: Removed slice User Slice of root. Jan 2 09:00:06 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:06 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cd20 trb-start 00000000a9f2cd30 trb-end 00000000a9f2cd30 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485400 trb-start 0000000016485410 trb-end 0000000016485410 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbc0 trb-start 00000000a9f2cbd0 trb-end 00000000a9f2cbd0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485c00 trb-start 0000000016485c10 trb-end 0000000016485c10 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:01:01 fcshome systemd: Created slice User Slice of root. Jan 2 09:01:01 fcshome systemd: Started Session 7365 of user root. Jan 2 09:01:01 fcshome systemd: Removed slice User Slice of root. Jan 2 09:03:45 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 09:03:46 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 09:03:47 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 09:03:47 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 09:04:31 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:31 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ca60 trb-start 00000000a9f2ca70 trb-end 00000000a9f2ca70 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:04:58 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:58 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cd70 trb-start 00000000a9f2cd80 trb-end 00000000a9f2cd80 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b30 trb-start 0000000016485b40 trb-end 0000000016485b40 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164856c0 trb-start 00000000164856d0 trb-end 00000000164856d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:05:03 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:05:03 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164851b0 trb-start 00000000164851c0 trb-end 00000000164851c0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:10:01 fcshome systemd: Created slice User Slice of root. Jan 2 09:10:01 fcshome systemd: Started Session 7366 of user root. Jan 2 09:10:01 fcshome systemd: Removed slice User Slice of root. Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164854c0 trb-start 00000000164854d0 trb-end 00000000164854d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485eb0 trb-start 0000000016485ec0 trb-end 0000000016485ec0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164852c0 trb-start 00000000164852d0 trb-end 00000000164852d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b70 trb-start 0000000016485b80 trb-end 0000000016485b80 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbb0 trb-start 00000000a9f2cbc0 trb-end 00000000a9f2cbc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164858d0 trb-start 00000000164858e0 trb-end 00000000164858e0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485a00 trb-start 0000000016485a10 trb-end 0000000016485a10 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:14:46 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:14:46 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485450 trb-start 0000000016485460 trb-end 0000000016485460 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c170 trb-start 00000000a9f2c180 trb-end 00000000a9f2c180 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c7a0 trb-start 00000000a9f2c7b0 trb-end 00000000a9f2c7b0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:10 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:10 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485560 trb-start 0000000016485570 trb-end 0000000016485570 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b90 trb-start 0000000016485ba0 trb-end 0000000016485ba0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cf90 trb-start 00000000a9f2cfa0 trb-end 00000000a9f2cfa0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c9e0 trb-start 00000000a9f2c9f0 trb-end 00000000a9f2c9f0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485660 trb-start 0000000016485670 trb-end 0000000016485670 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:23 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:23 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485330 trb-start 0000000016485340 trb-end 0000000016485340 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:24 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:24 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485500 trb-start 0000000016485510 trb-end 0000000016485510 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c400 trb-start 00000000a9f2c410 trb-end 00000000a9f2c410 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164851c0 trb-start 00000000164851d0 trb-end 00000000164851d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485e30 trb-start 0000000016485e40 trb-end 0000000016485e40 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbf0 trb-start 00000000a9f2cc00 trb-end 00000000a9f2cc00 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c000 trb-start 00000000a9f2c010 trb-end 00000000a9f2c010 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:27 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:27 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ce50 trb-start 00000000a9f2ce60 trb-end 00000000a9f2ce60 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:31 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:31 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c4e0 trb-start 00000000a9f2c4f0 trb-end 00000000a9f2c4f0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:47 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:47 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbb0 trb-start 00000000a9f2cbc0 trb-end 00000000a9f2cbc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:16:15 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 09:16:16 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 09:16:17 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 09:16:17 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b50 trb-start 0000000016485b60 trb-end 0000000016485b60 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c050 trb-start 00000000a9f2c060 trb-end 00000000a9f2c060 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c680 trb-start 00000000a9f2c690 trb-end 00000000a9f2c690 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cb70 trb-start 00000000a9f2cb80 trb-end 00000000a9f2cb80 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c520 trb-start 00000000a9f2c530 trb-end 00000000a9f2c530 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ca10 trb-start 00000000a9f2ca20 trb-end 00000000a9f2ca20 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpuset Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpu Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpuacct Jan 2 09:20:11 fcshome kernel: Linux version 3.10.0-1160.6.1.el7.x86_64 The last four events are the start of reboot and everything above is leading up to the crash. I note that there was a selinux event early in this list of events, but I see those frequently and they normally don't cause a crash. if I scroll upward from this list, I find more of the same above what is shown here. The selinux event seems to be related to a SMB mount. since I have a Synology box on the LAN, and it stays mounted nearly all the time, I suspect the selinux event has something to do with that, but I have no idea why it would cause a crash once every few months. Is that selinux event something I need to fix? I'm further guessing that "xhci_hcd" has something to do with USB, am I right? If so I don't know what it would be... Clues would be greatly appreciated! Thanks in advance! Fred

6 24

Re: [CentOS] dovecot option PROFILE=SYSTEM
by Kenneth Porter 07 Jan '21

07 Jan '21

--On Wednesday, January 06, 2021 7:08 AM -0800 david <david(a)daku.org> wrote: >>>> If only there had been a comment in the file >>>> /etc/dovecot/conf.d/10-ssl.conf I suggest opening an enhancement request on Bugzilla. <https://bugzilla.redhat.com/>

1 0

Running script before reboot or shutdown
by Carlos Lopez 06 Jan '21

06 Jan '21

Hi all, I am trying to configure a script as a systemd service to run first when a shutdown or reboot is called. This script execute some scp commands to copy some files to other machines. My actual defined systemd’s file is: [Unit] Description=Remote copy some files before reboot/shutdown Before=poweroff.target halt.target shutdown.target reboot.target DefaultDependencies=no [Service] Type=simple ExecStart=/bin/true ExecStop=/usr/local/bin/remote_copy RemainAfterExit=yes [Install] WantedBy=multi-user.target But it doesn’t work. “remote_copy” is working when it is executed from root shell. I am using CentOS-8 fully patched release. Any idea what am I doing wrong? Regards, C. L. Martinez

3 7

Apache shows PHP code instead of executing it
by Kaushal Shriyan 06 Jan '21

06 Jan '21

Hi, I am running the below php, httpd and CentOS Linux version. # rpm -qa | grep php php73-mbstring-7.3.25-1.el7.ius.x86_64 php73-json-7.3.25-1.el7.ius.x86_64 php73-fpm-7.3.25-1.el7.ius.x86_64 php73-pdo-7.3.25-1.el7.ius.x86_64 php73-gd-7.3.25-1.el7.ius.x86_64 php73-mysqlnd-7.3.25-1.el7.ius.x86_64 php73-xml-7.3.25-1.el7.ius.x86_64 php73-opcache-7.3.25-1.el7.ius.x86_64 php73-fpm-httpd-7.3.25-1.el7.ius.noarch php73-common-7.3.25-1.el7.ius.x86_64 php73-fpm-nginx-7.3.25-1.el7.ius.noarch php73-cli-7.3.25-1.el7.ius.x86_64 php73-bcmath-7.3.25-1.el7.ius.x86_64 # rpm -qa | grep httpd httpd24u-2.4.46-1.el7.ius.x86_64 httpd24u-tools-2.4.46-1.el7.ius.x86_64 httpd24u-filesystem-2.4.46-1.el7.ius.noarch php73-fpm-httpd-7.3.25-1.el7.ius.noarch # cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) I have placed the below file in /var/www/html directory. #cat info.php <?php phpinfo( ); ?> # I am seeing this in the logs ==> access_log <== 192.168.0.95 - - [06/Jan/2021:21:42:21 +0530] "GET /info.php HTTP/1.1" 304 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_1_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" When I invoke it from the browser Apache shows PHP code instead of executing it. Please let me know if you need any additional information. Thanks in Advance. Best Regards, Kaushal

4 5

fail2ban problems - not banning
by Gary Stainburn 06 Jan '21

06 Jan '21

Hi everyone, I've got fail2ban and firewalld set up on a C7 box, in theory protecting dovecot, exim and ssh but I'm not convinced it's doing anything. in /var/log/fail2ban.log I'm getting loads of entries such as: 2020-12-22 19:08:08,100 fail2ban.actions [1836]: WARNING [dovecot] 78.128.113.67 already banned I think this is because the actual ban is not working. I have entries such as: 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- exec: ports="0:65535"; for p in $(echo $ports | tr ", " " "); do firewall-cmd --add-rich-rule="rule family='ipv4' source address='113.110.47.81' port port='$p' protocol='tcp' reject type='icmp-port-unreachable'"; done 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- stderr: 'Error: INVALID_PORT: 0:65535' 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- returned 102 2020-12-22 19:38:27,620 fail2ban.actions [1836]: ERROR Failed to execute ban jail 'dovecot' action 'firewallcmd-rich-rules' info 'ActionInfo({'ip': '113.110.47.81', 'fid': <function <lambda> at 0x7f119f084050>, 'family': 'inet4', 'raw-ticket': <function <lambda> at 0x7f119f0845f0>})': Error banning 113.110.47.81 I've done some Googling and received lots of responses about fail2ban failures but I can't find anything relating to this. Anyone got any ideas?

2 1

centos-release-stream VS centos-stream-release
by lejeczek 06 Jan '21

06 Jan '21

hi guys, do you know what to make of that? Why these tho packages? many thanks, L.

2 1

dovecot option PROFILE=SYSTEM
by david 06 Jan '21

06 Jan '21

Folks In examining the file /etc/dovecot/conf.d/10-ssl.conf I see the text line: ssl_cipher_list = PROFILE=SYSTEM Yet, I cannot find any documentation that explains what that causes, where the values are stored. I ask because I don't see that text line in other installations of Dovecot 2.3 on other distros. Can anyone point me to an explanation? David

3 3

PostgreSQL 13 on CentOS 7
by H 06 Jan '21

06 Jan '21

I am compiling an application that uses postgreSQL 13 and Qt 5.12. I have built the latter from scratch and successfully linked with libraries for postgreSQL 9.6 (the current version on CentOS 7) but have run into problems with postgreSQL 13. The server, client and libs are available in the postgres repository but I also need the devel library which in turns requires llvm5.0-devel which does not want seem to available... Has anyone successfully build an application use pg 13 or otherwise used postgresql13-devel? Thanks.

1 1

Recover removed data in XFS
by Gestió Servidors 05 Jan '21

05 Jan '21

Hi, I manage an HPC Cluster that runs CentOS-7 and shares some mount points. All shares are formated in XFS. Is there anyway to recover removed data? ...An user has deleted her $HOME entirely... Thanks.

2 1

Is EPEL compatible with Stream?
by Kay Schenk 04 Jan '21

04 Jan '21

Hello all-- All good in the Stream for me. :) Because Stream will tend to be more "forward moving" than previous CentOS releases, is it still OK to set up EPEL as a repo? So far, I've only installed terminus fonts from CentOS 8 EPEL, but I'm just wondering about this. Generally, are there any cautions against enabling specific repos to use with Stream? -- ------------------------------------- "Don't let anyone dull your sparkle." MzK

6 9

units command, crazy output
by Fred 31 Dec '20

31 Dec '20

whenever I use the units command from a script, e.g.: elapsed=86500 echo elapsed time: `units "$elapsed sec" hms` elapsed time: *Currency exchange rates from 2012-10-24* 24 hr + 1 min + 40 sec the man page even says it outputs that when run without arguments. My question is why in the world does it? certainly when run from within a script doing conversions of time using the "hms" option, I don't want that to be stuck in the middle of my output. Anybody know why it does that, or how to make it quit? (I know, I use sed to filter it out, but can't understand why I should have to. Thanks in advance! Fred

2 1

Out of office: "CentOS Digest, Vol 191, Issue 26"
by mak＠jump.com.hk 29 Dec '20

29 Dec '20

Thank you for your email, our office will close from 1pm 24 Dec to 27 Dec and will resume on 28 Dec. Wish you a merry Christmas and happy new year.

9 13

Gnote equivalent in CentOS 8
by Robert Nichols 27 Dec '20

27 Dec '20

In CentOS 8, is there an equivalent for the gnote application? -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

5 6

Disk choice for workstation ?
by Nicolas Kovacs 27 Dec '20

27 Dec '20

Hi, My workstation is currently equipped with a pair of Western Digital Red 1 TB SATA disks in a software RAID 1 setup. Some stuff like working with virtual machines is a bit slow, so I'm thinking about replacing the disks by SSD. I'm hesitating between three different setups: 1) Use a relatively small SSD (120 to 240 GB) to reinstall the system on it. Keep the two SATA disks in a RAID 1 array and mount /home on it. 2) Use a larger SSD (500 GB to 1 TB), install everything (including /home) on it. Keep the two SATA disks in a RAID 1 array and mount them on /data for storage. 3) Get rid of the disks and go full SSD, with a 1 TB disk. Any advice from the hardware gurus on this list? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

9 10

keepass for CentOS Linux OS
by Kaushal Shriyan 27 Dec '20

27 Dec '20

Hi, Are there any repos to download keepass password manager for CentOS Linux release 7.9.2009 (Core)? I am getting Service Unavailable when I hit https://apps.fedoraproject.org/packages/keepass as per https://keepass.info/download.html Please suggest. Best Regards, Kaushal

4 6

ansible dnf with stream
by Łukasz Posadowski 25 Dec '20

25 Dec '20

I wish You a Merry Christmas. Have a great time. Aside from that, I'm having a strange problem with dnf module on Ansible with CentOS Stream. I'm using Ansible 2.9 on RHEL 8. TASK [Install basic packages on RedHat-like systems.] ******************************************************************** skipping: [malinka.ping.local] skipping: [jezynka.ping.local] skipping: [aegis.ping.local] ok: [strategie.ping.local] fatal: [stream.ping.local]: FAILED! => {"changed": false, "failures": ["No package htop available."], "msg": "Failed to install some of the specified packages", "rc": 1, "results": []} changed: [python-cave.ping.local] ok: [outpost.ping.local] changed: [potemkin.ping.local] changed: [rawhide.ping.local] The task in question is: - name: Install basic packages on RedHat-like systems. dnf: name: - bash-completion - htop - mc - vim - mtr - tree - net-tools state: latest enablerepo: epel-modular, epel when: ansible_os_family == 'RedHat' This task works on RHEL 8.3, CentOS 8.3, Fedora 33, but not in CentOS Stream 8. I can install above packages (including htop) with no problem by hand: sudo dnf --enablerepo=epel-modular,epel install htop Failed to set locale, defaulting to C.UTF-8 Librepo version: 1.12.0 with CURL_GLOBAL_ACK_EINTR support (libcurl/7.61.1 OpenSSL/1.1.1g zlib/1.2.11 brotli/1.0.6 libidn2/2.2.0 libpsl/0.20.2 (+libidn2/2.2.0) libssh/0.9.4/openssl/zlib nghttp2/1.33.0) Last metadata expiration check: 0:25:46 ago on Thu Dec 24 14:44:50 2020. Dependencies resolved. ======================================================================== Package Architecture Version Repository Size ======================================================================== Installing: htop x86_64 2.2.0-6.el8 epel 112 k [...] Installed: htop-2.2.0-6.el8.x86_64 I don't get it why a separate "dnf update" task is running fine and this is not. -- Łukasz Posadowski

2 2

HE-IPv6-Tunnel with CentOS 7
by Walter H. 24 Dec '20

24 Dec '20

Hello, on my tunnel end I habe configured this: in /etc/sysconfig/network-scripts/ifcfg-eth0 I added this IPV6INIT=yes IPV6ADDR=lan-prefix::1 IPV6ADDR_SECONDARIES="fe80::1" IPV6_AUTOCONF=no IPV6_ROUTER=yes /etc/sysconfig/network-scripts/ifcfg-sit1 is this TYPE=SIT NAME=sit1 ONBOOT=yes DEVICE=sit1 BOOTPROTO=none IPV6INIT=yes IPV6TUNNELIPV4=ipv4-of-tunnel-at-he IPV6TUNNELIPV4LOCAL=myipv4 IPV6ADDR=tunnel-prefix::2 in /etc/sysconfig/network I added this: NETWORKING_IPV6="yes" IPV6FORWARDING="yes" IPV6_DEFAULTGW=tunnel-prefix::1 IPV6_DEFAULTDEV=sit1 everything works fine, but can someone explain this behaviour: traceroute6 www.google.com doing this on this CentOS-Box, I have tunnel-prefix::1 at the first hop as expected; doing this on another Linux (CentOS), I have the CentOS-Box at the first hop and tunnel-prefix::1 at the 2nd hop as expected, but doing this on a Windows, there I have tunnel-prefix::1 at the 2nd and the 3rd hop, why? (the same with my own 6in4-tunnel) Thanks, Walter

1 0

centos-release-gluster8 missing
by Strahil Nikolov 24 Dec '20

24 Dec '20

Hello All, does anyone know where is centos-release-gluster8 for CentOS 7 ? Best Regards, Strahil Nikolov

1 0

Rocky LInux moving forward..
by John Plemons 23 Dec '20

23 Dec '20

Got an eMail this morning about the Rocky Linux build, more info at this link, Sign up for forum access.. Paste ---------> John, Just looping back around to keep you informed. We have published our first community update <https://forums.rockylinux.org/t/community-update-december-2020/1157> on the forums. Best, <-------- End Paste rockylinux.org Jordan Pisaniello Community Manager The Rocky Linux Foundation

1 0

CentOS 8 future
by Satish Patel 23 Dec '20

23 Dec '20

Folks, What is going on here https://blog.centos.org/2020/12/future-is-centos-stream/ CentOS 8's future is not looking bright. Recently deployed CentOS8 on my production workload and now hearing this. What do other folks think about this?

34 83

Sound/missing sof firmware in CentOS since 8.4
by Kay Schenk 23 Dec '20

23 Dec '20

Hello all -- I switched to Stream yesterday hoping it would fix some issues I'd been having with CentOS 8.4 but alas it did not. I started out installing 8.2, maybe kernel 4.18.0 -147?, on my laptop about 2 months or so ago and the sound worked fine. Now, it does not. I seem to be running into this problem... https://bugzilla.redhat.com/show_bug.cgi?id=1772498 I have located the rpm for this SOF package but as it states in this link, it can NOT be installed with my current alsa version. Thoughts? Guidance? -- ------------------------------------- "Don't let anyone dull your sparkle." MzK

2 2

question centos stream 8 applying updates
by edward 22 Dec '20

22 Dec '20

after reading some info on centos stream is a rolling release. i'm wondering applying updates, upgrades to centos stream will use the same commands as before or something new? thanks edward

9 21

CentOS-announce Digest, Vol 189, Issue 5
by centos-announce-request＠centos.org 22 Dec '20

22 Dec '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:5437 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2020:5618 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 21 Dec 2020 20:45:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5437 Important CentOS 7 kernel Security Update Message-ID: <20201221204516.GA14829(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5437 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5437 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d9c97d1412cfdb3b24b2aca08bec9bed63be4db9461f19ba0eef840ad48dc19e bpftool-3.10.0-1160.11.1.el7.x86_64.rpm d1b44c5bcb094399e0bce41de4218e28b8f69fb0c0a79c24411b5561978ec6b5 kernel-3.10.0-1160.11.1.el7.x86_64.rpm 7804215d9e8fd6eaae4ae7d7fb360dd0ec85e87ed93ec488ef3d1cb1285ff33e kernel-abi-whitelists-3.10.0-1160.11.1.el7.noarch.rpm ea590d364a03624b219bdbcff4119983ab7a1bd31a6a7146afb0d4e684761056 kernel-debug-3.10.0-1160.11.1.el7.x86_64.rpm e3d2e5a0802cde0d09552d1bd3102383e1851a9aecf88fd83a5fb81baae6d53c kernel-debug-devel-3.10.0-1160.11.1.el7.x86_64.rpm c59ce9d5e2b28c278b947391fce0c591d912b04727d6141c27262cf98fb99844 kernel-devel-3.10.0-1160.11.1.el7.x86_64.rpm 81b2e85bd83c8dc868290121adb4b8821c2da304dd04a69ec5ea65031c46d351 kernel-doc-3.10.0-1160.11.1.el7.noarch.rpm 1bab4a2f960faa0a69de616785116c776e018a15bdc67d8f57416af2a12896db kernel-headers-3.10.0-1160.11.1.el7.x86_64.rpm 7eafe5ff654144eafe243a63bd26f5f8be857f9a6db277149949bba5f768b643 kernel-tools-3.10.0-1160.11.1.el7.x86_64.rpm c91dc3bbc7593fb7442fa9ec947f30d95bad094d5b4180e4669380d535253bb7 kernel-tools-libs-3.10.0-1160.11.1.el7.x86_64.rpm 97ca74d50cef86200eaedf11cbb46855b4d2c943de9de770a9b024fbbf90ce3d kernel-tools-libs-devel-3.10.0-1160.11.1.el7.x86_64.rpm ab2758dd1426e326fee61bd2598d1e3e1099478f8620ffce7bed64945dec78b0 perf-3.10.0-1160.11.1.el7.x86_64.rpm 5c6e935d06978bc962ba371367424881edecc7735e2833f96a64554589179077 python-perf-3.10.0-1160.11.1.el7.x86_64.rpm Source: c3328f1a8ce4d799b7893d3d4a97185e1ade473ec7f695903132b7d1161a634e kernel-3.10.0-1160.11.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 21 Dec 2020 20:46:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5618 Important CentOS 7 thunderbird Security Update Message-ID: <20201221204606.GA14969(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5618 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5618 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: de7c7cd5bd6465116843083e7515695b436a00a145d6c705355b3e74a55e2b6b thunderbird-78.6.0-1.el7.centos.x86_64.rpm Source: 507628ef1d57a01ff641a1a48d05c99111c6edb3cdf78aaaa419fd812dbc2523 thunderbird-78.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 189, Issue 5 ***********************************************

1 0

Disabling a firewalld zone
by Mauricio Tavares 21 Dec '20

21 Dec '20

So I created a zone so I could put apply the same rules in a set of networks firewall-cmd --permanent --new-zone=pickles firewall-cmd --permanent --zone=ldap --add-source=192.168.102.0/24 firewall-cmd --permanent --zone=ldap --add-source=192.168.10.0/24 firewall-cmd --permanent --zone=ldap --add-source=192.168.3.0/24 firewall-cmd --permanent --zone=ldap --add-service=pickles firewall-cmd --reload Let's say I want to temporarily disable it. How can I do that? RIght now best I can do is completely delete it firewall-cmd --permanent --delete-zone=pickles firewall-cmd --reload which seems to be a bit harsh (good thing I documented my zone creation so I can just past the above commands and be done)

2 1

mariadb or mysql web gui
by Ranbir 21 Dec '20

21 Dec '20

Hello, Is there a web gui available in CentOS 8 for managing mariadb and/or mysql DB servers? I've used phpMyAdmin for many years, but I don't see an RPM for it in EPEL for CentOS 8. Is there a popular alternative to phpMyAdmin that's packaged for CentOS 8? -- Ranbir

3 2

Finding which repository files provide required libraries
by H 21 Dec '20

21 Dec '20

I came across the following Ubuntu script to identify which repository files provide libraries required by an app. Is there a rpm alternative to dpk-query that would allow this to run on CentOS/RH? ldd /bin/zoom | awk '/=>/{print $(NF-1)}' | while read n; do dpk-query -S $n; done | sed 's/^$[^:]\+$:.*$/\1/' | uniq

3 4

Centos Stream Docker image
by Steve Malenfant 19 Dec '20

19 Dec '20

I've been looking, but couldn't find it. Can somebody give me a pointer to where I can find a Centos Stream Docker image? Thanks, Steve

1 0

PXE configuration
by Erick Perez - Quadrian Enterprises 19 Dec '20

19 Dec '20

Hi guys, I have a Centos 7.9 TFTP/PXe server that I use to serve ISO installers. I can properly serve installers but not live CDs. But I want to add a live cd, I'm using this but is not working. Can someone suggest a fix? label 2 menu label ^2) Run Centos LiveCD 79 x64 kernel centos7_x64_livecd_genome/isolinux/vmlinuz0 append initrd=centos7_x64_livecd_genome/isolinux/initrd0.img rootfstype=auto ro rd.live.image method=http://192.168.1.83/centos7_live/LiveOS/squashfs.img devfs=nomount -- --------------------- Erick Perez Quadrian Enterprises S.A. - Panama, Republica de Panama Skype chat: eaperezh WhatsApp IM: +507-6675-5083 ---------------------

1 0

Questions about Stream
by Andrey 18 Dec '20

18 Dec '20

OK, we realized that the changes are final, and must somehow deal with it. Before making final decisions we need some answers. 1. What about bugs and security issues? The FAQ says: "Security issues will be updated in CentOS Stream after they are solved in the current RHEL release." Consider the scenario: a bug or security issue found in both Stream and current RHEL. It was fixed in RHEL in a few days. How fast it will be fixed in Stream? Obviously, it needs some time to port the fix to newer version of package. Days or months? Another scenario: a bug or security issue found in Stream but NOT in current RHEL. How fast it will be fixed in Stream? In a few days or in next RHEL release (up to 6 months)? 2. What to do in 2024, when Stream 8 is EOL. Perform full reinstall of all servers to Stream 9? Or there will be some kind of major version upgrade? A note about hardware: we don't know now what drivers will be dropped from RHEL and Stream 9. Bad news for server owners: in 2024 they may be forced to upgrade hardware or move to RHEL 8 because of its longer lifecycle.

5 8

YUM problem
by Gestió Servidors 18 Dec '20

18 Dec '20

Hi, I'm trying to find a YUM package. My system runs a CentOS-7.2.1511 (yes, it's a old version, but some software is "stable" with this CentOS version). Now, I'm looking for a package with YUM. When a run "yum provides */system-config-lvm", I get this error: [root@mysystem ~]# yum provides */system-config-lvm Complementos cargados:fastestmirror, langpacks, priorities Loading mirror speeds from cached hostfile * epel: mirror.uv.es * extras: ftp.csuc.cat<ftp://ftp.csuc.cat> * updates: ftp.csuc.cat<ftp://ftp.csuc.cat> Traceback (most recent call last): File "/usr/bin/yum", line 29, in <module> yummain.user_main(sys.argv[1:], exit_code=True) File "/usr/share/yum-cli/yummain.py", line 375, in user_main errcode = main(args) File "/usr/share/yum-cli/yummain.py", line 184, in main result, resultmsgs = base.doCommands() File "/usr/share/yum-cli/cli.py", line 584, in doCommands return self.yum_cli_commands[self.basecmd].doCommand(self, self.basecmd, self.extcmds) File "/usr/share/yum-cli/yumcommands.py", line 1557, in doCommand return base.provides(extcmds) File "/usr/share/yum-cli/cli.py", line 1619, in provides callback_has_matchfor=True) File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 3538, in searchPackageProvides tagdata = getattr(po, tag) File "/usr/lib/python2.7/site-packages/yum/packages.py", line 668, in <lambda> filelist = property(fget=lambda self: self.returnFileEntries(ftype='file')) File "/usr/lib/python2.7/site-packages/yum/packages.py", line 1504, in returnFileEntries self._loadFiles() File "/usr/lib/python2.7/site-packages/yum/packages.py", line 1478, in _loadFiles files = self.hdr['filenames'] _rpm.error: invalid header data I have run "yum clean metadata" and "yum clean all", but error message still appears. What can I do? Thanks.

2 1

CentOS 8.3 bugs
by d tbsky 17 Dec '20

17 Dec '20

Hi: just try to install CentOS 8.3. I use two sata disks and create mdadm raid1 with LVM. Normally when I want to reinstall this system, anaconda should recognize the raid1/lvm so I can reformat it. anaconda at CentOS 8.3 failed to do the job. I tried Scientific Linux 7.9 and RHEL 8.3, both can recognize installed CentOS 8.3 correctly and let me reformat it. and there is no net-snmp-perl package in CentOS 8.3 repository. although it is in RHEL 8.3. wait for next bug-to-bug distribution....

6 8

Re: [CentOS] I'm looking forward to the future of CentOS Stream
by Gordon Messmer 17 Dec '20

17 Dec '20

On 12/11/20 9:56 AM, Ljubomir Ljubojevic wrote: > And I will repeat that millions of CentOS users found free clone of RHEL > trustworthy enough to use it for production, even without "official > endorsement". Exactly. That's why it's so weird that those people, today, think that CentOS Stream won't be usable, based on their interpretation of the official statements from Red Hat. Red Hat's statements weren't taken into consideration before, but now they're a sign of doom? > If they ... even allowed ANYONE ELSE that was not employed by Red Hat in > 2014 to even come close to learning the secrets of rebuild, no backlash > would have happened I'm going to stop you there, because the CentOS maintainers kept that process out of public visibility long before Red Hat was ever involved. If you think users should know more about the process, then you are pointing fingers at the *wrong* people. I don't want this to become a flame war. So rather than pointing fingers, let's focus on the fact that CentOS Stream promises to be developed in the open, resolving the problem that you're describing. Red Hat is fixing the thing you're complaining about. Red Hat is giving us the thing that has been requested more often, by more people, than any other change in CentOS, and the result is that the press is full of stories about users being angry, because five people on the mailing lists sent a lot of messages. (About half of the traffic in the threads on centos and centos-devel comes from five people, and various people replying to them.) > But no, as soon as Oracle started rebuilding RHEL source code Red Hat > first made things difficult for everyone to create kernels (source code > was not srpms anymore but tar?) You're misinformed. Kernels are still built from SRPM, but the archive used is no longer an upstream release with a series of patches. The reason for the change is not insidious. It's unfortunate that the pristine source + patches can't be maintained, I agree, but speaking as a developer: maintaining hundreds of patches that touch intersecting files and rebasing them all when earlier patches are updated is an incredibly difficult and time consuming task. And, if I remember correctly, applying all of those patches took almost as long as building the kernel. If it takes that long to just prepare the source code, that's a major hit to productivity when a developer needs to work on the code or build the SRPM to validate changes. And, ultimately, there's very little value in shipping those patches when the vast majority of them are already in the current version of the upstream kernel, and they're merely backported to the older release that Red Hat supports. It's an entirely different story when distributions are shipping patches that they don't push upstream, but that's not generally what you see with the kernel package.

15 19

I'm looking forward to the future of CentOS Stream
by Gordon Messmer 17 Dec '20

17 Dec '20

Personally, I think that changing focus on CentOS Stream is going to make CentOS (and maybe even RHEL) better in the same way and for the same reasons that Fedora is a better distribution than Red Hat Linux was. CentOS Stream should fix the biggest problems that CentOS has had in the past, providing a reliable, free LTS distribution with community participation. Having read the announcement, along with hundreds of reactions in blogs, forums, and mailing lists, I am of the opinion that all (or a reasonable approximation thereof) of the vocal concern is the result of the overloaded term "stable" as it applies to software distributions. If we imagine a spectrum of individuals in which one end of the spectrum is individuals whose primary occupation is in release engineering for software distributions and the other end is individuals who primarily consume software distributions, I would expect that individuals on one end to mostly use the term "stable" in the sense of compatibility and semantic versioning, and the other end to use the same term in the sense of having fewer bugs. The use of that word causes people at one end of the spectrum to infer a completely different message than people at the other end intend to communicate. If we never use the ambiguous term "stable" and instead use the terms compatibility and reliability (the two common meanings of "stable" at different ends of the spectrum), I think that various aspects of CentOS Stream will be better than CentOS, or the same as CentOS. With respect to compatibility: I think most developers are familiar with semantic versioning. Semantic versioning is used by some applications and libraries to indicate the nature and extent of changes. The version is presented numerically as Major.Minor.Revision. When new interfaces are added, the minor number is increased. Those changes don’t affect backward compatibility. When individual interfaces are changed or removed, the major number is increased. Those changes aren’t backward compatible. That allows consumers to infer that if an application is compatible with 8.1, then it is also compatible with 8.2 and later, but might not be compatible with 9.0. Red Hat Enterprise Linux applies that concept to the entire software distribution, providing independent software vendors a convenient means of communicating their compatibility. If they’ve tested their application on RHEL 8.2, then any RHEL 8 host patched to at least that release is expected to run the application. Moreover, Red Hat will continue to publish security patches to each given minor release’s channel, allowing consumers to "pin" a host to a minor release. Those hosts will not receive feature updates, but will mitigate vulnerabilities. CentOS Stream isn’t going to feature minor releases, and isn’t going to provide semantic versioning of the distribution. The same application that the vendor has validated on RHEL 8.2 will run on a fully patched CentOS Stream 8 host, but might not run on a host that isn’t fully patched. On the surface, it appears that CentOS users will lose the convenience provided by semantic versioning. I would simply point out that the CentOS developers have never supported running CentOS in any state other than fully patched. They don’t publish security information in the package repositories, and they don’t support any means of pinning a host to a minor release. For practical purposes, CentOS Stream will need to be fully patched for compatibility purposes, just like CentOS is, and will be equally suited for production purposes. To put a really find point on that: Semantic versioning is only meaningful for hosts that are not fully patched. A fully patched host is expected to be compatible with any application validated for that major release. With respect to reliability: Many of the people concerned about the change in focus refer to CentOS Stream as a "beta" for RHEL. That is not how Red Hat or the CentOS maintainers describe CentOS Stream( anywhere that I've seen), and I think it ignores most of the development, testing, and distribution pipeline. At the risk of oversimplifying that pipeline a whole lot, in the future Free Software will pass through several stages on the way to RHEL: Stage 1: (Software Development) The majority of development and testing is done in individual upstream projects, outside of Red Hat. Stage 2: (Release Development, aka Rawhide) The initial work to build and integrate individual packages with the rest of the software distribution is done in what is essentially a development branch of the software distribution. Stage 3: (Stable[1], aka Fedora) Packages that have passed through review and QA are published for general use. There is no minor release, as major releases occur every 6 months and are supported for only 13 months, anyway. Compatibility is maintained by prohibiting significant version changes for applications and libraries "whenever possible." Users expect no new features during a release, but no breaking changes either. Stage 4: (Long Term Support, aka CentOS Stream) Packages that CentOS Stream includes from Fedora have proven reliable in a variety of workloads managed by many users of Fedora. These packages are expected to be very reliable as a result of testing by their developers, by package maintainers, and by real-world users. They are included in CentOS Stream when they are ready. Stage 5: (Long Term Support with Semantic Versioning of the OS, aka Red Hat Enterprise Linux) Packages that RHEL includes from CentOS Stream have a similar level of QA, but package updates that introduce new features and interfaces are accepted only once every six months when Red Hat publishes a minor release. There’s a lot of concern that CentOS Stream will offer less reliability than RHEL, but there’s currently no reason to believe that will be true. There is no evidence that the minor releases that are part of the RHEL lifecycle improve reliability, and as far as I know that's not the reason they're used. Their function is to offer semantic versioning of the OS. CentOS Stream will probably offer the same level of compatibility and reliability that CentOS does today, and should be equally appropriate or inappropriate for production use in the future as CentOS is now in that respect. And that brings me to the one aspect where I think CentOS Stream will resolve the one major, glaring problem that CentOS has today, that most users ignore: Security. With respect to security: Today, CentOS is a release stage after Stage 5 described above. The CentOS maintainers begin work on a minor release after that release is available to RHEL consumers, and the process of rebuilding those packages is often very time consuming. CentOS maintainers have to reverse-engineer the exact order in which packages are built, with the exact set of installed and available packages in the build environment in order to ensure that the resulting package actually uses the same interfaces that RHEL’s packages do. All packages require that ordering and build environment matching, but most packages are published in small sets and ordering is much easier to identify than it is when they are published in a large batch. As a result, security updates can’t be published for CentOS while the maintainers are rebuilding the minor release, because the build dependencies aren’t available yet. Those windows occur every six months, and are typically a month or more in length. [2] Today, CentOS users accept the risk that for roughly two months out of the year, their systems may have known vulnerabilities with no patch to remediate the problem. Personally, I think that’s a huge risk that needs to be weighed against the costs of RHEL licenses whenever CentOS is used in production. The good news is that CentOS Stream looks like it won't have that problem. CentOS Stream updates still won’t be prepared early, while vulnerability details are embargoed, but there aren’t any windows in which CentOS Stream can’t immediately begin work on preparing updates once the embargo ends. That means that CentOS Stream will be as secure as CentOS is today in between minor updates, and significantly more secure than CentOS is today while its maintainers prepare minor releases. The trade-off of significantly improving security in exchange for giving up semantic versioning of the OS is a huge improvement for production purposes. In addition, the announcement of the change in focus indicates that Fedora maintainers should have much better visibility into work going on within the RHEL release engineering process, and more opportunity to participate in that work, and I look forward to that. CentOS’s big security problem has always been compounded by the lack of any external visibility into the process. Based on the information available today, I expect CentOS to be a very reliable, reasonably secure distribution of GNU/Linux with Long Term Support. And judging by Red Hat’s mention that Facebook’s internal groups either are already using an internally curated OS built from CentOS Stream, or will be using it soon, I think I’m not alone in believing that. 1: I’m using the term "stable" here because I expect it to have both common meanings: compatibility isn’t broken within a release, and the software is expected to be reliable. 2: https://en.wikipedia.org/wiki/CentOS#CentOS_version_8

15 20

Re: [CentOS] MTU report question
by Strahil Nikolov 17 Dec '20

17 Dec '20

seems so

1 0

Is Oracle a real alternative to Centos?
by Frank Cox 17 Dec '20

17 Dec '20

Is Oracle a real alternative to Centos? I'm asking because genuinely don't know; I've never paid any attention to Oracle's Linux offering before now. But today I've seen a couple of the folks here mention Oracle Linux and I see that Oracle even offers a script to convert Centos 7 to Oracle. Nothing about Centos 8 in that script, though. https://linux.oracle.com/switch/centos/ That page seems to say that Oracle Linux is everything that Centos was prior to today's announcement. But someone else here just said that the first thing Oracle Linux does is to sign you up for an Oracle account. So, for people who know a lot more about these things than I do, what's the downside of using Oracle Linux versus Centos? I assume that things like epel/rpmfusion/etc will work just as they do under Centos since it's supposed to be bit-for-bit compatible like Centos was. What does the "sign up with Oracle" stuff actually do, and can you cancel, avoid, or strip it out if you don't want it? Based on my extremely limited knowledge around Oracle Linux, it sounds like that might be a go-to solution for Centos refugees. But is it, really? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

15 31

https://blog.centos.org/2020/12/future-is-centos-stream/
by Rich Bowen 16 Dec '20

16 Dec '20

The future of the CentOS Project is CentOS Stream, and over the next year we’ll be shifting focus from CentOS Linux, the rebuild of Red Hat Enterprise Linux (RHEL), to CentOS Stream, which tracks just ahead of a current RHEL release. CentOS Linux 8, as a rebuild of RHEL 8, will end at the end of 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux. Meanwhile, we understand many of you are deeply invested in CentOS Linux 7, and we’ll continue to produce that version through the remainder of the RHEL 7 life cycle. https://access.redhat.com/support/policy/updates/errata/#Life_Cycle_Dates CentOS Stream will also be the centerpiece of a major shift in collaboration among the CentOS Special Interest Groups (SIGs). This ensures SIGs are developing and testing against what becomes the next version of RHEL. This also provides SIGs a clear single goal, rather than having to build and test for two releases. It gives the CentOS contributor community a great deal of influence in the future of RHEL. And it removes confusion around what “CentOS” means in the Linux distribution ecosystem. When CentOS Linux 8 (the rebuild of RHEL8) ends, your best option will be to migrate to CentOS Stream 8, which is a small delta from CentOS Linux 8, and has regular updates like traditional CentOS Linux releases. If you are using CentOS Linux 8 in a production environment, and are concerned that CentOS Stream will not meet your needs, we encourage you to contact Red Hat about options. We have an FAQ - https://centos.org/distro-faq/ - to help with your information and planning needs, as you figure out how this shift of project focus might affect you. [See also: Red Hat's perspective on this. https://www.redhat.com/en/blog/centos-stream-building-innovative-future-ent…]

60 157

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss