- Discuss - lists.centos.org

amanda broken pipe
by Helmut Drodofsky 16 Feb '19

16 Feb '19

Hello, we are using amanda for backup with 2 tape libraries. Last days we made CentOS 7 update to CentOS Linux release 7.6.1810 (Core) Includes from base repository: amanda-client-3.3.3-21.el7.x86_64 amanda-server-3.3.3-21.el7.x86_64 amanda-3.3.3-21.el7.x86_64 amanda-libs-3.3.3-21.el7.x86_64 deleted: version 3.3.3-17 Before the update (= version 3.3.3-17) we run to configs in parallel without any problem. After the update: the first startet config: OK The second started config: broken pipe. The information in the amanda Mail: ..... The next 3 tapes Amanda expects to use are: am503, am518, am519. The next 2 new tapes already labelled are: am511, am514 FAILURE DUMP SUMMARY: planner: ERROR Request to ph04.panama.int failed: error sending REQ: write error to: Broken pipe .... Same problem with amcheck if one amanda config is running: ... Amanda Backup Client Hosts Check -------------------------------- WARNING: ph04.panama.int: selfcheck request failed: error sending REQ: write error to: Broken pipe Client check: 1 host checked in 0.050 seconds. 1 problem found. (brought to you by Amanda 3.3.3) Any ideas or have I to go back to former version? -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

1 0

Please Recommend Affordable and Reliable Cloud Storage for 50 TB of Data
by Turritopsis Dohrnii Teo En Ming 16 Feb '19

16 Feb '19

Hi, Could you recommend affordable and reliable cloud storage for 50 TB of data? Here are some important factors to consider: 1. Personal/non-commercial use. 2. Must be affordable, since I am unemployed most of the time and have super low levels of income for the past 12 years since I graduated from the National University of Singapore in 2007. 3. Cloud storage provider must not be a fly-by-night company, that is, it will not suddenly close down the next day. Please advise. Thank you. ===BEGIN EMAIL SIGNATURE=== The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END EMAIL SIGNATURE===

15 25

Aeskulap & kernel.x86_64 3.10.0-957.5.1.el7
by Gregory P. Ennis 16 Feb '19

16 Feb '19

Everyone, I wanted to report that the aeskulap dicom viewer available on the nux.dextop repositories is now working with the lastest kernel update : kernel.x86_64 3.10.0-957.5.1.el7. Thanks much to everyone!!! -- Greg Ennis

1 1

C7 basic install, HATE
by mark 16 Feb '19

16 Feb '19

I've got an old server, that I'm *trying* to rebuild from C6. Our regular key, with the kickstarts, etc, simply won't boot. Just a blank screen, and it never goes anywhere. So I'm trying to build it from a year-old regular installer. 100% of the time, the graphical screen is screwed. Resolution's so big that I cannot see the right-hand 10% or 15% of the screen. There doesn't seem to be any way that I've found yet to make it higher res, so I can read it. It's *not* the monitor's fault. It is an ancient Matrox video card... but I would have thought the VESA driver could handle it. Any suggestions? mark

5 7

/boot partition running out of space randomly. Please help!
by Sean Son 16 Feb '19

16 Feb '19

Hello all First off, I am running Oracle Linux 7.6 on a Hyper-V 2016 VM for a customer. I know this is not an Oracle Linux mailling list, but because Oracle Linux and CentOS are so similar, to an extent, I figured why not ask on here because someone MIGHT know the answer.. Here is the issue. I have a 600MB /boot partition allocated on a UEFI system. The /boot/efi partition is on a separate EFI partition. Recently, I noticed that this system has been crashing every few minutes and when I checked the disk space, I noticed that the /boot partition has zero free space available. I removed all of the old kernels and left the running kernel in place, in hopes that will free up some space. It freed up about 50MB or so, but then the system would crash again. After I would reboot the VM to bring the system back up, I ran a df -h /boot, and the results were reporting ZERO disk space again for the /boot partition.. It makes absolutely no sense how a partition which is generally static UNLESS you move something into it, is running out of space after space has been manually freed up in the partition! What boggles me even more is that when I do an ls -lh /boot, the file systems do not add up to 600M (well 594M) at all. See below: df -h Filesystem Size Used Avail Use% Mounted on devtmpfs 2.8G 0 2.8G 0% /dev tmpfs 2.8G 0 2.8G 0% /dev/shm tmpfs 2.8G 8.5M 2.8G 1% /run tmpfs 2.8G 0 2.8G 0% /sys/fs/cgroup /dev/mapper/VolGroup00-LogVolRoot 30G 19G 12G 63% / /dev/sda2 594M 594M 0 100% /boot /dev/sda1 238M 9.7M 229M 5% /boot/efi /dev/mapper/VolGroup00-LogVolHome 3.3G 415M 2.9G 13% /home tmpfs 565M 0 565M 0% /run/user/54321 tmpfs 565M 0 565M 0% /run/user/1000 ]$ ls -lh /boot total 92M -rw-r--r-- 1 root root 179K Dec 12 22:52 config-4.14.35-1844.0.7.el7uek.x86_64 drwx------ 3 root root 16K Dec 31 1969 efi drwx------. 2 root root 21 Feb 8 15:55 grub2 -rw-------. 1 root root 54M Aug 28 12:31 initramfs-0-rescue-0287c4db206d4a9abe14f750b9091a01.img -rw------- 1 root root 22M Dec 21 17:24 initramfs-4.14.35-1844.0.7.el7uek.x86_64.img -rw-r--r-- 1 root root 329K Dec 12 22:52 symvers-4.14.35-1844.0.7.el7uek.x86_64.gz -rw-r--r-- 1 root root 3.6M Dec 12 22:52 System.map-4.14.35-1844.0.7.el7uek.x86_64 -rwxr-xr-x. 1 root root 6.1M Aug 28 12:31 vmlinuz-0-rescue-0287c4db206d4a9abe14f750b9091a01 -rwxr-xr-x 1 root root 7.2M Dec 12 22:52 vmlinuz-4.14.35-1844.0.7.el7uek.x86_64 I have no idea what is going on here and why the space keeps filling up and the VM crashing! ANY and all help will be greatly appreciated! Thanks! I am running the following kernel: 4.14.35-1844.0.7.el7uek.x86_64 Thanks! Sean S.

4 4

DNSSEC Questions
by Paul R. Ganci 15 Feb '19

15 Feb '19

Last weekend I had my DNSSEC keys expire. I discovered that they had expired the hard way... namely randomly websites could not be found and email did not get delivered. It seems that the keys were only valid for what I estimate was about 30 days. It is a real PITA to have update the keys, restart named and then update Godaddy with new digests. The first part of the problem is fairly manageable in the sense I already have a script that partially can do the job of updating the DNS server. However from what I can tell the only way I can update the DNSSEC of my 8 domains is via the Godaddy control panel GUI. So a couple of questions. 1.) Is anyone aware of anyway to update Godaddy DNSSEC data via a Centos 7 bash shell? I will contact Godaddy but I suspect I am SOL but thought I would ask here thinking somebody else may have already run into this issue. 2.) Assuming the answer to DNSSEC is no, can I at least have the keys last longer than they do by default. I am presently creating the keys via: > dnssec-keygen -a NSEC3RSASHA1 -b 2048 -n ZONE zone > dnssec-keygen -f KSK -a NSEC3RSASHA1 -b 4096 -n ZONE zone It is very unclear to me given the dnssec-keygen man page how to set the date so that I could get 90 days or even more per key. The descriptions I found about constructing rolling keys was even more cryptic to me. For example, how do you use these switches: -A date/offset Sets the date on which the key is to be activated. After that date, the key will be included in the zone and used to sign it. If not set, and if the -G option has not been used, the default is "now". -D date/offset Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.) -I date/offset Sets the date on which the key is to be retired. After that date, the key will still be included in the zone, but it will not be used to sign it. -P date/offset Sets the date on which a key is to be published to the zone. After that date, the key will be included in the zone but will not be used to sign it. If not set, and if the -G option has not been used, the default is "now". -R date/offset Sets the date on which the key is to be revoked. After that date, the key will be flagged as revoked. It will be included in the zone and will be used to sign it. Is it as simple as setting the -I and -R switches to something like +90d At least if I can get the DNS server to update via a cron job even if the 1st item will always have to be done manually that would be help. Thanks for your help. -- Paul (ganci(a)nurdog.com) Cell: (303)257-5208

3 5

question about upgrade qemu and libvirtd
by rong zhao 15 Feb '19

15 Feb '19

Hi Team, I am not sure if I should put my question here, I have googled long time, no explicit information found. Background: We need to support KVM encryption and decided to use LUKS. Refer to:https://libvirt.org/formatsecret.html#VolumeUsageType libvirtd and KVM should be able to support LUKS format disk directly. Unfortunately, seems that we need to use libvirt2.2+ and qemu 2.6+, because our current qemu-kvm version does not support luks format: And our hypervisor's OS is CentOS 7.2 with libvirt 2.0 and qemu-kvm 1.5.3 Question: Is there any safe way to upgrade to libvirt 2.2 and qemu 2.6? Safe way means: do not need to reboot hyper or VM, do not impact VM types support . Any suggestion is welcome. Thanks.

3 2

Centos bug 15570 - Not just a VBOX bug, can also reproduce on direct hardware install
by Steve Gomez 15 Feb '19

15 Feb '19

Ran into this rather frustrating bug when working with VBOX on a Windows 10 host. It should come as no surprise that I would hit this bug when installing CentOS, and also with RHEL 7 Server with GUI (since you get the same kernel). Based on information from your bug list, I was fortunately able to workaround the trouble with: wget https://people.centos.org/toracat/kernel/7/plus/bug15570new/kernel-3.10.0-9… wget https://people.centos.org/toracat/kernel/7/plus/bug15570new/kernel-devel-3.… yum -y localinstall kernel-3.10.0-957.1.3.bug15570.plus.el7.x86_64.rpm yum -y localinstall kernel-devel-3.10.0-957.1.3.bug15570.plus.el7.x86_64.rpm However, the bug lists seem to refer only to issues with VirtualBox. I have experienced the same symptom when installing on a "hardware" system (no hypervisor). The same commands above also provide a workaround here, but thought the flag should be raised for CentOS and RHEL that it doesn't seem to be just VBOX. Perhaps the priority of this issue should be raised further up the pole since I can't imagine it being a good experience for someone who doesn't know how to dig through a problem like this. The average bear would install something else and move on. In any case, thank you for the patch information. Look forward to a "real" fix soon. Other than that I'm really liking CentOS 7. SG

2 2

possible issue in Anaconda WRT processing %posttrans scriptlets?
by Brian Reichert 14 Feb '19

14 Feb '19

This sounds really weird, bear with me. I've put together a custom install CD derived from CentOS-7-x86_64-Minimal-1810.iso. I've added my RPMs in the mix, and have my dependencies lined up. The installation of the RPMs fail, from packaging.log: ... 15:42:35,741 INFO packaging: libwbclient-4.8.3-4.el7.x86_64 (320/432) 15:42:35,741 INFO packaging: samba-client-libs-4.8.3-4.el7.x86_64 (321/432) 15:42:35,742 INFO packaging: samba-libs-4.8.3-4.el7.x86_64 (322/432) 15:42:35,743 INFO packaging: samba-common-tools-4.8.3-4.el7.x86_64 (323/432) 15:42:35,743 INFO packaging: uid-admin-1-1.noarch (324/432) 15:42:35,743 INFO packaging: creating admin smbpasswd ... 15:42:35,743 INFO packaging: pdbedit: error while loading shared libraries: libwbclient.so.0: cannot open shared object file: No such file or directory 15:42:35,745 INFO packaging: error: %pre(uid-admin-1-1.noarch) scriptlet failed, exit status 127 15:42:35,745 INFO packaging: ==== end rpm scriptlet logs ==== To rewind this: - in my uid-admin RPM's %pre scriptlet, I invoke /usr/bin/pdbedit. - /usr/bin/pdbedit is provided by samba-common-tools. - samba-common-tools requires libwbclient. and we can see they have all gotten installed in the correct order. When I get to an alternate console, I did a search under /mnt/sysimage for libwbclient.so.0, and all I can find is this: /mnt/sysimage/usr/lib64/samba/wbclient/libwbclient.so.0 I can see that libwbclient's %posttrans scriptlet should have installed this shared library: # It has to be posttrans here to make sure all files of a previous version # without alternatives support are removed /usr/sbin/update-alternatives \ --install \ /usr/lib64/libwbclient.so.0.14 \ libwbclient.so.0.14-64 \ /usr/lib64/samba/wbclient/libwbclient.so.0.14 \ 10 /sbin/ldconfig Yet clearly, that didn't happen, and there's no dialog to the contrary. I was able to extract that scriptlet, and run it in the chrooted environment successfully. Is there something about anaconda-yum under CentOS 7 that does something counterintuitive WRT %posttrans scriptlets? -- Brian Reichert <reichert(a)numachi.com> BSD admin/developer at large

1 0

dont run cron.d- when cron.daily-scripts are running
by Leon Fauster 14 Feb '19

14 Feb '19

EL6 context: cronie-1.4.4-16.el6_8.2.x86_64 cronie-anacron-1.4.4-16.el6_8.2.x86_64 crontabs-1.10-33.el6.noarch I have some cron.d entries that execute scripts in minute intervals and I'm wondering how could an "official" way look like, to have a condition to not run cron.d entries when cron.daily scripts are running. Sure, I can hack something around file timestamps or so but that feels not so streamlined ... I'd really appreciate any ideas ... -- LF

3 4

Support for Argon2 for password hashing
by Robert Moskowitz 13 Feb '19

13 Feb '19

Is there any information on adding support for Argon2? I have been working on my new mailserver and this came up in moving from the default MD5 hash to more 'modern' hashes like SHA256 and SHA512. Then I was pointed to the work behind Argon2, and I see that it is moving through the IRTF cfrg workgroup: draft-irtf-cfrg-argon2-04.txt It is a 'purpose built' hash for passwords, with recommendations that new implementations use it. Of course can't use it if crypt does not support it.... thanks

3 3

freeIPA from CR repo - conflicts
by lejeczek 13 Feb '19

13 Feb '19

hi guys do you see the same by any chance? .... --> Processing Dependency: ipa-server-common = 4.6.4-10.el7.centos.2 for package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch --> Processing Dependency: ipa-common = 4.6.4-10.el7.centos.2 for package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch --> Finished Dependency Resolution Error: Package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-server-common = 4.6.4-10.el7.centos.2 Installed: ipa-server-common-4.6.4-10.el7.centos.noarch (@cr) ipa-server-common = 4.6.4-10.el7.centos Error: Package: ipa-server-4.6.4-10.el7.centos.x86_64 (@cr) Requires: python2-ipaserver = 4.6.4-10.el7.centos Removing: python2-ipaserver-4.6.4-10.el7.centos.noarch (@cr) python2-ipaserver = 4.6.4-10.el7.centos Updated By: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) python2-ipaserver = 4.6.4-10.el7.centos.2 Error: Package: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos Error: Package: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-client-common = 4.6.4-10.el7.centos.2 Installed: ipa-client-common-4.6.4-10.el7.centos.noarch (@cr) ipa-client-common = 4.6.4-10.el7.centos Error: Package: python2-ipalib-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos Error: Package: ipa-client-4.6.4-10.el7.centos.x86_64 (@cr) Requires: python2-ipaclient = 4.6.4-10.el7.centos Removing: python2-ipaclient-4.6.4-10.el7.centos.noarch (@cr) python2-ipaclient = 4.6.4-10.el7.centos Updated By: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) python2-ipaclient = 4.6.4-10.el7.centos.2 Error: Package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest

1 0

Cups Ink Levels
by Mark LaPierre 13 Feb '19

13 Feb '19

Hey all, In this week's Open Source Highlights I read: "Check ink level: If you have an Epson, Canon, HP, or Sony printer, you can see its ink level with a simple application. Look for the "ink" package in your distribution repositories." I checked my package manager but I didn't find any "ink" package. Does such a package exist for Centos? Is so, what it the package called? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 1

persistent generic device for tape changer
by Helmut Drodofsky 12 Feb '19

12 Feb '19

Hello, mtx and therefor amanda use generic device /dev/sg<x> for tape changer. These devices change on reboot. How to make them persistent? /dev/sch0 and /dev/sch1 seem to be persistent. /dev/tape/by-id/ shows links from WWID to generic device An UDEV rule could help? I have not found any example. -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

3 5

bare-metal backup before update--options?
by Fred Smith 12 Feb '19

12 Feb '19

Hi all! I'm a "nervous nellie", I have not yet updated my 7.5 desktop to 7.6 because (1) it has an Nvidia card, and (2) I've heard of problems upgrading on top of software RAID (using RAID1 with 2 drives). I need to upgrade it to stay secure, and I want to do a bare-metal backup first (so I can put it all back as it now is, in case it explodes in my face), so I'm trying to figure out the safest way to do that. Here are the choices as I see them, I'd appreciate comments/thoughts: 1. boot from live DVD and manually reassemble the RAID array (how would I do that?) 2. degrade the array (with appropriate commands) so that it is running on just one drive, then boot a live DVD and use dd to back up that drive. 3. Other choices you can suggest? then after successfully getting a bare-metal backup, reboot it with the full RAID array and run the update. Thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------

3 4

time --verbose not working
by Robert Moskowitz 12 Feb '19

12 Feb '19

I can't seem to get the verbose mode of time working. I am trying to compare the compute cost of sha256-crypt to sha512-crypt: time doveadm pw -s sha256-crypt -p secret real 0m0.128s user 0m0.081s sys 0m0.040s time doveadm pw -s sha512-crypt -p secret real 0m0.162s user 0m0.105s sys 0m0.047s But all attempts to add --verbose fail: time --verbose doveadm pw -s sha512-crypt -p secret -bash: --verbose: command not found Googling gives different recommendations, none work for me.

3 4

Forums down?
by J Martin Rushton 11 Feb '19

11 Feb '19

All day I've been getting "Sorry but you cannot use search at this time. The server has high load. Please try again later." from https://www.centos.org/forums/search.php?search_id=unreadposts Is there a problem? -- J Martin Rushton MBCS

2 2

CentOS-announce Digest, Vol 168, Issue 3
by centos-announce-request＠centos.org 10 Feb '19

10 Feb '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0229 Important CentOS 7 ghostscript Security Update (Johnny Hughes) 2. CESA-2019:0231 Important CentOS 7 spice Security Update (Johnny Hughes) 3. CESA-2019:0270 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 9 Feb 2019 14:46:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0229 Important CentOS 7 ghostscript Security Update Message-ID: <20190209144658.GA24698(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0229 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0229 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a14798c9c960bb3c11ccb5977fc375b18f76f7b71980481ce6236d105184774a ghostscript-9.07-31.el7_6.9.i686.rpm 3362e81af80b52c0b1c994894366639cf47140c92c1ca66068b835321c86bd7b ghostscript-9.07-31.el7_6.9.x86_64.rpm fde0ef7fbc8d62436c35eb4be841d91a2b72b8736bda431e53b5ff53a0e051e8 ghostscript-cups-9.07-31.el7_6.9.x86_64.rpm aba79f9966ec6e298c87c2e0c11984ec5f6ab5541e960b1c5d183330f915a45e ghostscript-devel-9.07-31.el7_6.9.i686.rpm c910264022ef30db7ce8a197aa99a934c163ef22a47f379463462992436624a8 ghostscript-devel-9.07-31.el7_6.9.x86_64.rpm ece502d88db4a6450f4915d8e1fbb7685371fdaab5d3ad99b55ab3b81354de49 ghostscript-doc-9.07-31.el7_6.9.noarch.rpm 94520fdc4af704dd62edd1243395155125023bda580100c12392da91fd5a23ae ghostscript-gtk-9.07-31.el7_6.9.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Sat, 9 Feb 2019 14:47:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0231 Important CentOS 7 spice Security Update Message-ID: <20190209144711.GA24762(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0231 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0231 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c6979682c6dc1a8170f1ee412fb7c0e48b5172bb6bb646d33ac5cb8d04e7e277 spice-server-0.14.0-6.el7_6.1.x86_64.rpm 302138f4831d8fc56db83fe48712328d7dc8fb9440bfd0014df4ec84dfd7ed23 spice-server-devel-0.14.0-6.el7_6.1.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Sat, 9 Feb 2019 14:47:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0270 Important CentOS 7 thunderbird Security Update Message-ID: <20190209144743.GA24839(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0270 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0270 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c456b3359a02d7a2f7168682a28e03fa0a34907073fdfe07ee0a620d5a506cc5 thunderbird-60.5.0-1.el7.centos.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 168, Issue 3 ***********************************************

1 0

Latest kernel crashes X and gnome
by Rob Kampen 10 Feb '19

10 Feb '19

Hi, Anyone else having problems with kernel 3.10.0-957.5.1.el7.x86_64? After my yum update today a reboot hung. A quick look at the Xorg.0.log shows two of my graphics cards appear to be working okay but the third one (I have two nvidia cards with a monitor each and then use the inbuilt intel one for the third monitor) gives: <cut> [ 14.246] (II) Loading sub module "fb" [ 14.246] (II) LoadModule: "fb" [ 14.247] (II) Loading /usr/lib64/xorg/modules/libfb.so [ 14.247] (II) Module fb: vendor="X.Org Foundation" [ 14.247] compiled for 1.20.1, module version = 1.0.0 [ 14.247] ABI class: X.Org ANSI C Emulation, version 0.4 [ 14.247] (II) UnloadModule: "vesa" [ 14.247] (II) Unloading vesa [ 14.247] (EE) modeset(G0): drmSetMaster failed: Invalid argument [ 14.247] (EE) Fatal server error: [ 14.247] (EE) AddScreen/ScreenInit failed for gpu driver 0 -1 [ 14.247] (EE) [ 14.247] (EE) Please consult the The X.Org Foundation support at http://wiki.x.org for help. [ 14.247] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information. [ 14.247] (EE) [ 14.257] (EE) Server terminated with error (1). Closing log file. </end> So a reboot to kernel 3.10.0-957.1.3.el7.x86_64 and all is well. I note that the update also updated : Updated xorg-x11-drv-ati-18.0.1-1.el7.x86_64 @base Update 18.1.0-1.el7_6.x86_64 @updates Updated xorg-x11-server-Xorg-1.20.1-5.1.el7.x86_64 @updates Update 1.20.1-5.2.el7_6.x86_64 @updates Updated xorg-x11-server-common-1.20.1-5.1.el7.x86_64 @updates Update 1.20.1-5.2.el7_6.x86_64 @updates Before I start trying to solve this by myself, just wanted to see if anyone else has had issues. TIA Rob

1 1

firefox-60.5.0-2.el7.centos.x86_64 and Netflix
by Bernard Lheureux 09 Feb '19

09 Feb '19

Hi all, Since the last upgrade to firefox-60.5.0-2.el7.centos.x86_64 on my CentOS 7, it is no longer possible to watch Netflix with my Firefox, it always says that "Firefox is installing components needed to play the audio or video on this page. Please try again later." But nothing happens and Netflix is no longer readable with Firefox... I tried downgrading to firefox-60.4.0-1.el7.centos.x86_64 and al is now correct with Netflix... Anyone had experienced the same behavior ? -- (°- Bernard Lheureux //\ Linux System Administrator v_/_ MailTo:bernard@lheureux.be

4 4

CentOS 7, rsyslog and redis
by Pete Biggs 09 Feb '19

09 Feb '19

TL;DR: Is there a sensible way to get rsyslog to talk to redis on CentOS 7. The official way is to use the omhiredis plugin, but that doesn't seem to exist in the CentOS 7 repositories? (It's how I do it on my Fedora box.) The long version: I'm trying to rationalise logging and am using an ELK stack. When I've done this in the past it has suffered badly from congestion at peak times with messages being dropped and various issues on the clients. The sensible thing seemed to be putting redis between the clients and ELK - that works in my test setup from a Fedora box. My problem though is ingesting the logs from my CentOS servers. By far the easiest thing is to get rsyslog to send things directly to redis, but that needs the omhiredis plugin. The second choice is to use filebeat to scan the log files - but if I want to have things like facility and severity logged, I have to use custom rsyslog templates and it's a pain trying to get filebeat to parse them (and the filebeat redis output seems a bit flaky as well). I can see that syslog-ng has redis support, but I would prefer to keep rsyslog since that is the default. So, what do people do to ship their logs to ELK (or, specifically, logstash). Is there some magic, neat solution? Or do I keep just hammering away at filebeat -> redis -> logstash until I get something that's reliable? Or do I go down the syslog-ng route? P.

1 0

CentOS-announce Digest, Vol 168, Issue 2
by centos-announce-request＠centos.org 09 Feb '19

09 Feb '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0232 Important CentOS 6 spice-server Security Update (Johnny Hughes) 2. CESA-2019:0269 Important CentOS 6 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 8 Feb 2019 14:39:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0232 Important CentOS 6 spice-server Security Update Message-ID: <20190208143905.GA63305(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0232 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0232 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 14d17995139944b6a2f31fe65c77cbee19bac2a4dd472fdc515b0658eaf33bdc spice-server-0.12.4-16.el6_10.3.x86_64.rpm 86bfc7eb53ddbe24d421f84dc102bf7a73d1f5c26e7a294a9085323914ac0791 spice-server-devel-0.12.4-16.el6_10.3.x86_64.rpm Source: 7cca30eb830211771a6a8ddae5f78398cf07934f00d4e1e4c81d892d96641008 spice-server-0.12.4-16.el6_10.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 8 Feb 2019 14:40:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0269 Important CentOS 6 thunderbird Security Update Message-ID: <20190208144051.GA63518(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0269 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0269 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 59270993b2b4eef241e0f3768836517725647ba858fb265d3af6d86e39681022 thunderbird-60.5.0-1.el6.centos.i686.rpm x86_64: 0caae2e4aee38ac3452b2085159f3df856c49dad7dec212ef236298a20ebba95 thunderbird-60.5.0-1.el6.centos.x86_64.rpm Source: ae552e7088c6e71e7f07f13c9f5a687b0a26cd0d7128ad28552fa76e8c9b93ad thunderbird-60.5.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 168, Issue 2 ***********************************************

1 0

Did I install too much for clamav?
by Robert Moskowitz 08 Feb '19

08 Feb '19

I just checked the status of amavisd: # systemctl -l status amavisd ● amavisd.service - Amavisd-new is an interface between MTA and content checkers. Loaded: loaded (/usr/lib/systemd/system/amavisd.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2019-02-07 08:16:59 EST; 7h ago Docs: http://www.ijs.si/software/amavisd/#doc Process: 5715 ExecStart=/usr/sbin/amavisd -c /etc/amavisd/amavisd.conf (code=exited, status=0/SUCCESS) Main PID: 6327 (/usr/sbin/amavi) CGroup: /system.slice/amavisd.service ├─6327 /usr/sbin/amavisd (master) ├─6336 /usr/sbin/amavisd (virgin child) └─6337 /usr/sbin/amavisd (virgin child) Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .lha at /usr/bin/7z Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .iso at /usr/bin/7z Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .exe at /usr/bin/unarj Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Using primary internal av scanner code for ClamAV-clamd Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Deleting db files __db.002,snmp.db,nanny.db,__db.001,__db.003 in /var/spool/amavisd/db Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Creating db in /var/spool/amavisd/db/; BerkeleyDB 0.51, libdb 5.3 Feb 07 08:17:00 klovia.htt-consult.com amavis[6327]: initializing Mail::SpamAssassin (0) Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: SpamControl: init_pre_fork on SpamAssassin done Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: extra modules loaded after daemonizing/chrooting: /usr/lib/perl5/vendor_perl/auto/Net/SSLeay/autosplit.ix, /usr/lib/perl5/vendor_perl/auto/Net/SSLeay/randomize.al, /usr/share/perl5/Net/libnet.cfg, IO/Socket/SSL.pm, Mail/SpamAssassin/Plugin/FreeMail.pm, Mail/SpamAssassin/Plugin/SpamCop.pm, Net/Cmd.pm, Net/Config.pm, Net/SMTP.pm, Net/SSLeay.pm Primary and secondary AV scanner? Is this right? I installed: # grep clam /var/log/yum.log* /var/log/yum.log:Feb 06 08:40:06 Installed: clamav-filesystem-0.101.1-1.el7.noarch /var/log/yum.log:Feb 06 08:40:29 Installed: clamav-lib-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:40:30 Installed: clamav-update-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:40:59 Installed: clamav-devel-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:41:01 Installed: clamav-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:46:16 Installed: clamd-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:46:17 Installed: clamav-server-systemd-0.101.1-1.el7.armv7hl thanks

2 2

CentOS 7.6 update with gettimeofday()
by david allan finch 08 Feb '19

08 Feb '19

In my app compiled on another linux I am getting Assertion 'clock_gettime(clock_id, &ts) == 0' failed at src/shared/time-util.c:34, function now(). Aborting. when calling gettimeofday() on an update CentOS (did not fail in 7.5). Is it possible that the update has changed the size of the types in the timeval struct and causing the crash? Or has there be some for of bug fix etc? Regards

2 1

netmask on aliases overriden by netmask on interface
by James B. Byrne 08 Feb '19

08 Feb '19

CentOS-6.10 We have a host with the following ifcfg file contents: BOOTPROTO=none BROADCAST="" DEFROUTE=yes DEVICE=eth1 . . . GATEWAY=X.Y.Z.234 IPADDR=A.B.C.2 IPV4_FAILURE_FATAL=yes NAME="LAN Link - eth1" NETMASK="255.255.255.128" NETWORK="A.B.C.0" NM_CONTROLLED=no ONBOOT=yes PREFIX=25 TYPE=Ethernet USERCTL=no And an aliased ifcfg containing this: BOOTPROTO="none" BROADCAST="192.168.8.255" DEVICE="eth1:192008001" IPADDR="192.168.8.1" IPV6INIT="no" NETMASK="255.255.255.0" NETWORK="192.168.8.0" ONPARENT="yes" However, ifconfig shows this: # ifconfig eth1:192008001 eth1:192008001 Link encap:Ethernet HWaddr 00:25:90:61:74:C1 inet addr:192.168.8.1 Bcast:192.168.8.255 Mask:255.255.255.128 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Interrupt:17 Memory:feae0000-feb00000 Which shows that the network mask is determined by the interface mask and is not overridden by the alias definition. Is this expected behaviour? Does this mean that a particular physical interface cannot belong to more than one network, or at least not to networks having differing cidr masks? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

C7, enable an abrt for a daemon
by mark 08 Feb '19

08 Feb '19

I've mentioned here before that gssproxy is crashing all over the place with a SEGV. However, there's no /var/spool/abrt/... when it does. How do I enable the daemon to give me an abrt with information? I'm just not sure of what the right word is for systemd, so online searching isn't always useful. Thanks in advance. mark

1 0

systemd
by Jerry Geis 08 Feb '19

08 Feb '19

Hi All - I have a systemd service file to start my application. Part of my service file is: [Service] Type=forking ExecStart=/path to start ExecStop=/path to stop RemainAfterExit=yes This works fine "normally". However - when I do a "yum update; and reboot" my script detects a kernel change and now does a number of "recompiling" steps for drivers and such before starting my application. Somewhere along the way that just stops. I'm half way into recompiling those drivers and it just stops. Is there something else I need in the service file ? Thanks Jerry

3 2

CentOS 6 and 389 Directory Server
by Eugene Poole 07 Feb '19

07 Feb '19

I'm not sure it this is the correct location to ask these questions, but ... In the past when I worked for a living the place where I worked had thousands of RHEL Linux servers on various hardware, but the access was controlled by Windows Active Directory and a third party piece of software that was the middle-man between the 2. Now that I no longer work I'm trying to build a CentOS Linux environment where the access is controlled by 389-Directory Server. But I have no practical experience with 389-Directory Server (Question 1) so I'm looking for a tutorial or 'How To' to put information into 389-DS from a machine that is currently running? (Question 2) Can I export the 389-DS database to a LDIF file, migrate my machine from CentOS 6 to CentOS 7 by doing a fresh CentOS 7 install. Install 389-DS and import the just created LDIF file? I want to use 389-DS (or OpenLDAP) because as my environment grows defining everything locally is becoming hard to be exact. Any comments will be helpful TIA -- Eugene Poole Woodstock, Georgia

2 1

Pb with bounding
by Pierre Malard 07 Feb '19

07 Feb '19

Hi, We have a Dell server with 4 Ethernet interface. I would to aggregate them in a bond. Everything work but the default gateway doesn’t work on the « bond0 » interface and I have no links. My configuration: - CentOS 7: :/etc/sysconfig/network-scripts# uname -a Linux nas-mtd2 3.10.0-957.5.1.el7.x86_64 #1 SMP Fri Feb 1 14:54:57 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux - NetworkManager disabled: :/etc/sysconfig/network-scripts# systemctl list-unit-files | grep NetworkManager NetworkManager-dispatcher.service disabled NetworkManager-wait-online.service disabled NetworkManager.service disabled - ifcfg-em1 to em4 (they are identical): :/etc/sysconfig/network-scripts# cat ifcfg-em2 NAME=bond0-slave[1 to 4] DEVICE=em[1 to 4] TYPE=Ethernet BOOTPROTO=none ONBOOT=yes MASTER=bond0 SLAVE=yes NM_CONTROLLED=no - the bond0 declaration: :/etc/sysconfig/network-scripts# cat ifcfg-bond0 DEVICE=bond0 TYPE=Ethernet BONDING_MASTER=yes BOOTPROTO=none ONBOOT=yes NM_CONTROLLED=no # IP IPADDR=172.16.1.128 PREFIX=16 GATEWAY=172.16.0.254 # Bonding BONDING_OPTS="mode=802.3ad ad_select=stable use_carrier=1 miimon=100 arp_ip_target=172.16.1.128 updelay=100 lacp_rate=fast" USERCTL=no After a « systemctl restart network »: :/etc/sysconfig/network-scripts# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:0e brd ff:ff:ff:ff:ff:ff 3: em2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 4: em3: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 5: em4: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 6: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet 172.16.1.128/16 brd 172.16.255.255 scope global bond0 valid_lft forever preferred_lft forever And the route command: :/etc/sysconfig/network-scripts# ip r default via 172.16.0.254 dev bond0 169.254.0.0/16 dev bond0 scope link metric 1006 169.254.0.0/16 dev bond0.10 scope link metric 1008 172.16.0.0/16 dev bond0 proto kernel scope link src 172.16.1.128 but their is no network connection on « bond0 »! The only way I found to have a network active connection is keeping my first interface outside the bond and having the default route on this one! In this case I have a specific IP to it and a bond one on bound. As I must have also a VLAN connection on the bound, I have create a « ifcfg-bond0.10 » file: :/etc/sysconfig/network-scripts# cat ifcfg-bond0.10 NAME=bond0.10 DEVICE=bond0.10 #TYPE="Ethernet" VLAN=yes NM_CONTROLLED=no ONPARENT=yes DEFROUTE="no" # IP IPADDR=XXX.XXX.XXX.142 NETMASK=255.255.255.0 NETWORK=XXX.XXX.XXX.0 BROADCAST=XXX.XXX.XXX.255 PREFIX=24 GATEWAY=1XXX.XXX.XXX.126 With that and the first Ethernet interface on a specific address I have: :/etc/sysconfig/network-scripts# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether d0:94:66:65:32:0e brd ff:ff:ff:ff:ff:ff inet 172.16.1.86/16 brd 172.16.255.255 scope global em1 valid_lft forever preferred_lft forever 3: em2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 4: em3: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 5: em4: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 6: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet 172.16.1.128/16 brd 172.16.255.255 scope global bond0 valid_lft forever preferred_lft forever 8: bond0.10@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet XXX.XXX.XXX.142/24 brd XXX.XXX.XXX.255 scope global bond0.10 valid_lft forever preferred_lft forever :/etc/sysconfig/network-scripts# ip r default via 172.16.0.254 dev em1 169.254.0.0/16 dev em1 scope link metric 1002 169.254.0.0/16 dev bond0 scope link metric 1006 169.254.0.0/16 dev bond0.10 scope link metric 1008 172.16.0.0/16 dev em1 proto kernel scope link src 172.16.1.86 172.16.0.0/16 dev bond0 proto kernel scope link src 172.16.1.128 XXX.XXX.XXX.0/24 dev bond0.10 proto kernel scope link src XXX.XXX.XXX.142 And everything is working. But… I am not satisfy. Is it normal? Is it a way to have all the Ethernet link on a bond? Your help is needed :-) Best wishes -- Pierre Malard « Si l'on veut croire en l'humanité, il faut voir et comprendre l'inhumanité » |\ _,,,---,,_ /,`.-'`' -. ;-;;,_ |,4- ) )-,_. ,\ ( `'-' '---''(_/--' `-'\_) πr perl -e '$_=q#: 3|\ 5_,3-3,2_: 3/,`.'"'"'`'"'"' 5-. ;-;;,_: |,A- ) )-,_. ,\ ( `'"'"'-'"'"': '"'"'-3'"'"'2(_/--'"'"' `-'"'"'\_): 24πr::#;y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print' - --> Ce message n’engage que son auteur <--

2 2

reinstall
by Jerry Geis 05 Feb '19

05 Feb '19

I have a C7 7.6.1810 install that I wish to "reinstall". when I run "yum reinstall \* " I get a long list of items saying will be updated or will be installed but then nothing happens - nothing is re-downloaded etc... How do I get the system to actual download all current packages and re-install them ? Thanks, Jerry

1 0

Problem Webinstall Centos 7 on Acer S2000 32 Bit.
by Ger van Dijck 05 Feb '19

05 Feb '19

Hi Centos World , I am trying to install Centos 7 (i686) on an Acer 2000 PC and I get following message(s) : [0117110] ACPI : SCI (ACPI GSIG) not registered . [26.532360] systemd [1] : caught <ILL> , dumped core as pid 76. [26.532956] systemd [1] : Freezing execution. My question is : What is wrong and how can I solve this problem ? Maybe a fresh install ? Regards , Ger van Dijck . -- Using Opera's mail client: http://www.opera.com/mail/

1 1

Back to c7 and firewalld
by mark 05 Feb '19

05 Feb '19

If I've missed someone's response, apologies. As I said, my converted rules seem fine, and I can run the script that issues a bunch of direct rules for the built-in FORWARD rule... but when I try firewall-cmd --reload, it tells me error, that FORWARD is a built-in. Now, today, what I've been looking at is to run iptables-save, and what I see is this (in part): -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -j FORWARD_direct -A FORWARD -j FORWARD_IN_ZONES_SOURCE -A FORWARD -j FORWARD_IN_ZONES -A FORWARD -j FORWARD_OUT_ZONES_SOURCE -A FORWARD -j FORWARD_OUT_ZONES -A FORWARD -m conntrack --ctstate INVALID -j DROP -A FORWARD -j REJECT --reject-with icmp-host-prohibited Does this mean that, instead of the format of the entry of the rule being firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD <actual rule) that it should, instead, be firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD_direct <actual rule> ? And if that's what I need to do, that's fine, but I have found *zero* documentation about that. Everything I have found about adding direct rules to a built-in chain don't mention it. Is this so new, it's not documented? mark

1 0

looking for a tool to convert my running system into a installation dvd
by Ralf Prengel 05 Feb '19

05 Feb '19

Hallo, I m looking for a tool to convert my running system into a installation dvd. Thanks for hint. I found some tools working more or less for debian. Thank for hints Ralf Von meinem iPad gesendet

4 3

C7 and firewalld, ongoing
by mark 04 Feb '19

04 Feb '19

I've got my direct rules, converted from a C6 iptables-save. I load them - they're to add to the built-in FORWARD chain. They all seem to load... but then, when I try to --reload, I get Error: BUILTIN_CHAIN: chain 'FORWARD' is built-in chain and firewall-cmd --direct --get-all-rules returns nothing. A sample command in my script is firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 1 -m state --state RELATED,ESTABLISHED -j ACCEPT So, what am I doing wrong: mark

1 0

Bug in libreoffice or cups?
by mark 04 Feb '19

04 Feb '19

C7 My manager's manager sent out a ppt. Nothing fancy, no animation. 1. Page down doesn't get me to the next page. 2. Slide show decides that on my left monitor, it should fill the entire monitor- no options, with the slide, and the next slide, and that my right-hand monitor shuold be *COMPLETELY* filled with the slide. 3. Hitting <esc> gets rid of the one on the right... and anything then crashes all instances of libreoffice. 4. I just tried to print it out... and suddenly, printer options, or the print box itself, no longer offers me the option to fit to paper, so landscape, and it goes off the page. Esp. that last one - bug or "feature"? mark

1 1

PCMCIA on Centos 7
by Kevin K 02 Feb '19

02 Feb '19

Anyone ever look into what would be required to support 16 bit PCMCIA cards on 7? There are still 64 bit computers out there with at least 1 PCMCIA slot. Thanks, Kevin

1 0

OVAL content
by Gaurav Kumar 01 Feb '19

01 Feb '19

Hi all, Much like Ubuntu and Debian teams have OVAL content published for detecting vulnerabilities, are there plans of publishing such content? e.g. https://people.canonical.com/~ubuntu-security/oval/ On a related note, has anybody looked into using RHEL oval content on CentOS?

1 0

C7, firewalld and rich rules
by mark 01 Feb '19

01 Feb '19

Hi, again, folks, I'm trying to convert a number of iptables rules to firewalld rich rules. I need to do this, because this is, in fact, a firewall, to protect access to servers with sensitive data. It will limit access to the servers behind it to a specific network, and nobody else, and allow only certain services through. What I've been trying to find is a script/program that converts the output of iptables-save to something I can feed to firewall-cmd. Anyone have a link to such? I admit this is annoying. Why is it, when some New Kewl thing is introduced, it *always* expects you to start anew, rather than giving you a tool to convert what you had. I ran into this 15 years ago, trying to put an existing website into bricolage (early CMS), and here I am, trying to do this. Anyway, any links would be appreciated. mark

5 11

Centos 7 and backup solution
by Alessandro Baggi 01 Feb '19

01 Feb '19

Hey there, what type of backup solution do you use on C7? Thanks in advance

17 32

centos dfcp send hostname to microsoft dhcp/dns
by Ralf Prengel 31 Jan '19

31 Jan '19

Hallo, I try to configure my dhcp-client to send the hostname to a microsoft dns/dhcp server. It doesn t work. Nothing happens. A debian system works fine so it seems that the microsoft-side isn t the problem this time. I found some hints but nothing works. Thansk for hints. Ralf

4 9

EPEL repo problem
by SternData 31 Jan '19

31 Jan '19

This keeps logging: Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64 error was 14: HTTPS Error 503 - Service Unavailable I've removed the epel-release package, done a "yum clean all", then reinstalled it, but still get the same error. -- -- Steve

4 7

Applying changes to route-eth0
by Robert Moskowitz 31 Jan '19

31 Jan '19

I have a series of static routes in route-eth0 Recently I had to made changes and could not find an effective way to get the old routes out and the new routes in. ifdown-route seems to apply the content of route-eth0 to take down the routes listed and ifup-route brings up routes based on route- So what ends up is that the old routes never go away, just new routes added. ifdown eth0; ifup eth0 works, but is a bit heavy-handed for only changing routes. So how do I clear out the routing table and have it rebuilt based on ifcfg-eth0 and route-eth0 without bouncing the interface completely?

2 2

Bacula 9.4.1 Dbdriver issue
by Alessandro Baggi 31 Jan '19

31 Jan '19

Hi list, I created my rpm for Bacula 9.4.1 reading centos srpm spec files. I made a single package and not split in several packages because this is my first rpm so I created my spec file taking a cue from bacula-5.3 spec file. All works as intended, an rpm was created and installed without any not fixable issue. After installing my bacula rpm I run a test to see if all works as expected. After bacula-dir and bacula-sd configuration I run bacula-dir -t to check error in config file and get this message: bacula-dir: dird.c:1206-0 Dbdriver field within director config file "dbi:PostgreSQL" mismatched with the Database argument "PostgreSQL" passed during Bacula compilation. I don't know what it is referring because I don't pass any argument like "PostgreSQL" during configure. The only option about postgresql is --with-postgresql. This is caused by this line in catalog statement: dbdriver = "dbi:postgresql"; I tried also using "dbi:PostgreSQL" but I got the same issue. I searched online but found only one fedora bugreport with the same problem related to fedora29 but for a different bacula version. Over this I tried to run bacula and all works like expected. How I can fix this warning? Hope in help. Thanks in advance. Alessandro.

2 2

C7, mdadm issues
by mark 31 Jan '19

31 Jan '19

I've no idea what happened, but the box I was working on last week has a *second* bad drive. Actually, I'm starting to wonder about that particulare hot-swap bay. Anyway, mdadm --detail shows /dev/sdb1 remove. I've added /dev/sdi1... but see both /dev/sdh1 and /dev/sdi1 as spare, and have yet to find a reliable way to make either one active. Actually, I would have expected the linux RAID to replace a failed one with a spare.... Clues for the poor? I *really* don't want to freak out the user by taking it down, and building yet another array. mark

3 16

kernel boot issues
by RC 31 Jan '19

31 Jan '19

Hello, I run CentOS release 6.10 (Final) on a Dell Inspiron M6700. 2.6.32-754.el6.x86_64 boots, and is whaat I am running now none of these, updated ones, won't boot: 2.6.32-754.3.5.el6.x86_64 2.6.32-754.6.3.el6.x86_64 2.6.32-754.9.1.el6.x86_64 2.6.32-754.10.1.el6.x86_64 They all show the same 'symptom', grub says it is booting that kernel, screen blanks, solid corned in the left-top corner... and that's whee it stays. I know this is vague, but any ideas? thanks, Ron

3 4

SELinux policy vs. static web content
by Nicolas Kovacs 31 Jan '19

31 Jan '19

Hi, Some time ago I wrote an introductory article about SELinux on my blog. I'm currently updating it for my new blog, and I found a curious change in SELinux policy. Here goes. For demonstration purposes, I'm using some static webpages, more exactly the default pages found in /usr/share/httpd/noindex, which I simply copied over to /var/www/html. As a first practical example, I'm copying this stuff over to /tmp/backup and then move it back again. A vaguely similar example has been given by Thomas Cameron in his presentation "SELinux for mere mortals", and I'm reproducing it here with some minor modifications. $ cd /var/www/html/ $ mkdir /tmp/backup $ cp -R * /tmp/backup/ $ rm -rf * $ mv /tmp/backup/* . $ find . -type d -exec chmod 0755 {} \; $ find . -type f -exec chmod 0644 {} \; When I wrote the article back in november 2017, this resulted in a classic "Forbidden" error, since the SELinux context of these files is not httpd_sys_content_t as it should be, but user_tmp_t. But when I try to repeat the experiment now, Apache shows no error. Which seems strange. Any idea what's going on ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

Re: [CentOS] EPEL repo problem
by Stephen John Smoogen 30 Jan '19

30 Jan '19

On Wed, 30 Jan 2019 at 09:21, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > --On Wednesday, January 30, 2019 6:57 AM -0500 Stephen John Smoogen > <smooge(a)gmail.com> wrote: > > > Can you run the code from: https://github.com/puiterwijk/check_metalink > to > > see if we can pin down the proxy which is the problem (there are 14 and > > our checks are showing they are ok so I need to pin this down somewhere). > > Since I'm seeing the same errors intermittently, I tried to run the > script. > Recall that CentOS still ships with Python 2. First I had to install > rh-python36 from SCL. Then I had to change the script's shebang to > "#!/usr/bin/env python". Now it complains that there's no requests module. > I don't know how to resolve Python3 dependencies for a python installed > from SCL. How far down the rabbit hole will I need to go to get the script > working? ;) > > Yeah.. sorry. I didn't see I had made this one little change to my version: diff --git a/check_metalink b/check_metalink index f2beeb5..380b16d 100755 --- a/check_metalink +++ b/check_metalink @@ -1,4 +1,4 @@ -#!/bin/python3 +#!/bin/python I will see if I can make this work without that pathc. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- Stephen J Smoogen.

1 0

pip on C7
by Jerry Geis 30 Jan '19

30 Jan '19

I am trying to install the python-onvif package on C7. I did: pip install onvif Requirement already satisfied (use --upgrade to upgrade): onvif in /usr/lib/python2.7/site-packages Requirement already satisfied (use --upgrade to upgrade): suds>=0.4 in /usr/lib/python2.7/site-packages (from onvif) Requirement already satisfied (use --upgrade to upgrade): suds-passworddigest in /usr/lib/python2.7/site-packages (from onvif) You are using pip version 8.1.2, however version 19.0.1 is available. You should consider upgrading via the 'pip install --upgrade pip' command. How do I get it to go ahead and install ? Requirements are met. I don't desire to upgrade. Thanks, Jerry

2 3

Signature Pad (Evolis Signotec Sig100)
by Gregory P. Ennis 30 Jan '19

30 Jan '19

Everyone, Please forgive me for being off topic and really off list !!! I am trying to get a Sig100 signature pad to work with Centos 7.6 machine and am not getting much support from the manufacturer. The product is sold as linux compatible, but so far it is not. I have been able to download their software on a microsoft system and see that the unit does work on microsoft. My question to everyone on the list is have any of you had any brand of signature pad work with Centos 7.6? If so I would surely appreciate knowing the brand and how you did it. I have been able to get a HUION H610PRO wacom to easily work with Centos 7.6, but the use of this for a production application for signatures will not really work easily for a user. Any ideas? Thanks ahead for your thoughts!!!! Greg Ennis

3 6

Several tests failing
by Roee Agami 29 Jan '19

29 Jan '19

Hi, I’m attempting to build a 7.63.0 RPM for centos from a spec file I created. I am getting the following tests failures: “These test cases failed: 206 1049 1060 1061 1232 1241 1421” Here is an example of an output for test 206, any help to get insights into it would be greatly appreciated: test 0206...[HTTP proxy CONNECT auth Digest] ../libtool --mode=execute /usr/bin/valgrind --tool=memcheck --quiet --leak-check=yes --suppressions=./valgrind.supp --num-callers=16 --log-file=log/valgrind206 ../src/c url --output log/curl206.out --include --trace-ascii log/trace206 --trace-time http://test.remote.haxx.se.206:6490/path/2060002 --proxy http://127.0.0.1:6490 --proxy-u ser silly:person --proxy-digest --proxytunnel >log/stdout206 2>log/stderr206 2705 CMD (0): ../libtool --mode=execute /usr/bin/valgrind --tool=memcheck --quiet --leak-check=yes --suppressions=./valgrind.supp --num-callers=16 --log-file=log/valgrind206 ../src/curl --output log/curl206.out --include --trace-ascii log/trace206 --trace-time http://test.remote.haxx.se.206:6490/path/2060002 --proxy http://127.0.0.1:6490 --proxy-user silly:person --proxy-digest --proxytunnel >log/stdout206 2>log/stderr206 206: protocol FAILED: --- log/check-expected 2019-01-28 20:44:27.903988339 +0000 +++ log/check-generated 2019-01-28 20:44:27.903988339 +0000 @@ -4,7 +4,7 @@ [CR][LF] CONNECT test.remote.haxx.se.206:6490 HTTP/1.1[CR][LF] Host: test.remote.haxx.se.206:6490[CR][LF] -Proxy-Authorization: Digest username="silly", realm="weirdorealm", nonce="12345", uri="test.remote.haxx.se.206:6490", response="003e36decb4dbf6366b3ecb9b87c24ec"[CR][L F] +Proxy-Authorization: Digest username="silly", realm="weirdorealm", nonce="12345", uri="test.remote.haxx.se.206:6490", response="e6e133b332307d0e988962837d9e27a1"[CR][L F] Proxy-Connection: Keep-Alive[CR][LF] [CR][LF] GET /path/2060002 HTTP/1.1[CR][LF] == Contents of files in the log/ dir after test 206 === Start of file check-expected CONNECT test.remote.haxx.se.206:6490 HTTP/1.1[CR][LF] Host: test.remote.haxx.se.206:6490[CR][LF] Proxy-Connection: Keep-Alive[CR][LF] [CR][LF] CONNECT test.remote.haxx.se.206:6490 HTTP/1.1[CR][LF] Host: test.remote.haxx.se.206:6490[CR][LF] Proxy-Authorization: Digest username="silly", realm="weirdorealm", nonce="12345", uri="test.remote.haxx.se.206:6490", response="003e36decb4dbf6366b3ecb9b87c24ec"[CR][L F] Proxy-Connection: Keep-Alive[CR][LF] [CR][LF] GET /path/2060002 HTTP/1.1[CR][LF] Host: test.remote.haxx.se.206:6490[CR][LF] Accept: */*[CR][LF] [CR][LF] [DISCONNECT][LF] === End of file check-expected === Start of file check-generated CONNECT test.remote.haxx.se.206:6490 HTTP/1.1[CR][LF] Host: test.remote.haxx.se.206:6490[CR][LF] Proxy-Connection: Keep-Alive[CR][LF] [CR][LF] CONNECT test.remote.haxx.se.206:6490 HTTP/1.1[CR][LF] Host: test.remote.haxx.se.206:6490[CR][LF] Proxy-Authorization: Digest username="silly", realm="weirdorealm", nonce="12345", uri="test.remote.haxx.se.206:6490", response="e6e133b332307d0e988962837d9e27a1"[CR][L F] Proxy-Connection: Keep-Alive[CR][LF] [CR][LF] GET /path/2060002 HTTP/1.1[CR][LF] Host: test.remote.haxx.se.206:6490[CR][LF] Accept: */*[CR][LF] [CR][LF] [DISCONNECT][LF] === End of file check-generated === Start of file curl206.out HTTP/1.1 407 Authorization Required to proxy me my dear Proxy-Authenticate: Digest realm="weirdorealm", nonce="12345" Content-Length: 33 HTTP/1.1 200 OK swsbounce Server: no HTTP/1.1 200 OK Date: Thu, 09 Nov 2010 14:49:00 GMT Content-Length: 7 Connection: close Content-Type: text/html Funny-head: yesyes daniel === End of file curl206.out

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss