- Discuss - lists.centos.org

yum/dnf diff
by Kenneth Porter 10 Jun '20

10 Jun '20

I'm used to using "git diff" and "svn diff" to view changes in my development system. Is there a similar thing that works with changes between a repository package and the installed RPM? Ie. something that shows the changes in /etc hinted at by "rpm -V". I'm already using etckeeper+git but that would combine changes from updates with my own modifications. The only thing I've found so far is a rather manual procedure: <https://serverfault.com/questions/378439/getting-diffs-for-file-changes-det…>

7 14

Disabling fips mode in Centos 7.6
by Akshar Kanak 10 Jun '20

10 Jun '20

Dear team if i need to disable FIPS on Centos 7.6 , then setting fips=0 in kernel parameter should be more then sufficient . Why should we remove the dracut-fips package and regenerate the initramfs? Thanks and regards Akshar

1 0

Switching between keyboards in CentOS 7 using the MATE desktop
by H 09 Jun '20

09 Jun '20

I switch between three keyboards, two western ones and Chinese Pinyin entry. I have fcitx installed to switch between Pinyin and standard entry and use the keyboard switching in MATE to switch between keyboards. While I originally believed there was a bug in fcitx since switching between entry fields in firefox, chromium and thunderbird using the non-default keyboard always switched me back to the default keyboard, this even when hitting ENTER in a Chromium entryfield, I now believe the problem might lie in MATE or CentOS. There is no problem remembering whether a particular program is configured by me to use Pinyin input or not so that seems to work fine. Can anyone else confirm this issue? Might it be a configuration issue on my end? By the way, I use CTRL-SHIFT+RIGHT-SHIFT to switch between keyboards.

1 0

firewalld / iptables / nftables
by Leon Fauster 09 Jun '20

09 Jun '20

Despite that the migration of our applications comes with a significant workload. It seems that also every aspect of common services had changed with EL8. In EL8 firewalld uses nftables as backend. I wonder why iptables does not list any rules while also configured to use nftables as backend. # iptables -V iptables v1.8.2 (nf_tables) # firewall-cmd --list-all |egrep -o '22|ssh' ssh # nft list ruleset | egrep -o '22|ssh' ssh # iptables -L -n | egrep -o '22|ssh' <EMPTY> Any hints? -- Leon

4 4

Trying to get bride network on CentOS 7 working with virt-manager
by Jerry Geis 09 Jun '20

09 Jun '20

I have these interfaces listed. eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.1.8 netmask 255.255.252.0 broadcast 192.168.3.255 inet6 fe80::e2d5:5eff:fe63:abe5 prefixlen 64 scopeid 0x20<link> ether e0:d5:5e:63:ab:e5 txqueuelen 1000 (Ethernet) RX packets 42411243 bytes 4701898681 (4.3 GiB) RX errors 0 dropped 156 overruns 0 frame 0 TX packets 78372982 bytes 34946337897 (32.5 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 16 memory 0x92f00000-92f20000 virbr0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 inet 192.168.122.1 netmask 255.255.255.0 broadcast 192.168.122.255 ether 52:54:00:fc:34:af txqueuelen 1000 (Ethernet) RX packets 132792 bytes 337411780 (321.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 138593 bytes 742263806 (707.8 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 virbr1: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 inet 192.168.100.1 netmask 255.255.255.0 broadcast 192.168.100.255 ether 52:54:00:9c:39:02 txqueuelen 1000 (Ethernet) RX packets 206217 bytes 132308800 (126.1 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 105448 bytes 197008661 (187.8 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 virbr0-nic: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 ether 52:54:00:fc:34:af txqueuelen 1000 (Ethernet) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 When I bring up virt-manager, got settings for my VM, and for "Network Source" I select "Specify Shared Device Name" and I have tried the virbr0 and clicked apply and boot the machine. I get networking but not bridged networking - not a 192.168.1.X address. Is there something I missed ? Thanks, Jerry

2 2

Postfix restrictions
by Nicolas Kovacs 09 Jun '20

09 Jun '20

Hi, I'm currently fine-tuning my mail server (Postfix and Dovecot on CentOS 7). SPF, DKIM and DMARC work fine, now I'd like to limit the spam tsunami. Besides the official Postfix documentation, I've read a few articles about Postfix spam restrictions, namely these : https://www.linuxbabe.com/mail-server/block-email-spam-postfix https://wiki.centos.org/HowTos/postfix_restrictions After some experimenting, here's what I currently have on my test server: --8<----- /etc/postfix/main.cf ----------------------------- ... smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_helo_access hash:/etc/postfix/helo_access reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, check_sender_access hash:/etc/postfix/sender_access, reject_unknown_sender_domain, reject_unknown_reverse_client_hostname, reject_unknown_client_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/rbl_override, reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_reverse_client dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org, reject_rbl_client zen.spamhaus.org --8<-------------------------------------------------------- Before committing this configuration to my main server, I thought I'd share this configuration on the list. Maybe the Postfix gurus among you have the odd comment to make. My aim is simply to eliminate as much spam as possible (that is, before adding SpamAssassin) while keeping false positives to a minimum. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

6 6

EPEL repository: Failure to download metadata
by Jay Hart 08 Jun '20

08 Jun '20

Trying to install certbot, for Lets Encrypt certificate installation. How do I fix the below repo issue? I have not been successful tracking down this issue using google. [root@dream postfix]# yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm CentOS-8 - AppStream 0.0 B/s | 0 B 00:10 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream' [root@dream postfix]# ^C [root@dream postfix]# ls /etc/yum.repos.d/ CentOS-AppStream.repo CentOS-CR.repo CentOS-Extras.repo CentOS-Media.repo CentOS-Vault.repo CentOS-Base.repo CentOS-Debuginfo.repo CentOS-fasttrack.repo CentOS-PowerTools.repo CentOS-centosplus.repo CentOS-Devel.repo CentOS-HA.repo CentOS-Sources.repo [root@dream postfix]# dnf repolist CentOS-8 - AppStream 0.0 B/s | 0 B 00:25 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream' Thanks, Jay

1 2

Logitech webcam for use with CentOS 7
by H 08 Jun '20

08 Jun '20

I am thinking of buying a Logitech C920S Pro HD or C922 webcam for the necessary video conferencing. Is anyone using that with Zoom or perhaps with Jitsi? Do I need drivers? Any issues? Thank you.

7 6

live centos 8?
by Michael Hennebry 07 Jun '20

07 Jun '20

Is there a live centos 8? If so, where? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 3

perl-Curses in C8?
by Mike McCarthy, W1NR 06 Jun '20

06 Jun '20

Are there any repos that would have perl-Curses for CentOS 8? It was always available in epel but not anymore. Thanks, Mike

2 1

How to disable dhcpv6-client on Centos 8
by Jay Hart 06 Jun '20

06 Jun '20

Machine is an internal server with zero need to provide or receive ip addresses using dhcp (all IPs are hard coded). Question: how do I disable dhcpv6-client on this box? [user@boxname user]# firewall-cmd --list-all public (active) target: default icmp-block-inversion: no interfaces: enp2s0 sources: services: cockpit dhcpv6-client http https ssh ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: Thanks, Jay

2 2

Bridge network for virt-manager
by Jerry Geis 06 Jun '20

06 Jun '20

Hello. I desire to get bridge network working using virt-manager. Centos 7 and centos 7 guest. >From researching I think I need to have a ifcfg-br0 file like this ? cat ifcfg-br0 DEVICE=nm-bridge0 STP=no TYPE=Bridge BOOTPROTO=none IPADDR=192.168.1.8 PREFIX=32 GATEWAY=192.168.1.1 IPV6INIT=no NAME=br0 ONBOOT=yes DELAY=0 Is that for sure needed ? The use that nm-bridge0 as the network name? I dont want to mess up my current setup. Thanks, Jerry

6 7

Re: [CentOS] migrating from sendmail to postfix, centos 6 to centos 8
by Pete Biggs 05 Jun '20

05 Jun '20

On Fri, 2020-06-05 at 07:32 -0500, Chuck Campbell wrote: > On 6/4/2020 8:58 AM, Pete Biggs wrote: > > > Fair enough, and I now understand the issues with root receiving and > > > handling emails. The problem with the alias is that ALL emails are being > > > sent out to my ISP, and on to the particular user. > > Even for local users that are in /etc/passwd? > Yes, I only have two local users, and email I send on the box ends up at > the outside ISP, then comes back via fetchmail, and procmail. I can read > it with IMAP from outside. I guess I'll live with this. So even if you do something like mail chuck at the command line (with whatever user has a local account) it still gets sent to the ISP? > I'm sure it is the RelayHost or RelayDomains that forwards the email > outbound to my ISP. relay_host is the host that mail is sent to if it can't be delivered elsewhere. relay_domains is a list of domains the host will relay mail to. > If I set up a local only account, those emails try > to go outbound as well, but are rejected as there is no registered user > of that name at my ISP. In /etc/postfix/main.cf what is 'local_recipient_maps' set to? Also, what about 'mydestination' If you look in /var/log/maillog what does a message log for a local user look like when sent using the mail command? P.

1 0

CentOS-announce Digest, Vol 184, Issue 2
by centos-announce-request＠centos.org 05 Jun '20

05 Jun '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2020:2355 CentOS 7 kernel BugFix Update (Johnny Hughes) 2. CESA-2020:2381 Important CentOS 7 firefox Security Update (Johnny Hughes) 3. CESA-2020:2378 Important CentOS 6 firefox Security Update (Johnny Hughes) 4. CESA-2020:2383 Important CentOS 6 bind Security Update (Johnny Hughes) 5. CESA-2020:2406 Important CentOS 6 freerdp Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 4 Jun 2020 15:57:04 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2020:2355 CentOS 7 kernel BugFix Update Message-ID: <20200604155704.GA1900(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2020:2355 Upstream details at : https://access.redhat.com/errata/RHBA-2020:2355 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 90880fda5382cdfbb3a8efa5819aaeaf432beb87f41cced03d0d4315d9b56f4f bpftool-3.10.0-1127.10.1.el7.x86_64.rpm 0a62bf26f4dcc406c7e93ba64113b5951bf0e3417e4048bf1eb9f692ce9fcba6 kernel-3.10.0-1127.10.1.el7.x86_64.rpm 4dedd65ef61d1267bfbdcba08bac83d9daed745dae3f319836ef815de867c644 kernel-abi-whitelists-3.10.0-1127.10.1.el7.noarch.rpm 872bbf427084610609bc1ca50c0c0125bc0288b94021a784af01e603b10ff6b7 kernel-debug-3.10.0-1127.10.1.el7.x86_64.rpm 9a61082cc7739fb979a4f89c427e9a56f877f4f212a6662d5bccf5dc53c85951 kernel-debug-devel-3.10.0-1127.10.1.el7.x86_64.rpm ffbc0b342b3c57411f7f20e8d472a77a721c43f48e533f0d2c1668c1ecff518c kernel-devel-3.10.0-1127.10.1.el7.x86_64.rpm 2bd013eb1697677f9335f62400cf661db0bfdd380672f17eab7201a82c89e239 kernel-doc-3.10.0-1127.10.1.el7.noarch.rpm 83cf78d1eb99f7d18f7b2d961c53d65fb2754c1f9cc6b4c4c19a7949313979e7 kernel-headers-3.10.0-1127.10.1.el7.x86_64.rpm 4b5f2447521ce65ad55a344e2329d4d678bdc4e3ab6a3de5ac71e97ec03ccf83 kernel-tools-3.10.0-1127.10.1.el7.x86_64.rpm 2d8e03ebf9b5396f0bc9807c65f0635f0cbb0df22322bfa76c003caf529b4b7b kernel-tools-libs-3.10.0-1127.10.1.el7.x86_64.rpm c3e80c27f04a07625e285675ea6ae47a0d8bf5ce869afdf32cc5cc0ed7be5816 kernel-tools-libs-devel-3.10.0-1127.10.1.el7.x86_64.rpm 88e6e25aee0c99313e5eef30a51de25b053641461ca9ab2dcc90befec3f1a4ec perf-3.10.0-1127.10.1.el7.x86_64.rpm 12e13fac92eecf8e55c6285409d046106a54d99c106a633c597b9e152b608bcb python-perf-3.10.0-1127.10.1.el7.x86_64.rpm Source: 0f6c8513b3a00d46c499d1db35acf54ebd1e3ff01d9d3da6d8eb51fd14e897b7 kernel-3.10.0-1127.10.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 4 Jun 2020 16:00:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2381 Important CentOS 7 firefox Security Update Message-ID: <20200604160043.GA2192(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2381 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2381 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f74ffc53ad50103bb632597f34f8ad2d978d4833674d4bf50d49fd9d2c6f4f1c firefox-68.9.0-1.el7.centos.i686.rpm 2d5253ea7beff9a7ccb052d056d3eaf35a6a03a5d59551d67f3dfacf82bae124 firefox-68.9.0-1.el7.centos.x86_64.rpm Source: d64c5d0af07830f0acd90798f0fc722ab66bf0440a9be3422ac0e7d190afb8cb firefox-68.9.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 4 Jun 2020 16:02:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2378 Important CentOS 6 firefox Security Update Message-ID: <20200604160207.GA2361(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2378 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2378 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 856df97cac6587dfbbda84b3d1228a2a4a029e905eaf7e2d91510a1419c8d1d1 firefox-68.9.0-1.el6.centos.i686.rpm x86_64: 856df97cac6587dfbbda84b3d1228a2a4a029e905eaf7e2d91510a1419c8d1d1 firefox-68.9.0-1.el6.centos.i686.rpm 93a67e36a0ac83a9132b6f30657627561094abd81fad3547e6a536274f36a38e firefox-68.9.0-1.el6.centos.x86_64.rpm Source: f0bb0aaeaed1191848fee0a2bec55e2b9079aa5fa9b7baf932513047f9caf108 firefox-68.9.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 4 Jun 2020 16:10:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2383 Important CentOS 6 bind Security Update Message-ID: <20200604161005.GA2776(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2383 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2383 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 38e6935a774d6bf23e64738e47bd210b99e2ca71a8b4be858e4f38468f90f09c bind-9.8.2-0.68.rc1.el6_10.7.i686.rpm 38ab4c3d80d5ba490935027e9dac352f2a6500674fa38d94c7db4ad6ceaf65b2 bind-chroot-9.8.2-0.68.rc1.el6_10.7.i686.rpm 42e976e219a8fd5e3e55208df3535e54ed60c3902746b4620f5f919f9f8de34e bind-devel-9.8.2-0.68.rc1.el6_10.7.i686.rpm 2be485965db6cf9fe724fc16f772bfe15bf6dc4e4516f94f9697549f8e8b38ec bind-libs-9.8.2-0.68.rc1.el6_10.7.i686.rpm feb19898a3da1423604d5b7eedf261c47d648afcb907e18cdba3396d86da7b5c bind-sdb-9.8.2-0.68.rc1.el6_10.7.i686.rpm 757c6a9b10575ae842779e66e2e87dba2f353c13ba3fcdc88bf55243962c8e2b bind-utils-9.8.2-0.68.rc1.el6_10.7.i686.rpm x86_64: 043b382da00b5da9191d0fed17280757f70bde12b9f48730f0c2926245c9097b bind-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 1704dc77fb9c35475accbadc35176644c61d3989de04543093f2c760bad3252e bind-chroot-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 42e976e219a8fd5e3e55208df3535e54ed60c3902746b4620f5f919f9f8de34e bind-devel-9.8.2-0.68.rc1.el6_10.7.i686.rpm e8e129aa45200ede187103445d37e27ded0922accaf12c0551af3c253d51ee9d bind-devel-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 2be485965db6cf9fe724fc16f772bfe15bf6dc4e4516f94f9697549f8e8b38ec bind-libs-9.8.2-0.68.rc1.el6_10.7.i686.rpm c83ea96bcec6a7ce68266a5b5ba7681038c7c115e0d642747409bee518db7f03 bind-libs-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 7e745c2d513daf40a440027265a5c966cfc6e8e9a1cd39e9804a0eae40ce00fa bind-sdb-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 1d8b16ab1bf34e51ac160ba0c27afeb050639c37f0bed6ad68a06bf77bdb591b bind-utils-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm Source: 452bb4f0ab96c2fec8012499a79fbac64703504888ce1896f427b69ab599ee3b bind-9.8.2-0.68.rc1.el6_10.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 4 Jun 2020 20:08:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2406 Important CentOS 6 freerdp Security Update Message-ID: <20200604200800.GA11486(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2406 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2406 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 40052c3b9715a48e1c9af9e95e7a6066e0ec0ed6608657324f3fe355e9c1b8f5 freerdp-1.0.2-7.el6_10.i686.rpm 0df0853d13fc8d3dfc3c993ef2113eea6cc09943032ef6fc9efa04af8911edc7 freerdp-devel-1.0.2-7.el6_10.i686.rpm 464c929ecb74502cbf75b962255982726981f146606c08bc84f14b8d5dd60c48 freerdp-libs-1.0.2-7.el6_10.i686.rpm 08de995c79b51a1e8d0bce2e35a9e2098589f539ac2710edb4c1886c64d4bda5 freerdp-plugins-1.0.2-7.el6_10.i686.rpm x86_64: 84e0e22103a6f530bf3c3542f32b2cad958f1034405521dc76242e3a55609764 freerdp-1.0.2-7.el6_10.x86_64.rpm 0df0853d13fc8d3dfc3c993ef2113eea6cc09943032ef6fc9efa04af8911edc7 freerdp-devel-1.0.2-7.el6_10.i686.rpm 3ce674caf8c636d8c54a86ffcc210c50e2c5599d553edcc29ce39771d62f05c1 freerdp-devel-1.0.2-7.el6_10.x86_64.rpm 464c929ecb74502cbf75b962255982726981f146606c08bc84f14b8d5dd60c48 freerdp-libs-1.0.2-7.el6_10.i686.rpm 72def2a742c6b8b1d28a81a99d042d2b4646ce169908dcaf47e5b067e6e6b7af freerdp-libs-1.0.2-7.el6_10.x86_64.rpm f4e577036c923c1f84f11ae1310043f44260d4cc51b2857060099e40ab150895 freerdp-plugins-1.0.2-7.el6_10.x86_64.rpm Source: 28cbed327abc58d60686810bbba51cc577d10516d3ef77f361830ba2964005bf freerdp-1.0.2-7.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 184, Issue 2 ***********************************************

1 0

Google authenticator on C8
by Patrick DERWAEL 05 Jun '20

05 Jun '20

Hi folks I have installed Google authenticator on a few C8 boxes This is working fine on all of them except one... - google-authenticator is installed and the box is added to my Android app - /etc/pam.d/sshd contains auth sufficient pam_google_authenticator.so - /etc/ssh/sshd_config contains ChallengeResponseAuthentication yes - sshd restarted When logging in, I'm prompted with the password (i.e. no request OTP request) I have already uninstalled/reinstalled/rebooted and compared the config files across boxes... but I can't see what I have done wrong Any clue about what I could have missed? Thanks! -- Patrick Derwael

1 0

Re: [CentOS] How to rebuild the kernel
by Harsh chopra 04 Jun '20

04 Jun '20

Hi everyone, I cloned and installed the 5.7 kernel from git. Also how do I analyze the system logs with journalctl and implement changes to recover my 3.10 kernel

2 1

Re: [CentOS] migrating from sendmail to postfix, centos 6 to centos 8
by Pete Biggs 04 Jun '20

04 Jun '20

> > Fair enough, and I now understand the issues with root receiving and > handling emails. The problem with the alias is that ALL emails are being > sent out to my ISP, and on to the particular user. Even for local users that are in /etc/passwd? > > I would like to make this user receive emails locally only, obviously > not root (for all the very good reasons you pointed out), but some other > non-privileged user. I don't know how to get a user setup only for local > only delivery to the machine in question, not sent out of the local network. > So something in the postfix configuration is telling it to send mail elsewhere. Have you changed the postfix config at all? Because usually it is happy to deliver local mail for local users. The aliases file should have something like root: chuck where 'chuck' is the local user; that will put the message in /var/mail/chuck. There's a postfix config variable called 'local_recipient_maps' that determines what is a local recipient - but the default uses, amongst other things, the standard unix passwd file. P.

1 0

migrating from sendmail to postfix, centos 6 to centos 8
by Chuck Campbell 04 Jun '20

04 Jun '20

I have an email server/aggregator which delivers locally for root, and all other emails in my domain. It sends outbound email to my isp (networksolutins) masquerading as my domain via smtp. This is with sendmail. It does not receive email from the internet via smtp. I use fetchmail to get incoming mail from multiple email/isp's. I use procmail for local delivery and serve emails using dovecot/imap. These all work fine. I am getting new hardware for this machine, and plan to setup centos 8, which uses postfix, not sendmail. I've been trying to provision a vm with the proper configuration, but cannot get any emails delivered to root. Is there a pointer to a configuration guide that will help me do what I want? I have googled about 100 setups, none of which are what I'm trying to achieve. They all suggest using an alias for root to a normal user, but them that user gets all of the cron, fail2ban, etc emails, instead of delivering them to root on the local machine. Thanks, -chuck --

2 1

How to rebuild the kernel
by Harsh chopra 03 Jun '20

03 Jun '20

Hi everyone, I am using Centos 7.8.2003 kernel 3.10 . I was trying to build and install the latest linux stable kernel i.e. 5.7, I successfully did the process but accidentally messed it up by copying the .config file again in 5.7 kernel src,I tried to rebuild the 5.7 kernel but got make error as I was still on 5.7 kernel. Then I changed to 3.10 and tried to rebuild 5.7 but was not successful. I tried to reboot the system but this time I was in the maintenance mode. So if anyone could suggest any help in recovering the 3.10 kernel.

2 1

Help needed for installing MT7601U Linux driver
by Harsh chopra 02 Jun '20

02 Jun '20

Hi everyone, My PC don't have an integrated WLAN card, so I bought an USB WIFI device which use the MediaTek MT7601U chip(image 'dongle.jpg'). ------------------------------------------------------------------------------------------------------ My PC specification- OS = CentOS 7.8.2003. Processor = AMD Ryzen 5 1600. Mother-Board = GA-Gigabyte A320M-S2H ------------------------------------------------------------------------------------------------------- The lsusb lists devices- It is in the attachments below (ls_usb) Under /lib/modules/3.10.0-1127.el7.x86_64/kernel/driver/net/wireless/ - It is in the attachments below (wireless_list) Under /lib/modules/3.10.0-1127.el7.x86_64/kernel/driver/net/wireless/ralink/rt2x00 - It is in the attachments below (ralink_list) lsmod list - It is in the attachments below (ls_mod) ---------------------------------------------------------------------------------------------------------- I found the github page for installing MT7601U Linux driver "https://github.com/imZack/mt7601" I am having trouble in building the driver as the installation process requires Synology toolchain <http://sourceforge.net/projects/dsgpl/files/DSM%205.1%20Tool%20Chains/> and kernel source <http://sourceforge.net/projects/dsgpl/files/Synology%20NAS%20GPL%20Source/5…> But I don't know which toolchain and Kernel source to install also I had to manually load the modules rt2800usb.So if anyone have any suggestion please let me know.

3 2

CentOS-announce Digest, Vol 184, Issue 1
by centos-announce-request＠centos.org 02 Jun '20

02 Jun '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:2334 Important CentOS 7 freerdp Security Update (Johnny Hughes) 2. CESA-2020:2337 Important CentOS 7 git Security Update (Johnny Hughes) 3. CESA-2020:2344 Important CentOS 7 bind Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 1 Jun 2020 17:27:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2334 Important CentOS 7 freerdp Security Update Message-ID: <20200601172723.GA12461(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2334 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2334 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e9e31d04292b8a74dd0059fa677993199d6560901e05d899bff523292e396433 freerdp-2.0.0-4.rc4.el7_8.x86_64.rpm 9525ccd52c4cff879c9c875be6e7639f7928305e3fb45e6b110f51768ad3435e freerdp-devel-2.0.0-4.rc4.el7_8.i686.rpm 03bbcd326f47c1b9b7e4b2fc2b01eabbfd5e237529c04985fc68035a3470b5e8 freerdp-devel-2.0.0-4.rc4.el7_8.x86_64.rpm a8fe2f06e27066efae184329614a8574dd3dd7117f1ba4b55ea500e63334ad37 freerdp-libs-2.0.0-4.rc4.el7_8.i686.rpm aad00478548f2a342ed111ae27ad492942c6890b7bd9de1f58954eaca05c7c4a freerdp-libs-2.0.0-4.rc4.el7_8.x86_64.rpm 9e6df1358ba37d30cd7a6e0db76a6ee242bdc0aed0c1a5e039035ec963814555 libwinpr-2.0.0-4.rc4.el7_8.i686.rpm 32cbd21c213f11009dc3fd3b9dc85e74c8f6a32e136f558bcf0101f9b0137b0f libwinpr-2.0.0-4.rc4.el7_8.x86_64.rpm 96d53bb2a1ff0cc5d2545052eafac0ddd3f6bbeab1df28ee2c59fbb53380f88a libwinpr-devel-2.0.0-4.rc4.el7_8.i686.rpm c20c8eb83a977c474a71e3058f67afc3d6734043bc4e2c47cda817ffe6504466 libwinpr-devel-2.0.0-4.rc4.el7_8.x86_64.rpm Source: fec5dcb3b0acb6a41a8b1941355df873663e1e0e135757c003edbaf152b84bd3 freerdp-2.0.0-4.rc4.el7_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 1 Jun 2020 17:28:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2337 Important CentOS 7 git Security Update Message-ID: <20200601172840.GA12832(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2337 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2337 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 86ddd0d6b71eadfc635da7932798cec7d018eb7a72fc85dee5b92b713daf4e81 emacs-git-1.8.3.1-23.el7_8.noarch.rpm 7836a795983d8a8be333000a71c5abe8a208ba0f908627725f359708070a37d6 emacs-git-el-1.8.3.1-23.el7_8.noarch.rpm e92952c8a62037ba2d78ad57e7c97e66966e22bf66be12fd2591036b5e73245a git-1.8.3.1-23.el7_8.x86_64.rpm 5ae5dc45141c8736d8c9c4f700f0bb300d2d61c344ea47581f532df7ecac2169 git-all-1.8.3.1-23.el7_8.noarch.rpm 6c646fcbc52ef489c8a27a633497002fcad39c11df5ced2709b3511e175f1011 git-bzr-1.8.3.1-23.el7_8.noarch.rpm 1501ff27d796808aa9b64303f421351dd1fbaf4af0c5c196d6f49e5fee03466b git-cvs-1.8.3.1-23.el7_8.noarch.rpm 93a299387958200cff00127fbdcda934af34bf9a624d3a6a34589f39e3428eab git-daemon-1.8.3.1-23.el7_8.x86_64.rpm 0b36556188fbc5cbfd60ac5100672460dcd28b9c315b9615aa3213c580df9297 git-email-1.8.3.1-23.el7_8.noarch.rpm b33d482116e336c7c32aaaf54821c5bdd0b6327f6ffdb937c1406759507d1987 git-gnome-keyring-1.8.3.1-23.el7_8.x86_64.rpm c7d920286ca5a71baa0c6635e80944336da4fdfdc044e40ef0316a183be01fea git-gui-1.8.3.1-23.el7_8.noarch.rpm 36029dffe4ada0b402292298587c4a0e648ce6060bf824a23c72d13ccd517447 git-hg-1.8.3.1-23.el7_8.noarch.rpm eefcbca59152d3d20409a503ad6302a2012e14f16e880a42fc947576e596800e git-instaweb-1.8.3.1-23.el7_8.noarch.rpm 4472d40bb16b4c2fdbe6868a7b44430aecd49c5cf43c04f554d88695426b66b3 gitk-1.8.3.1-23.el7_8.noarch.rpm ac0bffc0baf7ee51bb73e97bde043081f313cc15d12a4cb080f282ac50c40a0d git-p4-1.8.3.1-23.el7_8.noarch.rpm 130ba8568e95838fee878b2dc4d467a9bfb94ec4f27a425daaab2cebf1104067 git-svn-1.8.3.1-23.el7_8.x86_64.rpm 2e616300637e132bfab013e3edc9d8fcafaa63f169022d2012bdd108278956ac gitweb-1.8.3.1-23.el7_8.noarch.rpm e5ebcc9bd42d06dae2da84d0328a9806be288ad726e00f86691be5e08cee1ee7 perl-Git-1.8.3.1-23.el7_8.noarch.rpm 9bafb4b8c6e850c7cb3111d5c5603489e48162e77ffaabe6f4f65e3a34c673c0 perl-Git-SVN-1.8.3.1-23.el7_8.noarch.rpm Source: 08be03369653e145408cf54b836dcdeae06abd558c11decd0b00bfcfdc5f37fe git-1.8.3.1-23.el7_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 1 Jun 2020 17:29:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2344 Important CentOS 7 bind Security Update Message-ID: <20200601172959.GA13139(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2344 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2344 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7d441e8126dd927899c78af78ffd1f1e460afef943e27596cacb4fd917cdf708 bind-9.11.4-16.P2.el7_8.6.x86_64.rpm b2636b99596138a3eb6f29f55d40506dbb8f9c8d98bafea6eae1dad0220ee26c bind-chroot-9.11.4-16.P2.el7_8.6.x86_64.rpm b6684c4a2a9341e877cf1766d21d75f47af5dede5138c5eeccc8814aab9e7b6d bind-devel-9.11.4-16.P2.el7_8.6.i686.rpm 7426c0203ca23e864c4e4de8164d583a68bc03dc721e44362670eb32eaa431bd bind-devel-9.11.4-16.P2.el7_8.6.x86_64.rpm 28fe7d1ef023376eaae5f1acbcc67b7e4a7b7072ef647871f5d554de9e5a3455 bind-export-devel-9.11.4-16.P2.el7_8.6.i686.rpm 2c810c025cc0045c4376c0b6600757d5cdb6348e47ddb8b8c9edbbcdf2097073 bind-export-devel-9.11.4-16.P2.el7_8.6.x86_64.rpm ea5d207bd67c2b037ed570a580848774a896650225a0afa308782bbba6b8ea0b bind-export-libs-9.11.4-16.P2.el7_8.6.i686.rpm 34952d49a47be7d5ceb00f1ccd399a11a752189d5aec601a77d93f3149888f9b bind-export-libs-9.11.4-16.P2.el7_8.6.x86_64.rpm 471c9492025d23abaa228be48ca0bfc3167bcbe58830c781e6176b6ffc46ff50 bind-libs-9.11.4-16.P2.el7_8.6.i686.rpm 94ff4f96c5baf7497561bdab1c460ca770705c8361928a9006c0659d05f8bba3 bind-libs-9.11.4-16.P2.el7_8.6.x86_64.rpm 959292b622b74c6771b234fd384e5824e05e42178e8c8d909af68707525f86c0 bind-libs-lite-9.11.4-16.P2.el7_8.6.i686.rpm b346000d2a94267f3d4e450da340ee8899118e147309f222866f8e92f2eec991 bind-libs-lite-9.11.4-16.P2.el7_8.6.x86_64.rpm d412f3d546e61dceadb365a0330e05e39f3f17a34fa498282f8185b30873d13a bind-license-9.11.4-16.P2.el7_8.6.noarch.rpm 7d84f1efafe000a200cc69c19745ec7160b367816960d4d9b68b74dbd958587f bind-lite-devel-9.11.4-16.P2.el7_8.6.i686.rpm a4f5b9133a0f7a61ecb39821447653dd74a0e566d550a07419a74a6987f5f6a2 bind-lite-devel-9.11.4-16.P2.el7_8.6.x86_64.rpm 89c63dc7c96ed48abafd2f47d8d136386e748bf4b18fdde1542b5fe6d2026972 bind-pkcs11-9.11.4-16.P2.el7_8.6.x86_64.rpm 849903c6ebad979c99eacfda2da0a163278f96c71391c70dacbe37d02cb49cff bind-pkcs11-devel-9.11.4-16.P2.el7_8.6.i686.rpm 18a0eeb4fccdbe2e7461e887f1b706c7a5c15829ddbd10be58d425e8d8cf8977 bind-pkcs11-devel-9.11.4-16.P2.el7_8.6.x86_64.rpm 73a2af6e7bc4b18900736aac2169075cae1d6ba1c8ad66edc7ab35c55e314c7f bind-pkcs11-libs-9.11.4-16.P2.el7_8.6.i686.rpm 3bbfd7a6839cc3212ce64dea5783ba902179b22db4d92cf645187f6d30a4bcaa bind-pkcs11-libs-9.11.4-16.P2.el7_8.6.x86_64.rpm 7c168b20b00c0448d9f8b328255887fe1b56cdef945b685a1c8a01ab18c484bc bind-pkcs11-utils-9.11.4-16.P2.el7_8.6.x86_64.rpm bf935560405dec5ad9ef7cc57f375e872b41cccab0fd485485ad00bcf33c1dac bind-sdb-9.11.4-16.P2.el7_8.6.x86_64.rpm 62d0e11eba7a5abf23ce990fcaf995a7577911d7d03523c67ebd414563116026 bind-sdb-chroot-9.11.4-16.P2.el7_8.6.x86_64.rpm 54fcca52cf394832615bb650b2f51a9eca3135c38c2e94081996012f56e7bcae bind-utils-9.11.4-16.P2.el7_8.6.x86_64.rpm Source: 3ba83af739659dabac74d8ab36962632fb890fb826a28ea969719f2cf3d9efd7 bind-9.11.4-16.P2.el7_8.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 184, Issue 1 ***********************************************

1 0

user names
by Jerry Geis 02 Jun '20

02 Jun '20

How can I define a local use with "@" in the name useradd "bob@myname" gives error. I "need" to have the @ sign in the name -is that possible. Silly reason - the system I am trying to send emails to the linux server has a bug. I'm trying to get around it. Thanks, Jerry

8 13

Where can I find centos-release-8.1-1.1911.0.9.el8.src.rpm
by me＠tdiehl.org 01 Jun '20

01 Jun '20

Hi, I am looking for centos-release-8.1-1.1911.0.9.el8.src.rpm. Does anyone know where to find it. The only thing I see in vault is centos-release-8.1-1.1911.0.8.el8.src.rpm. Regards, -- Tom me(a)tdiehl.org

3 2

docker-firewalld
by Thomas Stephen Lee 31 May '20

31 May '20

Hi, https://fedoraproject.org/wiki/Changes/firewalld_default_to_nftables mentions a docker-firewalld where can I find that package or source code? thanks --- Lee

3 5

looking for ideas about how to create a constant data stream
by hw＠gc-24.de 30 May '20

30 May '20

Hi, I'm looking for a good way to create a constant data stream that will occupy a bandwidth of about 2--5Mbit/sec between two remote hosts over the internet. I have full access to the hosts involved. My first attempt to use scp to copy data from /dev/null on host A to /dev/null on host B, but scp says '/dev/null: not a regular file'. If something like that would work, I would be able to limit the bandwidth of this transfer in the router(s) involved so that it won't occupy all the bandwidth. Of course, it would be better if I could limit the bandwidth on the sending side rather than dropping packages. I could probably write some program to do that, but since I have never programmed such a kind of network application, it would be rather time consuming. Maybe there's already a kind of tool around that can do this. I need this to work around whatever settings my ISP has made 3 days ago that block my VPN connection so that I effectively can't reasonably work anymore. I do know what the problem with the connection is and that occupying some bandwidth would unblock the VPN; only there doesn't seem to be anything else I could about it.

6 5

Re: [CentOS] Recover from an fsck failure
by James B. Byrne 29 May '20

29 May '20

On Thu, May 28, 2020 19:38, Robert Nichols wrote: > What output do you get from: > > file -s /dev/mapper/vg_voinet01-lv_log > lsblk -f /dev/mapper/vg_voinet01-lv_log > file -s /dev/mapper/vg_voinet01-lv_log /dev/mapper/vg_voinet01-lv_log: symbolic link TO '../DM-5' dm-f lsblk -f /dev/mapper/vg_voinet01-lv_log NAME FSTYPE LABEL UUID MOUNTPOINT vg_voinet01-lv_log (dm-5) The cloned source is a CentOS-6.6 based FreePBSX appliance using lvm. It has a single 500GB HDD. The source host is running and testing of its HDD shows no errors from the test. However, the number of recoverable read and write errors are abnormally high indicating that the HDD is approaching the end of its service life. I wish to replace it without having to rebuild the entire PBX system from scratch. All of the LVMs on the cloned HDD are ext4 file systems. The only one that failed is the log partition /var/log. If I cannot fix this then I wish to replace it with an empty fs and simply rsync the contents of /var/log from the running system to it. I need to do this anyway just prior to replacement as the PBX is running. However, it is about six years since I last had to do this and while I have my notes I would appreciate a short precis of the steps involved. This is the file system layout. /etc/fstab /dev/mapper/vg_voinet01-lv_root / ext4 defaults 1 1 UUID=302ab0fo-f985-4903-86e2-e218b1345e0 /boot ext4 defaults 1 2 /dev/mapper/vg_voinet01-lv_home /home ext4 defaults 1 2 /dev/mapper/vg_voinet01-LogVol04 /var ext4 defaults 1 2 /dev/mapper/vg_voinet01-lv_log /var/log ext4 defaults 1 2 /dev/mapper/vg_voinet01-lv_spool /var/spool ext4 defaults 1 2 /dev/mapper/vg_voinet01-lv_swap swap swap defaults 0 0 tmpfs /dev/shm tmpfs defaults,nodev,. . . parted -l Model: ATA WDC WD1002FAEX-0 (scsi) Disk /dev/sda: 1000GB Sector size (logical/physical): 512B/512B Partition Table: msdos Number Start End Size Type File system Flags 1 1094kB 525MB 524MB primary ext4 boot 2 525MB 500GB 500GB primary lvm Model: Linux device-maper (linear) (dm) Disk: /dev/mapper/vg_voinet01-lv_spool: 68.7GB Sector size (logical/physical): 512B/512B Partition Table: loop Number Start End Size Type File system Flags 1 0.00B 68.7GB 68.7GB primary ext4 Error: /dev/mapper/vg_voinet01-lv_log: unrecognized disk label Model: Linux device-maper (linear) (dm) Disk: /dev/mapper/vg_voinet01-lv_home: 3355MB Sector size (logical/physical): 512B/512B Partition Table: loop Number Start End Size Type File system Flags 1 0.00B 3355MB 3355MB primary ext4 Model: Linux device-maper (linear) (dm) Disk: /dev/mapper/vg_voinet01-LogVol04: 336GB Sector size (logical/physical): 512B/512B Partition Table: loop Number Start End Size Type File system Flags 1 0.00B 336GB 336GB primary ext4 Error: /dev/mapper/vg_voinet01-lv_swap: unrecognized disk label Model: Linux device-maper (linear) (dm) Disk: /dev/mapper/vg_voinet01-lv_spool: 67.1GB Sector size (logical/physical): 512B/512B Partition Table: loop Number Start End Size Type File system Flags 1 0.00B 67.1GB 67.1GB primary ext4 I will have to do this from a live cd I presume as the shell that the failed boot process dropped me into give a "File-based locking initialisation failed." when I try to run vgdisplay or vgs. Any guidance appreciated. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 2

Re: [CentOS] network disconnection after several hours
by Thomas Poty 29 May '20

29 May '20

I will check with firewall-cmd. Regarding hardware problem I have doubt as we use VMWare (but I keep in a corner of my mind).At this moment, we have compiled kernel and have installed it and have tried 4 restore passed.We need to do more tests and understand why 4 restores passed. Thanks Thomas Poty Le jeudi 28 mai 2020 à 23:58:22 UTC+2, hw <hw(a)adminart.net> a écrit : On Tuesday, May 26, 2020 2:42:13 PM CEST Thomas Poty via CentOS wrote: > Hi,We have tried : > - with and without NetworkManager-config-server- with and without > NetworkManagerbut result is still the same : we get disconnection :-/ We > will try with the last kernel. > anybody has a track to explore ? > Thanks > Have you enabled logging with firewall-cmd to see if there are packets being dropped while the dump is being restored? Besides that, one of the first things I'd try is changing out the network card, replace the network cable and use a different port on the switch. Keep in mind that two machines are involved. Even stupid network cables can "switch" between working and non-working for no reason at all like you wouldn't believe ... until you plug them into a PoE switch by mistake after which they suddenly no longer work at all.

1 0

Recover from an fsck failure
by James B. Byrne 29 May '20

29 May '20

This is CentOS-6x. I have cloned the HDD of a CentOS-6 system. I booted a host with that drive and received the following error: checking filesystems /dev/mapper/vg_voinet01-lv_root: clean, 128491/4096000 files, 1554114/16304000 blocks /dev/sda1: clean, 47/120016 files, 80115/512000 blocks /dev/mapper/vg_voinet01-lv_home: clean, 7429/204800 files, 90039/819200 blocks /dev/mapper/vg_voinet01-LogVol04: clean, 770219/20480000 files, 34881086/8102000 blocks fsck.ext4: Bad magic number in super-block while trying to open /dev/mapper/vg_voinet01-lv_log /dev/mapper/vg_voinet01-lv_log The superblock could not be read or does not describe a correct ext2 filesystem. If the device is valid and it really contains an ext2 filesystem (and not swap or ufs or something else), then the superblock is corrupt, and you might try running e2fsck with an alternate superblock: e2fsk -b 8193 <device> /dev/mapper/vg_voinet-lv_spool: clean, 372/614400 files, 171186/2457600 blocks *** An error occurred during the file system check. *** Dropping you to a shell; the system will reboot *** when you leave the shell. Give root password for maintenance (or type Control-D to continue): I ran mke2fs to locate the backup superblocks: mke2fs -n /dev/mapper/vg_voinet01-lv_log . . . Superblock backups stored on blocks: 32768, 90304, 163840, 229376, 294912, 819200, 884736, 1605632 and ran: e2fsck -b 32768 /dev/mapper/vg_voinet01-lv_log The superblock could not be read or does not describe a correct ext2 The same thing happened for the next backup superblock addrees. And all the rest reported an invalid argument error from e2fsck. Is this recoverable? How? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

xinetd custom service - perl - remote address
by Gary Stainburn 28 May '20

28 May '20

Hi all, I can't believe that I can't find the answer to this one. I have a perl script which is called by xinetd. I want that perl script to be able to detect the remote IP address of the caller. I presumed that it would be an environment variable but I could be wrong. I've found reference to the ENV and PASSENV arguments for xinetd.conf but no examples, and no indication of what auguments to use. In my script I have the following code: foreach (keys %ENV) { print "$_=$ENV{$_}\n";} but the only line I get back is: XINETD_LANG=en_US

5 5

Adobe digital editions?
by mark 28 May '20

28 May '20

I had it installed, running under WINE on CentOS 6. Bought a ebook, it insisted it needed ADE, I d/l from the sellers site... setup.exe won't run. Tried d/l 4.5 and 3 from Adobe, neither installer works, The one from their website: file setup.exe setup.exe: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive Anyone run into this yet? I have books I *bought*, and I want them.... mark

6 15

IPv6 inbound routing
by Kenneth Porter 27 May '20

27 May '20

I see my ISP's gateway sending me neighbor solicitations to my external WAN interface for LAN clients on my internal LAN interface. How do I get the box to tell the ISP gateway that my box will route those addresses? I've been assigned a /56 and I'm using a /63 for the DMZ and a /64 for the LAN. The outbound packets seem to reach the destination server but nothing comes back. I'm assuming it's because the ISP router doesn't know to give my box the packets for the LAN clients. I'm using "tcpdump icmp6 -i em2" to watch the exchange. (For outbound routing, I have radvd configured to send router announcements to the LAN, and that seems to work, based on the packets I recieve from the LAN and from watching it with Wireshark on a Win10 client.)

1 0

Re: [CentOS] ip6tables equivalent for NAT?
by John Pierce 27 May '20

27 May '20

with ipv6, you just allow the specific ports destined to the specific local machine(s) in on your WAN side, they don't need translating. same sort of rule as if you had a internet-facing service running on the routing system On Tue, May 26, 2020 at 11:55 AM Kenneth Porter <shiva(a)sewingwitch.com> wrote: > I finally got an ISP connection with working IPv6 and now I need to add > firewall rules for forwarding connections from my LAN to the WAN. I'm > using > firewalld to handle the high-level description that gets translated to > iptables/ip6tables on CentOS 7. > > Of course, with IPv6, one doesn't do NAT, so the usual masquerade target > doesn't make sense. But I want similar connection logic, with no inbound > connections allowed to LAN clients and all outbound connections allowed. > How does one express this in either firewalld or its ip6tables "direct > rules"? > > I don't currently need port-forwarding to internal servers but, for > completeness, what would such rules look like? > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -john r pierce recycling used bits in santa cruz

3 3

ip6tables equivalent for NAT?
by Kenneth Porter 26 May '20

26 May '20

I finally got an ISP connection with working IPv6 and now I need to add firewall rules for forwarding connections from my LAN to the WAN. I'm using firewalld to handle the high-level description that gets translated to iptables/ip6tables on CentOS 7. Of course, with IPv6, one doesn't do NAT, so the usual masquerade target doesn't make sense. But I want similar connection logic, with no inbound connections allowed to LAN clients and all outbound connections allowed. How does one express this in either firewalld or its ip6tables "direct rules"? I don't currently need port-forwarding to internal servers but, for completeness, what would such rules look like?

1 0

network disconnection after several hours
by Thomas Poty 26 May '20

26 May '20

Hello, Here is the context during the problem occurs : We have a new machine running on centos 8.From this machine, we restore a postgresql dump on an other machine runnning on centos 7.After several hoursof running, restore fails due to a disconnection (no route to host).But, if we disable the firewall on centos 8, restore succeed. Before having this new centos 8 machine, we had a centos 7 machine and all worked fine with firewall activated. Has anyboby an ideas, clues or something else? Thanks, Thomas Poty

2 4

Thunderbird Revision Issues
by Mark LaPierre 25 May '20

25 May '20

Hey all, CentOS 6 has Thunderbird 68.8.0 CentOS 8 has Thunderbird 68.7.0 When I rsync my .thunderbird folder from my CentOS 6 machine to my CentOS 8 machine and start Thunderbird it says: "A newer version of Thunderbird may have made changes to your profile which are no longer compatible with this older version. Use this profile only with that newer version, or create a new profile for this installation of Thunderbird. Creating a new profile requires setting up your accounts, calendars and add-ons again." Needless to say, this is not an acceptable choice. I have several email accounts that would have to be set up. That's not such a big issue, but I have many local folders set up that I can't duplicate on the new installation if I can't use my previous profile. Does anyone know when CentOS 8 will catch up with CentOS 6 so that I can start using my new CentOS 8 box? Perhaps there is another work around. I've tried many of the solution provided on the mozilla web site to no avail. I even tried to install Thunderbird 68.8.0 on my CentOS 8 box. That didn't make it happy either. What now brown cow? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

4 5

mkfs.fat Device or resource busy
by Michael Hennebry 25 May '20

25 May '20

I'm trying to format a 16 GB SD card to FAT32. Either it won't find the device or it gives me the titular error message. mkfs.fat /dev/sdc I have tried "ejecting" the drive and reinserting the card. I have tried inserting another card, checking to insure that I could see its file, ejecting that card and inserting the target card. If I do not umount it, busy, if I don't, not found. What is the incantation for formatting an SD card. BTW I am using Centos 7 and a USB adapter. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

authconfig vs authselect
by Leon Fauster 24 May '20

24 May '20

I had the habit to use authconfig --passalgo=sha512 --update but in EL8 its not supported anymore. The authselect-compat package is installed (and it says "not supported anymore and have no effect). Whats the equivalent call using the new tool "authselect"? -- Thanks Leon

2 1

Re: [CentOS] ether-wake
by Rich Greenwood 23 May '20

23 May '20

Some switch hardware can generate the packets directly, negating the need for a box on every VLAN. Meraki hardware can do it, but you have to go through the dashboard so automating it isn't currently possible. Here is some documentation on forwarding WoL on catalyst 3750 switches from Cisco: https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-sw… -- Rich Greenwood Network Engineer Shasta County Office of Education 530-225-0161

4 4

External Array Data Migration
by Xinhuan Zheng 23 May '20

23 May '20

Dear All, Below question has been puzzled me for a while, and don’t know if anyone has experienced such puzzle: You have an external array attached to a physical hardware. The operating system is CentOS 5. The file system is created on top of LVM on external array & mounted. The CentOS 5 can see the array controller, and manage all LVM configuration, etc. There is data stored in that external array. At some point, you want to upgrade the operating system to higher version, CentOS 7. Is there a fast way to migrate the external array data volume to new hardware with CentOS 7 without doing machine-to-machine rsync the whole external array data volume? In another words, can I detach external array from old hardware, and attach it to new hardware, then re-configure LVM, so new operating system can recognize the external array file system? Thanks, - Xinhuan

2 1

Re: [CentOS] How to Load Custom CentOS 7 Image
by Xinhuan Zheng 21 May '20

21 May '20

Dear All, > It seems like kickstart is what you are looking for.? > Is this what you were trying to do? Yes, kickstart is what I’m looking for. Let me detail my provisioning process: * Provision a VM with standard CentOS 7 NetInstall ISO & my post script. The file system is created on top of LVM * Export entire VM as custom ISO image to be loaded into physical hardware * Kickstart physical hardware using above exported custom image & different grub/isolinux configuration Although I could just use the same CentOS 7 NetInstall ISO & run all my post script to the physical HW, it may take a few hours, since post script is long, and I wonder if above process will speed up, since the VM has everything needed. If that process isn’t feasible, then I’ll just do the same thing for physical hardware. Thanks, - Xinhuan

2 1

how does autofs deal with stuck NFS mounts and suspending to RAM?
by hw 21 May '20

21 May '20

Hi, after trying sshfs to mount a remote file system on a server with the result that sshfs will sooner or later get stuck and require a reboot of the client, I'm fed up with it and am looking for alternatives. So next I would like to use NFS over a VPN connection instead. To minimize the instances of the NFS mount getting stuck, it might be helpful to use autofs. What happens when the mount is stuck because the connection is down and autofs figures the idle timeout has expired and tries to unmount the remote file system? What happens when I put the client to sleep by suspending to RAM? Will autofs automatically unmount first, or will the server have to deal with a client that has apparently gone away and might re-appear later in unexpected ways? Is there a way to tell NFS to retry an operation _now_ after the connection went down and came back, rather than having to wait for a possibly rather long time? Is there a better alternative for mounting remote file systems over unreliable connections?

5 7

Re: [CentOS] How to Load Custom CentOS 7 Image
by Xinhuan Zheng 20 May '20

20 May '20

Dear Earl Ramirez, >I created a custom ISO a couple of years ago [0], you can use it as >your base of one of the following links[1-4], should be sufficient to >get you started. >[0] https://github.com/EarlRamirez/snipeit_iso In above github project, in https://github.com/EarlRamirez/snipeit_iso/blob/master/isolinux/grub.conf file, there is ‘@‘ symbol for splashimage, and for kernel, @KERNELPATH@, @ROOT@, etc. Will those be replaced by actual values? Where do actual values come from? How does actual values substitute those variables? Thanks again, - Xinhuan

2 1

Transparent Squid and FirewallD : fine-tuning question
by Nicolas Kovacs 19 May '20

19 May '20

Hi, I just setup a very basic HTTP proxy with Squid on a router running CentOS 7. Up until early 2020 I've been using a bone-headed shell script with iptables to configure my firewall. But I decided to follow advice from a few gurus on this list, and I've since moved my configurations to FirewallD, which works nicely. There's one configuration left to tackle, that's port redirection for the Squid proxy server. Which also works fine, though I'd like to figure out a little detail. Here goes. My router has two network interfaces, which I've aptly named WAN and LAN in the NetworkManager configuration: $ nmcli con show NAME UUID TYPE DEVICE WAN 9574b606-8f6d-3edc-95ad-8165df0f3fce ethernet enp2s0 LAN c726b168-1fcd-4dc5-a01d-8ad8a1ba38ee ethernet enp3s1 Squid is acting as a transparent proxy server: $ sudo grep http_port /etc/squid/squid.conf http_port 3128 transparent In my firewall configuration, all requests to port 80 (HTTP) are redirected to port 3128: $ sudo firewall-cmd --permanent --add-forward-port=port=80:proto=tcp:toport=3128:toaddr=192.168.3.1 $ sudo firewall-cmd --reload $ sudo firewall-cmd --list-all internal (active) target: default icmp-block-inversion: no interfaces: enp3s1 sources: services: dhcp dns http squid ssh ports: protocols: masquerade: no forward-ports: port=80:proto=tcp:toport=3128:toaddr=192.168.3.1 source-ports: icmp-blocks: rich rules: In the current state, this configuration works as expected. When a client desktop in the 192.168.3.0/24 network browses HTTP sites on the web, it appears in the Squid log on the server in /var/log/squid/access.log. And here comes the question. How can I redirect all HTTP requests to port 3128 EXCEPT THOSE THAT ARE DIRECTLY AIMED AT THE PROXY SERVER? Here's the thing. The proxy server (amandine.sandbox.lan) is also running httpd to display a static information page for the local network. Now client desktops can access http://amandine.sandbox.lan in a web browser just fine. But this still goes through the proxy, and I'd like these requests to rather be handled directly. In iptables syntax this would vaguely look like this: $ iptables -A PREROUTING -t nat -i 192.168.3.1 -p tcp \ ! -d 192.168.3.1 --dport 80 -j REDIRECT --to-port 3128 How can I translate the "! -d 192.168.3.1" part into some FirewallD-specific syntax ? Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

7 11

Centos8.1 Plymouthd crash 913: ply_event_loop_watch_for_timeout: Assertion `seconds > 0.0' failed.
by LAHAYE Olivier 18 May '20

18 May '20

Hi, I’m running a special initrd generated for SystemImager with a special dracut module that relies on plyouth scripted theme. It works perfectly on CentOS-6, CentOS-7, OpenSUSE-42.3, Fedora-29 (not tested later) and used to work on CentOS-8.0 Since CentOS-8.1 was released, IT chrashes with the following error: Plymouthd crash 913: ply_event_loop_watch_for_timeout: Assertion `seconds > 0.0' failed. I’m running quemu 5.0.0 with tianocore UEFI bios on MacOS (using accel=none or accel=hvf) (Bug also occurs with standard 256k bios) When I strace, I see multiple reasons but I can’t tell wich one is fatal. 1/ plymouthd reads /etc/Plymouth/plymouthd.conf (ok), then tries to read them from /var/run/plymouth/themes/<themename> instead of /usr/share/plymouth/themes/<themename>/ . As it fails it tries to read /var/run/plymouth/plymouthd.defaults (fails) then /usr/share/plymouth//plymouthd.defaults (ok) then it tries to read the theme /var/run/plymouth/themes/<themename>/<themename>.plymouth (fails) but never tries to read in from /usr/share/plymouth/themes/<themename>/<themename.plymouth> ??? It still continues 2/ After a few things, it tries to read /sys/devices/virtual/drm/ttm/uevent (ok) and the it tries to read /run/dev/data/+drm:ttm (fail). Is it expectable or does this means a problem like a missing udev rule or a boch driver bug or something else? 3/ Same as step 2 4/ Crash with @lymouthd: ply-event-loop.c:913: ply_event_loop_watch_for_timeout: Assertion `seconds > 0.0' failed. I’ve reported this in Centos-8.1 with no return and then RedHat-8.1 today. RedHat 8.1 bug report: https://bugzilla.redhat.com/show_bug.cgi?id=1836828 CentOS-8.1 bug report: https://bugs.centos.org/view.php?id=17140 Any idea where I could look for? More likely a plymouth bug or an udev missing rule or something else? (full dmesg and strace log in bug reports) Thanks a lot for any tips. PS: looking at google results, the only things I can find are very old bugs without resolution (not fixed and obsoleted due to new OS release) -- Olivier LAHAYE

1 0

Live Patching Upgrade CentOS 7
by Xinhuan Zheng 18 May '20

18 May '20

Dear All, Does anyone know how to to live patching upgrade of CentOS 7 without rebuilding the whole boot volume? I have enough disk space in Boot volume. I don’t want to go through creating a new VM and install CentOS 7 patch release. Thanks, - Xinhuan

1 0

kvm: C8 as guest on C6 host / huge delay while booting
by Leon Fauster 18 May '20

18 May '20

Since C8.1 kvm guests have a huge delay while booting on a kvm host based on C6. This delay was not present with C8.0. The "pause" happend direct after the grub step. The VNC session shows only a "_" character. Any ideas what changes? -- Leon

3 4

Missing announcement for the latest kernel
by David Hrbáč 18 May '20

18 May '20

Hi, It seems that kernel-2.6.32-754.29.2 has not been announced on the maillist. https://access.redhat.com/errata/RHSA-2020:2103 Regards, DH

1 0

Stuck Centos 7 to 8 upgrade
by Frank M. Ramaekers Jr. 16 May '20

16 May '20

Four problems below: # dnf -y groupupdate "Core" "Minimal Install" bintray-tvheadend-stable 0.0 B/s | 0 B 00:00 Failed to synchronize cache for repo 'bintray-tvheadend-stable', ignoring this repo. Last metadata expiration check: 0:03:11 ago on Sat 16 May 2020 12:30:47 PM CDT. Error: Problem 1: package python3-hawkey-0.35.1-9.el8_1.x86_64 requires librpm.so.8()(64bit), but none of the providers can be installed - package python3-hawkey-0.35.1-9.el8_1.x86_64 requires librpmio.so.8()(64bit), but none of the providers can be installed - package python3-dnf-plugins-core-4.0.8-3.el8.noarch requires python3-hawkey >= 0.34.0, but none of the providers can be installed - cannot install both rpm-libs-4.14.2-26.el8_1.x86_64 and rpm-libs-4.11.3-43.el7.x86_64 - package dnf-plugins-core-4.0.8-3.el8.noarch requires python3-dnf-plugins-core = 4.0.8-3.el8, but none of the providers can be installed - package deltarpm-3.6-3.el7.x86_64 requires librpm.so.3()(64bit), but none of the providers can be installed - package deltarpm-3.6-3.el7.x86_64 requires librpmio.so.3()(64bit), but none of the providers can be installed - conflicting requests - problem with installed package deltarpm-3.6-3.el7.x86_64 Problem 2: package python3-rhn-client-tools-2.8.16-13.module_el8.1.0+211+ad6c0bc7.x86_64 requires libgudev, but none of the providers can be installed - package python3-dnf-plugin-spacewalk-2.8.5-11.module_el8.1.0+211+ad6c0bc7.noarch requires python3-rhn-client-tools >= 2.8.4, but none of the providers can be installed - package libgudev-232-4.el8.i686 obsoletes libgudev1 < 230 provided by libgudev1-219-73.el7_8.6.x86_64 - package libgudev-232-4.el8.x86_64 obsoletes libgudev1 < 230 provided by libgudev1-219-73.el7_8.6.x86_64 - package dnf-plugin-spacewalk-2.8.5-11.module_el8.1.0+211+ad6c0bc7.noarch requires python3-dnf-plugin-spacewalk = 2.8.5-11.module_el8.1.0+211+ad6c0bc7, but none of the providers can be installed - package libgudev1-devel-219-73.el7_8.6.x86_64 requires libgudev1 = 219-73.el7_8.6, but none of the providers can be installed - conflicting requests - problem with installed package libgudev1-devel-219-73.el7_8.6.x86_64 Problem 3: package python3-dnf-4.2.7-7.el8_1.noarch requires dnf-data = 4.2.7-7.el8_1, but none of the providers can be installed - package dnf-4.2.7-7.el8_1.noarch requires python3-dnf = 4.2.7-7.el8_1, but none of the providers can be installed - cannot install both dnf-data-4.2.7-7.el8_1.noarch and dnf-data-4.0.9.2-1.el7_6.noarch - package yum-4.2.7-7.el8_1.noarch requires dnf = 4.2.7-7.el8_1, but none of the providers can be installed - package python2-dnf-4.0.9.2-1.el7_6.noarch requires dnf-data = 4.0.9.2-1.el7_6, but none of the providers can be installed - conflicting requests - problem with installed package python2-dnf-4.0.9.2-1.el7_6.noarch Problem 4: problem with installed package ipa-client-4.6.6-11.el7.centos.x86_64 - package ipa-client-4.6.6-11.el7.centos.x86_64 requires libcollection.so.2()(64bit), but none of the providers can be installed - package ipa-client-4.8.0-10.module_el8.1.0+255+aa2bdb39.x86_64 requires libxmlrpc_util.so.4()(64bit), but none of the providers can be installed - cannot install both libcollection-0.7.0-39.el8.x86_64 and libcollection-0.7.0-32.el7.x86_64 - cannot install both xmlrpc-c-1.51.0-5.el8.x86_64 and xmlrpc-c-1.32.5-1905.svn2451.el7.x86_64 - package sssd-kcm-2.2.0-19.el8_1.1.x86_64 requires libcollection.so.4()(64bit), but none of the providers can be installed - package libreport-plugin-mantisbt-2.1.11-53.el7.centos.x86_64 requires libxmlrpc_util.so.3()(64bit), but none of the providers can be installed - conflicting requests - problem with installed package libreport-plugin-mantisbt-2.1.11-53.el7.centos.x86_64 - package ipa-client-4.8.0-11.module_el8.1.0+253+3b90c921.x86_64 is excluded - package ipa-client-4.8.0-13.module_el8.1.0+265+e1e65be4.x86_64 is excluded (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages) Ideas? -Frank

2 1

CentOS 7 - xfs shrink & expand
by Frank M. Ramaekers Jr. 16 May '20

16 May '20

I'm having some difficulty finding a method to shrink my /home to expand my /. They both correspond to LVMs. It is my understanding that one cannot shrink a xfs filesystem. One must back it up (xfsdump), remove (lvremove) redefine it and then restore it back (xfsrestore). Okay, I'm running into a problem where /home needs to be "unused". If tried going in to "maintance mode", but I ran into a problem with the mount command (after issuing a 'chroot /sysroot'). I then tried using SystemRescueCD to boot to, but it wouldn't mount my 32TB RAID USB drive (something about too big). Any thoughts or suggestions? -Frank

5 8

CentOS 8 latest sssd src RPM
by Juan Jose Villaplana Querol 16 May '20

16 May '20

Hi, I can find latest sssd RPM at http://mirror.centos.org/centos/8.1.1911/BaseOS/x86_64/os/Packages/sssd-2.2…, but I can't find his source RPM at http://vault.centos.org/8.1.1911/BaseOS/Source/SPackages/ ( https://centos.pkgs.org/8/centos-baseos-x86_64/sssd-2.2.0-19.el8_1.1.x86_64… ) Is there something wrong with latest sssd src RPM? I have also noticed that retrieving src rpms via 'dnf download --source' doesn't work with the default CentOS-Sources.repo configuration. This has been reported here: https://bugs.centos.org/view.php?id=17120 Best regards, Juanjo -- Juan José Villaplana Querol/Servei d'Informàtica/Universitat Jaume I

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss