- Discuss - lists.centos.org

how to enforce audio device precence?
by hw 06 Oct '20

06 Oct '20

Hi, how can I make it so that audio continues to go the monitor connected to the display port when another monitor gets connected to the HDMI port?

1 0

Script to rebuild CentOS 8 boot ISO with plus kernel
by Chris Adams 06 Oct '20

06 Oct '20

I want to install CentOS 8 on some older Dells that have storage controllers dropped by RHEL 8. The CentOS 8 kernel-plus package supports them, so I wrote a script that rebuilds the boot ISO to boot and install using the kernel-plus package from the centosplus repo. https://github.com/cmadamsgit/misc-scripts/ I know you can use driver disks to load additional modules from elsewhere, but I wanted to end up with the kernel-plus anyway, so why not just do it during install? Lightly tested, but seems to work. Posting here in case it is useful to others. -- Chris Adams <linux(a)cmadams.net>

1 0

certbot stopped working on CentOS 7: pyOpenSSL module missing required functionality
by Alexander Farber 05 Oct '20

05 Oct '20

Hello fellow CentOS users, I had this cronjob working for many moons on CentOS 7.8.2003: #minute hour mday month wday command 6 6 * * 1 certbot renew --post-hook "cat /etc/letsencrypt/live/raspasy.de/fullchain.pem /etc/letsencrypt/live/ raspasy.de/privkey.pem > /etc/letsencrypt/live/raspasy.de/haproxy.pem; systemctl resstart haproxy" (I run a post hook, because haproxy-1.5.18-9.el7.x86_64 from the CentOS packages wants to have the cert and the key in one file). Unfortunately, now certbot-1.7.0-1.el7.noarch has stopped working and the error message is: /usr/lib/python2.7/site-packages/josepy/util.py:9: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in a future release. from cryptography.hazmat.primitives.asymmetric import rsa Traceback (most recent call last): File "/usr/bin/certbot", line 9, in <module> load_entry_point('certbot==1.7.0', 'console_scripts', 'certbot')() File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 378, in load_entry_point return get_distribution(dist).load_entry_point(group, name) File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 2566, in load_entry_point return ep.load() File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 2260, in load entry = __import__(self.module_name, globals(),globals(), ['__name__']) File "/usr/lib/python2.7/site-packages/certbot/main.py", line 2, in <module> from certbot._internal import main as internal_main File "/usr/lib/python2.7/site-packages/certbot/_internal/main.py", line 20, in <module> from certbot._internal import account File "/usr/lib/python2.7/site-packages/certbot/_internal/account.py", line 18, in <module> from acme.client import ClientBase # pylint: disable=unused-import File "/usr/lib/python2.7/site-packages/acme/client.py", line 39, in <module> requests.packages.urllib3.contrib.pyopenssl.inject_into_urllib3() # type: ignore File "/usr/lib/python2.7/site-packages/urllib3/contrib/pyopenssl.py", line 118, in inject_into_urllib3 _validate_dependencies_met() File "/usr/lib/python2.7/site-packages/urllib3/contrib/pyopenssl.py", line 160, in _validate_dependencies_met "'pyOpenSSL' module missing required functionality. " ImportError: 'pyOpenSSL' module missing required functionality. Try upgrading to v0.14 or newer. I have the following python packages installed: # rpm -qa | grep python2 python2-oauthlib-2.0.1-8.el7.noarch python2-futures-3.1.1-5.el7.noarch python2-cryptography-1.7.2-2.el7.x86_64 python2-pip-8.1.2-14.el7.noarch python2-acme-1.7.0-1.el7.noarch python2-psycopg2-2.8.6-1.rhel7.x86_64 python2-certbot-1.7.0-1.el7.noarch python2-pyrfc3339-1.1-3.el7.noarch python2-distro-1.2.0-3.el7.noarch python2-configargparse-0.11.0-2.el7.noarch python2-josepy-1.3.0-2.el7.noarch python2-pyasn1-0.1.9-7.el7.noarch python2-six-1.9.0-0.el7.noarch python2-parsedatetime-2.4-6.el7.noarch python2-future-0.18.2-2.el7.noarch python2-requests-oauthlib-0.8.0-5.el7.noarch python2-mock-1.0.1-10.el7.noarch Does anybody please have an idea, what could I do? I like to use the stock packages only (for easier maintenance), wonder if a solution is still possible there... Thank you for any suggestions Alex

4 4

Centos8: Glusterd do not start correctly when I startup or reboot all server together
by Dario Lesca 02 Oct '20

02 Oct '20

I have install and configure on two server centos8 glusterfs in replica mode in this manner: dnf install centos-release-gluster -y dnf install glusterfs-server glusterfs glusterfs-fuse -y systemctl enable --now glusterd gluster peer probe virt1 gluster peer status sh creavolume.sh gfsvol1 301G /gfsvol1 xfs # NOTE: this is a my shell script to create fs on lvm mkdir /gfsvol1/brick1 gluster pool list gluster volume create gfsvol1 replica 2 virt1:/gfsvol1/brick1 virt2:/gfsvol1/brick1 force gluster volume start gfsvol1 gluster volume info gfsvol1 gluster volume status gfsvol1 gluster volume heal gfsvol1 # add to /etc/fstab vi /etc/fstab virt1:/gfsvol2 /virt-gfs glusterfs defaults,noatime,_netdev 0 0 mkdir /virt-gfs mount -a All work fine but when I start or restart all server together glusterd server start but if I try mount the volume, gluster is not working. At this point if I restart the glusterd service and run "mount -a" all work fine. Seem is a boot network problem Then I have try modify glusterd.service with $ sudo systemctl edit glusterd.service --full And modify the unit in this way: #old < After=network.target < Before=network-online.target #new > After=network.target network-online.target > #Before=network-online.target Now all work fine, mostly when I start or restart all server together. There is another solution or this is a Bug? Many thanks for your suggest -- Dario Lesca (inviato dal mio Linux Fedora 32 Workstation)

1 1

Laptop display issue
by H 02 Oct '20

02 Oct '20

I now have an older laptop with a display problem. I installed Centos 7 on it in February and had to install the xorg-x11-drv-ati and evdev drivers because the docking station has an ATI Radeon card. Everything worked fine with a dual display setup. I probably after that ran a system update but did not reboot while in this office. Today, when I got to the office again for the first time in seven months it does not boot into the desktop but fails after displaying ”Started Light Display Manager” with a mouse pointer on one display that can be moved but no desktop at all. The keyboard works and I can start a terminal session. If I remove the laptop from the docking station everything works as expected but not in the station, presumably because it now uses the docking station card. Futzing around I see that systemctl --failed lists nothing, nor did dmesg immediately suggest a reason. In the yum history I see that this driver was updated to 19.0.1-3 from the 19.0.1-2 that installed with. Yum downgrade to 19.0.1-2 did not change the issue. Nor has booting an older kernel helped so far. Although when I remove quiet from the grub command line it seems to stop after ”Started Load CPU microcode update” following the ”Started Light Display Manager” already mentioned, I strongly suspect some issue with the graphics driver. Since the computer boots and seems to run fine with the internal display when removed from the docking station it seems that there are no hardware issues in the unit itself. My understanding is that the ATI driver can be a problem and needs to match the kernel etc - perhaps there is something wrong here? Any suggestions for how to attack this? I need to use it in the docking station and have no alternative. Thank you.

1 2

No sound after latest Firefox update (firefox-78.3.0-1.el6.centos.x86_64)
by Robert Nichols 02 Oct '20

02 Oct '20

With Firefox updated to firefox-78.3.0-1.el6.centos.x86_64, I cannot get sound from Firefox. I've tried restarting pulseaudio, also logging out and logging back in. No help. Other A/V apps work just fine. Downgrading to firefox-68.12.0-1.el6.centos.x86_64 makes sound work again. For now, I've excluded version firefox-78.3.0-1 from yum updates. Anyone else seeing this? Any hints? -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

6 7

CentOS 7 (2009) in progress
by Johnny Hughes 30 Sep '20

30 Sep '20

OK all .. RHEL 7.9 source code updated today. I am currently working to start the build of CentOS 7 based on that [CentOS 7 (2009) ]. Currently, we need to bootstrap and then build llvm-toolset-9.0 and rust-toolset-1.41 as some of the released packages need those toolsets. I also need to check devtoolset-7 and devtoolset-8 and see if we need any updates to pacakges there before we start the main build .. and I need to see of any of the packages need devtoolset-9. Once we have all those prerequisites completed, I can start the main builds. The goal, as usual, is to get the CR repo populated in 7 to 10 days: https://wiki.centos.org/AdditionalResources/Repositories/CR And the final release completed in less than 40 days. Thanks, Johnny Hughes

2 2

Using CentOS 7 to attempt recovery of failed disk
by Jerry Geis 28 Sep '20

28 Sep '20

I have a disk that is flagging errors, attempting to rescue the data. I tried dd first - if gets about 117G of 320G disk and stops incrementing the save image any more. Now I'm trying ddrescue and it also stops about the same point Thoughts on how to continue past that point ? Thanks, Jerry

6 11

JFS for CentOS 7
by H 28 Sep '20

28 Sep '20

I had installed kmod-jfs in an earlier version of CentOS 7, 7.4 if I remember correctly. I now have a machine running the latest version of jfs module but kmod-jfs does not seem to be available. Is anyone running it on the current version of CentOS?

3 5

Question regarding cent OS 7.8.2003 compatibility with large SAS disks
by Amey Abhyankar 25 Sep '20

25 Sep '20

Hello, I have a blade server with SAS HDD's of 12TB in total. 3 HDD's of 4TB each. Is it possible to install Cent OS 7.8.2003 on 12TB disk space? I will be installing Cent OS on the bare metal HW. I referred = https://wiki.centos.org/About/Product But slightly confused with the 'maximum file size' row for ext4 FS. Thanks & Regards, Amey.

6 7

system sounds
by R C 25 Sep '20

25 Sep '20

Hello, after an update, Centos 7, I don't have any system sounds anymore? Sound works, for video etc. (sound left/right speaker test works) is there a setting that I am missing that somehow got messed up? thanks, Ron

1 0

C8 - Register with Red Hat
by Gregory P. Ennis 25 Sep '20

25 Sep '20

Everyone, I am still in the low end of the learning curve with Centos 8, and keep getting warning messages to register with Red Hat. Is this a requirement for C8. I do not have a user ID with Red Hat; will they give a user ID for a Centos user. "This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register." Thanks, Greg Ennis

9 16

Systemd service unit file needs to wait until a specific interface is up
by Carlos Lopez 24 Sep '20

24 Sep '20

Hi all, With SystemD, how can I make certain service dependent on certain network interfaces being up? For example, I have an 802.1ad bond interface I need to wait on for being up (this interface has no ip address assigned, it is used to capture networks packets with a tcpdump’s script). Every time this service fails because bond interface is not up. I have configured the service as: [Unit] Description=tcpdump capture script After=network.target Wants=network-online.target But it doesn’t work …. Any tip or trick? My host is CentOS8 x86_64. Regards, C. L. Martinez

6 9

nmcli: unwanted secondary ip-address
by Felix Kölzow 24 Sep '20

24 Sep '20

Dear CentOS-Community, we are facing the following issue: A secondary ip address seems to be automatically added to a nic which causes several issues in our setup. This server is equipped with four nics which are currently in use: # nmcli con show NAME UUID TYPE DEVICE eno2 cb6fcb54-be52-4ab6-8324-88091a0ea1a0 ethernet eno2 eno4 dbd95c24-1ed7-4292-8dba-3934bd1476a0 ethernet eno4 eno1 1e382037-fec9-493d-a4f2-ace7d73a1e7b ethernet eno1 eno3 bea2db0f-d366-4f1b-bec8-4fbfb3c0b6d2 ethernet eno3 enp5s0f0 23f56b9f-4625-471e-9ce4-6fe7b8832310 ethernet -- enp5s0f1 f25b9a10-1584-4233-89dd-2dda7c774f0d ethernet -- From time to time, a secondary ip-address is assigned to an interface as show below: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 3: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:26:b9:78:87:d1 brd ff:ff:ff:ff:ff:ff inet 192.168.1.90/24 brd 192.168.1.255 scope global noprefixroute eno1 valid_lft forever preferred_lft forever inet6 fe80::226:b9ff:fe78:87d1/64 scope link valid_lft forever preferred_lft forever 4: eno2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:26:b9:78:87:d3 brd ff:ff:ff:ff:ff:ff inet 10.10.100.205/24 brd 10.10.100.255 scope global noprefixroute eno2 valid_lft forever preferred_lft forever inet 10.10.100.72/24 brd 10.10.100.255 scope global secondary dynamic eno2 valid_lft 56158sec preferred_lft 56158sec inet6 fe80::226:b9ff:fe78:87d3/64 scope link valid_lft forever preferred_lft forever 5: eno3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:26:b9:78:87:d5 brd ff:ff:ff:ff:ff:ff inet 192.168.4.11/24 brd 192.168.4.255 scope global noprefixroute eno3 valid_lft forever preferred_lft forever inet6 fe80::e98b:e064:50d2:535d/64 scope link noprefixroute valid_lft forever preferred_lft forever 6: eno4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:26:b9:78:87:d7 brd ff:ff:ff:ff:ff:ff inet 192.168.2.98/24 brd 192.168.2.255 scope global noprefixroute eno4 valid_lft forever preferred_lft forever inet *192.168.137.223/24* brd 192.168.137.255 scope global dynamic eno4 <<----- THIS IS UNWANTED valid_lft 604778sec preferred_lft 604778sec inet6 fe80::9257:5654:b211:8dea/64 scope link noprefixroute valid_lft forever preferred_lft forever 7: enp5s0f0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000 link/ether 00:15:17:59:96:44 brd ff:ff:ff:ff:ff:ff 8: enp5s0f1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000 link/ether 00:15:17:59:96:45 brd ff:ff:ff:ff:ff:ff 11: wwp0s29f7u1i4: <POINTOPOINT,MULTICAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/none Furthermore, systemctl status NetworkManager says: systemctl status NetworkManager ● NetworkManager.service - Network Manager Loaded: loaded (/usr/lib/systemd/system/NetworkManager.service; enabled; vendor preset: enabled) Active: active (running) since Mon 2020-09-21 17:25:21 CEST; 17h ago Docs: man:NetworkManager(8) Main PID: 1752062 (NetworkManager) Tasks: 3 (limit: 204496) Memory: 8.2M CGroup: /system.slice/NetworkManager.service └─1752062 /usr/sbin/NetworkManager --no-daemon NetworkManager[1752062]: <info> [1600751941.1341] agent-manager: agent[0047d0145168a5f3,:1.4726/nmcli-connect/0]: agent registered NetworkManager[1752062]: <info> [1600751941.1360] device (eno4): Activation: starting connection 'eno4' (dbd95c24-1ed7-4292-8dba-3934bd1476a0) NetworkManager[1752062]: <info> [1600751941.1361] audit: op="connection-activate" uuid="dbd95c24-1ed7-4292-8dba-3934bd1476a0" name="eno4" pid=31215> NetworkManager[1752062]: <info> [1600751941.1363] device (eno4): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed') NetworkManager[1752062]: <info> [1600751941.1371] device (eno4): state change: prepare -> config (reason 'none', sys-iface-state: 'managed') NetworkManager[1752062]: <info> [1600751941.1523] device (eno4): state change: config -> ip-config (reason 'none', sys-iface-state: 'managed') NetworkManager[1752062]: <info> [1600751941.1552] device (eno4): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'managed') NetworkManager[1752062]: <info> [1600751941.1582] device (eno4): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'managed') NetworkManager[1752062]: <info> [1600751941.1586] device (eno4): state change: secondaries -> activated (reason 'none', sys-iface-state: 'managed') NetworkManager[1752062]: <info> [1600751941.1637] device (eno4): Activation: successful, device activated. This behaviour is really! unwanted. What is the reason for this behavior. Packages like keepalived or ctdb are not installed on this machine. Any help is appreciated how to figure out the reason for this behavior. Thanks in advance. Felix

4 9

Chromium 85 does not load any pages
by H 24 Sep '20

24 Sep '20

I just upgraded chromium on my CentOS 7 system and ended up with nothing loading. I tried to downgrade using yum downgrade chromium but there does not seem to be an older version on my system, nor does EPEL seem to have version 84 which is what I ran before. First, does anyone know why chromium 85 does not load /anything/? Firefox runs fine. Second, why is chromium 84 not available in EPEL? Thanks.

4 8

ZFS and encryption on CentOS 7
by H 23 Sep '20

23 Sep '20

Can I ask what the prevailing opinion is on ZFS and encryption on CentOS 7? Is encryption in ZFS stable? If so, I would use it on a new naked drive I just added. If not, I might stick with LUKS and XFS for now. The drive is a 2 Tb SSD. Thanks.

1 0

Forefox on C7 - uses wrong program to view download folder
by Gary Stainburn 23 Sep '20

23 Sep '20

I've got a C7 laptop using the default repo's (installed plus epel). My firefox has decided to use the wrong program to view the downloads folder. If I download and save a file, then click on the Downloads icon and click on view folder containing the file, it opens the MP3 editor EasyTag instead of Dolphin or Konquror. How do I change it back.

1 0

A Request to Add module to CentOS Linux (3.10.0-1127.18.2.el7.x86_64) 7 (Core)
by Dedoep 22 Sep '20

22 Sep '20

Hello, Is it possible to add the mac802154_hwsim module to CentOS Linux (3.10.0-1127.18.2.el7.x86_64) 7 (Core), so that its part of the OS? Thanks Dan

5 9

iptables & voip
by Gregory P. Ennis 22 Sep '20

22 Sep '20

Everyone, I would like to use our gateway linux machine to give bandwidth preference to voip udp packets. Can anyone point me to a tutorial about the use of voip and iptables? I usually prefer to use iptables instead of firewalld. iptables is more intuitive, and easier to understand. Thanks much!!! Greg Ennis

2 1

CentOS Linux updates released (RSS Feeds)
by Johnny Hughes 21 Sep '20

21 Sep '20

As you may or may not know, we do not have the ability to currently announce CentOS Linux 8 announcements on the CentOS Annonuce Mailing List. We would like to add this in the future. For now, what we do have is an RSS feed for all updates that get released. Use your favorite RSS Feed Tool (I use Thunderbird .. lots of other things available). https://feeds.centos.org/ Subscribe to the xml file you are interested in .. for example, for normal CentOS Linux 8 x86_64 arch installs .. you would subscribe to: https://feeds.centos.org/centos-8-x86_64-BaseOS.xml https://feeds.centos.org/centos-8-x86_64-AppStream.xml This is for people who have asked about what rpms are updated and how to see when new updates happen on CentOS Linux 8. But it works for all versions of CentOS (There are xml files for all repos of CentOS Linxui 6. 7, and 8 .. Also CentOS Stream). Thanks, Johnny Hughes

2 1

CentOS 8 LSI SAS2004 Driver
by William Markuske 20 Sep '20

20 Sep '20

Hello, I've recently been given domain over a number of supermicro storage servers using Broadcom / LSI SAS2004 PCI-Express Fusion-MPT SAS-2 [Spitfire] (rev 03) to run a bunch of SSDs. I was attempting to do fresh installs of CentOS 8 and have come to find out that RedHat deprecated support for a number of HBAs for 8 including all running the SAS2004 chip. Does anyone know if there is a driver available for this chip from a third party repo? My google searches have led me to believe that EPEL 8 has a kmod-mpt3sas package but it does not seem to exist though multiple blogs have stated otherwise. If anyone knows if there is a solution for CentOS 8 that would be great or if I have to roll back to CentOS 7 for card support. Thanks, William

5 8

Drive failed in 4-drive md RAID 10
by Kenneth Porter 20 Sep '20

20 Sep '20

I got the email that a drive in my 4-drive RAID10 setup failed. What are my options? Drives are WD1000FYPS (Western Digital 1 TB 3.5" SATA). mdadm.conf: # mdadm.conf written out by anaconda MAILADDR root AUTO +imsm +1.x -all ARRAY /dev/md/root level=raid10 num-devices=4 UUID=942f512e:2db8dc6c:71667abc:daf408c3 /proc/mdstat: Personalities : [raid10] md127 : active raid10 sdf1[2](F) sdg1[3] sde1[1] sdd1[0] 1949480960 blocks super 1.2 512K chunks 2 near-copies [4/3] [UU_U] bitmap: 15/15 pages [60KB], 65536KB chunk smartctl reports this for sdf: 197 Current_Pending_Sector 0x0012 200 200 000 Old_age Always - 1 198 Offline_Uncorrectable 0x0010 200 200 000 Old_age Offline - 6 So it's got 6 bad blocks, 1 pending for remapping. Can I clear the error and rebuild? (It's not clear what commands would do that.) Or should I buy a replacement drive? I'm considering a WDS100T1R0A (2.5" 1TB red drive), which Amazon has for $135, plus the 3.5" adapter. The system serves primarily as a home mail server (it fetchmails from an outside VPS serving as my domain's MX) and archival file server.

2 4

storage for mailserver
by Michael Schumacher 19 Sep '20

19 Sep '20

hi, I am planning to replace my old CentOS 6 mail server soon. Most details are quite obvious and do not need to be changed, but the old system was running on spinning discs and this is certainly not the best option for todays mail servers. With spinning discs, HW-RAID6 was the way to go to increase reliability and speed. Today, I get the feeling, that traditional RAID is not the best option for SSDs. I am reading that all RAID members in SSD-arrays age synchronously so that the risk of a massive failure of more than one disk is more likely than with HDDs. There are many other concerns like excessive write load compared to non-raid systems, etc. Is there any common sense what disk layout should be used these days? I have been looking for some kind of master-slave system, where the (one or many) SSD is taking all writes and reads, but the slave HDD runs in parallel as a backup system like in a RAID1 system. Is there any such system? Any thoughts? best regards Michael Schumacher

8 10

Re: [CentOS] Drive failed in 4-drive md RAID 10
by Jon Pruente 18 Sep '20

18 Sep '20

On Fri, Sep 18, 2020 at 3:20 PM Kenneth Porter <shiva(a)sewingwitch.com> wrote: > Thanks. That reminds me: If I need to replace it, is there some easy way > to > figure out which drive bay is sdf? It's an old Supermicro rack chassis > with > 6 drive bays. Perhaps a way to blink the drive light? > It's easy enough with dd. Be sure it's the drive you want to find then put dd if=/dev/sdf of=/dev/null into a shell, but don't run it. Look at the drives and hit enter and watch for which one lights up. Then ^c while watching to be sure the light turns off exactly when you hit it.

1 0

Re: [CentOS] Drive failed in 4-drive md RAID 10
by Michael Schumacher 18 Sep '20

18 Sep '20

Hi, > Thanks. That reminds me: If I need to replace it, is there some easy way to > figure out which drive bay is sdf? # smartctl -all /dev/sdf will give you the serial number if the drive. That will be printed on the disk label. But you still have to shut down your machine and pull all drives to find it. best regards --- Michael Schumacher

1 0

Newer versoin of tar 1.26 on Centos 7
by Klaus Kolle 16 Sep '20

16 Sep '20

Is it possible to find a repository that hold a newer version of tar. The current version is 1.26 I have some students trying to build Yocto project on my Centos 7 host, but OpenEmbedded reports incompatibility problems with the current version of tar. I thank you on beforehand for any help. |< -- Med venlig hilsen Klaus Kolle Teknikumingeniør, B.Sc.EE., e-mail : klaus(a)kolle.dk Master of IT www : www.kolle.dk Asger Jorns Vej 17 Telephone : +4522216044 DK-8600 Silkeborg, Denmark "Man skal ikke tilskrive til sammensværgelser hvad der tilstrækkeligt kan forklares af inkompetence" Poul Henning Kamp Planlægning er tanker om noget man agter at gøre en gang i fremtiden, hvis omstændighederne tillader det. Klaus Kolle 2006 Perfection is achieved not when nothing more to add, but when there is nothing more left to take away. Antoine de Saint-Exupery

3 3

how to restore deleted directory/files
by qw 16 Sep '20

16 Sep '20

Hi, I remove one directory by running rm -fr ./some-dir. How to restore the directory and its files in the directory? Thanks! Regards Andrew

4 6

Problems with x2go
by Stefano Simonucci 16 Sep '20

16 Sep '20

I have installed x2goserver on a Centos8 server. Yesterday, after the installation I was able to connect by means of x2go. Today I get the following error ( /var/log/messages) /usr/bin/x2gostartagent[2677]: no free display number available, cannot start new session. Has anyone had the same problem? Thanks. Bye Stefano

5 5

CentOS-announce Digest, Vol 187, Issue 2
by centos-announce-request＠centos.org 15 Sep '20

15 Sep '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:3643 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 2. CESA-2020:3631 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 3. CESA-2020:3617 Important CentOS 7 dovecot Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 14 Sep 2020 14:38:01 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:3643 Important CentOS 6 thunderbird Security Update Message-ID: <20200914143801.GA21973(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:3643 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:3643 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 558cb4cec9d65b7140f56dc518d58ae6ceafc230ccdda0bd2b5b937d61115ce2 thunderbird-68.12.0-1.el6.centos.i686.rpm x86_64: 5ed3d21f20ebd7146936e4bfd6b106b2b76d0414e2e7a3040ab2f10a355c5bc8 thunderbird-68.12.0-1.el6.centos.x86_64.rpm Source: c1cd84a7a4d24026aea19059ea99c3f5129175b17de8e12f0836301f24220f10 thunderbird-68.12.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 14 Sep 2020 14:38:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:3631 Important CentOS 7 thunderbird Security Update Message-ID: <20200914143851.GA22114(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:3631 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:3631 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: eee32b147df145f7043c9e9f6bff219b5b7baee07773c613dda73a937fecb1ec thunderbird-68.12.0-1.el7.centos.x86_64.rpm Source: 47a72b65f6b7fd85d69531a9fa992423075b3d355f2557dad453df8e506b9b1d thunderbird-68.12.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 14 Sep 2020 14:40:04 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:3617 Important CentOS 7 dovecot Security Update Message-ID: <20200914144004.GA22310(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:3617 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:3617 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 6ce4ad3c854d89718c469df1d4f7aeac6a8434556118275bb4b324847dcc6b1f dovecot-2.2.36-6.el7_8.1.i686.rpm e391cbeba08b1519396239fcb00b50bb663881d27aa8031ba222df613dce2159 dovecot-2.2.36-6.el7_8.1.x86_64.rpm 43b14f32642d28cb2b456d2c10d7d41b98a6a61b92d5253d53947fa632c0865e dovecot-devel-2.2.36-6.el7_8.1.x86_64.rpm a86f968d5072fb2464dd3095f2b48710970d6b1f5d3c83d008ed4a0bfcb9e54e dovecot-mysql-2.2.36-6.el7_8.1.x86_64.rpm ace8e5be7f1920a9fdea7a76700ad4a8c228f900df17c1d6faa46853d978e9cf dovecot-pgsql-2.2.36-6.el7_8.1.x86_64.rpm 72d08ad4f4c6d877481367326333c5adac6be70cf4cef41f54cb4d48736681ce dovecot-pigeonhole-2.2.36-6.el7_8.1.x86_64.rpm Source: bf4ea5803ec61ca57f4908afec4a403fc6ad7482010cc2a73596600201d49e6f dovecot-2.2.36-6.el7_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 187, Issue 2 ***********************************************

1 0

Re: [CentOS] erasing a disk
by david 14 Sep '20

14 Sep '20

At 01:34 PM 9/14/2020, you wrote: >what if you just dd the first 1GB of the disk and the last GB of the disk >(the last because of RAID signatures of some controllers that write to the >end of the disk) >Look at this article and modify accordingly >https://zedt.eu/tech/linux/using-dd-to-repeatedly-erase-a-specific-range-of… > >Also, use wipefs -a (Gordon Messmer answered faster than me) > >On Mon, Sep 14, 2020 at 3:18 PM david <david(a)daku.org> wrote: > > > Folks > > > > I've encountered situations where I want to reuse a hard-drive. I do > > not want to preserve anything on the drive, and I'm not concerned > > about 'securely erasing' old content. I just want to be able to > > define it as an Physical Volume (in a logical volume set), or make it > > a ZFS disk, or sometimes make it a simple EXT3, ExFAT or NTFS > > disk. However, old 'signatures' get in the way and Linux sometimes > > refuses to let me proceed. I know that a fool-proof solution is to > > use the "dd if=/dev/zero bs=32768 oflag=direct" on the disk, but when > > we're talking USB-connected hard drives of 8 TB, that's an operation > > that can take days. > > > > The disk in question might even have been corrupted. This would make > > using 'zpool destroy' to clear out a ZFS disk, or > > > > I've tried erasing the first megabyte of the disk, but there are ZFS > > or LVM structures that get in the way. So, does anyone have an > > efficient way to erase structures from a disk such that it can be reused? > > > > Something like > > -erase first N blocks (block defined as 4096) > > - Erase <number> blocks starting at block <number> > > - erase last <number> blocks > > > > At least such an algorithm would be quicker than erasing 8 TB of data. > > > > David > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > https://lists.centos.org/mailman/listinfo/centos > > Thanks for the suggestion. "wipefs" looks like the right answer. David

1 0

erasing a disk
by david 14 Sep '20

14 Sep '20

Folks I've encountered situations where I want to reuse a hard-drive. I do not want to preserve anything on the drive, and I'm not concerned about 'securely erasing' old content. I just want to be able to define it as an Physical Volume (in a logical volume set), or make it a ZFS disk, or sometimes make it a simple EXT3, ExFAT or NTFS disk. However, old 'signatures' get in the way and Linux sometimes refuses to let me proceed. I know that a fool-proof solution is to use the "dd if=/dev/zero bs=32768 oflag=direct" on the disk, but when we're talking USB-connected hard drives of 8 TB, that's an operation that can take days. The disk in question might even have been corrupted. This would make using 'zpool destroy' to clear out a ZFS disk, or I've tried erasing the first megabyte of the disk, but there are ZFS or LVM structures that get in the way. So, does anyone have an efficient way to erase structures from a disk such that it can be reused? Something like -erase first N blocks (block defined as 4096) - Erase <number> blocks starting at block <number> - erase last <number> blocks At least such an algorithm would be quicker than erasing 8 TB of data. David

7 7

Auditd NETFILTER_PKT record missing src port, dst port
by Akshar Kanak 14 Sep '20

14 Sep '20

Dear team The auditd log for NETFILTER_PKT event does not contain the src port , desination port , in and out interface . Has it been removed permanently ( https://patchwork.kernel.org/patch/9638183/) or can it be enabled by some configuration by auditctl ? centos version : CentOS Linux release 7.6.1810 (Core) out kernel version : Linux version 3.10.0-1127.8.2.el7.x86_64 ( mockbuild(a)kbuilder.bsys.centos.org) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC) ) #1 SMP Tue May 12 16:57:42 UTC 2020 Thanks and regards Akshar

1 0

"Not using downloaded epel/repomd.xml"
by Nicolas Kovacs 14 Sep '20

14 Sep '20

Hi, I'm regularly getting spammed by my own servers, with the following message: /etc/cron.hourly/0yum-hourly.cron: Not using downloaded epel/repomd.xml because it is older than what we have: Current : Sat Sep 12 19:05:04 2020 Downloaded: Thu Sep 10 19:12:19 2020 How can I make this nonsense stop? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 2

Re: [CentOS] Server entering Emergency Shell, but continues fine after pressing Enter
by Gordon Messmer 12 Sep '20

12 Sep '20

On 9/12/20 1:04 PM, Quinn Comendant wrote: > [root@myhost ~] systemctl status initrd-switch-root.service > ● initrd-switch-root.service - Switch Root > Loaded: loaded (/usr/lib/systemd/system/initrd-switch-root.service; static; vendor preset: disabled) > Active: failed (Result: signal) since Sat 2020-09-12 19:41:13 UTC; 17min ago > Process: 204 ExecStart=/usr/bin/systemctl --no-block --force switch-root /sysroot (code=killed, signal=TERM) Ah, this seems to be a known issue with the update to 7.8: https://access.redhat.com/solutions/4973191 The initrd contains an old systemd binary, and should be rebuilt. The replacement initrd will have an updated binary: |# cp /boot/initramfs-*.x86_64.img /root ||# dracut --force --regenerate-all| ||

1 0

Re: [CentOS] Server entering Emergency Shell, but continues fine after pressing Enter
by Gordon Messmer 12 Sep '20

12 Sep '20

On 9/12/20 1:04 PM, Quinn Comendant wrote: > I don't see any errors from `systemctl status initrd-parse-etc.service` or > `journalctl -b 0` (I've pasted the full output here:https://write.as/at21opjv3o9fin1t.txt) I see errors in the journalctl output. Look into these: Sep 12 19:41:12 myhost systemd-vconsole-setup[84]: /usr/bin/setfont failed with error code 71. Sep 12 19:41:12 myhost systemd-vconsole-setup[84]: ................... Sep 12 19:41:12 myhost systemd-vconsole-setup[84]: setfont: putfont: 512,8x16: failed: -1 Sep 12 19:41:12 myhost systemd-vconsole-setup[84]: putfont: PIO_FONT: Invalid argument Sep 12 19:41:12 myhost systemd-vconsole-setup[117]: /usr/bin/setfont failed with error code 71. Sep 12 19:41:13 myhost systemd[1]: [/etc/systemd/system.conf:15] Unknown lvalue 'TimeoutSec' in section 'Manager' The former errors might be normal on a system with no VGA, and you mentioned seeing this over serial. Do you see those errors on systems that boot normally? Do any of those system share a hardware configuration with the system that doesn't? The latter error seems more likely to be the cause of the emergency shell, but that's a guess.

2 1

Server entering Emergency Shell, but continues fine after pressing Enter
by Quinn Comendant 12 Sep '20

12 Sep '20

Hello all, I've got an odd problem that doesn't seem to be mentioned anywhere. I have several identical CentOS 7 servers (GCE instances). I recently ran `yum update` and rebooted all of them. All the servers came back fine except one. I opened a connection to the serial console of the broken server, and was greeted with this prompt: … Cannot open access to console, the root account is locked. See sulogin(8) man page for more details. Press Enter to continue. I pressed Enter, and the boot process continued successfully! Just to test, I restarted the server again, and the same thing happened: I had to manually log in to the console and press Enter before it would complete the boot process. No other step was required. I also tried creating a snapshot of the disk, and booted a new VM with a boot disk imaged from the snapshot. The same problem occurred, pressing Enter was all that was required. Earlier in the boot log, it shows "Started Emergency Shell", which is why there was a "Press Enter" prompt. The error that the "root account is locked" isn't the issue; the root account is locked on all our servers. So, in summary: something is causing the server to enter an Emergency Shell, but continues successfully after pressing Enter. That's odd because if Emergency Shell is loaded, usually something more serious is happening and requires more actions to get the server to boot. Anybody have any idea what could be causing this? I don't see any significant errors in the boot log, but I would appreciate if anyone has a moment to help me look for issues. Here's a copy of the serial console boot log – you can find the "Press Enter to continue" on line 536: https://write.as/dwuts24dcw6yh0kf.txt Thanks! Quinn

5 9

Thunderbird won't start after move to new box
by Gary Stainburn 12 Sep '20

12 Sep '20

I've tried moving my Thunderbird profile from one C7 box, a standard PC to another C7 box, a DELL server. I did this by rsync'ing ~/.thunderbird. However, on the new box, Thunderbird only starts if I run it -safe-mode. If I don't run it in safe mode I see the window flash up and instantly close. No errors or notifications appear in the terminal window., Anyone got suggestions on what could be wrong, or how I can diagnose it? Google just seems to bring up hits for problems on Windows boxes.

4 3

rpm spec:: Requires conditions format :: lower not working
by Adrian Sevcenco 08 Sep '20

08 Sep '20

Hi! I'm trying to give a range of versions for a dependency in the form of : Requires: xrootd-server >= 4.1.0 Requires: xrootd-server < 5.0.0 with the already installed package having the versions: [rpmbuild@el7build SPECS]$ rpm -qa --queryformat '%{name} %{version}\n' | grep xrootd | sort xrootd 4.12.2 xrootd-client 4.12.2 xrootd-client-devel 4.12.2 xrootd-client-libs 4.12.2 xrootd-devel 4.12.2 xrootd-libs 4.12.2 xrootd-private-devel 4.12.2 xrootd-selinux 4.12.2 xrootd-server 4.12.2 xrootd-server-devel 4.12.2 xrootd-server-libs 4.12.2 when i'm trying to build i get: error: Failed build dependencies: xrootd-devel < 5.0.0 is needed by xrootd-alicetokenacc-1:1.3.1-2.el7.x86_64 xrootd-server-devel < 5.0.0 is needed by xrootd-alicetokenacc-1:1.3.1-2.el7.x86_64 Does anyone have any idea why the condition is not fulfilled? i am aware of both http://ftp.rpm.org/api/4.4.2.2/dependencies.html and http://ftp.rpm.org/api/4.4.2.2/rpmvercmp_8c-source.html (under assuption that these holds true for the current 4.11.3 from centos 7) Thanks a lot! Adrian

1 0

Plasma problem with numeric keypad
by Alessandro Baggi 08 Sep '20

08 Sep '20

Hi list, I'm running CentOS 8.2 with Plasma from EPEL and I noticed that I have problem using numeric keypad of my keyboard when using plasma application like Konsole, Kcalc, Konqueror and all application of Plasma. Using Firefox, Thunderbird, xterm, Libreoffice all works as expected. So this problem is related to Plasma application. I noticed the same problem on sddm login. I noticed that to make the numeric keypad to work I need to press SHIFT+NUMKEY. I tried to manage Plasma keyboard configuration but nothing worked. I tried my keyboard on other PC and distro but the problem does not occour. I should try this using GNOME or XFCE but being a KDE user I would avoid to install the others. There is a way to solve this problem? Thank you in advance. Alessandro.

1 1

Conversion from Centos 5 to Centos 7 & mailx changes
by Gregory P. Ennis 07 Sep '20

07 Sep '20

Everyone, I have just upgraded a Centos 5 server to a Centos 7 server and am having difficulty with a change of behavior of mailx with the use of a command line of : mail -s 'This is the subject' user(a)domain.com < text_file.txt On Centos 5 when mailx was used by a program started by a cron job we were able to send a text file as an email message and the headers did not contain 'Content-Transfer-Encoding: base64' On Centos 7 the headers contain 'Content-Transfer-Encoding: base64' and when the client gets the e-mail they are unable to open it up. The interesting thing is that on Centos 7 when the command line is used by typing the above command 'Content-Transfer-Encoding: 7bit' is placed in the header and the client can see the e-mail without a problem. I have looked for a way to control the 'Content-Transfer-Encoding:' header to '7bit' when we use a cron job, but I have not been able to figure out how. Your suggestions would be appreciated. Thank you, -- Greg Ennis

3 5

ansible: which repo?
by Leon Fauster 06 Sep '20

06 Sep '20

What would you recommend: ansible is in EPEL8 and ConfigSIG. For the latter I do not see any sources in git.centos.org. Where they come from? I wonder with which repository I should use (long term)? dnf not checking gpg signature sounds scary: https://github.com/ansible/ansible/blob/v2.9.13/changelogs/CHANGELOG-v2.9.r… -- Leon

2 2

rdesktop to xrdp session closed after login
by Ralf Prengel 03 Sep '20

03 Sep '20

Hallo, since one of my last updates rdesktop from windows 7 oder 10 to xrdp on centos 7 doesn t work any longer. The xfce4 screens appears for a second and than the session is closed again. I don‘t find any hints in the logs. Thanks for some hints. Ralf

1 0

Updating ca-certificates
by isdtor 03 Sep '20

03 Sep '20

This is probably a stupid question: what is the correct way to update certificates if one has installed additional certs with update-ca-trust and the distro releases a new version of ca-certificates?

1 0

Tracking or checking backported kernel patches from upstream
by Carlos A. Carnero Delgado 02 Sep '20

02 Sep '20

Hi! I'm interested in finding out if a couple of upstream kernel patches were backported into CentOS (RHEL), in particular this one <https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?…> and this one <https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?…> . What's the procedure? After reading an article <https://www.redhat.com/en/blog/what-backporting-and-how-does-it-apply-rhel-…>, I went into Red Hat's bugzilla, and tried several search terms (including the kernel's commit ID) but found nothing. Thanks!

3 3

changing subscribed email address?
by Fred Smith 02 Sep '20

02 Sep '20

hi! I'm going to move soonand will lose this email address, so I'm going around all my various sbuscriptions changing the subscribed email address. But I don't see how to do that for the CentOS lists, other than perhaps to unsubscribe then re-subscribe. Can anyone out enlighten me? Thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

4 5

EL8: rebased firefox dumped core
by Leon Fauster 02 Sep '20

02 Sep '20

EL8: Since the new update of firefox (rebased), I get a lot of coredumps while playing videos. Anyone experiencing the same? Aug 30 16:44:05 work.localdomain systemd-coredump[27017]: Process 21016 (firefox) of user 1006 dumped core. Stack trace of thread 21016: #0 0x00007f9f09137c6f raise (libpthread.so.0) #1 0x00007f9ef7dd7578 _ZN13nsProfileLock18FatalSignalHandlerEiP9siginfo_tPv (libxul.so) #2 0x00007f9ef85a50f2 _ZL15WasmTrapHandleriP9siginfo_tPv (libxul.so) #3 0x00007f9f09137dd0 __restore_rt (libpthread.so.0) #4 0x00007f9f05ab94c1 gdk_event_free (libgdk-3.so.0) #5 0x00007f9f061358f9 gtk_drag_drop_finished (libgtk-3.so.0) #6 0x00007f9f06135add gtk_drag_abort_timeout (libgtk-3.so.0) #7 0x00007f9f05aad8bc gdk_threads_dispatch (libgdk-3.so.0) #8 0x00007f9f02eb6141 g_timeout_dispatch (libglib-2.0.so.0) #9 0x00007f9f02eb567d g_main_context_dispatch (libglib-2.0.so.0) #10 0x00007f9f02eb5a48 g_main_context_iterate.isra.21 (libglib-2.0.so.0) #11 0x00007f9f02eb5ae0 g_main_context_iteration (libglib-2.0.so.0) #12 0x00007f9ef6f46eb0 _ZN10nsAppShell22ProcessNextNativeEventEb (libxul.so) #13 0x00007f9ef6f02406 _ZN14nsBaseAppShell24DoProcessNextNativeEventEb (libxul.so) #14 0x00007f9ef6f0259e _ZN14nsBaseAppShell18OnProcessNextEventEP17nsIThreadInternalb (libxul.so) #15 0x00007f9ef4a457ff _ZN8nsThread16ProcessNextEventEbPb (libxul.so) #16 0x00007f9ef4a4445c _Z19NS_ProcessNextEventP9nsIThreadb (libxul.so) #17 0x00007f9ef4f6abe0 _ZN7mozilla3ipc11MessagePump3RunEPN4base11MessagePump8DelegateE (libxul.so) #18 0x00007f9ef4f33099 _ZN11MessageLoop3RunEv (libxul.so) #19 0x00007f9ef6efeaac _ZN14nsBaseAppShell3RunEv (libxul.so) #20 0x00007f9ef7d38a03 _ZN12nsAppStartup3RunEv (libxul.so) #21 0x00007f9ef7de851a _ZN7XREMain11XRE_mainRunEv (libxul.so) #22 0x00007f9ef7de91ba _ZN7XREMain8XRE_mainEiPPcRKN7mozilla15BootstrapConfigE (libxul.so) #23 0x00007f9ef7de93ca _Z8XRE_mainiPPcRKN7mozilla15BootstrapConfigE (libxul.so) #24 0x0000560fc01b33e1 _ZL7do_mainiPPcS0_ (firefox) #25 0x0000560fc01b279a main (firefox) #26 0x00007f9f082536a3 __libc_start_main (libc.so.6) #27 0x0000560fc01b2bce _start (firefox)

2 2

How to Migrate Wordpress Website from 32-bit CentOS Linux 6.3 to 64-bit CentOS Linux 8.2 (2004)
by Turritopsis Dohrnii Teo En Ming 02 Sep '20

02 Sep '20

Subject: How to Migrate Wordpress Website from 32-bit CentOS Linux 6.3 to 64-bit CentOS Linux 8.2 (2004) Author of this Guide: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL) Country: Singapore Date: 31 August 2020 Monday Singapore Time Type of Publication: Plain Text Document Version: 20200831.01 SECTION 1 Information Gathering Stage ===================================== Host operating system is Windows Server 2008 R2 Standard Host Processor: Intel Xeon CPU E5620 @ 2.40 GHz Host Memory: 24 GB RAM Old Oracle VirtualBox version is 4.1.18 Upgrade to Virtualbox version 6.1.12 (COMPLETED SUCCESSFULLY AFTER RESTARTING WINDOWS SERVER) Old CentOS Linux VM is version 6.3 (32-bit only) Old Apache web server version 2.2.15 Old MySQL database server version 5.1.61 Old PHP version 5.6.40 Interface eth0: AAA.BBB.CCC.3/24 (ifconfig) Gateway: AAA.BBB.CCC.2 (ip route) (Gateway is the next hop router which is also the Fortigate firewall) /etc/resolv.conf (for DNS Client): nameserver AAA.BBB.CCC.1 (This is the Windows Server with DNS Server role installed) How to login to OLD MySQL database server: mysql -u root -p Old hostname: centos63.teo-en-ming-corp.com Old Virtual Machine Settings ============================ 4 GB RAM, 2 processors, 20 GB storage, network adapter: bridged to broadcom bcm5709c NEW Virtual Machine Settings ============================ 4 GB RAM, 4 processors, 100 GB storage, network adapter: bridged to broadcom bcm5709c After using Advanced IP scanner and checking DHCP scope in Microsoft DHCP server in Windows Server, Unused IP address: AAA.BBB.CCC.4 (Use this IP address for new CentOS 8.2 Linux VM) SECTION 2 Installation of NEW CentOS 8.2 Linux Virtual Machine ============================================================== New Hostname: centos82.teo-en-ming-corp.com NEW IP: AAA.BBB.CCC.4 Subnet mask: 255.255.255.0 (Class C) Gateway: AAA.BBB.CCC.2 DNS1: 8.8.8.8 Problem ======= CentOS 8.2 Linux 64-bit will not start and run because VirtualBox is too old (version 4.1.18). Intel Virtualization and VT-d already enabled in server BIOS previously. So running 64-bit virtual machines is not an issue. Solution ======== After upgrading to VirtualBox 6.1.12, CentOS 8.2 Linux 64-bit is able to start and run. SECTION 3 Generate a Backup of ALL Databases in the Old VM =========================================================== Reference Guide: How to backup and restore MySQL databases using the mysqldump command Link: https://www.sqlshack.com/how-to-backup-and-restore-mysql-databases-using-th… Reference Guide: How to Show Users in MySQL using Linux Link: https://www.hostinger.com/tutorials/mysql-show-users/ # cd /root # mysqldump -u root -p --all-databases > all-databases-20200829.sql # du -h all-databases-20200829.sql 70M all-databases-20200829.sql SECTION 4 Disable SELinux (Security Enhanced Linux) =================================================== You MUST disable SELinux, otherwise Apache web server will not work. If you DO NOT want to disable SELinux, you must be an expert in SELinux to configure SELinux. # nano /etc/selinux/config SELINUX=disabled # reboot SECTION 5 Disable firewalld Software Firewall ============================================= Because already protected by Fortigate firewall at the perimeter. # systemctl disable firewalld # reboot SECTION 6 LAMP (Linux, Apache, MySQL and PHP) Installation ========================================================== I will be installing Apache web server 2.4.37-21, MariaDB server 3:10.3.17-1, PHP 7.2.24-1 and OpenSSL 1:1.1.1c-15 in 64-bit CentOS Linux 8.2 (2004). Sub-Section on Installing Apache Web Server =========================================== # dnf install php php-fpm php-gd You *MUST* install php-gd, otherwise Apache Web Server cannot execute PHP scripts. # dnf install httpd # systemctl enable httpd # systemctl start httpd [root@centos82 ~]# ps -ef | grep httpd root 33214 1 0 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND apache 33351 33214 0 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND apache 33352 33214 1 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND apache 33355 33214 1 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND apache 33357 33214 0 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND root 36374 7368 0 22:03 pts/0 00:00:00 grep --color=auto httpd On the OLD CentOS 6.3 server: # cd /etc/httpd # tar cfvz apacheconf.tar.gz conf conf.d # mv apacheconf.tar.gz /root On the NEW CentOS 8.2 server: # cd /etc/httpd # cp -r conf conf.original # cp -r conf.d conf.d.original # scp root@AAA.BBB.CCC.3:/root/apacheconf.tar.gz . # tar xfvz apacheconf.tar.gz On the OLD CentOS 6.3 server: # cd /var/www/html # tar cfvz websites.tar.gz * (1.4 GB) On the NEW CentOS 8.2 server: # cd /var/www/html # scp root@AAA.BBB.CCC.3:/root/websites.tar.gz . # tar xfvz websites.tar.gz Continuing on the NEW CentOS 8.2 server ======================================= How to troubleshoot Apache web server ===================================== The following are TWO very important Linux troubleshooting commands. # systemctl status httpd (check the error Apache web server gives out) # httpd -t (for checking Apache web server configuration syntax) Make the following changes to /etc/httpd/conf/httpd.conf, as follows: Rationale for unloading modules here: The modules were already loaded in config files in another location /etc/httpd/conf.modules.d, so we disable in httpd.conf to avoid duplication. If there are duplication for loading modules, Apache web server cannot start. # # Dynamic Shared Object (DSO) Support # # To be able to use the functionality of a module which was built as a DSO you # have to place corresponding `LoadModule' lines at this location so the # directives contained in it are actually available _before_ they are used. # Statically compiled modules (those listed by `httpd -l') do not need # to be loaded here. # # Example: # LoadModule foo_module modules/mod_foo.so # #LoadModule auth_basic_module modules/mod_auth_basic.so #LoadModule auth_digest_module modules/mod_auth_digest.so #LoadModule authn_file_module modules/mod_authn_file.so #LoadModule authn_alias_module modules/mod_authn_alias.so #LoadModule authn_anon_module modules/mod_authn_anon.so #LoadModule authn_dbm_module modules/mod_authn_dbm.so #LoadModule authn_default_module modules/mod_authn_default.so #LoadModule authz_host_module modules/mod_authz_host.so #LoadModule authz_user_module modules/mod_authz_user.so #LoadModule authz_owner_module modules/mod_authz_owner.so #LoadModule authz_groupfile_module modules/mod_authz_groupfile.so #LoadModule authz_dbm_module modules/mod_authz_dbm.so #LoadModule authz_default_module modules/mod_authz_default.so #LoadModule ldap_module modules/mod_ldap.so #LoadModule authnz_ldap_module modules/mod_authnz_ldap.so #LoadModule include_module modules/mod_include.so #LoadModule log_config_module modules/mod_log_config.so #LoadModule logio_module modules/mod_logio.so #LoadModule env_module modules/mod_env.so #LoadModule ext_filter_module modules/mod_ext_filter.so #LoadModule mime_magic_module modules/mod_mime_magic.so #LoadModule expires_module modules/mod_expires.so #LoadModule deflate_module modules/mod_deflate.so #LoadModule headers_module modules/mod_headers.so LoadModule usertrack_module modules/mod_usertrack.so #LoadModule setenvif_module modules/mod_setenvif.so #LoadModule mime_module modules/mod_mime.so #LoadModule dav_module modules/mod_dav.so #LoadModule status_module modules/mod_status.so #LoadModule autoindex_module modules/mod_autoindex.so #LoadModule info_module modules/mod_info.so #LoadModule dav_fs_module modules/mod_dav_fs.so #LoadModule vhost_alias_module modules/mod_vhost_alias.so #LoadModule negotiation_module modules/mod_negotiation.so #LoadModule dir_module modules/mod_dir.so #LoadModule actions_module modules/mod_actions.so LoadModule speling_module modules/mod_speling.so #LoadModule userdir_module modules/mod_userdir.so #LoadModule alias_module modules/mod_alias.so #LoadModule substitute_module modules/mod_substitute.so #LoadModule rewrite_module modules/mod_rewrite.so #LoadModule proxy_module modules/mod_proxy.so #LoadModule proxy_balancer_module modules/mod_proxy_balancer.so #LoadModule proxy_ftp_module modules/mod_proxy_ftp.so #LoadModule proxy_http_module modules/mod_proxy_http.so #LoadModule proxy_ajp_module modules/mod_proxy_ajp.so #LoadModule proxy_connect_module modules/mod_proxy_connect.so #LoadModule cache_module modules/mod_cache.so #LoadModule suexec_module modules/mod_suexec.so #LoadModule disk_cache_module modules/mod_disk_cache.so LoadModule cgi_module modules/mod_cgi.so #LoadModule version_module modules/mod_version.so IncludeOptional conf.d/*.conf (Notice the use of OPTIONAL) Include conf.modules.d/*.conf (DEFAULT CONFIG FILES INSTALLED BY APACHE WEB SERVER 2.4.37) Install the Secure Sockets Layer (SSL) module for Apache web server # dnf install mod_ssl Make the following changes to /etc/httpd/conf.d/ssl.conf, as follows: #SSLMutex default (MUST be disabled) Transferring Public Key from OLD server to NEW server: # cd /etc/pki/tls/certs # scp root@AAA.BBB.CCC.3:/root/teo-en-ming-corp.crt . Transferring Private Key from OLD server to NEW server: # cd /etc/pki/tls/private/ # scp root@AAA.BBB.CCC.3:/root/teo-en-ming-corp.key . Install Python3 module for Apache web server: # dnf install python3-mod_wsgi Make the following changes to /etc/httpd/conf.d/wsgi.conf, as follows: LoadModule wsgi_module modules/mod_wsgi_python3.so Install the Perl module: # dnf install epel-release # dnf install mod_perl Make the following changes to /etc/httpd/conf.d/perl.conf, as follows: #LoadModule perl_module modules/mod_perl.so Because Perl module is already loaded in /etc/httpd/conf.modules.d/ Disable SSL virtual hosts for now (Our server will support only http and no https at the moment) # cd /etc/httpd/conf.modules.d/ # mv 00-ssl.conf 00-ssl.conf.original # cd /etc/httpd/conf.d # mv ssl.conf ssl.conf.1 Sub-Section on Installing MariaDB (MySQL) Database Server ========================================================= # dnf install mariadb-server # systemctl enable mariadb # systemctl start mariadb Reference Guide: How to Use SCP Command to Securely Transfer Files Link: https://linuxize.com/post/how-to-use-scp-command-to-securely-transfer-files/ Transfer backup of ALL databases from OLD server to NEW server: # scp root@AAA.BBB.CCC.3:/root/all-databases-20200829.sql . Restore ALL databases on NEW server: # mysql < all-databases-20200829.sql Login to MySQL (MariaDB): # mysql Check all MySQL users are imported: MariaDB [(none)]> select user from mysql.user; +------------------+ | user | +------------------+ | root | | | | root | | | | root | | aaa | | bbb | | ccc | +------------------+ 8 rows in set (0.001 sec) Sub-Section on Installing PHP 7.2 ================================= We WON'T be using PHP configuration from OLD CentOS 6.3 server: # /etc/httpd/conf.d # mv php.conf php.conf.63 Use the PHP configuration on NEW CentOS 8.2 server: # cp php.conf.rpmnew php.conf ERROR ENCOUNTERED ================= ERROR: Your PHP installation appears to be missing the MySQL extension which is required by WordPress Solution is found at: https://www.howtoforge.com/tutorial/centos-lamp-server-apache-mysql-php/ SOLUTION ======== MUST install php-mysqlnd # dnf install php-mysqlnd SECTION 7 Apache Web Server Virtual Hosts ========================================= /etc/httpd/conf/httpd.conf ### Section 3: Virtual Hosts # # VirtualHost: If you want to maintain multiple domains/hostnames on your # machine you can setup VirtualHost containers for them. Most configurations # use only name-based virtual hosts so the server doesn't need to worry about # IP addresses. This is indicated by the asterisks in the directives below. # # Please see the documentation at # <URL:http://httpd.apache.org/docs/2.2/vhosts/> # for further details before you try to setup virtual hosts. # # You may use the command line option '-S' to verify your virtual host # configuration. # # Use name-based virtual hosting. # #NameVirtualHost *:80 # # NOTE: NameVirtualHost cannot be used without a port specifier # (e.g. :80) if mod_ssl is being used, due to the nature of the # SSL protocol. # # # VirtualHost example: # Almost any Apache directive may go into a VirtualHost container. # The first VirtualHost section is used for requests without a known # server name. # #<VirtualHost *:80> # ServerAdmin webmaster(a)dummy-host.example.com # DocumentRoot /www/docs/dummy-host.example.com # ServerName dummy-host.example.com # ErrorLog logs/dummy-host.example.com-error_log # CustomLog logs/dummy-host.example.com-access_log common #</VirtualHost> #NameVirtualHost *:80 <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/Teo-En-Ming-Corp ServerName teo-en-ming-corp.com redirect permanent / http://www.teo-en-ming-corp.com </VirtualHost> <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/Teo-En-Ming-Corp ServerName www.teo-en-ming-corp.com RewriteEngine off <Directory /var/www/html/Teo-En-Ming-Corp/> AllowOverride All </Directory> <Location /> RewriteEngine on RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule !\.(js|ico|gif|jpg|png|css)$ /index.php </Location> </VirtualHost> <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/DonaldTrump ServerName donaldtrump.com.sg redirect permanent / http://www.donaldtrump.com.sg </VirtualHost> <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/DonaldTrump ServerName www.donaldtrump.com.sg RewriteEngine off <Location /> RewriteEngine on RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule !\.(js|ico|gif|jpg|png|css)$ /index.php </Location> </VirtualHost> #<VirtualHost *:80> # ServerAdmin ceo(a)teo-en-ming-corp.com # DocumentRoot /var/webmiln # ServerName centos.teo-en-ming-corp.com # redirect permanent / https://centos.teo-en-ming-corp.com:10000 #</VirtualHost> <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/Teo-En-Ming-Corp_old ServerName old.teo-en-ming-corp.com RewriteEngine off <Location /> RewriteEngine on RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule !\.(js|ico|gif|jpg|png|css)$ /index.php </Location> </VirtualHost> SECTION 8 .htaccess =================== /var/www/html/Teo-En-Ming-Corp/wp-admin/.htaccess: order deny,allow deny from all allow from AAA.BBB.CCC.DDD allow from AAA.BBB.CCC.DDD allow from AAA.BBB.CCC.DDD allow from AAA.BBB.CCC.DDD allow from AAA.BBB.CCC.DDD SECTION 9 FORTIGATE FIREWALL (STATIC NAT/PORT FORWARDING CONFIGURATION) ======================================================================= Create Virtual IPs for Static NAT/port forwarding. Edit Virtual IP =============== Name: Wordpress-Website Interface: Internet (wan1) Type: Static NAT External IP Address/Range: AAA.BBB.CCC.DDD - AAA.BBB.CCC.DDD Mapped IP Address/Range: AAA.BBB.CCC.4 - AAA.BBB.CCC.4 Optional Filters: No Port Forwarding: No Click OK. Then create IPv4 firewall polic(ies) from WAN1 to Internal using the created Virtual IP, allowing http, https, icmp, ssh, and/or other networking protocols as you wish. You may also use Security Profiles in Fortigate firewall as you wish: Antivirus Web Filter DNS Filter Application Control FortiClient Compliance SSL/SSH Inspection Web Rating Overrides Custom Signatures -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

9 8

OPENVPN setup in CentOS-6 NetworkManager
by Janos G. Komaromi 02 Sep '20

02 Sep '20

Hi, I need some help. I have CentOS-6 installed on an older 32bit desktop. The command su -c "openvpn --config foo.ovpn" works well, but would like to do it from NetworkManager. (1) If I try to import foo.ovpn then the certificate file references are not populated. If I try to select files extracted from foo.ovpn then the Private key file cannot be selected and therefore setup is aborted. (2) If I create a .conf file with appropriate entries then NetworkManager imports it fully, including the .pem key file. However, connection is timed out, connection fails. I researched Internet, RFM, permissions, SElinux, messages, etc. to no avail, so I request support. Do I miss a component? Where can I examine the NetworkManager log? Why the .pem key file is not selectable? I try this mailing list first - and thank you. Janos -- Janos G. Komaromi sent it NOT from iPhone nor Google facebook, instagram, viber, snapchat, twitter, #@*~| etc. - neither of those https://jgklinux.jankom.net/

1 0

CentOS-announce Digest, Vol 187, Issue 1
by centos-announce-request＠centos.org 02 Sep '20

02 Sep '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:3556 Important CentOS 7 firefox Security Update (Johnny Hughes) 2. CESA-2020:3558 Important CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 1 Sep 2020 15:15:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:3556 Important CentOS 7 firefox Security Update Message-ID: <20200901151514.GA12032(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:3556 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:3556 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 6d8bf16512d109e75893de1fd5c3fff8aa8557a12556eccd6e6c8fbfd7f184ad firefox-68.12.0-1.el7.centos.i686.rpm 843fb795c9bf323f16859c41219123409abcc114812537da012befe15091fbc3 firefox-68.12.0-1.el7.centos.x86_64.rpm Source: 729023af84d866521eaf2029c1b4cc75e623be9b70f6bfbdf518d431757f4315 firefox-68.12.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 1 Sep 2020 15:16:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:3558 Important CentOS 6 firefox Security Update Message-ID: <20200901151627.GA12204(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:3558 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:3558 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7aaf26cdf6b6fe4bbc989ca9afc2b9a52bbde92a1fc3718cd7ed90d5a5d0875b firefox-68.12.0-1.el6.centos.i686.rpm x86_64: 7aaf26cdf6b6fe4bbc989ca9afc2b9a52bbde92a1fc3718cd7ed90d5a5d0875b firefox-68.12.0-1.el6.centos.i686.rpm 49b77ef47320110d89f10574d0cc64337dd3e1d704e360de6c09081e8727841b firefox-68.12.0-1.el6.centos.x86_64.rpm Source: 2be4234b61c9ddbbee04f99bafb4118674334a1dd03cfd8fe2993eadbb594f49 firefox-68.12.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 187, Issue 1 ***********************************************

1 0

EL8: SElinux / dac_override / tmpwatch
by Leon Fauster 29 Aug '20

29 Aug '20

Hi, I'm moving some old stuff from EL6 to EL8 and one setup has a cron job which uses "tmpwatch -umc $dir" to clean some directories (/etc/cron.daily/tmpwatch). It seems that this triggers this AVC (SElinux mode is enforcing): type=AVC msg=audit(1598576896.772:4267): avc: denied { dac_override } for pid=11013 comm="tmpwatch" capability=1 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tclass=capability permissive=0 The tmpwatch exec line had "--force" before and I was hopping that this "capability" was the cause and deleted it but this night the AVC are still appearing. Is cron running in EL8 with stripped CAPs of? Does some one have an idea to address this? -- Thanks, Leon

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss