- Discuss - lists.centos.org

rare but repeating system crash in C7
by Fred 07 Jan '21

07 Jan '21

Hi all, I'm hoping someone can help me figure this out. every now and then (less than monthly, maybe every 2-4 months, or so, I'll walk up to my C7 box (my home PC) in the morning, wiggle the mouse to wake up the screen, and after a second or so, instead of a live screen, the keyboard shift-lock and scroll-lock keys light up. if I wait a few (tens of) second(s) I find it is rebooting, as the BIOS splash screen appears. it boots normally and comes up with everything apparently working fine. Note that I tend to leave myself logged in 24/7/365 since there's nobody here except my wife and myself, and she has her own Linux box. as it happened again this morning, I grabbed some lines from /var/log/messages that show the last few minutes before it rebooted and the first 3 or four statements as it began to reboot: Jan 2 08:50:12 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cb10 trb-start 00000000a9f2cb20 trb-end 00000000a9f2cb20 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:50:13 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:50:13 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164858d0 trb-start 00000000164858e0 trb-end 00000000164858e0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 08:51:12 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 08:51:13 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 08:51:14 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 08:51:14 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485d20 trb-start 0000000016485d30 trb-end 0000000016485d30 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:55:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cae0 trb-start 00000000a9f2caf0 trb-end 00000000a9f2caf0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:58:00 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:58:00 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c530 trb-start 00000000a9f2c540 trb-end 00000000a9f2c540 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c340 trb-start 00000000a9f2c350 trb-end 00000000a9f2c350 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 08:59:51 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cfb0 trb-start 00000000a9f2cfc0 trb-end 00000000a9f2cfc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:02 fcshome systemd: Created slice User Slice of root. Jan 2 09:00:02 fcshome systemd: Started Session 7364 of user root. Jan 2 09:00:02 fcshome systemd: Removed slice User Slice of root. Jan 2 09:00:06 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:06 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cd20 trb-start 00000000a9f2cd30 trb-end 00000000a9f2cd30 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485400 trb-start 0000000016485410 trb-end 0000000016485410 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbc0 trb-start 00000000a9f2cbd0 trb-end 00000000a9f2cbd0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:00:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485c00 trb-start 0000000016485c10 trb-end 0000000016485c10 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:01:01 fcshome systemd: Created slice User Slice of root. Jan 2 09:01:01 fcshome systemd: Started Session 7365 of user root. Jan 2 09:01:01 fcshome systemd: Removed slice User Slice of root. Jan 2 09:03:45 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 09:03:46 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 09:03:47 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 09:03:47 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 09:04:31 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:31 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ca60 trb-start 00000000a9f2ca70 trb-end 00000000a9f2ca70 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:04:58 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:58 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cd70 trb-start 00000000a9f2cd80 trb-end 00000000a9f2cd80 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b30 trb-start 0000000016485b40 trb-end 0000000016485b40 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:04:59 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164856c0 trb-start 00000000164856d0 trb-end 00000000164856d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:05:03 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:05:03 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164851b0 trb-start 00000000164851c0 trb-end 00000000164851c0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:10:01 fcshome systemd: Created slice User Slice of root. Jan 2 09:10:01 fcshome systemd: Started Session 7366 of user root. Jan 2 09:10:01 fcshome systemd: Removed slice User Slice of root. Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164854c0 trb-start 00000000164854d0 trb-end 00000000164854d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:10:30 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485eb0 trb-start 0000000016485ec0 trb-end 0000000016485ec0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164852c0 trb-start 00000000164852d0 trb-end 00000000164852d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:55 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b70 trb-start 0000000016485b80 trb-end 0000000016485b80 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbb0 trb-start 00000000a9f2cbc0 trb-end 00000000a9f2cbc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164858d0 trb-start 00000000164858e0 trb-end 00000000164858e0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:11:56 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485a00 trb-start 0000000016485a10 trb-end 0000000016485a10 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:14:46 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:14:46 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485450 trb-start 0000000016485460 trb-end 0000000016485460 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c170 trb-start 00000000a9f2c180 trb-end 00000000a9f2c180 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:09 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c7a0 trb-start 00000000a9f2c7b0 trb-end 00000000a9f2c7b0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:10 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:10 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485560 trb-start 0000000016485570 trb-end 0000000016485570 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b90 trb-start 0000000016485ba0 trb-end 0000000016485ba0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cf90 trb-start 00000000a9f2cfa0 trb-end 00000000a9f2cfa0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c9e0 trb-start 00000000a9f2c9f0 trb-end 00000000a9f2c9f0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:22 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485660 trb-start 0000000016485670 trb-end 0000000016485670 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:23 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:23 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485330 trb-start 0000000016485340 trb-end 0000000016485340 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:24 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:24 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485500 trb-start 0000000016485510 trb-end 0000000016485510 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c400 trb-start 00000000a9f2c410 trb-end 00000000a9f2c410 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:25 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000164851c0 trb-start 00000000164851d0 trb-end 00000000164851d0 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485e30 trb-start 0000000016485e40 trb-end 0000000016485e40 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbf0 trb-start 00000000a9f2cc00 trb-end 00000000a9f2cc00 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:26 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c000 trb-start 00000000a9f2c010 trb-end 00000000a9f2c010 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:27 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:27 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ce50 trb-start 00000000a9f2ce60 trb-end 00000000a9f2ce60 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:31 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:31 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c4e0 trb-start 00000000a9f2c4f0 trb-end 00000000a9f2c4f0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:15:47 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:15:47 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cbb0 trb-start 00000000a9f2cbc0 trb-end 00000000a9f2cbc0 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:16:15 fcshome dbus[1192]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jan 2 09:16:16 fcshome dbus[1192]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Jan 2 09:16:17 fcshome setroubleshoot: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock. For complete SELinux messages run: sealert -l e4620dcc-6cdc-460d-a8a4-db9ce9624646 Jan 2 09:16:17 fcshome python: SELinux is preventing /usr/sbin/smbd from read access on the sock_file cups.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smbd should be allowed read access on the cups.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'lpqd' --raw | audit2allow -M my-lpqd#012# semodule -i my-lpqd.pp#012 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 0000000016485b50 trb-start 0000000016485b60 trb-end 0000000016485b60 seg-start 0000000016485000 seg-end 0000000016485ff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c050 trb-start 00000000a9f2c060 trb-end 00000000a9f2c060 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c680 trb-start 00000000a9f2c690 trb-end 00000000a9f2c690 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:11 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2cb70 trb-start 00000000a9f2cb80 trb-end 00000000a9f2cb80 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2c520 trb-start 00000000a9f2c530 trb-end 00000000a9f2c530 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: ERROR Transfer event TRB DMA ptr not part of current TD ep_index 8 comp_code 13 Jan 2 09:17:21 fcshome kernel: xhci_hcd 0000:03:00.0: Looking for event-dma 00000000a9f2ca10 trb-start 00000000a9f2ca20 trb-end 00000000a9f2ca20 seg-start 00000000a9f2c000 seg-end 00000000a9f2cff0 Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpuset Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpu Jan 2 09:20:11 fcshome kernel: Initializing cgroup subsys cpuacct Jan 2 09:20:11 fcshome kernel: Linux version 3.10.0-1160.6.1.el7.x86_64 The last four events are the start of reboot and everything above is leading up to the crash. I note that there was a selinux event early in this list of events, but I see those frequently and they normally don't cause a crash. if I scroll upward from this list, I find more of the same above what is shown here. The selinux event seems to be related to a SMB mount. since I have a Synology box on the LAN, and it stays mounted nearly all the time, I suspect the selinux event has something to do with that, but I have no idea why it would cause a crash once every few months. Is that selinux event something I need to fix? I'm further guessing that "xhci_hcd" has something to do with USB, am I right? If so I don't know what it would be... Clues would be greatly appreciated! Thanks in advance! Fred

6 24

Re: [CentOS] dovecot option PROFILE=SYSTEM
by Kenneth Porter 07 Jan '21

07 Jan '21

--On Wednesday, January 06, 2021 7:08 AM -0800 david <david(a)daku.org> wrote: >>>> If only there had been a comment in the file >>>> /etc/dovecot/conf.d/10-ssl.conf I suggest opening an enhancement request on Bugzilla. <https://bugzilla.redhat.com/>

1 0

Running script before reboot or shutdown
by Carlos Lopez 06 Jan '21

06 Jan '21

Hi all, I am trying to configure a script as a systemd service to run first when a shutdown or reboot is called. This script execute some scp commands to copy some files to other machines. My actual defined systemd’s file is: [Unit] Description=Remote copy some files before reboot/shutdown Before=poweroff.target halt.target shutdown.target reboot.target DefaultDependencies=no [Service] Type=simple ExecStart=/bin/true ExecStop=/usr/local/bin/remote_copy RemainAfterExit=yes [Install] WantedBy=multi-user.target But it doesn’t work. “remote_copy” is working when it is executed from root shell. I am using CentOS-8 fully patched release. Any idea what am I doing wrong? Regards, C. L. Martinez

3 7

Apache shows PHP code instead of executing it
by Kaushal Shriyan 06 Jan '21

06 Jan '21

Hi, I am running the below php, httpd and CentOS Linux version. # rpm -qa | grep php php73-mbstring-7.3.25-1.el7.ius.x86_64 php73-json-7.3.25-1.el7.ius.x86_64 php73-fpm-7.3.25-1.el7.ius.x86_64 php73-pdo-7.3.25-1.el7.ius.x86_64 php73-gd-7.3.25-1.el7.ius.x86_64 php73-mysqlnd-7.3.25-1.el7.ius.x86_64 php73-xml-7.3.25-1.el7.ius.x86_64 php73-opcache-7.3.25-1.el7.ius.x86_64 php73-fpm-httpd-7.3.25-1.el7.ius.noarch php73-common-7.3.25-1.el7.ius.x86_64 php73-fpm-nginx-7.3.25-1.el7.ius.noarch php73-cli-7.3.25-1.el7.ius.x86_64 php73-bcmath-7.3.25-1.el7.ius.x86_64 # rpm -qa | grep httpd httpd24u-2.4.46-1.el7.ius.x86_64 httpd24u-tools-2.4.46-1.el7.ius.x86_64 httpd24u-filesystem-2.4.46-1.el7.ius.noarch php73-fpm-httpd-7.3.25-1.el7.ius.noarch # cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) I have placed the below file in /var/www/html directory. #cat info.php <?php phpinfo( ); ?> # I am seeing this in the logs ==> access_log <== 192.168.0.95 - - [06/Jan/2021:21:42:21 +0530] "GET /info.php HTTP/1.1" 304 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_1_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" When I invoke it from the browser Apache shows PHP code instead of executing it. Please let me know if you need any additional information. Thanks in Advance. Best Regards, Kaushal

4 5

fail2ban problems - not banning
by Gary Stainburn 06 Jan '21

06 Jan '21

Hi everyone, I've got fail2ban and firewalld set up on a C7 box, in theory protecting dovecot, exim and ssh but I'm not convinced it's doing anything. in /var/log/fail2ban.log I'm getting loads of entries such as: 2020-12-22 19:08:08,100 fail2ban.actions [1836]: WARNING [dovecot] 78.128.113.67 already banned I think this is because the actual ban is not working. I have entries such as: 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- exec: ports="0:65535"; for p in $(echo $ports | tr ", " " "); do firewall-cmd --add-rich-rule="rule family='ipv4' source address='113.110.47.81' port port='$p' protocol='tcp' reject type='icmp-port-unreachable'"; done 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- stderr: 'Error: INVALID_PORT: 0:65535' 2020-12-22 19:38:27,619 fail2ban.utils [1836]: ERROR 7f119e95f7f0 -- returned 102 2020-12-22 19:38:27,620 fail2ban.actions [1836]: ERROR Failed to execute ban jail 'dovecot' action 'firewallcmd-rich-rules' info 'ActionInfo({'ip': '113.110.47.81', 'fid': <function <lambda> at 0x7f119f084050>, 'family': 'inet4', 'raw-ticket': <function <lambda> at 0x7f119f0845f0>})': Error banning 113.110.47.81 I've done some Googling and received lots of responses about fail2ban failures but I can't find anything relating to this. Anyone got any ideas?

2 1

centos-release-stream VS centos-stream-release
by lejeczek 06 Jan '21

06 Jan '21

hi guys, do you know what to make of that? Why these tho packages? many thanks, L.

2 1

dovecot option PROFILE=SYSTEM
by david 06 Jan '21

06 Jan '21

Folks In examining the file /etc/dovecot/conf.d/10-ssl.conf I see the text line: ssl_cipher_list = PROFILE=SYSTEM Yet, I cannot find any documentation that explains what that causes, where the values are stored. I ask because I don't see that text line in other installations of Dovecot 2.3 on other distros. Can anyone point me to an explanation? David

3 3

PostgreSQL 13 on CentOS 7
by H 06 Jan '21

06 Jan '21

I am compiling an application that uses postgreSQL 13 and Qt 5.12. I have built the latter from scratch and successfully linked with libraries for postgreSQL 9.6 (the current version on CentOS 7) but have run into problems with postgreSQL 13. The server, client and libs are available in the postgres repository but I also need the devel library which in turns requires llvm5.0-devel which does not want seem to available... Has anyone successfully build an application use pg 13 or otherwise used postgresql13-devel? Thanks.

1 1

Recover removed data in XFS
by Gestió Servidors 05 Jan '21

05 Jan '21

Hi, I manage an HPC Cluster that runs CentOS-7 and shares some mount points. All shares are formated in XFS. Is there anyway to recover removed data? ...An user has deleted her $HOME entirely... Thanks.

2 1

Is EPEL compatible with Stream?
by Kay Schenk 04 Jan '21

04 Jan '21

Hello all-- All good in the Stream for me. :) Because Stream will tend to be more "forward moving" than previous CentOS releases, is it still OK to set up EPEL as a repo? So far, I've only installed terminus fonts from CentOS 8 EPEL, but I'm just wondering about this. Generally, are there any cautions against enabling specific repos to use with Stream? -- ------------------------------------- "Don't let anyone dull your sparkle." MzK

6 9

units command, crazy output
by Fred 31 Dec '20

31 Dec '20

whenever I use the units command from a script, e.g.: elapsed=86500 echo elapsed time: `units "$elapsed sec" hms` elapsed time: *Currency exchange rates from 2012-10-24* 24 hr + 1 min + 40 sec the man page even says it outputs that when run without arguments. My question is why in the world does it? certainly when run from within a script doing conversions of time using the "hms" option, I don't want that to be stuck in the middle of my output. Anybody know why it does that, or how to make it quit? (I know, I use sed to filter it out, but can't understand why I should have to. Thanks in advance! Fred

2 1

Out of office: "CentOS Digest, Vol 191, Issue 26"
by mak＠jump.com.hk 29 Dec '20

29 Dec '20

Thank you for your email, our office will close from 1pm 24 Dec to 27 Dec and will resume on 28 Dec. Wish you a merry Christmas and happy new year.

9 13

Gnote equivalent in CentOS 8
by Robert Nichols 27 Dec '20

27 Dec '20

In CentOS 8, is there an equivalent for the gnote application? -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

5 6

Disk choice for workstation ?
by Nicolas Kovacs 27 Dec '20

27 Dec '20

Hi, My workstation is currently equipped with a pair of Western Digital Red 1 TB SATA disks in a software RAID 1 setup. Some stuff like working with virtual machines is a bit slow, so I'm thinking about replacing the disks by SSD. I'm hesitating between three different setups: 1) Use a relatively small SSD (120 to 240 GB) to reinstall the system on it. Keep the two SATA disks in a RAID 1 array and mount /home on it. 2) Use a larger SSD (500 GB to 1 TB), install everything (including /home) on it. Keep the two SATA disks in a RAID 1 array and mount them on /data for storage. 3) Get rid of the disks and go full SSD, with a 1 TB disk. Any advice from the hardware gurus on this list? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

9 10

keepass for CentOS Linux OS
by Kaushal Shriyan 27 Dec '20

27 Dec '20

Hi, Are there any repos to download keepass password manager for CentOS Linux release 7.9.2009 (Core)? I am getting Service Unavailable when I hit https://apps.fedoraproject.org/packages/keepass as per https://keepass.info/download.html Please suggest. Best Regards, Kaushal

4 6

ansible dnf with stream
by Łukasz Posadowski 25 Dec '20

25 Dec '20

I wish You a Merry Christmas. Have a great time. Aside from that, I'm having a strange problem with dnf module on Ansible with CentOS Stream. I'm using Ansible 2.9 on RHEL 8. TASK [Install basic packages on RedHat-like systems.] ******************************************************************** skipping: [malinka.ping.local] skipping: [jezynka.ping.local] skipping: [aegis.ping.local] ok: [strategie.ping.local] fatal: [stream.ping.local]: FAILED! => {"changed": false, "failures": ["No package htop available."], "msg": "Failed to install some of the specified packages", "rc": 1, "results": []} changed: [python-cave.ping.local] ok: [outpost.ping.local] changed: [potemkin.ping.local] changed: [rawhide.ping.local] The task in question is: - name: Install basic packages on RedHat-like systems. dnf: name: - bash-completion - htop - mc - vim - mtr - tree - net-tools state: latest enablerepo: epel-modular, epel when: ansible_os_family == 'RedHat' This task works on RHEL 8.3, CentOS 8.3, Fedora 33, but not in CentOS Stream 8. I can install above packages (including htop) with no problem by hand: sudo dnf --enablerepo=epel-modular,epel install htop Failed to set locale, defaulting to C.UTF-8 Librepo version: 1.12.0 with CURL_GLOBAL_ACK_EINTR support (libcurl/7.61.1 OpenSSL/1.1.1g zlib/1.2.11 brotli/1.0.6 libidn2/2.2.0 libpsl/0.20.2 (+libidn2/2.2.0) libssh/0.9.4/openssl/zlib nghttp2/1.33.0) Last metadata expiration check: 0:25:46 ago on Thu Dec 24 14:44:50 2020. Dependencies resolved. ======================================================================== Package Architecture Version Repository Size ======================================================================== Installing: htop x86_64 2.2.0-6.el8 epel 112 k [...] Installed: htop-2.2.0-6.el8.x86_64 I don't get it why a separate "dnf update" task is running fine and this is not. -- Łukasz Posadowski

2 2

HE-IPv6-Tunnel with CentOS 7
by Walter H. 24 Dec '20

24 Dec '20

Hello, on my tunnel end I habe configured this: in /etc/sysconfig/network-scripts/ifcfg-eth0 I added this IPV6INIT=yes IPV6ADDR=lan-prefix::1 IPV6ADDR_SECONDARIES="fe80::1" IPV6_AUTOCONF=no IPV6_ROUTER=yes /etc/sysconfig/network-scripts/ifcfg-sit1 is this TYPE=SIT NAME=sit1 ONBOOT=yes DEVICE=sit1 BOOTPROTO=none IPV6INIT=yes IPV6TUNNELIPV4=ipv4-of-tunnel-at-he IPV6TUNNELIPV4LOCAL=myipv4 IPV6ADDR=tunnel-prefix::2 in /etc/sysconfig/network I added this: NETWORKING_IPV6="yes" IPV6FORWARDING="yes" IPV6_DEFAULTGW=tunnel-prefix::1 IPV6_DEFAULTDEV=sit1 everything works fine, but can someone explain this behaviour: traceroute6 www.google.com doing this on this CentOS-Box, I have tunnel-prefix::1 at the first hop as expected; doing this on another Linux (CentOS), I have the CentOS-Box at the first hop and tunnel-prefix::1 at the 2nd hop as expected, but doing this on a Windows, there I have tunnel-prefix::1 at the 2nd and the 3rd hop, why? (the same with my own 6in4-tunnel) Thanks, Walter

1 0

centos-release-gluster8 missing
by Strahil Nikolov 24 Dec '20

24 Dec '20

Hello All, does anyone know where is centos-release-gluster8 for CentOS 7 ? Best Regards, Strahil Nikolov

1 0

Rocky LInux moving forward..
by John Plemons 23 Dec '20

23 Dec '20

Got an eMail this morning about the Rocky Linux build, more info at this link, Sign up for forum access.. Paste ---------> John, Just looping back around to keep you informed. We have published our first community update <https://forums.rockylinux.org/t/community-update-december-2020/1157> on the forums. Best, <-------- End Paste rockylinux.org Jordan Pisaniello Community Manager The Rocky Linux Foundation

1 0

CentOS 8 future
by Satish Patel 23 Dec '20

23 Dec '20

Folks, What is going on here https://blog.centos.org/2020/12/future-is-centos-stream/ CentOS 8's future is not looking bright. Recently deployed CentOS8 on my production workload and now hearing this. What do other folks think about this?

34 83

Sound/missing sof firmware in CentOS since 8.4
by Kay Schenk 23 Dec '20

23 Dec '20

Hello all -- I switched to Stream yesterday hoping it would fix some issues I'd been having with CentOS 8.4 but alas it did not. I started out installing 8.2, maybe kernel 4.18.0 -147?, on my laptop about 2 months or so ago and the sound worked fine. Now, it does not. I seem to be running into this problem... https://bugzilla.redhat.com/show_bug.cgi?id=1772498 I have located the rpm for this SOF package but as it states in this link, it can NOT be installed with my current alsa version. Thoughts? Guidance? -- ------------------------------------- "Don't let anyone dull your sparkle." MzK

2 2

question centos stream 8 applying updates
by edward 22 Dec '20

22 Dec '20

after reading some info on centos stream is a rolling release. i'm wondering applying updates, upgrades to centos stream will use the same commands as before or something new? thanks edward

9 21

CentOS-announce Digest, Vol 189, Issue 5
by centos-announce-request＠centos.org 22 Dec '20

22 Dec '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:5437 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2020:5618 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 21 Dec 2020 20:45:16 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5437 Important CentOS 7 kernel Security Update Message-ID: <20201221204516.GA14829(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5437 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5437 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d9c97d1412cfdb3b24b2aca08bec9bed63be4db9461f19ba0eef840ad48dc19e bpftool-3.10.0-1160.11.1.el7.x86_64.rpm d1b44c5bcb094399e0bce41de4218e28b8f69fb0c0a79c24411b5561978ec6b5 kernel-3.10.0-1160.11.1.el7.x86_64.rpm 7804215d9e8fd6eaae4ae7d7fb360dd0ec85e87ed93ec488ef3d1cb1285ff33e kernel-abi-whitelists-3.10.0-1160.11.1.el7.noarch.rpm ea590d364a03624b219bdbcff4119983ab7a1bd31a6a7146afb0d4e684761056 kernel-debug-3.10.0-1160.11.1.el7.x86_64.rpm e3d2e5a0802cde0d09552d1bd3102383e1851a9aecf88fd83a5fb81baae6d53c kernel-debug-devel-3.10.0-1160.11.1.el7.x86_64.rpm c59ce9d5e2b28c278b947391fce0c591d912b04727d6141c27262cf98fb99844 kernel-devel-3.10.0-1160.11.1.el7.x86_64.rpm 81b2e85bd83c8dc868290121adb4b8821c2da304dd04a69ec5ea65031c46d351 kernel-doc-3.10.0-1160.11.1.el7.noarch.rpm 1bab4a2f960faa0a69de616785116c776e018a15bdc67d8f57416af2a12896db kernel-headers-3.10.0-1160.11.1.el7.x86_64.rpm 7eafe5ff654144eafe243a63bd26f5f8be857f9a6db277149949bba5f768b643 kernel-tools-3.10.0-1160.11.1.el7.x86_64.rpm c91dc3bbc7593fb7442fa9ec947f30d95bad094d5b4180e4669380d535253bb7 kernel-tools-libs-3.10.0-1160.11.1.el7.x86_64.rpm 97ca74d50cef86200eaedf11cbb46855b4d2c943de9de770a9b024fbbf90ce3d kernel-tools-libs-devel-3.10.0-1160.11.1.el7.x86_64.rpm ab2758dd1426e326fee61bd2598d1e3e1099478f8620ffce7bed64945dec78b0 perf-3.10.0-1160.11.1.el7.x86_64.rpm 5c6e935d06978bc962ba371367424881edecc7735e2833f96a64554589179077 python-perf-3.10.0-1160.11.1.el7.x86_64.rpm Source: c3328f1a8ce4d799b7893d3d4a97185e1ade473ec7f695903132b7d1161a634e kernel-3.10.0-1160.11.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 21 Dec 2020 20:46:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5618 Important CentOS 7 thunderbird Security Update Message-ID: <20201221204606.GA14969(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5618 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5618 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: de7c7cd5bd6465116843083e7515695b436a00a145d6c705355b3e74a55e2b6b thunderbird-78.6.0-1.el7.centos.x86_64.rpm Source: 507628ef1d57a01ff641a1a48d05c99111c6edb3cdf78aaaa419fd812dbc2523 thunderbird-78.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 189, Issue 5 ***********************************************

1 0

Disabling a firewalld zone
by Mauricio Tavares 21 Dec '20

21 Dec '20

So I created a zone so I could put apply the same rules in a set of networks firewall-cmd --permanent --new-zone=pickles firewall-cmd --permanent --zone=ldap --add-source=192.168.102.0/24 firewall-cmd --permanent --zone=ldap --add-source=192.168.10.0/24 firewall-cmd --permanent --zone=ldap --add-source=192.168.3.0/24 firewall-cmd --permanent --zone=ldap --add-service=pickles firewall-cmd --reload Let's say I want to temporarily disable it. How can I do that? RIght now best I can do is completely delete it firewall-cmd --permanent --delete-zone=pickles firewall-cmd --reload which seems to be a bit harsh (good thing I documented my zone creation so I can just past the above commands and be done)

2 1

mariadb or mysql web gui
by Ranbir 21 Dec '20

21 Dec '20

Hello, Is there a web gui available in CentOS 8 for managing mariadb and/or mysql DB servers? I've used phpMyAdmin for many years, but I don't see an RPM for it in EPEL for CentOS 8. Is there a popular alternative to phpMyAdmin that's packaged for CentOS 8? -- Ranbir

3 2

Finding which repository files provide required libraries
by H 21 Dec '20

21 Dec '20

I came across the following Ubuntu script to identify which repository files provide libraries required by an app. Is there a rpm alternative to dpk-query that would allow this to run on CentOS/RH? ldd /bin/zoom | awk '/=>/{print $(NF-1)}' | while read n; do dpk-query -S $n; done | sed 's/^$[^:]\+$:.*$/\1/' | uniq

3 4

Centos Stream Docker image
by Steve Malenfant 19 Dec '20

19 Dec '20

I've been looking, but couldn't find it. Can somebody give me a pointer to where I can find a Centos Stream Docker image? Thanks, Steve

1 0

PXE configuration
by Erick Perez - Quadrian Enterprises 19 Dec '20

19 Dec '20

Hi guys, I have a Centos 7.9 TFTP/PXe server that I use to serve ISO installers. I can properly serve installers but not live CDs. But I want to add a live cd, I'm using this but is not working. Can someone suggest a fix? label 2 menu label ^2) Run Centos LiveCD 79 x64 kernel centos7_x64_livecd_genome/isolinux/vmlinuz0 append initrd=centos7_x64_livecd_genome/isolinux/initrd0.img rootfstype=auto ro rd.live.image method=http://192.168.1.83/centos7_live/LiveOS/squashfs.img devfs=nomount -- --------------------- Erick Perez Quadrian Enterprises S.A. - Panama, Republica de Panama Skype chat: eaperezh WhatsApp IM: +507-6675-5083 ---------------------

1 0

Questions about Stream
by Andrey 18 Dec '20

18 Dec '20

OK, we realized that the changes are final, and must somehow deal with it. Before making final decisions we need some answers. 1. What about bugs and security issues? The FAQ says: "Security issues will be updated in CentOS Stream after they are solved in the current RHEL release." Consider the scenario: a bug or security issue found in both Stream and current RHEL. It was fixed in RHEL in a few days. How fast it will be fixed in Stream? Obviously, it needs some time to port the fix to newer version of package. Days or months? Another scenario: a bug or security issue found in Stream but NOT in current RHEL. How fast it will be fixed in Stream? In a few days or in next RHEL release (up to 6 months)? 2. What to do in 2024, when Stream 8 is EOL. Perform full reinstall of all servers to Stream 9? Or there will be some kind of major version upgrade? A note about hardware: we don't know now what drivers will be dropped from RHEL and Stream 9. Bad news for server owners: in 2024 they may be forced to upgrade hardware or move to RHEL 8 because of its longer lifecycle.

5 8

YUM problem
by Gestió Servidors 18 Dec '20

18 Dec '20

Hi, I'm trying to find a YUM package. My system runs a CentOS-7.2.1511 (yes, it's a old version, but some software is "stable" with this CentOS version). Now, I'm looking for a package with YUM. When a run "yum provides */system-config-lvm", I get this error: [root@mysystem ~]# yum provides */system-config-lvm Complementos cargados:fastestmirror, langpacks, priorities Loading mirror speeds from cached hostfile * epel: mirror.uv.es * extras: ftp.csuc.cat<ftp://ftp.csuc.cat> * updates: ftp.csuc.cat<ftp://ftp.csuc.cat> Traceback (most recent call last): File "/usr/bin/yum", line 29, in <module> yummain.user_main(sys.argv[1:], exit_code=True) File "/usr/share/yum-cli/yummain.py", line 375, in user_main errcode = main(args) File "/usr/share/yum-cli/yummain.py", line 184, in main result, resultmsgs = base.doCommands() File "/usr/share/yum-cli/cli.py", line 584, in doCommands return self.yum_cli_commands[self.basecmd].doCommand(self, self.basecmd, self.extcmds) File "/usr/share/yum-cli/yumcommands.py", line 1557, in doCommand return base.provides(extcmds) File "/usr/share/yum-cli/cli.py", line 1619, in provides callback_has_matchfor=True) File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 3538, in searchPackageProvides tagdata = getattr(po, tag) File "/usr/lib/python2.7/site-packages/yum/packages.py", line 668, in <lambda> filelist = property(fget=lambda self: self.returnFileEntries(ftype='file')) File "/usr/lib/python2.7/site-packages/yum/packages.py", line 1504, in returnFileEntries self._loadFiles() File "/usr/lib/python2.7/site-packages/yum/packages.py", line 1478, in _loadFiles files = self.hdr['filenames'] _rpm.error: invalid header data I have run "yum clean metadata" and "yum clean all", but error message still appears. What can I do? Thanks.

2 1

CentOS 8.3 bugs
by d tbsky 17 Dec '20

17 Dec '20

Hi: just try to install CentOS 8.3. I use two sata disks and create mdadm raid1 with LVM. Normally when I want to reinstall this system, anaconda should recognize the raid1/lvm so I can reformat it. anaconda at CentOS 8.3 failed to do the job. I tried Scientific Linux 7.9 and RHEL 8.3, both can recognize installed CentOS 8.3 correctly and let me reformat it. and there is no net-snmp-perl package in CentOS 8.3 repository. although it is in RHEL 8.3. wait for next bug-to-bug distribution....

6 8

Re: [CentOS] I'm looking forward to the future of CentOS Stream
by Gordon Messmer 17 Dec '20

17 Dec '20

On 12/11/20 9:56 AM, Ljubomir Ljubojevic wrote: > And I will repeat that millions of CentOS users found free clone of RHEL > trustworthy enough to use it for production, even without "official > endorsement". Exactly. That's why it's so weird that those people, today, think that CentOS Stream won't be usable, based on their interpretation of the official statements from Red Hat. Red Hat's statements weren't taken into consideration before, but now they're a sign of doom? > If they ... even allowed ANYONE ELSE that was not employed by Red Hat in > 2014 to even come close to learning the secrets of rebuild, no backlash > would have happened I'm going to stop you there, because the CentOS maintainers kept that process out of public visibility long before Red Hat was ever involved. If you think users should know more about the process, then you are pointing fingers at the *wrong* people. I don't want this to become a flame war. So rather than pointing fingers, let's focus on the fact that CentOS Stream promises to be developed in the open, resolving the problem that you're describing. Red Hat is fixing the thing you're complaining about. Red Hat is giving us the thing that has been requested more often, by more people, than any other change in CentOS, and the result is that the press is full of stories about users being angry, because five people on the mailing lists sent a lot of messages. (About half of the traffic in the threads on centos and centos-devel comes from five people, and various people replying to them.) > But no, as soon as Oracle started rebuilding RHEL source code Red Hat > first made things difficult for everyone to create kernels (source code > was not srpms anymore but tar?) You're misinformed. Kernels are still built from SRPM, but the archive used is no longer an upstream release with a series of patches. The reason for the change is not insidious. It's unfortunate that the pristine source + patches can't be maintained, I agree, but speaking as a developer: maintaining hundreds of patches that touch intersecting files and rebasing them all when earlier patches are updated is an incredibly difficult and time consuming task. And, if I remember correctly, applying all of those patches took almost as long as building the kernel. If it takes that long to just prepare the source code, that's a major hit to productivity when a developer needs to work on the code or build the SRPM to validate changes. And, ultimately, there's very little value in shipping those patches when the vast majority of them are already in the current version of the upstream kernel, and they're merely backported to the older release that Red Hat supports. It's an entirely different story when distributions are shipping patches that they don't push upstream, but that's not generally what you see with the kernel package.

15 19

I'm looking forward to the future of CentOS Stream
by Gordon Messmer 17 Dec '20

17 Dec '20

Personally, I think that changing focus on CentOS Stream is going to make CentOS (and maybe even RHEL) better in the same way and for the same reasons that Fedora is a better distribution than Red Hat Linux was. CentOS Stream should fix the biggest problems that CentOS has had in the past, providing a reliable, free LTS distribution with community participation. Having read the announcement, along with hundreds of reactions in blogs, forums, and mailing lists, I am of the opinion that all (or a reasonable approximation thereof) of the vocal concern is the result of the overloaded term "stable" as it applies to software distributions. If we imagine a spectrum of individuals in which one end of the spectrum is individuals whose primary occupation is in release engineering for software distributions and the other end is individuals who primarily consume software distributions, I would expect that individuals on one end to mostly use the term "stable" in the sense of compatibility and semantic versioning, and the other end to use the same term in the sense of having fewer bugs. The use of that word causes people at one end of the spectrum to infer a completely different message than people at the other end intend to communicate. If we never use the ambiguous term "stable" and instead use the terms compatibility and reliability (the two common meanings of "stable" at different ends of the spectrum), I think that various aspects of CentOS Stream will be better than CentOS, or the same as CentOS. With respect to compatibility: I think most developers are familiar with semantic versioning. Semantic versioning is used by some applications and libraries to indicate the nature and extent of changes. The version is presented numerically as Major.Minor.Revision. When new interfaces are added, the minor number is increased. Those changes don’t affect backward compatibility. When individual interfaces are changed or removed, the major number is increased. Those changes aren’t backward compatible. That allows consumers to infer that if an application is compatible with 8.1, then it is also compatible with 8.2 and later, but might not be compatible with 9.0. Red Hat Enterprise Linux applies that concept to the entire software distribution, providing independent software vendors a convenient means of communicating their compatibility. If they’ve tested their application on RHEL 8.2, then any RHEL 8 host patched to at least that release is expected to run the application. Moreover, Red Hat will continue to publish security patches to each given minor release’s channel, allowing consumers to "pin" a host to a minor release. Those hosts will not receive feature updates, but will mitigate vulnerabilities. CentOS Stream isn’t going to feature minor releases, and isn’t going to provide semantic versioning of the distribution. The same application that the vendor has validated on RHEL 8.2 will run on a fully patched CentOS Stream 8 host, but might not run on a host that isn’t fully patched. On the surface, it appears that CentOS users will lose the convenience provided by semantic versioning. I would simply point out that the CentOS developers have never supported running CentOS in any state other than fully patched. They don’t publish security information in the package repositories, and they don’t support any means of pinning a host to a minor release. For practical purposes, CentOS Stream will need to be fully patched for compatibility purposes, just like CentOS is, and will be equally suited for production purposes. To put a really find point on that: Semantic versioning is only meaningful for hosts that are not fully patched. A fully patched host is expected to be compatible with any application validated for that major release. With respect to reliability: Many of the people concerned about the change in focus refer to CentOS Stream as a "beta" for RHEL. That is not how Red Hat or the CentOS maintainers describe CentOS Stream( anywhere that I've seen), and I think it ignores most of the development, testing, and distribution pipeline. At the risk of oversimplifying that pipeline a whole lot, in the future Free Software will pass through several stages on the way to RHEL: Stage 1: (Software Development) The majority of development and testing is done in individual upstream projects, outside of Red Hat. Stage 2: (Release Development, aka Rawhide) The initial work to build and integrate individual packages with the rest of the software distribution is done in what is essentially a development branch of the software distribution. Stage 3: (Stable[1], aka Fedora) Packages that have passed through review and QA are published for general use. There is no minor release, as major releases occur every 6 months and are supported for only 13 months, anyway. Compatibility is maintained by prohibiting significant version changes for applications and libraries "whenever possible." Users expect no new features during a release, but no breaking changes either. Stage 4: (Long Term Support, aka CentOS Stream) Packages that CentOS Stream includes from Fedora have proven reliable in a variety of workloads managed by many users of Fedora. These packages are expected to be very reliable as a result of testing by their developers, by package maintainers, and by real-world users. They are included in CentOS Stream when they are ready. Stage 5: (Long Term Support with Semantic Versioning of the OS, aka Red Hat Enterprise Linux) Packages that RHEL includes from CentOS Stream have a similar level of QA, but package updates that introduce new features and interfaces are accepted only once every six months when Red Hat publishes a minor release. There’s a lot of concern that CentOS Stream will offer less reliability than RHEL, but there’s currently no reason to believe that will be true. There is no evidence that the minor releases that are part of the RHEL lifecycle improve reliability, and as far as I know that's not the reason they're used. Their function is to offer semantic versioning of the OS. CentOS Stream will probably offer the same level of compatibility and reliability that CentOS does today, and should be equally appropriate or inappropriate for production use in the future as CentOS is now in that respect. And that brings me to the one aspect where I think CentOS Stream will resolve the one major, glaring problem that CentOS has today, that most users ignore: Security. With respect to security: Today, CentOS is a release stage after Stage 5 described above. The CentOS maintainers begin work on a minor release after that release is available to RHEL consumers, and the process of rebuilding those packages is often very time consuming. CentOS maintainers have to reverse-engineer the exact order in which packages are built, with the exact set of installed and available packages in the build environment in order to ensure that the resulting package actually uses the same interfaces that RHEL’s packages do. All packages require that ordering and build environment matching, but most packages are published in small sets and ordering is much easier to identify than it is when they are published in a large batch. As a result, security updates can’t be published for CentOS while the maintainers are rebuilding the minor release, because the build dependencies aren’t available yet. Those windows occur every six months, and are typically a month or more in length. [2] Today, CentOS users accept the risk that for roughly two months out of the year, their systems may have known vulnerabilities with no patch to remediate the problem. Personally, I think that’s a huge risk that needs to be weighed against the costs of RHEL licenses whenever CentOS is used in production. The good news is that CentOS Stream looks like it won't have that problem. CentOS Stream updates still won’t be prepared early, while vulnerability details are embargoed, but there aren’t any windows in which CentOS Stream can’t immediately begin work on preparing updates once the embargo ends. That means that CentOS Stream will be as secure as CentOS is today in between minor updates, and significantly more secure than CentOS is today while its maintainers prepare minor releases. The trade-off of significantly improving security in exchange for giving up semantic versioning of the OS is a huge improvement for production purposes. In addition, the announcement of the change in focus indicates that Fedora maintainers should have much better visibility into work going on within the RHEL release engineering process, and more opportunity to participate in that work, and I look forward to that. CentOS’s big security problem has always been compounded by the lack of any external visibility into the process. Based on the information available today, I expect CentOS to be a very reliable, reasonably secure distribution of GNU/Linux with Long Term Support. And judging by Red Hat’s mention that Facebook’s internal groups either are already using an internally curated OS built from CentOS Stream, or will be using it soon, I think I’m not alone in believing that. 1: I’m using the term "stable" here because I expect it to have both common meanings: compatibility isn’t broken within a release, and the software is expected to be reliable. 2: https://en.wikipedia.org/wiki/CentOS#CentOS_version_8

15 20

Re: [CentOS] MTU report question
by Strahil Nikolov 17 Dec '20

17 Dec '20

seems so

1 0

Is Oracle a real alternative to Centos?
by Frank Cox 17 Dec '20

17 Dec '20

Is Oracle a real alternative to Centos? I'm asking because genuinely don't know; I've never paid any attention to Oracle's Linux offering before now. But today I've seen a couple of the folks here mention Oracle Linux and I see that Oracle even offers a script to convert Centos 7 to Oracle. Nothing about Centos 8 in that script, though. https://linux.oracle.com/switch/centos/ That page seems to say that Oracle Linux is everything that Centos was prior to today's announcement. But someone else here just said that the first thing Oracle Linux does is to sign you up for an Oracle account. So, for people who know a lot more about these things than I do, what's the downside of using Oracle Linux versus Centos? I assume that things like epel/rpmfusion/etc will work just as they do under Centos since it's supposed to be bit-for-bit compatible like Centos was. What does the "sign up with Oracle" stuff actually do, and can you cancel, avoid, or strip it out if you don't want it? Based on my extremely limited knowledge around Oracle Linux, it sounds like that might be a go-to solution for Centos refugees. But is it, really? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

15 31

https://blog.centos.org/2020/12/future-is-centos-stream/
by Rich Bowen 16 Dec '20

16 Dec '20

The future of the CentOS Project is CentOS Stream, and over the next year we’ll be shifting focus from CentOS Linux, the rebuild of Red Hat Enterprise Linux (RHEL), to CentOS Stream, which tracks just ahead of a current RHEL release. CentOS Linux 8, as a rebuild of RHEL 8, will end at the end of 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux. Meanwhile, we understand many of you are deeply invested in CentOS Linux 7, and we’ll continue to produce that version through the remainder of the RHEL 7 life cycle. https://access.redhat.com/support/policy/updates/errata/#Life_Cycle_Dates CentOS Stream will also be the centerpiece of a major shift in collaboration among the CentOS Special Interest Groups (SIGs). This ensures SIGs are developing and testing against what becomes the next version of RHEL. This also provides SIGs a clear single goal, rather than having to build and test for two releases. It gives the CentOS contributor community a great deal of influence in the future of RHEL. And it removes confusion around what “CentOS” means in the Linux distribution ecosystem. When CentOS Linux 8 (the rebuild of RHEL8) ends, your best option will be to migrate to CentOS Stream 8, which is a small delta from CentOS Linux 8, and has regular updates like traditional CentOS Linux releases. If you are using CentOS Linux 8 in a production environment, and are concerned that CentOS Stream will not meet your needs, we encourage you to contact Red Hat about options. We have an FAQ - https://centos.org/distro-faq/ - to help with your information and planning needs, as you figure out how this shift of project focus might affect you. [See also: Red Hat's perspective on this. https://www.redhat.com/en/blog/centos-stream-building-innovative-future-ent…]

60 157

CentOS advisories for 8 release
by Olivier Bonhomme 16 Dec '20

16 Dec '20

Hello dear CentOS community, I'm writing on this mailing list because I'm discovering CentOS 8 after several years of practice on CentOS 7. One of my main concern about a distribution is Bug Fixes and Security Fixes. For CentOS 7, all fixes where identified on CentOS-Announces lists with CESA, CEBA and CEEA which is a good thing in order to identify how a distribution can be broken, vulnerable. However, I didn't find any announcement for CentOS 8. I tried to investigate about any changes about announcement policies but I didn't find anything reliable. So I'm asking here what is exactly the status about announcements for CentOS 8 ? Is it a thing who totally disappeared replaced by Red Hat advisories or is it something different ? Or maybe it is just not planned yet ? Explanations would be very welcomed. Thanks for your answer Regards, Olivier Bonhomme

3 3

Software raid Oddity
by Paul R. Ganci 16 Dec '20

16 Dec '20

I have a CentOS 7.9 system with a software raid 6 root partition. Today something very strange occurred. At 6:45AM the system crashed. I rebooted and when the system came up I had multiple emails indicating that 3 out of 6 drives had failed on the root partition. Strangely I was able to boot into the system and everything was working correctly despite > cat /proc/mdstat also indicating 3 out of 6 drives had failed. Since the system was up and running despite the fact more than 2 drives had failed in the root raid array I decided to reboot the system. Actually I shut it down, waited for the drives to spin down and then restarted. This time when it came back the 3 missing drives were back in the array and a cat /proc/mdstat indicated all 6 drives were again in the raid 6 array. So a few questions: 1.) If 3 our of 6 drives of a raid 6 array supposedly fail, how does the array still function? 2.) Why would a shutdown/restart sequence supposedly fix the array? 3.) My gut suggests that the raid array was never degraded and that my system (i.e. cat /proc/mdstat) was lying to me. Any Opinions? Has anybody else ever seen such strange behavior? -- Paul (ganci(a)nurdog.com) Cell: (303)257-5208

3 2

What are the differences between CentOS Linux and CentOS Stream?
by Turritopsis Dohrnii Teo En Ming 16 Dec '20

16 Dec '20

Good day from Singapore, What are the differences between CentOS Linux and CentOS Stream? At the moment, I only know that CentOS 8 support will end on 31 December 2021 while Red Hat Inc will shift its focus to CentOS Stream. Is CentOS Stream going to be very similar to Fedora Linux, shipping with the latest Linux Kernel like 5.10.1? I am looking forward to hearing from you. Thank you. -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

11 27

What about the AltArch repositories? (+ some experiments with aarch64 on Raspberry Pi)
by Mathieu Baudier 16 Dec '20

16 Dec '20

Hello, given the recent change in direction of CentOS, what will become of the AltArch repositories? (like CentOS 7 aarch64 and the related kernel repositories) I have been experimenting (with some success) with running a regular CentOS 8 aarch64 (ARM 64 bits) on a Raspberry PI 4 (with 4GB RAM), using the aarch64 kernel-rpi2 provided by CentOS 7 AltArch [1]. (a few more technical details below) This is a very different question than what is currently hotly discussed on this list, with the end of the bug-for-bug clone of RHEL, as there were never expectations that such settings would be supported. But on the other hand, I liked to use CentOS for innovation in a given field (mostly Java related) as its stability allowed one to go deep into one direction with "other things being equal" (contrary to Fedora, which is always moving in all directions). I guess that all these "side projects" (and SIGs, etc.) will disappear as well, won't they? Cheers, Mathieu ## More details about running CentOS aarch64 on a Raspberry Pi 4 As for my experiments with running CentOS 8 on a Raspberry Pi 4, a bit more details, so that these efforts are not completely lost. Two approaches were working : - From a plain CentOS 7 AltArch aarch64 installation, perform a CentOS 8 aarch64 install in a chroot (with the --installroot option) + a clean kernel-pi2 install from the CentOS 7 kernel-pi2 repository. Then copy the chroot to an .img file, and use this image to initialise an SD card. - From a plain CentOS 7 AltArch aarch64 installation, perform an in-place upgrade to CentOS 8 (first install dnf from EPEL, then switch the repos, and it works) The second approach had better device support on the Raspberry Pi 4 (most importantly the wifi, which was not working with the first approach), but this was probably a matter of subtle kernel / modprobe configs that were beyond my skills. I thought that I would share all this at some point, and ask for help from the CentOS AltArch developers; but I guess it is irrelevant right now. Both approaches were working equally well on the Raspberry Pi 3 (but Fedora support is good for this version, while Raspberry Pi 4 is not supported, so I tend to use Fedora aarch64 on them). As for what is actually the point of doing all this, this is not for weekend hobby tinkering, and it is relevant for server-side applications. ARM 64 bits is becoming an important platform (hence the fact that RHEL is now supporting it, MacOS will soon completely move to it, etc.) especially if one is interested in climate-friendly low-power IT, also on the server-side. But finding hardware is not easy and the (cheap) Raspberry Pi have 64-bit capable processors, even though the default distrib (Raspbian, based on Debian) does not yet support 64 bits (but they are working on it [2]). After trying many distributions, a paradox was that CentOS was actually the easiest to deploy and use in order to get some results (thanks to the work of the AltArch team!) In my case, the main interest was to test on ARM 64 bits GraalVM, the next generation Java platform, which can compile Java (and other programming languages) to native code. These builds require a lot of memory, but with an extremely slimmed down CentOS 8 and the 4 GB memory of the Raspberry Pi 4, it worked! [3] On a different layer, I could also test Eclipse SWT (Java user interface library) on this architecture (but on the plain CentOS 7 aarch64 with GNOME), and provide some quick feedback to Eclipse developers on their recent support for the whole Eclipse IDE on ARM 64 bits. [4] [1] http://mirror.centos.org/altarch/7/kernel/aarch64/kernel-rpi2 [2] https://downloads.raspberrypi.org/raspios_arm64/images/ [3] https://twitter.com/mbaudier/status/1274263320254722050 [4] https://twitter.com/mbaudier/status/1291421892381937670

3 6

Blog article: CentOS is NOT dead
by Nicolas Kovacs 16 Dec '20

16 Dec '20

Hi, Here's an interesting read which makes a point for CentOS Stream: https://freedomben.medium.com/centos-is-not-dead-please-stop-saying-it-is-a… tl;dr: Communication about Stream was BAD, but Stream itself might be a good thing. Here's why. Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

17 23

Status of DLM in CentOS?
by Michael Schwartzkopff 16 Dec '20

16 Dec '20

Hi, I was searching for DLM for my Centos 8. But it seems there are no packages available. I already enabled the HA repo. But no success. Now I changed to centos stream, but still no package available. How is centos going to ensure correct locking in a shared storage environment? Any help appreciated. Mit freundlichen Grüßen, -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief Aufsichtsratsvorsitzender: Florian Kirstein

2 1

On-demand audio streaming software
by Nicolas Kovacs 16 Dec '20

16 Dec '20

Hi, Since 2006 I had a streaming audio server based on Icecast and MPD running on CentOS. It works like a little webradio, e.g. listeners connect to a live stream with VLC, Audacious or any other client capable of this. I wonder if there's some software that can stream on-demand audio like music playlists or podcasts. What I'd like to do is host a series of playlists (like "Radio Show of the week") or podcasts, and then someone who wants to listen to it clicks on it and can listen to it from start to end. Any suggestions? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 1

DLM in CentOS?
by Michael Schwartzkopff 16 Dec '20

16 Dec '20

Hi, about one week ago I asked about the status of the distributed lock manager DLM in CentoOS. I could could not find it in any repositories. I also got no answer on my mail to this list. So any answer to my question? Mit freundlichen Grüßen, -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief Aufsichtsratsvorsitzender: Florian Kirstein

1 0

Fix for CVE-2020-1971 on CentOS 6.10
by Simon Matter 16 Dec '20

16 Dec '20

Hi, While many of us were busy lately with upgrading CentOS 6 systems to CentOS 8, a lot of systems may still be running CentOS 6 and migrations came to a halt this week with the announcement of RedHats new direction for the CentOS project. Since security updates for CentOS 6 are not provided anymore, I've decided to try my best to address CVE-2020-1971 and I welcome others to do the same for this and other new issues which may come up. Attached patches: openssl.spec.patch.gz openssl-1.0.1e-cve-2020-1971.patch.gz Please let me know if you find any issues. Regards, Simon

3 4

The conclusio: CentOS is dead
by Walter H. 15 Dec '20

15 Dec '20

Why? it is called "rolling release" and no one gave officially a statement to the question I asked, if it is meant like that of Win10 ... a beta release is not the same that many expect as a stable system, as they are used to have with CentOS; you should think of renaming CentOS to something different, because with Enterprise this CentOS Stream has nothing in common; and does Redhat really expect everone - even private people - afford a RHEL subscription¹ just to have a stable system? ¹ I would in case I only need just one RHEL subscription for ALL my private used VMs (including the ones hosted in internet as VPS) - a DNS server - a proxy server (squid) - a mail server (mail store - cyrus-imapd) - a mail server (mail router f. outgoing mails) - a mail server (mail scanner f. incoming mails with SpamAssassin and ClamAV) - a 2nd proxy server (squid, with SSL interception and Squidclamav plus ClamAV) - a web server (apache) - a jump host - a 6in4 router - desktop with graphical UI (plus Firefox and Thunderbird) is a now a SL, but they decided several time ago, not to do their own system based on RHEL, they use CentOS, that is now a little bit bad for this/SL's use case; - a VPS with OpenVPN (used with my smartphone) - a VPS with a proxy (squid, to avoid censorship due to geolocation blocking) - a VPS as the other end of 6in4 - a VPS with storage of my own files (all VPS run a bind, too) Thanks for read; Walter

13 15

Oracle Linux - oracle-epel vs epel - dnf priority
by Frank Cox 14 Dec '20

14 Dec '20

I'd like to run this by you guys and get your opinion. For those of us who are considering moving to Oracle Linux (or at least doing some experimenting with it), I just had an idea for dealing with the fact that the oracle-el-epel apparently doesn't have all of the packages that are in the fedora-el-epel that we all know and love. It makes sense to me to use the oracle epel with OL to the greatest extent possible simply because it's part of OL. To get around the missing package issue, what about setting up both oracle-epel and fedora-epel, and then using the dnf priorities to pick the stuff from oracle-epel first and if it's not there then grab it from fedora-epel. One issue that I can see (though it may not be an actual issue) is the way the priorities setting works: QUOTE: priority integer The priority value of this repository, default is 99. If there is more than one candidate package for a particular operation, the one from a repo with the lowest priority value is picked, possibly despite being less convenient otherwise (e.g. by being a lower version). END OF QUOTE By setting fedora-epel to a lower priority, the if a package we want is only in fedora-epel, we'll grab it from there. But if that package has a dependency on another package version X that can be found in fedora-epel and for some reason oracle-epel supplies only package version X-1, what happens then? Is dnf smart enough to pick the higher-versioned (and required) package from fedora-epel even though it has a lower priority. I'll try to explain that again. I want to install Foo, which is only in fedora-epel. Foo requires Bar version 2.0. Bar 2.0 exists in fedora-epel, but oracle-epel has only Bar version 1.0. What happens then? Does dnf see that Foo requires Bar-2.0 and get it from fedora-epel even though it has a lower priority? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

3 4

Announcing Open-sourced & Community-Driven RHEL Fork by CloudLinux
by Ljubomir Ljubojevic 13 Dec '20

13 Dec '20

Someone is smarter then Red Hat/IBM, "Carpe Diem": Announcing Open-sourced & Community-Driven RHEL Fork by CloudLinux (https://blog.cloudlinux.com/announcing-open-sourced-community-driven-rhel-f…) CentOS is a fork of Red Hat Enterprise Linux (RHEL) and undoubtedly a popular choice to deploy on production servers because of its rock-solid stability and compatibility. But, now with CentOS Stream, Red Hat just killed CentOS as we know it. And as expected, people started to fork Red Hat to give a viable community-based alternative to RHEL. As we already maintain CloudLinux OS, we plan to release a free, open-sourced, community-driven, 1:1 binary compatible fork of RHEL® 8 (and future releases) in the Q1 of 2021. We will create a separate, totally free OS that is fully binary compatible with RHEL® 8 (and future versions). We will sponsor the development & maintenance of such OS. We will work on establishing a community around the OS, with the governing board from members of the community. Why We Are Doing It We have all the infrastructure, software and experience to do that already. We have a large staff of developers and maintainers that have a decade of experience in building an RHEL fork, starting from RHEL5 to RHEL8. We expect that this project will put us on the map, and allow people to discover our rebootless update software and Extended Lifecycle Support offering. What Will We Do To Make Sure That It Doesn't Go Wrong We plan to make all the build and test software free, open-sourced, easy to set up, so if we ever go in the wrong direction - the community can just pick up where we left off. What It Means For You If you are running CloudLinux OS 8 - it will continue to have stable and well-tested updates until 2029, and ELS releases for years after that. If you are running CentOS 8 - we will release an OS very similar to CentOS 8 based on RHEL 8 stable. We will provide stable and well-tested updates until 2029 - completely free. You will be able to convert from CentOS 8 at any moment by running a single command that switches repositories & keys. Timeline Q1 2021 -- Ljubomir Ljubojevic (Love is in the Air) PL Computers Serbia, Europe StarOS, Mikrotik and CentOS/RHEL/Linux consultant

12 20

Oracle Linux 8 - short experiment with install and basic setup of Mate Desktop
by Frank Cox 13 Dec '20

13 Dec '20

So after reading other folks' opinions of an Oracle Linux 8 (thanks again, Nicolas!) trial installation, I decided to crank up a Virtual Box session and try an install myself. As others have stated, what you get when you install OL8 is identical in every way to what you see when installing Centos 8; literally the only difference is the logo and the default desktop background. There are no demands for registration or anything else when you install OL8. It's exactly the same experience as installing Centos 8. Since I use Mate on my computers (installed from https://copr.fedorainfracloud.org/coprs/stenstorp/MATE/ ) I immediately decided to see if I can get that going. I ran into two small issues, both easily dealt with. First, the PowerTools repo doesn't seem to exist under that name on OL8. It's called ol8_codeready_builder, for some reason. "dnf-config-manager --set-enabled ol8_codeready_builder" works fine and gets us where we need to be. A slightly more serious issue is that the oracle-epel, found through the rpm named oracle-epel-release-el8, appears to be less complete that the original Fedora epel found at https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm. Mate requires ImageMagick as a dependency for caja-image-converter and if you have oracle-epel installed it can't find ImageMagick. The solution (at least the solution that I used, which worked) is just to delete the oracle-epel-release-el8 rpm and install epel-release-latest-8 rpm instead. Then the Mate desktop can be installed on OL8 from the copr rpms listed above. Ultimately, the take-away here seems to be that if you decide to use OL8 instead of Centos 8 you'll be better advised to stick with "real" epel and not the oracle epel since there appears to be at least some stuff missing on the oracle epel. After I jumped through those minor hoops, what I ended up with was an Oracle Linux 8 installation with a Mate desktop and literally everything looks and works identical to what I already have with Centos 8. (An issue that I haven't seen anyone address yet is this. It's my understanding that epel builds their stuff on the current RHEL. Therefore the upcoming Centos Stream might get out-of-sync with whatever epel is building on at any given point in time.) -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

4 3

Re: [CentOS] CentOS Digest, Vol 191, Issue 12
by DBC-MMILLER 12 Dec '20

12 Dec '20

Sent from my iPhone > On Dec 12, 2020, at 07:00, centos-request(a)centos.org wrote: > > Message: 51 > Date: Fri, 11 Dec 2020 13:15:43 -0800 > From: Lists <lists(a)benjamindsmith.com> > To: CentOS mailing list <centos(a)centos.org> > Subject: [CentOS] Baffled by firewall rules with a Qemu VM, CentOS 7 > Message-ID: <2155552.iZASKD2KPV(a)tesla.effortlessis.com> > Content-Type: text/plain; charset="us-ascii" > > I've understood iptables well enough for a long, long time, and although I > think firewall-cmd is a poor replacement for iptables, I've always been able to > "get it to work" by comparing output with iptables -L or iptables -S and using > a direct-rule or two. > > And this time, I'm just baffled. > > I have a qemu VM running on a host. Postgresql runs on the host, and I'm > trying to connect to the Postgresql server on the host from the VM. > > VM: loco > Host: tesla > > 1) If I turn OFF the firewall on tesla, I have no trouble connecting from loco. > tesla: systemctl stop firewalld > loco: psql -U postgres -h 192.168.122.1 # yay! connection! > > 2) If I turn ON the firewall on tesla, I can't connect NO MATTER WHAT I DO > tesla: systemctl start firewalld; > loco: psql -U postgres -h 192.168.122.1 # Connection refused > > > I have tried: > tesla# firewall-cmd --zone=public --add-port=5432/tcp > tesla# firewall-cmd --add-service=postgresql > tesla# firewall-cmd --set-default-zone=trusted; > tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWI 0 -j ACCEPT > tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWO 0 -j ACCEPT > tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWX 0 -j ACCEPT > > ... and many more things. Literally stumped for a few hours. The output of > iptables indicates that I've wildcarded everything: > > tesla# iptables -S > -P INPUT ACCEPT > -P FORWARD ACCEPT > -P OUTPUT ACCEPT > -N LIBVIRT_FWI > -N LIBVIRT_FWO > -N LIBVIRT_FWX > -N LIBVIRT_INP > -N LIBVIRT_OUT > -A INPUT -j LIBVIRT_INP > -A FORWARD -j LIBVIRT_FWX > -A FORWARD -j LIBVIRT_FWI > -A FORWARD -j LIBVIRT_FWO > -A OUTPUT -j LIBVIRT_OUT > -A LIBVIRT_FWI -d 192.168.122.0/24 -j ACCEPT > -A LIBVIRT_FWI -i virbr0 -j ACCEPT > -A LIBVIRT_FWI -j ACCEPT > -A LIBVIRT_FWI -d 192.168.122.0/24 -o virbr0 -m conntrack --ctstate > RELATED,ESTABLISHED -j ACCEPT > -A LIBVIRT_FWI -o virbr0 -j REJECT --reject-with icmp-port-unreachable > -A LIBVIRT_FWO -i virbr0 -j ACCEPT > -A LIBVIRT_FWO -j ACCEPT > -A LIBVIRT_FWO -s 192.168.122.0/24 -i virbr0 -j ACCEPT > -A LIBVIRT_FWO -i virbr0 -j REJECT --reject-with icmp-port-unreachable > -A LIBVIRT_FWX -j ACCEPT > -A LIBVIRT_FWX -i virbr0 -o virbr0 -j ACCEPT > -A LIBVIRT_INP -j ACCEPT > -A LIBVIRT_INP -i virbr0 -p udp -m udp --dport 53 -j ACCEPT > -A LIBVIRT_INP -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT > -A LIBVIRT_INP -i virbr0 -p udp -m udp --dport 67 -j ACCEPT > -A LIBVIRT_INP -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT > -A LIBVIRT_OUT -j ACCEPT > -A LIBVIRT_OUT -o virbr0 -p udp -m udp --dport 53 -j ACCEPT > -A LIBVIRT_OUT -o virbr0 -p tcp -m tcp --dport 53 -j ACCEPT > -A LIBVIRT_OUT -o virbr0 -p udp -m udp --dport 68 -j ACCEPT > -A LIBVIRT_OUT -o virbr0 -p tcp -m tcp --dport 68 -j ACCEPT > > There are no REJECT rules not preceded by a wildcard ACCEPT, but I can't > connect with this config. But simply stopping host (tesla) firewalld allows me > to connect just fine. > > Any ideas? >

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss