- Discuss - lists.centos.org

Changing UID numbers
by Bill Gee 21 Feb '19

21 Feb '19

Hello everyone - I have a question regarding UID and GID numbers. First, a bit of background: Yesterday I suffered a complete power failure. My UPS batteries ran everything for an hour, but that was not long enough. My CentOS6 server shut itself down, just like it should. When the power came back up, the perfectly running server was no longer working. The boot hard drive was complete toast. ARGH! OK, I have backups and spare hard drives. CentOS6 is getting a bit long in the tooth. I have to reformat and reinstall CentOS before restoring backups anyway, so I decided now is the time to move to CentOS7. I chose to rip the bandage! The CentOS6 installation was quite old. Back in those days the default UID for new users was 500. That's how I set up my user account on the machine. My main workstation is Fedora 29, but it started life MANY cycles ago and also has my UID=500. That all works nicely with the nfs share coming off the server. On newer builds I have wrestled with having my UID=1000, as is the new standard. File permissions on the nfs share were never quite right. It was not irritating enough to make me desperate, but it was annoying. I got around it with a lot of 777 and 666 permissions settings. I looked at rpc-idmapd but was never able to make it work. Now with CentOS7 my server user account is UID=1000. The nfs share is on a separate drive (not the one that failed), and all of the files on it are still owned by UID=500. It works from my main workstation, but is really unclean. So now the questions: What will it take to change all the files to the new UID? What will it take to change my main workstation to the new UID **without** having to create a new user account? I think I can do this in two steps. 0) backup, backup, backup! 1) On the server - use "find" to find all files owned by UID=500. Chown them to UID=1000. Repeat for gid=500. 2) Tricky - On the workstation, boot to non-gui. Login as root. Repeat the same two "find" commands as on the server. Edit the /etc/passwd and /etc/group files to show the new UID and GID numbers. What does this do to the shadow files? Are there other places I need to look for the UID and GID numbers? Thanks! -- Bill Gee

4 5

Auth pam ldap and fail2ban
by Jimmy Morin 21 Feb '19

21 Feb '19

Hi, Fail2ban is logging false positive with authentication using pam ldap. What happen is a user login using his ldap password cause pam_unix to fail then pam_ldap log the user in. sshd filter for fail2ban read /var/log/secure see the pam_unix error, flag it even if the next line in the log says the login is successful. CentOS 7 with fail2ban 0.9.7 from EPEL. Any idea how to fix this? Thanks. Jimmy

2 1

what writes to /root/.cache/mesa ?
by Valeri Galtsev 21 Feb '19

21 Feb '19

Dear All, I have several CentOS 7 machines (but not all of them) on which I have noticed that something gets written to /root/.cache/mesa every so often (once every several days). It is my understanding that mesa is related to GUI (X11), but on these machines (on neither of my machines, actually) root never logs in to GUI X11. I may have remote root logins with Xforwarding though. Hence my puzzle: what is that that writes to /root/.cache/mesa? Some, but not all of occasions seem to happen upon machine [re]boots. Thanks. Valeri PS This gives me dejavu. A while ago when people started demanding to have google chrome browser installed on their workstations I had hard time to get rid of google's cron jobs that were writing where only root should - without explicit permission to do so. Dough. Somebody's software thinks it is smarter than everyone who uses it... "Machine learning" all the way ;-) -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

3 3

CentOS-announce Digest, Vol 168, Issue 4
by centos-announce-request＠centos.org 21 Feb '19

21 Feb '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0373 Important CentOS 6 firefox Security Update (Johnny Hughes) 2. CESA-2019:0374 Important CentOS 7 firefox Security Update (Johnny Hughes) 3. CEEA-2019:0208 CentOS 7 kmod-redhat-qed Enhancement Update (Johnny Hughes) 4. CEBA-2019:0351 CentOS 7 kmod-redhat-nfit BugFix Update (Johnny Hughes) 5. CEEA-2019:0208 CentOS 7 kmod-redhat-qede Enhancement Update (Johnny Hughes) 6. CEEA-2019:0208 CentOS 7 kmod-redhat-qedf Enhancement Update (Johnny Hughes) 7. CEEA-2019:0208 CentOS 7 kmod-redhat-qedi Enhancement Update (Johnny Hughes) 8. CEEA-2019:0208 CentOS 7 kmod-redhat-qedr Enhancement Update (Johnny Hughes) 9. CESA-2019:0368 Important CentOS 7 systemd Security Update (Johnny Hughes) 10. CESA-2019:0375 Important CentOS 7 flatpak Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 20 Feb 2019 16:59:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0373 Important CentOS 6 firefox Security Update Message-ID: <20190220165925.GA12203(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0373 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0373 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2996fdfa1a6f14ce0c96f9dd45904672889629e885311b691bb30e7fcabb8b96 firefox-60.5.1-1.el6.centos.i686.rpm x86_64: 2996fdfa1a6f14ce0c96f9dd45904672889629e885311b691bb30e7fcabb8b96 firefox-60.5.1-1.el6.centos.i686.rpm 7b25cda47ac4e7b26fbcac915fcf8aba2990627f8d5344d13da81b0dda3f14a8 firefox-60.5.1-1.el6.centos.x86_64.rpm Source: 1c705b836d4624deee88a7c0f070b4ea757cb2b0ab602b77ab31414429b7ef6a firefox-60.5.1-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 20 Feb 2019 20:10:45 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0374 Important CentOS 7 firefox Security Update Message-ID: <20190220201045.GA17397(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0374 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0374 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c68f6bd614b535bf0476561b3a0fc3fdf5e986650d96cc938cd8b87662ee53d3 firefox-60.5.1-1.el7.centos.i686.rpm d84103d541c4410aee21fa6019506dcbcd4762a710238f4bcf07316c6372229c firefox-60.5.1-1.el7.centos.x86_64.rpm Source: bdf3ad07e5a34e836da417fdb910458fe87088764ef803d2a0e4c55ac8461cb9 firefox-60.5.1-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 20 Feb 2019 20:14:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:0208 CentOS 7 kmod-redhat-qed Enhancement Update Message-ID: <20190220201420.GA17592(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:0208 Upstream details at : https://access.redhat.com/errata/RHEA-2019:0208 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 8edc17a595a2a9bad91c002451c20113a760a061a758d23da4f96522c476f58f kmod-redhat-qed-8.33.0.20_dup7.6-1.el7_6.x86_64.rpm 9d681fb45ed738cff645caac116127288936202ccef68013cf08b9dd6306f6a2 kmod-redhat-qed-devel-8.33.0.20_dup7.6-1.el7_6.x86_64.rpm b54da0bac6b4f8927632472c089505c36f2089afa40fe5487aae233c7878bff8 kmod-redhat-qed-firmware-8.33.11.0_dup7.6-1.el7_6.x86_64.rpm Source: 007fb47d93a4e1cfc34598df49c0e0e39ba338e4cfd0fa322c85b33908220704 kmod-redhat-qed-8.33.0.20_dup7.6-1.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 20 Feb 2019 20:14:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2019:0351 CentOS 7 kmod-redhat-nfit BugFix Update Message-ID: <20190220201424.GA17674(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2019:0351 Upstream details at : https://access.redhat.com/errata/RHBA-2019:0351 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 100b89a64dfe51d043ba9073aeb9583c7a043d13c2e9edc0c41e27c69d55afaf kmod-redhat-nfit-3.10.0_957-1.el7_6.x86_64.rpm Source: c4452514eb68bc395aa9492ee434fb054918b1a3cfb75d75d7ddd2a17ddf650f kmod-redhat-nfit-3.10.0_957-1.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 20 Feb 2019 20:14:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:0208 CentOS 7 kmod-redhat-qede Enhancement Update Message-ID: <20190220201431.GA17762(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:0208 Upstream details at : https://access.redhat.com/errata/RHEA-2019:0208 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4c424820760d71da724611b0523eca6fcb291595349b3d64fc4a5fa0bfb0d0c4 kmod-redhat-qede-8.33.0.20_dup7.6-1.el7_6.x86_64.rpm 0a8938f679f73bd46b3160afa88b22dcfcd8cde8e4436a6c3730be8b4bbbb0b7 kmod-redhat-qede-devel-8.33.0.20_dup7.6-1.el7_6.x86_64.rpm Source: 4ea664aaf366b1f097cffddaf61a558f975da7e0a67eea58a9e1a01293691c30 kmod-redhat-qede-8.33.0.20_dup7.6-1.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Wed, 20 Feb 2019 20:14:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:0208 CentOS 7 kmod-redhat-qedf Enhancement Update Message-ID: <20190220201435.GA17843(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:0208 Upstream details at : https://access.redhat.com/errata/RHEA-2019:0208 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b7ab8718f59252363345b3849622e961194708dea59e99fb8715503e5e34c555 kmod-redhat-qedf-8.33.0.20_dup7.6-1.el7_6.x86_64.rpm Source: 771907e5eb3285ba252f88674263d3c5bcac3e082a4320e9254ab9c7810d9209 kmod-redhat-qedf-8.33.0.20_dup7.6-1.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Wed, 20 Feb 2019 20:14:39 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:0208 CentOS 7 kmod-redhat-qedi Enhancement Update Message-ID: <20190220201439.GA17921(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:0208 Upstream details at : https://access.redhat.com/errata/RHEA-2019:0208 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 1f7c550f9879343db8ef8e17e0476a5b1937a4db069f0de47442985b3c9d7c21 kmod-redhat-qedi-8.33.0.20_dup7.6-1.el7_6.x86_64.rpm Source: 79ff548ae41dff7838573ac0cf8bbab29490854684de305006156bb0be67b422 kmod-redhat-qedi-8.33.0.20_dup7.6-1.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 8 Date: Wed, 20 Feb 2019 20:14:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2019:0208 CentOS 7 kmod-redhat-qedr Enhancement Update Message-ID: <20190220201443.GA17999(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2019:0208 Upstream details at : https://access.redhat.com/errata/RHEA-2019:0208 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3865a995ecbfda76bda8ed75c1f63589489a57e4f63e7e659ca0dd6522e3197b kmod-redhat-qedr-3.10.0_957_dup7.6-3.el7_6.x86_64.rpm Source: 4859bb59fafdbacf13c9be0e85d651cf223bc59dde2b7027f18333a8c03c6f98 kmod-redhat-qedr-3.10.0_957_dup7.6-3.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 9 Date: Wed, 20 Feb 2019 20:15:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0368 Important CentOS 7 systemd Security Update Message-ID: <20190220201520.GA18232(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0368 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0368 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7bd503f525c64e0ae499d36a341763ed3a8d662331823e3b423944e1c9c46c62 libgudev1-219-62.el7_6.5.i686.rpm 177bee45cf82aed8469e2c6183bab0e0f57b777a9fa5d649c05094e861ca6c46 libgudev1-219-62.el7_6.5.x86_64.rpm 54bab4697be085129516dbab713777cd83575cbf5c4063d48ab7fc93ea3d83a0 libgudev1-devel-219-62.el7_6.5.i686.rpm 65a197b7b6bc67fba1877143274de3dd04c567a1a142c7d3c7c694ce6ccb9a39 libgudev1-devel-219-62.el7_6.5.x86_64.rpm 7051c8efafb4b7ad6e135202c9b58acd8467a05df39fac51c93ebd1a0db172d3 systemd-219-62.el7_6.5.x86_64.rpm bccc139a75c95b0d9f4ac1e303826c1d3829ecb5073bcfb5cdf9e91c566ee857 systemd-devel-219-62.el7_6.5.i686.rpm be04d0d400e53055e3eb3303b556ca09e9fb1e1cd7569fa83e2b46d8c0c88b1e systemd-devel-219-62.el7_6.5.x86_64.rpm 64ef215b521acce4e922e1930c7e08658e83604e116f38d2621d0142db7d6bbf systemd-journal-gateway-219-62.el7_6.5.x86_64.rpm 5984bd4163047254bc4164904378ea07b512b065cf14f5016b4ae06919bfc32d systemd-libs-219-62.el7_6.5.i686.rpm 88804a61a28459926afbc83d64dc4fc066e23bd51731cc26e7232cb67b36c3c3 systemd-libs-219-62.el7_6.5.x86_64.rpm 1ab75b4e1a4c930493ee1988e011c78344197db76f96461efdfb03d204c5e4c5 systemd-networkd-219-62.el7_6.5.x86_64.rpm 5f1ff7c0d45d570cfac7893833094addb0aaefb1a3029a07dce867743f2e7632 systemd-python-219-62.el7_6.5.x86_64.rpm 379ca21559822f5ba9c8867342068cdfb189397e53c9b82eb0ac922d13840feb systemd-resolved-219-62.el7_6.5.i686.rpm 8b691bb933ac7aaa0d1ca92ac91a241415e56aaef129eafe4437fc9897bf92c2 systemd-resolved-219-62.el7_6.5.x86_64.rpm cfa3793a783306d354852c271be957e23dac1a7067d03319d548a377bf2c63b8 systemd-sysv-219-62.el7_6.5.x86_64.rpm Source: 44276ea21081424e1c68f5fb1b49cc56c36db47d4174a42a49811bf58a4f1dd6 systemd-219-62.el7_6.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 10 Date: Wed, 20 Feb 2019 20:15:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0375 Important CentOS 7 flatpak Security Update Message-ID: <20190220201535.GA18362(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0375 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0375 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0d91d14ae70aed2ec16d147980f44adf410a9ddf2c05eb5b77c3285e88a22959 flatpak-1.0.2-4.el7_6.x86_64.rpm 0b499bf4be72d902e7851c0590b78adc442c81198844cc5e1d2d1fc68fc75385 flatpak-builder-1.0.0-4.el7_6.x86_64.rpm 7075c83874a13f60948c04afc0a66ecd9044d1b2d8fdc4b46929897dd69dd6f4 flatpak-devel-1.0.2-4.el7_6.x86_64.rpm f44bd9686addf86a41eaa956e89273356f18621b26712c9258c58c5e2a2183f6 flatpak-libs-1.0.2-4.el7_6.x86_64.rpm Source: 39abf87723c9f214f7a42faa19a20a1d4c431d5ac6d5da4d8cb0348be428ce3d flatpak-1.0.2-4.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 168, Issue 4 ***********************************************

1 0

What is the proper place for GDM related dconf settings now?
by Sean 20 Feb '19

20 Feb '19

Hello, It seems that with CentOS 7.6 and Gnome 3.28, a clean install of a Workstation package profile does not build the /etc/dconf/db/gdm.d/ directory tree. I have several desktops in operation which we kickstart built with an older 7.3/4/5 version of CentOS as the base install media. These all have a dconf directory for gdm, and I assume a dconf profile directory for gdm as well (though I admit it always worked so I never cared about looking for it). These existing machines are all running 7.6 today, and still have the /etc/dconf/db/gdm.d directory settings applied (like disable-user-list=true). A newly built machine from the same kickstart but with 7.6 install media doesn't provide the gdm.d directory. I seem to recall, I admit it's been a long while, that with older versions of Gnome 3, dconf couldn't set things for gdm properly unless the settings were located in a special dconf db just for gdm. I can edit the kickstart %post% to make the directory(s) before dropping files in them, but I'm hesitant to do so if the files won't be honored because there's a more appropriate place now. I can take this up with the gnome list, if necessary, but CentOS is my platform so I'm not sure if it's a distribution specific configuration or functional change to Gnome. I tried searching through gitlab.gnome.org to see if I can dig up any issues, release notes and such, but I didn't find anything that seemed relevant. Thanks! --Sean

2 3

Re: [CentOS] Please Recommend Affordable and Reliable Cloud Storage for 50 TB of Data
by J.Witvliet＠mindef.nl 20 Feb '19

20 Feb '19

I gave you a lengthy description of the Fedora lists. It's rather rude to see your question here again. Met vriendelijke groet, Hans Witvliet, J, Ing., DMO/OPS/I&S/APH, Kennis Team Opensource Coldenhovelaan 1 Maasland 3531RC Coldehovelaan 1, kamer B213 -----Original Message----- From: CentOS [mailto:centos-bounces@centos.org] On Behalf Of Turritopsis Dohrnii Teo En Ming Sent: vrijdag 15 februari 2019 6:29 To: centos(a)centos.org Subject: [CentOS] Please Recommend Affordable and Reliable Cloud Storage for 50 TB of Data Hi, Could you recommend affordable and reliable cloud storage for 50 TB of data? <snip> Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

1 0

Network switch to IPV6 after PXE boot
by Patrick Bégou 19 Feb '19

19 Feb '19

I'm trying to autoinstall a DELL 9030 desktop with CentOS7 using PXE and Kikstart. I fall in a strange problem (I have several other laptop or desktop using this install process without any problem, kernel and initrd are from a Centos 7.4 iso) - PXE boot start and the desktop load the kernel and the inirtd file - the kernel is booted and at this time the led of the network switch goes down for the port used by the desktop. - then I have a message "no carrier detected on interface em1" - followed by " IPv6 ADDRCONF(NETDEV_CHANGED): em1: link become ready (and of course the led goes back to green on the switch) But I have no IPV6 network setup! How can I force to IPV4 setup to load the kikstart file ? I've tried do switch from legacy boot to UEFI boot (my local server setup can answer requests for the two options), update the BIOS of the desktop... Any help is welcome Patrick

2 3

odd messages at boot time
by Fred Smith 18 Feb '19

18 Feb '19

I'm getting these messages during boot: error: failure reading sector 0xfc from 'hd4' error: failure reading sector 0xe0 from 'hd4' error: failure reading sector 0x0 from 'hd4' error: failure reading sector 0xfc from 'hd5' error: failure reading sector 0xe0 from 'hd5' error: failure reading sector 0x0 from 'hd5' they pop up soon after the Grub menu with a message to press ENTER to continue, and it times out in a few seconds if I don't press ENTER. These messages have been appearing for a long time, at least a couple of years and I've been too lethargic to investigate til now. I see no bad side-effects at runtime. I just did badblocks (read-only) on both sda and sdb (RAID-1 pair) which found no errors. I see nothing obviously related in dmesg, or /var/log/messages. I also have an external box (Venus DS3R Pro-2) with two drives, also RAID-1, that I use for backups. It is seen (after boot) as /dev/sdc. I'd have to pull the drives out of it and connect them to the SATA bus to run badblocks on them, as badblocks won't run on /dev/sdc. the nightly backups on to this box appear to run without issue. Anybody got any ideas on what this might be about? thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "Not everyone who says to me, 'Lord, Lord,' will enter the kingdom of heaven, but only he who does the will of my Father who is in heaven." ------------------------------ Matthew 7:21 (niv) -----------------------------

2 1

Question about updates
by Ralf Prengel 18 Feb '19

18 Feb '19

Hallo, as a beginner using centos I‘ve a question about updates. What it the right repo for getting all security and other updates? http://mirror.eu.oneandone.net/linux/distributions/centos/7.6.1810/updates/ for example? Thanks Ralf

5 9

amanda broken pipe
by Helmut Drodofsky 16 Feb '19

16 Feb '19

Hello, we are using amanda for backup with 2 tape libraries. Last days we made CentOS 7 update to CentOS Linux release 7.6.1810 (Core) Includes from base repository: amanda-client-3.3.3-21.el7.x86_64 amanda-server-3.3.3-21.el7.x86_64 amanda-3.3.3-21.el7.x86_64 amanda-libs-3.3.3-21.el7.x86_64 deleted: version 3.3.3-17 Before the update (= version 3.3.3-17) we run to configs in parallel without any problem. After the update: the first startet config: OK The second started config: broken pipe. The information in the amanda Mail: ..... The next 3 tapes Amanda expects to use are: am503, am518, am519. The next 2 new tapes already labelled are: am511, am514 FAILURE DUMP SUMMARY: planner: ERROR Request to ph04.panama.int failed: error sending REQ: write error to: Broken pipe .... Same problem with amcheck if one amanda config is running: ... Amanda Backup Client Hosts Check -------------------------------- WARNING: ph04.panama.int: selfcheck request failed: error sending REQ: write error to: Broken pipe Client check: 1 host checked in 0.050 seconds. 1 problem found. (brought to you by Amanda 3.3.3) Any ideas or have I to go back to former version? -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

1 0

Please Recommend Affordable and Reliable Cloud Storage for 50 TB of Data
by Turritopsis Dohrnii Teo En Ming 16 Feb '19

16 Feb '19

Hi, Could you recommend affordable and reliable cloud storage for 50 TB of data? Here are some important factors to consider: 1. Personal/non-commercial use. 2. Must be affordable, since I am unemployed most of the time and have super low levels of income for the past 12 years since I graduated from the National University of Singapore in 2007. 3. Cloud storage provider must not be a fly-by-night company, that is, it will not suddenly close down the next day. Please advise. Thank you. ===BEGIN EMAIL SIGNATURE=== The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END EMAIL SIGNATURE===

15 25

Aeskulap & kernel.x86_64 3.10.0-957.5.1.el7
by Gregory P. Ennis 16 Feb '19

16 Feb '19

Everyone, I wanted to report that the aeskulap dicom viewer available on the nux.dextop repositories is now working with the lastest kernel update : kernel.x86_64 3.10.0-957.5.1.el7. Thanks much to everyone!!! -- Greg Ennis

1 1

C7 basic install, HATE
by mark 15 Feb '19

15 Feb '19

I've got an old server, that I'm *trying* to rebuild from C6. Our regular key, with the kickstarts, etc, simply won't boot. Just a blank screen, and it never goes anywhere. So I'm trying to build it from a year-old regular installer. 100% of the time, the graphical screen is screwed. Resolution's so big that I cannot see the right-hand 10% or 15% of the screen. There doesn't seem to be any way that I've found yet to make it higher res, so I can read it. It's *not* the monitor's fault. It is an ancient Matrox video card... but I would have thought the VESA driver could handle it. Any suggestions? mark

5 7

/boot partition running out of space randomly. Please help!
by Sean Son 15 Feb '19

15 Feb '19

Hello all First off, I am running Oracle Linux 7.6 on a Hyper-V 2016 VM for a customer. I know this is not an Oracle Linux mailling list, but because Oracle Linux and CentOS are so similar, to an extent, I figured why not ask on here because someone MIGHT know the answer.. Here is the issue. I have a 600MB /boot partition allocated on a UEFI system. The /boot/efi partition is on a separate EFI partition. Recently, I noticed that this system has been crashing every few minutes and when I checked the disk space, I noticed that the /boot partition has zero free space available. I removed all of the old kernels and left the running kernel in place, in hopes that will free up some space. It freed up about 50MB or so, but then the system would crash again. After I would reboot the VM to bring the system back up, I ran a df -h /boot, and the results were reporting ZERO disk space again for the /boot partition.. It makes absolutely no sense how a partition which is generally static UNLESS you move something into it, is running out of space after space has been manually freed up in the partition! What boggles me even more is that when I do an ls -lh /boot, the file systems do not add up to 600M (well 594M) at all. See below: df -h Filesystem Size Used Avail Use% Mounted on devtmpfs 2.8G 0 2.8G 0% /dev tmpfs 2.8G 0 2.8G 0% /dev/shm tmpfs 2.8G 8.5M 2.8G 1% /run tmpfs 2.8G 0 2.8G 0% /sys/fs/cgroup /dev/mapper/VolGroup00-LogVolRoot 30G 19G 12G 63% / /dev/sda2 594M 594M 0 100% /boot /dev/sda1 238M 9.7M 229M 5% /boot/efi /dev/mapper/VolGroup00-LogVolHome 3.3G 415M 2.9G 13% /home tmpfs 565M 0 565M 0% /run/user/54321 tmpfs 565M 0 565M 0% /run/user/1000 ]$ ls -lh /boot total 92M -rw-r--r-- 1 root root 179K Dec 12 22:52 config-4.14.35-1844.0.7.el7uek.x86_64 drwx------ 3 root root 16K Dec 31 1969 efi drwx------. 2 root root 21 Feb 8 15:55 grub2 -rw-------. 1 root root 54M Aug 28 12:31 initramfs-0-rescue-0287c4db206d4a9abe14f750b9091a01.img -rw------- 1 root root 22M Dec 21 17:24 initramfs-4.14.35-1844.0.7.el7uek.x86_64.img -rw-r--r-- 1 root root 329K Dec 12 22:52 symvers-4.14.35-1844.0.7.el7uek.x86_64.gz -rw-r--r-- 1 root root 3.6M Dec 12 22:52 System.map-4.14.35-1844.0.7.el7uek.x86_64 -rwxr-xr-x. 1 root root 6.1M Aug 28 12:31 vmlinuz-0-rescue-0287c4db206d4a9abe14f750b9091a01 -rwxr-xr-x 1 root root 7.2M Dec 12 22:52 vmlinuz-4.14.35-1844.0.7.el7uek.x86_64 I have no idea what is going on here and why the space keeps filling up and the VM crashing! ANY and all help will be greatly appreciated! Thanks! I am running the following kernel: 4.14.35-1844.0.7.el7uek.x86_64 Thanks! Sean S.

4 4

DNSSEC Questions
by Paul R. Ganci 15 Feb '19

15 Feb '19

Last weekend I had my DNSSEC keys expire. I discovered that they had expired the hard way... namely randomly websites could not be found and email did not get delivered. It seems that the keys were only valid for what I estimate was about 30 days. It is a real PITA to have update the keys, restart named and then update Godaddy with new digests. The first part of the problem is fairly manageable in the sense I already have a script that partially can do the job of updating the DNS server. However from what I can tell the only way I can update the DNSSEC of my 8 domains is via the Godaddy control panel GUI. So a couple of questions. 1.) Is anyone aware of anyway to update Godaddy DNSSEC data via a Centos 7 bash shell? I will contact Godaddy but I suspect I am SOL but thought I would ask here thinking somebody else may have already run into this issue. 2.) Assuming the answer to DNSSEC is no, can I at least have the keys last longer than they do by default. I am presently creating the keys via: > dnssec-keygen -a NSEC3RSASHA1 -b 2048 -n ZONE zone > dnssec-keygen -f KSK -a NSEC3RSASHA1 -b 4096 -n ZONE zone It is very unclear to me given the dnssec-keygen man page how to set the date so that I could get 90 days or even more per key. The descriptions I found about constructing rolling keys was even more cryptic to me. For example, how do you use these switches: -A date/offset Sets the date on which the key is to be activated. After that date, the key will be included in the zone and used to sign it. If not set, and if the -G option has not been used, the default is "now". -D date/offset Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.) -I date/offset Sets the date on which the key is to be retired. After that date, the key will still be included in the zone, but it will not be used to sign it. -P date/offset Sets the date on which a key is to be published to the zone. After that date, the key will be included in the zone but will not be used to sign it. If not set, and if the -G option has not been used, the default is "now". -R date/offset Sets the date on which the key is to be revoked. After that date, the key will be flagged as revoked. It will be included in the zone and will be used to sign it. Is it as simple as setting the -I and -R switches to something like +90d At least if I can get the DNS server to update via a cron job even if the 1st item will always have to be done manually that would be help. Thanks for your help. -- Paul (ganci(a)nurdog.com) Cell: (303)257-5208

3 5

question about upgrade qemu and libvirtd
by rong zhao 15 Feb '19

15 Feb '19

Hi Team, I am not sure if I should put my question here, I have googled long time, no explicit information found. Background: We need to support KVM encryption and decided to use LUKS. Refer to:https://libvirt.org/formatsecret.html#VolumeUsageType libvirtd and KVM should be able to support LUKS format disk directly. Unfortunately, seems that we need to use libvirt2.2+ and qemu 2.6+, because our current qemu-kvm version does not support luks format: And our hypervisor's OS is CentOS 7.2 with libvirt 2.0 and qemu-kvm 1.5.3 Question: Is there any safe way to upgrade to libvirt 2.2 and qemu 2.6? Safe way means: do not need to reboot hyper or VM, do not impact VM types support . Any suggestion is welcome. Thanks.

3 2

Centos bug 15570 - Not just a VBOX bug, can also reproduce on direct hardware install
by Steve Gomez 14 Feb '19

14 Feb '19

Ran into this rather frustrating bug when working with VBOX on a Windows 10 host. It should come as no surprise that I would hit this bug when installing CentOS, and also with RHEL 7 Server with GUI (since you get the same kernel). Based on information from your bug list, I was fortunately able to workaround the trouble with: wget https://people.centos.org/toracat/kernel/7/plus/bug15570new/kernel-3.10.0-9… wget https://people.centos.org/toracat/kernel/7/plus/bug15570new/kernel-devel-3.… yum -y localinstall kernel-3.10.0-957.1.3.bug15570.plus.el7.x86_64.rpm yum -y localinstall kernel-devel-3.10.0-957.1.3.bug15570.plus.el7.x86_64.rpm However, the bug lists seem to refer only to issues with VirtualBox. I have experienced the same symptom when installing on a "hardware" system (no hypervisor). The same commands above also provide a workaround here, but thought the flag should be raised for CentOS and RHEL that it doesn't seem to be just VBOX. Perhaps the priority of this issue should be raised further up the pole since I can't imagine it being a good experience for someone who doesn't know how to dig through a problem like this. The average bear would install something else and move on. In any case, thank you for the patch information. Look forward to a "real" fix soon. Other than that I'm really liking CentOS 7. SG

2 2

possible issue in Anaconda WRT processing %posttrans scriptlets?
by Brian Reichert 14 Feb '19

14 Feb '19

This sounds really weird, bear with me. I've put together a custom install CD derived from CentOS-7-x86_64-Minimal-1810.iso. I've added my RPMs in the mix, and have my dependencies lined up. The installation of the RPMs fail, from packaging.log: ... 15:42:35,741 INFO packaging: libwbclient-4.8.3-4.el7.x86_64 (320/432) 15:42:35,741 INFO packaging: samba-client-libs-4.8.3-4.el7.x86_64 (321/432) 15:42:35,742 INFO packaging: samba-libs-4.8.3-4.el7.x86_64 (322/432) 15:42:35,743 INFO packaging: samba-common-tools-4.8.3-4.el7.x86_64 (323/432) 15:42:35,743 INFO packaging: uid-admin-1-1.noarch (324/432) 15:42:35,743 INFO packaging: creating admin smbpasswd ... 15:42:35,743 INFO packaging: pdbedit: error while loading shared libraries: libwbclient.so.0: cannot open shared object file: No such file or directory 15:42:35,745 INFO packaging: error: %pre(uid-admin-1-1.noarch) scriptlet failed, exit status 127 15:42:35,745 INFO packaging: ==== end rpm scriptlet logs ==== To rewind this: - in my uid-admin RPM's %pre scriptlet, I invoke /usr/bin/pdbedit. - /usr/bin/pdbedit is provided by samba-common-tools. - samba-common-tools requires libwbclient. and we can see they have all gotten installed in the correct order. When I get to an alternate console, I did a search under /mnt/sysimage for libwbclient.so.0, and all I can find is this: /mnt/sysimage/usr/lib64/samba/wbclient/libwbclient.so.0 I can see that libwbclient's %posttrans scriptlet should have installed this shared library: # It has to be posttrans here to make sure all files of a previous version # without alternatives support are removed /usr/sbin/update-alternatives \ --install \ /usr/lib64/libwbclient.so.0.14 \ libwbclient.so.0.14-64 \ /usr/lib64/samba/wbclient/libwbclient.so.0.14 \ 10 /sbin/ldconfig Yet clearly, that didn't happen, and there's no dialog to the contrary. I was able to extract that scriptlet, and run it in the chrooted environment successfully. Is there something about anaconda-yum under CentOS 7 that does something counterintuitive WRT %posttrans scriptlets? -- Brian Reichert <reichert(a)numachi.com> BSD admin/developer at large

1 0

dont run cron.d- when cron.daily-scripts are running
by Leon Fauster 14 Feb '19

14 Feb '19

EL6 context: cronie-1.4.4-16.el6_8.2.x86_64 cronie-anacron-1.4.4-16.el6_8.2.x86_64 crontabs-1.10-33.el6.noarch I have some cron.d entries that execute scripts in minute intervals and I'm wondering how could an "official" way look like, to have a condition to not run cron.d entries when cron.daily scripts are running. Sure, I can hack something around file timestamps or so but that feels not so streamlined ... I'd really appreciate any ideas ... -- LF

3 4

Support for Argon2 for password hashing
by Robert Moskowitz 13 Feb '19

13 Feb '19

Is there any information on adding support for Argon2? I have been working on my new mailserver and this came up in moving from the default MD5 hash to more 'modern' hashes like SHA256 and SHA512. Then I was pointed to the work behind Argon2, and I see that it is moving through the IRTF cfrg workgroup: draft-irtf-cfrg-argon2-04.txt It is a 'purpose built' hash for passwords, with recommendations that new implementations use it. Of course can't use it if crypt does not support it.... thanks

3 3

freeIPA from CR repo - conflicts
by lejeczek 13 Feb '19

13 Feb '19

hi guys do you see the same by any chance? .... --> Processing Dependency: ipa-server-common = 4.6.4-10.el7.centos.2 for package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch --> Processing Dependency: ipa-common = 4.6.4-10.el7.centos.2 for package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch --> Finished Dependency Resolution Error: Package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-server-common = 4.6.4-10.el7.centos.2 Installed: ipa-server-common-4.6.4-10.el7.centos.noarch (@cr) ipa-server-common = 4.6.4-10.el7.centos Error: Package: ipa-server-4.6.4-10.el7.centos.x86_64 (@cr) Requires: python2-ipaserver = 4.6.4-10.el7.centos Removing: python2-ipaserver-4.6.4-10.el7.centos.noarch (@cr) python2-ipaserver = 4.6.4-10.el7.centos Updated By: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) python2-ipaserver = 4.6.4-10.el7.centos.2 Error: Package: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos Error: Package: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-client-common = 4.6.4-10.el7.centos.2 Installed: ipa-client-common-4.6.4-10.el7.centos.noarch (@cr) ipa-client-common = 4.6.4-10.el7.centos Error: Package: python2-ipalib-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos Error: Package: ipa-client-4.6.4-10.el7.centos.x86_64 (@cr) Requires: python2-ipaclient = 4.6.4-10.el7.centos Removing: python2-ipaclient-4.6.4-10.el7.centos.noarch (@cr) python2-ipaclient = 4.6.4-10.el7.centos Updated By: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) python2-ipaclient = 4.6.4-10.el7.centos.2 Error: Package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest

1 0

Cups Ink Levels
by Mark LaPierre 13 Feb '19

13 Feb '19

Hey all, In this week's Open Source Highlights I read: "Check ink level: If you have an Epson, Canon, HP, or Sony printer, you can see its ink level with a simple application. Look for the "ink" package in your distribution repositories." I checked my package manager but I didn't find any "ink" package. Does such a package exist for Centos? Is so, what it the package called? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 1

persistent generic device for tape changer
by Helmut Drodofsky 12 Feb '19

12 Feb '19

Hello, mtx and therefor amanda use generic device /dev/sg<x> for tape changer. These devices change on reboot. How to make them persistent? /dev/sch0 and /dev/sch1 seem to be persistent. /dev/tape/by-id/ shows links from WWID to generic device An UDEV rule could help? I have not found any example. -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

3 5

bare-metal backup before update--options?
by Fred Smith 12 Feb '19

12 Feb '19

Hi all! I'm a "nervous nellie", I have not yet updated my 7.5 desktop to 7.6 because (1) it has an Nvidia card, and (2) I've heard of problems upgrading on top of software RAID (using RAID1 with 2 drives). I need to upgrade it to stay secure, and I want to do a bare-metal backup first (so I can put it all back as it now is, in case it explodes in my face), so I'm trying to figure out the safest way to do that. Here are the choices as I see them, I'd appreciate comments/thoughts: 1. boot from live DVD and manually reassemble the RAID array (how would I do that?) 2. degrade the array (with appropriate commands) so that it is running on just one drive, then boot a live DVD and use dd to back up that drive. 3. Other choices you can suggest? then after successfully getting a bare-metal backup, reboot it with the full RAID array and run the update. Thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------

3 4

time --verbose not working
by Robert Moskowitz 11 Feb '19

11 Feb '19

I can't seem to get the verbose mode of time working. I am trying to compare the compute cost of sha256-crypt to sha512-crypt: time doveadm pw -s sha256-crypt -p secret real 0m0.128s user 0m0.081s sys 0m0.040s time doveadm pw -s sha512-crypt -p secret real 0m0.162s user 0m0.105s sys 0m0.047s But all attempts to add --verbose fail: time --verbose doveadm pw -s sha512-crypt -p secret -bash: --verbose: command not found Googling gives different recommendations, none work for me.

3 4

Forums down?
by J Martin Rushton 11 Feb '19

11 Feb '19

All day I've been getting "Sorry but you cannot use search at this time. The server has high load. Please try again later." from https://www.centos.org/forums/search.php?search_id=unreadposts Is there a problem? -- J Martin Rushton MBCS

2 2

CentOS-announce Digest, Vol 168, Issue 3
by centos-announce-request＠centos.org 10 Feb '19

10 Feb '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0229 Important CentOS 7 ghostscript Security Update (Johnny Hughes) 2. CESA-2019:0231 Important CentOS 7 spice Security Update (Johnny Hughes) 3. CESA-2019:0270 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 9 Feb 2019 14:46:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0229 Important CentOS 7 ghostscript Security Update Message-ID: <20190209144658.GA24698(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0229 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0229 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a14798c9c960bb3c11ccb5977fc375b18f76f7b71980481ce6236d105184774a ghostscript-9.07-31.el7_6.9.i686.rpm 3362e81af80b52c0b1c994894366639cf47140c92c1ca66068b835321c86bd7b ghostscript-9.07-31.el7_6.9.x86_64.rpm fde0ef7fbc8d62436c35eb4be841d91a2b72b8736bda431e53b5ff53a0e051e8 ghostscript-cups-9.07-31.el7_6.9.x86_64.rpm aba79f9966ec6e298c87c2e0c11984ec5f6ab5541e960b1c5d183330f915a45e ghostscript-devel-9.07-31.el7_6.9.i686.rpm c910264022ef30db7ce8a197aa99a934c163ef22a47f379463462992436624a8 ghostscript-devel-9.07-31.el7_6.9.x86_64.rpm ece502d88db4a6450f4915d8e1fbb7685371fdaab5d3ad99b55ab3b81354de49 ghostscript-doc-9.07-31.el7_6.9.noarch.rpm 94520fdc4af704dd62edd1243395155125023bda580100c12392da91fd5a23ae ghostscript-gtk-9.07-31.el7_6.9.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Sat, 9 Feb 2019 14:47:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0231 Important CentOS 7 spice Security Update Message-ID: <20190209144711.GA24762(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0231 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0231 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c6979682c6dc1a8170f1ee412fb7c0e48b5172bb6bb646d33ac5cb8d04e7e277 spice-server-0.14.0-6.el7_6.1.x86_64.rpm 302138f4831d8fc56db83fe48712328d7dc8fb9440bfd0014df4ec84dfd7ed23 spice-server-devel-0.14.0-6.el7_6.1.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Sat, 9 Feb 2019 14:47:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0270 Important CentOS 7 thunderbird Security Update Message-ID: <20190209144743.GA24839(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0270 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0270 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c456b3359a02d7a2f7168682a28e03fa0a34907073fdfe07ee0a620d5a506cc5 thunderbird-60.5.0-1.el7.centos.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 168, Issue 3 ***********************************************

1 0

Latest kernel crashes X and gnome
by Rob Kampen 10 Feb '19

10 Feb '19

Hi, Anyone else having problems with kernel 3.10.0-957.5.1.el7.x86_64? After my yum update today a reboot hung. A quick look at the Xorg.0.log shows two of my graphics cards appear to be working okay but the third one (I have two nvidia cards with a monitor each and then use the inbuilt intel one for the third monitor) gives: <cut> [ 14.246] (II) Loading sub module "fb" [ 14.246] (II) LoadModule: "fb" [ 14.247] (II) Loading /usr/lib64/xorg/modules/libfb.so [ 14.247] (II) Module fb: vendor="X.Org Foundation" [ 14.247] compiled for 1.20.1, module version = 1.0.0 [ 14.247] ABI class: X.Org ANSI C Emulation, version 0.4 [ 14.247] (II) UnloadModule: "vesa" [ 14.247] (II) Unloading vesa [ 14.247] (EE) modeset(G0): drmSetMaster failed: Invalid argument [ 14.247] (EE) Fatal server error: [ 14.247] (EE) AddScreen/ScreenInit failed for gpu driver 0 -1 [ 14.247] (EE) [ 14.247] (EE) Please consult the The X.Org Foundation support at http://wiki.x.org for help. [ 14.247] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information. [ 14.247] (EE) [ 14.257] (EE) Server terminated with error (1). Closing log file. </end> So a reboot to kernel 3.10.0-957.1.3.el7.x86_64 and all is well. I note that the update also updated : Updated xorg-x11-drv-ati-18.0.1-1.el7.x86_64 @base Update 18.1.0-1.el7_6.x86_64 @updates Updated xorg-x11-server-Xorg-1.20.1-5.1.el7.x86_64 @updates Update 1.20.1-5.2.el7_6.x86_64 @updates Updated xorg-x11-server-common-1.20.1-5.1.el7.x86_64 @updates Update 1.20.1-5.2.el7_6.x86_64 @updates Before I start trying to solve this by myself, just wanted to see if anyone else has had issues. TIA Rob

1 1

firefox-60.5.0-2.el7.centos.x86_64 and Netflix
by Bernard Lheureux 09 Feb '19

09 Feb '19

Hi all, Since the last upgrade to firefox-60.5.0-2.el7.centos.x86_64 on my CentOS 7, it is no longer possible to watch Netflix with my Firefox, it always says that "Firefox is installing components needed to play the audio or video on this page. Please try again later." But nothing happens and Netflix is no longer readable with Firefox... I tried downgrading to firefox-60.4.0-1.el7.centos.x86_64 and al is now correct with Netflix... Anyone had experienced the same behavior ? -- (°- Bernard Lheureux //\ Linux System Administrator v_/_ MailTo:bernard@lheureux.be

4 4

CentOS 7, rsyslog and redis
by Pete Biggs 09 Feb '19

09 Feb '19

TL;DR: Is there a sensible way to get rsyslog to talk to redis on CentOS 7. The official way is to use the omhiredis plugin, but that doesn't seem to exist in the CentOS 7 repositories? (It's how I do it on my Fedora box.) The long version: I'm trying to rationalise logging and am using an ELK stack. When I've done this in the past it has suffered badly from congestion at peak times with messages being dropped and various issues on the clients. The sensible thing seemed to be putting redis between the clients and ELK - that works in my test setup from a Fedora box. My problem though is ingesting the logs from my CentOS servers. By far the easiest thing is to get rsyslog to send things directly to redis, but that needs the omhiredis plugin. The second choice is to use filebeat to scan the log files - but if I want to have things like facility and severity logged, I have to use custom rsyslog templates and it's a pain trying to get filebeat to parse them (and the filebeat redis output seems a bit flaky as well). I can see that syslog-ng has redis support, but I would prefer to keep rsyslog since that is the default. So, what do people do to ship their logs to ELK (or, specifically, logstash). Is there some magic, neat solution? Or do I keep just hammering away at filebeat -> redis -> logstash until I get something that's reliable? Or do I go down the syslog-ng route? P.

1 0

CentOS-announce Digest, Vol 168, Issue 2
by centos-announce-request＠centos.org 09 Feb '19

09 Feb '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0232 Important CentOS 6 spice-server Security Update (Johnny Hughes) 2. CESA-2019:0269 Important CentOS 6 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 8 Feb 2019 14:39:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0232 Important CentOS 6 spice-server Security Update Message-ID: <20190208143905.GA63305(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0232 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0232 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 14d17995139944b6a2f31fe65c77cbee19bac2a4dd472fdc515b0658eaf33bdc spice-server-0.12.4-16.el6_10.3.x86_64.rpm 86bfc7eb53ddbe24d421f84dc102bf7a73d1f5c26e7a294a9085323914ac0791 spice-server-devel-0.12.4-16.el6_10.3.x86_64.rpm Source: 7cca30eb830211771a6a8ddae5f78398cf07934f00d4e1e4c81d892d96641008 spice-server-0.12.4-16.el6_10.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Fri, 8 Feb 2019 14:40:51 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0269 Important CentOS 6 thunderbird Security Update Message-ID: <20190208144051.GA63518(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0269 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0269 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 59270993b2b4eef241e0f3768836517725647ba858fb265d3af6d86e39681022 thunderbird-60.5.0-1.el6.centos.i686.rpm x86_64: 0caae2e4aee38ac3452b2085159f3df856c49dad7dec212ef236298a20ebba95 thunderbird-60.5.0-1.el6.centos.x86_64.rpm Source: ae552e7088c6e71e7f07f13c9f5a687b0a26cd0d7128ad28552fa76e8c9b93ad thunderbird-60.5.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 168, Issue 2 ***********************************************

1 0

Did I install too much for clamav?
by Robert Moskowitz 08 Feb '19

08 Feb '19

I just checked the status of amavisd: # systemctl -l status amavisd ● amavisd.service - Amavisd-new is an interface between MTA and content checkers. Loaded: loaded (/usr/lib/systemd/system/amavisd.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2019-02-07 08:16:59 EST; 7h ago Docs: http://www.ijs.si/software/amavisd/#doc Process: 5715 ExecStart=/usr/sbin/amavisd -c /etc/amavisd/amavisd.conf (code=exited, status=0/SUCCESS) Main PID: 6327 (/usr/sbin/amavi) CGroup: /system.slice/amavisd.service ├─6327 /usr/sbin/amavisd (master) ├─6336 /usr/sbin/amavisd (virgin child) └─6337 /usr/sbin/amavisd (virgin child) Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .lha at /usr/bin/7z Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .iso at /usr/bin/7z Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .exe at /usr/bin/unarj Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Using primary internal av scanner code for ClamAV-clamd Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Deleting db files __db.002,snmp.db,nanny.db,__db.001,__db.003 in /var/spool/amavisd/db Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Creating db in /var/spool/amavisd/db/; BerkeleyDB 0.51, libdb 5.3 Feb 07 08:17:00 klovia.htt-consult.com amavis[6327]: initializing Mail::SpamAssassin (0) Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: SpamControl: init_pre_fork on SpamAssassin done Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: extra modules loaded after daemonizing/chrooting: /usr/lib/perl5/vendor_perl/auto/Net/SSLeay/autosplit.ix, /usr/lib/perl5/vendor_perl/auto/Net/SSLeay/randomize.al, /usr/share/perl5/Net/libnet.cfg, IO/Socket/SSL.pm, Mail/SpamAssassin/Plugin/FreeMail.pm, Mail/SpamAssassin/Plugin/SpamCop.pm, Net/Cmd.pm, Net/Config.pm, Net/SMTP.pm, Net/SSLeay.pm Primary and secondary AV scanner? Is this right? I installed: # grep clam /var/log/yum.log* /var/log/yum.log:Feb 06 08:40:06 Installed: clamav-filesystem-0.101.1-1.el7.noarch /var/log/yum.log:Feb 06 08:40:29 Installed: clamav-lib-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:40:30 Installed: clamav-update-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:40:59 Installed: clamav-devel-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:41:01 Installed: clamav-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:46:16 Installed: clamd-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:46:17 Installed: clamav-server-systemd-0.101.1-1.el7.armv7hl thanks

2 2

CentOS 7.6 update with gettimeofday()
by david allan finch 08 Feb '19

08 Feb '19

In my app compiled on another linux I am getting Assertion 'clock_gettime(clock_id, &ts) == 0' failed at src/shared/time-util.c:34, function now(). Aborting. when calling gettimeofday() on an update CentOS (did not fail in 7.5). Is it possible that the update has changed the size of the types in the timeval struct and causing the crash? Or has there be some for of bug fix etc? Regards

2 1

netmask on aliases overriden by netmask on interface
by James B. Byrne 08 Feb '19

08 Feb '19

CentOS-6.10 We have a host with the following ifcfg file contents: BOOTPROTO=none BROADCAST="" DEFROUTE=yes DEVICE=eth1 . . . GATEWAY=X.Y.Z.234 IPADDR=A.B.C.2 IPV4_FAILURE_FATAL=yes NAME="LAN Link - eth1" NETMASK="255.255.255.128" NETWORK="A.B.C.0" NM_CONTROLLED=no ONBOOT=yes PREFIX=25 TYPE=Ethernet USERCTL=no And an aliased ifcfg containing this: BOOTPROTO="none" BROADCAST="192.168.8.255" DEVICE="eth1:192008001" IPADDR="192.168.8.1" IPV6INIT="no" NETMASK="255.255.255.0" NETWORK="192.168.8.0" ONPARENT="yes" However, ifconfig shows this: # ifconfig eth1:192008001 eth1:192008001 Link encap:Ethernet HWaddr 00:25:90:61:74:C1 inet addr:192.168.8.1 Bcast:192.168.8.255 Mask:255.255.255.128 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Interrupt:17 Memory:feae0000-feb00000 Which shows that the network mask is determined by the interface mask and is not overridden by the alias definition. Is this expected behaviour? Does this mean that a particular physical interface cannot belong to more than one network, or at least not to networks having differing cidr masks? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

C7, enable an abrt for a daemon
by mark 08 Feb '19

08 Feb '19

I've mentioned here before that gssproxy is crashing all over the place with a SEGV. However, there's no /var/spool/abrt/... when it does. How do I enable the daemon to give me an abrt with information? I'm just not sure of what the right word is for systemd, so online searching isn't always useful. Thanks in advance. mark

1 0

systemd
by Jerry Geis 08 Feb '19

08 Feb '19

Hi All - I have a systemd service file to start my application. Part of my service file is: [Service] Type=forking ExecStart=/path to start ExecStop=/path to stop RemainAfterExit=yes This works fine "normally". However - when I do a "yum update; and reboot" my script detects a kernel change and now does a number of "recompiling" steps for drivers and such before starting my application. Somewhere along the way that just stops. I'm half way into recompiling those drivers and it just stops. Is there something else I need in the service file ? Thanks Jerry

3 2

CentOS 6 and 389 Directory Server
by Eugene Poole 07 Feb '19

07 Feb '19

I'm not sure it this is the correct location to ask these questions, but ... In the past when I worked for a living the place where I worked had thousands of RHEL Linux servers on various hardware, but the access was controlled by Windows Active Directory and a third party piece of software that was the middle-man between the 2. Now that I no longer work I'm trying to build a CentOS Linux environment where the access is controlled by 389-Directory Server. But I have no practical experience with 389-Directory Server (Question 1) so I'm looking for a tutorial or 'How To' to put information into 389-DS from a machine that is currently running? (Question 2) Can I export the 389-DS database to a LDIF file, migrate my machine from CentOS 6 to CentOS 7 by doing a fresh CentOS 7 install. Install 389-DS and import the just created LDIF file? I want to use 389-DS (or OpenLDAP) because as my environment grows defining everything locally is becoming hard to be exact. Any comments will be helpful TIA -- Eugene Poole Woodstock, Georgia

2 1

Pb with bounding
by Pierre Malard 07 Feb '19

07 Feb '19

Hi, We have a Dell server with 4 Ethernet interface. I would to aggregate them in a bond. Everything work but the default gateway doesn’t work on the « bond0 » interface and I have no links. My configuration: - CentOS 7: :/etc/sysconfig/network-scripts# uname -a Linux nas-mtd2 3.10.0-957.5.1.el7.x86_64 #1 SMP Fri Feb 1 14:54:57 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux - NetworkManager disabled: :/etc/sysconfig/network-scripts# systemctl list-unit-files | grep NetworkManager NetworkManager-dispatcher.service disabled NetworkManager-wait-online.service disabled NetworkManager.service disabled - ifcfg-em1 to em4 (they are identical): :/etc/sysconfig/network-scripts# cat ifcfg-em2 NAME=bond0-slave[1 to 4] DEVICE=em[1 to 4] TYPE=Ethernet BOOTPROTO=none ONBOOT=yes MASTER=bond0 SLAVE=yes NM_CONTROLLED=no - the bond0 declaration: :/etc/sysconfig/network-scripts# cat ifcfg-bond0 DEVICE=bond0 TYPE=Ethernet BONDING_MASTER=yes BOOTPROTO=none ONBOOT=yes NM_CONTROLLED=no # IP IPADDR=172.16.1.128 PREFIX=16 GATEWAY=172.16.0.254 # Bonding BONDING_OPTS="mode=802.3ad ad_select=stable use_carrier=1 miimon=100 arp_ip_target=172.16.1.128 updelay=100 lacp_rate=fast" USERCTL=no After a « systemctl restart network »: :/etc/sysconfig/network-scripts# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:0e brd ff:ff:ff:ff:ff:ff 3: em2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 4: em3: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 5: em4: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 6: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet 172.16.1.128/16 brd 172.16.255.255 scope global bond0 valid_lft forever preferred_lft forever And the route command: :/etc/sysconfig/network-scripts# ip r default via 172.16.0.254 dev bond0 169.254.0.0/16 dev bond0 scope link metric 1006 169.254.0.0/16 dev bond0.10 scope link metric 1008 172.16.0.0/16 dev bond0 proto kernel scope link src 172.16.1.128 but their is no network connection on « bond0 »! The only way I found to have a network active connection is keeping my first interface outside the bond and having the default route on this one! In this case I have a specific IP to it and a bond one on bound. As I must have also a VLAN connection on the bound, I have create a « ifcfg-bond0.10 » file: :/etc/sysconfig/network-scripts# cat ifcfg-bond0.10 NAME=bond0.10 DEVICE=bond0.10 #TYPE="Ethernet" VLAN=yes NM_CONTROLLED=no ONPARENT=yes DEFROUTE="no" # IP IPADDR=XXX.XXX.XXX.142 NETMASK=255.255.255.0 NETWORK=XXX.XXX.XXX.0 BROADCAST=XXX.XXX.XXX.255 PREFIX=24 GATEWAY=1XXX.XXX.XXX.126 With that and the first Ethernet interface on a specific address I have: :/etc/sysconfig/network-scripts# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether d0:94:66:65:32:0e brd ff:ff:ff:ff:ff:ff inet 172.16.1.86/16 brd 172.16.255.255 scope global em1 valid_lft forever preferred_lft forever 3: em2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 4: em3: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 5: em4: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 6: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet 172.16.1.128/16 brd 172.16.255.255 scope global bond0 valid_lft forever preferred_lft forever 8: bond0.10@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet XXX.XXX.XXX.142/24 brd XXX.XXX.XXX.255 scope global bond0.10 valid_lft forever preferred_lft forever :/etc/sysconfig/network-scripts# ip r default via 172.16.0.254 dev em1 169.254.0.0/16 dev em1 scope link metric 1002 169.254.0.0/16 dev bond0 scope link metric 1006 169.254.0.0/16 dev bond0.10 scope link metric 1008 172.16.0.0/16 dev em1 proto kernel scope link src 172.16.1.86 172.16.0.0/16 dev bond0 proto kernel scope link src 172.16.1.128 XXX.XXX.XXX.0/24 dev bond0.10 proto kernel scope link src XXX.XXX.XXX.142 And everything is working. But… I am not satisfy. Is it normal? Is it a way to have all the Ethernet link on a bond? Your help is needed :-) Best wishes -- Pierre Malard « Si l'on veut croire en l'humanité, il faut voir et comprendre l'inhumanité » |\ _,,,---,,_ /,`.-'`' -. ;-;;,_ |,4- ) )-,_. ,\ ( `'-' '---''(_/--' `-'\_) πr perl -e '$_=q#: 3|\ 5_,3-3,2_: 3/,`.'"'"'`'"'"' 5-. ;-;;,_: |,A- ) )-,_. ,\ ( `'"'"'-'"'"': '"'"'-3'"'"'2(_/--'"'"' `-'"'"'\_): 24πr::#;y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print' - --> Ce message n’engage que son auteur <--

2 2

reinstall
by Jerry Geis 05 Feb '19

05 Feb '19

I have a C7 7.6.1810 install that I wish to "reinstall". when I run "yum reinstall \* " I get a long list of items saying will be updated or will be installed but then nothing happens - nothing is re-downloaded etc... How do I get the system to actual download all current packages and re-install them ? Thanks, Jerry

1 0

Problem Webinstall Centos 7 on Acer S2000 32 Bit.
by Ger van Dijck 05 Feb '19

05 Feb '19

Hi Centos World , I am trying to install Centos 7 (i686) on an Acer 2000 PC and I get following message(s) : [0117110] ACPI : SCI (ACPI GSIG) not registered . [26.532360] systemd [1] : caught <ILL> , dumped core as pid 76. [26.532956] systemd [1] : Freezing execution. My question is : What is wrong and how can I solve this problem ? Maybe a fresh install ? Regards , Ger van Dijck . -- Using Opera's mail client: http://www.opera.com/mail/

1 1

Back to c7 and firewalld
by mark 05 Feb '19

05 Feb '19

If I've missed someone's response, apologies. As I said, my converted rules seem fine, and I can run the script that issues a bunch of direct rules for the built-in FORWARD rule... but when I try firewall-cmd --reload, it tells me error, that FORWARD is a built-in. Now, today, what I've been looking at is to run iptables-save, and what I see is this (in part): -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -j FORWARD_direct -A FORWARD -j FORWARD_IN_ZONES_SOURCE -A FORWARD -j FORWARD_IN_ZONES -A FORWARD -j FORWARD_OUT_ZONES_SOURCE -A FORWARD -j FORWARD_OUT_ZONES -A FORWARD -m conntrack --ctstate INVALID -j DROP -A FORWARD -j REJECT --reject-with icmp-host-prohibited Does this mean that, instead of the format of the entry of the rule being firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD <actual rule) that it should, instead, be firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD_direct <actual rule> ? And if that's what I need to do, that's fine, but I have found *zero* documentation about that. Everything I have found about adding direct rules to a built-in chain don't mention it. Is this so new, it's not documented? mark

1 0

looking for a tool to convert my running system into a installation dvd
by Ralf Prengel 05 Feb '19

05 Feb '19

Hallo, I m looking for a tool to convert my running system into a installation dvd. Thanks for hint. I found some tools working more or less for debian. Thank for hints Ralf Von meinem iPad gesendet

4 3

C7 and firewalld, ongoing
by mark 04 Feb '19

04 Feb '19

I've got my direct rules, converted from a C6 iptables-save. I load them - they're to add to the built-in FORWARD chain. They all seem to load... but then, when I try to --reload, I get Error: BUILTIN_CHAIN: chain 'FORWARD' is built-in chain and firewall-cmd --direct --get-all-rules returns nothing. A sample command in my script is firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 1 -m state --state RELATED,ESTABLISHED -j ACCEPT So, what am I doing wrong: mark

1 0

Bug in libreoffice or cups?
by mark 04 Feb '19

04 Feb '19

C7 My manager's manager sent out a ppt. Nothing fancy, no animation. 1. Page down doesn't get me to the next page. 2. Slide show decides that on my left monitor, it should fill the entire monitor- no options, with the slide, and the next slide, and that my right-hand monitor shuold be *COMPLETELY* filled with the slide. 3. Hitting <esc> gets rid of the one on the right... and anything then crashes all instances of libreoffice. 4. I just tried to print it out... and suddenly, printer options, or the print box itself, no longer offers me the option to fit to paper, so landscape, and it goes off the page. Esp. that last one - bug or "feature"? mark

1 1

PCMCIA on Centos 7
by Kevin K 02 Feb '19

02 Feb '19

Anyone ever look into what would be required to support 16 bit PCMCIA cards on 7? There are still 64 bit computers out there with at least 1 PCMCIA slot. Thanks, Kevin

1 0

OVAL content
by Gaurav Kumar 01 Feb '19

01 Feb '19

Hi all, Much like Ubuntu and Debian teams have OVAL content published for detecting vulnerabilities, are there plans of publishing such content? e.g. https://people.canonical.com/~ubuntu-security/oval/ On a related note, has anybody looked into using RHEL oval content on CentOS?

1 0

C7, firewalld and rich rules
by mark 01 Feb '19

01 Feb '19

Hi, again, folks, I'm trying to convert a number of iptables rules to firewalld rich rules. I need to do this, because this is, in fact, a firewall, to protect access to servers with sensitive data. It will limit access to the servers behind it to a specific network, and nobody else, and allow only certain services through. What I've been trying to find is a script/program that converts the output of iptables-save to something I can feed to firewall-cmd. Anyone have a link to such? I admit this is annoying. Why is it, when some New Kewl thing is introduced, it *always* expects you to start anew, rather than giving you a tool to convert what you had. I ran into this 15 years ago, trying to put an existing website into bricolage (early CMS), and here I am, trying to do this. Anyway, any links would be appreciated. mark

5 11

Centos 7 and backup solution
by Alessandro Baggi 01 Feb '19

01 Feb '19

Hey there, what type of backup solution do you use on C7? Thanks in advance

17 32

centos dfcp send hostname to microsoft dhcp/dns
by Ralf Prengel 31 Jan '19

31 Jan '19

Hallo, I try to configure my dhcp-client to send the hostname to a microsoft dns/dhcp server. It doesn t work. Nothing happens. A debian system works fine so it seems that the microsoft-side isn t the problem this time. I found some hints but nothing works. Thansk for hints. Ralf

4 9

EPEL repo problem
by SternData 31 Jan '19

31 Jan '19

This keeps logging: Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64 error was 14: HTTPS Error 503 - Service Unavailable I've removed the epel-release package, done a "yum clean all", then reinstalled it, but still get the same error. -- -- Steve

4 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss