- Discuss - lists.centos.org

CentOS advisories for 8 release
by Olivier Bonhomme 16 Dec '20

16 Dec '20

Hello dear CentOS community, I'm writing on this mailing list because I'm discovering CentOS 8 after several years of practice on CentOS 7. One of my main concern about a distribution is Bug Fixes and Security Fixes. For CentOS 7, all fixes where identified on CentOS-Announces lists with CESA, CEBA and CEEA which is a good thing in order to identify how a distribution can be broken, vulnerable. However, I didn't find any announcement for CentOS 8. I tried to investigate about any changes about announcement policies but I didn't find anything reliable. So I'm asking here what is exactly the status about announcements for CentOS 8 ? Is it a thing who totally disappeared replaced by Red Hat advisories or is it something different ? Or maybe it is just not planned yet ? Explanations would be very welcomed. Thanks for your answer Regards, Olivier Bonhomme

3 3

Software raid Oddity
by Paul R. Ganci 16 Dec '20

16 Dec '20

I have a CentOS 7.9 system with a software raid 6 root partition. Today something very strange occurred. At 6:45AM the system crashed. I rebooted and when the system came up I had multiple emails indicating that 3 out of 6 drives had failed on the root partition. Strangely I was able to boot into the system and everything was working correctly despite > cat /proc/mdstat also indicating 3 out of 6 drives had failed. Since the system was up and running despite the fact more than 2 drives had failed in the root raid array I decided to reboot the system. Actually I shut it down, waited for the drives to spin down and then restarted. This time when it came back the 3 missing drives were back in the array and a cat /proc/mdstat indicated all 6 drives were again in the raid 6 array. So a few questions: 1.) If 3 our of 6 drives of a raid 6 array supposedly fail, how does the array still function? 2.) Why would a shutdown/restart sequence supposedly fix the array? 3.) My gut suggests that the raid array was never degraded and that my system (i.e. cat /proc/mdstat) was lying to me. Any Opinions? Has anybody else ever seen such strange behavior? -- Paul (ganci(a)nurdog.com) Cell: (303)257-5208

3 2

What are the differences between CentOS Linux and CentOS Stream?
by Turritopsis Dohrnii Teo En Ming 16 Dec '20

16 Dec '20

Good day from Singapore, What are the differences between CentOS Linux and CentOS Stream? At the moment, I only know that CentOS 8 support will end on 31 December 2021 while Red Hat Inc will shift its focus to CentOS Stream. Is CentOS Stream going to be very similar to Fedora Linux, shipping with the latest Linux Kernel like 5.10.1? I am looking forward to hearing from you. Thank you. -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

11 27

What about the AltArch repositories? (+ some experiments with aarch64 on Raspberry Pi)
by Mathieu Baudier 16 Dec '20

16 Dec '20

Hello, given the recent change in direction of CentOS, what will become of the AltArch repositories? (like CentOS 7 aarch64 and the related kernel repositories) I have been experimenting (with some success) with running a regular CentOS 8 aarch64 (ARM 64 bits) on a Raspberry PI 4 (with 4GB RAM), using the aarch64 kernel-rpi2 provided by CentOS 7 AltArch [1]. (a few more technical details below) This is a very different question than what is currently hotly discussed on this list, with the end of the bug-for-bug clone of RHEL, as there were never expectations that such settings would be supported. But on the other hand, I liked to use CentOS for innovation in a given field (mostly Java related) as its stability allowed one to go deep into one direction with "other things being equal" (contrary to Fedora, which is always moving in all directions). I guess that all these "side projects" (and SIGs, etc.) will disappear as well, won't they? Cheers, Mathieu ## More details about running CentOS aarch64 on a Raspberry Pi 4 As for my experiments with running CentOS 8 on a Raspberry Pi 4, a bit more details, so that these efforts are not completely lost. Two approaches were working : - From a plain CentOS 7 AltArch aarch64 installation, perform a CentOS 8 aarch64 install in a chroot (with the --installroot option) + a clean kernel-pi2 install from the CentOS 7 kernel-pi2 repository. Then copy the chroot to an .img file, and use this image to initialise an SD card. - From a plain CentOS 7 AltArch aarch64 installation, perform an in-place upgrade to CentOS 8 (first install dnf from EPEL, then switch the repos, and it works) The second approach had better device support on the Raspberry Pi 4 (most importantly the wifi, which was not working with the first approach), but this was probably a matter of subtle kernel / modprobe configs that were beyond my skills. I thought that I would share all this at some point, and ask for help from the CentOS AltArch developers; but I guess it is irrelevant right now. Both approaches were working equally well on the Raspberry Pi 3 (but Fedora support is good for this version, while Raspberry Pi 4 is not supported, so I tend to use Fedora aarch64 on them). As for what is actually the point of doing all this, this is not for weekend hobby tinkering, and it is relevant for server-side applications. ARM 64 bits is becoming an important platform (hence the fact that RHEL is now supporting it, MacOS will soon completely move to it, etc.) especially if one is interested in climate-friendly low-power IT, also on the server-side. But finding hardware is not easy and the (cheap) Raspberry Pi have 64-bit capable processors, even though the default distrib (Raspbian, based on Debian) does not yet support 64 bits (but they are working on it [2]). After trying many distributions, a paradox was that CentOS was actually the easiest to deploy and use in order to get some results (thanks to the work of the AltArch team!) In my case, the main interest was to test on ARM 64 bits GraalVM, the next generation Java platform, which can compile Java (and other programming languages) to native code. These builds require a lot of memory, but with an extremely slimmed down CentOS 8 and the 4 GB memory of the Raspberry Pi 4, it worked! [3] On a different layer, I could also test Eclipse SWT (Java user interface library) on this architecture (but on the plain CentOS 7 aarch64 with GNOME), and provide some quick feedback to Eclipse developers on their recent support for the whole Eclipse IDE on ARM 64 bits. [4] [1] http://mirror.centos.org/altarch/7/kernel/aarch64/kernel-rpi2 [2] https://downloads.raspberrypi.org/raspios_arm64/images/ [3] https://twitter.com/mbaudier/status/1274263320254722050 [4] https://twitter.com/mbaudier/status/1291421892381937670

3 6

Blog article: CentOS is NOT dead
by Nicolas Kovacs 16 Dec '20

16 Dec '20

Hi, Here's an interesting read which makes a point for CentOS Stream: https://freedomben.medium.com/centos-is-not-dead-please-stop-saying-it-is-a… tl;dr: Communication about Stream was BAD, but Stream itself might be a good thing. Here's why. Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

17 23

Status of DLM in CentOS?
by Michael Schwartzkopff 16 Dec '20

16 Dec '20

Hi, I was searching for DLM for my Centos 8. But it seems there are no packages available. I already enabled the HA repo. But no success. Now I changed to centos stream, but still no package available. How is centos going to ensure correct locking in a shared storage environment? Any help appreciated. Mit freundlichen Grüßen, -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief Aufsichtsratsvorsitzender: Florian Kirstein

2 1

On-demand audio streaming software
by Nicolas Kovacs 16 Dec '20

16 Dec '20

Hi, Since 2006 I had a streaming audio server based on Icecast and MPD running on CentOS. It works like a little webradio, e.g. listeners connect to a live stream with VLC, Audacious or any other client capable of this. I wonder if there's some software that can stream on-demand audio like music playlists or podcasts. What I'd like to do is host a series of playlists (like "Radio Show of the week") or podcasts, and then someone who wants to listen to it clicks on it and can listen to it from start to end. Any suggestions? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 1

DLM in CentOS?
by Michael Schwartzkopff 16 Dec '20

16 Dec '20

Hi, about one week ago I asked about the status of the distributed lock manager DLM in CentoOS. I could could not find it in any repositories. I also got no answer on my mail to this list. So any answer to my question? Mit freundlichen Grüßen, -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief Aufsichtsratsvorsitzender: Florian Kirstein

1 0

Fix for CVE-2020-1971 on CentOS 6.10
by Simon Matter 16 Dec '20

16 Dec '20

Hi, While many of us were busy lately with upgrading CentOS 6 systems to CentOS 8, a lot of systems may still be running CentOS 6 and migrations came to a halt this week with the announcement of RedHats new direction for the CentOS project. Since security updates for CentOS 6 are not provided anymore, I've decided to try my best to address CVE-2020-1971 and I welcome others to do the same for this and other new issues which may come up. Attached patches: openssl.spec.patch.gz openssl-1.0.1e-cve-2020-1971.patch.gz Please let me know if you find any issues. Regards, Simon

3 4

The conclusio: CentOS is dead
by Walter H. 15 Dec '20

15 Dec '20

Why? it is called "rolling release" and no one gave officially a statement to the question I asked, if it is meant like that of Win10 ... a beta release is not the same that many expect as a stable system, as they are used to have with CentOS; you should think of renaming CentOS to something different, because with Enterprise this CentOS Stream has nothing in common; and does Redhat really expect everone - even private people - afford a RHEL subscription¹ just to have a stable system? ¹ I would in case I only need just one RHEL subscription for ALL my private used VMs (including the ones hosted in internet as VPS) - a DNS server - a proxy server (squid) - a mail server (mail store - cyrus-imapd) - a mail server (mail router f. outgoing mails) - a mail server (mail scanner f. incoming mails with SpamAssassin and ClamAV) - a 2nd proxy server (squid, with SSL interception and Squidclamav plus ClamAV) - a web server (apache) - a jump host - a 6in4 router - desktop with graphical UI (plus Firefox and Thunderbird) is a now a SL, but they decided several time ago, not to do their own system based on RHEL, they use CentOS, that is now a little bit bad for this/SL's use case; - a VPS with OpenVPN (used with my smartphone) - a VPS with a proxy (squid, to avoid censorship due to geolocation blocking) - a VPS as the other end of 6in4 - a VPS with storage of my own files (all VPS run a bind, too) Thanks for read; Walter

13 15

Oracle Linux - oracle-epel vs epel - dnf priority
by Frank Cox 14 Dec '20

14 Dec '20

I'd like to run this by you guys and get your opinion. For those of us who are considering moving to Oracle Linux (or at least doing some experimenting with it), I just had an idea for dealing with the fact that the oracle-el-epel apparently doesn't have all of the packages that are in the fedora-el-epel that we all know and love. It makes sense to me to use the oracle epel with OL to the greatest extent possible simply because it's part of OL. To get around the missing package issue, what about setting up both oracle-epel and fedora-epel, and then using the dnf priorities to pick the stuff from oracle-epel first and if it's not there then grab it from fedora-epel. One issue that I can see (though it may not be an actual issue) is the way the priorities setting works: QUOTE: priority integer The priority value of this repository, default is 99. If there is more than one candidate package for a particular operation, the one from a repo with the lowest priority value is picked, possibly despite being less convenient otherwise (e.g. by being a lower version). END OF QUOTE By setting fedora-epel to a lower priority, the if a package we want is only in fedora-epel, we'll grab it from there. But if that package has a dependency on another package version X that can be found in fedora-epel and for some reason oracle-epel supplies only package version X-1, what happens then? Is dnf smart enough to pick the higher-versioned (and required) package from fedora-epel even though it has a lower priority. I'll try to explain that again. I want to install Foo, which is only in fedora-epel. Foo requires Bar version 2.0. Bar 2.0 exists in fedora-epel, but oracle-epel has only Bar version 1.0. What happens then? Does dnf see that Foo requires Bar-2.0 and get it from fedora-epel even though it has a lower priority? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

3 4

Announcing Open-sourced & Community-Driven RHEL Fork by CloudLinux
by Ljubomir Ljubojevic 13 Dec '20

13 Dec '20

Someone is smarter then Red Hat/IBM, "Carpe Diem": Announcing Open-sourced & Community-Driven RHEL Fork by CloudLinux (https://blog.cloudlinux.com/announcing-open-sourced-community-driven-rhel-f…) CentOS is a fork of Red Hat Enterprise Linux (RHEL) and undoubtedly a popular choice to deploy on production servers because of its rock-solid stability and compatibility. But, now with CentOS Stream, Red Hat just killed CentOS as we know it. And as expected, people started to fork Red Hat to give a viable community-based alternative to RHEL. As we already maintain CloudLinux OS, we plan to release a free, open-sourced, community-driven, 1:1 binary compatible fork of RHEL® 8 (and future releases) in the Q1 of 2021. We will create a separate, totally free OS that is fully binary compatible with RHEL® 8 (and future versions). We will sponsor the development & maintenance of such OS. We will work on establishing a community around the OS, with the governing board from members of the community. Why We Are Doing It We have all the infrastructure, software and experience to do that already. We have a large staff of developers and maintainers that have a decade of experience in building an RHEL fork, starting from RHEL5 to RHEL8. We expect that this project will put us on the map, and allow people to discover our rebootless update software and Extended Lifecycle Support offering. What Will We Do To Make Sure That It Doesn't Go Wrong We plan to make all the build and test software free, open-sourced, easy to set up, so if we ever go in the wrong direction - the community can just pick up where we left off. What It Means For You If you are running CloudLinux OS 8 - it will continue to have stable and well-tested updates until 2029, and ELS releases for years after that. If you are running CentOS 8 - we will release an OS very similar to CentOS 8 based on RHEL 8 stable. We will provide stable and well-tested updates until 2029 - completely free. You will be able to convert from CentOS 8 at any moment by running a single command that switches repositories & keys. Timeline Q1 2021 -- Ljubomir Ljubojevic (Love is in the Air) PL Computers Serbia, Europe StarOS, Mikrotik and CentOS/RHEL/Linux consultant

12 20

Oracle Linux 8 - short experiment with install and basic setup of Mate Desktop
by Frank Cox 13 Dec '20

13 Dec '20

So after reading other folks' opinions of an Oracle Linux 8 (thanks again, Nicolas!) trial installation, I decided to crank up a Virtual Box session and try an install myself. As others have stated, what you get when you install OL8 is identical in every way to what you see when installing Centos 8; literally the only difference is the logo and the default desktop background. There are no demands for registration or anything else when you install OL8. It's exactly the same experience as installing Centos 8. Since I use Mate on my computers (installed from https://copr.fedorainfracloud.org/coprs/stenstorp/MATE/ ) I immediately decided to see if I can get that going. I ran into two small issues, both easily dealt with. First, the PowerTools repo doesn't seem to exist under that name on OL8. It's called ol8_codeready_builder, for some reason. "dnf-config-manager --set-enabled ol8_codeready_builder" works fine and gets us where we need to be. A slightly more serious issue is that the oracle-epel, found through the rpm named oracle-epel-release-el8, appears to be less complete that the original Fedora epel found at https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm. Mate requires ImageMagick as a dependency for caja-image-converter and if you have oracle-epel installed it can't find ImageMagick. The solution (at least the solution that I used, which worked) is just to delete the oracle-epel-release-el8 rpm and install epel-release-latest-8 rpm instead. Then the Mate desktop can be installed on OL8 from the copr rpms listed above. Ultimately, the take-away here seems to be that if you decide to use OL8 instead of Centos 8 you'll be better advised to stick with "real" epel and not the oracle epel since there appears to be at least some stuff missing on the oracle epel. After I jumped through those minor hoops, what I ended up with was an Oracle Linux 8 installation with a Mate desktop and literally everything looks and works identical to what I already have with Centos 8. (An issue that I haven't seen anyone address yet is this. It's my understanding that epel builds their stuff on the current RHEL. Therefore the upcoming Centos Stream might get out-of-sync with whatever epel is building on at any given point in time.) -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

4 3

Re: [CentOS] CentOS Digest, Vol 191, Issue 12
by DBC-MMILLER 12 Dec '20

12 Dec '20

Sent from my iPhone > On Dec 12, 2020, at 07:00, centos-request(a)centos.org wrote: > > Message: 51 > Date: Fri, 11 Dec 2020 13:15:43 -0800 > From: Lists <lists(a)benjamindsmith.com> > To: CentOS mailing list <centos(a)centos.org> > Subject: [CentOS] Baffled by firewall rules with a Qemu VM, CentOS 7 > Message-ID: <2155552.iZASKD2KPV(a)tesla.effortlessis.com> > Content-Type: text/plain; charset="us-ascii" > > I've understood iptables well enough for a long, long time, and although I > think firewall-cmd is a poor replacement for iptables, I've always been able to > "get it to work" by comparing output with iptables -L or iptables -S and using > a direct-rule or two. > > And this time, I'm just baffled. > > I have a qemu VM running on a host. Postgresql runs on the host, and I'm > trying to connect to the Postgresql server on the host from the VM. > > VM: loco > Host: tesla > > 1) If I turn OFF the firewall on tesla, I have no trouble connecting from loco. > tesla: systemctl stop firewalld > loco: psql -U postgres -h 192.168.122.1 # yay! connection! > > 2) If I turn ON the firewall on tesla, I can't connect NO MATTER WHAT I DO > tesla: systemctl start firewalld; > loco: psql -U postgres -h 192.168.122.1 # Connection refused > > > I have tried: > tesla# firewall-cmd --zone=public --add-port=5432/tcp > tesla# firewall-cmd --add-service=postgresql > tesla# firewall-cmd --set-default-zone=trusted; > tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWI 0 -j ACCEPT > tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWO 0 -j ACCEPT > tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWX 0 -j ACCEPT > > ... and many more things. Literally stumped for a few hours. The output of > iptables indicates that I've wildcarded everything: > > tesla# iptables -S > -P INPUT ACCEPT > -P FORWARD ACCEPT > -P OUTPUT ACCEPT > -N LIBVIRT_FWI > -N LIBVIRT_FWO > -N LIBVIRT_FWX > -N LIBVIRT_INP > -N LIBVIRT_OUT > -A INPUT -j LIBVIRT_INP > -A FORWARD -j LIBVIRT_FWX > -A FORWARD -j LIBVIRT_FWI > -A FORWARD -j LIBVIRT_FWO > -A OUTPUT -j LIBVIRT_OUT > -A LIBVIRT_FWI -d 192.168.122.0/24 -j ACCEPT > -A LIBVIRT_FWI -i virbr0 -j ACCEPT > -A LIBVIRT_FWI -j ACCEPT > -A LIBVIRT_FWI -d 192.168.122.0/24 -o virbr0 -m conntrack --ctstate > RELATED,ESTABLISHED -j ACCEPT > -A LIBVIRT_FWI -o virbr0 -j REJECT --reject-with icmp-port-unreachable > -A LIBVIRT_FWO -i virbr0 -j ACCEPT > -A LIBVIRT_FWO -j ACCEPT > -A LIBVIRT_FWO -s 192.168.122.0/24 -i virbr0 -j ACCEPT > -A LIBVIRT_FWO -i virbr0 -j REJECT --reject-with icmp-port-unreachable > -A LIBVIRT_FWX -j ACCEPT > -A LIBVIRT_FWX -i virbr0 -o virbr0 -j ACCEPT > -A LIBVIRT_INP -j ACCEPT > -A LIBVIRT_INP -i virbr0 -p udp -m udp --dport 53 -j ACCEPT > -A LIBVIRT_INP -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT > -A LIBVIRT_INP -i virbr0 -p udp -m udp --dport 67 -j ACCEPT > -A LIBVIRT_INP -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT > -A LIBVIRT_OUT -j ACCEPT > -A LIBVIRT_OUT -o virbr0 -p udp -m udp --dport 53 -j ACCEPT > -A LIBVIRT_OUT -o virbr0 -p tcp -m tcp --dport 53 -j ACCEPT > -A LIBVIRT_OUT -o virbr0 -p udp -m udp --dport 68 -j ACCEPT > -A LIBVIRT_OUT -o virbr0 -p tcp -m tcp --dport 68 -j ACCEPT > > There are no REJECT rules not preceded by a wildcard ACCEPT, but I can't > connect with this config. But simply stopping host (tesla) firewalld allows me > to connect just fine. > > Any ideas? >

1 0

Baffled by firewall rules with a Qemu VM, CentOS 7
by Lists 12 Dec '20

12 Dec '20

I've understood iptables well enough for a long, long time, and although I think firewall-cmd is a poor replacement for iptables, I've always been able to "get it to work" by comparing output with iptables -L or iptables -S and using a direct-rule or two. And this time, I'm just baffled. I have a qemu VM running on a host. Postgresql runs on the host, and I'm trying to connect to the Postgresql server on the host from the VM. VM: loco Host: tesla 1) If I turn OFF the firewall on tesla, I have no trouble connecting from loco. tesla: systemctl stop firewalld loco: psql -U postgres -h 192.168.122.1 # yay! connection! 2) If I turn ON the firewall on tesla, I can't connect NO MATTER WHAT I DO tesla: systemctl start firewalld; loco: psql -U postgres -h 192.168.122.1 # Connection refused I have tried: tesla# firewall-cmd --zone=public --add-port=5432/tcp tesla# firewall-cmd --add-service=postgresql tesla# firewall-cmd --set-default-zone=trusted; tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWI 0 -j ACCEPT tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWO 0 -j ACCEPT tesla# firewall-cmd --direct --add-rule ipv4 filter LIBVIRT_FWX 0 -j ACCEPT ... and many more things. Literally stumped for a few hours. The output of iptables indicates that I've wildcarded everything: tesla# iptables -S -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -N LIBVIRT_FWI -N LIBVIRT_FWO -N LIBVIRT_FWX -N LIBVIRT_INP -N LIBVIRT_OUT -A INPUT -j LIBVIRT_INP -A FORWARD -j LIBVIRT_FWX -A FORWARD -j LIBVIRT_FWI -A FORWARD -j LIBVIRT_FWO -A OUTPUT -j LIBVIRT_OUT -A LIBVIRT_FWI -d 192.168.122.0/24 -j ACCEPT -A LIBVIRT_FWI -i virbr0 -j ACCEPT -A LIBVIRT_FWI -j ACCEPT -A LIBVIRT_FWI -d 192.168.122.0/24 -o virbr0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A LIBVIRT_FWI -o virbr0 -j REJECT --reject-with icmp-port-unreachable -A LIBVIRT_FWO -i virbr0 -j ACCEPT -A LIBVIRT_FWO -j ACCEPT -A LIBVIRT_FWO -s 192.168.122.0/24 -i virbr0 -j ACCEPT -A LIBVIRT_FWO -i virbr0 -j REJECT --reject-with icmp-port-unreachable -A LIBVIRT_FWX -j ACCEPT -A LIBVIRT_FWX -i virbr0 -o virbr0 -j ACCEPT -A LIBVIRT_INP -j ACCEPT -A LIBVIRT_INP -i virbr0 -p udp -m udp --dport 53 -j ACCEPT -A LIBVIRT_INP -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT -A LIBVIRT_INP -i virbr0 -p udp -m udp --dport 67 -j ACCEPT -A LIBVIRT_INP -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT -A LIBVIRT_OUT -j ACCEPT -A LIBVIRT_OUT -o virbr0 -p udp -m udp --dport 53 -j ACCEPT -A LIBVIRT_OUT -o virbr0 -p tcp -m tcp --dport 53 -j ACCEPT -A LIBVIRT_OUT -o virbr0 -p udp -m udp --dport 68 -j ACCEPT -A LIBVIRT_OUT -o virbr0 -p tcp -m tcp --dport 68 -j ACCEPT There are no REJECT rules not preceded by a wildcard ACCEPT, but I can't connect with this config. But simply stopping host (tesla) firewalld allows me to connect just fine. Any ideas?

3 3

Debug information packages for 8.3 missing?
by Oliver Freyermuth 12 Dec '20

12 Dec '20

Dear all, after the upgrade from 8.2 to 8.3 one of the applications we use has unclear Kerberos authentication issues. I was going to diagnose these and tried: yum debuginfo-install krb5-libs However, I get: Could not find debuginfo package for the following installed packages: krb5-libs-1.18.2-5.el8.x86_64 Could not find debugsource package for the following installed packages: krb5-libs-1.18.2-5.el8.x86_64 Checking on http://debuginfo.centos.org/8/x86_64/Packages/ , I do indeed not find these packages, also glibc and other debug info packages are missing. Are they still being uploaded, or am I using a wrong repository? Thanks and cheers, Oliver

2 4

Question on nmcli CentOS 8
by Jerry Geis 11 Dec '20

11 Dec '20

I am trying to modify the current eth0 with nmcli I ran this: nmcli con mod eth0 ipv4.addr 192.168.1.15/22 gw4 192.168.1.1 ipv4.dns 192.168.1.14 and now nmcli shows (two ipv4) addresses. inet4 192.168.1.15/22 inet4 192.168.2.212/22 I think the original connection was DHCP... the 2.212 item listed. So I want to change the original DHCP to a static network - how do I do that? I only want the one address not two. So now I need to "remove" both or all and add the 1 I want as static ? how do I do that? Thanks, Jerry

3 2

Re: [CentOS] Moving to CentOS 8 Stream
by Kienker, Fred 11 Dec '20

11 Dec '20

"It takes years to build a reputation and seconds to destroy it." -- Business 101 class Best regards, Fred

6 6

8-stream dnf overly verbose
by Pete Biggs 11 Dec '20

11 Dec '20

In moving a test machine from 8.3 to 8-stream the main thing I've noticed is that dnf has become very verbose. It's as if someone has turned on the -v permanently. I've tried using '-q' (it says nothing then) and I've tried adjusting the debuglevel, but nothing seems to affect it. I get things like this: Downloading: http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=BaseOS&infr… Downloading: http://mirror.cov.ukservers.com/centos/8-stream/BaseOS/x86_64/os/repodata/r… 0 B --:-- ETA Downloading: http://mirror.cov.ukservers.com/centos/8-stream/BaseOS/x86_64/os/repodata/c… Downloading: http://mirror.cov.ukservers.com/centos/8-stream/BaseOS/x86_64/os/repodata/b… Downloading: http://mirror.cov.ukservers.com/centos/8-stream/BaseOS/x86_64/os/repodata/6… CentOS Stream 8 - BaseOS 13 MB/s | 2.3 M For every repo when there's nothing cached. It never used to do this. How can I turn off the "Downloading:" messages? P.

7 10

CentOS 8 Stream: The Good, The Bad, The Ugly
by Joshua Kramer 11 Dec '20

11 Dec '20

Hello All- After reading and digesting a ton of community chatter about the recent CentOS announcement I've come to the conclusion that there's a lot of good about this, but there are also a lot of concerns that are being ignored. And nobody so far has stared directly into the eyes of the elephant in the room. So here goes. The Good: From a technical perspective- both in the sense of "getting newer software" and "technical community being more involved in bugfixes, etc"- having *a version* of CentOS called "AppStream" is fantastic. The various RedHat and CentOS folks who have been extolling these virtues in blog posts and twitter feeds are right-on. But from responses I've seen, it appears to me that they think that these virtues are enough to completely gloss over the complete and utter clusterfrackas they've caused. The Bad: No point releases. There is POSITIVELY NO* REASON that they can't have AppSream and still do point releases. Brand new stuff would go into AppStream, at some point they do a point release of RHEL, then follow the normal CentOS procedure to spin a CentOS build of that point release. This is already a tried and true process. It will cost RedHat all of what, low five digits (if that) in developer salary to do this. Heck I'm sure some volunteers would step up to use the existing infrastructure if RedHat didn't want to spend any paid developer time on this. The Ugly: I denoted "NO* REASON" above because there actually *are* reasons that we are not privy to. https://twitter.com/JoshuaPKr/status/1336744681716244480 Since RedHat is not being transparent with this, we are forced to speculate and remain bewildered at why they would make a decision that is going to cost them so much in the long run. The most common (and most likely) theory is that some MBA somewhere in middle management saw all of this CentOS being used in production environments (and otherwise downloaded for free), and had the idea that if CentOS had its head cut off people would just buy RHEL subscriptions. That may happen in a few cases, but for the most part, that is NOT what is going to happen. By handling the CentOS situation in this way, RedHat has branded itself as a company that acts in bad faith. If a company acts in bad faith towards a community where non-monetary value is exchanged, WHY would you trust that company to hold up its obligations for contracts that are actually paid? People are going to do whatever they can to get away from RedHat. Debian, Ubuntu, SuSE will all benefit from this. Even in cases where non-profits and other similar clients "contact RedHat about options because Stream won't meet their needs"- why would such entities have ANY reason to trust anything that RedHat says to them? There have been hundreds of other messages that describe exactly what RedHat loses in this deal so I won't go into that here. But branding oneself as a "bad faith actor" is usually a terrible way to try to pick up a little bit of subscription revenue. In the end it's going to be a losing scenario. This is an absolutely UNMITIGATED DISASTER from a marketing and community goodwill standpoint. It can, however, be mitigated if RedHat backtracks, admits their mistake, and affirmatively commits to support future CentOS point releases. I'll be interested to see how this turns out. --JK

12 14

Have lost access to ZFS pools with latest CentOS 8 kernels
by Robert G. (Doc) Savage 11 Dec '20

11 Dec '20

With the release of the vmlinuz-4.18.0-240.x and vmlinuz- 4.18.0.193.19.x kernels, ZoL cannot connect with a ZFS pool. I'm not 100% sure, but I believe the last CentOS 8 kernel to work with ZFS 0.8.5 was 4.18.0.6.x. Obviously CentOS does not support ZFS, so this means the ZoL folks must find and fix the problem. Otherwise, I think Fedora 33 is the only choice we have for hosting ZFS. --Doc Savage Fairview Heights, IL

2 1

CentOS Stream from bottom works, what is this?
by Walter H. 10 Dec '20

10 Dec '20

Hello, I just tried installing a VM from the stream ISO and it worked; the only thing I would like to have changed as a default config is GRUB_CMDLINE_LINUX=".... net.ifnames=0 ..." the reason, I find eth0, eth1, eth2 easier to use than cryptic names like ens33 or ens0p3 or so; Walter p.s. can someone tell in as short as possible what this CentOS Stream is in comparison to CentOS 8?

16 35

Current CentOS Stream already the downstream of the upcoming RH EL 8.4?
by Gianluca Cecchi 10 Dec '20

10 Dec '20

RH EL 8.3 released at the end of October 2020. Planned 8.4 would be at the end of April 2021. Now that CentOS has bridged the gap with 8.3 + updates, can we tell that what is going into Stream right now will begin to be the upcoming RH EL 8.4 and so that in the next five months we will get a real scenario of what is planned up to 2024? Thanks, Gianluca

2 1

Future of CentosPlus?
by Gerhard Schneider 10 Dec '20

10 Dec '20

Is there anything known about the future of CentosPlus after moving to a Pre-RHEL CentOS Stream? It would be of no interest to RedHat.. Gerhard Schneider -- Gerhard Schneider Institute of Lightweight Design and e-Mail: gs(a)ilsb.tuwien.ac.at Structural Biomechanics (E317) Tel.: +43 1 58801 31716 TU Wien / Vienna / Austria Fax: +43 1 58801 31799 A-1060 Wien, Gumpendorfer Straße 7 http://www.ilsb.tuwien.ac.at/~gs/

3 2

Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/
by Gionatan Danti 10 Dec '20

10 Dec '20

Il 2020-12-10 18:40 Brendan Conoboy ha scritto: > Hey, you dropped Centos-devel from your reply. I'll assume that was > intentional, but if it wasn't feel free to quote any of this back > there. Hi Brendan, no, it was not intentional - I replied from the smartphone and I accidentally dropped the centos-devel list. I'll reply quoting the entire conversation to let others read your useful information. > On Thu, Dec 10, 2020 at 9:26 AM Gionatan Danti <g.danti(a)assyoma.it> > wrote: > >> Il 2020-12-10 14:35 Brendan Conoboy ha scritto: >>>> - are you going to keep stable ABI between Stream kernel >> releases, >>>> or >>>> should we expect each kernel to break 3rd party drivers/modules? >>> >>> All our kernel changes are implemented against the kernel ABI- >> there >>> is no point in time during release development when we have >> interim >>> changes in the kernel that ignore the symbols in the whitelist. >> So >>> basically if your experience of going from one minor release to >>> another has been smooth, the incremental kernels between those two >>> releases would also tend to run smooth, assuming whatever motions >>> happen with the 3rd party drivers/modules behind the scenes >> continue >>> to happen (for example, rebuilding from source). >> >> Let's forget about minor release upgrades and focus on the >> incremental >> kernel updates between point releases for a moment. Can we expect a >> stable kernel ABI for these releases, or should we expect breaking >> changes? In other words, should 3rd party kmod be constantly updated >> for >> *any* kernel released on the Stream channel, or can we expect them >> to >> keep working until a "next-release" kernel appears? >> >> Regarding symbol whitelist, I understand it as related to a single >> minor >> releases - ie: all kernels of 8.3 branch will obey it, but this can >> be >> false for kernel on, say, 8.4 >> >> Am I missing something? > > I think it's a question of nuance. In broad strokes we don't break > the kernel ABI as outlined by the whitelist starting with the first > major release. In fact, taht whitelist grows throughout the life of > the release, making the ABI more predictable. The problem you've > likely experienced is that loadable kernel modules have access to > symbols not included in the whitelist. Whether we're pushing new code > upstream or backporting new code from upstream, we endeavor to keep > symbols the same, even if they aren't on the whitelist. But if for > strong technical reasons it's better to change a symbol, that will > happen upstream, and if it wasn't part of our whitelist, it can happen > in RHEL as well. Usually these changes only require minor updates in > the loadable kernel modules, but for an end user this is the > difference between a module loading or not loading, so the impact is > glaring. > > I'm not sure how things will take shape with CentOS Stream and > external drivers, whether some gating activity wil elrepo will hold > back kernel updates until elrepo is updated, or if a SIG will form, or > some other thing. All I can say for sure is that when you have a > group of people with common problems, they will create solutions, and > we want those solutions for CentOS Stream. So we'll work it out, I'm > just not sure how yet (kABI isn't my focus, I'm simply familiar with > the dynamics because I was the overall RHEL 8 development lead). > >>>> - what/how many synchronization points are going to be with RHEL >>>> releases? >>> >>> I'm not sure I'm interpreting your question correctly, could you >>> restate? I don't want to hit you with detailed process >> information >>> only to find out I'm answering the wrong question! >> >> With Stream, all is going to change constantly. We will have any >> "sync >> point" where Stream is 100% identical to a specific RHEL point >> release? > > OK, I understand now, thanks! I don't think there will be a point > where a RHEL minor release compose will be NVR identical to a CentOS > Stream compose, though they will be pretty close. The reason for this > is that there is a period of time where we're working on 2 RHEL > releases at once: The one that is about to release, and the one that > will follow. CentOS Stream, I believe, will follow the source tree of > "the one that will follow." All the same fixes will be there, but > CentOS Stream will also get additional fixes and features not included > in the near term RHEL release. > >> Thank you for taking the time to reply. >> Regards. > > I appreciate the questions! Regards, Thank you for the clear replies. Regards. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

1 0

Update path question in connection with CentOS Stream?
by Walter H. 10 Dec '20

10 Dec '20

Hello, when someone has installed a CentOS 7.1 in the past, and did 'yum update' regularily, his/she got a CentOS 7.8 now without any reinstallation procedure or other complications; when the same wanted to update to CentOS 8 he/she had to do a new install; what happens to CentOS Stream? when some is now installing CentOS Steam and will do 'dnf update' or 'yum update' regularily in the future, what does he/she get till the "end"? is this a rolling release like Win10 which doesn't need to be reinstalled now and in future? (the fact that hardware can break is not the question) Thanks, Walter

3 2

CentOS-announce Digest, Vol 189, Issue 3
by centos-announce-request＠centos.org 10 Dec '20

10 Dec '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:5239 Important CentOS 7 firefox Security Update (Johnny Hughes) 2. CESA-2020:5235 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 9 Dec 2020 20:21:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5239 Important CentOS 7 firefox Security Update Message-ID: <20201209202157.GA1948(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5239 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5239 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: cb3a549fe050cd75184479500b542065e37366ce62d90769646352bf2d9798a2 firefox-78.5.0-1.el7.centos.i686.rpm 4276584eb593d2fb304ab50518d7e2c4f955abe8fc5b3d1b9f0dd053d363f298 firefox-78.5.0-1.el7.centos.x86_64.rpm Source: 3d26716ee84904cf6f57b0e9d00d84765a498c15b8f0ac649d7f49248c61dca0 firefox-78.5.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 9 Dec 2020 20:24:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:5235 Important CentOS 7 thunderbird Security Update Message-ID: <20201209202441.GA2130(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:5235 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:5235 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f57d7074e8e50a23c9a10a230c6edbd1f48bc3130046704525be72e10c371656 thunderbird-78.5.0-1.el7.centos.x86_64.rpm Source: 6d147795bfe6c18c042e338932f14bdfcde9403bec0ccbb0c9c1132545645e57 thunderbird-78.5.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 189, Issue 3 ***********************************************

1 0

Centos Developers Opinion
by Sergio Belkin 10 Dec '20

10 Dec '20

I would like to know the opinion of the CentOS developers on the decision to end CentOS. Because people already made his voice heard... What do you think? Is it a great decision and master play of business? Because you know 'devops-container-facebook-intel-thing' and "hey is the inevitable train of history? "Adapt or die?" Really? How could you explain what hundred of people around the world that already implemented CentOS 8 and helped reporting bugs, many of them cannot afford RH subscription? How could somebody trust on a company that one day happily says "if you don't like CentOS Stream, pay us?" and sents to trash a project of 16 years? Did nobody know what Red Hat was working on this? How strange is... I read you, we, the CentOS community read you, what do you think? Thanks in advance -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

1 0

Moving to CentOS 8 Stream
by Pete Biggs 10 Dec '20

10 Dec '20

It's got to be done, so may as well test it ... The FAQ says to do: dnf install centos-release-stream dnf distro-sync This I did and everything went fine. I checked before doing the distro- sync and there was a load of new Stream repos in /etc/yum.repos.d Rebooted the machine and dnf has gone back to only looking in 8.3, and the stream repos had disappeared. Looking in the logs I can see this: 2020-12-09T12:28:42Z DEBUG ---> Package centos-stream-release.noarch 8.4-1.el8 will be installed 2020-12-09T12:28:42Z DEBUG ---> Package centos-linux-release.noarch 8.3-1.2011.el8 will be obsoleted 2020-12-09T12:28:42Z DEBUG ---> Package centos-release-stream.x86_64 8.1-1.1911.0.7.el8 will be obsoleted and Installing: centos-stream-release noarch 8.4-1.el8 Stream-BaseOS 21 k replacing centos-linux-release.noarch 8.3-1.2011.el8 replacing centos-release-stream.x86_64 8.1-1.1911.0.7.el8 The centos-stream-release RPM does not contain any repo information, that was all in centos-release-stream that has been removed. So stream has deleted itself. It's not a good start. I also can't seem to get back to a sensible system and have now got a system with a mixture of CentOS 8 and CentOS 8 Stream RPMs with no way of installing the Stream repos from an RPM. I see that "subscription-manager" has been installed on this system now which it never was. Is CentOS also going to be part of that ecosystem as well? Fortunately this was a throw-away install. I hope no one has tried the instructions in the FAQ on an important machine! P.

9 15

Setting up NIS on Centos 8
by Mark LaPierre 10 Dec '20

10 Dec '20

Hey Y'all, I found this: https://www.server-world.info/en/note?os=CentOS_8&p=nis&f=1 I've been told in the past that NIS should not be used because of some supposed security issues. Can someone site any authoritative documentation concerning the security issues extant in NIS? My plan is to set up NIS and NFS on my home network server where I plan to host all the local home network /home directories. I'll use automount on all the other nodes to mount up the home directories when a user logs on. -- _ °v° /(_)\ ^ ^ Mark LaPierre ****

4 5

Learning to build applications
by H 10 Dec '20

10 Dec '20

I have managed to get through the qtmake stage of compiling the current github version of pgmodeler on CentOS 7 but make && make install fails with: make && make install cd libutils/ && ( test -e Makefile || /bin/qmake-qt5 -o Makefile /home/h/pgmodeler/libutils/libutils.pro CONFIG+=release PREFIX= BINDIR= PRIVATEBINDIR= PRIVATELIBDIR=/lib ) && make -f Makefile make[1]: Entering directory /home/h/pgmodeler/libutils' g++ -c -pipe -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -O2 -std=gnu++1y -Wall -W -D_REENTRANT -fPIC -DBUILDNUM=\"20201030\" -DBINDIR=\"\" -DPLUGINSDIR=\"/lib/pgmodeler/plugins\" -DPRIVATEBINDIR=\"\" -DCONFDIR=\"/share/pgmodeler/conf\" -DDOCDIR=\"/share/pgmodeler\" -DLANGDIR=\"/share/pgmodeler/lang\" -DSAMPLESDIR=\"/share/pgmodeler/samples\" -DSCHEMASDIR=\"/share/pgmodeler/schemas\" -DQT_NO_DEBUG -DQT_PRINTSUPPORT_LIB -DQT_SVG_LIB -DQT_WIDGETS_LIB -DQT_GUI_LIB -DQT_NETWORK_LIB -DQT_CORE_LIB -I. -isystem /usr/include/libxml2 -isystem /usr/include/qt5 -isystem /usr/include/qt5/QtPrintSupport -isystem /usr/include/qt5/QtSvg -isystem /usr/include/qt5/QtWidgets -isystem /usr/include/qt5/QtGui -isystem /usr/include/qt5/QtNetwork -isystem /usr/include/qt5/QtCore -Imoc -isystem /usr/include/libdrm -I/usr/lib64/qt5/mkspecs/linux-g++ -o obj/exception.o src/exception.cpp In file included from src/exception.cpp:18:0: src/exception.h:41:11: error: ‘underlying_type_t’ in namespace ‘std’ does not name a type constexpr std::underlying_type_t<Enum> enum_cast (Enum obj_type) noexcept ^ src/exception.cpp: In constructor ‘Exception::Exception(ErrorCode, const QString&, const QString&, int, Exception*, const QString&)’: src/exception.cpp:295:86: error: ‘enum_cast’ was not declared in this scope configureException(QApplication::translate("Exception",messages[enum_cast(error_code)][ErrorMessage].toStdString().c_str(),"", -1), ^ src/exception.cpp: In constructor ‘Exception::Exception(ErrorCode, const QString&, const QString&, int, std::vector<Exception>&, const QString&)’: src/exception.cpp:314:86: error: ‘enum_cast’ was not declared in this scope configureException(QApplication::translate("Exception",messages[enum_cast(error_code)][ErrorMessage].toStdString().c_str(),"",-1), ^ src/exception.cpp: In static member function ‘static QString Exception::getErrorMessage(ErrorCode)’: src/exception.cpp:371:25: error: ‘enum_cast’ was not declared in this scope if(enum_cast(error_code) < ErrorCount) ^ src/exception.cpp: In static member function ‘static QString Exception::getErrorCode(ErrorCode)’: src/exception.cpp:382:25: error: ‘enum_cast’ was not declared in this scope if(enum_cast(error_code) < ErrorCount) ^ src/exception.cpp: In static member function ‘static QString Exception::getErrorMessage(ErrorCode)’: src/exception.cpp:378:1: warning: control reaches end of non-void function [-Wreturn-type] } ^ src/exception.cpp: In static member function ‘static QString Exception::getErrorCode(ErrorCode)’: src/exception.cpp:386:1: warning: control reaches end of non-void function [-Wreturn-type] } ^ make[1]: *** [obj/exception.o] Error 1 make[1]: Leaving directory /home/hakan/pgmodeler/libutils' make: *** [sub-libutils-make_first-ordered] Error 2 I am a beginner when it comes to compiling applications and would appreciate suggestion how to fix the above. Thank you.

2 4

ContOS 8 is dead. Viva Rocky Linux!
by Lists 10 Dec '20

10 Dec '20

The list is swamped with news about CentOS 8 dying in a year and becoming stream Linux. IWeve been here before, folks. I remember when Red Hat Linux disappeared to become the Feodra / Red Hat Enterprise we know today, which gave birth to White Box Enterprise Linux, Scientific Linux, and CentOS. WBEL and SL slowly faded and CentOS won out. And then CentOS, eventually folding into RedHat, promised everyone that it had the support of Red Hat - now part of IBM. Well, now we're back to the big announcement: Red Hat (IBM) is going to mix it up again. And now, as before, come the clones: Rocky Linux has been announced... https://www.reddit.com/r/RockyLinux/comments/ka0qlv/ meet_rocky_linux_new_rhel_fork_by_the_original/ If history is any guide, you'll change a line somewhere in /etc/yum.d and then run yum update to switch over. That's how I switched from WBEL to SL to CentOS, way back in CentOS 3 or 4 days. (I don't even remember which one anymore) The more things change, the more they stay exactly the same... Ben

1 0

Missing intel/sof/sof-cml.ri for CentOS 8.3
by Kay Schenk 10 Dec '20

10 Dec '20

Hello all-- I recently did a bulk update from 8.2 to 8.3. I am having some odd issues with it not recognizing my NVIDIA Quadro P1X00 graphics card properly. In graphical mode, it only shows ONE display resolution and also my system can not find firmware -- intel/sof/sof-cml.ri Any idea about what to do flor either of these issues? Thanks. -- "Don't let anyone dull your sparkle." ________________________________________ MzK

3 2

dnf script to cherry pick updates and maintain RHEL compatibility
by Frank Cox 09 Dec '20

09 Dec '20

Here's an idea, though I don't know if it would be practical. I assume that at some point everything that goes into RHEL and its "official" updates travels through the Stream ecosystem beforehand. So what about the idea of maintaining (somewhere) a list of official updates to RHEL as they are released, and then have some kind of a dnf enhancement or script that reads that list and updates a local Centos installation using only the rpms on the list and ignoring everything else. Stuff that's released to Stream would be downloaded and installed at the point where it has been released for RHEL and not before. That would (I think) keep your Centos installation in sync with RHEL. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

5 7

Stream questions
by James Szinger 09 Dec '20

09 Dec '20

I have a couple of questions about CentOS Stream. 1. Is there list for update announcements? Something similar to updates(a)fedoraproject.org. 2. Since both CentOS and EPEL are Red Hat projects, will Red Hat provide an EPEL version compatible with CentOS Stream? Jim

3 3

Re: [CentOS] [CentOS-devel] CentOS 8 future
by Leon Fauster 09 Dec '20

09 Dec '20

Am 09.12.20 um 20:28 schrieb Jon Pruente: > On Wed, Dec 9, 2020 at 5:24 AM Leon Fauster via CentOS > <centos(a)centos.org <mailto:centos@centos.org>> wrote: > > > The relatively fewer that are on CentOS Linux 8 have some > decisions to > > make. The end of 2021 is sooner than they were expecting *but* > there is > > a fully available upgrade path from CentOS Linux 8 to CentOS > Stream 8 > > (IE: not a reinstall), and that will take them to 2024. That's > half of > > the 10 years they might have expected, but it should let them give > > Stream a try and see if it is for them or not. > > If "Stream" is the base for the next RHEL8.x where are the updates > until > 2029 coming from, when CentOS Stream 8 will be shutdown at 2024? > > > I think you've confused some dates, unless you have a link to the > 2024 date for Stream 8. CentOS 7 will continue until 2024. CentOS Stream > 8 doesn't have a clear EOL, but it is presumably at or before the end of > RHEL 8 in 2029. CentOS 8 EOL has been yanked back to 2021. > > https://centos.org/centos-stream/ <https://centos.org/centos-stream/> > > End-of-life > > N/A No, its exactly as I said: https://lists.centos.org/pipermail/centos/2020-December/352340.html https://centos.org/distro-faq/#q13-can-i-start-up-a-sig-that-will-maintain-… (full-support -> 2024). -- Leon

1 0

CentOS Stream & Release Notes / Documentation
by Chris Schanzle 09 Dec '20

09 Dec '20

One thing I have not seen discussed is how users will be notified of changes to functionality and new features in CentOS Stream. With Stream being on the leading edge of a release as opposed to following, will there be some mechanism where changes are blogged about, Beta release notes, or something similar? Thanks again to JohnnyH and the rest of the team for a great ride.

1 0

strange RPM dependency observed in CentOS 7
by Walter H. 09 Dec '20

09 Dec '20

Hello, can someone explain, why the two packages - GeoIP - geoipupdate are needed when installing the bind-utils package? yum install bind-utils ... ======================================================================================================================== Package Arch Version Repository Size ======================================================================================================================== Installing: bind-utils x86_64 32:9.11.4-26.P2.el7_9.2 base 260 k Installing for dependencies: GeoIP x86_64 1.5.0-14.el7 base 1.5 M bind-libs x86_64 32:9.11.4-26.P2.el7_9.2 base 157 k bind-libs-lite x86_64 32:9.11.4-26.P2.el7_9.2 base 1.1 M bind-license noarch 32:9.11.4-26.P2.el7_9.2 base 90 k geoipupdate x86_64 2.5.0-1.el7 base 35 k Transaction Summary ======================================================================================================================== Install 1 Package (+5 Dependent packages) ... Thanks, Walter

3 5

CentOS-announce Digest, Vol 189, Issue 2
by centos-announce-request＠centos.org 09 Dec '20

09 Dec '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS Project shifts focus to CentOS Stream (Rich Bowen) ---------------------------------------------------------------------- Message: 1 Date: Tue, 8 Dec 2020 09:08:05 -0500 From: Rich Bowen <rbowen(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] CentOS Project shifts focus to CentOS Stream Message-ID: <e67aae14-83d8-1d69-5333-2a208e71f023(a)redhat.com> Content-Type: text/plain; charset=utf-8; format=flowed The future of the CentOS Project is CentOS Stream, and over the next year we?ll be shifting focus from CentOS Linux, the rebuild of Red Hat Enterprise Linux (RHEL), to CentOS Stream, which tracks just ahead of a current RHEL release. CentOS Linux 8, as a rebuild of RHEL 8, will end at the end of 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux. Meanwhile, we understand many of you are deeply invested in CentOS Linux 7, and we?ll continue to produce that version through the remainder of the RHEL 7 life cycle. https://access.redhat.com/support/policy/updates/errata/#Life_Cycle_Dates CentOS Stream will also be the centerpiece of a major shift in collaboration among the CentOS Special Interest Groups (SIGs). This ensures SIGs are developing and testing against what becomes the next version of RHEL. This also provides SIGs a clear single goal, rather than having to build and test for two releases. It gives the CentOS contributor community a great deal of influence in the future of RHEL. And it removes confusion around what ?CentOS? means in the Linux distribution ecosystem. When CentOS Linux 8 (the rebuild of RHEL8) ends, your best option will be to migrate to CentOS Stream 8, which is a small delta from CentOS Linux 8, and has regular updates like traditional CentOS Linux releases. If you are using CentOS Linux 8 in a production environment, and are concerned that CentOS Stream will not meet your needs, we encourage you to contact Red Hat about options. We have an FAQ - https://centos.org/distro-faq/ - to help with your information and planning needs, as you figure out how this shift of project focus might affect you. [See also: Red Hat's perspective on this. https://www.redhat.com/en/blog/centos-stream-building-innovative-future-ent…] ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 189, Issue 2 ***********************************************

1 0

Re: [CentOS] [CentOS-devel] CentOS 8 future
by Leon Fauster 09 Dec '20

09 Dec '20

Am 09.12.20 um 04:18 schrieb Mike McGrath: > > > On Tue, Dec 8, 2020 at 7:30 PM Leon Fauster via CentOS-devel > <centos-devel(a)centos.org <mailto:centos-devel@centos.org>> wrote: > > Am 08.12.20 um 23:22 schrieb Matthew Miller: > > On Tue, Dec 08, 2020 at 12:44:36PM -0600, Robert G. (Doc) Savage > via CentOS wrote: > >>> CentOS 8's future is not looking bright. Recently deployed > CentOS8 on my > >>> production workload and now hearing this. What do other folks think > >>> about this? > >> Speaking only for myself, I am ready to give up on CentOS (and > Red Hat) > >> entirely. Fedora meets all my clients' needs with none of the chaos. > > > > I definitely appreciate the vote of confidence in Fedora! You're > not alone > > in using Fedora in a lot of serious ways. > > > > However, I really encourage everyone to give this a chance. This is > > (post-Fedora) RHEL development opening up in a new way, and CentOS is > > central to it. That's a good place to be! > > > > > > Its important to distinguish two aspects here in this whole discussion. > > Its great that RH opens their "firewalls". CentOS Stream is great > for that but what actually pissed the people off is the termination > of CentOS8 Linux. So all arguments for C8S doesn't touch the problem > that people have now. And no - C8S is not a valid substitution. Its > valid for a different usage scenario that is of course worth to get a > chance but the mentioned problem don't get addressed ... > > > I agree the timing of this isn't great but keep in mind the vast > majority of CentOS users are on CentOS Linux 7, they have the full > lifecycle they expected. > > The relatively fewer that are on CentOS Linux 8 have some decisions to > make. The end of 2021 is sooner than they were expecting *but* there is > a fully available upgrade path from CentOS Linux 8 to CentOS Stream 8 > (IE: not a reinstall), and that will take them to 2024. That's half of > the 10 years they might have expected, but it should let them give > Stream a try and see if it is for them or not. If "Stream" is the base for the next RHEL8.x where are the updates until 2029 coming from, when CentOS Stream 8 will be shutdown at 2024? -- Leon

1 0

Re: [CentOS] Is Oracle a real alternative to Centos?
by Karl Vogel 09 Dec '20

09 Dec '20

>> On Tue, 08 Dec 2020 12:54:32 -0500, >> Frank Cox <theatre(a)sasktel.net> might just possibly have said: F> Is Oracle a real alternative to Centos? I'm asking because genuinely F> don't know; I've never paid any attention to Oracle's Linux offering F> before now. I've used Unix/Linux at Wright-Patterson AFB, USA since 1988 -- this includes Solaris starting at 2.5.1 up to 11, FreeBSD, and Linux. I used CentOS for several years and I'm a refugee simply because it was easier to get something containing the name "Oracle" approved for use on base. (All the stupid sh*t you've heard about gov't procurement is true.) I *despise* Oracle the company, but I ran Oracle Linux as both a server for an Oracle DB and as my workstation starting Jan 2018 after a drive failure knocked my machine out of the park. Occasionally I had to dork around looking for a source RPM, but other than that I was fine with it. You use "yum" like anywhere else. FWIW, my 6.10 installation had this in /etc/redhat-release: Red Hat Enterprise Linux Server release 6.10 (Santiago) Go to https://linux.oracle.com/switch/centos/, poke around a bit, and you end up here: https://yum.oracle.com/oracle-linux-downloads.html I just went to the ISO page and I can grab whatever I like without signing up for anything, so nothing's changed since I first used it. I use FreeBSD on my home systems to avoid precisely this kind of crap, so this is *NOT* a recommendation for Oracle in general -- be ready for them to change the rules at any time. Finally, I've been on this list for many years -- Johnny H. is the most responsive and least arrogant person I've ever seen, so please don't pee in his Wheaties. -- Karl Vogel / vogelke AT pobox.com / I don't speak for the USAF or any company Mangled song lyric: I can't climb this ceiling any more. Actual lyric: I can't fight this feeling anymore. (REO Speedwagon)

2 1

Update CentOS 6 one last time?
by Paul Storck 08 Dec '20

08 Dec '20

Hello, is it possible to install the final updates for CentOS 6? I ran a yum update and I received this message "Error: Cannot find a valid baseurl for repo: base" I assume it's due to the EOL of CentOS 6? Thank you, Paul

3 5

Re: [CentOS] Update CentOS 6 one last time?
by Richard 08 Dec '20

08 Dec '20

> Date: Tuesday, December 08, 2020 13:25:42 -0800 > From: Paul Storck via CentOS <centos(a)centos.org> > >> On Tue, Dec 8, 2020 at 8:45 AM Subscriber <ml-lists(a)agoris.net.ua> >> wrote: >> >> > ----- On Dec 8, 2020, at 6:31 PM, Paul Storck wrote: >> >> > Hello, is it possible to install the final updates for CentOS 6? >> > I ran a yum update and I received this message "Error: Cannot >> > find a valid baseurl for repo: base" I assume it's due to the >> > EOL of CentOS 6? >> >> You can add 6.10 section to /etc/yum.repos.d/CentOS-Vault.repo and >> after that install all last updates for CentOS 6 >> > > Thank you for the response. I added (copied, edited, pasted from > the C6.9 section) the following to the > /etc/yum.repos.d/CentOS-Vault.repo file but I still get the same > error message. > > I'm thinking the paths are incorrect in my file because when I try > to go to directly to the URL > (http://vault.centos.org/6.10/os/$basearch/) I get a "404 Not Found" > > [C6.10-base] > name=CentOS-6.10 - Base > baseurl=http://vault.centos.org/6.10/os/$basearch/ > gpgcheck=1 > gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6 > enabled=1 When you tried the url directly did you make the necessary substitutions for "$basearch"? It needs an architecture and then some additional pathing to get to packages. After adding the C6.10 entries to the Vault repo did you turn off the entries (e.g., set "enabled=" to "0") in the non-vault repos? If you don't yum will still try them. The CentOS-Base.repo is on by default so you'll either need to add the "enabled=" line to each of the entries or otherwise disable the repos.

1 0

unsubscribe
by Daniel Worden 08 Dec '20

08 Dec '20

Could you please unsubscribe this email address. I was not aware of the volume of messages this would create and I would like to resubscire using a different email address. Thank you, Daniel Worden

3 2

CentOS-announce Digest, Vol 189, Issue 1
by centos-announce-request＠centos.org 08 Dec '20

08 Dec '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS Linux 8 (2011) (Brian Stinson) ---------------------------------------------------------------------- Message: 1 Date: Mon, 7 Dec 2020 15:06:36 -0600 From: Brian Stinson <bstinson(a)centosproject.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] Release for CentOS Linux 8 (2011) Message-ID: <85a40c22-dad9-f6d5-c123-d4126039f965(a)centosproject.org> Content-Type: text/plain; charset=utf-8 Release for CentOS Linux 8 (2011) We are pleased to announce the general availability of CentOS Linux 8. Effectively immediately, this is the current release for CentOS Linux 8 and is tagged as 2011, derived from Red Hat Enterprise Linux 8.3 Source Code. As always, read through the Release Notes at: http://wiki.centos.org/Manuals/ReleaseNotes/CentOS8.2011 - these notes contain important information about the release and details about some of the content inside the release from the CentOS QA team. These notes are updated constantly to include issues and incorporate feedback from users. ---------- Updates, Sources, and DebugInfos Updates released since the upstream release are all posted, across all architectures. We strongly recommend every user apply all updates, including the content released today, on your existing CentOS Linux 8 machine by just running 'dnf update'. As with all CentOS Linux 8 components, this release was built from sources hosted at git.centos.org. Sources will be available from vault.centos.org in their own dedicated directories to match the corresponding binary RPMs. Since there is far less traffic to the CentOS source RPMs compared with the binary RPMs, we are not putting this content on the main mirror network. If users wish to mirror this content they can do so using the reposync command available in the yum/dnf-utils package. All CentOS source RPMs are signed with the same key used to sign their binary counterparts. Developers and end users looking at inspecting and contributing patches to the CentOS Linux distro will find the code hosted at git.centos.org far simpler to work against. Details on how to best consume those are documented along with a quick start at: http://wiki.centos.org/Sources Debuginfo packages have been signed and pushed. Yum configs shipped in the new release file will have all the context required for debuginfo to be available on every CentOS Linux install. This release supersedes all previously released content for CentOS Linux 8, and therefore we highly encourage all users to upgrade their machines. Information on different upgrade strategies and how to handle stale content is included in the Release Notes. Note that older content, obsoleted by newer versions of the same applications are trim'd off from repos like extras/ and centosplus/ ---------- Download We produced the following installer images for CentOS Linux 8 # CentOS-8.3.2011-x86_64-boot.iso: 716177408 bytes SHA256 (CentOS-8.3.2011-x86_64-boot.iso) = 2b801bc5801816d0cf27fc74552cf058951c42c7b72b1fe313429b1070c3876c # CentOS-8.3.2011-x86_64-dvd1.iso: 9264168960 bytes SHA256 (CentOS-8.3.2011-x86_64-dvd1.iso) = aaf9d4b3071c16dbbda01dfe06085e5d0fdac76df323e3bbe87cce4318052247 # CentOS-8.3.2011-aarch64-boot.iso: 636792832 bytes SHA256 (CentOS-8.3.2011-aarch64-boot.iso) = b87fc578c53b541229883d391d1299b9d2a051c1f33dc15052dc42ed941600a9 # CentOS-8.3.2011-aarch64-dvd1.iso: 6792984576 bytes SHA256 (CentOS-8.3.2011-aarch64-dvd1.iso) = ecf586b30fa16b28a33b2fb4ffadd8801201608f9755c94da1212876d32fba92 # CentOS-8.3.2011-ppc64le-boot.iso: 686874624 bytes SHA256 (CentOS-8.3.2011-ppc64le-boot.iso) = 13ebdc5ecdfc316fa4528f3bc4d896ca32745af65766bd84ece37e10d87f8e9e # CentOS-8.3.2011-ppc64le-dvd1.iso: 7887482880 bytes SHA256 (CentOS-8.3.2011-ppc64le-dvd1.iso) = a56fc1039534155253ca412fcd8e0293e6f67fd92c526a8b754309578140dff6 Information for the torrent files and sums are available at http://mirror.centos.org/centos/8/isos/ -------- Additional Images Vagrant and Generic Cloud images are available at: http://cloud.centos.org/centos/8/ Amazon Machine Images for Amazon Web Services are published by ID into a number of regions. A table of AMI IDs can be found here: https://wiki.centos.org/Cloud/AWS ---------- Getting Help The CentOS ecosystem is sustained by community driven help and guidance. The best place to start for new users is at http://wiki.centos.org/GettingHelp We are also on social media, you can find the project: on Twitter at :http://twitter.com/CentOSProject on Facebook at :https://www.facebook.com/groups/centosproject/ on LinkedIn at :https://www.linkedin.com/groups/22405 And you will find the core team and a majority of the contributors on irc, on freenode.net in #centos ; talking about the finer points of distribution engineering and platform enablement. ---------- Contributors This release was made possible due to the hard work of many people, foremost on that list are the Red Hat Engineers for producing a great distribution and the CentOS QA team, without them CentOS Linux would look very different. Many of the team went further and beyond expectations to bring this release to you, and I would like to thank everyone for their help. We are also looking for people to get involved with the QA process in CentOS, if you would like to join this please introduce yourself on the centos-devel list (http://lists.centos.org/mailman/listinfo/centos-devel) Finally, please join me in thanking the donors who all make this possible for us. Enjoy the fresh new release! Thanks, Brian Stinson ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 189, Issue 1 ***********************************************

1 0

CentOS-8(2011): osbuild - missing selinux subpackage?
by Leon Fauster 08 Dec '20

08 Dec '20

Briefly, while updating some workstation I came across this. The update to CentOS-8(2011) passes without issues (because best=False). So, I guess that all packages landed at the mirror host - but osbuild-selinux is missing? # LANG=C yum update Last metadata expiration check: 0:00:39 ago on Tue Dec 8 01:18:19 2020. Dependencies resolved. Problem: package osbuild-18-3.el8.noarch requires (osbuild-selinux if selinux-policy-targeted), but none of the providers can be installed - package osbuild-composer-20.1-1.el8.x86_64 requires osbuild >= 18, but none of the providers can be installed - cannot install the best update candidate for package selinux-policy-targeted-3.14.3-54.el8.noarch - cannot install the best update candidate for package lorax-composer-28.14.55-2.el8.x86_64 ============================================================================================================================================================================= Package Architecture Version Repository Size ============================================================================================================================================================================= Skipping packages with broken dependencies: osbuild noarch 18-3.el8 appstream 53 k osbuild-composer x86_64 20.1-1.el8 appstream 2.8 M Transaction Summary ============================================================================================================================================================================= Skip 2 Packages Nothing to do. Complete!

1 0

CentOS 8.2: error running non-shared postrotate script for /var/log/mysql/mysqld.log
by Alexander Farber 07 Dec '20

07 Dec '20

Hello fellow CentOS users! I have installed CentOS 8.2.2004 with the following packages: mysql-common-8.0.21-1.module_el8.2.0+493+63b41e36.x86_64 mysql-8.0.21-1.module_el8.2.0+493+63b41e36.x86_64 mysql-errmsg-8.0.21-1.module_el8.2.0+493+63b41e36.x86_64 mysql-server-8.0.21-1.module_el8.2.0+493+63b41e36.x86_64 Then I have run mysql_secure_installation and among other things set the root password for MySQL As result I am greeted with the following anachron mail every morning: /etc/cron.daily/logrotate: mysqladmin: connect to server at 'localhost' failed error: 'Access denied for user 'root'@'localhost' (using password: NO)' error: error running non-shared postrotate script for /var/log/mysql/mysqld.log of '/var/log/mysql/mysqld.log ' I understand that the reason is me having set the root password for MySQL. But my question is how to provide the password to postrotate without disclosing it too much? Other than that the MySQL works well, I use it to host 3 Wordpress websites at my CentOS 8 Linux server (haproxy -> Jetty x 3 -> FastCGI -> php-fpm -> Wordpress -> MySQL) Greetings from Germany Alex

4 3

Trying to find gcc 5
by mark 07 Dec '20

07 Dec '20

Hi, folks, It seems I can't run a version of calibre newer than 3.23 without at least one library from gcc-5 (and the calibre attitude seems to be "screw you, 4's ancient, move to another distro"). I've added the scl repo - what devtoolset do I need to install? mark

4 4

/dev/mapper/cl-root filesystem corrupted?
by Robert G. (Doc) Savage 07 Dec '20

07 Dec '20

A client's (truly ancient) file server running CentOS 7 suddenly started misbehaving, and I believe the ext4 filesystem on /dev/mapper/cl-root may be corrupted. A reboot fails with a file system check and drops me into maintenance mode. I tried booting from a live C7 DVD and as root running e2fsck. It complains that the superblock could not be read and suggests running "e2fsck -b 8193 <device>". That also fails. Is there a way to more forcefully "encourage" e2fsck to do its job without totally destroying that filesystem? --Doc Savage Fairview Heights, IL

2 2

ntpdate past CentOS 7
by Jerry Geis 07 Dec '20

07 Dec '20

So ntpdate is no longer present past CentOS 7. Many times people want "internal" NTP servers - not opening firewalls to allow external pool.ntp.org kind of stuff. ntpdate was "nice" in that I could just run once a day as "ntpdate name" and all good. Is there a similar client for CentOS 8 ? I saw chrony - but does not seem to be a command line command and I would also have to edit a file - Both are not desirable. Just looking for a simple - flexible command like I have been using "ntpdate name" for CentOS 8. Thanks, Jerry

8 10

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss